shell bypass 403

UnknownSec Shell

: /var/softaculous/wp60/ [ drwxr-xr-x ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 172.67.154.186
Your Ip: 216.73.216.55
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : plugin_deactivate.php
<?php

@unlink(__FILE__);

// Validate if the request is from Softaculous
if($_REQUEST['pass'] != '[[autopass]]'){
	die("Unauthorized Access");
}

require_once('wp-blog-header.php');
require_once('wp-includes/pluggable.php');
require_once('wp-admin/includes/plugin.php');

$plugins_to_deactivate = '[[plugins_to_deactivate]]';
$plugins_to_deactivate = unserialize($plugins_to_deactivate);

$ret = array();

foreach($plugins_to_deactivate as $plugn_file){
	// null means success
	$ret[$plugn_file] = deactivate_plugins($plugn_file);	
}

echo '<plugin_deactivate>'.serialize($ret).'</plugin_deactivate>';

exit(0);
© 2026 UnknownSec