1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
<?php
ob_start();
require_once('globals.php');
header ("Expires: " . gmdate("D, d M Y H:i:s") . " GMT");
header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
header ("Cache-Control: no-cache, must-revalidate");
header ("Pragma: no-cache");
header ("Content-Type: text/html; charset=utf-8");
session_start();
if (!isset($_GET["name"])) {
session_unset();
session_destroy();
session_start();
echo session_id();
exit;
}
ob_end_flush();
function make_seed()
{
list($usec, $sec) = explode(' ', microtime());
return $sec + $usec * 1000000;
}
srand(make_seed());
//function myhash($k) {
// return hash('sha256',$k);
//}
if(!function_exists('openssl_cipher_iv_length')) {
MSGError("Encryption error -- php openssl not installed -- contact an admin (" . getFunctionName() .")");
LogError("Encryption error -- php openssl not installed -- contact an admin (" . getFunctionName() .")");
return "";
}
$clen = openssl_cipher_iv_length('aes-256-cbc');
$iv = substr(myhash(openssl_random_pseudo_bytes($clen)),0,$clen);
if(isset($_GET["name"]) && $_GET["name"] != "" ) {
$name = $_GET["name"];
$password = $_GET["password"];
$secrets = file("/var/www/boca/src/private/run-past.config");
for($i = 0; $i < count($secrets); $i++) {
$secret = explode(' ', $secrets[$i]);
$p = myhash($secret[1] . session_id());
if($name == $secret[0] && $p == $password) {
$cc = md5(rand() . rand() . @file_get_contents('/proc/uptime') . rand() . rand());
$txt = "#!/bin/bash\n" .
"## " . $iv . "\n" .
"mkdir -p /root/submissions\n" .
"chown root.root /root/submissions\n" .
"chmod 700 /root/submissions\n" .
"echo -n \"" . $cc . "\" >/root/submissions/comp\n" .
"chmod 600 /root/submissions/comp\n" .
"echo -n \"" . trim($secret[2]) . "\" > /root/submissions/code\n" .
"chmod 600 /root/submissions/code\n" .
"SITEUSER=".$name."\n";
if(($str = @file_get_contents("/var/www/boca/src/private/run-past.code")) !== false) $txt .= $str;
echo $iv . ":" . $clen . ":\n" . openssl_encrypt($txt, "aes-256-cbc", substr($secret[1],0,32), OPENSSL_RAW_DATA, $iv);
@file_put_contents("/var/www/boca/src/private/run-past.log", $name . "|" . $cc . "|" . getIP() . "|" . date(DATE_RFC2822) . "\n", LOCK_EX | FILE_APPEND);
exit;
}
}
}
echo "incorrect\n";
exit;
?>
|
