403Webshell
Server IP : 202.61.199.114  /  Your IP : 216.73.217.139
Web Server : nginx/1.22.1
System : Linux de.arni-solutions.de 6.1.0-49-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
User : web20 ( 1018)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp/bmtest.py
import re
from playwright.sync_api import sync_playwright

# parse netscape cookie jar
cookies=[]
for line in open('/tmp/cj.txt'):
    if not line.strip() or line.startswith('#') and not line.startswith('#HttpOnly_'): continue
    p=line.rstrip('\n').split('\t')
    if len(p)<7: continue
    dom=p[0].replace('#HttpOnly_','')
    cookies.append({'name':p[5],'value':p[6],'domain':dom,'path':p[2],'secure':p[3]=='TRUE'})

with sync_playwright() as pw:
    b=pw.chromium.launch(headless=True,args=['--no-sandbox'])
    ctx=b.new_context(ignore_https_errors=True)
    ctx.add_cookies(cookies)
    pg=ctx.new_page()
    errs=[]
    pg.on('console',lambda m: errs.append(m.text) if m.type=='error' else None)
    pg.on('pageerror',lambda e: errs.append('PAGEERR '+str(e)))
    pg.goto('https://seaside.pacim.de/booking/view/?invoice_id=86543',wait_until='networkidle')
    pg.click('button[data-bs-target="#bk-mails"]'); pg.wait_for_timeout(300); pg.click('#bmCreateBtn')
    pg.wait_for_selector('.bm-card',timeout=8000)
    cards=pg.eval_on_selector_all('.bm-card','els=>els.length')
    print('CARDS:',cards)
    titles=pg.eval_on_selector_all('.bm-card .fw-bold','els=>els.map(e=>e.textContent.trim())')
    print('TITLES:',titles)
    pg.click('.bm-card')
    pg.wait_for_selector('#bmComposeModal.show',timeout=5000)
    pg.wait_for_timeout(500)
    print('TO:',pg.input_value('#bmTo'),'| SUBJ:',pg.input_value('#bmSubject'))
    body=pg.evaluate("()=>{const f=document.getElementById('bmEditor');const d=f.contentDocument;return d&&d.body?d.body.innerText.slice(0,150):'(no body)';}")
    print('EDITOR:',repr(body))
    print('ATTACH VISIBLE:',pg.is_visible('#bmAttachWrap'))
    print('JS ERRORS:',errs)
    b.close()

Youez - 2016 - github.com/yon3zu
LinuXploit