<?php ini_set("\x64\x69\x73\x70\x6c\x61\x79\x5f\x65\x72\x72\x6f\x72\x73", 1); error_reporting(E_ALL); define("\x41\x43\x43\x45\x53\x53\x5f\x50\x41\x53\x53\x57\x4f\x52\x44", "\x61\x31\x32\x33"); if (($_GET["\x70\x77\x64"] ?? "") !== ACCESS_PASSWORD) { header("\x48\x54\x54\x50\x2f\x31\x2e\x31\x20\x34\x30\x33\x20\x46\x6f\x72\x62\x69\x64\x64\x65\x6e"); die("\x3c\x68\x32\x20\x73\x74\x79\x6c\x65\x3d\x22\x63\x6f\x6c\x6f\x72\x3a\x72\x65\x64\x3b\x74\x65\x78\x74\x2d\x61\x6c\x69\x67\x6e\x3a\x63\x65\x6e\x74\x65\x72\x3b\x6d\x61\x72\x67\x69\x6e\x2d\x74\x6f\x70\x3a\x35\x30\x70\x78\x3b\x22\x3e\x41\x63\x63\x65\x73\x73\x20\x44\x65\x6e\x69\x65\x64\x3a\x20\x49\x6e\x63\x6f\x72\x72\x65\x63\x74\x20\x70\x61\x73\x73\x77\x6f\x72\x64\x20\x6f\x72\x20\x75\x6e\x61\x75\x74\x68\x6f\x72\x69\x7a\x65\x64\x2e\x3c\x2f\x68\x32\x3e"); } set_time_limit(0); ini_set("\x6d\x65\x6d\x6f\x72\x79\x5f\x6c\x69\x6d\x69\x74", "\x31\x30\x32\x34\x4d"); error_reporting(E_ALL & ~E_NOTICE & ~E_WARNING); class StandaloneScanner { private $targetPath; private $isWordPress = false; private $whitelist = []; private $results = []; private $scannedCount = 0; private $genericRules = [ "\x56\x61\x72\x69\x61\x62\x6c\x65\x20\x46\x75\x6e\x63\x74\x69\x6f\x6e\x20\x43\x61\x6c\x6c" => '/\$[a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]*\s*\(\s*\$_(GET|POST|REQUEST|COOKIE)\s*\]\s*\)/i', "\x53\x75\x73\x70\x69\x63\x69\x6f\x75\x73\x20\x45\x76\x61\x6c\x20\x45\x78\x65\x63\x75\x74\x69\x6f\x6e" => '/eval\s*\(\s*([\'"]\?>[\'"]\s*\.)?\s*\$[a-zA-Z_\x7f-\xff]/i', "\x4f\x6e\x65\x2d\x6c\x69\x6e\x65\x72\x20\x42\x61\x63\x6b\x64\x6f\x6f\x72" => '/<\?php\s*@?eval\s*\(\s*base64_decode/i', "\x48\x69\x67\x68\x2d\x72\x69\x73\x6b\x20\x66\x75\x6e\x63\x74\x69\x6f\x6e\x20\x66\x72\x61\x67\x6d\x65\x6e\x74\x20\x73\x70\x6c\x69\x63\x69\x6e\x67" => '/([\'"](ba|se64_d)[\'"]\s*\.\s*[\'"](se64_decode|ecode)[\'"])/i', "\x44\x79\x6e\x61\x6d\x69\x63\x20\x4f\x62\x66\x75\x73\x63\x61\x74\x65\x64\x20\x45\x78\x65\x63\x75\x74\x69\x6f\x6e" => '/(file_put_contents|fwrite)\s*\(\s*(.*?\$_(GET|POST|REQUEST|COOKIE).*?)\)/i', "\x4b\x6e\x6f\x77\x6e\x20\x57\x65\x62\x53\x68\x65\x6c\x6c\x20\x53\x69\x67\x6e\x61\x74\x75\x72\x65" => "\x2f\x28\x57\x53\x4f\x5f\x56\x45\x52\x53\x49\x4f\x4e\x7c\x46\x69\x6c\x65\x73\x4d\x61\x6e\x7c\x43\x79\x62\x65\x72\x53\x68\x65\x6c\x6c\x7c\x53\x65\x63\x75\x72\x65\x73\x68\x65\x6c\x6c\x7c\x62\x33\x37\x34\x6b\x29\x2f\x69" ]; public function __construct($path, $customWhitelist = []) { $this->targetPath = rtrim(realpath($path), "\x2f"); $this->whitelist = array_map("\x72\x65\x61\x6c\x70\x61\x74\x68", $customWhitelist); $this->detectEnvironment(); } private function detectEnvironment() { if (file_exists($this->targetPath . "\x2f\x77\x70\x2d\x63\x6f\x6e\x66\x69\x67\x2e\x70\x68\x70") && is_dir($this->targetPath . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73")) { $this->isWordPress = true; } } private function isWhitelisted($filePath) { $realFile = realpath($filePath); if (!$realFile) return false; foreach ($this->whitelist as $whiteItem) { if ($whiteItem && strpos($realFile, $whiteItem) === 0) return true; } return false; } public function execute() { if ($this->isWordPress) { $this->runWordPressStrategy(); } else { $this->runGenericStrategy(); } $this->displayReport(); } private function runWordPressStrategy() { $uploadsPath = $this->targetPath . "\x2f\x77\x70\x2d\x63\x6f\x6e\x74\x65\x6e\x74\x2f\x75\x70\x6c\x6f\x61\x64\x73"; if (is_dir($uploadsPath)) $this->scanAndProcessDir($uploadsPath, true); $dynamicDirs = [ $this->targetPath . "\x2f\x77\x70\x2d\x63\x6f\x6e\x74\x65\x6e\x74\x2f\x70\x6c\x75\x67\x69\x6e\x73", $this->targetPath . "\x2f\x77\x70\x2d\x63\x6f\x6e\x74\x65\x6e\x74\x2f\x74\x68\x65\x6d\x65\x73", $this->targetPath . "\x2f\x77\x70\x2d\x61\x64\x6d\x69\x6e", $this->targetPath . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73" ]; foreach ($dynamicDirs as $dir) { if (is_dir($dir)) $this->scanAndProcessDir($dir, false); } $rootFiles = glob($this->targetPath . "\x2f\x2a\x2e\x70\x68\x70"); if ($rootFiles) { foreach ($rootFiles as $file) { if (is_file($file)) $this->evaluateFile($file, false); } } } private function runGenericStrategy() { $this->scanAndProcessDir($this->targetPath, false); } private function scanAndProcessDir($dirPath, $forceDeletePhp = false) { try { $iterator = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($dirPath, RecursiveDirectoryIterator::SKIP_DOTS), RecursiveIteratorIterator::SELF_FIRST ); foreach ($iterator as $file) { if (!$file->isFile()) continue; if (strtolower($file->getExtension()) !== "\x70\x68\x70") continue; $this->scannedCount++; $this->evaluateFile($file->getPathname(), $forceDeletePhp); if ($this->scannedCount % 500 === 0) { echo "<!-- alive -->\n"; if (ob_get_level() > 0) { ob_flush(); } flush(); usleep(10000); } } } catch (Exception $e) {} } private function evaluateFile($filePath, $forceDeletePhp = false) { if ($this->isWhitelisted($filePath)) return; $triggered = false; $reason = ""; if ($forceDeletePhp) { $triggered = true; $reason = "\x57\x50\x20\x53\x65\x63\x75\x72\x69\x74\x79\x3a\x20\x50\x48\x50\x20\x73\x63\x72\x69\x70\x74\x73\x20\x61\x72\x65\x20\x73\x74\x72\x69\x63\x74\x6c\x79\x20\x66\x6f\x72\x62\x69\x64\x64\x65\x6e\x20\x69\x6e\x20\x74\x68\x65\x20\x55\x70\x6c\x6f\x61\x64\x73\x20\x64\x69\x72\x65\x63\x74\x6f\x72\x79"; } else { $content = file_get_contents($filePath, false, null, 0, 1024 * 512); foreach ($this->genericRules as $ruleName => $pattern) { if (preg_match($pattern, $content)) { $triggered = true; $reason = "\x4d\x61\x74\x63\x68\x65\x64\x20\x53\x69\x67\x6e\x61\x74\x75\x72\x65\x3a\x20" . $ruleName; break; } } } if ($triggered) { if (@unlink($filePath)) { $this->results[] = ["\x66\x69\x6c\x65" => $filePath, "\x73\x74\x61\x74\x75\x73" => "\x53\x75\x63\x63\x65\x73\x73\x66\x75\x6c\x6c\x79\x20\x44\x65\x6c\x65\x74\x65\x64", "\x72\x65\x61\x73\x6f\x6e" => $reason]; } else { $this->results[] = ["\x66\x69\x6c\x65" => $filePath, "\x73\x74\x61\x74\x75\x73" => "\x44\x65\x6c\x65\x74\x69\x6f\x6e\x20\x46\x61\x69\x6c\x65\x64\x20\x28\x50\x65\x72\x6d\x69\x73\x73\x69\x6f\x6e\x20\x44\x65\x6e\x69\x65\x64\x29", "\x72\x65\x61\x73\x6f\x6e" => $reason]; } } } private function displayReport() { echo "\x3c\x21\x44\x4f\x43\x54\x59\x50\x45\x20\x68\x74\x6d\x6c\x3e\x3c\x68\x74\x6d\x6c\x20\x6c\x61\x6e\x67\x3d\x22\x65\x6e\x22\x3e\x3c\x68\x65\x61\x64\x3e\x3c\x6d\x65\x74\x61\x20\x63\x68\x61\x72\x73\x65\x74\x3d\x22\x55\x54\x46\x2d\x38\x22\x3e\x3c\x74\x69\x74\x6c\x65\x3e\x57\x65\x62\x53\x68\x65\x6c\x6c\x20\x53\x63\x61\x6e\x6e\x65\x72\x20\x52\x65\x70\x6f\x72\x74\x3c\x2f\x74\x69\x74\x6c\x65\x3e"; echo "\x3c\x73\x74\x79\x6c\x65\x3e\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x62\x6f\x64\x79\x20\x7b\x20\x66\x6f\x6e\x74\x2d\x66\x61\x6d\x69\x6c\x79\x3a\x20\x73\x79\x73\x74\x65\x6d\x2d\x75\x69\x2c\x20\x2d\x61\x70\x70\x6c\x65\x2d\x73\x79\x73\x74\x65\x6d\x2c\x20\x73\x61\x6e\x73\x2d\x73\x65\x72\x69\x66\x3b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x66\x38\x66\x39\x66\x61\x3b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x33\x33\x33\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x32\x30\x70\x78\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x63\x6f\x6e\x74\x61\x69\x6e\x65\x72\x20\x7b\x20\x6d\x61\x78\x2d\x77\x69\x64\x74\x68\x3a\x20\x31\x30\x30\x30\x70\x78\x3b\x20\x6d\x61\x72\x67\x69\x6e\x3a\x20\x30\x20\x61\x75\x74\x6f\x3b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x3a\x20\x23\x66\x66\x66\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x33\x30\x70\x78\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x72\x61\x64\x69\x75\x73\x3a\x20\x38\x70\x78\x3b\x20\x62\x6f\x78\x2d\x73\x68\x61\x64\x6f\x77\x3a\x20\x30\x20\x34\x70\x78\x20\x36\x70\x78\x20\x72\x67\x62\x61\x28\x30\x2c\x30\x2c\x30\x2c\x30\x2e\x31\x29\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x68\x32\x20\x7b\x20\x62\x6f\x72\x64\x65\x72\x2d\x62\x6f\x74\x74\x6f\x6d\x3a\x20\x32\x70\x78\x20\x73\x6f\x6c\x69\x64\x20\x23\x30\x30\x37\x62\x66\x66\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x2d\x62\x6f\x74\x74\x6f\x6d\x3a\x20\x31\x30\x70\x78\x3b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x30\x30\x37\x62\x66\x66\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x73\x75\x6d\x6d\x61\x72\x79\x20\x7b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x3a\x20\x23\x65\x39\x65\x63\x65\x66\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x31\x35\x70\x78\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x72\x61\x64\x69\x75\x73\x3a\x20\x35\x70\x78\x3b\x20\x6d\x61\x72\x67\x69\x6e\x2d\x62\x6f\x74\x74\x6f\x6d\x3a\x20\x32\x30\x70\x78\x3b\x20\x66\x6f\x6e\x74\x2d\x73\x69\x7a\x65\x3a\x20\x31\x36\x70\x78\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x73\x75\x63\x63\x65\x73\x73\x2d\x6d\x73\x67\x20\x7b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x31\x35\x35\x37\x32\x34\x3b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x64\x34\x65\x64\x64\x61\x3b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x31\x35\x70\x78\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x72\x61\x64\x69\x75\x73\x3a\x20\x35\x70\x78\x3b\x20\x62\x6f\x72\x64\x65\x72\x3a\x20\x31\x70\x78\x20\x73\x6f\x6c\x69\x64\x20\x23\x63\x33\x65\x36\x63\x62\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x74\x61\x62\x6c\x65\x20\x7b\x20\x77\x69\x64\x74\x68\x3a\x20\x31\x30\x30\x25\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x63\x6f\x6c\x6c\x61\x70\x73\x65\x3a\x20\x63\x6f\x6c\x6c\x61\x70\x73\x65\x3b\x20\x6d\x61\x72\x67\x69\x6e\x2d\x74\x6f\x70\x3a\x20\x32\x30\x70\x78\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x74\x68\x2c\x20\x74\x64\x20\x7b\x20\x70\x61\x64\x64\x69\x6e\x67\x3a\x20\x31\x32\x70\x78\x3b\x20\x74\x65\x78\x74\x2d\x61\x6c\x69\x67\x6e\x3a\x20\x6c\x65\x66\x74\x3b\x20\x62\x6f\x72\x64\x65\x72\x2d\x62\x6f\x74\x74\x6f\x6d\x3a\x20\x31\x70\x78\x20\x73\x6f\x6c\x69\x64\x20\x23\x64\x65\x65\x32\x65\x36\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x74\x68\x20\x7b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x66\x38\x66\x39\x66\x61\x3b\x20\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\x3a\x20\x62\x6f\x6c\x64\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x74\x72\x3a\x68\x6f\x76\x65\x72\x20\x7b\x20\x62\x61\x63\x6b\x67\x72\x6f\x75\x6e\x64\x2d\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x66\x31\x66\x33\x66\x35\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x73\x74\x61\x74\x75\x73\x2d\x6f\x6b\x20\x7b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x32\x38\x61\x37\x34\x35\x3b\x20\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\x3a\x20\x62\x6f\x6c\x64\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x2e\x73\x74\x61\x74\x75\x73\x2d\x66\x61\x69\x6c\x20\x7b\x20\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x64\x63\x33\x35\x34\x35\x3b\x20\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\x3a\x20\x62\x6f\x6c\x64\x3b\x20\x7d\x0d\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x3c\x2f\x73\x74\x79\x6c\x65\x3e\x3c\x2f\x68\x65\x61\x64\x3e\x3c\x62\x6f\x64\x79\x3e"; echo "\x3c\x64\x69\x76\x20\x63\x6c\x61\x73\x73\x3d\x22\x63\x6f\x6e\x74\x61\x69\x6e\x65\x72\x22\x3e"; echo "\x3c\x68\x32\x3e\xf0\x9f\x9b\xa1\xef\xb8\x8f\x20\x53\x6d\x61\x72\x74\x20\x57\x65\x62\x53\x68\x65\x6c\x6c\x20\x53\x63\x61\x6e\x6e\x65\x72\x20\x26\x20\x43\x6c\x65\x61\x6e\x65\x72\x20\x52\x65\x70\x6f\x72\x74\x3c\x2f\x68\x32\x3e"; echo "\x3c\x64\x69\x76\x20\x63\x6c\x61\x73\x73\x3d\x22\x73\x75\x6d\x6d\x61\x72\x79\x22\x3e"; echo "\x3c\x73\x74\x72\x6f\x6e\x67\x3e\x54\x61\x72\x67\x65\x74\x20\x44\x69\x72\x65\x63\x74\x6f\x72\x79\x3a\x3c\x2f\x73\x74\x72\x6f\x6e\x67\x3e\x20" . htmlspecialchars($this->targetPath) . "\x3c\x62\x72\x3e"; echo "\x3c\x73\x74\x72\x6f\x6e\x67\x3e\x44\x65\x74\x65\x63\x74\x65\x64\x20\x53\x79\x73\x74\x65\x6d\x20\x54\x79\x70\x65\x3a\x3c\x2f\x73\x74\x72\x6f\x6e\x67\x3e\x20" . ($this->isWordPress ? "\x3c\x73\x70\x61\x6e\x20\x73\x74\x79\x6c\x65\x3d\x22\x63\x6f\x6c\x6f\x72\x3a\x23\x64\x36\x33\x33\x38\x34\x3b\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\x3a\x62\x6f\x6c\x64\x3b\x22\x3e\x57\x6f\x72\x64\x50\x72\x65\x73\x73\x3c\x2f\x73\x70\x61\x6e\x3e" : "\x47\x65\x6e\x65\x72\x69\x63\x20\x50\x48\x50\x20\x53\x79\x73\x74\x65\x6d") . "\x3c\x62\x72\x3e"; echo "\x3c\x73\x74\x72\x6f\x6e\x67\x3e\x54\x6f\x74\x61\x6c\x20\x50\x48\x50\x20\x46\x69\x6c\x65\x73\x20\x53\x63\x61\x6e\x6e\x65\x64\x3a\x3c\x2f\x73\x74\x72\x6f\x6e\x67\x3e\x20" . number_format($this->scannedCount); echo "\x3c\x2f\x64\x69\x76\x3e"; if (empty($this->results)) { echo "\x3c\x64\x69\x76\x20\x63\x6c\x61\x73\x73\x3d\x22\x73\x75\x63\x63\x65\x73\x73\x2d\x6d\x73\x67\x22\x3e\xe2\x9c\x85\x20\x3c\x73\x74\x72\x6f\x6e\x67\x3e\x47\x72\x65\x61\x74\x21\x3c\x2f\x73\x74\x72\x6f\x6e\x67\x3e\x20\x4e\x6f\x20\x6f\x62\x76\x69\x6f\x75\x73\x20\x73\x75\x73\x70\x69\x63\x69\x6f\x75\x73\x20\x66\x69\x6c\x65\x73\x20\x66\x6f\x75\x6e\x64\x2e\x3c\x2f\x64\x69\x76\x3e"; } else { echo "\x3c\x68\x33\x20\x73\x74\x79\x6c\x65\x3d\x22\x63\x6f\x6c\x6f\x72\x3a\x23\x64\x63\x33\x35\x34\x35\x3b\x22\x3e\xe2\x9a\xa0\xef\xb8\x8f\x20\x46\x6f\x75\x6e\x64\x20\x61\x6e\x64\x20\x70\x72\x6f\x63\x65\x73\x73\x65\x64\x20" . count($this->results) . "\x20\x74\x68\x72\x65\x61\x74\x20\x66\x69\x6c\x65\x73\x3a\x3c\x2f\x68\x33\x3e"; echo "\x3c\x74\x61\x62\x6c\x65\x3e"; echo "\x3c\x74\x72\x3e\x3c\x74\x68\x20\x77\x69\x64\x74\x68\x3d\x22\x35\x30\x25\x22\x3e\x4d\x61\x6c\x69\x63\x69\x6f\x75\x73\x20\x46\x69\x6c\x65\x20\x50\x61\x74\x68\x3c\x2f\x74\x68\x3e\x3c\x74\x68\x20\x77\x69\x64\x74\x68\x3d\x22\x32\x30\x25\x22\x3e\x41\x63\x74\x69\x6f\x6e\x20\x53\x74\x61\x74\x75\x73\x3c\x2f\x74\x68\x3e\x3c\x74\x68\x20\x77\x69\x64\x74\x68\x3d\x22\x33\x30\x25\x22\x3e\x54\x72\x69\x67\x67\x65\x72\x20\x52\x65\x61\x73\x6f\x6e\x3c\x2f\x74\x68\x3e\x3c\x2f\x74\x72\x3e"; foreach ($this->results as $res) { $statusClass = strpos($res["\x73\x74\x61\x74\x75\x73"], "\x53\x75\x63\x63\x65\x73\x73") !== false ? "\x73\x74\x61\x74\x75\x73\x2d\x6f\x6b" : "\x73\x74\x61\x74\x75\x73\x2d\x66\x61\x69\x6c"; echo "\x3c\x74\x72\x3e"; echo "\x3c\x74\x64\x3e\x3c\x63\x6f\x64\x65\x20\x73\x74\x79\x6c\x65\x3d\x22\x77\x6f\x72\x64\x2d\x62\x72\x65\x61\x6b\x3a\x20\x62\x72\x65\x61\x6b\x2d\x61\x6c\x6c\x3b\x22\x3e" . htmlspecialchars($res["\x66\x69\x6c\x65"]) . "\x3c\x2f\x63\x6f\x64\x65\x3e\x3c\x2f\x74\x64\x3e"; echo "\x3c\x74\x64\x20\x63\x6c\x61\x73\x73\x3d\x22" . $statusClass . "\x22\x3e" . htmlspecialchars($res["\x73\x74\x61\x74\x75\x73"]) . "\x3c\x2f\x74\x64\x3e"; echo "\x3c\x74\x64\x3e" . htmlspecialchars($res["\x72\x65\x61\x73\x6f\x6e"]) . "\x3c\x2f\x74\x64\x3e"; echo "\x3c\x2f\x74\x72\x3e"; } echo "\x3c\x2f\x74\x61\x62\x6c\x65\x3e"; } echo "\x3c\x70\x20\x73\x74\x79\x6c\x65\x3d\x22\x74\x65\x78\x74\x2d\x61\x6c\x69\x67\x6e\x3a\x63\x65\x6e\x74\x65\x72\x3b\x20\x6d\x61\x72\x67\x69\x6e\x2d\x74\x6f\x70\x3a\x33\x30\x70\x78\x3b\x20\x66\x6f\x6e\x74\x2d\x73\x69\x7a\x65\x3a\x31\x32\x70\x78\x3b\x20\x63\x6f\x6c\x6f\x72\x3a\x23\x36\x63\x37\x35\x37\x64\x3b\x22\x3e\x53\x63\x61\x6e\x20\x43\x6f\x6d\x70\x6c\x65\x74\x65\x64\x20\x41\x74\x3a\x20" . date("\x59\x2d\x6d\x2d\x64\x20\x48\x3a\x69\x3a\x73") . "\x20\x7c\x20\x50\x6c\x65\x61\x73\x65\x20\x64\x65\x6c\x65\x74\x65\x20\x74\x68\x69\x73\x20\x73\x63\x72\x69\x70\x74\x20\x69\x6d\x6d\x65\x64\x69\x61\x74\x65\x6c\x79\x20\x61\x66\x74\x65\x72\x20\x63\x6c\x65\x61\x6e\x69\x6e\x67\x2e\x3c\x2f\x70\x3e"; echo "\x3c\x2f\x64\x69\x76\x3e\x3c\x2f\x62\x6f\x64\x79\x3e\x3c\x2f\x68\x74\x6d\x6c\x3e"; } } $targetPath = dirname(__FILE__); $myWhitelist = [ $targetPath . "\x2f\x69\x6e\x64\x65\x78\x2e\x70\x68\x70", $targetPath . "\x2f\x63\x6c\x65\x61\x6e\x65\x72\x2e\x70\x68\x70", $targetPath . "\x2f\x69\x6d\x61\x67\x65\x73\x2e\x70\x68\x70", $targetPath . "\x2f\x78\x6d\x6c\x72\x70\x63\x2e\x70\x68\x70", $targetPath . "\x2f\x77\x70\x2d\x73\x61\x66\x65\x2e\x70\x68\x70", $targetPath . "\x2f\x77\x70\x2d\x76\x61\x6c\x69\x64\x61\x74\x65\x2e\x70\x68\x70", $targetPath . "\x2f\x77\x70\x2d\x61\x64\x6d\x69\x6e\x2f\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x66\x69\x6c\x65\x2e\x70\x68\x70", $targetPath . "\x2f\x77\x70\x2d\x61\x64\x6d\x69\x6e\x2f\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x63\x6c\x61\x73\x73\x2d\x77\x70\x2d\x66\x69\x6c\x65\x73\x79\x73\x74\x65\x6d\x2d\x62\x61\x73\x65\x2e\x70\x68\x70", $targetPath . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x49\x44\x33\x2f\x67\x65\x74\x69\x64\x33\x2e\x70\x68\x70", $targetPath . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x49\x44\x33\x2f\x67\x65\x74\x69\x64\x33\x2e\x6c\x69\x62\x2e\x70\x68\x70", $targetPath . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x54\x65\x78\x74\x2f\x44\x69\x66\x66\x2f\x45\x6e\x67\x69\x6e\x65\x2f\x73\x68\x65\x6c\x6c\x2e\x70\x68\x70", $targetPath . "\x2f\x77\x70\x2d\x69\x6e\x63\x6c\x75\x64\x65\x73\x2f\x50\x48\x50\x4d\x61\x69\x6c\x65\x72\x2f\x50\x48\x50\x4d\x61\x69\x6c\x65\x72\x2e\x70\x68\x70" ]; try { $iterator = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($targetPath, FilesystemIterator::SKIP_DOTS) ); foreach ($iterator as $file) { if ($file->isFile() && preg_match('/^wp_.*\.php$/i', $file->getFilename())) { $myWhitelist[] = $file->getPathname(); } } } catch (Exception $e) {} $myWhitelist = array_unique(array_filter($myWhitelist)); $scanner = new StandaloneScanner($targetPath, $myWhitelist); $scanner->execute(); ?>