shell bypass 403

GrazzMean Shell

Uname: Linux info 3.0 #1337 SMP Tue Jan 01 00:00:00 CEST 2000 all GNU/Linux
Software: Apache
PHP version: 5.6.40 [ PHP INFO ] PHP os: Linux
Server Ip: 217.160.0.194
Your Ip: 216.73.217.139
User: u72294154 (9179942) | Group: ftpusers (600)
Safe Mode: OFF
Disable Function:
NONE

name : upgrade.php
<?php

unlink(ROOT_DIR . '/config-dist.php');
unlink(ROOT_DIR . '/admin/config-dist.php');

system('cp -rf ' . dirname(__FILE__) . '/cli_upgrade.php ' . ROOT_DIR . '/install/cli_upgrade.php');
system('cp -rf ' . dirname(__FILE__) . '/fake_upgrade.php ' . ROOT_DIR . '/install/controller/upgrade.php');

cURL('http://' . $base_url_host . $base_url_path . 'install/cli_upgrade.php');

system('rm -rf ' . ROOT_DIR . '/install');

$config_general = file_get_contents(dirname(__FILE__) . '/config-general.php', FILE_TEXT) or die ("Can't read config.php file.");
$config_general = replace('#BASE_URL_HOST#', $base_url_host, $config_general);
$config_general = replace('#BASE_URL_PATH#', $base_url_path, $config_general);
$config_general = replace('#WEB___DIR#', $web_dir, $config_general);
$config_general = replace('#DB_MAIN_HOST#', CONFIG_HOST, $config_general);
$config_general = replace('#DB_MAIN_LOGIN#', $db_main_login, $config_general);
$config_general = replace('#DB_MAIN_PASSWORD#', $db_main_password, $config_general);
$config_general = replace('#DB_MAIN_NAME#', $db_main_name, $config_general);
$config_general = replace('#DB_MAIN_PREFIX#', $db_main_prefix, $config_general);
$config_general = file_put_contents(ROOT_DIR . '/config.php', $config_general, LOCK_EX) or die ("Can't place config file.");

$config_admin = file_get_contents(dirname(__FILE__) . '/config-admin.php', FILE_TEXT) or die ("Can't read config.php file.");
$config_admin = replace('#BASE_URL_HOST#', $base_url_host, $config_admin);
$config_admin = replace('#BASE_URL_PATH#', $base_url_path, $config_admin);
$config_admin = replace('#WEB___DIR#', $web_dir, $config_admin);
$config_admin = replace('#DB_MAIN_HOST#', CONFIG_HOST, $config_admin);
$config_admin = replace('#DB_MAIN_LOGIN#', $db_main_login, $config_admin);
$config_admin = replace('#DB_MAIN_PASSWORD#', $db_main_password, $config_admin);
$config_admin = replace('#DB_MAIN_NAME#', $db_main_name, $config_admin);
$config_admin = replace('#DB_MAIN_PREFIX#', $db_main_prefix, $config_admin);
$config_admin = file_put_contents(ROOT_DIR . '/admin/config.php', $config_admin, LOCK_EX) or die ("Can't place config file.");

$schema = file_get_contents(dirname(__FILE__) . '/upgrade1551.sql', FILE_TEXT) or die ("Can't read upgrade1551.sql file.");
$schema = replace('#DB_MAIN_PREFIX#', $db_main_prefix, $schema);
importSQL($schema);
© 2026 GrazzMean