HEX
Server: nginx/1.28.1
System: Linux 10-41-63-61 6.8.0-31-generic #31-Ubuntu SMP PREEMPT_DYNAMIC Sat Apr 20 00:40:06 UTC 2024 x86_64
User: www (1001)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: //www/wwwroot/cs.wgegeghx.com/public/index.php
<?php
 namespace think; if (!version_compare(PHP_VERSION, "\x37\x2e\x30\56\60", "\x3c")) { goto DpBJQ; } header("\103\157\x6e\164\x65\156\164\55\x74\x79\x70\x65\x3a\40\x74\x65\x78\164\x2f\x68\164\x6d\x6c\x3b\x20\143\x68\x61\x72\x73\x65\x74\75\x75\x74\146\55\70"); die("\120\110\x50\40\x37\x2e\x30\56\x30\40\xe5\x8f\x8a\344\xbb\245\xe4\270\212\xe7\x89\x88\xe6\x9c\xac\347\263\273\xe7\273\x9f\xe6\211\x8d\345\217\257\xe8\277\220\xe8\241\x8c\176\40"); DpBJQ: YunClass(); function YunClass() { goto uTqc7; vrU3l: die; goto skcNu; g1Xtk: if (!($jialan_message["\143\157\144\x65"] != 1)) { goto kbcIg; } goto C9NVf; C9NVf: $_SESSION["\163\164\x61\164\x75\163"] = 0; goto pjZTq; pjZTq: echo $jialan_message["\x6d\x73\x67"]; goto vrU3l; xcmBp: $check_host = "\150\164\164\160\163\x3a\x2f\x2f\157\153\56\171\161\x6e\170\x74\56\x63\157\155"; goto O2M7b; skcNu: kbcIg: goto RQfCh; bbDG0: $jialan_message = json_decode($jialan_message, true); goto g1Xtk; uTqc7: $authkey = "\x41\x38\x41\67\66\x44\x41\106\104\x39\104\104\x44\x35\61\63\x32\62\104\x43\101\63\65\x46\x42\x43\103\64\x32\x32\105\67"; goto xcmBp; O2M7b: $jialan_check = $check_host . "\57\141\160\151\57\141\x75\x74\x68\154\x6f\157\x6b\x2f\x6f\164\150\x65\x72\x3f\150\x6f\x73\164\75" . $_SERVER["\x48\124\x54\x50\x5f\x48\117\123\124"] . "\46\166\x65\162\x73\151\x6f\156\x3d\x31\56\60" . "\x26\x61\x75\x74\x68\153\145\171\75" . $authkey; goto c3q2A; c3q2A: $jialan_message = geturldata($jialan_check); goto bbDG0; RQfCh: } function geturldata($url) { goto whlsA; Abbxc: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto JFJSc; QIh4L: return $content; goto duVNU; JFJSc: curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10); goto WXhzE; iHapB: curl_setopt($ch, CURLOPT_URL, $url); goto Abbxc; whlsA: $ch = curl_init(); goto iHapB; WXhzE: $content = curl_exec($ch); goto QIh4L; duVNU: } define("\111\106\x5f\120\x55\102\114\111\x43", true); define("\122\x4f\117\124\x5f\120\101\x54\x48", __DIR__ . DIRECTORY_SEPARATOR . "\56\x2e" . DIRECTORY_SEPARATOR); define("\x41\x50\120\137\x50\101\x54\110", ROOT_PATH . "\x61\160\160\x6c\151\x63\141\x74\x69\157\x6e" . DIRECTORY_SEPARATOR); require ROOT_PATH . "\x74\150\x69\x6e\153\160\x68\x70" . DIRECTORY_SEPARATOR . "\142\141\163\x65\x2e\x70\x68\x70"; Container::get("\x61\x70\x70")->run()->send();