Skip to content

Commit 78fdaa1

Browse files
Finish
1 parent fb18cb3 commit 78fdaa1

15 files changed

+229
-2
lines changed

fileUploadScript.php

+2-2
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ function generate_string($input, $strength = 16) {
4242

4343
$errors = []; // Store errors here
4444

45-
$fileExtensionsAllowed = ['jpeg', 'gif','jpg','png', 'zip', 'exe', 'json', 'js', 'py', 'pyc', 'cpp', 'asm', 'docx']; // These will be the only file extensions allowed
45+
$fileExtensionsAllowed = ['txt', 'html', 'jpeg', 'gif','jpg','png', 'zip', 'exe', 'json', 'js', 'py', 'pyc', 'cpp', 'asm', 'docx']; // These will be the only file extensions allowed
4646

4747
$fileName = $_FILES['the_file']['name'];
4848
$fileSize = $_FILES['the_file']['size'];
@@ -69,7 +69,7 @@ function generate_string($input, $strength = 16) {
6969
if ($didUpload) {
7070
$pathTo = 'pages/' . $rand . $fileName . ".php";
7171
echo "<p>The file " . basename($fileName) . " has been uploaded!</p><br>Check it out <a href=\"$pathTo\">here</a>";
72-
$content = "<!DOCTYPE HTML5>\n<html><?php\n" . "$" . "config" . " = fopen(\"config.json\", \"r\") or die(\"Unable to open file!\");\n" . "$" . "jsonobj" . " = fread(" . "$" . "config" . ",filesize(\"config.json\"));\nfclose(" . "$" . "config" . ");\n" . "$" . "obj" . " = json_decode(" . "$" . "jsonobj" . ");\n" . "$" . "brandName" . " = " . "$" . "obj" . "->" . "$" . "brand" . ";\n?>\n<head>\n <meta charset=\"utf-8\">\n <meta max-age='1'/>\n <meta name=\"viewport\" content=\"width=device-width\">\n <title>" . basename($fileName) . " | <?php echo " . "$" . "brandName; ?> File Storage</title>\n <link href=\"https://bouncecss.bookie0.repl.co/bounce.css\" rel=\"stylesheet\" type=\"text/css\" />\n</head>\n<body>\n<a href=\"/$downloadPath\">$fileName</a>\n</body>\n</html>";
72+
$content = "<!DOCTYPE HTML5>\n<html><?php\n" . "$" . "config" . " = fopen(\"config.json\", \"r\") or die(\"Unable to open file!\");\n" . "$" . "jsonobj" . " = fread(" . "$" . "config" . ",filesize(\"config.json\"));\nfclose(" . "$" . "config" . ");\n" . "$" . "obj" . " = json_decode(" . "$" . "jsonobj" . ");\n" . "$" . "brandName" . " = " . "$" . "obj" . "->" . "$" . "brand" . ";\n?>\n<head>\n <meta charset=\"utf-8\">\n <meta max-age='1'/>\n <meta name=\"viewport\" content=\"width=device-width\">\n <title>" . basename($fileName) . " | <?php echo " . "$" . "brandName; ?> File Storage</title>\n<script src=\"https://publisher.linkvertise.com/cdn/linkvertise.js\"></script><script>linkvertise(585398, {whitelist: [], blacklist: [\"\"]});</script>\n <link href=\"https://bouncecss.bookie0.repl.co/bounce.css\" rel=\"stylesheet\" type=\"text/css\" />\n</head>\n<body>\n<a href=\"/$downloadPath\">$fileName</a>\n</body>\n</html>";
7373
$fh = fopen($pathTo, 'w');
7474
fwrite($fh, $content);
7575
fclose($fh);

pages/3dv40ya4.png.php

+19
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
<!DOCTYPE HTML5>
2+
<html><?php
3+
$config = fopen("config.json", "r") or die("Unable to open file!");
4+
$jsonobj = fread($config,filesize("config.json"));
5+
fclose($config);
6+
$obj = json_decode($jsonobj);
7+
$brandName = $obj->$brand;
8+
?>
9+
<head>
10+
<meta charset="utf-8">
11+
<meta max-age='1'/>
12+
<meta name="viewport" content="width=device-width">
13+
<title>4.png | <?php echo $brandName; ?> File Storage</title>
14+
<link href="https://bouncecss.bookie0.repl.co/bounce.css" rel="stylesheet" type="text/css" />
15+
</head>
16+
<body>
17+
<a href="/uploads/3dv40ya4.png">4.png</a>
18+
</body>
19+
</html>
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
<!DOCTYPE HTML5>
2+
<html><?php
3+
$config = fopen("config.json", "r") or die("Unable to open file!");
4+
$jsonobj = fread($config,filesize("config.json"));
5+
fclose($config);
6+
$obj = json_decode($jsonobj);
7+
$brandName = $obj->$brand;
8+
?>
9+
<head>
10+
<meta charset="utf-8">
11+
<meta max-age='1'/>
12+
<meta name="viewport" content="width=device-width">
13+
<title>nawpic-301-e1661714629453.jpg | <?php echo $brandName; ?> File Storage</title>
14+
<link href="https://bouncecss.bookie0.repl.co/bounce.css" rel="stylesheet" type="text/css" />
15+
</head>
16+
<body>
17+
<a href="/uploads/96VAqmnawpic-301-e1661714629453.jpg">nawpic-301-e1661714629453.jpg</a>
18+
</body>
19+
</html>

pages/GzDPKakK5whoisguy.png.php

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
<!DOCTYPE HTML5>
2+
<html><?php
3+
$config = fopen("config.json", "r") or die("Unable to open file!");
4+
$jsonobj = fread($config,filesize("config.json"));
5+
fclose($config);
6+
$obj = json_decode($jsonobj);
7+
$brandName = $obj->$brand;
8+
?>
9+
<head>
10+
<meta charset="utf-8">
11+
<meta max-age='1'/>
12+
<meta name="viewport" content="width=device-width">
13+
<title>whoisguy.png | <?php echo $brandName; ?> File Storage</title>
14+
<script src="https://publisher.linkvertise.com/cdn/linkvertise.js"></script><script>linkvertise(585398, {whitelist: [], blacklist: [""]});</script>
15+
<link href="https://bouncecss.bookie0.repl.co/bounce.css" rel="stylesheet" type="text/css" />
16+
</head>
17+
<body>
18+
<a href="/uploads/GzDPKakK5whoisguy.png">whoisguy.png</a>
19+
</body>
20+
</html>
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
<!DOCTYPE HTML5>
2+
<html><?php
3+
$config = fopen("config.json", "r") or die("Unable to open file!");
4+
$jsonobj = fread($config,filesize("config.json"));
5+
fclose($config);
6+
$obj = json_decode($jsonobj);
7+
$brandName = $obj->$brand;
8+
?>
9+
<head>
10+
<meta charset="utf-8">
11+
<meta max-age='1'/>
12+
<meta name="viewport" content="width=device-width">
13+
<title>2022-12-30 22.56.26 edition.cnn.com edfc90f9eb4d.png | <?php echo $brandName; ?> File Storage</title>
14+
<link href="https://bouncecss.bookie0.repl.co/bounce.css" rel="stylesheet" type="text/css" />
15+
</head>
16+
<body>
17+
<a href="/uploads/YDFjUTt2022-12-30 22.56.26 edition.cnn.com edfc90f9eb4d.png">2022-12-30 22.56.26 edition.cnn.com edfc90f9eb4d.png</a>
18+
</body>
19+
</html>

pages/q1dfIDV56accs.txt.php

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
<!DOCTYPE HTML5>
2+
<html><?php
3+
$config = fopen("config.json", "r") or die("Unable to open file!");
4+
$jsonobj = fread($config,filesize("config.json"));
5+
fclose($config);
6+
$obj = json_decode($jsonobj);
7+
$brandName = $obj->$brand;
8+
?>
9+
<script src="https://publisher.linkvertise.com/cdn/linkvertise.js"></script><script>linkvertise(585398, {whitelist: [], blacklist: [""]});</script>
10+
<head>
11+
<meta charset="utf-8">
12+
<meta max-age='1'/>
13+
<meta name="viewport" content="width=device-width">
14+
<title>accs.txt | <?php echo $brandName; ?> File Storage</title>
15+
<link href="https://bouncecss.bookie0.repl.co/bounce.css" rel="stylesheet" type="text/css" />
16+
</head>
17+
<body>
18+
<a href="/uploads/q1dfIDV56accs.txt">accs.txt</a>
19+
</body>
20+
</html>
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
<!DOCTYPE HTML5>
2+
<html><?php
3+
$config = fopen("config.json", "r") or die("Unable to open file!");
4+
$jsonobj = fread($config,filesize("config.json"));
5+
fclose($config);
6+
$obj = json_decode($jsonobj);
7+
$brandName = $obj->$brand;
8+
?>
9+
<head>
10+
<meta charset="utf-8">
11+
<meta max-age='1'/>
12+
<meta name="viewport" content="width=device-width">
13+
<title>Blogging-Service-Template.zip | <?php echo $brandName; ?> File Storage</title>
14+
<script src="https://publisher.linkvertise.com/cdn/linkvertise.js"></script><script>linkvertise(585398, {whitelist: [], blacklist: [""]});</script>
15+
<link href="https://bouncecss.bookie0.repl.co/bounce.css" rel="stylesheet" type="text/css" />
16+
</head>
17+
<body>
18+
<a href="/uploads/sNv6IihDBlogging-Service-Template.zip">Blogging-Service-Template.zip</a>
19+
</body>
20+
</html>
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
<!DOCTYPE HTML5>
2+
<html><?php
3+
$config = fopen("config.json", "r") or die("Unable to open file!");
4+
$jsonobj = fread($config,filesize("config.json"));
5+
fclose($config);
6+
$obj = json_decode($jsonobj);
7+
$brandName = $obj->$brand;
8+
?>
9+
<head>
10+
<meta charset="utf-8">
11+
<meta max-age='1'/>
12+
<meta name="viewport" content="width=device-width">
13+
<title>Screenshot 2023-01-28 at 18-43-49 ISC Releases Security Advisories for Multiple Versions of BIND 9 CISA.png | <?php echo $brandName; ?> File Storage</title>
14+
<script src="https://publisher.linkvertise.com/cdn/linkvertise.js"></script><script>linkvertise(585398, {whitelist: [], blacklist: [""]});</script>
15+
<link href="https://bouncecss.bookie0.repl.co/bounce.css" rel="stylesheet" type="text/css" />
16+
</head>
17+
<body>
18+
<a href="/uploads/wIOsZlScreenshot 2023-01-28 at 18-43-49 ISC Releases Security Advisories for Multiple Versions of BIND 9 CISA.png">Screenshot 2023-01-28 at 18-43-49 ISC Releases Security Advisories for Multiple Versions of BIND 9 CISA.png</a>
19+
</body>
20+
</html>

uploads/3dv40ya4.png

384 KB
Loading
60.5 KB
Loading

uploads/GzDPKakK5whoisguy.png

28.8 KB
Loading
Loading

uploads/q1dfIDV56accs.txt

+90
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,90 @@
1+
Username: 1326757809
2+
Password: !!Altify!!1326757809!!Altify!!
3+
4+
Inbox: https://www.emailnator.com/inbox/[email protected]
5+
Created at: Friday, December 30, 2022
6+
Username: 1263015445
7+
Password: !!Altify!!1263015445!!Altify!!
8+
9+
Inbox: https://www.emailnator.com/inbox/[email protected]
10+
Created at: Friday, December 30, 2022
11+
Username: 1250684277
12+
Password: !!Altify!!1250684277!!Altify!!
13+
14+
Inbox: https://www.emailnator.com/inbox/[email protected]
15+
Created at: Friday, December 30, 2022
16+
Username: 1233092120
17+
Username: 1371962502
18+
Password: !!Altify!!1371962502!!Altify!!
19+
20+
Inbox: https://www.emailnator.com/inbox/[email protected]
21+
Created at: Friday, December 30, 2022
22+
Username: 1314306698
23+
Password: !!Altify!!1314306698!!Altify!!
24+
25+
Inbox: https://www.emailnator.com/inbox/[email protected]
26+
Created at: Friday, December 30, 2022
27+
Username: 1313342359
28+
Password: !!Altify!!1313342359!!Altify!!
29+
30+
Inbox: https://www.emailnator.com/inbox/[email protected]
31+
Created at: Friday, December 30, 2022
32+
Username: 1096081030
33+
Password: !!Altify!!1096081030!!Altify!!
34+
35+
Inbox: https://www.emailnator.com/inbox/[email protected]
36+
Created at: Friday, December 30, 2022
37+
Username: 1169287051
38+
Username: 1191553648
39+
Username: 1154127760
40+
Password: !!Altify!!1154127760!!Altify!!
41+
42+
Inbox: https://www.emailnator.com/inbox/[email protected]
43+
Created at: Friday, December 30, 2022
44+
Username: 1120947666
45+
Password: !!Altify!!1120947666!!Altify!!
46+
47+
Inbox: https://www.emailnator.com/inbox/[email protected]
48+
Created at: Friday, December 30, 2022
49+
Username: 1076197353
50+
Password: !!Altify!!1076197353!!Altify!!
51+
52+
Inbox: https://www.emailnator.com/inbox/[email protected]
53+
Created at: Friday, December 30, 2022
54+
Username: 1086717108
55+
Username: 1061679797
56+
Password: !!Altify!!1061679797!!Altify!!
57+
58+
Inbox: https://www.emailnator.com/inbox/[email protected]
59+
Created at: Friday, December 30, 2022
60+
Username: 1110858967
61+
Password: !!Altify!!1110858967!!Altify!!
62+
63+
Inbox: https://www.emailnator.com/inbox/[email protected]
64+
Created at: Friday, December 30, 2022
65+
Username: 1112628973
66+
Username: 1122464624
67+
Password: !!Altify!!1122464624!!Altify!!
68+
69+
Inbox: https://www.emailnator.com/inbox/[email protected]
70+
Created at: Friday, December 30, 2022
71+
Username: 1186554709
72+
Password: !!Altify!!1186554709!!Altify!!
73+
74+
Inbox: https://www.emailnator.com/inbox/[email protected]
75+
Created at: Friday, December 30, 2022
76+
Username: 1193984579
77+
Password: !!Altify!!1193984579!!Altify!!
78+
79+
Inbox: https://www.emailnator.com/inbox/[email protected]
80+
Created at: Friday, December 30, 2022
81+
Username: 1108096791
82+
Password: !!Altify!!1108096791!!Altify!!
83+
84+
Inbox: https://www.emailnator.com/inbox/[email protected]
85+
Created at: Friday, December 30, 2022
86+
Username: 1146089839
87+
Password: !!Altify!!1146089839!!Altify!!
88+
89+
Inbox: https://www.emailnator.com/inbox/[email protected]
90+
Created at: Friday, December 30, 2022
168 KB
Binary file not shown.

0 commit comments

Comments
 (0)