403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.191
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/banners/.claude/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/banners/.claude/settings.local.json
{
  "permissions": {
    "allow": [
      "Bash(sudo chown:*)",
      "Bash(sudo chmod:*)",
      "Bash(php:*)",
      "Bash(for i in 1 2 3)",
      "Bash(do echo \"Run $i:\")",
      "Bash(/usr/bin/time:*)",
      "Bash(done)",
      "Bash(ls:*)",
      "Bash(crontab:*)",
      "Bash(mysql:*)",
      "Bash(grep -B 5 -A 15 \"savethedate = ''#form.savethedate#''\" /home/banners/domains/stagemag/premium/includes/formactions.cfm)",
      "Bash(find /home/banners -type f \\\\\\(-name *.conf -o -name *.config -o -name *.cfg -o -name *config* \\\\\\))",
      "Bash(grep -r \"cfinclude\\\\|cfrequestpage\\\\|cfimport\" /home/banners/public_html/bway/*.cfm)",
      "Bash(find /home/banners/public_html/bway -type f \\\\\\(-name *.cfm -o -name *.cfc \\\\\\))",
      "Bash(grep -r \"cfinclude\\\\|datasource\\\\|database\" /home/banners/public_html/bway/*.cfm)",
      "Bash(find /home/banners/public_html/bway -type f -name *.html)",
      "Bash(grep -r \"define\\\\|DEFINE\" /home/banners/public_html/bway/*.php)",
      "Bash(find /home/banners/public_html/bway/WEB-INF/lucee -name *.xml)",
      "Bash(grep -i \"schedule\\\\|batch\\\\|scheduled\\\\|task\" /home/banners/public_html/bway/*.cfm)",
      "Bash(grep -r \"bwwac\\\\|bwwacread\" /home/banners/public_html/bway/*.cfm)",
      "Read(//home/**)",
      "Bash(grep -r \"pixeltrack\\\\|columntrack\" /home/banners/public_html/bway/*.cfm /home/banners/public_html/bway/*.php)",
      "Bash(find /home/banners/public_html/bway -name *.php -exec grep -l 'function ' {})",
      "Bash(2)",
      "Bash(redis-cli ping:*)",
      "Read(//var/www/cache/**)",
      "Read(//etc/httpd/conf/**)",
      "Read(//etc/apache2/**)",
      "Read(//tmp/**)",
      "Bash(for f:*)",
      "Bash(do echo:*)",
      "Bash(httpd -M)",
      "Bash(apache2ctl -M)",
      "Bash(apachectl -M)",
      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/pixel-article.php?id=99999&headline=1&hot=100\")",
      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/sitepixel.php?regid=5\")",
      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/pixel-people.php?id=12345\")",
      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/pixel-board.php?threadid=67890\")",
      "Bash(httpd -S)",
      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: broadwayworld.com\" \"http://localhost/bway/pixel-article.php?id=99999&headline=1&hot=100\")",
      "Read(//etc/httpd/conf.d/**)",
      "Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" \"https://localhost/pixel-article.php?id=99999&headline=1&hot=100\")",
      "Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" \"https://localhost/sitepixel.php\")",
      "Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" \"https://localhost/pixel-people.php?id=12345\")",
      "Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" \"https://localhost/pixel-board.php?threadid=67890\")",
      "Bash(chmod 777 /home/banners/public_html/bway/pixel/queue/)",
      "Bash(chmod 666 /home/banners/public_html/bway/pixel/queue/process.lock)",
      "Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" --resolve \"cloud.broadwayworld.com:443:127.0.0.1\" \"https://cloud.broadwayworld.com/pixel-article.cfm?id=88888&headline=1\")",
      "Read(//home/banners/public_html/bway/**)",
      "Read(//etc/php-fpm.d/**)",
      "Read(//etc/**)",
      "Bash(sudo tail:*)",
      "Bash(/home/banners/public_html/bway/pixel-debug-test.php:*)",
      "Bash(curl -sk -H \"Host: cloud.broadwayworld.com\" --resolve \"cloud.broadwayworld.com:443:127.0.0.1\" \"https://cloud.broadwayworld.com/pixel-debug-test.php?id=66666&headline=3&sourcevar=test\")",
      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/regionalbug.php?advertiser=test&id1=1200000&id2=1300000&id3=999\")",
      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/regionalbug.php?advertiser=test&id1=1200000&id2=1300000&id3=999\")",
      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost:80/bway/regionalbug.php?advertiser=test&id1=1200000&id2=1300000&id3=999\")",
      "Bash(grep -r 'CREATE TABLE.*ticketmaster' /home/banners --include=*.sql --include=*.cfm)",
      "Bash(grep -r 'ALTER TABLE.*ticketmaster' /home/banners --include=*.sql --include=*.cfm)",
      "Bash(grep -r \"ticketmaster_combined_insert\\\\|ticketmaster_combined_insert.cfm\" /home/banners/public_html --include=*.cfm --include=*.php --include=*.js --include=*.html)",
      "Bash(find /home/banners -name *.xml)",
      "Bash(find /home/banners -type f \\\\\\(-name *.cfm -o -name *.php \\\\\\))",
      "Bash(xargs cat:*)",
      "Bash(find /home/banners -name *ticketmaster*.log -o -name *ticketmaster*.txt)",
      "Bash(find /home/banners -type f -path *bway* -name admin* -o -path *bway* -name index.cfm)",
      "Bash(curl -s -o /dev/null -w \"%{http_code} %{time_total}s\" --max-time 300 \"http://localhost/ticketmaster/ticketmaster_combined_insert.cfm\")",
      "Bash(curl -s -L --max-time 600 \"http://localhost/ticketmaster/ticketmaster_combined_insert.cfm\")",
      "Bash(curl -v -s --max-time 10 \"http://localhost/ticketmaster/ticketmaster_combined_insert.cfm\")",
      "Bash(curl -s --max-time 600 \"https://cloud.broadwayworld.com/ticketmaster/ticketmaster_combined_insert.cfm\")",
      "Bash(find /home/banners -type f -name *.*)",
      "Bash(find /home/banners/domains -type f \\\\\\(-name *.py -o -name *.js -o -name *.ts \\\\\\))",
      "Bash(find /home/banners -type f \\\\\\(-name *.py -o -name *.js -o -name *.ts \\\\\\) -not -path */.c9/* -not -path */node_modules/* -not -path */.claude/*)",
      "Bash(find /home/banners -maxdepth 3 -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.js -o -name *.css -o -name *.html \\\\\\))",
      "Bash(find /home/banners -name *.py -type f ! -path *node_modules* ! -path */.c9/* ! -path *vendor*)",
      "Bash(find /home/banners -maxdepth 3 -type f -name *.cfm -o -name *.cfc)",
      "Bash(find /home/banners -maxdepth 3 -type f \\\\\\(-name *.cfm -o -name *.cfc \\\\\\))",
      "Bash(find /home/banners -type f \\\\\\(-name *.php -o -name *.js \\\\\\) ! -path *node_modules* ! -path */.c9/* ! -path *vendor* ! -path *ckeditor* ! -path *ckfinder*)",
      "Bash(find /home/banners/domains/newkit -type f \\\\\\(-name *.py -o -name *.js -o -name *.jsx -o -name *.ts -o -name *.tsx \\\\\\))",
      "Bash(find /home/banners -maxdepth 3 -type f -iname README* -o -iname *.md)",
      "Bash(find /home/banners/domains -type f -name *.php -not -path */.c9/* -not -path */vendor/* -not -path */node_modules/*)",
      "Bash(grep -r \"var.*= 1\\\\|num.*= 1\\\\|batch.*= 1\\\\|workers.*= 0\" /home/banners/public_html/labs --include=*.php --include=*.js)",
      "Bash(find /home/banners/public_html/labs -type f -name *.php -o -name *.js)",
      "Bash(grep -rn console.log /home/banners/public_html/labs --include=*.js)",
      "Bash(grep -rn 'var.*= 0' /home/banners/public_html/labs --include=*.js)",
      "Bash(grep -rn \"0\\\\|1\\\\|2\\\\|3\\\\|4\\\\|5\\\\\\)\" /home/banners/public_html/labs --include=*.php)",
      "Bash(grep -rn \"die\\\\|exit\" /home/banners/public_html/labs --include=*.php)",
      "Bash(grep -rn curl_setopt /home/banners/public_html/labs --include=*.php -A 15)",
      "Bash(grep -rn @ /home/banners/public_html/labs --include=*.php)",
      "Bash(grep -rn \"if\\\\s*\\(!.*explode\\\\|str_replace\\\\|str_split\\\\|file_\\\\|fopen\\\\|curl\\\\|json_decode\" /home/banners/public_html/labs --include=*.php)",
      "Bash(grep -rn \"CURLOPT_TIMEOUT\\\\|CONNECTTIMEOUT\\\\|timeout\" /home/banners/public_html/labs --include=*.php)",
      "Bash(grep -rn json_decode.*true /home/banners/public_html/labs --include=*.php)",
      "Bash(grep -rn \"error_log\\\\|trigger_error\\\\|exit\\\\|die\" /home/banners/public_html/labs/parmworld --include=*.php)",
      "Bash(grep -rn function.*{.*} /home/banners/public_html/labs --include=*.php)",
      "Bash(grep -rn '-> *$' /home/banners/public_html/labs --include=*.php)",
      "Bash(grep -rn \"echo\\\\|print\\\\|var_dump\" /home/banners/public_html/labs/smarterhome/cron --include=*.php)",
      "Bash(find /home/banners/domains -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\))",
      "Bash(find /home/banners/public_html/bway -maxdepth 3 -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\) ! -path */WEB-INF/* ! -path */node_modules/* ! -path */vendor/* ! -path *ckeditor* ! -path *ckfinder* ! -path *phpMyAdmin*)",
      "Bash(find /home/banners/domains -type d \\\\\\(-name node_modules -o -name vendor -o -name include -o -name Package-HTML \\\\\\) -prune -o -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\) -print)",
      "Bash(find /home/banners/public_html/labs -maxdepth 4 -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\) ! -path */node_modules/* ! -path */vendor/* ! -path *ckeditor* ! -path *ckfinder* ! -path *phpMyAdmin*)",
      "Bash(find /home/banners/public_html/leia -maxdepth 4 -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\) ! -path */WEB-INF/* ! -path */node_modules/* ! -path */vendor/* ! -path *ckeditor* ! -path *ckfinder* ! -path *phpMyAdmin*)",
      "Bash(find /home/banners/domains -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php \\\\\\) ! -path */WEB-INF/* ! -path */vendor/* ! -path */Package-HTML/* ! -path */.git/*)",
      "Bash(grep -r cfquery /home/banners/domains --include=*.cfm --include=*.cfc)",
      "Bash(grep -r \"echo.*$_T\\\\|echo.*$_ST\\\\|echo.*$_OKIE\\\\|echo.*$_QUEST\" /home/banners/public_html/bway/recommendednew*.php)",
      "Bash(xargs grep:*)",
      "Bash(grep -rn cfquery /home/banners/domains/mcifa.com --include=*.cfm)",
      "Bash(grep -rn \"WHERE\\\\|INSERT\\\\|UPDATE\\\\|DELETE\" /home/banners/domains/mcifa.com/public_html --include=*.cfm)",
      "Bash(grep -rn \"XSS\\\\|script\\\\|innerHTML\\\\|outerHTML\" /home/banners/domains/stagemag --include=*.cfm)",
      "Bash(find /home/banners/domains -type f -name *.php ! -path */vendor/* ! -path */Package-HTML/* ! -path */ckfinder*)",
      "Bash(find /home/banners/public_html/labs -type f -name *.php ! -path */vendor/* ! -path */node_modules/* -newer /home/banners/public_html/labs/.credentials.php)",
      "Bash(grep -r \"try\\\\s*{\" /home/banners/public_html/bway/recommendednew*.php)",
      "Bash(grep -rn \"WHERE.*#\\\\|INSERT.*#\\\\|UPDATE.*#\\\\|DELETE.*#\" /home/banners/domains/wisdomdigital/public_html --include=*.cfm)",
      "Bash(grep -rn \"except.*pass\\\\|except.*:\" /home/banners/domains --include=*.py)",
      "Bash(grep -rn cfabort /home/banners/domains --include=*.cfm --include=*.cfc)",
      "Bash(grep -n \"echo.*$_REQUEST\\\\|echo.*$_GET\\\\|echo.*$_POST\" /home/banners/public_html/bway/recommendednew.php)",
      "Bash(grep -rn \"cfloop.*query\\\\|cfloop.*from.*to\" /home/banners/domains/stagemag --include=*.cfm)",
      "Read(//cfloop\\\\|Cfoutput/,/\\\\/cfloop\\\\|\\\\/**)",
      "Bash(grep -rn \"6Ld2rP4\\\\|6Ld2rP4SAAAAAKTeYlgEC2UrqWdeOFAsFM-R4N2v\\\\|AKIATN2MEJ2R75Y36XF3\\\\|BDkuiO2FP7tfueg58SHWkOi372EzeuUokqPjcuFd\" /home/banners/domains --include=*.cfm --include=*.cfc --include=*.php --include=*.py --include=*.js)",
      "Bash(grep -n \"insert delayed\\\\|INSERT DELAYED\" /home/banners/public_html/bway/*.php)",
      "Bash(grep -n \"$_EQUEST\\\\|$_ET\\\\|$_OST\\\\|$_OOKIE\" /home/banners/public_html/bway/videoembed.php)",
      "Bash(grep -r '\\\\$getdupe\\\\[' /home/banners/domains/stagemag/modern_/index.php)",
      "Bash(grep -n ''\\\\'' . $css2;' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
      "Bash(curl -sS 'https://stagemag.broadwayworld.com/printpdf/__TRACKED_VAR__?cachebust=__TRACKED_VAR__')",
      "Bash(curl -sSI \"https://stagemag.broadwayworld.com/printpdf/How-to-Train-Your-Dragon-JR-Stages--the-J-105692?test=$\\(date +%s\\)\")",
      "Bash(curl -sS -o /tmp/standard-postreload.pdf -w 'Bytes: %{size_download} time: %{time_total}s\\\\n' 'https://stagemag.broadwayworld.com/printpdf/How-to-Train-Your-Dragon-JR-Stages--the-J-105692?afterreload=__CMDSUB_OUTPUT__')",
      "Bash(curl -sS \"https://stagemag.broadwayworld.com/modern_/css/style.css\")",
      "Bash(curl -sS \"https://stagemag.broadwayworld.com/modern_/css/fullpage.min.css\")",
      "Bash(curl -sS -o /tmp/post-save.pdf -w 'HTTP %{http_code} bytes %{size_download}\\\\n' 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/How-to-Train-Your-Dragon-JR-Stages--the-J-105692?bust=__TRACKED_VAR__')",
      "Bash(python3 -c 'import urllib.parse,sys;print\\(urllib.parse.quote\\(sys.argv[1]\\)\\)' '{\"page_size\":\"A4\",\"orientation\":\"L\",\"margin_preset\":\"tight\",\"font_scale\":\"small\",\"sections\":{}}')",
      "Bash(curl -sS -o /tmp/preview-override.pdf -w '%{http_code} %{size_download}b\\\\n' 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/How-to-Train-Your-Dragon-JR-Stages--the-J-105692?pdf=__TRACKED_VAR__&bust=__TRACKED_VAR__')",
      "Bash(curl -sS https://stagemag.broadwayworld.com/modern/The-Sound-Inside-Capital-Stage-91588)",
      "Bash(grep -n ''\\\\'' \\\\. $css2' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
      "Bash(python3 -c 'import urllib.parse,sys;print\\(urllib.parse.quote\\(sys.argv[1]\\)\\)' '{\"hide_selectors\":[\"#donors-id\"],\"break_before\":[\"a[name=\\\\\"Production Staff\\\\\"]\"],\"watermark\":\"DRAFT\",\"header\":\"{title}\",\"footer\":\"Page {pageno} of {pages}\",\"custom_css\":\"#cast-id h2 { color: #b20223; }\"}')",
      "Bash(curl -sS -o /tmp/adv.pdf -w 'HTTP %{http_code}  bytes %{size_download}\\\\n' 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?pdf=__TRACKED_VAR__&bust=__TRACKED_VAR__')",
      "Bash(curl -sS -o /tmp/base.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/__TRACKED_VAR__?bust=__TRACKED_VAR__')",
      "Bash(curl -sS -o /tmp/full-adv.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/__TRACKED_VAR__?bust=__TRACKED_VAR__')",
      "Bash(curl -sS -o /tmp/hide-extra.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?bust=__TRACKED_VAR__')",
      "Bash(pdftotext /tmp/hide-extra.pdf -)",
      "Bash(curl -sS -o /tmp/hide-ep.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/__TRACKED_VAR__?bust=__TRACKED_VAR__')",
      "Bash(pdftotext /tmp/hide-ep.pdf -)",
      "Bash(curl -sS -o /tmp/baseline.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/__TRACKED_VAR__?bust=__TRACKED_VAR__')",
      "Bash(pdftotext /tmp/baseline.pdf -)",
      "Bash(curl -sS -o /tmp/combo.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?bust=__TRACKED_VAR__')",
      "Bash(pdftotext -layout /tmp/combo.pdf -)",
      "Bash(curl -sS -o /tmp/raw.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?bust=__TRACKED_VAR__')",
      "Bash(pdftotext -layout /tmp/raw.pdf -)",
      "Bash(awk 'NR==65,NR==707' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
      "Bash(awk 'NR>=65 && NR<=707' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
      "Bash(grep -n '^$css = $css1\\\\|_unused_inline_css\\\\|//multimedia-id ending css' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
      "Bash(sed -i '66,711d' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
      "Bash(sed -n '60,72p' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
      "Bash(curl -sS -o /tmp/post-helper.pdf -w 'HTTP %{http_code} bytes %{size_download}\\\\n' 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?bust=__TRACKED_VAR__')",
      "Bash(awk '{print $5}')"
    ],
    "additionalDirectories": [
      "/home/banners/public_html/bway/pixel/queue"
    ]
  }
}

Youez - 2016 - github.com/yon3zu
LinuXploit